1 /* authd/providers/ident.c - ident lookup provider for authd
2 * Copyright (c) 2016 Elizabeth Myers <elizabeth@interlinked.me>
4 * Permission to use, copy, modify, and/or distribute this software for any
5 * purpose with or without fee is hereby granted, provided that the above
6 * copyright notice and this permission notice is present in all copies.
8 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
9 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
10 * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
11 * DISCLAIMED. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT,
12 * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
13 * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
14 * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
15 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
16 * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING
17 * IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
18 * POSSIBILITY OF SUCH DAMAGE.
21 /* Largely adapted from old s_auth.c, but reworked for authd. rDNS code
22 * moved to its own provider.
24 * --Elizafox 13 March 2016
34 #define IDENT_BUFSIZE 128
38 time_t timeout
; /* Timeout interval */
39 rb_fde_t
*F
; /* Our FD */
42 /* Goinked from old s_auth.c --Elizafox */
43 static const char *messages
[] =
46 "*** Got Ident response",
47 "*** No Ident response",
57 static EVH timeout_ident_queries_event
;
58 static CNCB ident_connected
;
59 static PF read_ident_reply
;
61 static void client_fail(struct auth_client
*auth
, ident_message message
);
62 static void client_success(struct auth_client
*auth
);
63 static char * get_valid_ident(char *buf
);
65 static struct ev_entry
*timeout_ev
;
66 static int ident_timeout
= 5;
69 /* Timeout outstanding queries */
71 timeout_ident_queries_event(void *notused __unused
)
73 struct auth_client
*auth
;
74 rb_dictionary_iter iter
;
76 RB_DICTIONARY_FOREACH(auth
, &iter
, auth_clients
)
78 struct ident_query
*query
= auth
->data
[PROVIDER_IDENT
];
80 if(query
!= NULL
&& query
->timeout
< rb_current_time())
81 client_fail(auth
, REPORT_FAIL
);
86 * ident_connected() - deal with the result of rb_connect_tcp()
88 * If the connection failed, we simply close the auth fd and report
89 * a failure. If the connection suceeded send the ident server a query
90 * giving "theirport , ourport". The write is only attempted *once* so
91 * it is deemed to be a fail if the entire write doesn't write all the
92 * data given. This shouldnt be a problem since the socket should have
93 * a write buffer far greater than this message to store it in should
94 * problems arise. -avalon
97 ident_connected(rb_fde_t
*F __unused
, int error
, void *data
)
99 struct auth_client
*auth
= data
;
100 struct ident_query
*query
;
107 query
= auth
->data
[PROVIDER_IDENT
];
112 /* Check the error */
115 /* We had an error during connection :( */
116 client_fail(auth
, REPORT_FAIL
);
120 snprintf(authbuf
, sizeof(authbuf
), "%u , %u\r\n",
121 auth
->c_port
, auth
->l_port
);
122 authlen
= strlen(authbuf
);
124 if(rb_write(query
->F
, authbuf
, authlen
) != authlen
)
126 client_fail(auth
, REPORT_FAIL
);
130 read_ident_reply(query
->F
, auth
);
134 read_ident_reply(rb_fde_t
*F
, void *data
)
136 struct auth_client
*auth
= data
;
137 struct ident_query
*query
;
142 char buf
[IDENT_BUFSIZE
+ 1]; /* buffer to read auth reply into */
147 query
= auth
->data
[PROVIDER_IDENT
];
152 len
= rb_read(F
, buf
, IDENT_BUFSIZE
);
153 if(len
< 0 && rb_ignore_errno(errno
))
155 rb_setselect(F
, RB_SELECT_READ
, read_ident_reply
, auth
);
163 if((s
= get_valid_ident(buf
)))
167 while (*s
== '~' || *s
== '^')
170 for (count
= USERLEN
; *s
&& count
; s
++)
176 if(*s
!= ' ' && *s
!= ':' && *s
!= '[')
187 client_fail(auth
