Return to get_pw_tkt.c CVS log

Up to [CSRG BSD Unix] / 43BSDReno / kerberosIV / krb

Annotation of 43BSDReno/kerberosIV/krb/get_pw_tkt.c, revision 1.1.1.1

1.1       root        1: /*
                      2:  * $Source: /usr/src/kerberosIV/krb/RCS/get_pw_tkt.c,v $
                      3:  * $Author: kfall $
                      4:  *
                      5:  * Copyright 1986, 1987, 1988 by the Massachusetts Institute
                      6:  * of Technology.
                      7:  *
                      8:  * For copying and distribution information, please see the file
                      9:  * <mit-copyright.h>.
                     10:  */
                     11: 
                     12: #ifndef lint
                     13: static char *rcsid_get_pw_tkt_c =
                     14: "$Header: /usr/src/kerberosIV/krb/RCS/get_pw_tkt.c,v 4.7 90/06/25 20:56:02 kfall Exp $";
                     15: #endif /* lint */
                     16: 
                     17: 
                     18: #include <mit-copyright.h>
                     19: #include <des.h>
                     20: #include <krb.h>
                     21: 
                     22: /*
                     23:  * Get a ticket for the password-changing server ("changepw.KRB_MASTER").
                     24:  *
                     25:  * Given the name, instance, realm, and current password of the
                     26:  * principal for which the user wants a password-changing-ticket,
                     27:  * return either:
                     28:  *
                     29:  *     GT_PW_BADPW if current password was wrong,
                     30:  *     GT_PW_NULL  if principal had a NULL password,
                     31:  *     or the result of the krb_get_pw_in_tkt() call.
                     32:  *
                     33:  * First, try to get a ticket for "user.instance@realm" to use the
                     34:  * "changepw.KRB_MASTER" server (KRB_MASTER is defined in "krb.h").
                     35:  * The requested lifetime for the ticket is "1", and the current
                     36:  * password is the "cpw" argument given.
                     37:  *
                     38:  * If the password was bad, give up.
                     39:  *
                     40:  * If the principal had a NULL password in the Kerberos database
                     41:  * (indicating that the principal is known to Kerberos, but hasn't
                     42:  * got a password yet), try instead to get a ticket for the principal
                     43:  * "default.changepw@realm" to use the "changepw.KRB_MASTER" server.
                     44:  * Use the password "changepwkrb" instead of "cpw".  Return GT_PW_NULL
                     45:  * if all goes well, otherwise the error.
                     46:  *
                     47:  * If this routine succeeds, a ticket and session key for either the
                     48:  * principal "user.instance@realm" or "default.changepw@realm" to use
                     49:  * the password-changing server will be in the user's ticket file.
                     50:  */
                     51: 
                     52: get_pw_tkt(user,instance,realm,cpw)
                     53:     char *user;
                     54:     char *instance;
                     55:     char *realm;
                     56:     char *cpw;
                     57: {
                     58:     int kerror;
                     59: 
                     60:     kerror = krb_get_pw_in_tkt(user, instance, realm, "changepw",
                     61:                               KRB_MASTER, 1, cpw);
                     62: 
                     63:     if (kerror == INTK_BADPW)
                     64:        return(GT_PW_BADPW);
                     65: 
                     66:     if (kerror == KDC_NULL_KEY) {
                     67:        kerror = krb_get_pw_in_tkt("default","changepw",realm,"changepw",
                     68:                                   KRB_MASTER,1,"changepwkrb");
                     69:        if (kerror)
                     70:            return(kerror);
                     71:        return(GT_PW_NULL);
                     72:     }
                     73: 
                     74:     return(kerror);
                     75: }

This archive runs on limited infrastructure. Preserving old code on modern bandwidth. Automated agents are requested to crawl responsibly.