oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

(krb5_aname_to_localname): when converting too root, make sure user is

Browse Source 
ok according to krb5_kuserok before allowing it.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11956 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Love Hörnquist Åstrand
2003-04-01 18:06:39 +00:00
parent 520c4dc0c5
commit 51de647e6c
1 changed files with 22 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

28
lib/krb5/aname_to_localname.c
View File

@@ -43,7 +43,7 @@ krb5_aname_to_localname (krb5_context context,
{ {
krb5_error_code ret; krb5_error_code ret;
krb5_realm *lrealms, *r; krb5_realm *lrealms, *r;
int foo = 1; int valid;
size_t len; size_t len;
const char *res; const char *res;
@@ -51,26 +51,42 @@ krb5_aname_to_localname (krb5_context context,
if (ret) if (ret)
return ret; return ret;
valid = 0;
for (r = lrealms; *r != NULL; ++r) { for (r = lrealms; *r != NULL; ++r) {
foo = strcmp (*r, aname->realm); if (strcmp (*r, aname->realm) == 0) {
if (foo == 0) valid = 1;
break; break;
}
} }
krb5_free_host_realm (context, lrealms); krb5_free_host_realm (context, lrealms);
if (foo != 0) if (valid == 0)
return KRB5_NO_LOCALNAME; return KRB5_NO_LOCALNAME;
if (aname->name.name_string.len == 1) if (aname->name.name_string.len == 1)
res = aname->name.name_string.val[0]; res = aname->name.name_string.val[0];
else if (aname->name.name_string.len == 2 else if (aname->name.name_string.len == 2
&& strcmp (aname->name.name_string.val[1], "root") == 0) && strcmp (aname->name.name_string.val[1], "root") == 0) {
krb5_principal rootprinc;
krb5_boolean userok;
res = "root"; res = "root";
else
ret = krb5_copy_principal(context, aname, &rootprinc);
if (ret)
return ret;
userok = krb5_kuserok(context, rootprinc, res);
krb5_free_principal(context, rootprinc);
if (!userok)
return KRB5_NO_LOCALNAME;
} else
return KRB5_NO_LOCALNAME; return KRB5_NO_LOCALNAME;
len = strlen (res); len = strlen (res);
if (len >= lnsize) if (len >= lnsize)
return ERANGE; return ERANGE;
strcpy (lname, res); strcpy (lname, res);
return 0; return 0;
} }