 dba026b5ef
			
		
	
	dba026b5ef
	
	
	
		
			
			On Windows a file descriptor is an int value allocated by the local module instance of the C Run Time Library. A socket handle is a SOCKET value allocated by a Winsock Provider for the requested family and protocol. These two values cannot be mixed and there is no mechanism for converting between the two. The _get_osfhandle() and _open_osfhandle() functions can work with a standard HANDLE (file, pipe, etc) but cannot be used for a SOCKET. The Heimdal krb5_storage_from_fd() routine counted on the osf conversion functions working on SOCKET values. Since they do not any attempt to call krb5_storage_from_fd() on a socket resulted in an assertion being thrown by the C RTL. Another problem is SOCKET value truncation when storing a 64-bit value into a 32-bit int. To address these problems a new krb5_storage_from_socket() routine is introduced. This routine setups a krb5_storage that stores a socket value as a rk_socket_t and provides a set of helper routines that always use network ready functions. The krb5_storage_from_fd() routines no longer use net_read() and net_write() but provide helpers that follow their logic so that pipes can be processed. All call sites that allocate a socket now store the socket as rk_socket_t and call krb5_storage_from_socket(). All locations that previously called the bare close() on a socket value now call rk_closesocket(). Change-Id: I045f775b2a5dbf5cf803751409490bc27fffe597
		
			
				
	
	
		
			159 lines
		
	
	
		
			4.7 KiB
		
	
	
	
		
			C
		
	
	
	
	
	
			
		
		
	
	
			159 lines
		
	
	
		
			4.7 KiB
		
	
	
	
		
			C
		
	
	
	
	
