Changeset 278

Timestamp:

03/18/12 21:06:47 (12 years ago)

Author:

Kris Deugau

Message:

/trunk

Checkpoint, diversion to get userdata somewhere handy(er) for logging
Copy-paste base login processing from dns.cg to login() in DNSDB.pm.
See #35.

File:

• trunk/DNSDB.pm (modified) (4 diffs)

trunk/DNSDB.pm

@@ -35 +35 @@
 @ISA            = qw(Exporter);
 @EXPORT_OK      = qw(
-        &initGlobals
+        &initGlobals &login
         &initPermissions &getPermissions &changePermissions &comparePermissions
         &changeGroup
@@ -57 +57 @@
 @EXPORT         = (); # Export nothing by default.
 %EXPORT_TAGS    = ( ALL => [qw(
-                &initGlobals
+                &initGlobals &login
                 &initPermissions &getPermissions &changePermissions &comparePermissions
                 &changeGroup
@@ -145 +145 @@
 
 ## (Semi)private variables
+
 # Hash of functions for validating record types.  Filled in initGlobals() since
 # it relies on visibility flags from the rectypes table in the DB
 my %validators;
+
+# Username, full name, ID - mainly for logging
+my %userdata;
 
 
@@ -929 +933 @@
   }
 } # end initGlobals
+
+
+## DNSDB::login()
+# Takes a database handle, username and password
+# Returns a userdata hash (UID, GID, username, fullname parts) if username exists
+# and password matches the one on file
+# Returns undef otherwise
+sub login {
+  my $dbh = shift;
+  my $user = shift;
+  my $pass = shift;
+
+  %userdata = %{$dbh->selectrow_hashref("SELECT user_id,group_id,password,firstname,lastname FROM users WHERE username=?",
+        undef, ($user) )};
+  return if !%userdata;
+
+  if ($userdata{password} =~ m|^\$1\$([A-Za-z0-9/.]+)\$|) {
+    # native passwords (crypt-md5)
+    return if $userdata{password} ne unix_md5_crypt($pass,$1);
+  } elsif ($userdata{password} =~ /^[0-9a-f]{32}$/) {
+    # VegaDNS import (hex-coded MD5)
+    return if $userdata{password} ne md5_hex($pass);
+  } else {
+    # plaintext (convenient now and then)
+    return if $userdata{password} ne $pass;
+  }
+
+  return %userdata;
+} # end login()