oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

Better logging and return status = FALSE when checksum doesn't match.

Browse Source 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20120 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Love Hörnquist Åstrand
2007-02-01 20:28:49 +00:00
parent c2fc3006d8
commit abcd0e9de6
1 changed files with 31 additions and 34 deletions
Download Patch File Download Diff File Expand all files Collapse all files

65
kdc/digest.c
View File

@@ -629,18 +629,18 @@ _kdc_do_digest(krb5_context context,
goto out;
}
ret = strcmp(mdx, ireq.u.digestRequest.responseData);
free(mdx);
if (ret != 0) {
krb5_set_error_string(context,
"CHAP reply mismatch for %s",
ireq.u.digestRequest.username);
ret = EINVAL;
goto out;
}
r.element = choice_DigestRepInner_response;
r.u.response.success = TRUE;
ret = strcasecmp(mdx, ireq.u.digestRequest.responseData);
free(mdx);
if (ret == 0) {
r.u.response.success = TRUE;
} else {
kdc_log(context, config, 0,
"CHAP reply mismatch for %s",
ireq.u.digestRequest.username);
r.u.response.success = FALSE;
}
} else if (strcasecmp(ireq.u.digestRequest.type, "SASL-DIGEST-MD5") == 0) {
MD5_CTX ctx;
@@ -742,18 +742,17 @@ _kdc_do_digest(krb5_context context,
goto out;
}
ret = strcmp(mdx, ireq.u.digestRequest.responseData);
free(mdx);
if (ret != 0) {
krb5_set_error_string(context,
"Digest-MD5 reply mismatch for %s",
ireq.u.digestRequest.username);
ret = EINVAL;
goto out;
}
r.element = choice_DigestRepInner_response;
r.u.response.success = TRUE;
ret = strcasecmp(mdx, ireq.u.digestRequest.responseData);
free(mdx);
if (ret == 0) {
r.u.response.success = TRUE;
} else {
kdc_log(context, config, 0,
"DIGEST-MD5 reply mismatch for %s",
ireq.u.digestRequest.username);
r.u.response.success = FALSE;
}
} else if (strcasecmp(ireq.u.digestRequest.type, "MS-CHAP-V2") == 0) {
unsigned char md[SHA_DIGEST_LENGTH], challange[SHA_DIGEST_LENGTH];
@@ -857,19 +856,17 @@ _kdc_do_digest(krb5_context context,
goto out;
}
ret = strcmp(mdx, ireq.u.digestRequest.responseData);
free(mdx);
if (ret != 0) {
free(answer.data);
krb5_set_error_string(context,
"MS-CHAP-V2 reply mismatch for %s",
ireq.u.digestRequest.username);
ret = EINVAL;
goto out;
}
r.element = choice_DigestRepInner_response;
r.u.response.success = TRUE;
ret = strcasecmp(mdx, ireq.u.digestRequest.responseData);
free(mdx);
if (ret == 0) {
r.u.response.success = TRUE;
} else {
kdc_log(context, config, 0,
"MS-CHAP-V2 reply mismatch for %s",
ireq.u.digestRequest.username);
r.u.response.success = FALSE;
}
/* GenerateAuthenticatorResponse */
SHA1_Init(&ctx);