1 /* $NetBSD: build_auth.c,v 1.1.1.2 2014/04/24 12:45:49 pettai Exp $ */
4 * Copyright (c) 1997 - 2003 Kungliga Tekniska Högskolan
5 * (Royal Institute of Technology, Stockholm, Sweden).
8 * Redistribution and use in source and binary forms, with or without
9 * modification, are permitted provided that the following conditions
12 * 1. Redistributions of source code must retain the above copyright
13 * notice, this list of conditions and the following disclaimer.
15 * 2. Redistributions in binary form must reproduce the above copyright
16 * notice, this list of conditions and the following disclaimer in the
17 * documentation and/or other materials provided with the distribution.
19 * 3. Neither the name of the Institute nor the names of its contributors
20 * may be used to endorse or promote products derived from this software
21 * without specific prior written permission.
23 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
24 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
25 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
26 * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
27 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
28 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
29 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
30 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
31 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
32 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
36 #include "krb5_locl.h"
38 static krb5_error_code
39 make_etypelist(krb5_context context
,
40 krb5_authdata
**auth_data
)
49 ret
= _krb5_init_etype(context
, KRB5_PDU_NONE
,
50 &etypes
.len
, &etypes
.val
,
55 ASN1_MALLOC_ENCODE(EtypeList
, buf
, buf_size
, &etypes
, &len
, ret
);
57 free_EtypeList(&etypes
);
61 krb5_abortx(context
, "internal error in ASN.1 encoder");
62 free_EtypeList(&etypes
);
67 krb5_set_error_message(context
, ENOMEM
, N_("malloc: out of memory", ""));
71 ad
.val
[0].ad_type
= KRB5_AUTHDATA_GSS_API_ETYPE_NEGOTIATION
;
72 ad
.val
[0].ad_data
.length
= len
;
73 ad
.val
[0].ad_data
.data
= buf
;
75 ASN1_MALLOC_ENCODE(AD_IF_RELEVANT
, buf
, buf_size
, &ad
, &len
, ret
);
77 free_AuthorizationData(&ad
);
81 krb5_abortx(context
, "internal error in ASN.1 encoder");
82 free_AuthorizationData(&ad
);
85 if (*auth_data
== NULL
) {
87 krb5_set_error_message(context
, ENOMEM
, N_("malloc: out of memory", ""));
91 ALLOC_SEQ(*auth_data
, 1);
92 if ((*auth_data
)->val
== NULL
) {
95 krb5_set_error_message(context
, ENOMEM
, N_("malloc: out of memory", ""));
99 (*auth_data
)->val
[0].ad_type
= KRB5_AUTHDATA_IF_RELEVANT
;
100 (*auth_data
)->val
[0].ad_data
.length
= len
;
101 (*auth_data
)->val
[0].ad_data
.data
= buf
;
106 KRB5_LIB_FUNCTION krb5_error_code KRB5_LIB_CALL
107 _krb5_build_authenticator (krb5_context context
,
108 krb5_auth_context auth_context
,
109 krb5_enctype enctype
,
113 krb5_key_usage usage
)
122 memset(&auth
, 0, sizeof(auth
));
124 auth
.authenticator_vno
= 5;
125 copy_Realm(&cred
->client
->realm
, &auth
.crealm
);
126 copy_PrincipalName(&cred
->client
->name
, &auth
.cname
);
128 krb5_us_timeofday (context
, &auth
.ctime
, &auth
.cusec
);
130 ret
= krb5_auth_con_getlocalsubkey(context
, auth_context
, &auth
.subkey
);
134 if (auth_context
->flags
& KRB5_AUTH_CONTEXT_DO_SEQUENCE
) {
135 if(auth_context
->local_seqnumber
== 0)
136 krb5_generate_seq_number (context
,
138 &auth_context
->local_seqnumber
);
139 ALLOC(auth
.seq_number
, 1);
140 if(auth
.seq_number
== NULL
) {
144 *auth
.seq_number
= auth_context
->local_seqnumber
;
146 auth
.seq_number
= NULL
;
147 auth
.authorization_data
= NULL
;
150 ALLOC(auth
.cksum
, 1);
151 if (auth
.cksum
== NULL
) {
155 ret
= copy_Checksum(cksum
, auth
.cksum
);
159 if (auth
.cksum
->cksumtype
== CKSUMTYPE_GSSAPI
) {
161 * This is not GSS-API specific, we only enable it for
164 ret
= make_etypelist(context
, &auth
.authorization_data
);
170 /* XXX - Copy more to auth_context? */
172 auth_context
->authenticator
->ctime
= auth
.ctime
;
173 auth_context
->authenticator
->cusec
= auth
.cusec
;
175 ASN1_MALLOC_ENCODE(Authenticator
, buf
, buf_size
, &auth
, &len
, ret
);
179 krb5_abortx(context
, "internal error in ASN.1 encoder");
181 ret
= krb5_crypto_init(context
, &cred
->session
, enctype
, &crypto
);
184 ret
= krb5_encrypt (context
,
186 usage
/* KRB5_KU_AP_REQ_AUTH */,
190 krb5_crypto_destroy(context
, crypto
);
196 free_Authenticator (&auth
);