* Copyright (c) 1980, 1987, 1988 The Regents of the University of California.
* Redistribution and use in source and binary forms are permitted
* provided that the above copyright notice and this paragraph are
* duplicated in all such forms and that any documentation,
* advertising materials, and other materials related to such
* distribution and use acknowledge that the software was developed
* by the University of California, Berkeley. The name of the
* University may not be used to endorse or promote products derived
* from this software without specific prior written permission.
* THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR
* IMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED
* WARRANTIES OF MERCHANTIBILITY AND FITNESS FOR A PARTICULAR PURPOSE.
"@(#) Copyright (c) 1980, 1987, 1988 The Regents of the University of California.\n\
static char sccsid[] = "@(#)login.c.1 5.25 (Berkeley) %G%";
* login -r hostname (for rlogind)
* login -h hostname (for telnetd, etc.)
* login -f name (for pre-authenticated login: datakit, xterm, etc.)
#include <sys/resource.h>
#define TTYGRPNAME "tty" /* name of group to own ttys */
#define MOTDFILE "/etc/motd"
#define MAILDIR "/usr/spool/mail"
#define NOLOGIN "/etc/nologin"
#define HUSHLOGIN ".hushlogin"
#define LASTLOG "/usr/adm/lastlog"
* This bounds the time given to login. Not a define so it can
* be patched on machines where it's too small.
char term[64], *hostname, *username;
CINTR, CQUIT, CSTART, CSTOP, CEOT, CBRK
CSUSP, CDSUSP, CRPRNT, CFLUSH, CWERASE, CLNEXT
extern int errno, optind;
extern char *optarg, **environ;
int fflag, hflag, pflag, rflag, cnt;
int quietlog, passwd_req, ioctlval, timedout();
char *domain, *salt, *envinit[1], *ttyn, *tty;
char tbuf[MAXPATHLEN + 2];
char *ttyname(), *stypeof(), *crypt(), *getpass();
(void)signal(SIGALRM, timedout);
(void)alarm((u_int)timeout);
(void)signal(SIGQUIT, SIG_IGN);
(void)signal(SIGINT, SIG_IGN);
(void)setpriority(PRIO_PROCESS, 0, 0);
(void)quota(Q_SETUID, 0, 0, 0);
* -p is used by getty to tell login not to destroy the environment
* -r is used by rlogind to cause the autologin protocol;
* -f is used to skip a second login authentication
* -h is used by other servers to pass the name of the
* remote host to login so that it may be placed in utmp and wtmp
(void)gethostname(tbuf, sizeof(tbuf));
domain = index(tbuf, '.');
fflag = hflag = pflag = rflag = 0;
while ((ch = getopt(argc, argv, "fh:pr:")) != EOF)
"login: only one of -r and -f allowed.\n");
"login: -h for super-user only.\n");
"login: only one of -r and -h allowed.\n");
if (domain && (p = index(optarg, '.')) &&
"login: -f and -h not allowed with -r.\n");
"login: -r for super-user only.\n");
/* "-r hostname" must be last args */
fprintf(stderr, "Syntax error.\n");
passwd_req = (doremotelogin(optarg) == -1);
if (domain && (p = index(optarg, '.')) &&
fprintf(stderr, "usage: login [-fp] [username]\n");
(void)ioctl(0, TIOCLSET, &ioctlval);
(void)ioctl(0, TIOCNXCL, 0);
(void)fcntl(0, F_SETFL, ioctlval);
(void)ioctl(0, TIOCGETP, &sgttyb);
* If talking to an rlogin process, propagate the terminal type and
* baud rate across the network.
