1 | /*- |
---|
2 | * Copyright (c) 2001 Networks Associates Technologies, Inc. |
---|
3 | * All rights reserved. |
---|
4 | * |
---|
5 | * This software was developed for the FreeBSD Project by ThinkSec AS and |
---|
6 | * NAI Labs, the Security Research Division of Network Associates, Inc. |
---|
7 | * under DARPA/SPAWAR contract N66001-01-C-8035 ("CBOSS"), as part of the |
---|
8 | * DARPA CHATS research program. |
---|
9 | * |
---|
10 | * Redistribution and use in source and binary forms, with or without |
---|
11 | * modification, are permitted provided that the following conditions |
---|
12 | * are met: |
---|
13 | * 1. Redistributions of source code must retain the above copyright |
---|
14 | * notice, this list of conditions and the following disclaimer. |
---|
15 | * 2. Redistributions in binary form must reproduce the above copyright |
---|
16 | * notice, this list of conditions and the following disclaimer in the |
---|
17 | * documentation and/or other materials provided with the distribution. |
---|
18 | * 3. The name of the author may not be used to endorse or promote |
---|
19 | * products derived from this software without specific prior written |
---|
20 | * permission. |
---|
21 | * |
---|
22 | * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND |
---|
23 | * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE |
---|
24 | * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE |
---|
25 | * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE |
---|
26 | * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL |
---|
27 | * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS |
---|
28 | * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) |
---|
29 | * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT |
---|
30 | * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY |
---|
31 | * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF |
---|
32 | * SUCH DAMAGE. |
---|
33 | * |
---|
34 | * $P4: //depot/projects/openpam/lib/openpam_impl.h#10 $ |
---|
35 | */ |
---|
36 | |
---|
37 | #ifndef _OPENPAM_IMPL_H_INCLUDED |
---|
38 | #define _OPENPAM_IMPL_H_INCLUDED |
---|
39 | |
---|
40 | #include <security/openpam.h> |
---|
41 | |
---|
42 | extern const char *_pam_sm_func_name[PAM_NUM_PRIMITIVES]; |
---|
43 | |
---|
44 | /* |
---|
45 | * Control flags |
---|
46 | */ |
---|
47 | #define PAM_REQUIRED 1 |
---|
48 | #define PAM_REQUISITE 2 |
---|
49 | #define PAM_SUFFICIENT 3 |
---|
50 | #define PAM_OPTIONAL 4 |
---|
51 | #define PAM_NUM_CONTROLFLAGS 5 |
---|
52 | |
---|
53 | /* |
---|
54 | * Chains |
---|
55 | */ |
---|
56 | #define PAM_AUTH 0 |
---|
57 | #define PAM_ACCOUNT 1 |
---|
58 | #define PAM_SESSION 2 |
---|
59 | #define PAM_PASSWORD 3 |
---|
60 | #define PAM_NUM_CHAINS 4 |
---|
61 | |
---|
62 | typedef struct pam_chain pam_chain_t; |
---|
63 | struct pam_chain { |
---|
64 | pam_module_t *module; |
---|
65 | int flag; |
---|
66 | int optc; |
---|
67 | char **optv; |
---|
68 | pam_chain_t *next; |
---|
69 | }; |
---|
70 | |
---|
71 | typedef struct pam_data pam_data_t; |
---|
72 | struct pam_data { |
---|
73 | char *name; |
---|
74 | void *data; |
---|
75 | void (*cleanup)(pam_handle_t *, void *, int); |
---|
76 | pam_data_t *next; |
---|
77 | }; |
---|
78 | |
---|
79 | struct pam_handle { |
---|
80 | char *service; |
---|
81 | |
---|
82 | /* chains */ |
---|
83 | pam_chain_t *chains[PAM_NUM_CHAINS]; |
---|
84 | pam_chain_t *current; |
---|
85 | |
---|
86 | /* items and data */ |
---|
87 | void *item[PAM_NUM_ITEMS]; |
---|
88 | pam_data_t *module_data; |
---|
89 | |
---|
90 | /* environment list */ |
---|
91 | char **env; |
---|
92 | int env_count; |
---|
93 | int env_size; |
---|
94 | }; |
---|
95 | |
---|
96 | #define PAM_OTHER "other" |
---|
97 | |
---|
98 | int openpam_dispatch(pam_handle_t *, int, int); |
---|
99 | int openpam_findenv(pam_handle_t *, const char *, size_t); |
---|
100 | int openpam_add_module(pam_handle_t *, int, int, |
---|
101 | const char *, int, const char **); |
---|
102 | void openpam_clear_chains(pam_handle_t *); |
---|
103 | |
---|
104 | #ifdef OPENPAM_STATIC_MODULES |
---|
105 | pam_module_t *openpam_static(const char *); |
---|
106 | #endif |
---|
107 | pam_module_t *openpam_dynamic(const char *); |
---|
108 | |
---|
109 | #endif |
---|