2 * Copyright (c) 1997 - 2004 Kungliga Tekniska Högskolan
3 * (Royal Institute of Technology, Stockholm, Sweden).
6 * Redistribution and use in source and binary forms, with or without
7 * modification, are permitted provided that the following conditions
10 * 1. Redistributions of source code must retain the above copyright
11 * notice, this list of conditions and the following disclaimer.
13 * 2. Redistributions in binary form must reproduce the above copyright
14 * notice, this list of conditions and the following disclaimer in the
15 * documentation and/or other materials provided with the distribution.
17 * 3. Neither the name of the Institute nor the names of its contributors
18 * may be used to endorse or promote products derived from this software
19 * without specific prior written permission.
21 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
24 * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
34 #include "krb5_locl.h"
36 RCSID("$Id: init_creds.c 21711 2007-07-27 14:22:02Z lha $");
38 void KRB5_LIB_FUNCTION
39 krb5_get_init_creds_opt_init(krb5_get_init_creds_opt *opt)
41 memset (opt, 0, sizeof(*opt));
43 opt->opt_private = NULL;
46 krb5_error_code KRB5_LIB_FUNCTION
47 krb5_get_init_creds_opt_alloc(krb5_context context,
48 krb5_get_init_creds_opt **opt)
50 krb5_get_init_creds_opt *o;
53 o = calloc(1, sizeof(*o));
55 krb5_set_error_string(context, "out of memory");
58 krb5_get_init_creds_opt_init(o);
59 o->opt_private = calloc(1, sizeof(*o->opt_private));
60 if (o->opt_private == NULL) {
61 krb5_set_error_string(context, "out of memory");
65 o->opt_private->refcount = 1;
71 _krb5_get_init_creds_opt_copy(krb5_context context,
72 const krb5_get_init_creds_opt *in,
73 krb5_get_init_creds_opt **out)
75 krb5_get_init_creds_opt *opt;
78 opt = calloc(1, sizeof(*opt));
80 krb5_set_error_string(context, "out of memory");
85 if(opt->opt_private == NULL) {
86 opt->opt_private = calloc(1, sizeof(*opt->opt_private));
87 if (opt->opt_private == NULL) {
88 krb5_set_error_string(context, "out of memory");
92 opt->opt_private->refcount = 1;
94 opt->opt_private->refcount++;
99 void KRB5_LIB_FUNCTION
100 _krb5_get_init_creds_opt_free_krb5_error(krb5_get_init_creds_opt *opt)
102 if (opt->opt_private == NULL || opt->opt_private->error == NULL)
104 free_KRB_ERROR(opt->opt_private->error);
105 free(opt->opt_private->error);
106 opt->opt_private->error = NULL;
109 void KRB5_LIB_FUNCTION
110 _krb5_get_init_creds_opt_set_krb5_error(krb5_context context,
111 krb5_get_init_creds_opt *opt,
112 const KRB_ERROR *error)
116 if (opt->opt_private == NULL)
119 _krb5_get_init_creds_opt_free_krb5_error(opt);
121 opt->opt_private->error = malloc(sizeof(*opt->opt_private->error));
122 if (opt->opt_private->error == NULL)
124 ret = copy_KRB_ERROR(error, opt->opt_private->error);
126 free(opt->opt_private->error);
127 opt->opt_private->error = NULL;
132 void KRB5_LIB_FUNCTION
133 krb5_get_init_creds_opt_free(krb5_context context,
134 krb5_get_init_creds_opt *opt)
136 if (opt == NULL || opt->opt_private == NULL)
138 if (opt->opt_private->refcount < 1) /* abort ? */
140 if (--opt->opt_private->refcount == 0) {
141 _krb5_get_init_creds_opt_free_krb5_error(opt);
142 _krb5_get_init_creds_opt_free_pkinit(opt);
143 free(opt->opt_private);
145 memset(opt, 0, sizeof(*opt));
150 get_config_time (krb5_context context,
157 ret = krb5_config_get_time (context, NULL,
164 ret = krb5_config_get_time (context, NULL,
174 get_config_bool (krb5_context context,
178 return krb5_config_get_bool (context,
184 || krb5_config_get_bool (context,
192 * set all the values in `opt' to the appropriate values for
193 * application `appname' (default to getprogname() if NULL), and realm
194 * `realm'. First looks in [appdefaults] but falls back to
195 * [realms] or [libdefaults] for some of the values.
