Dear All:
This may be a case when code needs little explanation. Basically all
I want is to set the service name in http_negotiate.c, and the rest
is just my attempts to come up with some way to do it. I am not at
all sure this is the best way to accomlish it, therefore RFC.
Greetings,
-- Pete
diff -urp -X dontdiff.curl curl-7.21.6-2/include/curl/curl.h
curl-7.21.6-2-p3/include/curl/curl.h
--- curl-7.21.6-2/include/curl/curl.h 2011-04-22 11:01:50.000000000 -0600
+++ curl-7.21.6-2-p3/include/curl/curl.h 2011-06-28 16:42:41.513379450
-0600
@@ -1476,6 +1476,9 @@ typedef enum {
*/
CINIT(TRANSFER_ENCODING, LONG, 207),
+ /* Usually [email protected], but not always. */
+ CINIT(KRBSVCNAME, OBJECTPOINT, 208),
+
CURLOPT_LASTENTRY /* the last unused */
} CURLoption;
diff -urp -X dontdiff.curl curl-7.21.6-2/lib/http_negotiate.c
curl-7.21.6-2-p3/lib/http_negotiate.c
--- curl-7.21.6-2/lib/http_negotiate.c 2011-04-22 11:01:50.000000000 -0600
+++ curl-7.21.6-2-p3/lib/http_negotiate.c 2011-06-28 17:01:38.636756659
-0600
@@ -77,18 +77,25 @@ get_gss_name(struct connectdata *conn, b
/* IIS uses the <service>@<fqdn> form but uses 'http' as the service name */
- if(neg_ctx->gss)
- service = "KHTTP";
- else
- service = "HTTP";
+ service = conn->data->set.str[STRING_KRB_SVCNAME];
+ if(service && (strchr(service,'@') || strchr(service,'/'))) {
+ snprintf(name, sizeof(name), "%s", service);
+ } else {
+ if(service == NULL) {
+ if(neg_ctx->gss)
+ service = "KHTTP";
+ else
+ service = "HTTP";
+ }
- token.length = strlen(service) + 1 + strlen(proxy ? conn->proxy.name :
- conn->host.name) + 1;
- if(token.length + 1 > sizeof(name))
- return EMSGSIZE;
+ token.length = strlen(service) + 1 + strlen(proxy ? conn->proxy.name :
+ conn->host.name) + 1;
+ if(token.length + 1 > sizeof(name))
+ return EMSGSIZE;
- snprintf(name, sizeof(name), "%s@%s", service, proxy ? conn->proxy.name :
- conn->host.name);
+ snprintf(name, sizeof(name), "%s@%s", service, proxy ? conn->proxy.name :
+ conn->host.name);
+ }
token.value = (void *) name;
major_status = gss_import_name(&minor_status,
diff -urp -X dontdiff.curl curl-7.21.6-2/lib/url.c curl-7.21.6-2-p3/lib/url.c
--- curl-7.21.6-2/lib/url.c 2011-06-21 13:46:22.000000000 -0600
+++ curl-7.21.6-2-p3/lib/url.c 2011-06-28 16:41:58.814412806 -0600
@@ -1992,6 +1992,14 @@ CURLcode Curl_setopt(struct SessionHandl
va_arg(param, char *));
data->set.krb = (bool)(NULL != data->set.str[STRING_KRB_LEVEL]);
break;
+ case CURLOPT_KRBSVCNAME:
+ /*
+ * A string that defines the kerberos service name, such as KHTTP.
