2 * Copyright (c) 1997-2007 Kungliga Tekniska Högskolan
3 * (Royal Institute of Technology, Stockholm, Sweden).
6 * Redistribution and use in source and binary forms, with or without
7 * modification, are permitted provided that the following conditions
10 * 1. Redistributions of source code must retain the above copyright
11 * notice, this list of conditions and the following disclaimer.
13 * 2. Redistributions in binary form must reproduce the above copyright
14 * notice, this list of conditions and the following disclaimer in the
15 * documentation and/or other materials provided with the distribution.
17 * 3. Neither the name of the Institute nor the names of its contributors
18 * may be used to endorse or promote products derived from this software
19 * without specific prior written permission.
21 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
24 * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
34 #include "krb5_locl.h"
39 * See `sendauth.c' for the format.
43 match_exact(const void *data
, const char *appl_version
)
45 return strcmp(data
, appl_version
) == 0;
48 krb5_error_code KRB5_LIB_FUNCTION
49 krb5_recvauth(krb5_context context
,
50 krb5_auth_context
*auth_context
,
52 const char *appl_version
,
53 krb5_principal server
,
58 return krb5_recvauth_match_version(context
, auth_context
, p_fd
,
59 match_exact
, appl_version
,
64 krb5_error_code KRB5_LIB_FUNCTION
65 krb5_recvauth_match_version(krb5_context context
,
66 krb5_auth_context
*auth_context
,
68 krb5_boolean (*match_appl_version
)(const void *,
70 const void *match_data
,
71 krb5_principal server
,
77 const char *version
= KRB5_SENDAUTH_VERSION
;
78 char her_version
[sizeof(KRB5_SENDAUTH_VERSION
)];
79 char *her_appl_version
;
83 krb5_flags ap_options
;
87 * If there are no addresses in auth_context, get them from `fd'.
90 if (*auth_context
== NULL
) {
91 ret
= krb5_auth_con_init (context
, auth_context
);
96 ret
= krb5_auth_con_setaddrs_from_fd (context
,
102 if(!(flags
& KRB5_RECVAUTH_IGNORE_VERSION
)) {
103 n
= krb5_net_read (context
, p_fd
, &len
, 4);
106 krb5_set_error_string (context
, "read: %s", strerror(errno
));
110 krb5_set_error_string (context
, "Failed to receive sendauth data");
111 return KRB5_SENDAUTH_BADAUTHVERS
;
114 if (len
!= sizeof(her_version
)
115 || krb5_net_read (context
, p_fd
, her_version
, len
) != len
116 || strncmp (version
, her_version
, len
)) {
118 krb5_net_write (context
, p_fd
, &repl
, 1);
119 krb5_clear_error_string (context
);
120 return KRB5_SENDAUTH_BADAUTHVERS
;
124 n
= krb5_net_read (context
, p_fd
, &len
, 4);
127 krb5_set_error_string (context
, "read: %s", strerror(errno
));
131 krb5_clear_error_string (context
);
132 return KRB5_SENDAUTH_BADAPPLVERS
;
135 her_appl_version
= malloc (len
);
136 if (her_appl_version
== NULL
) {
138 krb5_net_write (context
, p_fd
, &repl
, 1);
139 krb5_set_error_string (context
, "malloc: out of memory");
142 if (krb5_net_read (context
, p_fd
, her_appl_version
, len
) != len
143 || !(*match_appl_version
)(match_data
, her_appl_version
)) {
145 krb5_net_write (context
, p_fd
, &repl
, 1);
146 krb5_set_error_string (context
, "wrong sendauth version (%s)",
148 free (her_appl_version
);
149 return KRB5_SENDAUTH_BADAPPLVERS
;
151 free (her_appl_version
);
154 if (krb5_net_write (context
, p_fd
, &repl
, 1) != 1) {
156 krb5_set_error_string (context
, "write: %s", strerror(errno
));
160 krb5_data_zero (&data
);
161 ret
= krb5_read_message (context
, p_fd
, &data
);
165 ret
= krb5_rd_req (context
,
172 krb5_data_free (&data
);
174 krb5_data error_data
;
175 krb5_error_code ret2
;
177 ret2
= krb5_mk_error (context
,
187 krb5_write_message (context
, p_fd
, &error_data
);
188 krb5_data_free (&error_data
);
194 if (krb5_net_write (context
, p_fd
, &len
, 4) != 4) {
196 krb5_set_error_string (context
, "write: %s", strerror(errno
));
200 if (ap_options
& AP_OPTS_MUTUAL_REQUIRED
) {
201 ret
= krb5_mk_rep (context
, *auth_context
, &data
);
205 ret
= krb5_write_message (context
, p_fd
, &data
);
208 krb5_data_free (&data
);