Home | History | Annotate | Download | only in libgss
      1  0  stevel /*
      2  0  stevel  * CDDL HEADER START
      3  0  stevel  *
      4  0  stevel  * The contents of this file are subject to the terms of the
      5  0  stevel  * Common Development and Distribution License, Version 1.0 only
      6  0  stevel  * (the "License").  You may not use this file except in compliance
      7  0  stevel  * with the License.
      8  0  stevel  *
      9  0  stevel  * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
     10  0  stevel  * or http://www.opensolaris.org/os/licensing.
     11  0  stevel  * See the License for the specific language governing permissions
     12  0  stevel  * and limitations under the License.
     13  0  stevel  *
     14  0  stevel  * When distributing Covered Code, include this CDDL HEADER in each
     15  0  stevel  * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
     16  0  stevel  * If applicable, add the following below this CDDL HEADER, with the
     17  0  stevel  * fields enclosed by brackets "[]" replaced with your own identifying
     18  0  stevel  * information: Portions Copyright [yyyy] [name of copyright owner]
     19  0  stevel  *
     20  0  stevel  * CDDL HEADER END
     21  0  stevel  */
     22  0  stevel /*
     23  0  stevel  * Copyright 2004 Sun Microsystems, Inc.  All rights reserved.
     24  0  stevel  * Use is subject to license terms.
     25  0  stevel  */
     26  0  stevel 
     27  0  stevel #pragma ident	"%Z%%M%	%I%	%E% SMI"
     28  0  stevel 
     29  0  stevel #include <stdio.h>
     30  0  stevel #include <stdlib.h>
     31  0  stevel #include <unistd.h>
     32  0  stevel #include <deflt.h>
     33  0  stevel #include <mechglueP.h>
     34  0  stevel #include <gssapi/gssapi.h>
     35  0  stevel #include <gssapi/gssapi_ext.h>
     36  0  stevel 
     37  0  stevel 
     38  0  stevel static OM_uint32
     39  0  stevel compare_names(OM_uint32 *minor,
     40  0  stevel 	    const gss_OID mech_type,
     41  0  stevel 	    const gss_name_t name,
     42  0  stevel 	    const char *user,
     43  0  stevel 	    int *user_ok)
     44  0  stevel {
     45  0  stevel 
     46  0  stevel 	OM_uint32 status, tmpMinor;
     47  0  stevel 	gss_name_t imported_name;
     48  0  stevel 	gss_name_t canon_name;
     49  0  stevel 	gss_buffer_desc gss_user;
     50  0  stevel 	int match = 0;
     51  0  stevel 
     52  0  stevel 	*user_ok = 0;
     53  0  stevel 
     54  0  stevel 	gss_user.value = (void *)user;
     55  0  stevel 	if (!gss_user.value || !name || !mech_type)
     56  0  stevel 		return (GSS_S_BAD_NAME);
     57  0  stevel 	gss_user.length = strlen(gss_user.value);
     58  0  stevel 
     59  0  stevel 	status = gss_import_name(minor,
     60  0  stevel 				&gss_user,
     61  0  stevel 				GSS_C_NT_USER_NAME,
     62  0  stevel 				&imported_name);
     63  0  stevel 	if (status != GSS_S_COMPLETE) {
     64  0  stevel 		goto out;
     65  0  stevel 	}
     66  0  stevel 
     67  0  stevel 	status = gss_canonicalize_name(minor,
     68  0  stevel 				    imported_name,
     69  0  stevel 				    mech_type,
     70  0  stevel 				    &canon_name);
     71  0  stevel 	if (status != GSS_S_COMPLETE) {
     72  0  stevel 		(void) gss_release_name(&tmpMinor, &imported_name);
     73  0  stevel 		goto out;
     74  0  stevel 	}
     75  0  stevel 
     76  0  stevel 	status = gss_compare_name(minor,
     77  0  stevel 				canon_name,
     78  0  stevel 				name,
     79  0  stevel 				&match);
     80  0  stevel 	(void) gss_release_name(&tmpMinor, &canon_name);
     81  0  stevel 	(void) gss_release_name(&tmpMinor, &imported_name);
     82  0  stevel 	if (status == GSS_S_COMPLETE) {
     83  0  stevel 		if (match)
     84  0  stevel 			*user_ok = 1; /* remote user is a-ok */
     85  0  stevel 	}
     86  0  stevel 
     87  0  stevel out:
     88  0  stevel 	return (status);
     89  0  stevel }
     90  0  stevel 
     91  0  stevel 
     92  0  stevel OM_uint32
     93  0  stevel __gss_userok(OM_uint32 *minor,
     94  0  stevel 	    const gss_name_t name,
     95  0  stevel 	    const char *user,
     96  0  stevel 	    int *user_ok)
     97  0  stevel 
     98  0  stevel {
     99  0  stevel 	gss_mechanism mech;
    100  0  stevel 	gss_union_name_t intName;
    101  0  stevel 	gss_name_t mechName = NULL;
    102  0  stevel 	OM_uint32 major;
    103  0  stevel 
    104  0  stevel 	if (minor == NULL || user_ok == NULL)
    105  0  stevel 		return (GSS_S_CALL_INACCESSIBLE_WRITE);
    106  0  stevel 
    107  0  stevel 	if (name == NULL || user == NULL)
    108  0  stevel 		return (GSS_S_CALL_INACCESSIBLE_READ);
    109  0  stevel 
    110  0  stevel 	*user_ok = 0;
    111  0  stevel 	*minor = GSS_S_COMPLETE;
    112  0  stevel 
    113  0  stevel 	intName = (gss_union_name_t)name;
    114  0  stevel 
    115  0  stevel 	mech = __gss_get_mechanism(intName->mech_type);
    116  0  stevel 	if (mech == NULL)
    117  0  stevel 		return (GSS_S_UNAVAILABLE);
    118  0  stevel 
    119  0  stevel 	/* may need to import the name if this is not MN */
    120  0  stevel 	if (intName->mech_type == NULL) {
    121  0  stevel 		return (GSS_S_FAILURE);
    122  0  stevel 	} else
    123  0  stevel 		mechName = intName->mech_name;
    124  0  stevel 
    125  0  stevel 	if (mech->__gss_userok)
    126  0  stevel 		major = mech->__gss_userok(mech->context,  minor, mechName,
    127  0  stevel 				user, user_ok);
    128  0  stevel 	else
    129  0  stevel 		major = compare_names(minor, intName->mech_type,
    130  0  stevel 				    name, user, user_ok);
    131  0  stevel 
    132  0  stevel 	return (major);
    133  0  stevel } /* gss_userok */
    134