+++ /dev/null
-/*
- * This module is an managesieve implementation for the Citadel system.
- * It is compliant with all of the following:
- *
- * http://tools.ietf.org/html/draft-martin-managesieve-06
- * as this draft expires with this writing, you might need to search for
- * the new one.
- *
- * Copyright (c) 2007-2018 by the citadel.org team
- *
- * This program is open source software; you can redistribute it and/or modify
- * it under the terms of the GNU General Public License version 3.
- *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
- */
-
-#include "sysdep.h"
-#include <stdlib.h>
-#include <unistd.h>
-#include <stdio.h>
-#include <fcntl.h>
-#include <signal.h>
-#include <pwd.h>
-#include <errno.h>
-#include <sys/types.h>
-#include <syslog.h>
-
-#if TIME_WITH_SYS_TIME
-# include <sys/time.h>
-# include <time.h>
-#else
-# if HAVE_SYS_TIME_H
-# include <sys/time.h>
-# else
-# include <time.h>
-# endif
-#endif
-
-#include <sys/wait.h>
-#include <ctype.h>
-#include <string.h>
-#include <limits.h>
-#include <sys/socket.h>
-#include <netinet/in.h>
-#include <arpa/inet.h>
-#include <libcitadel.h>
-#include "citadel.h"
-#include "server.h"
-#include "citserver.h"
-#include "support.h"
-#include "config.h"
-#include "control.h"
-#include "user_ops.h"
-#include "database.h"
-#include "msgbase.h"
-#include "internet_addressing.h"
-#include "genstamp.h"
-#include "domain.h"
-#include "clientsocket.h"
-#include "locate_host.h"
-#include "citadel_dirs.h"
-#include "ctdl_module.h"
-#include "serv_sieve.h"
-
-
-/*
- * http://tools.ietf.org/html/draft-martin-managesieve-06
- *
- * this is the draft this code tries to implement.
- */
-
-
-struct citmgsve {
- int command_state; /**< Information about the current session */
- char *transmitted_message;
- size_t transmitted_length;
- char *imap_format_outstring;
- int imap_outstring_length;
-};
-
-enum { /** Command states for login authentication */
- mgsve_command,
- mgsve_tls,
- mgsve_user,
- mgsve_password,
- mgsve_plain
-};
-
-#define MGSVE ((struct citmgsve *)CC->session_specific_data)
-
-int old_imap_parameterize(char** args, char *in)
-{
- char* out = in;
- int num = 0;
-
- for (;;)
- {
- /* Skip whitespace. */
-
- while (isspace(*in))
- in++;
- if (*in == 0)
- break;
-
- /* Found the start of a token. */
-
- args[num++] = out;
-
- /* Read in the token. */
-
- for (;;)
- {
- int c = *in++;
- if (isspace(c))
- break;
-
- if (c == '\"')
- {
- /* Found a quoted section. */
-
- for (;;)
- {
- c = *in++;
- if (c == '\"')
- break;
- else if (c == '\\')
- c = *in++;
-
- *out++ = c;
- if (c == 0)
- return num;
- }
- }
- else if (c == '\\')
- {
- c = *in++;
- *out++ = c;
- }
- else
- *out++ = c;
-
- if (c == 0)
- return num;
- }
- *out++ = '\0';
- }
-
- return num;
-}
-
-/*****************************************************************************/
-/* MANAGESIEVE Server */
-/*****************************************************************************/
-
-
-void sieve_outbuf_append(char *str)
-{
- size_t newlen = strlen(str)+1;
- size_t oldlen = (MGSVE->imap_format_outstring==NULL)? 0 : strlen(MGSVE->imap_format_outstring)+2;
- char *buf = malloc ( newlen + oldlen + 10 );
- buf[0]='\0';
-
- if (oldlen!=0)
- sprintf(buf,"%s%s",MGSVE->imap_format_outstring, str);
- else
- memcpy(buf, str, newlen);
-
- if (oldlen != 0) free (MGSVE->imap_format_outstring);
- MGSVE->imap_format_outstring = buf;
-}
-
-
-/**
- * Capability listing. Printed as greeting or on "CAPABILITIES"
- * see Section 1.8 ; 2.4
- */
-void cmd_mgsve_caps(void)
-{
- cprintf("\"IMPLEMENTATION\" \"CITADEL Sieve " PACKAGE_VERSION "\"\r\n"
- "\"SASL\" \"PLAIN\"\r\n" /*DIGEST-MD5 GSSAPI SASL sucks.*/
-#ifdef HAVE_OPENSSL
-/* if TLS is already there, should we say that again? */
- "\"STARTTLS\"\r\n"
-#endif
- "\"SIEVE\" \"%s\"\r\n"
- "OK\r\n", msiv_extensions);
-}
-
-
-/*
- * Here's where our managesieve session begins its happy day.
