/*
 * Copyright (c) 1995, 1996, 1997
 *   The Regents of the University of California.  All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that: (1) source code distributions
 * retain the above copyright notice and this paragraph in its entirety, (2)
 * distributions including binary code include the above copyright notice and
 * this paragraph in its entirety in the documentation or other materials
 * provided with the distribution, and (3) all advertising materials mentioning
 * features or use of this software display the following acknowledgement:
 * ``This product includes software developed by the University of California,
 * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of
 * the University nor the names of its contributors may be used to endorse
 * or promote products derived from this software without specific prior
 * written permission.
 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED
 * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
 * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
 *
 * Initial contribution from John Hawkinson (jhawk@mit.edu).
 */

#ifdef HAVE_CONFIG_H
#include "argus_config.h"
#endif

#include <unistd.h>
#include <stdlib.h>

#include <rabins.h>
#include <argus_util.h>
#include <argus_client.h>
#include <argus_main.h>
#include <argus_filter.h>

#include <signal.h>
#include <ctype.h>
#include <argus/extract.h>

extern u_char *snapend;

#include "interface.h"

extern char ArgusBuf[];

static const u_char *c_print(register const u_char *, register const u_char *);
static const u_char *krb4_print_hdr(const u_char *);
static void krb4_print(const u_char *);

#define AUTH_MSG_KDC_REQUEST         1<<1
#define AUTH_MSG_KDC_REPLY         2<<1
#define AUTH_MSG_APPL_REQUEST         3<<1
#define AUTH_MSG_APPL_REQUEST_MUTUAL      4<<1
#define AUTH_MSG_ERR_REPLY         5<<1
#define AUTH_MSG_PRIVATE         6<<1
#define AUTH_MSG_SAFE            7<<1
#define AUTH_MSG_APPL_ERR         8<<1
#define AUTH_MSG_DIE            63<<1

#define KERB_ERR_OK            0
#define KERB_ERR_NAME_EXP         1
#define KERB_ERR_SERVICE_EXP         2
#define KERB_ERR_AUTH_EXP         3
#define KERB_ERR_PKT_VER         4
#define KERB_ERR_NAME_MAST_KEY_VER      5
#define KERB_ERR_SERV_MAST_KEY_VER      6
#define KERB_ERR_BYTE_ORDER         7
#define KERB_ERR_PRINCIPAL_UNKNOWN      8
#define KERB_ERR_PRINCIPAL_NOT_UNIQUE      9
#define KERB_ERR_NULL_KEY         10

struct krb {
   u_int8_t pvno;      /* Protocol Version */
   u_int8_t type;      /* Type+B */
};

static char tstr[] = " [|kerberos]";

static struct tok type2str[] = {
   { AUTH_MSG_KDC_REQUEST,      "KDC_REQUEST" },
   { AUTH_MSG_KDC_REPLY,      "KDC_REPLY" },
   { AUTH_MSG_APPL_REQUEST,   "APPL_REQUEST" },
   { AUTH_MSG_APPL_REQUEST_MUTUAL,   "APPL_REQUEST_MUTUAL" },
   { AUTH_MSG_ERR_REPLY,      "ERR_REPLY" },
   { AUTH_MSG_PRIVATE,      "PRIVATE" },
   { AUTH_MSG_SAFE,      "SAFE" },
   { AUTH_MSG_APPL_ERR,      "APPL_ERR" },
   { AUTH_MSG_DIE,         "DIE" },
   { 0,            NULL }
};

static struct tok kerr2str[] = {
   { KERB_ERR_OK,         "OK" },
   { KERB_ERR_NAME_EXP,      "NAME_EXP" },
   { KERB_ERR_SERVICE_EXP,      "SERVICE_EXP" },
   { KERB_ERR_AUTH_EXP,      "AUTH_EXP" },
   { KERB_ERR_PKT_VER,      "PKT_VER" },
   { KERB_ERR_NAME_MAST_KEY_VER,   "NAME_MAST_KEY_VER" },
   { KERB_ERR_SERV_MAST_KEY_VER,   "SERV_MAST_KEY_VER" },
   { KERB_ERR_BYTE_ORDER,      "BYTE_ORDER" },
   { KERB_ERR_PRINCIPAL_UNKNOWN,   "PRINCIPAL_UNKNOWN" },
   { KERB_ERR_PRINCIPAL_NOT_UNIQUE,"PRINCIPAL_NOT_UNIQUE" },
   { KERB_ERR_NULL_KEY,      "NULL_KEY"},
   { 0,            NULL}
};

static const u_char *
c_print(register const u_char *s, register const u_char *ep)
{
   register u_char c;
   register int flag;

   flag = 1;
   while (s < ep) {
      c = *s++;
      if (c == '\0') {
         flag = 0;
         break;
      }
      if (!isascii(c)) {
         c = toascii(c);
         sprintf (&ArgusBuf[strlen(ArgusBuf)], "M-");
      }
      if (!isprint(c)) {
         c ^= 0x40;   /* DEL to ?, others to alpha */
         sprintf (&ArgusBuf[strlen(ArgusBuf)], "^");
      }
      sprintf (&ArgusBuf[strlen(ArgusBuf)], "%c", c);
   }
   if (flag)
      return NULL;
   return (s);
}

static const u_char *
krb4_print_hdr(const u_char *cp)
{
   cp += 2;

