nasl_krb5.h File Reference

#include "nasl_lex_ctxt.h"
#include "nasl_tree.h"

Include dependency graph for nasl_krb5.h:

This graph shows which files directly or indirectly include this file:

Go to the source code of this file.

Functions
tree_cell *	nasl_okrb5_find_kdc (lex_ctxt *lexic)
	Returns the defined KDC of a given Realm.
tree_cell *	nasl_okrb5_add_realm (lex_ctxt *lexic)
	Adds the given KDC to the given Realm.
tree_cell *	nasl_okrb5_is_success (lex_ctxt *lexic)
	Returns 1 if the krb5 function was successful 0 otherwise.
tree_cell *	nasl_okrb5_is_failure (lex_ctxt *lexic)
	Returns 0 if the krb5 function was successful and 1 if it failed.
tree_cell *	nasl_okrb5_gss_init (lex_ctxt *lexic)
tree_cell *	nasl_okrb5_gss_prepare_context (lex_ctxt *lexic)
tree_cell *	nasl_okrb5_gss_update_context (lex_ctxt *lexic)
tree_cell *	nasl_okrb5_gss_update_context_needs_more (lex_ctxt *lexic)
tree_cell *	nasl_okrb5_gss_update_context_out (lex_ctxt *lexic)
tree_cell *	nasl_okrb5_gss_session_key_context (lex_ctxt *lexic)
tree_cell *	nasl_okrb5_error_code_to_string (lex_ctxt *lexic)
void	nasl_okrb5_clean (void)

Function Documentation

nasl_okrb5_add_realm()

tree_cell * nasl_okrb5_add_realm

(

lex_ctxt *

lexic

)

Adds the given KDC to the given Realm.

This function returns 0 on success. To retrieve a human readable error message, the function okrb5_result can be used.

The nasl function has three optional parameter:

• realm: The realm for which the KDC should be returned. If the realm is not defined, then the env parameter KRB5_REALM is used.
• kdc: The realm for which the KDC should be returned. If the realm is not defined, then the env parameter KRB5_KDC is used.
• config_path: The path to the krb5.conf file. If the path is not defined, then the env parameter KRB5_CONFIG is used.

This function should only be used for debug purposes.

Parameters

[in]

lexic

NASL lexer.

Returns

lex cell containing a number indicating success or failure.

Definition at line 200 of file nasl_krb5.c.

{
  tree_cell *retc;
  OKrb5Credential credential;
  char *kdc = get_str_var_by_name (lexic, "kdc");
  if (kdc == NULL)
    {
      kdc = getenv ("KRB5_KDC");
      if (kdc == NULL)
        {
          last_okrb5_result = O_KRB5_EXPECTED_NOT_NULL;
          NASL_PRINT_KRB_ERROR (lexic, credential, last_okrb5_result);
          goto exit;
        }
    }
 
  credential = build_krb5_credential (lexic);
 
  if ((last_okrb5_result = o_krb5_add_realm (&credential, kdc)))
    {
      NASL_PRINT_KRB_ERROR (lexic, credential, last_okrb5_result);
    }
 
exit:
  retc = alloc_typed_cell (CONST_INT);
  retc->x.i_val = last_okrb5_result;
  return retc;
}

References alloc_typed_cell(), build_krb5_credential(), CONST_INT, get_str_var_by_name(), TC::i_val, last_okrb5_result, NASL_PRINT_KRB_ERROR, o_krb5_add_realm(), O_KRB5_EXPECTED_NOT_NULL, and TC::x.

Here is the call graph for this function:

nasl_okrb5_clean()

void nasl_okrb5_clean

(

void

)

Definition at line 340 of file nasl_krb5.c.

{
  if (to_application != NULL)
    {
      free (to_application->data);
      free (to_application);
      to_application = NULL;
    }
  if (cached_gss_context != NULL)
    {
      okrb5_gss_free_context (cached_gss_context);
      cached_gss_context = NULL;
    }
  if (generated_config_path != NULL)
    {
      unlink (generated_config_path);
      free (generated_config_path);
      generated_config_path = NULL;
    }
}

References cached_gss_context, free(), generated_config_path, okrb5_gss_free_context(), and to_application.

Referenced by exec_nasl_script().

Here is the call graph for this function:

Here is the caller graph for this function:

nasl_okrb5_error_code_to_string()

tree_cell * nasl_okrb5_error_code_to_string

(

lex_ctxt *

lexic

)

Definition at line 414 of file nasl_krb5.c.

