xref: /minix3/lib/libwrap/eval.c (revision f1fab66e7dda396e0a899dafaddb9c3ac4edfcfe)
1*f1fab66eSDavid van Moolenbroek /*	$NetBSD: eval.c,v 1.7 2012/03/21 10:10:37 matt Exp $	*/
2*f1fab66eSDavid van Moolenbroek 
3*f1fab66eSDavid van Moolenbroek  /*
4*f1fab66eSDavid van Moolenbroek   * Routines for controlled evaluation of host names, user names, and so on.
5*f1fab66eSDavid van Moolenbroek   * They are, in fact, wrappers around the functions that are specific for
6*f1fab66eSDavid van Moolenbroek   * the sockets or TLI programming interfaces. The request_info and host_info
7*f1fab66eSDavid van Moolenbroek   * structures are used for result cacheing.
8*f1fab66eSDavid van Moolenbroek   *
9*f1fab66eSDavid van Moolenbroek   * These routines allows us to postpone expensive operations until their
10*f1fab66eSDavid van Moolenbroek   * results are really needed. Examples are hostname lookups and double
11*f1fab66eSDavid van Moolenbroek   * checks, or username lookups. Information that cannot be retrieved is
12*f1fab66eSDavid van Moolenbroek   * given the value "unknown" ("paranoid" in case of hostname problems).
13*f1fab66eSDavid van Moolenbroek   *
14*f1fab66eSDavid van Moolenbroek   * When ALWAYS_HOSTNAME is off, hostname lookup is done only when required by
15*f1fab66eSDavid van Moolenbroek   * tcpd paranoid mode, by access control patterns, or by %letter expansions.
16*f1fab66eSDavid van Moolenbroek   *
17*f1fab66eSDavid van Moolenbroek   * When ALWAYS_RFC931 mode is off, user lookup is done only when required by
18*f1fab66eSDavid van Moolenbroek   * access control patterns or %letter expansions.
19*f1fab66eSDavid van Moolenbroek   *
20*f1fab66eSDavid van Moolenbroek   * Author: Wietse Venema, Eindhoven University of Technology, The Netherlands.
21*f1fab66eSDavid van Moolenbroek   */
22*f1fab66eSDavid van Moolenbroek 
23*f1fab66eSDavid van Moolenbroek #include <sys/cdefs.h>
24*f1fab66eSDavid van Moolenbroek #ifndef lint
25*f1fab66eSDavid van Moolenbroek #if 0
26*f1fab66eSDavid van Moolenbroek static char sccsid[] = "@(#) eval.c 1.3 95/01/30 19:51:45";
27*f1fab66eSDavid van Moolenbroek #else
28*f1fab66eSDavid van Moolenbroek __RCSID("$NetBSD: eval.c,v 1.7 2012/03/21 10:10:37 matt Exp $");
29*f1fab66eSDavid van Moolenbroek #endif
30*f1fab66eSDavid van Moolenbroek #endif
31*f1fab66eSDavid van Moolenbroek 
32*f1fab66eSDavid van Moolenbroek /* System libraries. */
33*f1fab66eSDavid van Moolenbroek 
34*f1fab66eSDavid van Moolenbroek #include <stdio.h>
35*f1fab66eSDavid van Moolenbroek #include <string.h>
36*f1fab66eSDavid van Moolenbroek 
37*f1fab66eSDavid van Moolenbroek /* Local stuff. */
38*f1fab66eSDavid van Moolenbroek 
39*f1fab66eSDavid van Moolenbroek #include "tcpd.h"
40*f1fab66eSDavid van Moolenbroek 
41*f1fab66eSDavid van Moolenbroek  /*
42*f1fab66eSDavid van Moolenbroek   * When a string has the value STRING_UNKNOWN, it means: don't bother, I
43*f1fab66eSDavid van Moolenbroek   * tried to look up the data but it was unavailable for some reason. When a
44*f1fab66eSDavid van Moolenbroek   * host name has the value STRING_PARANOID it means there was a name/address
45*f1fab66eSDavid van Moolenbroek   * conflict.
