oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

Add code to check PA_ServerReferralData.

Browse Source 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22737 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Love Hörnquist Åstrand
2008-03-24 12:07:22 +00:00
parent 5aaf35765e
commit 1da2a3782e
1 changed files with 66 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

69
lib/krb5/get_cred.c
View File

@@ -520,17 +520,18 @@ get_cred_kdc(krb5_context context,
goto out;
memset(&rep, 0, sizeof(rep));
if(decode_TGS_REP(resp.data, resp.length, &rep.kdc_rep, &len) == 0){
if(decode_TGS_REP(resp.data, resp.length, &rep.kdc_rep, &len) == 0) {
ret = krb5_copy_principal(context,
in_creds->client,
&out_creds->client);
if(ret)
goto out;
goto out2;
ret = krb5_copy_principal(context,
in_creds->server,
&out_creds->server);
if(ret)
goto out;
goto out2;
/* this should go someplace else */
out_creds->times.endtime = in_creds->times.endtime;
@@ -546,6 +547,68 @@ get_cred_kdc(krb5_context context,
EXTRACT_TICKET_ALLOW_SERVER_MISMATCH,
decrypt_tkt_with_subkey,
subkey);
/* check for server-referral data */
if (rep.kdc_rep.padata) {
PA_DATA *pa;
int i = 0;
pa = krb5_find_padata(rep.kdc_rep.padata->val,
rep.kdc_rep.padata->len,
KRB5_PADATA_SERVER_REFERRAL, &i);
if (pa) {
PA_ServerReferralData ref;
krb5_crypto session;
EncryptedData ed;
size_t len;
krb5_data data;
memset(&ed, 0, sizeof(ed));
memset(&ref, 0, sizeof(ref));
ret = decode_EncryptedData(pa->padata_value.data, pa->padata_value.length, &ed, &len);
if (ret)
goto out2;
if (len != pa->padata_value.length) {
free_EncryptedData(&ed);
ret = EINVAL; /* XXX */
goto out2;
}
ret = krb5_crypto_init(context, &out_creds->session, 0, &session);
if (ret) {
free_EncryptedData(&ed);
goto out;
}
ret = krb5_decrypt_EncryptedData(context, session,
KRB5_KU_PA_SERVER_REFERRAL,
&ed, &data);
free_EncryptedData(&ed);
krb5_crypto_destroy(context, session);
if (ret)
goto out2;
ret = decode_PA_ServerReferralData(data.data, data.length, &ref, &len);
if (ret) {
krb5_data_free(&data);
goto out2;
}
if (len != data.length) {
free_PA_ServerReferralData(&ref);
krb5_data_free(&data);
return EINVAL;
}
krb5_data_free(&data);
/* XXX check PA_ServerReferralData */
free_PA_ServerReferralData(&ref);
printf("encrypted SERVER REFERRAL data ok\n");
}
}
out2:
krb5_free_kdc_rep(context, &rep);
} else if(krb5_rd_error(context, &resp, &error) == 0) {
ret = krb5_error_from_rd_error(context, &error, in_creds);