1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
|
/* $OpenBSD: skeyinfo.c,v 1.9 2001/06/19 01:49:45 millert Exp $ */
/*
* Copyright (c) 1997, 2001 Todd C. Miller <Todd.Miller@courtesan.com>
* All rights reserved.
*
* Redistribution and use in source and binary forms, with or without
* modification, are permitted provided that the following conditions
* are met:
* 1. Redistributions of source code must retain the above copyright
* notice, this list of conditions and the following disclaimer.
* 2. Redistributions in binary form must reproduce the above copyright
* notice, this list of conditions and the following disclaimer in the
* documentation and/or other materials provided with the distribution.
* 3. The name of the author may not be used to endorse or promote products
* derived from this software without specific prior written permission.
*
* THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES,
* INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
* AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL
* THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
* EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
* PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS;
* OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
* WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR
* OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF
* ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
*/
#include <err.h>
#include <pwd.h>
#include <stdio.h>
#include <string.h>
#include <unistd.h>
#include <skey.h>
#include <login_cap.h>
#include <bsd_auth.h>
extern char *__progname;
void usage(void);
int
main(int argc, char **argv)
{
struct passwd *pw;
char *style, *challenge, *cp, *name;
int ch, verbose = 0;
login_cap_t *lc;
auth_session_t *as;
name = NULL;
style = "skey";
while ((ch = getopt(argc, argv, "a:v")) != -1)
switch(ch) {
case 'a':
style = optarg;
break;
case 'v':
verbose = 1;
break;
default:
usage();
}
argc -= optind;
argv += optind;
if (argc == 1)
name = argv[0];
else if (argc > 1)
usage();
if (name && getuid() != 0)
errx(1, "only root may specify an alternate user");
if (name) {
if ((pw = getpwnam(name)) == NULL)
errx(1, "no passwd entry for %s", name);
} else {
if ((pw = getpwuid(getuid())) == NULL)
errx(1, "no passwd entry for uid %u", getuid());
}
if ((name = strdup(pw->pw_name)) == NULL)
err(1, "cannot allocate memory");
if ((lc = login_getclass(pw->pw_class)) == NULL)
errx(1, "unable to classify user %s", name);
if ((cp = login_getstyle(lc, style, NULL)) == NULL)
errx(1, "unknown authentication method %s", style);
as = auth_userchallenge(name, cp, NULL, &challenge);
if (as == NULL || challenge == NULL) {
if (as)
auth_close(as);
errx(1, "unable to retrieve challenge for %s", name);
}
/*
* We only want the first line of the challenge so stop after a newline.
* If the user wants the full challenge including the hash type
* or if the challenge didn't start with 'otp-', print it verbatim.
* Otherwise, strip off the first word.
*/
if ((cp = strchr(challenge, '\n')))
*cp = '\0';
cp = strchr(challenge, ' ');
if (verbose || *challenge != 'o' || !cp)
cp = challenge;
else
cp++;
puts(cp);
auth_close(as);
exit(0);
}
void
usage(void)
{
(void)fprintf(stderr, "Usage: %s [-a auth-type] [-v] [user]\n",
__progname);
exit(1);
}
|