2 * Copyright (c) 1990 Regents of the University of Michigan.
5 * Redistribution and use in source and binary forms are permitted
6 * provided that this notice is preserved and that due credit is given
7 * to the University of Michigan at Ann Arbor. The name of the University
8 * may not be used to endorse or promote products derived from this
9 * software without specific prior written permission. This software
10 * is provided ``as is'' without express or implied warranty.
20 #include <ac/socket.h>
22 #include <quipu/bind.h>
23 #if ISODEPACKAGE == IC
24 #include <quipu/DAS-types.h>
26 #include <pepsy/DAS-types.h>
34 kerberosv4_ldap_auth( char *cred, long len )
38 char instance[INST_SZ];
41 extern char *krb_ldap_service;
42 extern char *kerberos_keyfile;
44 Debug( LDAP_DEBUG_TRACE, "kerberosv4_ldap_auth\n", 0, 0, 0 );
46 SAFEMEMCPY( ktxt->dat, cred, len );
49 strcpy( instance, "*" );
50 if ( (err = krb_rd_req( ktxt, krb_ldap_service, instance, 0L,
51 &ad, kerberos_keyfile )) != KSUCCESS ) {
52 Debug( LDAP_DEBUG_ANY, "krb_rd_req failed (%s)\n",
53 krb_err_txt[err], 0, 0 );
54 return( LDAP_INVALID_CREDENTIALS );
57 return( LDAP_SUCCESS );
62 struct ds_bind_arg *ba,
69 struct type_UNIV_EXTERNAL *e;
70 struct kerberos_parms kp;
75 extern char *krb_x500_service;
76 extern char *krb_x500_instance;
78 Debug( LDAP_DEBUG_TRACE, "kerberosv4_bindarg\n", 0, 0, 0 );
80 e = (struct type_UNIV_EXTERNAL *) calloc( 1,
81 sizeof(struct type_UNIV_EXTERNAL) );
82 e->encoding = (struct choice_UNIV_0 *) calloc( 1,
83 sizeof(struct choice_UNIV_0) );
85 ba->dba_version = DBA_VERSION_V1988;
86 ba->dba_auth_type = DBA_AUTH_EXTERNAL;
88 e->indirect__reference = AUTH_TYPE_KERBEROS_V4;
89 e->direct__reference = NULLOID;
90 e->data__value__descriptor = str2qb( "KRBv4 client credentials",
94 kp.kp_version = AUTH_TYPE_KERBEROS_V4;
96 if ( (err = krb_get_lrealm( realm, 1 )) != KSUCCESS ) {
97 Debug( LDAP_DEBUG_ANY, "krb_get_lrealm failed (%s)\n",
98 krb_err_txt[err], 0, 0 );
99 return( LDAP_OPERATIONS_ERROR );
102 gettimeofday( &tv, NULL );
104 SAFEMEMCPY( kp.kp_ktxt.dat, cred, len );
105 kp.kp_ktxt.length = len;
106 if ( encode_kerberos_parms( &pe, &kp ) == NOTOK ) {
107 Debug( LDAP_DEBUG_ANY, "kerberos parms encoding failed\n", 0,
109 return( LDAP_OPERATIONS_ERROR );
112 e->encoding->offset = choice_UNIV_0_single__ASN1__type;
113 e->encoding->un.single__ASN1__type = pe;
119 kerberos_check_mutual(
120 struct ds_bind_arg *res,
124 struct type_UNIV_EXTERNAL *e = res->dba_external;
125 struct kerberos_parms *kp;
128 Debug( LDAP_DEBUG_TRACE, "kerberos_check_mutual\n", 0, 0, 0 );
130 if ( decode_kerberos_parms( e->encoding->un.single__ASN1__type, &kp )
133 ret = ((kp->kp_nonce == (nonce + 1)) ? OK : NOTOK );
135 Debug( LDAP_DEBUG_TRACE, "expecting %d got %d\n", nonce, kp->kp_nonce,
138 pe_free( e->encoding->un.single__ASN1__type );
139 dn_free( kp->kp_dn );