/*
 * Copyright 2007, Haiku, Inc. All Rights Reserved.
 * Distributed under the terms of the MIT License.
 *
 * Authors:
 *		Axel Dörfler, axeld@pinc-software.de
 */
 
 
#include <SupportDefs.h>
 
#include <errno.h>
#include <pwd.h>
#include <signal.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <syslog.h>
#include <unistd.h>
 
#include "multiuser_utils.h"
 
 
extern const char* __progname;
const char* kProgramName = __progname;
 
const uint32 kRetries = 3;
const uint32 kTimeout = 60;
 
 
static status_t
read_string(char* string, size_t bufferSize)
{
	// TODO: setup timeout handler
 
	// read everything until the next carriage return
	char c;
	while ((c = fgetc(stdin)) != EOF && c != '\r' && c != '\n') {
		if (bufferSize > 1) {
			string[0] = c;
			string++;
			bufferSize--;
		}
	}
 
	if (ferror(stdin) != 0)
		return ferror(stdin);
 
	string[0] = '\0';
	return B_OK;
}
 
 
static status_t
login(const char* user, struct passwd** _passwd)
{
	char userBuffer[64];
 
	if (user == NULL) {
		char host[64];
		if (gethostname(host, sizeof(host)) != 0)
			host[0] = '\0';
 
		if (host[0])
			printf("%s ", host);
		printf("login: ");
		fflush(stdout);
 
		status_t status = read_string(userBuffer, sizeof(userBuffer));
		if (status < B_OK)
			return status;
 
		putchar('\n');
		user = userBuffer;
	}
 
	// if no user is given, we exit immediately
	if (!user[0])
		exit(1);
 
	char password[64];
	status_t status = read_password("password: ", password, sizeof(password),
		false);
 
	putchar('\n');
 
	if (status < B_OK)
		return status;
 
	struct passwd* passwd = getpwnam(user);
	struct spwd* spwd = getspnam(user);
 
	bool ok = verify_password(passwd, spwd, password);
	explicit_bzero(password, sizeof(password));
 
	if (!ok)
		return B_PERMISSION_DENIED;
 
	*_passwd = passwd;
	return B_OK;
}
 
 
static const char*
get_from(const char* host)
{
	if (host == NULL)
		return "";
 
	static char buffer[64];
	snprintf(buffer, sizeof(buffer), " from %s", host);
	return buffer;
}
 
 
static void
usage()
{
	fprintf(stderr, "usage: %s [-fp] [-h hostname] [username]\n", kProgramName);
	exit(1);
}
 
 
int
main(int argc, char *argv[])
{
	bool noAuthentification = false;
	bool preserveEnvironment = false;
	const char* fromHost = NULL;
 
	char c;
	while ((c = getopt(argc, argv, "fh:p")) != -1) {
		switch (c) {
			case 'f':
				noAuthentification = true;
				break;
			case 'h':
				if (geteuid() != 0) {
					fprintf(stderr, "%s: %s\n", kProgramName,
						strerror(B_NOT_ALLOWED));
					exit(1);
				}
 
				fromHost = optarg;
				break;
			case 'p':
				preserveEnvironment = true;
				break;
 
			default:
				usage();
				break;
		}
	}
 
	argc -= optind;
	argv += optind;
 
	const char* user = NULL;
	if (argc > 0)
		user = argv[0];
 
	// login
 
	alarm(kTimeout);
	openlog(kProgramName, 0, LOG_AUTH);
 
	uint32 retries = kRetries;
	status_t status = B_ERROR;
	struct passwd* passwd = NULL;
 
	while (retries > 0) {
		status = login(user, &passwd);
		if (status == B_OK)
			break;
 
		sleep(3);
		fprintf(stderr, "Login failed.\n");
		retries--;
 
		user = NULL;
			// ask for the user name as well after the first failure
	}
 
	alarm(0);
 
	if (status < B_OK || passwd == NULL) {
		// login failure
		syslog(LOG_NOTICE, "login%s failed for \"%s\"", get_from(fromHost),
			passwd->pw_name);
		exit(1);
	}
 
	// setup environment for the user
 
	status = setup_environment(passwd, preserveEnvironment);
	if (status < B_OK) {
		// refused login
		fprintf(stderr, "%s: Refused login. Setting up environment failed: %s\n",
			kProgramName, strerror(status));
		syslog(LOG_NOTICE, "login%s refused for \"%s\"", get_from(fromHost),
			passwd->pw_name);
		exit(1);
	}
 
	syslog(LOG_INFO, "login%s as \"%s\"", get_from(fromHost), passwd->pw_name);
 
	// start login shell
 
	const char* args[] = {getenv("SHELL"), "-login", NULL};
	execv(args[0], (char **)args);
 
	// try default shell
	args[0] = "/bin/sh";
	execv(args[0], (char **)args);
 
	fprintf(stderr, "%s: starting the shell failed: %s", kProgramName,
		strerror(errno));
 
	return 1;
}