+ */
+ result = setstropt(&data->set.str[STRING_KRB_SVCNAME],
+ va_arg(param, char *));
+ // data->set.krbsvcname = data->set.str[STRING_KRB_LEVEL];
+ break;
case CURLOPT_SSL_VERIFYPEER:
/*
* Enable peer SSL verifying.
diff -urp -X dontdiff.curl curl-7.21.6-2/lib/urldata.h
curl-7.21.6-2-p3/lib/urldata.h
--- curl-7.21.6-2/lib/urldata.h 2011-04-22 11:01:50.000000000 -0600
+++ curl-7.21.6-2-p3/lib/urldata.h 2011-06-28 17:02:40.237379275 -0600
@@ -1284,6 +1284,7 @@ enum dupstring {
STRING_KEY_PASSWD, /* plain text private key password */
STRING_KEY_TYPE, /* format for private key (default: PEM) */
STRING_KRB_LEVEL, /* krb security level */
+ STRING_KRB_SVCNAME, /* krb service */
STRING_NETRC_FILE, /* if not NULL, use this instead of trying to find
$HOME/.netrc */
STRING_COPYPOSTFIELDS, /* if POST, set the fields' values here */
diff -urp -X dontdiff.curl curl-7.21.6-2/src/main.c curl-7.21.6-2-p3/src/main.c
--- curl-7.21.6-2/src/main.c 2011-04-22 11:01:50.000000000 -0600
+++ curl-7.21.6-2-p3/src/main.c 2011-06-28 17:28:43.156496495 -0600
@@ -551,6 +551,7 @@ struct Configurable {
bool crlf;
char *customrequest;
char *krblevel;
+ char *krbsvcname;
char *trace_dump; /* file to dump the network trace to, or NULL */
FILE *trace_stream;
bool trace_fopened;
@@ -828,6 +829,7 @@ static void help(void)
" --key <key> Private key file name (SSL/SSH)",
" --key-type <type> Private key file type (DER/PEM/ENG) (SSL)",
" --krb <level> Enable Kerberos with specified security level (F)",
+ " --krb-svc-name <name> Set Kerberos name of service (H)",
" --libcurl <file> Dump libcurl equivalent code of this command line",
" --limit-rate <rate> Limit transfer speed to this rate",
" -J/--remote-header-name Use the header-provided filename (H)",
@@ -1864,6 +1866,7 @@ static ParameterError getparameter(char
{"$h", "retry-delay", TRUE},
{"$i", "retry-max-time", TRUE},
{"$k", "proxy-negotiate", FALSE},
+ {"$l", "krb-svc-name", TRUE},
{"$m", "ftp-account", TRUE},
{"$n", "proxy-anyauth", FALSE},
{"$o", "trace-time", FALSE},
@@ -2344,13 +2347,15 @@ static ParameterError getparameter(char
if(str2num(&config->retry_maxtime, nextarg))
return PARAM_BAD_NUMERIC;
break;
-
case 'k': /* --proxy-negotiate */
if(curlinfo->features & CURL_VERSION_GSSNEGOTIATE)
config->proxynegotiate = toggle;
else
return PARAM_LIBCURL_DOESNT_SUPPORT;
break;
+ case 'l': /* --krb-svc-name */
+ GetStr(&config->krbsvcname, nextarg);
+ break;
case 'm': /* --ftp-account */
GetStr(&config->ftp_account, nextarg);
break;
@@ -4048,6 +4053,8 @@ static void free_config_fields(struct Co
free(config->cookiefile);
if(config->krblevel)
free(config->krblevel);
+ if(config->krbsvcname)
+ free(config->krbsvcname);
if(config->headerfile)
free(config->headerfile);
if(config->ftpport)
@@ -5333,6 +5340,7 @@ operate(struct Configurable *config, int
my_setopt(curl, CURLOPT_HTTPPROXYTUNNEL, config->proxytunnel);
my_setopt_str(curl, CURLOPT_INTERFACE, config->iface);
my_setopt_str(curl, CURLOPT_KRBLEVEL, config->krblevel);
+ my_setopt_str(curl, CURLOPT_KRBSVCNAME, config->krbsvcname);
progressbarinit(&progressbar, config);
if((config->progressmode == CURL_PROGRESS_BAR) &&
-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette: http://curl.haxx.se/mail/etiquette.html
