/* * This file is part of the UCB release of Plan 9. It is subject to the license * terms in the LICENSE file found in the top-level directory of this * distribution and at http://akaros.cs.berkeley.edu/files/Plan9License. No * part of the UCB release of Plan 9, including this file, may be copied, * modified, propagated, or distributed except according to the terms contained * in the LICENSE file. */ #include <u.h>#include <libc.h>#include <authsrv.h>#include <ctype.h>#include <bio.h>#include "authcmdlib.h" void install(char*, char*, char*, long, int);int exists (char*, char*); voidusage(void){ fprint(2, "usage: changeuser [-pn] user\n"); exits("usage");} voidmain(int argc, char *argv[]){ char *u, key[DESKEYLEN], answer[32], p9pass[32]; int which, i, newkey, newbio, dosecret; long t; Acctbio a; Fs *f; srand(getpid()*time(0)); fmtinstall('K', keyfmt); which = 0; ARGBEGIN{ case 'p': which |= Plan9; break; case 'n': which |= Securenet; break; default: usage(); }ARGEND argv0 = "changeuser"; if(argc != 1) usage(); u = *argv; if(memchr(u, '\0', ANAMELEN) == 0) error("bad user name"); if(!which) which = Plan9; newbio = 0; t = 0; a.user = 0; if(which & Plan9){ f = &fs[Plan9]; newkey = 1; if(exists(f->keys, u)){ readln("assign new password? [y/n]: ", answer, sizeof answer, 0); if(answer[0] != 'y' && answer[0] != 'Y') newkey = 0; } if(newkey) getpass(key, p9pass, 1, 1); dosecret = getsecret(newkey, p9pass); t = getexpiration(f->keys, u); install(f->keys, u, key, t, newkey); if(dosecret && setsecret(KEYDB, u, p9pass) == 0) error("error writing Inferno/pop secret"); newbio = querybio(f->who, u, &a); if(newbio) wrbio(f->who, &a); print("user %s installed for Plan 9\n", u); syslog(0, AUTHLOG, "user %s installed for plan 9", u); } if(which & Securenet){ f = &fs[Securenet]; newkey = 1; if(exists(f->keys, u)){ readln("assign new key? [y/n]: ", answer, sizeof answer, 0); if(answer[0] != 'y' && answer[0] != 'Y') newkey = 0; } if(newkey) for(i=0; i<DESKEYLEN; i++) key[i] = nrand(256); if(a.user == 0){ t = getexpiration(f->keys, u); newbio = querybio(f->who, u, &a); } install(f->keys, u, key, t, newkey); if(newbio) wrbio(f->who, &a); findkey(f->keys, u, key); print("user %s: SecureNet key: %K\n", u, key); checksum(key, answer); print("verify with checksum %s\n", answer); print("user %s installed for SecureNet\n", u); syslog(0, AUTHLOG, "user %s installed for securenet", u); } exits(0);} voidinstall(char *db, char *u, char *key, long t, int newkey){ char buf[KEYDBBUF+ANAMELEN+20]; int fd; if(!exists(db, u)){ snprint(buf, sizeof buf, "%s/%s", db, u); fd = create(buf, OREAD, 0777|DMDIR); if(fd < 0) error("can't create user %s: %r", u); close(fd); } if(newkey){ snprint(buf, sizeof buf, "%s/%s/key", db, u); fd = open(buf, OWRITE); if(fd < 0 || write(fd, key, DESKEYLEN) != DESKEYLEN) error("can't set key: %r"); close(fd); } if(t == -1) return; snprint(buf, sizeof buf, "%s/%s/expire", db, u); fd = open(buf, OWRITE); if(fd < 0 || fprint(fd, "%ld", t) < 0) error("can't write expiration time"); close(fd);} intexists(char *db, char *u){ char buf[KEYDBBUF+ANAMELEN+6]; snprint(buf, sizeof buf, "%s/%s/expire", db, u); if(access(buf, 0) < 0) return 0; return 1;}
/*
* This file is part of the UCB release of Plan 9. It is subject to the license
* terms in the LICENSE file found in the top-level directory of this
* distribution and at http://akaros.cs.berkeley.edu/files/Plan9License. No
* part of the UCB release of Plan 9, including this file, may be copied,
* modified, propagated, or distributed except according to the terms contained
* in the LICENSE file.
