2 * Copyright (c) 2003-2007 Kungliga Tekniska Högskolan
3 * (Royal Institute of Technology, Stockholm, Sweden).
6 * Redistribution and use in source and binary forms, with or without
7 * modification, are permitted provided that the following conditions
10 * 1. Redistributions of source code must retain the above copyright
11 * notice, this list of conditions and the following disclaimer.
13 * 2. Redistributions in binary form must reproduce the above copyright
14 * notice, this list of conditions and the following disclaimer in the
15 * documentation and/or other materials provided with the distribution.
17 * 3. Neither the name of KTH nor the names of its contributors may be
18 * used to endorse or promote products derived from this software without
19 * specific prior written permission.
21 * THIS SOFTWARE IS PROVIDED BY KTH AND ITS CONTRIBUTORS ``AS IS'' AND ANY
22 * EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
24 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL KTH OR ITS CONTRIBUTORS BE
25 * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
26 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
27 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
28 * BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
29 * WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR
30 * OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF
31 * ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
44 #include <gssapi_krb5.h>
45 #include <gssapi_spnego.h>
49 #include "test_common.h"
52 print_time(OM_uint32 time_rec)
54 if (time_rec == GSS_C_INDEFINITE) {
55 printf("cred never expire\n");
57 time_t t = time_rec + time(NULL);
58 printf("expiration time: %s", ctime(&t));
65 test_add(gss_cred_id_t cred_handle)
67 OM_uint32 major_status, minor_status;
68 gss_cred_id_t copy_cred;
71 major_status = gss_add_cred (&minor_status,
83 if (GSS_ERROR(major_status))
84 errx(1, "add_cred failed");
88 major_status = gss_release_cred(&minor_status,
90 if (GSS_ERROR(major_status))
91 errx(1, "release_cred failed");
97 OM_uint32 major_status, minor_status;
98 gss_cred_id_t cred_handle;
101 major_status = gss_acquire_cred(&minor_status,
109 if (GSS_ERROR(major_status))
110 errx(1, "acquire_cred failed");
112 print_time(time_rec);
114 test_add(cred_handle);
115 test_add(cred_handle);
116 test_add(cred_handle);
118 major_status = gss_release_cred(&minor_status,
120 if (GSS_ERROR(major_status))
121 errx(1, "release_cred failed");
126 acquire_cred_service(const char *service,
131 OM_uint32 major_status, minor_status;
132 gss_cred_id_t cred_handle;
134 gss_buffer_desc name_buffer;
135 gss_name_t name = GSS_C_NO_NAME;
138 name_buffer.value = rk_UNCONST(service);
139 name_buffer.length = strlen(service);
141 major_status = gss_import_name(&minor_status,
145 if (GSS_ERROR(major_status))
146 errx(1, "import_name failed");
149 major_status = gss_acquire_cred(&minor_status,
157 if (GSS_ERROR(major_status)) {
158 warnx("acquire_cred failed: %s",
159 gssapi_err(major_status, minor_status, GSS_C_NO_OID));
161 print_time(time_rec);
162 gss_release_cred(&minor_status, &cred_handle);
165 if (name != GSS_C_NO_NAME)
166 gss_release_name(&minor_status, &name);
168 if (GSS_ERROR(major_status))
174 static int version_flag = 0;
175 static int help_flag = 0;
176 static int kerberos_flag = 0;
177 static int enctype = 0;
