deraadt@openbsd.org | 4d28fa7 | 2019-06-28 13:35:04 +0000 | [diff] [blame] | 1 | /* $OpenBSD: sshlogin.c,v 1.34 2019/06/28 13:35:04 deraadt Exp $ */ |
Damien Miller | d4a8b7e | 1999-10-27 13:42:43 +1000 | [diff] [blame] | 2 | /* |
Damien Miller | 95def09 | 1999-11-25 00:26:21 +1100 | [diff] [blame] | 3 | * Author: Tatu Ylonen <ylo@cs.hut.fi> |
Damien Miller | 95def09 | 1999-11-25 00:26:21 +1100 | [diff] [blame] | 4 | * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland |
| 5 | * All rights reserved |
Damien Miller | 95def09 | 1999-11-25 00:26:21 +1100 | [diff] [blame] | 6 | * This file performs some of the things login(1) normally does. We cannot |
| 7 | * easily use something like login -p -h host -f user, because there are |
| 8 | * several different logins around, and it is hard to determined what kind of |
| 9 | * login the current system has. Also, we want to be able to execute commands |
| 10 | * on a tty. |
Damien Miller | 4af5130 | 2000-04-16 11:18:38 +1000 | [diff] [blame] | 11 | * |
Damien Miller | e4340be | 2000-09-16 13:29:08 +1100 | [diff] [blame] | 12 | * As far as I am concerned, the code I have written for this software |
| 13 | * can be used freely for any purpose. Any derived versions of this |
| 14 | * software must be clearly marked as such, and if the derived work is |
| 15 | * incompatible with the protocol description in the RFC file, it must be |
| 16 | * called by a name other than "ssh" or "Secure Shell". |
| 17 | * |
| 18 | * Copyright (c) 1999 Theo de Raadt. All rights reserved. |
| 19 | * Copyright (c) 1999 Markus Friedl. All rights reserved. |
| 20 | * |
| 21 | * Redistribution and use in source and binary forms, with or without |
| 22 | * modification, are permitted provided that the following conditions |
| 23 | * are met: |
| 24 | * 1. Redistributions of source code must retain the above copyright |
| 25 | * notice, this list of conditions and the following disclaimer. |
| 26 | * 2. Redistributions in binary form must reproduce the above copyright |
| 27 | * notice, this list of conditions and the following disclaimer in the |
| 28 | * documentation and/or other materials provided with the distribution. |
| 29 | * |
| 30 | * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR |
| 31 | * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES |
| 32 | * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. |
| 33 | * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, |
| 34 | * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT |
| 35 | * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, |
| 36 | * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY |
| 37 | * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT |
| 38 | * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF |
| 39 | * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. |
Damien Miller | 95def09 | 1999-11-25 00:26:21 +1100 | [diff] [blame] | 40 | */ |
Damien Miller | d4a8b7e | 1999-10-27 13:42:43 +1000 | [diff] [blame] | 41 | |
| 42 | #include "includes.h" |
Damien Miller | d4a8b7e | 1999-10-27 13:42:43 +1000 | [diff] [blame] | 43 | |
Damien Miller | e6b3b61 | 2006-07-24 14:01:23 +1000 | [diff] [blame] | 44 | #include <sys/types.h> |
Damien Miller | d783435 | 2006-08-05 12:39:39 +1000 | [diff] [blame] | 45 | #include <sys/socket.h> |
