openssh/dist/auth2-gss.c

49 #include "ssh-gss.h"
56 static int input_gssapi_token(int type, u_int32_t plen, struct ssh *ssh);
57 static int input_gssapi_mic(int type, u_int32_t plen, struct ssh *ssh);
58 static int input_gssapi_exchange_complete(int type, u_int32_t plen, struct ssh *ssh);
59 static int input_gssapi_errtok(int, u_int32_t, struct ssh *);
66 userauth_gssapi(struct ssh *ssh, const char *method)
68 	Authctxt *authctxt = ssh->authctxt;
77 	if ((r = sshpkt_get_u32(ssh, &mechs)) != 0)
95 		if ((r = sshpkt_get_string(ssh, &doid, &len)) != 0)
131 	if ((r = sshpkt_start(ssh, SSH2_MSG_USERAUTH_GSSAPI_RESPONSE)) != 0 ||
132 	    (r = sshpkt_put_string(ssh, doid, len)) != 0 ||
133 	    (r = sshpkt_send(ssh)) != 0)
138 	ssh_dispatch_set(ssh, SSH2_MSG_USERAUTH_GSSAPI_TOKEN, &input_gssapi_token);
139 	ssh_dispatch_set(ssh, SSH2_MSG_USERAUTH_GSSAPI_ERRTOK, &input_gssapi_errtok);
146 input_gssapi_token(int type, u_int32_t plen, struct ssh *ssh)
148 	Authctxt *authctxt = ssh->authctxt;
161 	if ((r = sshpkt_get_string(ssh, &p, &len)) != 0 ||
162 	    (r = sshpkt_get_end(ssh)) != 0)
174 			if ((r = sshpkt_start(ssh,
176 			    (r = sshpkt_put_string(ssh, send_tok.value,
178 			    (r = sshpkt_send(ssh)) != 0)
182 		ssh_dispatch_set(ssh, SSH2_MSG_USERAUTH_GSSAPI_TOKEN, NULL);
183 		userauth_finish(ssh, 0, "gssapi-with-mic", NULL);
186 			if ((r = sshpkt_start(ssh,
188 			    (r = sshpkt_put_string(ssh, send_tok.value,
190 			    (r = sshpkt_send(ssh)) != 0)
194 			ssh_dispatch_set(ssh, SSH2_MSG_USERAUTH_GSSAPI_TOKEN, NULL);
196 				ssh_dispatch_set(ssh, SSH2_MSG_USERAUTH_GSSAPI_MIC,
199 				ssh_dispatch_set(ssh,
210 input_gssapi_errtok(int type, u_int32_t plen, struct ssh *ssh)
212 	Authctxt *authctxt = ssh->authctxt;
225 	if ((r = sshpkt_get_string(ssh, &p, &len)) != 0 ||
226 	    (r = sshpkt_get_end(ssh)) != 0)
238 	ssh_dispatch_set(ssh, SSH2_MSG_USERAUTH_GSSAPI_TOKEN, NULL);
239 	ssh_dispatch_set(ssh, SSH2_MSG_USERAUTH_GSSAPI_ERRTOK, NULL);
254 input_gssapi_exchange_complete(int type, u_int32_t plen, struct ssh *ssh)
256 	Authctxt *authctxt = ssh->authctxt;
268 	if ((r = sshpkt_get_end(ssh)) != 0)
278 	ssh_dispatch_set(ssh, SSH2_MSG_USERAUTH_GSSAPI_TOKEN, NULL);
279 	ssh_dispatch_set(ssh, SSH2_MSG_USERAUTH_GSSAPI_ERRTOK, NULL);
280 	ssh_dispatch_set(ssh, SSH2_MSG_USERAUTH_GSSAPI_MIC, NULL);
281 	ssh_dispatch_set(ssh, SSH2_MSG_USERAUTH_GSSAPI_EXCHANGE_COMPLETE, NULL);
282 	userauth_finish(ssh, authenticated, "gssapi-with-mic", NULL);
287 input_gssapi_mic(int type, u_int32_t plen, struct ssh *ssh)
289 	Authctxt *authctxt = ssh->authctxt;
303 	if ((r = sshpkt_get_string(ssh, &p, &len)) != 0)
310 	    "gssapi-with-mic", ssh->kex->session_id);
329 	ssh_dispatch_set(ssh, SSH2_MSG_USERAUTH_GSSAPI_TOKEN, NULL);
330 	ssh_dispatch_set(ssh, SSH2_MSG_USERAUTH_GSSAPI_ERRTOK, NULL);
331 	ssh_dispatch_set(ssh, SSH2_MSG_USERAUTH_GSSAPI_MIC, NULL);
332 	ssh_dispatch_set(ssh, SSH2_MSG_USERAUTH_GSSAPI_EXCHANGE_COMPLETE, NULL);
333 	userauth_finish(ssh, authenticated, "gssapi-with-mic", NULL);