{
  (void) lexic;
  tree_cell *retc = alloc_typed_cell (CONST_STR);
  retc->x.str_val = okrb5_error_code_to_string (last_okrb5_result);
  retc->size = strlen (retc->x.str_val);
  return retc;
}

References alloc_typed_cell(), CONST_STR, last_okrb5_result, okrb5_error_code_to_string(), TC::size, TC::str_val, and TC::x.

Here is the call graph for this function:

nasl_okrb5_find_kdc()

tree_cell * nasl_okrb5_find_kdc

(

lex_ctxt *

lexic

)

Returns the defined KDC of a given Realm.

This function returns the KDC of a given Realm. The Realm is defined in the krb5.conf file. If there is no KDC for the given Realm, the function returns NULL within the tree_cell to the script.

The nasl function has two optional parameter:

• realm: The realm for which the KDC should be returned. If the realm is not defined, then the env parameter KRB5_REALM is used.
• config_path: The path to the krb5.conf file. If the path is not defined, then the env parameter KRB5_CONFIG is used.

This function should only be used for debug purposes.

Parameters

[in]

lexic

NASL lexer.

Returns

lex cell containing the KDC as a string.

Definition at line 179 of file nasl_krb5.c.

{
  tree_cell *retc;
  char *kdc = NULL;
  OKrb5Credential credential;
 
  credential = build_krb5_credential (lexic);
 
  if ((last_okrb5_result = o_krb5_find_kdc (&credential, &kdc)))
    {
      NASL_PRINT_KRB_ERROR (lexic, credential, last_okrb5_result);
      return FAKE_CELL;
    }
 
  retc = alloc_typed_cell (CONST_DATA);
  retc->x.str_val = kdc;
  retc->size = strlen (kdc);
  return retc;
}

References alloc_typed_cell(), build_krb5_credential(), CONST_DATA, FAKE_CELL, last_okrb5_result, NASL_PRINT_KRB_ERROR, o_krb5_find_kdc(), TC::size, TC::str_val, and TC::x.

Here is the call graph for this function:

nasl_okrb5_gss_init()

tree_cell * nasl_okrb5_gss_init

(

lex_ctxt *

lexic

)

Definition at line 272 of file nasl_krb5.c.

{
  (void) lexic;
  cached_gss_context = okrb5_gss_init_context ();
  if (cached_gss_context == NULL)
    {
      last_okrb5_result = O_KRB5_EXPECTED_NOT_NULL;
    }
  else
    {
      last_okrb5_result = O_KRB5_SUCCESS;
    };
  tree_cell *retc = alloc_typed_cell (CONST_INT);
  retc->x.i_val = last_okrb5_result;
  return retc;
}

References alloc_typed_cell(), cached_gss_context, CONST_INT, TC::i_val, last_okrb5_result, O_KRB5_EXPECTED_NOT_NULL, O_KRB5_SUCCESS, okrb5_gss_init_context(), and TC::x.

Here is the call graph for this function:

nasl_okrb5_gss_prepare_context()

tree_cell * nasl_okrb5_gss_prepare_context

(

lex_ctxt *

lexic

)

Definition at line 289 of file nasl_krb5.c.

{
  (void) lexic;
 
  OKrb5Credential credential;
  credential = build_krb5_credential (lexic);
  OKrb5ErrorCode result = O_KRB5_SUCCESS;
  if (cached_gss_context == NULL)
    {
      cached_gss_context = okrb5_gss_init_context ();
    }
  result = o_krb5_gss_prepare_context (&credential, cached_gss_context);
  tree_cell *retc = alloc_typed_cell (CONST_INT);
  retc->x.i_val = result;
  last_okrb5_result = result;
  return retc;
}

References alloc_typed_cell(), build_krb5_credential(), cached_gss_context, CONST_INT, TC::i_val, last_okrb5_result, o_krb5_gss_prepare_context(), O_KRB5_SUCCESS, okrb5_gss_init_context(), and TC::x.

Here is the call graph for this function:

nasl_okrb5_gss_session_key_context()

tree_cell * nasl_okrb5_gss_session_key_context

(

lex_ctxt *

lexic

)

Definition at line 395 of file nasl_krb5.c.

{
  (void) lexic;
  struct OKrb5Slice *session_key = NULL;
  if (cached_gss_context == NULL)
    {
      last_okrb5_result = O_KRB5_EXPECTED_NOT_NULL;
      return FAKE_CELL;
    }
  if ((last_okrb5_result =
         o_krb5_gss_session_key_context (cached_gss_context, &session_key))
      != O_KRB5_SUCCESS)
    {
      return FAKE_CELL;
    }
  return okrb5_slice_to_tree_cell (session_key);
}

References cached_gss_context, FAKE_CELL, last_okrb5_result, O_KRB5_EXPECTED_NOT_NULL, o_krb5_gss_session_key_context(), O_KRB5_SUCCESS, and okrb5_slice_to_tree_cell().

