X-Git-Url: http://dolda2000.com/gitweb/?p=utils.git;a=blobdiff_plain;f=pam_krb5auto.c;h=20b600ba598a147b9039fa97669a325c7b88a711;hp=3f7bf0014b69870a119f72d47f7bbf927f51d40b;hb=7ccba69563f89475dc8047743b1a72e82ccb6e08;hpb=4fb861a52220666fa147e30670fe6b8a60cd40e3

diff --git a/pam_krb5auto.c b/pam_krb5auto.c
index 3f7bf00..20b600b 100644
--- a/pam_krb5auto.c
+++ b/pam_krb5auto.c
@@ -1,3 +1,21 @@
+/*
+ *  pam_krb5auto - Gets initial credentials non-interactively
+ *  Copyright (C) 2004 Fredrik Tolf (fredrik@dolda2000.com)
+ *  
+ *  This program is free software; you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation; either version 2 of the License, or
+ *  (at your option) any later version.
+ *  
+ *  This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ *  GNU General Public License for more details.
+ *  
+ *  You should have received a copy of the GNU General Public License
+ *  along with this program; if not, write to the Free Software
+ *  Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
+*/
 #include <stdlib.h>
 #include <stdio.h>
 #include <unistd.h>
@@ -32,6 +50,7 @@ struct data
     krb5_creds initcreds;
     int hascreds;
     uid_t uid;
+    gid_t gid;
 };
 
 static void log(int prio, char *format, ...)
@@ -126,6 +145,7 @@ static struct data *getdata(pam_handle_t *pamh, struct options *opts)
 	    return(NULL);
 	}
 	data->uid = pwent->pw_uid;
+	data->gid = pwent->pw_gid;
 	if((ret = krb5_init_context(&data->ctx)) != 0) {
 	    log(LOG_CRIT, "could not create krb5 context: %s", error_message(ret));
 	    freedata(data);
@@ -183,8 +203,8 @@ static int savecreds(pam_handle_t *pamh, struct options *opts, struct data *data
     if(opts->debug)
 	log(LOG_DEBUG, "got creds successfully");
     snprintf(buf, sizeof(buf), "KRB5CCNAME=FILE:/tmp/krb5cc_%i_XXXXXX", data->uid);
-    ccname = buf + sizeof("KRB5CCNAME=");
-    filename = ccname + sizeof("FILE:");
+    ccname = buf + sizeof("KRB5CCNAME=") - 1;
+    filename = ccname + sizeof("FILE:") - 1;
     if((fd = mkstemp(filename)) < 0) {
 	log(LOG_ERR, "could not create tempfile for credentials cache: %s", strerror(errno));
 	ret = PAM_SERVICE_ERR;
@@ -211,6 +231,7 @@ static int savecreds(pam_handle_t *pamh, struct options *opts, struct data *data
 	ret = PAM_SERVICE_ERR;
 	goto out;
     }
+    chown(filename, data->uid, data->gid);
     pam_putenv(pamh, strdup(buf));
     if(opts->debug)
 	log(LOG_DEBUG, "successfully initialized ccache");