[Eas-dev-commit] eas/server Makefile, 1.2, 1.3 easd.in, 1.2, 1.3 easserver.ini.in, NONE, 1.1 main.p

SourceForge Headquarters 225 Broadway Suite 1600 San Diego, CA 92101 +1 (858) 422-6466

Update of /cvsroot/eas-dev/eas/server
In directory sc8-pr-cvs5.sourceforge.net:/tmp/cvs-serv19781

Added Files:
	Makefile easd.in easserver.ini.in main.prg pam-auth.c 
	pam-easserver 
Log Message:
Add files

--- NEW FILE: easserver.ini.in ---
; E/AS server configuration file
; Ordinary place: /etc/eas/easserver.conf

; ============== SERVER ==============
; Server settings
[SERVER]
	; Root directory for server
	ServerRoot = SERVERROOT
	; Debug level (0-255): greater number is mean more information
	; default value is 15
	debug = 17

; Connection section
[CONNECTION_1]
	; Connection role: server or client
	role = server
	; Transport type
	transport = TCP
	; Protocol type
	protocol = RAW
	; port for listen
	port = 3000
	; timeout for listen()
	listentimeout = 10000
	; timeout for accept()
	accepttimeout = 1000
	; message manager politic: session or global
	manager = global
	; read block (should be same in client)
	; readblock = 6000
	; read timeout
	readtimeout = 6000
	; write timeout
	writetimeout = 600

[COMPONENT_MANAGER]
	; repository for components
	repository = http://eas.lrn.ru/repository/

; ============== COMPONENTS ==============

[AUTH]
	method = PAM
	pam = $CLIPROOT/bin/pam-auth

--- NEW FILE: main.prg ---
/*-------------------------------------------------------------------------*/
/*   Server software for E/AS platform									   */
/*													                 	   */
/*   Copyright (C) 2003-2005 by E/AS Software Foundation		 		   */
/*   Author: Andrey Cherepanov <sk...@ea...>						   */
/* 									  									   */
/*   This program is free software; you can redistribute it and/or modify  */
/*   it under the terms of the GNU General Public License as               */
/*   published by the Free Software Foundation; either version 2 of the    */
/*   License, or (at your option) any later version.                       */
/*-------------------------------------------------------------------------*/

#define PRG_NAME	"easserver"
#define PRG_VERSION	"0.2.1"
#define DEBUG		20

#define TMP_DEFAULT	'/tmp/easserver'

static messages

/* Main function */
function main()
	local oErr, lang, params:=array(0), i, defConfigFile, mm, cfg

	oErr := errorBlock({|e| break(e) })

	set macro_in_string off
	set translate path off
	begin sequence

		lang := left(getenv("LANG"),2)
		l10nOpen(PRG_NAME, EAS_MODULES+PATH_DELIM+"locale"+PATH_DELIM+lang+PATH_DELIM+PRG_NAME+".mo")

		// Put in parameters stack default config file location
//		defConfigFile := cliproot()+PATH_DELIM+"etc"+PATH_DELIM+PRG_NAME+".ini"
		defConfigFile := PRG_NAME+".ini"
		aadd(params, "-c")
		aadd(params, defConfigFile)

		// Get parameters
		for i:=1 to pcount()
			aadd(params, param(i))
		next

		// Set debug level
		eSetDebugLevel( DEBUG )

		// Pass parameters to EASConfig
		if (cfg:=EASConfig( params, .T., "E/AS server. Version "+PRG_VERSION+"." )) == NIL
			CANCEL
		endif

		if cfg:getValue("SERVER","DEBUG") != NIL .and. cfg:debug == NIL
			eSetDebugLevel( cfg:getValue("SERVER","DEBUG") )
		endif

		// Prepare directory for log and cache
		if .not. checkWorkPlace()
			eDebug(1, "Error set server root directory" )
			return 1		
		endif

		// Init global message manager
		messages := EASMessageManager( "server" ) // Run with parameter 'server': server

		// Quit if transport settings doesn't exist
		setSlot(messages, "sys.transport.failed", {|msg| messages:close() })

		// Open global message manager
		messages:open()
		applicationQuit()
	recover using oErr
		eDebug(1, "EXCEPTION:",errorMessage(oErr))
		applicationQuit()
		return 1
	end sequence
return 0

/* Prepare directory for log and cache */
function checkWorkplace()
	local dir, cfg, cDir := 'cache', cfgDir

	// Read ServerRoot from config
	dir := TMP_DEFAULT
	cfg := EASGetConfig()
	cfgDir := cfg:getValue("SERVER","SERVERROOT")
	if .not. empty( cfgDir )
		dir := cfgDir
	endif

	eDebug(5, "Required work directory:", dir )

	// Change directory, create it if neccessary

	if dirchange( dir ) < 0
		if dirmake( dir ) < 0
			return .F.
		endif
	endif
	if dirchange( dir ) < 0
		return .F.
	endif

	// Check 'cache' subdirectory
	if dirchange( dir+PATH_DELIM+cDir ) < 0
		if dirmake( dir+PATH_DELIM+cDir ) < 0
			return .F.
		endif
	endif
	dirchange( dir )

	eDebug(5, "Current directory:", cygwinroot()+PATH_DELIM+curDir() )

return .T.

