Damien Miller | a256c8d | 2011-01-11 17:20:05 +1100 | [diff] [blame] | 1 | /* $OpenBSD: sshlogin.c,v 1.27 2011/01/11 06:06:09 djm Exp $ */ |
Damien Miller | d4a8b7e | 1999-10-27 13:42:43 +1000 | [diff] [blame] | 2 | /* |
Damien Miller | 95def09 | 1999-11-25 00:26:21 +1100 | [diff] [blame] | 3 | * Author: Tatu Ylonen <ylo@cs.hut.fi> |
Damien Miller | 95def09 | 1999-11-25 00:26:21 +1100 | [diff] [blame] | 4 | * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland |
| 5 | * All rights reserved |
Damien Miller | 95def09 | 1999-11-25 00:26:21 +1100 | [diff] [blame] | 6 | * This file performs some of the things login(1) normally does. We cannot |
| 7 | * easily use something like login -p -h host -f user, because there are |
| 8 | * several different logins around, and it is hard to determined what kind of |
| 9 | * login the current system has. Also, we want to be able to execute commands |
| 10 | * on a tty. |
Damien Miller | 4af5130 | 2000-04-16 11:18:38 +1000 | [diff] [blame] | 11 | * |
Damien Miller | e4340be | 2000-09-16 13:29:08 +1100 | [diff] [blame] | 12 | * As far as I am concerned, the code I have written for this software |
| 13 | * can be used freely for any purpose. Any derived versions of this |
| 14 | * software must be clearly marked as such, and if the derived work is |
| 15 | * incompatible with the protocol description in the RFC file, it must be |
| 16 | * called by a name other than "ssh" or "Secure Shell". |
| 17 | * |
| 18 | * Copyright (c) 1999 Theo de Raadt. All rights reserved. |
| 19 | * Copyright (c) 1999 Markus Friedl. All rights reserved. |
| 20 | * |
| 21 | * Redistribution and use in source and binary forms, with or without |
| 22 | * modification, are permitted provided that the following conditions |
| 23 | * are met: |
| 24 | * 1. Redistributions of source code must retain the above copyright |
| 25 | * notice, this list of conditions and the following disclaimer. |
| 26 | * 2. Redistributions in binary form must reproduce the above copyright |
| 27 | * notice, this list of conditions and the following disclaimer in the |
| 28 | * documentation and/or other materials provided with the distribution. |
| 29 | * |
| 30 | * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR |
| 31 | * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES |
| 32 | * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. |
| 33 | * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, |
| 34 | * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT |
| 35 | * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, |
| 36 | * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY |
| 37 | * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT |
| 38 | * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF |
| 39 | * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. |
Damien Miller | 95def09 | 1999-11-25 00:26:21 +1100 | [diff] [blame] | 40 | */ |
Damien Miller | d4a8b7e | 1999-10-27 13:42:43 +1000 | [diff] [blame] | 41 | |
