PAM.h

/* SLiM - Simple Login Manager
   Copyright (C) 2007 Martin Parm

   This program is free software; you can redistribute it and/or modify
   it under the terms of the GNU General Public License as published by
   the Free Software Foundation; either version 2 of the License, or
   (at your option) any later version.
*/

#ifndef _PAM_H_
#define _PAM_H_
#include <string>
#include <security/pam_appl.h>

#ifdef __LIBPAM_VERSION
#include <security/pam_misc.h>
#endif

namespace PAM {
  class Exception {
  public:
    int errnum;
    std::string errstr;
    std::string func_name;
    Exception(pam_handle_t* _pam_handle,
	      const std::string& _func_name,
	      int _errnum);
    virtual ~Exception(void);
  };
  
  class Auth_Exception: public Exception {
  public:
    Auth_Exception(pam_handle_t* _pam_handle,
		   const std::string& _func_name,
		   int _errnum);
  };
  
  class Cred_Exception: public Exception {
  public:
    Cred_Exception(pam_handle_t* _pam_handle,
		   const std::string& _func_name,
		   int _errnum);
  };
  
  
  class Authenticator {
  private:
    struct pam_conv pam_conversation;
    pam_handle_t* pam_handle;
    int last_result;
    
    int _end(void);
  public:
    typedef int (conversation)(int num_msg,
			       const struct pam_message **msg,
			       struct pam_response **resp,
			       void *appdata_ptr);
    
    enum ItemType {
      Service		= PAM_SERVICE,
      User		= PAM_USER,
      User_Prompt	= PAM_USER_PROMPT,
      TTY			= PAM_TTY,
      Requestor	= PAM_RUSER,
      Host		= PAM_RHOST,
      Conv		= PAM_CONV,
#ifdef __LIBPAM_VERSION
      /* Fail_Delay  = PAM_FAIL_DELAY */
#endif
    };
    
  public:
    Authenticator(conversation* conv, void* data=0);
    ~Authenticator(void);
    
    void start(const std::string& service);
    void end(void);
    void set_item(const ItemType item, const void* value);
    const void* get_item(const ItemType item);
#ifdef __LIBPAM_VERSION
    void fail_delay(const unsigned int micro_sec);
#endif
    void authenticate(void);
    void open_session(void);
    void close_session(void);
    void setenv(const std::string& key, const std::string& value);
    void delenv(const std::string& key);
    const char* getenv(const std::string& key);
    char** getenvlist(void);
    
  private:
    /* Explicitly disable copy constructor and copy assignment */
    Authenticator(const PAM::Authenticator&);
    Authenticator& operator=(const PAM::Authenticator&);
  };
}

std::ostream& operator<<( std::ostream& os, const PAM::Exception& e);
#endif /* _PAM_H_ */