/*  * This file is part of the UCB release of Plan 9. It is subject to the license * terms in the LICENSE file found in the top-level directory of this * distribution and at http://akaros.cs.berkeley.edu/files/Plan9License. No * part of the UCB release of Plan 9, including this file, may be copied, * modified, propagated, or distributed except according to the terms contained * in the LICENSE file. */ #include <u.h>#include <libc.h>#include <mp.h>#include <libsec.h>#include "SConn.h"#include "secstore.h" int verbose; static void userinput(char *, int); static voidensure_exists(char *f, ulong perm){	int fd; 	if(access(f, AEXIST) >= 0)		return;	if(verbose)		fprint(2,"first time setup for secstore: create %s %lo\n", f, perm);	fd = create(f, OREAD, perm);	if(fd < 0)		sysfatal("unable to create %s: %r", f);	close(fd);}  voidmain(int argc, char **argv){	int isnew;	char *id, buf[Maxmsg], home[Maxmsg], prompt[100], *hexHi;	char *pass, *passck;	long expsecs;	mpint *H = mpnew(0), *Hi = mpnew(0);	PW *pw;	Tm *tm; 	ARGBEGIN{	case 'v':		verbose++;		break;	}ARGEND;	if(argc!=1){		fprint(2, "usage: secuser [-v] <user>\n");		exits("usage");	} 	ensure_exists(SECSTORE_DIR, DMDIR|0755L);	snprint(home, sizeof(home), "%s/who", SECSTORE_DIR);	ensure_exists(home, DMDIR|0755L);	snprint(home, sizeof(home), "%s/store", SECSTORE_DIR);	ensure_exists(home, DMDIR|0700L); 	id = argv[0];	if(verbose)		fprint(2,"secuser %s\n", id);	if((pw = getPW(id,1)) == nil){		isnew = 1;		print("new account (because %s/%s %r)\n", SECSTORE_DIR, id);		pw = emalloc(sizeof(*pw));		pw->id = estrdup(id);		snprint(home, sizeof(home), "%s/store/%s", SECSTORE_DIR, id);		if(access(home, AEXIST) == 0)			sysfatal("new user, but directory %s already exists",				home);	}else{		isnew = 0;	} 	/* get main password for id */	for(;;){		if(isnew)			snprint(prompt, sizeof(prompt), "%s password: ", id);		else			snprint(prompt, sizeof(prompt), "%s password [default = don't change]: ", id);		pass = getpassm(prompt);		if(pass == nil)			sysfatal("getpassm failed");		if(verbose)			print("%ld characters\n", strlen(pass));		if(pass[0] == '\0' && isnew == 0)			break;		if(strlen(pass) >= 7)			break;		print("password must be at least 7 characters\n");	} 	if(pass[0] != '\0'){		snprint(prompt, sizeof(prompt), "retype password: ");		if(verbose)			print("confirming...\n");		passck = getpassm(prompt);		if(passck == nil)			sysfatal("getpassm failed");		if(strcmp(pass, passck) != 0)			sysfatal("passwords didn't match");		memset(passck, 0, strlen(passck));		free(passck);		hexHi = PAK_Hi(id, pass, H, Hi);		memset(pass, 0, strlen(pass));		free(pass);		free(hexHi);		mpfree(H);		pw->Hi = Hi;	} 	/* get expiration time (midnight of date specified) */	if(isnew)		expsecs = time(0) + 365*24*60*60;	else		expsecs = pw->expire; 	for(;;){		tm = localtime(expsecs);		print("expires [DDMMYYYY, default = %2.2d%2.2d%4.4d]: ",				tm->mday, tm->mon+1, tm->year+1900);		userinput(buf, sizeof(buf));		if(strlen(buf) == 0)			break;		if(strlen(buf) != 8){			print("!bad date format: %s\n", buf);			continue;		}		tm->mday = (buf[0]-'0')*10 + (buf[1]-'0');		if(tm->mday > 31 || tm->mday < 1){			print("!bad day of month: %d\n", tm->mday);			continue;		}		tm->mon = (buf[2]-'0')*10 + (buf[3]-'0') - 1;		if(tm->mon > 11 || tm->mon < 0){			print("!bad month: %d\n", tm->mon + 1);			continue;		}		tm->year = atoi(buf+4) - 1900;		if(tm->year < 70){			print("!bad year: %d\n", tm->year + 1900);			continue;		}		tm->sec = 59;		tm->min = 59;		tm->hour = 23;		tm->yday = 0;		expsecs = tm2sec(tm);		break;	}	pw->expire = expsecs; 	/* failed logins */	if(pw->failed != 0 )		print("clearing %d failed login attempts\n", pw->failed);	pw->failed = 0; 	/* status bits */	if(isnew)		pw->status = Enabled;	for(;;){		print("Enabled or Disabled [default %s]: ",			(pw->status & Enabled) ? "Enabled" : "Disabled" );		userinput(buf, sizeof(buf));		if(strlen(buf) == 0)			break;		if(buf[0]=='E' || buf[0]=='e'){			pw->status |= Enabled;			break;		}		if(buf[0]=='D' || buf[0]=='d'){			pw->status = pw->status & ~Enabled;			break;		}	}	for(;;){		print("require STA? [default %s]: ",			(pw->status & STA) ? "yes" : "no" );		userinput(buf, sizeof(buf));		if(strlen(buf) == 0)			break;		if(buf[0]=='Y' || buf[0]=='y'){			pw->status |= STA;			break;		}		if(buf[0]=='N' || buf[0]=='n'){			pw->status = pw->status & ~STA;			break;		}	} 	/* free form field */	if(isnew)		pw->other = nil;	print("comments [default = %s]: ", (pw->other == nil) ? "" : pw->other);	userinput(buf, 72);  /* 72 comes from password.h */	if(buf[0])		if((pw->other = strdup(buf)) == nil)			sysfatal("strdup"); 	syslog(0, LOG, "CHANGELOGIN for '%s'", pw->id);	if(putPW(pw) < 0)		sysfatal("can't write password file: %r");	else{		print("change written\n");		if(isnew && create(home, OREAD, DMDIR | 0775L) < 0)			sysfatal("unable to create %s: %r", home);	} 	exits("");}  static voiduserinput(char *buf, int blen){	int n; 	for(;;){		n = read(0, buf, blen);		if(n<=0)			exits("read error");		if(buf[n-1]=='\n'){			buf[n-1] = '\0';			return;		}		buf += n;  blen -= n;		if(blen<=0)			exits("input too large");	}}