[Dovecot] Tru64 Unix and SIA

[Simon L Jackson]

Timo Sirainen wrote:
> On Wed, 2006-09-20 at 14:46 +1000, Simon L Jackson wrote:
>   
>> I have recently written a (minimal) Tru64 Unix SIA password module for
>> Dovecot as part of testing a Dovecot installation.
>>
>> Has anyone else written a Tru64 Unix SIA module?
>>
>> Is anyone else interested in such a module?
>>
>> If so, how might I/we go about getting this/such a module into the
>> main Dovecot source?
>>     
>
> First show me the code, then I'll see how it looks like :) If it's small
> you might as well post the patch here to the list, for larger either
> mail me or give some URL.
>   
I'll try just posting it.

There are some diffs and finally that new source.

---------------------------------------------------------------------------------
b02> diff /usr/src/dovecot-1.0.rc7/configure.in.orig 
/usr/src/dovecot-1.0.rc7/configure.in
101a102,110
 > AC_ARG_WITH(sia,
 > [  --with-sia              Build with SIA support (default)],
 >       if test x$withval = xno; then
 >               want_sia=no
 >       else
 >               want_sia=yes
 >       fi,
 >       want_sia=yes)
 >
1352a1362,1372
 >       ])
 > fi
 >
 > if test $want_sia = yes; then
 >       AC_CHECK_FUNC(sia_validate_user, [
 >               AC_CHECK_HEADERS(sia.h siad.h sys/security.h)
 >               need_crypt=yes
 >               AC_DEFINE(PASSDB_SIA,, Build with SIA support)
 >               passdb="$passdb sia"
 >               AC_CHECK_LIB(security, sia_validate_user)
 >               LIBS="$LIBS -depth_ring_search"
b02> diff /usr/src/dovecot-1.0.rc7/config.h.in.orig 
/usr/src/dovecot-1.0.rc7/config.h.in
407a408,410
 > /* Build with sia support */
 > #undef PASSDB_SIA
 >
b02> diff /usr/src/dovecot-1.0.rc7/src/lib/mountpoint.c.orig 
/usr/src/dovecot-1.0.rc7/src/lib/mountpoint.c
53c53
<       point_r->type = p_strdup(pool, buf.f_fstypename);
---
 >       point_r->type = p_strdup(pool, getvfsbynumber(buf.f_type));
b02> diff /usr/src/dovecot-1.0.rc7/src/auth/Makefile.in.orig 
/usr/src/dovecot-1.0.rc7/src/auth/Makefile.in
84,85c84,88
<       passdb-checkpassword.$(OBJEXT) passdb-shadow.$(OBJEXT) \
<       passdb-vpopmail.$(OBJEXT) passdb-sql.$(OBJEXT) \
---
 >       passdb-checkpassword.$(OBJEXT) \
 >       passdb-shadow.$(OBJEXT) \
 >       passdb-sia.$(OBJEXT) \
 >       passdb-vpopmail.$(OBJEXT) \
 >       passdb-sql.$(OBJEXT) \
312a316
 >       passdb-sia.c \
475a480
 > @AMDEP_TRUE@@am__include@ @am__quote at ./$(DEPDIR)/passdb-sia.Po at am__quote@
b02> diff /usr/src/dovecot-1.0.rc7/src/auth/passdb.c.orig 
/usr/src/dovecot-1.0.rc7/src/auth/passdb.c
13a14
 > extern struct passdb_module_interface passdb_sia;
38a40,42
 > #endif
 > #ifdef PASSDB_SIA
 >       &passdb_sia,
b02> cat /usr/src/dovecot-1.0.rc7/src/auth/passdb-sia.c
/* Copyright (C) 2006 Simon L Jackson */

#include "common.h"

#ifdef PASSDB_SIA

#include "safe-memset.h"
#include "passdb.h"
#include "mycrypt.h"

#include <pwd.h>
#include <sia.h>
#include <siad.h>
#include <sys/security.h>

/* #define SIA_CACHE_KEY "%u" */
#define SIA_PASS_SCHEME "CRYPT"

static int checkpw_collect (
  int timeout,
  int rendition,
  uchar_t *title,
  int nprompts,
  prompt_t *prompts )
{
  switch (rendition) {
    case SIAONELINER:
    case SIAINFO:
    case SIAWARNING:
      return SIACOLSUCCESS;
  }
  return SIACOLABORT;           /* another else is bogus */
}


static void
local_sia_verify_plain(struct auth_request *request, const char *password,
                    verify_plain_callback_t *callback)
{
        struct passwd *pw;
        bool result;

        pw = getpwnam(request->user);
        if (pw == NULL) {
                auth_request_log_info(request, "sia", "unknown user");
                callback(PASSDB_RESULT_USER_UNKNOWN, request);
                return;
        }

        /* check if the password is valid */
        if (password != NULL) {
                char *argutility = "dovecot";
                result = ( sia_validate_user 
(checkpw_collect,1,&argutility,NULL,
                        (char *) request->user,NULL,NULL,NULL,(char *) 
password) == SIASUCCESS );
        }

        if (!result) {
                auth_request_log_info(request, "sia", "password mismatch");
                callback(PASSDB_RESULT_PASSWORD_MISMATCH, request);
                return;
        }

        /* make sure we're using the username exactly as it's in the 
database */
        auth_request_set_field(request, "user", pw->pw_name, NULL);

        callback(PASSDB_RESULT_OK, request);
}

static void local_sia_init(struct passdb_module *module,
                        const char *args __attr_unused__)
{
/*      module->cache_key = SIA_CACHE_KEY; */
        module->default_pass_scheme = SIA_PASS_SCHEME;
}

static void local_sia_deinit(struct passdb_module *module __attr_unused__)
{
}

struct passdb_module_interface passdb_sia = {
        "sia",

        NULL,
        local_sia_init,
        local_sia_deinit,

        local_sia_verify_plain,
        NULL
};

#endif

-----------------------------------------------------------------------------------------

Cheers

-- 
Simon L Jackson
Carringbush.Net

+-
Carringbush.Net
Hosting * Development * Advice

Web: www.carringbush.net <http://www.carringbush.net/>
Email: simon.jackson at carringbush.net <mailto:simon.jackson at carringbush.net>

Office: +61 3 9411 4400
Support: +61 3 9411 4444
Fax: +61 3 9411 4499

Level 1
15 Bedford Street
Collingwood VIC 3066
Australia

P.O. Box 1464
Collingwood VIC 3066
Australia
+-
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://dovecot.org/pipermail/dovecot/attachments/20060927/b958edb5/attachment-0001.html