1153838Sdfr/*- 2153838Sdfr * Copyright (c) 2005 Doug Rabson 3153838Sdfr * All rights reserved. 4153838Sdfr * 5153838Sdfr * Redistribution and use in source and binary forms, with or without 6153838Sdfr * modification, are permitted provided that the following conditions 7153838Sdfr * are met: 8153838Sdfr * 1. Redistributions of source code must retain the above copyright 9153838Sdfr * notice, this list of conditions and the following disclaimer. 10153838Sdfr * 2. Redistributions in binary form must reproduce the above copyright 11153838Sdfr * notice, this list of conditions and the following disclaimer in the 12153838Sdfr * documentation and/or other materials provided with the distribution. 13153838Sdfr * 14153838Sdfr * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND 15153838Sdfr * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 16153838Sdfr * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 17153838Sdfr * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE 18153838Sdfr * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 19153838Sdfr * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 20153838Sdfr * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 21153838Sdfr * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 22153838Sdfr * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 23153838Sdfr * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 24153838Sdfr * SUCH DAMAGE. 25153838Sdfr * 26153838Sdfr * $FreeBSD$ 27153838Sdfr */ 28153838Sdfr 29153838Sdfr#include <gssapi/gssapi.h> 30153838Sdfr#include <stdlib.h> 31168340Skan#include <string.h> 32153838Sdfr#include <errno.h> 33153838Sdfr 34153838Sdfr#include "mech_switch.h" 35153838Sdfr#include "name.h" 36153838Sdfr#include "cred.h" 37153838Sdfr 38178828Sdfr#define AUSAGE 1 39178828Sdfr#define IUSAGE 2 40178828Sdfr 41178828Sdfrstatic void 42178828Sdfrupdateusage(gss_cred_usage_t usage, int *usagemask) 43178828Sdfr{ 44178828Sdfr if (usage == GSS_C_BOTH) 45178828Sdfr *usagemask |= AUSAGE | IUSAGE; 46178828Sdfr else if (usage == GSS_C_ACCEPT) 47178828Sdfr *usagemask |= AUSAGE; 48178828Sdfr else if (usage == GSS_C_INITIATE) 49178828Sdfr *usagemask |= IUSAGE; 50178828Sdfr} 51178828Sdfr 52153838SdfrOM_uint32 53153838Sdfrgss_inquire_cred(OM_uint32 *minor_status, 54153838Sdfr const gss_cred_id_t cred_handle, 55153838Sdfr gss_name_t *name_ret, 56153838Sdfr OM_uint32 *lifetime, 57153838Sdfr gss_cred_usage_t *cred_usage, 58153838Sdfr gss_OID_set *mechanisms) 59153838Sdfr{ 60153838Sdfr OM_uint32 major_status; 61153838Sdfr struct _gss_mech_switch *m; 62153838Sdfr struct _gss_cred *cred = (struct _gss_cred *) cred_handle; 63153838Sdfr struct _gss_name *name; 64153838Sdfr struct _gss_mechanism_name *mn; 65153838Sdfr OM_uint32 min_lifetime; 66178828Sdfr int found = 0; 67178828Sdfr int usagemask = 0; 68178828Sdfr gss_cred_usage_t usage; 69153838Sdfr 70178828Sdfr _gss_load_mech(); 71178828Sdfr 72153838Sdfr *minor_status = 0; 73153838Sdfr if (name_ret) 74178828Sdfr *name_ret = GSS_C_NO_NAME; 75153838Sdfr if (lifetime) 76153838Sdfr *lifetime = 0; 77153838Sdfr if (cred_usage) 78153838Sdfr *cred_usage = 0; 79178828Sdfr if (mechanisms) 80178828Sdfr *mechanisms = GSS_C_NO_OID_SET; 81153838Sdfr 82153838Sdfr if (name_ret) { 83153838Sdfr name = malloc(sizeof(struct _gss_name)); 84178828Sdfr if (name == NULL) { 85153838Sdfr *minor_status = ENOMEM; 86153838Sdfr return (GSS_S_FAILURE); 87153838Sdfr } 88153838Sdfr memset(name, 0, sizeof(struct _gss_name)); 89153838Sdfr SLIST_INIT(&name->gn_mn); 90153838Sdfr } else { 91178828Sdfr name = NULL; 92153838Sdfr } 93153838Sdfr 94153838Sdfr if (mechanisms) { 95153838Sdfr major_status = gss_create_empty_oid_set(minor_status, 96153838Sdfr mechanisms); 