[Afpfs-ng-devel] UAMs

[Derrik P. <de...@de...>]

All,

I've actually progressively been writing my own AFP library, as well as a
FUSE-based tool to mount an AFP (over TCP) filesystem on Linux - however,
I wrote mine completely in Perl. I'd thought to start adapting my UAM
code to afpfs-ng - I have implemented UAMs for both 1- and 2-way random
number auth, as well as DHCAST128 and DHX2 UAMs.

Unfortunately the existing interface for UAMs is not sufficient for
anything other than plain-text authentication (which is, by the way,
limited to 8-character passwords). Having a function that just generates
an authinfo block isn't enough for UAMs like DHX2, where 'FPLogin' is
called, followed by two different invocations of 'FPLoginCont'. I can
provide my implementations as examples, but the preferred way would be to
have one function that accepts the username and password (and AFP version,
if needed - it might already be indicated in the AFP session object).

I've begun reading the libgcrypt API documentation, which has the necessary
interfaces for DES and CAST5 encryption, CBC, and MD5 hashing, but
without retooling the UAM interface, it won't be possible to practically
implement the more advanced UAMs.

-- 
Derrik Pates
de...@de...