Changeset 510 in openpam

Timestamp:

Dec 31, 2011, 1:14:23 PM (9 years ago)

Author:

Dag-Erling Smørgrav

Message:

Use a different default prompt if PAM_RHOST != PAM_HOST.

File:

• trunk/lib/pam_get_authtok.c (modified) (3 diffs)

trunk/lib/pam_get_authtok.c

@@ -51 +51 @@
 
 static const char authtok_prompt[] = "Password:";
+static const char authtok_prompt_remote[] = "Password for %u@%h:";
 static const char oldauthtok_prompt[] = "Old Password:";
 static const char newauthtok_prompt[] = "New Password:";
@@ -70 +71 @@
         const void *oldauthtok, *prevauthtok, *promptp;
         const char *prompt_option, *default_prompt;
+        const void *lhost, *rhost;
         char *resp, *resp2;
         int pitem, r, style, twice;
@@ -83 +85 @@
                 prompt_option = "authtok_prompt";
                 default_prompt = authtok_prompt;
+                r = pam_get_item(pamh, PAM_RHOST, &rhost);
+                if (r == PAM_SUCCESS && rhost != NULL) {
+                        r = pam_get_item(pamh, PAM_HOST, &lhost);
+                        if (r == PAM_SUCCESS && lhost != NULL) {
+                                if (strcmp(rhost, lhost) != 0)
+                                        default_prompt = authtok_prompt_remote;
+                        }
+                }
                 r = pam_get_item(pamh, PAM_OLDAUTHTOK, &oldauthtok);
                 if (r == PAM_SUCCESS && oldauthtok != NULL) {