Home | History | Annotate | Download | only in libgss
      1     0  stevel /*
      2     0  stevel  * CDDL HEADER START
      3     0  stevel  *
      4     0  stevel  * The contents of this file are subject to the terms of the
      5  9698   Peter  * Common Development and Distribution License (the "License").
      6  9698   Peter  * You may not use this file except in compliance with the License.
      7     0  stevel  *
      8     0  stevel  * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
      9     0  stevel  * or http://www.opensolaris.org/os/licensing.
     10     0  stevel  * See the License for the specific language governing permissions
     11     0  stevel  * and limitations under the License.
     12     0  stevel  *
     13     0  stevel  * When distributing Covered Code, include this CDDL HEADER in each
     14     0  stevel  * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
     15     0  stevel  * If applicable, add the following below this CDDL HEADER, with the
     16     0  stevel  * fields enclosed by brackets "[]" replaced with your own identifying
     17     0  stevel  * information: Portions Copyright [yyyy] [name of copyright owner]
     18     0  stevel  *
     19     0  stevel  * CDDL HEADER END
     20     0  stevel  */
     21     0  stevel /*
     22  9698   Peter  * Copyright 2009 Sun Microsystems, Inc.  All rights reserved.
     23     0  stevel  * Use is subject to license terms.
     24     0  stevel  */
     25     0  stevel 
     26     0  stevel /*
     27     0  stevel  *  glue routine for gss_compare_name
     28     0  stevel  *
     29     0  stevel  */
     30     0  stevel 
     31     0  stevel #include <mechglueP.h>
     32     0  stevel #ifdef HAVE_STDLIB_H
     33     0  stevel #include <stdlib.h>
     34     0  stevel #endif
     35     0  stevel #include <string.h>
     36  9698   Peter 
     37  9698   Peter static OM_uint32
     38  9698   Peter val_comp_name_args(
     39  9698   Peter 	OM_uint32 *minor_status,
     40  9698   Peter 	gss_name_t name1,
     41  9698   Peter 	gss_name_t name2,
     42  9698   Peter 	int *name_equal)
     43  9698   Peter {
     44  9698   Peter 
     45  9698   Peter 	/* Initialize outputs. */
     46  9698   Peter 
     47  9698   Peter 	if (minor_status != NULL)
     48  9698   Peter 		*minor_status = 0;
     49  9698   Peter 
     50  9698   Peter 	/* Validate arguments. */
     51  9698   Peter 
     52  9698   Peter 	if (name1 == GSS_C_NO_NAME || name2 == GSS_C_NO_NAME)
     53  9698   Peter 		return (GSS_S_CALL_INACCESSIBLE_READ | GSS_S_BAD_NAME);
     54  9698   Peter 
     55  9698   Peter 	if (name_equal == NULL)
     56  9698   Peter 		return (GSS_S_CALL_INACCESSIBLE_WRITE);
     57  9698   Peter 
     58  9698   Peter 	return (GSS_S_COMPLETE);
     59  9698   Peter }
     60     0  stevel 
     61     0  stevel OM_uint32
     62     0  stevel gss_compare_name(minor_status,
     63     0  stevel 			name1,
     64     0  stevel 			name2,
     65     0  stevel 			name_equal)
     66     0  stevel 
     67     0  stevel OM_uint32 *minor_status;
     68     0  stevel const gss_name_t name1;
     69     0  stevel const gss_name_t name2;
     70     0  stevel int *name_equal;
     71     0  stevel 
     72     0  stevel {
     73     0  stevel 	OM_uint32		major_status, temp_minor;
     74     0  stevel 	gss_union_name_t	union_name1, union_name2;
     75     0  stevel 	gss_mechanism		mech;
     76     0  stevel 	gss_name_t		internal_name;
     77     0  stevel 
     78  9698   Peter 	major_status = val_comp_name_args(minor_status,
     79  9698   Peter 					name1, name2, name_equal);
     80  9698   Peter 	if (major_status != GSS_S_COMPLETE)
     81  9698   Peter 		return (major_status);
     82     0  stevel 
     83     0  stevel 	union_name1 = (gss_union_name_t)name1;
     84     0  stevel 	union_name2 = (gss_union_name_t)name2;
     85     0  stevel 	/*
     86     0  stevel 	 * Try our hardest to make union_name1 be the mechanism-specific
     87     0  stevel 	 * name.  (Of course we can't if both names aren't
     88     0  stevel 	 * mechanism-specific.)
     89     0  stevel 	 */
     90     0  stevel 	if (union_name1->mech_type == 0) {
     91     0  stevel 		union_name1 = (gss_union_name_t)name2;
     92     0  stevel 		union_name2 = (gss_union_name_t)name1;
     93     0  stevel 	}
     94     0  stevel 	/*
     95     0  stevel 	 * If union_name1 is mechanism specific, then fetch its mechanism
     96     0  stevel 	 * information.
