1*ae771770SStanislav Sedov /*
2*ae771770SStanislav Sedov * Copyright (c) 2006 Kungliga Tekniska H�gskolan
3*ae771770SStanislav Sedov * (Royal Institute of Technology, Stockholm, Sweden).
4*ae771770SStanislav Sedov * All rights reserved.
5*ae771770SStanislav Sedov *
6*ae771770SStanislav Sedov * Portions Copyright (c) 2009 Apple Inc. All rights reserved.
7*ae771770SStanislav Sedov *
8*ae771770SStanislav Sedov * Redistribution and use in source and binary forms, with or without
9*ae771770SStanislav Sedov * modification, are permitted provided that the following conditions
10*ae771770SStanislav Sedov * are met:
11*ae771770SStanislav Sedov *
12*ae771770SStanislav Sedov * 1. Redistributions of source code must retain the above copyright
13*ae771770SStanislav Sedov * notice, this list of conditions and the following disclaimer.
14*ae771770SStanislav Sedov *
15*ae771770SStanislav Sedov * 2. Redistributions in binary form must reproduce the above copyright
16*ae771770SStanislav Sedov * notice, this list of conditions and the following disclaimer in the
17*ae771770SStanislav Sedov * documentation and/or other materials provided with the distribution.
18*ae771770SStanislav Sedov *
19*ae771770SStanislav Sedov * 3. Neither the name of the Institute nor the names of its contributors
20*ae771770SStanislav Sedov * may be used to endorse or promote products derived from this software
21*ae771770SStanislav Sedov * without specific prior written permission.
22*ae771770SStanislav Sedov *
23*ae771770SStanislav Sedov * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
24*ae771770SStanislav Sedov * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
25*ae771770SStanislav Sedov * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
26*ae771770SStanislav Sedov * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
27*ae771770SStanislav Sedov * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
28*ae771770SStanislav Sedov * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
29*ae771770SStanislav Sedov * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
30*ae771770SStanislav Sedov * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
31*ae771770SStanislav Sedov * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
32*ae771770SStanislav Sedov * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
33*ae771770SStanislav Sedov * SUCH DAMAGE.
34*ae771770SStanislav Sedov */
35*ae771770SStanislav Sedov
36*ae771770SStanislav Sedov #include "ntlm.h"
37*ae771770SStanislav Sedov
38*ae771770SStanislav Sedov void GSSAPI_CALLCONV
_gss_ntlm_iter_creds_f(OM_uint32 flags,void * userctx,void (* cred_iter)(void *,gss_OID,gss_cred_id_t))39*ae771770SStanislav Sedov _gss_ntlm_iter_creds_f(OM_uint32 flags,
40*ae771770SStanislav Sedov void *userctx ,
41*ae771770SStanislav Sedov void (*cred_iter)(void *, gss_OID, gss_cred_id_t))
42*ae771770SStanislav Sedov {
43*ae771770SStanislav Sedov #ifdef HAVE_KCM
44*ae771770SStanislav Sedov krb5_error_code ret;
45*ae771770SStanislav Sedov krb5_context context = NULL;
46*ae771770SStanislav Sedov krb5_storage *request, *response;
47*ae771770SStanislav Sedov krb5_data response_data;
48*ae771770SStanislav Sedov
49*ae771770SStanislav Sedov ret = krb5_init_context(&context);
50*ae771770SStanislav Sedov if (ret)
51*ae771770SStanislav Sedov goto done;
52*ae771770SStanislav Sedov
53*ae771770SStanislav Sedov ret = krb5_kcm_storage_request(context, KCM_OP_GET_NTLM_USER_LIST, &request);
54*ae771770SStanislav Sedov if (ret)
55*ae771770SStanislav Sedov goto done;
56*ae771770SStanislav Sedov
57*ae771770SStanislav Sedov ret = krb5_kcm_call(context, request, &response, &response_data);
58*ae771770SStanislav Sedov krb5_storage_free(request);
59*ae771770SStanislav Sedov if (ret)
60*ae771770SStanislav Sedov goto done;
61*ae771770SStanislav Sedov
62*ae771770SStanislav Sedov while (1) {
63*ae771770SStanislav Sedov uint32_t morep;
64*ae771770SStanislav Sedov char *user = NULL, *domain = NULL;
65*ae771770SStanislav Sedov ntlm_cred dn;
66*ae771770SStanislav Sedov
67*ae771770SStanislav Sedov ret = krb5_ret_uint32(response, &morep);
68*ae771770SStanislav Sedov if (ret) goto out;
69*ae771770SStanislav Sedov
70*ae771770SStanislav Sedov if (!morep) goto out;
71*ae771770SStanislav Sedov
72*ae771770SStanislav Sedov ret = krb5_ret_stringz(response, &user);
73*ae771770SStanislav Sedov if (ret) goto out;
74*ae771770SStanislav Sedov ret = krb5_ret_stringz(response, &domain);
75*ae771770SStanislav Sedov if (ret) {
76*ae771770SStanislav Sedov free(user);
77*ae771770SStanislav Sedov goto out;
78*ae771770SStanislav Sedov }
79*ae771770SStanislav Sedov
80*ae771770SStanislav Sedov dn = calloc(1, sizeof(*dn));
81*ae771770SStanislav Sedov if (dn == NULL) {
82*ae771770SStanislav Sedov free(user);
83*ae771770SStanislav Sedov free(domain);
84*ae771770SStanislav Sedov goto out;
85*ae771770SStanislav Sedov }
86*ae771770SStanislav Sedov dn->username = user;
87*ae771770SStanislav Sedov dn->domain = domain;
88*ae771770SStanislav Sedov
89*ae771770SStanislav Sedov cred_iter(userctx, GSS_NTLM_MECHANISM, (gss_cred_id_t)dn);
90*ae771770SStanislav Sedov }
91*ae771770SStanislav Sedov out:
92*ae771770SStanislav Sedov krb5_storage_free(response);
93*ae771770SStanislav Sedov krb5_data_free(&response_data);
94*ae771770SStanislav Sedov done:
95*ae771770SStanislav Sedov if (context)
96*ae771770SStanislav Sedov krb5_free_context(context);
97*ae771770SStanislav Sedov #endif /* HAVE_KCM */
98*ae771770SStanislav Sedov (*cred_iter)(userctx, NULL, NULL);
99*ae771770SStanislav Sedov }
100