1 /* 2 * Copyright (c) 1997, 1998, 1999 Kungliga Tekniska H�gskolan 3 * (Royal Institute of Technology, Stockholm, Sweden). 4 * All rights reserved. 5 * 6 * Redistribution and use in source and binary forms, with or without 7 * modification, are permitted provided that the following conditions 8 * are met: 9 * 10 * 1. Redistributions of source code must retain the above copyright 11 * notice, this list of conditions and the following disclaimer. 12 * 13 * 2. Redistributions in binary form must reproduce the above copyright 14 * notice, this list of conditions and the following disclaimer in the 15 * documentation and/or other materials provided with the distribution. 16 * 17 * 3. Neither the name of the Institute nor the names of its contributors 18 * may be used to endorse or promote products derived from this software 19 * without specific prior written permission. 20 * 21 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND 22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 24 * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE 25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 31 * SUCH DAMAGE. 32 */ 33 34 #include "krb5_locl.h" 35 36 RCSID("$Id: creds.c,v 1.14 1999/12/02 17:05:08 joda Exp $"); 37 38 krb5_error_code 39 krb5_free_cred_contents (krb5_context context, krb5_creds *c) 40 { 41 return krb5_free_creds_contents (context, c); 42 } 43 44 krb5_error_code 45 krb5_free_creds_contents (krb5_context context, krb5_creds *c) 46 { 47 krb5_free_principal (context, c->client); 48 c->client = NULL; 49 krb5_free_principal (context, c->server); 50 c->server = NULL; 51 krb5_free_keyblock_contents (context, &c->session); 52 krb5_data_free (&c->ticket); 53 krb5_data_free (&c->second_ticket); 54 free_AuthorizationData (&c->authdata); 55 krb5_free_addresses (context, &c->addresses); 56 return 0; 57 } 58 59 krb5_error_code 60 krb5_copy_creds_contents (krb5_context context, 61 const krb5_creds *incred, 62 krb5_creds *c) 63 { 64 krb5_error_code ret; 65 66 memset(c, 0, sizeof(*c)); 67 ret = krb5_copy_principal (context, incred->client, &c->client); 68 if (ret) 69 goto fail; 70 ret = krb5_copy_principal (context, incred->server, &c->server); 71 if (ret) 72 goto fail; 73 ret = krb5_copy_keyblock_contents (context, &incred->session, &c->session); 74 if (ret) 75 goto fail; 76 c->times = incred->times; 77 ret = krb5_data_copy (&c->ticket, 78 incred->ticket.data, 79 incred->ticket.length); 80 if (ret) 81 goto fail; 82 ret = krb5_data_copy (&c->second_ticket, 83 incred->second_ticket.data, 84 incred->second_ticket.length); 85 if (ret) 86 goto fail; 87 ret = copy_AuthorizationData(&incred->authdata, &c->authdata); 88 if (ret) 89 goto fail; 90 ret = krb5_copy_addresses (context, 91 &incred->addresses, 92 &c->addresses); 93 if (ret) 94 goto fail; 95 c->flags = incred->flags; 96 return 0; 97 98 fail: 99 krb5_free_creds_contents (context, c); 100 return ret; 101 } 102 103 krb5_error_code 104 krb5_copy_creds (krb5_context context, 105 const krb5_creds *incred, 106 krb5_creds **outcred) 107 { 108 krb5_creds *c; 109 110 c = malloc (sizeof (*c)); 111 if (c == NULL) 112 return ENOMEM; 113 memset (c, 0, sizeof(*c)); 114 *outcred = c; 115 return krb5_copy_creds_contents (context, incred, c); 116 } 117 118 krb5_error_code 119 krb5_free_creds (krb5_context context, krb5_creds *c) 120 { 121 krb5_free_creds_contents (context, c); 122 free (c); 123 return 0; 124 } 125 126 /* 127 * Return TRUE if `mcreds' and `creds' are equal (`whichfields' 128 * determines what equal means). 129 */ 130 131 krb5_boolean 132 krb5_compare_creds(krb5_context context, krb5_flags whichfields, 133 const krb5_creds *mcreds, const krb5_creds *creds) 134 { 135 krb5_boolean match; 136 137 if(whichfields & KRB5_TC_DONT_MATCH_REALM) 138 match = krb5_principal_compare_any_realm(context, 139 mcreds->server, 140 creds->server); 141 else 142 match = krb5_principal_compare(context, mcreds->server, creds->server); 143 if(match && (whichfields & KRB5_TC_MATCH_KEYTYPE) && 144 !krb5_enctypes_compatible_keys (context, 145 mcreds->session.keytype, 146 creds->session.keytype)) 147 match = FALSE; 148 return match; 149 } 150