2 * Copyright 1998 Juniper Networks, Inc.
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that the following conditions
8 * 1. Redistributions of source code must retain the above copyright
9 * notice, this list of conditions and the following disclaimer.
10 * 2. Redistributions in binary form must reproduce the above copyright
11 * notice, this list of conditions and the following disclaimer in the
12 * documentation and/or other materials provided with the distribution.
14 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
15 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
16 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
17 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
18 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
19 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
20 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
21 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
22 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
23 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
27 #include <sys/cdefs.h>
28 __FBSDID("$FreeBSD$");
31 #include <security/pam_modules.h>
32 #include "pam_mod_misc.h"
34 static int pam_conv_pass(pam_handle_t *, const char *, struct options *);
37 pam_conv_pass(pam_handle_t *pamh, const char *prompt, struct options *options)
39 const struct pam_conv *conv;
40 struct pam_message msg;
41 const struct pam_message *msgs[1];
42 struct pam_response *resp;
46 retval = pam_get_item(pamh, PAM_CONV, &item);
47 if (retval != PAM_SUCCESS)
49 conv = (const struct pam_conv *)item;
50 msg.msg_style = pam_test_option(options, PAM_OPT_ECHO_PASS, NULL) ?
51 PAM_PROMPT_ECHO_ON : PAM_PROMPT_ECHO_OFF;
54 retval = conv->conv(1, msgs, &resp, conv->appdata_ptr);
55 if (retval != PAM_SUCCESS)
57 retval = pam_set_item(pamh, PAM_AUTHTOK, resp[0].resp);
58 if (retval != PAM_SUCCESS)
60 memset(resp[0].resp, 0, strlen(resp[0].resp));
67 pam_get_pass(pam_handle_t *pamh, const char **passp, const char *prompt,
68 struct options *options)
71 const void *item = NULL;
74 * Grab the already-entered password if we might want to use it.
76 if (pam_test_option(options, PAM_OPT_TRY_FIRST_PASS, NULL) ||
77 pam_test_option(options, PAM_OPT_USE_FIRST_PASS, NULL)) {
78 retval = pam_get_item(pamh, PAM_AUTHTOK, &item);
79 if (retval != PAM_SUCCESS)
84 /* The user hasn't entered a password yet. */
85 if (pam_test_option(options, PAM_OPT_USE_FIRST_PASS, NULL))
87 /* Use the conversation function to get a password. */
88 retval = pam_conv_pass(pamh, prompt, options);
89 if (retval != PAM_SUCCESS)
91 retval = pam_get_item(pamh, PAM_AUTHTOK, &item);
92 if (retval != PAM_SUCCESS)
95 *passp = (const char *)item;