Changeset 8e6ecfe for conf.c

Timestamp:

2016-03-25T18:07:53Z (8 years ago)

Author:

Dennis Kaarsemaker <dennis@…>

Branches:

master

Children:

a6005da

Parents:

446a23e

git-author:

Dennis Kaarsemaker <dennis@…> (23-02-16 18:41:34)

git-committer:

Dennis Kaarsemaker <dennis@…> (25-03-16 18:07:53)

Message:

Authentication: scaffolding for multiple authentication backends

Instead of always putting users passwords in XML files, allow site
admins to configure a different authentication method to integrate
authentication with other systems.

This doesn't add any authentication backends yet, merely the
scaffolding. Notably:

• Password checking and loading/removing from storage has been decoupled. A new auth_check_pass function is used to check passwords. It does check against the configured storage first, but will handle the authentication backends as well. The XML storage merely signals that a user's password should be checked using an authentication backend.
• If unknown-to-bitlbee users identify using an authentication backend, they are automatically registered.
• If an authentication backend is used, that fact is stored in the XML file, the password is not. Passwords are also stored unencrypted in this case, as the password used to encrypt them can change underneath us.
• configure and Makefile changes for the backend objects

File:

• conf.c (modified) (2 diffs)

conf.c

@@ -55 +55 @@
         conf->runmode = RUNMODE_INETD;
         conf->authmode = AUTHMODE_OPEN;
+        conf->auth_backend = NULL;
         conf->auth_pass = NULL;
         conf->oper_pass = NULL;
@@ -241 +242 @@
                                         conf->authmode = AUTHMODE_OPEN;
                                 }
+                        } else if (g_strcasecmp(ini->key, "authbackend") == 0) {
+                                if (g_strcasecmp(ini->value, "storage") == 0) {
+                                        conf->auth_backend = NULL;
+                                } else {
+                                        fprintf(stderr, "Invalid %s value: %s\n", ini->key, ini->value);
+                                        return 0;
+                                }
                         } else if (g_strcasecmp(ini->key, "authpassword") == 0) {
                                 g_free(conf->auth_pass);