178 static char *acquire_name;
179 static char *acquire_type;
180 static char *target_name;
181 static char *name_type;
183 static int num_loops = 1;
185 static struct getargs args[] = {
186 {"acquire-name", 0, arg_string, &acquire_name, "name", NULL },
187 {"acquire-type", 0, arg_string, &acquire_type, "type", NULL },
188 {"enctype", 0, arg_integer, &enctype, "enctype-num", NULL },
189 {"loops", 0, arg_integer, &num_loops, "enctype-num", NULL },
190 {"kerberos", 0, arg_flag, &kerberos_flag, "enctype-num", NULL },
191 {"target-name", 0, arg_string, &target_name, "name", NULL },
192 {"ccache", 0, arg_string, &ccache, "name", NULL },
193 {"name-type", 0, arg_string, &name_type, "type", NULL },
194 {"version", 0, arg_flag, &version_flag, "print version", NULL },
195 {"help", 0, arg_flag, &help_flag, NULL, NULL }
201 arg_printusage (args, sizeof(args)/sizeof(*args), NULL, "");
206 main(int argc, char **argv)
208 gss_OID_set oidset = GSS_C_NULL_OID_SET;
209 gss_OID mechoid = GSS_C_NO_OID;
210 OM_uint32 maj_stat, min_stat;
212 gss_name_t target = GSS_C_NO_NAME;
217 setprogname(argv[0]);
218 if(getarg(args, sizeof(args) / sizeof(args[0]), argc, argv, &optidx))
236 if (strcasecmp(acquire_type, "both") == 0)
238 else if (strcasecmp(acquire_type, "accept") == 0)
240 else if (strcasecmp(acquire_type, "initiate") == 0)
241 flag = GSS_C_INITIATE;
243 errx(1, "unknown type %s", acquire_type);
248 if (strcasecmp("hostbased-service", name_type) == 0)
249 type = GSS_C_NT_HOSTBASED_SERVICE;
250 else if (strcasecmp("user-name", name_type) == 0)
251 type = GSS_C_NT_USER_NAME;
253 errx(1, "unknown name type %s", name_type);
255 type = GSS_C_NT_HOSTBASED_SERVICE;
258 maj_stat = gss_krb5_ccache_name(&min_stat, ccache, NULL);
259 if (GSS_ERROR(maj_stat))
260 errx(1, "gss_krb5_ccache_name %s",
261 gssapi_err(maj_stat, min_stat, GSS_C_NO_OID));
265 mechoid = GSS_KRB5_MECHANISM;
267 maj_stat = gss_create_empty_oid_set(&min_stat, &oidset);
268 if (maj_stat != GSS_S_COMPLETE)
269 errx(1, "gss_create_empty_oid_set: %s",
270 gssapi_err(maj_stat, min_stat, GSS_C_NO_OID));
272 maj_stat = gss_add_oid_set_member(&min_stat, GSS_KRB5_MECHANISM, &oidset);
273 if (maj_stat != GSS_S_COMPLETE)
274 errx(1, "gss_add_oid_set_member: %s",
275 gssapi_err(maj_stat, min_stat, GSS_C_NO_OID));
279 gss_buffer_desc name;
281 name.value = target_name;
282 name.length = strlen(target_name);
283 maj_stat = gss_import_name(&min_stat, &name,
284 GSS_C_NT_HOSTBASED_SERVICE, &target);
285 if (maj_stat != GSS_S_COMPLETE)
286 errx(1, "gss_import_name: %s",
287 gssapi_err(maj_stat, min_stat, GSS_C_NO_OID));
290 for (i = 0; i < num_loops; i++) {
292 cred = acquire_cred_service(acquire_name, type, oidset, flag);
295 int32_t enctypelist = enctype;
297 maj_stat = gss_krb5_set_allowable_enctypes(&min_stat, cred,
300 errx(1, "gss_krb5_set_allowable_enctypes: %s",
301 gssapi_err(maj_stat, min_stat, GSS_C_NO_OID));
305 gss_ctx_id_t context = GSS_C_NO_CONTEXT;
311 maj_stat = gss_init_sec_context(&min_stat,
314 GSS_C_MUTUAL_FLAG, 0, NULL,
315 GSS_C_NO_BUFFER, NULL,
317 if (maj_stat != GSS_S_COMPLETE && maj_stat != GSS_S_CONTINUE_NEEDED)
318 errx(1, "init_sec_context failed: %s",
319 gssapi_err(maj_stat, min_stat, GSS_C_NO_OID));
321 gss_release_buffer(&min_stat, &out);
322 gss_delete_sec_context(&min_stat, &context, NULL);
324 gss_release_cred(&min_stat, &cred);