rooty/yubico-pam
1
0
Fork 0
mirror of https://github.com/Yubico/yubico-pam.git synced 2025-01-19 16:52:17 +01:00
Code Issues Projects Releases Wiki Activity

Improve matching logic.

Browse Source
This commit is contained in:
Simon Josefsson 2009-03-24 16:41:11 +00:00
parent bc5262f4e2
commit a077ae56ad
1 changed files with 21 additions and 17 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

38
pam_yubico.c
View File

@ -98,9 +98,10 @@
*/ */
static int static int
check_user_token (const char *authfile, check_user_token (const char *authfile,
const char *username, const char *usertoken) const char *username,
const char *otp_id)
{ {
static char buf[1024]; char buf[1024];
char *s_user, *s_token; char *s_user, *s_token;
int retval = 0; int retval = 0;
FILE *opwfile; FILE *opwfile;
@ -108,34 +109,37 @@ check_user_token (const char *authfile,
opwfile = fopen (authfile, "r"); opwfile = fopen (authfile, "r");
if (opwfile == NULL) if (opwfile == NULL)
{ {
D ((" %s file does not exists.", authfile)); D (("Cannot open file: %s", authfile));
return retval; return retval;
} }
while (fgets (buf, 1024, opwfile)) while (fgets (buf, 1024, opwfile))
{ {
if (!strncmp (buf, username, strlen (username))) if (buf[strlen (buf) - 1] == '\n')
buf[strlen (buf) - 1] = '\0';
D (("Authorization line: %s", buf));
s_user = strtok (buf, ":");
if (s_user && strcmp (username, s_user) == 0)
{ {
buf[strlen (buf) - 1] = '\0'; D (("Matched user: %s", s_user));
D (("Got user record :: %s", buf)); do
s_user = strtok (buf, ":");
s_token = strtok (NULL, ":");
while (s_token != NULL)
{ {
if (!strncmp (usertoken, s_token, strlen (usertoken)))
{
D (("Token Found :: %s", s_token));
retval = 1;
break;
}
s_token = strtok (NULL, ":"); s_token = strtok (NULL, ":");
D (("Authorization token: %s", s_token));
if (s_token && strcmp (otp_id, s_token) == 0)
{
D (("Match user/token as %s/%s", username, otp_id));
fclose (opwfile);
return 1;
}
} }
break; while (s_token != NULL);
} }
} }
fclose (opwfile); fclose (opwfile);
return retval; return 0;
} }
/* /*