1 /* GDBus - GLib D-Bus Library
3 * Copyright (C) 2008-2010 Red Hat, Inc.
5 * This library is free software; you can redistribute it and/or
6 * modify it under the terms of the GNU Lesser General Public
7 * License as published by the Free Software Foundation; either
8 * version 2 of the License, or (at your option) any later version.
10 * This library is distributed in the hope that it will be useful,
11 * but WITHOUT ANY WARRANTY; without even the implied warranty of
12 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
13 * Lesser General Public License for more details.
15 * You should have received a copy of the GNU Lesser General
16 * Public License along with this library; if not, write to the
17 * Free Software Foundation, Inc., 59 Temple Place, Suite 330,
18 * Boston, MA 02111-1307, USA.
20 * Author: David Zeuthen <davidz@redhat.com>
28 #include <sys/types.h>
36 #include <glib/gstdio.h>
38 #include "gdbusauthmechanismsha1.h"
39 #include "gcredentials.h"
40 #include "gdbuserror.h"
41 #include "gioenumtypes.h"
43 #include "gdbusprivate.h"
47 struct _GDBusAuthMechanismSha1Private
51 GDBusAuthMechanismState state
;
53 /* used on the client side */
56 /* used on the server side */
58 gchar
*server_challenge
;
61 static gint
mechanism_get_priority (void);
62 static const gchar
*mechanism_get_name (void);
64 static gboolean
mechanism_is_supported (GDBusAuthMechanism
*mechanism
);
65 static gchar
*mechanism_encode_data (GDBusAuthMechanism
*mechanism
,
69 static gchar
*mechanism_decode_data (GDBusAuthMechanism
*mechanism
,
73 static GDBusAuthMechanismState
mechanism_server_get_state (GDBusAuthMechanism
*mechanism
);
74 static void mechanism_server_initiate (GDBusAuthMechanism
*mechanism
,
75 const gchar
*initial_response
,
76 gsize initial_response_len
);
77 static void mechanism_server_data_receive (GDBusAuthMechanism
*mechanism
,
80 static gchar
*mechanism_server_data_send (GDBusAuthMechanism
*mechanism
,
82 static gchar
*mechanism_server_get_reject_reason (GDBusAuthMechanism
*mechanism
);
83 static void mechanism_server_shutdown (GDBusAuthMechanism
*mechanism
);
84 static GDBusAuthMechanismState
mechanism_client_get_state (GDBusAuthMechanism
*mechanism
);
85 static gchar
*mechanism_client_initiate (GDBusAuthMechanism
*mechanism
,
86 gsize
*out_initial_response_len
);
87 static void mechanism_client_data_receive (GDBusAuthMechanism
*mechanism
,
90 static gchar
*mechanism_client_data_send (GDBusAuthMechanism
*mechanism
,
92 static void mechanism_client_shutdown (GDBusAuthMechanism
*mechanism
);
94 /* ---------------------------------------------------------------------------------------------------- */
96 G_DEFINE_TYPE_WITH_PRIVATE (GDBusAuthMechanismSha1
, _g_dbus_auth_mechanism_sha1
, G_TYPE_DBUS_AUTH_MECHANISM
)
98 /* ---------------------------------------------------------------------------------------------------- */
101 _g_dbus_auth_mechanism_sha1_finalize (GObject
*object
)
103 GDBusAuthMechanismSha1
*mechanism
= G_DBUS_AUTH_MECHANISM_SHA1 (object
);
105 g_free (mechanism
->priv
->to_send
);
107 g_free (mechanism
->priv
->cookie
);
108 g_free (mechanism
->priv
->server_challenge
);
110 if (G_OBJECT_CLASS (_g_dbus_auth_mechanism_sha1_parent_class
)->finalize
!= NULL
)
111 G_OBJECT_CLASS (_g_dbus_auth_mechanism_sha1_parent_class
)->finalize (object
);
115 _g_dbus_auth_mechanism_sha1_class_init (GDBusAuthMechanismSha1Class
*klass
)
117 GObjectClass
*gobject_class
;
118 GDBusAuthMechanismClass
*mechanism_class
;
120 gobject_class
= G_OBJECT_CLASS (klass
);
121 gobject_class
->finalize
= _g_dbus_auth_mechanism_sha1_finalize
;
