dist/openpam/lib/pam_get_item.c

   1 /*-
   2  * Copyright (c) 2002-2003 Networks Associates Technology, Inc.
   3  * Copyright (c) 2004-2007 Dag-Erling Smørgrav
   4  * All rights reserved.
   5  *
   6  * This software was developed for the FreeBSD Project by ThinkSec AS and
   7  * Network Associates Laboratories, the Security Research Division of
   8  * Network Associates, Inc.  under DARPA/SPAWAR contract N66001-01-C-8035
   9  * ("CBOSS"), as part of the DARPA CHATS research program.
  10  *
  11  * Redistribution and use in source and binary forms, with or without
  12  * modification, are permitted provided that the following conditions
  13  * are met:
  14  * 1. Redistributions of source code must retain the above copyright
  15  *    notice, this list of conditions and the following disclaimer.
  16  * 2. Redistributions in binary form must reproduce the above copyright
  17  *    notice, this list of conditions and the following disclaimer in the
  18  *    documentation and/or other materials provided with the distribution.
  19  * 3. The name of the author may not be used to endorse or promote
  20  *    products derived from this software without specific prior written
  21  *    permission.
  22  *
  23  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
  24  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  25  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  26  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
  27  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  28  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  29  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  30  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  31  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  32  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  33  * SUCH DAMAGE.
  34  *
  35  * $Id: pam_get_item.c,v 1.5 2008/01/27 01:23:00 christos Exp $
  36  */
  37
  38 #include <sys/param.h>
  39
  40 #include <security/pam_appl.h>
  41
  42 #include "openpam_impl.h"
  43
  44 const char *_pam_item_name[PAM_NUM_ITEMS] = {
  45         "(NO ITEM)",
  46         "PAM_SERVICE",
  47         "PAM_USER",
  48         "PAM_TTY",
  49         "PAM_RHOST",
  50         "PAM_CONV",
  51         "PAM_AUTHTOK",
  52         "PAM_OLDAUTHTOK",
  53         "PAM_RUSER",
  54         "PAM_USER_PROMPT",
  55         "PAM_REPOSITORY",
  56         "PAM_AUTHTOK_PROMPT",
  57         "PAM_OLDAUTHTOK_PROMPT",
  58         "PAM_SOCKADDR",
  59         "PAM_NUSER"
  60 };
  61
  62 /*
  63  * XSSO 4.2.1
  64  * XSSO 6 page 46
  65  *
  66  * Get PAM information
  67  */
  68
  69 int
  70 pam_get_item(const pam_handle_t *pamh,
  71         int item_type,
  72         const void **item)
  73 {
  74
  75         ENTERI(item_type);
  76         if (pamh == NULL)
  77                 RETURNC(PAM_SYSTEM_ERR);
  78         switch (item_type) {
  79         case PAM_SERVICE:
  80         case PAM_USER:
  81         case PAM_AUTHTOK:
  82         case PAM_OLDAUTHTOK:
  83         case PAM_TTY:
  84         case PAM_RHOST:
  85         case PAM_RUSER:
  86         case PAM_CONV:
  87         case PAM_USER_PROMPT:
  88         case PAM_AUTHTOK_PROMPT:
  89         case PAM_OLDAUTHTOK_PROMPT:
  90         case PAM_REPOSITORY:
  91         case PAM_SOCKADDR:
  92         case PAM_NUSER:
  93                 *item = pamh->item[item_type];
  94                 RETURNC(PAM_SUCCESS);
  95                 /*NOTREACHED*/
  96         default:
  97                 RETURNC(PAM_SYMBOL_ERR);
  98                 /*NOTREACHED*/
  99         }
 100 }
 101
 102 /*
 103  * Error codes:
 104  *
 105  *      PAM_SYMBOL_ERR
 106  *      PAM_SYSTEM_ERR
 107  */
 108
 109 /**
 110  * The =pam_get_item function stores a pointer to the item specified by
 111  * the =item_type argument in the location specified by the =item
 112  * argument.
 113  * The item is retrieved from the PAM context specified by the =pamh
 114  * argument.
 115  * The following item types are recognized:
 116  *
 117  *      =PAM_SERVICE:
 118  *              The name of the requesting service.
 119  *      =PAM_USER:
 120  *              The name of the user the application is trying to
 121  *              authenticate.
 122  *      =PAM_TTY:
 123  *              The name of the current terminal.
 124  *      =PAM_RHOST:
 125  *              The name of the applicant's host.
 126  *      =PAM_CONV:
 127  *              A =struct pam_conv describing the current conversation
 128  *              function.
 129  *      =PAM_AUTHTOK:
 130  *              The current authentication token.
 131  *      =PAM_OLDAUTHTOK:
 132  *              The expired authentication token.
 133  *      =PAM_RUSER:
 134  *              The name of the applicant.
 135  *      =PAM_USER_PROMPT:
 136  *              The prompt to use when asking the applicant for a user
 137  *              name to authenticate as.
 138  *      =PAM_AUTHTOK_PROMPT:
 139  *              The prompt to use when asking the applicant for an
 140  *              authentication token.
 141  *      =PAM_OLDAUTHTOK_PROMPT:
 142  *              The prompt to use when asking the applicant for an
 143  *              expired authentication token prior to changing it.
 144  *      =PAM_SOCKADDR:
 145  *              The sockaddr_storage of the applicants's host.
 146  *      =PAM_NUSER:
 147  *              The "nested" user if this is a login on top of a previous one.
 148  *
 149  * See =pam_start for a description of =struct pam_conv.
 150  *
 151  * >pam_set_item
 152  */