| OLD | NEW |
| 1 // Copyright (c) 2011 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2011 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #include "remoting/host/user_authenticator_mac.h" | 5 #include "remoting/host/user_authenticator.h" |
| 6 | 6 |
| 7 #include <Security/Security.h> | 7 #include <Security/Security.h> |
| 8 | 8 |
| 9 #include <string> | 9 #include <string> |
| 10 | 10 |
| 11 #include "base/basictypes.h" |
| 11 #include "base/logging.h" | 12 #include "base/logging.h" |
| 12 | 13 |
| 13 namespace remoting { | 14 namespace remoting { |
| 14 | 15 |
| 15 static const char kAuthorizationRightName[] = "system.login.tty"; | 16 namespace { |
| 16 | 17 |
| 17 UserAuthenticatorMac::UserAuthenticatorMac() { | 18 class UserAuthenticatorMac : public UserAuthenticator { |
| 18 } | 19 public: |
| 20 UserAuthenticatorMac() {} |
| 21 virtual ~UserAuthenticatorMac() {} |
| 22 virtual bool Authenticate(const std::string& username, |
| 23 const std::string& password); |
| 19 | 24 |
| 20 UserAuthenticatorMac::~UserAuthenticatorMac() { | 25 private: |
| 21 } | 26 DISALLOW_COPY_AND_ASSIGN(UserAuthenticatorMac); |
| 27 }; |
| 28 |
| 29 const char kAuthorizationRightName[] = "system.login.tty"; |
| 22 | 30 |
| 23 bool UserAuthenticatorMac::Authenticate(const std::string& username, | 31 bool UserAuthenticatorMac::Authenticate(const std::string& username, |
| 24 const std::string& password) { | 32 const std::string& password) { |
| 25 // The authorization right being requested. This particular right allows | 33 // The authorization right being requested. This particular right allows |
| 26 // testing of a username/password, as if the user were logging on to the | 34 // testing of a username/password, as if the user were logging on to the |
| 27 // system locally. | 35 // system locally. |
| 28 AuthorizationItem right; | 36 AuthorizationItem right; |
| 29 right.name = kAuthorizationRightName; | 37 right.name = kAuthorizationRightName; |
| 30 right.valueLength = 0; | 38 right.valueLength = 0; |
| 31 right.value = NULL; | 39 right.value = NULL; |
| 32 right.flags = 0; | 40 right.flags = 0; |
| 33 AuthorizationRights rights; | 41 AuthorizationRights rights; |
| 34 rights.count = 1; | 42 rights.count = 1; |
| 35 rights.items = &right; | 43 rights.items = &right; |
| 44 |
| 36 // Passing the username/password as an "environment" parameter causes these | 45 // Passing the username/password as an "environment" parameter causes these |
| 37 // to be submitted to the Security Framework, instead of the interactive | 46 // to be submitted to the Security Framework, instead of the interactive |
| 38 // password prompt appearing on the host system. Valid on OS X 10.4 and | 47 // password prompt appearing on the host system. Valid on OS X 10.4 and |
| 39 // later versions. | 48 // later versions. |
| 40 AuthorizationItem environment_items[2]; | 49 AuthorizationItem environment_items[2]; |
| 41 environment_items[0].name = kAuthorizationEnvironmentUsername; | 50 environment_items[0].name = kAuthorizationEnvironmentUsername; |
| 42 environment_items[0].valueLength = username.size(); | 51 environment_items[0].valueLength = username.size(); |
| 43 environment_items[0].value = const_cast<char*>(username.data()); | 52 environment_items[0].value = const_cast<char*>(username.data()); |
| 44 environment_items[0].flags = 0; | 53 environment_items[0].flags = 0; |
| 45 environment_items[1].name = kAuthorizationEnvironmentPassword; | 54 environment_items[1].name = kAuthorizationEnvironmentPassword; |
| (...skipping 13 matching lines...) Expand all Loading... |
| 59 | 68 |
| 60 case errAuthorizationDenied: | 69 case errAuthorizationDenied: |
| 61 return false; | 70 return false; |
| 62 | 71 |
| 63 default: | 72 default: |
| 64 LOG(ERROR) << "AuthorizationCreate returned " << status; | 73 LOG(ERROR) << "AuthorizationCreate returned " << status; |
| 65 return false; | 74 return false; |
| 66 } | 75 } |
| 67 } | 76 } |
| 68 | 77 |
| 78 } // namespace |
| 79 |
| 69 // static | 80 // static |
| 70 UserAuthenticator* UserAuthenticator::Create() { | 81 UserAuthenticator* UserAuthenticator::Create() { |
| 71 return new UserAuthenticatorMac(); | 82 return new UserAuthenticatorMac(); |
| 72 } | 83 } |
| 73 | 84 |
| 74 } // namespace remoting | 85 } // namespace remoting |
| OLD | NEW |