123 mechanism_class
= G_DBUS_AUTH_MECHANISM_CLASS (klass
);
124 mechanism_class
->get_priority
= mechanism_get_priority
;
125 mechanism_class
->get_name
= mechanism_get_name
;
126 mechanism_class
->is_supported
= mechanism_is_supported
;
127 mechanism_class
->encode_data
= mechanism_encode_data
;
128 mechanism_class
->decode_data
= mechanism_decode_data
;
129 mechanism_class
->server_get_state
= mechanism_server_get_state
;
130 mechanism_class
->server_initiate
= mechanism_server_initiate
;
131 mechanism_class
->server_data_receive
= mechanism_server_data_receive
;
132 mechanism_class
->server_data_send
= mechanism_server_data_send
;
133 mechanism_class
->server_get_reject_reason
= mechanism_server_get_reject_reason
;
134 mechanism_class
->server_shutdown
= mechanism_server_shutdown
;
135 mechanism_class
->client_get_state
= mechanism_client_get_state
;
136 mechanism_class
->client_initiate
= mechanism_client_initiate
;
137 mechanism_class
->client_data_receive
= mechanism_client_data_receive
;
138 mechanism_class
->client_data_send
= mechanism_client_data_send
;
139 mechanism_class
->client_shutdown
= mechanism_client_shutdown
;
143 _g_dbus_auth_mechanism_sha1_init (GDBusAuthMechanismSha1
*mechanism
)
145 mechanism
->priv
= _g_dbus_auth_mechanism_sha1_get_instance_private (mechanism
);
148 /* ---------------------------------------------------------------------------------------------------- */
151 mechanism_get_priority (void)
157 mechanism_get_name (void)
159 return "DBUS_COOKIE_SHA1";
163 mechanism_is_supported (GDBusAuthMechanism
*mechanism
)
165 g_return_val_if_fail (G_IS_DBUS_AUTH_MECHANISM_SHA1 (mechanism
), FALSE
);
170 mechanism_encode_data (GDBusAuthMechanism
*mechanism
,
180 mechanism_decode_data (GDBusAuthMechanism
*mechanism
,
188 /* ---------------------------------------------------------------------------------------------------- */
194 ret
= g_random_int_range (0, 60);
205 random_ascii_string (guint len
)
210 challenge
= g_string_new (NULL
);
211 for (n
= 0; n
< len
; n
++)
212 g_string_append_c (challenge
, random_ascii ());
213 return g_string_free (challenge
, FALSE
);
217 random_blob (guint len
)
222 challenge
= g_string_new (NULL
);
223 for (n
= 0; n
< len
; n
++)
224 g_string_append_c (challenge
, g_random_int_range (0, 256));
225 return g_string_free (challenge
, FALSE
);
228 /* ---------------------------------------------------------------------------------------------------- */
230 /* ensure keyring dir exists and permissions are correct */
232 ensure_keyring_directory (GError
**error
)
237 g_return_val_if_fail (error
== NULL
|| *error
== NULL
, NULL
);
239 e
= g_getenv ("G_DBUS_COOKIE_SHA1_KEYRING_DIR");
246 path
= g_build_filename (g_get_home_dir (),
251 if (g_file_test (path
, G_FILE_TEST_EXISTS
| G_FILE_TEST_IS_DIR
))
253 if (g_getenv ("G_DBUS_COOKIE_SHA1_KEYRING_DIR_IGNORE_PERMISSION") == NULL
)
257 if (stat (path
, &statbuf
) != 0)
261 g_io_error_from_errno (errno
),
262 _("Error when getting information for directory '%s': %s"),
269 if ((statbuf
.st_mode
& 0777) != 0700)
274 _("Permissions on directory '%s' are malformed. Expected mode 0700, got 0%o"),
276 statbuf
.st_mode
& 0777);
283 #warning Please implement permission checking on this non-UNIX platform
290 if (g_mkdir (path
, 0700) != 0)
294 g_io_error_from_errno (errno
),
295 _("Error creating directory '%s': %s"),
307 /* ---------------------------------------------------------------------------------------------------- */
310 append_nibble (GString
*s
, gint val
)
312 g_string_append_c (s
, val
>= 10 ? ('a' + val
- 10) : ('0' + val
));
