int tryLogin(int hSocket, sLogin** psLogin, _MODULE_DATA* _psSessionData, char* szLogin, char* szPassword)
{
int nRet = FAILURE;
unsigned char* bufReceive = NULL;
int nReceiveBufferSize = 0;
switch(_psSessionData->nAuthType)
{
case AUTH_USER:
writeError(ERR_DEBUG_MODULE, "[%s] Sending USER (clear-text) Authentication.", MODULE_NAME);
nRet = sendAuthUSER(hSocket, _psSessionData, szLogin, szPassword);
break;
case AUTH_PLAIN:
writeError(ERR_DEBUG_MODULE, "[%s] Sending PLAIN Authentication.", MODULE_NAME);
nRet = sendAuthPLAIN(hSocket, _psSessionData, szLogin, szPassword);
break;
case AUTH_LOGIN:
writeError(ERR_DEBUG_MODULE, "[%s] Sending LOGIN Authentication.", MODULE_NAME);
nRet = sendAuthLOGIN(hSocket, _psSessionData, szLogin, szPassword);
break;
case AUTH_NTLM:
writeError(ERR_DEBUG_MODULE, "[%s] Sending NTLM Authentication.", MODULE_NAME);
nRet = sendAuthNTLM(hSocket, _psSessionData, szLogin, szPassword);
break;
default:
break;
}
if (nRet == FAILURE)
{
writeError(ERR_ERROR, "[%s] Failed during sending of authentication data.", MODULE_NAME);
(*psLogin)->iResult = LOGIN_RESULT_UNKNOWN;
setPassResult(*psLogin, szPassword);
return MSTATE_EXITING;
}
writeError(ERR_DEBUG_MODULE, "[%s] Retrieving server response.", MODULE_NAME);
nReceiveBufferSize = 0;
if ((medusaReceiveRegex(hSocket, &bufReceive, &nReceiveBufferSize, "\\+OK.*\r\n|-ERR.*\r\n") == FAILURE) || (bufReceive == NULL))
{
writeError(ERR_ERROR, "[%s] Failed: Unexpected or no data received: %s", MODULE_NAME, bufReceive);
return FAILURE;
}
else if (bufReceive[0] == '+')
{
writeError(ERR_DEBUG_MODULE, "[%s] Login attempt successful.", MODULE_NAME);
(*psLogin)->iResult = LOGIN_RESULT_SUCCESS;
nRet = MSTATE_EXITING;
}
else if (strstr(bufReceive,"-ERR The specified authentication package is not supported.") != NULL)
{
writeError(ERR_ERROR, "[%s] Server response: The specified authentication package is not supported.", MODULE_NAME);
(*psLogin)->iResult = LOGIN_RESULT_ERROR;
nRet = MSTATE_EXITING;
}
else
{
if (_psSessionData->nMode == MODE_AS400)
{
/*
www.venera.com/downloads/Enumeration_of_AS400_users_via_pop3.pdf
Example: -ERR Logon attempt invalid CPF2204
*/
if (strstr(bufReceive, "CPF2204"))
{
writeError(ERR_ERROR, "[%s] User profile was not found.", MODULE_NAME);
(*psLogin)->iResult = LOGIN_RESULT_ERROR;
nRet = MSTATE_EXITING;
}
else if (strstr(bufReceive, "CPF22E2"))
{
writeError(ERR_DEBUG_MODULE, "[%s] Valid user, incorrect password.", MODULE_NAME);
(*psLogin)->iResult = LOGIN_RESULT_FAIL;
nRet = MSTATE_NEW;
}
else if (strstr(bufReceive, "CPF22E3"))
{
writeError(ERR_ERROR, "[%s] Valid user, but profile is disabled.", MODULE_NAME);
(*psLogin)->iResult = LOGIN_RESULT_ERROR;
nRet = MSTATE_EXITING;
}
else if (strstr(bufReceive, "CPF22E4"))
{
writeError(ERR_ERROR, "[%s] Valid user, but password for profile has expired.", MODULE_NAME);
(*psLogin)->iResult = LOGIN_RESULT_ERROR;
nRet = MSTATE_EXITING;
}
else if (strstr(bufReceive, "CPF22E5"))
{
writeError(ERR_ERROR, "[%s] Valid user, but no password associated with user profile.", MODULE_NAME);
(*psLogin)->iResult = LOGIN_RESULT_ERROR;
nRet = MSTATE_EXITING;
}
else
{
