+/*
+** Copyright 2012 Double Precision, Inc. See COPYING for
+** distribution information.
+*/
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <unistd.h>
+#include <ctype.h>
+#include <sys/types.h>
+#include <sys/stat.h>
+#include <time.h>
+
+#include "authsqlite.h"
+#include "authsqliterc.h"
+#include "auth.h"
+#include "courierauthdebug.h"
+
+#define err courier_auth_err
+#define GET(c) ((c) < (n) && columns[(c)] ? columns[(c)]:"")
+
+static const char *read_env(const char *env)
+{
+ return authgetconfig(AUTHSQLITERC, env);
+}
+
+static sqlite3 *dbh=0;
+
+sqlite3 *do_connect()
+{
+ const char *p;
+
+ if (dbh)
+ return dbh;
+
+ p=read_env("SQLITE_DATABASE");
+
+ if (!p)
+ return 0;
+
+ if (access(p, R_OK))
+ return 0;
+
+ if (sqlite3_open_v2(p, &dbh, SQLITE_OPEN_READWRITE, NULL) != SQLITE_OK)
+ {
+ if (dbh)
+ {
+ err("sqllite3_open(%s): %s", p, sqlite3_errmsg(dbh));
+ sqlite3_close(dbh);
+ dbh=0;
+ }
+ return 0;
+ }
+
+ return dbh;
+}
+
+void auth_sqlite_cleanup()
+{
+ if (dbh)
+ {
+ sqlite3_close(dbh);
+ dbh=0;
+ }
+}
+
+static char *escape_str(const char *c, size_t n)
+{
+ char *p=malloc(n+1), *q;
+
+ if (!p)
+ {
+ perror("malloc");
+ return 0;
+ }
+
+ memcpy(p, c, n);
+ p[n]=0;
+
+ q=sqlite3_mprintf("%q", p);
+ free(p);
+
+ p=strdup(q);
+ sqlite3_free(q);
+ if (!p)
+ {
+ perror("malloc");
+ return 0;
+ }
+ return p;
+}
+
+static struct authsqliteuserinfo ui={0, 0, 0, 0, 0, 0, 0, 0};
+static int ui_cnt;
+
+static void initui()
+{
+
+ if (ui.username)
+ free(ui.username);
+ if (ui.cryptpw)
+ free(ui.cryptpw);
+ if (ui.clearpw)
+ free(ui.clearpw);
+ if (ui.home)
+ free(ui.home);
+ if (ui.maildir)
+ free(ui.maildir);
+ if (ui.quota)
+ free(ui.quota);
+ if (ui.fullname)
+ free(ui.fullname);
+ if (ui.options)
+ free(ui.options);
+ memset(&ui, 0, sizeof(ui));
+}
+
+static int select_callback(void *dummy, int n, char **columns, char **names)
+{
+ if (ui_cnt++)
+ {
+ err("Multiple rows returned");
+ return -1;
+ }
+
+ initui();
+
+ if (n < 6)
+ {
+ err("Query came back with fewer than 6 columns");
+ return -1;
+ }
+
+ if ((ui.username=strdup(GET(0))) == NULL
+ || (ui.cryptpw=strdup(GET(1))) == NULL
+ || (ui.clearpw=strdup(GET(2))) == NULL
+ || (ui.home=strdup(GET(5))) == NULL
+ || (ui.maildir=strdup(GET(6))) == NULL
+ || (ui.quota=strdup(GET(7))) == NULL
+ || (ui.fullname=strdup(GET(8))) == NULL
+ || (ui.options=strdup(GET(9))) == NULL)
+ {
+ initui();
+ return 0;
+ }
+
+ ui.uid=atoi(GET(3));
+ ui.gid=atoi(GET(4));
+
+ return 0;
+}
+
+struct authsqliteuserinfo *auth_sqlite_getuserinfo(const char *username,
+ const char *service)
+{
+ const char *defdomain =NULL;
+ char *querybuf;
+ char *errmsg;
+ const char *select_clause;
+
+#define DEFAULT_SELECT_QUERY "SELECT %s, %s, %s, %s, %s, %s, %s, %s, %s, %s FROM %s WHERE %s = '%s%s%s' %s%s%s", \
+ login_field, crypt_field, clear_field, uid_field,\
+ gid_field, home_field, maildir_field, quota_field,\
+ name_field, options_field, user_table, login_field,\
+ username_escaped,\
+ has_domain || !*defdomain ? "":"@", has_domain ? "":defdomain, \
+ *where_clause ? " AND (":"", where_clause,\
+ *where_clause ? ")":""
+
+ initui();
+
+ if (!do_connect())
+ return &ui;
+
+ select_clause=read_env("SQLITE_SELECT_CLAUSE");
