1/*
2 * Copyright (c) 2006 Kungliga Tekniska Högskolan
3 * (Royal Institute of Technology, Stockholm, Sweden).
4 * All rights reserved.
5 *
6 * Portions Copyright (c) 2009 Apple Inc. All rights reserved.
7 *
8 * Redistribution and use in source and binary forms, with or without
9 * modification, are permitted provided that the following conditions
10 * are met:
11 *
12 * 1. Redistributions of source code must retain the above copyright
13 *    notice, this list of conditions and the following disclaimer.
14 *
15 * 2. Redistributions in binary form must reproduce the above copyright
16 *    notice, this list of conditions and the following disclaimer in the
17 *    documentation and/or other materials provided with the distribution.
18 *
19 * 3. Neither the name of the Institute nor the names of its contributors
20 *    may be used to endorse or promote products derived from this software
21 *    without specific prior written permission.
22 *
23 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
24 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
25 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
26 * ARE DISCLAIMED.  IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
27 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
28 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
29 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
30 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
31 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
32 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
33 * SUCH DAMAGE.
34 */
35
36#include "ntlm.h"
37
38OM_uint32 GSSAPI_CALLCONV
39_gss_ntlm_inquire_cred
40           (OM_uint32 * minor_status,
41            const gss_cred_id_t cred_handle,
42            gss_name_t * name,
43            OM_uint32 * lifetime,
44            gss_cred_usage_t * cred_usage,
45            gss_OID_set * mechanisms
46           )
47{
48    OM_uint32 ret, junk;
49
50    *minor_status = 0;
51
52    if (cred_handle == NULL)
53	return GSS_S_NO_CRED;
54
55    if (name) {
56	ntlm_name n = calloc(1, sizeof(*n));
57	ntlm_cred c = (ntlm_cred)cred_handle;
58	if (n) {
59	    n->user = strdup(c->username);
60	    n->domain = strdup(c->domain);
61	}
62	if (n == NULL || n->user == NULL || n->domain == NULL) {
63	    if (n)
64		free(n->user);
65	    *minor_status = ENOMEM;
66	    return GSS_S_FAILURE;
67	}
68	*name = (gss_name_t)n;
69    }
70    if (lifetime)
71	*lifetime = GSS_C_INDEFINITE;
72    if (cred_usage)
73	*cred_usage = 0;
74    if (mechanisms)
75	*mechanisms = GSS_C_NO_OID_SET;
76
77    if (cred_handle == GSS_C_NO_CREDENTIAL)
78	return GSS_S_NO_CRED;
79
80    if (mechanisms) {
81        ret = gss_create_empty_oid_set(minor_status, mechanisms);
82        if (ret)
83	    goto out;
84	ret = gss_add_oid_set_member(minor_status,
85				     GSS_NTLM_MECHANISM,
86				     mechanisms);
87        if (ret)
88	    goto out;
89    }
90
91    return GSS_S_COMPLETE;
92out:
93    gss_release_oid_set(&junk, mechanisms);
94    return ret;
95}
96
97#ifdef HAVE_KCM
98static OM_uint32
99_gss_ntlm_destroy_kcm_cred(gss_cred_id_t *cred_handle)
100{
101    krb5_storage *request, *response;
102    krb5_data response_data;
103    krb5_context context;
104    krb5_error_code ret;
105    ntlm_cred cred;
106
107    cred = (ntlm_cred)*cred_handle;
108
109    ret = krb5_init_context(&context);
110    if (ret)
111        return ret;
112
113    ret = krb5_kcm_storage_request(context, KCM_OP_DEL_NTLM_CRED, &request);
114    if (ret)
115	goto out;
116
117    ret = krb5_store_stringz(request, cred->username);
118    if (ret)
119	goto out;
120
121    ret = krb5_store_stringz(request, cred->domain);
122    if (ret)
123	goto out;
124
125    ret = krb5_kcm_call(context, request, &response, &response_data);
126    if (ret)
127	goto out;
128
129    krb5_storage_free(request);
130    krb5_storage_free(response);
131    krb5_data_free(&response_data);
132
133 out:
134    krb5_free_context(context);
135
136    return ret;
137}
138#endif /* HAVE_KCM */
139
140OM_uint32 GSSAPI_CALLCONV
141_gss_ntlm_destroy_cred(OM_uint32 *minor_status,
142		       gss_cred_id_t *cred_handle)
143{
144#ifdef HAVE_KCM
145    krb5_error_code ret;
146#endif
147
148    if (cred_handle == NULL || *cred_handle == GSS_C_NO_CREDENTIAL)
149	return GSS_S_COMPLETE;
150
151#ifdef HAVE_KCM
152    ret = _gss_ntlm_destroy_kcm_cred(cred_handle);
153    if (ret) {
154	*minor_status = ret;
155	return GSS_S_FAILURE;
156    }
157#endif
158
159    return _gss_ntlm_release_cred(minor_status, cred_handle);
160}
161