- */
-void managesieve_greeting(void) {
-
- strcpy(CC->cs_clientname, "Managesieve session");
-
- CC->internal_pgm = 0;
- CC->cs_flags |= CS_STEALTH;
- CC->session_specific_data = malloc(sizeof(struct citmgsve));
- memset(MGSVE, 0, sizeof(struct citmgsve));
- cmd_mgsve_caps();
-}
-
-
-long GetSizeToken(char * token)
-{
- char *cursor = token;
- char *number;
-
- while (!IsEmptyStr(cursor) &&
- (*cursor != '{'))
- {
- cursor++;
- }
- if (IsEmptyStr(cursor))
- return -1;
- number = cursor + 1;
- while ((*cursor != '\0') &&
- (*cursor != '}'))
- {
- cursor++;
- }
-
- if (cursor[-1] == '+')
- cursor--;
-
- if (IsEmptyStr(cursor))
- return -1;
-
- return atol(number);
-}
-
-char *ReadString(long size, char *command)
-{
- long ret;
- if (size < 1) {
- cprintf("NO %s: %ld BAD Message length must be at least 1.\r\n",
- command, size);
- CC->kill_me = KILLME_READSTRING_FAILED;
- return NULL;
- }
- MGSVE->transmitted_message = malloc(size + 2);
- if (MGSVE->transmitted_message == NULL) {
- cprintf("NO %s Cannot allocate memory.\r\n", command);
- CC->kill_me = KILLME_MALLOC_FAILED;
- return NULL;
- }
- MGSVE->transmitted_length = size;
-
- ret = client_read(MGSVE->transmitted_message, size);
- MGSVE->transmitted_message[size] = '\0';
-
- if (ret != 1) {
- cprintf("%s NO Read failed.\r\n", command);
- return NULL;
- }
- return MGSVE->transmitted_message;
-
-}
-/* AUTHENTICATE command; 2.1 */
-void cmd_mgsve_auth(int num_parms, char **parms, struct sdm_userdata *u)
-{
- if ((num_parms == 3) && !strncasecmp(parms[1], "PLAIN", 5))
- /* todo, check length*/
- {
- char auth[SIZ];
- char *message;
- char *username;
-
- message = NULL;
- memset (auth, 0, SIZ);
- if (parms[2][0] == '{')
- message = ReadString(GetSizeToken(parms[2]), parms[0]);
-
- if (message != NULL) {/**< do we have tokenized login? */
- CtdlDecodeBase64(auth, MGSVE->transmitted_message, strlen(MGSVE->transmitted_message));
- }
- else
- CtdlDecodeBase64(auth, parms[2], strlen(parms[2]));
- username = auth;
- if ((*username == '\0') && (*(username + 1) != '\0'))
- username ++;
-
- if (login_ok == CtdlLoginExistingUser(username))
- {
- char *pass;
-
- pass = &(auth[strlen(auth)+1]);
- /* for some reason the php script sends us the username twice. y? */
- pass = &(pass[strlen(pass)+1]);
-
- if (pass_ok == CtdlTryPassword(pass, strlen(pass)))
- {
- MGSVE->command_state = mgsve_password;
- cprintf("OK\r\n");
- return;
- }
- }
- }
- cprintf("NO \"Authentication Failure.\"\r\n");/* we just support auth plain. */
- CC->kill_me = KILLME_AUTHFAILED;
-}
-
-
-/**
- * STARTTLS command chapter 2.2
- */
-void cmd_mgsve_starttls(void)
-{ /** answer with OK, and fire off tls session. */
- cprintf("OK\r\n");
- CtdlModuleStartCryptoMsgs(NULL, NULL, NULL);
- cmd_mgsve_caps();
-}
-
-
-
-/*
- * LOGOUT command, see chapter 2.3
- */
-void cmd_mgsve_logout(struct sdm_userdata *u)
-{
- cprintf("OK\r\n");
- syslog(LOG_NOTICE, "MgSve bye.");
- CC->kill_me = KILLME_CLIENT_LOGGED_OUT;
-}
-
-
-/*
- * HAVESPACE command. see chapter 2.5
- */
-void cmd_mgsve_havespace(void)
-{
-/* as we don't have quotas in citadel we should always answer with OK;
- * pherhaps we should have a max-scriptsize.
