/*
 * CDDL HEADER START
 *
 * The contents of this file are subject to the terms of the
 * Common Development and Distribution License (the "License").
 * You may not use this file except in compliance with the License.
 *
 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
 * or http://www.opensolaris.org/os/licensing.
 * See the License for the specific language governing permissions
 * and limitations under the License.
 *
 * When distributing Covered Code, include this CDDL HEADER in each
 * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
 * If applicable, add the following below this CDDL HEADER, with the
 * fields enclosed by brackets "[]" replaced with your own identifying
 * information: Portions Copyright [yyyy] [name of copyright owner]
 *
 * CDDL HEADER END
 */
/*
 * Copyright (c) 1999, 2010, Oracle and/or its affiliates. All rights reserved.
 */

/*
 *  glue routine for gss_release_cred
 */

#include <mechglueP.h>
#include "gssapiP_generic.h"
#include <stdio.h>
#ifdef HAVE_STDLIB_H
#include <stdlib.h>
#endif

OM_uint32
gss_release_cred(minor_status,
			cred_handle)

OM_uint32 		*minor_status;
gss_cred_id_t 		*cred_handle;

{
	OM_uint32		status, temp_status;
	int			j;
	gss_union_cred_t	union_cred;
	gss_mechanism		mech;

	if (minor_status == NULL)
		return (GSS_S_CALL_INACCESSIBLE_WRITE);

	*minor_status = 0;

	if (cred_handle == NULL)
		return (GSS_S_NO_CRED | GSS_S_CALL_INACCESSIBLE_READ);

	/*
	 * Loop through the union_cred struct, selecting the approprate
	 * underlying mechanism routine and calling it. At the end,
	 * release all of the storage taken by the union_cred struct.
	 */

	union_cred = (gss_union_cred_t)*cred_handle;
	if (union_cred == (gss_union_cred_t)GSS_C_NO_CREDENTIAL)
		return (GSS_S_COMPLETE);

	if (GSSINT_CHK_LOOP(union_cred))
		return (GSS_S_NO_CRED | GSS_S_CALL_INACCESSIBLE_READ);

	*cred_handle = NULL;

	status = GSS_S_COMPLETE;

	for (j = 0; j < union_cred->count; j++) {

		mech = __gss_get_mechanism(&union_cred->mechs_array[j]);

		if (union_cred->mechs_array[j].elements)
			free(union_cred->mechs_array[j].elements);
		if (mech) {
			if (mech->gss_release_cred) {
				temp_status = mech->gss_release_cred
						(mech->context, minor_status,
						&union_cred->cred_array[j]);

				if (temp_status != GSS_S_COMPLETE) {
					map_error(minor_status, mech);
					status = GSS_S_NO_CRED;
				}
			} else
				status = GSS_S_UNAVAILABLE;
		} else
			status = GSS_S_DEFECTIVE_CREDENTIAL;
	}

	(void) gss_release_buffer(minor_status, &union_cred->auxinfo.name);
	free(union_cred->cred_array);
	free(union_cred->mechs_array);
	free(union_cred);

	return (status);
}