getpwent.c revision 1.21 1 1.21 lukem /* $NetBSD: getpwent.c,v 1.21 1997/05/22 10:38:11 lukem Exp $ */
2 1.12 cgd
3 1.1 cgd /*
4 1.12 cgd * Copyright (c) 1988, 1993
5 1.12 cgd * The Regents of the University of California. All rights reserved.
6 1.14 phil * Portions Copyright (c) 1994, 1995, Jason Downs. All rights reserved.
7 1.1 cgd *
8 1.1 cgd * Redistribution and use in source and binary forms, with or without
9 1.1 cgd * modification, are permitted provided that the following conditions
10 1.1 cgd * are met:
11 1.1 cgd * 1. Redistributions of source code must retain the above copyright
12 1.1 cgd * notice, this list of conditions and the following disclaimer.
13 1.1 cgd * 2. Redistributions in binary form must reproduce the above copyright
14 1.1 cgd * notice, this list of conditions and the following disclaimer in the
15 1.1 cgd * documentation and/or other materials provided with the distribution.
16 1.1 cgd * 3. All advertising materials mentioning features or use of this software
17 1.1 cgd * must display the following acknowledgement:
18 1.1 cgd * This product includes software developed by the University of
19 1.1 cgd * California, Berkeley and its contributors.
20 1.1 cgd * 4. Neither the name of the University nor the names of its contributors
21 1.1 cgd * may be used to endorse or promote products derived from this software
22 1.1 cgd * without specific prior written permission.
23 1.1 cgd *
24 1.1 cgd * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
25 1.1 cgd * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
26 1.1 cgd * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
27 1.1 cgd * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
28 1.1 cgd * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
29 1.1 cgd * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
30 1.1 cgd * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
31 1.1 cgd * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
32 1.1 cgd * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
33 1.1 cgd * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
34 1.1 cgd * SUCH DAMAGE.
35 1.1 cgd */
36 1.1 cgd
37 1.1 cgd #if defined(LIBC_SCCS) && !defined(lint)
38 1.12 cgd #if 0
39 1.12 cgd static char sccsid[] = "@(#)getpwent.c 8.1 (Berkeley) 6/4/93";
40 1.12 cgd #else
41 1.21 lukem static char rcsid[] = "$NetBSD: getpwent.c,v 1.21 1997/05/22 10:38:11 lukem Exp $";
42 1.12 cgd #endif
43 1.1 cgd #endif /* LIBC_SCCS and not lint */
44 1.1 cgd
45 1.1 cgd #include <sys/param.h>
46 1.1 cgd #include <fcntl.h>
47 1.1 cgd #include <db.h>
48 1.1 cgd #include <syslog.h>
49 1.1 cgd #include <pwd.h>
50 1.1 cgd #include <utmp.h>
51 1.1 cgd #include <errno.h>
52 1.1 cgd #include <unistd.h>
53 1.1 cgd #include <stdlib.h>
54 1.1 cgd #include <string.h>
55 1.1 cgd #include <limits.h>
56 1.14 phil #include <netgroup.h>
57 1.4 deraadt #ifdef YP
58 1.14 phil #include <machine/param.h>
59 1.4 deraadt #include <stdio.h>
60 1.4 deraadt #include <rpc/rpc.h>
61 1.4 deraadt #include <rpcsvc/yp_prot.h>
62 1.4 deraadt #include <rpcsvc/ypclnt.h>
63 1.4 deraadt #endif
64 1.1 cgd
65 1.1 cgd static struct passwd _pw_passwd; /* password structure */
66 1.1 cgd static DB *_pw_db; /* password database */
67 1.1 cgd static int _pw_keynum; /* key counter */
68 1.1 cgd static int _pw_stayopen; /* keep fd's open */
69 1.14 phil static int _pw_flags; /* password flags */
70 1.14 phil static int __hashpw __P((DBT *));
71 1.14 phil static int __initdb __P((void));
72 1.14 phil
73 1.14 phil const char __yp_token[] = "__YP!"; /* Let pwd_mkdb pull this in. */
74 1.1 cgd
75 1.4 deraadt #ifdef YP
76 1.14 phil enum _ypmode { YPMODE_NONE, YPMODE_FULL, YPMODE_USER, YPMODE_NETGRP };
77 1.14 phil static enum _ypmode __ypmode;
78 1.14 phil
79 1.4 deraadt static char *__ypcurrent, *__ypdomain;
80 1.14 phil static int __ypcurrentlen;
81 1.14 phil static struct passwd *__ypproto = (struct passwd *)NULL;
82 1.14 phil static int __ypflags;
83 1.4 deraadt static char line[1024];
84 1.14 phil static long prbuf[1024 / sizeof(long)];
85 1.14 phil static DB *__ypexclude = (DB *)NULL;
86 1.14 phil
87 1.14 phil static int __has_yppw __P((void));
88 1.14 phil static int __ypexclude_add __P((const char *));
89 1.14 phil static int __ypexclude_is __P((const char *));
90 1.14 phil static void __ypproto_set __P((void));
91 1.14 phil
92 1.14 phil static int
