1 /*
2  *
3  * Copyright (c) 2001 Gert Doering.  All rights reserved.
4  * Copyright (c) 2004,2005,2006 Darren Tucker.  All rights reserved.
5  *
6  * Redistribution and use in source and binary forms, with or without
7  * modification, are permitted provided that the following conditions
8  * are met:
9  * 1. Redistributions of source code must retain the above copyright
10  *    notice, this list of conditions and the following disclaimer.
11  * 2. Redistributions in binary form must reproduce the above copyright
12  *    notice, this list of conditions and the following disclaimer in the
13  *    documentation and/or other materials provided with the distribution.
14  *
15  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
16  * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
17  * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
18  * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
19  * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
20  * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
21  * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
22  * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
23  * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
24  * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
25  */
26 
27 #ifdef _AIX
28 
29 #ifdef HAVE_SYS_SOCKET_H
30 # include <sys/socket.h>
31 #endif
32 
33 struct ssh;
34 struct sshbuf;
35 
36 /* These should be in the system headers but are not. */
37 int usrinfo(int, char *, int);
38 #if defined(HAVE_DECL_SETAUTHDB) && (HAVE_DECL_SETAUTHDB == 0)
39 int setauthdb(const char *, char *);
40 #endif
41 /* these may or may not be in the headers depending on the version */
42 #if defined(HAVE_DECL_AUTHENTICATE) && (HAVE_DECL_AUTHENTICATE == 0)
43 int authenticate(char *, char *, int *, char **);
44 #endif
45 #if defined(HAVE_DECL_LOGINFAILED) && (HAVE_DECL_LOGINFAILED == 0)
46 int loginfailed(char *, char *, char *);
47 #endif
48 #if defined(HAVE_DECL_LOGINRESTRICTIONS) && (HAVE_DECL_LOGINRESTRICTIONS == 0)
49 int loginrestrictions(char *, int, char *, char **);
50 #endif
51 #if defined(HAVE_DECL_LOGINSUCCESS) && (HAVE_DECL_LOGINSUCCESS == 0)
52 int loginsuccess(char *, char *, char *, char **);
53 #endif
54 #if defined(HAVE_DECL_PASSWDEXPIRED) && (HAVE_DECL_PASSWDEXPIRED == 0)
55 int passwdexpired(char *, char **);
56 #endif
57 
58 /* Some versions define r_type in the above headers, which causes a conflict */
59 #ifdef r_type
60 # undef r_type
61 #endif
62 
63 /* AIX 4.2.x doesn't have nanosleep but does have nsleep which is equivalent */
64 #if !defined(HAVE_NANOSLEEP) && defined(HAVE_NSLEEP)
65 # define nanosleep(a,b) nsleep(a,b)
66 #endif
67 
68 /* For struct timespec on AIX 4.2.x */
69 #ifdef HAVE_SYS_TIMERS_H
70 # include <sys/timers.h>
71 #endif
72 
73 /* for setpcred and friends */
74 #ifdef HAVE_USERSEC_H
75 # include <usersec.h>
76 #endif
77 
78 /*
79  * According to the setauthdb man page, AIX password registries must be 15
80  * chars or less plus terminating NUL.
81  */
82 #ifdef HAVE_SETAUTHDB
83 # define REGISTRY_SIZE	16
84 #endif
85 
86 void aix_usrinfo(struct passwd *);
87 
88 #ifdef WITH_AIXAUTHENTICATE
89 # define CUSTOM_SYS_AUTH_PASSWD 1
90 # define CUSTOM_SYS_AUTH_ALLOWED_USER 1
91 int sys_auth_allowed_user(struct passwd *, struct sshbuf *);
92 # define CUSTOM_SYS_AUTH_RECORD_LOGIN 1
93 int sys_auth_record_login(struct ssh *, const char *, const char *,
94     const char *, struct sshbuf *);
95 # define CUSTOM_SYS_AUTH_GET_LASTLOGIN_MSG
96 char *sys_auth_get_lastlogin_msg(const char *, uid_t);
97 # define CUSTOM_FAILED_LOGIN 1
98 # if defined(S_AUTHDOMAIN)  && defined (S_AUTHNAME)
99 # define USE_AIX_KRB_NAME
100 char *aix_krb5_get_principal_name(char *);
101 # endif
102 #endif
103 
104 void aix_setauthdb(const char *);
105 void aix_restoreauthdb(void);
106 void aix_remove_embedded_newlines(char *);
107 
108 #if defined(AIX_GETNAMEINFO_HACK) && !defined(BROKEN_GETADDRINFO)
109 # ifdef getnameinfo
110 #  undef getnameinfo
111 # endif
112 int sshaix_getnameinfo(const struct sockaddr *, size_t, char *, size_t,
113     char *, size_t, int);
114 # define getnameinfo(a,b,c,d,e,f,g) (sshaix_getnameinfo(a,b,c,d,e,f,g))
115 #endif
116 
117 /*
118  * We use getgrset in preference to multiple getgrent calls for efficiency
119  * plus it supports NIS and LDAP groups.
120  */
121 #if !defined(HAVE_GETGROUPLIST) && defined(HAVE_GETGRSET)
122 # define HAVE_GETGROUPLIST
123 # define USE_GETGRSET
124 int getgrouplist(const char *, gid_t, gid_t *, int *);
125 #endif
126 
127 #endif /* _AIX */
128