1/* 2 * Copyright (c) 2004,2006 Apple Computer, Inc. All Rights Reserved. 3 * 4 * @APPLE_LICENSE_HEADER_START@ 5 * 6 * This file contains Original Code and/or Modifications of Original Code 7 * as defined in and that are subject to the Apple Public Source License 8 * Version 2.0 (the 'License'). You may not use this file except in 9 * compliance with the License. Please obtain a copy of the License at 10 * http://www.opensource.apple.com/apsl/ and read it before using this 11 * file. 12 * 13 * The Original Code and all software distributed under the License are 14 * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER 15 * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES, 16 * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY, 17 * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT. 18 * Please see the License for the specific language governing rights and 19 * limitations under the License. 20 * 21 * @APPLE_LICENSE_HEADER_END@ 22 */ 23 24 25// 26// tokenaccess - access management to a TokenDatabase's Token's TokenDaemon's tokend 27// 28#include "tokenaccess.h" 29 30 31// 32// Process an exception thrown (presumably) by a TokenDaemon interface call. 33// 34void Access::operator () (const CssmError &err) 35{ 36 if (++mIteration > 2) { 37 secdebug("tokendb", "retry failed; aborting operation"); 38 throw; 39 } 40 41 //@@@ hack until tokend returns RESET 42 if (err.error == -1) { 43 secdebug("tokendb", "TEMP HACK (error -1) action - reset and retry"); 44 token.resetAcls(); 45 return; 46 } 47 48 if (CSSM_ERR_IS_CONVERTIBLE(err.error)) 49 switch (CSSM_ERRCODE(err.error)) { 50 case CSSM_ERRCODE_OPERATION_AUTH_DENIED: 51 case CSSM_ERRCODE_OBJECT_USE_AUTH_DENIED: 52 // @@@ do something more focused here, but for now... 53 secdebug("tokendb", "tokend denies auth; we're punting for now"); 54 throw; 55 case CSSM_ERRCODE_DEVICE_RESET: 56 secdebug("tokendb", "tokend signals reset; clearing and retrying"); 57 token.resetAcls(); 58 return; // induce retry 59 } 60 // all others are non-recoverable 61 secdebug("tokendb", "non-recoverable error in Access(): %d", err.error); 62 throw; 63} 64