1b528cefcSMark Murray /* 2*ae771770SStanislav Sedov * Copyright (c) 1997 - 2002 Kungliga Tekniska Högskolan 3b528cefcSMark Murray * (Royal Institute of Technology, Stockholm, Sweden). 4b528cefcSMark Murray * All rights reserved. 5b528cefcSMark Murray * 6b528cefcSMark Murray * Redistribution and use in source and binary forms, with or without 7b528cefcSMark Murray * modification, are permitted provided that the following conditions 8b528cefcSMark Murray * are met: 9b528cefcSMark Murray * 10b528cefcSMark Murray * 1. Redistributions of source code must retain the above copyright 11b528cefcSMark Murray * notice, this list of conditions and the following disclaimer. 12b528cefcSMark Murray * 13b528cefcSMark Murray * 2. Redistributions in binary form must reproduce the above copyright 14b528cefcSMark Murray * notice, this list of conditions and the following disclaimer in the 15b528cefcSMark Murray * documentation and/or other materials provided with the distribution. 16b528cefcSMark Murray * 17b528cefcSMark Murray * 3. Neither the name of the Institute nor the names of its contributors 18b528cefcSMark Murray * may be used to endorse or promote products derived from this software 19b528cefcSMark Murray * without specific prior written permission. 20b528cefcSMark Murray * 21b528cefcSMark Murray * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND 22b528cefcSMark Murray * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 23b528cefcSMark Murray * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 24b528cefcSMark Murray * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE 25b528cefcSMark Murray * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 26b528cefcSMark Murray * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 27b528cefcSMark Murray * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 28b528cefcSMark Murray * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 29b528cefcSMark Murray * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 30b528cefcSMark Murray * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 31b528cefcSMark Murray * SUCH DAMAGE. 32b528cefcSMark Murray */ 33b528cefcSMark Murray 34b528cefcSMark Murray #include "krb5_locl.h" 35*ae771770SStanislav Sedov #include "send_to_kdc_plugin.h" 36c19800e8SDoug Rabson 37c19800e8SDoug Rabson struct send_to_kdc { 38c19800e8SDoug Rabson krb5_send_to_kdc_func func; 39c19800e8SDoug Rabson void *data; 40c19800e8SDoug Rabson }; 41b528cefcSMark Murray 42b528cefcSMark Murray /* 43b528cefcSMark Murray * send the data in `req' on the socket `fd' (which is datagram iff udp) 44b528cefcSMark Murray * waiting `tmout' for a reply and returning the reply in `rep'. 45b528cefcSMark Murray * iff limit read up to this many bytes 46b528cefcSMark Murray * returns 0 and data in `rep' if succesful, otherwise -1 47b528cefcSMark Murray */ 48b528cefcSMark Murray 49b528cefcSMark Murray static int 50*ae771770SStanislav Sedov recv_loop (krb5_socket_t fd, 51b528cefcSMark Murray time_t tmout, 52b528cefcSMark Murray int udp, 53b528cefcSMark Murray size_t limit, 54b528cefcSMark Murray krb5_data *rep) 55b528cefcSMark Murray { 56b528cefcSMark Murray fd_set fdset; 57b528cefcSMark Murray struct timeval timeout; 58b528cefcSMark Murray int ret; 59b528cefcSMark Murray int nbytes; 60b528cefcSMark Murray 61*ae771770SStanislav Sedov #ifndef NO_LIMIT_FD_SETSIZE 625e9cd1aeSAssar Westerlund if (fd >= FD_SETSIZE) { 635e9cd1aeSAssar Westerlund return -1; 645e9cd1aeSAssar Westerlund } 65*ae771770SStanislav Sedov #endif 665e9cd1aeSAssar Westerlund 67b528cefcSMark Murray krb5_data_zero(rep); 68b528cefcSMark Murray do { 69b528cefcSMark Murray FD_ZERO(&fdset); 70b528cefcSMark Murray FD_SET(fd, &fdset); 71b528cefcSMark Murray timeout.tv_sec = tmout; 72b528cefcSMark Murray timeout.tv_usec = 0; 73b528cefcSMark Murray ret = select (fd + 1, &fdset, NULL, NULL, &timeout); 74b528cefcSMark Murray if (ret < 0) { 75b528cefcSMark Murray if (errno == EINTR) 76b528cefcSMark Murray continue; 77b528cefcSMark Murray return -1; 78b528cefcSMark Murray } else if (ret == 0) { 79b528cefcSMark Murray return 0; 80b528cefcSMark Murray } else { 81b528cefcSMark Murray void *tmp; 82b528cefcSMark Murray 83*ae771770SStanislav Sedov if (rk_SOCK_IOCTL (fd, FIONREAD, &nbytes) < 0) { 84b528cefcSMark Murray krb5_data_free (rep); 85b528cefcSMark Murray return -1; 86b528cefcSMark Murray } 87c19800e8SDoug Rabson if(nbytes <= 0) 88b528cefcSMark Murray return 0; 89b528cefcSMark Murray 90b528cefcSMark Murray if (limit) 91*ae771770SStanislav Sedov nbytes = min((size_t)nbytes, limit - rep->length); 92b528cefcSMark Murray 93b528cefcSMark Murray tmp = realloc (rep->data, rep->length + nbytes); 94b528cefcSMark Murray if (tmp == NULL) { 95b528cefcSMark Murray krb5_data_free (rep); 96b528cefcSMark Murray return -1; 97b528cefcSMark Murray } 98b528cefcSMark Murray rep->data = tmp; 99b528cefcSMark Murray ret = recv (fd, (char*)tmp + rep->length, nbytes, 0); 100b528cefcSMark Murray if (ret < 0) { 101b528cefcSMark Murray krb5_data_free (rep); 102b528cefcSMark Murray return -1; 103b528cefcSMark Murray } 104b528cefcSMark Murray rep->length += ret; 105b528cefcSMark Murray } 106b528cefcSMark Murray } while(!udp && (limit == 0 || rep->length < limit)); 107b528cefcSMark Murray return 0; 108b528cefcSMark Murray } 109b528cefcSMark Murray 110b528cefcSMark Murray /* 111b528cefcSMark Murray * Send kerberos requests and receive a reply on a udp or any other kind 112b528cefcSMark Murray * of a datagram socket. See `recv_loop'. 113b528cefcSMark Murray */ 114b528cefcSMark Murray 115b528cefcSMark Murray static int 116*ae771770SStanislav Sedov send_and_recv_udp(krb5_socket_t fd, 117b528cefcSMark Murray time_t tmout, 118b528cefcSMark Murray const krb5_data *req, 119b528cefcSMark Murray krb5_data *rep) 120b528cefcSMark Murray { 121b528cefcSMark Murray if (send (fd, req->data, req->length, 0) < 0) 122b528cefcSMark Murray return -1; 123b528cefcSMark Murray 124b528cefcSMark Murray return recv_loop(fd, tmout, 1, 0, rep); 125b528cefcSMark Murray } 126b528cefcSMark Murray 127b528cefcSMark Murray /* 128b528cefcSMark Murray * `send_and_recv' for a TCP (or any other stream) socket. 129b528cefcSMark Murray * Since there are no record limits on a stream socket the protocol here 130b528cefcSMark Murray * is to prepend the request with 4 bytes of its length and the reply 131b528cefcSMark Murray * is similarly encoded. 132b528cefcSMark Murray */ 133b528cefcSMark Murray 134b528cefcSMark Murray static int 135*ae771770SStanislav Sedov send_and_recv_tcp(krb5_socket_t fd, 136b528cefcSMark Murray time_t tmout, 137b528cefcSMark Murray const krb5_data *req, 138b528cefcSMark Murray krb5_data *rep) 139b528cefcSMark Murray { 140b528cefcSMark Murray unsigned char len[4]; 141b528cefcSMark Murray unsigned long rep_len; 142b528cefcSMark Murray krb5_data len_data; 143b528cefcSMark Murray 144b528cefcSMark Murray _krb5_put_int(len, req->length, 4); 145b528cefcSMark Murray if(net_write (fd, len, sizeof(len)) < 0) 146b528cefcSMark Murray return -1; 147b528cefcSMark Murray if(net_write (fd, req->data, req->length) < 0) 148b528cefcSMark Murray return -1; 149b528cefcSMark Murray if (recv_loop (fd, tmout, 0, 4, &len_data) < 0) 150b528cefcSMark Murray return -1; 151b528cefcSMark Murray if (len_data.length != 4) { 152b528cefcSMark Murray krb5_data_free (&len_data); 153b528cefcSMark Murray return -1; 154b528cefcSMark Murray } 155b528cefcSMark Murray _krb5_get_int(len_data.data, &rep_len, 4); 156b528cefcSMark Murray krb5_data_free (&len_data); 157b528cefcSMark Murray if (recv_loop (fd, tmout, 0, rep_len, rep) < 0) 158b528cefcSMark Murray return -1; 159b528cefcSMark Murray if(rep->length != rep_len) { 160b528cefcSMark Murray krb5_data_free (rep); 161b528cefcSMark Murray return -1; 162b528cefcSMark Murray } 163b528cefcSMark Murray return 0; 164b528cefcSMark Murray } 165b528cefcSMark Murray 166c19800e8SDoug Rabson int 167*ae771770SStanislav Sedov _krb5_send_and_recv_tcp(krb5_socket_t fd, 168c19800e8SDoug Rabson time_t tmout, 169c19800e8SDoug Rabson const krb5_data *req, 170c19800e8SDoug Rabson krb5_data *rep) 171c19800e8SDoug Rabson { 172c19800e8SDoug Rabson return send_and_recv_tcp(fd, tmout, req, rep); 173c19800e8SDoug Rabson } 174c19800e8SDoug Rabson 175b528cefcSMark Murray /* 176b528cefcSMark Murray * `send_and_recv' tailored for the HTTP protocol. 