Initial import of htcd system 1.0

Signed-off-by: Henrik Rydberg <rydberg@euromail.se>

1 files changed, 162 insertions, 0 deletions

diff --git a/src/serv/auth.cc b/src/serv/auth.cc
new file mode 100644
index 0000000..abf16b3
--- /dev/null
+++ b/src/serv/auth.cc
@@ -0,0 +1,162 @@
+/*************************************************************************
+ *
+ * HTCd - Copyright (C) 1998-2006 Henrik Rydberg
+ *
+ * This program is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation; either version 2 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; if not, write to the Free Software
+ * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
+ */
+
+#include <serv/htcd.h>
+
+const mstring default_tag=".default";
+
+/////////////////////////////////////////////////////////////////
+
+TOK_IMPL(remote_name) { out<<Reqd(env)->tcp->node.name; }
+TOK_IMPL(remote_address) { out<<Reqd(env)->tcp->node.ip; }
+TOK_IMPL(remote_port) { out<<Reqd(env)->tcp->port; }
+
+/////////////////////////////////////////////////////////////////
+
+inline int match(const sref& rem,const sref& longrem,const sref& dom)
+{
+  if(rem==dom) return 1;
+  if(*dom!='.') return 0;
+  if(longrem.right_last(dom)==dom) return 1;
+  return 0;
+}
+
+inline int allow(const sref& uname,const sref& list)
+{
+  mstring remote=First(uname);
+  mstring longrem=remote; if(longrem.find('.')<0) longrem+=default_tag;
+  if(remote.empty()) return 0;
+  if(First(list).empty()) return 1;
+  sref first,rest=list;
+  while(Split(first,rest)) if(match(remote,longrem,first)) return 1;
+  return 0;
+}
+
+TOK_IMPL(remote_allow) { out<<allow(Reqd(env)->tcp->node.name,env[0]); }
+TOK_IMPL(bindroot) { Reqd(env)->htcd()->bindroot=env[0]; }
+
+/////////////////////////////////////////////////////////////////
+
+TOK_IMPL(user_allow) {
+  htcd_req* htcd=Reqd(env);
+  mstring opt=env.parg(-1);
+  int now=opt.empty()?time(0):atoi(opt);
+  out<<htcd->user.allow_list(env[0],now,htcd->RootAllowed());
+}
+
+TOK_IMPL(on_clear) {
+  htcd_req* htcd=Reqd(env);
+  if(htcd->user.allow_list(env[0],time(0),htcd->RootAllowed())) env.parg(out,1);
+  else env.parg(out,2);
+}
+
+/////////////////////////////////////////////////////////////////
+
+TOK_IMPL(allowed) {
+  int ok=0;
+  if(!env.db) THROW("htc: no open database");
+  if(env.dbat>=0&&env.dbat<env.db->size()) {
+    user_t user;
+    env.db->Get(env.dbat,user.list);
+    if(user.list.size()!=user_tabs)
+      THROW("htc: cannot test - probably not a users database");
+    mstring opt=env.parg(-1);
+    int now=opt.empty()?time(0):atoi(opt);
+    ok=user.allow_list(env[0],now,Reqd(env)->RootAllowed());
+  }
+  out<<ok;
+}
+
+TOK_IMPL(ingroups) {
+  int ok=0;
+  if(!env.db) THROW("htc: no open database");
+  if(env.dbat>=0&&env.dbat<env.db->size()) {
+    user_t user;
+    env.db->Get(env.dbat,user.list);
+    if(user.list.size()!=user_tabs)
+      THROW("htc: cannot test - probably not a users database");
+    mstring opt=env.parg(-1);
+    int now=opt.empty()?time(0):atoi(opt);
+    ok=user.allow_list(env[0],now,-1);
+  }
+  out<<ok;
+}
+
+/////////////////////////////////////////////////////////////////
+
+void envAddAuth(tokmap& T)
+{
+  TOK_ADD(remote_name,"",tok_t::PUBLIC,
+          "%Remote hostname\n"
+          "%Syntax: \\remote.name\n"
+          );
+  TOK_ADD(remote_address,"",tok_t::PUBLIC,
+          "%Remote address\n"
+          "%Syntax: \\remote.address\n"
+          );
+  TOK_ADD(remote_port,"",tok_t::PUBLIC,
+          "%Remote port\n"
+          "%Syntax: \\remote.port\n"
+          );
+  
+  /////////////////////////////////////////////////////////////
+  
+  TOK_ADD(remote_allow,"x",tok_t::PUBLIC,
+          "%True if remote hostname allowed by domain\n"
+          "%Syntax: \\remote.allow{domain list}\n"
+          "%\n"
+          "%May be used to restrict access without any group\n"
+          );
+  TOK_ADD(bindroot,"x",tok_t::SYSONLY,
+          "%Bind root access to explicit addresses\n"
+          "%Syntax: \\bindroot{address list}\n"
+          "%\n"
+          "%Note that domain syntax does not work here; you\n"
+          "%want to have total control over all root access.\n"
+          );
+
+  /////////////////////////////////////////////////////////////
+
+  TOK_ADD(user_allow,"x?",tok_t::SYSONLY,
+          "%Core test on user clearance\n"
+          "%Syntax: \\user.allow{groups}<time>\n"
+          "%\n"
+          "%In case of several groups, all must be allowed.\n"
+          );
+  TOK_ADD(on_clear,"xr?",tok_t::SYSONLY,
+          "%Do if user is allowed in all groups now\n"
+          "%Syntax: \\on.clear{groups}{body}<else>\n"
+          );
+  
+  /////////////////////////////////////////////////////////////
+  
+  TOK_ADD(allowed,"x?",tok_t::SYSONLY,
+          "%True if the current record is allowed in all groups now\n"
+          "%Syntax: \\allowed{groups}<time>\n"
+          "%\n"
+          "%Only used as a query function\n"
+          );
+
+  TOK_ADD(ingroups,"x?",tok_t::SYSONLY,
+          "%True if the current record is part of all groups now\n"
+          "%Syntax: \\ingroups{groups}<time>\n"
+          "%\n"
+          "%Only used as a query function\n"
+          );
+}