+ defdomain=read_env("DEFAULT_DOMAIN");
+ if (!defdomain) defdomain="";
+
+ if (!select_clause) /* siefca@pld.org.pl */
+ {
+ const char *user_table,
+ *crypt_field,
+ *clear_field,
+ *name_field,
+ *uid_field,
+ *gid_field,
+ *login_field,
+ *home_field,
+ *maildir_field,
+ *quota_field,
+ *options_field,
+ *where_clause;
+ char *username_escaped;
+ size_t query_size;
+ char dummy_buf[1];
+ int has_domain;
+
+ user_table=read_env("SQLITE_USER_TABLE");
+
+ if (!user_table)
+ {
+ err("authsqlite: SQLITE_USER_TABLE not set in "
+ AUTHSQLITERC ".");
+ return (0);
+ }
+
+ crypt_field=read_env("SQLITE_CRYPT_PWFIELD");
+ clear_field=read_env("SQLITE_CLEAR_PWFIELD");
+ name_field=read_env("SQLITE_NAME_FIELD");
+
+ if (!crypt_field && !clear_field)
+ {
+ err("authsqlite: SQLITE_CRYPT_PWFIELD and "
+ "SQLITE_CLEAR_PWFIELD not set in " AUTHSQLITERC ".");
+ return (0);
+ }
+ if (!crypt_field) crypt_field="\"\"";
+ if (!clear_field) clear_field="\"\"";
+ if (!name_field) name_field="\"\"";
+
+ uid_field = read_env("SQLITE_UID_FIELD");
+ if (!uid_field) uid_field = "uid";
+
+ gid_field = read_env("SQLITE_GID_FIELD");
+ if (!gid_field) gid_field = "gid";
+
+ login_field = read_env("SQLITE_LOGIN_FIELD");
+ if (!login_field) login_field = "id";
+
+ home_field = read_env("SQLITE_HOME_FIELD");
+ if (!home_field) home_field = "home";
+
+ maildir_field=read_env(service && strcmp(service, "courier")==0
+ ? "SQLITE_DEFAULTDELIVERY"
+ : "SQLITE_MAILDIR_FIELD");
+ if (!maildir_field) maildir_field="\"\"";
+
+ quota_field=read_env("SQLITE_QUOTA_FIELD");
+ if (!quota_field) quota_field="\"\"";
+
+ options_field=read_env("SQLITE_AUXOPTIONS_FIELD");
+ if (!options_field) options_field="\"\"";
+
+ where_clause=read_env("SQLITE_WHERE_CLAUSE");
+ if (!where_clause) where_clause = "";
+
+ username_escaped=escape_str(username, strlen(username));
+
+ if (!username_escaped)
+ {
+ perror("malloc");
+ return (0);
+ }
+
+ has_domain=strchr(username, '@') != NULL;
+
+ query_size=snprintf(dummy_buf, 1, DEFAULT_SELECT_QUERY);
+
+ querybuf=malloc(query_size+1);
+
+ if (!querybuf)
+ {
+ free(username_escaped);
+ perror("malloc");
+ return(0);
+ }
+
+ snprintf(querybuf, query_size+1, DEFAULT_SELECT_QUERY);
+ free(username_escaped);
+
+ }
+ else
+ {
+ /* siefca@pld.org.pl */
+ querybuf=auth_parse_select_clause (escape_str,
+ select_clause, username,
+ defdomain, service);
+ if (!querybuf)
+ {
+ DPRINTF("parse_select_clause failed (DEFAULT_DOMAIN not set?)");
+ return 0;
+ }
+ }
+
+ DPRINTF("SQL query: %s", querybuf);
+ errmsg=0;
+ ui_cnt=0;
+ if (sqlite3_exec(dbh, querybuf, select_callback,
+ NULL, &errmsg) != SQLITE_OK)
+ {
+ if (errmsg)
+ {
+ err(errmsg);
+ sqlite3_free(errmsg);
+ }
+
+ free(querybuf);
+ return 0;
+ }
+
+ free(querybuf);
+ if (errmsg)
+ {
+ err(errmsg);
+ sqlite3_free(errmsg);
+ }
+
+ return &ui;
+}
+
+static int dummy_callback(void *dummy, int n, char **columns, char **names)
+{
+ return 0;
+}
+
+int auth_sqlite_setpass(const char *user, const char *pass,
+ const char *oldpass)
+{
+ char *newpass_crypt;
+ char *sql_buf;
+ int rc=0;
+ char *errmsg;
+ char *clear_escaped;
+ char *crypt_escaped;
+
+ const char *clear_field =NULL,
