 de03aff7dc
			
		
	
	de03aff7dc
	
	
	
		
			
			git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@315 ec53bebd-3082-4978-b11e-865c3cabbd6b
		
			
				
	
	
		
			546 lines
		
	
	
		
			9.4 KiB
		
	
	
	
		
			C
		
	
	
	
	
	
			
		
		
	
	
			546 lines
		
	
	
		
			9.4 KiB
		
	
	
	
		
			C
		
	
	
	
	
	
| #include "krb5_locl.h"
 | |
| 
 | |
| /* XXX shouldn't be here */
 | |
| 
 | |
| void krb5_free_ccache(krb5_context context,
 | |
| 		      krb5_ccache val)
 | |
| {
 | |
|   free(((krb5_fcache*)(val->data.data))->filename);
 | |
|   krb5_data_free (&val->data);
 | |
|   free(val);
 | |
| }
 | |
| 
 | |
| 
 | |
| krb5_error_code
 | |
| krb5_cc_resolve(krb5_context context,
 | |
| 		const char *residual,
 | |
| 		krb5_ccache *id)
 | |
| {
 | |
|   krb5_ccache p;
 | |
|   krb5_fcache *f;
 | |
| 
 | |
|   if(strncmp(residual, "FILE:", 5)){
 | |
|     return -1;
 | |
|   }
 | |
| 
 | |
|   p = ALLOC(1, krb5_ccache_data);
 | |
|   
 | |
|   if(!p)
 | |
|     return ENOMEM;
 | |
|   
 | |
|   f = ALLOC(1, krb5_fcache);
 | |
|   
 | |
|   if(!f){
 | |
|     free(p);
 | |
|     return ENOMEM;
 | |
|   }
 | |
|   f->filename = strdup(residual + 5);
 | |
|   if(!f->filename){
 | |
|     free(f);
 | |
|     free(p);
 | |
|     return ENOMEM;
 | |
|   }
 | |
|   
 | |
|   p->data.data = f;
 | |
|   p->data.length = sizeof(*f);
 | |
|   p->type = 1;
 | |
| 
 | |
|   *id = p;
 | |
|   
 | |
|   return 0;
 | |
| }
 | |
| 
 | |
| #if 0
 | |
| krb5_error_code
 | |
| krb5_cc_gen_new(krb5_context context,
 | |
| 		krb5_cc_ops *ops,
 | |
| 		krb5_ccache *id)
 | |
| {
 | |
| }
 | |
| 
 | |
| krb5_error_code
 | |
| krb5_cc_register(krb5_context context,
 | |
| 		 krb5_cc_ops *ops,
 | |
| 		 krb5_boolean override)
 | |
| {
 | |
| }
 | |
| #endif
 | |
| 
 | |
| char*
 | |
| krb5_cc_get_name(krb5_context context,
 | |
| 		 krb5_ccache id)
 | |
| {
 | |
|   return ((krb5_fcache*)(id->data.data))->filename;
 | |
| }
 | |
| 
 | |
| char*
 | |
| krb5_cc_default_name(krb5_context context)
 | |
| {
 | |
|   static char name[1024];
 | |
|   char *p;
 | |
|   p = getenv("KRB5CCNAME");
 | |
|   if(p)
 | |
|     strcpy(name, p);
 | |
|   else
 | |
|     sprintf(name, "FILE:/tmp/krb5cc_%d", getuid());
 | |
|   return name;
 | |
| }
 | |
| 
 | |
| 
 | |
| 
 | |
| 
 | |
| krb5_error_code
 | |
| krb5_cc_default(krb5_context context,
 | |
| 		krb5_ccache *id)
 | |
| {
 | |
|   return krb5_cc_resolve(context, 
 | |
| 			 krb5_cc_default_name(context), 
 | |
| 			 id);
 | |
| }
 | |
| 
 | |
| static krb5_error_code
 | |
| store_int32(int fd,
 | |
| 	    int32_t value)
 | |
| {
 | |
|   value = htonl(value);
 | |
|   return write(fd, &value, sizeof(value));
 | |
| }
 | |
| 
 | |
| static krb5_error_code
 | |
| ret_int32(int fd,
 | |
| 	  int32_t *value)
