1 /* 2 * Copyright (c) 1997 - 2001 Kungliga Tekniska H�gskolan 3 * (Royal Institute of Technology, Stockholm, Sweden). 4 * All rights reserved. 5 * 6 * Redistribution and use in source and binary forms, with or without 7 * modification, are permitted provided that the following conditions 8 * are met: 9 * 10 * 1. Redistributions of source code must retain the above copyright 11 * notice, this list of conditions and the following disclaimer. 12 * 13 * 2. Redistributions in binary form must reproduce the above copyright 14 * notice, this list of conditions and the following disclaimer in the 15 * documentation and/or other materials provided with the distribution. 16 * 17 * 3. Neither the name of the Institute nor the names of its contributors 18 * may be used to endorse or promote products derived from this software 19 * without specific prior written permission. 20 * 21 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND 22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 24 * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE 25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 31 * SUCH DAMAGE. 32 */ 33 34 #include "krb5_locl.h" 35 36 RCSID("$Id: creds.c,v 1.15 2001/05/14 06:14:45 assar Exp $"); 37 38 krb5_error_code 39 krb5_free_cred_contents (krb5_context context, krb5_creds *c) 40 { 41 return krb5_free_creds_contents (context, c); 42 } 43 44 krb5_error_code 45 krb5_free_creds_contents (krb5_context context, krb5_creds *c) 46 { 47 krb5_free_principal (context, c->client); 48 c->client = NULL; 49 krb5_free_principal (context, c->server); 50 c->server = NULL; 51 krb5_free_keyblock_contents (context, &c->session); 52 krb5_data_free (&c->ticket); 53 krb5_data_free (&c->second_ticket); 54 free_AuthorizationData (&c->authdata); 55 krb5_free_addresses (context, &c->addresses); 56 return 0; 57 } 58 59 krb5_error_code 60 krb5_copy_creds_contents (krb5_context context, 61 const krb5_creds *incred, 62 krb5_creds *c) 63 { 64 krb5_error_code ret; 65 66 memset(c, 0, sizeof(*c)); 67 ret = krb5_copy_principal (context, incred->client, &c->client); 68 if (ret) 69 goto fail; 70 ret = krb5_copy_principal (context, incred->server, &c->server); 71 if (ret) 72 goto fail; 73 ret = krb5_copy_keyblock_contents (context, &incred->session, &c->session); 74 if (ret) 75 goto fail; 76 c->times = incred->times; 77 ret = krb5_data_copy (&c->ticket, 78 incred->ticket.data, 79 incred->ticket.length); 80 if (ret) 81 goto fail; 82 ret = krb5_data_copy (&c->second_ticket, 83 incred->second_ticket.data, 84 incred->second_ticket.length); 85 if (ret) 86 goto fail; 87 ret = copy_AuthorizationData(&incred->authdata, &c->authdata); 88 if (ret) 89 goto fail; 90 ret = krb5_copy_addresses (context, 91 &incred->addresses, 92 &c->addresses); 93 if (ret) 94 goto fail; 95 c->flags = incred->flags; 96 return 0; 97 98 fail: 99 krb5_free_creds_contents (context, c); 100 return ret; 101 } 102 103 krb5_error_code 104 krb5_copy_creds (krb5_context context, 105 const krb5_creds *incred, 106 krb5_creds **outcred) 107 { 108 krb5_creds *c; 109 110 c = malloc (sizeof (*c)); 111 if (c == NULL) { 112 krb5_set_error_string (context, "malloc: out of memory"); 113 return ENOMEM; 114 } 115 memset (c, 0, sizeof(*c)); 116 *outcred = c; 117 return krb5_copy_creds_contents (context, incred, c); 118 } 119 120 krb5_error_code 121 krb5_free_creds (krb5_context context, krb5_creds *c) 122 { 123 krb5_free_creds_contents (context, c); 124 free (c); 125 return 0; 126 } 127 128 /* 129 * Return TRUE if `mcreds' and `creds' are equal (`whichfields' 130 * determines what equal means). 131 */ 132 133 krb5_boolean 134 krb5_compare_creds(krb5_context context, krb5_flags whichfields, 135 const krb5_creds *mcreds, const krb5_creds *creds) 136 { 137 krb5_boolean match; 138 139 if(whichfields & KRB5_TC_DONT_MATCH_REALM) 140 match = krb5_principal_compare_any_realm(context, 141 mcreds->server, 142 creds->server); 143 else 144 match = krb5_principal_compare(context, mcreds->server, creds->server); 145 if(match && (whichfields & KRB5_TC_MATCH_KEYTYPE) && 146 !krb5_enctypes_compatible_keys (context, 147 mcreds->session.keytype, 148 creds->session.keytype)) 149 match = FALSE; 150 return match; 151 } 152