kerberosTest/sample/sample-server.c
2022-07-17 20:42:28 +08:00

178 lines
4.6 KiB
C
Raw Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

#include <stdio.h>
#include <stdlib.h>
#include <sys/types.h>
#include <stdio.h>
#include <sys/socket.h>
#include <linux/in.h>
#include <string.h>
#include <sasl/sasl.h>
int sfp;
struct sockaddr_in s_add, c_add;
int sin_size;
char *server = "server";
typedef struct kClient {
int fp;
int auth_complete;
int begin_auth;
sasl_conn_t *conn;
} kClient;
int listen_port() {
unsigned short portnum = 2345;
sfp = socket(AF_INET, SOCK_STREAM, 0);
if (-1 == sfp) {
printf("socket fail ! \n");
return -1;
}
/* 填充服务器端口地址信息,以便下面使用此地址和端口监听 */
bzero(&s_add, sizeof(struct sockaddr_in));
s_add.sin_family = AF_INET;
s_add.sin_addr.s_addr = htonl(INADDR_ANY); /* 这里地址使用全0即所有 */
s_add.sin_port = htons(portnum);
/* 使用bind进行绑定端口 */
if (-1 == bind(sfp, (struct sockaddr *)(&s_add), sizeof(struct sockaddr))) {
printf("bind fail !\n");
return -1;
}
/* 开始监听相应的端口 */
if (-1 == listen(sfp, 5)) {
printf("listen fail !\n");
return -1;
}
printf("Hello,welcome to my server !\n");
return 0;
}
kClient *createClient(int fp) {
kClient *c = malloc(sizeof(kClient));
c->fp = fp;
c->auth_complete = -1;
c->begin_auth = 0;
c->conn = NULL;
return c;
}
int auth_client(kClient *c) {
if (!c->begin_auth) {
int result = sasl_server_new(server, "hadoop.test.com", "TEST.COM", NULL, NULL, NULL, 0, &c->conn);
if (result != SASL_OK) {
printf("Allocating sasl connection state, %s\n", sasl_errdetail(c->conn));
return 1;
}
}
const char *mech = "GSSAPI";
char buffer[1024] = {0};
int client_len = readTicket(c, buffer);
char *out;
unsigned len = 0;
buffer[client_len] = '\n';
printf("ticket=%s, len=%d\n", buffer, client_len);
int result = sasl_server_start(c->conn, mech, buffer, client_len, &out, &len);
if (result != SASL_OK && result != SASL_CONTINUE) {
printf("auth failed ,%s, result=%d\n", sasl_errdetail(c->conn), result);
write(c->fp, "auth failed\n", 11);
close(c->fp);
return;
}
printf("sasl_server_start ok\n");
while (result == SASL_CONTINUE) {
writeTicket(c, out, len);
client_len = readTicket(c, buffer);
result = sasl_server_step(c->conn, buffer, client_len, &out, &len);
if (result != SASL_OK && result != SASL_CONTINUE) {
printf("auth failed ,%s\n", sasl_errdetail(c->conn));
write(c->fp, "auth failed\n", 11);
close(c->fp);
return 1;
}
printf("sasl_server_start ok");
}
return 0;
}
int readTicket(kClient *c, char *ticket) {
char len_str[10] = {0};
int recbytes;
if (-1 == (recbytes = read(c->fp, len_str, 25))) {
printf("read len fail !\n");
close(c->fp);
return 0;
}
int len = atoi(len_str);
printf("read len=%s\n", len_str);
if (-1 == (recbytes = read(c->fp, ticket, len))) {
printf("read data fail !\n");
close(c->fp);
return 0;
}
return len;
}
void writeTicket(kClient *c, char *data, unsigned len) {
char len_str[10] = {0};
sprintf(len_str, "%d", len);
if (-1 == write(c->fp, len_str, 10)) {
printf("write failed\n");
return 1;
}
if (-1 == write(c->fp, data, len)) {
printf("write failed\n");
return 1;
}
}
void readQuery(kClient *c) {
char buffer[1024] = {0};
int recbytes;
/* 这里使用write向客户端发送信息也可以尝试使用其他函数实现 */
if (-1 == write(c->fp, "need_auth", 9)) {
printf("write fail!\n");
close(c->fp);
return;
}
if (auth_client(c) != 0) {
printf("auth failed!\n");
return;
}
close(c->fp);
}
int init_sasl() {
int result = sasl_server_init(NULL, server);
if (result != SASL_OK) {
printf("Initializing libsasl");
return 1;
}
return 0;
}
int main() {
if (listen_port() != 0) {
return 1;
}
init_sasl();
while (1) {
sin_size = sizeof(struct sockaddr_in);
int nfp = accept(sfp, (struct sockaddr *)(&c_add), &sin_size);
if (-1 == nfp) {
printf("accept fail !\r\n");
return -1;
}
printf("accept ok!\nServer start get connect from %#x : %#x\n", ntohl(c_add.sin_addr.s_addr), ntohs(c_add.sin_port));
kClient *c = createClient(nfp);
readQuery(c);
}
close(sfp);
return 0;
}