From d4ff0a21267cdd130a6bf1483068aff6f811cfbb Mon Sep 17 00:00:00 2001
From: EC2 Default User <eisin@users.noreply.github.com>
Date: Sun, 1 Jul 2018 08:20:18 +0000
Subject: check if it is root

---
 pamldapd.go | 14 +++++++++++---
 1 file changed, 11 insertions(+), 3 deletions(-)

(limited to 'pamldapd.go')

diff --git a/pamldapd.go b/pamldapd.go
index 9031152..b43797b 100644
--- a/pamldapd.go
+++ b/pamldapd.go
@@ -21,7 +21,6 @@ type Backend struct {
 	ldap.Closer
 	logger            *log.Logger
 	Listen            string
-	BaseDN            string
 	PAMServiceName    string
 	PeopleDN          string
 	GroupsDN          string
@@ -61,6 +60,15 @@ func main() {
 		backend.logger = log.New(loghandle, "", log.LstdFlags)
 	}
 
+	current_user, err := user.Current()
+	if err != nil {
+		fmt.Printf("Could not get current user: %s\n", err)
+		os.Exit(1)
+	}
+	if current_user.Uid != "0" {
+		backend.logger.Printf("WARNING: PAM authentication will fail because not running as root user")
+	}
+
 	l := ldap.NewServer()
 	l.EnforceLDAP = true
 	l.BindFunc("", backend)
@@ -73,7 +81,7 @@ func main() {
 }
 
 func (b Backend) Bind(bindDN, bindSimplePw string, conn net.Conn) (resultCode ldap.LDAPResultCode, err error) {
-	var logger_title = fmt.Sprintf("Bind addr=%s bindDN=%s begin", conn.RemoteAddr().String(), bindDN)
+	var logger_title = fmt.Sprintf("Bind addr=%s bindDN=%s", conn.RemoteAddr().String(), bindDN)
 	b.logger.Printf("%s begin", logger_title)
 	if bindDN == b.BindAdminDN {
 		if bindSimplePw != b.BindAdminPassword {
@@ -140,7 +148,7 @@ func (b Backend) Search(bindDN string, req ldap.SearchRequest, conn net.Conn) (r
 }
 
 func (b Backend) Close(bindDN string, conn net.Conn) (err error) {
-	b.logger.Printf("Close addr=%s bindDN=%s", conn.RemoteAddr().String(), bindDN)
+	b.logger.Printf("Close addr=%s", conn.RemoteAddr().String())
 	return nil
 }
 
-- 
cgit v1.2.3