![[BACK]](/icons/back.gif){kind=icon}
Return to skeyinit.c CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [local] / src / usr.bin / skeyinit|
Return to skeyinit.c CVS log | Up to [local] / src / usr.bin / skeyinit |
1.1 deraadt 1: /* $NetBSD: skeyinit.c,v 1.6 1995/06/05 19:50:48 pk Exp $ */
2:
3: /* S/KEY v1.1b (skeyinit.c)
4: *
5: * Authors:
6: * Neil M. Haller <nmh@thumper.bellcore.com>
7: * Philip R. Karn <karn@chicago.qualcomm.com>
8: * John S. Walden <jsw@thumper.bellcore.com>
9: * Scott Chasin <chasin@crimelab.com>
10: *
11: * S/KEY initialization and seed update
12: */
13:
14: #include <sys/param.h>
15: #include <sys/time.h>
16: #include <sys/resource.h>
17:
18: #include <stdio.h>
19: #include <stdlib.h>
20: #include <string.h>
21: #include <err.h>
22: #include <pwd.h>
23: #include <unistd.h>
24: #include <time.h>
25: #include <ctype.h>
26:
27: #include "skey.h"
28:
29: #define NAMELEN 2
30:
31: int skeylookup __ARGS((struct skey * mp, char *name));
32:
33: int
34: main(argc, argv)
35: int argc;
36: char *argv[];
37: {
38: int rval, n, nn, i, defaultsetup, l;
39: time_t now;
40: char hostname[MAXHOSTNAMELEN];
41: char seed[18], tmp[80], key[8], defaultseed[17];
42: char passwd[256], passwd2[256], tbuf[27], buf[60];
43: char lastc, me[80], user[8], *salt, *p, *pw;
44: struct skey skey;
45: struct passwd *pp;
46: struct tm *tm;
47:
48: time(&now);
49: tm = localtime(&now);
50: strftime(tbuf, sizeof(tbuf), "%M%j", tm);
51:
52: if (gethostname(hostname, sizeof(hostname)) < 0)
53: err(1, "gethostname");
54: strncpy(defaultseed, hostname, sizeof(defaultseed)- 1);
55: defaultseed[4] = '\0';
56: strncat(defaultseed, tbuf, sizeof(defaultseed) - 5);
57:
58: if ((pp = getpwuid(getuid())) == NULL)
59: err(1, "no user with uid %d", getuid());
60: strcpy(me, pp->pw_name);
61:
62: if ((pp = getpwnam(me)) == NULL)
63: err(1, "Who are you?");
64:
65: defaultsetup = 1;
66: if (argc > 1) {
67: if (strcmp("-s", argv[1]) == 0)
68: defaultsetup = 0;
69: else
70: pp = getpwnam(argv[1]);
71:
72: if (argc > 2)
73: pp = getpwnam(argv[2]);
74: }
75: if (pp == NULL) {
76: err(1, "User unknown");
77: }
78: if (strcmp(pp->pw_name, me) != 0) {
79: if (getuid() != 0) {
80: /* Only root can change other's passwds */
81: printf("Permission denied.\n");
82: exit(1);
83: }
84: }
85: salt = pp->pw_passwd;
86:
87: setpriority(PRIO_PROCESS, 0, -4);
88:
89: if (getuid() != 0) {
90: setpriority(PRIO_PROCESS, 0, -4);
91:
92: pw = getpass("Password:");
93: p = crypt(pw, salt);
94:
95: setpriority(PRIO_PROCESS, 0, 0);
96:
97: if (pp && strcmp(p, pp->pw_passwd)) {
98: printf("Password incorrect.\n");
99: exit(1);
100: }
101: }
102: rval = skeylookup(&skey, pp->pw_name);
103: switch (rval) {
104: case -1:
105: err(1, "cannot open database");
106: case 0:
107: printf("[Updating %s]\n", pp->pw_name);
108: printf("Old key: %s\n", skey.seed);
109:
110: /*
111: * lets be nice if they have a skey.seed that
112: * ends in 0-8 just add one
113: */
114: l = strlen(skey.seed);
115: if (l > 0) {
116: lastc = skey.seed[l - 1];
