mirror of
https://github.com/FirebirdSQL/firebird.git
synced 2025-01-27 04:43:02 +01:00
124 lines
2.9 KiB
C++
124 lines
2.9 KiB
C++
/*
|
|
* PROGRAM: JRD Access Method
|
|
* MODULE: jrd_pwd.h
|
|
* DESCRIPTION: User information database name
|
|
*
|
|
* The contents of this file are subject to the Interbase Public
|
|
* License Version 1.0 (the "License"); you may not use this file
|
|
* except in compliance with the License. You may obtain a copy
|
|
* of the License at http://www.Inprise.com/IPL.html
|
|
*
|
|
* Software distributed under the License is distributed on an
|
|
* "AS IS" basis, WITHOUT WARRANTY OF ANY KIND, either express
|
|
* or implied. See the License for the specific language governing
|
|
* rights and limitations under the License.
|
|
*
|
|
* The Original Code was created by Inprise Corporation
|
|
* and its predecessors. Portions created by Inprise Corporation are
|
|
* Copyright (C) Inprise Corporation.
|
|
*
|
|
* All Rights Reserved.
|
|
* Contributor(s): ______________________________________.
|
|
*
|
|
* 2002.10.29 Sean Leyne - Removed obsolete "Netware" port
|
|
* 2003.02.02 Dmitry Yemanov: Implemented cached security database connection
|
|
*/
|
|
|
|
#ifndef JRD_PWD_H
|
|
#define JRD_PWD_H
|
|
|
|
#include "../jrd/ibase.h"
|
|
#include "../jrd/thd.h"
|
|
#include "../jrd/sha.h"
|
|
#ifdef HAVE_STDLIB_H
|
|
#include <stdlib.h>
|
|
#endif
|
|
#include <time.h>
|
|
|
|
const size_t MAX_PASSWORD_ENC_LENGTH = 12; // passed by remote protocol
|
|
const size_t MAX_PASSWORD_LENGTH = 64; // used to store passwords internally
|
|
static const char* PASSWORD_SALT = "9z"; // for old ENC_crypt()
|
|
const size_t SALT_LENGTH = 12; // measured after base64 coding
|
|
|
|
class SecurityDatabase
|
|
{
|
|
struct user_record {
|
|
SLONG gid;
|
|
SLONG uid;
|
|
SSHORT flag;
|
|
SCHAR password[MAX_PASSWORD_LENGTH + 2];
|
|
};
|
|
|
|
public:
|
|
|
|
static void getPath(TEXT* path_buffer)
|
|
{
|
|
static const char* USER_INFO_NAME =
|
|
#ifdef VMS
|
|
"[sysmgr]security2.fdb";
|
|
#else
|
|
"security2.fdb";
|
|
#endif
|
|
|
|
gds__prefix(path_buffer, USER_INFO_NAME);
|
|
}
|
|
|
|
static void initialize();
|
|
static void shutdown();
|
|
static void verifyUser(Firebird::string&, const TEXT*, const TEXT*, const TEXT*,
|
|
int*, int*, int*, const Firebird::string&);
|
|
|
|
static void hash(Firebird::string& h,
|
|
const Firebird::string& userName,
|
|
const TEXT* passwd)
|
|
{
|
|
Firebird::string salt;
|
|
Jrd::CryptSupport::random(salt, SALT_LENGTH);
|
|
hash(h, userName, passwd, salt);
|
|
}
|
|
|
|
static void hash(Firebird::string& h,
|
|
const Firebird::string& userName,
|
|
const TEXT* passwd,
|
|
const Firebird::string& oldHash)
|
|
{
|
|
Firebird::string salt(oldHash);
|
|
salt.resize(SALT_LENGTH, '=');
|
|
Firebird::string allData(salt);
|
|
allData += userName;
|
|
allData += passwd;
|
|
Jrd::CryptSupport::hash(h, allData);
|
|
h = salt + h;
|
|
}
|
|
|
|
private:
|
|
|
|
static const UCHAR PWD_REQUEST[256];
|
|
static const UCHAR TPB[4];
|
|
|
|
Firebird::Mutex mutex;
|
|
|
|
ISC_STATUS_ARRAY status;
|
|
|
|
isc_db_handle lookup_db;
|
|
isc_req_handle lookup_req;
|
|
|
|
static const bool is_cached;
|
|
|
|
int counter;
|
|
|
|
void fini();
|
|
void init();
|
|
bool lookup_user(const TEXT*, int*, int*, TEXT*);
|
|
bool prepare();
|
|
|
|
static SecurityDatabase instance;
|
|
|
|
SecurityDatabase()
|
|
{
|
|
lookup_db = 0;
|
|
}
|
|
};
|
|
|
|
#endif /* JRD_PWD_H */
|