177b528cefcSMark Murray */ 178b528cefcSMark Murray 179b528cefcSMark Murray static int 180*ae771770SStanislav Sedov send_and_recv_http(krb5_socket_t fd, 181b528cefcSMark Murray time_t tmout, 182b528cefcSMark Murray const char *prefix, 183b528cefcSMark Murray const krb5_data *req, 184b528cefcSMark Murray krb5_data *rep) 185b528cefcSMark Murray { 186*ae771770SStanislav Sedov char *request = NULL; 187b528cefcSMark Murray char *str; 188b528cefcSMark Murray int ret; 189b528cefcSMark Murray int len = base64_encode(req->data, req->length, &str); 190b528cefcSMark Murray 191b528cefcSMark Murray if(len < 0) 192b528cefcSMark Murray return -1; 193*ae771770SStanislav Sedov ret = asprintf(&request, "GET %s%s HTTP/1.0\r\n\r\n", prefix, str); 194b528cefcSMark Murray free(str); 195*ae771770SStanislav Sedov if (ret < 0 || request == NULL) 196b528cefcSMark Murray return -1; 197b528cefcSMark Murray ret = net_write (fd, request, strlen(request)); 198b528cefcSMark Murray free (request); 199b528cefcSMark Murray if (ret < 0) 200b528cefcSMark Murray return ret; 201b528cefcSMark Murray ret = recv_loop(fd, tmout, 0, 0, rep); 202b528cefcSMark Murray if(ret) 203b528cefcSMark Murray return ret; 204b528cefcSMark Murray { 205b528cefcSMark Murray unsigned long rep_len; 206b528cefcSMark Murray char *s, *p; 207b528cefcSMark Murray 208b528cefcSMark Murray s = realloc(rep->data, rep->length + 1); 209b528cefcSMark Murray if (s == NULL) { 210b528cefcSMark Murray krb5_data_free (rep); 211b528cefcSMark Murray return -1; 212b528cefcSMark Murray } 213b528cefcSMark Murray s[rep->length] = 0; 214b528cefcSMark Murray p = strstr(s, "\r\n\r\n"); 215b528cefcSMark Murray if(p == NULL) { 216c19800e8SDoug Rabson krb5_data_zero(rep); 217b528cefcSMark Murray free(s); 218b528cefcSMark Murray return -1; 219b528cefcSMark Murray } 220b528cefcSMark Murray p += 4; 221b528cefcSMark Murray rep->data = s; 222b528cefcSMark Murray rep->length -= p - s; 223b528cefcSMark Murray if(rep->length < 4) { /* remove length */ 224c19800e8SDoug Rabson krb5_data_zero(rep); 225b528cefcSMark Murray free(s); 226b528cefcSMark Murray return -1; 227b528cefcSMark Murray } 228b528cefcSMark Murray rep->length -= 4; 229b528cefcSMark Murray _krb5_get_int(p, &rep_len, 4); 230b528cefcSMark Murray if (rep_len != rep->length) { 231c19800e8SDoug Rabson krb5_data_zero(rep); 232b528cefcSMark Murray free(s); 233b528cefcSMark Murray return -1; 234b528cefcSMark Murray } 235b528cefcSMark Murray memmove(rep->data, p + 4, rep->length); 236b528cefcSMark Murray } 237b528cefcSMark Murray return 0; 238b528cefcSMark Murray } 239b528cefcSMark Murray 240b528cefcSMark Murray static int 241b528cefcSMark Murray init_port(const char *s, int fallback) 242b528cefcSMark Murray { 243b528cefcSMark Murray if (s) { 244b528cefcSMark Murray int tmp; 245b528cefcSMark Murray 246b528cefcSMark Murray sscanf (s, "%d", &tmp); 247b528cefcSMark Murray return htons(tmp); 248b528cefcSMark Murray } else 249b528cefcSMark Murray return fallback; 250b528cefcSMark Murray } 251b528cefcSMark Murray 252b528cefcSMark Murray /* 253b528cefcSMark Murray * Return 0 if succesful, otherwise 1 254b528cefcSMark Murray */ 255b528cefcSMark Murray 256b528cefcSMark Murray static int 257b528cefcSMark Murray send_via_proxy (krb5_context context, 2584137ff4cSJacques Vidrine const krb5_krbhst_info *hi, 2598373020dSJacques Vidrine const krb5_data *send_data, 260b528cefcSMark Murray krb5_data *receive) 261b528cefcSMark Murray { 2625e9cd1aeSAssar