316 hexencode (const gchar
*str
,
325 s
= g_string_new (NULL
);
326 for (n
= 0; n
< len
; n
++)
332 val
= ((const guchar
*) str
)[n
];
333 upper_nibble
= val
>> 4;
334 lower_nibble
= val
& 0x0f;
336 append_nibble (s
, upper_nibble
);
337 append_nibble (s
, lower_nibble
);
340 return g_string_free (s
, FALSE
);
343 /* ---------------------------------------------------------------------------------------------------- */
345 /* looks up an entry in the keyring */
347 keyring_lookup_entry (const gchar
*cookie_context
,
358 g_return_val_if_fail (cookie_context
!= NULL
, NULL
);
359 g_return_val_if_fail (error
== NULL
|| *error
== NULL
, NULL
);
366 keyring_dir
= ensure_keyring_directory (error
);
367 if (keyring_dir
== NULL
)
370 path
= g_build_filename (keyring_dir
, cookie_context
, NULL
);
372 if (!g_file_get_contents (path
,
377 g_prefix_error (error
,
378 _("Error opening keyring '%s' for reading: "),
382 g_assert (contents
!= NULL
);
384 lines
= g_strsplit (contents
, "\n", 0);
385 for (n
= 0; lines
[n
] != NULL
; n
++)
387 const gchar
*line
= lines
[n
];
396 tokens
= g_strsplit (line
, " ", 0);
397 if (g_strv_length (tokens
) != 3)
402 _("Line %d of the keyring at '%s' with content '%s' is malformed"),
410 line_id
= g_ascii_strtoll (tokens
[0], &endp
, 10);
416 _("First token of line %d of the keyring at '%s' with content '%s' is malformed"),
424 line_when
= g_ascii_strtoll (tokens
[1], &endp
, 10);
425 line_when
= line_when
; /* To avoid -Wunused-but-set-variable */
431 _("Second token of line %d of the keyring at '%s' with content '%s' is malformed"),
439 if (line_id
== cookie_id
)
442 ret
= tokens
[2]; /* steal pointer */
451 /* BOOH, didn't find the cookie */
455 _("Didn't find cookie with id %d in the keyring at '%s'"),
460 g_free (keyring_dir
);
467 /* function for logging important events that the system administrator should take notice of */
470 _log (const gchar
*message
,
476 va_start (var_args
, message
);
477 s
= g_strdup_vprintf (message
, var_args
);
480 /* TODO: might want to send this to syslog instead */
481 g_printerr ("GDBus-DBUS_COOKIE_SHA1: %s\n", s
);
486 keyring_acquire_lock (const gchar
*path
,
492 guint num_create_tries
;
494 g_return_val_if_fail (path
!= NULL
, FALSE
);
495 g_return_val_if_fail (error
== NULL
|| *error
== NULL
, FALSE
);
498 lock
= g_strdup_printf ("%s.lock", path
);
500 /* This is what the D-Bus spec says
502 * Create a lockfile name by appending ".lock" to the name of the
503 * cookie file. The server should attempt to create this file using
504 * O_CREAT | O_EXCL. If file creation fails, the lock
505 * fails. Servers should retry for a reasonable period of time,
506 * then they may choose to delete an existing lock to keep users
507 * from having to manually delete a stale lock. [1]
509 * [1] : Lockfiles are used instead of real file locking fcntl() because
510 * real locking implementations are still flaky on network filesystems
513 num_create_tries
= 0;
518 while (g_file_test (lock
, G_FILE_TEST_EXISTS
))
520 /* sleep 10ms, then try again */
525 /* ok, we slept 50*10ms = 0.5 seconds. Conclude that the lock file must be
526 * stale (nuke the it from orbit)
528 if (g_unlink (lock
) != 0)
532 g_io_error_from_errno (errno
),
533 _("Error deleting stale lock file '%s': %s"),
538 _log ("Deleted stale lock file '%s'", lock
);
543 ret
= g_open (lock
, O_CREAT
|
553 /* EEXIST: pathname already exists and O_CREAT and O_EXCL were used. */
554 if (errno
== EEXISTS
)
557 if (num_create_tries
< 5)
561 num_create_tries
= num_create_tries
; /* To avoid -Wunused-but-set-variable */
564 g_io_error_from_errno (errno