| 42 | #include "includes.h" |
Damien Miller | d4a8b7e | 1999-10-27 13:42:43 +1000 | [diff] [blame] | 43 | |
Damien Miller | e6b3b61 | 2006-07-24 14:01:23 +1000 | [diff] [blame] | 44 | #include <sys/types.h> |
Damien Miller | 8dbffe7 | 2006-08-05 11:02:17 +1000 | [diff] [blame] | 45 | #include <sys/param.h> |
Damien Miller | d783435 | 2006-08-05 12:39:39 +1000 | [diff] [blame] | 46 | #include <sys/socket.h> |
Damien Miller | e6b3b61 | 2006-07-24 14:01:23 +1000 | [diff] [blame] | 47 | |
Damien Miller | 36cbe41 | 2006-08-05 12:54:24 +1000 | [diff] [blame] | 48 | #include <netinet/in.h> |
| 49 | |
Darren Tucker | 3997249 | 2006-07-12 22:22:46 +1000 | [diff] [blame] | 50 | #include <errno.h> |
Damien Miller | 57cf638 | 2006-07-10 21:13:46 +1000 | [diff] [blame] | 51 | #include <fcntl.h> |
Damien Miller | d783435 | 2006-08-05 12:39:39 +1000 | [diff] [blame] | 52 | #include <stdarg.h> |
Damien Miller | a7a73ee | 2006-08-05 11:37:59 +1000 | [diff] [blame] | 53 | #include <stdio.h> |
Damien Miller | e3476ed | 2006-07-24 14:13:33 +1000 | [diff] [blame] | 54 | #include <string.h> |
Damien Miller | 5598b4f | 2006-07-24 14:09:40 +1000 | [diff] [blame] | 55 | #include <time.h> |
Damien Miller | e6b3b61 | 2006-07-24 14:01:23 +1000 | [diff] [blame] | 56 | #include <unistd.h> |
Damien Miller | 57cf638 | 2006-07-10 21:13:46 +1000 | [diff] [blame] | 57 | |
andre | 2ff7b5d | 2000-06-03 14:57:40 +0000 | [diff] [blame] | 58 | #include "loginrec.h" |
Darren Tucker | 0999174 | 2004-07-17 17:05:14 +1000 | [diff] [blame] | 59 | #include "log.h" |
| 60 | #include "buffer.h" |
| 61 | #include "servconf.h" |
| 62 | |
| 63 | extern Buffer loginmsg; |
| 64 | extern ServerOptions options; |
Damien Miller | 2f6a0ad | 2000-05-31 11:20:11 +1000 | [diff] [blame] | 65 | |
Damien Miller | 5428f64 | 1999-11-25 11:54:57 +1100 | [diff] [blame] | 66 | /* |
| 67 | * Returns the time when the user last logged in. Returns 0 if the |
| 68 | * information is not available. This must be called before record_login. |
| 69 | * The host the user logged in from will be returned in buf. |
| 70 | */ |
Damien Miller | a1690d0 | 2006-03-26 14:27:35 +1100 | [diff] [blame] | 71 | time_t |
Damien Miller | 95def09 | 1999-11-25 00:26:21 +1100 | [diff] [blame] | 72 | get_last_login_time(uid_t uid, const char *logname, |
Damien Miller | a1690d0 | 2006-03-26 14:27:35 +1100 | [diff] [blame] | 73 | char *buf, size_t bufsize) |
Damien Miller | d4a8b7e | 1999-10-27 13:42:43 +1000 | [diff] [blame] | 74 | { |
Ben Lindstrom | 78ffe26 | 2004-02-27 03:01:19 +0000 | [diff] [blame] | 75 | struct logininfo li; |
Damien Miller | d4a8b7e | 1999-10-27 13:42:43 +1000 | [diff] [blame] | 76 | |
Ben Lindstrom | 78ffe26 | 2004-02-27 03:01:19 +0000 | [diff] [blame] | 77 | login_get_lastlog(&li, uid); |
| 78 | strlcpy(buf, li.hostname, bufsize); |
Damien Miller | a1690d0 | 2006-03-26 14:27:35 +1100 | [diff] [blame] | 79 | return (time_t)li.tv_sec; |
