0   stevel /*
    0   stevel  * CDDL HEADER START
    0   stevel  *
    0   stevel  * The contents of this file are subject to the terms of the
 8563  Kenjiro  * Common Development and Distribution License (the "License").
 8563  Kenjiro  * You may not use this file except in compliance with the License.
    0   stevel  *
    0   stevel  * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
    0   stevel  * or http://www.opensolaris.org/os/licensing.
    0   stevel  * See the License for the specific language governing permissions
    0   stevel  * and limitations under the License.
    0   stevel  *
    0   stevel  * When distributing Covered Code, include this CDDL HEADER in each
    0   stevel  * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
    0   stevel  * If applicable, add the following below this CDDL HEADER, with the
    0   stevel  * fields enclosed by brackets "[]" replaced with your own identifying
    0   stevel  * information: Portions Copyright [yyyy] [name of copyright owner]
    0   stevel  *
    0   stevel  * CDDL HEADER END
    0   stevel  */
    0   stevel /*
 8563  Kenjiro  * Copyright 2009 Sun Microsystems, Inc.  All rights reserved.
    0   stevel  * Use is subject to license terms.
    0   stevel  */
    0   stevel 
    0   stevel #include <pwd.h>
    0   stevel #include <grp.h>
    0   stevel #include <stdio.h>
    0   stevel #include <stdlib.h>
    0   stevel #include <unistd.h>
    0   stevel #include <thread.h>
    0   stevel #include <synch.h>
    0   stevel #include <syslog.h>
    0   stevel #include <deflt.h>
    0   stevel #include <mechglueP.h>
    0   stevel #include "../../cmd/gss/gsscred/gsscred.h"
    0   stevel 
    0   stevel static mutex_t uid_map_lock = DEFAULTMUTEX;
    0   stevel static int uid_map_opt = 0;
    0   stevel 
    0   stevel extern int _getgroupsbymember(const char *, gid_t[], int, int);
    0   stevel 
    0   stevel /* local function used to call a mechanisms pname_to_uid */
    0   stevel static OM_uint32 gss_pname_to_uid(OM_uint32*, const gss_name_t,
    0   stevel 			const gss_OID, uid_t *);
    0   stevel 
    0   stevel static OM_uint32 private_gsscred_expname_to_unix_cred(const gss_buffer_t,
    0   stevel 			uid_t *, gid_t *, gid_t **, int *);
    0   stevel 
    0   stevel /*
    0   stevel  * The gsscred functions will first attempt to call the
    0   stevel  * mechanism'm pname_to_uid function.  In case this function
    0   stevel  * returns an error or if it is not provided by a mechanism
    0   stevel  * then the functions will attempt to look up the principal
    0   stevel  * in the gsscred table.
    0   stevel  * It is envisioned that the pname_to_uid function will be
    0   stevel  * provided by only a few mechanism, which may have the principal
    0   stevel  * name to unix credential mapping inherently present.
    0   stevel  */
    0   stevel 
    0   stevel /*
    0   stevel  * Fetch gsscred options from conf file.