93 1.14 phil __ypexclude_add(name)
94 1.14 phil const char *name;
95 1.14 phil {
96 1.14 phil DBT key, data;
97 1.14 phil
98 1.14 phil /* initialize the exclusion table if needed. */
99 1.14 phil if(__ypexclude == (DB *)NULL) {
100 1.14 phil __ypexclude = dbopen(NULL, O_RDWR, 600, DB_HASH, NULL);
101 1.14 phil if(__ypexclude == (DB *)NULL)
102 1.14 phil return(1);
103 1.14 phil }
104 1.14 phil
105 1.14 phil /* set up the key */
106 1.14 phil key.data = (char *)name;
107 1.14 phil key.size = strlen(name);
108 1.14 phil
109 1.14 phil /* data is nothing. */
110 1.14 phil data.data = NULL;
111 1.14 phil data.size = 0;
112 1.14 phil
113 1.14 phil /* store it */
114 1.14 phil if((__ypexclude->put)(__ypexclude, &key, &data, 0) == -1)
115 1.14 phil return(1);
116 1.14 phil
117 1.14 phil return(0);
118 1.14 phil }
119 1.14 phil
120 1.14 phil static int
121 1.14 phil __ypexclude_is(name)
122 1.14 phil const char *name;
123 1.14 phil {
124 1.14 phil DBT key, data;
125 1.14 phil
126 1.14 phil if(__ypexclude == (DB *)NULL)
127 1.14 phil return(0); /* nothing excluded */
128 1.14 phil
129 1.14 phil /* set up the key */
130 1.14 phil key.data = (char *)name;
131 1.14 phil key.size = strlen(name);
132 1.14 phil
133 1.14 phil if((__ypexclude->get)(__ypexclude, &key, &data, 0) == 0)
134 1.14 phil return(1); /* excluded */
135 1.14 phil
136 1.14 phil return(0);
137 1.14 phil }
138 1.14 phil
139 1.14 phil static void
140 1.14 phil __ypproto_set()
141 1.14 phil {
142 1.17 lukem char *ptr;
143 1.17 lukem struct passwd *pw = &_pw_passwd;
144 1.14 phil
145 1.14 phil /* make this the new prototype */
146 1.14 phil ptr = (char *)prbuf;
147 1.14 phil
148 1.14 phil /* first allocate the struct. */
149 1.14 phil __ypproto = (struct passwd *)ptr;
150 1.14 phil ptr += sizeof(struct passwd);
151 1.14 phil
152 1.14 phil /* name */
153 1.14 phil if(pw->pw_name && (pw->pw_name)[0]) {
154 1.14 phil ptr = (char *)ALIGN(ptr);
155 1.14 phil bcopy(pw->pw_name, ptr, strlen(pw->pw_name) + 1);
156 1.14 phil __ypproto->pw_name = ptr;
157 1.14 phil ptr += (strlen(pw->pw_name) + 1);
158 1.14 phil } else
159 1.14 phil __ypproto->pw_name = (char *)NULL;
160 1.14 phil
161 1.14 phil /* password */
162 1.14 phil if(pw->pw_passwd && (pw->pw_passwd)[0]) {
163 1.14 phil ptr = (char *)ALIGN(ptr);
164 1.14 phil bcopy(pw->pw_passwd, ptr, strlen(pw->pw_passwd) + 1);
165 1.14 phil __ypproto->pw_passwd = ptr;
166 1.14 phil ptr += (strlen(pw->pw_passwd) + 1);
167 1.14 phil } else
168 1.14 phil __ypproto->pw_passwd = (char *)NULL;
169 1.14 phil
170 1.14 phil /* uid */
171 1.14 phil __ypproto->pw_uid = pw->pw_uid;
172 1.14 phil
173 1.14 phil /* gid */
174 1.14 phil __ypproto->pw_gid = pw->pw_gid;
175 1.14 phil
176 1.14 phil /* change (ignored anyway) */
177 1.14 phil __ypproto->pw_change = pw->pw_change;
178 1.14 phil
179 1.14 phil /* class (ignored anyway) */
180 1.14 phil __ypproto->pw_class = "";
181 1.14 phil
182 1.14 phil /* gecos */
183 1.14 phil if(pw->pw_gecos && (pw->pw_gecos)[0]) {
184 1.14 phil ptr = (char *)ALIGN(ptr);
185 1.14 phil bcopy(pw->pw_gecos, ptr, strlen(pw->pw_gecos) + 1);
186 1.14 phil __ypproto->pw_gecos = ptr;
187 1.14 phil ptr += (strlen(pw->pw_gecos) + 1);
188 1.14 phil } else
189 1.14 phil __ypproto->pw_gecos = (char *)NULL;
190 1.14 phil
191 1.14 phil /* dir */
192 1.14 phil if(pw->pw_dir && (pw->pw_dir)[0]) {
193 1.14 phil ptr = (char *)ALIGN(ptr);
194 1.14 phil bcopy(pw->pw_dir, ptr, strlen(pw->pw_dir) + 1);
195 1.14 phil __ypproto->pw_dir = ptr;
196 1.14 phil ptr += (strlen(pw->pw_dir) + 1);
197 1.14 phil } else
198 1.14 phil __ypproto->pw_dir = (char *)NULL;
199 1.14 phil
200 1.14 phil /* shell */
201 1.14 phil if(pw->pw_shell && (pw->pw_shell)[0]) {
202 1.14 phil ptr = (char *)ALIGN(ptr);
203 1.14 phil bcopy(pw->pw_shell, ptr, strlen(pw->pw_shell) + 1);
204 1.14 phil __ypproto->pw_shell = ptr;
205 1.14 phil ptr += (strlen(pw->pw_shell) + 1);
206 1.14 phil } else
207 1.14 phil __ypproto->pw_shell = (char *)NULL;
208 1.14 phil
209 1.14 phil /* expire (ignored anyway) */
210 1.14 phil __ypproto->pw_expire = pw->pw_expire;
211 1.14 phil
212 1.14 phil /* flags */
213 1.14 phil __ypflags = _pw_flags;
214 1.14 phil }
215 1.4 deraadt
216 1.5 deraadt static int
217 1.5 deraadt __ypparse(pw, s)
218 1.4 deraadt struct passwd *pw;
219 1.4 deraadt char *s;
220 1.4 deraadt {
221 1.19 lukem char *bp, *cp, *ep;
222 1.19 lukem unsigned long id;
223 1.4 deraadt
