1  /*
       2   * Redistribution and use in source and binary forms, with or without
       3   * modification, are permitted provided that the following conditions
       4   * are met:
       5   * 1. Redistributions of source code must retain the above copyright
       6   *    notice, and the entire permission notice in its entirety,
       7   *    including the disclaimer of warranties.
       8   * 2. Redistributions in binary form must reproduce the above copyright
       9   *    notice, this list of conditions and the following disclaimer in the
      10   *    documentation and/or other materials provided with the distribution.
      11   * 3. The name of the author may not be used to endorse or promote
      12   *    products derived from this software without specific prior
      13   *    written permission.
      14   *
      15   * ALTERNATIVELY, this product may be distributed under the terms of
      16   * the GNU Public License, in which case the provisions of the GPL are
      17   * required INSTEAD OF the above restrictions.  (This clause is
      18   * necessary due to a potential bad interaction between the GPL and
      19   * the restrictions contained in a BSD-style copyright.)
      20   *
      21   * THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED
      22   * WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
      23   * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
      24   * DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT,
      25   * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
      26   * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
      27   * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
      28   * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
      29   * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
      30   * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
      31   * OF THE POSSIBILITY OF SUCH DAMAGE.
      32   */
      33  
      34  /*
      35    test case:
      36  
      37    Check the following line in access.conf:
      38    -:ALL EXCEPT (tstpamaccess):LOCAL
      39  
      40    User is member of group tstpamaccess, pam_authenticate should pass.
      41  */
      42  
      43  #ifdef HAVE_CONFIG_H
      44  #include <config.h>
      45  #endif
      46  
      47  #include <stdio.h>
      48  #include <stdlib.h>
      49  #include <string.h>
      50  #include <security/pam_appl.h>
      51  
      52  /* A conversation function which uses an internally-stored value for
      53     the responses. */
      54  static int
      55  fake_conv (int num_msg, const struct pam_message **msgm UNUSED,
      56  	   struct pam_response **response, void *appdata_ptr UNUSED)
      57  {
      58    struct pam_response *reply;
      59    int count;
      60  
      61    /* Sanity test. */
      62    if (num_msg <= 0)
      63      return PAM_CONV_ERR;
      64  
      65    /* Allocate memory for the responses. */
      66    reply = calloc (num_msg, sizeof (struct pam_response));
      67    if (reply == NULL)
      68      return PAM_CONV_ERR;
      69  
      70    /* Each prompt elicits the same response. */
      71    for (count = 0; count < num_msg; ++count)
      72      {
      73        reply[count].resp_retcode = 0;
      74        reply[count].resp = strdup ("!!");
      75      }
      76  
      77    /* Set the pointers in the response structure and return. */
      78    *response = reply;
      79    return PAM_SUCCESS;
      80  }
      81  
      82  static struct pam_conv conv = {
      83      fake_conv,
      84      NULL
      85  };
      86  
      87  int
      88  main(int argc, char *argv[])
      89  {
      90    pam_handle_t *pamh = NULL;
      91    const char *user="tstpamaccess1";
      92    int retval;
      93    int debug = 0;
      94  
      95    if (argc > 1 && strcmp (argv[1], "-d") == 0)
      96      debug = 1;
      97  
      98    retval = pam_start("tst-pam_access1", user, &conv, &pamh);
      99    if (retval != PAM_SUCCESS)
     100      {
     101        if (debug)
     102  	fprintf (stderr, "pam_access1: pam_start returned %d\n", retval);
     103        return 1;
     104      }
     105  
     106    retval = pam_set_item (pamh, PAM_TTY, "/dev/tty1");
     107    if (retval != PAM_SUCCESS)
     108      {
     109        if (debug)
     110  	fprintf (stderr,
     111  		 "pam_access1: pam_set_item(PAM_TTY) returned %d\n",
     112  		 retval);
     113        return 1;
     114      }
     115  
     116    retval = pam_authenticate (pamh, 0);
     117    if (retval != PAM_SUCCESS)
     118      {
     119        if (debug)
     120  	fprintf (stderr, "pam_access1: pam_authenticate returned %d\n", retval);
     121        return 1;
     122      }
     123  
     124    retval = pam_end (pamh,retval);
     125    if (retval != PAM_SUCCESS)
     126      {
     127        if (debug)
     128  	fprintf (stderr, "pam_access1: pam_end returned %d\n", retval);
     129        return 1;
     130      }
     131    return 0;
     132  }