Problem - Kevin Tafuro

server-side part of the authentication. It ultimately calls krb5_recvauth( ), which
waits for the client to initiate an authenticate request.
The function spc_krb5_server( ) has the following signature:
krb5_error_code spc_krb5_server(int sockfd, spc_krb5bundle_t *bundle,
char *service, char *version);
This function has the following arguments:
sockfd
Socket descriptor over which the authentication should be performed. The connection
to the client should already be established, and the socket should be in
blocking mode.
bundle
spc_krb5bundle_t object that will be loaded with information if the authentication
with the server is successful. Before calling spc_krb5_server( ), you should
be sure to zero the contents of this structure. If the structure contains a pointer
to a Kerberos context object, spc_krb5_server( ) will use it instead of creating a
new one.
service
Name component of the server’s principal. It is combined with the server’s hostname
or instance to build the principal for the server. The server’s principal will
be of the form service/hostname@REALM.
On the client side, an additional argument is required to specify the hostname of
the server, but on the server side, the hostname of the machine on which the
program is running will be used.
version
Version string that is generally used to indicate a version of the protocol that the
client and server will speak to each other. It does not have anything to do with
the Kerberos protocol or the version of Kerberos in use. The string may be anything
you want, but both the client and server must agree on the same string for
authentication to succeed.
If authentication is successful, the return value from spc_krb5_server( ) will be 0,
and the relevant fields in the spc_krb5bundle_t object will be filled in. If any kind of
error occurs while attempting to authenticate with the server, the return value from
spc_krb5_server( ) will be the error code returned by the Kerberos API function that
failed.
krb5_error_code spc_krb5_server(int sockfd, spc_krb5bundle_t *bundle,
char *service, char *version) {
int free_context = 0;
krb5_principal server = 0;
krb5_error_code rc;
if (!bundle->ctx) {
if ((rc = krb5_init_context(&(bundle->ctx))) != 0) goto error;
This is the Title of the Book, eMatter Edition
Copyright © 2007 O’Reilly & Associates, Inc. All rights reserved.
Authenticating with Kerberos | 417