224 1.14 phil /* since this is currently using strsep(), parse it first */
225 1.4 deraadt bp = s;
226 1.4 deraadt pw->pw_name = strsep(&bp, ":\n");
227 1.4 deraadt pw->pw_passwd = strsep(&bp, ":\n");
228 1.4 deraadt if (!(cp = strsep(&bp, ":\n")))
229 1.4 deraadt return 1;
230 1.19 lukem id = strtoul(cp, &ep, 10);
231 1.21 lukem if (id > UID_MAX || *ep != '\0')
232 1.19 lukem return 1;
233 1.19 lukem pw->pw_uid = (uid_t)id;
234 1.4 deraadt if (!(cp = strsep(&bp, ":\n")))
235 1.13 mycroft return 1;
236 1.19 lukem id = strtoul(cp, &ep, 10);
237 1.21 lukem if (id > GID_MAX || *ep != '\0')
238 1.19 lukem return 1;
239 1.19 lukem pw->pw_gid = (gid_t)id;
240 1.4 deraadt pw->pw_change = 0;
241 1.4 deraadt pw->pw_class = "";
242 1.4 deraadt pw->pw_gecos = strsep(&bp, ":\n");
243 1.4 deraadt pw->pw_dir = strsep(&bp, ":\n");
244 1.4 deraadt pw->pw_shell = strsep(&bp, ":\n");
245 1.4 deraadt pw->pw_expire = 0;
246 1.14 phil
247 1.14 phil /* now let the prototype override, if set. */
248 1.14 phil if(__ypproto != (struct passwd *)NULL) {
249 1.14 phil #ifdef YP_OVERRIDE_PASSWD
250 1.14 phil if(__ypproto->pw_passwd != (char *)NULL)
251 1.14 phil pw->pw_passwd = __ypproto->pw_passwd;
252 1.14 phil #endif
253 1.14 phil if(!(__ypflags & _PASSWORD_NOUID))
254 1.14 phil pw->pw_uid = __ypproto->pw_uid;
255 1.14 phil if(!(__ypflags & _PASSWORD_NOGID))
256 1.14 phil pw->pw_gid = __ypproto->pw_gid;
257 1.14 phil if(__ypproto->pw_gecos != (char *)NULL)
258 1.14 phil pw->pw_gecos = __ypproto->pw_gecos;
259 1.14 phil if(__ypproto->pw_dir != (char *)NULL)
260 1.14 phil pw->pw_dir = __ypproto->pw_dir;
261 1.14 phil if(__ypproto->pw_shell != (char *)NULL)
262 1.14 phil pw->pw_shell = __ypproto->pw_shell;
263 1.14 phil }
264 1.4 deraadt return 0;
265 1.4 deraadt }
266 1.4 deraadt #endif
267 1.4 deraadt
268 1.1 cgd struct passwd *
269 1.1 cgd getpwent()
270 1.1 cgd {
271 1.1 cgd DBT key;
272 1.1 cgd char bf[sizeof(_pw_keynum) + 1];
273 1.4 deraadt #ifdef YP
274 1.13 mycroft char *cp;
275 1.14 phil static char *name = (char *)NULL;
276 1.14 phil const char *user, *host, *dom;
277 1.14 phil int has_yppw;
278 1.4 deraadt #endif
279 1.1 cgd
280 1.1 cgd if (!_pw_db && !__initdb())
281 1.1 cgd return((struct passwd *)NULL);
282 1.1 cgd
283 1.4 deraadt #ifdef YP
284 1.14 phil has_yppw = __has_yppw();
285 1.14 phil
286 1.4 deraadt again:
287 1.14 phil if(has_yppw && (__ypmode != YPMODE_NONE)) {
288 1.4 deraadt char *key, *data;
289 1.4 deraadt int keylen, datalen;
290 1.14 phil int r, s;
291 1.4 deraadt
292 1.4 deraadt if(!__ypdomain) {
293 1.4 deraadt if( _yp_check(&__ypdomain) == 0) {
294 1.14 phil __ypmode = YPMODE_NONE;
295 1.4 deraadt goto again;
296 1.4 deraadt }
297 1.4 deraadt }
298 1.14 phil switch(__ypmode) {
299 1.14 phil case YPMODE_FULL:
300 1.17 lukem data = NULL;
301 1.14 phil if(__ypcurrent) {
302 1.18 lukem key = NULL;
303 1.14 phil r = yp_next(__ypdomain, "passwd.byname",
304 1.14 phil __ypcurrent, __ypcurrentlen,
305 1.14 phil &key, &keylen, &data, &datalen);
306 1.14 phil free(__ypcurrent);
307 1.18 lukem if(r != 0) {
308 1.14 phil __ypcurrent = NULL;
309 1.18 lukem if (key)
310 1.18 lukem free(key);
311 1.18 lukem }
312 1.17 lukem else {
313 1.17 lukem __ypcurrent = key;
314 1.17 lukem __ypcurrentlen = keylen;
315 1.14 phil }
316 1.14 phil } else {
317 1.14 phil r = yp_first(__ypdomain, "passwd.byname",
318 1.14 phil &__ypcurrent, &__ypcurrentlen,
319 1.14 phil &data, &datalen);
320 1.17 lukem }
321 1.17 lukem if(r != 0) {
322 1.17 lukem __ypmode = YPMODE_NONE;
323 1.17 lukem if(data)
324 1.17 lukem free(data);
325 1.4 deraadt data = NULL;
326 1.17 lukem goto again;
327 1.14 phil }
328 1.17 lukem bcopy(data, line, datalen);
329 1.17 lukem free(data);
330 1.17 lukem data = NULL;
331 1.14 phil break;
332 1.14 phil case YPMODE_NETGRP:
333 1.14 phil s = getnetgrent(&host, &user, &dom);
334 1.14 phil if(s == 0) { /* end of group */
335 1.14 phil endnetgrent();
336 1.14 phil __ypmode = YPMODE_NONE;
337 1.14 phil goto again;
338 1.14 phil }
339 1.14 phil if(user && *user) {
340 1.17 lukem data = NULL;
341 1.14 phil r = yp_match(__ypdomain, "passwd.byname",
342 1.14 phil user, strlen(user),
343 1.14 phil &data, &datalen);
344 1.14 phil } else
345 1.14 phil goto again;
346 1.14 phil if(r != 0) {
347 1.14 phil /*
348 1.14 phil * if the netgroup is invalid, keep looking
349 1.14 phil * as there may be valid users later on.
