-/* $Id: passwddb.c,v 1.15 2006-10-11 20:18:47 adam Exp $
- Copyright (C) 1995-2006
+/* $Id: passwddb.c,v 1.18 2007-10-29 09:23:08 adam Exp $
+ Copyright (C) 1995-2007
Index Data ApS
This file is part of the Zebra server.
#include <crypt.h>
#endif
+#include <assert.h>
#include <yaz/log.h>
#include <yaz/xmalloc.h>
int passwd_db_auth(Passwd_db db, const char *user, const char *pass)
{
struct passwd_entry *pe;
+
+ assert(db);
for (pe = db->entries; pe; pe = pe->next)
if (user && !strcmp (user, pe->name))
break;
if (!pe)
return -1;
+ if (!pass)
+ return -2;
if (pe->encrypt_flag)
{
#if HAVE_CRYPT_H
const char *des_try;
+ assert(pe->des);
if (strlen (pe->des) < 3)
return -3;
- if (!pass)
- return -2;
if (pe->des[0] != '$') /* Not MD5? (assume DES) */
{
}
des_try = crypt (pass, pe->des);
+ assert(des_try);
if (strcmp (des_try, pe->des))
return -2;
#else
}
else
{
+ assert(pass);
+ assert(pe->des);
if (strcmp (pe->des, pass))
return -2;
}