1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
|
/* -*- mode: c; c-basic-offset: 4; indent-tabs-mode: nil -*- */
/*
* Copyright (C) 2011-2018 PADL Software Pty Ltd.
* All rights reserved.
*
* Redistribution and use in source and binary forms, with or without
* modification, are permitted provided that the following conditions
* are met:
*
* * Redistributions of source code must retain the above copyright
* notice, this list of conditions and the following disclaimer.
*
* * Redistributions in binary form must reproduce the above copyright
* notice, this list of conditions and the following disclaimer in
* the documentation and/or other materials provided with the
* distribution.
*
* THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
* "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
* LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
* FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
* COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
* INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
* (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
* SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
* STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
* OF THE POSSIBILITY OF SUCH DAMAGE.
*/
#include "gssapiP_spnego.h"
static int
guid_to_string(const uint8_t guid[16], char *buffer, size_t bufsiz)
{
uint32_t data1;
uint16_t data2, data3;
data1 = load_32_le(guid);
data2 = load_16_le(guid + 4);
data3 = load_16_le(guid + 6);
return snprintf(buffer, bufsiz,
"%08x-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x",
data1, data2, data3, guid[8], guid[9], guid[10], guid[11],
guid[12], guid[13], guid[14], guid[15]);
}
static void
trace_auth_scheme(spnego_gss_ctx_id_t ctx, const char *prefix, int ind,
const auth_scheme scheme)
{
char trace_msg[128];
char szAuthScheme[37];
guid_to_string(scheme, szAuthScheme, sizeof(szAuthScheme));
snprintf(trace_msg, sizeof(trace_msg),
"NEGOEXTS: %20s[%02u] -- AuthScheme %s",
prefix, ind, szAuthScheme);
TRACE_NEGOEX_AUTH_SCHEMES(ctx->kctx, trace_msg);
}
void
negoex_trace_auth_schemes(spnego_gss_ctx_id_t ctx, const char *prefix,
const uint8_t *schemes, uint16_t nschemes)
{
uint16_t i;
for (i = 0; i < nschemes; i++)
trace_auth_scheme(ctx, prefix, i, schemes + i * GUID_LENGTH);
}
void
negoex_trace_ctx_auth_schemes(spnego_gss_ctx_id_t ctx, const char *prefix)
{
negoex_auth_mech_t mech;
int ind = 0;
K5_TAILQ_FOREACH(mech, &ctx->negoex_mechs, links)
trace_auth_scheme(ctx, prefix, ind++, mech->scheme);
}
void
negoex_trace_message(spnego_gss_ctx_id_t ctx, int direction,
enum message_type type, const conversation_id conv_id,
unsigned int seqnum, unsigned int header_len,
unsigned int msg_len)
{
char trace_msg[128];
char conv_str[37];
char *typestr;
if (type == INITIATOR_NEGO)
typestr = "INITIATOR_NEGO";
else if (type == ACCEPTOR_NEGO)
typestr = "ACCEPTOR_NEGO";
else if (type == INITIATOR_META_DATA)
typestr = "INITIATOR_META_DATA";
else if (type == ACCEPTOR_META_DATA)
typestr = "ACCEPTOR_META_DATA";
else if (type == CHALLENGE)
typestr = "CHALLENGE";
else if (type == AP_REQUEST)
typestr = "AP_REQUEST";
else if (type == VERIFY)
typestr = "VERIFY";
else if (type == ALERT)
typestr = "ALERT";
else
typestr = "UNKNOWN";
guid_to_string(conv_id, conv_str, sizeof(conv_str));
snprintf(trace_msg, sizeof(trace_msg),
"NEGOEXTS%c %20s[%02u] -- ConvId %s HdrLength %u MsgLength %u",
direction ? '<' : '>', typestr, seqnum, conv_str, header_len,
msg_len);
TRACE_NEGOEX_MESSAGE(ctx->kctx, trace_msg);
}
|
