|
152
|
1 |
|
|
2 |
|
|
3 local nodeprep = require "util.encodings".stringprep.nodeprep; |
|
|
4 local process = require "process"; |
|
|
5 |
|
|
6 local script_type = module:get_option("extauth_type"); |
|
|
7 assert(script_type == "ejabberd"); |
|
|
8 local command = module:get_option("extauth_command"); |
|
|
9 assert(type(command) == "string"); |
|
|
10 local host = module.host; |
|
|
11 assert(not host:find(":")); |
|
|
12 |
|
|
13 local proc; |
|
|
14 local function send_query(text) |
|
|
15 if not proc then |
|
|
16 proc = process.popen(command); |
|
|
17 end |
|
|
18 proc:write(text); |
|
|
19 proc:flush(); |
|
|
20 return proc:read(4); -- FIXME do properly |
|
|
21 end |
|
|
22 |
|
|
23 function do_query(kind, username, password) |
|
|
24 if not username then return nil, "not-acceptable"; end |
|
|
25 username = nodeprep(username); |
|
|
26 if not username then return nil, "jid-malformed"; end |
|
|
27 |
|
|
28 local query = (password and "%s:%s:%s:%s" or "%s:%s:%s"):format(kind, username, host, password); |
|
|
29 local len = #query |
|
|
30 if len > 1000 then return nil, "policy-violation"; end |
|
|
31 |
|
|
32 local lo = len % 256; |
|
|
33 local hi = (len - lo) / 256; |
|
|
34 query = string.char(hi, lo)..query; |
|
|
35 |
|
|
36 local response = send_query(query); |
|
|
37 if response == "\0\2\0\0" then |
|
|
38 return nil, "not-authorized"; |
|
|
39 elseif response == "\0\2\0\1" then |
|
|
40 return true; |
|
|
41 else |
|
|
42 proc = nil; -- TODO kill proc |
|
|
43 return nil, "internal-server-error"; |
|
|
44 end |
|
|
45 end |
|
|
46 |
|
|
47 local provider = { name = "extauth" }; |
|
|
48 |
|
|
49 function provider.test_password(username, password) |
|
|
50 return do_query("auth", username, password); |
|
|
51 end |
|
|
52 |
|
|
53 function provider.set_password(username, password) |
|
|
54 return do_query("setpass", username, password); |
|
|
55 end |
|
|
56 |
|
|
57 function provider.user_exists(username) |
|
|
58 return do_query("isuser", username); |
|
|
59 end |
|
|
60 |
|
|
61 function provider.get_password() return nil, "Passwords not available."; end |
|
|
62 function provider.create_user(username, password) return nil, "Account creation/modification not available."; end |
|
|
63 function provider.get_supported_methods() return {["PLAIN"] = true}; end |
|
|
64 local config = require "core.configmanager"; |
|
|
65 local usermanager = require "core.usermanager"; |
|
|
66 local jid_bare = require "util.jid".bare; |
|
|
67 function provider.is_admin(jid) |
|
|
68 local admins = config.get(host, "core", "admins"); |
|
|
69 if admins ~= config.get("*", "core", "admins") then |
|
|
70 if type(admins) == "table" then |
|
|
71 jid = jid_bare(jid); |
|
|
72 for _,admin in ipairs(admins) do |
|
|
73 if admin == jid then return true; end |
|
|
74 end |
|
|
75 elseif admins then |
|
|
76 log("error", "Option 'admins' for host '%s' is not a table", host); |
|
|
77 end |
|
|
78 end |
|
|
79 return usermanager.is_admin(jid); -- Test whether it's a global admin instead |
|
|
80 end |
|
|
81 |
|
|
82 |
|
|
83 module:add_item("auth-provider", provider); |
