getpwent.c revision 1.22 1 1.22 christos /* $NetBSD: getpwent.c,v 1.22 1997/07/13 19:13:59 christos Exp $ */
2 1.12 cgd
3 1.1 cgd /*
4 1.12 cgd * Copyright (c) 1988, 1993
5 1.12 cgd * The Regents of the University of California. All rights reserved.
6 1.14 phil * Portions Copyright (c) 1994, 1995, Jason Downs. All rights reserved.
7 1.1 cgd *
8 1.1 cgd * Redistribution and use in source and binary forms, with or without
9 1.1 cgd * modification, are permitted provided that the following conditions
10 1.1 cgd * are met:
11 1.1 cgd * 1. Redistributions of source code must retain the above copyright
12 1.1 cgd * notice, this list of conditions and the following disclaimer.
13 1.1 cgd * 2. Redistributions in binary form must reproduce the above copyright
14 1.1 cgd * notice, this list of conditions and the following disclaimer in the
15 1.1 cgd * documentation and/or other materials provided with the distribution.
16 1.1 cgd * 3. All advertising materials mentioning features or use of this software
17 1.1 cgd * must display the following acknowledgement:
18 1.1 cgd * This product includes software developed by the University of
19 1.1 cgd * California, Berkeley and its contributors.
20 1.1 cgd * 4. Neither the name of the University nor the names of its contributors
21 1.1 cgd * may be used to endorse or promote products derived from this software
22 1.1 cgd * without specific prior written permission.
23 1.1 cgd *
24 1.1 cgd * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
25 1.1 cgd * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
26 1.1 cgd * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
27 1.1 cgd * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
28 1.1 cgd * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
29 1.1 cgd * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
30 1.1 cgd * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
31 1.1 cgd * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
32 1.1 cgd * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
33 1.1 cgd * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
34 1.1 cgd * SUCH DAMAGE.
35 1.1 cgd */
36 1.1 cgd
37 1.22 christos #include <sys/cdefs.h>
38 1.1 cgd #if defined(LIBC_SCCS) && !defined(lint)
39 1.12 cgd #if 0
40 1.12 cgd static char sccsid[] = "@(#)getpwent.c 8.1 (Berkeley) 6/4/93";
41 1.12 cgd #else
42 1.22 christos __RCSID("$NetBSD: getpwent.c,v 1.22 1997/07/13 19:13:59 christos Exp $");
43 1.12 cgd #endif
44 1.1 cgd #endif /* LIBC_SCCS and not lint */
45 1.1 cgd
46 1.1 cgd #include <sys/param.h>
47 1.1 cgd #include <fcntl.h>
48 1.1 cgd #include <db.h>
49 1.1 cgd #include <syslog.h>
50 1.1 cgd #include <pwd.h>
51 1.1 cgd #include <utmp.h>
52 1.1 cgd #include <errno.h>
53 1.1 cgd #include <unistd.h>
54 1.1 cgd #include <stdlib.h>
55 1.1 cgd #include <string.h>
56 1.1 cgd #include <limits.h>
57 1.14 phil #include <netgroup.h>
58 1.4 deraadt #ifdef YP
59 1.14 phil #include <machine/param.h>
60 1.4 deraadt #include <stdio.h>
61 1.4 deraadt #include <rpc/rpc.h>
62 1.4 deraadt #include <rpcsvc/yp_prot.h>
63 1.4 deraadt #include <rpcsvc/ypclnt.h>
64 1.4 deraadt #endif
65 1.1 cgd
66 1.1 cgd static struct passwd _pw_passwd; /* password structure */
67 1.1 cgd static DB *_pw_db; /* password database */
68 1.1 cgd static int _pw_keynum; /* key counter */
69 1.1 cgd static int _pw_stayopen; /* keep fd's open */
70 1.14 phil static int _pw_flags; /* password flags */
71 1.14 phil static int __hashpw __P((DBT *));
72 1.14 phil static int __initdb __P((void));
73 1.14 phil
74 1.14 phil const char __yp_token[] = "__YP!"; /* Let pwd_mkdb pull this in. */
75 1.1 cgd
76 1.4 deraadt #ifdef YP
77 1.14 phil enum _ypmode { YPMODE_NONE, YPMODE_FULL, YPMODE_USER, YPMODE_NETGRP };
78 1.14 phil static enum _ypmode __ypmode;
79 1.14 phil
80 1.4 deraadt static char *__ypcurrent, *__ypdomain;
81 1.14 phil static int __ypcurrentlen;
82 1.14 phil static struct passwd *__ypproto = (struct passwd *)NULL;
83 1.14 phil static int __ypflags;
84 1.4 deraadt static char line[1024];
85 1.14 phil static long prbuf[1024 / sizeof(long)];
86 1.14 phil static DB *__ypexclude = (DB *)NULL;
87 1.14 phil
88 1.14 phil static int __has_yppw __P((void));
89 1.14 phil static int __ypexclude_add __P((const char *));
90 1.14 phil static int __ypexclude_is __P((const char *));
91 1.14 phil static void __ypproto_set __P((void));
92 1.22 christos static int __ypparse __P((struct passwd *, char *));