Damien Miller | e6b3b61 | 2006-07-24 14:01:23 +1000 | [diff] [blame] | 46 | |
Damien Miller | 36cbe41 | 2006-08-05 12:54:24 +1000 | [diff] [blame] | 47 | #include <netinet/in.h> |
| 48 | |
Darren Tucker | 3997249 | 2006-07-12 22:22:46 +1000 | [diff] [blame] | 49 | #include <errno.h> |
Damien Miller | 57cf638 | 2006-07-10 21:13:46 +1000 | [diff] [blame] | 50 | #include <fcntl.h> |
Damien Miller | d783435 | 2006-08-05 12:39:39 +1000 | [diff] [blame] | 51 | #include <stdarg.h> |
Damien Miller | a7a73ee | 2006-08-05 11:37:59 +1000 | [diff] [blame] | 52 | #include <stdio.h> |
Damien Miller | e3476ed | 2006-07-24 14:13:33 +1000 | [diff] [blame] | 53 | #include <string.h> |
Damien Miller | 5598b4f | 2006-07-24 14:09:40 +1000 | [diff] [blame] | 54 | #include <time.h> |
Damien Miller | e6b3b61 | 2006-07-24 14:01:23 +1000 | [diff] [blame] | 55 | #include <unistd.h> |
deraadt@openbsd.org | 087266e | 2015-01-20 23:14:00 +0000 | [diff] [blame] | 56 | #include <limits.h> |
Damien Miller | 57cf638 | 2006-07-10 21:13:46 +1000 | [diff] [blame] | 57 | |
markus@openbsd.org | 2808d18 | 2018-07-09 21:26:02 +0000 | [diff] [blame] | 58 | #include "sshlogin.h" |
| 59 | #include "ssherr.h" |
andre | 2ff7b5d | 2000-06-03 14:57:40 +0000 | [diff] [blame] | 60 | #include "loginrec.h" |
Darren Tucker | 0999174 | 2004-07-17 17:05:14 +1000 | [diff] [blame] | 61 | #include "log.h" |
markus@openbsd.org | 2808d18 | 2018-07-09 21:26:02 +0000 | [diff] [blame] | 62 | #include "sshbuf.h" |
Damien Miller | 7acefbb | 2014-07-18 14:11:24 +1000 | [diff] [blame] | 63 | #include "misc.h" |
Darren Tucker | 0999174 | 2004-07-17 17:05:14 +1000 | [diff] [blame] | 64 | #include "servconf.h" |
| 65 | |
markus@openbsd.org | 2808d18 | 2018-07-09 21:26:02 +0000 | [diff] [blame] | 66 | extern struct sshbuf *loginmsg; |
Darren Tucker | 0999174 | 2004-07-17 17:05:14 +1000 | [diff] [blame] | 67 | extern ServerOptions options; |
Damien Miller | 2f6a0ad | 2000-05-31 11:20:11 +1000 | [diff] [blame] | 68 | |
Damien Miller | 5428f64 | 1999-11-25 11:54:57 +1100 | [diff] [blame] | 69 | /* |
| 70 | * Returns the time when the user last logged in. Returns 0 if the |
| 71 | * information is not available. This must be called before record_login. |
| 72 | * The host the user logged in from will be returned in buf. |
| 73 | */ |
Damien Miller | a1690d0 | 2006-03-26 14:27:35 +1100 | [diff] [blame] | 74 | time_t |
Damien Miller | 95def09 | 1999-11-25 00:26:21 +1100 | [diff] [blame] | 75 | get_last_login_time(uid_t uid, const char *logname, |
Damien Miller | a1690d0 | 2006-03-26 14:27:35 +1100 | [diff] [blame] | 76 | char *buf, size_t bufsize) |
Damien Miller | d4a8b7e | 1999-10-27 13:42:43 +1000 | [diff] [blame] | 77 | { |
Ben Lindstrom | 78ffe26 | 2004-02-27 03:01:19 +0000 | [diff] [blame] | 78 | struct logininfo li; |
Damien Miller | d4a8b7e | 1999-10-27 13:42:43 +1000 | [diff] [blame] | 79 | |
Ben Lindstrom | 78ffe26 | 2004-02-27 03:01:19 +0000 | [diff] [blame] | 80 | login_get_lastlog(&li, uid); |
| 81 | strlcpy(buf, li.hostname, bufsize); |
Damien Miller | a1690d0 | 2006-03-26 14:27:35 +1100 | [diff] [blame] | 82 | return (time_t)li.tv_sec; |
Damien Miller | d4a8b7e | 1999-10-27 13:42:43 +1000 | [diff] [blame] | 83 | } |
| 84 | |
Damien Miller | 5428f64 | 1999-11-25 11:54:57 +1100 | [diff] [blame] | 85 | /* |
Darren Tucker | 0999174 | 2004-07-17 17:05:14 +1000 | [diff] [blame] | 86 | * Generate and store last login message. This must be done before |
