~clint-fewbar/ubuntu/precise/squid3/ignore-sighup-early

BasicUser::BasicUser(AuthConfig *config) : AuthUser (config) , passwd (NULL), credentials_checkedtime(0), auth_queue(NULL), cleartext (NULL), currentRequest (NULL), httpAuthHeader (NULL)

385

BasicUser::BasicUser(AuthConfig *aConfig) : AuthUser (aConfig) , passwd (NULL), credentials_checkedtime(0), auth_queue(NULL), cleartext (NULL), currentRequest (NULL), httpAuthHeader (NULL)

386

{

387

flags.credentials_ok = 0;

388

}

409

* Don't allow NL or CR in the credentials.

410

* Oezguer Kesim <oec@codeblau.de>

411

412

debugs(29, 9, "BasicUser::decodeCleartext: '" << cleartext << "'");

412

debugs(29, 9, HERE << "'" << cleartext << "'");

413

414

if (strcspn(cleartext, "\r\n") != strlen(cleartext)) {

415

debugs(29, 1, "BasicUser::decodeCleartext: bad characters in authorization header '" << httpAuthHeader << "'");

415

debugs(29, 1, HERE << "bad characters in authorization header '" << httpAuthHeader << "'");

416

safe_free(cleartext);

417

return false;

418

}

446

passwd = strchr(cleartext, ':');

447

448

if (passwd == NULL) {

449

debugs(29, 4, "authenticateBasicDecodeAuth: no password in proxy authorization header '" << httpAuthHeader << "'");

449

debugs(29, 4, HERE << "no password in proxy authorization header '" << httpAuthHeader << "'");

450

passwd = NULL;

451

currentRequest->setDenyMessage ("no password was present in the HTTP [proxy-]authorization header. This is most likely a browser bug");

451

currentRequest->setDenyMessage("no password was present in the HTTP [proxy-]authorization header. This is most likely a browser bug");

452

} else {

453

++passwd;

454

if (*passwd == '\0') {

455

debugs(29, 4, "authenticateBasicDecodeAuth: Disallowing empty password,user is '" << username() << "'");

455

debugs(29, 4, HERE << "Disallowing empty password,user is '" << username() << "'");

456

passwd = NULL;

457

currentRequest->setDenyMessage ("Request denied because you provided an empty password. Users MUST have a password.");

457

currentRequest->setDenyMessage("Request denied because you provided an empty password. Users MUST have a password.");

458

} else {

459

passwd = xstrndup(passwd, USER_IDENT_SZ);

460

}

467

currentRequest = auth_user_request;

468

httpAuthHeader = proxy_auth;

469

if (decodeCleartext ()) {

470

extractUsername();

471

extractPassword();

470

extractUsername();

471

extractPassword();

472

}

473

currentRequest = NULL;

474

httpAuthHeader = NULL;

478

BasicUser::valid() const

479

{

480

if (username() == NULL)

481

return false;

481

return false;

482

if (passwd == NULL)

483

return false;

483

return false;

484

return true;

485

}

486

489

{

490

if (username()) {

491

/* log the username */

492

debugs(29, 9, "authBasicDecodeAuth: Creating new user for logging '" << username() << "'");

492

debugs(29, 9, HERE << "Creating new user for logging '" << username() << "'");

493

/* new scheme data */

494

BasicUser *basic_auth = new BasicUser(& basicConfig);

495

auth_user_request->user(basic_auth);

507

BasicUser::makeCachedFrom()

508

{

509

/* the user doesn't exist in the username cache yet */

510

debugs(29, 9, "authBasicDecodeAuth: Creating new user '" << username() << "'");

510

debugs(29, 9, HERE << "Creating new user '" << username() << "'");

511

BasicUser *basic_user = new BasicUser(&basicConfig);

512

/* save the credentials */

513

basic_user->username(username());

529

void

530

BasicUser::updateCached(BasicUser *from)

531

{

532

debugs(29, 9, "authBasicDecodeAuth: Found user '" << from->username() << "' in the user cache as '" << this << "'");

532

debugs(29, 9, HERE << "Found user '" << from->username() << "' in the user cache as '" << this << "'");

