package openwebmail::auth_unix_ensim;

use strict;

#

# auth_unix_ensim.pl - authenticate user with unix password

#

# 2003/04/25 [email]tung@turtle.ee.ncku.edu.tw[/email]

# 2003/04/25 [email]tchung@openwebmail.org[/email]

# 2003/06/13 mterry - converted auth_unix.pl to auth_unix_ensim.pl

#

# $unix_passwdfile_plaintext : the plaintext file containing all usernames

#                              and related uid, gid, homedir, shell info.

#                              The deault is /etc/passwd on most unix systems.

#

# $unix_passwdfile_encrypted : the file containing all usernames and

#                              their corresponding encrypted passwords.

# ------------------------------   --------------------------------

# platform                         passwdfile encrypted

# ------------------------------   --------------------------------

# Shadow Passwd (linux/solaris)    /etc/shadow

# FreeBSD                          /etc/master.passwd

# Mac OS X                         /usr/bin/nidump passwd .|

# NIS/YP                           /usr/bin/ypcat passwd|

# NIS+                             /usr/bin/niscat passwd.org_dir|

# else...                          /etc/passwd

# ------------------------------   --------------------------------

#

# $unix_passwdmkdb : The command executed after any password modification

#                    to update the changes of passwdfile to passwd database.

# ------------------------------   --------------------------------

# platform                         passwd mkdb command

# ------------------------------   --------------------------------

# Free/Net/OpenBSD                 /usr/sbin/pwd_mkdb

# Linux/Solaris                    none

# else...                          none

# ------------------------------   --------------------------------

#

# $check_shell : whether to check if the user's shell is listed in /etc/shells.

#



my $unix_passwdfile_plaintext="";

my $unix_passwdfile_encrypted="";

my $unix_passwdmkdb="none";

my $check_shell=0;



################### No configuration required from here ###################



use Fcntl qw(:DEFAULT :flock);

require "filelock.pl";



#  0 : ok

# -2 : parameter format error

# -3 : authentication system/internal error

# -4 : user doesn't exist

sub get_userinfo {

  my ($r_config)=@_;

  my ($user, $virtdomain) = split( /@/, $_[1] );

  my ($uid, $gid, $realname, $homedir);



  return(-2, 'User is null') if (!$user);



  # configure the corrected password file paths

  $unix_passwdfile_plaintext = "/home/virtual/$virtdomain/etc/passwd";

  $unix_passwdfile_encrypted = "/home/virtual/$virtdomain/etc/shadow";



  if ($unix_passwdfile_plaintext eq "/etc/passwd") {

     ($uid, $gid, $realname, $homedir)= (getpwnam($user))[2,3,6,7];

  } else {

     if ($unix_passwdfile_plaintext=~/|/) { # maybe NIS, try getpwnam first

        ($uid, $gid, $realname, $homedir)= (getpwnam($user))[2,3,6,7];

     }

     if ($uid eq "") { # else, open file directly

        ($uid, $gid, $realname, $homedir)= (getpwnam_file($user, $unix_passwdfile_plaintext))[2,3,6,7];

     }

  }

  return(-4, "User $user doesn't exist") if ($uid eq "");



  # correct the home directory for ensim users

  $homedir = "/home/virtual/$virtdomain$homedir";



  # use first field only

  $realname=(split(/,/, $realname))[0];

  # guess real homedir under sun's automounter

  if ($uid) {

     $homedir="/export$homedir" if (-d "/export$homedir");

  }

  return(0, "", $realname, $uid, $gid, $homedir);

}





#  0 : ok

# -1 : function not supported

# -3 : authentication system/internal error

sub get_userlist {    # only used by openwebmail-tool.pl -a

  my $r_config=$_[0];



  my @userlist=();

  my $line;



  # a file should be locked only if it is local accessable

  if ( -f $unix_passwdfile_plaintext) {

     filelock("$unix_passwdfile_plaintext", LOCK_SH) or

        return (-3, "Couldn't get read lock on $unix_passwdfile_plaintext", @userlist);