sgttyb.sg_erase = CERASE;
(void)ioctl(0, TIOCSLTC, <c);
(void)ioctl(0, TIOCSETC, &tc);
(void)ioctl(0, TIOCSETP, &sgttyb);
for (cnt = getdtablesize(); cnt > 2; cnt--)
if (ttyn == NULL || *ttyn == '\0')
if (tty = rindex(ttyn, '/'))
openlog("login", LOG_ODELAY, LOG_AUTH);
for (cnt = 0;; username = NULL) {
(void)ioctl(0, TIOCSETD, &ioctlval);
if (pwd = getpwnam(username))
/* if user not super-user, check for disabled logins */
if (pwd == NULL || pwd->pw_uid)
* Disallow automatic login to root; if not invoked by
* root, disallow if the uid's differ.
passwd_req = pwd->pw_uid == 0 ||
(uid && uid != pwd->pw_uid);
* If no remote login authentication and a password exists
* for this user, prompt for one and verify it.
if (!passwd_req || pwd && !*pwd->pw_passwd)
setpriority(PRIO_PROCESS, 0, -4);
p = crypt(getpass("Password:"), salt);
setpriority(PRIO_PROCESS, 0, 0);
if (pwd && !strcmp(p, pwd->pw_passwd))
printf("Login incorrect\n");
"REPEATED LOGIN FAILURES ON %s FROM %.*s, %.*s",
tty, UT_HOSTSIZE, hostname, UT_NAMESIZE,
"REPEATED LOGIN FAILURES ON %s, %.*s",
tty, UT_NAMESIZE, username);
(void)ioctl(0, TIOCHPCL, (struct sgttyb *)NULL);
/* committed to login -- turn off timeout */
* If valid so far and root is logging in, see if root logins on
* this terminal are permitted.
if (pwd->pw_uid == 0 && !rootterm(tty)) {
syslog(LOG_ERR, "ROOT LOGIN REFUSED ON %s FROM %.*s",
tty, UT_HOSTSIZE, hostname);
syslog(LOG_ERR, "ROOT LOGIN REFUSED ON %s", tty);
printf("Login incorrect\n");
if (quota(Q_SETUID, pwd->pw_uid, 0, 0) < 0 && errno != EINVAL) {
"Too many users logged on already.\nTry again later.\n");
"You have too many processes running.\n");
perror("quota (Q_SETUID)");
if (chdir(pwd->pw_dir) < 0) {
printf("No directory %s!\n", pwd->pw_dir);
printf("Logging in with home = \"/\".\n");
/* nothing else left to fail -- really log in */
(void)time(&utmp.ut_time);
strncpy(utmp.ut_name, username, sizeof(utmp.ut_name));
strncpy(utmp.ut_host, hostname, sizeof(utmp.ut_host));
strncpy(utmp.ut_line, tty, sizeof(utmp.ut_line));
quietlog = access(HUSHLOGIN, F_OK) == 0;
dolastlog(quietlog, tty);
if (!hflag && !rflag) { /* XXX */
static struct winsize win = { 0, 0, 0, 0 };
(void)ioctl(0, TIOCSWINSZ, &win);
(void)chown(ttyn, pwd->pw_uid,
(gr = getgrnam(TTYGRPNAME)) ? gr->gr_gid : pwd->pw_gid);
(void)setgid(pwd->pw_gid);
initgroups(username, pwd->pw_gid);
quota(Q_DOWARN, pwd->pw_uid, (dev_t)-1, 0);
(void)setuid(pwd->pw_uid);
if (*pwd->pw_shell == '\0')
/* turn on new line discipline for the csh */
else if (!strcmp(pwd->pw_shell, "/bin/csh")) {
(void)ioctl(0, TIOCSETD, &ioctlval);
/* destroy environment unless user has requested preservation */
(void)setenv("HOME", pwd->pw_dir, 1);
(void)setenv("SHELL", pwd->pw_shell, 1);
strncpy(term, stypeof(tty), sizeof(term));
(void)setenv("TERM", term, 0);
(void)setenv("USER", pwd->pw_name, 1);
(void)setenv("PATH", "/usr/ucb:/bin:/usr/bin:", 0);
if (tty[sizeof("tty")-1] == 'd')
syslog(LOG_INFO, "DIALUP %s, %s", tty, pwd->pw_name);
syslog(LOG_NOTICE, "ROOT LOGIN %s FROM %.*s",
tty, UT_HOSTSIZE, hostname);
syslog(LOG_NOTICE, "ROOT LOGIN %s", tty);
(void)sprintf(tbuf, "%s/%s", MAILDIR, pwd->pw_name);
if (stat(tbuf, &st) == 0 && st.st_size != 0)
printf("You have %smail.\n",
(st.st_mtime > st.st_atime) ? "new " : "");
(void)signal(SIGALRM, SIG_DFL);
(void)signal(SIGQUIT, SIG_DFL);
(void)signal(SIGINT, SIG_DFL);
(void)signal(SIGTSTP, SIG_IGN);
strcpy(tbuf + 1, (p = rindex(pwd->pw_shell, '/')) ?