- */
- if (MGSVE->command_state != mgsve_password)
- {
- cprintf("NO\r\n");
- CC->kill_me = KILLME_QUOTA;
- }
- else
- {
- cprintf("OK");
-/* citadel doesn't have quotas. in case of change, please add code here. */
-
- }
-}
-
-/*
- * PUTSCRIPT command, see chapter 2.6
- */
-void cmd_mgsve_putscript(int num_parms, char **parms, struct sdm_userdata *u)
-{
-/* "scriptname" {nnn+} */
-/* AFTER we have the whole script overwrite existing scripts */
-/* spellcheck the script before overwrite old ones, and reply with "no" */
- if (num_parms == 3)
- {
- char *ScriptName;
- char *Script;
- long slength;
-
- if (parms[1][0]=='"')
- ScriptName = &parms[1][1];
- else
- ScriptName = parms[1];
-
- slength = strlen (ScriptName);
-
- if (ScriptName[slength] == '"')
- ScriptName[slength] = '\0';
-
- Script = ReadString(GetSizeToken(parms[2]),parms[0]);
-
- if (Script == NULL) return;
-
- // TODO: do we spellcheck?
- msiv_putscript(u, ScriptName, Script);
- cprintf("OK\r\n");
- }
- else {
- cprintf("%s NO Read failed.\r\n", parms[0]);
- CC->kill_me = KILLME_READ_FAILED;
- return;
- }
-
-
-
-}
-
-
-
-
-/**
- * LISTSCRIPT command. see chapter 2.7
- */
-void cmd_mgsve_listscript(int num_parms, char **parms, struct sdm_userdata *u)
-{
-
- struct sdm_script *s;
- long nScripts = 0;
-
- MGSVE->imap_format_outstring = NULL;
- for (s=u->first_script; s!=NULL; s=s->next) {
- if (s->script_content != NULL) {
- cprintf("\"%s\"%s\r\n",
- s->script_name,
- (s->script_active)?" ACTIVE":"");
- nScripts++;
- }
- }
- cprintf("OK\r\n");
-}
-
-
-/**
- * \brief SETACTIVE command. see chapter 2.8
- */
-void cmd_mgsve_setactive(int num_parms, char **parms, struct sdm_userdata *u)
-{
- if (num_parms == 2)
- {
- if (msiv_setactive(u, parms[1]) == 0) {
- cprintf("OK\r\n");
- }
- else
- cprintf("No \"there is no script by that name %s \"\r\n", parms[1]);
- }
- else
- cprintf("NO \"unexpected parameters.\"\r\n");
-
-}
-
-
-/**
- * \brief GETSCRIPT command. see chapter 2.9
- */
-void cmd_mgsve_getscript(int num_parms, char **parms, struct sdm_userdata *u)
-{
- if (num_parms == 2){
- char *script_content;
- long slen;
-
- script_content = msiv_getscript(u, parms[1]);
- if (script_content != NULL){
- char *outbuf;
-
- slen = strlen(script_content);
- outbuf = malloc (slen + 64);
- snprintf(outbuf, slen + 64, "{%ld+}\r\n%s\r\nOK\r\n",slen, script_content);
- cprintf("%s", outbuf);
- }
- else
- cprintf("No \"there is no script by that name %s \"\r\n", parms[1]);
- }
- else
- cprintf("NO \"unexpected parameters.\"\r\n");
-}
-
-
-/**
- * \brief DELETESCRIPT command. see chapter 2.10
- */
-void cmd_mgsve_deletescript(int num_parms, char **parms, struct sdm_userdata *u)
-{
- int i=-1;
-
- if (num_parms == 2)
- i = msiv_deletescript(u, parms[1]);
- switch (i){
- case 0:
- cprintf("OK\r\n");
- break;
- case 1:
- cprintf("NO \"no script by that name: %s\"\r\n", parms[1]);
- break;
- case 2:
- cprintf("NO \"can't delete active Script: %s\"\r\n", parms[1]);
- break;
- default:
- case -1:
- cprintf("NO \"unexpected parameters.\"\r\n");
- break;
- }
-}
-
-
-/**
- * \brief Attempt to perform authenticated managesieve
- */
-void mgsve_auth(char *argbuf) {
- char username_prompt[64];
- char method[64];
- char encoded_authstring[1024];
-
- if (CC->logged_in) {
- cprintf("NO \"Already logged in.\"\r\n");
- return;
- }
-
- extract_token(method, argbuf, 0, ' ', sizeof method);
-
- if (!strncasecmp(method, "login", 5) ) {
- if (strlen(argbuf) >= 7) {
- }
- else {
- size_t len = CtdlEncodeBase64(username_prompt, "Username:", 9, 0);
- if (username_prompt[len - 1] == '\n') {
- username_prompt[len - 1] = '\0';
- }
- cprintf("334 %s\r\n", username_prompt);
- }
- return;
- }
-
- if (!strncasecmp(method, "plain", 5) ) {
- if (num_tokens(argbuf, ' ') < 2) {
- cprintf("334 \r\n");
- return;
- }
- extract_token(encoded_authstring, argbuf, 1, ' ', sizeof encoded_authstring);
- return;
- }
-
- if (strncasecmp(method, "login", 5) ) {
- cprintf("NO \"Unknown authentication method.\"\r\n");
- return;
- }
-
-}
-
-
-
-/*
- * implements the STARTTLS command (Citadel API version)
- */
-void _mgsve_starttls(void)
-{
- char ok_response[SIZ];
- char nosup_response[SIZ];
- char error_response[SIZ];
-
- sprintf(ok_response,
- "200 2.0.0 Begin TLS negotiation now\r\n");
- sprintf(nosup_response,
- "554 5.7.3 TLS not supported here\r\n");
- sprintf(error_response,
- "554 5.7.3 Internal error\r\n");
- CtdlModuleStartCryptoMsgs(ok_response, nosup_response, error_response);
-}
-
-
-/*
- * Main command loop for managesieve sessions.
