1 files changed, 265 insertions, 0 deletions
diff --git a/system_cmds/passwd.tproj/nis_passwd.c b/system_cmds/passwd.tproj/nis_passwd.c
new file mode 100644
index 0000000..1525096
--- /dev/null
+++ b/system_cmds/passwd.tproj/nis_passwd.c
@@ -0,0 +1,265 @@
+/*
+ * Copyright (c) 1999-2016 Apple Inc. All rights reserved.
+ *
+ * @APPLE_LICENSE_HEADER_START@
+ *
+ * "Portions Copyright (c) 1999 Apple Computer, Inc.  All Rights
+ * Reserved.  This file contains Original Code and/or Modifications of
+ * Original Code as defined in and that are subject to the Apple Public
+ * Source License Version 1.0 (the 'License').  You may not use this file
+ * except in compliance with the License.  Please obtain a copy of the
+ * License at http://www.apple.com/publicsource and read it before using
+ * this file.
+ *
+ * The Original Code and all software distributed under the License are
+ * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
+ * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
+ * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
+ * FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT.  Please see the
+ * License for the specific language governing rights and limitations
+ * under the License."
+ *
+ * @APPLE_LICENSE_HEADER_END@
+ */
+/*
+ * Portions Copyright (c) 1998 by Apple Computer, Inc.
+ * Portions Copyright (c) 1988 by Sun Microsystems, Inc.
+ * Portions Copyright (c) 1988 The Regents of the University of California.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ * 1. Redistributions of source code must retain the above copyright
+ *    notice, this list of conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright
+ *    notice, this list of conditions and the following disclaimer in the
+ *    documentation and/or other materials provided with the distribution.
+ * 3. All advertising materials mentioning features or use of this software
+ *    must display the following acknowledgement:
+ *	This product includes software developed by the University of
+ *	California, Berkeley and its contributors.
+ * 4. Neither the name of the University nor the names of its contributors
+ *    may be used to endorse or promote products derived from this software
+ *    without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
+ * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
+ * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+ * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
+ * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
+ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
+ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
+ * SUCH DAMAGE.
+ */
+
+#include "passwd.h"
+
+#ifdef INFO_NIS
+
+/* update a user's password in NIS. This was based on the Sun implementation
+ * we used in NEXTSTEP, although I've added some stuff from OpenBSD. And
+ * it uses the API to support Rhapsody's proprietry infosystem switch.
+ * lukeh
+ */
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <unistd.h>
+#include <string.h>
+#include <pwd.h>
+#include <netinet/in.h>
+#include <rpc/types.h>
+#include <rpc/xdr.h>
+#include <rpc/rpc.h>
+#include <rpcsvc/yp_prot.h>
+#include <rpcsvc/ypclnt.h>
+#include <rpcsvc/yppasswd.h>
+#include <netdb.h>
+#include <sys/socket.h>
+#include <sys/file.h>
+#include <errno.h>
+
+extern int getrpcport(char *, int, int, int);
+extern void getpasswd(char *, int, int, int, int, char *, char **, char**, char **);
+
+static struct passwd *ypgetpwnam(char *name, char *domain);
+static struct passwd *interpret(struct passwd *pwent, char *line);
+
+int nis_passwd(char *uname, char *domain)
+{
+	int ans, port, ok = -1;
