1 | /* access.c Copyright 1992-2000 by Michael Temari All Rights Reserved
|
---|
2 | *
|
---|
3 | * This file is part of ftpd.
|
---|
4 | *
|
---|
5 | * This file handles:
|
---|
6 | *
|
---|
7 | * USER PASS QUIT
|
---|
8 | *
|
---|
9 | *
|
---|
10 | * 01/25/96 Initial Release Michael Temari, <Michael@TemWare.Com>
|
---|
11 | */
|
---|
12 |
|
---|
13 | #include <sys/types.h>
|
---|
14 | #include <stdio.h>
|
---|
15 | #include <string.h>
|
---|
16 | #include <pwd.h>
|
---|
17 | #include <stdlib.h>
|
---|
18 | #include <unistd.h>
|
---|
19 | #include <net/gen/in.h>
|
---|
20 | #include <net/gen/tcp.h>
|
---|
21 |
|
---|
22 | #include "ftpd.h"
|
---|
23 | #include "access.h"
|
---|
24 |
|
---|
25 | _PROTOTYPE(static int AreWeIn, (char *name, struct passwd *pwd));
|
---|
26 |
|
---|
27 | static char *msg530 = "530 Not logged in.\r\n";
|
---|
28 |
|
---|
29 | /* Returns -1 = not logged in, 0 = loggedin */
|
---|
30 | int ChkLoggedIn()
|
---|
31 | {
|
---|
32 | if(!loggedin) {
|
---|
33 | printf(msg530);
|
---|
34 | return(-1);
|
---|
35 | } else
|
---|
36 | return(0);
|
---|
37 | }
|
---|
38 |
|
---|
39 | /* what a USER! */
|
---|
40 | int doUSER(buff)
|
---|
41 | char *buff;
|
---|
42 | {
|
---|
43 | loggedin = 0;
|
---|
44 | gotuser = 0;
|
---|
45 | strncpy(username, buff, sizeof(username));
|
---|
46 | username[sizeof(username)-1] = '\0';
|
---|
47 |
|
---|
48 | if(*username == '\0') {
|
---|
49 | printf("501 Bad user name.\r\n");
|
---|
50 | return(GOOD);
|
---|
51 | }
|
---|
52 |
|
---|
53 | gotuser = 1;
|
---|
54 |
|
---|
55 | printf("331 Password required for %s.\r\n", username);
|
---|
56 |
|
---|
57 | return(GOOD);
|
---|
58 | }
|
---|
59 |
|
---|
60 | /* secret, secret, secret */
|
---|
61 | int doPASS(buff)
|
---|
62 | char *buff;
|
---|
63 | {
|
---|
64 | char *name;
|
---|
65 | struct passwd *pwd;
|
---|
66 | int bad=0;
|
---|
67 |
|
---|
68 | name = username;
|
---|
69 |
|
---|
70 | if(!strcmp(name, "anonymous"))
|
---|
71 | name = "ftp";
|
---|
72 |
|
---|
73 | if(!gotuser || ((pwd = getpwnam(name)) == (struct passwd *)0))
|
---|
74 | bad = 1;
|
---|
75 | else
|
---|
76 | if(strcmp(name, "ftp")) {
|
---|
77 | if(!strcmp(pwd->pw_passwd, crypt("", pwd->pw_passwd)))
|
---|
78 | bad = 1;
|
---|
79 | if(strcmp(pwd->pw_passwd, crypt(buff, pwd->pw_passwd)))
|
---|
80 | bad = 1;
|
---|
81 | } else {
|
---|
82 | strncpy(anonpass, buff, sizeof(anonpass));
|
---|
83 | anonpass[sizeof(anonpass)-1] = '\0';
|
---|
84 | }
|
---|
85 |
|
---|
86 | if(bad) {
|
---|
87 | logit("LOGIN", "FAIL");
|
---|
88 | printf(msg530);
|
---|
89 | return(GOOD);
|
---|
90 | }
|
---|
91 |
|
---|
92 | return(AreWeIn(name, pwd));
|
---|
93 | }
|
---|
94 |
|
---|
95 | /* bye, bye don't let the door hit you in the butt on the way out */
|
---|
96 | int doQUIT(buff)
|
---|
97 | char *buff;
|
---|
98 | {
|
---|
99 | printf("221 Service closing, don't be a stranger.\r\n");
|
---|
100 |
|
---|
101 | return(BAD);
|
---|
102 | }
|
---|
103 |
|
---|
104 | /* see if this user is okay */
|
---|
105 | static int AreWeIn(name, pwd)
|
---|
106 | char *name;
|
---|
107 | struct passwd *pwd;
|
---|
108 | {
|
---|
109 | if(!strcmp(name, "ftp")) {
|
---|
110 | if(chroot(pwd->pw_dir)) {
|
---|
111 | logit("LOGIN", "FAIL");
|
---|
112 | printf("530 Not logged in, could not chroot.\r\n");
|
---|
113 | return(GOOD);
|
---|
114 | }
|
---|
115 | strncpy(newroot, pwd->pw_dir, sizeof(newroot));
|
---|
116 | newroot[sizeof(newroot)-1] = '\0';
|
---|
117 | anonymous = 1;
|
---|
118 | strcpy(pwd->pw_dir, "/");
|
---|
119 | }
|
---|
120 |
|
---|
121 | if(setgid(pwd->pw_gid) || setuid(pwd->pw_uid) || chdir(pwd->pw_dir)) {
|
---|
122 | logit("LOGIN", "FAIL");
|
---|
123 | printf(msg530);
|
---|
124 | anonymous = 0;
|
---|
125 | } else {
|
---|
126 | logit("LOGIN", "PASS");
|
---|
127 | showmsg("230", (char *)NULL);
|
---|
128 | printf("230 User %s logged in, directory %s.\r\n",
|
---|
129 | username, pwd->pw_dir);
|
---|
130 | loggedin = 1;
|
---|
131 | }
|
---|
132 |
|
---|
133 | return(GOOD);
|
---|
134 | }
|
---|