1 2 /* 3 * lib/krb5/os/genaddrs.c 4 * 5 * Copyright 1995 by the Massachusetts Institute of Technology. 6 * All Rights Reserved. 7 * 8 * Export of this software from the United States of America may 9 * require a specific license from the United States Government. 10 * It is the responsibility of any person or organization contemplating 11 * export to obtain such a license before exporting. 12 * 13 * WITHIN THAT CONSTRAINT, permission to use, copy, modify, and 14 * distribute this software and its documentation for any purpose and 15 * without fee is hereby granted, provided that the above copyright 16 * notice appear in all copies and that both that copyright notice and 17 * this permission notice appear in supporting documentation, and that 18 * the name of M.I.T. not be used in advertising or publicity pertaining 19 * to distribution of the software without specific, written prior 20 * permission. Furthermore if you modify this software you must label 21 * your software as modified software and not distribute it in such a 22 * fashion that it might be confused with the original M.I.T. software. 23 * M.I.T. makes no representations about the suitability of 24 * this software for any purpose. It is provided "as is" without express 25 * or implied warranty. 26 * 27 * 28 * Take an IP addr & port and generate a full IP address. 29 */ 30 31 #include "k5-int.h" 32 #include "os-proto.h" 33 34 #if !defined(_WINSOCKAPI_) 35 #include <netinet/in.h> 36 #endif 37 38 /* Solaris Kerberos */ 39 #include <inet/ip.h> 40 #include <inet/ip6.h> 41 42 struct addrpair { 43 krb5_address addr, port; 44 }; 45 46 #define SET(TARG, THING, TYPE) \ 47 ((TARG).contents = (krb5_octet *) &(THING), \ 48 (TARG).length = sizeof (THING), \ 49 (TARG).addrtype = (TYPE)) 50 51 static void *cvtaddr (struct sockaddr_storage *a, struct addrpair *ap) 52 { 53 switch (ss2sa(a)->sa_family) { 54 case AF_INET: 55 SET (ap->port, ss2sin(a)->sin_port, ADDRTYPE_IPPORT); 56 SET (ap->addr, ss2sin(a)->sin_addr, ADDRTYPE_INET); 57 return a; 58 #ifdef KRB5_USE_INET6 59 case AF_INET6: 60 SET (ap->port, ss2sin6(a)->sin6_port, ADDRTYPE_IPPORT); 61 if (IN6_IS_ADDR_V4MAPPED (&ss2sin6(a)->sin6_addr)) { 62 ap->addr.addrtype = ADDRTYPE_INET; 63 /* Solaris Kerberos */ 64 ap->addr.contents = (IPV6_ADDR_LEN - IPV4_ADDR_LEN) + 65 (krb5_octet *) &ss2sin6(a)->sin6_addr; 66 ap->addr.length = IPV4_ADDR_LEN; 67 } else 68 SET (ap->addr, ss2sin6(a)->sin6_addr, ADDRTYPE_INET6); 69 return a; 70 #endif 71 default: 72 return 0; 73 } 74 } 75 76 krb5_error_code KRB5_CALLCONV 77 krb5_auth_con_genaddrs(krb5_context context, krb5_auth_context auth_context, int infd, int flags) 78 { 79 krb5_error_code retval; 80 krb5_address * laddr; 81 krb5_address * lport; 82 krb5_address * raddr; 83 krb5_address * rport; 84 SOCKET fd = (SOCKET) infd; 85 struct addrpair laddrs, raddrs; 86 87 #ifdef HAVE_NETINET_IN_H 88 struct sockaddr_storage lsaddr, rsaddr; 89 GETSOCKNAME_ARG3_TYPE ssize; 90 91 ssize = sizeof(struct sockaddr_storage); 92 if ((flags & KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR) || 93 (flags & KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR)) { 94 if ((retval = getsockname(fd, (GETSOCKNAME_ARG2_TYPE *) &lsaddr, 95 &ssize))) 96 return retval; 97 98 if (cvtaddr (&lsaddr, &laddrs)) { 99 laddr = &laddrs.addr; 100 if (flags & KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR) 101 lport = &laddrs.port; 102 else 103 lport = 0; 104 } else 105 return KRB5_PROG_ATYPE_NOSUPP; 106 } else { 107 laddr = NULL; 108 lport = NULL; 109 } 110 111 ssize = sizeof(struct sockaddr_storage); 112 if ((flags & KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR) || 113 (flags & KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR)) { 114 if ((retval = getpeername(fd, (GETPEERNAME_ARG2_TYPE *) &rsaddr, 115 &ssize))) 116 return errno; 117 118 if (cvtaddr (&rsaddr, &raddrs)) { 119 raddr = &raddrs.addr; 120 if (flags & KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR) 121 rport = &raddrs.port; 122 else 123 rport = 0; 124 } else 125 return KRB5_PROG_ATYPE_NOSUPP; 126 } else { 127 raddr = NULL; 128 rport = NULL; 129 } 130 131 if (!(retval = krb5_auth_con_setaddrs(context, auth_context, laddr, raddr))) 132 return (krb5_auth_con_setports(context, auth_context, lport, rport)); 133 return retval; 134 #else 135 return KRB5_PROG_ATYPE_NOSUPP; 136 #endif 137 } 138