gss_add_cred.c revision 153838
1/*- 2 * Copyright (c) 2005 Doug Rabson 3 * All rights reserved. 4 * 5 * Redistribution and use in source and binary forms, with or without 6 * modification, are permitted provided that the following conditions 7 * are met: 8 * 1. Redistributions of source code must retain the above copyright 9 * notice, this list of conditions and the following disclaimer. 10 * 2. Redistributions in binary form must reproduce the above copyright 11 * notice, this list of conditions and the following disclaimer in the 12 * documentation and/or other materials provided with the distribution. 13 * 14 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND 15 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 16 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 17 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE 18 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 19 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 20 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 21 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 22 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 23 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 24 * SUCH DAMAGE. 25 * 26 * $FreeBSD: head/lib/libgssapi/gss_add_cred.c 153838 2005-12-29 14:40:22Z dfr $ 27 */ 28 29#include <gssapi/gssapi.h> 30#include <errno.h> 31 32#include "mech_switch.h" 33#include "cred.h" 34#include "name.h" 35 36static struct _gss_mechanism_cred * 37_gss_copy_cred(struct _gss_mechanism_cred *mc) 38{ 39 struct _gss_mechanism_cred *new_mc; 40 struct _gss_mech_switch *m = mc->gmc_mech; 41 OM_uint32 major_status, minor_status; 42 gss_name_t name; 43 gss_cred_id_t cred; 44 OM_uint32 initiator_lifetime, acceptor_lifetime; 45 gss_cred_usage_t cred_usage; 46 47 major_status = m->gm_inquire_cred_by_mech(&minor_status, 48 mc->gmc_cred, mc->gmc_mech_oid, 49 &name, &initiator_lifetime, &acceptor_lifetime, &cred_usage); 50 if (major_status) 51 return (0); 52 53 major_status = m->gm_add_cred(&minor_status, 54 GSS_C_NO_CREDENTIAL, name, mc->gmc_mech_oid, 55 cred_usage, initiator_lifetime, acceptor_lifetime, 56 &cred, 0, 0, 0); 57 m->gm_release_name(&minor_status, &name); 58 59 if (major_status) 60 return (0); 61 62 new_mc = malloc(sizeof(struct _gss_mechanism_cred)); 63 if (!new_mc) { 64 m->gm_release_cred(&minor_status, &cred); 65 return (0); 66 } 67 new_mc->gmc_mech = m; 68 new_mc->gmc_mech_oid = &m->gm_mech_oid; 69 new_mc->gmc_cred = cred; 70 71 return (new_mc); 72} 73 74OM_uint32 75gss_add_cred(OM_uint32 *minor_status, 76 const gss_cred_id_t input_cred_handle, 77 const gss_name_t desired_name, 78 const gss_OID desired_mech, 79 gss_cred_usage_t cred_usage, 80 OM_uint32 initiator_time_req, 81 OM_uint32 acceptor_time_req, 82 gss_cred_id_t *output_cred_handle, 83 gss_OID_set *actual_mechs, 84 OM_uint32 *initiator_time_rec, 85 OM_uint32 *acceptor_time_rec) 86{ 87 OM_uint32 major_status; 88 struct _gss_mech_switch *m; 89 gss_OID_set_desc set; 90 struct _gss_name *name = (struct _gss_name *) desired_name; 91 struct _gss_cred *cred = (struct _gss_cred *) input_cred_handle; 92 struct _gss_cred *new_cred; 93 struct _gss_mechanism_cred *mc, *target_mc, *copy_mc; 94 struct _gss_mechanism_name *mn; 95 OM_uint32 min_time, time, junk; 96 int i; 97 98 *output_cred_handle = 0; 99 *minor_status = 0; 100 101 new_cred = malloc(sizeof(struct _gss_cred)); 102 if (!new_cred) { 103 *minor_status = ENOMEM; 104 return (GSS_S_FAILURE); 105 } 106 new_cred->gc_usage = cred_usage; 107 SLIST_INIT(&new_cred->gc_mc); 108 109 /* 110 * We go through all the mc attached to the input_cred_handle 111 * and check the mechanism. If it matches, we call 112 * gss_add_cred for that mechanism, otherwise we copy the mc 113 * to new_cred. 114 */ 115 target_mc = 0; 116 if (cred) { 117 SLIST_FOREACH(mc, &cred->gc_mc, gmc_link) { 118 if (_gss_oid_equal(mc->gmc_mech, desired_mech)) { 119 target_mc = mc; 120 } 121 copy_mc = _gss_copy_cred(mc); 122 if (!copy_mc) { 123 gss_release_cred(&junk, (gss_cred_id_t*) &new_cred); 124 *minor_status = ENOMEM; 125 return (GSS_S_FAILURE); 126 } 127 SLIST_INSERT_HEAD(&new_cred->gc_mc, copy_mc, gmc_link); 128 } 129 } 130 131 /* 132 * Figure out a suitable mn, if any. 133 */ 134 if (desired_name) { 135 mn = _gss_find_mn((struct _gss_name *) desired_name, 136 desired_mech); 137 if (!mn) { 138 free(new_cred); 139 return (GSS_S_BAD_NAME); 140 } 141 } else { 142 mn = 0; 143 } 144 145 m = _gss_find_mech_switch(desired_mech); 146 147 mc = malloc(sizeof(struct _gss_mechanism_cred)); 148 if (!mc) { 149 gss_release_cred(&junk, (gss_cred_id_t*) &new_cred); 150 *minor_status = ENOMEM; 151 return (GSS_S_FAILURE); 152 } 153 mc->gmc_mech = m; 154 mc->gmc_mech_oid = &m->gm_mech_oid; 155 156 major_status = m->gm_add_cred(minor_status, 157 target_mc ? target_mc->gmc_cred : GSS_C_NO_CREDENTIAL, 158 desired_name ? mn->gmn_name : GSS_C_NO_NAME, 159 desired_mech, 160 cred_usage, 161 initiator_time_req, 162 acceptor_time_req, 163 &mc->gmc_cred, 164 actual_mechs, 165 initiator_time_rec, 166 acceptor_time_rec); 167 168 if (major_status) { 169 gss_release_cred(&junk, (gss_cred_id_t*) &new_cred); 170 free(mc); 171 return (major_status); 172 } 173 SLIST_INSERT_HEAD(&new_cred->gc_mc, mc, gmc_link); 174 *output_cred_handle = (gss_cred_id_t) new_cred; 175 176 return (GSS_S_COMPLETE); 177} 178 179