- */
-void managesieve_command_loop(void) {
- char cmdbuf[SIZ];
- char *parms[SIZ];
- int length;
- int num_parms;
- struct sdm_userdata u;
- int changes_made = 0;
-
- memset(&u, 0, sizeof(struct sdm_userdata));
-
- time(&CC->lastcmd);
- memset(cmdbuf, 0, sizeof cmdbuf); /* Clear it, just in case */
- length = client_getln(cmdbuf, sizeof cmdbuf);
- if (length >= 1) {
- num_parms = old_imap_parameterize(parms, cmdbuf);
- if (num_parms == 0) return;
- length = strlen(parms[0]);
- }
- if (length < 1) {
- syslog(LOG_CRIT, "managesieve: client disconnected: ending session.\n");
- CC->kill_me = KILLME_CLIENT_DISCONNECTED;
- return;
- }
- syslog(LOG_INFO, "MANAGESIEVE: %s\n", cmdbuf);
- if ((length>= 12) && (!strncasecmp(parms[0], "AUTHENTICATE", 12))){
- cmd_mgsve_auth(num_parms, parms, &u);
- }
-
-#ifdef HAVE_OPENSSL
- else if ((length>= 8) && (!strncasecmp(parms[0], "STARTTLS", 8))){
- cmd_mgsve_starttls();
- }
-#endif
- else if ((length>= 6) && (!strncasecmp(parms[0], "LOGOUT", 6))){
- cmd_mgsve_logout(&u);
- }
- else if ((length>= 6) && (!strncasecmp(parms[0], "CAPABILITY", 10))){
- cmd_mgsve_caps();
- }
- /** these commands need to be authenticated. throw it out if it tries. */
- else if (CC->logged_in != 0)
- {
- msiv_load(&u);
- if ((length>= 9) && (!strncasecmp(parms[0], "HAVESPACE", 9))){
- cmd_mgsve_havespace();
- }
- else if ((length>= 6) && (!strncasecmp(parms[0], "PUTSCRIPT", 9))){
- cmd_mgsve_putscript(num_parms, parms, &u);
- changes_made = 1;
- }
- else if ((length>= 6) && (!strncasecmp(parms[0], "LISTSCRIPT", 10))){
- cmd_mgsve_listscript(num_parms, parms,&u);
- }
- else if ((length>= 6) && (!strncasecmp(parms[0], "SETACTIVE", 9))){
- cmd_mgsve_setactive(num_parms, parms,&u);
- changes_made = 1;
- }
- else if ((length>= 6) && (!strncasecmp(parms[0], "GETSCRIPT", 9))){
- cmd_mgsve_getscript(num_parms, parms, &u);
- }
- else if ((length>= 6) && (!strncasecmp(parms[0], "DELETESCRIPT", 11))){
- cmd_mgsve_deletescript(num_parms, parms, &u);
- changes_made = 1;
- }
- msiv_store(&u, changes_made);
- }
- else {
- cprintf("No Invalid access or command.\r\n");
- syslog(LOG_INFO, "illegal Managesieve command: %s", parms[0]);
- CC->kill_me = KILLME_ILLEGAL_MANAGESIEVE_COMMAND;
- }
-
-
-}
-
-/*
- * This cleanup function blows away the temporary memory and files used by
- * the server.
- */
-void managesieve_cleanup_function(void) {
-
- /* Don't do this stuff if this is not a managesieve session! */
- if (CC->h_command_function != managesieve_command_loop) return;
-
- syslog(LOG_DEBUG, "Performing managesieve cleanup hook\n");
- free(MGSVE);
-}
-
-
-
-const char* CitadelServiceManageSieve = "ManageSieve";
-CTDL_MODULE_INIT(managesieve)
-{
- if (!threading)
- {
- CtdlRegisterServiceHook(CtdlGetConfigInt("c_managesieve_port"),
- NULL,
- managesieve_greeting,
- managesieve_command_loop,
- NULL,
- CitadelServiceManageSieve);
- CtdlRegisterSessionHook(managesieve_cleanup_function, EVT_STOP, PRIO_STOP + 30);
- }
-
- /* return our module name for the log */
- return "managesieve";
-}
-
-
projects / citadel.git / commitdiff