Westerlund char *proxy2 = strdup(context->http_proxy); 2635e9cd1aeSAssar Westerlund char *proxy = proxy2; 264*ae771770SStanislav Sedov char *prefix = NULL; 265b528cefcSMark Murray char *colon; 266b528cefcSMark Murray struct addrinfo hints; 267b528cefcSMark Murray struct addrinfo *ai, *a; 268b528cefcSMark Murray int ret; 269*ae771770SStanislav Sedov krb5_socket_t s = rk_INVALID_SOCKET; 270b528cefcSMark Murray char portstr[NI_MAXSERV]; 271b528cefcSMark Murray 2725e9cd1aeSAssar Westerlund if (proxy == NULL) 2735e9cd1aeSAssar Westerlund return ENOMEM; 2745e9cd1aeSAssar Westerlund if (strncmp (proxy, "http://", 7) == 0) 2755e9cd1aeSAssar Westerlund proxy += 7; 2765e9cd1aeSAssar Westerlund 277b528cefcSMark Murray colon = strchr(proxy, ':'); 278b528cefcSMark Murray if(colon != NULL) 279b528cefcSMark Murray *colon++ = '\0'; 280b528cefcSMark Murray memset (&hints, 0, sizeof(hints)); 281b528cefcSMark Murray hints.ai_family = PF_UNSPEC; 282b528cefcSMark Murray hints.ai_socktype = SOCK_STREAM; 283b528cefcSMark Murray snprintf (portstr, sizeof(portstr), "%d", 284b528cefcSMark Murray ntohs(init_port (colon, htons(80)))); 2855e9cd1aeSAssar Westerlund ret = getaddrinfo (proxy, portstr, &hints, &ai); 2865e9cd1aeSAssar Westerlund free (proxy2); 287b528cefcSMark Murray if (ret) 288adb0ddaeSAssar Westerlund return krb5_eai_to_heim_errno(ret, errno); 289b528cefcSMark Murray 290b528cefcSMark Murray for (a = ai; a != NULL; a = a->ai_next) { 291*ae771770SStanislav Sedov s = socket (a->ai_family, a->ai_socktype | SOCK_CLOEXEC, a->ai_protocol); 292b528cefcSMark Murray if (s < 0) 293b528cefcSMark Murray continue; 294*ae771770SStanislav Sedov rk_cloexec(s); 295b528cefcSMark Murray if (connect (s, a->ai_addr, a->ai_addrlen) < 0) { 296*ae771770SStanislav Sedov rk_closesocket (s); 297b528cefcSMark Murray continue; 298b528cefcSMark Murray } 299b528cefcSMark Murray break; 300b528cefcSMark Murray } 301b528cefcSMark Murray if (a == NULL) { 302b528cefcSMark Murray freeaddrinfo (ai); 303b528cefcSMark Murray return 1; 304b528cefcSMark Murray } 305b528cefcSMark Murray freeaddrinfo (ai); 306b528cefcSMark Murray 307*ae771770SStanislav Sedov ret = asprintf(&prefix, "http://%s/", hi->hostname); 308*ae771770SStanislav Sedov if(ret < 0 || prefix == NULL) { 309b528cefcSMark Murray close(s); 310b528cefcSMark Murray return 1; 311b528cefcSMark Murray } 312b528cefcSMark Murray ret = send_and_recv_http(s, context->kdc_timeout, 3138373020dSJacques Vidrine prefix, send_data, receive); 314*ae771770SStanislav Sedov rk_closesocket (s); 315b528cefcSMark Murray free(prefix); 316b528cefcSMark Murray if(ret == 0 && receive->length != 0) 317b528cefcSMark Murray return 0; 318b528cefcSMark Murray return 1; 319b528cefcSMark Murray } 320b528cefcSMark Murray 321*ae771770SStanislav Sedov static krb5_error_code 322*ae771770SStanislav Sedov send_via_plugin(krb5_context context, 323*ae771770SStanislav Sedov krb5_krbhst_info *hi, 324*ae771770SStanislav Sedov time_t timeout, 325*ae771770SStanislav Sedov const krb5_data *send_data, 326*ae771770SStanislav Sedov krb5_data *receive) 327*ae771770SStanislav Sedov { 328*ae771770SStanislav Sedov struct krb5_plugin *list = NULL, *e; 329*ae771770SStanislav Sedov krb5_error_code ret; 330*ae771770SStanislav Sedov 331*ae771770SStanislav Sedov ret = _krb5_plugin_find(context, PLUGIN_TYPE_DATA, KRB5_PLUGIN_SEND_TO_KDC, &list); 332*ae771770SStanislav Sedov if(ret != 0 || list == NULL) 333*ae771770SStanislav Sedov return KRB5_PLUGIN_NO_HANDLE; 334*ae771770SStanislav Sedov 335*ae771770SStanislav Sedov for (e = list; e != NULL; e = _krb5_plugin_get_next(e)) { 336*ae771770SStanislav Sedov krb5plugin_send_to_kdc_ftable *service; 337*ae771770SStanislav Sedov void *ctx; 338*ae771770SStanislav Sedov 339*ae771770SStanislav Sedov service = _krb5_plugin_get_symbol(e); 340*ae771770SStanislav Sedov if (service->minor_version != 0) 341*ae771770SStanislav Sedov continue; 342*ae771770SStanislav Sedov 