 | |
| {
 | |
|   int32_t v;
 | |
|   int ret;
 | |
|   ret = read(fd, &v, sizeof(v));
 | |
|   if(ret != sizeof(v))
 | |
|     return (ret<0)?errno:-1; /* XXX */
 | |
| 
 | |
|   *value = ntohl(v);
 | |
|   return 0;
 | |
| }
 | |
| 
 | |
| static krb5_error_code
 | |
| store_int16(int fd,
 | |
| 	    int16_t value)
 | |
| {
 | |
|   value = htons(value);
 | |
|   return write(fd, &value, sizeof(value));
 | |
| }
 | |
| 
 | |
| static krb5_error_code
 | |
| ret_int16(int fd,
 | |
| 	  int16_t *value)
 | |
| {
 | |
|   int16_t v;
 | |
|   int ret;
 | |
|   ret = read(fd, &v, sizeof(v));
 | |
|   if(ret != sizeof(v))
 | |
|     return (ret<0)?errno:-1; /* XXX */
 | |
|   
 | |
|   *value = ntohs(v);
 | |
|   return 0;
 | |
| }
 | |
| 
 | |
| static krb5_error_code
 | |
| store_int8(int fd,
 | |
| 	   int8_t value)
 | |
| {
 | |
|   return write(fd, &value, sizeof(value));
 | |
| }
 | |
| 
 | |
| static krb5_error_code
 | |
| ret_int8(int fd,
 | |
| 	 int8_t *value)
 | |
| {
 | |
|   int ret;
 | |
| 
 | |
|   ret = read (fd, value, sizeof(*value));
 | |
|   if (ret != sizeof(*value))
 | |
|     return (ret<0)?errno:-1;
 | |
|   return 0;
 | |
| }
 | |
| 
 | |
| static krb5_error_code
 | |
| store_data(int fd,
 | |
| 	   krb5_data data)
 | |
| {
 | |
|   int ret;
 | |
|   ret = store_int32(fd, data.length);
 | |
|   if(ret < 0)
 | |
|     return ret;
 | |
|   return write(fd, data.data, data.length);
 | |
| }
 | |
| 
 | |
| static krb5_error_code
 | |
| ret_data(int fd,
 | |
| 	 krb5_data *data)
 | |
| {
 | |
|   int ret;
 | |
|   int size;
 | |
|   ret = ret_int32(fd, &size);
 | |
|   data->length = size;
 | |
|   data->data = malloc(size);
 | |
|   ret = read(fd, data->data, size);
 | |
|   if(ret != size)
 | |
|     return (ret < 0)? errno : -1; /* XXX */
 | |
|   return 0;
 | |
| }
 | |
| 
 | |
| static krb5_error_code
 | |
| store_principal(int fd,
 | |
| 		krb5_principal p)
 | |
| {
 | |
|   int i;
 | |
|   store_int32(fd, p->type);
 | |
|   store_int32(fd, p->ncomp);
 | |
|   store_data(fd, p->realm);
 | |
|   for(i = 0; i < p->ncomp; i++)
 | |
|     store_data(fd, p->comp[i]);
 | |
|   return 0;
 | |
| }
 | |
| 
 | |
| static krb5_error_code
 | |
| ret_principal(int fd,
 | |
| 	      krb5_principal *princ)
 | |
| {
 | |
|   int i;
 | |
|   krb5_principal p;
 | |
| 
 | |
|   p = ALLOC(1, krb5_principal_data);
 | |
| 
 | |
|   ret_int32(fd, &p->type);
 | |
|   ret_int32(fd, &p->ncomp);
 | |
|   ret_data(fd, &p->realm);
 | |
|   p->comp = ALLOC(p->ncomp, krb5_data);
 | |
|   for(i = 0; i < p->ncomp; i++)
 | |
|     ret_data(fd, &p->comp[i]);
 | |
|   *princ = p;
 | |
|   return 0;
 | |
| }
 | |
| 
 | |
| static krb5_error_code
 | |
| store_keyblock(int fd, krb5_keyblock p)
 | |
| {
 | |
