pam: add little test module for new pam extensionsrstrode/wip/list-extension

This commit just adds a test module for the new pam
interface (mainly for documentation purposes)

2 files changed, 157 insertions, 0 deletions

diff --git a/pam-extensions/Makefile.am b/pam-extensions/Makefile.am
index 572494ac..241b2e0e 100644
--- a/pam-extensions/Makefile.am
+++ b/pam-extensions/Makefile.am
@@ -16,6 +16,31 @@ pkgconfig_DATA = gdm-pam-extensions.pc
 
 pam_extensions_includedir = $(includedir)/gdm
 pam_extensions_include_HEADERS = gdm-pam-extensions.h
+
+pam_gdm_testlist_la_SOURCES = \
+	pam_gdm_testlist.c \
+	$(NULL)
+
+pam_gdm_testlist_la_CFLAGS = \
+	$(PAM_CFLAGS) \
+	-DGDM_IN_TREE_BUILD=1 \
+	$(NULL)
+
+pam_gdm_testlist_la_LDFLAGS = \
+	-module \
+	-export-dynamic \
+	-avoid-version \
+	-shared \
+	$(NULL)
+
+pam_gdm_testlist_la_LIBADD = \
+	$(PAM_LIBS) \
+	$(NULL)
+
+
+noinst_LTLIBRARIES = \
+	pam_gdm_testlist.la \
+	$(NULL)
 endif
 
 EXTRA_DIST =                                                            \
diff --git a/pam-extensions/pam_gdm_testlist.c b/pam-extensions/pam_gdm_testlist.c
new file mode 100644
index 00000000..d4507bd5
--- /dev/null
+++ b/pam-extensions/pam_gdm_testlist.c
@@ -0,0 +1,132 @@
+/*
+ * Copyright  (C) 2017 Red Hat, Inc.
+ *
+ * compile with gcc -rdynamic -fPIC -shared -lpam $(pkg-config --cflags gdm-pam-extensions) pam_testlist.c -o pam_testlist.so
+ */
+
+#include <unistd.h>
+
+#include <security/_pam_macros.h>
+#include <security/pam_ext.h>
+#include <security/pam_misc.h>
+#include <security/pam_modules.h>
+#include <security/pam_modutil.h>
+
+#ifndef GDM_IN_TREE_BUILD
+#include <gdm/gdm-pam-extensions.h>
+#else
+#include "gdm-pam-extensions.h"
+#endif
+
+int
+pam_sm_authenticate (pam_handle_t  *pamh,
+                     int            flags,
+                     int            argc,
+                     const char   **argv)
+{
+        int retval = PAM_ABORT;
+
+        struct pam_conv *conversation_closure;
+        struct pam_message prompt_message;
+        const struct pam_message *prompt_messages[1];
+        struct pam_response *reply = NULL;
+
+        GdmPamExtensionChoiceListRequest *request = NULL;
+        GdmPamExtensionChoiceListResponse *response = NULL;
+        uint32_t number_of_items = 4;
+        int i = 0;
+
+        if (!GDM_PAM_EXTENSION_SUPPORTED (GDM_PAM_EXTENSION_CHOICE_LIST))
+                goto out;
+
+        pam_info (pamh, "Please select a certificate");
+
+        retval = pam_get_item (pamh, PAM_CONV, (const void **) &conversation_closure);
+
+        if (retval != PAM_SUCCESS)
+                goto out;
+
+        request = malloc (GDM_PAM_EXTENSION_CHOICE_LIST_REQUEST_SIZE (number_of_items));
+        GDM_PAM_EXTENSION_CHOICE_LIST_REQUEST_INIT (request, number_of_items);
+
+        request->list.items[i].key = "john-smith-edipi0";
+        request->list.items[i++].text = "EDIPI Cert 0";
+        request->list.items[i].key = "john-smith-piv-sig0";
+        request->list.items[i++].text = "PIV Signature Cert 0";
+        request->list.items[i].key = "john-smith-secret0";
+        request->list.items[i++].text = "Class Secret Cert 0";
+        request->list.items[i].key = "john-smith-mess-hall0";
+        request->list.items[i++].text = "Mess Hall Cert 0";
+
+        GDM_PAM_EXTENSION_MESSAGE_TO_BINARY_PROMPT_MESSAGE (request, &prompt_message);
+        prompt_messages[0] = &prompt_message;
+
+        retval = conversation_closure->conv (1, prompt_messages, &reply, conversation_closure->appdata_ptr);
+
+        if (retval != PAM_SUCCESS)
+                goto out;
+
+        retval = PAM_ABORT;
+        response = GDM_PAM_EXTENSION_REPLY_TO_CHOICE_LIST_RESPONSE (reply);
+
+        if (response->key == NULL)
+                goto out;
+
+        for (i = 0; i < number_of_items; i++) {
+                if (strcmp (response->key, request->list.items[i].key) != 0)
+                        continue;
+                pam_info (pamh, "Certificate ‘%s’ selected", request->list.items[i].text);
+                retval = PAM_SUCCESS;
+        }
+
+out:
+        free (request);
+        free (response);
+
+        return retval;
+}
+
+int
+pam_sm_setcred (pam_handle_t *pamh,
+                int           flags,
+                int           argc,
+                const char  **argv)
+{
+        return PAM_SUCCESS;
+}
+
+int
+pam_sm_acct_mgmt (pam_handle_t  *pamh,
+                  int            flags,
+                  int            argc,
+                  const char   **argv)
+{
+        return PAM_SUCCESS;
+}
+
+int
+pam_sm_chauthtok (pam_handle_t  *pamh,
+                  int            flags,
+                  int            argc,
+                  const char   **argv)
+{
+        return PAM_SUCCESS;
+}
+
+int
+pam_sm_open_session (pam_handle_t  *pamh,
+                     int            flags,
+                     int            argc,
+                     const char   **argv)
+{
+        return PAM_SUCCESS;
+}
+
+int
+pam_sm_close_session (pam_handle_t  *pamh,
+                      int            flags,
+                      int            argc,
+                      const char   **argv)
+{
+        return PAM_SUCCESS;
+}