221 lines
6.3 KiB
C
221 lines
6.3 KiB
C
/*
|
|
* Copyright (c) 1997 - 2001 Kungliga Tekniska Högskolan
|
|
* (Royal Institute of Technology, Stockholm, Sweden).
|
|
* All rights reserved.
|
|
*
|
|
* Redistribution and use in source and binary forms, with or without
|
|
* modification, are permitted provided that the following conditions
|
|
* are met:
|
|
*
|
|
* 1. Redistributions of source code must retain the above copyright
|
|
* notice, this list of conditions and the following disclaimer.
|
|
*
|
|
* 2. Redistributions in binary form must reproduce the above copyright
|
|
* notice, this list of conditions and the following disclaimer in the
|
|
* documentation and/or other materials provided with the distribution.
|
|
*
|
|
* 3. Neither the name of the Institute nor the names of its contributors
|
|
* may be used to endorse or promote products derived from this software
|
|
* without specific prior written permission.
|
|
*
|
|
* THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
|
|
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
|
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
|
* ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
|
|
* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
|
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
|
|
* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
|
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
|
|
* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
|
|
* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
|
|
* SUCH DAMAGE.
|
|
*/
|
|
|
|
#include "krb5_locl.h"
|
|
|
|
RCSID("$Id: init_creds.c,v 1.9 2001/07/03 18:42:07 assar Exp $");
|
|
|
|
void
|
|
krb5_get_init_creds_opt_init(krb5_get_init_creds_opt *opt)
|
|
{
|
|
memset (opt, 0, sizeof(*opt));
|
|
opt->flags = 0;
|
|
}
|
|
|
|
static int
|
|
get_config_time (krb5_context context,
|
|
const char *realm,
|
|
const char *name,
|
|
int def)
|
|
{
|
|
int ret;
|
|
|
|
ret = krb5_config_get_time (context, NULL,
|
|
"realms",
|
|
realm,
|
|
name,
|
|
NULL);
|
|
if (ret >= 0)
|
|
return ret;
|
|
ret = krb5_config_get_time (context, NULL,
|
|
"libdefaults",
|
|
name,
|
|
NULL);
|
|
if (ret >= 0)
|
|
return ret;
|
|
return def;
|
|
}
|
|
|
|
static krb5_boolean
|
|
get_config_bool (krb5_context context,
|
|
const char *realm,
|
|
const char *name)
|
|
{
|
|
return krb5_config_get_bool (context,
|
|
NULL,
|
|
"realms",
|
|
realm,
|
|
name,
|
|
NULL)
|
|
|| krb5_config_get_bool (context,
|
|
NULL,
|
|
"libdefaults",
|
|
name,
|
|
NULL);
|
|
}
|
|
|
|
/*
|
|
* set all the values in `opt' to the appropriate values for
|
|
* application `appname' (default to getprogname() if NULL), and realm
|
|
* `realm'. First looks in [appdefaults] but falls back to
|
|
* [realms] or [libdefaults] for some of the values.
|
|
*/
|
|
|
|
static krb5_addresses no_addrs = {0, NULL};
|
|
|
|
void
|
|
krb5_get_init_creds_opt_set_default_flags(krb5_context context,
|
|
const char *appname,
|
|
krb5_const_realm realm,
|
|
krb5_get_init_creds_opt *opt)
|
|
{
|
|
krb5_boolean b;
|
|
time_t t;
|
|
|
|
b = get_config_bool (context, realm, "forwardable");
|
|
krb5_appdefault_boolean(context, appname, realm, "forwardable", b, &b);
|
|
krb5_get_init_creds_opt_set_forwardable(opt, b);
|
|
|
|
b = get_config_bool (context, realm, "proxiable");
