17c478bd9Sstevel@tonic-gate /* 27c478bd9Sstevel@tonic-gate * CDDL HEADER START 37c478bd9Sstevel@tonic-gate * 47c478bd9Sstevel@tonic-gate * The contents of this file are subject to the terms of the 57c478bd9Sstevel@tonic-gate * Common Development and Distribution License, Version 1.0 only 67c478bd9Sstevel@tonic-gate * (the "License"). You may not use this file except in compliance 77c478bd9Sstevel@tonic-gate * with the License. 87c478bd9Sstevel@tonic-gate * 97c478bd9Sstevel@tonic-gate * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 107c478bd9Sstevel@tonic-gate * or http://www.opensolaris.org/os/licensing. 117c478bd9Sstevel@tonic-gate * See the License for the specific language governing permissions 127c478bd9Sstevel@tonic-gate * and limitations under the License. 137c478bd9Sstevel@tonic-gate * 147c478bd9Sstevel@tonic-gate * When distributing Covered Code, include this CDDL HEADER in each 157c478bd9Sstevel@tonic-gate * file and include the License file at usr/src/OPENSOLARIS.LICENSE. 167c478bd9Sstevel@tonic-gate * If applicable, add the following below this CDDL HEADER, with the 177c478bd9Sstevel@tonic-gate * fields enclosed by brackets "[]" replaced with your own identifying 187c478bd9Sstevel@tonic-gate * information: Portions Copyright [yyyy] [name of copyright owner] 197c478bd9Sstevel@tonic-gate * 207c478bd9Sstevel@tonic-gate * CDDL HEADER END 217c478bd9Sstevel@tonic-gate */ 227c478bd9Sstevel@tonic-gate /* 237c478bd9Sstevel@tonic-gate * Copyright 1992 Sun Microsystems, Inc. All rights reserved. 247c478bd9Sstevel@tonic-gate * Use is subject to license terms. 257c478bd9Sstevel@tonic-gate */ 267c478bd9Sstevel@tonic-gate 27*5d54f3d8Smuffin #pragma ident "%Z%%M% %I% %E% SMI" 287c478bd9Sstevel@tonic-gate 297c478bd9Sstevel@tonic-gate #include <stdio.h> 307c478bd9Sstevel@tonic-gate #include <signal.h> 317c478bd9Sstevel@tonic-gate #include <grp.h> 327c478bd9Sstevel@tonic-gate #include <sys/time.h> 337c478bd9Sstevel@tonic-gate #include <errno.h> 347c478bd9Sstevel@tonic-gate 357c478bd9Sstevel@tonic-gate /* 367c478bd9Sstevel@tonic-gate * Version to go in the BCP compatibility library in SVr4 version of 377c478bd9Sstevel@tonic-gate * SunOS. This does not bother talking to rpc.pwdauthd or looking for the 387c478bd9Sstevel@tonic-gate * password.adjunct file on the system since they do not exist anymore. 397c478bd9Sstevel@tonic-gate * They have been effectively replaced by a more robust aging security provided 407c478bd9Sstevel@tonic-gate * by the combination of /etc/shadow file, shadow support in the NIS+ 417c478bd9Sstevel@tonic-gate * passwd table and the use of secure RPC in NIS+. 427c478bd9Sstevel@tonic-gate */ 437c478bd9Sstevel@tonic-gate 44*5d54f3d8Smuffin int 45*5d54f3d8Smuffin grpauth(char *name, char *password) 467c478bd9Sstevel@tonic-gate { 477c478bd9Sstevel@tonic-gate 487c478bd9Sstevel@tonic-gate /* 497c478bd9Sstevel@tonic-gate * this routine authenticates a password for the named user. 507c478bd9Sstevel@tonic-gate * Assumes the adjunct file does not exist. 517c478bd9Sstevel@tonic-gate * and therefore checks the group "source" using the standard 527c478bd9Sstevel@tonic-gate * getgrnam(3C) routine that uses /etc/nsswitch.conf(4). 537c478bd9Sstevel@tonic-gate */ 547c478bd9Sstevel@tonic-gate struct group gr; 557c478bd9Sstevel@tonic-gate struct group *grp; 567c478bd9Sstevel@tonic-gate 577c478bd9Sstevel@tonic-gate if ((grp = getgrnam(name)) == NULL) 587c478bd9Sstevel@tonic-gate /* group is not in main password system */ 597c478bd9Sstevel@tonic-gate return (-1); 607c478bd9Sstevel@tonic-gate gr = *grp; 617c478bd9Sstevel@tonic-gate if (gr.gr_passwd[0] == '#' && gr.gr_passwd[1] == '$') { 627c478bd9Sstevel@tonic-gate /* this means that /etc/group has problems */ 637c478bd9Sstevel@tonic-gate fprintf(stderr, "grpauth: bad group entry for %s\n", 647c478bd9Sstevel@tonic-gate gr.gr_name); 657c478bd9Sstevel@tonic-gate return (-1); 667c478bd9Sstevel@tonic-gate } 677c478bd9Sstevel@tonic-gate if (strcmp(crypt(password, gr.gr_passwd), gr.gr_passwd) == 0) 687c478bd9Sstevel@tonic-gate return (0); 697c478bd9Sstevel@tonic-gate else 707c478bd9Sstevel@tonic-gate return (-1); 717c478bd9Sstevel@tonic-gate } 72