fad81ed299
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@1107 ec53bebd-3082-4978-b11e-865c3cabbd6b
61 lines
1.6 KiB
C
61 lines
1.6 KiB
C
#include <krb5_locl.h>
|
|
#include <krb5_error.h>
|
|
|
|
krb5_error_code
|
|
krb5_build_ap_req (krb5_context context,
|
|
krb5_creds *cred,
|
|
krb5_flags ap_options,
|
|
krb5_data authenticator,
|
|
krb5_data *ret)
|
|
{
|
|
AP_REQ ap;
|
|
Ticket t;
|
|
des_cblock key;
|
|
des_key_schedule schedule;
|
|
u_int32_t crc;
|
|
unsigned char *p;
|
|
unsigned char buf[1024];
|
|
|
|
ap.pvno = 5;
|
|
ap.msg_type = krb_ap_req;
|
|
memset(&ap.ap_options, 0, sizeof(ap.ap_options));
|
|
if (ap_options & AP_OPTS_USE_SESSION_KEY)
|
|
ap.ap_options.use_session_key = 1;
|
|
if (ap_options & AP_OPTS_MUTUAL_REQUIRED)
|
|
ap.ap_options.mutual_required = 1;
|
|
|
|
ap.ticket.tkt_vno = 5;
|
|
ap.ticket.realm = malloc(cred->server->realm.length + 1);
|
|
strncpy(ap.ticket.realm, cred->server->realm.data,
|
|
cred->server->realm.length);
|
|
ap.ticket.realm[cred->server->realm.length] = '\0';
|
|
krb5_principal2principalname(&ap.ticket.sname, cred->server);
|
|
|
|
decode_Ticket(cred->ticket.data, cred->ticket.length, &t);
|
|
|
|
ap.ticket.enc_part.etype = t.enc_part.etype;
|
|
ap.ticket.enc_part.kvno = NULL;
|
|
ap.ticket.enc_part.cipher = t.enc_part.cipher;
|
|
|
|
memcpy(&key, cred->session.contents.data, sizeof(key));
|
|
des_set_key (&key, schedule);
|
|
|
|
/* authenticator */
|
|
|
|
des_cbc_encrypt (authenticator.data,
|
|
authenticator.data,
|
|
authenticator.length,
|
|
schedule, &key, DES_ENCRYPT);
|
|
|
|
ap.authenticator.etype = ap.ticket.enc_part.etype;
|
|
ap.authenticator.kvno = NULL;
|
|
ap.authenticator.cipher = authenticator;
|
|
|
|
ret->length = encode_AP_REQ(buf + sizeof(buf) - 1, sizeof(buf), &ap);
|
|
|
|
ret->data = malloc(ret->length);
|
|
memcpy (ret->data, buf + sizeof(buf) - ret->length, ret->length);
|
|
|
|
return 0;
|
|
}
|