appl/test/uu_server.c

   1 /*
   2  * Copyright (c) 1997 - 2000, 2007 Kungliga Tekniska Högskolan
   3  * (Royal Institute of Technology, Stockholm, Sweden).
   4  * All rights reserved.
   5  *
   6  * Redistribution and use in source and binary forms, with or without
   7  * modification, are permitted provided that the following conditions
   8  * are met:
   9  *
  10  * 1. Redistributions of source code must retain the above copyright
  11  *    notice, this list of conditions and the following disclaimer.
  12  *
  13  * 2. Redistributions in binary form must reproduce the above copyright
  14  *    notice, this list of conditions and the following disclaimer in the
  15  *    documentation and/or other materials provided with the distribution.
  16  *
  17  * 3. Neither the name of the Institute nor the names of its contributors
  18  *    may be used to endorse or promote products derived from this software
  19  *    without specific prior written permission.
  20  *
  21  * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
  22  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  23  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  24  * ARE DISCLAIMED.  IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
  25  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  26  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  27  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  28  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  29  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  30  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  31  * SUCH DAMAGE.
  32  */
  33
  34 #include "test_locl.h"
  35 RCSID("$Id$");
  36
  37 krb5_context context;
  38
  39 static int
  40 proto (int sock, const char *service)
  41 {
  42     struct sockaddr_storage remote, local;
  43     socklen_t addrlen;
  44     krb5_address remote_addr, local_addr;
  45     krb5_ccache ccache;
  46     krb5_auth_context auth_context;
  47     krb5_error_code status;
  48     krb5_data packet;
  49     krb5_data data;
  50     krb5_data client_name;
  51     krb5_creds in_creds, *out_creds;
  52
  53     addrlen = sizeof(local);
  54     if (getsockname (sock, (struct sockaddr *)&local, &addrlen) < 0
  55         || addrlen > sizeof(local))
  56         err (1, "getsockname)");
  57
  58     addrlen = sizeof(remote);
  59     if (getpeername (sock, (struct sockaddr *)&remote, &addrlen) < 0
  60         || addrlen > sizeof(remote))
  61         err (1, "getpeername");
  62
  63     status = krb5_auth_con_init (context, &auth_context);
  64     if (status)
  65         krb5_err(context, 1, status, "krb5_auth_con_init");
  66
  67     status = krb5_sockaddr2address (context, (struct sockaddr *)&local, &local_addr);
  68     if (status)
  69         krb5_err(context, 1, status, "krb5_sockaddr2address(local)");
  70     status = krb5_sockaddr2address (context, (struct sockaddr *)&remote, &remote_addr);
  71     if (status)
  72         krb5_err(context, 1, status, "krb5_sockaddr2address(remote)");
  73
  74     status = krb5_auth_con_setaddrs (context,
  75                                      auth_context,
  76                                      &local_addr,
  77                                      &remote_addr);
  78     if (status)
  79         krb5_err(context, 1, status, "krb5_auth_con_setaddr");
  80
  81     status = krb5_read_message(context, &sock, &client_name);
  82     if(status)
  83         krb5_err(context, 1, status, "krb5_read_message");
  84
  85     memset(&in_creds, 0, sizeof(in_creds));
  86     status = krb5_cc_default(context, &ccache);
  87     if(status)
  88         krb5_err(context, 1, status, "krb5_cc_default");
  89     status = krb5_cc_get_principal(context, ccache, &in_creds.client);
  90     if(status)
  91         krb5_err(context, 1, status, "krb5_cc_get_principal");
  92
  93     status = krb5_read_message(context, &sock, &in_creds.second_ticket);
  94     if(status)
  95         krb5_err(context, 1, status, "krb5_read_message");
  96
  97     status = krb5_parse_name(context, client_name.data, &in_creds.server);
  98     if(status)
  99         krb5_err(context, 1, status, "krb5_parse_name");
 100
 101     status = krb5_get_credentials(context, KRB5_GC_USER_USER, ccache,
 102                                   &in_creds, &out_creds);
 103     if(status)
 104         krb5_err(context, 1, status, "krb5_get_credentials");
 105
 106     status = krb5_cc_default(context, &ccache);
 107     if(status)
 108         krb5_err(context, 1, status, "krb5_cc_default");
 109
 110     status = krb5_sendauth(context,
 111                            &auth_context,
 112                            &sock,
 113                            VERSION,
 114                            in_creds.client,
 115                            in_creds.server,
 116                            AP_OPTS_USE_SESSION_KEY,
 117                            NULL,
 118                            out_creds,
 119                            ccache,
 120                            NULL,
 121                            NULL,
 122                            NULL);
 123
 124     if (status)
 125         krb5_err(context, 1, status, "krb5_sendauth");
 126
 127     {
 128         char *str;
 129         krb5_unparse_name(context, in_creds.server, &str);
 130         printf ("User is `%s'\n", str);
 131         free(str);
 132         krb5_unparse_name(context, in_creds.client, &str);
 133         printf ("Server is `%s'\n", str);
 134         free(str);
 135     }
 136
 137     krb5_data_zero (&data);
 138     krb5_data_zero (&packet);
 139
 140     status = krb5_read_message(context, &sock, &packet);
 141     if(status)
 142         krb5_err(context, 1, status, "krb5_read_message");
 143
 144     status = krb5_rd_safe (context,
 145                            auth_context,
 146                            &packet,
 147                            &data,
 148                            NULL);
 149     if (status)
 150         krb5_err(context, 1, status, "krb5_rd_safe");
 151
 152     printf ("safe packet: %.*s\n", (int)data.length,
 153             (char *)data.data);
 154
 155     status = krb5_read_message(context, &sock, &packet);
 156     if(status)
 157         krb5_err(context, 1, status, "krb5_read_message");
 158
 159     status = krb5_rd_priv (context,
 160                            auth_context,
 161                            &packet,
 162                            &data,
 163                            NULL);
 164     if (status)
 165         krb5_err(context, 1, status, "krb5_rd_priv");
 166
 167     printf ("priv packet: %.*s\n", (int)data.length,
 168             (char *)data.data);
 169
 170     return 0;
 171 }
 172
 173 static int
 174 doit (int port, const char *service)
 175 {
 176     rk_socket_t sock;
 177
 178     mini_inetd(port, &sock);
 179
 180     return proto(sock, service);
 181 }
 182
 183 int
 184 main(int argc, char **argv)
 185 {
 186     int port = server_setup(&context, argc, argv);
 187     return doit (port, service);
 188 }