),
565 _("Error creating lock file '%s': %s"),
577 keyring_release_lock (const gchar
*path
,
584 g_return_val_if_fail (path
!= NULL
, FALSE
);
585 g_return_val_if_fail (lock_fd
!= -1, FALSE
);
586 g_return_val_if_fail (error
== NULL
|| *error
== NULL
, FALSE
);
589 lock
= g_strdup_printf ("%s.lock", path
);
590 if (close (lock_fd
) != 0)
594 g_io_error_from_errno (errno
),
595 _("Error closing (unlinked) lock file '%s': %s"),
600 if (g_unlink (lock
) != 0)
604 g_io_error_from_errno (errno
),
605 _("Error unlinking lock file '%s': %s"),
619 /* adds an entry to the keyring, taking care of locking and deleting stale/future entries */
621 keyring_generate_entry (const gchar
*cookie_context
,
633 GString
*new_contents
;
638 gboolean changed_file
;
641 g_return_val_if_fail (cookie_context
!= NULL
, FALSE
);
642 g_return_val_if_fail (out_id
!= NULL
, FALSE
);
643 g_return_val_if_fail (out_cookie
!= NULL
, FALSE
);
644 g_return_val_if_fail (error
== NULL
|| *error
== NULL
, FALSE
);
656 keyring_dir
= ensure_keyring_directory (error
);
657 if (keyring_dir
== NULL
)
660 path
= g_build_filename (keyring_dir
, cookie_context
, NULL
);
662 lock_fd
= keyring_acquire_lock (path
, error
);
668 if (!g_file_get_contents (path
,
673 if (local_error
->domain
== G_FILE_ERROR
&& local_error
->code
== G_FILE_ERROR_NOENT
)
675 /* file doesn't have to exist */
676 g_error_free (local_error
);
680 g_propagate_prefixed_error (error
,
682 _("Error opening keyring '%s' for writing: "),
688 new_contents
= g_string_new (NULL
);
690 changed_file
= FALSE
;
693 if (contents
!= NULL
)
696 lines
= g_strsplit (contents
, "\n", 0);
697 for (n
= 0; lines
[n
] != NULL
; n
++)
699 const gchar
*line
= lines
[n
];
709 tokens
= g_strsplit (line
, " ", 0);
710 if (g_strv_length (tokens
) != 3)
715 _("Line %d of the keyring at '%s' with content '%s' is malformed"),
723 line_id
= g_ascii_strtoll (tokens
[0], &endp
, 10);
729 _("First token of line %d of the keyring at '%s' with content '%s' is malformed"),
737 line_when
= g_ascii_strtoll (tokens
[1], &endp
, 10);
743 _("Second token of line %d of the keyring at '%s' with content '%s' is malformed"),
750 line_when
= line_when
; /* To avoid -Wunused-but-set-variable */
755 * Once the lockfile has been created, the server loads the
756 * cookie file. It should then delete any cookies that are
757 * old (the timeout can be fairly short), or more than a
758 * reasonable time in the future (so that cookies never
759 * accidentally become permanent, if the clock was set far
760 * into the future at some point). If no recent keys remain,
761 * the server may generate a new key.
767 /* Oddball case: entry is more recent than our current wall-clock time..
768 * This is OK, it means that another server on another machine but with
769 * same $HOME wrote the entry.
771 * So discard the entry if it's more than 1 day in the future ("reasonable
772 * time in the future").
774 if (line_when
- now
> 24*60*60)
777 _log ("Deleted SHA1 cookie from %" G_GUINT64_FORMAT
" seconds in the future", line_when
- now
);
782 /* Discard entry if it's older than 15 minutes ("can be fairly short") */
783 if (now
- line_when
> 15*60)
791 changed_file
= FALSE
;
795 g_string_append_printf (new_contents
,
796 "%d %" G_GUINT64_FORMAT
" %s\n",
800 max_line_id
= MAX (line_id
, max_line_id
);
801 /* Only reuse entry if not older than 10 minutes.
803 * (We need a bit of grace time compared to 15 minutes above.. otherwise
804 * there's a race where we reuse the 14min59.9 secs old entry and a
805 * split-second later another server purges the now 15 minute old entry.)