198 void KRB5_LIB_FUNCTION
199 krb5_get_init_creds_opt_set_default_flags(krb5_context context,
201 krb5_const_realm realm,
202 krb5_get_init_creds_opt *opt)
207 b = get_config_bool (context, realm, "forwardable");
208 krb5_appdefault_boolean(context, appname, realm, "forwardable", b, &b);
209 krb5_get_init_creds_opt_set_forwardable(opt, b);
211 b = get_config_bool (context, realm, "proxiable");
212 krb5_appdefault_boolean(context, appname, realm, "proxiable", b, &b);
213 krb5_get_init_creds_opt_set_proxiable (opt, b);
215 krb5_appdefault_time(context, appname, realm, "ticket_lifetime", 0, &t);
217 t = get_config_time (context, realm, "ticket_lifetime", 0);
219 krb5_get_init_creds_opt_set_tkt_life(opt, t);
221 krb5_appdefault_time(context, appname, realm, "renew_lifetime", 0, &t);
223 t = get_config_time (context, realm, "renew_lifetime", 0);
225 krb5_get_init_creds_opt_set_renew_life(opt, t);
227 krb5_appdefault_boolean(context, appname, realm, "no-addresses",
228 KRB5_ADDRESSLESS_DEFAULT, &b);
229 krb5_get_init_creds_opt_set_addressless (context, opt, b);
232 krb5_appdefault_boolean(context, appname, realm, "anonymous", FALSE, &b);
233 krb5_get_init_creds_opt_set_anonymous (opt, b);
235 krb5_get_init_creds_opt_set_etype_list(opt, enctype,
236 etype_str.num_strings);
238 krb5_get_init_creds_opt_set_salt(krb5_get_init_creds_opt *opt,
241 krb5_get_init_creds_opt_set_preauth_list(krb5_get_init_creds_opt *opt,
242 krb5_preauthtype *preauth_list,
243 int preauth_list_length);
248 void KRB5_LIB_FUNCTION
249 krb5_get_init_creds_opt_set_tkt_life(krb5_get_init_creds_opt *opt,
250 krb5_deltat tkt_life)
252 opt->flags |= KRB5_GET_INIT_CREDS_OPT_TKT_LIFE;
253 opt->tkt_life = tkt_life;
256 void KRB5_LIB_FUNCTION
257 krb5_get_init_creds_opt_set_renew_life(krb5_get_init_creds_opt *opt,
258 krb5_deltat renew_life)
260 opt->flags |= KRB5_GET_INIT_CREDS_OPT_RENEW_LIFE;
261 opt->renew_life = renew_life;
264 void KRB5_LIB_FUNCTION
265 krb5_get_init_creds_opt_set_forwardable(krb5_get_init_creds_opt *opt,
268 opt->flags |= KRB5_GET_INIT_CREDS_OPT_FORWARDABLE;
269 opt->forwardable = forwardable;
272 void KRB5_LIB_FUNCTION
273 krb5_get_init_creds_opt_set_proxiable(krb5_get_init_creds_opt *opt,
276 opt->flags |= KRB5_GET_INIT_CREDS_OPT_PROXIABLE;
277 opt->proxiable = proxiable;
280 void KRB5_LIB_FUNCTION
281 krb5_get_init_creds_opt_set_etype_list(krb5_get_init_creds_opt *opt,
282 krb5_enctype *etype_list,
283 int etype_list_length)
285 opt->flags |= KRB5_GET_INIT_CREDS_OPT_ETYPE_LIST;
286 opt->etype_list = etype_list;
287 opt->etype_list_length = etype_list_length;
290 void KRB5_LIB_FUNCTION
291 krb5_get_init_creds_opt_set_address_list(krb5_get_init_creds_opt *opt,
292 krb5_addresses *addresses)
294 opt->flags |= KRB5_GET_INIT_CREDS_OPT_ADDRESS_LIST;
295 opt->address_list = addresses;
298 void KRB5_LIB_FUNCTION
299 krb5_get_init_creds_opt_set_preauth_list(krb5_get_init_creds_opt *opt,
300 krb5_preauthtype *preauth_list,
