2  * Copyright (c) 1997-2007 Kungliga Tekniska Högskolan
45     EncKrbPrivPart part;  in krb5_rd_priv()  local
53     if ((auth_context->flags &  in krb5_rd_priv()
60 	/* if these fields are not present in the priv-part, silently  in krb5_rd_priv()
66     ret = decode_KRB_PRIV (inbuf->data, inbuf->length, &priv, &len);  in krb5_rd_priv()
82     if (auth_context->remote_subkey)  in krb5_rd_priv()
83 	key = auth_context->remote_subkey;  in krb5_rd_priv()
84     else if (auth_context->local_subkey)  in krb5_rd_priv()
85 	key = auth_context->local_subkey;  in krb5_rd_priv()
87 	key = auth_context->keyblock;  in krb5_rd_priv()
101     ret = decode_EncKrbPrivPart (plain.data, plain.length, &part, &len);  in krb5_rd_priv()
110     if (part.s_address  in krb5_rd_priv()
111 	&& auth_context->remote_address  in krb5_rd_priv()
113 				  auth_context->remote_address,  in krb5_rd_priv()
114 				  part.s_address)) {  in krb5_rd_priv()
122     if (part.r_address  in krb5_rd_priv()
123 	&& auth_context->local_address  in krb5_rd_priv()
125 				  auth_context->local_address,  in krb5_rd_priv()
126 				  part.r_address)) {  in krb5_rd_priv()
133     if (auth_context->flags & KRB5_AUTH_CONTEXT_DO_TIME) {  in krb5_rd_priv()
137 	if (part.timestamp == NULL ||  in krb5_rd_priv()
138 	    part.usec      == NULL ||  in krb5_rd_priv()
139 	    abs(*part.timestamp - sec) > context->max_skew) {  in krb5_rd_priv()
146     /* XXX - check replay cache */  in krb5_rd_priv()
148     /* check sequence number. since MIT krb5 cannot generate a sequence  in krb5_rd_priv()
149        number of zero but instead generates no sequence number, we accept that  in krb5_rd_priv()
152     if (auth_context->flags & KRB5_AUTH_CONTEXT_DO_SEQUENCE) {  in krb5_rd_priv()
153 	if ((part.seq_number == NULL  in krb5_rd_priv()
154 	     && auth_context->remote_seqnumber != 0)  in krb5_rd_priv()
155 	    || (part.seq_number != NULL  in krb5_rd_priv()
156 		&& *part.seq_number != auth_context->remote_seqnumber)) {  in krb5_rd_priv()
161 	auth_context->remote_seqnumber++;  in krb5_rd_priv()
164     ret = krb5_data_copy (outbuf, part.user_data.data, part.user_data.length);  in krb5_rd_priv()
168     if ((auth_context->flags &  in krb5_rd_priv()
170 	if(part.timestamp)  in krb5_rd_priv()
171 	    outdata->timestamp = *part.timestamp;  in krb5_rd_priv()
172 	if(part.usec)  in krb5_rd_priv()
173 	    outdata->usec = *part.usec;  in krb5_rd_priv()
174 	if(part.seq_number)  in krb5_rd_priv()
175 	    outdata->seq = *part.seq_number;  in krb5_rd_priv()
179     free_EncKrbPrivPart (&part);  in krb5_rd_priv()