93 1.14 phil
94 1.14 phil static int
95 1.14 phil __ypexclude_add(name)
96 1.14 phil const char *name;
97 1.14 phil {
98 1.14 phil DBT key, data;
99 1.14 phil
100 1.14 phil /* initialize the exclusion table if needed. */
101 1.14 phil if(__ypexclude == (DB *)NULL) {
102 1.14 phil __ypexclude = dbopen(NULL, O_RDWR, 600, DB_HASH, NULL);
103 1.14 phil if(__ypexclude == (DB *)NULL)
104 1.14 phil return(1);
105 1.14 phil }
106 1.14 phil
107 1.14 phil /* set up the key */
108 1.14 phil key.data = (char *)name;
109 1.14 phil key.size = strlen(name);
110 1.14 phil
111 1.14 phil /* data is nothing. */
112 1.14 phil data.data = NULL;
113 1.14 phil data.size = 0;
114 1.14 phil
115 1.14 phil /* store it */
116 1.14 phil if((__ypexclude->put)(__ypexclude, &key, &data, 0) == -1)
117 1.14 phil return(1);
118 1.14 phil
119 1.14 phil return(0);
120 1.14 phil }
121 1.14 phil
122 1.14 phil static int
123 1.14 phil __ypexclude_is(name)
124 1.14 phil const char *name;
125 1.14 phil {
126 1.14 phil DBT key, data;
127 1.14 phil
128 1.14 phil if(__ypexclude == (DB *)NULL)
129 1.14 phil return(0); /* nothing excluded */
130 1.14 phil
131 1.14 phil /* set up the key */
132 1.14 phil key.data = (char *)name;
133 1.14 phil key.size = strlen(name);
134 1.14 phil
135 1.14 phil if((__ypexclude->get)(__ypexclude, &key, &data, 0) == 0)
136 1.14 phil return(1); /* excluded */
137 1.14 phil
138 1.14 phil return(0);
139 1.14 phil }
140 1.14 phil
141 1.14 phil static void
142 1.14 phil __ypproto_set()
143 1.14 phil {
144 1.17 lukem char *ptr;
145 1.17 lukem struct passwd *pw = &_pw_passwd;
146 1.14 phil
147 1.14 phil /* make this the new prototype */
148 1.14 phil ptr = (char *)prbuf;
149 1.14 phil
150 1.14 phil /* first allocate the struct. */
151 1.14 phil __ypproto = (struct passwd *)ptr;
152 1.14 phil ptr += sizeof(struct passwd);
153 1.14 phil
154 1.14 phil /* name */
155 1.14 phil if(pw->pw_name && (pw->pw_name)[0]) {
156 1.14 phil ptr = (char *)ALIGN(ptr);
157 1.14 phil bcopy(pw->pw_name, ptr, strlen(pw->pw_name) + 1);
158 1.14 phil __ypproto->pw_name = ptr;
159 1.14 phil ptr += (strlen(pw->pw_name) + 1);
160 1.14 phil } else
161 1.14 phil __ypproto->pw_name = (char *)NULL;
162 1.14 phil
163 1.14 phil /* password */
164 1.14 phil if(pw->pw_passwd && (pw->pw_passwd)[0]) {
165 1.14 phil ptr = (char *)ALIGN(ptr);
166 1.14 phil bcopy(pw->pw_passwd, ptr, strlen(pw->pw_passwd) + 1);
167 1.14 phil __ypproto->pw_passwd = ptr;
168 1.14 phil ptr += (strlen(pw->pw_passwd) + 1);
169 1.14 phil } else
170 1.14 phil __ypproto->pw_passwd = (char *)NULL;
171 1.14 phil
172 1.14 phil /* uid */
173 1.14 phil __ypproto->pw_uid = pw->pw_uid;
174 1.14 phil
175 1.14 phil /* gid */
176 1.14 phil __ypproto->pw_gid = pw->pw_gid;
177 1.14 phil
178 1.14 phil /* change (ignored anyway) */
179 1.14 phil __ypproto->pw_change = pw->pw_change;
180 1.14 phil
181 1.14 phil /* class (ignored anyway) */
182 1.14 phil __ypproto->pw_class = "";
183 1.14 phil
184 1.14 phil /* gecos */
185 1.14 phil if(pw->pw_gecos && (pw->pw_gecos)[0]) {
186 1.14 phil ptr = (char *)ALIGN(ptr);
187 1.14 phil bcopy(pw->pw_gecos, ptr, strlen(pw->pw_gecos) + 1);
188 1.14 phil __ypproto->pw_gecos = ptr;
189 1.14 phil ptr += (strlen(pw->pw_gecos) + 1);
190 1.14 phil } else
191 1.14 phil __ypproto->pw_gecos = (char *)NULL;
192 1.14 phil
193 1.14 phil /* dir */
194 1.14 phil if(pw->pw_dir && (pw->pw_dir)[0]) {
195 1.14 phil ptr = (char *)ALIGN(ptr);
196 1.14 phil bcopy(pw->pw_dir, ptr, strlen(pw->pw_dir) + 1);
197 1.14 phil __ypproto->pw_dir = ptr;
198 1.14 phil ptr += (strlen(pw->pw_dir) + 1);
199 1.14 phil } else
200 1.14 phil __ypproto->pw_dir = (char *)NULL;
201 1.14 phil
202 1.14 phil /* shell */
203 1.14 phil if(pw->pw_shell && (pw->pw_shell)[0]) {
204 1.14 phil ptr = (char *)ALIGN(ptr);
205 1.14 phil bcopy(pw->pw_shell, ptr, strlen(pw->pw_shell) + 1);
206 1.14 phil __ypproto->pw_shell = ptr;
207 1.14 phil ptr += (strlen(pw->pw_shell) + 1);
208 1.14 phil } else
209 1.14 phil __ypproto->pw_shell = (char *)NULL;
210 1.14 phil
211 1.14 phil /* expire (ignored anyway) */
212 1.14 phil __ypproto->pw_expire = pw->pw_expire;
213 1.14 phil
214 1.14 phil /* flags */
215 1.14 phil __ypflags = _pw_flags;
216 1.14 phil }
217 1.4 deraadt
218 1.5 deraadt static int
219 1.5 deraadt __ypparse(pw, s)
220 1.4 deraadt struct passwd *pw;
221 1.4 deraadt char *s;
222 1.4 deraadt {
223 1.19 lukem char *bp, *cp, *ep;
