1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
|
/*
* Copyright 1993 OpenVision Technologies, Inc., All Rights Reserved
*
* $Header$
*/
#if !defined(lint) && !defined(__CODECENTER__)
static char *rcsid = "$Header$";
#endif
#include "k5-int.h"
#include <krb5/kdb.h>
#include <ctype.h>
#include "adb.h"
/* for strcasecmp */
#include <string.h>
#include "server_internal.h"
kadm5_ret_t
adb_policy_init(kadm5_server_handle_t handle)
{
osa_adb_ret_t ret;
if(handle->policy_db == (osa_adb_policy_t) NULL)
if((ret = osa_adb_open_policy(&handle->policy_db,
&handle->params)) != OSA_ADB_OK)
return ret;
return KADM5_OK;
}
kadm5_ret_t
adb_policy_close(kadm5_server_handle_t handle)
{
osa_adb_ret_t ret;
if(handle->policy_db != (osa_adb_policy_t) NULL)
if((ret = osa_adb_close_policy(handle->policy_db)) != OSA_ADB_OK)
return ret;
handle->policy_db = NULL;
return KADM5_OK;
}
/* some of this is stolen from gatekeeper ... */
kadm5_ret_t
passwd_check(kadm5_server_handle_t handle,
char *password, int use_policy, kadm5_policy_ent_t pol,
krb5_principal principal)
{
int nupper = 0,
nlower = 0,
ndigit = 0,
npunct = 0,
nspec = 0;
char c, *s;
if(use_policy) {
if(strlen(password) < pol->pw_min_length)
return KADM5_PASS_Q_TOOSHORT;
s = password;
while ((c = *s++)) {
if (islower(c)) {
nlower = 1;
continue;
}
else if (isupper(c)) {
nupper = 1;
continue;
} else if (isdigit(c)) {
ndigit = 1;
continue;
} else if (ispunct(c)) {
npunct = 1;
continue;
} else {
nspec = 1;
continue;
}
}
if ((nupper + nlower + ndigit + npunct + nspec) < pol->pw_min_classes)
return KADM5_PASS_Q_CLASS;
if((find_word(password) == KADM5_OK))
return KADM5_PASS_Q_DICT;
else {
char *cp;
int c, n = krb5_princ_size(handle->context, principal);
cp = krb5_princ_realm(handle->context, principal)->data;
if (strcasecmp(cp, password) == 0)
return KADM5_PASS_Q_DICT;
for (c = 0; c < n ; c++) {
cp = krb5_princ_component(handle->context, principal, c)->data;
if (strcasecmp(cp, password) == 0)
return KADM5_PASS_Q_DICT;
}
return KADM5_OK;
}
} else {
if (strlen(password) < 1)
return KADM5_PASS_Q_TOOSHORT;
}
return KADM5_OK;
}
|
