mirror of
https://git.hardenedbsd.org/hardenedbsd/HardenedBSD.git
synced 2024-11-18 17:00:49 +01:00
60643d379b
(Including all changes for FreeBSD - importing the original eBones distribution would be too complex at this stage, since I don't have access to Piero's CVS.) (If you want to include eBones in your system, don't forget to include MAKE_EBONES in /etc/make.conf.) (This stuff is now also suppable from braae.ru.ac.za.) Bones originally from MIT SIPB. Original port to FreeBSD 1.x by Piero Serini. Moved to FreeBSD 2.0 by Doug Rabson and Geoff Rehmet. Nice bug fixes from Doug Rabson.
131 lines
4.0 KiB
C
131 lines
4.0 KiB
C
/*
|
|
* Copyright 1985, 1986, 1987, 1988 by the Massachusetts Institute
|
|
* of Technology.
|
|
* For copying and distribution information, please see the file
|
|
* <Copyright.MIT>.
|
|
*
|
|
* from: create_ticket.c,v 4.11 89/03/22 14:43:23 jtkohl Exp $
|
|
* $Id: create_ticket.c,v 1.2 1994/07/19 19:25:01 g89r4222 Exp $
|
|
*/
|
|
|
|
#ifndef lint
|
|
static char rcsid[] =
|
|
"$Id: create_ticket.c,v 1.2 1994/07/19 19:25:01 g89r4222 Exp $";
|
|
#endif /* lint */
|
|
|
|
#include <stdio.h>
|
|
#include <des.h>
|
|
#include <krb.h>
|
|
#include <prot.h>
|
|
#include <strings.h>
|
|
|
|
/*
|
|
* Create ticket takes as arguments information that should be in a
|
|
* ticket, and the KTEXT object in which the ticket should be
|
|
* constructed. It then constructs a ticket and returns, leaving the
|
|
* newly created ticket in tkt.
|
|
* The length of the ticket is a multiple of
|
|
* eight bytes and is in tkt->length.
|
|
*
|
|
* If the ticket is too long, the ticket will contain nulls.
|
|
* The return value of the routine is undefined.
|
|
*
|
|
* The corresponding routine to extract information from a ticket it
|
|
* decomp_ticket. When changes are made to this routine, the
|
|
* corresponding changes should also be made to that file.
|
|
*
|
|
* The packet is built in the following format:
|
|
*
|
|
* variable
|
|
* type or constant data
|
|
* ---- ----------- ----
|
|
*
|
|
* tkt->length length of ticket (multiple of 8 bytes)
|
|
*
|
|
* tkt->dat:
|
|
*
|
|
* unsigned char flags namely, HOST_BYTE_ORDER
|
|
*
|
|
* string pname client's name
|
|
*
|
|
* string pinstance client's instance
|
|
*
|
|
* string prealm client's realm
|
|
*
|
|
* 4 bytes paddress client's address
|
|
*
|
|
* 8 bytes session session key
|
|
*
|
|
* 1 byte life ticket lifetime
|
|
*
|
|
* 4 bytes time_sec KDC timestamp
|
|
*
|
|
* string sname service's name
|
|
*
|
|
* string sinstance service's instance
|
|
*
|
|
* <=7 bytes null null pad to 8 byte multiple
|
|
*
|
|
*/
|
|
|
|
int krb_create_ticket(tkt, flags, pname, pinstance, prealm, paddress,
|
|
session, life, time_sec, sname, sinstance, key)
|
|
KTEXT tkt; /* Gets filled in by the ticket */
|
|
unsigned char flags; /* Various Kerberos flags */
|
|
char *pname; /* Principal's name */
|
|
char *pinstance; /* Principal's instance */
|
|
char *prealm; /* Principal's authentication domain */
|
|
long paddress; /* Net address of requesting entity */
|
|
char *session; /* Session key inserted in ticket */
|
|
short life; /* Lifetime of the ticket */
|
|
long time_sec; /* Issue time and date */
|
|
char *sname; /* Service Name */
|
|
char *sinstance; /* Instance Name */
|
|
C_Block key; /* Service's secret key */
|
|
{
|
|
Key_schedule key_s;
|
|
register char *data; /* running index into ticket */
|
|
|
|
tkt->length = 0; /* Clear previous data */
|
|
flags |= HOST_BYTE_ORDER; /* ticket byte order */
|
|
bcopy((char *) &flags,(char *) (tkt->dat),sizeof(flags));
|
|
data = ((char *)tkt->dat) + sizeof(flags);
|
|
(void) strcpy(data, pname);
|
|
data += 1 + strlen(pname);
|
|
(void) strcpy(data, pinstance);
|
|
data += 1 + strlen(pinstance);
|
|
(void) strcpy(data, prealm);
|
|
data += 1 + strlen(prealm);
|
|
bcopy((char *) &paddress, data, 4);
|
|
data += 4;
|
|
|
|
bcopy((char *) session, data, 8);
|
|
data += 8;
|
|
*(data++) = (char) life;
|
|
/* issue time */
|
|
bcopy((char *) &time_sec, data, 4);
|
|
data += 4;
|
|
(void) strcpy(data, sname);
|
|
data += 1 + strlen(sname);
|
|
(void) strcpy(data, sinstance);
|
|
data += 1 + strlen(sinstance);
|
|
|
|
/* guarantee null padded ticket to multiple of 8 bytes */
|
|
bzero(data, 7);
|
|
tkt->length = ((data - ((char *)tkt->dat) + 7)/8)*8;
|
|
|
|
/* Check length of ticket */
|
|
if (tkt->length > (sizeof(KTEXT_ST) - 7)) {
|
|
bzero(tkt->dat, tkt->length);
|
|
tkt->length = 0;
|
|
return KFAILURE /* XXX */;
|
|
}
|
|
|
|
#ifndef NOENCRYPTION
|
|
key_sched(key,key_s);
|
|
pcbc_encrypt((C_Block *)tkt->dat,(C_Block *)tkt->dat,(long)tkt->length,
|
|
key_s,key,ENCRYPT);
|
|
#endif
|
|
return 0;
|
|
}
|