#!perl -w

use strict;
use warnings;

use Qpsmtpd::Constants;
use IO::Socket;
use version; 
my $VERSION = qv('1.0.2');

sub register {
    my ($self, $qp, %args) = @_;

    $self->{_vpopmaild_host} = $args{host} || 'localhost';
    $self->{_vpopmaild_port} = $args{port} || '89';

    $self->register_hook('auth-plain', 'auth_vpopmaild');
    $self->register_hook('auth-login', 'auth_vpopmaild');
    #$self->register_hook('auth-cram-md5', 'auth_vpopmaild'); # not supported
}

sub auth_vpopmaild {
    my ($self, $transaction, $method, $user, $passClear, $passHash, $ticket) = @_;

    if ( ! $passClear ) {
        $self->log(LOGINFO, "vpopmaild does not support cram-md5");
        return DECLINED;
    }

    # create socket
    my $vpopmaild_socket =
      IO::Socket::INET->new(
                            PeerAddr => $self->{_vpopmaild_host},
                            PeerPort => $self->{_vpopmaild_port},
                            Proto    => 'tcp',
                            Type     => SOCK_STREAM
                           ) or return DECLINED;

    $self->log(LOGDEBUG, "attempting $method");

    # Get server greeting (+OK)
    my $connect_response = <$vpopmaild_socket>;
    if ( ! $connect_response ) {
        $self->log(LOGERROR, "no connection response");
        close($vpopmaild_socket);
        return DECLINED;
    };

    if ( $connect_response !~ /^\+OK/ ) {
        $self->log(LOGERROR, "bad connection response: $connect_response");
        close($vpopmaild_socket);
        return DECLINED;
    };

    print $vpopmaild_socket "login $user $passClear\n\r"; # send login details
    my $login_response = <$vpopmaild_socket>;       # get response from server
    close($vpopmaild_socket);

    if ( ! $login_response ) {
        $self->log(LOGERROR, "no login response");
        return DECLINED;
    };

    # check for successful login (single line (+OK) or multiline (+OK+))
    if ( $login_response =~ /^\+OK/ ) {
        $self->log(LOGDEBUG, "auth success");
        return (OK, 'auth_vpopmaild');
    };

    $self->log(LOGNOTICE, "failed authentication response: $login_response");

    return DECLINED;
}

__END__

=head1 NAME

auth_vpopmaild - Authenticate to vpopmaild

=head1 DESCRIPTION

Authenticates the user against against vpopmaild [1] daemon.

=head1 CONFIGURATION

Add a line to C<config/plugins> as follows:

auth_vpopmaild

By default, the plugin connects to localhot on port 89. If your vpopmaild
daemon is running on a different host or port, specify as follows:

auth_vpopmaild host [host] port [port]

=head1 SEE ALSO

For an overview of the vpopmail authentication plugins and their merits,
please read the VPOPMAIL section in doc/authentication.pod

=head1 LINKS

[1] http://www.qmailwiki.org/Vpopmaild

=head1 AUTHOR

Robin Bowes <robin.bowes@yo61.com>

Matt Simerson (4/2012: added CRAM-MD5 support, updated response parsing)

=head1 COPYRIGHT AND LICENSE

Copyright (c) 2010 Robin Bowes

This plugin is licensed under the same terms as the qpsmtpd package itself.
Please see the LICENSE file included with qpsmtpd for details.

=cut