807 if (now
- line_when
< 10 * 60)
812 use_cookie
= tokens
[2]; /* steal memory */
820 } /* for each line */
827 *out_cookie
= use_cookie
;
833 *out_id
= max_line_id
+ 1;
834 raw_cookie
= random_blob (32);
835 *out_cookie
= hexencode (raw_cookie
, 32);
838 g_string_append_printf (new_contents
,
839 "%d %" G_GUINT64_FORMAT
" %s\n",
841 (guint64
) time (NULL
),
846 /* and now actually write the cookie file if there are changes (this is atomic) */
849 if (!g_file_set_contents (path
,
856 g_free (*out_cookie
);
868 if (!keyring_release_lock (path
, lock_fd
, &local_error
))
874 *error
= local_error
;
878 g_prefix_error (error
,
879 _("(Additionally, releasing the lock for '%s' also failed: %s) "),
881 local_error
->message
);
886 g_error_free (local_error
);
891 g_free (keyring_dir
);
895 if (new_contents
!= NULL
)
896 g_string_free (new_contents
, TRUE
);
901 /* ---------------------------------------------------------------------------------------------------- */
904 generate_sha1 (const gchar
*server_challenge
,
905 const gchar
*client_challenge
,
911 str
= g_string_new (server_challenge
);
912 g_string_append_c (str
, ':');
913 g_string_append (str
, client_challenge
);
914 g_string_append_c (str
, ':');
915 g_string_append (str
, cookie
);
916 sha1
= g_compute_checksum_for_string (G_CHECKSUM_SHA1
, str
->str
, -1);
917 g_string_free (str
, TRUE
);
922 /* ---------------------------------------------------------------------------------------------------- */
924 static GDBusAuthMechanismState
925 mechanism_server_get_state (GDBusAuthMechanism
*mechanism
)
927 GDBusAuthMechanismSha1
*m
= G_DBUS_AUTH_MECHANISM_SHA1 (mechanism
);
929 g_return_val_if_fail (G_IS_DBUS_AUTH_MECHANISM_SHA1 (mechanism
), G_DBUS_AUTH_MECHANISM_STATE_INVALID
);
930 g_return_val_if_fail (m
->priv
->is_server
&& !m
->priv
->is_client
, G_DBUS_AUTH_MECHANISM_STATE_INVALID
);
932 return m
->priv
->state
;
936 mechanism_server_initiate (GDBusAuthMechanism
*mechanism
,
937 const gchar
*initial_response
,
938 gsize initial_response_len
)
940 GDBusAuthMechanismSha1
*m
= G_DBUS_AUTH_MECHANISM_SHA1 (mechanism
);
942 g_return_if_fail (G_IS_DBUS_AUTH_MECHANISM_SHA1 (mechanism
));
943 g_return_if_fail (!m
->priv
->is_server
&& !m
->priv
->is_client
);
945 m
->priv
->is_server
= TRUE
;
946 m
->priv
->state
= G_DBUS_AUTH_MECHANISM_STATE_REJECTED
;
948 if (initial_response
!= NULL
&& strlen (initial_response
) > 0)
954 uid
= g_ascii_strtoll (initial_response
, &endp
, 10);
957 if (uid
== getuid ())
959 m
->priv
->state
= G_DBUS_AUTH_MECHANISM_STATE_HAVE_DATA_TO_SEND
;
962 #elif defined(G_OS_WIN32)
964 sid
= _g_dbus_win32_get_user_sid ();
965 if (g_strcmp0 (initial_response
, sid
) == 0)
966 m
->priv
->state
= G_DBUS_AUTH_MECHANISM_STATE_HAVE_DATA_TO_SEND
;
969 #error Please implement for your OS
975 mechanism_server_data_receive (GDBusAuthMechanism
*mechanism
,
979 GDBusAuthMechanismSha1
*m
= G_DBUS_AUTH_MECHANISM_SHA1 (mechanism
);
981 const gchar
*client_challenge
;
982 const gchar
*alleged_sha1
;
985 g_return_if_fail (G_IS_DBUS_AUTH_MECHANISM_SHA1 (mechanism
));
986 g_return_if_fail (m
->priv
->is_server
&& !m
->priv
->is_client
);
987 g_return_if_fail (m