/* Quit from application */
function applicationQuit()
	eDebug(10, "Quitting...")
	messages:close()
	// Remove all *.po from cache directory
	fileDelete('*.po')
return

--- NEW FILE: pam-auth.c ---
/*
 * $Id: pam-auth.c,v 1.1 2006/06/02 14:49:00 skull_rus Exp $
 *
 * PAM authenticator module for Squid.
 * Copyright (C) 1999 Henrik Nordstrom <hn...@sq...>
 *
 *  This program is free software; you can redistribute it and/or modify
 *  it under the terms of the GNU General Public License as published by
 *  the Free Software Foundation; either version 2 of the License, or
 *  (at your option) any later version.
 *
 *  This program is distributed in the hope that it will be useful,
 *  but WITHOUT ANY WARRANTY; without even the implied warranty of
 *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 *  GNU General Public License for more details.
 *
 *  You should have received a copy of the GNU General Public License
 *  along with this program; if not, write to the Free Software
 * SQUID Web Proxy Cache          http://www.squid-cache.org/
 * ----------------------------------------------------------
 *
 *  Squid is the result of efforts by numerous individuals from
 *  the Internet community; see the CONTRIBUTORS file for full
 *  details.   Many organizations have provided support for Squid's
 *  development; see the SPONSORS file for full details.  Squid is
 *  Copyrighted (C) 2001 by the Regents of the University of
 *  California; see the COPYRIGHT file for full details.  Squid
 *  incorporates software developed and/or copyrighted by other
 *  sources; see the CREDITS file for full details.
 *
 *  This program is free software; you can redistribute it and/or modify
 *  it under the terms of the GNU General Public License as published by
 *  the Free Software Foundation; either version 2 of the License, or
 *  (at your option) any later version.
 *
 *  This program is distributed in the hope that it will be useful,
 *  but WITHOUT ANY WARRANTY; without even the implied warranty of
 *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 *  GNU General Public License for more details.
 *
 *  You should have received a copy of the GNU General Public License
 *  along with this program; if not, write to the Free Software
 *  Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111, USA.
 *
 * Install instructions:
 *
 * This program authenticates users against a PAM configured authentication
 * service "squid". This allows you to authenticate Squid users to any
 * authentication source for which you have a PAM module. Commonly available
 * PAM modules includes "UNIX", RADIUS, Kerberos and SMB, but a lot of other
 * PAM modules are available from various sources.
 *
 * Example PAM configuration for standard UNIX passwd authentication:
 * /etc/pam.conf:
 *  squid auth     required /lib/security/pam_unix.so.1
 *  squid account  required /lib/security/pam_unix.so.1
 *
 * Note that some PAM modules (for example shadow password authentication)
 * requires the program to be installed suid root, or PAM will not allow
 * it to authenticate other users than it runs as (this is a security
 * limitation of PAM to avoid automated probing of passwords).
 *
 * Compile this program with: gcc -o pam_auth pam_auth.c -lpam -ldl
 *
 */

#include <stdio.h>
#include <assert.h>
#include <stdlib.h>
#include <string.h>
#include <signal.h>
#include <time.h>
#include <syslog.h>
#include <errno.h>

#include <security/pam_appl.h>
#include <sys/types.h>
#include <sys/stat.h>

#define BUFSIZE 8192

/* The default PAM service name */
#ifndef PAM_SERVICE_NAME
#define PAM_SERVICE_NAME "easserver" 
#endif

/* How often to reinitialize PAM, in seconds. Undefined = never, 0=always */
/* #define PAM_CONNECTION_TTL 60 */

static int reset_pam = 1;	/* Set to one if it is time to reset PAM processing */

static char *password = NULL;	/* Workaround for Solaris 2.6 brokenness */

static time_t mtime = 0;

