20#include "GreeterPrivate.h"
22#include <QFutureInterface>
23#include <QFutureWatcher>
25#include <QtConcurrent>
27#include <security/pam_appl.h>
32class GreeterImpl :
public QObject
42 typedef QFutureInterface<QString> ResponseFuture;
45 explicit GreeterImpl(Greeter *parent, GreeterPrivate *greeterPrivate)
48 greeterPrivate(greeterPrivate),
51 qRegisterMetaType<QLightDM::GreeterImpl::ResponseFuture>(
"QLightDM::GreeterImpl::ResponseFuture");
53 connect(&futureWatcher, &QFutureWatcher<int>::finished,
this, &GreeterImpl::finishPam);
54 connect(
this, SIGNAL(showMessage(pam_handle *, QString, QLightDM::Greeter::MessageType)),
55 this, SLOT(handleMessage(pam_handle *, QString, QLightDM::Greeter::MessageType)));
57 connect(
this, SIGNAL(showPrompt(pam_handle *, QString, QLightDM::Greeter::PromptType, QLightDM::GreeterImpl::ResponseFuture)),
58 this, SLOT(handlePrompt(pam_handle *, QString, QLightDM::Greeter::PromptType, QLightDM::GreeterImpl::ResponseFuture)),
59 Qt::BlockingQueuedConnection);
67 void start(QString username)
71 if (pamHandle !=
nullptr) {
79 AppData *appData =
new AppData();
83 pam_conv conversation;
84 conversation.conv = converseWithPam;
85 conversation.appdata_ptr =
static_cast<void*
>(appData);
87 if (pam_start(
"lightdm", username.toUtf8(), &conversation, &pamHandle) == PAM_SUCCESS) {
88 appData->handle = pamHandle;
89 futureWatcher.setFuture(QtConcurrent::mapped(QList<pam_handle*>() << pamHandle, authenticateWithPam));
92 greeterPrivate->authenticated =
false;
93 Q_EMIT greeter->showMessage(QStringLiteral(
"Internal error: could not start PAM authentication"), QLightDM::Greeter::MessageTypeError);
94 Q_EMIT greeter->authenticationComplete();
98 static int authenticateWithPam(pam_handle*
const& pamHandle)
100 int pamStatus = pam_authenticate(pamHandle, 0);
101 if (pamStatus == PAM_SUCCESS) {
102 pamStatus = pam_acct_mgmt(pamHandle, 0);
104 if (pamStatus == PAM_NEW_AUTHTOK_REQD) {
105 pamStatus = pam_chauthtok(pamHandle, PAM_CHANGE_EXPIRED_AUTHTOK);
107 if (pamStatus == PAM_SUCCESS) {
108 pam_setcred(pamHandle, PAM_REINITIALIZE_CRED);
113 static int converseWithPam(
int num_msg,
const pam_message** msg,
114 pam_response** resp,
void* appdata_ptr)
119 auto* tmp_response =
static_cast<pam_response*
>(calloc(num_msg,
sizeof(pam_response)));
123 AppData *appData =
static_cast<AppData*
>(appdata_ptr);
124 GreeterImpl *impl = appData->impl;
125 pam_handle *handle = appData->handle;
128 QVector<ResponseFuture> responses;
130 for (count = 0; count < num_msg; ++count)
132 switch (msg[count]->msg_style)
134 case PAM_PROMPT_ECHO_ON:
136 QString message(msg[count]->msg);
137 responses.append(ResponseFuture());
138 responses.last().reportStarted();
139 Q_EMIT impl->showPrompt(handle, message, Greeter::PromptTypeQuestion, responses.last());
142 case PAM_PROMPT_ECHO_OFF:
144 QString message(msg[count]->msg);
145 responses.append(ResponseFuture());
146 responses.last().reportStarted();
147 Q_EMIT impl->showPrompt(handle, message, Greeter::PromptTypeSecret, responses.last());
152 QString message(msg[count]->msg);
153 Q_EMIT impl->showMessage(handle, message, Greeter::MessageTypeInfo);
158 QString message(msg[count]->msg);
159 Q_EMIT impl->showMessage(handle, message, Greeter::MessageTypeError);
166 bool raise_error =
false;
168 for (
auto &response : responses)
170 pam_response* resp_item = &tmp_response[i++];
171 resp_item->resp_retcode = 0;
172 resp_item->resp = strdup(response.future().result().toUtf8());
174 if (!resp_item->resp)
185 for (
int i = 0; i < count; ++i)
186 free(tmp_response[i].resp);
193 *resp = tmp_response;
199 bool respond(QString response)
201 if (!futures.isEmpty()) {
202 futures.dequeue().reportFinished(&response);
211 if (pamHandle !=
nullptr) {
212 QFuture<int> pamFuture = futureWatcher.future();
213 pam_handle *handle = pamHandle;
220 while (respond(QString()));
222 pam_end(handle, PAM_CONV_ERR);
227 void showMessage(pam_handle *handle, QString text, QLightDM::Greeter::MessageType type);
228 void showPrompt(pam_handle *handle, QString text, QLightDM::Greeter::PromptType type, QLightDM::GreeterImpl::ResponseFuture response);
233 if (pamHandle ==
nullptr) {
237 int pamStatus = futureWatcher.result();
239 pam_end(pamHandle, pamStatus);
242 greeterPrivate->authenticated = (pamStatus == PAM_SUCCESS);
243 Q_EMIT greeter->authenticationComplete();
246 void handleMessage(pam_handle *handle, QString text, QLightDM::Greeter::MessageType type)
248 if (handle != pamHandle)
251 Q_EMIT greeter->showMessage(text, type);
254 void handlePrompt(pam_handle *handle, QString text, QLightDM::Greeter::PromptType type, QLightDM::GreeterImpl::ResponseFuture future)
256 if (handle != pamHandle) {
257 future.reportResult(QString());
258 future.reportFinished();
262 futures.enqueue(future);
263 Q_EMIT greeter->showPrompt(text, type);
268 GreeterPrivate *greeterPrivate;
269 pam_handle* pamHandle;
270 QFutureWatcher<int> futureWatcher;
271 QQueue<ResponseFuture> futures;
274GreeterPrivate::GreeterPrivate(Greeter* parent)
275 : authenticated(false),
276 authenticationUser(),
277 m_impl(new GreeterImpl(parent, this)),
282GreeterPrivate::~GreeterPrivate()
287void GreeterPrivate::handleAuthenticate()
289 m_impl->start(authenticationUser);
292void GreeterPrivate::handleRespond(
const QString &response)
294 m_impl->respond(response);
297void GreeterPrivate::cancelAuthentication()
304#include "GreeterPrivate.moc"