    0   stevel  */
    0   stevel static void
    0   stevel get_conf_options(int *uid_map)
    0   stevel {
 8563  Kenjiro 	int  flags;
    0   stevel 	char *ptr;
 8563  Kenjiro 	void	*defp;
    0   stevel 	static char *conffile = "/etc/gss/gsscred.conf";
    0   stevel 
    0   stevel 	*uid_map = 0;
 8563  Kenjiro 	if ((defp = defopen_r(conffile)) != NULL) {
 8563  Kenjiro 		flags = defcntl_r(DC_GETFLAGS, 0, defp);
    0   stevel 		/* ignore case */
    0   stevel 		TURNOFF(flags, DC_CASE);
 8563  Kenjiro 		(void) defcntl_r(DC_SETFLAGS, flags, defp);
    0   stevel 
 8563  Kenjiro 		if ((ptr = defread_r("SYSLOG_UID_MAPPING=", defp)) != NULL &&
    0   stevel 		    strcasecmp("yes", ptr) == 0) {
    0   stevel 			*uid_map = 1;
    0   stevel 		}
 8563  Kenjiro 		defclose_r(defp);
    0   stevel 	}
    0   stevel }
    0   stevel 
    0   stevel void
    0   stevel gsscred_set_options()
    0   stevel {
    0   stevel 	int u;
    0   stevel 
    0   stevel 	get_conf_options(&u);
    0   stevel 	(void) mutex_lock(&uid_map_lock);
    0   stevel 	uid_map_opt = u;
    0   stevel 	(void) mutex_unlock(&uid_map_lock);
    0   stevel }
    0   stevel 
    0   stevel static int
    0   stevel get_uid_map_opt()
    0   stevel {
    0   stevel 	int u;
    0   stevel 
    0   stevel 	(void) mutex_lock(&uid_map_lock);
    0   stevel 	u = uid_map_opt;
    0   stevel 	(void) mutex_unlock(&uid_map_lock);
    0   stevel 	return (u);
    0   stevel }
    0   stevel 
    0   stevel /*
    0   stevel  * This routine accepts a name in export name format and retrieves
    0   stevel  * unix credentials associated with it.
    0   stevel  */
    0   stevel 
    0   stevel OM_uint32
    0   stevel gsscred_expname_to_unix_cred_ext(
    0   stevel 	const gss_buffer_t expName,
    0   stevel 	uid_t *uidOut,
    0   stevel 	gid_t *gidOut,
    0   stevel 	gid_t *gids[],
    0   stevel 	int *gidsLen,
    0   stevel 	int try_mech)
    0   stevel {
    0   stevel 	gss_name_t intName;
    0   stevel 	OM_uint32 minor, major;
    0   stevel 	const char *mechStr = NULL;
    0   stevel 	char *nameStr = NULL;
    0   stevel 	char *whoami = "gsscred_expname_to_unix_cred";
    0   stevel 	gss_buffer_desc namebuf;
    0   stevel 	int debug = get_uid_map_opt();
    0   stevel 
    0   stevel 	if (uidOut == NULL)
    0   stevel 		return (GSS_S_CALL_INACCESSIBLE_WRITE);
    0   stevel 
    0   stevel 	if (expName == NULL)
    0   stevel 		return (GSS_S_CALL_INACCESSIBLE_READ);
    0   stevel 
    0   stevel 	/* first check the mechanism for the mapping */
    0   stevel 	if (gss_import_name(&minor, expName, (gss_OID)GSS_C_NT_EXPORT_NAME,
 8563  Kenjiro 	    &intName) == GSS_S_COMPLETE) {
    0   stevel 
    0   stevel 		if (debug) {
    0   stevel 			gss_union_name_t uintName = (gss_union_name_t)intName;
    0   stevel 
    0   stevel 			if (uintName->mech_type)
    0   stevel 				mechStr = __gss_oid_to_mech(
 8563  Kenjiro 				    uintName->mech_type);
    0   stevel 
    0   stevel 			major = gss_display_name(&minor, intName,
 8563  Kenjiro 			    &namebuf, NULL);
    0   stevel 			if (major == GSS_S_COMPLETE) {
