如何在C中读取linux etc / passwd文件并比较用户输入名称以进行身份​​验证

Question

This is the program i have written can anyone tell what is wrong with it, because whatever input i give, it shows valid user.

#include<stdio.h>
#include<string.h>
#define max_size 20
void main()
{
 File *Fptr;
 char username[max_size];
 char line[20];
 if((fptr=fopen("/etc/passwd","r"))==NULL)
 { 
   printf("cannot open file");
 }
 else
  {
      fptr=fopen("/etc/passwd","r");
      fputs("enter the username",stdout);
      fflush(stdout);
      fgets(username,sizeof username,stdin);
      while((fgets(line,sizeof(line),fptr))!=NULL)
      { 
          if(strcmp(line,username))
          {
             printf("%s valid user",username);
             break; 
          }
          else
            {
              printf("%s not valid user",username);
            }    
      } 
   fclose(fptr);
  }
}

Answer 1

Could you use getpwent for this task?

see: getpwent(3) and opengroup's getpwent

• Here's a generic example of usage , and
• here's another - how to look up users .

and

• here's the Stackoverflow discussion on the topic

Regards

rbo

Answer 2

strcmp is a three-way comparator. It tells you if the strings are equal or if the first string is lexicographically less or greater than second.

Because of this, its results are a bit unintuitive when used as booelan values. It returns 0 when the strings match, which evaluates to false in an if statement. It returns nonzero values, usually -1 or 1, (all of which evaluate to true) when the strings are different.

If you want to test if two strings are the same, you should change

if(strcmp(line,username))

to

if(strcmp(line,username) == 0)

Also take note of Starkey's answer about the extra contents of lines in /etc/passwd . If you make only the change above, your program will always return "not a valid user".

Answer 3

与其尝试手动解析/etc/passwd ， getpwnam使用getpwnam 。

Answer 4

strcmp returns 0 (which is false) if the two strings are exactly equivalent, or a non-zero number (which is true) if the strings differ at all.

So firstly, you appear to have your if-test the wrong way around. Secondly, you need to test just the leading n characters, where n is the length of the username. Off the top of my head, I suggest you try replacing your if-test with:

if (!strncmp(line, username, strlen(username))

Answer 5

strcmp compares the whole line in the passwd file with what you have entered. The passwd file contains more than just the user name on each line (look at a passwd file to see what I'm talking about).

Answer 6

Aside from the fact that your strcmp test condition is wrong as others have already pointed out, lines in the passwd file contain more than just the username. You could use strstr to see if the name is present in a particular line.

if(strstr(line, username) == line)
{
    /* valid user */
}