350 1.14 phil */
351 1.14 phil if(data)
352 1.14 phil free(data);
353 1.4 deraadt goto again;
354 1.4 deraadt }
355 1.4 deraadt bcopy(data, line, datalen);
356 1.4 deraadt free(data);
357 1.17 lukem data = NULL;
358 1.14 phil break;
359 1.14 phil case YPMODE_USER:
360 1.14 phil if(name != (char *)NULL) {
361 1.17 lukem data = NULL;
362 1.14 phil r = yp_match(__ypdomain, "passwd.byname",
363 1.14 phil name, strlen(name),
364 1.14 phil &data, &datalen);
365 1.14 phil __ypmode = YPMODE_NONE;
366 1.14 phil free(name);
367 1.17 lukem name = NULL;
368 1.14 phil if(r != 0) {
369 1.14 phil if(data)
370 1.14 phil free(data);
371 1.14 phil goto again;
372 1.14 phil }
373 1.14 phil bcopy(data, line, datalen);
374 1.4 deraadt free(data);
375 1.14 phil data = (char *)NULL;
376 1.14 phil } else { /* XXX */
377 1.14 phil __ypmode = YPMODE_NONE;
378 1.4 deraadt goto again;
379 1.4 deraadt }
380 1.14 phil break;
381 1.4 deraadt }
382 1.14 phil
383 1.4 deraadt line[datalen] = '\0';
384 1.13 mycroft if (__ypparse(&_pw_passwd, line))
385 1.13 mycroft goto again;
386 1.13 mycroft return &_pw_passwd;
387 1.4 deraadt }
388 1.4 deraadt #endif
389 1.4 deraadt
390 1.1 cgd ++_pw_keynum;
391 1.1 cgd bf[0] = _PW_KEYBYNUM;
392 1.1 cgd bcopy((char *)&_pw_keynum, bf + 1, sizeof(_pw_keynum));
393 1.1 cgd key.data = (u_char *)bf;
394 1.1 cgd key.size = sizeof(_pw_keynum) + 1;
395 1.4 deraadt if(__hashpw(&key)) {
396 1.4 deraadt #ifdef YP
397 1.14 phil /* if we don't have YP at all, don't bother. */
398 1.14 phil if(has_yppw) {
399 1.14 phil if(_pw_passwd.pw_name[0] == '+') {
400 1.14 phil /* set the mode */
401 1.14 phil switch(_pw_passwd.pw_name[1]) {
402 1.14 phil case '\0':
403 1.14 phil __ypmode = YPMODE_FULL;
404 1.14 phil break;
405 1.14 phil case '@':
406 1.14 phil __ypmode = YPMODE_NETGRP;
407 1.14 phil setnetgrent(_pw_passwd.pw_name + 2);
408 1.14 phil break;
409 1.14 phil default:
410 1.14 phil __ypmode = YPMODE_USER;
411 1.14 phil name = strdup(_pw_passwd.pw_name + 1);
412 1.14 phil break;
413 1.14 phil }
414 1.14 phil
415 1.14 phil /* save the prototype */
416 1.14 phil __ypproto_set();
417 1.14 phil goto again;
418 1.14 phil } else if(_pw_passwd.pw_name[0] == '-') {
419 1.14 phil /* an attempted exclusion */
420 1.14 phil switch(_pw_passwd.pw_name[1]) {
421 1.14 phil case '\0':
422 1.14 phil break;
423 1.14 phil case '@':
424 1.14 phil setnetgrent(_pw_passwd.pw_name + 2);
425 1.14 phil while(getnetgrent(&host, &user, &dom)) {
426 1.14 phil if(user && *user)
427 1.14 phil __ypexclude_add(user);
428 1.14 phil }
429 1.14 phil endnetgrent();
430 1.14 phil break;
431 1.14 phil default:
432 1.14 phil __ypexclude_add(_pw_passwd.pw_name + 1);
433 1.14 phil break;
434 1.14 phil }
435 1.14 phil goto again;
436 1.14 phil }
437 1.4 deraadt }
438 1.4 deraadt #endif
439 1.4 deraadt return &_pw_passwd;
440 1.4 deraadt }
441 1.4 deraadt return (struct passwd *)NULL;
442 1.1 cgd }
443 1.1 cgd
444 1.14 phil #ifdef YP
445 1.14 phil
446 1.14 phil /*
447 1.14 phil * See if the YP token is in the database. Only works if pwd_mkdb knows
448 1.14 phil * about the token.
449 1.14 phil */
450 1.14 phil static int
451 1.14 phil __has_yppw()
452 1.14 phil {
453 1.14 phil DBT key, data;
454 1.14 phil DBT pkey, pdata;
455 1.14 phil int len;
456 1.15 sommerfe char bf[MAXLOGNAME];
457 1.14 phil
458 1.14 phil key.data = (u_char *)__yp_token;
459 1.14 phil key.size = strlen(__yp_token);
460 1.14 phil
461 1.14 phil /* Pre-token database support. */
462 1.14 phil bf[0] = _PW_KEYBYNAME;
463 1.15 sommerfe bf[1] = '+';
464 1.14 phil pkey.data = (u_char *)bf;
465 1.15 sommerfe pkey.size = 2;
466 1.14 phil
467 1.14 phil if ((_pw_db->get)(_pw_db, &key, &data, 0)
468 1.14 phil && (_pw_db->get)(_pw_db, &pkey, &pdata, 0))
469 1.14 phil return(0); /* No YP. */
470 1.14 phil return(1);
471 1.14 phil }
472 1.14 phil #endif
473 1.14 phil
474 1.1 cgd struct passwd *
475 1.1 cgd getpwnam(name)
476 1.1 cgd const char *name;
477 1.1 cgd {
478 1.1 cgd DBT key;
479 1.10 deraadt int len, rval;
480 1.15 sommerfe char bf[MAXLOGNAME + 1];
481 1.10 deraadt
482 1.10 deraadt if (!_pw_db && !__initdb())
483 1.10 deraadt return((struct passwd *)NULL);
484 1.4 deraadt
485 1.4 deraadt #ifdef YP
486 1.10 deraadt /*
487 1.14 phil * If YP is active, we must sequence through the passwd file
488 1.14 phil * in sequence.
