1 |
|
|
/* $OpenBSD: auth2-kbdint.c,v 1.8 2017/05/30 14:29:59 markus Exp $ */ |
2 |
|
|
/* |
3 |
|
|
* Copyright (c) 2000 Markus Friedl. All rights reserved. |
4 |
|
|
* |
5 |
|
|
* Redistribution and use in source and binary forms, with or without |
6 |
|
|
* modification, are permitted provided that the following conditions |
7 |
|
|
* are met: |
8 |
|
|
* 1. Redistributions of source code must retain the above copyright |
9 |
|
|
* notice, this list of conditions and the following disclaimer. |
10 |
|
|
* 2. Redistributions in binary form must reproduce the above copyright |
11 |
|
|
* notice, this list of conditions and the following disclaimer in the |
12 |
|
|
* documentation and/or other materials provided with the distribution. |
13 |
|
|
* |
14 |
|
|
* THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR |
15 |
|
|
* IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES |
16 |
|
|
* OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. |
17 |
|
|
* IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, |
18 |
|
|
* INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT |
19 |
|
|
* NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, |
20 |
|
|
* DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY |
21 |
|
|
* THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT |
22 |
|
|
* (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF |
23 |
|
|
* THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. |
24 |
|
|
*/ |
25 |
|
|
|
26 |
|
|
#include <sys/types.h> |
27 |
|
|
|
28 |
|
|
#include "xmalloc.h" |
29 |
|
|
#include "packet.h" |
30 |
|
|
#include "key.h" |
31 |
|
|
#include "hostfile.h" |
32 |
|
|
#include "auth.h" |
33 |
|
|
#include "log.h" |
34 |
|
|
#include "buffer.h" |
35 |
|
|
#include "misc.h" |
36 |
|
|
#include "servconf.h" |
37 |
|
|
|
38 |
|
|
/* import */ |
39 |
|
|
extern ServerOptions options; |
40 |
|
|
|
41 |
|
|
static int |
42 |
|
|
userauth_kbdint(struct ssh *ssh) |
43 |
|
|
{ |
44 |
|
|
int authenticated = 0; |
45 |
|
|
char *lang, *devs; |
46 |
|
|
|
47 |
|
|
lang = packet_get_string(NULL); |
48 |
|
|
devs = packet_get_string(NULL); |
49 |
|
|
packet_check_eom(); |
50 |
|
|
|
51 |
|
|
debug("keyboard-interactive devs %s", devs); |
52 |
|
|
|
53 |
|
|
if (options.challenge_response_authentication) |
54 |
|
|
authenticated = auth2_challenge(ssh, devs); |
55 |
|
|
|
56 |
|
|
free(devs); |
57 |
|
|
free(lang); |
58 |
|
|
return authenticated; |
59 |
|
|
} |
60 |
|
|
|
61 |
|
|
Authmethod method_kbdint = { |
62 |
|
|
"keyboard-interactive", |
63 |
|
|
userauth_kbdint, |
64 |
|
|
&options.kbd_interactive_authentication |
65 |
|
|
}; |