/*
 * A simple "conversation" function returning the supplied password.
 * Has a bit to much error control, but this is my first PAM application
 * so I'd rather check everything than make any mistakes. The function
 * expects a single converstation message of type PAM_PROMPT_ECHO_OFF.
 */
static int
password_conversation(int num_msg, const struct pam_message **msg, struct pam_response **resp, void *appdata_ptr)
{
	if (num_msg != 1 || msg[0]->msg_style != PAM_PROMPT_ECHO_OFF)
	{
		fprintf(stderr, "ERROR: Unexpected PAM converstaion '%d/%s'\n", msg[0]->msg_style, msg[0]->msg);
		return PAM_CONV_ERR;
	}
	if (!appdata_ptr)
	{
		/* Workaround for Solaris 2.6 where the PAM library is broken
		 * and does not pass appdata_ptr to the conversation routine
		 */
		appdata_ptr = password;
	}
	if (!appdata_ptr)
	{
		fprintf(stderr, "ERROR: No password available to password_converstation!\n");
		return PAM_CONV_ERR;
	}
	*resp = calloc(num_msg, sizeof(struct pam_response));
	if (!*resp)
	{
		fprintf(stderr, "ERROR: Out of memory!\n");
		return PAM_CONV_ERR;
	}
	(*resp)[0].resp = strdup((char *) appdata_ptr);
	(*resp)[0].resp_retcode = 0;

	return ((*resp)[0].resp ? PAM_SUCCESS : PAM_CONV_ERR);
}

static struct pam_conv conv = {
	&password_conversation,
	NULL
};

void
signal_received(int sig)
{
	reset_pam = 1;
	signal(sig, signal_received);
}

int
main(int argc, char *argv[])
{
	pam_handle_t *pamh = NULL;
	int retval, r;
	char *user;

	/* char *password; */
	char buf[BUFSIZE];
	time_t pamh_created = 0;

	signal(SIGHUP, signal_received);

	/* make standard output line buffered */
	setvbuf(stdout, NULL, _IOLBF, 0);

	retval = PAM_SUCCESS;
	while (fgets(buf, BUFSIZE, stdin))
	{
		user = buf;
		password = strchr(buf, '\n');
		if (!password)
		{
			fprintf(stderr, "authenticator: Unexpected input '%s'\n", buf);
			fprintf(stdout, "ERR\n");
			continue;
		}
		*password = '\0';
		password = strchr(buf, ' ');
		if (!password)
		{
			fprintf(stderr, "authenticator: Unexpected input '%s'\n", buf);
			fprintf(stdout, "ERR\n");
			continue;
		}
		*password++ = '\0';

		conv.appdata_ptr = (char *) password;	/* from buf above. not allocated */
#ifdef PAM_CONNECTION_TTL
		if (pamh_created + PAM_CONNECTION_TTL >= time(NULL))
			reset_pam = 1;
#endif
		if (reset_pam && pamh)
		{
			/* Close previous PAM connection */
			retval = pam_end(pamh, retval);
			if (retval != PAM_SUCCESS)
			{
				fprintf(stderr, "ERROR: failed to release PAM authenticator\n");
			}
			pamh = NULL;
		}
		if (!pamh)
		{
			/* Initialize PAM connection */
			retval = pam_start(PAM_SERVICE_NAME, 0, &conv, &pamh);
			if (retval != PAM_SUCCESS)
			{
				fprintf(stderr, "ERROR: failed to create PAM authenticator\n");
			}
			reset_pam = 0;
			pamh_created = time(NULL);
		}
		if (retval == PAM_SUCCESS)
			retval = pam_set_item(pamh, PAM_USER, user);
		if (retval == PAM_SUCCESS)
			retval = pam_set_item(pamh, PAM_CONV, &conv);
		if (retval == PAM_SUCCESS)
			retval = pam_authenticate(pamh, 0);
		if (retval == PAM_SUCCESS)
			retval = pam_acct_mgmt(pamh, 0);
		if (retval == PAM_SUCCESS)
		{
			fprintf(stdout, "OK\n");
		}
		else
		{
			fprintf(stdout, "ERR\n");
			/*fprintf(stdout, "%s\n", pam_strerror(pamh, retval));*/
		}
	}

	if (pamh)
	{
		r = pam_end(pamh, retval);
		if (r != PAM_SUCCESS)
		{
			pamh = NULL;
			fprintf(stderr, "ERROR: failed to release PAM authenticator\n");
		}
	}
	return (retval == PAM_SUCCESS ? 0 : 1);	/* indicate success */
}

--- NEW FILE: pam-easserver ---
#
# /etc/pam.d/other - specify the PAM fallback behaviour
#

# We fall back to the pam_unix modules. If this is not secure
# enough for your purpose, consider specifying pam_deny.so
# instead.
# 

auth     required       pam_unix.so
account  required       pam_unix.so
password required       pam_unix.so
session  required       pam_unix.so

[Eas-dev-commit] eas/server Makefile, 1.2, 1.3 easd.in, 1.2, 1.3 easserver.ini.in, NONE, 1.1 main.p

[Eas-dev-commit] eas/server Makefile, 1.2, 1.3 easd.in, 1.2, 1.3 easserver.ini.in, NONE, 1.1 main.prg, NONE, 1.1 pam-auth.c, NONE, 1.1 pam-easserver, NONE, 1.1