489 1.10 deraadt */
490 1.14 phil if (__has_yppw()) {
491 1.10 deraadt int r;
492 1.14 phil int s = -1;
493 1.14 phil const char *host, *user, *dom;
494 1.4 deraadt
495 1.10 deraadt for(_pw_keynum=1; _pw_keynum; _pw_keynum++) {
496 1.10 deraadt bf[0] = _PW_KEYBYNUM;
497 1.10 deraadt bcopy((char *)&_pw_keynum, bf + 1, sizeof(_pw_keynum));
498 1.10 deraadt key.data = (u_char *)bf;
499 1.10 deraadt key.size = sizeof(_pw_keynum) + 1;
500 1.10 deraadt if(__hashpw(&key) == 0)
501 1.10 deraadt break;
502 1.14 phil switch(_pw_passwd.pw_name[0]) {
503 1.14 phil case '+':
504 1.10 deraadt if(!__ypdomain) {
505 1.10 deraadt if(_yp_check(&__ypdomain) == 0) {
506 1.10 deraadt continue;
507 1.10 deraadt }
508 1.10 deraadt }
509 1.14 phil /* save the prototype */
510 1.14 phil __ypproto_set();
511 1.14 phil
512 1.14 phil switch(_pw_passwd.pw_name[1]) {
513 1.14 phil case '\0':
514 1.14 phil if(__ypcurrent) {
515 1.14 phil free(__ypcurrent);
516 1.14 phil __ypcurrent = NULL;
517 1.14 phil }
518 1.14 phil r = yp_match(__ypdomain,
519 1.14 phil "passwd.byname",
520 1.14 phil name, strlen(name),
521 1.14 phil &__ypcurrent, &__ypcurrentlen);
522 1.14 phil if(r != 0) {
523 1.14 phil if(__ypcurrent)
524 1.14 phil free(__ypcurrent);
525 1.14 phil __ypcurrent = NULL;
526 1.14 phil continue;
527 1.14 phil }
528 1.14 phil break;
529 1.14 phil case '@':
530 1.14 phil pwnam_netgrp:
531 1.14 phil if(__ypcurrent) {
532 1.14 phil free(__ypcurrent);
533 1.14 phil __ypcurrent = NULL;
534 1.14 phil }
535 1.14 phil if(s == -1) /* first time */
536 1.14 phil setnetgrent(_pw_passwd.pw_name + 2);
537 1.14 phil s = getnetgrent(&host, &user, &dom);
538 1.14 phil if(s == 0) { /* end of group */
539 1.14 phil endnetgrent();
540 1.14 phil s = -1;
541 1.14 phil continue;
542 1.14 phil } else {
543 1.14 phil if(user && *user) {
544 1.14 phil r = yp_match(__ypdomain,
545 1.14 phil "passwd.byname",
546 1.14 phil user, strlen(user),
547 1.14 phil &__ypcurrent,
548 1.14 phil &__ypcurrentlen);
549 1.14 phil } else
550 1.14 phil goto pwnam_netgrp;
551 1.14 phil if(r != 0) {
552 1.14 phil if(__ypcurrent)
553 1.14 phil free(__ypcurrent);
554 1.14 phil __ypcurrent = NULL;
555 1.14 phil /*
556 1.14 phil * just because this
557 1.14 phil * user is bad, doesn't
558 1.14 phil * mean they all are.