+ *crypt_field =NULL,
+ *defdomain =NULL,
+ *where_clause =NULL,
+ *user_table =NULL,
+ *login_field =NULL,
+ *chpass_clause =NULL; /* siefca@pld.org.pl */
+
+ if (!do_connect()) return (-1);
+
+ if (!(newpass_crypt=authcryptpasswd(pass, oldpass)))
+ return (-1);
+
+ clear_escaped=escape_str(pass, strlen(pass));
+
+ if (!clear_escaped)
+ {
+ perror("malloc");
+ free(newpass_crypt);
+ return -1;
+ }
+
+ crypt_escaped=escape_str(newpass_crypt, strlen(newpass_crypt));
+
+ if (!crypt_escaped)
+ {
+ perror("malloc");
+ free(clear_escaped);
+ free(newpass_crypt);
+ return -1;
+ }
+
+ /* siefca@pld.org.pl */
+ chpass_clause=read_env("SQLITE_CHPASS_CLAUSE");
+ defdomain=read_env("DEFAULT_DOMAIN");
+ user_table=read_env("SQLITE_USER_TABLE");
+ if (!chpass_clause)
+ {
+ int has_domain=strchr(user, '@') != NULL;
+ char *username_escaped;
+ char dummy_buf[1];
+ size_t sql_buf_size;
+
+ username_escaped=escape_str(user, strlen(user));
+
+ if (!username_escaped)
+ {
+ perror("malloc");
+ free(clear_escaped);
+ free(crypt_escaped);
+ free(newpass_crypt);
+ return -1;
+ }
+
+ login_field = read_env("SQLITE_LOGIN_FIELD");
+ if (!login_field) login_field = "id";
+ crypt_field=read_env("SQLITE_CRYPT_PWFIELD");
+ clear_field=read_env("SQLITE_CLEAR_PWFIELD");
+ where_clause=read_env("SQLITE_WHERE_CLAUSE");
+
+ if (!where_clause)
+ where_clause="";
+
+ if (!crypt_field)
+ crypt_field="";
+
+ if (!clear_field)
+ clear_field="";
+
+ if (!defdomain)
+ defdomain="";
+
+#define DEFAULT_SETPASS_UPDATE \
+ "UPDATE %s SET %s%s%s%s %s %s%s%s%s WHERE %s='%s%s%s' %s%s%s", \
+ user_table, \
+ *clear_field ? clear_field:"", \
+ *clear_field ? "='":"", \
+ *clear_field ? clear_escaped:"", \
+ *clear_field ? "'":"", \
+ \
+ *clear_field && *crypt_field ? ",":"", \
+ \
+ *crypt_field ? crypt_field:"", \
+ *crypt_field ? "='":"", \
+ *crypt_field ? crypt_escaped:"", \
+ *crypt_field ? "'":"", \
+ login_field, \
+ username_escaped, \
+ has_domain || !*defdomain ? "":"@", \
+ has_domain ? "":defdomain, \
+ *where_clause ? " AND (":"", where_clause, \
+ *where_clause ? ")":""
+
+
+ sql_buf_size=snprintf(dummy_buf, 1, DEFAULT_SETPASS_UPDATE);
+
+ sql_buf=malloc(sql_buf_size+1);
+
+ if (sql_buf)
+ snprintf(sql_buf, sql_buf_size+1,
+ DEFAULT_SETPASS_UPDATE);
+
+ free(username_escaped);
+ }
+ else
+ {
+ sql_buf=auth_parse_chpass_clause(escape_str, chpass_clause,
+ user,
+ defdomain,
+ clear_escaped,
+ crypt_escaped);
+ }
+
+ free(clear_escaped);
+ free(crypt_escaped);
+ free(newpass_crypt);
+
+ if (courier_authdebug_login_level >= 2)
+ {
+ DPRINTF("setpass SQL: %s", sql_buf);
+ }
+
+ errmsg=NULL;
+
+ if (sqlite3_exec(dbh, sql_buf, dummy_callback,
+ NULL, &errmsg) != SQLITE_OK)
+ {
+ rc=-1;
+ }
+ else
+ {
+ if (sqlite3_changes(dbh) > 0)
+ {
+ DPRINTF("authsqllite: password updated");
+ }
+ else
+ {
+ rc=-1;
+ DPRINTF("authsqllite: password not updated");
+ }
+ }
+
+ if (errmsg)
+ {
+ err(errmsg);
+ sqlite3_free(errmsg);
+ }
+
+ free(sql_buf);
+ return (rc);
+}
+
+struct enumerate_user_cb {
+
+ void (*cb_func)(const char *name,
+ uid_t uid,
+ gid_t gid,
+ const char *homedir,
+ const char *maildir,
+ const char *options,
+ void *void_arg);
+ void *void_arg;
+};
+
+static int enumerate_callback(void *closure,
