* Copyright (c) 1980, 1987 Regents of the University of California.
* All rights reserved. The Berkeley software License Agreement
* specifies the terms and conditions for redistribution.
"@(#) Copyright (c) 1980 Regents of the University of California.\n\
static char sccsid[] = "@(#)login.c.1 5.24 (Berkeley) %G%";
* login -r hostname (for rlogind)
* login -h hostname (for telnetd, etc.)
* login -f name (for pre-authenticated login: datakit, xterm, etc.)
#include <sys/resource.h>
#define TTYGRPNAME "tty" /* name of group to own ttys */
#define MOTDFILE "/etc/motd"
#define MAILDIR "/usr/spool/mail"
#define NOLOGIN "/etc/nologin"
#define HUSHLOGIN ".hushlogin"
#define LASTLOG "/usr/adm/lastlog"
* This bounds the time given to login. Not a define so it can
* be patched on machines where it's too small.
struct passwd nouser = {"", "NOLOGIN", -1, -1, -1, "", "", "", "" };
char term[64], *hostname, *username;
CINTR, CQUIT, CSTART, CSTOP, CEOT, CBRK
CSUSP, CDSUSP, CRPRNT, CFLUSH, CWERASE, CLNEXT
extern int errno, optind;
extern char *optarg, **environ;
int fflag, hflag, pflag, rflag, cnt;
int quietlog, passwd_req, ioctlval, timedout();
char *domain, *envinit[1], *ttyn, *tty;
char tbuf[MAXPATHLEN + 2];
char *ttyname(), *stypeof(), *crypt(), *getpass();
(void)signal(SIGALRM, timedout);
(void)alarm((u_int)timeout);
(void)signal(SIGQUIT, SIG_IGN);
(void)signal(SIGINT, SIG_IGN);
(void)setpriority(PRIO_PROCESS, 0, 0);
(void)quota(Q_SETUID, 0, 0, 0);
* -p is used by getty to tell login not to destroy the environment
* -r is used by rlogind to cause the autologin protocol;
* -f is used to skip a second login authentication
* -h is used by other servers to pass the name of the
* remote host to login so that it may be placed in utmp and wtmp
(void)gethostname(tbuf, sizeof(tbuf));
domain = index(tbuf, '.');
fflag = hflag = pflag = rflag = 0;
while ((ch = getopt(argc, argv, "f:h:pr:")) != EOF)
"login: only one of -r and -f allowed.\n");
"login: -h for super-user only.\n");
"login: only one of -r and -h allowed.\n");
if (domain && (p = index(optarg, '.')) &&
"login: -f and -h not allowed with -r.\n");
passwd_req = doremotelogin(optarg);
if (domain && (p = index(optarg, '.')) &&
fprintf(stderr, "usage: login [-p] [username]\n");
(void)ioctl(0, TIOCLSET, &ioctlval);
(void)ioctl(0, TIOCNXCL, 0);
(void)ioctl(0, FIONBIO, &ioctlval);
(void)ioctl(0, FIOASYNC, &ioctlval);
(void)ioctl(0, TIOCGETP, &ttyb);
* If talking to an rlogin process, propagate the terminal type and
* baud rate across the network.
(void)ioctl(0, TIOCSLTC, <c);
(void)ioctl(0, TIOCSETC, &tc);
(void)ioctl(0, TIOCSETP, &ttyb);
for (cnt = getdtablesize(); cnt > 2; cnt--)
if (ttyn == NULL || *ttyn == '\0')
if (tty = rindex(ttyn, '/'))
openlog("login", LOG_ODELAY, LOG_AUTH);
for (cnt = 0;; username = NULL) {
(void)ioctl(0, TIOCSETD, &ioctlval);
if ((pwd = getpwnam(username)) == NULL)
/* if user not super-user, check for disabled logins */
if (!strcmp(pwd->pw_shell, "/bin/csh")) {
(void)ioctl(0, TIOCSETD, &ioctlval);
* disallow automatic login to root, or if not root
passwd_req = !pwd->pw_uid || uid && uid != pwd->pw_uid;
* If no remote login authentication and a password exists
* for this user, prompt for one and verify it.
if (!passwd_req || !*pwd->pw_passwd)
setpriority(PRIO_PROCESS, 0, -4);
p = getpass("Password:");
p = crypt(p, pwd->pw_passwd);
setpriority(PRIO_PROCESS, 0, 0);
if (!strcmp(p, pwd->pw_passwd))
printf("Login incorrect\n");
"REPEATED LOGIN FAILURES ON %s FROM %.*s, %.*s",
tty, UT_HOSTSIZE, hostname, UT_NAMESIZE,
"REPEATED LOGIN FAILURES ON %s, %.*s",
tty, UT_NAMESIZE, username);
(void)ioctl(0, TIOCHPCL, (struct sgttyb *)NULL);
/* committed to login -- turn off timeout */
* If valid so far and root is logging in, see if root logins on
* this terminal are permitted.