224 1.19 lukem unsigned long id;
225 1.4 deraadt
226 1.14 phil /* since this is currently using strsep(), parse it first */
227 1.4 deraadt bp = s;
228 1.4 deraadt pw->pw_name = strsep(&bp, ":\n");
229 1.4 deraadt pw->pw_passwd = strsep(&bp, ":\n");
230 1.4 deraadt if (!(cp = strsep(&bp, ":\n")))
231 1.4 deraadt return 1;
232 1.19 lukem id = strtoul(cp, &ep, 10);
233 1.21 lukem if (id > UID_MAX || *ep != '\0')
234 1.19 lukem return 1;
235 1.19 lukem pw->pw_uid = (uid_t)id;
236 1.4 deraadt if (!(cp = strsep(&bp, ":\n")))
237 1.13 mycroft return 1;
238 1.19 lukem id = strtoul(cp, &ep, 10);
239 1.21 lukem if (id > GID_MAX || *ep != '\0')
240 1.19 lukem return 1;
241 1.19 lukem pw->pw_gid = (gid_t)id;
242 1.4 deraadt pw->pw_change = 0;
243 1.4 deraadt pw->pw_class = "";
244 1.4 deraadt pw->pw_gecos = strsep(&bp, ":\n");
245 1.4 deraadt pw->pw_dir = strsep(&bp, ":\n");
246 1.4 deraadt pw->pw_shell = strsep(&bp, ":\n");
247 1.4 deraadt pw->pw_expire = 0;
248 1.14 phil
249 1.14 phil /* now let the prototype override, if set. */
250 1.14 phil if(__ypproto != (struct passwd *)NULL) {
251 1.14 phil #ifdef YP_OVERRIDE_PASSWD
252 1.14 phil if(__ypproto->pw_passwd != (char *)NULL)
253 1.14 phil pw->pw_passwd = __ypproto->pw_passwd;
254 1.14 phil #endif
255 1.14 phil if(!(__ypflags & _PASSWORD_NOUID))
256 1.14 phil pw->pw_uid = __ypproto->pw_uid;
257 1.14 phil if(!(__ypflags & _PASSWORD_NOGID))
258 1.14 phil pw->pw_gid = __ypproto->pw_gid;
259 1.14 phil if(__ypproto->pw_gecos != (char *)NULL)
260 1.14 phil pw->pw_gecos = __ypproto->pw_gecos;
261 1.14 phil if(__ypproto->pw_dir != (char *)NULL)
262 1.14 phil pw->pw_dir = __ypproto->pw_dir;
263 1.14 phil if(__ypproto->pw_shell != (char *)NULL)
264 1.14 phil pw->pw_shell = __ypproto->pw_shell;
265 1.14 phil }
266 1.4 deraadt return 0;
267 1.4 deraadt }
268 1.4 deraadt #endif
269 1.4 deraadt
270 1.1 cgd struct passwd *
271 1.1 cgd getpwent()
272 1.1 cgd {
273 1.1 cgd DBT key;
274 1.1 cgd char bf[sizeof(_pw_keynum) + 1];
275 1.4 deraadt #ifdef YP
276 1.14 phil static char *name = (char *)NULL;
277 1.14 phil const char *user, *host, *dom;
278 1.14 phil int has_yppw;
279 1.4 deraadt #endif
280 1.1 cgd
281 1.1 cgd if (!_pw_db && !__initdb())
282 1.1 cgd return((struct passwd *)NULL);
283 1.1 cgd
284 1.4 deraadt #ifdef YP
285 1.14 phil has_yppw = __has_yppw();
286 1.14 phil
287 1.4 deraadt again:
288 1.14 phil if(has_yppw && (__ypmode != YPMODE_NONE)) {
289 1.4 deraadt char *key, *data;
290 1.4 deraadt int keylen, datalen;
291 1.14 phil int r, s;
292 1.4 deraadt
293 1.4 deraadt if(!__ypdomain) {
294 1.4 deraadt if( _yp_check(&__ypdomain) == 0) {
295 1.14 phil __ypmode = YPMODE_NONE;
296 1.4 deraadt goto again;
297 1.4 deraadt }
298 1.4 deraadt }
299 1.14 phil switch(__ypmode) {
300 1.14 phil case YPMODE_FULL:
301 1.17 lukem data = NULL;
302 1.14 phil if(__ypcurrent) {
303 1.18 lukem key = NULL;
304 1.14 phil r = yp_next(__ypdomain, "passwd.byname",
305 1.14 phil __ypcurrent, __ypcurrentlen,
306 1.14 phil &key, &keylen, &data, &datalen);
307 1.14 phil free(__ypcurrent);
308 1.18 lukem if(r != 0) {
309 1.14 phil __ypcurrent = NULL;
310 1.18 lukem if (key)
311 1.18 lukem free(key);
312 1.18 lukem }
313 1.17 lukem else {
314 1.17 lukem __ypcurrent = key;
315 1.17 lukem __ypcurrentlen = keylen;
316 1.14 phil }
317 1.14 phil } else {
318 1.14 phil r = yp_first(__ypdomain, "passwd.byname",
319 1.14 phil &__ypcurrent, &__ypcurrentlen,
320 1.14 phil &data, &datalen);
321 1.17 lukem }
322 1.17 lukem if(r != 0) {
323 1.17 lukem __ypmode = YPMODE_NONE;
324 1.17 lukem if(data)
325 1.17 lukem free(data);
326 1.4 deraadt data = NULL;
327 1.17 lukem goto again;
328 1.14 phil }
329 1.17 lukem bcopy(data, line, datalen);
330 1.17 lukem free(data);
331 1.17 lukem data = NULL;
332 1.14 phil break;
333 1.14 phil case YPMODE_NETGRP:
334 1.14 phil s = getnetgrent(&host, &user, &dom);
335 1.14 phil if(s == 0) { /* end of group */
336 1.14 phil endnetgrent();
337 1.14 phil __ypmode = YPMODE_NONE;
338 1.14 phil goto again;
339 1.14 phil }
340 1.14 phil if(user && *user) {
341 1.17 lukem data = NULL;
342 1.14 phil r = yp_match(__ypdomain, "passwd.byname",
343 1.14 phil user, strlen(user),
344 1.14 phil &data, &datalen);
345 1.14 phil } else
346 1.14 phil goto again;
347 1.14 phil if(r != 0) {
348 1.14 phil /*
349 1.14 phil * if the netgroup is invalid, keep looking
350 1.14 phil * as there may be valid users later on.
