Blame view

pop3d/user.c 3.99 KB
1
/* GNU Mailutils -- a suite of utilities for electronic mail
2 3
   Copyright (C) 1999, 2001, 2002, 2003, 2005, 2007, 2009, 2010 Free
   Software Foundation, Inc.
4

5
   GNU Mailutils is free software; you can redistribute it and/or modify
6
   it under the terms of the GNU General Public License as published by
7
   the Free Software Foundation; either version 3, or (at your option)
8 9
   any later version.

10
   GNU Mailutils is distributed in the hope that it will be useful,
11 12 13 14 15
   but WITHOUT ANY WARRANTY; without even the implied warranty of
   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
   GNU General Public License for more details.

   You should have received a copy of the GNU General Public License
16
   along with GNU Mailutils.  If not, see <http://www.gnu.org/licenses/>. */
17 18 19

#include "pop3d.h"

20 21 22 23 24 25 26
struct mu_auth_data *auth_data;

int
pop3d_begin_session ()
{
  int status;

27 28
  mu_diag_output (MU_DIAG_INFO, _("POP3 login: user `%s', source %s"),
		  auth_data->name, auth_data->source);
Sergey Poznyakoff authored
29
  
30 31
  if (check_login_delay (auth_data->name))
    {
32
      mu_diag_output (MU_DIAG_INFO,
33
	      _("user `%s' tried to log in within the minimum allowed delay"),
34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65
	      auth_data->name);
      state = AUTHORIZATION;
      mu_auth_data_destroy (&auth_data);
      return ERR_LOGIN_DELAY;
    }
  
  if (auth_data->change_uid)
    setuid (auth_data->uid);
  
  if ((status = mu_mailbox_create (&mbox, auth_data->mailbox)) != 0
      || (status = mu_mailbox_open (mbox, MU_STREAM_CREAT | MU_STREAM_RDWR)) != 0)
    {
      mu_mailbox_destroy (&mbox);
      state = AUTHORIZATION;
      mu_auth_data_destroy (&auth_data);
      return ERR_MBOX_LOCK;
    }
  
  if (pop3d_lock ())
    {
      mu_mailbox_close (mbox);
      mu_mailbox_destroy (&mbox); 
      mu_auth_data_destroy (&auth_data);
      state = AUTHORIZATION;
      return ERR_MBOX_LOCK;
    }
  
  username = strdup (auth_data->name);
  if (username == NULL)
    pop3d_abquit (ERR_NO_MEM);
  state = TRANSACTION;

Sergey Poznyakoff authored
66
  pop3d_outf ("+OK opened mailbox for %s\n", username);
67 68 69 70 71 72 73 74 75 76 77 78

  if (undelete_on_startup)
    pop3d_undelete_all ();

  deliver_pending_bulletins ();
  
  /* mailbox name */
  {
    mu_url_t url = NULL;
    size_t total = 0;
    mu_mailbox_get_url (mbox, &url);
    mu_mailbox_messages_count (mbox, &total);
79
    mu_diag_output (MU_DIAG_INFO,
80 81
	    ngettext ("user `%s' logged in with mailbox `%s' (%s message)",
		      "user `%s' logged in with mailbox `%s' (%s messages)",
82 83 84 85 86 87 88
		      (unsigned long) total),
	    username, mu_url_to_string (url), mu_umaxtostr (0, total));
  }

  return OK;
}

89
int
90
pop3d_user (char *arg)
91
{
Sergey Poznyakoff authored
92
  char *buf, *pass, *cmd;
93
  char buffer[512];
94
  int xscript_level;
95
  
96 97 98 99 100 101
  if (state != AUTHORIZATION)
    return ERR_WRONG_STATE;

  if ((strlen (arg) == 0) || (strchr (arg, ' ') != NULL))
    return ERR_BAD_ARGS;

Sergey Poznyakoff authored
102
  pop3d_outf ("+OK\n");
103
  pop3d_flush_output ();
104

105
  xscript_level = set_xscript_level (MU_XSCRIPT_SECURE);
106
  buf = pop3d_readline (buffer, sizeof (buffer));
Sergey Poznyakoff authored
107
  pop3d_parse_command (buf, &cmd, &pass);
108 109
  set_xscript_level (xscript_level);
  
110
  if (mu_c_strcasecmp (cmd, "PASS") == 0)
111
    {
112
      int rc;
113

114 115
#ifdef _USE_APOP
      /* Check to see if they have an APOP password. If so, refuse USER/PASS */
116
      tmp = pop3d_apopuser (arg);
117 118
      if (tmp != NULL)
	{
Sergey Poznyakoff authored
119 120
	  mu_diag_output (MU_DIAG_INFO,
			  _("APOP user %s tried to log in with USER"), arg);
121 122 123 124
	  return ERR_BAD_LOGIN;
	}
#endif

125
      auth_data = mu_get_auth_by_name (arg);
126

127
      if (auth_data == NULL)
Alain Magloire authored
128
	{
129
	  mu_diag_output (MU_DIAG_INFO, _("user `%s' nonexistent"), arg);
Alain Magloire authored
130 131 132
	  return ERR_BAD_LOGIN;
	}

133
      rc = mu_authenticate (auth_data, pass);
134
      openlog (MU_LOG_TAG (), LOG_PID, mu_log_facility);
135

136
      if (rc)
137
	{
138 139
	  mu_diag_output (MU_DIAG_INFO,
			  _("user `%s': authentication failed"), arg);
140
	  mu_auth_data_destroy (&auth_data);
141
	  return ERR_BAD_LOGIN;
142
	}
143
    }
144
  else if (mu_c_strcasecmp (cmd, "QUIT") == 0)
145
    {
146
      mu_diag_output (MU_DIAG_INFO, _("possible probe of account `%s'"), arg);
147 148 149 150 151 152
      return pop3d_quit (pass);
    }
  else
    {
      return ERR_BAD_CMD;
    }
153

154
  return pop3d_begin_session ();
155
}
156