xref: /onnv-gate/usr/src/cmd/ssh/sshd/auth-chall.c (revision 0:68f95e015346)
1*0Sstevel@tonic-gate /*
2*0Sstevel@tonic-gate  * Copyright (c) 2001 Markus Friedl.  All rights reserved.
3*0Sstevel@tonic-gate  *
4*0Sstevel@tonic-gate  * Redistribution and use in source and binary forms, with or without
5*0Sstevel@tonic-gate  * modification, are permitted provided that the following conditions
6*0Sstevel@tonic-gate  * are met:
7*0Sstevel@tonic-gate  * 1. Redistributions of source code must retain the above copyright
8*0Sstevel@tonic-gate  *    notice, this list of conditions and the following disclaimer.
9*0Sstevel@tonic-gate  * 2. Redistributions in binary form must reproduce the above copyright
10*0Sstevel@tonic-gate  *    notice, this list of conditions and the following disclaimer in the
11*0Sstevel@tonic-gate  *    documentation and/or other materials provided with the distribution.
12*0Sstevel@tonic-gate  *
13*0Sstevel@tonic-gate  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
14*0Sstevel@tonic-gate  * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
15*0Sstevel@tonic-gate  * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
16*0Sstevel@tonic-gate  * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
17*0Sstevel@tonic-gate  * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
18*0Sstevel@tonic-gate  * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
19*0Sstevel@tonic-gate  * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
20*0Sstevel@tonic-gate  * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
21*0Sstevel@tonic-gate  * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
22*0Sstevel@tonic-gate  * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
23*0Sstevel@tonic-gate  */
24*0Sstevel@tonic-gate 
25*0Sstevel@tonic-gate #include "includes.h"
26*0Sstevel@tonic-gate RCSID("$OpenBSD: auth-chall.c,v 1.8 2001/05/18 14:13:28 markus Exp $");
27*0Sstevel@tonic-gate 
28*0Sstevel@tonic-gate #pragma ident	"%Z%%M%	%I%	%E% SMI"
29*0Sstevel@tonic-gate 
30*0Sstevel@tonic-gate #include "auth.h"
31*0Sstevel@tonic-gate #include "log.h"
32*0Sstevel@tonic-gate #include "xmalloc.h"
33*0Sstevel@tonic-gate 
34*0Sstevel@tonic-gate /* limited protocol v1 interface to kbd-interactive authentication */
35*0Sstevel@tonic-gate 
36*0Sstevel@tonic-gate extern KbdintDevice *devices[];
37*0Sstevel@tonic-gate static KbdintDevice *device;
38*0Sstevel@tonic-gate 
39*0Sstevel@tonic-gate char *
get_challenge(Authctxt * authctxt)40*0Sstevel@tonic-gate get_challenge(Authctxt *authctxt)
41*0Sstevel@tonic-gate {
42*0Sstevel@tonic-gate 	char *challenge, *name, *info, **prompts;
43*0Sstevel@tonic-gate 	u_int i, numprompts;
44*0Sstevel@tonic-gate 	u_int *echo_on;
45*0Sstevel@tonic-gate 
46*0Sstevel@tonic-gate 	device = devices[0]; /* we always use the 1st device for protocol 1 */
47*0Sstevel@tonic-gate 	if (device == NULL)
48*0Sstevel@tonic-gate 		return NULL;
49*0Sstevel@tonic-gate 	if ((authctxt->kbdintctxt = device->init_ctx(authctxt)) == NULL)
50*0Sstevel@tonic-gate 		return NULL;
51*0Sstevel@tonic-gate 	if (device->query(authctxt->kbdintctxt, &name, &info,
52*0Sstevel@tonic-gate 	    &numprompts, &prompts, &echo_on)) {
53*0Sstevel@tonic-gate 		device->free_ctx(authctxt->kbdintctxt);
54*0Sstevel@tonic-gate 		authctxt->kbdintctxt = NULL;
55*0Sstevel@tonic-gate 		return NULL;
56*0Sstevel@tonic-gate 	}
57*0Sstevel@tonic-gate 	if (numprompts < 1)
58*0Sstevel@tonic-gate 		fatal("get_challenge: numprompts < 1");
59*0Sstevel@tonic-gate 	challenge = xstrdup(prompts[0]);
60*0Sstevel@tonic-gate 	for (i = 0; i < numprompts; i++)
61*0Sstevel@tonic-gate 		xfree(prompts[i]);
62*0Sstevel@tonic-gate 	xfree(prompts);
63*0Sstevel@tonic-gate 	xfree(name);
64*0Sstevel@tonic-gate 	xfree(echo_on);
65*0Sstevel@tonic-gate 	xfree(info);
66*0Sstevel@tonic-gate 
67*0Sstevel@tonic-gate 	return (challenge);
68*0Sstevel@tonic-gate }
69*0Sstevel@tonic-gate int
verify_response(Authctxt * authctxt,const char * response)70*0Sstevel@tonic-gate verify_response(Authctxt *authctxt, const char *response)
71*0Sstevel@tonic-gate {
72*0Sstevel@tonic-gate 	char *resp[1];
73*0Sstevel@tonic-gate 	int res;
74*0Sstevel@tonic-gate 
75*0Sstevel@tonic-gate 	if (device == NULL)
76*0Sstevel@tonic-gate 		return 0;
77*0Sstevel@tonic-gate 	if (authctxt->kbdintctxt == NULL)
78*0Sstevel@tonic-gate 		return 0;
79*0Sstevel@tonic-gate 	resp[0] = (char *)response;
80*0Sstevel@tonic-gate 	res = device->respond(authctxt->kbdintctxt, 1, resp);
81*0Sstevel@tonic-gate 	device->free_ctx(authctxt->kbdintctxt);
82*0Sstevel@tonic-gate 	authctxt->kbdintctxt = NULL;
83*0Sstevel@tonic-gate 	return res ? 0 : 1;
84*0Sstevel@tonic-gate }
85