execlp(pwd->pw_shell, tbuf, 0);
fprintf(stderr, "login: no shell: ");
static char nbuf[UT_NAMESIZE + 1];
for (p = nbuf; (ch = getchar()) != '\n'; ) {
if (p < nbuf + UT_NAMESIZE)
"login names may not start with '-'.\n");
fprintf(stderr, "Login timed out after %d seconds\n", timeout);
return((t = getttynam(tty)) && t->ty_status&TTY_SECURE);
int (*oldint)(), sigint();
if ((fd = open(MOTDFILE, O_RDONLY, 0)) < 0)
oldint = signal(SIGINT, sigint);
if (setjmp(motdinterrupt) == 0)
while ((nchars = read(fd, tbuf, sizeof(tbuf))) > 0)
(void)write(fileno(stdout), tbuf, nchars);
(void)signal(SIGINT, oldint);
longjmp(motdinterrupt, 1);
if ((fd = open(NOLOGIN, O_RDONLY, 0)) >= 0) {
while ((nchars = read(fd, tbuf, sizeof(tbuf))) > 0)
(void)write(fileno(stdout), tbuf, nchars);
if ((fd = open(LASTLOG, O_RDWR, 0)) >= 0) {
(void)lseek(fd, (off_t)pwd->pw_uid * sizeof(ll), L_SET);
if (read(fd, (char *)&ll, sizeof(ll)) == sizeof(ll) &&
printf("Last login: %.*s ",
24-5, (char *)ctime(&ll.ll_time));
sizeof(ll.ll_host), ll.ll_host);
sizeof(ll.ll_line), ll.ll_line);
(void)lseek(fd, (off_t)pwd->pw_uid * sizeof(ll), L_SET);
strncpy(ll.ll_line, tty, sizeof(ll.ll_line));
strncpy(ll.ll_host, hostname, sizeof(ll.ll_host));
(void)write(fd, (char *)&ll, sizeof(ll));
return(ttyid && (t = getttynam(ttyid)) ? t->ty_type : UNKNOWN);
static char lusername[UT_NAMESIZE+1];
char rusername[UT_NAMESIZE+1];
getstr(rusername, sizeof(rusername), "remuser");
getstr(lusername, sizeof(lusername), "locuser");
getstr(term, sizeof(term), "Terminal type");
pwd = getpwnam(username);
return(ruserok(host, (pwd->pw_uid == 0), rusername, username));
if (read(0, &ch, sizeof(ch)) != sizeof(ch))
fprintf(stderr, "%s too long\r\n", err);
"0", "50", "75", "110", "134", "150", "200", "300", "600",
"1200", "1800", "2400", "4800", "9600", "19200", "38400",
#define NSPEEDS (sizeof(speeds) / sizeof(speeds[0]))
register char *cp = index(term, '/'), **cpp;
for (cpp = speeds; cpp < &speeds[NSPEEDS]; cpp++)
if (strcmp(*cpp, speed) == 0) {
tp->sg_ispeed = tp->sg_ospeed = cpp-speeds;
tp->sg_flags = ECHO|CRMOD|ANYP|XTABS;