* Copyright (c) 1980, 1987, 1988 The Regents of the University of California.
* Redistribution and use in source and binary forms are permitted
* provided that the above copyright notice and this paragraph are
* duplicated in all such forms and that any documentation,
* advertising materials, and other materials related to such
* distribution and use acknowledge that the software was developed
* by the University of California, Berkeley. The name of the
* University may not be used to endorse or promote products derived
* from this software without specific prior written permission.
* THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR
* IMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED
* WARRANTIES OF MERCHANTIBILITY AND FITNESS FOR A PARTICULAR PURPOSE.
"@(#) Copyright (c) 1980, 1987, 1988 The Regents of the University of California.\n\
static char sccsid[] = "@(#)login.c.1 5.34 (Berkeley) %G%";
* login -h hostname (for telnetd, etc.)
* login -f name (for pre-authenticated login: datakit, xterm, etc.)
#include <sys/resource.h>
#define TTYGRPNAME "tty" /* name of group to own ttys */
#define MOTDFILE "/etc/motd"
#define MAILDIR "/usr/spool/mail"
#define NOLOGIN "/etc/nologin"
#define HUSHLOGIN ".hushlogin"
#define LASTLOG "/usr/adm/lastlog"
* This bounds the time given to login. Not a define so it can
* be patched on machines where it's too small.
char term[64], *hostname, *username, *tty;
CINTR, CQUIT, CSTART, CSTOP, CEOT, CBRK
CSUSP, CDSUSP, CRPRNT, CFLUSH, CWERASE, CLNEXT
{ "Jan", "Feb", "Mar", "Apr", "May", "Jun", "Jul", "Aug",
"Sep", "Oct", "Nov", "Dec" };
extern int errno, optind;
extern char *optarg, **environ;
int ask, fflag, hflag, pflag, cnt;
int quietlog, passwd_req, ioctlval, timedout();
char *domain, *salt, *envinit[1], *ttyn, *pp;
char tbuf[MAXPATHLEN + 2];
char *ctime(), *ttyname(), *stypeof(), *crypt(), *getpass();
(void)signal(SIGALRM, timedout);
(void)alarm((u_int)timeout);
(void)signal(SIGQUIT, SIG_IGN);
(void)signal(SIGINT, SIG_IGN);
(void)setpriority(PRIO_PROCESS, 0, 0);
(void)quota(Q_SETUID, 0, 0, 0);
* -p is used by getty to tell login not to destroy the environment
* -f is used to skip a second login authentication
* -h is used by other servers to pass the name of the remote
* host to login so that it may be placed in utmp and wtmp
(void)gethostname(tbuf, sizeof(tbuf));
domain = index(tbuf, '.');
fflag = hflag = pflag = 0;
while ((ch = getopt(argc, argv, "fh:p")) != EOF)
"login: -h for super-user only.\n");
if (domain && (p = index(optarg, '.')) &&
strcasecmp(p, domain) == 0)
fprintf(stderr, "usage: login [-fp] [username]\n");
(void)ioctl(0, TIOCLSET, &ioctlval);
(void)ioctl(0, TIOCNXCL, 0);
(void)fcntl(0, F_SETFL, ioctlval);
(void)ioctl(0, TIOCGETP, &sgttyb);
sgttyb.sg_erase = CERASE;
(void)ioctl(0, TIOCSLTC, <c);
(void)ioctl(0, TIOCSETC, &tc);
(void)ioctl(0, TIOCSETP, &sgttyb);
for (cnt = getdtablesize(); cnt > 2; cnt--)
if (ttyn == NULL || *ttyn == '\0')
if (tty = rindex(ttyn, '/'))
openlog("login", LOG_ODELAY, LOG_AUTH);
for (cnt = 0;; ask = 1) {
(void)ioctl(0, TIOCSETD, &ioctlval);
* Note if trying multiple user names;
* log failures for previous user name,
* but don't bother logging one failure
* for nonexistent name (mistyped username).
