1/*
2 * Copyright (c) 1997 - 2000, 2007 Kungliga Tekniska Högskolan
3 * (Royal Institute of Technology, Stockholm, Sweden).
4 * All rights reserved.
5 *
6 * Redistribution and use in source and binary forms, with or without
7 * modification, are permitted provided that the following conditions
8 * are met:
9 *
10 * 1. Redistributions of source code must retain the above copyright
11 *    notice, this list of conditions and the following disclaimer.
12 *
13 * 2. Redistributions in binary form must reproduce the above copyright
14 *    notice, this list of conditions and the following disclaimer in the
15 *    documentation and/or other materials provided with the distribution.
16 *
17 * 3. Neither the name of the Institute nor the names of its contributors
18 *    may be used to endorse or promote products derived from this software
19 *    without specific prior written permission.
20 *
21 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
24 * ARE DISCLAIMED.  IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
31 * SUCH DAMAGE.
32 */
33
34#include "test_locl.h"
35RCSID("$Id$");
36
37krb5_context context;
38
39static int
40proto (int sock, const char *service)
41{
42    struct sockaddr_in remote, local;
43    socklen_t addrlen;
44    krb5_address remote_addr, local_addr;
45    krb5_ccache ccache;
46    krb5_auth_context auth_context;
47    krb5_error_code status;
48    krb5_data packet;
49    krb5_data data;
50    krb5_data client_name;
51    krb5_creds in_creds, *out_creds;
52
53    addrlen = sizeof(local);
54    if (getsockname (sock, (struct sockaddr *)&local, &addrlen) < 0
55	|| addrlen != sizeof(local))
56	err (1, "getsockname)");
57
58    addrlen = sizeof(remote);
59    if (getpeername (sock, (struct sockaddr *)&remote, &addrlen) < 0
60	|| addrlen != sizeof(remote))
61	err (1, "getpeername");
62
63    status = krb5_auth_con_init (context, &auth_context);
64    if (status)
65	krb5_err(context, 1, status, "krb5_auth_con_init");
66
67    local_addr.addr_type = AF_INET;
68    local_addr.address.length = sizeof(local.sin_addr);
69    local_addr.address.data   = &local.sin_addr;
70
71    remote_addr.addr_type = AF_INET;
72    remote_addr.address.length = sizeof(remote.sin_addr);
73    remote_addr.address.data   = &remote.sin_addr;
74
75    status = krb5_auth_con_setaddrs (context,
76				     auth_context,
77				     &local_addr,
78				     &remote_addr);
79    if (status)
80	krb5_err(context, 1, status, "krb5_auth_con_setaddr");
81
82    status = krb5_read_message(context, &sock, &client_name);
83    if(status)
84	krb5_err(context, 1, status, "krb5_read_message");
85
86    memset(&in_creds, 0, sizeof(in_creds));
87    status = krb5_cc_default(context, &ccache);
88    if(status)
89	krb5_err(context, 1, status, "krb5_cc_default");
90    status = krb5_cc_get_principal(context, ccache, &in_creds.client);
91    if(status)
92	krb5_err(context, 1, status, "krb5_cc_get_principal");
93
94    status = krb5_read_message(context, &sock, &in_creds.second_ticket);
95    if(status)
96	krb5_err(context, 1, status, "krb5_read_message");
97
98    status = krb5_parse_name(context, client_name.data, &in_creds.server);
99    if(status)
100	krb5_err(context, 1, status, "krb5_parse_name");
101
102    status = krb5_get_credentials(context, KRB5_GC_USER_USER, ccache,
103				  &in_creds, &out_creds);
104    if(status)
105	krb5_err(context, 1, status, "krb5_get_credentials");
106
107    status = krb5_cc_default(context, &ccache);
108    if(status)
109	krb5_err(context, 1, status, "krb5_cc_default");
110
111    status = krb5_sendauth(context,
112			   &auth_context,
113			   &sock,
114			   VERSION,
115			   in_creds.client,
116			   in_creds.server,
117			   AP_OPTS_USE_SESSION_KEY,
118			   NULL,
119			   out_creds,
120			   ccache,
121			   NULL,
122			   NULL,
123			   NULL);
124
125    if (status)
126	krb5_err(context, 1, status, "krb5_sendauth");
127
128    {
129	char *str;
130	krb5_unparse_name(context, in_creds.server, &str);
131	printf ("User is `%s'\n", str);
132	free(str);
133	krb5_unparse_name(context, in_creds.client, &str);
134	printf ("Server is `%s'\n", str);
135	free(str);
136    }
137
138    krb5_data_zero (&data);
139    krb5_data_zero (&packet);
140
141    status = krb5_read_message(context, &sock, &packet);
142    if(status)
143	krb5_err(context, 1, status, "krb5_read_message");
144
145    status = krb5_rd_safe (context,
146			   auth_context,
147			   &packet,
148			   &data,
149			   NULL);
150    if (status)
151	krb5_err(context, 1, status, "krb5_rd_safe");
152
153    printf ("safe packet: %.*s\n", (int)data.length,
154	    (char *)data.data);
155
156    status = krb5_read_message(context, &sock, &packet);
157    if(status)
158	krb5_err(context, 1, status, "krb5_read_message");
159
160    status = krb5_rd_priv (context,
161			   auth_context,
162			   &packet,
163			   &data,
164			   NULL);
165    if (status)
166	krb5_err(context, 1, status, "krb5_rd_priv");
167
168    printf ("priv packet: %.*s\n", (int)data.length,
169	    (char *)data.data);
170
171    return 0;
172}
173
174static int
175doit (int port, const char *service)
176{
177    int sock, sock2;
178    struct sockaddr_in my_addr;
179    int one = 1;
180
181    sock = socket (AF_INET, SOCK_STREAM, 0);
182    if (sock < 0)
183	err (1, "socket");
184
185    memset (&my_addr, 0, sizeof(my_addr));
186    my_addr.sin_family      = AF_INET;
187    my_addr.sin_port        = port;
188    my_addr.sin_addr.s_addr = INADDR_ANY;
189
190    if (setsockopt (sock, SOL_SOCKET, SO_REUSEADDR,
191		    (void *)&one, sizeof(one)) < 0)
192	warn ("setsockopt SO_REUSEADDR");
193
194    if (bind (sock, (struct sockaddr *)&my_addr, sizeof(my_addr)) < 0)
195	err (1, "bind");
196
197    if (listen (sock, 1) < 0)
198	err (1, "listen");
199
200    sock2 = accept (sock, NULL, NULL);
201    if (sock2 < 0)
202	err (1, "accept");
203
204    return proto (sock2, service);
205}
206
207int
208main(int argc, char **argv)
209{
210    int port = server_setup(&context, argc, argv);
211    return doit (port, service_str);
212}
213