xref: /illumos-gate/usr/src/lib/gss_mechs/mech_krb5/krb5/os/genaddrs.c (revision 55fea89dcaa64928bed4327112404dcb3e07b79f)
1 
2 /*
3  * lib/krb5/os/genaddrs.c
4  *
5  * Copyright 1995 by the Massachusetts Institute of Technology.
6  * All Rights Reserved.
7  *
8  * Export of this software from the United States of America may
9  *   require a specific license from the United States Government.
10  *   It is the responsibility of any person or organization contemplating
11  *   export to obtain such a license before exporting.
12  *
13  * WITHIN THAT CONSTRAINT, permission to use, copy, modify, and
14  * distribute this software and its documentation for any purpose and
15  * without fee is hereby granted, provided that the above copyright
16  * notice appear in all copies and that both that copyright notice and
17  * this permission notice appear in supporting documentation, and that
18  * the name of M.I.T. not be used in advertising or publicity pertaining
19  * to distribution of the software without specific, written prior
20  * permission.  Furthermore if you modify this software you must label
21  * your software as modified software and not distribute it in such a
22  * fashion that it might be confused with the original M.I.T. software.
23  * M.I.T. makes no representations about the suitability of
24  * this software for any purpose.  It is provided "as is" without express
25  * or implied warranty.
26  *
27  *
28  * Take an IP addr & port and generate a full IP address.
29  */
30 
31 #include "k5-int.h"
32 #include "os-proto.h"
33 
34 #if !defined(_WINSOCKAPI_)
35 #include <netinet/in.h>
36 #endif
37 
38 /* Solaris Kerberos */
39 #include <inet/ip.h>
40 #include <inet/ip6.h>
41 
42 struct addrpair {
43     krb5_address addr, port;
44 };
45 
46 #define SET(TARG, THING, TYPE) \
47 	((TARG).contents = (krb5_octet *) &(THING),	\
48 	 (TARG).length = sizeof (THING),		\
49 	 (TARG).addrtype = (TYPE))
50 
cvtaddr(struct sockaddr_storage * a,struct addrpair * ap)51 static void *cvtaddr (struct sockaddr_storage *a, struct addrpair *ap)
52 {
53     switch (ss2sa(a)->sa_family) {
54     case AF_INET:
55 	SET (ap->port, ss2sin(a)->sin_port, ADDRTYPE_IPPORT);
56 	SET (ap->addr, ss2sin(a)->sin_addr, ADDRTYPE_INET);
57 	return a;
58 #ifdef KRB5_USE_INET6
59     case AF_INET6:
60 	SET (ap->port, ss2sin6(a)->sin6_port, ADDRTYPE_IPPORT);
61 	if (IN6_IS_ADDR_V4MAPPED (&ss2sin6(a)->sin6_addr)) {
62 	    ap->addr.addrtype = ADDRTYPE_INET;
63 	    /* Solaris Kerberos */
64 	    ap->addr.contents = (IPV6_ADDR_LEN - IPV4_ADDR_LEN) +
65 		(krb5_octet *) &ss2sin6(a)->sin6_addr;
66 	    ap->addr.length = IPV4_ADDR_LEN;
67 	} else
68 	    SET (ap->addr, ss2sin6(a)->sin6_addr, ADDRTYPE_INET6);
69 	return a;
70 #endif
71     default:
72 	return 0;
73     }
74 }
75 
76 krb5_error_code KRB5_CALLCONV
krb5_auth_con_genaddrs(krb5_context context,krb5_auth_context auth_context,int infd,int flags)77 krb5_auth_con_genaddrs(krb5_context context, krb5_auth_context auth_context, int infd, int flags)
78 {
79     krb5_error_code 	  retval;
80     krb5_address	* laddr;
81     krb5_address	* lport;
82     krb5_address	* raddr;
83     krb5_address	* rport;
84     SOCKET		fd = (SOCKET) infd;
85     struct addrpair laddrs, raddrs;
86 
87 #ifdef HAVE_NETINET_IN_H
88     struct sockaddr_storage lsaddr, rsaddr;
89     GETSOCKNAME_ARG3_TYPE ssize;
90 
91     ssize = sizeof(struct sockaddr_storage);
92     if ((flags & KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR) ||
93 	(flags & KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR)) {
94     	if ((retval = getsockname(fd, (GETSOCKNAME_ARG2_TYPE *) &lsaddr,
95 				  &ssize)))
96 	    return retval;
97 
98 	if (cvtaddr (&lsaddr, &laddrs)) {
99 	    laddr = &laddrs.addr;
100 	    if (flags & KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR)
101 		lport = &laddrs.port;
102 	    else
103 		lport = 0;
104 	} else
105 	    return KRB5_PROG_ATYPE_NOSUPP;
106     } else {
107 	laddr = NULL;
108 	lport = NULL;
109     }
110 
111     ssize = sizeof(struct sockaddr_storage);
112     if ((flags & KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR) ||
113 	(flags & KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR)) {
114         if ((retval = getpeername(fd, (GETPEERNAME_ARG2_TYPE *) &rsaddr,
115 				  &ssize)))
116 	    return errno;
117 
118 	if (cvtaddr (&rsaddr, &raddrs)) {
119 	    raddr = &raddrs.addr;
120 	    if (flags & KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR)
121 		rport = &raddrs.port;
122 	    else
123 		rport = 0;
124 	} else
125 	    return KRB5_PROG_ATYPE_NOSUPP;
126     } else {
127 	raddr = NULL;
128 	rport = NULL;
129     }
130 
131     if (!(retval = krb5_auth_con_setaddrs(context, auth_context, laddr, raddr)))
132     	return (krb5_auth_con_setports(context, auth_context, lport, rport));
133     return retval;
134 #else
135     return KRB5_PROG_ATYPE_NOSUPP;
136 #endif
137 }
138