/* * Copyright (c) 1997, 1998, 1999 Kungliga Tekniska Högskolan * (Royal Institute of Technology, Stockholm, Sweden). * All rights reserved. * * Redistribution and use in source and binary forms, with or without * modification, are permitted provided that the following conditions * are met: * * 1. Redistributions of source code must retain the above copyright * notice, this list of conditions and the following disclaimer. * * 2. Redistributions in binary form must reproduce the above copyright * notice, this list of conditions and the following disclaimer in the * documentation and/or other materials provided with the distribution. * * 3. Neither the name of the Institute nor the names of its contributors * may be used to endorse or promote products derived from this software * without specific prior written permission. * * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF * SUCH DAMAGE. */ #include "krb5_locl.h" RCSID("$Id: fcache.c,v 1.22 1999/12/02 17:05:09 joda Exp $"); typedef struct krb5_fcache{ char *filename; int version; }krb5_fcache; struct fcc_cursor { int fd; krb5_storage *sp; }; #define KRB5_FCC_FVNO_1 1 #define KRB5_FCC_FVNO_2 2 #define KRB5_FCC_FVNO_3 3 #define KRB5_FCC_FVNO_4 4 #define FCC_TAG_DELTATIME 1 #define FCACHE(X) ((krb5_fcache*)(X)->data.data) #define FILENAME(X) (FCACHE(X)->filename) #define FCC_CURSOR(C) ((struct fcc_cursor*)(C)) static char* fcc_get_name(krb5_context context, krb5_ccache id) { return FILENAME(id); } static krb5_error_code fcc_resolve(krb5_context context, krb5_ccache *id, const char *res) { krb5_fcache *f; f = malloc(sizeof(*f)); if(f == NULL) return KRB5_CC_NOMEM; f->filename = strdup(res); if(f->filename == NULL){ free(f); return KRB5_CC_NOMEM; } f->version = 0; (*id)->data.data = f; (*id)->data.length = sizeof(*f); return 0; } static krb5_error_code erase_file(const char *filename) { int fd; off_t pos; char buf[128]; fd = open(filename, O_RDWR | O_BINARY); if(fd < 0){ if(errno == ENOENT) return 0; else return errno; } pos = lseek(fd, 0, SEEK_END); lseek(fd, 0, SEEK_SET); memset(buf, 0, sizeof(buf)); while(pos > 0) pos -= write(fd, buf, sizeof(buf)); close(fd); unlink(filename); return 0; } static krb5_error_code fcc_gen_new(krb5_context context, krb5_ccache *id) { krb5_fcache *f; int fd; char *file; f = malloc(sizeof(*f)); if(f == NULL) return KRB5_CC_NOMEM; asprintf(&file, "/tmp/krb5cc_XXXXXX"); /* XXX */ if(file == NULL) { free(f); return KRB5_CC_NOMEM; } fd = mkstemp(file); if(fd < 0) { free(f); free(file); return errno; } close(fd); f->filename = file; f->version = 0; (*id)->data.data = f; (*id)->data.length = sizeof(*f); return 0; } static void storage_set_flags(krb5_context context, krb5_storage *sp, int vno) { int flags = 0; switch(vno) { case KRB5_FCC_FVNO_1: flags |= KRB5_STORAGE_PRINCIPAL_WRONG_NUM_COMPONENTS; flags |= KRB5_STORAGE_PRINCIPAL_NO_NAME_TYPE; flags |= KRB5_STORAGE_HOST_BYTEORDER; break; case KRB5_FCC_FVNO_2: flags |= KRB5_STORAGE_HOST_BYTEORDER; break; case KRB5_FCC_FVNO_3: flags |= KRB5_STORAGE_KEYBLOCK_KEYTYPE_TWICE; break; case KRB5_FCC_FVNO_4: break; default: krb5_abortx(context, "storage_set_flags called with bad vno (%x)", vno); } krb5_storage_set_flags(sp, flags); } static krb5_error_code fcc_initialize(krb5_context context, krb5_ccache id, krb5_principal primary_principal) { krb5_fcache *f = FCACHE(id); int ret; int fd; char *filename = f->filename; if((ret = erase_file(filename))) return ret; fd = open(filename, O_RDWR | O_CREAT | O_EXCL | O_BINARY, 0600); if(fd == -1) return errno; { krb5_storage *sp; sp = krb5_storage_from_fd(fd); if(context->fcache_vno != 0) f->version = context->fcache_vno; else f->version = KRB5_FCC_FVNO_4; krb5_store_int8(sp, 5); krb5_store_int8(sp, f->version); storage_set_flags(context, sp, f->version); if(f->version == KRB5_FCC_FVNO_4) { /* V4 stuff */ if (context->kdc_sec_offset) { krb5_store_int16 (sp, 12); /* length */ krb5_store_int16 (sp, FCC_TAG_DELTATIME); /* Tag */ krb5_store_int16 (sp, 8); /* length of data */ krb5_store_int32 (sp, context->kdc_sec_offset); krb5_store_int32 (sp, context->kdc_usec_offset); } else { krb5_store_int16 (sp, 0); } } krb5_store_principal(sp, primary_principal); krb5_storage_free(sp); } close(fd); return 0; } static krb5_error_code fcc_close(krb5_context context, krb5_ccache id) { free (FILENAME(id)); krb5_data_free(&id->data); return 0; } static krb5_error_code fcc_destroy(krb5_context context, krb5_ccache id) { char *f; f = FILENAME(id); erase_file(f); return 0; } static krb5_error_code fcc_store_cred(krb5_context context, krb5_ccache id, krb5_creds *creds) { int fd; char *f; f = FILENAME(id); fd = open(f, O_WRONLY | O_APPEND | O_BINARY); if(fd < 0) return errno; { krb5_storage *sp; sp = krb5_storage_from_fd(fd); storage_set_flags(context, sp, FCACHE(id)->version); krb5_store_creds(sp, creds); krb5_storage_free(sp); } close(fd); return 0; /* XXX */ } static krb5_error_code fcc_read_cred (krb5_context context, krb5_fcache *fc, krb5_storage *sp, krb5_creds *creds) { krb5_error_code ret; storage_set_flags(context, sp, fc->version); ret = krb5_ret_creds(sp, creds); return ret; } static krb5_error_code init_fcc (krb5_context context, krb5_fcache *fcache, krb5_storage **ret_sp, int *ret_fd) { int fd; int8_t pvno, tag; krb5_storage *sp; fd = open(fcache->filename, O_RDONLY | O_BINARY); if(fd < 0) return errno; sp = krb5_storage_from_fd(fd); krb5_ret_int8(sp, &pvno); if(pvno != 5) { krb5_storage_free(sp); close(fd); return KRB5_CCACHE_BADVNO; } krb5_ret_int8(sp, &tag); /* should not be host byte order */ fcache->version = tag; storage_set_flags(context, sp, fcache->version); switch (tag) { case KRB5_FCC_FVNO_4: { int16_t length; krb5_ret_int16 (sp, &length); while(length > 0) { int16_t tag, data_len; int i; int8_t dummy; krb5_ret_int16 (sp, &tag); krb5_ret_int16 (sp, &data_len); switch (tag) { case FCC_TAG_DELTATIME : krb5_ret_int32 (sp, &context->kdc_sec_offset); krb5_ret_int32 (sp, &context->kdc_usec_offset); break; default : for (i = 0; i < data_len; ++i) krb5_ret_int8 (sp, &dummy); break; } length -= 4 + data_len; } break; } case KRB5_FCC_FVNO_3: case KRB5_FCC_FVNO_2: case KRB5_FCC_FVNO_1: break; default : krb5_storage_free (sp); close (fd); return KRB5_CCACHE_BADVNO; } *ret_sp = sp; *ret_fd = fd; return 0; } static krb5_error_code fcc_get_principal(krb5_context context, krb5_ccache id, krb5_principal *principal) { krb5_error_code ret; krb5_fcache *f = FCACHE(id); int fd; krb5_storage *sp; ret = init_fcc (context, f, &sp, &fd); if (ret) return ret; krb5_ret_principal(sp, principal); krb5_storage_free(sp); close(fd); return 0; } static krb5_error_code fcc_get_first (krb5_context context, krb5_ccache id, krb5_cc_cursor *cursor) { krb5_error_code ret; krb5_principal principal; krb5_fcache *f = FCACHE(id); *cursor = malloc(sizeof(struct fcc_cursor)); ret = init_fcc (context, f, &FCC_CURSOR(*cursor)->sp, &FCC_CURSOR(*cursor)->fd); if (ret) return ret; krb5_ret_principal (FCC_CURSOR(*cursor)->sp, &principal); krb5_free_principal (context, principal); return 0; } static krb5_error_code fcc_get_next (krb5_context context, krb5_ccache id, krb5_cc_cursor *cursor, krb5_creds *creds) { return fcc_read_cred (context, FCACHE(id), FCC_CURSOR(*cursor)->sp, creds); } static krb5_error_code fcc_end_get (krb5_context context, krb5_ccache id, krb5_cc_cursor *cursor) { krb5_storage_free(FCC_CURSOR(*cursor)->sp); close (FCC_CURSOR(*cursor)->fd); free(*cursor); return 0; } static krb5_error_code fcc_remove_cred(krb5_context context, krb5_ccache id, krb5_flags which, krb5_creds *cred) { return 0; /* XXX */ } static krb5_error_code fcc_set_flags(krb5_context context, krb5_ccache id, krb5_flags flags) { return 0; /* XXX */ } static krb5_error_code fcc_get_version(krb5_context context, krb5_ccache id) { return FCACHE(id)->version; } const krb5_cc_ops krb5_fcc_ops = { "FILE", fcc_get_name, fcc_resolve, fcc_gen_new, fcc_initialize, fcc_destroy, fcc_close, fcc_store_cred, NULL, /* fcc_retrieve */ fcc_get_principal, fcc_get_first, fcc_get_next, fcc_end_get, fcc_remove_cred, fcc_set_flags, fcc_get_version };