X-Git-Url: https://git.tokkee.org/?a=blobdiff_plain;f=src%2Ffrontend%2Fsession.c;h=2b568b1948ee5366df066a1d2217ff48a1ba23bc;hb=b5c0396e79bf2c0fbd03e96ca0654a4545cbf936;hp=6403469a1e2d15020a939f130a54ed20c8711704;hpb=af40f31c4128fe82d6d401dbe93631d0947d540e;p=sysdb.git

diff --git a/src/frontend/session.c b/src/frontend/session.c
index 6403469..2b568b1 100644
--- a/src/frontend/session.c
+++ b/src/frontend/session.c
@@ -25,10 +25,16 @@
  * ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  */
 
+#if HAVE_CONFIG_H
+#	include "config.h"
+#endif /* HAVE_CONFIG_H */
+
 #include "sysdb.h"
 
 #include "frontend/connection-private.h"
 
+#include <string.h>
+
 /*
  * public API
  */
@@ -36,13 +42,26 @@
 int
 sdb_fe_session_start(sdb_conn_t *conn)
 {
+	const char *username;
+
 	if ((! conn) || (conn->username))
 		return -1;
 
 	if (conn->cmd != CONNECTION_STARTUP)
 		return -1;
 
+	username = sdb_strbuf_string(conn->buf);
+	if ((! username) || (! conn->cmd_len) || (! *username)) {
+		sdb_strbuf_sprintf(conn->errbuf, "Invalid empty username");
+		return -1;
+	}
+
 	/* XXX: for now, simply accept all connections */
+	conn->username = strndup(username, conn->cmd_len);
+	if (! conn->username) {
+		sdb_strbuf_sprintf(conn->errbuf, "Authentication failed");
+		return -1;
+	}
 	sdb_connection_send(conn, CONNECTION_OK, 0, NULL);
 	return 0;
 } /* sdb_fe_session_start */