343*ae771770SStanislav Sedov (*service->init)(context, &ctx); 344*ae771770SStanislav Sedov ret = (*service->send_to_kdc)(context, ctx, hi, 345*ae771770SStanislav Sedov timeout, send_data, receive); 346*ae771770SStanislav Sedov (*service->fini)(ctx); 347*ae771770SStanislav Sedov if (ret == 0) 348*ae771770SStanislav Sedov break; 349*ae771770SStanislav Sedov if (ret != KRB5_PLUGIN_NO_HANDLE) { 350*ae771770SStanislav Sedov krb5_set_error_message(context, ret, 351*ae771770SStanislav Sedov N_("Plugin send_to_kdc failed to " 352*ae771770SStanislav Sedov "lookup with error: %d", ""), ret); 353*ae771770SStanislav Sedov break; 354*ae771770SStanislav Sedov } 355*ae771770SStanislav Sedov } 356*ae771770SStanislav Sedov _krb5_plugin_free(list); 357*ae771770SStanislav Sedov return KRB5_PLUGIN_NO_HANDLE; 358*ae771770SStanislav Sedov } 359*ae771770SStanislav Sedov 360*ae771770SStanislav Sedov 361b528cefcSMark Murray /* 3624137ff4cSJacques Vidrine * Send the data `send' to one host from `handle` and get back the reply 363b528cefcSMark Murray * in `receive'. 364b528cefcSMark Murray */ 365b528cefcSMark Murray 366*ae771770SStanislav Sedov KRB5_LIB_FUNCTION krb5_error_code KRB5_LIB_CALL 3675e9cd1aeSAssar Westerlund krb5_sendto (krb5_context context, 3688373020dSJacques Vidrine const krb5_data *send_data, 3694137ff4cSJacques Vidrine krb5_krbhst_handle handle, 370b528cefcSMark Murray krb5_data *receive) 371b528cefcSMark Murray { 372c19800e8SDoug Rabson krb5_error_code ret; 373*ae771770SStanislav Sedov krb5_socket_t fd; 374*ae771770SStanislav Sedov size_t i; 375b528cefcSMark Murray 376c19800e8SDoug Rabson krb5_data_zero(receive); 377c19800e8SDoug Rabson 378adb0ddaeSAssar Westerlund for (i = 0; i < context->max_retries; ++i) { 3794137ff4cSJacques Vidrine krb5_krbhst_info *hi; 380b528cefcSMark Murray 3814137ff4cSJacques Vidrine while (krb5_krbhst_next(context, handle, &hi) == 0) { 3824137ff4cSJacques Vidrine struct addrinfo *ai, *a; 3834137ff4cSJacques Vidrine 384*ae771770SStanislav Sedov _krb5_debug(context, 2, 385*ae771770SStanislav Sedov "trying to communicate with host %s in realm %s", 386*ae771770SStanislav Sedov hi->hostname, _krb5_krbhst_get_realm(handle)); 387*ae771770SStanislav Sedov 388c19800e8SDoug Rabson if (context->send_to_kdc) { 389c19800e8SDoug Rabson struct send_to_kdc *s = context->send_to_kdc; 390c19800e8SDoug Rabson 391*ae771770SStanislav Sedov ret = (*s->func)(context, s->data, hi, 392*ae771770SStanislav Sedov context->kdc_timeout, send_data, receive); 393c19800e8SDoug Rabson if (ret == 0 && receive->length != 0) 394b528cefcSMark Murray goto out; 395c19800e8SDoug Rabson continue; 396c19800e8SDoug Rabson } 397c19800e8SDoug Rabson 398*ae771770SStanislav Sedov ret = send_via_plugin(context, hi, context->kdc_timeout, 399*ae771770SStanislav Sedov send_data, receive); 400*ae771770SStanislav Sedov if (ret == 0 && receive->length != 0) 401*ae771770SStanislav Sedov goto out; 402*ae771770SStanislav Sedov else if (ret != KRB5_PLUGIN_NO_HANDLE) 403*ae771770SStanislav Sedov continue; 404*ae771770SStanislav Sedov 405c19800e8SDoug Rabson if(hi->proto == KRB5_KRBHST_HTTP && context->http_proxy) { 406c19800e8SDoug Rabson if (send_via_proxy (context, hi, send_data, receive) == 0) { 407c19800e8SDoug Rabson ret = 0; 408c19800e8SDoug Rabson goto out; 409c19800e8SDoug Rabson } 410c19800e8SDoug Rabson continue; 411b528cefcSMark Murray } 412b528cefcSMark Murray 4134137ff4cSJacques Vidrine ret = krb5_krbhst_get_addrinfo(context, hi, &ai); 414b528cefcSMark Murray if (ret) 415b528cefcSMark Murray continue; 4164137ff4cSJacques Vidrine 417b528cefcSMark Murray for (a = ai; a != NULL; a = a->ai_next) { 418*ae771770SStanislav Sedov fd = socket (a->ai_family, a->ai_socktype | SOCK_CLOEXEC, a->ai_protocol); 419*ae771770SStanislav Sedov if (rk_IS_BAD_SOCKET(fd)) 420b528cefcSMark Murray continue; 421*ae771770SStanislav Sedov rk_cloexec(fd); 422b528cefcSMark Murray if (connect (fd, a->ai_addr, a->ai_addrlen) < 