  }

  open(PASSWD, $unix_passwdfile_plaintext);

  while (defined($line=<PASSWD>)) {

     next if ($line=~/^#/);

     chomp($line);

     push(@userlist, (split(/:/, $line))[0]);

  }

  close(PASSWD);

  filelock("$unix_passwdfile_plaintext", LOCK_UN) if ( -f $unix_passwdfile_plaintext);

  return(0, "", @userlist);

}





#  0 : ok

# -2 : parameter format error

# -3 : authentication system/internal error

# -4 : password incorrect

sub check_userpassword {

  my ($r_config, $fulluser, $password)=@_;

  my ($user,$virtdomain) = split( /@/,$fulluser );



  return (-2, "User or password is null") if (!$user||!$password);



  # a file should be locked only if it is local accessable

  if ( -f $unix_passwdfile_encrypted) {

     filelock("$unix_passwdfile_encrypted", LOCK_SH) or

        return (-3, "Couldn't get read lock on $unix_passwdfile_encrypted");

  }

  if ( ! open (PASSWD, "$unix_passwdfile_encrypted") ) {

     filelock("$unix_passwdfile_encrypted", LOCK_UN) if ( -f $unix_passwdfile_encrypted);

     return (-3, "Couldn't open $unix_passwdfile_encrypted");

  }

  my ($line, $u, $p);

  while (defined($line=<PASSWD>)) {

     chomp($line);

     ($u, $p) = (split(/:/, $line))[0,1];

     last if ($u eq $user); # We've found the user in /etc/passwd

  }

  close (PASSWD);

  filelock("$unix_passwdfile_encrypted", LOCK_UN) if ( -f $unix_passwdfile_encrypted);



  return(-4, "User $user doesn't exist") if ($u ne $user);

  return(-4, "Password incorrect") if (crypt($password,$p) ne $p);

  return (0, "") if (!$check_shell);



  my ($name, $shell);

  if ($unix_passwdfile_plaintext eq "/etc/passwd") {

     $shell = (getpwnam($user))[8];

  } else {

     if ($unix_passwdfile_plaintext=~/|/) { # maybe NIS, try getpwnam first

        ($name, $shell)= (getpwnam($user))[0,8];

     }

     if ($name eq "") { # else, open file directly

        ($name, $shell) = (getpwnam_file($user, $unix_passwdfile_plaintext))[0,8];

     }

  }

  if ($shell && open(ES, "/etc/shells")) {

     my $validshell = 0;   # assume an invalid shell until we get a match

     while(<ES>) {

        chop;

        if( $shell eq $_ ) {

           $validshell = 1; last;

        }

     }

     close(ES);

     return (-4, "user doesn't have valid shell") if (!$validshell);

  }

  return (0, "");

}





#  0 : ok

# -1 : function not supported

# -2 : parameter format error

# -3 : authentication system/internal error

# -4 : password incorrect

sub change_userpassword {

  return (-1,"Function not supported");

}





################### misc support routine ###################

# use flock since what we modify here are local system files

sub filelock () {

  return(openwebmail::filelock::flock_lock(@_));

}



# this routie is slower than system getpwnam() but can work with file

# other than /etc/passwd. ps: it always return '*' for passwd field.

sub getpwnam_file {

  my ($user, $passwdfile_plaintext)=@_;

  my ($name, $passwd, $uid, $gid, $gcos, $dir, $shell);



  return("", "", "", "", "", "", "", "", "") if ($user eq "");



  open(PASSWD, "$passwdfile_plaintext");

  while(<PASSWD>) {

     next if (/^#/);

     chomp;

     ($name, $passwd, $uid, $gid, $gcos, $dir, $shell)=split(/:/);

     last if ($name eq $user);

  }

  close(PASSWD);



  if ($name eq $user) {

     return($name, "*", $uid, $gid, 0, "", $gcos, $dir, $shell);

  } else {

     return("", "", "", "", "", "", "", "", "");

  }

}



1;

Software error:

Can't continue after import errors at /var/www/cgi-bin/openwebmail/auth_unix_ensim.pl line 47

BEGIN failed--compilation aborted at /var/www/cgi-bin/openwebmail/auth_unix_ensim.pl line 47.



