PAM auth with program supplied password

PAM Authentication with program supplied username / password pair.

In cases like "login" and "sudo", the use of PAM involves asking user for password on the terminal. This is a feature provided by the pam-misc library. PAM will require calling program to supply an "conversasion" callback, and pam-misc library provided "misc_conv" to enable this askpass feature. As vsftpd, program could provide customized pam conversasion. Sample code (largly based on vsftpd code snippet so Thanks to VSFTPD)

1. int
2. pam_conv_func(int nmsg, const struct pam_message** p_msg,
3.               struct pam_response** p_reply, void* p_addata)
4. {
5.   int i;
6.   struct pam_response* p_resps = 0;
7.   (void) p_addata;
8.   if (nmsg < 0)
9.   {
10.     fprintf(stderr, "dodgy nmsg in pam_conv_func");
11.   }
12.   p_resps = malloc(sizeof(struct pam_response) * nmsg);
13.   for (i=0; i<nmsg; i++)
14.   {
15.     switch (p_msg[i]->msg_style)
16.     {
17.       case PAM_PROMPT_ECHO_OFF:
18.         p_resps[i].resp_retcode = PAM_SUCCESS;
19.         p_resps[i].resp = (char*) strdup("PASSWORD_HERE"); // put the program supplied password here.
20.         break;
21.       case PAM_TEXT_INFO:
22.       case PAM_ERROR_MSG:
23.         p_resps[i].resp_retcode = PAM_SUCCESS;
24.         p_resps[i].resp = 0;
25.         break;
26.       case PAM_PROMPT_ECHO_ON:
27.       default:
28.         free(p_resps);
29.         return PAM_CONV_ERR;
30.         break;
31.     }
32.   }
33.   *p_reply = p_resps;
34.   return PAM_SUCCESS;
35. }
37. static struct pam_conv conv = {
38.      pam_conv_func,
39.      //misc_conv,
40.      NULL
41. };
43. pam_handle_t *pamh=NULL;
44. pam_start(service, username, &conv, &pamh);
45. pam_set_item(pamh, PAM_USER, "ryan"); // required in case "username" was NULL when calling pam_start
46. retcode = pam_authenticate(pamh, 0); // will call "pam_conv" provided in pam_start. returns PAM_SUCCESS if auth passed.