File Coverage

blib/lib/Auth/Krb5Afs.pm

Criterion	Covered	Total	%
statement	3	39	7.6
branch	0	14	0.0
condition			n/a
subroutine	1	4	25.0
pod	2	3	66.6
total	6	60	10.0

#! /usr/bin/perl -w
# Auth::Krb5Afs - get krb5 and afs tokens
# Noel Burton-Krahn
# Dec 14, 2003
#
# see the pos docs at the __END__
#
# Copyright (C) 2003 Noel Burton-Krahn
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA

package Auth::Krb5Afs;
use strict;

require Exporter;
our @ISA = qw(Exporter);
our $VERSION = '1.0';

sub new {
    bless({}, shift);
}

sub shell_esc {
    my($s) = @_;
    $s =~ s/'/'"'"'/g;
    $s = "'$s'";
    return $s;
}

sub authenticate {
    my($self) = shift;
    my($user, $pass, $service) = @_;
    my($s, $err, $pid);
    my(%pwent);

    TRY: {
	unless( @pwent{qw(name passwd uid gid
			  quota comment gcos home
			  shell expire)} = getpwnam($user) ) {
	    $err->{user} = "no such user: $user";
	    last;
	}

	$pid = open(W, "|kinit -r 10h -l 20m " . shell_esc($user) . " >/dev/null 2>&1");
	print(W "$pass\n");
	close(W);
	if( $? ) {
	    $s =~ s/kinit.*?://;
	    $err->{pass} = "unknown user or wrong password";
	    last;
	}

	$s = `aklog -setpag 2>&1`;
	if( $? ) {
	    $err->{pass} = "aklog failed: $s";
	}

	# set the environment (remember to set the uid last)
	$ENV{USER} = $pwent{name};
	$ENV{HOME} = $pwent{home};
	$ENV{SHELL} = $pwent{shell};

	if( $> == 0 ) {
	    if( -f $ENV{KRB5CCNAME} ) {
		chown($pwent{uid}, $pwent{gid}, $ENV{KRB5CCNAME}) or die("chown $ENV{KRB5CCNAME}: $!");
	    }
	    $( = $) = $pwent{gid};
	    my $id = `id -G '$pwent{name}'`;
	    $( = $pwent{gid};
	    $) = "$pwent{gid} $id";
	    $< = $> = $pwent{uid};
	}

	# done ok
	$err = undef;
    }
    return wantarray ? ($err, \%pwent) : $err;
}

1;

__END__