For help, please send mail to the webmaster (webmaster@servesite.net), giving this error message and the time and date of the error.



Content-type: text/html

Software error:

[Sun Jul 13 05:25:49 2003] openwebmail.pl: Can't continue after import errors at /var/www/cgi-bin/openwebmail/auth_unix_ensim.pl line 47

[Sun Jul 13 05:25:49 2003] openwebmail.pl: BEGIN failed--compilation aborted at /var/www/cgi-bin/openwebmail/auth_unix_ensim.pl line 47.

Compilation failed in require at /var/www/cgi-bin/openwebmail/ow-shared.pl line 699.



For help, please send mail to the webmaster (webmaster@servesite.net), giving this error message and the time and date of the error.

package openwebmail::auth_unix_ensim;

use strict;

#

# auth_unix_ensim.pl -  authenticate user with unix password and check

#                       if user is valid under the host

#

# Version 1.16 Jun 26, 2003 UNOFFICIAL RELEASE

# Update by [email]mitch@bluecrow.net[/email]

# Added support for versions of OpenWebMail greater than 1.90

# THIS VERSION WILL NOT WORK WITH OPENWEBMAIL VERSIONS LESS THAN 2!!!

# I have only tested it under OPENWEBMAIL version 2.10.

#

# In OWM version 2 (greater than 1.90), an additional parameter was passed

# to the functions in ALL of the authentication modules.  This parameter

# is designated as $r_config in the documentation.  It is a HASH

# containing the configuration of OWM.  The fix was to change the $user

# and other assignment statements from =@_[0] to =@_[1], or whatever the

# number just increment by 1.

#

# The other problem that I ran into was there were numberous calls to

# a function filelock in auth_unix_ensim.pl and the compiler complained

# that that function could not be found.  The calls to filelock were

# changed to calls to flock.

#

# I tested it out as far as logging in is concerened, but have not tested

# the change password function.  I have disabled it as I don't really want

# to use it.

#

# This is my first whack at Perl, so I'm sure the fix could be better.

#

# TODO: update the script so that it can be used with any version of

# OpenWebMail.  To do this, the script needs to detect if @_[0] is a

# HASH.  If it is not, it is a version <2.  If it is, the version is

# greater than 1.90.

#

# Version 1.15 Aug 6, 2002

#

# 2002/08/06 [email]Trevor.Paquette@TeraGo.ca[/email]

#            Fix comments

# 2001/12/20 [email]tung@turtle.ee.ncku.edu.tw[/email] (orig: auth_unix.pl)

#

# This auth module will check if the authenticated user has a

# directory in /home/virtual/DOMAIN/home/USER, and if exists the

# shell informed in domains´s passwd.

#

# Use this module in conjunction with allowed_serverdomain to lock

# down which domains actually have access to webmail.

#

# $unix_passwdfile_plaintext : the plaintext file containing all usernames

#                              and related uid, gid, homedir, shell info.

#                              The deault is /etc/passwd on most unix systems.

# $unix_passwdfile_encrypted : the file containing all usernames and

#                              their corresponding encrypted passwords.

# $unix_passwdmkdb : The command executed after any password modification

#                    to update the changes of passwdfile to passwd database.



my $unix_passwdfile_plaintext="/etc/passwd";

my $unix_passwdfile_encrypted="/etc/shadow";

my $unix_passwdmkdb="none";



################### No configuration required from here ###################



use strict;

use Fcntl qw(:DEFAULT :flock);



sub get_userinfo {

  my $user=$_[1];

  my ($uid, $gid, $realname, $homedir);

  my $domain;



  ($user, $domain)=split(/@/, $user);