0) { 423*ae771770SStanislav Sedov rk_closesocket (fd); 424b528cefcSMark Murray continue; 425b528cefcSMark Murray } 4264137ff4cSJacques Vidrine switch (hi->proto) { 4274137ff4cSJacques Vidrine case KRB5_KRBHST_HTTP : 428b528cefcSMark Murray ret = send_and_recv_http(fd, context->kdc_timeout, 4298373020dSJacques Vidrine "", send_data, receive); 4304137ff4cSJacques Vidrine break; 4314137ff4cSJacques Vidrine case KRB5_KRBHST_TCP : 432b528cefcSMark Murray ret = send_and_recv_tcp (fd, context->kdc_timeout, 4338373020dSJacques Vidrine send_data, receive); 4344137ff4cSJacques Vidrine break; 4354137ff4cSJacques Vidrine case KRB5_KRBHST_UDP : 436b528cefcSMark Murray ret = send_and_recv_udp (fd, context->kdc_timeout, 4378373020dSJacques Vidrine send_data, receive); 4384137ff4cSJacques Vidrine break; 4394137ff4cSJacques Vidrine } 440*ae771770SStanislav Sedov rk_closesocket (fd); 4414137ff4cSJacques Vidrine if(ret == 0 && receive->length != 0) 442b528cefcSMark Murray goto out; 443b528cefcSMark Murray } 444adb0ddaeSAssar Westerlund } 4454137ff4cSJacques Vidrine krb5_krbhst_reset(context, handle); 446adb0ddaeSAssar Westerlund } 447*ae771770SStanislav Sedov krb5_clear_error_message (context); 448b528cefcSMark Murray ret = KRB5_KDC_UNREACH; 449b528cefcSMark Murray out: 450*ae771770SStanislav Sedov _krb5_debug(context, 2, 451*ae771770SStanislav Sedov "result of trying to talk to realm %s = %d", 452*ae771770SStanislav Sedov _krb5_krbhst_get_realm(handle), ret); 4535e9cd1aeSAssar Westerlund return ret; 4545e9cd1aeSAssar Westerlund } 4555e9cd1aeSAssar Westerlund 456*ae771770SStanislav Sedov KRB5_LIB_FUNCTION krb5_error_code KRB5_LIB_CALL 4575e9cd1aeSAssar Westerlund krb5_sendto_kdc(krb5_context context, 4588373020dSJacques Vidrine const krb5_data *send_data, 4595e9cd1aeSAssar Westerlund const krb5_realm *realm, 4605e9cd1aeSAssar Westerlund krb5_data *receive) 4615e9cd1aeSAssar Westerlund { 462c19800e8SDoug Rabson return krb5_sendto_kdc_flags(context, send_data, realm, receive, 0); 463c19800e8SDoug Rabson } 464c19800e8SDoug Rabson 465*ae771770SStanislav Sedov KRB5_LIB_FUNCTION krb5_error_code KRB5_LIB_CALL 466c19800e8SDoug Rabson krb5_sendto_kdc_flags(krb5_context context, 467c19800e8SDoug Rabson const krb5_data *send_data, 468c19800e8SDoug Rabson const krb5_realm *realm, 469c19800e8SDoug Rabson krb5_data *receive, 470c19800e8SDoug Rabson int flags) 471c19800e8SDoug Rabson { 472c19800e8SDoug Rabson krb5_error_code ret; 473c19800e8SDoug Rabson krb5_sendto_ctx ctx; 474c19800e8SDoug Rabson 475c19800e8SDoug Rabson ret = krb5_sendto_ctx_alloc(context, &ctx); 476c19800e8SDoug Rabson if (ret) 477c19800e8SDoug Rabson return ret; 478c19800e8SDoug Rabson krb5_sendto_ctx_add_flags(ctx, flags); 479c19800e8SDoug Rabson krb5_sendto_ctx_set_func(ctx, _krb5_kdc_retry, NULL); 480c19800e8SDoug Rabson 481c19800e8SDoug Rabson ret = krb5_sendto_context(context, ctx, send_data, *realm, receive); 482c19800e8SDoug Rabson krb5_sendto_ctx_free(context, ctx); 483c19800e8SDoug Rabson return ret; 484c19800e8SDoug Rabson } 485c19800e8SDoug Rabson 486*ae771770SStanislav Sedov KRB5_LIB_FUNCTION krb5_error_code KRB5_LIB_CALL 487c19800e8SDoug Rabson krb5_set_send_to_kdc_func(krb5_context context, 488c19800e8SDoug Rabson krb5_send_to_kdc_func func, 489c19800e8SDoug Rabson void *data) 490c19800e8SDoug Rabson { 491c19800e8SDoug Rabson free(context->send_to_kdc); 492c19800e8SDoug Rabson if (func == NULL) { 493c19800e8SDoug Rabson context->send_to_kdc = NULL; 494c19800e8SDoug Rabson return 0; 495c19800e8SDoug Rabson } 496c19800e8SDoug Rabson 497c19800e8SDoug Rabson context->send_to_kdc = malloc(sizeof(*context->send_to_kdc)); 498c19800e8SDoug Rabson if (context->send_to_kdc == NULL) { 499*ae771770SStanislav Sedov krb5_set_error_message(context, ENOMEM, 500*ae771770SStanislav Sedov N_("malloc: out of memory", "")); 501c19800e8SDoug Rabson return ENOMEM; 502c19800e8SDoug Rabson } 503c19800e8SDoug Rabson 