559 1.14 phil */
560 1.14 phil goto pwnam_netgrp;
561 1.14 phil }
562 1.14 phil }
563 1.10 deraadt break;
564 1.10 deraadt default:
565 1.14 phil if(__ypcurrent) {
566 1.14 phil free(__ypcurrent);
567 1.14 phil __ypcurrent = NULL;
568 1.14 phil }
569 1.14 phil user = _pw_passwd.pw_name + 1;
570 1.14 phil r = yp_match(__ypdomain,
571 1.14 phil "passwd.byname",
572 1.14 phil user, strlen(user),
573 1.14 phil &__ypcurrent,
574 1.14 phil &__ypcurrentlen);
575 1.14 phil if(r != 0) {
576 1.14 phil if(__ypcurrent)
577 1.14 phil free(__ypcurrent);
578 1.14 phil __ypcurrent = NULL;
579 1.14 phil continue;
580 1.14 phil }
581 1.14 phil break;
582 1.4 deraadt }
583 1.10 deraadt bcopy(__ypcurrent, line, __ypcurrentlen);
584 1.10 deraadt line[__ypcurrentlen] = '\0';
585 1.14 phil if(__ypparse(&_pw_passwd, line)
586 1.14 phil || __ypexclude_is(_pw_passwd.pw_name)) {
587 1.14 phil if(s == 1) /* inside netgrp */
588 1.14 phil goto pwnam_netgrp;
589 1.10 deraadt continue;
590 1.14 phil }
591 1.14 phil break;
592 1.14 phil case '-':
593 1.14 phil /* attempted exclusion */
594 1.14 phil switch(_pw_passwd.pw_name[1]) {
595 1.14 phil case '\0':
596 1.14 phil break;
597 1.14 phil case '@':
598 1.14 phil setnetgrent(_pw_passwd.pw_name + 2);
599 1.14 phil while(getnetgrent(&host, &user, &dom)) {
600 1.14 phil if(user && *user)
601 1.14 phil __ypexclude_add(user);
602 1.14 phil }
603 1.14 phil endnetgrent();
604 1.14 phil break;
605 1.14 phil default:
606 1.14 phil __ypexclude_add(_pw_passwd.pw_name + 1);
607 1.14 phil break;
608 1.14 phil }
609 1.14 phil break;
610 1.14 phil
611 1.14 phil continue;
612 1.4 deraadt }
613 1.14 phil if(strcmp(_pw_passwd.pw_name, name) == 0) {
614 1.10 deraadt if (!_pw_stayopen) {
615 1.10 deraadt (void)(_pw_db->close)(_pw_db);
616 1.10 deraadt _pw_db = (DB *)NULL;
617 1.10 deraadt }
618 1.14 phil if(__ypexclude != (DB *)NULL) {
619 1.14 phil (void)(__ypexclude->close)(__ypexclude);
620 1.14 phil __ypexclude = (DB *)NULL;
621 1.14 phil }
622 1.14 phil __ypproto = (struct passwd *)NULL;
623 1.10 deraadt return &_pw_passwd;
624 1.4 deraadt }
625 1.14 phil if(s == 1) /* inside netgrp */
626 1.14 phil goto pwnam_netgrp;
627 1.10 deraadt continue;
628 1.4 deraadt }
629 1.10 deraadt if (!_pw_stayopen) {
630 1.10 deraadt (void)(_pw_db->close)(_pw_db);
631 1.10 deraadt _pw_db = (DB *)NULL;
632 1.4 deraadt }
633 1.14 phil if(__ypexclude != (DB *)NULL) {
634 1.14 phil (void)(__ypexclude->close)(__ypexclude);
635 1.14 phil __ypexclude = (DB *)NULL;
636 1.14 phil }
637 1.14 phil __ypproto = (struct passwd *)NULL;
638 1.10 deraadt return (struct passwd *)NULL;
639 1.4 deraadt }
640 1.10 deraadt #endif /* YP */
641 1.1 cgd
642 1.1 cgd bf[0] = _PW_KEYBYNAME;
643 1.1 cgd len = strlen(name);
644 1.15 sommerfe len = MIN(len, MAXLOGNAME);
645 1.15 sommerfe bcopy(name, bf + 1, len);
646 1.1 cgd key.data = (u_char *)bf;
647 1.1 cgd key.size = len + 1;
648 1.1 cgd rval = __hashpw(&key);
649 1.1 cgd
650 1.1 cgd if (!_pw_stayopen) {
651 1.1 cgd (void)(_pw_db->close)(_pw_db);
652 1.1 cgd _pw_db = (DB *)NULL;
653 1.1 cgd }
654 1.1 cgd return(rval ? &_pw_passwd : (struct passwd *)NULL);
655 1.1 cgd }
656 1.1 cgd
657 1.1 cgd struct passwd *
658 1.1 cgd #ifdef __STDC__
659 1.1 cgd getpwuid(uid_t uid)
660 1.1 cgd #else
661 1.1 cgd getpwuid(uid)
662 1.20 lukem uid_t uid;
663 1.1 cgd #endif
664 1.1 cgd {
665 1.1 cgd DBT key;
666 1.10 deraadt char bf[sizeof(_pw_keynum) + 1];
667 1.19 lukem uid_t keyuid;
668 1.19 lukem int rval;
669 1.10 deraadt
670 1.10 deraadt if (!_pw_db && !__initdb())
671 1.10 deraadt return((struct passwd *)NULL);
672 1.4 deraadt
673 1.4 deraadt #ifdef YP
674 1.10 deraadt /*
675 1.14 phil * If YP is active, we must sequence through the passwd file
676 1.14 phil * in sequence.
677 1.10 deraadt */
678 1.14 phil if (__has_yppw()) {
679 1.10 deraadt char uidbuf[20];
680 1.10 deraadt int r;
681 1.14 phil int s = -1;
682 1.14 phil const char *host, *user, *dom;
683 1.4 deraadt
684 1.19 lukem snprintf(uidbuf, sizeof(uidbuf), "%u", uid);
685 1.10 deraadt for(_pw_keynum=1; _pw_keynum; _pw_keynum++) {
686 1.10 deraadt bf[0] = _PW_KEYBYNUM;
687 1.10 deraadt bcopy((char *)&_pw_keynum, bf + 1, sizeof(_pw_keynum));
688 1.10 deraadt key.data = (u_char *)bf;
689 1.10 deraadt key.size = sizeof(_pw_keynum) + 1;
690 1.10 deraadt if(__hashpw(&key) == 0)
691 1.10 deraadt break;
692 1.14 phil switch(_pw_passwd.pw_name[0]) {
693 1.14 phil case '+':
694 1.10 deraadt if(!__ypdomain) {
695 1.10 deraadt if(_yp_check(&__ypdomain) == 0) {
696 1.10 deraadt continue;
697 1.10 deraadt }
698 1.10 deraadt }
699 1.14 phil /* save the prototype */
700 1.14 phil __ypproto_set();
701 1.14 phil
702 1.14 phil switch(_pw_passwd.pw_name[1]) {
703 1.14 phil case '\0':
704 1.14 phil if(__ypcurrent) {
705 1.14 phil free(__ypcurrent);
706 1.14 phil __ypcurrent = NULL;
707 1.14 phil }
708 1.14 phil r = yp_match(__ypdomain, "passwd.byuid",
709 1.14 phil uidbuf, strlen(uidbuf),
710 1.14 phil &__ypcurrent, &__ypcurrentlen);
711 1.14 phil if(r != 0) {
712 1.14 phil if(__ypcurrent)
713 1.14 phil free(__ypcurrent);
714 1.14 phil __ypcurrent = NULL;
715 1.14 phil continue;
716 1.14 phil }
717 1.14 phil break;
718 1.14 phil case '@':
719 1.14 phil pwuid_netgrp:
720 1.14 phil if(__ypcurrent) {
721 1.14 phil free(__ypcurrent);
722 1.14 phil __ypcurrent = NULL;
723 1.14 phil }
724 1.14 phil if(s == -1) /* first time */
725 1.14 phil setnetgrent(_pw_passwd.pw_name + 2);
726 1.14 phil s = getnetgrent(&host, &user, &dom);
727 1.14 phil if(s == 0) { /* end of group */
728 1.14 phil endnetgrent();
729 1.14 phil s = -1;
730 1.14 phil continue;
731 1.14 phil } else {
732 1.14 phil if(user && *user) {
733 1.14 phil r = yp_match(__ypdomain,
734 1.14 phil "passwd.byname",
735 1.14 phil user, strlen(user),
736 1.14 phil &__ypcurrent,
737 1.14 phil &__ypcurrentlen);
738 1.14 phil } else
739 1.14 phil goto pwuid_netgrp;
740 1.14 phil if(r != 0) {
741 1.14 phil if(__ypcurrent)
742 1.14 phil free(__ypcurrent);
743 1.14 phil __ypcurrent = NULL;
744 1.14 phil /*
745 1.14 phil * just because this
746 1.14 phil * user is bad, doesn't
747 1.14 phil * mean they all are.
