pegasus/src/Pegasus/Security/Authentication/SecureLocalAuthenticator.cpp - diff

Return to SecureLocalAuthenticator.cpp CVS log

Up to [Pegasus] / pegasus / src / Pegasus / Security / Authentication

Diff for /pegasus/src/Pegasus/Security/Authentication/SecureLocalAuthenticator.cpp between version 1.1.2.1 and 1.13

version 1.1.2.1, 2001/10/06 00:33:10

version 1.13, 2007/05/25 18:35:18

Line 1

//%/////////////////////////////////////////////////////////////////////////////

//%2006////////////////////////////////////////////////////////////////////////

// The Open Group, Tivoli Systems

// Permission is hereby granted, free of charge, to any person obtaining a

// copy of this software and associated documentation files (the "Software"),

// Company, L.P.; IBM Corp.; The Open Group; Tivoli Systems.

// to deal in the Software without restriction, including without limitation

// the rights to use, copy, modify, merge, publish, distribute, sublicense,

// IBM Corp.; EMC Corporation, The Open Group.

// and/or sell copies of the Software, and to permit persons to whom the

// Software is furnished to do so, subject to the following conditions:

// IBM Corp.; EMC Corporation; VERITAS Software Corporation; The Open Group.

// The above copyright notice and this permission notice shall be included in

// EMC Corporation; VERITAS Software Corporation; The Open Group.

// all copies of substantial portions of this software.

// EMC Corporation; Symantec Corporation; The Open Group.

// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR

// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,

// Permission is hereby granted, free of charge, to any person obtaining a copy

// FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL

// of this software and associated documentation files (the "Software"), to

// THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER

// deal in the Software without restriction, including without limitation the

// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING

// rights to use, copy, modify, merge, publish, distribute, sublicense, and/or

// FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER

// sell copies of the Software, and to permit persons to whom the Software is

// DEALINGS IN THE SOFTWARE.

// furnished to do so, subject to the following conditions:

// THE ABOVE COPYRIGHT NOTICE AND THIS PERMISSION NOTICE SHALL BE INCLUDED IN

// ALL COPIES OR SUBSTANTIAL PORTIONS OF THE SOFTWARE. THE SOFTWARE IS PROVIDED

// "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT

// LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR

// PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT

// HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN

// ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION

// WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

//==============================================================================

// Author: Nag Boranna, Hewlett-Packard Company(nagaraja_boranna@hp.com)

// Modified By:

//%/////////////////////////////////////////////////////////////////////////////

#include <Pegasus/Security/Authentication/LocalAuthFile.h>

#include <Pegasus/Common/FileSystem.h>

#include <Pegasus/Common/Tracer.h>

#include <Pegasus/Common/Executor.h>

#include <Executor/Strlcpy.h>

#include "LocalAuthFile.h"

#include "SecureLocalAuthenticator.h"

PEGASUS_USING_STD;

PEGASUS_NAMESPACE_BEGIN

/**

Constant representing the pegasus authentication challenge header.

static const String PEGASUS_CHALLENGE_HEADER = "WWW-Authenticate: ";

/* constructor. */

SecureLocalAuthenticator::SecureLocalAuthenticator()

{

PEG_METHOD_ENTER(TRC_AUTHENTICATION,

"SecureLocalAuthenticator::SecureLocalAuthenticator()");

PEG_METHOD_EXIT();

}

/* destructor. */

SecureLocalAuthenticator::~SecureLocalAuthenticator()

{

PEG_METHOD_ENTER(TRC_AUTHENTICATION,

"SecureLocalAuthenticator::~SecureLocalAuthenticator()");

}

PEG_METHOD_EXIT();

Boolean SecureLocalAuthenticator::authenticate(String userName, String password)

{

// not supported for local authentication, so return false.

return (false);

}

// Does local authentication

Boolean SecureLocalAuthenticator::authenticate

Boolean SecureLocalAuthenticator::authenticate(

(

const String& filePath,

String userName,

const String& secretReceived,

String secretReceived,

const String& secretKept)

String secretKept

)

{

PEG_METHOD_ENTER(TRC_AUTHENTICATION,

"SecureLocalAuthenticator::authenticate()");

Boolean authenticated = false;

if ((!String::equal(secretReceived, String::EMPTY)) &&

// Use executor, if present.

(!String::equal(secretKept, String::EMPTY)))

if (Executor::detectExecutor() == 0)

{

if (String::equal(secretKept, secretReceived))

if (!String::equal(secretKept, String::EMPTY) &&

String::equal(secretKept, secretReceived))

{

authenticated = true;

}

else if (Executor::authenticateLocal(

(const char*)filePath.getCString(),

(const char*)secretReceived.getCString()) == 0)

{

authenticated = true;

}

else

{

// Check secret.

if (!String::equal(secretKept, String::EMPTY) &&

String::equal(secretKept, secretReceived))

{

authenticated = true;

}

// Remove the auth file created for this user request

if (filePath.size())

{

if (FileSystem::exists(filePath))

{

FileSystem::removeFile(filePath);

}

PEG_METHOD_EXIT();

return authenticated;

}

Boolean SecureLocalAuthenticator::validateUser (const String& userName)

{

PEG_METHOD_ENTER(TRC_AUTHENTICATION,

"SecureLocalAuthenticator::validateUser()");

Boolean authenticated = false;

// ATTN: Delete the authentication secret file

if (System::isSystemUser(userName.getCString()))

//if (!localAuthFile.deleteFile())

{

//{

authenticated = true;

//}

}

PEG_METHOD_EXIT();

return (authenticated);

}

Line 87

Line 146

// Create authentication response header

String SecureLocalAuthenticator::getAuthResponseHeader(

String userName,

const String& authType,

String& challenge)

const String& userName,

String& filePath,

String& secret)

{

String responseHeader = String::EMPTY;

PEG_METHOD_ENTER(TRC_AUTHENTICATION,

"SecureLocalAuthenticator::getAuthResponseHeader()");

String responseHeader = PEGASUS_CHALLENGE_HEADER;

responseHeader.append(authType);

responseHeader.append(" \"");

// Use executor, if present.

if (Executor::detectExecutor() == 0)

{

char filePathBuffer[EXECUTOR_BUFFER_SIZE];

if (Executor::challengeLocal(

userName.getCString(), filePathBuffer) != 0)

{

throw CannotOpenFile(filePathBuffer);

}

filePath = filePathBuffer;

secret.clear();

responseHeader.append(filePath);

responseHeader.append("\"");

}

else

{

// create a file using user name and write a random number in it.

LocalAuthFile localAuthFile(userName);

String filePath = localAuthFile.create();

filePath = localAuthFile.create();

// get the challenge string

// get the secret string

challenge = localAuthFile.getChallengeString();

secret = localAuthFile.getSecretString();

// build response header with file path and challenge string.

responseHeader.append(filePath);

responseHeader.assign(filePath);

responseHeader.append("\"");

return (responseHeader);

}

PEG_METHOD_EXIT();

return responseHeader;

}

PEGASUS_NAMESPACE_END

Legend:

Removed from v.1.1.2.1
changed lines
	Added in v.1.13

No CVS admin address has been configured