mirror of
https://github.com/bstansell/conserver.git
synced 2025-03-16 17:15:56 +00:00
8e3b84789d
Kerberos ticket may include additional authorization data (AD) information. With MIT Kerberos 1.21 a minimal PAC AD is included. In Active Directory or FreeIPA environments where a full PAC AD is available, the size of Kerberos ticket may be up to 64Kb. Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
100 lines
4.6 KiB
C
100 lines
4.6 KiB
C
/*
|
|
* Copyright conserver.com, 2000
|
|
*
|
|
* Maintainer/Enhancer: Bryan Stansell (bryan@conserver.com)
|
|
*
|
|
* Copyright GNAC, Inc., 1998
|
|
*/
|
|
|
|
/*
|
|
* Copyright 1992 Purdue Research Foundation, West Lafayette, Indiana
|
|
* 47907. All rights reserved.
|
|
*
|
|
* Written by Kevin S Braunsdorf, ksb@cc.purdue.edu, purdue!ksb
|
|
*
|
|
* This software is not subject to any license of the American Telephone
|
|
* and Telegraph Company or the Regents of the University of California.
|
|
*
|
|
* Permission is granted to anyone to use this software for any purpose on
|
|
* any computer system, and to alter it and redistribute it freely, subject
|
|
* to the following restrictions:
|
|
*
|
|
* 1. Neither the authors nor Purdue University are responsible for any
|
|
* consequences of the use of this software.
|
|
*
|
|
* 2. The origin of this software must not be misrepresented, either by
|
|
* explicit claim or by omission. Credit to the authors and Purdue
|
|
* University must appear in documentation and sources.
|
|
*
|
|
* 3. Altered versions must be plainly marked as such, and must not be
|
|
* misrepresented as being the original software.
|
|
*
|
|
* 4. This notice may not be removed or altered.
|
|
*/
|
|
/* states for a server fsm
|
|
*/
|
|
typedef enum clientState {
|
|
S_NORMAL, /* just pass character */
|
|
S_ESC1, /* first escape character received */
|
|
S_CMD, /* second interrupt character received */
|
|
S_CATTN, /* change 1 escape char to next input char */
|
|
S_CESC, /* change 2 escape char to next input char */
|
|
S_HALT1, /* we have a halt sequence in progress */
|
|
S_SUSP, /* we are suspened, first char wakes us up */
|
|
S_IDENT, /* probational connection (who is this) */
|
|
S_PASSWD, /* still needs a passwd to connect */
|
|
S_QUOTE, /* send any character we can spell */
|
|
S_BCAST, /* send a broadcast message to all clients */
|
|
S_CWAIT, /* wait for client */
|
|
S_CEXEC, /* client execing a program */
|
|
S_REPLAY, /* set replay length for 'r' */
|
|
S_PLAYBACK, /* set replay length for 'p' */
|
|
S_NOTE, /* send a note to the logfile */
|
|
S_TASK, /* invoke a task on the server side */
|
|
S_CONFIRM /* confirm input */
|
|
} CLIENTSTATE;
|
|
|
|
typedef struct client { /* Connection Information: */
|
|
CONSFILE *fd; /* file descriptor */
|
|
short fcon; /* currently connect or not */
|
|
short fwr; /* (client) write enable flag */
|
|
short fwantwr; /* (client) wants to write */
|
|
short fro; /* read-only permission */
|
|
short fecho; /* echo commands (not set by machines) */
|
|
short fiwait; /* client wanting for console init */
|
|
STRING *acid; /* login and location of client */
|
|
STRING *peername; /* location of client */
|
|
STRING *username; /* login of client */
|
|
time_t tym; /* time of connect */
|
|
time_t typetym; /* time of last keystroke */
|
|
char actym[32]; /* pre-formatted time */
|
|
struct consent
|
|
*pCEto; /* host a client gets output from */
|
|
struct client
|
|
**ppCLbscan, /* back link for scan ptr */
|
|
*pCLscan, /* next client fd to scan after select */
|
|
/* scan lists link ALL clients together */
|
|
**ppCLbnext, /* back link for next ptr */
|
|
*pCLnext; /* next person on this list */
|
|
/* next lists link clients on a console */
|
|
char ic[2]; /* two character escape sequence */
|
|
unsigned short replay; /* lines to replay for 'r' */
|
|
unsigned short playback; /* lines to replay for 'p' */
|
|
CLIENTSTATE iState; /* state for fsm in server */
|
|
char caccess; /* did we trust the remote machine */
|
|
IOSTATE ioState; /* state of the socket */
|
|
time_t stateTimer; /* timer for various ioState states */
|
|
STRING *accmd; /* the command the user issued */
|
|
INADDR_STYPE cnct_port; /* where from */
|
|
FLAG confirmed; /* confirm state */
|
|
CLIENTSTATE cState; /* state needing confirmation */
|
|
char cOption; /* option initiating the confirmation */
|
|
size_t tokenSize; /* buffer size for GSSAPI token */
|
|
} CONSCLIENT;
|
|
|
|
extern void Replay(CONSENT *, CONSFILE *, unsigned short);
|
|
extern void HelpUser(CONSCLIENT *);
|
|
extern void FindWrite(CONSENT *);
|
|
extern int ClientAccessOk(CONSCLIENT *);
|
|
extern void BumpClient(CONSENT *, char *);
|