	
| /*
 | |
|  * Copyright (c) 1997-2000 Kungliga Tekniska Högskolan
 | |
|  * (Royal Institute of Technology, Stockholm, Sweden).
 | |
|  * All rights reserved.
 | |
|  *
 | |
|  * Redistribution and use in source and binary forms, with or without
 | |
|  * modification, are permitted provided that the following conditions
 | |
|  * are met:
 | |
|  *
 | |
|  * 1. Redistributions of source code must retain the above copyright
 | |
|  *    notice, this list of conditions and the following disclaimer.
 | |
|  *
 | |
|  * 2. Redistributions in binary form must reproduce the above copyright
 | |
|  *    notice, this list of conditions and the following disclaimer in the
 | |
|  *    documentation and/or other materials provided with the distribution.
 | |
|  *
 | |
|  * 3. Neither the name of the Institute nor the names of its contributors
 | |
|  *    may be used to endorse or promote products derived from this software
 | |
|  *    without specific prior written permission.
 | |
|  *
 | |
|  * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
 | |
|  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 | |
|  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 | |
|  * ARE DISCLAIMED.  IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
 | |
|  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
 | |
|  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
 | |
|  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 | |
|  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
 | |
|  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
 | |
|  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
 | |
|  * SUCH DAMAGE.
 | |
|  */
 | |
| 
 | |
| /* $Id$ */
 | |
| 
 | |
| #ifndef __kadm5_privatex_h__
 | |
| #define __kadm5_privatex_h__
 | |
| 
 | |
| #ifdef HAVE_SYS_UN_H
 | |
| #include <sys/un.h>
 | |
| #endif
 | |
| 
 | |
| struct kadm_func {
 | |
|     kadm5_ret_t (*chpass_principal) (void *, krb5_principal, int,
 | |
| 				     int, krb5_key_salt_tuple*, const char*);
 | |
|     kadm5_ret_t (*create_principal) (void*, kadm5_principal_ent_t, uint32_t,
 | |
| 				     int, krb5_key_salt_tuple *,
 | |
| 				     const char*);
 | |
|     kadm5_ret_t (*delete_principal) (void*, krb5_principal);
 | |
|     kadm5_ret_t (*destroy) (void*);
 | |
|     kadm5_ret_t (*flush) (void*);
 | |
|     kadm5_ret_t (*get_principal) (void*, krb5_principal,
 | |
| 				  kadm5_principal_ent_t, uint32_t);
 | |
|     kadm5_ret_t (*get_principals) (void*, const char*, char***, int*);
 | |
|     kadm5_ret_t (*get_privs) (void*, uint32_t*);
 | |
|     kadm5_ret_t (*modify_principal) (void*, kadm5_principal_ent_t, uint32_t);
 | |
|     kadm5_ret_t (*randkey_principal) (void*, krb5_principal, krb5_boolean, int,
 | |
| 				      krb5_key_salt_tuple*, krb5_keyblock**,
 | |
| 				      int*);
 | |
|     kadm5_ret_t (*rename_principal) (void*, krb5_principal, krb5_principal);
 | |
|     kadm5_ret_t (*chpass_principal_with_key) (void *, krb5_principal, int,
 | |
| 					      int, krb5_key_data *);
 | |
|     kadm5_ret_t (*lock) (void *);
 | |
|     kadm5_ret_t (*unlock) (void *);
 | |
| };
 | |
| 
 | |
| /* XXX should be integrated */
 | |
| typedef struct kadm5_common_context {
 | |
|     krb5_context context;
 | |
|     krb5_boolean my_context;
 | |
|     struct kadm_func funcs;
 | |
|     void *data;
 | |
| }kadm5_common_context;
 | |
| 
 | |
| typedef struct kadm5_log_peer {
 | |
|     int fd;
 | |
|     char *name;
 | |
|     krb5_auth_context ac;
 | |
|     struct kadm5_log_peer *next;
 | |
| } kadm5_log_peer;
 | |
| 
 | |
| typedef struct kadm5_log_context {
 | |
|     char *log_file;
 | |
|     int log_fd;
 | |
|     uint32_t version;
 | |
| #ifndef NO_UNIX_SOCKETS
 | |
|     struct sockaddr_un socket_name;
 | |
| #else
 | |
|     struct addrinfo *socket_info;
 | |
| #endif
 | |
|     krb5_socket_t socket_fd;
 | |
| } kadm5_log_context;
 | |
| 
 | |
| typedef struct kadm5_server_context {
 | |
|     krb5_context context;
 | |
|     krb5_boolean my_context;
 | |
|     struct kadm_func funcs;
 | |
|     /* */
 | |
|     kadm5_config_params config;
 | |
|     HDB *db;
 | |
|     int keep_open;
 | |
|     krb5_principal caller;
 | |
|     unsigned acl_flags;
 | |
|     kadm5_log_context log_context;
 | |
| } kadm5_server_context;
 | |
| 
 | |
| typedef struct kadm5_client_context {
 | |
|     krb5_context context;
 | |
|     krb5_boolean my_context;
 | |
|     struct kadm_func funcs;
 | |
|     /* */
 | |
|     krb5_auth_context ac;
 | |
|     char *realm;
 | |
|     char *admin_server;
 | |
|     int kadmind_port;
 | |
|     krb5_socket_t sock;
 | |
|     char *client_name;
 | |
|     char *service_name;
 | |
|     krb5_prompter_fct prompter;
 | |
|     const char *keytab;
 | |
|     krb5_ccache ccache;
 | |
|     kadm5_config_params *realm_params;
 | |
| }kadm5_client_context;
 | |
| 
 | |
| typedef struct kadm5_ad_context {
 | |
|     krb5_context context;
 | |
|     krb5_boolean my_context;
 | |
|     struct kadm_func funcs;
 | |
|     /* */
 | |
|     kadm5_config_params config;
 | |
|     krb5_principal caller;
 | |
|     krb5_ccache ccache;
 | |
|     char *client_name;
 | |
|     char *realm;
 | |
|     void *ldap_conn;
 | |
|     char *base_dn;
 | |
| } kadm5_ad_context;
 | |
| 
 | |
| enum kadm_ops {
 | |
|     kadm_get,
 | |
|     kadm_delete,
 | |
|     kadm_create,
 | |
|     kadm_rename,
 | |
|     kadm_chpass,
 | |
|     kadm_modify,
 | |
|     kadm_randkey,
 | |
|     kadm_get_privs,
 | |
|     kadm_get_princs,
 | |
|     kadm_chpass_with_key,
 | |
|     kadm_nop
 | |
| };
 | |
| 
 | |
| #define KADMIN_APPL_VERSION "KADM0.1"
 | |
| #define KADMIN_OLD_APPL_VERSION "KADM0.0"
 | |
| 
 | |
| #include "kadm5-private.h"
 | |
| 
 | |
| #endif /* __kadm5_privatex_h__ */
 |