1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
|
#include "mailfront.h"
#include <string.h>
#include <cvm/facts.h>
#include <cvm/sasl.h>
#include <stdlib.h>
static RESPONSE(authfail, 421, "4.3.0 Failed to initialize AUTH");
static RESPONSE(auth_already, 503, "5.5.1 You are already authenticated.");
static RESPONSE(authenticated, 235, "2.7.0 Authentication succeeded.");
static struct sasl_auth saslauth = { .prefix = "334 " };
static str auth_caps;
static int require_tls;
static int enabled(void)
{
return (sasl_mechanisms != 0)
&& (!require_tls
|| (session_getnum("tls_state", 0) > 0));
}
static int cmd_AUTH(str* param)
{
int i;
if (session_getnum("authenticated", 0))
return respond(&resp_auth_already);
if ((i = sasl_auth1(&saslauth, param)) != 0) {
const char* msg = sasl_auth_msg(&i);
return respond_line(i, 1, msg, strlen(msg));
}
else {
session_setnum("authenticated", 1);
session_delstr("helo_domain");
session_setstr("auth_user", cvm_fact_username);
session_setnum("auth_uid", cvm_fact_userid);
session_setnum("auth_gid", cvm_fact_groupid);
if (cvm_fact_realname != 0)
session_setstr("auth_realname", cvm_fact_realname);
if (cvm_fact_domain != 0)
session_setstr("auth_domain", cvm_fact_domain);
if (cvm_fact_mailbox != 0)
session_setstr("auth_mailbox", cvm_fact_mailbox);
respond(&resp_authenticated);
}
return 1;
}
static struct command commands[] = {
{ "AUTH", .fn_enabled = enabled, .fn_hasparam = cmd_AUTH },
{ .name = 0 }
};
static const response* init(void)
{
require_tls = getenv("AUTH_REQUIRES_TLS") != 0;
if (!sasl_auth_init(&saslauth))
return &resp_authfail;
if (sasl_mechanisms != 0) {
switch (sasl_auth_caps(&auth_caps)) {
case 0: break;
case 1: break;
default:
return &resp_authfail;
}
}
return 0;
}
static const response* helo(str* hostname, str* capabilities)
{
if (enabled())
if (!str_cat(capabilities, &auth_caps)
|| !str_catc(capabilities, '\n'))
return &resp_oom;
return 0;
(void)hostname;
}
struct plugin plugin = {
.version = PLUGIN_VERSION,
.flags = 0,
.commands = commands,
.init = init,
.helo = helo,
};
|