| 87 | * login_login() is called and lastlog is updated. |
| 88 | */ |
Darren Tucker | 133b757 | 2004-08-12 22:50:03 +1000 | [diff] [blame] | 89 | static void |
Darren Tucker | 0999174 | 2004-07-17 17:05:14 +1000 | [diff] [blame] | 90 | store_lastlog_message(const char *user, uid_t uid) |
| 91 | { |
Darren Tucker | a422d97 | 2009-05-04 12:52:47 +1000 | [diff] [blame] | 92 | #ifndef NO_SSH_LASTLOG |
Darren Tucker | 011052d | 2020-02-17 22:55:51 +1100 | [diff] [blame] | 93 | # ifndef CUSTOM_SYS_AUTH_GET_LASTLOGIN_MSG |
| 94 | char hostname[HOST_NAME_MAX+1] = ""; |
Darren Tucker | 0999174 | 2004-07-17 17:05:14 +1000 | [diff] [blame] | 95 | time_t last_login_time; |
Darren Tucker | 011052d | 2020-02-17 22:55:51 +1100 | [diff] [blame] | 96 | # endif |
| 97 | char *time_string; |
markus@openbsd.org | 2808d18 | 2018-07-09 21:26:02 +0000 | [diff] [blame] | 98 | int r; |
Darren Tucker | 0999174 | 2004-07-17 17:05:14 +1000 | [diff] [blame] | 99 | |
Darren Tucker | 0999174 | 2004-07-17 17:05:14 +1000 | [diff] [blame] | 100 | if (!options.print_lastlog) |
| 101 | return; |
| 102 | |
Darren Tucker | b5d5ee1 | 2009-08-17 09:40:00 +1000 | [diff] [blame] | 103 | # ifdef CUSTOM_SYS_AUTH_GET_LASTLOGIN_MSG |
| 104 | time_string = sys_auth_get_lastlogin_msg(user, uid); |
| 105 | if (time_string != NULL) { |
markus@openbsd.org | 2808d18 | 2018-07-09 21:26:02 +0000 | [diff] [blame] | 106 | if ((r = sshbuf_put(loginmsg, |
| 107 | time_string, strlen(time_string))) != 0) |
| 108 | fatal("%s: buffer error: %s", __func__, ssh_err(r)); |
Darren Tucker | f60845f | 2013-06-02 08:07:31 +1000 | [diff] [blame] | 109 | free(time_string); |
Darren Tucker | b5d5ee1 | 2009-08-17 09:40:00 +1000 | [diff] [blame] | 110 | } |
| 111 | # else |
Darren Tucker | 0999174 | 2004-07-17 17:05:14 +1000 | [diff] [blame] | 112 | last_login_time = get_last_login_time(uid, user, hostname, |
| 113 | sizeof(hostname)); |
| 114 | |
| 115 | if (last_login_time != 0) { |
| 116 | time_string = ctime(&last_login_time); |
Damien Miller | 14b017d | 2007-09-17 16:09:15 +1000 | [diff] [blame] | 117 | time_string[strcspn(time_string, "\n")] = '\0'; |
Darren Tucker | 0999174 | 2004-07-17 17:05:14 +1000 | [diff] [blame] | 118 | if (strcmp(hostname, "") == 0) |
markus@openbsd.org | 2808d18 | 2018-07-09 21:26:02 +0000 | [diff] [blame] | 119 | r = sshbuf_putf(loginmsg, "Last login: %s\r\n", |
Darren Tucker | 0999174 | 2004-07-17 17:05:14 +1000 | [diff] [blame] | 120 | time_string); |
| 121 | else |
markus@openbsd.org | 2808d18 | 2018-07-09 21:26:02 +0000 | [diff] [blame] | 122 | r = sshbuf_putf(loginmsg, "Last login: %s from %s\r\n", |
Darren Tucker | 0999174 | 2004-07-17 17:05:14 +1000 | [diff] [blame] | 123 | time_string, hostname); |
markus@openbsd.org | 2808d18 | 2018-07-09 21:26:02 +0000 | [diff] [blame] | 124 | if (r != 0) |
| 125 | fatal("%s: buffer error: %s", __func__, ssh_err(r)); |
Darren Tucker | 0999174 | 2004-07-17 17:05:14 +1000 | [diff] [blame] | 126 | } |
Darren Tucker | b5d5ee1 | 2009-08-17 09:40:00 +1000 | [diff] [blame] | 127 | # endif /* CUSTOM_SYS_AUTH_GET_LASTLOGIN_MSG */ |
Darren Tucker | 0999174 | 2004-07-17 17:05:14 +1000 | [diff] [blame] | 128 | #endif /* NO_SSH_LASTLOG */ |
| 129 | } |
| 130 | |
| 131 | /* |