, REPORT_FAIL
);
189 client_success(auth
);
193 client_fail(struct auth_client
*auth
, ident_message report
)
195 struct ident_query
*query
= auth
->data
[PROVIDER_IDENT
];
200 rb_strlcpy(auth
->username
, "*", sizeof(auth
->username
));
206 auth
->data
[PROVIDER_IDENT
] = NULL
;
208 notice_client(auth
->cid
, messages
[report
]);
209 provider_done(auth
, PROVIDER_IDENT
);
213 client_success(struct auth_client
*auth
)
215 struct ident_query
*query
= auth
->data
[PROVIDER_IDENT
];
224 auth
->data
[PROVIDER_IDENT
] = NULL
;
226 notice_client(auth
->cid
, messages
[REPORT_FOUND
]);
227 provider_done(auth
, PROVIDER_IDENT
);
231 * parse ident query reply from identd server
233 * Taken from old s_auth.c --Elizafox
235 * Inputs - pointer to ident buf
236 * Outputs - NULL if no valid ident found, otherwise pointer to name
237 * Side effects - None
240 get_valid_ident(char *buf
)
248 char *remotePortString
;
250 /* All this to get rid of a sscanf() fun. */
251 remotePortString
= buf
;
253 colon1Ptr
= strchr(remotePortString
, ':');
259 colon2Ptr
= strchr(colon1Ptr
, ':');
265 commaPtr
= strchr(remotePortString
, ',');
273 remp
= atoi(remotePortString
);
277 locp
= atoi(commaPtr
);
281 /* look for USERID bordered by first pair of colons */
282 if(!strstr(colon1Ptr
, "USERID"))
285 colon3Ptr
= strchr(colon2Ptr
, ':');
297 timeout_ev
= rb_event_addish("timeout_ident_queries_event", timeout_ident_queries_event
, NULL
, 1);
298 return (timeout_ev
!= NULL
);
304 struct auth_client
*auth
;
305 rb_dictionary_iter iter
;
307 /* Nuke all ident queries */
308 RB_DICTIONARY_FOREACH(auth
, &iter
, auth_clients
)
310 if(auth
->data
[PROVIDER_IDENT
] != NULL
)
311 client_fail(auth
, REPORT_FAIL
);
315 static bool ident_start(struct auth_client
*auth
)
317 struct ident_query
*query
= rb_malloc(sizeof(struct ident_query
));
318 struct rb_sockaddr_storage l_addr
, c_addr
;
319 int family
= GET_SS_FAMILY(&auth
->c_addr
);
321 notice_client(auth
->cid
, messages
[REPORT_LOOKUP
]);
323 auth
->data
[PROVIDER_IDENT
] = query
;
324 query
->timeout
= rb_current_time() + ident_timeout
;
326 if((query
->F
= rb_socket(family
, SOCK_STREAM
, 0, "ident")) == NULL
)
328 warn_opers(L_DEBUG
, "Could not create ident socket: %s", strerror(errno
));
329 client_fail(auth
, REPORT_FAIL
);
330 return true; /* Not a fatal error */
333 /* Build sockaddr_storages for rb_connect_tcp below */
334 memcpy(&l_addr
, &auth
->l_addr
, sizeof(l_addr
));
335 memcpy(&c_addr
, &auth
->c_addr
, sizeof(c_addr
));
337 /* Set the ports correctly */
339 if(GET_SS_FAMILY(&l_addr
) == AF_INET6
)
340 ((struct sockaddr_in6
*)&l_addr
)->sin6_port
= 0;
343 ((struct sockaddr_in
*)&l_addr
)->sin_port
= 0;
346 if(GET_SS_FAMILY(&c_addr
) == AF_INET6
)
347 ((struct sockaddr_in6
*)&c_addr
)->sin6_port
= htons(113);
350 ((struct sockaddr_in
*)&c_addr
)->sin_port
= htons(113);
352 rb_connect_tcp(query
->F
, (struct sockaddr
*)&c_addr
,
353 (struct sockaddr
*)&l_addr
,
354 GET_SS_LEN(&l_addr
), ident_connected
,
355 auth
, ident_timeout
);
357 set_provider_on(auth
, PROVIDER_IDENT
);
363 ident_cancel(struct auth_client
*auth
)
365 struct ident_query
*query
= auth
->data
[PROVIDER_IDENT
];
368 client_fail(auth
, REPORT_FAIL
);
372 add_conf_ident_timeout(const char *key __unused
, int parc __unused
, const char **parv
)
374 int timeout
= atoi(parv
[0]);
378 warn_opers(L_CRIT
, "BUG: ident timeout < 0 (value: %d)", timeout
);
382 ident_timeout
= timeout
;
385 struct auth_opts_handler ident_options
[] =
387 { "ident_timeout", 1, add_conf_ident_timeout
},
392 struct auth_provider ident_provider
=
394 .id
= PROVIDER_IDENT
,
396 .destroy
= ident_destroy
,
397 .start
= ident_start
,
398 .cancel
= ident_cancel
,
400 .opt_handlers
= ident_options
,