748 1.14 phil */
749 1.14 phil goto pwuid_netgrp;
750 1.14 phil }
751 1.14 phil }
752 1.10 deraadt break;
753 1.10 deraadt default:
754 1.14 phil if(__ypcurrent) {
755 1.14 phil free(__ypcurrent);
756 1.14 phil __ypcurrent = NULL;
757 1.14 phil }
758 1.14 phil user = _pw_passwd.pw_name + 1;
759 1.14 phil r = yp_match(__ypdomain,
760 1.14 phil "passwd.byname",
761 1.14 phil user, strlen(user),
762 1.14 phil &__ypcurrent,
763 1.14 phil &__ypcurrentlen);
764 1.14 phil if(r != 0) {
765 1.14 phil if(__ypcurrent)
766 1.14 phil free(__ypcurrent);
767 1.14 phil __ypcurrent = NULL;
768 1.14 phil continue;
769 1.14 phil }
770 1.14 phil break;
771 1.4 deraadt }
772 1.10 deraadt bcopy(__ypcurrent, line, __ypcurrentlen);
773 1.10 deraadt line[__ypcurrentlen] = '\0';
774 1.14 phil if(__ypparse(&_pw_passwd, line)
775 1.14 phil || __ypexclude_is(_pw_passwd.pw_name)) {
776 1.14 phil if(s == 1) /* inside netgroup */
777 1.14 phil goto pwuid_netgrp;
778 1.10 deraadt continue;
779 1.14 phil }
780 1.14 phil break;
781 1.14 phil case '-':
782 1.14 phil /* attempted exclusion */
783 1.14 phil switch(_pw_passwd.pw_name[1]) {
784 1.14 phil case '\0':
785 1.14 phil break;
786 1.14 phil case '@':
787 1.14 phil setnetgrent(_pw_passwd.pw_name + 2);
788 1.14 phil while(getnetgrent(&host, &user, &dom)) {
789 1.14 phil if(user && *user)
790 1.14 phil __ypexclude_add(user);
791 1.14 phil }
792 1.14 phil endnetgrent();
793 1.14 phil break;
794 1.14 phil default:
795 1.14 phil __ypexclude_add(_pw_passwd.pw_name + 1);
796 1.14 phil break;
797 1.14 phil }
798 1.14 phil break;
799 1.14 phil
800 1.14 phil continue;
801 1.4 deraadt }
802 1.10 deraadt if( _pw_passwd.pw_uid == uid) {
803 1.10 deraadt if (!_pw_stayopen) {
804 1.10 deraadt (void)(_pw_db->close)(_pw_db);
805 1.10 deraadt _pw_db = (DB *)NULL;
806 1.10 deraadt }
807 1.14 phil if (__ypexclude != (DB *)NULL) {
808 1.14 phil (void)(__ypexclude->close)(__ypexclude);
809 1.14 phil __ypexclude = (DB *)NULL;
810 1.14 phil }
811 1.14 phil __ypproto = NULL;
812 1.10 deraadt return &_pw_passwd;
813 1.4 deraadt }
814 1.14 phil if(s == 1) /* inside netgroup */
815 1.14 phil goto pwuid_netgrp;
816 1.10 deraadt continue;
817 1.4 deraadt }
818 1.10 deraadt if (!_pw_stayopen) {
819 1.10 deraadt (void)(_pw_db->close)(_pw_db);
820 1.10 deraadt _pw_db = (DB *)NULL;
821 1.4 deraadt }
822 1.14 phil if(__ypexclude != (DB *)NULL) {
823 1.14 phil (void)(__ypexclude->close)(__ypexclude);
824 1.14 phil __ypexclude = (DB *)NULL;
825 1.14 phil }
826 1.14 phil __ypproto = (struct passwd *)NULL;
827 1.10 deraadt return (struct passwd *)NULL;
828 1.4 deraadt }
829 1.10 deraadt #endif /* YP */
830 1.1 cgd
831 1.1 cgd bf[0] = _PW_KEYBYUID;
832 1.1 cgd keyuid = uid;
833 1.1 cgd bcopy(&keyuid, bf + 1, sizeof(keyuid));
834 1.1 cgd key.data = (u_char *)bf;
835 1.1 cgd key.size = sizeof(keyuid) + 1;
836 1.1 cgd rval = __hashpw(&key);
837 1.1 cgd
838 1.1 cgd if (!_pw_stayopen) {
839 1.1 cgd (void)(_pw_db->close)(_pw_db);
840 1.1 cgd _pw_db = (DB *)NULL;
841 1.1 cgd }
842 1.1 cgd return(rval ? &_pw_passwd : (struct passwd *)NULL);
843 1.1 cgd }
844 1.1 cgd
845 1.1 cgd int
846 1.1 cgd setpassent(stayopen)
847 1.1 cgd int stayopen;
848 1.1 cgd {
849 1.1 cgd _pw_keynum = 0;
850 1.1 cgd _pw_stayopen = stayopen;
