blob: 3fdf09a3a0db2800cfa526e4355f362de5be2737 [file] [log] [blame]
Damien Miller57c30112006-03-26 14:24:48 +11001/* $OpenBSD: auth2-none.c,v 1.10 2006/03/25 13:17:01 djm Exp $ */
Ben Lindstrom855bf3a2002-06-06 20:27:55 +00002/*
3 * Copyright (c) 2000 Markus Friedl. All rights reserved.
4 *
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that the following conditions
7 * are met:
8 * 1. Redistributions of source code must retain the above copyright
9 * notice, this list of conditions and the following disclaimer.
10 * 2. Redistributions in binary form must reproduce the above copyright
11 * notice, this list of conditions and the following disclaimer in the
12 * documentation and/or other materials provided with the distribution.
13 *
14 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
15 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
16 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
17 * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
18 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
19 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
20 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
21 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
22 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
23 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
24 */
25
26#include "includes.h"
Damien Millerf17883e2006-03-15 11:45:54 +110027
28#include <sys/types.h>
29#include <sys/stat.h>
Ben Lindstrom855bf3a2002-06-06 20:27:55 +000030
31#include "auth.h"
32#include "xmalloc.h"
33#include "packet.h"
34#include "log.h"
35#include "servconf.h"
36#include "atomicio.h"
37#include "compat.h"
38#include "ssh2.h"
39#include "monitor_wrap.h"
40
41/* import */
42extern ServerOptions options;
43
44/* "none" is allowed only one time */
45static int none_enabled = 1;
46
47char *
48auth2_read_banner(void)
49{
50 struct stat st;
51 char *banner = NULL;
Darren Tucker1f8311c2004-05-13 16:39:33 +100052 size_t len, n;
Ben Lindstrom855bf3a2002-06-06 20:27:55 +000053 int fd;
54
55 if ((fd = open(options.banner, O_RDONLY)) == -1)
56 return (NULL);
57 if (fstat(fd, &st) == -1) {
58 close(fd);
59 return (NULL);
60 }
Darren Tucker1f8311c2004-05-13 16:39:33 +100061 if (st.st_size > 1*1024*1024) {
62 close(fd);
63 return (NULL);
64 }
65
66 len = (size_t)st.st_size; /* truncate */
Ben Lindstrom855bf3a2002-06-06 20:27:55 +000067 banner = xmalloc(len + 1);
68 n = atomicio(read, fd, banner, len);
69 close(fd);
70
71 if (n != len) {
Ben Lindstromeec16fc2002-07-04 00:06:15 +000072 xfree(banner);
Ben Lindstrom855bf3a2002-06-06 20:27:55 +000073 return (NULL);
74 }
75 banner[n] = '\0';
Ben Lindstromcb72e4f2002-06-21 00:41:51 +000076
Ben Lindstrom855bf3a2002-06-06 20:27:55 +000077 return (banner);
78}
79
Darren Tucker77fc29e2004-09-11 23:07:03 +100080void
81userauth_send_banner(const char *msg)
82{
83 if (datafellows & SSH_BUG_BANNER)
84 return;
85
86 packet_start(SSH2_MSG_USERAUTH_BANNER);
87 packet_put_cstring(msg);
88 packet_put_cstring(""); /* language, unused */
89 packet_send();
90 debug("%s: sent", __func__);
91}
92
Ben Lindstrom855bf3a2002-06-06 20:27:55 +000093static void
94userauth_banner(void)
95{
96 char *banner = NULL;
97
98 if (options.banner == NULL || (datafellows & SSH_BUG_BANNER))
99 return;
100
101 if ((banner = PRIVSEP(auth2_read_banner())) == NULL)
102 goto done;
Darren Tucker77fc29e2004-09-11 23:07:03 +1000103 userauth_send_banner(banner);
Ben Lindstrom855bf3a2002-06-06 20:27:55 +0000104
Ben Lindstrom855bf3a2002-06-06 20:27:55 +0000105done:
106 if (banner)
107 xfree(banner);
Ben Lindstrom855bf3a2002-06-06 20:27:55 +0000108}
109
110static int
111userauth_none(Authctxt *authctxt)
112{
113 none_enabled = 0;
114 packet_check_eom();
115 userauth_banner();
116#ifdef HAVE_CYGWIN
117 if (check_nt_auth(1, authctxt->pw) == 0)
Damien Miller47656792004-09-11 22:42:09 +1000118 return (0);
Ben Lindstrom855bf3a2002-06-06 20:27:55 +0000119#endif
Damien Miller856f0be2003-09-03 07:32:45 +1000120 if (options.password_authentication)
Darren Tucker4b609662003-08-03 00:05:01 +1000121 return (PRIVSEP(auth_password(authctxt, "")));
122 return (0);
Ben Lindstrom855bf3a2002-06-06 20:27:55 +0000123}
124
125Authmethod method_none = {
126 "none",
127 userauth_none,
128 &none_enabled
129};