*** empty log message ***

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@232 dc483132-0cff-0310-8789-dd5450dbe970

diff --git a/src/kdc/dispatch.c b/src/kdc/dispatch.c
new file mode 100644 (file)
index 0000000..7393b54
--- /dev/null
+++ b/src/kdc/dispatch.c
@@ -0,0 +1,60 @@
+/*
+ * $Source$
+ * $Author$
+ *
+ * Copyright 1990 by the Massachusetts Institute of Technology.
+ *
+ * For copying and distribution information, please see the file
+ * <krb5/mit-copyright.h>.
+ *
+ * Dispatch an incoming packet.
+ */
+
+#if !defined(lint) && !defined(SABER)
+static char rcsid_dispatch_c[] =
+"$Id$";
+#endif /* !lint & !SABER */
+
+#include <krb5/copyright.h>
+#include <krb5/krb5.h>
+#include <krb5/asn1.h>
+#include <krb5/krb5_err.h>
+#include <krb5/isode_err.h>
+
+krb5_error_code
+dispatch(pkt, response)
+krb5_data *pkt;
+krb5_data **response;
+{
+
+    krb5_error_code retval;
+    krb5_as_req *as_req;
+    krb5_tgs_req *tgs_req;
+
+    /* decode incoming packet, and dispatch */
+    if (pkt->data[0] == 4)             /* XXX old version */
+       return(process_v4(pkt));
+
+    /* try TGS_REQ first; they are more common! */
+
+    retval = decode_krb5_tgs_req(pkt, &tgs_req);
+    switch (retval) {
+    case ISODE_50_LOCAL_ERR_BADDECODE:
+       retval = decode_krb5_as_req(pkt, &as_req);
+       switch (retval) {
+       case 0:
+           retval = process_as_req(as_req, response);
+           krb5_free_as_req(as_req);
+           break;
+       default:
+           return(retval);
+       }
+    case 0:
+       /* it's now decoded, but still has an encrypted part to work on */
+       if (!(retval = decrypt_tgs_req(tgs_req)))
+           retval = process_tgs_req(tgs_req, response);
+       krb5_free_tgs_req(tgs_req);
+       break;
+    }
+    return retval;
+}

diff --git a/src/kdc/kdc_util.c b/src/kdc/kdc_util.c
new file mode 100644 (file)
index 0000000..1b872e8
--- /dev/null
+++ b/src/kdc/kdc_util.c
@@ -0,0 +1,142 @@
+/*
+ * $Source$
+ * $Author$
+ *
+ * Copyright 1990 by the Massachusetts Institute of Technology.
+ *
+ * For copying and distribution information, please see the file
+ * <krb5/mit-copyright.h>.
+ *
+ * Utility functions for the KDC implementation.
+ */
+
+#if !defined(lint) && !defined(SABER)
+static char rcsid_kdc_util_c[] =
+"$Id$";
+#endif /* !lint & !SABER */
+
+#include <krb5/copyright.h>
+#include <krb5/krb5.h>
+#include <krb5/kdb.h>
+#include <krb5/krb5_err.h>
+
+#include "kdc_util.h"
+
+#include <errno.h>
+#include <krb5/ext-proto.h>
+
+extern krb5_cs_table_entry *csarray[];
+extern int max_cryptosystem;           /* max entry in array */
+
+/*
+ * concatenate first two authdata arrays, returning an allocated replacement.
+ * The replacement should be freed with krb5_free_authdata().
+ */
+krb5_error_code
+concat_authorization_data(first, second, output)
+krb5_authdata **first;
+krb5_authdata **second;
+krb5_authdata ***output;
+{
+    register int i, j;
+    register krb5_authdata **ptr, **retdata;
+
+    /* count up the entries */
+    for (i = 0, ptr = first; *ptr; ptr++,i++);
+    for (ptr = second; *ptr; ptr++,i++);
+    
+    retdata = (krb5_authdata **)malloc((i+1)*sizeof(*retdata));
+    if (!retdata)
+       return ENOMEM;
+    retdata[i] = 0;                    /* null-terminated array */
+    for (i = 0, j = 0, ptr = first; j < 2 ; ptr = second, j++)
+       while (*ptr) {
+           /* now walk & copy */
+           retdata[i] = (krb5_authdata *)malloc(sizeof(*retdata[i]));
+           if (!retdata[i]) {
+               /* XXX clean up */
+               return ENOMEM;
+           }
+           *retdata[i] = **ptr;
+           if (!(retdata[i]->contents =
+                 (krb5_octet *)malloc(retdata[i]->length))) {
+               /* XXX clean up */
+               return ENOMEM;
+           }
+           bcopy((char *)(*ptr)->contents, (char *) retdata[i]->contents,
+                 retdata[i]->length);
+
+           ptr++;
+           i++;
+       }
+    *output = retdata;
+    return 0;
+}
+
+krb5_boolean
+realm_compare(realmname, princ)
+krb5_data *realmname;
+krb5_principal princ;
+{
+    return(strncmp(realmname->data, princ[0]->data,
+                  min(realmname->length, princ[0]->length)) ? FALSE : TRUE);
+}
+
+krb5_error_code
+decrypt_tgs_req(tgs_req)
+krb5_tgs_req *tgs_req;
+{
+    krb5_error_code retval;
+    krb5_data scratch;
+    krb5_encrypt_block eblock;
+    krb5_tgs_req_enc_part *local_encpart;
+
+    /* parse the request using krb5_rd_req, somehow munging the header
+       into its input form. */
+    if (tgs_req->enc_part.length) {
+       /* decrypt encrypted part, attach to enc_part2 */
+
+       if (!valid_etype(tgs_req->etype)) /* XXX wrong etype to use? */
+           return KRB5KDC_ERR_ETYPE_NOSUPP;
+
+       scratch.length = tgs_req->enc_part.length;
+       if (!(scratch.data = malloc(tgs_req->enc_part.length))) {
+           return(ENOMEM);
+       }
+       /* put together an eblock for this encryption */
+
+       eblock.crypto_entry = csarray[tgs_req->etype]->system; /* XXX */
+       /* do any necessary key pre-processing */
+       if (retval = (*eblock.crypto_entry->process_key)(&eblock,
+                                                        tgs_req->header->ticket->enc_part2->session)) {
+           free(scratch.data);
+           return(retval);
+       }
+
+       /* call the encryption routine */
+       if (retval =
+           (*eblock.crypto_entry->decrypt_func)((krb5_pointer) tgs_req->enc_part.data,
+                                                (krb5_pointer) scratch.data,
+                                                scratch.length, &eblock)) {
+           (void) (*eblock.crypto_entry->finish_key)(&eblock);
+           free(scratch.data);
+           return retval;
+       }
+
+#define clean_scratch() {bzero(scratch.data, scratch.length); free(scratch.data);}
+
+       if (retval = (*eblock.crypto_entry->finish_key)(&eblock)) {
+           clean_scratch();
+           return retval;
+       }
+       if (retval = decode_krb5_tgs_req_enc_part(&scratch, &local_encpart)) {
+           clean_scratch();
+           return retval;
+       }
+       clean_scratch();
+#undef clean_scratch
+
+       tgs_req->enc_part2 = local_encpart;
+    }
+    return 0;
+}