851 1.9 jtc #ifdef YP
852 1.14 phil __ypmode = YPMODE_NONE;
853 1.9 jtc if(__ypcurrent)
854 1.9 jtc free(__ypcurrent);
855 1.9 jtc __ypcurrent = NULL;
856 1.14 phil if(__ypexclude != (DB *)NULL) {
857 1.14 phil (void)(__ypexclude->close)(__ypexclude);
858 1.14 phil __ypexclude = (DB *)NULL;
859 1.14 phil }
860 1.14 phil __ypproto = (struct passwd *)NULL;
861 1.9 jtc #endif
862 1.1 cgd return(1);
863 1.1 cgd }
864 1.1 cgd
865 1.8 jtc void
866 1.1 cgd setpwent()
867 1.1 cgd {
868 1.9 jtc (void) setpassent(0);
869 1.1 cgd }
870 1.1 cgd
871 1.1 cgd void
872 1.1 cgd endpwent()
873 1.1 cgd {
874 1.1 cgd _pw_keynum = 0;
875 1.1 cgd if (_pw_db) {
876 1.1 cgd (void)(_pw_db->close)(_pw_db);
877 1.1 cgd _pw_db = (DB *)NULL;
878 1.1 cgd }
879 1.4 deraadt #ifdef YP
880 1.14 phil __ypmode = YPMODE_NONE;
881 1.4 deraadt if(__ypcurrent)
882 1.4 deraadt free(__ypcurrent);
883 1.4 deraadt __ypcurrent = NULL;
884 1.14 phil if(__ypexclude != (DB *)NULL) {
885 1.14 phil (void)(__ypexclude->close)(__ypexclude);
886 1.14 phil __ypexclude = (DB *)NULL;
887 1.14 phil }
888 1.14 phil __ypproto = (struct passwd *)NULL;
889 1.4 deraadt #endif
890 1.1 cgd }
891 1.1 cgd
892 1.4 deraadt static int
893 1.1 cgd __initdb()
894 1.1 cgd {
895 1.1 cgd static int warned;
896 1.1 cgd char *p;
897 1.1 cgd
898 1.14 phil #ifdef YP
899 1.14 phil __ypmode = YPMODE_NONE;
900 1.14 phil #endif
901 1.1 cgd p = (geteuid()) ? _PATH_MP_DB : _PATH_SMP_DB;
902 1.3 proven _pw_db = dbopen(p, O_RDONLY, 0, DB_HASH, NULL);
903 1.1 cgd if (_pw_db)
904 1.1 cgd return(1);
905 1.1 cgd if (!warned)
906 1.1 cgd syslog(LOG_ERR, "%s: %m", p);
907 1.11 deraadt warned = 1;
908 1.1 cgd return(0);
909 1.1 cgd }
910 1.1 cgd
911 1.4 deraadt static int
912 1.1 cgd __hashpw(key)
913 1.1 cgd DBT *key;
914 1.1 cgd {
915 1.17 lukem char *p, *t;
916 1.1 cgd static u_int max;
917 1.1 cgd static char *line;
918 1.1 cgd DBT data;
919 1.1 cgd
920 1.1 cgd if ((_pw_db->get)(_pw_db, key, &data, 0))
921 1.1 cgd return(0);
922 1.1 cgd p = (char *)data.data;
923 1.14 phil if (data.size > max && !(line = realloc(line, (max += 1024))))
924 1.1 cgd return(0);
925 1.1 cgd
926 1.1 cgd t = line;
927 1.14 phil #define EXPAND(e) e = t; while ((*t++ = *p++));
928 1.1 cgd EXPAND(_pw_passwd.pw_name);
929 1.1 cgd EXPAND(_pw_passwd.pw_passwd);
930 1.1 cgd bcopy(p, (char *)&_pw_passwd.pw_uid, sizeof(int));
931 1.1 cgd p += sizeof(int);
932 1.1 cgd bcopy(p, (char *)&_pw_passwd.pw_gid, sizeof(int));
933 1.1 cgd p += sizeof(int);
934 1.1 cgd bcopy(p, (char *)&_pw_passwd.pw_change, sizeof(time_t));
935 1.1 cgd p += sizeof(time_t);
936 1.1 cgd EXPAND(_pw_passwd.pw_class);
937 1.1 cgd EXPAND(_pw_passwd.pw_gecos);
938 1.1 cgd EXPAND(_pw_passwd.pw_dir);
939 1.1 cgd EXPAND(_pw_passwd.pw_shell);
940 1.1 cgd bcopy(p, (char *)&_pw_passwd.pw_expire, sizeof(time_t));
941 1.1 cgd p += sizeof(time_t);
942 1.14 phil
943 1.14 phil /* See if there's any data left. If so, read in flags. */
944 1.14 phil if (data.size > (p - (char *)data.data)) {
945 1.14 phil bcopy(p, (char *)&_pw_flags, sizeof(int));
946 1.14 phil p += sizeof(int);
947 1.14 phil } else
948 1.14 phil _pw_flags = _PASSWORD_NOUID|_PASSWORD_NOGID; /* default */
949 1.14 phil
950 1.1 cgd return(1);
951 1.1 cgd }
952