  $unix_passwdfile_plaintext = "/home/virtual/$domain$unix_passwdfile_plaintext" if ($domain ne "" && $unix_passwdfile_plaintext !~ /^/home/virtual/);



  if ($unix_passwdfile_plaintext eq "/etc/passwd") {

     ($uid, $gid, $realname, $homedir)= (getpwnam($user))[2,3,6,7];

  } else {

     ($uid, $gid, $realname, $homedir)= (getpwnam_file($user, $unix_passwdfile_plaintext))[2,3,6,7];

  }



  # use first field only

  $realname=(split(/,/, $realname))[0];

  # guess real homedir under sun's automounter

  if ($uid) {

     $homedir="/export$homedir" if (-d "/export$homedir");

  }

  $homedir = "/home/virtual/$domain$homedir" if ($domain ne "");

  return(0, "", $realname, $uid, $gid, $homedir);

}





sub get_userlist {      # only used by checkmail.pl -a

  my @userlist=();

  my $line;  



  # a file should be locked only if it is local accessable

  flock("$unix_passwdfile_encrypted", LOCK_SH) if ( -f $unix_passwdfile_encrypted);

  open(PASSWD, $unix_passwdfile_encrypted);

  while (defined($line=<PASSWD>)) {

     push(@userlist, (split(/:/, $line))[0]);

  }

  close(PASSWD);

  flock("$unix_passwdfile_encrypted", LOCK_UN) if ( -f $unix_passwdfile_encrypted);



  return(@userlist);

}





#  0 : ok

# -2 : parameter format error

# -3 : authentication system/internal error

# -4 : password incorrect

sub check_userpassword {

  my ($user)=@_[1];

  my ($password)=@_[2];

  my ($line, $u, $p);

  my $domain;



  ($user, $domain)=split(/@/, $user);



  return -2 unless ( $user ne "" && $password ne "");



  $unix_passwdfile_encrypted = "/home/virtual/$domain$unix_passwdfile_encrypted" if ($domain ne "" && $unix_passwdfile_encrypted !~ /^/home/virtual/);

  $unix_passwdfile_plaintext = "/home/virtual/$domain$unix_passwdfile_plaintext" if ($domain ne "" && $unix_passwdfile_plaintext !~ /^/home/virtual/);



  # a file should be locked only if it is local accessable

  flock("$unix_passwdfile_encrypted", LOCK_SH) if ( -f $unix_passwdfile_encrypted);

  if ( ! open (PASSWD, "$unix_passwdfile_encrypted") ) {

     flock("$unix_passwdfile_encrypted", LOCK_UN) if ( -f $unix_passwdfile_encrypted);

     return -3;

  }

  while (defined($line=<PASSWD>)) {

     ($u, $p) = (split(/:/, $line))[0,1];

     last if ($u eq $user); # We've found the user in /etc/passwd

  }

  close (PASSWD);

  flock("$unix_passwdfile_encrypted", LOCK_UN) if ( -f $unix_passwdfile_encrypted);



  return -4 if ($u ne $user || crypt($password,$p) ne $p);



  # validate user shell if /etc/shells exists

  if (open(ES, "/etc/shells")) {

     my $shell;

     if ($unix_passwdfile_plaintext eq "/etc/passwd") {

        $shell = (getpwnam($user))[8];

     } else {

        $shell = (getpwnam_file($user, $unix_passwdfile_plaintext))[8];

     }

     my $validshell = 0;   # assume an invalid shell until we get a match

     while(<ES>) {

        chop;

        if( $shell eq $_ ) {

           $validshell = 1; last;

        }

     }

     close(ES);

     return -4 if (!$validshell);

  }

       

  return 0;

}





#  0 : ok

# -1 : function not supported

# -2 : parameter format error

# -3 : authentication system/internal error

# -4 : password incorrect

sub change_userpassword {

  my ($user)=@_[1];

  my ($oldpassword)=@_[2];

  my ($newpassword)=@_[3];

  my ($u, $p, $misc, $encrypted);

  my $content="";

  my $line;

  my $domain;



  return -2 unless ( $user ne "" && $oldpassword ne "" && $newpassword ne "" );

  return -2 if (length($newpassword)<4);