301 int preauth_list_length)
303 opt->flags |= KRB5_GET_INIT_CREDS_OPT_PREAUTH_LIST;
304 opt->preauth_list_length = preauth_list_length;
305 opt->preauth_list = preauth_list;
308 void KRB5_LIB_FUNCTION
309 krb5_get_init_creds_opt_set_salt(krb5_get_init_creds_opt *opt,
312 opt->flags |= KRB5_GET_INIT_CREDS_OPT_SALT;
316 void KRB5_LIB_FUNCTION
317 krb5_get_init_creds_opt_set_anonymous(krb5_get_init_creds_opt *opt,
320 opt->flags |= KRB5_GET_INIT_CREDS_OPT_ANONYMOUS;
321 opt->anonymous = anonymous;
324 static krb5_error_code
325 require_ext_opt(krb5_context context,
326 krb5_get_init_creds_opt *opt,
329 if (opt->opt_private == NULL) {
330 krb5_set_error_string(context, "%s on non extendable opt", type);
336 krb5_error_code KRB5_LIB_FUNCTION
337 krb5_get_init_creds_opt_set_pa_password(krb5_context context,
338 krb5_get_init_creds_opt *opt,
339 const char *password,
340 krb5_s2k_proc key_proc)
343 ret = require_ext_opt(context, opt, "init_creds_opt_set_pa_password");
346 opt->opt_private->password = password;
347 opt->opt_private->key_proc = key_proc;
351 krb5_error_code KRB5_LIB_FUNCTION
352 krb5_get_init_creds_opt_set_pac_request(krb5_context context,
353 krb5_get_init_creds_opt *opt,
354 krb5_boolean req_pac)
357 ret = require_ext_opt(context, opt, "init_creds_opt_set_pac_req");
360 opt->opt_private->req_pac = req_pac ?
361 KRB5_INIT_CREDS_TRISTATE_TRUE :
362 KRB5_INIT_CREDS_TRISTATE_FALSE;
366 krb5_error_code KRB5_LIB_FUNCTION
367 krb5_get_init_creds_opt_get_error(krb5_context context,
368 krb5_get_init_creds_opt *opt,
375 ret = require_ext_opt(context, opt, "init_creds_opt_get_error");
379 if (opt->opt_private->error == NULL)
382 *error = malloc(sizeof(**error));
383 if (*error == NULL) {
384 krb5_set_error_string(context, "malloc - out memory");
388 ret = copy_KRB_ERROR(opt->opt_private->error, *error);
390 krb5_clear_error_string(context);
395 krb5_error_code KRB5_LIB_FUNCTION
396 krb5_get_init_creds_opt_set_addressless(krb5_context context,
397 krb5_get_init_creds_opt *opt,
398 krb5_boolean addressless)
401 ret = require_ext_opt(context, opt, "init_creds_opt_set_pac_req");
405 opt->opt_private->addressless = KRB5_INIT_CREDS_TRISTATE_TRUE;
407 opt->opt_private->addressless = KRB5_INIT_CREDS_TRISTATE_FALSE;
411 krb5_error_code KRB5_LIB_FUNCTION
412 krb5_get_init_creds_opt_set_canonicalize(krb5_context context,
413 krb5_get_init_creds_opt *opt,
417 ret = require_ext_opt(context, opt, "init_creds_opt_set_canonicalize");
421 opt->opt_private->flags |= KRB5_INIT_CREDS_CANONICALIZE;
423 opt->opt_private->flags &= ~KRB5_INIT_CREDS_CANONICALIZE;
427 krb5_error_code KRB5_LIB_FUNCTION
428 krb5_get_init_creds_opt_set_win2k(krb5_context context,
429 krb5_get_init_creds_opt *opt,
433 ret = require_ext_opt(context, opt, "init_creds_opt_set_win2k");
437 opt->opt_private->flags |= KRB5_INIT_CREDS_NO_C_CANON_CHECK;
439 opt->opt_private->flags &= ~KRB5_INIT_CREDS_NO_C_CANON_CHECK;