lib/libgssapi/gss_inquire_cred.c

   1 /*-
   2  * Copyright (c) 2005 Doug Rabson
   3  * All rights reserved.
   4  *
   5  * Redistribution and use in source and binary forms, with or without
   6  * modification, are permitted provided that the following conditions
   7  * are met:
   8  * 1. Redistributions of source code must retain the above copyright
   9  *    notice, this list of conditions and the following disclaimer.
  10  * 2. Redistributions in binary form must reproduce the above copyright
  11  *    notice, this list of conditions and the following disclaimer in the
  12  *    documentation and/or other materials provided with the distribution.
  13  *
  14  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
  15  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  16  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  17  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
  18  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  19  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  20  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  21  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  22  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  23  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  24  * SUCH DAMAGE.
  25  *
  26  *      $FreeBSD$
  27  */
  28
  29 #include <gssapi/gssapi.h>
  30 #include <stdlib.h>
  31 #include <string.h>
  32 #include <errno.h>
  33
  34 #include "mech_switch.h"
  35 #include "name.h"
  36 #include "cred.h"
  37
  38 OM_uint32
  39 gss_inquire_cred(OM_uint32 *minor_status,
  40     const gss_cred_id_t cred_handle,
  41     gss_name_t *name_ret,
  42     OM_uint32 *lifetime,
  43     gss_cred_usage_t *cred_usage,
  44     gss_OID_set *mechanisms)
  45 {
  46         OM_uint32 major_status;
  47         struct _gss_mech_switch *m;
  48         struct _gss_cred *cred = (struct _gss_cred *) cred_handle;
  49         struct _gss_mechanism_cred *mc;
  50         struct _gss_name *name;
  51         struct _gss_mechanism_name *mn;
  52         OM_uint32 min_lifetime;
  53
  54         *minor_status = 0;
  55         if (name_ret)
  56                 *name_ret = 0;
  57         if (lifetime)
  58                 *lifetime = 0;
  59         if (cred_usage)
  60                 *cred_usage = 0;
  61
  62         if (name_ret) {
  63                 name = malloc(sizeof(struct _gss_name));
  64                 if (!name) {
  65                         *minor_status = ENOMEM;
  66                         return (GSS_S_FAILURE);
  67                 }
  68                 memset(name, 0, sizeof(struct _gss_name));
  69                 SLIST_INIT(&name->gn_mn);
  70         } else {
  71                 name = 0;
  72         }
  73
  74         if (mechanisms) {
  75                 major_status = gss_create_empty_oid_set(minor_status,
  76                     mechanisms);
  77                 if (major_status) {
  78                         if (name) free(name);
  79                         return (major_status);
  80                 }
  81         }
  82
  83         min_lifetime = GSS_C_INDEFINITE;
  84         if (cred) {
  85                 SLIST_FOREACH(mc, &cred->gc_mc, gmc_link) {
  86                         gss_name_t mc_name;
  87                         OM_uint32 mc_lifetime;
  88
  89                         major_status = mc->gmc_mech->gm_inquire_cred(minor_status,
  90                             mc->gmc_cred, &mc_name, &mc_lifetime, NULL, NULL);
  91                         if (major_status)
  92                                 continue;
  93
  94                         if (name) {
  95                                 mn = malloc(sizeof(struct _gss_mechanism_name));
  96                                 if (!mn) {
  97                                         mc->gmc_mech->gm_release_name(minor_status,
  98                                             &mc_name);
  99                                         continue;
 100                                 }
 101                                 mn->gmn_mech = mc->gmc_mech;
 102                                 mn->gmn_mech_oid = mc->gmc_mech_oid;
 103                                 mn->gmn_name = mc_name;
 104                                 SLIST_INSERT_HEAD(&name->gn_mn, mn, gmn_link);
 105                         } else {
 106                                 mc->gmc_mech->gm_release_name(minor_status,
 107                                     &mc_name);
 108                         }
 109
 110                         if (mc_lifetime < min_lifetime)
 111                                 min_lifetime = mc_lifetime;
 112
 113                         if (mechanisms)
 114                                 gss_add_oid_set_member(minor_status,
 115                                     mc->gmc_mech_oid, mechanisms);
 116                 }
 117         } else {
 118                 SLIST_FOREACH(m, &_gss_mechs, gm_link) {
 119                         gss_name_t mc_name;
 120                         OM_uint32 mc_lifetime;
 121
 122                         major_status = m->gm_inquire_cred(minor_status,
 123                             GSS_C_NO_CREDENTIAL, &mc_name, &mc_lifetime,
 124                             cred_usage, NULL);
 125                         if (major_status)
 126                                 continue;
 127
 128                         if (name && mc_name) {
 129                                 mn = malloc(
 130                                         sizeof(struct _gss_mechanism_name));
 131                                 if (!mn) {
 132                                         mc->gmc_mech->gm_release_name(
 133                                                 minor_status, &mc_name);
 134                                         continue;
 135                                 }
 136                                 mn->gmn_mech = mc->gmc_mech;
 137                                 mn->gmn_mech_oid = mc->gmc_mech_oid;
 138                                 mn->gmn_name = mc_name;
 139                                 SLIST_INSERT_HEAD(&name->gn_mn, mn, gmn_link);
 140                         } else if (mc_name) {
 141                                 mc->gmc_mech->gm_release_name(minor_status,
 142                                     &mc_name);
 143                         }
 144
 145                         if (mc_lifetime < min_lifetime)
 146                                 min_lifetime = mc_lifetime;
 147
 148                         if (mechanisms)
 149                                 gss_add_oid_set_member(minor_status,
 150                                     &m->gm_mech_oid, mechanisms);
 151                 }
 152
 153                 if ((*mechanisms)->count == 0) {
 154                         gss_release_oid_set(minor_status, mechanisms);
 155                         *minor_status = 0;
 156                         return (GSS_S_NO_CRED);
 157                 }
 158         }
 159
 160         *minor_status = 0;
 161         if (name_ret)
 162                 *name_ret = (gss_name_t) name;
 163         if (lifetime)
 164                 *lifetime = min_lifetime;
 165         if (cred && cred_usage)
 166                 *cred_usage = cred->gc_usage;
 167         return (GSS_S_COMPLETE);
 168 }