|   store_int32(fd, p.keytype);
 | |
|   store_data(fd, p.contents);
 | |
|   return 0;
 | |
| }
 | |
| 
 | |
| static krb5_error_code
 | |
| ret_keyblock(int fd, krb5_keyblock *p)
 | |
| {
 | |
|   ret_int32(fd, (int32_t*)&p->keytype);
 | |
|   ret_data(fd, &p->contents);
 | |
|   return 0;
 | |
| }
 | |
| 
 | |
| static krb5_error_code
 | |
| store_times(int fd, krb5_times times)
 | |
| {
 | |
|   store_int32(fd, times.authtime);
 | |
|   store_int32(fd, times.starttime);
 | |
|   store_int32(fd, times.endtime);
 | |
|   store_int32(fd, times.renew_till);
 | |
|   return 0;
 | |
| }
 | |
| 
 | |
| static krb5_error_code
 | |
| ret_times(int fd, krb5_times *times)
 | |
| {
 | |
|   ret_int32(fd, ×->authtime);
 | |
|   ret_int32(fd, ×->starttime);
 | |
|   ret_int32(fd, ×->endtime);
 | |
|   ret_int32(fd, ×->renew_till);
 | |
|   return 0;
 | |
| }
 | |
| 
 | |
| static krb5_error_code
 | |
| store_address(int fd, krb5_address p)
 | |
| {
 | |
|   store_int32(fd, p.type);
 | |
|   store_data(fd, p.address);
 | |
|   return 0;
 | |
| }
 | |
| 
 | |
| static krb5_error_code
 | |
| ret_address(int fd, krb5_address *adr)
 | |
| {
 | |
|   ret_int32(fd, (int32_t*)&adr->type);
 | |
|   ret_data(fd, &adr->address);
 | |
|   return 0;
 | |
| }
 | |
| 
 | |
| static krb5_error_code
 | |
| store_addrs(int fd, krb5_addresses p)
 | |
| {
 | |
|   int i;
 | |
|   store_int32(fd, p.number);
 | |
|   for(i = 0; i<p.number; i++)
 | |
|     store_address(fd, p.addrs[i]);
 | |
|   return 0;
 | |
| }
 | |
| 
 | |
| static krb5_error_code
 | |
| ret_addrs(int fd, krb5_addresses *adr)
 | |
| {
 | |
|   int i;
 | |
|   ret_int32(fd, &adr->number);
 | |
|   adr->addrs = ALLOC(adr->number, krb5_address);
 | |
|   for(i = 0; i < adr->number; i++)
 | |
|     ret_address(fd, &adr->addrs[i]);
 | |
|   return 0;
 | |
| }
 | |
| 
 | |
| static krb5_error_code
 | |
| store_ticket(int fd, krb5_ticket p)
 | |
| {
 | |
|   int i;
 | |
|   store_data(fd, p.enc_part);
 | |
|   return 0;
 | |
| }
 | |
| 
 | |
| static krb5_error_code
 | |
| ret_ticket(int fd, krb5_ticket *tkt)
 | |
| {
 | |
|   int i;
 | |
|   ret_data(fd, &tkt->enc_part);
 | |
|   return 0;
 | |
| }
 | |
| 
 | |
| static krb5_error_code
 | |
| store_authdata(int fd, krb5_data p)
 | |
| {
 | |
|   store_data(fd, p);
 | |
|   return 0;
 | |
| }
 | |
| 
 | |
| static krb5_error_code
 | |
| ret_authdata(int fd, krb5_data *auth)
 | |
| {
 | |
|   ret_data(fd, auth);
 | |
|   return 0;
 | |
| }
 | |
| 
 | |
| krb5_error_code
 | |
| krb5_cc_initialize(krb5_context context,
 | |
| 		   krb5_ccache id,
 | |
| 		   krb5_principal primary_principal)
 | |
| {
 | |
|   char cc[1024];
 | |
|   char *p;
 | |
|   int ret;
 | |
|   int fd;
 | |
| 
 | |
|   char *f;
 | |
| 
 | |
|   f = krb5_cc_get_name(context, id);