504c19800e8SDoug Rabson context->send_to_kdc->func = func; 505c19800e8SDoug Rabson context->send_to_kdc->data = data; 506c19800e8SDoug Rabson return 0; 507c19800e8SDoug Rabson } 508c19800e8SDoug Rabson 509*ae771770SStanislav Sedov KRB5_LIB_FUNCTION krb5_error_code KRB5_LIB_CALL 510*ae771770SStanislav Sedov _krb5_copy_send_to_kdc_func(krb5_context context, krb5_context to) 511*ae771770SStanislav Sedov { 512*ae771770SStanislav Sedov if (context->send_to_kdc) 513*ae771770SStanislav Sedov return krb5_set_send_to_kdc_func(to, 514*ae771770SStanislav Sedov context->send_to_kdc->func, 515*ae771770SStanislav Sedov context->send_to_kdc->data); 516*ae771770SStanislav Sedov else 517*ae771770SStanislav Sedov return krb5_set_send_to_kdc_func(to, NULL, NULL); 518*ae771770SStanislav Sedov } 519*ae771770SStanislav Sedov 520*ae771770SStanislav Sedov 521*ae771770SStanislav Sedov 522c19800e8SDoug Rabson struct krb5_sendto_ctx_data { 523c19800e8SDoug Rabson int flags; 524c19800e8SDoug Rabson int type; 525c19800e8SDoug Rabson krb5_sendto_ctx_func func; 526c19800e8SDoug Rabson void *data; 527c19800e8SDoug Rabson }; 528c19800e8SDoug Rabson 529*ae771770SStanislav Sedov KRB5_LIB_FUNCTION krb5_error_code KRB5_LIB_CALL 530c19800e8SDoug Rabson krb5_sendto_ctx_alloc(krb5_context context, krb5_sendto_ctx *ctx) 531c19800e8SDoug Rabson { 532c19800e8SDoug Rabson *ctx = calloc(1, sizeof(**ctx)); 533c19800e8SDoug Rabson if (*ctx == NULL) { 534*ae771770SStanislav Sedov krb5_set_error_message(context, ENOMEM, 535*ae771770SStanislav Sedov N_("malloc: out of memory", "")); 536c19800e8SDoug Rabson return ENOMEM; 537c19800e8SDoug Rabson } 538c19800e8SDoug Rabson return 0; 539c19800e8SDoug Rabson } 540c19800e8SDoug Rabson 541*ae771770SStanislav Sedov KRB5_LIB_FUNCTION void KRB5_LIB_CALL 542c19800e8SDoug Rabson krb5_sendto_ctx_add_flags(krb5_sendto_ctx ctx, int flags) 543c19800e8SDoug Rabson { 544c19800e8SDoug Rabson ctx->flags |= flags; 545c19800e8SDoug Rabson } 546c19800e8SDoug Rabson 547*ae771770SStanislav Sedov KRB5_LIB_FUNCTION int KRB5_LIB_CALL 548c19800e8SDoug Rabson krb5_sendto_ctx_get_flags(krb5_sendto_ctx ctx) 549c19800e8SDoug Rabson { 550c19800e8SDoug Rabson return ctx->flags; 551c19800e8SDoug Rabson } 552c19800e8SDoug Rabson 553*ae771770SStanislav Sedov KRB5_LIB_FUNCTION void KRB5_LIB_CALL 554c19800e8SDoug Rabson krb5_sendto_ctx_set_type(krb5_sendto_ctx ctx, int type) 555c19800e8SDoug Rabson { 556c19800e8SDoug Rabson ctx->type = type; 557c19800e8SDoug Rabson } 558c19800e8SDoug Rabson 559c19800e8SDoug Rabson 560*ae771770SStanislav Sedov KRB5_LIB_FUNCTION void KRB5_LIB_CALL 561c19800e8SDoug Rabson krb5_sendto_ctx_set_func(krb5_sendto_ctx ctx, 562c19800e8SDoug Rabson krb5_sendto_ctx_func func, 563c19800e8SDoug Rabson void *data) 564c19800e8SDoug Rabson { 565c19800e8SDoug Rabson ctx->func = func; 566c19800e8SDoug Rabson ctx->data = data; 567c19800e8SDoug Rabson } 568c19800e8SDoug Rabson 569*ae771770SStanislav Sedov KRB5_LIB_FUNCTION void KRB5_LIB_CALL 570c19800e8SDoug Rabson krb5_sendto_ctx_free(krb5_context context, krb5_sendto_ctx ctx) 571c19800e8SDoug Rabson { 572c19800e8SDoug Rabson memset(ctx, 0, sizeof(*ctx)); 573c19800e8SDoug Rabson free(ctx); 574c19800e8SDoug Rabson } 575c19800e8SDoug Rabson 576*ae771770SStanislav Sedov KRB5_LIB_FUNCTION krb5_error_code KRB5_LIB_CALL 577c19800e8SDoug Rabson krb5_sendto_context(krb5_context context, 578c19800e8SDoug Rabson krb5_sendto_ctx ctx, 579c19800e8SDoug Rabson const krb5_data *send_data, 580c19800e8SDoug Rabson const krb5_realm realm, 581c19800e8SDoug Rabson krb5_data *receive) 582c19800e8SDoug Rabson { 583c19800e8SDoug Rabson krb5_error_code ret; 584c19800e8SDoug Rabson krb5_krbhst_handle handle = NULL; 585c19800e8SDoug Rabson int type, freectx = 0; 586c19800e8SDoug Rabson int action; 587c19800e8SDoug Rabson 588c19800e8SDoug Rabson krb5_data_zero(receive); 589c19800e8SDoug Rabson 590c19800e8SDoug Rabson if (ctx == NULL) { 591c19800e8SDoug