|
|
krb5_appdefault_boolean(context, appname, realm, "proxiable", b, &b);
|
|
krb5_get_init_creds_opt_set_proxiable (opt, b);
|
|
|
|
krb5_appdefault_time(context, appname, realm, "ticket_lifetime", 0, &t);
|
|
if (t == 0)
|
|
t = get_config_time (context, realm, "ticket_lifetime", 0);
|
|
if(t != 0)
|
|
krb5_get_init_creds_opt_set_tkt_life(opt, t);
|
|
|
|
krb5_appdefault_time(context, appname, realm, "renew_lifetime", 0, &t);
|
|
if (t == 0)
|
|
t = get_config_time (context, realm, "renew_lifetime", 0);
|
|
if(t != 0)
|
|
krb5_get_init_creds_opt_set_renew_life(opt, t);
|
|
|
|
krb5_appdefault_boolean(context, appname, realm, "no-addresses", FALSE, &b);
|
|
if (b)
|
|
krb5_get_init_creds_opt_set_address_list (opt, &no_addrs);
|
|
|
|
#if 0
|
|
krb5_appdefault_boolean(context, appname, realm, "anonymous", FALSE, &b);
|
|
krb5_get_init_creds_opt_set_anonymous (opt, b);
|
|
|
|
krb5_get_init_creds_opt_set_etype_list(opt, enctype,
|
|
etype_str.num_strings);
|
|
|
|
krb5_get_init_creds_opt_set_salt(krb5_get_init_creds_opt *opt,
|
|
krb5_data *salt);
|
|
|
|
krb5_get_init_creds_opt_set_preauth_list(krb5_get_init_creds_opt *opt,
|
|
krb5_preauthtype *preauth_list,
|
|
int preauth_list_length);
|
|
#endif
|
|
}
|
|
|
|
|
|
void
|
|
krb5_get_init_creds_opt_set_tkt_life(krb5_get_init_creds_opt *opt,
|
|
krb5_deltat tkt_life)
|
|
{
|
|
opt->flags |= KRB5_GET_INIT_CREDS_OPT_TKT_LIFE;
|
|
opt->tkt_life = tkt_life;
|
|
}
|
|
|
|
void
|
|
krb5_get_init_creds_opt_set_renew_life(krb5_get_init_creds_opt *opt,
|
|
krb5_deltat renew_life)
|
|
{
|
|
opt->flags |= KRB5_GET_INIT_CREDS_OPT_RENEW_LIFE;
|
|
opt->renew_life = renew_life;
|
|
}
|
|
|
|
void
|
|
krb5_get_init_creds_opt_set_forwardable(krb5_get_init_creds_opt *opt,
|
|
int forwardable)
|
|
{
|
|
opt->flags |= KRB5_GET_INIT_CREDS_OPT_FORWARDABLE;
|
|
opt->forwardable = forwardable;
|
|
}
|
|
|
|
void
|
|
krb5_get_init_creds_opt_set_proxiable(krb5_get_init_creds_opt *opt,
|
|
int proxiable)
|
|
{
|
|
opt->flags |= KRB5_GET_INIT_CREDS_OPT_PROXIABLE;
|
|
opt->proxiable = proxiable;
|
|
}
|
|
|
|
void
|
|
krb5_get_init_creds_opt_set_etype_list(krb5_get_init_creds_opt *opt,
|
|
krb5_enctype *etype_list,
|
|
int etype_list_length)
|
|
{
|
|
opt->flags |= KRB5_GET_INIT_CREDS_OPT_ETYPE_LIST;
|
|
opt->etype_list = etype_list;
|
|
opt->etype_list_length = etype_list_length;
|
|
}
|
|
|
|
void
|
|
krb5_get_init_creds_opt_set_address_list(krb5_get_init_creds_opt *opt,
|
|
krb5_addresses *addresses)
|
|
{
|
|
opt->flags |= KRB5_GET_INIT_CREDS_OPT_ADDRESS_LIST;
|
|
opt->address_list = addresses;
|
|
}
|
|
|
|
void
|
|
krb5_get_init_creds_opt_set_preauth_list(krb5_get_init_creds_opt *opt,
|
|
krb5_preauthtype *preauth_list,
|
|
int preauth_list_length)
|
|
{
|
|
opt->flags |= KRB5_GET_INIT_CREDS_OPT_PREAUTH_LIST;
|
|
opt->preauth_list_length = preauth_list_length;
|
|
opt->preauth_list = preauth_list;
|
|
}
|
|
|
|
void
|
|
krb5_get_init_creds_opt_set_salt(krb5_get_init_creds_opt *opt,
|
|
krb5_data *salt)
|
|
{
|
|
opt->flags |= KRB5_GET_INIT_CREDS_OPT_SALT;
|
|
opt->salt = salt;
|
|
}
|
|
|
|
void
|
|
krb5_get_init_creds_opt_set_anonymous(krb5_get_init_creds_opt *opt,
|
|
int anonymous)
|
|
{
|
|
opt->flags |= KRB5_GET_INIT_CREDS_OPT_ANONYMOUS;
|
|
opt->anonymous = anonymous;
|
|
}
|