Support building without CrackLib support

[kerberos/krb5-strength.git] / plugin / cracklib.c

diff --git a/plugin/cracklib.c b/plugin/cracklib.c
index 7bb8c7e863a8fad6164c91702d05be685eb40c7c..8efa27913475eac34723f667dc5848fe36aeb3ef 100644 (file)
--- a/plugin/cracklib.c
+++ b/plugin/cracklib.c
@@ -8,6 +8,7 @@
  * Developed by Derrick Brashear and Ken Hornstein of Sine Nomine Associates,
  *     on behalf of Stanford University
  * Extensive modifications by Russ Allbery <eagle@eyrie.org>
+ * Copyright 2017 Russ Allbery <eagle@eyrie.org>
  * Copyright 2006, 2007, 2009, 2012, 2013
  *     The Board of Trustees of the Leland Stanford Junior University
  *
@@ -15,18 +16,49 @@
  */
 
 #include <config.h>
+#include <portable/kadmin.h>
 #include <portable/system.h>
 
 #include <plugin/internal.h>
+#include <util/macros.h>
 
 /* When using the embedded CrackLib, we need to provide our own prototype. */
-#ifdef HAVE_CRACK_H
-# include <crack.h>
-#else
+#ifdef HAVE_CRACKLIB
+# ifdef HAVE_CRACK_H
+#  include <crack.h>
+# else
 extern const char *FascistCheck(const char *password, const char *dict);
+# endif
 #endif
 
 
+/*
+ * Stub for strength_init_cracklib if not built with CrackLib support.
+ */
+#ifndef HAVE_CRACKLIB
+krb5_error_code
+strength_init_cracklib(krb5_context ctx, krb5_pwqual_moddata data UNUSED,
+                       const char *dictionary UNUSED)
+{
+    char *path = NULL;
+
+    /* Get CDB dictionary path from krb5.conf. */
+    strength_config_string(ctx, "password_dictionary", &path);
+
+    /* If it was set, report an error, since we don't have CrackLib support. */
+    if (path == NULL)
+        return 0;
+    free(path);
+    krb5_set_error_message(ctx, KADM5_BAD_SERVER_PARAMS, "CrackLib dictionary"
+                           " requested but not built with CrackLib support");
+    return KADM5_BAD_SERVER_PARAMS;
+}
+#endif
+
+
+/* Skip the rest of this file if CrackLib is not available. */
+#ifdef HAVE_CRACKLIB
+
 /*
  * Initialize the CrackLib dictionary.  Ensure that the dictionary file exists
  * and is readable and store the path in the module context.  Returns 0 on
@@ -100,3 +132,5 @@ strength_check_cracklib(krb5_context ctx, krb5_pwqual_moddata data,
     else
         return 0;
 }
+
+#endif /* HAVE_CRACKLIB */