2 * Copyright (c) 1997, 1999 Kungliga Tekniska Högskolan
3 * (Royal Institute of Technology, Stockholm, Sweden).
6 * Redistribution and use in source and binary forms, with or without
7 * modification, are permitted provided that the following conditions
10 * 1. Redistributions of source code must retain the above copyright
11 * notice, this list of conditions and the following disclaimer.
13 * 2. Redistributions in binary form must reproduce the above copyright
14 * notice, this list of conditions and the following disclaimer in the
15 * documentation and/or other materials provided with the distribution.
17 * 3. Neither the name of the Institute nor the names of its contributors
18 * may be used to endorse or promote products derived from this software
19 * without specific prior written permission.
21 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
24 * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
36 RCSID("$Id: get_ad_tkt.c 10113 2001-06-18 13:11:33Z assar $");
38 /* get an additional version 4 ticket via the 524 protocol */
41 #define NEVERDATE ((unsigned long)0x7fffffffL)
45 get_ad_tkt(char *service, char *sinstance, char *realm, int lifetime)
51 krb5_creds in_creds, *out_creds;
54 char pname[ANAME_SZ], pinst[INST_SZ], prealm[REALM_SZ];
56 ret = krb5_init_context(&context);
59 ret = krb5_cc_default(context, &id);
61 krb5_free_context(context);
64 memset(&in_creds, 0, sizeof(in_creds));
66 in_creds.times.endtime = krb_life_to_time(time(NULL), lifetime);
67 if(in_creds.times.endtime == NEVERDATE)
68 in_creds.times.endtime = 0;
69 ret = krb5_cc_get_principal(context, id, &in_creds.client);
71 krb5_cc_close(context, id);
72 krb5_free_context(context);
75 ret = krb5_524_conv_principal(context, in_creds.client,
76 pname, pinst, prealm);
78 krb5_free_principal(context, in_creds.client);
79 krb5_cc_close(context, id);
80 krb5_free_context(context);
83 ret = krb5_425_conv_principal(context, service, sinstance, realm,
86 krb5_free_principal(context, in_creds.client);
87 krb5_cc_close(context, id);
88 krb5_free_context(context);
91 ret = krb5_get_credentials(context,
96 krb5_free_principal(context, in_creds.client);
97 krb5_free_principal(context, in_creds.server);
99 krb5_cc_close(context, id);
100 krb5_free_context(context);
103 ret = krb524_convert_creds_kdc_ccache(context, id, out_creds, &cred);
104 krb5_cc_close(context, id);
105 krb5_free_context(context);
106 krb5_free_creds(context, out_creds);
109 code = save_credentials(cred.service, cred.instance, cred.realm,
110 cred.session, cred.lifetime, cred.kvno,
111 &cred.ticket_st, now);
112 if(code == NO_TKT_FIL)
113 code = tf_setup(&cred, pname, pinst);
114 memset(&cred.session, 0, sizeof(cred.session));