Rabson freectx = 1; 592c19800e8SDoug Rabson ret = krb5_sendto_ctx_alloc(context, &ctx); 593c19800e8SDoug Rabson if (ret) 594c19800e8SDoug Rabson return ret; 595c19800e8SDoug Rabson } 596c19800e8SDoug Rabson 597c19800e8SDoug Rabson type = ctx->type; 598c19800e8SDoug Rabson if (type == 0) { 599c19800e8SDoug Rabson if ((ctx->flags & KRB5_KRBHST_FLAGS_MASTER) || context->use_admin_kdc) 600c19800e8SDoug Rabson type = KRB5_KRBHST_ADMIN; 601c19800e8SDoug Rabson else 602c19800e8SDoug Rabson type = KRB5_KRBHST_KDC; 603c19800e8SDoug Rabson } 604c19800e8SDoug Rabson 605*ae771770SStanislav Sedov if ((int)send_data->length > context->large_msg_size) 606c19800e8SDoug Rabson ctx->flags |= KRB5_KRBHST_FLAGS_LARGE_MSG; 607c19800e8SDoug Rabson 608c19800e8SDoug Rabson /* loop until we get back a appropriate response */ 609c19800e8SDoug Rabson 610c19800e8SDoug Rabson do { 611c19800e8SDoug Rabson action = KRB5_SENDTO_DONE; 612c19800e8SDoug Rabson 613c19800e8SDoug Rabson krb5_data_free(receive); 614c19800e8SDoug Rabson 615c19800e8SDoug Rabson if (handle == NULL) { 616c19800e8SDoug Rabson ret = krb5_krbhst_init_flags(context, realm, type, 617c19800e8SDoug Rabson ctx->flags, &handle); 618c19800e8SDoug Rabson if (ret) { 619c19800e8SDoug Rabson if (freectx) 620c19800e8SDoug Rabson krb5_sendto_ctx_free(context, ctx); 621c19800e8SDoug Rabson return ret; 622c19800e8SDoug Rabson } 623c19800e8SDoug Rabson } 624c19800e8SDoug Rabson 625c19800e8SDoug Rabson ret = krb5_sendto(context, send_data, handle, receive); 626c19800e8SDoug Rabson if (ret) 627c19800e8SDoug Rabson break; 628c19800e8SDoug Rabson if (ctx->func) { 629c19800e8SDoug Rabson ret = (*ctx->func)(context, ctx, ctx->data, receive, &action); 630c19800e8SDoug Rabson if (ret) 631c19800e8SDoug Rabson break; 632c19800e8SDoug Rabson } 633c19800e8SDoug Rabson if (action != KRB5_SENDTO_CONTINUE) { 634c19800e8SDoug Rabson krb5_krbhst_free(context, handle); 635c19800e8SDoug Rabson handle = NULL; 636c19800e8SDoug Rabson } 637c19800e8SDoug Rabson } while (action != KRB5_SENDTO_DONE); 638c19800e8SDoug Rabson if (handle) 639c19800e8SDoug Rabson krb5_krbhst_free(context, handle); 640c19800e8SDoug Rabson if (ret == KRB5_KDC_UNREACH) 641*ae771770SStanislav Sedov krb5_set_error_message(context, ret, 642*ae771770SStanislav Sedov N_("unable to reach any KDC in realm %s", ""), 643*ae771770SStanislav Sedov realm); 644c19800e8SDoug Rabson if (ret) 645c19800e8SDoug Rabson krb5_data_free(receive); 646c19800e8SDoug Rabson if (freectx) 647c19800e8SDoug Rabson krb5_sendto_ctx_free(context, ctx); 648c19800e8SDoug Rabson return ret; 649c19800e8SDoug Rabson } 650c19800e8SDoug Rabson 651*ae771770SStanislav Sedov krb5_error_code KRB5_CALLCONV 652c19800e8SDoug Rabson _krb5_kdc_retry(krb5_context context, krb5_sendto_ctx ctx, void *data, 653c19800e8SDoug Rabson const krb5_data *reply, int *action) 654c19800e8SDoug Rabson { 655c19800e8SDoug Rabson krb5_error_code ret; 656c19800e8SDoug Rabson KRB_ERROR error; 657c19800e8SDoug Rabson 658c19800e8SDoug Rabson if(krb5_rd_error(context, reply, &error)) 659c19800e8SDoug Rabson return 0; 660c19800e8SDoug Rabson 661c19800e8SDoug Rabson ret = krb5_error_from_rd_error(context, &error, NULL); 662c19800e8SDoug Rabson krb5_free_error_contents(context, &error); 663c19800e8SDoug Rabson 664c19800e8SDoug Rabson switch(ret) { 665c19800e8SDoug Rabson case KRB5KRB_ERR_RESPONSE_TOO_BIG: { 666c19800e8SDoug Rabson if (krb5_sendto_ctx_get_flags(ctx) & KRB5_KRBHST_FLAGS_LARGE_MSG) 667c19800e8SDoug Rabson break; 668c19800e8SDoug Rabson krb5_sendto_ctx_add_flags(ctx, KRB5_KRBHST_FLAGS_LARGE_MSG); 669c19800e8SDoug Rabson *action = KRB5_SENDTO_RESTART; 670c19800e8SDoug Rabson break; 671c19800e8SDoug Rabson } 672c19800e8SDoug Rabson case KRB5KDC_ERR_SVC_UNAVAILABLE: 673c19800e8SDoug Rabson *action = KRB5_SENDTO_CONTINUE; 674c19800e8SDoug Rabson break; 675c19800e8SDoug Rabson } 676c19800e8SDoug Rabson return 0; 6775e9cd1aeSAssar Westerlund } 678