/* * Program: Operating-system dependent routines -- Solaris version * * Author: Mark Crispin * Networks and Distributed Computing * Computing & Communications * University of Washington * Administration Building, AG-44 * Seattle, WA 98195 * Internet: MRC@CAC.Washington.EDU * * Date: 10 April 1992 * Last Edited: 30 December 1997 * * Copyright 1997 by the University of Washington * * Permission to use, copy, modify, and distribute this software and its * documentation for any purpose and without fee is hereby granted, provided * that the above copyright notice appears in all copies and that both the * above copyright notice and this permission notice appear in supporting * documentation, and that the name of the University of Washington not be * used in advertising or publicity pertaining to distribution of the software * without specific, written prior permission. This software is made * available "as is", and * THE UNIVERSITY OF WASHINGTON DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, * WITH REGARD TO THIS SOFTWARE, INCLUDING WITHOUT LIMITATION ALL IMPLIED * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE, AND IN * NO EVENT SHALL THE UNIVERSITY OF WASHINGTON BE LIABLE FOR ANY SPECIAL, * INDIRECT OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM * LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, TORT * (INCLUDING NEGLIGENCE) OR STRICT LIABILITY, ARISING OUT OF OR IN CONNECTION * WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. * */ #include "tcp_unix.h" /* must be before osdep includes tcp.h */ #include "mail.h" #include "osdep.h" #include #include #include #include #include #include #include #include #include #include #include #include #include #include "misc.h" extern int sys_nerr; extern char *sys_errlist[]; #define DIR_SIZE(d) d->d_reclen #define toint(c) ((c)-'0') #define isodigit(c) (((unsigned)(c)>=060)&((unsigned)(c)<=067)) #include "fs_unix.c" #include "ftl_unix.c" #include "nl_unix.c" #include "env_unix.c" #define fork vfork #include "tcp_unix.c" #include "gr_waitp.c" #undef flock #include "flock.c" #include "scandir.c" #include "tz_sv4.c" #include "gethstid.c" #undef setpgrp #include "setpgrp.c" #include "utime.c" /* * Program: POSIX check password * * Author: Mark Crispin * Networks and Distributed Computing * Computing & Communications * University of Washington * Administration Building, AG-44 * Seattle, WA 98195 * Internet: MRC@CAC.Washington.EDU * * Date: 1 August 1988 * Last Edited: 7 April 1999 * * Copyright 1999 by the University of Washington * * Permission to use, copy, modify, and distribute this software and its * documentation for any purpose and without fee is hereby granted, provided * that the above copyright notice appears in all copies and that both the * above copyright notice and this permission notice appear in supporting * documentation, and that the name of the University of Washington not be * used in advertising or publicity pertaining to distribution of the software * without specific, written prior permission. This software is made available * "as is", and * THE UNIVERSITY OF WASHINGTON DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, * WITH REGARD TO THIS SOFTWARE, INCLUDING WITHOUT LIMITATION ALL IMPLIED * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE, AND IN * NO EVENT SHALL THE UNIVERSITY OF WASHINGTON BE LIABLE FOR ANY SPECIAL, * INDIRECT OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM * LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, TORT * (INCLUDING NEGLIGENCE) OR STRICT LIABILITY, ARISING OUT OF OR IN CONNECTION * WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. * */ /* Check password * Accepts: login passwd struct * password string * argument count * argument vector * Returns: passwd struct if password validated, NIL otherwise */ struct passwd *checkpw (struct passwd *pw,char *pass,int argc,char *argv[]) { char tmp[MAILTMPLEN]; struct spwd *sp = NIL; time_t left; time_t now = time (0); struct tm *t = gmtime (&now); int zone = t->tm_hour * 60 + t->tm_min; int julian = t->tm_yday; t = localtime (&now); /* get local time now */ /* minus UTC minutes since midnight */ zone = t->tm_hour * 60 + t->tm_min - zone; /* julian can be one of: * 36x local time is December 31, UTC is January 1, offset -24 hours * 1 local time is 1 day ahead of UTC, offset +24 hours * 0 local time is same day as UTC, no offset * -1 local time is 1 day behind UTC, offset -24 hours * -36x local time is January 1, UTC is December 31, offset +24 hours */ if (julian = t->tm_yday -julian) zone += ((julian < 0) == (abs (julian) == 1)) ? -24*60 : 24*60; /* days since 1/1/1970 local time */ now = ((now /60) + zone) / (60*24); /* non-shadow authentication */ if (!pw->pw_passwd || !pw->pw_passwd[0] || strcmp (pw->pw_passwd,(char *) crypt (pass,pw->pw_passwd))) { /* As far as I've been able to determine, here is how the expiration * fields in the shadow authentication data work: * lstchg last password change date if non-negative. If zero, the * user can not log in without changing password. * max number of days a password is valid if positive * warn number of days of password expiration warning * expire date account expires if positive * The expiration day is the *last* day that the password or account * is valid. */ /* shadow authentication */ if ((sp = getspnam (pw->pw_name)) && sp->sp_lstchg && ((sp->sp_lstchg < 0) || (sp->sp_max <= 0) || ((sp->sp_lstchg + sp->sp_max) >= now)) && ((sp->sp_expire <= 0) || (sp->sp_expire >= now)) && !strcmp (sp->sp_pwdp,(char *) crypt (pass,sp->sp_pwdp))) { if ((sp->sp_lstchg > 0) && (sp->sp_max > 0) && ((left = (sp->sp_lstchg + sp->sp_max) - now) <= sp->sp_warn)) { if (left) { sprintf (tmp,"[ALERT] Password expires in %ld day(s)",(long) left); mm_notify (NIL,tmp,NIL); } else mm_notify (NIL,"[ALERT] Password expires today!",WARN); } if ((sp->sp_expire > 0) && ((left = sp->sp_expire - now) < 28)) { if (left) { sprintf (tmp,"[ALERT] Account expires in %ld day(s)",(long) left); mm_notify (NIL,tmp,NIL); } else mm_notify (NIL,"[ALERT] Account expires today!",WARN); } endspent (); /* don't need shadow password data any more */ } else pw = NIL; /* password failed */ } return pw; } /* * Program: Standard login * * Author: Mark Crispin * Networks and Distributed Computing * Computing & Communications * University of Washington * Administration Building, AG-44 * Seattle, WA 98195 * Internet: MRC@CAC.Washington.EDU * * Date: 1 August 1988 * Last Edited: 5 March 1999 * * Copyright 1999 by the University of Washington * * Permission to use, copy, modify, and distribute this software and its * documentation for any purpose and without fee is hereby granted, provided * that the above copyright notice appears in all copies and that both the * above copyright notice and this permission notice appear in supporting * documentation, and that the name of the University of Washington not be * used in advertising or publicity pertaining to distribution of the software * without specific, written prior permission. This software is made available * "as is", and * THE UNIVERSITY OF WASHINGTON DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, * WITH REGARD TO THIS SOFTWARE, INCLUDING WITHOUT LIMITATION ALL IMPLIED * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE, AND IN * NO EVENT SHALL THE UNIVERSITY OF WASHINGTON BE LIABLE FOR ANY SPECIAL, * INDIRECT OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM * LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, TORT * (INCLUDING NEGLIGENCE) OR STRICT LIABILITY, ARISING OUT OF OR IN CONNECTION * WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. * */ /* Log in * Accepts: login passwd struct * argument count * argument vector * Returns: T if success, NIL otherwise */ long loginpw (struct passwd *pw,int argc,char *argv[]) { uid_t uid = pw->pw_uid; char *name = cpystr (pw->pw_name); long ret = !(setgid (pw->pw_gid) || initgroups (name,pw->pw_gid) || setuid (uid)); fs_give ((void **) &name); return ret; }