oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

Some support for KRB5_AUTH_CONTEXT_DO_SEQUENCE

Browse Source 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@1807 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Assar Westerlund
1997-06-01 14:37:54 +00:00
parent a44adf98c8
commit 9cb6e5dddc
8 changed files with 81 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
lib/krb5/rd_safe.c
View File

@@ -22,7 +22,25 @@ krb5_rd_safe(krb5_context context,
return KRB5KRB_AP_ERR_MSG_TYPE;
if (safe.cksum.cksumtype != CKSUMTYPE_RSA_MD4)
return KRB5KRB_AP_ERR_INAPP_CKSUM;
/* XXX */
/* check timestamp */
if (auth_context->flags & KRB5_AUTH_CONTEXT_DO_TIME) {
struct timeval tv;
gettimeofday (&tv, NULL);
if (safe.safe_body.timestamp == NULL ||
safe.safe_body.usec == NULL ||
*(safe.safe_body.timestamp) - tv.tv_sec > 600)
return KRB5KRB_AP_ERR_SKEW;
}
/* XXX - check replay cache */
/* check sequence number */
if (auth_context->flags & KRB5_AUTH_CONTEXT_DO_SEQUENCE) {
if (safe.safe_body.seq_number == NULL ||
*safe.safe_body.seq_number != ++auth_context->remote_seqnumber)
return KRB5KRB_AP_ERR_BADORDER;
}
r = krb5_verify_checksum (context,
safe.safe_body.user_data.data,
safe.safe_body.user_data.length,