Damien Miller | d4a8b7e | 1999-10-27 13:42:43 +1000 | [diff] [blame] | 80 | } |
| 81 | |
Damien Miller | 5428f64 | 1999-11-25 11:54:57 +1100 | [diff] [blame] | 82 | /* |
Darren Tucker | 0999174 | 2004-07-17 17:05:14 +1000 | [diff] [blame] | 83 | * Generate and store last login message. This must be done before |
| 84 | * login_login() is called and lastlog is updated. |
| 85 | */ |
Darren Tucker | 133b757 | 2004-08-12 22:50:03 +1000 | [diff] [blame] | 86 | static void |
Darren Tucker | 0999174 | 2004-07-17 17:05:14 +1000 | [diff] [blame] | 87 | store_lastlog_message(const char *user, uid_t uid) |
| 88 | { |
Darren Tucker | a422d97 | 2009-05-04 12:52:47 +1000 | [diff] [blame] | 89 | #ifndef NO_SSH_LASTLOG |
Darren Tucker | 0999174 | 2004-07-17 17:05:14 +1000 | [diff] [blame] | 90 | char *time_string, hostname[MAXHOSTNAMELEN] = "", buf[512]; |
| 91 | time_t last_login_time; |
| 92 | |
Darren Tucker | 0999174 | 2004-07-17 17:05:14 +1000 | [diff] [blame] | 93 | if (!options.print_lastlog) |
| 94 | return; |
| 95 | |
Darren Tucker | b5d5ee1 | 2009-08-17 09:40:00 +1000 | [diff] [blame] | 96 | # ifdef CUSTOM_SYS_AUTH_GET_LASTLOGIN_MSG |
| 97 | time_string = sys_auth_get_lastlogin_msg(user, uid); |
| 98 | if (time_string != NULL) { |
| 99 | buffer_append(&loginmsg, time_string, strlen(time_string)); |
Darren Tucker | f60845f | 2013-06-02 08:07:31 +1000 | [diff] [blame] | 100 | free(time_string); |
Darren Tucker | b5d5ee1 | 2009-08-17 09:40:00 +1000 | [diff] [blame] | 101 | } |
| 102 | # else |
Darren Tucker | 0999174 | 2004-07-17 17:05:14 +1000 | [diff] [blame] | 103 | last_login_time = get_last_login_time(uid, user, hostname, |
| 104 | sizeof(hostname)); |
| 105 | |
| 106 | if (last_login_time != 0) { |
| 107 | time_string = ctime(&last_login_time); |
Damien Miller | 14b017d | 2007-09-17 16:09:15 +1000 | [diff] [blame] | 108 | time_string[strcspn(time_string, "\n")] = '\0'; |
Darren Tucker | 0999174 | 2004-07-17 17:05:14 +1000 | [diff] [blame] | 109 | if (strcmp(hostname, "") == 0) |
| 110 | snprintf(buf, sizeof(buf), "Last login: %s\r\n", |
| 111 | time_string); |
| 112 | else |
| 113 | snprintf(buf, sizeof(buf), "Last login: %s from %s\r\n", |
| 114 | time_string, hostname); |
| 115 | buffer_append(&loginmsg, buf, strlen(buf)); |
| 116 | } |
Darren Tucker | b5d5ee1 | 2009-08-17 09:40:00 +1000 | [diff] [blame] | 117 | # endif /* CUSTOM_SYS_AUTH_GET_LASTLOGIN_MSG */ |
Darren Tucker | 0999174 | 2004-07-17 17:05:14 +1000 | [diff] [blame] | 118 | #endif /* NO_SSH_LASTLOG */ |
| 119 | } |
| 120 | |
| 121 | /* |
Damien Miller | 469954d | 2003-06-18 20:25:33 +1000 | [diff] [blame] | 122 | * Records that the user has logged in. I wish these parts of operating |
| 123 | * systems were more standardized. |
Damien Miller | 5428f64 | 1999-11-25 11:54:57 +1100 | [diff] [blame] | 124 | */ |
Damien Miller | 4af5130 | 2000-04-16 11:18:38 +1000 | [diff] [blame] | 125 | void |
Darren Tucker | 3f9fdc7 | 2004-06-22 12:56:01 +1000 | [diff] [blame] | 126 | record_login(pid_t pid, const char *tty, const char *user, uid_t uid, |
