Return to in_tkt.c CVS log

Up to [CSRG BSD Unix] / 43BSDReno / kerberosIV / krb

Annotation of 43BSDReno/kerberosIV/krb/in_tkt.c, revision 1.1

1.1     ! root        1: /*
        !             2:  * $Source: /usr/src/kerberosIV/krb/RCS/in_tkt.c,v $
        !             3:  * $Author: kfall $
        !             4:  *
        !             5:  * Copyright 1985, 1986, 1987, 1988 by the Massachusetts Institute
        !             6:  * of Technology.
        !             7:  *
        !             8:  * For copying and distribution information, please see the file
        !             9:  * <mit-copyright.h>.
        !            10:  */
        !            11: 
        !            12: #ifndef lint
        !            13: static char *rcsid_in_tkt_c =
        !            14: "$Id: in_tkt.c,v 4.10 90/06/25 20:56:26 kfall Exp $";
        !            15: #endif /* lint */
        !            16: 
        !            17: #include <mit-copyright.h>
        !            18: #include <stdio.h>
        !            19: #include <des.h>
        !            20: #include <krb.h>
        !            21: #include <sys/file.h>
        !            22: #include <sys/types.h>
        !            23: #include <sys/stat.h>
        !            24: #ifdef TKT_SHMEM
        !            25: #include <sys/param.h>
        !            26: #endif
        !            27: 
        !            28: extern int krb_debug;
        !            29: 
        !            30: /*
        !            31:  * in_tkt() is used to initialize the ticket store.  It creates the
        !            32:  * file to contain the tickets and writes the given user's name "pname"
        !            33:  * and instance "pinst" in the file.  in_tkt() returns KSUCCESS on
        !            34:  * success, or KFAILURE if something goes wrong.
        !            35:  */
        !            36: 
        !            37: in_tkt(pname,pinst)
        !            38:     char *pname;
        !            39:     char *pinst;
        !            40: {
        !            41:     int tktfile, creat();
        !            42:     uid_t me, metoo, getuid(), geteuid();
        !            43:     struct stat buf;
        !            44:     int count;
        !            45:     char *file = TKT_FILE;
        !            46:     int fd;
        !            47:     register int i;
        !            48:     char charbuf[BUFSIZ];
        !            49: #ifdef TKT_SHMEM
        !            50:     char shmidname[MAXPATHLEN];
        !            51: #endif /* TKT_SHMEM */
        !            52: 
        !            53:     me = getuid ();
        !            54:     metoo = geteuid();
        !            55:     if (lstat(file,&buf) == 0) {
        !            56:        if (buf.st_uid != me || !(buf.st_mode & S_IFREG) ||
        !            57:            buf.st_mode & 077) {
        !            58:            if (krb_debug)
        !            59:                fprintf(stderr,"Error initializing %s",file);
        !            60:            return(KFAILURE);
        !            61:        }
        !            62:        /* file already exists, and permissions appear ok, so nuke it */
        !            63:        if ((fd = open(file, O_RDWR, 0)) < 0)
        !            64:            goto out; /* can't zero it, but we can still try truncating it */
        !            65: 
        !            66:        bzero(charbuf, sizeof(charbuf));
        !            67: 
        !            68:        for (i = 0; i < buf.st_size; i += sizeof(charbuf))
        !            69:            if (write(fd, charbuf, sizeof(charbuf)) != sizeof(charbuf)) {
        !            70:                (void) fsync(fd);
        !            71:                (void) close(fd);
        !            72:                goto out;
        !            73:            }
        !            74:        
        !            75:        (void) fsync(fd);
        !            76:        (void) close(fd);
        !            77:     }
        !            78:  out:
        !            79:     /* arrange so the file is owned by the ruid
        !            80:        (swap real & effective uid if necessary).
        !            81:        This isn't a security problem, since the ticket file, if it already
        !            82:        exists, has the right uid (== ruid) and mode. */
        !            83:     if (me != metoo) {
        !            84:        if (setreuid(metoo, me) < 0) {
        !            85:            /* can't switch??? barf! */
        !            86:            if (krb_debug)
        !            87:                perror("in_tkt: setreuid");
        !            88:            return(KFAILURE);
        !            89:        } else
        !            90:            if (krb_debug)
        !            91:                printf("swapped UID's %d and %d\n",metoo,me);
        !            92:     }
        !            93:     if ((tktfile = creat(file,0600)) < 0) {
        !            94:        if (krb_debug)
        !            95:            fprintf(stderr,"Error initializing %s",TKT_FILE);
        !            96:         return(KFAILURE);
        !            97:     }
        !            98:     if (me != metoo) {
        !            99:        if (setreuid(me, metoo) < 0) {
        !           100:            /* can't switch??? barf! */
        !           101:            if (krb_debug)
        !           102:                perror("in_tkt: setreuid2");
        !           103:            return(KFAILURE);
        !           104:        } else
        !           105:            if (krb_debug)
        !           106:                printf("swapped UID's %d and %d\n",me,metoo);
        !           107:     }
        !           108:     if (lstat(file,&buf) < 0) {
        !           109:        if (krb_debug)
        !           110:            fprintf(stderr,"Error initializing %s",TKT_FILE);
        !           111:         return(KFAILURE);
        !           112:     }
        !           113: 
        !           114:     if (buf.st_uid != me || !(buf.st_mode & S_IFREG) ||
        !           115:         buf.st_mode & 077) {
        !           116:        if (krb_debug)
        !           117:            fprintf(stderr,"Error initializing %s",TKT_FILE);
        !           118:         return(KFAILURE);
        !           119:     }
        !           120: 
        !           121:     count = strlen(pname)+1;
        !           122:     if (write(tktfile,pname,count) != count) {
        !           123:         (void) close(tktfile);
        !           124:         return(KFAILURE);
        !           125:     }
        !           126:     count = strlen(pinst)+1;
        !           127:     if (write(tktfile,pinst,count) != count) {
        !           128:         (void) close(tktfile);
        !           129:         return(KFAILURE);
        !           130:     }
        !           131:     (void) close(tktfile);
        !           132: #ifdef TKT_SHMEM
        !           133:     (void) strcpy(shmidname, file);
        !           134:     (void) strcat(shmidname, ".shm");
        !           135:     return(krb_shm_create(shmidname));
        !           136: #else /* !TKT_SHMEM */
        !           137:     return(KSUCCESS);
        !           138: #endif /* TKT_SHMEM */
        !           139: }

This archive runs on limited infrastructure. Preserving old code on modern bandwidth. Automated agents are requested to crawl responsibly.