 | |
|   
 | |
|   if(ret = erase_file(f))
 | |
|     return ret;
 | |
|   
 | |
|   fd = open(f, O_RDWR | O_CREAT | O_EXCL, 0600);
 | |
|   if(fd == -1)
 | |
|     return errno;
 | |
|   store_int16(fd, 0x503);
 | |
|   store_principal(fd, primary_principal);
 | |
|   close(fd);
 | |
|   
 | |
|   return 0;
 | |
| }
 | |
| 
 | |
| krb5_error_code
 | |
| erase_file(const char *filename)
 | |
| {
 | |
|   int fd;
 | |
|   off_t pos;
 | |
| 
 | |
|   fd = open(filename, O_RDWR);
 | |
|   if(fd < 0)
 | |
|     if(errno == ENOENT)
 | |
|       return 0;
 | |
|     else
 | |
|       return errno;
 | |
|   pos = lseek(fd, 0, SEEK_END);
 | |
|   lseek(fd, 0, SEEK_SET);
 | |
|   for(; pos > 0; pos -= 16)
 | |
|     write(fd, "\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 16);
 | |
|   close(fd);
 | |
|   unlink(filename);
 | |
|   return 0;
 | |
| }
 | |
| 
 | |
| krb5_error_code
 | |
| krb5_cc_destroy(krb5_context context,
 | |
| 		krb5_ccache id)
 | |
| {
 | |
|   char *f;
 | |
|   int ret;
 | |
|   f = krb5_cc_get_name(context, id);
 | |
| 
 | |
|   ret = erase_file(f);
 | |
|   
 | |
|   krb5_free_ccache(context, id);
 | |
|   return ret;
 | |
| }
 | |
| 
 | |
| krb5_error_code
 | |
| krb5_cc_close(krb5_context context,
 | |
| 	      krb5_ccache id)
 | |
| {
 | |
|   krb5_data_free (&id->data);
 | |
|   free(id);
 | |
|   return 0;
 | |
| }
 | |
| 
 | |
| krb5_error_code
 | |
| krb5_cc_store_cred(krb5_context context,
 | |
| 		   krb5_ccache id,
 | |
| 		   krb5_creds *creds)
 | |
| {
 | |
|   int fd;
 | |
|   krb5_fcache *f;
 | |
| 
 | |
|   f = (krb5_fcache *)id->data.data;
 | |
| 
 | |
|   fd = open(f->filename, O_WRONLY | O_APPEND);
 | |
|   if(fd < 0)
 | |
|     return errno;
 | |
|   store_principal(fd, creds->client);
 | |
|   store_principal(fd, creds->server);
 | |
|   store_keyblock(fd, creds->session);
 | |
|   store_times(fd, creds->times);
 | |
|   store_int8(fd, 0); /* s/key */
 | |
|   store_int32(fd, 0); /* flags */
 | |
|   store_addrs(fd, creds->addresses);
 | |
|   store_authdata(fd, creds->authdata);
 | |
|   store_ticket(fd, creds->ticket);
 | |
|   store_ticket(fd, creds->second_ticket);
 | |
|   close(fd);
 | |
| }
 | |
| 
 | |
| static krb5_error_code
 | |
| krb5_cc_read_cred (int fd,
 | |
| 		   krb5_creds *creds)
 | |
| {
 | |
|   int8_t dummy8;
 | |
|   int32_t dummy32;
 | |
| 
 | |
|   return ret_principal (fd, &creds->client)
 | |
|     || ret_principal (fd, &creds->server)
 | |
|     || ret_keyblock (fd, &creds->session)
 | |
|     ||  ret_times (fd, &creds->times)
 | |
|     ||  ret_int8 (fd, &dummy8)
 | |
|     ||  ret_int32 (fd, &dummy32)
 | |
|     ||  ret_addrs (fd, &creds->addresses)
 | |
|     ||  ret_authdata (fd, &creds->authdata)
 | |