Here is the call graph for this function:

nasl_okrb5_gss_update_context()

tree_cell * nasl_okrb5_gss_update_context

(

lex_ctxt *

lexic

)

Definition at line 308 of file nasl_krb5.c.

{
  OKrb5ErrorCode result = O_KRB5_SUCCESS;
  tree_cell *retc;
  struct OKrb5Slice from_application;
 
  if (to_application != NULL)
    {
      free (to_application->data);
      free (to_application);
      to_application = NULL;
    }
 
  from_application.data = (void *) get_str_var_by_num (lexic, 0);
  from_application.len = get_var_size_by_num (lexic, 0);
 
  if (cached_gss_context == NULL)
    {
      last_okrb5_result = O_KRB5_EXPECTED_NOT_NULL;
      goto result;
    }
  result =
    o_krb5_gss_update_context (cached_gss_context, &from_application,
                               &to_application, &gss_update_context_more);
result:
  retc = alloc_typed_cell (CONST_INT);
  retc->x.i_val = result;
  last_okrb5_result = result;
  return retc;
}

References alloc_typed_cell(), cached_gss_context, CONST_INT, OKrb5Slice::data, free(), get_str_var_by_num(), get_var_size_by_num(), gss_update_context_more, TC::i_val, last_okrb5_result, OKrb5Slice::len, O_KRB5_EXPECTED_NOT_NULL, o_krb5_gss_update_context(), O_KRB5_SUCCESS, to_application, and TC::x.

Here is the call graph for this function:

nasl_okrb5_gss_update_context_needs_more()

tree_cell * nasl_okrb5_gss_update_context_needs_more

(

lex_ctxt *

lexic

)

Definition at line 362 of file nasl_krb5.c.

{
  (void) lexic;
  tree_cell *retc = alloc_typed_cell (CONST_INT);
  retc->x.i_val = gss_update_context_more;
  return retc;
}

References alloc_typed_cell(), CONST_INT, gss_update_context_more, TC::i_val, and TC::x.

Here is the call graph for this function:

nasl_okrb5_gss_update_context_out()

tree_cell * nasl_okrb5_gss_update_context_out

(

lex_ctxt *

lexic

)

Definition at line 380 of file nasl_krb5.c.

{
  (void) lexic;
  if (to_application == NULL)
    {
      return FAKE_CELL;
    }
  tree_cell *out = okrb5_slice_to_tree_cell (to_application);
  // we need to prevent accidental free it as it is freed when the tree_cell is
  // cleaned up
  to_application = NULL;
  return out;
}

References FAKE_CELL, okrb5_slice_to_tree_cell(), and to_application.

Here is the call graph for this function:

nasl_okrb5_is_failure()

tree_cell * nasl_okrb5_is_failure

(

lex_ctxt *

lexic

)

Returns 0 if the krb5 function was successful and 1 if it failed.

The nasl function has one optional parameter:

• retval: the return value of the krb5 function. If the value is not defined, the return value of the last krb5 function is used.

Parameters

[in]

lexic

NASL lexer.

Returns

lex cell containing a number indicating success.

Definition at line 263 of file nasl_krb5.c.

{
  OKrb5ErrorCode result = get_int_var_by_num (lexic, 0, last_okrb5_result);
  tree_cell *retc = alloc_typed_cell (CONST_INT);
  retc->x.i_val = result != O_KRB5_SUCCESS;
  return retc;
}

References alloc_typed_cell(), CONST_INT, get_int_var_by_num(), TC::i_val, last_okrb5_result, O_KRB5_SUCCESS, and TC::x.

Here is the call graph for this function:

nasl_okrb5_is_success()

tree_cell * nasl_okrb5_is_success

(

lex_ctxt *

lexic

)

Returns 1 if the krb5 function was successful 0 otherwise.

The nasl function has one optional parameter:

• retval: the return value of the krb5 function. If the value is not defined, the return value of the last krb5 function is used.

Parameters

[in]

lexic

NASL lexer.

Returns

lex cell containing a number indicating success.

Definition at line 242 of file nasl_krb5.c.

{
  OKrb5ErrorCode result = get_int_var_by_num (lexic, 0, last_okrb5_result);
  tree_cell *retc = alloc_typed_cell (CONST_INT);
  retc->x.i_val = result == O_KRB5_SUCCESS;
  return retc;
}

References alloc_typed_cell(), CONST_INT, get_int_var_by_num(), TC::i_val, last_okrb5_result, O_KRB5_SUCCESS, and TC::x.

Here is the call graph for this function: