new file
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@6929 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Assar Westerlund
280
lib/krb5/keytab_krb4.c
Normal file
280
lib/krb5/keytab_krb4.c
Normal file
@@ -0,0 +1,280 @@
|
||||
/*
|
||||
* Copyright (c) 1997, 1998, 1999 Kungliga Tekniska H<>gskolan
|
||||
* (Royal Institute of Technology, Stockholm, Sweden).
|
||||
* All rights reserved.
|
||||
*
|
||||
* Redistribution and use in source and binary forms, with or without
|
||||
* modification, are permitted provided that the following conditions
|
||||
* are met:
|
||||
*
|
||||
* 1. Redistributions of source code must retain the above copyright
|
||||
* notice, this list of conditions and the following disclaimer.
|
||||
*
|
||||
* 2. Redistributions in binary form must reproduce the above copyright
|
||||
* notice, this list of conditions and the following disclaimer in the
|
||||
* documentation and/or other materials provided with the distribution.
|
||||
*
|
||||
* 3. All advertising materials mentioning features or use of this software
|
||||
* must display the following acknowledgement:
|
||||
* This product includes software developed by Kungliga Tekniska
|
||||
* H<>gskolan and its contributors.
|
||||
*
|
||||
* 4. Neither the name of the Institute nor the names of its contributors
|
||||
* may be used to endorse or promote products derived from this software
|
||||
* without specific prior written permission.
|
||||
*
|
||||
* THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
|
||||
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
||||
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
||||
* ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
|
||||
* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
||||
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
|
||||
* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
||||
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
|
||||
* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
|
||||
* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
|
||||
* SUCH DAMAGE.
|
||||
*/
|
||||
|
||||
#include "krb5_locl.h"
|
||||
#include <krb.h>
|
||||
|
||||
RCSID("$Id$");
|
||||
|
||||
#ifndef O_BINARY
|
||||
#define O_BINARY 0
|
||||
#endif
|
||||
|
||||
struct krb4_kt_data {
|
||||
char *filename;
|
||||
};
|
||||
|
||||
static krb5_error_code
|
||||
krb4_kt_resolve(krb5_context context, const char *name, krb5_keytab id)
|
||||
{
|
||||
struct krb4_kt_data *d;
|
||||
|
||||
d = malloc (sizeof(*d));
|
||||
if (d == NULL)
|
||||
return ENOMEM;
|
||||
d->filename = strdup (name);
|
||||
if (d->filename == NULL) {
|
||||
free(d);
|
||||
return ENOMEM;
|
||||
}
|
||||
id->data = d;
|
||||
return 0;
|
||||
}
|
||||
|
||||
static krb5_error_code
|
||||
krb4_kt_get_name (krb5_context context,
|
||||
krb5_keytab id,
|
||||
char *name,
|
||||
size_t name_sz)
|
||||
{
|
||||
struct krb4_kt_data *d = id->data;
|
||||
|
||||
strcpy_truncate (name, d->filename, name_sz);
|
||||
return 0;
|
||||
}
|
||||
|
||||
static krb5_error_code
|
||||
krb4_kt_close (krb5_context context,
|
||||
krb5_keytab id)
|
||||
{
|
||||
struct krb4_kt_data *d = id->data;
|
||||
|
||||
free (d->filename);
|
||||
free (d);
|
||||
return 0;
|
||||
}
|
||||
|
||||
struct krb4_cursor_extra_data {
|
||||
krb5_keytab_entry entry;
|
||||
int num;
|
||||
};
|
||||
|
||||
static krb5_error_code
|
||||
krb4_kt_start_seq_get_int (krb5_context context,
|
||||
krb5_keytab id,
|
||||
int flags,
|
||||
krb5_kt_cursor *c)
|
||||
{
|
||||
struct krb4_kt_data *d = id->data;
|
||||
struct krb4_cursor_extra_data *ed;
|
||||
|
||||
ed = malloc (sizeof(*ed));
|
||||
if (ed == NULL)
|
||||
return ENOMEM;
|
||||
ed->entry.principal = NULL;
|
||||
ed->num = -1;
|
||||
c->data = ed;
|
||||
c->fd = open (d->filename, flags);
|
||||
if (c->fd < 0) {
|
||||
free (ed);
|
||||
return errno;
|
||||
}
|
||||
c->sp = krb5_storage_from_fd(c->fd);
|
||||
return 0;
|
||||
}
|
||||
|
||||
static krb5_error_code
|
||||
krb4_kt_start_seq_get (krb5_context context,
|
||||
krb5_keytab id,
|
||||
krb5_kt_cursor *c)
|
||||
{
|
||||
return krb4_kt_start_seq_get_int (context, id, O_BINARY | O_RDONLY, c);
|
||||
}
|
||||
|
||||
static krb5_error_code
|
||||
read_v4_entry (krb5_context context,
|
||||
struct krb4_kt_data *d,
|
||||
krb5_kt_cursor *c,
|
||||
struct krb4_cursor_extra_data *ed)
|
||||
{
|
||||
krb5_error_code ret;
|
||||
char *service, *instance, *realm;
|
||||
int8_t kvno;
|
||||
des_cblock key;
|
||||
|
||||
ret = krb5_ret_stringz(c->sp, &service);
|
||||
if (ret)
|
||||
return ret;
|
||||
ret = krb5_ret_stringz(c->sp, &instance);
|
||||
if (ret) {
|
||||
free (service);
|
||||
return ret;
|
||||
}
|
||||
ret = krb5_ret_stringz(c->sp, &realm);
|
||||
if (ret) {
|
||||
free (service);
|
||||
free (instance);
|
||||
return ret;
|
||||
}
|
||||
ret = krb5_425_conv_principal (context, service, instance, realm,
|
||||
&ed->entry.principal);
|
||||
free (service);
|
||||
free (instance);
|
||||
free (realm);
|
||||
if (ret)
|
||||
return ret;
|
||||
ret = krb5_ret_int8(c->sp, &kvno);
|
||||
if (ret) {
|
||||
krb5_free_principal (context, ed->entry.principal);
|
||||
return ret;
|
||||
}
|
||||
ret = c->sp->fetch(c->sp, key, 8);
|
||||
if (ret < 0) {
|
||||
krb5_free_principal(context, ed->entry.principal);
|
||||
return ret;
|
||||
}
|
||||
if (ret < 8) {
|
||||
krb5_free_principal(context, ed->entry.principal);
|
||||
return EINVAL;
|
||||
}
|
||||
ed->entry.vno = kvno;
|
||||
ret = krb5_data_copy (&ed->entry.keyblock.keyvalue,
|
||||
key, 8);
|
||||
if (ret)
|
||||
return ret;
|
||||
ed->num = 0;
|
||||
return 0;
|
||||
}
|
||||
|
||||
static krb5_error_code
|
||||
krb4_kt_next_entry (krb5_context context,
|
||||
krb5_keytab id,
|
||||
krb5_keytab_entry *entry,
|
||||
krb5_kt_cursor *c)
|
||||
{
|
||||
krb5_error_code ret;
|
||||
struct krb4_kt_data *d = id->data;
|
||||
struct krb4_cursor_extra_data *ed = c->data;
|
||||
const krb5_enctype keytypes[] = {ETYPE_DES_CBC_MD5,
|
||||
ETYPE_DES_CBC_MD4,
|
||||
ETYPE_DES_CBC_CRC};
|
||||
|
||||
if (ed->num == -1) {
|
||||
ret = read_v4_entry (context, d, c, ed);
|
||||
if (ret)
|
||||
return ret;
|
||||
}
|
||||
ret = krb5_kt_copy_entry_contents (context,
|
||||
&ed->entry,
|
||||
entry);
|
||||
if (ret)
|
||||
return ret;
|
||||
entry->keyblock.keytype = keytypes[ed->num];
|
||||
if (++ed->num == 3) {
|
||||
krb5_kt_free_entry (context, &ed->entry);
|
||||
ed->num = -1;
|
||||
}
|
||||
return 0;
|
||||
}
|
||||
|
||||
static krb5_error_code
|
||||
krb4_kt_end_seq_get (krb5_context context,
|
||||
krb5_keytab id,
|
||||
krb5_kt_cursor *c)
|
||||
{
|
||||
struct krb4_cursor_extra_data *ed = c->data;
|
||||
|
||||
krb5_storage_free (c->sp);
|
||||
if (ed->num != -1)
|
||||
krb5_kt_free_entry (context, &ed->entry);
|
||||
free (c->data);
|
||||
close (c->fd);
|
||||
return 0;
|
||||
}
|
||||
|
||||
static krb5_error_code
|
||||
krb4_kt_add_entry (krb5_context context,
|
||||
krb5_keytab id,
|
||||
krb5_keytab_entry *entry)
|
||||
{
|
||||
struct krb4_kt_data *d = id->data;
|
||||
krb5_error_code ret;
|
||||
int fd;
|
||||
char service[ANAME_SZ];
|
||||
char instance[INST_SZ];
|
||||
char realm[REALM_SZ];
|
||||
int8_t kvno;
|
||||
|
||||
fd = open (d->filename, O_WRONLY | O_APPEND | O_BINARY);
|
||||
if (fd < 0) {
|
||||
fd = open (d->filename,
|
||||
O_WRONLY | O_APPEND | O_BINARY | O_CREAT, 0600);
|
||||
if (fd < 0)
|
||||
return errno;
|
||||
}
|
||||
ret = krb5_524_conv_principal (context, entry->principal,
|
||||
service, instance, realm);
|
||||
if (ret) {
|
||||
close (fd);
|
||||
return ret;
|
||||
}
|
||||
if (entry->keyblock.keyvalue.length == 8
|
||||
&& entry->keyblock.keytype == ETYPE_DES_CBC_MD5) {
|
||||
write(fd, service, strlen(service)+1);
|
||||
write(fd, instance, strlen(instance)+1);
|
||||
write(fd, realm, strlen(realm)+1);
|
||||
kvno = entry->vno;
|
||||
write(fd, &kvno, sizeof(kvno));
|
||||
write(fd, entry->keyblock.keyvalue.data, 8);
|
||||
}
|
||||
close (fd);
|
||||
return 0;
|
||||
}
|
||||
|
||||
krb5_kt_ops krb4_fkt_ops = {
|
||||
"krb4",
|
||||
krb4_kt_resolve,
|
||||
krb4_kt_get_name,
|
||||
krb4_kt_close,
|
||||
NULL, /* get */
|
||||
krb4_kt_start_seq_get,
|
||||
krb4_kt_next_entry,
|
||||
krb4_kt_end_seq_get,
|
||||
krb4_kt_add_entry, /* add_entry */
|
||||
NULL /* remove_entry */
|
||||
};
|
||||
Reference in New Issue
Block a user