1*0Sstevel@tonic-gate /*
2*0Sstevel@tonic-gate * Copyright (c) 2001 Markus Friedl. All rights reserved.
3*0Sstevel@tonic-gate *
4*0Sstevel@tonic-gate * Redistribution and use in source and binary forms, with or without
5*0Sstevel@tonic-gate * modification, are permitted provided that the following conditions
6*0Sstevel@tonic-gate * are met:
7*0Sstevel@tonic-gate * 1. Redistributions of source code must retain the above copyright
8*0Sstevel@tonic-gate * notice, this list of conditions and the following disclaimer.
9*0Sstevel@tonic-gate * 2. Redistributions in binary form must reproduce the above copyright
10*0Sstevel@tonic-gate * notice, this list of conditions and the following disclaimer in the
11*0Sstevel@tonic-gate * documentation and/or other materials provided with the distribution.
12*0Sstevel@tonic-gate *
13*0Sstevel@tonic-gate * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
14*0Sstevel@tonic-gate * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
15*0Sstevel@tonic-gate * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
16*0Sstevel@tonic-gate * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
17*0Sstevel@tonic-gate * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
18*0Sstevel@tonic-gate * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
19*0Sstevel@tonic-gate * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
20*0Sstevel@tonic-gate * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
21*0Sstevel@tonic-gate * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
22*0Sstevel@tonic-gate * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
23*0Sstevel@tonic-gate */
24*0Sstevel@tonic-gate
25*0Sstevel@tonic-gate #include "includes.h"
26*0Sstevel@tonic-gate RCSID("$OpenBSD: auth-chall.c,v 1.8 2001/05/18 14:13:28 markus Exp $");
27*0Sstevel@tonic-gate
28*0Sstevel@tonic-gate #pragma ident "%Z%%M% %I% %E% SMI"
29*0Sstevel@tonic-gate
30*0Sstevel@tonic-gate #include "auth.h"
31*0Sstevel@tonic-gate #include "log.h"
32*0Sstevel@tonic-gate #include "xmalloc.h"
33*0Sstevel@tonic-gate
34*0Sstevel@tonic-gate /* limited protocol v1 interface to kbd-interactive authentication */
35*0Sstevel@tonic-gate
36*0Sstevel@tonic-gate extern KbdintDevice *devices[];
37*0Sstevel@tonic-gate static KbdintDevice *device;
38*0Sstevel@tonic-gate
39*0Sstevel@tonic-gate char *
get_challenge(Authctxt * authctxt)40*0Sstevel@tonic-gate get_challenge(Authctxt *authctxt)
41*0Sstevel@tonic-gate {
42*0Sstevel@tonic-gate char *challenge, *name, *info, **prompts;
43*0Sstevel@tonic-gate u_int i, numprompts;
44*0Sstevel@tonic-gate u_int *echo_on;
45*0Sstevel@tonic-gate
46*0Sstevel@tonic-gate device = devices[0]; /* we always use the 1st device for protocol 1 */
47*0Sstevel@tonic-gate if (device == NULL)
48*0Sstevel@tonic-gate return NULL;
49*0Sstevel@tonic-gate if ((authctxt->kbdintctxt = device->init_ctx(authctxt)) == NULL)
50*0Sstevel@tonic-gate return NULL;
51*0Sstevel@tonic-gate if (device->query(authctxt->kbdintctxt, &name, &info,
52*0Sstevel@tonic-gate &numprompts, &prompts, &echo_on)) {
53*0Sstevel@tonic-gate device->free_ctx(authctxt->kbdintctxt);
54*0Sstevel@tonic-gate authctxt->kbdintctxt = NULL;
55*0Sstevel@tonic-gate return NULL;
56*0Sstevel@tonic-gate }
57*0Sstevel@tonic-gate if (numprompts < 1)
58*0Sstevel@tonic-gate fatal("get_challenge: numprompts < 1");
59*0Sstevel@tonic-gate challenge = xstrdup(prompts[0]);
60*0Sstevel@tonic-gate for (i = 0; i < numprompts; i++)
61*0Sstevel@tonic-gate xfree(prompts[i]);
62*0Sstevel@tonic-gate xfree(prompts);
63*0Sstevel@tonic-gate xfree(name);
64*0Sstevel@tonic-gate xfree(echo_on);
65*0Sstevel@tonic-gate xfree(info);
66*0Sstevel@tonic-gate
67*0Sstevel@tonic-gate return (challenge);
68*0Sstevel@tonic-gate }
69*0Sstevel@tonic-gate int
verify_response(Authctxt * authctxt,const char * response)70*0Sstevel@tonic-gate verify_response(Authctxt *authctxt, const char *response)
71*0Sstevel@tonic-gate {
72*0Sstevel@tonic-gate char *resp[1];
73*0Sstevel@tonic-gate int res;
74*0Sstevel@tonic-gate
75*0Sstevel@tonic-gate if (device == NULL)
76*0Sstevel@tonic-gate return 0;
77*0Sstevel@tonic-gate if (authctxt->kbdintctxt == NULL)
78*0Sstevel@tonic-gate return 0;
79*0Sstevel@tonic-gate resp[0] = (char *)response;
80*0Sstevel@tonic-gate res = device->respond(authctxt->kbdintctxt, 1, resp);
81*0Sstevel@tonic-gate device->free_ctx(authctxt->kbdintctxt);
82*0Sstevel@tonic-gate authctxt->kbdintctxt = NULL;
83*0Sstevel@tonic-gate return res ? 0 : 1;
84*0Sstevel@tonic-gate }
85