1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
|
#-*- perl -*-
#
# Copyright (C) 2002 Ken'ichi Fukamachi
# All rights reserved. This program is free software; you can
# redistribute it and/or modify it under the same terms as Perl itself.
#
# $FML: Auth.pm,v 1.11 2002/07/18 23:17:10 fukachan Exp $
#
package FML::Command::Auth;
use strict;
use vars qw(@ISA @EXPORT @EXPORT_OK $AUTOLOAD);
use Carp;
use FML::Log qw(Log LogWarn LogError);
# always use this module's crypt
BEGIN { $Crypt::UnixCrpyt::OVERRIDE_BUILTIN = 1 }
use Crypt::UnixCrypt;
=head1 NAME
FML::Command::Auth - authentication functions
=head1 SYNOPSIS
=head1 DESCRIPTION
=head1 METHODS
=head2 new()
=head2 reject()
return 0 :-) (dummy)
=cut
# Descriptions: ordinary constructor
# Arguments: OBJ($self) HASH_REF($args)
# Side Effects: none
# Return Value: OBJ
sub new
{
my ($self, $args) = @_;
my ($type) = ref($self) || $self;
my $me = {};
return bless $me, $type;
}
# Descriptions: virtual reject handler, just return 0 :-)
# Arguments: OBJ($self) HASH_REF($args)
# Side Effects: none
# Return Value: STR (__LAST__, a special upcall)
sub reject
{
my ($self, $curproc, $args, $optargs) = @_;
return '__LAST__';
}
# Descriptions: permit anyone
# Arguments: OBJ($self) HASH_REF($args)
# Side Effects: none
# Return Value: NUM
sub permit_anyone
{
my ($self, $curproc, $args, $optargs) = @_;
return 1;
}
# Descriptions: permit if admin_member_maps has the sender
# Arguments: OBJ($self) OBJ($curproc) HASH_REF($args) HASH_REF($optargs)
# Side Effects: none
# Return Value: NUM
sub permit_admin_member_maps
{
my ($self, $curproc, $args, $optargs) = @_;
my $cred = $curproc->{ credential };
my $match = $cred->is_privileged_member($curproc, $args);
if ($match) {
Log("found in admin_member_maps");
return 1;
}
return 0;
}
# Descriptions: virtual reject handler, just return 0 :-)
# Arguments: OBJ($self) HASH_REF($args)
# Side Effects: none
# Return Value: NUM or STR (__LAST__, a special upcall)
sub reject_system_accounts
{
my ($self, $curproc, $args, $optargs) = @_;
my $cred = $curproc->{ credential };
my $match = $cred->match_system_accounts($curproc, $args);
if ($match) {
Log("reject_system_accounts: matches the sender");
return '__LAST__';
}
return 0;
}
=head2 check_admin_member_password($curproc, $args, $optargs)
check the password if it is valid or not.
=cut
# Descriptions: check the password if it is valid or not.
# Arguments: OBJ($self)
# HASH_REF($curproc)
# HASH_REF($args)
# HASH_REF($optargs)
# Side Effects: none
# Return Value: NUM
sub check_admin_member_password
{
my ($self, $curproc, $args, $optargs) = @_;
my $config = $curproc->{ config };
my $maplist = $config->get_as_array_ref('admin_member_password_maps');
# simple sanity check: verify non empty input or not?
return 0 unless $optargs->{ address };
return 0 unless $optargs->{ password };
# get a set of address and password
my $address = $optargs->{ address };
my $password = $optargs->{ password };
unless ($address && $password) {
return 0;
}
# get candidates
my ($user, $domain) = split(/\@/, $address);
use FML::Credential;
my $cred = new FML::Credential;
# search $user in password database map, which has a hash of
# { $user => $encryptd_passwrod }.
for my $map (@$maplist) {
use IO::Adapter;
my $obj = new IO::Adapter $map, $config;
my $pwent = $obj->find( $user , { want => 'key,value', all => 1 });
# if this $map has this $user entry,
# try to check { user => password } relation.
if (defined $pwent) {
PASSWORD_ENTRY:
for my $r (@$pwent) {
my ($u, $p_infile) = split(/\s+/, $r);
my $p_input = crypt( $password, $p_infile );
# 1.1 user match ?
if ($cred->is_same_address($u, $address)) {
# 1.2 password match ?
if ($p_infile eq $p_input) {
Log("check_password: password match");
return 1;
}
}
}
}
}
LogWarn("check_password: password not match");
return 0;
}
=head1 CODING STYLE
See C<http://www.fml.org/software/FNF/> on fml coding style guide.
=head1 AUTHOR
Ken'ichi Fukamachi
=head1 COPYRIGHT
Copyright (C) 2002 Ken'ichi Fukamachi
All rights reserved. This program is free software; you can
redistribute it and/or modify it under the same terms as Perl itself.
=head1 HISTORY
FML::Command::Auth appeared in fml5 mailing list driver package.
See C<http://www.fml.org/> for more details.
=cut
1;
|
