/* * smb_auth - SMB proxy authentication module * Copyright (C) 1998 Richard Huveneers * * This program is free software; you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by * the Free Software Foundation; either version 2 of the License, or * (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * SQUID Web Proxy Cache http://www.squid-cache.org/ * ---------------------------------------------------------- * * Squid is the result of efforts by numerous individuals from * the Internet community; see the CONTRIBUTORS file for full * details. Many organizations have provided support for Squid's * development; see the SPONSORS file for full details. Squid is * Copyrighted (C) 2001 by the Regents of the University of * California; see the COPYRIGHT file for full details. Squid * incorporates software developed and/or copyrighted by other * sources; see the CREDITS file for full details. * * This program is free software; you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by * the Free Software Foundation; either version 2 of the License, or * (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111, USA. */ #include #include #include #include "util.h" #define BUFSIZE 256 #define NMB_UNICAST 1 #define NMB_BROADCAST 2 struct SMBDOMAIN { char *name; /* domain name */ char *sname; /* match this with user input */ char *passthrough; /* pass-through authentication */ char *nmbaddr; /* name service address */ int nmbcast; /* broadcast or unicast */ char *authshare; /* share name of auth file */ char *authfile; /* pathname of auth file */ struct SMBDOMAIN *next; /* linked list */ }; struct SMBDOMAIN *firstdom = NULL; struct SMBDOMAIN *lastdom = NULL; /* * escape the backslash character, since it has a special meaning * to the read command of the bourne shell. */ void print_esc(FILE * p, char *s) { char buf[256]; char *t; int i = 0; for (t = s; *t != '\0'; t++) { if (i > 250) { buf[i] = '\0'; (void) fputs(buf, p); i = 0; } if (*t == '\\') buf[i++] = '\\'; buf[i++] = *t; } if (i > 0) { buf[i] = '\0'; (void) fputs(buf, p); } } int main(int argc, char *argv[]) { int i; char buf[BUFSIZE]; struct SMBDOMAIN *dom; char *s; char *user; char *pass; char *domname; FILE *p; int debug = 0; char *shcmd; /* make standard output line buffered */ if (setvbuf(stdout, NULL, _IOLBF, 0) != 0) return 1; /* parse command line arguments */ for (i = 1; i < argc; i++) { if (strcmp(argv[i], "-d") == 0) { debug = 1; continue; } /* the next options require an argument */ if (i + 1 == argc) break; if (strcmp(argv[i], "-W") == 0) { if ((dom = (struct SMBDOMAIN *) malloc(sizeof(struct SMBDOMAIN))) == NULL) return 1; dom->name = dom->sname = argv[++i]; dom->passthrough = ""; dom->nmbaddr = ""; dom->nmbcast = NMB_BROADCAST; dom->authshare = "NETLOGON"; dom->authfile = "proxyauth"; dom->next = NULL; /* append to linked list */ if (lastdom != NULL) lastdom->next = dom; else firstdom = dom; lastdom = dom; continue; } if (strcmp(argv[i], "-w") == 0) { if (lastdom != NULL) lastdom->sname = argv[++i]; continue; } if (strcmp(argv[i], "-P") == 0) { if (lastdom != NULL) lastdom->passthrough = argv[++i]; continue; } if (strcmp(argv[i], "-B") == 0) { if (lastdom != NULL) { lastdom->nmbaddr = argv[++i]; lastdom->nmbcast = NMB_BROADCAST; } continue; } if (strcmp(argv[i], "-U") == 0) { if (lastdom != NULL) { lastdom->nmbaddr = argv[++i]; lastdom->nmbcast = NMB_UNICAST; } continue; } if (strcmp(argv[i], "-S") == 0) { if (lastdom != NULL) { if ((lastdom->authshare = strdup(argv[++i])) == NULL) return 1; /* convert backslashes to forward slashes */ for (s = lastdom->authshare; *s != '\0'; s++) if (*s == '\\') *s = '/'; /* strip leading forward slash from share name */ if (*lastdom->authshare == '/') lastdom->authshare++; if ((s = strchr(lastdom->authshare, '/')) != NULL) { *s = '\0'; lastdom->authfile = s + 1; } } continue; } } shcmd = debug ? HELPERSCRIPT : HELPERSCRIPT " > /dev/null 2>&1"; /* pass to helper script */ if (putenv("SAMBAPREFIX=" SAMBAPREFIX) != 0) return 1; while (1) { if (fgets(buf, BUFSIZE, stdin) == NULL) break; if ((s = strchr(buf, '\n')) == NULL) continue; *s = '\0'; if ((s = strchr(buf, ' ')) == NULL) { (void) printf("ERR\n"); continue; } *s = '\0'; user = buf; pass = s + 1; domname = NULL; rfc1738_unescape(user); rfc1738_unescape(pass); if ((s = strchr(user, '\\')) != NULL) { *s = '\0'; domname = user; user = s + 1; } /* match domname with linked list */ if (domname != NULL && strlen(domname) > 0) { for (dom = firstdom; dom != NULL; dom = dom->next) if (strcasecmp(dom->sname, domname) == 0) break; } else dom = firstdom; if (dom == NULL) { (void) printf("ERR\n"); continue; } if ((p = popen(shcmd, "w")) == NULL) { (void) printf("ERR\n"); continue; } (void) fprintf(p, "%s\n", dom->name); (void) fprintf(p, "%s\n", dom->passthrough); (void) fprintf(p, "%s\n", dom->nmbaddr); (void) fprintf(p, "%d\n", dom->nmbcast); (void) fprintf(p, "%s\n", dom->authshare); (void) fprintf(p, "%s\n", dom->authfile); (void) fprintf(p, "%s\n", user); /* the password can contain special characters */ print_esc(p, pass); (void) fputc('\n', p); (void) fflush(p); if (pclose(p) == 0) (void) printf("OK\n"); else (void) printf("ERR\n"); } /* while (1) */ return 0; }