writeError(ERR_ERROR, "[%s] Unknown AS/400 error message: %s", MODULE_NAME, bufReceive);
(*psLogin)->iResult = LOGIN_RESULT_ERROR;
nRet = MSTATE_EXITING;
}
}
else
{
writeError(ERR_DEBUG_MODULE, "[%s] Login attempt failed.", MODULE_NAME);
(*psLogin)->iResult = LOGIN_RESULT_FAIL;
nRet = MSTATE_RUNNING;
}
}
FREE(bufReceive);
setPassResult((*psLogin), szPassword);
return(nRet);
}
int tryLogin(int hSocket, _MODULE_DATA* _psSessionData, sLogin** psLogin, char* szLogin, char* szPassword)
{
int nRet;
unsigned char* bufReceive = NULL;
int nReceiveBufferSize = 0;
switch(_psSessionData->nAuthType)
{
case AUTH_LOGIN:
writeError(ERR_DEBUG_MODULE, "[%s] Sending LOGIN Authentication.", MODULE_NAME);
nRet = sendAuthLogin(hSocket, _psSessionData, szLogin, szPassword);
break;
case AUTH_PLAIN:
writeError(ERR_DEBUG_MODULE, "[%s] Sending PLAIN Authentication.", MODULE_NAME);
nRet = sendAuthPlain(hSocket, _psSessionData, szLogin, szPassword);
break;
case AUTH_NTLM:
writeError(ERR_DEBUG_MODULE, "[%s] Sending NTLM Authentication.", MODULE_NAME);
nRet = sendAuthNTLM(hSocket, _psSessionData, szLogin, szPassword);
break;
default:
break;
}
if (nRet == FAILURE)
{
writeError(ERR_ERROR, "[%s] Failed during sending of authentication data.", MODULE_NAME);
(*psLogin)->iResult = LOGIN_RESULT_UNKNOWN;
setPassResult(*psLogin, szPassword);
return MSTATE_EXITING;
}
/*
Exchange 2003 Server Response Messages
NO Logon failure: unknown user name or bad password.
NO The specified authentication package is not supported.
NO Clear text passwords have been disabled for this protocol.
NO Cleartext login on this server requires the use of transport level security (SSL/TLS)
*/
writeError(ERR_DEBUG_MODULE, "[%s] Retrieving server response.", MODULE_NAME);
nReceiveBufferSize = 0;
if ((medusaReceiveRegex(hSocket, &bufReceive, &nReceiveBufferSize, ".*\r\n") == FAILURE) || (bufReceive == NULL))
{
writeError(ERR_ERROR, "[%s] Failed: Unexpected or no data received.", MODULE_NAME);
(*psLogin)->iResult = LOGIN_RESULT_ERROR;
nRet = MSTATE_EXITING;
}
else if (strstr(bufReceive,"OK") != NULL)
{
writeError(ERR_DEBUG_MODULE, "[%s] Login attempt successful.", MODULE_NAME);
(*psLogin)->iResult = LOGIN_RESULT_SUCCESS;
nRet = MSTATE_EXITING;
}
else if (strstr(bufReceive,"NO Clear text passwords have been disabled for this protocol.") != NULL)
{
writeError(ERR_ERROR, "[%s] Server reports that clear-text passwords have been disabled.", MODULE_NAME);
(*psLogin)->iResult = LOGIN_RESULT_ERROR;
nRet = MSTATE_EXITING;
}
else if (strstr(bufReceive,"NO Cleartext login on this server requires the use of transport level security (SSL/TLS)") != NULL)
{
writeError(ERR_ERROR, "[%s] Server reports that clear-text passwords are only allowed over SSL/TLS.", MODULE_NAME);
(*psLogin)->iResult = LOGIN_RESULT_ERROR;
nRet = MSTATE_EXITING;
}
else if (strstr(bufReceive,"NO The specified authentication package is not supported.") != NULL)
{
writeError(ERR_ERROR, "[%s] Server reports that the specified authentication package is not supported.", MODULE_NAME);
(*psLogin)->iResult = LOGIN_RESULT_ERROR;
nRet = MSTATE_EXITING;
}
else if (strstr(bufReceive,"NO") != NULL)