    0   stevel 				nameStr = strdup(namebuf.value);
    0   stevel 				(void) gss_release_buffer(&minor, &namebuf);
    0   stevel 			}
    0   stevel 		}
    0   stevel 
    0   stevel 		if (try_mech) {
    0   stevel 			major = gss_pname_to_uid(&minor, intName,
 8563  Kenjiro 			    NULL, uidOut);
    0   stevel 			if (major == GSS_S_COMPLETE) {
    0   stevel 
    0   stevel 				if (debug) {
    0   stevel 					syslog(LOG_AUTH|LOG_DEBUG,
    0   stevel 					    "%s: mech provided local name"
    0   stevel 					    " mapping (%s, %s, %d)", whoami,
    0   stevel 					    mechStr ? mechStr : "<null>",
    0   stevel 					    nameStr ? nameStr : "<null>",
    0   stevel 					    *uidOut);
    0   stevel 					free(nameStr);
    0   stevel 				}
    0   stevel 
    0   stevel 				(void) gss_release_name(&minor, &intName);
    0   stevel 				if (gids && gidsLen && gidOut)
    0   stevel 					return (gss_get_group_info(*uidOut,
 8563  Kenjiro 					    gidOut, gids, gidsLen));
    0   stevel 				return (GSS_S_COMPLETE);
    0   stevel 			}
    0   stevel 		}
    0   stevel 
    0   stevel 		(void) gss_release_name(&minor, &intName);
    0   stevel 	}
    0   stevel 
    0   stevel 	/*
    0   stevel 	 * we fall back onto the gsscred table to provide the mapping
    0   stevel 	 * start by making sure that the expName is an export name buffer
    0   stevel 	 */
    0   stevel 	major = private_gsscred_expname_to_unix_cred(expName, uidOut, gidOut,
 8563  Kenjiro 	    gids, gidsLen);
    0   stevel 
    0   stevel 	if (debug && major == GSS_S_COMPLETE) {
    0   stevel 		syslog(LOG_AUTH|LOG_DEBUG,
    0   stevel 		    "%s: gsscred tbl provided"
    0   stevel 		    " local name mapping (%s, %s, %d)",
    0   stevel 		    whoami,
    0   stevel 		    mechStr ? mechStr : "<unknown>",
    0   stevel 		    nameStr ? nameStr : "<unknown>",
    0   stevel 		    *uidOut);
    0   stevel 		free(nameStr);
    0   stevel 	} else if (debug) {
    0   stevel 		syslog(LOG_AUTH|LOG_DEBUG,
    0   stevel 		    "%s: gsscred tbl could NOT"
    0   stevel 		    " provide local name mapping (%s, %s)",
    0   stevel 		    whoami,
    0   stevel 		    mechStr ? mechStr : "<unknown>",
    0   stevel 		    nameStr ? nameStr : "<unknown>");
    0   stevel 		free(nameStr);
    0   stevel 	}
    0   stevel 
    0   stevel 	return (major);
    0   stevel 
    0   stevel } /* gsscred_expname_to_unix_cred */
    0   stevel 
    0   stevel OM_uint32
    0   stevel gsscred_expname_to_unix_cred(
    0   stevel 	const gss_buffer_t expName,
    0   stevel 	uid_t *uidOut,
    0   stevel 	gid_t *gidOut,
    0   stevel 	gid_t *gids[],
    0   stevel 	int *gidsLen)
    0   stevel {
    0   stevel 	return (gsscred_expname_to_unix_cred_ext(expName, uidOut, gidOut, gids,
 8563  Kenjiro 	    gidsLen, 1));
    0   stevel }
    0   stevel 
    0   stevel 
    0   stevel static const char *expNameTokId = "\x04\x01";
    0   stevel static const int expNameTokIdLen = 2;
    0   stevel /*
    0   stevel  * private routine added to be called from gsscred_name_to_unix_cred
    0   stevel  * and gsscred_expName_to_unix_cred.