  ($user, $domain)=split(/@/, $user);

  $unix_passwdfile_encrypted = "/home/virtual/$domain$unix_passwdfile_encrypted" if ($domain ne "" && $unix_passwdfile_encrypted !~ /^/home/virtual/);



  # a passwdfile could be modified only if it is local accessable

  return -1 if (! -f $unix_passwdfile_encrypted);



  flock("$unix_passwdfile_encrypted", LOCK_EX);

  open (PASSWD, $unix_passwdfile_encrypted) or return -3;

  while (defined($line=<PASSWD>)) {

     $content .= $line;

     if ($u ne $user) {

        ($u, $p, $misc) = split(/:/, $line, 3);

     }

  }

  close (PASSWD);



  if ($u ne $user || crypt($oldpassword,$p) ne $p) {

     flock("$unix_passwdfile_encrypted", LOCK_UN);

     return -4;

  }



  srand();

  my $table="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz";

  my $salt=substr($table, int(rand(length($table))), 1).

           substr($table, int(rand(length($table))), 1);



  if ($p =~ /^$1$/) {        # if orig encryption is MD5, keep using it

     $salt = '$1$'. $salt;

  }



  $encrypted= crypt($newpassword, $salt);



  my $oldline=join(":", $u, $p, $misc);

  my $newline=join(":", $u, $encrypted, $misc);



  if ($content !~ s/Q$oldlineE/$newline/) {

     flock("$unix_passwdfile_encrypted", LOCK_UN);

     return -3;

  }



  open(TMP, ">$unix_passwdfile_encrypted.tmp.$$") || goto authsys_error;

  print TMP $content || goto authsys_error;

  close(TMP) || goto authsys_error;



  if ($unix_passwdmkdb ne "" && $unix_passwdmkdb ne "none" ) {

     # update passwd and db with pwdmkdb program

     if ( system("$unix_passwdmkdb $unix_passwdfile_encrypted.tmp.$$")!=0 ) {

        goto authsys_error;

     }

  } else {

     # automic update passwd by rename

     my ($fmode, $fuid, $fgid) = (stat($unix_passwdfile_encrypted))[2,4,5];

     chown($fuid, $fgid, "$unix_passwdfile_encrypted.tmp.$$");

     chmod($fmode, "$unix_passwdfile_encrypted.tmp.$$");

     rename("$unix_passwdfile_encrypted.tmp.$$", $unix_passwdfile_encrypted) || goto authsys_error;

  }

  flock("$unix_passwdfile_encrypted", LOCK_UN);

  return(0);



authsys_error:

  unlink("$unix_passwdfile_encrypted.tmp.$$");

  flock("$unix_passwdfile_encrypted", LOCK_UN);

  return(-3);

}



# this routie is slower than system getpwnam() but can work with file

# other than /etc/passwd. ps: it always return '*' for passwd field.

sub getpwnam_file {

  my ($user, $passwdfile_plaintext)=@_;

  my ($name, $passwd, $uid, $gid, $gcos, $dir, $shell);



  return("", "", "", "", "", "", "", "", "") if ($user eq "" || ! -f $passwdfile_plaintext);



  open(PASSWD, "$passwdfile_plaintext");

  while(<PASSWD>) {

     next if (/^#/);

     chomp;

     ($name, $passwd, $uid, $gid, $gcos, $dir, $shell)=split(/:/);

     last if ($name eq $user);

  }

  close(PASSWD);



  if ($name eq $user) {

     return($name, "*", $uid, $gid, 0, "", $gcos, $dir, $shell);

  } else {

     return("", "", "", "", "", "", "", "", "");

  }

}



1;

just a little fix here



when you install openwebmail, the system tries to find the en_US directory and do give some errors when installed



so, do the following after installed openwebmail:



cd /var/www/cgi-bin/openwebmail/etc/templates/

cp -R en en_US



and



cd /var/www/cgi-bin/openwebmail/etc/lang

cp -R en en_US



this should fix the errors.