Damien Miller | 469954d | 2003-06-18 20:25:33 +1000 | [diff] [blame] | 132 | * Records that the user has logged in. I wish these parts of operating |
| 133 | * systems were more standardized. |
Damien Miller | 5428f64 | 1999-11-25 11:54:57 +1100 | [diff] [blame] | 134 | */ |
Damien Miller | 4af5130 | 2000-04-16 11:18:38 +1000 | [diff] [blame] | 135 | void |
Darren Tucker | 3f9fdc7 | 2004-06-22 12:56:01 +1000 | [diff] [blame] | 136 | record_login(pid_t pid, const char *tty, const char *user, uid_t uid, |
Damien Miller | 9096740 | 2006-03-26 14:07:26 +1100 | [diff] [blame] | 137 | const char *host, struct sockaddr *addr, socklen_t addrlen) |
Damien Miller | d4a8b7e | 1999-10-27 13:42:43 +1000 | [diff] [blame] | 138 | { |
Ben Lindstrom | 78ffe26 | 2004-02-27 03:01:19 +0000 | [diff] [blame] | 139 | struct logininfo *li; |
Damien Miller | d4a8b7e | 1999-10-27 13:42:43 +1000 | [diff] [blame] | 140 | |
Darren Tucker | 0999174 | 2004-07-17 17:05:14 +1000 | [diff] [blame] | 141 | /* save previous login details before writing new */ |
| 142 | store_lastlog_message(user, uid); |
| 143 | |
Darren Tucker | 3f9fdc7 | 2004-06-22 12:56:01 +1000 | [diff] [blame] | 144 | li = login_alloc_entry(pid, user, host, tty); |
Ben Lindstrom | 78ffe26 | 2004-02-27 03:01:19 +0000 | [diff] [blame] | 145 | login_set_addr(li, addr, addrlen); |
| 146 | login_login(li); |
| 147 | login_free_entry(li); |
Damien Miller | d4a8b7e | 1999-10-27 13:42:43 +1000 | [diff] [blame] | 148 | } |
Damien Miller | 95def09 | 1999-11-25 00:26:21 +1100 | [diff] [blame] | 149 | |
Ben Lindstrom | 97c677d | 2001-05-08 20:33:05 +0000 | [diff] [blame] | 150 | #ifdef LOGIN_NEEDS_UTMPX |
| 151 | void |
| 152 | record_utmp_only(pid_t pid, const char *ttyname, const char *user, |
Damien Miller | e3b60b5 | 2006-07-10 21:08:03 +1000 | [diff] [blame] | 153 | const char *host, struct sockaddr *addr, socklen_t addrlen) |
Ben Lindstrom | 97c677d | 2001-05-08 20:33:05 +0000 | [diff] [blame] | 154 | { |
Ben Lindstrom | 78ffe26 | 2004-02-27 03:01:19 +0000 | [diff] [blame] | 155 | struct logininfo *li; |
Ben Lindstrom | 97c677d | 2001-05-08 20:33:05 +0000 | [diff] [blame] | 156 | |
Ben Lindstrom | 78ffe26 | 2004-02-27 03:01:19 +0000 | [diff] [blame] | 157 | li = login_alloc_entry(pid, user, host, ttyname); |
| 158 | login_set_addr(li, addr, addrlen); |
| 159 | login_utmp_only(li); |
| 160 | login_free_entry(li); |
Ben Lindstrom | 97c677d | 2001-05-08 20:33:05 +0000 | [diff] [blame] | 161 | } |
| 162 | #endif |
| 163 | |
Damien Miller | 95def09 | 1999-11-25 00:26:21 +1100 | [diff] [blame] | 164 | /* Records that the user has logged out. */ |
Damien Miller | 4af5130 | 2000-04-16 11:18:38 +1000 | [diff] [blame] | 165 | void |
Darren Tucker | 3f9fdc7 | 2004-06-22 12:56:01 +1000 | [diff] [blame] | 166 | record_logout(pid_t pid, const char *tty, const char *user) |
Damien Miller | d4a8b7e | 1999-10-27 13:42:43 +1000 | [diff] [blame] | 167 | { |
Ben Lindstrom | 78ffe26 | 2004-02-27 03:01:19 +0000 | [diff] [blame] | 168 | struct logininfo *li; |
andre | 2ff7b5d | 2000-06-03 14:57:40 +0000 | [diff] [blame] | 169 | |
Darren Tucker | 3f9fdc7 | 2004-06-22 12:56:01 +1000 | [diff] [blame] | 170 | li = login_alloc_entry(pid, user, NULL, tty); |
Ben Lindstrom | 78ffe26 | 2004-02-27 03:01:19 +0000 | [diff] [blame] | 171 | login_logout(li); |
| 172 | login_free_entry(li); |
Damien Miller | d4a8b7e | 1999-10-27 13:42:43 +1000 | [diff] [blame] | 173 | } |