46*f1fab66eSDavid van Moolenbroek   */
47*f1fab66eSDavid van Moolenbroek char    unknown[] = STRING_UNKNOWN;
48*f1fab66eSDavid van Moolenbroek char    paranoid[] = STRING_PARANOID;
49*f1fab66eSDavid van Moolenbroek 
50*f1fab66eSDavid van Moolenbroek /* eval_user - look up user name */
51*f1fab66eSDavid van Moolenbroek 
52*f1fab66eSDavid van Moolenbroek char   *
eval_user(struct request_info * request)53*f1fab66eSDavid van Moolenbroek eval_user(struct request_info *request)
54*f1fab66eSDavid van Moolenbroek {
55*f1fab66eSDavid van Moolenbroek     if (request->user[0] == 0) {
56*f1fab66eSDavid van Moolenbroek 	(void)strlcpy(request->user, unknown, sizeof(request->user));
57*f1fab66eSDavid van Moolenbroek 	if (request->sink == 0 && request->client->sin && request->server->sin)
58*f1fab66eSDavid van Moolenbroek 	    rfc931(request->client->sin, request->server->sin, request->user);
59*f1fab66eSDavid van Moolenbroek     }
60*f1fab66eSDavid van Moolenbroek     return (request->user);
61*f1fab66eSDavid van Moolenbroek }
62*f1fab66eSDavid van Moolenbroek 
63*f1fab66eSDavid van Moolenbroek /* eval_hostaddr - look up printable address */
64*f1fab66eSDavid van Moolenbroek 
65*f1fab66eSDavid van Moolenbroek char   *
eval_hostaddr(struct host_info * host)66*f1fab66eSDavid van Moolenbroek eval_hostaddr(struct host_info *host)
67*f1fab66eSDavid van Moolenbroek {
68*f1fab66eSDavid van Moolenbroek     if (host->addr[0] == 0) {
69*f1fab66eSDavid van Moolenbroek 	(void)strlcpy(host->addr, unknown, sizeof(host->addr));
70*f1fab66eSDavid van Moolenbroek 	if (host->request->hostaddr != 0)
71*f1fab66eSDavid van Moolenbroek 	    host->request->hostaddr(host);
72*f1fab66eSDavid van Moolenbroek     }
73*f1fab66eSDavid van Moolenbroek     return (host->addr);
74*f1fab66eSDavid van Moolenbroek }
75*f1fab66eSDavid van Moolenbroek 
76*f1fab66eSDavid van Moolenbroek /* eval_hostname - look up host name */
77*f1fab66eSDavid van Moolenbroek 
78*f1fab66eSDavid van Moolenbroek char   *
eval_hostname(struct host_info * host)79*f1fab66eSDavid van Moolenbroek eval_hostname(struct host_info *host)
80*f1fab66eSDavid van Moolenbroek {
81*f1fab66eSDavid van Moolenbroek     if (host->name[0] == 0) {
82*f1fab66eSDavid van Moolenbroek 	(void)strlcpy(host->name, unknown, sizeof(host->name));
83*f1fab66eSDavid van Moolenbroek 	if (host->request->hostname != 0)
84*f1fab66eSDavid van Moolenbroek 	    host->request->hostname(host);
85*f1fab66eSDavid van Moolenbroek     }
86*f1fab66eSDavid van Moolenbroek     return (host->name);
87*f1fab66eSDavid van Moolenbroek }
88*f1fab66eSDavid van Moolenbroek 
89*f1fab66eSDavid van Moolenbroek /* eval_hostinfo - return string with host name (preferred) or address */
90*f1fab66eSDavid van Moolenbroek 
91*f1fab66eSDavid van Moolenbroek char   *
eval_hostinfo(struct host_info * host)92*f1fab66eSDavid van Moolenbroek eval_hostinfo(struct host_info *host)
93*f1fab66eSDavid van Moolenbroek {
94*f1fab66eSDavid van Moolenbroek     char   *hostname;
