|
14192
|
1 /* This file is part of the Project Athena Zephyr Notification System.
|
|
|
2 * It contains source for the ZMakeAuthentication function.
|
|
|
3 *
|
|
|
4 * Created by: Robert French
|
|
|
5 *
|
|
|
6 * Copyright (c) 1987 by the Massachusetts Institute of Technology.
|
|
|
7 * For copying and distribution information, see the file
|
|
|
8 * "mit-copyright.h".
|
|
|
9 */
|
|
|
10
|
|
|
11 #include "internal.h"
|
|
|
12
|
|
|
13 #ifndef ERROR_TABLE_BASE_krb
|
|
|
14 #define ERROR_TABLE_BASE_krb (39525376L)
|
|
|
15 #endif
|
|
|
16
|
|
|
17 #ifdef ZEPHYR_USES_KERBEROS
|
|
|
18 #ifdef WIN32
|
|
|
19
|
|
|
20 #else
|
|
|
21 #include <krb_err.h>
|
|
|
22 #endif
|
|
|
23 static long last_authent_time = 0L;
|
|
|
24 static KTEXT_ST last_authent;
|
|
|
25 #endif
|
|
|
26
|
|
|
27 #if 0
|
|
|
28 Code_t ZResetAuthentication () {
|
|
|
29 #ifdef ZEPHYR_USES_KERBEROS
|
|
|
30 last_authent_time = 0L;
|
|
|
31 #endif
|
|
|
32 return ZERR_NONE;
|
|
|
33 }
|
|
|
34 #endif
|
|
|
35
|
|
|
36 Code_t ZMakeAuthentication(notice, buffer, buffer_len, len)
|
|
|
37 register ZNotice_t *notice;
|
|
|
38 char *buffer;
|
|
|
39 int buffer_len;
|
|
|
40 int *len;
|
|
|
41 {
|
|
|
42 #ifdef ZEPHYR_USES_KERBEROS
|
|
|
43 int result;
|
|
|
44 time_t now;
|
|
|
45 KTEXT_ST authent;
|
|
|
46 char *cstart, *cend;
|
|
|
47 ZChecksum_t checksum;
|
|
|
48 CREDENTIALS cred;
|
|
|
49 extern unsigned long des_quad_cksum();
|
|
|
50
|
|
|
51 now = time(0);
|
|
|
52 if (last_authent_time == 0 || (now - last_authent_time > 120)) {
|
|
|
53 result = krb_mk_req(&authent, SERVER_SERVICE,
|
|
|
54 SERVER_INSTANCE, __Zephyr_realm, 0);
|
|
|
55 if (result != MK_AP_OK) {
|
|
|
56 last_authent_time = 0;
|
|
|
57 return (result+ERROR_TABLE_BASE_krb);
|
|
|
58 }
|
|
|
59 last_authent_time = now;
|
|
|
60 last_authent = authent;
|
|
|
61 }
|
|
|
62 else {
|
|
|
63 authent = last_authent;
|
|
|
64 }
|
|
|
65 notice->z_auth = 1;
|
|
|
66 notice->z_authent_len = authent.length;
|
|
|
67 notice->z_ascii_authent = (char *)malloc((unsigned)authent.length*3);
|
|
|
68 /* zero length authent is an error, so malloc(0) is not a problem */
|
|
|
69 if (!notice->z_ascii_authent)
|
|
|
70 return (ENOMEM);
|
|
|
71 if ((result = ZMakeAscii(notice->z_ascii_authent,
|
|
|
72 authent.length*3,
|
|
|
73 authent.dat,
|
|
|
74 authent.length)) != ZERR_NONE) {
|
|
|
75 free(notice->z_ascii_authent);
|
|
|
76 return (result);
|
|
|
77 }
|
|
|
78 result = Z_FormatRawHeader(notice, buffer, buffer_len, len, &cstart,
|
|
|
79 &cend);
|
|
|
80 free(notice->z_ascii_authent);
|
|
|
81 notice->z_authent_len = 0;
|
|
|
82 if (result)
|
|
|
83 return(result);
|
|
|
84
|
|
|
85 /* Compute a checksum over the header and message. */
|
|
|
86 if ((result = krb_get_cred(SERVER_SERVICE, SERVER_INSTANCE,
|
|
|
87 __Zephyr_realm, &cred)) != 0)
|
|
|
88 return result;
|
|
|
89 checksum = des_quad_cksum(buffer, NULL, cstart - buffer, 0, (C_Block *)cred.session);
|
|
|
90 checksum ^= des_quad_cksum(cend, NULL, buffer + *len - cend, 0,
|
|
|
91 (C_Block *)cred.session);
|
|
|
92 checksum ^= des_quad_cksum(notice->z_message, NULL, notice->z_message_len,
|
|
|
93 0, (C_Block *)cred.session);
|
|
|
94 notice->z_checksum = checksum;
|
|
|
95 ZMakeAscii32(cstart, buffer + buffer_len - cstart, checksum);
|
|
|
96
|
|
|
97 return (ZERR_NONE);
|
|
|
98 #else
|
|
|
99 notice->z_checksum = 0;
|
|
|
100 notice->z_auth = 1;
|
|
|
101 notice->z_authent_len = 0;
|
|
|
102 notice->z_ascii_authent = "";
|
|
|
103 return (Z_FormatRawHeader(notice, buffer, buffer_len, len, NULL, NULL));
|
|
|
104 #endif
|
|
|
105 }
|