351 1.14 phil */
352 1.14 phil if(data)
353 1.14 phil free(data);
354 1.4 deraadt goto again;
355 1.4 deraadt }
356 1.4 deraadt bcopy(data, line, datalen);
357 1.4 deraadt free(data);
358 1.17 lukem data = NULL;
359 1.14 phil break;
360 1.14 phil case YPMODE_USER:
361 1.14 phil if(name != (char *)NULL) {
362 1.17 lukem data = NULL;
363 1.14 phil r = yp_match(__ypdomain, "passwd.byname",
364 1.14 phil name, strlen(name),
365 1.14 phil &data, &datalen);
366 1.14 phil __ypmode = YPMODE_NONE;
367 1.14 phil free(name);
368 1.17 lukem name = NULL;
369 1.14 phil if(r != 0) {
370 1.14 phil if(data)
371 1.14 phil free(data);
372 1.14 phil goto again;
373 1.14 phil }
374 1.14 phil bcopy(data, line, datalen);
375 1.4 deraadt free(data);
376 1.14 phil data = (char *)NULL;
377 1.14 phil } else { /* XXX */
378 1.14 phil __ypmode = YPMODE_NONE;
379 1.4 deraadt goto again;
380 1.4 deraadt }
381 1.14 phil break;
382 1.22 christos case YPMODE_NONE:
383 1.22 christos abort(); /* cannot happen */
384 1.22 christos break;
385 1.4 deraadt }
386 1.14 phil
387 1.4 deraadt line[datalen] = '\0';
388 1.13 mycroft if (__ypparse(&_pw_passwd, line))
389 1.13 mycroft goto again;
390 1.13 mycroft return &_pw_passwd;
391 1.4 deraadt }
392 1.4 deraadt #endif
393 1.4 deraadt
394 1.1 cgd ++_pw_keynum;
395 1.1 cgd bf[0] = _PW_KEYBYNUM;
396 1.1 cgd bcopy((char *)&_pw_keynum, bf + 1, sizeof(_pw_keynum));
397 1.1 cgd key.data = (u_char *)bf;
398 1.1 cgd key.size = sizeof(_pw_keynum) + 1;
399 1.4 deraadt if(__hashpw(&key)) {
400 1.4 deraadt #ifdef YP
401 1.14 phil /* if we don't have YP at all, don't bother. */
402 1.14 phil if(has_yppw) {
403 1.14 phil if(_pw_passwd.pw_name[0] == '+') {
404 1.14 phil /* set the mode */
405 1.14 phil switch(_pw_passwd.pw_name[1]) {
406 1.14 phil case '\0':
407 1.14 phil __ypmode = YPMODE_FULL;
408 1.14 phil break;
409 1.14 phil case '@':
410 1.14 phil __ypmode = YPMODE_NETGRP;
411 1.14 phil setnetgrent(_pw_passwd.pw_name + 2);
412 1.14 phil break;
413 1.14 phil default:
414 1.14 phil __ypmode = YPMODE_USER;
415 1.14 phil name = strdup(_pw_passwd.pw_name + 1);
416 1.14 phil break;
417 1.14 phil }
418 1.14 phil
419 1.14 phil /* save the prototype */
420 1.14 phil __ypproto_set();
421 1.14 phil goto again;
422 1.14 phil } else if(_pw_passwd.pw_name[0] == '-') {
423 1.14 phil /* an attempted exclusion */
424 1.14 phil switch(_pw_passwd.pw_name[1]) {
425 1.14 phil case '\0':
426 1.14 phil break;
427 1.14 phil case '@':
428 1.14 phil setnetgrent(_pw_passwd.pw_name + 2);
429 1.14 phil while(getnetgrent(&host, &user, &dom)) {
430 1.14 phil if(user && *user)
431 1.14 phil __ypexclude_add(user);
432 1.14 phil }
433 1.14 phil endnetgrent();
434 1.14 phil break;
435 1.14 phil default:
436 1.14 phil __ypexclude_add(_pw_passwd.pw_name + 1);
437 1.14 phil break;
438 1.14 phil }
439 1.14 phil goto again;
440 1.14 phil }
441 1.4 deraadt }
442 1.4 deraadt #endif
443 1.4 deraadt return &_pw_passwd;
444 1.4 deraadt }
445 1.4 deraadt return (struct passwd *)NULL;
446 1.1 cgd }
447 1.1 cgd
448 1.14 phil #ifdef YP
449 1.14 phil
450 1.14 phil /*
451 1.14 phil * See if the YP token is in the database. Only works if pwd_mkdb knows
452 1.14 phil * about the token.
