include/auth_ejabberd.php

   1 #!/usr/bin/php
   2 <?php
   3 /*
   4  * ejabberd extauth script for the integration with friendica
   5  *
   6  * Originally written for joomla by Dalibor Karlovic <dado@krizevci.info>
   7  * modified for Friendica by Michael Vogel <icarus@dabo.de>
   8  * published under GPL
   9  *
  10  * Latest version of the original script for joomla is available at:
  11  * http://87.230.15.86/~dado/ejabberd/joomla-login
  12  *
  13  * Installation:
  14  *
  15  *      - Change it's owner to whichever user is running the server, ie. ejabberd
  16  *        $ chown ejabberd:ejabberd /path/to/friendica/include/auth_ejabberd.php
  17  *
  18  *      - Change the access mode so it is readable only to the user ejabberd and has exec
  19  *        $ chmod 700 /path/to/friendica/include/auth_ejabberd.php
  20  *
  21  *      - Edit your ejabberd.cfg file, comment out your auth_method and add:
  22  *        {auth_method, external}.
  23  *        {extauth_program, "/path/to/friendica/include/auth_ejabberd.php"}.
  24  *
  25  *      - Restart your ejabberd service, you should be able to login with your friendica auth info
  26  *
  27  * Other hints:
  28  *      - if your users have a space or a @ in their nickname, they'll run into trouble
  29  *        registering with any client so they should be instructed to replace these chars
  30  *        " " (space) is replaced with "%20"
  31  *        "@" is replaced with "(a)"
  32  *
  33  */
  34
  35 if (sizeof($_SERVER["argv"]) == 0)
  36         die();
  37
  38 $directory = dirname($_SERVER["argv"][0]);
  39
  40 if (substr($directory, 0, 1) != "/")
  41         $directory = $_SERVER["PWD"]."/".$directory;
  42
  43 $directory = realpath($directory."/..");
  44
  45 chdir($directory);
  46 require_once("boot.php");
  47
  48 global $a, $db;
  49
  50 if(is_null($a)) {
  51         $a = new App;
  52 }
  53
  54 if(is_null($db)) {
  55         @include(".htconfig.php");
  56         require_once("include/dba.php");
  57         $db = new dba($db_host, $db_user, $db_pass, $db_data);
  58         unset($db_host, $db_user, $db_pass, $db_data);
  59 };
  60
  61 // the logfile to which to write, should be writeable by the user which is running the server
  62 $sLogFile = get_config('jabber','logfile');
  63
  64 // set true to debug if needed
  65 $bDebug = get_config('jabber','debug');
  66
  67 $oAuth = new exAuth($sLogFile, $bDebug);
  68
  69 class exAuth
  70 {
  71         private $sLogFile;
  72         private $bDebug;
  73
  74         private $rLogFile;
  75
  76         public function __construct($sLogFile, $bDebug)
  77         {
  78                 global $db;
  79
  80                 // setter
  81                 $this->sLogFile         = $sLogFile;
  82                 $this->bDebug           = $bDebug;
  83
  84                 // ovo ne provjeravamo jer ako ne mozes kreirati log file, onda si u kvascu :)
  85                 if ($this->sLogFile != '')
  86                         $this->rLogFile = fopen($this->sLogFile, "a") or die("Error opening log file: ". $this->sLogFile);
  87
  88                 $this->writeLog("[exAuth] start");
  89
  90                 // ovdje bi trebali biti spojeni na MySQL, imati otvoren log i zavrtit cekalicu
  91                 do {
  92                         $iHeader        = fgets(STDIN, 3);
  93                         $aLength        = unpack("n", $iHeader);
  94                         $iLength        = $aLength["1"];
  95                         if($iLength > 0) {
  96                                 // ovo znaci da smo nesto dobili
  97                                 $sData = fgets(STDIN, $iLength + 1);
  98                                 $this->writeDebugLog("[debug] received data: ". $sData);
  99                                 $aCommand = explode(":", $sData);
 100                                 if (is_array($aCommand)){
 101                                         switch ($aCommand[0]){
 102                                                 case "isuser":
 103                                                         // provjeravamo je li korisnik dobar
 104                                                         if (!isset($aCommand[1])){
 105                                                                 $this->writeLog("[exAuth] invalid isuser command, no username given");
 106                                                                 fwrite(STDOUT, pack("nn", 2, 0));
 107                                                         } else {
 108                                                                 // ovdje provjeri je li korisnik OK
 109                                                                 $sUser = str_replace(array("%20", "(a)"), array(" ", "@"), $aCommand[1]);
 110                                                                 $this->writeDebugLog("[debug] checking isuser for ". $sUser);
 111                                                                 $sQuery = "SELECT `uid` FROM `user` WHERE `nickname`='". $db->escape($sUser) ."'";
 112                                                                 $this->writeDebugLog("[debug] using query ". $sQuery);
 113                                                                 if ($oResult = q($sQuery)){
 114                                                                         if ($oResult) {
 115                                                                                 // korisnik OK
 116                                                                                 $this->writeLog("[exAuth] valid user: ". $sUser);
 117                                                                                 fwrite(STDOUT, pack("nn", 2, 1));
 118                                                                         } else {
 119                                                                                 // korisnik nije OK
 120                                                                                 $this->writeLog("[exAuth] invalid user: ". $sUser);
 121                                                                                 fwrite(STDOUT, pack("nn", 2, 0));
 122                                                                         }
 123                                                                         //$oResult->close();
 124                                                                 } else {
 125                                                                         $this->writeLog("[MySQL] invalid query: ". $sQuery);
 126                                                                         fwrite(STDOUT, pack("nn", 2, 0));
 127                                                                 }
 128                                                         }
 129                                                 break;
 130                                                 case "auth":
 131                                                         // provjeravamo autentifikaciju korisnika
