/*
 * Copyright (c) 1999 Todd C. Miller <Todd.Miller@courtesan.com>
 * All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer.
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in the
 *    documentation and/or other materials provided with the distribution.
 * 3. The name of the author may not be used to endorse or promote products
 *    derived from this software without specific prior written permission.
 *
 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES,
 * INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
 * AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL
 * THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
 * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
 * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS;
 * OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
 * WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR
 * OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF
 * ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 */

#include "config.h"

#ifndef NO_PASSWD

#include <stdio.h>
#ifdef STDC_HEADERS
#include <stdlib.h>
#endif /* STDC_HEADERS */
#ifdef HAVE_UNISTD_H
#include <unistd.h>
#endif /* HAVE_UNISTD_H */
#ifdef HAVE_STRING_H
#include <string.h>
#endif /* HAVE_STRING_H */
#ifdef HAVE_STRINGS_H
#include <strings.h>
#endif /* HAVE_STRINGS_H */
#include <sys/param.h>
#include <sys/types.h>
#include <pwd.h>

#include "sudo.h"
#include "sudo_auth.h"
#include "insults.h"

#ifndef lint
static const char rcsid[] = "$Sudo$";
#endif /* lint */

sudo_auth auth_switch[] = {
#ifdef AUTH_STANDALONE
    AUTH_STANDALONE
#else
#  ifndef WITHOUT_PASSWD
    AUTH_ENTRY(0, "passwd", NULL, NULL, passwd_verify, NULL)
#  endif
#  if defined(HAVE_SECUREWARE) && !defined(WITHOUT_PASSWD)
    AUTH_ENTRY(0, "secureware", secureware_init, NULL, secureware_verify, NULL)
#  endif
#  ifdef HAVE_AFS
    AUTH_ENTRY(1, "afs", NULL, NULL, afs_verify, NULL)
#  endif
#  ifdef HAVE_KERB4
    AUTH_ENTRY(1, "kerb4", kerb4_init, NULL, kerb4_verify, NULL)
#  endif
#  ifdef HAVE_KERB5
    AUTH_ENTRY(1, "kerb5", kerb5_init, NULL, kerb5_verify, NULL)
#  endif
#  if defined(HAVE_SKEY)  || defined(HAVE_OPIE)
    AUTH_ENTRY(1, "rfc1938", NULL, rfc1938_setup, rfc1938_verify, NULL)
#  endif
#endif /* AUTH_STANDALONE */
    AUTH_ENTRY(0, NULL, NULL, NULL, NULL, NULL)
};

int nil_pw;		/* I hate resorting to globals like this... */

void
verify_user()
{
    int counter = TRIES_FOR_PASSWORD + 1;
    int status, success = AUTH_FAILURE;
    char *p;
    sudo_auth *auth;

    /* Initialize auth methods and unconfigure the method if necessary. */
    for (auth = auth_switch; auth->name; auth++) {
	if (auth->init && auth->configured) {
	    if (auth->need_root)
		set_perms(PERM_ROOT, 0);

	    status = (auth->init)(sudo_user.pw, &user_prompt, &auth->data);
	    if (status == AUTH_FAILURE)
		auth->configured = 0;
	    else if (status == AUTH_FATAL)	/* XXX log */
		exit(1);		/* assume error msg already printed */

	    if (auth->need_root)
		set_perms(PERM_USER, 0);
	}
    }

    while (--counter) {
	/* Do any per-method setup and unconfigure the method if needed */
	for (auth = auth_switch; auth->name; auth++) {
	    if (auth->setup && auth->configured) {
		if (auth->need_root)
		    set_perms(PERM_ROOT, 0);

		status = (auth->setup)(sudo_user.pw, &user_prompt, &auth->data);
		if (status == AUTH_FAILURE)
		    auth->configured = 0;
		else if (status == AUTH_FATAL)	/* XXX log */
		    exit(1);		/* assume error msg already printed */

		if (auth->need_root)
		    set_perms(PERM_USER, 0);
	    }
	}

	/* Get the password unless the auth function will do it for us */
	nil_pw = 0;
#if defined(AUTH_STANDALONE) && !defined(AUTH_STANDALONE_GETPASS)
	p = prompt;
#else
	p = (char *) tgetpass(user_prompt, PASSWORD_TIMEOUT * 60, 1);
	if (!p || *p == '\0')
	    nil_pw = 1;
#endif /* AUTH_STANDALONE */

	/* Call authentication functions. */
	for (auth = auth_switch; auth->name; auth++) {
	    if (!auth->configured)
		continue;

	    if (auth->need_root)
		set_perms(PERM_ROOT, 0);

	    success = auth->status = (auth->verify)(sudo_user.pw, p,
		&auth->data);

	    if (auth->need_root)
		set_perms(PERM_USER, 0);

	    if (auth->status != AUTH_FAILURE)
		goto cleanup;
	}

	/* Exit loop on nil password, but give it a chance to match first. */
	if (nil_pw) {
	    if (counter == TRIES_FOR_PASSWORD)
		exit(1);
	    else
		break;
	}

	pass_warn(stderr);
    }

cleanup:
    /* Call cleanup routines. */
    for (auth = auth_switch; auth->name; auth++) {
	if (auth->cleanup && auth->configured) {
	    if (auth->need_root)
		set_perms(PERM_ROOT, 0);

	    status = (auth->cleanup)(sudo_user.pw, auth->status, &auth->data);
	    if (status == AUTH_FATAL)	/* XXX log */
		exit(1);		/* assume error msg already printed */

	    if (auth->need_root)
		set_perms(PERM_USER, 0);
	}
    }

    switch (success) {
	case AUTH_SUCCESS:
	    return;
	case AUTH_FAILURE:
	    log_error(NO_MAIL, "%d incorrect password attempt%s",
		TRIES_FOR_PASSWORD - counter,
		(TRIES_FOR_PASSWORD - counter == 1) ? "" : "s");
	case AUTH_FATAL:
	    exit(1);
    }
}

void
pass_warn(fp)
    FILE *fp;
{

#ifdef USE_INSULTS
    (void) fprintf(fp, "%s\n", INSULT);
#else
    (void) fprintf(fp, "%s\n", INCORRECT_PASSWORD);
#endif /* USE_INSULTS */
}

#endif /* NO_PASSWD */