2 * Copyright (c) 1998 Kungliga Tekniska Högskolan
3 * (Royal Institute of Technology, Stockholm, Sweden).
6 * Redistribution and use in source and binary forms, with or without
7 * modification, are permitted provided that the following conditions
10 * 1. Redistributions of source code must retain the above copyright
11 * notice, this list of conditions and the following disclaimer.
13 * 2. Redistributions in binary form must reproduce the above copyright
14 * notice, this list of conditions and the following disclaimer in the
15 * documentation and/or other materials provided with the distribution.
17 * 3. Neither the name of the Institute nor the names of its contributors
18 * may be used to endorse or promote products derived from this software
19 * without specific prior written permission.
21 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
24 * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
34 #include "login_locl.h"
35 __RCSID("$Heimdal: osfc2.c 9704 2001-02-20 01:44:56Z assar $"
39 do_osfc2_magic(uid_t uid
)
42 struct es_passwd
*epw
;
46 argv
[0] = (char*)getprogname();
48 set_auth_parameters(1, argv
);
50 epw
= getespwuid(uid
);
52 syslog(LOG_AUTHPRIV
|LOG_NOTICE
,
53 "getespwuid failed for %d", uid
);
57 /* We don't check for auto-retired, foo-retired,
58 bar-retired, or any other kind of retired accounts
59 here; neither do we check for time-locked accounts, or
60 any other kind of serious C2 mumbo-jumbo. We do,
61 however, call setluid, since failing to do so is not
62 very good (take my word for it). */
64 if(!epw
->uflg
->fg_uid
) {
65 syslog(LOG_AUTHPRIV
|LOG_NOTICE
,
66 "attempted login by %s (has no uid)", epw
->ufld
->fd_name
);
70 setluid(epw
->ufld
->fd_uid
);
71 if(getluid() != epw
->ufld
->fd_uid
) {
72 syslog(LOG_AUTHPRIV
|LOG_NOTICE
,
73 "failed to set LUID for %s (%d)",
74 epw
->ufld
->fd_name
, epw
->ufld
->fd_uid
);
78 #endif /* HAVE_OSFC2 */