*/
#include <u.h>
#include <libc.h>
#include <authsrv.h>
#include <ctype.h>
#include <bio.h>
#include "authcmdlib.h"
void install(char*, char*, char*, long, int);
int exists (char*, char*);
void
usage(void)
{
fprint(2, "usage: changeuser [-pn] user\n");
exits("usage");
}
void
main(int argc, char *argv[])
{
char *u, key[DESKEYLEN], answer[32], p9pass[32];
int which, i, newkey, newbio, dosecret;
long t;
Acctbio a;
Fs *f;
srand(getpid()*time(0));
fmtinstall('K', keyfmt);
which = 0;
ARGBEGIN{
case 'p':
which |= Plan9;
break;
case 'n':
which |= Securenet;
break;
default:
usage();
}ARGEND
argv0 = "changeuser";
if(argc != 1)
usage();
u = *argv;
if(memchr(u, '\0', ANAMELEN) == 0)
error("bad user name");
if(!which)
which = Plan9;
newbio = 0;
t = 0;
a.user = 0;
if(which & Plan9){
f = &fs[Plan9];
newkey = 1;
if(exists(f->keys, u)){
readln("assign new password? [y/n]: ", answer, sizeof answer, 0);
if(answer[0] != 'y' && answer[0] != 'Y')
newkey = 0;
}
if(newkey)
getpass(key, p9pass, 1, 1);
dosecret = getsecret(newkey, p9pass);
t = getexpiration(f->keys, u);
install(f->keys, u, key, t, newkey);
if(dosecret && setsecret(KEYDB, u, p9pass) == 0)
error("error writing Inferno/pop secret");
newbio = querybio(f->who, u, &a);
if(newbio)
wrbio(f->who, &a);
print("user %s installed for Plan 9\n", u);
syslog(0, AUTHLOG, "user %s installed for plan 9", u);
}
if(which & Securenet){
f = &fs[Securenet];
newkey = 1;
if(exists(f->keys, u)){
readln("assign new key? [y/n]: ", answer, sizeof answer, 0);
if(answer[0] != 'y' && answer[0] != 'Y')
newkey = 0;
}
if(newkey)
for(i=0; i<DESKEYLEN; i++)
key[i] = nrand(256);
if(a.user == 0){
t = getexpiration(f->keys, u);
newbio = querybio(f->who, u, &a);
}
install(f->keys, u, key, t, newkey);
if(newbio)
wrbio(f->who, &a);
findkey(f->keys, u, key);
print("user %s: SecureNet key: %K\n", u, key);
checksum(key, answer);
print("verify with checksum %s\n", answer);
print("user %s installed for SecureNet\n", u);
syslog(0, AUTHLOG, "user %s installed for securenet", u);
}
exits(0);
}
void
install(char *db, char *u, char *key, long t, int newkey)
{
char buf[KEYDBBUF+ANAMELEN+20];
int fd;
if(!exists(db, u)){
snprint(buf, sizeof buf, "%s/%s", db, u);
fd = create(buf, OREAD, 0777|DMDIR);
if(fd < 0)
error("can't create user %s: %r", u);
close(fd);
}
if(newkey){
snprint(buf, sizeof buf, "%s/%s/key", db, u);
fd = open(buf, OWRITE);
if(fd < 0 || write(fd, key, DESKEYLEN) != DESKEYLEN)
error("can't set key: %r");
close(fd);
}
if(t == -1)
return;
snprint(buf, sizeof buf, "%s/%s/expire", db, u);
fd = open(buf, OWRITE);
if(fd < 0 || fprint(fd, "%ld", t) < 0)
error("can't write expiration time");
close(fd);
}
int
exists(char *db, char *u)
{
char buf[KEYDBBUF+ANAMELEN+6];
snprint(buf, sizeof buf, "%s/%s/expire", db, u);
if(access(buf, 0) < 0)
return 0;
return 1;
}