if (!pwd->pw_uid && !rootterm(tty)) {
syslog(LOG_CRIT, "ROOT LOGIN REFUSED ON %s FROM %.*s",
tty, UT_HOSTSIZE, hostname);
syslog(LOG_CRIT, "ROOT LOGIN REFUSED ON %s", tty);
printf("Login incorrect\n");
if (*pwd->pw_shell == '\0')
if (chdir(pwd->pw_dir) < 0) {
printf("No directory %s!\n", pwd->pw_dir);
printf("Logging in with home = \"/\".\n");
if (quota(Q_SETUID, pwd->pw_uid, 0, 0) < 0 && errno != EINVAL) {
"Too many users logged on already.\nTry again later.\n");
"You have too many processes running.\n");
perror("quota (Q_SETUID)");
(void)time(&utmp.ut_time);
strncpy(utmp.ut_name, username, sizeof(utmp.ut_name));
strncpy(utmp.ut_host, hostname, sizeof(utmp.ut_host));
strncpy(utmp.ut_line, tty, sizeof(utmp.ut_line));
quietlog = access(HUSHLOGIN, F_OK) == 0;
dolastlog(quietlog, tty);
if (!hflag && !rflag) { /* XXX */
static struct winsize win = { 0, 0, 0, 0 };
(void)ioctl(0, TIOCSWINSZ, &win);
(void)chown(ttyn, pwd->pw_uid,
(gr = getgrnam(TTYGRPNAME)) ? gr->gr_gid : pwd->pw_gid);
(void)setgid(pwd->pw_gid);
initgroups(username, pwd->pw_gid);
quota(Q_DOWARN, pwd->pw_uid, (dev_t)-1, 0);
(void)setuid(pwd->pw_uid);
/* destroy environment unless user has requested preservation */
setenv("HOME", pwd->pw_dir, 1);
setenv("SHELL", pwd->pw_shell, 1);
strncpy(term, stypeof(tty), sizeof(term));
setenv("USER", pwd->pw_name, 1);
setenv("PATH", ":/usr/ucb:/bin:/usr/bin", 0);
if (tty[sizeof("tty")-1] == 'd')
syslog(LOG_INFO, "DIALUP %s, %s", tty, pwd->pw_name);
syslog(LOG_NOTICE, "ROOT LOGIN %s FROM %.*s",
tty, UT_HOSTSIZE, hostname);
syslog(LOG_NOTICE, "ROOT LOGIN %s", tty);
(void)sprintf(tbuf, "%s/%s", MAILDIR, pwd->pw_name);
if (stat(tbuf, &st) == 0 && st.st_size != 0)
printf("You have %smail.\n",
(st.st_mtime > st.st_atime) ? "new " : "");
(void)signal(SIGALRM, SIG_DFL);
(void)signal(SIGQUIT, SIG_DFL);
(void)signal(SIGINT, SIG_DFL);
(void)signal(SIGTSTP, SIG_IGN);
strcpy(tbuf + 1, (p = rindex(pwd->pw_shell, '/')) ?
execlp(pwd->pw_shell, tbuf, 0);
fprintf(stderr, "login: no shell\n");
static char nbuf[UT_NAMESIZE + 1];
while ((ch = getchar()) != '\n') {
if (p < nbuf+UT_NAMESIZE)
"login names may not start with '-'.\n");
fprintf(stderr, "Login timed out after %d seconds\n", timeout);
return((t = getttynam(tty)) && t->ty_status&TTY_SECURE);
int (*oldint)(), sigint();
if ((fp = fopen(MOTDFILE, "r")) == NULL)
oldint = signal(SIGINT, sigint);
while ((ch = getc(fp)) != EOF && !motdinterrupt)
(void)signal(SIGINT, oldint);
if ((fd = open(NOLOGIN, O_RDONLY, 0)) >= 0) {
while ((nchars = read(fd, tbuf, sizeof(tbuf))) > 0)
(void)write(fileno(stdout), tbuf, nchars);
if ((fd = open(LASTLOG, O_RDWR, 0)) >= 0) {
(void)lseek(fd, (long)pwd->pw_uid * sizeof(ll), L_SET);
if (read(fd, (char *)&ll, sizeof(ll)) == sizeof(ll) &&
printf("Last login: %.*s ",
24-5, (char *)ctime(&ll.ll_time));
sizeof(ll.ll_host), ll.ll_host);
sizeof(ll.ll_line), ll.ll_line);
(void)lseek(fd, (long)pwd->pw_uid * sizeof(ll), L_SET);
strncpy(ll.ll_line, tty, sizeof(ll.ll_line));
strncpy(ll.ll_host, hostname, sizeof(ll.ll_host));
(void)write(fd, (char *)&ll, sizeof(ll));
return(ttyid && (t = getttynam(ttyid)) ? t->ty_type : UNKNOWN);
static char lusername[UT_NAMESIZE+1];
char rusername[UT_NAMESIZE+1];
getstr(rusername, sizeof(rusername), "remuser");
getstr(lusername, sizeof(lusername), "locuser");
getstr(term, sizeof(term), "Terminal type");
pwd = getpwnam(username);
return(ruserok(host, (pwd->pw_uid == 0), rusername, username));
if (read(0, &ch, sizeof(ch)) != sizeof(ch))
fprintf(stderr, "%s too long\r\n", err);
"0", "50", "75", "110", "134", "150", "200", "300", "600",
"1200", "1800", "2400", "4800", "9600", "19200", "38400",
#define NSPEEDS (sizeof(speeds) / sizeof(speeds[0]))
register char *cp = index(term, '/'), **cpp;
for (cpp = speeds; cpp < &speeds[NSPEEDS]; cpp++)
if (strcmp(*cpp, speed) == 0) {
tp->sg_ispeed = tp->sg_ospeed = cpp-speeds;
tp->sg_flags = ECHO|CRMOD|ANYP|XTABS;