1 /* 2 * CDDL HEADER START 3 * 4 * The contents of this file are subject to the terms of the 5 * Common Development and Distribution License, Version 1.0 only 6 * (the "License"). You may not use this file except in compliance 7 * with the License. 8 * 9 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 10 * or http://www.opensolaris.org/os/licensing. 11 * See the License for the specific language governing permissions 12 * and limitations under the License. 13 * 14 * When distributing Covered Code, include this CDDL HEADER in each 15 * file and include the License file at usr/src/OPENSOLARIS.LICENSE. 16 * If applicable, add the following below this CDDL HEADER, with the 17 * fields enclosed by brackets "[]" replaced with your own identifying 18 * information: Portions Copyright [yyyy] [name of copyright owner] 19 * 20 * CDDL HEADER END 21 */ 22 /* 23 * Copyright 1992 Sun Microsystems, Inc. All rights reserved. 24 * Use is subject to license terms. 25 */ 26 27 #pragma ident "%Z%%M% %I% %E% SMI" /* c2 secure */ 28 29 #include <stdio.h> 30 #include <pwd.h> 31 #include <shadow.h> 32 #include <errno.h> 33 34 /* 35 * Version to go in the BCP compatibility library in SVr4 version of 36 * SunOS. This does not bother talking to rpc.pwdauthd or looking for the 37 * password.adjunct file on the system since they do not exist anymore. 38 * They have been effectively replaced by a more robust aging security provided 39 * by the combination of /etc/shadow file, shadow support in the NIS+ 40 * passwd table and the use of secure RPC in NIS+. 41 */ 42 43 pwdauth(name, password) 44 char *name; 45 char *password; 46 { 47 /* 48 * this routine authenticates a password for the named user. 49 * Assumes the adjunct file does not exist. 50 * and therefore checks the passwd "source" using the standard 51 * getpwnam(3C) routine that uses /etc/nsswitch.conf(4). 52 */ 53 54 struct passwd *pwp = NULL; 55 struct spwd *spwp = NULL; 56 char *enpwp; 57 58 if (spwp = getspnam(name)) 59 enpwp = spwp->sp_pwdp; 60 else if (pwp = getpwnam(name)) 61 enpwp = pwp->pw_passwd; 62 else 63 /* user is not in main password system */ 64 return (-1); 65 if (enpwp[0] == '#' && enpwp[1] == '#') { 66 /* this means that /etc/passwd has problems */ 67 fprintf(stderr, "pwdauth: bad passwd entry for %s\n", 68 name); 69 return (-1); 70 } 71 if (strcmp(crypt(password, enpwp), enpwp) == 0) 72 return (0); 73 else 74 return (-1); 75 } 76