#include <u.h>#include <libc.h>#include <auth.h>#include <libsec.h>#include "authlocal.h" static char *badreq = "bad ticket request";static char *ccmsg = "can't connect to AS";static char *srmsg = "server refused authentication";static char *sgmsg = "server gave up"; intauthnonce(int fd, uchar *nonce){	int n, afd;	int rv;	char trbuf[TICKREQLEN];	char tbuf[2*TICKETLEN+AUTHENTLEN+TICKETLEN];	Ticketreq tr;	Ticket *tp; 	/* add uid and local hostid to ticket request */	if(_asreadn(fd, trbuf, TICKREQLEN) < 0){		werrstr(badreq);		return -1;	}	convM2TR(trbuf, &tr);	if(tr.type != AuthTreq){		werrstr(badreq);		return -1;	}	memset(tr.uid, 0, sizeof(tr.uid));	strcpy(tr.uid, getuser());	memset(tr.hostid, 0, sizeof(tr.hostid));	_asrdfile("/dev/hostowner", tr.hostid, NAMELEN);	convTR2M(&tr, trbuf); 	/* get ticket */	afd = authdial();	if(afd < 0){		werrstr(ccmsg);		return -1;	}	rv = _asgetticket(afd, trbuf, tbuf);	close(afd);	if(rv < 0){		werrstr("getticket: %r");		return -1;	} 	/* get authenticator */	afd = open("/dev/authenticator", ORDWR);	if(afd < 0){		werrstr("/dev/authenticator: %r");		return -1;	}	if(write(afd, tbuf, TICKETLEN) < 0){		close(afd);		werrstr("writing /dev/authenticator: %r");		return -1;	}	if(read(afd, tbuf+2*TICKETLEN, AUTHENTLEN) < 0){		close(afd);		werrstr("reading /dev/authenticator: %r");		return -1;	}	close(afd); 	/* write server ticket to server */	if(write(fd, tbuf+TICKETLEN, TICKETLEN+AUTHENTLEN) < 0){		werrstr("%s:%r", srmsg);		return -1;	} 	/* get authenticator from server and check */	if(_asreadn(fd, tbuf+TICKETLEN, AUTHENTLEN) < 0){		werrstr(sgmsg);		return -1;	}	afd = open("/dev/authcheck", ORDWR);	if(afd < 0){		werrstr("authcheck: %r");		return -1;	}	n = write(afd, tbuf, TICKETLEN+AUTHENTLEN);	if(n < 0){		close(afd);		memset(tbuf, 0, AUTHENTLEN);		if(memcmp(tbuf, tbuf+TICKETLEN, AUTHENTLEN) == 0)			werrstr("refused by server");		else			werrstr("server lies");		return -1;	} 	if(nonce != nil){		read(afd, tbuf, TICKETLEN);		tp = (Ticket*)tbuf;		des56to64((uchar*)tp->key, nonce);	}	close(afd); 	return 0;} intauth(int fd){	return authnonce(fd, nil);}