1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
|
#-*- perl -*-
#
# Copyright (C) 2001 Ken'ichi Fukamachi
# All rights reserved. This program is free software; you can
# redistribute it and/or modify it under the same terms as Perl itself.
#
# $Id$
# $FML: Credential.pm,v 1.7 2001/04/03 09:45:40 fukachan Exp $
#
package FML::Credential;
use strict;
use vars qw(%Credential @ISA @EXPORT @EXPORT_OK);
use Carp;
use ErrorStatus qw(errstr error error_set error_clear);
=head1 NAME
FML::Credential - authenticate the mail sender is a ML member or not
=head1 SYNOPSIS
use FML::Credential;
# get the mail sender
my $sender = FML::Credential->sender;
=head1 DESCRIPTION
a collection of utilitity functions to authenticate the sender who
kicks off this mail.
=head1 METHODS
=head2 C<new()>
bind \%Credential to $self and return it as an object.
=cut
# Descriptions: usual constructor
# bind $self ($me) to \%Credential, so
# you can access the same \%Credential through this object.
# Arguments: $self
# Side Effects: bind $self ($me) to \%Credential
# Return Value: object
sub new
{
my ($self) = @_;
my ($type) = ref($self) || $self;
my $me = \%Credential;
return bless $me, $type;
}
sub DESTROY {}
=head2 C<is_same_address($addr1, $addr2 [, $level])>
return 1 if C<$addr1> and C<$addr2> looks same within some ambiguity.
The ambiguity is followed by these rules.
1. C<user> part must be the same case sensitively.
2. C<domain> part is case insensitive by definition of C<DNS>.
3. C<domain> part is the same from the top C<gTLD> layer to
C<$level>-th sub domain level.
=cut
sub is_same_address
{
my ($self, $xaddr, $yaddr, $level) = @_;
my ($xuser, $xdomain) = split(/\@/, $xaddr);
my ($yuser, $ydomain) = split(/\@/, $yaddr);
# rule 1
if ($xuser ne $yuser) { return 0;}
# rule 2
if ("\L$xdomain\E" eq "\L$ydomain\E") { return 1;}
# rule 3: not yet
0;
}
=head2 C<is_member()>
return 1 if the sender is a ML member and 0 if not.
=cut
# Descriptions:
# Arguments: $self $curproc $args
# Side Effects:
# Return Value: none
sub is_member
{
my ($self, $curproc, $args) = @_;
my $status = 0;
my $member_maps = $curproc->{ config }->{ member_maps };
my $address = $curproc->{'credential'}->{'sender'};
my ($user, $domain) = split(/\@/, $address);
use IO::MapAdapter;
for my $map (split(/\s+/, $member_maps)) {
if ($map) {
my $obj = new IO::MapAdapter $map;
my $x = $obj->find( $user );
my ($r) = split(/\s+/, $x);
if ($self->is_same_address($r, $address)) {
$status = 1; # found
}
last if $x;
}
}
unless ($status) {
$self->error_set("user=$user domain=$domain not found");
}
$status;
}
sub match_system_accounts
{
my ($self, $curproc, $args) = @_;
my $config = $curproc->{ config };
# compare $user part of the sender address
my ($user, $domain) = split(/\@/, $self->sender());
# compare $user part with e.g. root, postmaster, ...
# XXX always case INSENSITIVE
for my $addr (split(/\s+/, $config->{ system_accounts })) {
if ($user =~ /^${addr}$/i) { return $addr;}
}
return '';
}
=head2 C<sender()>
return the mail address of the mail sender who kicks off this fml
process.
=cut
# Descriptions: returh the mail sender
# Arguments: $self
# Side Effects: none
# Return Value: mail address
sub sender
{
my ($self) = @_;
$Credential{ sender };
}
=head2 C<get(key)>
=head2 C<set(key, value)>
=cut
# Descriptions:
# Arguments: $self key
# Side Effects: none
# Return Value: string
sub get
{
my ($self, $key) = @_;
$self->{ $key };
}
# Descriptions:
# Arguments: $self key value
# Side Effects: none
# Return Value: string
sub set
{
my ($self, $key, $value) = @_;
$self->{ $key } = $value;
}
=head1 AUTHOR
Ken'ichi Fukamachi
=head1 COPYRIGHT
Copyright (C) 2001 Ken'ichi Fukamachi
All rights reserved. This program is free software; you can
redistribute it and/or modify it under the same terms as Perl itself.
=head1 HISTORY
FML::Credential appeared in fml5 mailing list driver package.
See C<http://www.fml.org/> for more details.
=cut
1;
|
