2 * Copyright (c) 1997 - 2000 Kungliga Tekniska Högskolan
3 * (Royal Institute of Technology, Stockholm, Sweden).
6 * Redistribution and use in source and binary forms, with or without
7 * modification, are permitted provided that the following conditions
10 * 1. Redistributions of source code must retain the above copyright
11 * notice, this list of conditions and the following disclaimer.
13 * 2. Redistributions in binary form must reproduce the above copyright
14 * notice, this list of conditions and the following disclaimer in the
15 * documentation and/or other materials provided with the distribution.
17 * 3. Neither the name of the Institute nor the names of its contributors
18 * may be used to endorse or promote products derived from this software
19 * without specific prior written permission.
21 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
24 * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
34 #include "test_locl.h"
36 #include "gss_common.h"
37 RCSID("$Id: gssapi_client.c 21521 2007-07-12 13:13:40Z lha $");
40 do_trans (int sock, gss_ctx_id_t context_hdl)
42 OM_uint32 maj_stat, min_stat;
43 gss_buffer_desc real_input_token, real_output_token;
44 gss_buffer_t input_token = &real_input_token,
45 output_token = &real_output_token;
49 input_token->length = 3;
50 input_token->value = strdup("hej");
52 maj_stat = gss_get_mic(&min_stat,
57 if (GSS_ERROR(maj_stat))
58 gss_err (1, min_stat, "gss_get_mic");
60 write_token (sock, input_token);
61 write_token (sock, output_token);
65 input_token->length = 7;
66 input_token->value = "hemligt";
68 maj_stat = gss_wrap (&min_stat,
75 if (GSS_ERROR(maj_stat))
76 gss_err (1, min_stat, "gss_wrap");
78 write_token (sock, output_token);
80 maj_stat = gss_wrap (&min_stat,
87 if (GSS_ERROR(maj_stat))
88 gss_err (1, min_stat, "gss_wrap");
90 write_token (sock, output_token);
96 proto (int sock, const char *hostname, const char *service)
98 struct sockaddr_in remote, local;
101 int context_established = 0;
102 gss_ctx_id_t context_hdl = GSS_C_NO_CONTEXT;
103 gss_buffer_desc real_input_token, real_output_token;
104 gss_buffer_t input_token = &real_input_token,
105 output_token = &real_output_token;
106 OM_uint32 maj_stat, min_stat;
108 gss_buffer_desc name_token;
109 struct gss_channel_bindings_struct input_chan_bindings;
115 mech_oid = select_mech(mech);
117 name_token.length = asprintf (&str,
118 "%s@%s", service, hostname);
120 errx(1, "malloc - out of memory");
121 name_token.value = str;
123 maj_stat = gss_import_name (&min_stat,
125 GSS_C_NT_HOSTBASED_SERVICE,
127 if (GSS_ERROR(maj_stat))
128 gss_err (1, min_stat,
129 "Error importing name `%s@%s':\n", service, hostname);
131 addrlen = sizeof(local);
132 if (getsockname (sock, (struct sockaddr *)&local, &addrlen) < 0
133 || addrlen != sizeof(local))
134 err (1, "getsockname(%s)", hostname);
136 addrlen = sizeof(remote);
137 if (getpeername (sock, (struct sockaddr *)&remote, &addrlen) < 0
138 || addrlen != sizeof(remote))
139 err (1, "getpeername(%s)", hostname);
141 input_token->length = 0;
142 output_token->length = 0;
144 input_chan_bindings.initiator_addrtype = GSS_C_AF_INET;
145 input_chan_bindings.initiator_address.length = 4;
146 init_buf[0] = (local.sin_addr.s_addr >> 24) & 0xFF;
147 init_buf[1] = (local.sin_addr.s_addr >> 16) & 0xFF;
148 init_buf[2] = (local.sin_addr.s_addr >> 8) & 0xFF;
149 init_buf[3] = (local.sin_addr.s_addr >> 0) & 0xFF;
150 input_chan_bindings.initiator_address.value = init_buf;
152 input_chan_bindings.acceptor_addrtype = GSS_C_AF_INET;
153 input_chan_bindings.acceptor_address.length = 4;
154 acct_buf[0] = (remote.sin_addr.s_addr >> 24) & 0xFF;
155 acct_buf[1] = (remote.sin_addr.s_addr >> 16) & 0xFF;
156 acct_buf[2] = (remote.sin_addr.s_addr >> 8) & 0xFF;
157 acct_buf[3] = (remote.sin_addr.s_addr >> 0) & 0xFF;
158 input_chan_bindings.acceptor_address.value = acct_buf;
161 input_chan_bindings.application_data.value = emalloc(4);
162 * (unsigned short*)input_chan_bindings.application_data.value = local.sin_port;
163 * ((unsigned short *)input_chan_bindings.application_data.value + 1) = remote.sin_port;
164 input_chan_bindings.application_data.length = 4;
166 input_chan_bindings.application_data.length = 0;
167 input_chan_bindings.application_data.value = NULL;
170 while(!context_established) {
172 gss_init_sec_context(&min_stat,
177 GSS_C_MUTUAL_FLAG | GSS_C_SEQUENCE_FLAG
180 &input_chan_bindings,
186 if (GSS_ERROR(maj_stat))
187 gss_err (1, min_stat, "gss_init_sec_context");
188 if (output_token->length != 0)
189 write_token (sock, output_token);
190 if (GSS_ERROR(maj_stat)) {
191 if (context_hdl != GSS_C_NO_CONTEXT)
192 gss_delete_sec_context (&min_stat,
197 if (maj_stat & GSS_S_CONTINUE_NEEDED) {
198 read_token (sock, input_token);
200 context_established = 1;
208 if (pipe (pipefd) < 0)
217 maj_stat = gss_export_sec_context (&min_stat,
220 if (GSS_ERROR(maj_stat))
221 gss_err (1, min_stat, "gss_export_sec_context");
222 write_token (pipefd[1], &buf);
225 gss_ctx_id_t context_hdl;
229 read_token (pipefd[0], &buf);
231 maj_stat = gss_import_sec_context (&min_stat, &buf, &context_hdl);
232 if (GSS_ERROR(maj_stat))
233 gss_err (1, min_stat, "gss_import_sec_context");
234 gss_release_buffer (&min_stat, &buf);
235 return do_trans (sock, context_hdl);
238 return do_trans (sock, context_hdl);
243 main(int argc, char **argv)
245 krb5_context context; /* XXX */
246 int port = client_setup(&context, &argc, argv);
247 return client_doit (argv[argc], port, service, proto);