Damien Miller | 9096740 | 2006-03-26 14:07:26 +1100 | [diff] [blame] | 127 | const char *host, struct sockaddr *addr, socklen_t addrlen) |
Damien Miller | d4a8b7e | 1999-10-27 13:42:43 +1000 | [diff] [blame] | 128 | { |
Ben Lindstrom | 78ffe26 | 2004-02-27 03:01:19 +0000 | [diff] [blame] | 129 | struct logininfo *li; |
Damien Miller | d4a8b7e | 1999-10-27 13:42:43 +1000 | [diff] [blame] | 130 | |
Darren Tucker | 0999174 | 2004-07-17 17:05:14 +1000 | [diff] [blame] | 131 | /* save previous login details before writing new */ |
| 132 | store_lastlog_message(user, uid); |
| 133 | |
Darren Tucker | 3f9fdc7 | 2004-06-22 12:56:01 +1000 | [diff] [blame] | 134 | li = login_alloc_entry(pid, user, host, tty); |
Ben Lindstrom | 78ffe26 | 2004-02-27 03:01:19 +0000 | [diff] [blame] | 135 | login_set_addr(li, addr, addrlen); |
| 136 | login_login(li); |
| 137 | login_free_entry(li); |
Damien Miller | d4a8b7e | 1999-10-27 13:42:43 +1000 | [diff] [blame] | 138 | } |
Damien Miller | 95def09 | 1999-11-25 00:26:21 +1100 | [diff] [blame] | 139 | |
Ben Lindstrom | 97c677d | 2001-05-08 20:33:05 +0000 | [diff] [blame] | 140 | #ifdef LOGIN_NEEDS_UTMPX |
| 141 | void |
| 142 | record_utmp_only(pid_t pid, const char *ttyname, const char *user, |
Damien Miller | e3b60b5 | 2006-07-10 21:08:03 +1000 | [diff] [blame] | 143 | const char *host, struct sockaddr *addr, socklen_t addrlen) |
Ben Lindstrom | 97c677d | 2001-05-08 20:33:05 +0000 | [diff] [blame] | 144 | { |
Ben Lindstrom | 78ffe26 | 2004-02-27 03:01:19 +0000 | [diff] [blame] | 145 | struct logininfo *li; |
Ben Lindstrom | 97c677d | 2001-05-08 20:33:05 +0000 | [diff] [blame] | 146 | |
Ben Lindstrom | 78ffe26 | 2004-02-27 03:01:19 +0000 | [diff] [blame] | 147 | li = login_alloc_entry(pid, user, host, ttyname); |
| 148 | login_set_addr(li, addr, addrlen); |
| 149 | login_utmp_only(li); |
| 150 | login_free_entry(li); |
Ben Lindstrom | 97c677d | 2001-05-08 20:33:05 +0000 | [diff] [blame] | 151 | } |
| 152 | #endif |
| 153 | |
Damien Miller | 95def09 | 1999-11-25 00:26:21 +1100 | [diff] [blame] | 154 | /* Records that the user has logged out. */ |
Damien Miller | 4af5130 | 2000-04-16 11:18:38 +1000 | [diff] [blame] | 155 | void |
Darren Tucker | 3f9fdc7 | 2004-06-22 12:56:01 +1000 | [diff] [blame] | 156 | record_logout(pid_t pid, const char *tty, const char *user) |
Damien Miller | d4a8b7e | 1999-10-27 13:42:43 +1000 | [diff] [blame] | 157 | { |
Ben Lindstrom | 78ffe26 | 2004-02-27 03:01:19 +0000 | [diff] [blame] | 158 | struct logininfo *li; |
andre | 2ff7b5d | 2000-06-03 14:57:40 +0000 | [diff] [blame] | 159 | |
Darren Tucker | 3f9fdc7 | 2004-06-22 12:56:01 +1000 | [diff] [blame] | 160 | li = login_alloc_entry(pid, user, NULL, tty); |
Ben Lindstrom | 78ffe26 | 2004-02-27 03:01:19 +0000 | [diff] [blame] | 161 | login_logout(li); |
| 162 | login_free_entry(li); |
Damien Miller | d4a8b7e | 1999-10-27 13:42:43 +1000 | [diff] [blame] | 163 | } |