summaryrefslogtreecommitdiff
path: root/lib/ZCkAuth.c
blob: bb7108c678c71711057740d8fd113da9097c2602 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
/* This file is part of the Project Athena Zephyr Notification System.
 * It contains source for the ZCheckAuthentication function.
 *
 *	Created by:	Robert French
 *
 *	$Source$
 *	$Author$
 *
 *	Copyright (c) 1987 by the Massachusetts Institute of Technology.
 *	For copying and distribution information, see the file
 *	"mit-copyright.h". 
 */
/* $Header$ */

#include <zephyr/mit-copyright.h>

#include <zephyr/zephyr_internal.h>

int ZCheckAuthentication(notice,buffer,from)
	ZNotice_t	*notice;
	ZPacket_t	buffer;
	struct		sockaddr_in *from;
{	
	int result;
	char srcprincipal[ANAME_SZ+INST_SZ+REALM_SZ+4];
	KTEXT_ST authent;
	AUTH_DAT dat;
	ZChecksum_t our_checksum;
	CREDENTIALS cred;

	if (!notice->z_auth)
		return (0);
	
	if (__Zephyr_server) {
		if (ZReadAscii(notice->z_ascii_authent,
			       strlen(notice->z_ascii_authent)+1,
			       (char *)authent.dat,
			       notice->z_authent_len) == ZERR_BADFIELD) {
			return (0);
		}
		authent.length = notice->z_authent_len;
		result = rd_ap_req(&authent,SERVER_SERVICE,
				   SERVER_INSTANCE,from->sin_addr.s_addr,
				   &dat,SERVER_SRVTAB);
		bcopy((char *)dat.session,(char *)__Zephyr_session,
		      sizeof(C_Block));
		(void) sprintf(srcprincipal,"%s%s%s@%s",dat.pname,
			       dat.pinst[0]?".":"",dat.pinst,dat.prealm);
		if (strcmp(srcprincipal,notice->z_sender))
			return (0);
		return (result == RD_AP_OK);
	}

	if (result = get_credentials(SERVER_SERVICE,SERVER_INSTANCE,
				     __Zephyr_realm,&cred))
		return (result+krb_err_base);

	our_checksum = (ZChecksum_t)quad_cksum(buffer,NULL,
					       notice->z_recipient+
					       strlen(notice->z_recipient)+1-
					       buffer,0,cred.session);

	return (our_checksum == notice->z_checksum);
}