97153838Sdfr if (major_status) { 98153838Sdfr if (name) free(name); 99153838Sdfr return (major_status); 100153838Sdfr } 101153838Sdfr } 102153838Sdfr 103153838Sdfr min_lifetime = GSS_C_INDEFINITE; 104153838Sdfr if (cred) { 105178828Sdfr struct _gss_mechanism_cred *mc; 106178828Sdfr 107153838Sdfr SLIST_FOREACH(mc, &cred->gc_mc, gmc_link) { 108153838Sdfr gss_name_t mc_name; 109153838Sdfr OM_uint32 mc_lifetime; 110153838Sdfr 111153838Sdfr major_status = mc->gmc_mech->gm_inquire_cred(minor_status, 112178828Sdfr mc->gmc_cred, &mc_name, &mc_lifetime, &usage, NULL); 113153838Sdfr if (major_status) 114153838Sdfr continue; 115153838Sdfr 116178828Sdfr updateusage(usage, &usagemask); 117178828Sdfr if (name && mc_name) { 118153838Sdfr mn = malloc(sizeof(struct _gss_mechanism_name)); 119153838Sdfr if (!mn) { 120153838Sdfr mc->gmc_mech->gm_release_name(minor_status, 121153838Sdfr &mc_name); 122153838Sdfr continue; 123153838Sdfr } 124153838Sdfr mn->gmn_mech = mc->gmc_mech; 125153838Sdfr mn->gmn_mech_oid = mc->gmc_mech_oid; 126153838Sdfr mn->gmn_name = mc_name; 127153838Sdfr SLIST_INSERT_HEAD(&name->gn_mn, mn, gmn_link); 128178828Sdfr } else if (mc_name) { 129153838Sdfr mc->gmc_mech->gm_release_name(minor_status, 130153838Sdfr &mc_name); 131153838Sdfr } 132153838Sdfr 133153838Sdfr if (mc_lifetime < min_lifetime) 134153838Sdfr min_lifetime = mc_lifetime; 135153838Sdfr 136153838Sdfr if (mechanisms) 137153838Sdfr gss_add_oid_set_member(minor_status, 138153838Sdfr mc->gmc_mech_oid, mechanisms); 139178828Sdfr found++; 140153838Sdfr } 141153838Sdfr } else { 142153838Sdfr SLIST_FOREACH(m, &_gss_mechs, gm_link) { 143153838Sdfr gss_name_t mc_name; 144153838Sdfr OM_uint32 mc_lifetime; 145153838Sdfr 146153838Sdfr major_status = m->gm_inquire_cred(minor_status, 147153838Sdfr GSS_C_NO_CREDENTIAL, &mc_name, &mc_lifetime, 148178828Sdfr &usage, NULL); 149153838Sdfr if (major_status) 150153838Sdfr continue; 151153838Sdfr 152178828Sdfr updateusage(usage, &usagemask); 153153838Sdfr if (name && mc_name) { 154153838Sdfr mn = malloc( 155153838Sdfr sizeof(struct _gss_mechanism_name)); 156153838Sdfr if (!mn) { 157178828Sdfr m->gm_release_name( 158153838Sdfr minor_status, &mc_name); 159153838Sdfr continue; 160153838Sdfr } 161178828Sdfr mn->gmn_mech = m; 162178828Sdfr mn->gmn_mech_oid = &m->gm_mech_oid; 163153838Sdfr mn->gmn_name = mc_name; 164153838Sdfr SLIST_INSERT_HEAD(&name->gn_mn, mn, gmn_link); 165153838Sdfr } else if (mc_name) { 166178828Sdfr m->gm_release_name(minor_status, 167153838Sdfr &mc_name); 168153838Sdfr } 169153838Sdfr 170153838Sdfr if (mc_lifetime < min_lifetime) 171153838Sdfr min_lifetime = mc_lifetime; 172153838Sdfr 173153838Sdfr if (mechanisms) 174153838Sdfr gss_add_oid_set_member(minor_status, 175153838Sdfr &m->gm_mech_oid, mechanisms); 176178828Sdfr found++; 177153838Sdfr } 178178828Sdfr } 179153838Sdfr 180178828Sdfr if (found == 0) { 181178828Sdfr gss_name_t n = (gss_name_t)name; 182178828Sdfr if (n) 183178828Sdfr gss_release_name(minor_status, &n); 184178828Sdfr gss_release_oid_set(minor_status, mechanisms); 185178828Sdfr *minor_status = 0; 186178828Sdfr return (GSS_S_NO_CRED); 187153838Sdfr } 188153838Sdfr 189153838Sdfr *minor_status = 0; 190153838Sdfr if (name_ret) 191153838Sdfr *name_ret = (gss_name_t) name; 192153838Sdfr if (lifetime) 193153838Sdfr *lifetime = min_lifetime; 194178828Sdfr if (cred_usage) { 195178828Sdfr if ((usagemask & (AUSAGE|IUSAGE)) == (AUSAGE|IUSAGE)) 196178828Sdfr *cred_usage = GSS_C_BOTH; 197178828Sdfr else if (usagemask & IUSAGE) 198178828Sdfr *cred_usage = GSS_C_INITIATE; 199178828Sdfr else if (usagemask & AUSAGE) 200178828Sdfr *cred_usage = GSS_C_ACCEPT; 201178828Sdfr } 202153838Sdfr return (GSS_S_COMPLETE); 203153838Sdfr} 204