453 1.14 phil */
454 1.14 phil static int
455 1.14 phil __has_yppw()
456 1.14 phil {
457 1.14 phil DBT key, data;
458 1.14 phil DBT pkey, pdata;
459 1.15 sommerfe char bf[MAXLOGNAME];
460 1.14 phil
461 1.14 phil key.data = (u_char *)__yp_token;
462 1.14 phil key.size = strlen(__yp_token);
463 1.14 phil
464 1.14 phil /* Pre-token database support. */
465 1.14 phil bf[0] = _PW_KEYBYNAME;
466 1.15 sommerfe bf[1] = '+';
467 1.14 phil pkey.data = (u_char *)bf;
468 1.15 sommerfe pkey.size = 2;
469 1.14 phil
470 1.14 phil if ((_pw_db->get)(_pw_db, &key, &data, 0)
471 1.14 phil && (_pw_db->get)(_pw_db, &pkey, &pdata, 0))
472 1.14 phil return(0); /* No YP. */
473 1.14 phil return(1);
474 1.14 phil }
475 1.14 phil #endif
476 1.14 phil
477 1.1 cgd struct passwd *
478 1.1 cgd getpwnam(name)
479 1.1 cgd const char *name;
480 1.1 cgd {
481 1.1 cgd DBT key;
482 1.10 deraadt int len, rval;
483 1.15 sommerfe char bf[MAXLOGNAME + 1];
484 1.10 deraadt
485 1.10 deraadt if (!_pw_db && !__initdb())
486 1.10 deraadt return((struct passwd *)NULL);
487 1.4 deraadt
488 1.4 deraadt #ifdef YP
489 1.10 deraadt /*
490 1.14 phil * If YP is active, we must sequence through the passwd file
491 1.14 phil * in sequence.
492 1.10 deraadt */
493 1.14 phil if (__has_yppw()) {
494 1.10 deraadt int r;
495 1.14 phil int s = -1;
496 1.14 phil const char *host, *user, *dom;
497 1.4 deraadt
498 1.10 deraadt for(_pw_keynum=1; _pw_keynum; _pw_keynum++) {
499 1.10 deraadt bf[0] = _PW_KEYBYNUM;
500 1.10 deraadt bcopy((char *)&_pw_keynum, bf + 1, sizeof(_pw_keynum));
501 1.10 deraadt key.data = (u_char *)bf;
502 1.10 deraadt key.size = sizeof(_pw_keynum) + 1;
503 1.10 deraadt if(__hashpw(&key) == 0)
504 1.10 deraadt break;
505 1.14 phil switch(_pw_passwd.pw_name[0]) {
506 1.14 phil case '+':
507 1.10 deraadt if(!__ypdomain) {
508 1.10 deraadt if(_yp_check(&__ypdomain) == 0) {
509 1.10 deraadt continue;
510 1.10 deraadt }
511 1.10 deraadt }
512 1.14 phil /* save the prototype */
513 1.14 phil __ypproto_set();
514 1.14 phil
515 1.14 phil switch(_pw_passwd.pw_name[1]) {
516 1.14 phil case '\0':
517 1.14 phil if(__ypcurrent) {
518 1.14 phil free(__ypcurrent);
519 1.14 phil __ypcurrent = NULL;
520 1.14 phil }
521 1.14 phil r = yp_match(__ypdomain,
522 1.14 phil "passwd.byname",
523 1.14 phil name, strlen(name),
524 1.14 phil &__ypcurrent, &__ypcurrentlen);
525 1.14 phil if(r != 0) {
526 1.14 phil if(__ypcurrent)
527 1.14 phil free(__ypcurrent);
528 1.14 phil __ypcurrent = NULL;
529 1.14 phil continue;
530 1.14 phil }
531 1.14 phil break;
532 1.14 phil case '@':
533 1.14 phil pwnam_netgrp:
534 1.14 phil if(__ypcurrent) {
535 1.14 phil free(__ypcurrent);
536 1.14 phil __ypcurrent = NULL;
537 1.14 phil }
538 1.14 phil if(s == -1) /* first time */
539 1.14 phil setnetgrent(_pw_passwd.pw_name + 2);
540 1.14 phil s = getnetgrent(&host, &user, &dom);
541 1.14 phil if(s == 0) { /* end of group */
542 1.14 phil endnetgrent();
543 1.14 phil s = -1;
544 1.14 phil continue;
545 1.14 phil } else {
546 1.14 phil if(user && *user) {
547 1.14 phil r = yp_match(__ypdomain,
548 1.14 phil "passwd.byname",
549 1.14 phil user, strlen(user),
550 1.14 phil &__ypcurrent,
551 1.14 phil &__ypcurrentlen);
552 1.14 phil } else
553 1.14 phil goto pwnam_netgrp;
554 1.14 phil if(r != 0) {
555 1.14 phil if(__ypcurrent)
556 1.14 phil free(__ypcurrent);
557 1.14 phil __ypcurrent = NULL;
558 1.14 phil /*
559 1.14 phil * just because this
560 1.14 phil * user is bad, doesn't
561 1.14 phil * mean they all are.
