sbuild-auth.h

/* Copyright © 2005-2007  Roger Leigh <rleigh@debian.org>
 *
 * schroot is free software: you can redistribute it and/or modify it
 * under the terms of the GNU General Public License as published by
 * the Free Software Foundation, either version 3 of the License, or
 * (at your option) any later version.
 *
 * schroot is distributed in the hope that it will be useful, but
 * WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 * General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program.  If not, see
 * <http://www.gnu.org/licenses/>.
 *
 *********************************************************************/

#ifndef SBUILD_AUTH_H
#define SBUILD_AUTH_H

#include <sbuild/sbuild-config.h>
#include <sbuild/sbuild-custom-error.h>
#include <sbuild/sbuild-environment.h>
#include <sbuild/sbuild-types.h>
#include <sbuild/sbuild-tr1types.h>

#include <string>

#include <sys/types.h>
#include <sys/wait.h>
#include <grp.h>
#include <pwd.h>
#include <unistd.h>

namespace sbuild
{

  class auth
  {
  public:
    enum status
      {
        STATUS_NONE, 
        STATUS_USER, 
        STATUS_FAIL  
      };

    enum error_code
      {
        HOSTNAME,        
        USER,            
        GROUP,           
        AUTHENTICATION,  
        AUTHORISATION,   
        PAM_DOUBLE_INIT, 
        PAM,             
        PAM_END          
      };

    typedef custom_error<error_code> error;

    typedef std::tr1::shared_ptr<auth> ptr;

  protected:
    auth (std::string const& service_name);

  public:
    virtual ~auth ();

    std::string const&
    get_service () const;

    uid_t
    get_uid () const;

    gid_t
    get_gid () const;

    std::string const&
    get_user () const;

    void
    set_user (std::string const& user);

    string_list const&
    get_command () const;

    void
    set_command (string_list const& command);

    std::string const&
    get_home () const;

    std::string const&
    get_wd () const;

    void
    set_wd (std::string const& wd);

    std::string const&
    get_shell () const;

    environment const&
    get_user_environment () const;

    void
    set_user_environment (char **environment);

    void
    set_user_environment (environment const& environment);

    environment
    get_minimal_environment () const;

    environment
    get_complete_environment () const;

    virtual environment
    get_auth_environment () const = 0;

    uid_t
    get_ruid () const;

    gid_t
    get_rgid () const;

    std::string const&
    get_ruser () const;

    std::string const&
    get_rgroup () const;

    virtual void
    start ();

    virtual void
    stop ();

    virtual void
    authenticate (status auth_status);

    virtual void
    setupenv ();

    virtual void
    account ();

    virtual void
    cred_establish ();

    virtual void
    cred_delete ();

    virtual void
    open_session ();

    virtual void
    close_session ();

    static status
    change_auth (status oldauth,
                 status newauth)
    {
      /* Ensure auth level always escalates. */
      if (newauth > oldauth)
        return newauth;
      else
        return oldauth;
    }

    virtual bool
    is_initialised () const = 0;

  protected:
    const std::string  service;
    uid_t              uid;
    gid_t              gid;
    std::string        user;
    string_list        command;
    std::string        home;
    std::string        wd;
    std::string        shell;
    environment        user_environment;
    uid_t              ruid;
    gid_t              rgid;
    std::string        ruser;
    std::string        rgroup;
  };

}

#endif /* SBUILD_AUTH_H */

/*
 * Local Variables:
 * mode:C++
 * End:
 */