Annotation of embedaddon/strongswan/src/libcharon/plugins/xauth_pam/xauth_pam_plugin.c, revision 1.1.1.1
1.1 misho 1: /*
2: * Copyright (C) 2012 Martin Willi
3: * Copyright (C) 2012 revosec AG
4: *
5: * This program is free software; you can redistribute it and/or modify it
6: * under the terms of the GNU General Public License as published by the
7: * Free Software Foundation; either version 2 of the License, or (at your
8: * option) any later version. See <http://www.fsf.org/copyleft/gpl.txt>.
9: *
10: * This program is distributed in the hope that it will be useful, but
11: * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
12: * or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
13: * for more details.
14: */
15:
16: #include "xauth_pam_plugin.h"
17: #include "xauth_pam.h"
18: #include "xauth_pam_listener.h"
19:
20: #include <daemon.h>
21:
22: #ifndef CAP_AUDIT_WRITE
23: #define CAP_AUDIT_WRITE 29
24: #endif
25:
26: typedef struct private_xauth_pam_plugin_t private_xauth_pam_plugin_t;
27:
28: /**
29: * private data of xauth_pam plugin
30: */
31: struct private_xauth_pam_plugin_t {
32:
33: /**
34: * implements plugin interface
35: */
36: xauth_pam_plugin_t public;
37:
38: /**
39: * Listener
40: */
41: xauth_pam_listener_t *listener;
42:
43: /**
44: * Do PAM session management?
45: */
46: bool session;
47: };
48:
49: /**
50: * Register XAuth method and listener
51: */
52: static bool register_listener(private_xauth_pam_plugin_t *this,
53: plugin_feature_t *feature, bool reg, void *data)
54: {
55: if (reg)
56: {
57: charon->bus->add_listener(charon->bus, &this->listener->listener);
58: }
59: else
60: {
61: charon->bus->remove_listener(charon->bus, &this->listener->listener);
62: }
63: return TRUE;
64: }
65:
66: METHOD(plugin_t, get_name, char*,
67: private_xauth_pam_plugin_t *this)
68: {
69: return "xauth-pam";
70: }
71:
72: METHOD(plugin_t, get_features, int,
73: private_xauth_pam_plugin_t *this, plugin_feature_t *features[])
74: {
75: static plugin_feature_t f[] = {
76: PLUGIN_CALLBACK(xauth_method_register, xauth_pam_create_server),
77: PLUGIN_PROVIDE(XAUTH_SERVER, "pam"),
78: PLUGIN_CALLBACK((plugin_feature_callback_t)register_listener, NULL),
79: PLUGIN_PROVIDE(CUSTOM, "pam-session"),
80: };
81: *features = f;
82: if (!this->session)
83: {
84: return 2;
85: }
86: return countof(f);
87: }
88:
89: METHOD(plugin_t, destroy, void,
90: private_xauth_pam_plugin_t *this)
91: {
92: this->listener->destroy(this->listener);
93: free(this);
94: }
95:
96: /*
97: * see header file
98: */
99: plugin_t *xauth_pam_plugin_create()
100: {
101: private_xauth_pam_plugin_t *this;
102:
103: /* required for PAM authentication */
104: if (!lib->caps->keep(lib->caps, CAP_AUDIT_WRITE))
105: {
106: DBG1(DBG_DMN, "xauth-pam plugin requires CAP_AUDIT_WRITE capability");
107: return NULL;
108: }
109:
110: INIT(this,
111: .public = {
112: .plugin = {
113: .get_name = _get_name,
114: .get_features = _get_features,
115: .destroy = _destroy,
116: },
117: },
118: .session = lib->settings->get_str(lib->settings,
119: "%s.plugins.xauth-pam.session", FALSE, lib->ns),
120: .listener = xauth_pam_listener_create(),
121: );
122:
123: return &this->public.plugin;
124: }
FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>