    0   stevel  */
    0   stevel static OM_uint32
    0   stevel private_gsscred_expname_to_unix_cred(expName, uidOut, gidOut, gids, gidsLen)
    0   stevel const gss_buffer_t expName;
    0   stevel uid_t *uidOut;
    0   stevel gid_t *gidOut;
    0   stevel gid_t *gids[];
    0   stevel int *gidsLen;
    0   stevel {
    0   stevel 
    0   stevel 	if (expName->length < expNameTokIdLen ||
    0   stevel 		(memcmp(expName->value, expNameTokId, expNameTokIdLen) != 0))
    0   stevel 		return (GSS_S_DEFECTIVE_TOKEN);
    0   stevel 
    0   stevel 	if (!gss_getGssCredEntry(expName, uidOut))
    0   stevel 		return (GSS_S_FAILURE);
    0   stevel 
    0   stevel 	/* did caller request group info also ? */
    0   stevel 	if (gids && gidsLen && gidOut)
    0   stevel 		return (gss_get_group_info(*uidOut, gidOut, gids, gidsLen));
    0   stevel 
    0   stevel 	return (GSS_S_COMPLETE);
    0   stevel }
    0   stevel 
    0   stevel /*
    0   stevel  * Return a string of the authenticated name.
    0   stevel  * It's a bit of hack/workaround/longroad but the current intName
    0   stevel  * passed to gss_display_name insists on returning an empty string.
    0   stevel  *
    0   stevel  * Caller must free string memory.
    0   stevel  */
    0   stevel static
    0   stevel char *make_name_str(
    0   stevel 	const gss_name_t intName,
    0   stevel 	const gss_OID mechType)
    0   stevel 
    0   stevel {
    0   stevel 	gss_buffer_desc expName = GSS_C_EMPTY_BUFFER;
    0   stevel 	OM_uint32 major, minor;
    0   stevel 	gss_name_t canonName;
    0   stevel 	gss_name_t iName;
    0   stevel 	gss_buffer_desc namebuf;
    0   stevel 
    0   stevel 	if (major = gss_canonicalize_name(&minor, intName,
    0   stevel 				mechType, &canonName))
    0   stevel 		return (NULL);
    0   stevel 
    0   stevel 	major = gss_export_name(&minor, canonName, &expName);
    0   stevel 	(void) gss_release_name(&minor, &canonName);
    0   stevel 	if (major)
    0   stevel 		return (NULL);
    0   stevel 
    0   stevel 	if (gss_import_name(&minor, &expName,
    0   stevel 			    (gss_OID)GSS_C_NT_EXPORT_NAME,
    0   stevel 			    &iName) == GSS_S_COMPLETE) {
    0   stevel 
    0   stevel 		major = gss_display_name(&minor, iName, &namebuf, NULL);
    0   stevel 		if (major == GSS_S_COMPLETE) {
    0   stevel 			char *s;
    0   stevel 
    0   stevel 			if (namebuf.value)
    0   stevel 				s = strdup(namebuf.value);
    0   stevel 
    0   stevel 			(void) gss_release_buffer(&minor, &namebuf);
    0   stevel 			(void) gss_release_buffer(&minor, &expName);
    0   stevel 			(void) gss_release_buffer(&minor, (gss_buffer_t)iName);
    0   stevel 			return (s);
    0   stevel 		}
    0   stevel 		(void) gss_release_buffer(&minor, (gss_buffer_t)iName);
    0   stevel 	}
    0   stevel 
    0   stevel 	(void) gss_release_buffer(&minor, &expName);
    0   stevel 	return (NULL);
    0   stevel }
    0   stevel 
    0   stevel /*
    0   stevel  * This routine accepts a name in gss internal name format together with
    0   stevel  * a mechanim OID and retrieves a unix credentials for that entity.
