Changeset 2457 for neercs/trunk/src/effects.cTweet

Timestamp:

Jun 19, 2008, 2:23:46 PM (13 years ago)

Author:

Jean-Yves Lamoureux

Message:

• Added lock-screen bug^{Wfeature using PAM (likely to work only with passwords yet)}
• Removed this UGLY space character SOMEONE left on the configure.ac. THAT WAS HORRIIIIIBLE.

File:

• neercs/trunk/src/effects.c (modified) (2 diffs)

neercs/trunk/src/effects.c

@@ -21 +21 @@
 #include <config.h>
 #include <time.h>
+#include <sys/wait.h>
+#include <sys/types.h>
+#include <security/pam_appl.h>
+#include <security/pam_misc.h>
+#include <pwd.h>
 
 #include "neercs.h"
 
+static int convpam(int num_msg, const struct pam_message **msg,
+        struct pam_response **resp, void *appdata_ptr);
 
 void draw_thumbnails(cucul_canvas_t *cv, struct screen_list *screen_list)
@@ -211 +218 @@
 
 
+void draw_lock(cucul_canvas_t *cv, struct screen_list *screen_list)
+{
+    unsigned int i;
+    char buffer[1024];
+    gethostname(buffer, sizeof(buffer)-1);
+
+    int w = 65, h = 20;
+    int x = (cucul_get_canvas_width(cv) - w) / 2;
+    int y = (cucul_get_canvas_height(cv) - h) / 2;
+
+
+    cucul_set_color_ansi(cv, CUCUL_BLUE, CUCUL_BLUE);
+    cucul_fill_box(cv,
+                   x, y,
+                   w, h, '#');
+    cucul_set_color_ansi(cv, CUCUL_DEFAULT, CUCUL_BLUE);
+    cucul_draw_cp437_box(cv,
+                         x, y,
+                         w, h);
+
+    x+=2;
+    y++;
+    cucul_printf(cv,
+                 (cucul_get_canvas_width(cv) - strlen(PACKAGE_STRING " locked")) / 2,
+                 y-1,
+                 PACKAGE_STRING " locked");
+
+    cucul_printf(cv, x, y++, "Please type in your password for %s@%s :", getenv("USER"), buffer);
+    y+=2;
+
+    x = (cucul_get_canvas_width(cv)/2) - ((strlen(screen_list->lockpass) / 2) + strlen("Password : "));
+    cucul_printf(cv, x, y, "Password : ");
+    x+=strlen("Password : ");
+    for(i=0; i<strlen(screen_list->lockpass); i++)
+    {
+        cucul_put_str(cv, x, y, "*");
+        x++;
+    }
+
+
+    if(strlen(screen_list->lockmsg))
+    {
+        x = ((cucul_get_canvas_width(cv) - w) / 2) + (strlen(screen_list->lockmsg));
+        y+=2;
+        cucul_set_color_ansi(cv, CUCUL_RED, CUCUL_BLUE);
+        cucul_printf(cv, x, y, "Error : %s", screen_list->lockmsg);
+    }
+}
+
+
+
+/* FIXME, handle this without assuming this is a password auth */
+static int convpam(int num_msg, const struct pam_message **msg,
+                struct pam_response **resp, void *appdata_ptr)
+{
+
+    struct pam_response *aresp;
+    int i;
+    aresp = calloc(num_msg, sizeof(*aresp));
+
+    for (i = 0; i < num_msg; ++i)
+    {
+        switch(msg[i]->msg_style)
+        {
+        case PAM_PROMPT_ECHO_ON:
+        case PAM_PROMPT_ECHO_OFF:
+            aresp[i].resp = strdup(appdata_ptr);
+            aresp[i].resp_retcode = 0;
+            break;
+        case PAM_ERROR_MSG:
+            break;
+        default :
+            printf("Unknow message type from PAM\n");
+            break;
+        }
+    }
+
+    *resp = aresp;
+    return (PAM_SUCCESS);
+
+}
+
+
+int validate_lock(struct screen_list *screen_list, char *user, char *pass)
+{
+    int ret;
+    pam_handle_t *pamh=NULL;
+    char buffer[100];
+    const char *service="neercs";
+    struct pam_conv conv = {
+        convpam,
+        pass,
+    };
+
+    ret = pam_start(service, user, &conv, &pamh);
+    if(ret!=PAM_SUCCESS)
+        return 0;
+    pam_set_item(pamh, PAM_RUSER, user);
+
+    ret = gethostname(buffer, sizeof(buffer)-1);
+    if (ret) {
+        perror("failed to look up hostname");
+        ret = pam_end(pamh, PAM_ABORT);
+        sprintf(screen_list->lockmsg, "Can't get hostname");
+        pam_end(pamh, PAM_SUCCESS);
+        return 0;
+    }
+
+    ret = pam_set_item(pamh, PAM_RHOST, buffer);
+    if(ret!=PAM_SUCCESS)
+    {
+        sprintf(screen_list->lockmsg, "Can't set hostname");
+        pam_end(pamh, PAM_SUCCESS);
+        return 0;
+    }
+
+    ret = pam_authenticate(pamh, 0);
+    if(ret!=PAM_SUCCESS)
+    {
+        sprintf(screen_list->lockmsg, "Can't authenticate");
+        pam_end(pamh, PAM_SUCCESS);
+        return 0;
+    }
+
+    ret = pam_end(pamh, PAM_SUCCESS);
+    return 1;
+}