forgejo/modules/auth/pam/pam.go

44 lines
933 B
Go
Raw Normal View History

2015-04-23 11:58:57 +00:00
// Copyright 2014 The Gogs Authors. All rights reserved.
// SPDX-License-Identifier: MIT
2015-04-23 11:58:57 +00:00
//go:build pam
2015-04-23 11:58:57 +00:00
package pam
import (
"errors"
"github.com/msteinert/pam"
)
// Supported is true when built with PAM
var Supported = true
2016-11-27 06:03:59 +00:00
// Auth pam auth service
func Auth(serviceName, userName, passwd string) (string, error) {
2015-04-23 11:58:57 +00:00
t, err := pam.StartFunc(serviceName, userName, func(s pam.Style, msg string) (string, error) {
switch s {
case pam.PromptEchoOff:
return passwd, nil
case pam.PromptEchoOn, pam.ErrorMsg, pam.TextInfo:
return "", nil
}
return "", errors.New("Unrecognized PAM message style")
})
if err != nil {
return "", err
2015-04-23 11:58:57 +00:00
}
if err = t.Authenticate(0); err != nil {
return "", err
2015-04-23 11:58:57 +00:00
}
if err = t.AcctMgmt(0); err != nil {
return "", err
}
2015-04-23 11:58:57 +00:00
// PAM login names might suffer transformations in the PAM stack.
// We should take whatever the PAM stack returns for it.
return t.GetItem(pam.User)
2015-04-23 11:58:57 +00:00
}