562 1.14 phil */
563 1.14 phil goto pwnam_netgrp;
564 1.14 phil }
565 1.14 phil }
566 1.10 deraadt break;
567 1.10 deraadt default:
568 1.14 phil if(__ypcurrent) {
569 1.14 phil free(__ypcurrent);
570 1.14 phil __ypcurrent = NULL;
571 1.14 phil }
572 1.14 phil user = _pw_passwd.pw_name + 1;
573 1.14 phil r = yp_match(__ypdomain,
574 1.14 phil "passwd.byname",
575 1.14 phil user, strlen(user),
576 1.14 phil &__ypcurrent,
577 1.14 phil &__ypcurrentlen);
578 1.14 phil if(r != 0) {
579 1.14 phil if(__ypcurrent)
580 1.14 phil free(__ypcurrent);
581 1.14 phil __ypcurrent = NULL;
582 1.14 phil continue;
583 1.14 phil }
584 1.14 phil break;
585 1.4 deraadt }
586 1.10 deraadt bcopy(__ypcurrent, line, __ypcurrentlen);
587 1.10 deraadt line[__ypcurrentlen] = '\0';
588 1.14 phil if(__ypparse(&_pw_passwd, line)
589 1.14 phil || __ypexclude_is(_pw_passwd.pw_name)) {
590 1.14 phil if(s == 1) /* inside netgrp */
591 1.14 phil goto pwnam_netgrp;
592 1.10 deraadt continue;
593 1.14 phil }
594 1.14 phil break;
595 1.14 phil case '-':
596 1.14 phil /* attempted exclusion */
597 1.14 phil switch(_pw_passwd.pw_name[1]) {
598 1.14 phil case '\0':
599 1.14 phil break;
600 1.14 phil case '@':
601 1.14 phil setnetgrent(_pw_passwd.pw_name + 2);
602 1.14 phil while(getnetgrent(&host, &user, &dom)) {
603 1.14 phil if(user && *user)
604 1.14 phil __ypexclude_add(user);
605 1.14 phil }
606 1.14 phil endnetgrent();
607 1.14 phil break;
608 1.14 phil default:
609 1.14 phil __ypexclude_add(_pw_passwd.pw_name + 1);
610 1.14 phil break;
611 1.14 phil }
612 1.14 phil break;
613 1.14 phil
614 1.14 phil continue;
615 1.4 deraadt }
616 1.14 phil if(strcmp(_pw_passwd.pw_name, name) == 0) {
617 1.10 deraadt if (!_pw_stayopen) {
618 1.10 deraadt (void)(_pw_db->close)(_pw_db);
619 1.10 deraadt _pw_db = (DB *)NULL;
620 1.10 deraadt }
621 1.14 phil if(__ypexclude != (DB *)NULL) {
622 1.14 phil (void)(__ypexclude->close)(__ypexclude);
623 1.14 phil __ypexclude = (DB *)NULL;
624 1.14 phil }
625 1.14 phil __ypproto = (struct passwd *)NULL;
626 1.10 deraadt return &_pw_passwd;
627 1.4 deraadt }
628 1.14 phil if(s == 1) /* inside netgrp */
629 1.14 phil goto pwnam_netgrp;
630 1.10 deraadt continue;
631 1.4 deraadt }
632 1.10 deraadt if (!_pw_stayopen) {
633 1.10 deraadt (void)(_pw_db->close)(_pw_db);
634 1.10 deraadt _pw_db = (DB *)NULL;
635 1.4 deraadt }
636 1.14 phil if(__ypexclude != (DB *)NULL) {
637 1.14 phil (void)(__ypexclude->close)(__ypexclude);
638 1.14 phil __ypexclude = (DB *)NULL;
639 1.14 phil }
640 1.14 phil __ypproto = (struct passwd *)NULL;
641 1.10 deraadt return (struct passwd *)NULL;
642 1.4 deraadt }
643 1.10 deraadt #endif /* YP */
644 1.1 cgd
645 1.1 cgd bf[0] = _PW_KEYBYNAME;
646 1.1 cgd len = strlen(name);
647 1.15 sommerfe len = MIN(len, MAXLOGNAME);
648 1.15 sommerfe bcopy(name, bf + 1, len);
649 1.1 cgd key.data = (u_char *)bf;
650 1.1 cgd key.size = len + 1;
651 1.1 cgd rval = __hashpw(&key);
652 1.1 cgd
653 1.1 cgd if (!_pw_stayopen) {
654 1.1 cgd (void)(_pw_db->close)(_pw_db);
655 1.1 cgd _pw_db = (DB *)NULL;
656 1.1 cgd }
657 1.1 cgd return(rval ? &_pw_passwd : (struct passwd *)NULL);
658 1.1 cgd }
659 1.1 cgd
660 1.1 cgd struct passwd *
661 1.1 cgd #ifdef __STDC__
662 1.1 cgd getpwuid(uid_t uid)
663 1.1 cgd #else
664 1.1 cgd getpwuid(uid)
665 1.20 lukem uid_t uid;
666 1.1 cgd #endif
667 1.1 cgd {
668 1.1 cgd DBT key;
669 1.10 deraadt char bf[sizeof(_pw_keynum) + 1];
670 1.19 lukem uid_t keyuid;
671 1.19 lukem int rval;
672 1.10 deraadt
673 1.10 deraadt if (!_pw_db && !__initdb())
674 1.10 deraadt return((struct passwd *)NULL);
675 1.4 deraadt
676 1.4 deraadt #ifdef YP
677 1.10 deraadt /*
678 1.14 phil * If YP is active, we must sequence through the passwd file
679 1.14 phil * in sequence.
680 1.10 deraadt */
681 1.14 phil if (__has_yppw()) {
682 1.10 deraadt char uidbuf[20];
683 1.10 deraadt int r;
684 1.14 phil int s = -1;
685 1.14 phil const char *host, *user, *dom;
686 1.4 deraadt
687 1.19 lukem snprintf(uidbuf, sizeof(uidbuf), "%u", uid);
688 1.10 deraadt for(_pw_keynum=1; _pw_keynum; _pw_keynum++) {
689 1.10 deraadt bf[0] = _PW_KEYBYNUM;
690 1.10 deraadt bcopy((char *)&_pw_keynum, bf + 1, sizeof(_pw_keynum));
691 1.10 deraadt key.data = (u_char *)bf;
692 1.10 deraadt key.size = sizeof(_pw_keynum) + 1;
693 1.10 deraadt if(__hashpw(&key) == 0)
694 1.10 deraadt break;
695 1.14 phil switch(_pw_passwd.pw_name[0]) {
696 1.14 phil case '+':
697 1.10 deraadt if(!__ypdomain) {
698 1.10 deraadt if(_yp_check(&__ypdomain) == 0) {
699 1.10 deraadt continue;
700 1.10 deraadt }
701 1.10 deraadt }
702 1.14 phil /* save the prototype */
703 1.14 phil __ypproto_set();
704 1.14 phil
705 1.14 phil switch(_pw_passwd.pw_name[1]) {
706 1.14 phil case '\0':
707 1.14 phil if(__ypcurrent) {
708 1.14 phil free(__ypcurrent);
709 1.14 phil __ypcurrent = NULL;
710 1.14 phil }
711 1.14 phil r = yp_match(__ypdomain, "passwd.byuid",
712 1.14 phil uidbuf, strlen(uidbuf),
713 1.14 phil &__ypcurrent, &__ypcurrentlen);
714 1.14 phil if(r != 0) {
715 1.14 phil if(__ypcurrent)
716 1.14 phil free(__ypcurrent);
717 1.14 phil __ypcurrent = NULL;
718 1.14 phil continue;
719 1.14 phil }
720 1.14 phil break;
721 1.14 phil case '@':
722 1.14 phil pwuid_netgrp:
723 1.14 phil if(__ypcurrent) {
724 1.14 phil free(__ypcurrent);
725 1.14 phil __ypcurrent = NULL;
726 1.14 phil }
727 1.14 phil if(s == -1) /* first time */
728 1.14 phil setnetgrent(_pw_passwd.pw_name + 2);
729 1.14 phil s = getnetgrent(&host, &user, &dom);
730 1.14 phil if(s == 0) { /* end of group */
731 1.14 phil endnetgrent();
732 1.14 phil s = -1;
733 1.14 phil continue;
734 1.14 phil } else {
735 1.14 phil if(user && *user) {
736 1.14 phil r = yp_match(__ypdomain,
737 1.14 phil "passwd.byname",
738 1.14 phil user, strlen(user),
739 1.14 phil &__ypcurrent,
740 1.14 phil &__ypcurrentlen);
741 1.14 phil } else
742 1.14 phil goto pwuid_netgrp;
743 1.14 phil if(r != 0) {
744 1.14 phil if(__ypcurrent)
745 1.14 phil free(__ypcurrent);
746 1.14 phil __ypcurrent = NULL;
747 1.14 phil /*
748 1.14 phil * just because this
749 1.14 phil * user is bad, doesn't
750 1.14 phil * mean they all are.
