Next: Conclusions
Up: Specific documentations
Previous: Specific documentations
  Contents
This is a C program which provid user authentication using one-way encrypting
alghoritm. The program will take user information from a file in a directory
readable from nobody and writable from dpbox administrator. Dpaccess cgi script
will call this program with this syntax dpaccess_pass command arg1 [arg2
[arg3]]
- dpaccess_pass control callsign providedpassword
providedpassword is the plain text password that must be encrypted and
then compared with the one written in the dpbox_access_file
The program must return
- [Ok]-> The password is right!
- [No-User]-> The file does not contain that callsign
- [No-Pass]-> Provided password don't match with the specified
- dpaccess_pass encode callsign
Return in the stdout the encrypt password of callsign: this password will be
stored in the cookie of callsign browser, and must be decode from the next dpaccess_pass
(using the next instruction) to grant access
- dpaccess_pass decode callsign
Compare the cookie password and the one stored in the DPBOX_ACCESS_FILE.
Return
- [Ok]-> Access grant
- [No-User]-> The DPBOX_ACCESS_FILE does not contain that callsign
- [No-Pass]-> The password provided is wrong
Next: Conclusions
Up: Specific documentations
Previous: Specific documentations
  Contents
Paolo Subiaco
2001-06-08