    0   stevel  */
    0   stevel OM_uint32
    0   stevel gsscred_name_to_unix_cred_ext(
    0   stevel 	const gss_name_t intName,
    0   stevel 	const gss_OID mechType,
    0   stevel 	uid_t *uidOut,
    0   stevel 	gid_t *gidOut,
    0   stevel 	gid_t *gids[],
    0   stevel 	int *gidsLen,
    0   stevel 	int try_mech)
    0   stevel {
    0   stevel 	gss_name_t canonName;
    0   stevel 	gss_buffer_desc expName = GSS_C_EMPTY_BUFFER;
    0   stevel 	OM_uint32 major, minor;
    0   stevel 	int debug = get_uid_map_opt();
    0   stevel 
    0   stevel 	const char *mechStr;
    0   stevel 	char *whoami = "gsscred_name_to_unix_cred";
    0   stevel 	gss_buffer_desc namebuf;
    0   stevel 
    0   stevel 	if (intName == NULL || mechType == NULL)
    0   stevel 		return (GSS_S_CALL_INACCESSIBLE_READ);
    0   stevel 
    0   stevel 	if (uidOut == NULL)
    0   stevel 		return (GSS_S_CALL_INACCESSIBLE_WRITE);
    0   stevel 
    0   stevel 	mechStr = __gss_oid_to_mech(mechType);
    0   stevel 
    0   stevel 	/* first try the mechanism provided mapping */
    0   stevel 	if (try_mech && gss_pname_to_uid(&minor, intName, mechType, uidOut)
 8563  Kenjiro 	    == GSS_S_COMPLETE) {
    0   stevel 
    0   stevel 		if (debug) {
    0   stevel 			char *s = make_name_str(intName, mechType);
    0   stevel 			syslog(LOG_AUTH|LOG_DEBUG,
    0   stevel 			    "%s: mech provided local name"
    0   stevel 			    " mapping (%s, %s, %d)", whoami,
    0   stevel 			    mechStr ? mechStr : "<null>",
    0   stevel 			    s ? s : "<null>",
    0   stevel 			    *uidOut);
    0   stevel 			free(s);
    0   stevel 		}
    0   stevel 
    0   stevel 		if (gids && gidsLen && gidOut)
    0   stevel 			return (gss_get_group_info(*uidOut, gidOut, gids,
 8563  Kenjiro 			    gidsLen));
    0   stevel 		return (GSS_S_COMPLETE);
    0   stevel 	}
    0   stevel 	/*
    0   stevel 	 * falling back onto the gsscred table to provide the mapping
    0   stevel 	 * start by canonicalizing the passed in name and then export it
    0   stevel 	 */
    0   stevel 	if (major = gss_canonicalize_name(&minor, intName,
 8563  Kenjiro 	    mechType, &canonName))
    0   stevel 		return (major);
    0   stevel 
    0   stevel 	major = gss_export_name(&minor, canonName, &expName);
    0   stevel 	(void) gss_release_name(&minor, &canonName);
    0   stevel 	if (major)
    0   stevel 		return (major);
    0   stevel 
    0   stevel 	major = private_gsscred_expname_to_unix_cred(&expName, uidOut, gidOut,
 8563  Kenjiro 	    gids, gidsLen);
    0   stevel 
    0   stevel 
    0   stevel 	if (debug) {
    0   stevel 		gss_name_t iName;
    0   stevel 		OM_uint32 maj;
    0   stevel 		char *nameStr = NULL;
    0   stevel 
    0   stevel 		if (gss_import_name(&minor, &expName,
 8563  Kenjiro 		    (gss_OID)GSS_C_NT_EXPORT_NAME, &iName) == GSS_S_COMPLETE) {
    0   stevel 
    0   stevel 			maj = gss_display_name(&minor, iName, &namebuf,
 8563  Kenjiro 			    NULL);
    0   stevel 			(void) gss_release_buffer(&minor, (gss_buffer_t)iName);
    0   stevel 			if (maj == GSS_S_COMPLETE) {
    0   stevel 				nameStr = strdup(namebuf.value);
    0   stevel 				(void) gss_release_buffer(&minor, &namebuf);
    0   stevel 			}
    0   stevel 		}
    0   stevel 
    0   stevel 		if (major == GSS_S_COMPLETE)
