2 * lutil_password(credentials, password)
4 * Returns true if user supplied credentials matches
7 * Due to the use of the crypt(3) function
8 * this routine is NOT thread-safe.
13 #include <ac/string.h>
14 #include <ac/unistd.h>
16 #include "lutil_md5.h"
17 #include "lutil_sha1.h"
21 * Return 0 if creds are good.
30 if (cred == NULL || passwd == NULL) {
34 if (strncasecmp(passwd, "{CRYPT}", sizeof("{CRYPT}") - 1) == 0 ) {
35 const char *p = passwd + (sizeof("{CRYPT}") - 1);
37 return( strcmp(p, crypt(cred, p)) );
39 } else if (strncasecmp(passwd, "{MD5}", sizeof("{MD5}") - 1) == 0 ) {
40 lutil_MD5_CTX MD5context;
41 unsigned char MD5digest[16];
42 char base64digest[25]; /* ceiling(sizeof(input)/3) * 4 + 1 */
44 const char *p = passwd + (sizeof("{MD5}") - 1);
46 lutil_MD5Init(&MD5context);
47 lutil_MD5Update(&MD5context,
48 (const unsigned char *)cred, strlen(cred));
49 lutil_MD5Final(MD5digest, &MD5context);
51 if ( lutil_b64_ntop(MD5digest, sizeof(MD5digest),
52 base64digest, sizeof(base64digest)) < 0)
57 return( strcmp(p, base64digest) );
59 } else if (strncasecmp(passwd, "{SHA}",sizeof("{SHA}") - 1) == 0 ) {
60 lutil_SHA1_CTX SHA1context;
61 unsigned char SHA1digest[20];
62 char base64digest[29]; /* ceiling(sizeof(input)/3) * 4 + 1 */
63 const char *p = passwd + (sizeof("{SHA}") - 1);
65 lutil_SHA1Init(&SHA1context);
66 lutil_SHA1Update(&SHA1context,
67 (const unsigned char *) cred, strlen(cred));
68 lutil_SHA1Final(SHA1digest, &SHA1context);
70 if (lutil_b64_ntop(SHA1digest, sizeof(SHA1digest),
71 base64digest, sizeof(base64digest)) < 0)
76 return( strcmp(p, base64digest) );
79 #ifdef SLAPD_CLEARTEXT
80 return( strcmp(passwd, cred) );