|     ||  ret_ticket (fd, &creds->ticket)
 | |
|     ||  ret_ticket (fd, &creds->second_ticket);
 | |
| }
 | |
| 
 | |
| krb5_error_code
 | |
| krb5_cc_retrieve_cred(krb5_context context,
 | |
| 		      krb5_ccache id,
 | |
| 		      krb5_flags whichfields,
 | |
| 		      krb5_creds *mcreds,
 | |
| 		      krb5_creds *creds)
 | |
| {
 | |
|   
 | |
| }
 | |
| 
 | |
| krb5_error_code
 | |
| krb5_cc_get_principal(krb5_context context,
 | |
| 		      krb5_ccache id,
 | |
| 		      krb5_principal *principal)
 | |
| {
 | |
|   int fd;
 | |
|   char *f;
 | |
|   int16_t tag;
 | |
| 
 | |
|   fd = open(krb5_cc_get_name(context, id), O_RDONLY);
 | |
|   if(fd < 0)
 | |
|     return errno;
 | |
|   ret_int16(fd, &tag);
 | |
|   ret_principal(fd, principal);
 | |
|   close(fd);
 | |
|   return 0;
 | |
| }
 | |
| 
 | |
| krb5_error_code
 | |
| krb5_cc_start_seq_get (krb5_context context,
 | |
| 		       krb5_ccache id,
 | |
| 		       krb5_cc_cursor *cursor)
 | |
| {
 | |
|   int16_t tag;
 | |
|   krb5_principal principal;
 | |
| 
 | |
|   if (id->type != 1)
 | |
|     abort ();
 | |
|   cursor->fd = open (krb5_cc_get_name (context, id), O_RDONLY);
 | |
|   if (cursor->fd < 0)
 | |
|     return errno;
 | |
|   ret_int16 (cursor->fd, &tag);
 | |
|   ret_principal (cursor->fd, &principal);
 | |
|   krb5_free_principal (principal);
 | |
|   return 0;
 | |
| }
 | |
| 
 | |
| krb5_error_code
 | |
| krb5_cc_next_cred (krb5_context context,
 | |
| 		   krb5_ccache id,
 | |
| 		   krb5_creds *creds,
 | |
| 		   krb5_cc_cursor *cursor)
 | |
| {
 | |
|   if (id->type != 1)
 | |
|     abort ();
 | |
|   return krb5_cc_read_cred (cursor->fd, creds);
 | |
| }
 | |
| 
 | |
| krb5_error_code
 | |
| krb5_cc_end_seq_get (krb5_context context,
 | |
| 		     krb5_ccache id,
 | |
| 		     krb5_cc_cursor *cursor)
 | |
| {
 | |
|   if (id->type != 1)
 | |
|     abort ();
 | |
|   return close (cursor->fd);
 | |
| }
 | |
| 
 | |
| krb5_error_code
 | |
| krb5_cc_get_first(krb5_context context,
 | |
| 		  krb5_ccache id,
 | |
| 		  krb5_cc_cursor *cursor)
 | |
| {
 | |
| }
 | |
| 
 | |
| krb5_error_code
 | |
| krb5_cc_get_next(krb5_context context,
 | |
| 		 krb5_ccache id,
 | |
| 		 krb5_creds *creds,
 | |
| 		 krb5_cc_cursor *cursor)
 | |
| {
 | |
| }
 | |
| 
 | |
| krb5_error_code
 | |
| krb5_cc_end_get(krb5_context context,
 | |
| 		krb5_ccache id,
 | |
| 		krb5_cc_cursor *cursor)
 | |
| {
 | |
| }
 | |
| 
 | |
| krb5_error_code
 | |
| krb5_cc_remove_cred(krb5_context context,
 | |
| 		    krb5_ccache id,
 | |
| 		    krb5_flags which,
 | |
| 		    krb5_creds *cred)
 | |
| {
 | |
| }
 | |
| 
 | |
| krb5_error_code
 | |
| krb5_cc_set_flags(krb5_context context,
 | |
| 		  krb5_ccache id,
 | |
| 		  krb5_flags flags)
 | |
| {
 | |
| }
 | |
| 		    
 |