1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
|
<?php
/**
* The Auth_login:: class provides a system login implementation of
* the Horde authentication system.
* This Auth driver is useful if you have a shadow password system
* where the Auth_passwd driver doesn't work.
*
* Optional parameters:<pre>
* 'location' Location of the su binary.
* DEFAULT: /bin/su</pre>
*
*
* $Horde: framework/Auth/Auth/login.php,v 1.3.10.9 2006/01/01 21:28:07 jan Exp $
*
* Copyright 2004-2006 Jan Schneider <jan@horde.org>
*
* See the enclosed file COPYING for license information (LGPL). If you
* did not receive this file, see http://www.fsf.org/copyleft/lgpl.html.
*
* @author Jan Schneider <jan@horde.org>
* @since Horde 3.0
* @package Horde_Auth
*/
class Auth_login extends Auth {
/**
* An array of capabilities, so that the driver can report which
* operations it supports and which it doesn't.
*
* @var array
*/
var $capabilities = array('add' => false,
'update' => false,
'resetpassword' => false,
'remove' => false,
'list' => false,
'transparent' => false);
/**
* su binary.
*
* @var string
*/
var $_location = '/bin/su';
/**
* List of users that should be excluded from being listed/handled
* in any way by this driver.
*
* @var array
*/
var $_exclude = array('root', 'daemon', 'bin', 'sys', 'sync', 'games',
'man', 'lp', 'mail', 'news', 'uucp', 'proxy',
'postgres', 'www-data', 'backup', 'operator',
'list', 'irc', 'gnats', 'nobody', 'identd',
'sshd', 'gdm', 'postfix', 'mysql', 'cyrus', 'ftp');
/**
* Constructs a new Login authentication object.
*
* @param array $params A hash containing connection parameters.
*/
function Auth_login($params = array())
{
$this->_params = $params;
if (!empty($params['location'])) {
$this->_location = $params['location'];
}
}
/**
* Find out if a set of login credentials are valid.
*
* @access private
*
* @param string $userId The userId to check.
* @param array $credentials An array of login credentials.
*
* @return boolean Whether or not the credentials are valid.
*/
function _authenticate($userId, $credentials)
{
if (empty($credentials['password'])) {
Horde::fatal(_("No password provided for Login authentication."), __FILE__, __LINE__);
}
$proc = popen($this->_location . ' -c /bin/true ' . $userId, 'w');
if (!is_resource($proc)) {
return false;
}
fwrite($proc, $credentials['password']);
return pclose($proc) === 0;
}
}
|