117: if (isdigit(lastc) && lastc != '9') {
118: strcpy(defaultseed, skey.seed);
119: defaultseed[l - 1] = lastc + 1;
120: }
121: if (isdigit(lastc) && lastc == '9' && l < 16) {
122: strcpy(defaultseed, skey.seed);
123: defaultseed[l - 1] = '0';
124: defaultseed[l] = '0';
125: defaultseed[l + 1] = '\0';
126: }
127: }
128: break;
129: case 1:
130: printf("[Adding %s]\n", pp->pw_name);
131: break;
132: }
133: n = 99;
134:
135: if (!defaultsetup) {
136: printf("You need the 6 english words generated from the \"key\" command.\n");
137: for (i = 0;; i++) {
138: if (i >= 2)
139: exit(1);
140: printf("Enter sequence count from 1 to 10000: ");
141: fgets(tmp, sizeof(tmp), stdin);
142: n = atoi(tmp);
143: if (n > 0 && n < 10000)
144: break; /* Valid range */
145: printf("\n Error: Count must be > 0 and < 10000\n");
146: }
147: }
148: if (!defaultsetup) {
149: printf("Enter new key [default %s]: ", defaultseed);
150: fflush(stdout);
151: fgets(seed, sizeof(seed), stdin);
152: rip(seed);
153: if (strlen(seed) > 16) {
154: printf("Notice: Seed truncated to 16 characters.\n");
155: seed[16] = '\0';
156: }
157: if (seed[0] == '\0')
158: strcpy(seed, defaultseed);
159:
160: for (i = 0;; i++) {
161: if (i >= 2)
162: exit(1);
163:
164: printf("s/key %d %s\ns/key access password: ", n, seed);
165: fgets(tmp, sizeof(tmp), stdin);
166: rip(tmp);
167: backspace(tmp);
168:
169: if (tmp[0] == '?') {
170: printf("Enter 6 English words from secure S/Key calculation.\n");
171: continue;
172: }
173: if (tmp[0] == '\0') {
174: exit(1);
175: }
176: if (etob(key, tmp) == 1 || atob8(key, tmp) == 0)
177: break; /* Valid format */
178: printf("Invalid format - try again with 6 English words.\n");
179: }
180: } else {
181: /* Get user's secret password */
182: for (i = 0;; i++) {
183: if (i >= 2)
184: exit(1);
185:
186: printf("Enter secret password: ");
187: readpass(passwd, sizeof(passwd));
188: if (passwd[0] == '\0')
189: exit(1);
190:
191: printf("Again secret password: ");
192: readpass(passwd2, sizeof(passwd));
193: if (passwd2[0] == '\0')
194: exit(1);
195:
196: if (strlen(passwd) < 4 && strlen(passwd2) < 4)
197: err(1, "Your password must be longer");
198: if (strcmp(passwd, passwd2) == 0)
199: break;
200:
201: printf("Passwords do not match.\n");
202: }
203: strcpy(seed, defaultseed);
204:
205: /* Crunch seed and password into starting key */
206: if (keycrunch(key, seed, passwd) != 0)
207: err(2, "key crunch failed");
208: nn = n;
209: while (nn-- != 0)
210: f(key);
211: }
212: time(&now);
213: tm = localtime(&now);
214: strftime(tbuf, sizeof(tbuf), " %b %d,%Y %T", tm);
215:
216: skey.val = (char *)malloc(16 + 1);
217:
218: btoa8(skey.val, key);
219:
220: fprintf(skey.keyfile, "%s %04d %-16s %s %-21s\n", pp->pw_name, n,
221: seed, skey.val, tbuf);
222: fclose(skey.keyfile);
223: printf("ID %s s/key is %d %s\n", pp->pw_name, n, seed);
224: printf("Next login password: %s\n", btoe(buf, key));
225: #ifdef HEXIN
226: printf("%s\n", put8(buf, key));
227: #endif
228:
229: exit(1);
230: }