751 1.14 phil */
752 1.14 phil goto pwuid_netgrp;
753 1.14 phil }
754 1.14 phil }
755 1.10 deraadt break;
756 1.10 deraadt default:
757 1.14 phil if(__ypcurrent) {
758 1.14 phil free(__ypcurrent);
759 1.14 phil __ypcurrent = NULL;
760 1.14 phil }
761 1.14 phil user = _pw_passwd.pw_name + 1;
762 1.14 phil r = yp_match(__ypdomain,
763 1.14 phil "passwd.byname",
764 1.14 phil user, strlen(user),
765 1.14 phil &__ypcurrent,
766 1.14 phil &__ypcurrentlen);
767 1.14 phil if(r != 0) {
768 1.14 phil if(__ypcurrent)
769 1.14 phil free(__ypcurrent);
770 1.14 phil __ypcurrent = NULL;
771 1.14 phil continue;
772 1.14 phil }
773 1.14 phil break;
774 1.4 deraadt }
775 1.10 deraadt bcopy(__ypcurrent, line, __ypcurrentlen);
776 1.10 deraadt line[__ypcurrentlen] = '\0';
777 1.14 phil if(__ypparse(&_pw_passwd, line)
778 1.14 phil || __ypexclude_is(_pw_passwd.pw_name)) {
779 1.14 phil if(s == 1) /* inside netgroup */
780 1.14 phil goto pwuid_netgrp;
781 1.10 deraadt continue;
782 1.14 phil }
783 1.14 phil break;
784 1.14 phil case '-':
785 1.14 phil /* attempted exclusion */
786 1.14 phil switch(_pw_passwd.pw_name[1]) {
787 1.14 phil case '\0':
788 1.14 phil break;
789 1.14 phil case '@':
790 1.14 phil setnetgrent(_pw_passwd.pw_name + 2);
791 1.14 phil while(getnetgrent(&host, &user, &dom)) {
792 1.14 phil if(user && *user)
793 1.14 phil __ypexclude_add(user);
794 1.14 phil }
795 1.14 phil endnetgrent();
796 1.14 phil break;
797 1.14 phil default:
798 1.14 phil __ypexclude_add(_pw_passwd.pw_name + 1);
799 1.14 phil break;
800 1.14 phil }
801 1.14 phil break;
802 1.14 phil
803 1.14 phil continue;
804 1.4 deraadt }
805 1.10 deraadt if( _pw_passwd.pw_uid == uid) {
806 1.10 deraadt if (!_pw_stayopen) {
807 1.10 deraadt (void)(_pw_db->close)(_pw_db);
808 1.10 deraadt _pw_db = (DB *)NULL;
809 1.10 deraadt }
810 1.14 phil if (__ypexclude != (DB *)NULL) {
811 1.14 phil (void)(__ypexclude->close)(__ypexclude);
812 1.14 phil __ypexclude = (DB *)NULL;
813 1.14 phil }
814 1.14 phil __ypproto = NULL;
815 1.10 deraadt return &_pw_passwd;
816 1.4 deraadt }
817 1.14 phil if(s == 1) /* inside netgroup */
818 1.14 phil goto pwuid_netgrp;
819 1.10 deraadt continue;
820 1.4 deraadt }
821 1.10 deraadt if (!_pw_stayopen) {
822 1.10 deraadt (void)(_pw_db->close)(_pw_db);
823 1.10 deraadt _pw_db = (DB *)NULL;
824 1.4 deraadt }
825 1.14 phil if(__ypexclude != (DB *)NULL) {
826 1.14 phil (void)(__ypexclude->close)(__ypexclude);
827 1.14 phil __ypexclude = (DB *)NULL;
828 1.14 phil }
829 1.14 phil __ypproto = (struct passwd *)NULL;
830 1.10 deraadt return (struct passwd *)NULL;
831 1.4 deraadt }
832 1.10 deraadt #endif /* YP */
833 1.1 cgd
834 1.1 cgd bf[0] = _PW_KEYBYUID;
835 1.1 cgd keyuid = uid;
836 1.1 cgd bcopy(&keyuid, bf + 1, sizeof(keyuid));
837 1.1 cgd key.data = (u_char *)bf;
838 1.1 cgd key.size = sizeof(keyuid) + 1;
839 1.1 cgd rval = __hashpw(&key);
840 1.1 cgd
841 1.1 cgd if (!_pw_stayopen) {
842 1.1 cgd (void)(_pw_db->close)(_pw_db);
843 1.1 cgd _pw_db = (DB *)NULL;
844 1.1 cgd }
845 1.1 cgd return(rval ? &_pw_passwd : (struct passwd *)NULL);
846 1.1 cgd }
847 1.1 cgd
848 1.1 cgd int
849 1.1 cgd setpassent(stayopen)
850 1.1 cgd int stayopen;
851 1.1 cgd {
852 1.1 cgd _pw_keynum = 0;
853 1.1 cgd _pw_stayopen = stayopen;
