creds.c revision 1.1.1.1 
1/*	$NetBSD: creds.c,v 1.1.1.1 2011/04/13 18:14:47 elric Exp $	*/
2
3/*
4 * Copyright (c) 2006 Kungliga Tekniska H��gskolan
5 * (Royal Institute of Technology, Stockholm, Sweden).
6 * All rights reserved.
7 *
8 * Portions Copyright (c) 2009 Apple Inc. All rights reserved.
9 *
10 * Redistribution and use in source and binary forms, with or without
11 * modification, are permitted provided that the following conditions
12 * are met:
13 *
14 * 1. Redistributions of source code must retain the above copyright
15 *    notice, this list of conditions and the following disclaimer.
16 *
17 * 2. Redistributions in binary form must reproduce the above copyright
18 *    notice, this list of conditions and the following disclaimer in the
19 *    documentation and/or other materials provided with the distribution.
20 *
21 * 3. Neither the name of the Institute nor the names of its contributors
22 *    may be used to endorse or promote products derived from this software
23 *    without specific prior written permission.
24 *
25 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
26 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
27 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
28 * ARE DISCLAIMED.  IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
29 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
30 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
31 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
32 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
33 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
34 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
35 * SUCH DAMAGE.
36 */
37
38#include "ntlm.h"
39
40OM_uint32 _gss_ntlm_inquire_cred
41           (OM_uint32 * minor_status,
42            const gss_cred_id_t cred_handle,
43            gss_name_t * name,
44            OM_uint32 * lifetime,
45            gss_cred_usage_t * cred_usage,
46            gss_OID_set * mechanisms
47           )
48{
49    OM_uint32 ret, junk;
50
51    *minor_status = 0;
52
53    if (cred_handle == NULL)
54	return GSS_S_NO_CRED;
55
56    if (name) {
57	ret = _gss_ntlm_duplicate_name(minor_status,
58				       (gss_name_t)cred_handle,
59				       name);
60	if (ret)
61	    goto out;
62    }
63    if (lifetime)
64	*lifetime = GSS_C_INDEFINITE;
65    if (cred_usage)
66	*cred_usage = 0;
67    if (mechanisms)
68	*mechanisms = GSS_C_NO_OID_SET;
69
70    if (cred_handle == GSS_C_NO_CREDENTIAL)
71	return GSS_S_NO_CRED;
72
73    if (mechanisms) {
74        ret = gss_create_empty_oid_set(minor_status, mechanisms);
75        if (ret)
76	    goto out;
77	ret = gss_add_oid_set_member(minor_status,
78				     GSS_NTLM_MECHANISM,
79				     mechanisms);
80        if (ret)
81	    goto out;
82    }
83
84    return GSS_S_COMPLETE;
85out:
86    gss_release_oid_set(&junk, mechanisms);
87    return ret;
88}
89
90OM_uint32
91_gss_ntlm_destroy_cred(OM_uint32 *minor_status,
92		       gss_cred_id_t *cred_handle)
93{
94    krb5_error_code ret;
95    krb5_storage *request, *response;
96    krb5_data response_data;
97    krb5_context context;
98    ntlm_cred cred;
99
100    if (cred_handle == NULL || *cred_handle == GSS_C_NO_CREDENTIAL)
101	return GSS_S_COMPLETE;
102
103    cred = (ntlm_cred)*cred_handle;
104
105    ret = krb5_init_context(&context);
106    if (ret) {
107	*minor_status = ret;
108	return GSS_S_FAILURE;
109    }
110
111    ret = krb5_kcm_storage_request(context, KCM_OP_DEL_NTLM_CRED, &request);
112    if (ret)
113	goto out;
114
115    ret = krb5_store_stringz(request, cred->username);
116    if (ret)
117	goto out;
118
119    ret = krb5_store_stringz(request, cred->domain);
120    if (ret)
121	goto out;
122
123    ret = krb5_kcm_call(context, request, &response, &response_data);
124    if (ret)
125	goto out;
126
127    krb5_storage_free(request);
128    krb5_storage_free(response);
129    krb5_data_free(&response_data);
130
131 out:
132    krb5_free_context(context);
133    if (ret) {
134	*minor_status = ret;
135	return GSS_S_FAILURE;
136    }
137
138    return _gss_ntlm_release_cred(minor_status, cred_handle);
139}
140