2 * Copyright 1998 Juniper Networks, Inc.
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that the following conditions
8 * 1. Redistributions of source code must retain the above copyright
9 * notice, this list of conditions and the following disclaimer.
10 * 2. Redistributions in binary form must reproduce the above copyright
11 * notice, this list of conditions and the following disclaimer in the
12 * documentation and/or other materials provided with the distribution.
14 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
15 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
16 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
17 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
18 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
19 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
20 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
21 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
22 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
23 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
29 #include <security/pam_modules.h>
30 #include "pam_mod_misc.h"
32 static int pam_conv_pass(pam_handle_t *, const char *, int);
35 pam_conv_pass(pam_handle_t *pamh, const char *prompt, int options)
39 const struct pam_conv *conv;
40 struct pam_message msg;
41 const struct pam_message *msgs[1];
42 struct pam_response *resp;
44 if ((retval = pam_get_item(pamh, PAM_CONV, &item)) !=
47 conv = (const struct pam_conv *)item;
48 msg.msg_style = options & PAM_OPT_ECHO_PASS ?
49 PAM_PROMPT_ECHO_ON : PAM_PROMPT_ECHO_OFF;
52 if ((retval = conv->conv(1, msgs, &resp, conv->appdata_ptr)) !=
55 if ((retval = pam_set_item(pamh, PAM_AUTHTOK, resp[0].resp)) !=
58 memset(resp[0].resp, 0, strlen(resp[0].resp));
65 pam_get_pass(pam_handle_t *pamh, const char **passp, const char *prompt,
69 const void *item = NULL;
72 * Grab the already-entered password if we might want to use it.
74 if (options & (PAM_OPT_TRY_FIRST_PASS | PAM_OPT_USE_FIRST_PASS)) {
75 if ((retval = pam_get_item(pamh, PAM_AUTHTOK, &item)) !=
81 /* The user hasn't entered a password yet. */
82 if (options & PAM_OPT_USE_FIRST_PASS)
84 /* Use the conversation function to get a password. */
85 if ((retval = pam_conv_pass(pamh, prompt, options)) !=
87 (retval = pam_get_item(pamh, PAM_AUTHTOK, &item)) !=
91 *passp = (const char *)item;