Function validatePassword

src/jrd/extds/ValidatePassword.cpp:175–299

namespace EDS {

bool validatePassword(thread_db* tdbb, const PathName& file, ClumpletWriter& dpb)
{
	// Preliminary checks - should we really validate the password ourselves
	if (!dpb.find(isc_dpb_user_name))		// check for user name presence
		return false;
	if (ISC_check_if_remote(file, false))	// check for remote connection
		return false;
	UserId* usr = tdbb->getAttachment()->att_user;
	if (!usr)
		return false;
	if (!usr->usr_auth_block.hasData())		// check for embedded attachment
		return false;

	Arg::Gds loginError(isc_login_error);

	// Build list of client/server plugins
	RefPtr<const Config> config;
	PathName list;
	expandDatabaseName(file, list /* unused value */, &config);
	PathName serverList = config->getPlugins(IPluginManager::TYPE_AUTH_SERVER);
	PathName clientList = config->getPlugins(IPluginManager::TYPE_AUTH_CLIENT);
	ParsedList::mergeLists(list, serverList, clientList);

	if (!list.hasData())
	{
		Arg::Gds noPlugins(isc_vld_plugins);
		iscLogStatus(NULL, noPlugins.value());

#ifdef DEV_BUILD
		loginError << noPlugins;
#endif
		loginError.raise();
	}

	// Analyze DPB
	string login;
	if (dpb.find(isc_dpb_user_name))
	{
		dpb.getString(login);
		fb_utils::dpbItemUpper(login);
	}
	string password;
	if (dpb.find(isc_dpb_password))
		dpb.getString(password);

	// Try each plugin from the merged list
	for (GetPlugins<IClient> client(IPluginManager::TYPE_AUTH_CLIENT, config, list.c_str());
		client.hasData(); client.next())
	{
		GetPlugins<IServer> server(IPluginManager::TYPE_AUTH_SERVER, config, client.name());
		if (!server.hasData())
			continue;

		CBlock cBlock(login, password);
		SBlock sBlock(&cBlock);
		Auth::WriterImplementation writer;
		writer.setPlugin(client.name());