->priv
->state
== G_DBUS_AUTH_MECHANISM_STATE_WAITING_FOR_DATA
);
992 tokens
= g_strsplit (data
, " ", 0);
993 if (g_strv_length (tokens
) != 2)
995 g_warning ("Malformed data '%s'", data
);
996 m
->priv
->state
= G_DBUS_AUTH_MECHANISM_STATE_REJECTED
;
1000 client_challenge
= tokens
[0];
1001 alleged_sha1
= tokens
[1];
1003 sha1
= generate_sha1 (m
->priv
->server_challenge
, client_challenge
, m
->priv
->cookie
);
1005 if (g_strcmp0 (sha1
, alleged_sha1
) == 0)
1007 m
->priv
->state
= G_DBUS_AUTH_MECHANISM_STATE_ACCEPTED
;
1011 m
->priv
->state
= G_DBUS_AUTH_MECHANISM_STATE_REJECTED
;
1015 g_strfreev (tokens
);
1020 mechanism_server_data_send (GDBusAuthMechanism
*mechanism
,
1021 gsize
*out_data_len
)
1023 GDBusAuthMechanismSha1
*m
= G_DBUS_AUTH_MECHANISM_SHA1 (mechanism
);
1026 const gchar
*cookie_context
;
1029 g_return_val_if_fail (G_IS_DBUS_AUTH_MECHANISM_SHA1 (mechanism
), NULL
);
1030 g_return_val_if_fail (m
->priv
->is_server
&& !m
->priv
->is_client
, NULL
);
1031 g_return_val_if_fail (m
->priv
->state
== G_DBUS_AUTH_MECHANISM_STATE_HAVE_DATA_TO_SEND
, NULL
);
1035 /* TODO: use GDBusAuthObserver here to get the cookie context to use? */
1036 cookie_context
= "org_gtk_gdbus_general";
1040 if (!keyring_generate_entry (cookie_context
,
1045 g_warning ("Error adding entry to keyring: %s", error
->message
);
1046 g_error_free (error
);
1047 m
->priv
->state
= G_DBUS_AUTH_MECHANISM_STATE_REJECTED
;
1051 m
->priv
->server_challenge
= random_ascii_string (16);
1052 s
= g_strdup_printf ("%s %d %s",
1055 m
->priv
->server_challenge
);
1057 m
->priv
->state
= G_DBUS_AUTH_MECHANISM_STATE_WAITING_FOR_DATA
;
1064 mechanism_server_get_reject_reason (GDBusAuthMechanism
*mechanism
)
1066 GDBusAuthMechanismSha1
*m
= G_DBUS_AUTH_MECHANISM_SHA1 (mechanism
);
1068 g_return_val_if_fail (G_IS_DBUS_AUTH_MECHANISM_SHA1 (mechanism
), NULL
);
1069 g_return_val_if_fail (m
->priv
->is_server
&& !m
->priv
->is_client
, NULL
);
1070 g_return_val_if_fail (m
->priv
->state
== G_DBUS_AUTH_MECHANISM_STATE_REJECTED
, NULL
);
1072 /* can never end up here because we are never in the REJECTED state */
1073 g_assert_not_reached ();
1079 mechanism_server_shutdown (GDBusAuthMechanism
*mechanism
)
1081 GDBusAuthMechanismSha1
*m
= G_DBUS_AUTH_MECHANISM_SHA1 (mechanism
);
1083 g_return_if_fail (G_IS_DBUS_AUTH_MECHANISM_SHA1 (mechanism
));
1084 g_return_if_fail (m
->priv
->is_server
&& !m
->priv
->is_client
);
1086 m
->priv
->is_server
= FALSE
;
1089 /* ---------------------------------------------------------------------------------------------------- */
1091 static GDBusAuthMechanismState
1092 mechanism_client_get_state (GDBusAuthMechanism
*mechanism
)
1094 GDBusAuthMechanismSha1
*m
= G_DBUS_AUTH_MECHANISM_SHA1 (mechanism
);
1096 g_return_val_if_fail (G_IS_DBUS_AUTH_MECHANISM_SHA1 (mechanism
), G_DBUS_AUTH_MECHANISM_STATE_INVALID
);
1097 g_return_val_if_fail (m
->priv
->is_client
&& !m
->priv
->is_server
, G_DBUS_AUTH_MECHANISM_STATE_INVALID
);
1099 return m
->priv
->state
;
1103 mechanism_client_initiate (GDBusAuthMechanism
*mechanism
,
1104 gsize
*out_initial_response_len
)
1106 GDBusAuthMechanismSha1
*m
= G_DBUS_AUTH_MECHANISM_SHA1 (mechanism