854 1.9 jtc #ifdef YP
855 1.14 phil __ypmode = YPMODE_NONE;
856 1.9 jtc if(__ypcurrent)
857 1.9 jtc free(__ypcurrent);
858 1.9 jtc __ypcurrent = NULL;
859 1.14 phil if(__ypexclude != (DB *)NULL) {
860 1.14 phil (void)(__ypexclude->close)(__ypexclude);
861 1.14 phil __ypexclude = (DB *)NULL;
862 1.14 phil }
863 1.14 phil __ypproto = (struct passwd *)NULL;
864 1.9 jtc #endif
865 1.1 cgd return(1);
866 1.1 cgd }
867 1.1 cgd
868 1.8 jtc void
869 1.1 cgd setpwent()
870 1.1 cgd {
871 1.9 jtc (void) setpassent(0);
872 1.1 cgd }
873 1.1 cgd
874 1.1 cgd void
875 1.1 cgd endpwent()
876 1.1 cgd {
877 1.1 cgd _pw_keynum = 0;
878 1.1 cgd if (_pw_db) {
879 1.1 cgd (void)(_pw_db->close)(_pw_db);
880 1.1 cgd _pw_db = (DB *)NULL;
881 1.1 cgd }
882 1.4 deraadt #ifdef YP
883 1.14 phil __ypmode = YPMODE_NONE;
884 1.4 deraadt if(__ypcurrent)
885 1.4 deraadt free(__ypcurrent);
886 1.4 deraadt __ypcurrent = NULL;
887 1.14 phil if(__ypexclude != (DB *)NULL) {
888 1.14 phil (void)(__ypexclude->close)(__ypexclude);
889 1.14 phil __ypexclude = (DB *)NULL;
890 1.14 phil }
891 1.14 phil __ypproto = (struct passwd *)NULL;
892 1.4 deraadt #endif
893 1.1 cgd }
894 1.1 cgd
895 1.4 deraadt static int
896 1.1 cgd __initdb()
897 1.1 cgd {
898 1.1 cgd static int warned;
899 1.1 cgd char *p;
900 1.1 cgd
901 1.14 phil #ifdef YP
902 1.14 phil __ypmode = YPMODE_NONE;
903 1.14 phil #endif
904 1.1 cgd p = (geteuid()) ? _PATH_MP_DB : _PATH_SMP_DB;
905 1.3 proven _pw_db = dbopen(p, O_RDONLY, 0, DB_HASH, NULL);
906 1.1 cgd if (_pw_db)
907 1.1 cgd return(1);
908 1.1 cgd if (!warned)
909 1.1 cgd syslog(LOG_ERR, "%s: %m", p);
910 1.11 deraadt warned = 1;
911 1.1 cgd return(0);
912 1.1 cgd }
913 1.1 cgd
914 1.4 deraadt static int
915 1.1 cgd __hashpw(key)
916 1.1 cgd DBT *key;
917 1.1 cgd {
918 1.17 lukem char *p, *t;
919 1.1 cgd static u_int max;
920 1.1 cgd static char *line;
921 1.1 cgd DBT data;
922 1.1 cgd
923 1.1 cgd if ((_pw_db->get)(_pw_db, key, &data, 0))
924 1.1 cgd return(0);
925 1.1 cgd p = (char *)data.data;
926 1.14 phil if (data.size > max && !(line = realloc(line, (max += 1024))))
927 1.1 cgd return(0);
928 1.1 cgd
929 1.1 cgd t = line;
930 1.14 phil #define EXPAND(e) e = t; while ((*t++ = *p++));
931 1.1 cgd EXPAND(_pw_passwd.pw_name);
932 1.1 cgd EXPAND(_pw_passwd.pw_passwd);
933 1.1 cgd bcopy(p, (char *)&_pw_passwd.pw_uid, sizeof(int));
934 1.1 cgd p += sizeof(int);
935 1.1 cgd bcopy(p, (char *)&_pw_passwd.pw_gid, sizeof(int));
936 1.1 cgd p += sizeof(int);
937 1.1 cgd bcopy(p, (char *)&_pw_passwd.pw_change, sizeof(time_t));
938 1.1 cgd p += sizeof(time_t);
939 1.1 cgd EXPAND(_pw_passwd.pw_class);
940 1.1 cgd EXPAND(_pw_passwd.pw_gecos);
941 1.1 cgd EXPAND(_pw_passwd.pw_dir);
942 1.1 cgd EXPAND(_pw_passwd.pw_shell);
943 1.1 cgd bcopy(p, (char *)&_pw_passwd.pw_expire, sizeof(time_t));
944 1.1 cgd p += sizeof(time_t);
945 1.14 phil
946 1.14 phil /* See if there's any data left. If so, read in flags. */
947 1.14 phil if (data.size > (p - (char *)data.data)) {
948 1.14 phil bcopy(p, (char *)&_pw_flags, sizeof(int));
949 1.14 phil p += sizeof(int);
950 1.14 phil } else
951 1.14 phil _pw_flags = _PASSWORD_NOUID|_PASSWORD_NOGID; /* default */
952 1.14 phil
953 1.1 cgd return(1);
954 1.1 cgd }
955