view mod_auth_pam/mod_auth_pam.lua @ 1537:88e0b4bace88

mod_websocket: Remove. This is a core module for Prosody 0.10 https://prosody.im/doc/modules/mod_websocket
author Florian Zeitz <florob@babelmonkeys.de>
date Sat, 25 Oct 2014 01:27:52 +0200
parents b8762c9fb270
children 57bb2497fadc
line wrap: on
line source

-- PAM authentication for Prosody
-- Copyright (C) 2013 Kim Alvefur
--
-- Requires https://github.com/devurandom/lua-pam
-- and LuaPosix

local posix = require "posix";
local pam = require "pam";
local new_sasl = require "util.sasl".new;

function user_exists(username)
	return not not posix.getpasswd(username);
end

function test_password(username, password)
	local h, err = pam.start("xmpp", username, {
		function (t)
			if #t == 1 and t[1][1] == pam.PAM_PROMPT_ECHO_OFF then
				return { { password, 0} };
			end
		end
	});
	if h and h:authenticate() and h:endx(pam.PAM_SUCCESS) then
		return true, true;
	end
	return nil, true;
end

function get_sasl_handler()
	return new_sasl(module.host, {
		plain_test = function(sasl, ...)
			return test_password(...)
		end
	});
end

module:provides"auth";