+	char *master;
+	char *ne;	/* new encrypted password */
+	char *oc;	/* old cleartext password */
+	char *nc;	/* new cleartext password */
+	static struct yppasswd	yppasswd;
+	struct passwd *pwd;
+	int uid;
+	struct timeval tv;
+	CLIENT *cl;
+
+	if (domain == NULL)
+	{
+		if (yp_get_default_domain(&domain) != 0)
+		{
+			(void)fprintf(stderr, "can't get domain\n");
+			exit(1);
+		}
+	}
+
+	if (yp_master(domain, "passwd.byname", &master) != 0)
+	{
+		(void)fprintf(stderr, "can't get master for passwd file\n");
+		exit(1);
+	}
+
+	port = getrpcport(master, YPPASSWDPROG, YPPASSWDPROC_UPDATE,
+		IPPROTO_UDP);
+	if (port == 0)
+	{
+		(void)fprintf(stderr, "%s is not running yppasswd daemon\n",
+			      master);
+		exit(1);
+	}
+	if (port >= IPPORT_RESERVED)
+	{
+		(void)fprintf(stderr,
+		    "yppasswd daemon is not running on privileged port\n");
+		exit(1);
+	}
+
+	pwd = ypgetpwnam(uname, domain);
+	if (pwd == NULL)
+	{
+		(void)fprintf(stderr, "user %s not found\n", uname);
+		exit(1);
+	}
+
+	uid = getuid();
+	if (uid != 0 && uid != pwd->pw_uid)
+	{
+		(void)fprintf(stderr, "you may only change your own password\n");
+		exit(1);
+	}
+
+	getpasswd(uname, 0, 5, 0, 0, pwd->pw_passwd, &ne, &oc, &nc);
+
+	yppasswd.oldpass = oc;
+	yppasswd.newpw.pw_name = pwd->pw_name;
+	yppasswd.newpw.pw_passwd = ne;
+	yppasswd.newpw.pw_uid = pwd->pw_uid;
+	yppasswd.newpw.pw_gid = pwd->pw_gid;
+	yppasswd.newpw.pw_gecos = pwd->pw_gecos;
+	yppasswd.newpw.pw_dir = pwd->pw_dir;
+	yppasswd.newpw.pw_shell = pwd->pw_shell;
+
+	cl = clnt_create(master, YPPASSWDPROG, YPPASSWDVERS, "udp");
+	if (cl == NULL)
+	{
+		(void)fprintf(stderr, "could not contact yppasswdd on %s\n", master);
+		exit(1);
+	}
+	cl->cl_auth = authunix_create_default();
+	tv.tv_sec = 2;
+	tv.tv_usec = 0;
+	ans = clnt_call(cl, YPPASSWDPROC_UPDATE,
+		(xdrproc_t)xdr_yppasswd, &yppasswd, (xdrproc_t)xdr_int, &ok, tv);
+
+	if (ans != 0)
+	{
+		clnt_perrno(ans);
+		(void)fprintf(stderr, "\n");
+		(void)fprintf(stderr, "couldn't change passwd\n");
+		exit(1);
+	}
+	if (ok != 0)
+	{
+		(void)fprintf(stderr, "couldn't change passwd\n");
+		exit(1);
+	}
+	return(0);
+}
+
+static char *
+pwskip(register char *p)
+{
+	while (*p && *p != ':' && *p != '\n')
+		++p;
+	if (*p)
+		*p++ = 0;
+	return (p);
+}
+
+static struct passwd *
+interpret(struct passwd *pwent, char *line)
+{
+	register char	*p = line;
+
+	pwent->pw_passwd = "*";
+	pwent->pw_uid = 0;
+	pwent->pw_gid = 0;
+	pwent->pw_gecos = "";
+	pwent->pw_dir = "";
+	pwent->pw_shell = "";
+#ifndef __SLICK__
+	pwent->pw_change = 0;
+	pwent->pw_expire = 0;
+	pwent->pw_class = "";
+#endif
+
+	/* line without colon separators is no good, so ignore it */
+	if(!strchr(p, ':'))
+		return(NULL);
+
+	pwent->pw_name = p;
+	p = pwskip(p);
+	pwent->pw_passwd = p;
+	p = pwskip(p);
+	pwent->pw_uid = (uid_t)strtoul(p, NULL, 10);
+	p = pwskip(p);
+	pwent->pw_gid = (gid_t)strtoul(p, NULL, 10);
+	p = pwskip(p);
+	pwent->pw_gecos = p;
+	p = pwskip(p);
+	pwent->pw_dir = p;
+	p = pwskip(p);
+	pwent->pw_shell = p;
+	while (*p && *p != '\n')
+		p++;
+	*p = '\0';
+	return (pwent);
+}
+
+
+static struct passwd *
+ypgetpwnam(char *nam, char *domain)
+{
+	static struct passwd pwent;
+	char *val;
+	int reason, vallen;
+	static char *__yplin = NULL;
+
+	reason = yp_match(domain, "passwd.byname", nam, (int)strlen(nam),
+	    &val, &vallen);
+	switch(reason) {
+	case 0:
+		break;
+	default:
+		return (NULL);
+		break;
+	}
+	val[vallen] = '\0';
+	if (__yplin)
+		free(__yplin);
+	__yplin = (char *)malloc(vallen + 1);
+	strcpy(__yplin, val);
+	free(val);
+
+	return(interpret(&pwent, __yplin));
+}
+
+#endif /* INFO_NIS */