Password mangle

Hello everybody.

We’re using gmail for our domain down there but we sent to Google MD5 hashed 
password for users, not clear text passwords. So we’re in the need to mangle 
on the fly the password.

I searched the mailing list and fount hints involving pam and mysql … I think 
this is not the best way for our needs.

So I started to play with source and now I do have what is, for me, a working 
solution, read below.
Meanwhile I guess my approach is quite not the best one. Will be far better if 
we could have something like a hook, a void function to fill-in whit local 
code, to cheat with source only in that file. I’m not aware of others having 
the same need around, to mangle password I mean, but I guess could be some 
around so I hope the developer will consider to help us :)

Anyway here what I did. Ty for any hint. 
Paolo.

In perditon.c 

/* we don’t want to malloc & free more than once*/
  char *gmail_passwd;
  gmail_passwd = malloc(256 * sizeof (char));

/*   mangle the password
      pw2.pw_passwd=pw.pw_passwd;
*/

      passwd_mangle(pw.pw_passwd,gmail_passwd);
      pw2.pw_passwd=gmail_passwd;


In username.h

/**********************************************************************
 * passwd_mangle
 * MD5 encode password
 **********************************************************************/

void passwd_mangle(char *old_password, char *gmail_password);


In username.c

#include <crypt.h>
#include <openssl/md5.h>
#include <openssl/bio.h>
#include <openssl/evp.h>
#include <openssl/buffer.h>

void passwd_mangle(char *old_password, char *gmail_password){

unsigned char hash[64], pwd64[64];
unsigned long bytes;

BIO *bmem, *b64;
BUF_MEM *bptr;
char *buff;

/* critto MD5 la password in chiaro, usando una funzione di libreria SSL */

   bytes=strlen(old_password);
   MD5(old_password, bytes, hash);
/*
   Per codificare Base64 uso ancora le librerie ssl
   I tipi BIO sono in pratica filtri concatenabili fra loro; quello che
   scrivo da un lato esce modificato dall'altro.
   In questo caso concateno un filtro che fa l'encode base64 con un 
   filtro che rende disponibile il risultato in una zona di memoria
*/    

   b64 = BIO_new(BIO_f_base64());
   bmem = BIO_new(BIO_s_mem());

/* concateno                                                  */
   b64 = BIO_push(b64, bmem);

/* 
   scrivo la password crittata MD5                            
   OKKIO che vanno scritti sempre e comunque 16 caratteri  
   perche' la codifica MD5 e' un bin e potrebbe contenere qualsiasi mondezza 
*/
   BIO_write(b64, hash, 16);
   BIO_flush(b64);

/* leggo il risultato, la faccenda e' complicata dal fatto che bisogna
   fare malloc per la stringa in uscita
*/
   BIO_get_mem_ptr(b64, &bptr);
   buff = (char *)malloc(bptr->length);
   memcpy(buff, bptr->data, bptr->length-1);
   buff[bptr->length-1] = 0;

   BIO_free_all(b64);

   strcpy(gmail_password, "{MD5}");
   strcat(gmail_password, buff);

   free(buff);
}



______________________________________________
Perdition-users mailing list
[email protected]
http://lists.vergenet.net/listinfo/perdition-users