Files
heimdal/appl/popper/pop_user.c
Johan Danielsson d2e71b5db5 if using SASL, don't allow plaintext USER/PASS
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@13927 ec53bebd-3082-4978-b11e-865c3cabbd6b
2004-06-14 08:14:16 +00:00

37 lines
930 B
C

/*
* Copyright (c) 1989 Regents of the University of California.
* All rights reserved. The Berkeley software License Agreement
* specifies the terms and conditions for redistribution.
*/
#include <popper.h>
RCSID("$Id$");
/*
* user: Prompt for the user name at the start of a POP session
*/
int
pop_user (POP *p)
{
char ss[256];
strlcpy(p->user, p->pop_parm[1], sizeof(p->user));
if (p->auth_level == AUTH_OTP) {
char *s = NULL;
#ifdef OTP
if(otp_challenge (&p->otp_ctx, p->user, ss, sizeof(ss)) == 0)
return pop_msg(p, POP_SUCCESS, "Password %s required for %s.",
ss, p->user);
s = otp_error(&p->otp_ctx);
return pop_msg(p, POP_FAILURE, "Permission denied%s%s",
s ? ":" : "", s ? s : "");
#endif
}
if (p->auth_level == AUTH_SASL) {
return pop_msg(p, POP_FAILURE, "Permission denied");
}
return pop_msg(p, POP_SUCCESS, "Password required for %s.", p->user);
}