pam-auth 0.5.5

Safe Rust wrapper for PAM authentification
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51

// Copyright 2015-2017 pam-auth Developers
//
// Licensed under the Apache License, Version 2.0, <LICENSE-APACHE or
// http://apache.org/licenses/LICENSE-2.0> or the MIT license <LICENSE-MIT or
// http://opensource.org/licenses/MIT>, at your option. This file may not be
// copied, modified, or distributed except according to those terms.

use pam::{PamConversation, PamHandle, PamFlag, PamReturnCode};

/// #[Deprecated]
/// Use Authenticator.authenticate() instead
pub fn login(service: &str, user: &str, password: &str) -> bool {
    use std::ptr;

    let creds: [&str; 2] = [user, password];
    let conv = PamConversation {
        conv: Some(::ffi::converse),
        data_ptr: creds.as_ptr() as *mut ::libc::c_void,
    };
    let mut handle: *mut PamHandle = ptr::null_mut();

    let success = PamReturnCode::SUCCESS;
    let mut res = ::pam::start(service, None, &conv, &mut handle);
    if res != success {
        return false;
    }
    let handle: &mut PamHandle = unsafe {&mut *handle };
    res = ::pam::authenticate(handle, PamFlag::NONE);
    if res != success {
        return pam_fail(handle);
    }
    res = ::pam::acct_mgmt(handle, PamFlag::NONE);
    if res != success {
        return pam_fail(handle);
    }
    res = ::pam::setcred(handle, PamFlag::ESTABLISH_CRED);
    if res != success {
        return pam_fail(handle);
    }
    res = ::pam::open_session(handle, PamFlag::NONE);
    if res != success {
        return pam_fail(handle);
    }
    true
}

fn pam_fail(handle: &mut PamHandle) -> bool {
    ::pam::setcred(handle, PamFlag::DELETE_CRED);
    ::pam::end(handle, PamReturnCode::SUCCESS);
    false
}