#define PRINT      if ((cp = c_print(cp, snapend)) == NULL) goto trunc

   PRINT;
   sprintf (&ArgusBuf[strlen(ArgusBuf)], ".");
   PRINT;
   sprintf (&ArgusBuf[strlen(ArgusBuf)], "@");
   PRINT;
   return (cp);

trunc:
   sprintf (&ArgusBuf[strlen(ArgusBuf)], "%s", tstr);
   return (NULL);

#undef PRINT
}

static void
krb4_print(const u_char *cp)
{
   register const struct krb *kp;
   u_char type;
   u_short len;

#define PRINT      if ((cp = c_print(cp, snapend)) == NULL) goto trunc
/*  True if struct krb is little endian */
#define IS_LENDIAN(kp)   (((kp)->type & 0x01) != 0)
#define KTOHSP(kp, cp)   (IS_LENDIAN(kp) ? EXTRACT_LE_16BITS(cp) : EXTRACT_16BITS(cp))

   kp = (struct krb *)cp;

   if ((&kp->type) >= snapend) {
      sprintf (&ArgusBuf[strlen(ArgusBuf)], "%s", tstr);
      return;
   }

   type = kp->type & (0xFF << 1);

   sprintf(&ArgusBuf[strlen(ArgusBuf)]," %s %s: ",
       IS_LENDIAN(kp) ? "le" : "be", tok2str(type2str, NULL, type));

   switch (type) {

   case AUTH_MSG_KDC_REQUEST:
      if ((cp = krb4_print_hdr(cp)) == NULL)
         return;
      cp += 4;   /* ctime */
      TCHECK(*cp);
      sprintf(&ArgusBuf[strlen(ArgusBuf)]," %dmin ", *cp++ * 5);
      PRINT;
      sprintf (&ArgusBuf[strlen(ArgusBuf)], ".");
      PRINT;
      break;

   case AUTH_MSG_APPL_REQUEST:
      cp += 2;
      TCHECK(*cp);
      sprintf(&ArgusBuf[strlen(ArgusBuf)],"v%d ", *cp++);
      PRINT;
      TCHECK(*cp);
      sprintf(&ArgusBuf[strlen(ArgusBuf)]," (%d)", *cp++);
      TCHECK(*cp);
      sprintf(&ArgusBuf[strlen(ArgusBuf)]," (%d)", *cp);
      break;

   case AUTH_MSG_KDC_REPLY:
      if ((cp = krb4_print_hdr(cp)) == NULL)
         return;
      cp += 10;   /* timestamp + n + exp + kvno */
      TCHECK2(*cp, sizeof(short));
      len = KTOHSP(kp, cp);
      sprintf(&ArgusBuf[strlen(ArgusBuf)]," (%d)", len);
      break;

   case AUTH_MSG_ERR_REPLY:
      if ((cp = krb4_print_hdr(cp)) == NULL)
         return;
      cp += 4;      /* timestamp */
      TCHECK2(*cp, sizeof(short));
      sprintf(&ArgusBuf[strlen(ArgusBuf)]," %s ", tok2str(kerr2str, NULL, KTOHSP(kp, cp)));
      cp += 4;
      PRINT;
      break;

   default:
      sprintf (&ArgusBuf[strlen(ArgusBuf)], "(unknown)");
      break;
   }

   return;

trunc:
   sprintf (&ArgusBuf[strlen(ArgusBuf)], "%s", tstr);
}

char *
krb_print(const u_char *dat, u_int len)
{
   register const struct krb *kp;

   kp = (struct krb *)dat;

   if (dat >= snapend) {
      sprintf (&ArgusBuf[strlen(ArgusBuf)], "%s", tstr);
      return ArgusBuf;
   }

   switch (kp->pvno) {

   case 1:
   case 2:
   case 3:
      sprintf(&ArgusBuf[strlen(ArgusBuf)]," v%d", kp->pvno);
      break;

   case 4:
      sprintf(&ArgusBuf[strlen(ArgusBuf)]," v%d", kp->pvno);
      krb4_print((const u_char *)kp);
      break;

   case 106:
   case 107:
      sprintf (&ArgusBuf[strlen(ArgusBuf)], " v5");
      /* Decode ASN.1 here "someday" */
      break;
   }
   return ArgusBuf;
}
