1184588Sdfr/*- 2184588Sdfr * Copyright (c) 2008 Isilon Inc http://www.isilon.com/ 3184588Sdfr * Authors: Doug Rabson <dfr@rabson.org> 4184588Sdfr * Developed with Red Inc: Alfred Perlstein <alfred@freebsd.org> 5184588Sdfr * 6184588Sdfr * Redistribution and use in source and binary forms, with or without 7184588Sdfr * modification, are permitted provided that the following conditions 8184588Sdfr * are met: 9184588Sdfr * 1. Redistributions of source code must retain the above copyright 10184588Sdfr * notice, this list of conditions and the following disclaimer. 11184588Sdfr * 2. Redistributions in binary form must reproduce the above copyright 12184588Sdfr * notice, this list of conditions and the following disclaimer in the 13184588Sdfr * documentation and/or other materials provided with the distribution. 14184588Sdfr * 15184588Sdfr * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND 16184588Sdfr * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 17184588Sdfr * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 18184588Sdfr * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE 19184588Sdfr * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 20184588Sdfr * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 21184588Sdfr * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 22184588Sdfr * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 23184588Sdfr * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 24184588Sdfr * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 25184588Sdfr * SUCH DAMAGE. 26184588Sdfr */ 27184588Sdfr 28184588Sdfr#include <sys/cdefs.h> 29184588Sdfr__FBSDID("$FreeBSD$"); 30184588Sdfr 31184588Sdfr#include <sys/param.h> 32184588Sdfr#include <sys/kernel.h> 33184588Sdfr#include <sys/kobj.h> 34244370Srmacklem#include <sys/lock.h> 35184588Sdfr#include <sys/malloc.h> 36244370Srmacklem#include <sys/mutex.h> 37184588Sdfr 38184588Sdfr#include <kgssapi/gssapi.h> 39184588Sdfr#include <kgssapi/gssapi_impl.h> 40184588Sdfr 41184588Sdfr#include "kgss_if.h" 42184588Sdfr 43184588SdfrOM_uint32 44184588Sdfrgss_pname_to_uid(OM_uint32 *minor_status, const gss_name_t pname, 45184588Sdfr const gss_OID mech, uid_t *uidp) 46184588Sdfr{ 47184588Sdfr struct pname_to_uid_res res; 48184588Sdfr struct pname_to_uid_args args; 49184588Sdfr enum clnt_stat stat; 50244370Srmacklem CLIENT *cl; 51184588Sdfr 52184588Sdfr *minor_status = 0; 53184588Sdfr 54184588Sdfr if (pname == GSS_C_NO_NAME) 55184588Sdfr return (GSS_S_BAD_NAME); 56184588Sdfr 57244370Srmacklem cl = kgss_gssd_client(); 58244370Srmacklem if (cl == NULL) 59244370Srmacklem return (GSS_S_FAILURE); 60244370Srmacklem 61184588Sdfr args.pname = pname->handle; 62184588Sdfr args.mech = mech; 63184588Sdfr 64184588Sdfr bzero(&res, sizeof(res)); 65244370Srmacklem stat = gssd_pname_to_uid_1(&args, &res, cl); 66244370Srmacklem CLNT_RELEASE(cl); 67184588Sdfr if (stat != RPC_SUCCESS) { 68184588Sdfr *minor_status = stat; 69184588Sdfr return (GSS_S_FAILURE); 70184588Sdfr } 71184588Sdfr 72184588Sdfr if (res.major_status != GSS_S_COMPLETE) { 73184588Sdfr *minor_status = res.minor_status; 74184588Sdfr return (res.major_status); 75184588Sdfr } 76184588Sdfr 77184588Sdfr *uidp = res.uid; 78184588Sdfr return (GSS_S_COMPLETE); 79184588Sdfr} 80184588Sdfr 81184588SdfrOM_uint32 82184588Sdfrgss_pname_to_unix_cred(OM_uint32 *minor_status, const gss_name_t pname, 83184588Sdfr const gss_OID mech, uid_t *uidp, gid_t *gidp, 84184588Sdfr int *numgroups, gid_t *groups) 85184588Sdfr 86184588Sdfr{ 87184588Sdfr struct pname_to_uid_res res; 88184588Sdfr struct pname_to_uid_args args; 89184588Sdfr enum clnt_stat stat; 90184588Sdfr int i, n; 91244370Srmacklem CLIENT *cl; 92184588Sdfr 93184588Sdfr *minor_status = 0; 94184588Sdfr 95184588Sdfr if (pname == GSS_C_NO_NAME) 96184588Sdfr return (GSS_S_BAD_NAME); 97184588Sdfr 98244370Srmacklem cl = kgss_gssd_client(); 99244370Srmacklem if (cl == NULL) 100244370Srmacklem return (GSS_S_FAILURE); 101244370Srmacklem 102184588Sdfr args.pname = pname->handle; 103184588Sdfr args.mech = mech; 104184588Sdfr 105184588Sdfr bzero(&res, sizeof(res)); 106244370Srmacklem stat = gssd_pname_to_uid_1(&args, &res, cl); 107244370Srmacklem CLNT_RELEASE(cl); 108184588Sdfr if (stat != RPC_SUCCESS) { 109184588Sdfr *minor_status = stat; 110184588Sdfr return (GSS_S_FAILURE); 111184588Sdfr } 112184588Sdfr 113184588Sdfr if (res.major_status != GSS_S_COMPLETE) { 114184588Sdfr *minor_status = res.minor_status; 115184588Sdfr return (res.major_status); 116184588Sdfr } 117184588Sdfr 118184588Sdfr *uidp = res.uid; 119184588Sdfr *gidp = res.gid; 120184588Sdfr n = res.gidlist.gidlist_len; 121184588Sdfr if (n > *numgroups) 122184588Sdfr n = *numgroups; 123184588Sdfr for (i = 0; i < n; i++) 124184588Sdfr groups[i] = res.gidlist.gidlist_val[i]; 125184588Sdfr *numgroups = n; 126184588Sdfr 127184588Sdfr xdr_free((xdrproc_t) xdr_pname_to_uid_res, &res); 128184588Sdfr 129184588Sdfr return (GSS_S_COMPLETE); 130184588Sdfr} 131