 132                                                         if (sizeof($aCommand) != 4){
 133                                                                 $this->writeLog("[exAuth] invalid auth command, data missing");
 134                                                                 fwrite(STDOUT, pack("nn", 2, 0));
 135                                                         } else {
 136                                                                 // ovdje provjeri prijavu
 137                                                                 $sUser = str_replace(array("%20", "(a)"), array(" ", "@"), $aCommand[1]);
 138                                                                 $this->writeDebugLog("[debug] doing auth for ". $sUser);
 139                                                                 //$sQuery = "SELECT `uid`, `password` FROM `user` WHERE `password`='".hash('whirlpool',$aCommand[3])."' AND `nickname`='". $db->escape($sUser) ."'";
 140                                                                 $sQuery = "SELECT `uid`, `password` FROM `user` WHERE `nickname`='". $db->escape($sUser) ."'";
 141                                                                 $this->writeDebugLog("[debug] using query ". $sQuery);
 142                                                                 if ($oResult = q($sQuery)){
 143                                                                         $uid = $oResult[0]["uid"];
 144                                                                         $Error = ($oResult[0]["password"] != hash('whirlpool',$aCommand[3]));
 145 /*
 146                                                                         if ($oResult[0]["password"] == hash('whirlpool',$aCommand[3])) {
 147                                                                                 // korisnik OK
 148                                                                                 $this->writeLog("[exAuth] authentificated user ". $sUser ."@". $aCommand[2]);
 149                                                                                 fwrite(STDOUT, pack("nn", 2, 1));
 150                                                                         } else {
 151                                                                                 // korisnik nije OK
 152                                                                                 $this->writeLog("[exAuth] authentification failed for user ". $sUser ."@". $aCommand[2]);
 153                                                                                 fwrite(STDOUT, pack("nn", 2, 0));
 154                                                                         }
 155                                                                         $oResult->close();
 156 */
 157                                                                 } else {
 158                                                                         $this->writeLog("[MySQL] invalid query: ". $sQuery);
 159                                                                         $Error = true;
 160                                                                         $uid = -1;
 161                                                                 }
 162                                                                 if ($Error) {
 163                                                                         $oConfig = q("SELECT `v` FROM `pconfig` WHERE `uid`=%d AND `cat` = 'xmpp' AND `k`='password' LIMIT 1;", intval($uid));
 164                                                                         $this->writeLog("[exAuth] got password ".$oConfig[0]["v"]);
 165                                                                         $Error = ($aCommand[3] != $oConfig[0]["v"]);
 166                                                                 }
 167
 168                                                                 if ($Error) {
 169                                                                         $this->writeLog("[exAuth] authentification failed for user ". $sUser ."@". $aCommand[2]);
 170                                                                         fwrite(STDOUT, pack("nn", 2, 0));
 171                                                                 } else {
 172                                                                         $this->writeLog("[exAuth] authentificated user ". $sUser ."@". $aCommand[2]);
 173                                                                         fwrite(STDOUT, pack("nn", 2, 1));
 174                                                                 }
 175                                                         }
 176                                                 break;
 177                                                 case "setpass":
 178                                                         // postavljanje zaporke, onemoguceno
 179                                                         $this->writeLog("[exAuth] setpass command disabled");
 180                                                         fwrite(STDOUT, pack("nn", 2, 0));
 181                                                 break;
 182                                                 default:
 183                                                         // ako je uhvaceno ista drugo
 184                                                         $this->writeLog("[exAuth] unknown command ". $aCommand[0]);
 185                                                         fwrite(STDOUT, pack("nn", 2, 0));
 186                                                 break;
 187                                         }
 188                                 } else {
 189                                         $this->writeDebugLog("[debug] invalid command string");
 190                                         fwrite(STDOUT, pack("nn", 2, 0));
 191                                 }
 192                         }
 193                         unset ($iHeader);
 194                         unset ($aLength);
 195                         unset ($iLength);
 196                         unset($aCommand);
 197                 } while (true);
 198         }
 199
 200         public function __destruct()
 201         {
 202                 // zatvori log file
 203                 $this->writeLog("[exAuth] stop");
 204
 205                 if (is_resource($this->rLogFile)){
 206                         fclose($this->rLogFile);
 207                 }
 208         }
 209
 210         private function writeLog($sMessage)
 211         {
 212                 if (is_resource($this->rLogFile)) {
 213                         fwrite($this->rLogFile, date("r") ." ". $sMessage ."\n");
 214                 }
 215         }
 216
 217         private function writeDebugLog($sMessage)
 218         {
 219                 if ($this->bDebug){
 220                         $this->writeLog($sMessage);
 221                 }
 222         }
 223
 224 }
 225 ?>
 226
 227