Testing PAM service authentication

Testing PAM service authentication

#include <stdio.h>
#include <security/pam_appl.h>
#include <unistd.h>
#include <stdlib.h>
#include <string.h>

struct pam_response *reply;

// //function used to get user input
int function_conversation(int num_msg, const struct pam_message **msg, struct pam_response **resp, void *appdata_ptr)
{
    *resp = reply;
        return PAM_SUCCESS;
}

int authenticate_system(const char *username, const char *password, const char *service_name)  
{
    const struct pam_conv local_conversation = { function_conversation, NULL };
    pam_handle_t *local_auth_handle = NULL; // this gets set by pam_start

    int retval;
    retval = pam_start(service_name , username, &local_conversation, &local_auth_handle);

    if (retval != PAM_SUCCESS)
    {
            printf("pam_start returned: %d\n ", retval);
            return 0;
    }

    reply = (struct pam_response *)malloc(sizeof(struct pam_response));

    reply[0].resp = strdup(password);
    reply[0].resp_retcode = 0;
    retval = pam_authenticate(local_auth_handle, 0);

    if (retval != PAM_SUCCESS)
    {
            if (retval == PAM_AUTH_ERR)
            {
                    printf("Authentication failure.\n");
            }
            else
            {
                printf("pam_authenticate returned %d\n", retval);
            }
            return 0;
    }

    printf("Authenticated.\n");
    retval = pam_end(local_auth_handle, retval);

    if (retval != PAM_SUCCESS)
    {
            printf("pam_end returned\n");
            return 0;
    }

    return 1;
}

int main(int argc, char** argv)
{
    char* login;
    char* password;
    char* service_name;

    printf("Authentication module\n");

    if (argc != 4)
    {
        printf("Invalid count of arguments %d.\n", argc);
        printf("./authModule <username> <password> <service_name>");
        return 1;
    }

    login = argv[1];
    password = argv[2];
    service_name = argv[3];

    if (authenticate_system(login, password,service_name) == 1)
    {
        printf("Authenticate with %s - %s through system\n", login, password);
        return 0;
    }

    printf("Authentication failed!\n");
    return 1;
}

Now it’s time to compile it:

[root@archpepex ~]# gcc -o authModule authModule.c -lpam
[root@archpepex ~]# ./authModule user pass vsftpd