    0   stevel 			syslog(LOG_AUTH|LOG_DEBUG,
    0   stevel 			    "%s: gsscred tbl provided"
    0   stevel 			    " local name mapping (%s, %s, %d)",
    0   stevel 			    whoami,
    0   stevel 			    mechStr ? mechStr : "<unknown>",
    0   stevel 			    nameStr ? nameStr : "<unknown>",
    0   stevel 			    *uidOut);
    0   stevel 		else
    0   stevel 			syslog(LOG_AUTH|LOG_DEBUG,
    0   stevel 			    "%s: gsscred tbl could NOT"
    0   stevel 			    " provide local name mapping (%s, %s)",
    0   stevel 			    whoami,
    0   stevel 			    mechStr ? mechStr : "<unknown>",
    0   stevel 			    nameStr ? nameStr : "<unknown>");
    0   stevel 
    0   stevel 		free(nameStr);
    0   stevel 	}
    0   stevel 
    0   stevel 	(void) gss_release_buffer(&minor, &expName);
    0   stevel 	return (major);
    0   stevel } /* gsscred_name_to_unix_cred */
    0   stevel 
    0   stevel 
    0   stevel OM_uint32
    0   stevel gsscred_name_to_unix_cred(
    0   stevel 	const gss_name_t intName,
    0   stevel 	const gss_OID mechType,
    0   stevel 	uid_t *uidOut,
    0   stevel 	gid_t *gidOut,
    0   stevel 	gid_t *gids[],
    0   stevel 	int *gidsLen)
    0   stevel {
    0   stevel 	return (gsscred_name_to_unix_cred_ext(intName, mechType,
 8563  Kenjiro 	    uidOut, gidOut, gids, gidsLen, 1));
    0   stevel }
    0   stevel 
    0   stevel 
    0   stevel 
    0   stevel /*
    0   stevel  * This routine accepts a unix uid, and retrieves the group id
    0   stevel  * and supplamentery group ids for that uid.
    0   stevel  * Callers should be aware that the supplamentary group ids
    0   stevel  * array may be empty even when this function returns success.
    0   stevel  */
    0   stevel OM_uint32
    0   stevel gss_get_group_info(uid, gidOut, gids, gidsLen)
    0   stevel const uid_t uid;
    0   stevel gid_t *gidOut;
    0   stevel gid_t *gids[];
    0   stevel int *gidsLen;
    0   stevel {
    0   stevel 	struct passwd *pw;
    0   stevel 	int maxgroups;
    0   stevel 
    0   stevel 	/* check for output parameters */
    0   stevel 	if (gidOut == NULL || gids == NULL || gidsLen == NULL)
    0   stevel 		return (GSS_S_CALL_INACCESSIBLE_WRITE);
    0   stevel 
    0   stevel 	*gids = NULL;
    0   stevel 	*gidsLen = 0;
    0   stevel 
    0   stevel 	/* determine maximum number of groups possible */
    0   stevel 	maxgroups = sysconf(_SC_NGROUPS_MAX);
    0   stevel 	if (maxgroups < 1)
    0   stevel 	    maxgroups = 16;
    0   stevel 
    0   stevel 	if ((pw = getpwuid(uid)) == NULL)
    0   stevel 	    return (GSS_S_FAILURE);
    0   stevel 
    0   stevel 	/*
    0   stevel 	 * we allocate for the maximum number of groups
    0   stevel 	 * we do not reclaim the space when the actual number
    0   stevel 	 * is lower, just set the size approprately.
    0   stevel 	 */
    0   stevel 	*gids = (gid_t *)calloc(maxgroups, sizeof (gid_t));
    0   stevel 	if (*gids == NULL)
    0   stevel 	    return (GSS_S_FAILURE);
    0   stevel 
    0   stevel 	*gidOut = pw->pw_gid;
    0   stevel 	(*gids)[0] = pw->pw_gid;
    0   stevel 	*gidsLen = _getgroupsbymember(pw->pw_name, *gids, maxgroups, 1);
    0   stevel 	/*
    0   stevel 	 * we will try to remove the duplicate entry from the groups
    0   stevel 	 * array.  This can cause the group array to be empty.
