Home | History | Annotate | Download | only in libgss
      1 /*
      2  * CDDL HEADER START
      3  *
      4  * The contents of this file are subject to the terms of the
      5  * Common Development and Distribution License, Version 1.0 only
      6  * (the "License").  You may not use this file except in compliance
      7  * with the License.
      8  *
      9  * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
     10  * or http://www.opensolaris.org/os/licensing.
     11  * See the License for the specific language governing permissions
     12  * and limitations under the License.
     13  *
     14  * When distributing Covered Code, include this CDDL HEADER in each
     15  * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
     16  * If applicable, add the following below this CDDL HEADER, with the
     17  * fields enclosed by brackets "[]" replaced with your own identifying
     18  * information: Portions Copyright [yyyy] [name of copyright owner]
     19  *
     20  * CDDL HEADER END
     21  */
     22 /*
     23  * Copyright 2004 Sun Microsystems, Inc.  All rights reserved.
     24  * Use is subject to license terms.
     25  */
     26 
     27 #pragma ident	"%Z%%M%	%I%	%E% SMI"
     28 
     29 #include <stdio.h>
     30 #include <stdlib.h>
     31 #include <unistd.h>
     32 #include <deflt.h>
     33 #include <mechglueP.h>
     34 #include <gssapi/gssapi.h>
     35 #include <gssapi/gssapi_ext.h>
     36 
     37 
     38 static OM_uint32
     39 compare_names(OM_uint32 *minor,
     40 	    const gss_OID mech_type,
     41 	    const gss_name_t name,
     42 	    const char *user,
     43 	    int *user_ok)
     44 {
     45 
     46 	OM_uint32 status, tmpMinor;
     47 	gss_name_t imported_name;
     48 	gss_name_t canon_name;
     49 	gss_buffer_desc gss_user;
     50 	int match = 0;
     51 
     52 	*user_ok = 0;
     53 
     54 	gss_user.value = (void *)user;
     55 	if (!gss_user.value || !name || !mech_type)
     56 		return (GSS_S_BAD_NAME);
     57 	gss_user.length = strlen(gss_user.value);
     58 
     59 	status = gss_import_name(minor,
     60 				&gss_user,
     61 				GSS_C_NT_USER_NAME,
     62 				&imported_name);
     63 	if (status != GSS_S_COMPLETE) {
     64 		goto out;
     65 	}
     66 
     67 	status = gss_canonicalize_name(minor,
     68 				    imported_name,
     69 				    mech_type,
     70 				    &canon_name);
     71 	if (status != GSS_S_COMPLETE) {
     72 		(void) gss_release_name(&tmpMinor, &imported_name);
     73 		goto out;
     74 	}
     75 
     76 	status = gss_compare_name(minor,
     77 				canon_name,
     78 				name,
     79 				&match);
     80 	(void) gss_release_name(&tmpMinor, &canon_name);
     81 	(void) gss_release_name(&tmpMinor, &imported_name);
     82 	if (status == GSS_S_COMPLETE) {
     83 		if (match)
     84 			*user_ok = 1; /* remote user is a-ok */
     85 	}
     86 
     87 out:
     88 	return (status);
     89 }
     90 
     91 
     92 OM_uint32
     93 __gss_userok(OM_uint32 *minor,
     94 	    const gss_name_t name,
     95 	    const char *user,
     96 	    int *user_ok)
     97 
     98 {
     99 	gss_mechanism mech;
    100 	gss_union_name_t intName;
    101 	gss_name_t mechName = NULL;
    102 	OM_uint32 major;
    103 
    104 	if (minor == NULL || user_ok == NULL)
    105 		return (GSS_S_CALL_INACCESSIBLE_WRITE);
    106 
    107 	if (name == NULL || user == NULL)
    108 		return (GSS_S_CALL_INACCESSIBLE_READ);
    109 
    110 	*user_ok = 0;
    111 	*minor = GSS_S_COMPLETE;
    112 
    113 	intName = (gss_union_name_t)name;
    114 
    115 	mech = __gss_get_mechanism(intName->mech_type);
    116 	if (mech == NULL)
    117 		return (GSS_S_UNAVAILABLE);
    118 
    119 	/* may need to import the name if this is not MN */
    120 	if (intName->mech_type == NULL) {
    121 		return (GSS_S_FAILURE);
    122 	} else
    123 		mechName = intName->mech_name;
    124 
    125 	if (mech->__gss_userok)
    126 		major = mech->__gss_userok(mech->context,  minor, mechName,
    127 				user, user_ok);
    128 	else
    129 		major = compare_names(minor, intName->mech_type,
    130 				    name, user, user_ok);
    131 
    132 	return (major);
    133 } /* gss_userok */
    134