95*f1fab66eSDavid van Moolenbroek 
96*f1fab66eSDavid van Moolenbroek #ifndef ALWAYS_HOSTNAME				/* no implicit host lookups */
97*f1fab66eSDavid van Moolenbroek     if (host->name[0] == 0)
98*f1fab66eSDavid van Moolenbroek 	return (eval_hostaddr(host));
99*f1fab66eSDavid van Moolenbroek #endif
100*f1fab66eSDavid van Moolenbroek     hostname = eval_hostname(host);
101*f1fab66eSDavid van Moolenbroek     if (HOSTNAME_KNOWN(hostname)) {
102*f1fab66eSDavid van Moolenbroek 	return (host->name);
103*f1fab66eSDavid van Moolenbroek     } else {
104*f1fab66eSDavid van Moolenbroek 	return (eval_hostaddr(host));
105*f1fab66eSDavid van Moolenbroek     }
106*f1fab66eSDavid van Moolenbroek }
107*f1fab66eSDavid van Moolenbroek 
108*f1fab66eSDavid van Moolenbroek /* eval_client - return string with as much about the client as we know */
109*f1fab66eSDavid van Moolenbroek 
110*f1fab66eSDavid van Moolenbroek char   *
eval_client(struct request_info * request)111*f1fab66eSDavid van Moolenbroek eval_client(struct request_info *request)
112*f1fab66eSDavid van Moolenbroek {
113*f1fab66eSDavid van Moolenbroek     static char both[2 * STRING_LENGTH];
114*f1fab66eSDavid van Moolenbroek     char   *hostinfo = eval_hostinfo(request->client);
115*f1fab66eSDavid van Moolenbroek 
116*f1fab66eSDavid van Moolenbroek #ifndef ALWAYS_RFC931				/* no implicit user lookups */
117*f1fab66eSDavid van Moolenbroek     if (request->user[0] == 0)
118*f1fab66eSDavid van Moolenbroek 	return (hostinfo);
119*f1fab66eSDavid van Moolenbroek #endif
120*f1fab66eSDavid van Moolenbroek     if (STR_NE(eval_user(request), unknown)) {
121*f1fab66eSDavid van Moolenbroek 	(void)snprintf(both, sizeof both, "%s@%s", request->user, hostinfo);
122*f1fab66eSDavid van Moolenbroek 	return (both);
123*f1fab66eSDavid van Moolenbroek     } else {
124*f1fab66eSDavid van Moolenbroek 	return (hostinfo);
125*f1fab66eSDavid van Moolenbroek     }
126*f1fab66eSDavid van Moolenbroek }
127*f1fab66eSDavid van Moolenbroek 
128*f1fab66eSDavid van Moolenbroek /* eval_server - return string with as much about the server as we know */
129*f1fab66eSDavid van Moolenbroek 
130*f1fab66eSDavid van Moolenbroek char   *
eval_server(struct request_info * request)131*f1fab66eSDavid van Moolenbroek eval_server(struct request_info *request)
132*f1fab66eSDavid van Moolenbroek {
133*f1fab66eSDavid van Moolenbroek     static char both[2 * STRING_LENGTH];
134*f1fab66eSDavid van Moolenbroek     char   *host = eval_hostinfo(request->server);
135*f1fab66eSDavid van Moolenbroek     char   *daemon = eval_daemon(request);
136*f1fab66eSDavid van Moolenbroek 
137*f1fab66eSDavid van Moolenbroek     if (STR_NE(host, unknown)) {
138*f1fab66eSDavid van Moolenbroek 	(void)snprintf(both, sizeof both, "%s@%s", daemon, host);
139*f1fab66eSDavid van Moolenbroek 	return (both);
140*f1fab66eSDavid van Moolenbroek     } else {
141*f1fab66eSDavid van Moolenbroek 	return (daemon);
142*f1fab66eSDavid van Moolenbroek     }
143*f1fab66eSDavid van Moolenbroek }
144