+ int n, char **columns, char **names)
+{
+ struct enumerate_user_cb *cb=(struct enumerate_user_cb *)closure;
+
+ const char *username;
+ uid_t uid;
+ gid_t gid;
+ const char *homedir;
+ const char *maildir;
+ const char *options;
+
+ username=GET(0);
+ uid=atol(GET(1)); /* FIXME use strtol to validate */
+ gid=atol(GET(2));
+ homedir=GET(3);
+ maildir=GET(4);
+ options=GET(5);
+
+ if (maildir && !*maildir)
+ maildir=NULL;
+
+ if (options && !*options)
+ options=NULL;
+
+ (*cb->cb_func)(username, uid, gid, homedir,
+ maildir, options, cb->void_arg);
+ return 0;
+}
+
+void auth_sqlite_enumerate( void(*cb_func)(const char *name,
+ uid_t uid,
+ gid_t gid,
+ const char *homedir,
+ const char *maildir,
+ const char *options,
+ void *void_arg),
+ void *void_arg)
+{
+ const char *defdomain, *select_clause;
+ char *querybuf;
+ char *errmsg;
+ struct enumerate_user_cb cb;
+
+ cb.cb_func=cb_func;
+ cb.void_arg=void_arg;
+
+ if (!do_connect()) return;
+
+ initui();
+
+ select_clause=read_env("SQLITE_ENUMERATE_CLAUSE");
+ defdomain=read_env("DEFAULT_DOMAIN");
+ if (!defdomain || !defdomain[0])
+ defdomain="*"; /* otherwise parse_select_clause fails */
+
+ if (!select_clause)
+ {
+ const char *user_table,
+ *uid_field,
+ *gid_field,
+ *login_field,
+ *home_field,
+ *maildir_field,
+ *options_field,
+ *where_clause;
+ char dummy_buf[1];
+ size_t query_len;
+
+ user_table=read_env("SQLITE_USER_TABLE");
+
+ if (!user_table)
+ {
+ err("authsqlite: SQLITE_USER_TABLE not set in "
+ AUTHSQLITERC ".");
+ return;
+ }
+
+ uid_field = read_env("SQLITE_UID_FIELD");
+ if (!uid_field) uid_field = "uid";
+
+ gid_field = read_env("SQLITE_GID_FIELD");
+ if (!gid_field) gid_field = "gid";
+
+ login_field = read_env("SQLITE_LOGIN_FIELD");
+ if (!login_field) login_field = "id";
+
+ home_field = read_env("SQLITE_HOME_FIELD");
+ if (!home_field) home_field = "home";
+
+ maildir_field=read_env("SQLITE_MAILDIR_FIELD");
+ if (!maildir_field) maildir_field="\"\"";
+
+ options_field=read_env("SQLITE_AUXOPTIONS_FIELD");
+ if (!options_field) options_field="\"\"";
+
+ where_clause=read_env("SQLITE_WHERE_CLAUSE");
+ if (!where_clause) where_clause = "";
+
+
+#define DEFAULT_ENUMERATE_QUERY \
+ "SELECT %s, %s, %s, %s, %s, %s FROM %s %s%s",\
+ login_field, uid_field, gid_field, \
+ home_field, maildir_field, \
+ options_field, user_table, \
+ *where_clause ? " WHERE ":"", \
+ where_clause
+
+ query_len=snprintf(dummy_buf, 1, DEFAULT_ENUMERATE_QUERY);
+
+ querybuf=malloc(query_len+1);
+
+ if (!querybuf)
+ {
+ perror("malloc");
+ return;
+ }
+
+ snprintf(querybuf, query_len+1, DEFAULT_ENUMERATE_QUERY);
+ }
+ else
+ {
+ /* siefca@pld.org.pl */
+ querybuf=auth_parse_select_clause (escape_str,
+ select_clause, "*",
+ defdomain, "enumerate");
+ if (!querybuf)
+ {
+ DPRINTF("authsqlite: parse_select_clause failed");
+ return;
+ }
+ }
+ DPRINTF("authsqlite: enumerate query: %s", querybuf);
+
+ errmsg=NULL;
+
+ sqlite3_exec(dbh, querybuf, enumerate_callback, &cb, &errmsg);
+
+ if (errmsg)
+ {
+ err(errmsg);
+ sqlite3_free(errmsg);
+ }
+ free(querybuf);
+
+ (*cb.cb_func)(NULL, 0, 0, NULL, NULL, NULL, cb.void_arg);
+}
HCoop / hcoop / debian / courier-authlib.git / blobdiff