);
1107 gchar
*initial_response
;
1109 g_return_val_if_fail (G_IS_DBUS_AUTH_MECHANISM_SHA1 (mechanism
), NULL
);
1110 g_return_val_if_fail (!m
->priv
->is_server
&& !m
->priv
->is_client
, NULL
);
1112 m
->priv
->is_client
= TRUE
;
1113 m
->priv
->state
= G_DBUS_AUTH_MECHANISM_STATE_WAITING_FOR_DATA
;
1115 *out_initial_response_len
= -1;
1118 initial_response
= g_strdup_printf ("%" G_GINT64_FORMAT
, (gint64
) getuid ());
1119 #elif defined (G_OS_WIN32)
1120 initial_response
= _g_dbus_win32_get_user_sid ();
1122 #error Please implement for your OS
1124 g_assert (initial_response
!= NULL
);
1126 return initial_response
;
1130 mechanism_client_data_receive (GDBusAuthMechanism
*mechanism
,
1134 GDBusAuthMechanismSha1
*m
= G_DBUS_AUTH_MECHANISM_SHA1 (mechanism
);
1136 const gchar
*cookie_context
;
1138 const gchar
*server_challenge
;
1139 gchar
*client_challenge
;
1145 g_return_if_fail (G_IS_DBUS_AUTH_MECHANISM_SHA1 (mechanism
));
1146 g_return_if_fail (m
->priv
->is_client
&& !m
->priv
->is_server
);
1147 g_return_if_fail (m
->priv
->state
== G_DBUS_AUTH_MECHANISM_STATE_WAITING_FOR_DATA
);
1151 client_challenge
= NULL
;
1153 tokens
= g_strsplit (data
, " ", 0);
1154 if (g_strv_length (tokens
) != 3)
1156 g_warning ("Malformed data '%s'", data
);
1157 m
->priv
->state
= G_DBUS_AUTH_MECHANISM_STATE_REJECTED
;
1161 cookie_context
= tokens
[0];
1162 cookie_id
= g_ascii_strtoll (tokens
[1], &endp
, 10);
1165 g_warning ("Malformed cookie_id '%s'", tokens
[1]);
1166 m
->priv
->state
= G_DBUS_AUTH_MECHANISM_STATE_REJECTED
;
1169 server_challenge
= tokens
[2];
1172 cookie
= keyring_lookup_entry (cookie_context
, cookie_id
, &error
);
1175 g_warning ("Problems looking up entry in keyring: %s", error
->message
);
1176 g_error_free (error
);
1177 m
->priv
->state
= G_DBUS_AUTH_MECHANISM_STATE_REJECTED
;
1181 client_challenge
= random_ascii_string (16);
1182 sha1
= generate_sha1 (server_challenge
, client_challenge
, cookie
);
1183 m
->priv
->to_send
= g_strdup_printf ("%s %s", client_challenge
, sha1
);
1185 m
->priv
->state
= G_DBUS_AUTH_MECHANISM_STATE_HAVE_DATA_TO_SEND
;
1188 g_strfreev (tokens
);
1190 g_free (client_challenge
);
1194 mechanism_client_data_send (GDBusAuthMechanism
*mechanism
,
1195 gsize
*out_data_len
)
1197 GDBusAuthMechanismSha1
*m
= G_DBUS_AUTH_MECHANISM_SHA1 (mechanism
);
1199 g_return_val_if_fail (G_IS_DBUS_AUTH_MECHANISM_SHA1 (mechanism
), NULL
);
1200 g_return_val_if_fail (m
->priv
->is_client
&& !m
->priv
->is_server
, NULL
);
1201 g_return_val_if_fail (m
->priv
->state
== G_DBUS_AUTH_MECHANISM_STATE_HAVE_DATA_TO_SEND
, NULL
);
1203 g_assert (m
->priv
->to_send
!= NULL
);
1205 m
->priv
->state
= G_DBUS_AUTH_MECHANISM_STATE_ACCEPTED
;
1207 return g_strdup (m
->priv
->to_send
);
1211 mechanism_client_shutdown (GDBusAuthMechanism
*mechanism
)
1213 GDBusAuthMechanismSha1
*m
= G_DBUS_AUTH_MECHANISM_SHA1 (mechanism
);
1215 g_return_if_fail (G_IS_DBUS_AUTH_MECHANISM_SHA1 (mechanism
));
1216 g_return_if_fail (m
->priv
->is_client
&& !m
->priv
->is_server
);
1218 m
->priv
->is_client
= FALSE
;
1221 /* ---------------------------------------------------------------------------------------------------- */