1 /*- 2 * Copyright (c) 2005 Doug Rabson 3 * All rights reserved. 4 * 5 * Redistribution and use in source and binary forms, with or without 6 * modification, are permitted provided that the following conditions 7 * are met: 8 * 1. Redistributions of source code must retain the above copyright 9 * notice, this list of conditions and the following disclaimer. 10 * 2. Redistributions in binary form must reproduce the above copyright 11 * notice, this list of conditions and the following disclaimer in the 12 * documentation and/or other materials provided with the distribution. 13 * 14 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND 15 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 16 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 17 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE 18 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 19 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 20 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 21 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 22 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 23 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 24 * SUCH DAMAGE. 25 * 26 * $FreeBSD$ 27 */ 28 29 #include <gssapi/gssapi.h> 30 #include <stdlib.h> 31 #include <string.h> 32 #include <errno.h> 33 34 #include "mech_switch.h" 35 #include "name.h" 36 #include "cred.h" 37 #include "context.h" 38 39 OM_uint32 40 gss_init_sec_context(OM_uint32 * minor_status, 41 const gss_cred_id_t initiator_cred_handle, 42 gss_ctx_id_t * context_handle, 43 const gss_name_t target_name, 44 const gss_OID imech_type, 45 OM_uint32 req_flags, 46 OM_uint32 time_req, 47 const gss_channel_bindings_t input_chan_bindings, 48 const gss_buffer_t input_token, 49 gss_OID * actual_mech_type, 50 gss_buffer_t output_token, 51 OM_uint32 * ret_flags, 52 OM_uint32 * time_rec) 53 { 54 OM_uint32 major_status; 55 gss_OID mech_type; 56 struct _gss_mech_switch *m; 57 struct _gss_name *name = (struct _gss_name *) target_name; 58 struct _gss_mechanism_name *mn; 59 struct _gss_context *ctx = (struct _gss_context *) *context_handle; 60 struct _gss_cred *cred = (struct _gss_cred *) initiator_cred_handle; 61 struct _gss_mechanism_cred *mc; 62 gss_cred_id_t cred_handle; 63 int allocated_ctx; 64 65 *minor_status = 0; 66 67 if ((mech_type = imech_type) == GSS_C_NO_OID) { 68 _gss_load_mech(); 69 mech_type = &SLIST_FIRST(&_gss_mechs)->gm_mech_oid; 70 if (mech_type == NULL) 71 return (GSS_S_BAD_MECH); 72 } 73 74 /* 75 * If we haven't allocated a context yet, do so now and lookup 76 * the mechanism switch table. If we have one already, make 77 * sure we use the same mechanism switch as before. 78 */ 79 if (!ctx) { 80 ctx = malloc(sizeof(struct _gss_context)); 81 if (!ctx) { 82 *minor_status = ENOMEM; 83 return (GSS_S_FAILURE); 84 } 85 memset(ctx, 0, sizeof(struct _gss_context)); 86 m = ctx->gc_mech = _gss_find_mech_switch(mech_type); 87 if (!m) { 88 free(ctx); 89 return (GSS_S_BAD_MECH); 90 } 91 allocated_ctx = 1; 92 } else { 93 m = ctx->gc_mech; 94 allocated_ctx = 0; 95 } 96 97 /* 98 * Find the MN for this mechanism. 99 */ 100 mn = _gss_find_mn(name, mech_type); 101 if (mn == NULL) { 102 if (allocated_ctx) 103 free(ctx); 104 return GSS_S_BAD_NAME; 105 } 106 107 /* 108 * If we have a cred, find the cred for this mechanism. 109 */ 110 cred_handle = GSS_C_NO_CREDENTIAL; 111 if (cred) { 112 SLIST_FOREACH(mc, &cred->gc_mc, gmc_link) { 113 if (_gss_oid_equal(mech_type, mc->gmc_mech_oid)) { 114 cred_handle = mc->gmc_cred; 115 break; 116 } 117 } 118 } 119 120 major_status = m->gm_init_sec_context(minor_status, 121 cred_handle, 122 &ctx->gc_ctx, 123 mn->gmn_name, 124 mech_type, 125 req_flags, 126 time_req, 127 input_chan_bindings, 128 input_token, 129 actual_mech_type, 130 output_token, 131 ret_flags, 132 time_rec); 133 134 if (major_status != GSS_S_COMPLETE 135 && major_status != GSS_S_CONTINUE_NEEDED) { 136 if (allocated_ctx) 137 free(ctx); 138 } else { 139 *context_handle = (gss_ctx_id_t) ctx; 140 } 141 142 return (major_status); 143 } 144