    0   stevel 	 */
    0   stevel 	if (*gidsLen < 1)
    0   stevel 	{
    0   stevel 		free(*gids);
    0   stevel 		*gids = NULL;
    0   stevel 		return (GSS_S_FAILURE);
    0   stevel 	} else if (*gidsLen == 1) {
    0   stevel 		free(*gids);
    0   stevel 		*gids = NULL;
    0   stevel 		*gidsLen = 0;
    0   stevel 	} else {
    0   stevel 		/* length is atleast 2 */
    0   stevel 		*gidsLen = *gidsLen -1;
    0   stevel 		(*gids)[0] = (*gids)[*gidsLen];
    0   stevel 	}
    0   stevel 
    0   stevel 	return (GSS_S_COMPLETE);
    0   stevel } /* gss_get_group_info */
    0   stevel 
    0   stevel 
    0   stevel static OM_uint32
    0   stevel gss_pname_to_uid(minor, name, mech_type, uidOut)
    0   stevel OM_uint32 *minor;
    0   stevel const gss_name_t name;
    0   stevel const gss_OID mech_type;
    0   stevel uid_t *uidOut;
    0   stevel {
    0   stevel 	gss_mechanism mech;
    0   stevel 	gss_union_name_t intName;
    0   stevel 	gss_name_t mechName = NULL;
    0   stevel 	OM_uint32 major, tmpMinor;
    0   stevel 
    0   stevel 	if (!minor)
    0   stevel 		return (GSS_S_CALL_INACCESSIBLE_WRITE);
    0   stevel 
    0   stevel 	*minor = 0;
    0   stevel 
    0   stevel 	if (uidOut == NULL)
    0   stevel 		return (GSS_S_CALL_INACCESSIBLE_WRITE);
    0   stevel 
    0   stevel 	if (name == NULL)
    0   stevel 		return (GSS_S_CALL_INACCESSIBLE_READ);
    0   stevel 
    0   stevel 	intName = (gss_union_name_t)name;
    0   stevel 
    0   stevel 	if (mech_type != NULL)
    0   stevel 		mech = __gss_get_mechanism(mech_type);
    0   stevel 	else {
    0   stevel 		/*
    0   stevel 		 * if this is a MN, then try using the mech
    0   stevel 		 * from the name; otherwise ask for default
    0   stevel 		 */
    0   stevel 		mech = __gss_get_mechanism(intName->mech_type);
    0   stevel 	}
    0   stevel 
    0   stevel 	if (mech == NULL || mech->pname_to_uid == NULL)
    0   stevel 		return (GSS_S_UNAVAILABLE);
    0   stevel 
    0   stevel 	/* may need to import the name if this is not MN */
    0   stevel 	if (intName->mech_type == NULL) {
    0   stevel 		major = __gss_import_internal_name(minor,
    0   stevel 				mech_type, intName,
    0   stevel 				&mechName);
    0   stevel 		if (major != GSS_S_COMPLETE)
    0   stevel 			return (major);
    0   stevel 	} else
    0   stevel 		mechName = intName->mech_name;
    0   stevel 
    0   stevel 
    0   stevel 	/* now call the mechanism's pname function to do the work */
    0   stevel 	major = mech->pname_to_uid(mech->context, minor, mechName, uidOut);
    0   stevel 
    0   stevel 	if (intName->mech_name != mechName)
    0   stevel 		(void) __gss_release_internal_name(&tmpMinor, &mech->mech_type,
    0   stevel 				&mechName);
    0   stevel 
    0   stevel 	return (major);
    0   stevel } /* gss_pname_to_uid */
               

Indexes created Tue Nov 24 09:02:24 UTC 2009

Terms of Use | Privacy | Trademarks | Copyright Policy | Site Guidelines | Help
Your use of this web site or any of its content or software indicates your agreement to be bound by these Terms of Use.
Copyright © 1995-2008 Sun Microsystems, Inc.