533

534

if (strcmp(from->passwd, passwd)) {

535

debugs(29, 4, "authBasicDecodeAuth: new password found. Updating in user master record and resetting auth state to unchecked");

535

debugs(29, 4, HERE << "new password found. Updating in user master record and resetting auth state to unchecked");

536

flags.credentials_ok = 0;

537

xfree(passwd);

538

passwd = from->passwd;

540

}

541

542

if (flags.credentials_ok == 3) {

543

debugs(29, 4, "authBasicDecodeAuth: last attempt to authenticate this user failed, resetting auth state to unchecked");

543

debugs(29, 4, HERE << "last attempt to authenticate this user failed, resetting auth state to unchecked");

544

flags.credentials_ok = 0;

545

}

546

}

547

548

/**

549

* Decode a Basic [Proxy-]Auth string, linking the passed

550

* auth_user_request structure to any existing user structure or creating one

551

* if needed. Note that just returning will be treated as

552

* "cannot decode credentials". Use the message field to return a

551

* if needed. Note that just returning will be treated as

552

* "cannot decode credentials". Use the message field to return a

553

* descriptive message to the user.

554

555

AuthUserRequest *

578

/* now lookup and see if we have a matching auth_user structure in

579

* memory. */

580

581

auth_user_t *auth_user;

581

AuthUser *auth_user;

582

583

if ((auth_user = authBasicAuthUserFindUsername(local_basic.username())) == NULL) {

584

auth_user = local_basic.makeCachedFrom();

598

return auth_user_request;

599

}

600

601

/* Initialize helpers and the like for this auth scheme. Called AFTER parsing the

601

/** Initialize helpers and the like for this auth scheme. Called AFTER parsing the

602

* config file */

603

void

604

AuthBasicConfig::init(AuthConfig * scheme)

624

}

625

626

void

627

AuthBasicConfig::registerWithCacheManager(CacheManager & manager)

627

AuthBasicConfig::registerWithCacheManager(void)

628

{

629

manager.registerAction("basicauthenticator",

630

"Basic User Authenticator Stats",

631

authenticateBasicStats, 0, 1);

629

CacheManager::GetInstance()->

630

registerAction("basicauthenticator",

631

"Basic User Authenticator Stats",

632

authenticateBasicStats, 0, 1);

632

633

}

633

634

635

void

653

654

assert(user()->auth_type == AUTH_BASIC);

654

655

basic_auth = dynamic_cast<basic_data *>(user());

655

656

assert(basic_auth != NULL);

656

debugs(29, 9, "AuthBasicUserRequest::start: '" << basic_auth->username() << ":" << basic_auth->passwd << "'");

657

debugs(29, 9, HERE << "'" << basic_auth->username() << ":" << basic_auth->passwd << "'");

657

658

659

if (basicConfig.authenticate == NULL) {

659

660

handler(data, NULL);

671

672

}

672

673

674

void

674

BasicUser::submitRequest (AuthUserRequest * auth_user_request, RH * handler, void *data)

675

BasicUser::submitRequest(AuthUserRequest * auth_user_request, RH * handler, void *data)

675

676

{

676

677

/* mark the user as haveing verification in progress */

677

678

flags.credentials_ok = 2;

682

683

r->handler = handler;

683

684

r->data = cbdataReference(data);

684

685

r->auth_user_request = auth_user_request;

685

xstrncpy(user, rfc1738_escape(username()), sizeof(user));

686

xstrncpy(pass, rfc1738_escape(passwd), sizeof(pass));

686

if (basicConfig.utf8) {

687

latin1_to_utf8(user, sizeof(user), username());

688

latin1_to_utf8(pass, sizeof(pass), passwd);

689

xstrncpy(user, rfc1738_escape(user), sizeof(user));

690

xstrncpy(pass, rfc1738_escape(pass), sizeof(pass));

691

} else {

692

xstrncpy(user, rfc1738_escape(username()), sizeof(user));

693

xstrncpy(pass, rfc1738_escape(passwd), sizeof(pass));

694

}

687

695

snprintf(buf, sizeof(buf), "%s %s\n", user, pass);

688

696

helperSubmit(basicauthenticators, buf, authenticateBasicHandleReply, r);

689

697

}

693

701

{

694

702

return &basicConfig;

695

703

}

696

Older »