if (failures && strcmp(tbuf, username)) {
if (failures > (pwd ? 0 : 1))
(void)strcpy(tbuf, username);
if (pwd = getpwnam(username))
/* if user not super-user, check for disabled logins */
if (pwd == NULL || pwd->pw_uid)
* Disallow automatic login to root; if not invoked by
* root, disallow if the uid's differ.
passwd_req = pwd->pw_uid == 0 ||
(uid && uid != pwd->pw_uid);
* If no pre-authentication and a password exists
* for this user, prompt for one and verify it.
if (!passwd_req || (pwd && !*pwd->pw_passwd))
setpriority(PRIO_PROCESS, 0, -4);
pp = getpass("Password:");
setpriority(PRIO_PROCESS, 0, 0);
(void) bzero(pp, strlen(pp));
if (pwd && !strcmp(p, pwd->pw_passwd))
printf("Login incorrect\n");
/* we allow 10 tries, but after 3 we start backing off */
(void)ioctl(0, TIOCHPCL, (struct sgttyb *)NULL);
sleep((u_int)((cnt - 3) * 5));
/* committed to login -- turn off timeout */
* If valid so far and root is logging in, see if root logins on
* this terminal are permitted.
if (pwd->pw_uid == 0 && !rootterm(tty)) {
syslog(LOG_NOTICE, "ROOT LOGIN REFUSED FROM %s",
syslog(LOG_NOTICE, "ROOT LOGIN REFUSED ON %s", tty);
printf("Login incorrect\n");
if (quota(Q_SETUID, pwd->pw_uid, 0, 0) < 0 && errno != EINVAL) {
"Too many users logged on already.\nTry again later.\n");
"You have too many processes running.\n");
perror("quota (Q_SETUID)");
if (chdir(pwd->pw_dir) < 0) {
printf("No directory %s!\n", pwd->pw_dir);
printf("Logging in with home = \"/\".\n");
#define TWOWEEKS (14*24*60*60)
if (pwd->pw_change || pwd->pw_expire)
(void)gettimeofday(&tp, (struct timezone *)NULL);
if (tp.tv_sec >= pwd->pw_change) {
printf("Sorry -- your password has expired.\n");
else if (tp.tv_sec - pwd->pw_change < TWOWEEKS) {
ttp = localtime(&pwd->pw_change);
printf("Warning: your password expires on %s %d, 19%d\n",
months[ttp->tm_mon], ttp->tm_mday, ttp->tm_year);
if (tp.tv_sec >= pwd->pw_expire) {
printf("Sorry -- your account has expired.\n");
else if (tp.tv_sec - pwd->pw_expire < TWOWEEKS) {
ttp = localtime(&pwd->pw_expire);
printf("Warning: your account expires on %s %d, 19%d\n",
months[ttp->tm_mon], ttp->tm_mday, ttp->tm_year);
/* nothing else left to fail -- really log in */
bzero((char *)&utmp, sizeof(utmp));
(void)time(&utmp.ut_time);
strncpy(utmp.ut_name, username, sizeof(utmp.ut_name));
strncpy(utmp.ut_host, hostname, sizeof(utmp.ut_host));
strncpy(utmp.ut_line, tty, sizeof(utmp.ut_line));
quietlog = access(HUSHLOGIN, F_OK) == 0;
static struct winsize win = { 0, 0, 0, 0 };
(void)ioctl(0, TIOCSWINSZ, &win);
(void)chown(ttyn, pwd->pw_uid,
(gr = getgrnam(TTYGRPNAME)) ? gr->gr_gid : pwd->pw_gid);
(void)setgid(pwd->pw_gid);
initgroups(username, pwd->pw_gid);
