660ac303f0
The loadable sesman authentication modules use different types for the authentication handle returned from auth_userpass(). The PAM module uses a pointer, and the other modules use (effectively) a boolean. Within sesman itself, a long or tbus (intptr_t) is used. This PR replaces all of these types with a pointer to an incomplete type. Consequently:- - A single better-labelled type is used it all places within sesman so it's more obvious what's being handled. - There is no need to cast the authentication handle within the PAM module to a long and back again. - The compiler can check function signatures between auth.h and the various verify modules.
127 lines
2.9 KiB
C
127 lines
2.9 KiB
C
/**
|
|
* xrdp: A Remote Desktop Protocol server.
|
|
*
|
|
* Copyright (C) Jay Sorg 2004-2012
|
|
*
|
|
* Licensed under the Apache License, Version 2.0 (the "License");
|
|
* you may not use this file except in compliance with the License.
|
|
* You may obtain a copy of the License at
|
|
*
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
*
|
|
* Unless required by applicable law or agreed to in writing, software
|
|
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
* See the License for the specific language governing permissions and
|
|
* limitations under the License.
|
|
*/
|
|
|
|
/**
|
|
*
|
|
* @file auth.h
|
|
* @brief User authentication definitions
|
|
* @author Jay Sorg
|
|
*
|
|
*/
|
|
|
|
#ifndef AUTH_H
|
|
#define AUTH_H
|
|
|
|
|
|
/**
|
|
* Opaque type used to represent an authentication handle
|
|
*/
|
|
struct auth_info;
|
|
|
|
/**
|
|
*
|
|
* @brief Validates user's password
|
|
* @param user user's login name
|
|
* @param pass user's password
|
|
* @param client_ip IP address of connecting client (or ""/NULL if not known)
|
|
* @param[out] errorcode from result
|
|
* @return auth handle on success, NULL on failure
|
|
*
|
|
*/
|
|
struct auth_info *
|
|
auth_userpass(const char *user, const char *pass,
|
|
const char *client_ip, int *errorcode);
|
|
|
|
/**
|
|
*
|
|
* @brief Starts a session
|
|
* @param auth_info. Auth handle created by auth_userpass
|
|
* @param display_num Display number
|
|
* @return 0 on success, 1 on failure
|
|
*
|
|
*/
|
|
int
|
|
auth_start_session(struct auth_info *auth_info, int display_num);
|
|
|
|
/**
|
|
*
|
|
* @brief Stops a session previously started with auth_start_session()
|
|
* @param auth_info. Auth handle created by auth_userpass
|
|
* @return 0 on success, 1 on failure
|
|
*
|
|
*/
|
|
int
|
|
auth_stop_session(struct auth_info *auth_info);
|
|
|
|
/**
|
|
*
|
|
* @brief Deallocates an auth handle and releases all resources
|
|
* @param auth_info. Auth handle created by auth_userpass
|
|
* @return 0 on success, 1 on failure
|
|
*
|
|
*/
|
|
int
|
|
auth_end(struct auth_info *auth_info);
|
|
|
|
/**
|
|
*
|
|
* @brief Sets up the environment for a session started
|
|
* with auth_start_session()
|
|
*
|
|
* This call is only effective for PAM-based environments. It must be made
|
|
* after the context has been switched to the logged-in user.
|
|
*
|
|
* @param auth_info. Auth handle created by auth_userpass
|
|
* @return 0 on success, 1 on failure
|
|
*
|
|
*/
|
|
int
|
|
auth_set_env(struct auth_info *auth_info);
|
|
|
|
|
|
#define AUTH_PWD_CHG_OK 0
|
|
#define AUTH_PWD_CHG_CHANGE 1
|
|
#define AUTH_PWD_CHG_CHANGE_MANDATORY 2
|
|
#define AUTH_PWD_CHG_NOT_NOW 3
|
|
#define AUTH_PWD_CHG_ERROR 4
|
|
|
|
/**
|
|
*
|
|
* @brief WIP - Checks to see if the password for a user needs changing
|
|
*
|
|
* @param user - Username to check
|
|
* @return 0 on success, 1 on failure
|
|
*
|
|
*/
|
|
int
|
|
auth_check_pwd_chg(const char *user);
|
|
|
|
/**
|
|
*
|
|
* @brief WIP - Changes the password for a user
|
|
*
|
|
* @param user Username to check
|
|
* @param newpwd New password for user
|
|
* @return 0 on success, 1 on failure
|
|
*
|
|
*/
|
|
int
|
|
auth_change_pwd(const char *user, const char *newpwd);
|
|
|
|
#endif
|