1 /* 2 * Copyright (c) 1997 - 1999 Kungliga Tekniska H�gskolan 3 * (Royal Institute of Technology, Stockholm, Sweden). 4 * All rights reserved. 5 * 6 * Redistribution and use in source and binary forms, with or without 7 * modification, are permitted provided that the following conditions 8 * are met: 9 * 10 * 1. Redistributions of source code must retain the above copyright 11 * notice, this list of conditions and the following disclaimer. 12 * 13 * 2. Redistributions in binary form must reproduce the above copyright 14 * notice, this list of conditions and the following disclaimer in the 15 * documentation and/or other materials provided with the distribution. 16 * 17 * 3. Neither the name of the Institute nor the names of its contributors 18 * may be used to endorse or promote products derived from this software 19 * without specific prior written permission. 20 * 21 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND 22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 24 * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE 25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 31 * SUCH DAMAGE. 32 */ 33 34 #include "krb5_locl.h" 35 36 RCSID("$Id: kuserok.c,v 1.7 2003/03/13 19:53:43 lha Exp $"); 37 38 /* 39 * Return TRUE iff `principal' is allowed to login as `luser'. 40 */ 41 42 krb5_boolean 43 krb5_kuserok (krb5_context context, 44 krb5_principal principal, 45 const char *luser) 46 { 47 char buf[BUFSIZ]; 48 struct passwd *pwd; 49 FILE *f; 50 krb5_realm *realms, *r; 51 krb5_error_code ret; 52 krb5_boolean b; 53 54 pwd = getpwnam (luser); /* XXX - Should use k_getpwnam? */ 55 if (pwd == NULL) 56 return FALSE; 57 58 ret = krb5_get_default_realms (context, &realms); 59 if (ret) 60 return FALSE; 61 62 for (r = realms; *r != NULL; ++r) { 63 krb5_principal local_principal; 64 65 ret = krb5_build_principal (context, 66 &local_principal, 67 strlen(*r), 68 *r, 69 luser, 70 NULL); 71 if (ret) { 72 krb5_free_host_realm (context, realms); 73 return FALSE; 74 } 75 76 b = krb5_principal_compare (context, principal, local_principal); 77 krb5_free_principal (context, local_principal); 78 if (b) { 79 krb5_free_host_realm (context, realms); 80 return TRUE; 81 } 82 } 83 krb5_free_host_realm (context, realms); 84 85 snprintf (buf, sizeof(buf), "%s/.k5login", pwd->pw_dir); 86 f = fopen (buf, "r"); 87 if (f == NULL) 88 return FALSE; 89 while (fgets (buf, sizeof(buf), f) != NULL) { 90 krb5_principal tmp; 91 92 buf[strcspn(buf, "\n")] = '\0'; 93 ret = krb5_parse_name (context, buf, &tmp); 94 if (ret) { 95 fclose (f); 96 return FALSE; 97 } 98 b = krb5_principal_compare (context, principal, tmp); 99 krb5_free_principal (context, tmp); 100 if (b) { 101 fclose (f); 102 return TRUE; 103 } 104 } 105 fclose (f); 106 return FALSE; 107 } 108