2 * Copyright (c) 2007 Kungliga Tekniska Högskolan
3 * (Royal Institute of Technology, Stockholm, Sweden).
6 * Redistribution and use in source and binary forms, with or without
7 * modification, are permitted provided that the following conditions
10 * 1. Redistributions of source code must retain the above copyright
11 * notice, this list of conditions and the following disclaimer.
13 * 2. Redistributions in binary form must reproduce the above copyright
14 * notice, this list of conditions and the following disclaimer in the
15 * documentation and/or other materials provided with the distribution.
17 * 3. Neither the name of the Institute nor the names of its contributors
18 * may be used to endorse or promote products derived from this software
19 * without specific prior written permission.
21 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
24 * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
38 static int version_flag
;
41 struct getargs args
[] = {
42 { "version", 0, arg_flag
, &version_flag
},
43 { "help", 'h', arg_flag
, &help_flag
}
46 const static int num_args
= sizeof(args
) / sizeof(args
[0]);
51 arg_printusage (args
, num_args
, NULL
, "kdc-request-log-file");
56 main(int argc
, char **argv
)
60 krb5_kdc_configuration
*config
;
66 if(getarg(args
, num_args
, argc
, argv
, &optidx
))
77 ret
= krb5_init_context(&context
);
79 errx (1, "krb5_init_context failed to parse configuration file");
81 ret
= krb5_kdc_get_config(context
, &config
);
83 krb5_err(context
, 1, ret
, "krb5_kdc_default_config");
85 kdc_openlog(context
, "kdc-replay", config
);
87 ret
= krb5_kdc_set_dbinfo(context
, config
);
89 krb5_err(context
, 1, ret
, "krb5_kdc_set_dbinfo");
91 if (config
->enable_pkinit
) {
92 if (config
->pkinit_kdc_identity
== NULL
)
93 krb5_errx(context
, 1, "pkinit enabled but no identity");
95 if (config
->pkinit_kdc_anchors
== NULL
)
96 krb5_errx(context
, 1, "pkinit enabled but no X509 anchors");
98 _kdc_pk_initialize(context
, config
,
99 config
->pkinit_kdc_identity
,
100 config
->pkinit_kdc_anchors
,
101 config
->pkinit_kdc_cert_pool
,
102 config
->pkinit_kdc_revoke
);
107 errx(1, "argc != 2");
109 printf("kdc replay\n");
111 fd
= open(argv
[1], O_RDONLY
);
113 err(1, "open: %s", argv
[1]);
115 sp
= krb5_storage_from_fd(fd
);
117 krb5_errx(context
, 1, "krb5_storage_from_fd");
120 struct sockaddr_storage sa
;
121 krb5_socklen_t salen
= sizeof(sa
);
125 uint32_t t
, clty
, tag
;
128 ret
= krb5_ret_uint32(sp
, &t
);
129 if (ret
== HEIM_ERR_EOF
)
132 krb5_errx(context
, 1, "krb5_ret_uint32(version)");
134 krb5_errx(context
, 1, "version not 1");
135 ret
= krb5_ret_uint32(sp
, &t
);
137 krb5_errx(context
, 1, "krb5_ret_uint32(time)");
138 ret
= krb5_ret_address(sp
, &a
);
140 krb5_errx(context
, 1, "krb5_ret_address");
141 ret
= krb5_ret_data(sp
, &d
);
143 krb5_errx(context
, 1, "krb5_ret_data");
144 ret
= krb5_ret_uint32(sp
, &clty
);
146 krb5_errx(context
, 1, "krb5_ret_uint32(class|type)");
147 ret
= krb5_ret_uint32(sp
, &tag
);
149 krb5_errx(context
, 1, "krb5_ret_uint32(tag)");
152 ret
= krb5_addr2sockaddr (context
, &a
, (struct sockaddr
*)&sa
,
154 if (ret
== KRB5_PROG_ATYPE_NOSUPP
)
157 krb5_err(context
, 1, ret
, "krb5_addr2sockaddr");
159 ret
= krb5_print_address(&a
, astr
, sizeof(astr
), NULL
);
161 krb5_err(context
, 1, ret
, "krb5_print_address");
163 printf("processing request from %s, %lu bytes\n",
164 astr
, (unsigned long)d
.length
);
172 krb5_kdc_update_time(&tv
);
173 krb5_set_real_time(context
, tv
.tv_sec
, 0);
175 ret
= krb5_kdc_process_request(context
, config
, d
.data
, d
.length
,
177 (struct sockaddr
*)&sa
, 0);
179 krb5_err(context
, 1, ret
, "krb5_kdc_process_request");
185 ret
= der_get_tag (r
.data
, r
.length
,
186 &cl
, &ty
, &tag2
, NULL
);
187 if (MAKE_TAG(cl
, ty
, 0) != clty
)
188 krb5_errx(context
, 1, "class|type mismatch: %d != %d",
189 (int)MAKE_TAG(cl
, ty
, 0), (int)clty
);
191 krb5_errx(context
, 1, "tag mismatch");
195 if (clty
!= 0xffffffff)
196 krb5_errx(context
, 1, "clty not invalid");
197 if (tag
!= 0xffffffff)
198 krb5_errx(context
, 1, "tag not invalid");
203 krb5_free_address(context
, &a
);
206 krb5_storage_free(sp
);
207 krb5_free_context(context
);