xref: /illumos-gate/usr/src/lib/gss_mechs/mech_krb5/mech/process_context_token.c (revision 55fea89dcaa64928bed4327112404dcb3e07b79f)
1 /*
2  * Copyright 1993 by OpenVision Technologies, Inc.
3  *
4  * Permission to use, copy, modify, distribute, and sell this software
5  * and its documentation for any purpose is hereby granted without fee,
6  * provided that the above copyright notice appears in all copies and
7  * that both that copyright notice and this permission notice appear in
8  * supporting documentation, and that the name of OpenVision not be used
9  * in advertising or publicity pertaining to distribution of the software
10  * without specific, written prior permission. OpenVision makes no
11  * representations about the suitability of this software for any
12  * purpose.  It is provided "as is" without express or implied warranty.
13  *
14  * OPENVISION DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE,
15  * INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS, IN NO
16  * EVENT SHALL OPENVISION BE LIABLE FOR ANY SPECIAL, INDIRECT OR
17  * CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF
18  * USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
19  * OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
20  * PERFORMANCE OF THIS SOFTWARE.
21  */
22 
23 #include "gssapiP_krb5.h"
24 
25 /*
26  * $Id: process_context_token.c 18396 2006-07-25 20:29:43Z lxs $
27  */
28 
29 OM_uint32
krb5_gss_process_context_token(minor_status,context_handle,token_buffer)30 krb5_gss_process_context_token(minor_status, context_handle,
31 			       token_buffer)
32      OM_uint32 *minor_status;
33      gss_ctx_id_t context_handle;
34      gss_buffer_t token_buffer;
35 {
36    krb5_gss_ctx_id_rec *ctx;
37    OM_uint32 majerr;
38 
39    /* validate the context handle */
40    if (! kg_validate_ctx_id(context_handle)) {
41       *minor_status = (OM_uint32) G_VALIDATE_FAILED;
42       return(GSS_S_NO_CONTEXT);
43    }
44 
45    ctx = (krb5_gss_ctx_id_t) context_handle;
46 
47    if (! ctx->established) {
48       *minor_status = KG_CTX_INCOMPLETE;
49       return(GSS_S_NO_CONTEXT);
50    }
51 
52    /* "unseal" the token */
53 
54    if (GSS_ERROR(majerr = kg_unseal(minor_status, context_handle,
55                                     token_buffer,
56 				    GSS_C_NO_BUFFER, NULL, NULL,
57 				    KG_TOK_DEL_CTX)))
58       return(majerr);
59 
60    /* that's it.  delete the context */
61 
62    return(krb5_gss_delete_sec_context(minor_status, &context_handle,
63 				      GSS_C_NO_BUFFER));
64 }
65