     97     0  stevel 	 */
     98     0  stevel 	if (union_name1->mech_type) {
     99     0  stevel 		mech = __gss_get_mechanism(union_name1->mech_type);
    100     0  stevel 		if (!mech)
    101     0  stevel 			return (GSS_S_BAD_MECH);
    102     0  stevel 		if (!mech->gss_compare_name)
    103     0  stevel 			return (GSS_S_UNAVAILABLE);
    104     0  stevel 	}
    105     0  stevel 
    106     0  stevel 	*name_equal = 0;	/* Default to *not* equal.... */
    107     0  stevel 
    108     0  stevel 	/*
    109     0  stevel 	 * First case... both names are mechanism-specific
    110     0  stevel 	 */
    111     0  stevel 	if (union_name1->mech_type && union_name2->mech_type) {
    112     0  stevel 		if (!g_OID_equal(union_name1->mech_type,
    113     0  stevel 					union_name2->mech_type))
    114     0  stevel 			return (GSS_S_COMPLETE);
    115     0  stevel 		if ((union_name1->mech_name == 0) ||
    116     0  stevel 			(union_name2->mech_name == 0))
    117     0  stevel 			/* should never happen */
    118     0  stevel 			return (GSS_S_BAD_NAME);
    119     0  stevel 		return (mech->gss_compare_name(mech->context, minor_status,
    120     0  stevel 							union_name1->mech_name,
    121     0  stevel 							union_name2->mech_name,
    122     0  stevel 							name_equal));
    123     0  stevel 	}
    124     0  stevel 
    125     0  stevel 	/*
    126     0  stevel 	 * Second case... both names are NOT mechanism specific.
    127     0  stevel 	 *
    128     0  stevel 	 * All we do here is make sure the two name_types are equal and then
    129     0  stevel 	 * that the external_names are equal. Note the we do not take care
    130     0  stevel 	 * of the case where two different external names map to the same
    131     0  stevel 	 * internal name. We cannot determine this, since we as yet do not
    132     0  stevel 	 * know what mechanism to use for calling the underlying
    133     0  stevel 	 * gss_import_name().
    134     0  stevel 	 */
    135     0  stevel 	if (!union_name1->mech_type && !union_name2->mech_type) {
    136     0  stevel 		/*
    137     0  stevel 		 * Second case, first sub-case... one name has null
    138     0  stevel 		 * name_type, the other doesn't.
    139     0  stevel 		 *
    140     0  stevel 		 * Not knowing a mech_type we can't import the name with
    141     0  stevel 		 * null name_type so we can't compare.
    142     0  stevel 		 */
    143     0  stevel 		if ((union_name1->name_type == GSS_C_NULL_OID &&
    144     0  stevel 		    union_name2->name_type != GSS_C_NULL_OID) ||
    145     0  stevel 		    (union_name1->name_type != GSS_C_NULL_OID &&
    146     0  stevel 		    union_name2->name_type == GSS_C_NULL_OID))
    147     0  stevel 			return (GSS_S_COMPLETE);
    148     0  stevel 		/*
    149     0  stevel 		 * Second case, second sub-case... both names have
    150     0  stevel 		 * name_types, but they are different.
    151     0  stevel 		 */
    152     0  stevel 		if ((union_name1->name_type != GSS_C_NULL_OID &&
    153     0  stevel 		    union_name2->name_type != GSS_C_NULL_OID) &&
    154     0  stevel 		    !g_OID_equal(union_name1->name_type,
    155     0  stevel 					union_name2->name_type))
    156     0  stevel 			return (GSS_S_COMPLETE);
    157     0  stevel 		/*
    158     0  stevel 		 * Second case, third sub-case... both names have equal
    159     0  stevel 		 * name_types (and both have no mech_types) so we just
    160     0  stevel 		 * compare the external_names.
    161     0  stevel 		 */
    162     0  stevel 		if ((union_name1->external_name->length !=
    163     0  stevel 			union_name2->external_name->length) ||
    164     0  stevel 			(memcmp(union_name1->external_name->value,
    165     0  stevel 				union_name2->external_name->value,
    166     0  stevel 				union_name1->external_name->length) != 0))
    167     0  stevel 			return (GSS_S_COMPLETE);
    168     0  stevel 		*name_equal = 1;
    169     0  stevel 		return (GSS_S_COMPLETE);
    170     0  stevel 	}
    171     0  stevel 
    172     0  stevel 	/*
    173     0  stevel 	 * Final case... one name is mechanism specific, the other isn't.
    174     0  stevel 	 *
    175     0  stevel 	 * We attempt to convert the general name to the mechanism type of
    176     0  stevel 	 * the mechanism-specific name, and then do the compare.  If we
    177     0  stevel 	 * can't import the general name, then we return that the name is
    178     0  stevel 	 * _NOT_ equal.
    179     0  stevel 	 */
    180     0  stevel 	if (union_name2->mech_type) {
    181     0  stevel 		/* We make union_name1 the mechanism specific name. */
    182     0  stevel 		union_name1 = (gss_union_name_t)name2;
    183     0  stevel 		union_name2 = (gss_union_name_t)name1;
    184     0  stevel 	}
    185     0  stevel 	major_status = __gss_import_internal_name(minor_status,
    186     0  stevel 							union_name1->mech_type,
    187     0  stevel 							union_name2,
    188     0  stevel 							&internal_name);
    189     0  stevel 	if (major_status != GSS_S_COMPLETE)
    190     0  stevel 		return (GSS_S_COMPLETE); /* return complete, but not equal */
    191     0  stevel 
    192     0  stevel 	major_status = mech->gss_compare_name(mech->context, minor_status,
    193     0  stevel 							union_name1->mech_name,
    194     0  stevel 							internal_name,
    195     0  stevel 							name_equal);
    196     0  stevel 	(void) __gss_release_internal_name(&temp_minor, union_name1->mech_type,
    197     0  stevel 					&internal_name);
    198     0  stevel 	return (major_status);
    199     0  stevel }
    200