quota(Q_DOWARN, pwd->pw_uid, (dev_t)-1, 0);
(void)setuid(pwd->pw_uid);
if (*pwd->pw_shell == '\0')
/* turn on new line discipline for the csh */
else if (!strcmp(pwd->pw_shell, "/bin/csh")) {
(void)ioctl(0, TIOCSETD, &ioctlval);
/* destroy environment unless user has requested preservation */
(void)setenv("HOME", pwd->pw_dir, 1);
(void)setenv("SHELL", pwd->pw_shell, 1);
strncpy(term, stypeof(tty), sizeof(term));
(void)setenv("TERM", term, 0);
(void)setenv("USER", pwd->pw_name, 1);
(void)setenv("PATH", "/usr/ucb:/bin:/usr/bin:", 0);
if (tty[sizeof("tty")-1] == 'd')
syslog(LOG_INFO, "DIALUP %s, %s", tty, pwd->pw_name);
syslog(LOG_NOTICE, "ROOT LOGIN ON %s FROM %s",
syslog(LOG_NOTICE, "ROOT LOGIN ON %s", tty);
(void)sprintf(tbuf, "%s/%s", MAILDIR, pwd->pw_name);
if (stat(tbuf, &st) == 0 && st.st_size != 0)
printf("You have %smail.\n",
(st.st_mtime > st.st_atime) ? "new " : "");
(void)signal(SIGALRM, SIG_DFL);
(void)signal(SIGQUIT, SIG_DFL);
(void)signal(SIGINT, SIG_DFL);
(void)signal(SIGTSTP, SIG_IGN);
strcpy(tbuf + 1, (p = rindex(pwd->pw_shell, '/')) ?
execlp(pwd->pw_shell, tbuf, 0);
fprintf(stderr, "login: no shell: ");
static char nbuf[UT_NAMESIZE + 1];
for (p = nbuf; (ch = getchar()) != '\n'; ) {
if (p < nbuf + UT_NAMESIZE)
"login names may not start with '-'.\n");
fprintf(stderr, "Login timed out after %d seconds\n", timeout);
return((t = getttynam(ttyn)) && t->ty_status&TTY_SECURE);
int (*oldint)(), sigint();
if ((fd = open(MOTDFILE, O_RDONLY, 0)) < 0)
oldint = signal(SIGINT, sigint);
if (setjmp(motdinterrupt) == 0)
while ((nchars = read(fd, tbuf, sizeof(tbuf))) > 0)
(void)write(fileno(stdout), tbuf, nchars);
(void)signal(SIGINT, oldint);
longjmp(motdinterrupt, 1);
if ((fd = open(NOLOGIN, O_RDONLY, 0)) >= 0) {
while ((nchars = read(fd, tbuf, sizeof(tbuf))) > 0)
(void)write(fileno(stdout), tbuf, nchars);
if ((fd = open(LASTLOG, O_RDWR, 0)) >= 0) {
(void)lseek(fd, (off_t)pwd->pw_uid * sizeof(ll), L_SET);
if (read(fd, (char *)&ll, sizeof(ll)) == sizeof(ll) &&
printf("Last login: %.*s ",
24-5, (char *)ctime(&ll.ll_time));
sizeof(ll.ll_host), ll.ll_host);
sizeof(ll.ll_line), ll.ll_line);
(void)lseek(fd, (off_t)pwd->pw_uid * sizeof(ll), L_SET);
bzero((char *)&ll, sizeof(ll));
strncpy(ll.ll_line, tty, sizeof(ll.ll_line));
strncpy(ll.ll_host, hostname, sizeof(ll.ll_host));
(void)write(fd, (char *)&ll, sizeof(ll));
syslog(LOG_NOTICE, "%d LOGIN FAILURE%s FROM %s, %s",
failures, failures > 1 ? "S" : "", hostname, name);
syslog(LOG_NOTICE, "%d LOGIN FAILURE%s ON %s, %s",
failures, failures > 1 ? "S" : "", tty, name);
return(ttyid && (t = getttynam(ttyid)) ? t->ty_type : UNKNOWN);
if (read(0, &ch, sizeof(ch)) != sizeof(ch))
fprintf(stderr, "%s too long\r\n", err);