{
writeError(ERR_DEBUG_MODULE, "[%s] Login attempt failed.", MODULE_NAME);
(*psLogin)->iResult = LOGIN_RESULT_FAIL;
nRet = MSTATE_RUNNING;
}
else if (strstr(bufReceive,"BAD") != NULL)
{
writeError(ERR_ERROR, "[%s] IMAP server responded that the command was unknown or the arguments were invalid.", MODULE_NAME);
(*psLogin)->iResult = LOGIN_RESULT_ERROR;
nRet = MSTATE_EXITING;
}
else
{
writeError(ERR_ERROR, "[%s] Unknown IMAP server response: %s", MODULE_NAME, bufReceive);
(*psLogin)->iResult = LOGIN_RESULT_ERROR;
nRet = MSTATE_EXITING;
}
FREE(bufReceive);
setPassResult((*psLogin), szPassword);
return(nRet);
}
int tryLogin(int hSocket, sLogin** psLogin, _MODULE_DATA* _psSessionData, char* szLogin, char* szPassword)
{
int nRet = FAILURE;
unsigned char* bufReceive = NULL;
int nReceiveBufferSize = 0;
switch(_psSessionData->nAuthType)
{
case AUTH_PLAIN:
writeError(ERR_DEBUG_MODULE, "[%s] Sending PLAIN Authentication.", MODULE_NAME);
nRet = sendAuthPLAIN(hSocket, szLogin, szPassword);
break;
case AUTH_LOGIN:
writeError(ERR_DEBUG_MODULE, "[%s] Sending LOGIN Authentication.", MODULE_NAME);
nRet = sendAuthLOGIN(hSocket, _psSessionData, szLogin, szPassword);
break;
case AUTH_NTLM:
writeError(ERR_DEBUG_MODULE, "[%s] Sending NTLM Authentication.", MODULE_NAME);
nRet = sendAuthNTLM(hSocket, _psSessionData, szLogin, szPassword);
break;
default:
break;
}
if (nRet == FAILURE)
{
writeError(ERR_ERROR, "[%s] Failed during sending of authentication data.", MODULE_NAME);
(*psLogin)->iResult = LOGIN_RESULT_UNKNOWN;
setPassResult(*psLogin, szPassword);
return MSTATE_EXITING;
}
writeError(ERR_DEBUG_MODULE, "[%s] Retrieving server response.", MODULE_NAME);
nReceiveBufferSize = 0;
if ((medusaReceiveRegex(hSocket, &bufReceive, &nReceiveBufferSize, "^[0-9]{3,3} .*\r\n") == FAILURE) || (bufReceive == NULL))
{
writeError(ERR_ERROR, "[%s] Unknown SMTP server response: %s", MODULE_NAME, bufReceive);
(*psLogin)->iResult = LOGIN_RESULT_ERROR;
nRet = MSTATE_EXITING;
}
if (strstr((char *)bufReceive, "235 ") != NULL)
{
writeError(ERR_DEBUG_MODULE, "[%s] Login attempt successful.", MODULE_NAME);
(*psLogin)->iResult = LOGIN_RESULT_SUCCESS;
nRet = MSTATE_EXITING;
}
/* 435 Unable to authenticate at present: Authentication Failure */
else if (strstr((char *)bufReceive, "435 ") != NULL)
{
writeError(ERR_DEBUG_MODULE, "[%s] Login attempt failed (435).", MODULE_NAME);
(*psLogin)->iResult = LOGIN_RESULT_FAIL;
nRet = MSTATE_RUNNING;
}
/* GroupWise - 501 Authentication failed! */
else if (strstr((char *)bufReceive, "501 ") != NULL)
{
writeError(ERR_DEBUG_MODULE, "[%s] Login attempt failed (501).", MODULE_NAME);
(*psLogin)->iResult = LOGIN_RESULT_FAIL;
nRet = MSTATE_RUNNING;
}
else if (strstr((char *)bufReceive, "535 ") != NULL)
{
writeError(ERR_DEBUG_MODULE, "[%s] Login attempt failed (535).", MODULE_NAME);
(*psLogin)->iResult = LOGIN_RESULT_FAIL;
nRet = MSTATE_RUNNING;
}
else
{
writeError(ERR_ERROR, "[%s] Unknown SMTP server response: %s", MODULE_NAME, bufReceive);
(*psLogin)->iResult = LOGIN_RESULT_ERROR;
nRet = MSTATE_EXITING;
}
FREE(bufReceive);
setPassResult((*psLogin), szPassword);
return(nRet);
}
