xref: /freebsd/lib/libgssapi/gss_inquire_cred.c (revision 1e413cf93298b5b97441a21d9a50fdcd0ee9945e)
1 /*-
2  * Copyright (c) 2005 Doug Rabson
3  * All rights reserved.
4  *
5  * Redistribution and use in source and binary forms, with or without
6  * modification, are permitted provided that the following conditions
7  * are met:
8  * 1. Redistributions of source code must retain the above copyright
9  *    notice, this list of conditions and the following disclaimer.
10  * 2. Redistributions in binary form must reproduce the above copyright
11  *    notice, this list of conditions and the following disclaimer in the
12  *    documentation and/or other materials provided with the distribution.
13  *
14  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
15  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
16  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
17  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
18  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
19  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
20  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
21  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
22  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
23  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
24  * SUCH DAMAGE.
25  *
26  *	$FreeBSD$
27  */
28 
29 #include <gssapi/gssapi.h>
30 #include <stdlib.h>
31 #include <string.h>
32 #include <errno.h>
33 
34 #include "mech_switch.h"
35 #include "name.h"
36 #include "cred.h"
37 
38 OM_uint32
39 gss_inquire_cred(OM_uint32 *minor_status,
40     const gss_cred_id_t cred_handle,
41     gss_name_t *name_ret,
42     OM_uint32 *lifetime,
43     gss_cred_usage_t *cred_usage,
44     gss_OID_set *mechanisms)
45 {
46 	OM_uint32 major_status;
47 	struct _gss_mech_switch *m;
48 	struct _gss_cred *cred = (struct _gss_cred *) cred_handle;
49 	struct _gss_mechanism_cred *mc;
50 	struct _gss_name *name;
51 	struct _gss_mechanism_name *mn;
52 	OM_uint32 min_lifetime;
53 
54 	*minor_status = 0;
55 	if (name_ret)
56 		*name_ret = 0;
57 	if (lifetime)
58 		*lifetime = 0;
59 	if (cred_usage)
60 		*cred_usage = 0;
61 
62 	if (name_ret) {
63 		name = malloc(sizeof(struct _gss_name));
64 		if (!name) {
65 			*minor_status = ENOMEM;
66 			return (GSS_S_FAILURE);
67 		}
68 		memset(name, 0, sizeof(struct _gss_name));
69 		SLIST_INIT(&name->gn_mn);
70 	} else {
71 		name = 0;
72 	}
73 
74 	if (mechanisms) {
75 		major_status = gss_create_empty_oid_set(minor_status,
76 		    mechanisms);
77 		if (major_status) {
78 			if (name) free(name);
79 			return (major_status);
80 		}
81 	}
82 
83 	min_lifetime = GSS_C_INDEFINITE;
84 	if (cred) {
85 		SLIST_FOREACH(mc, &cred->gc_mc, gmc_link) {
86 			gss_name_t mc_name;
87 			OM_uint32 mc_lifetime;
88 
89 			major_status = mc->gmc_mech->gm_inquire_cred(minor_status,
90 			    mc->gmc_cred, &mc_name, &mc_lifetime, NULL, NULL);
91 			if (major_status)
92 				continue;
93 
94 			if (name) {
95 				mn = malloc(sizeof(struct _gss_mechanism_name));
96 				if (!mn) {
97 					mc->gmc_mech->gm_release_name(minor_status,
98 					    &mc_name);
99 					continue;
100 				}
101 				mn->gmn_mech = mc->gmc_mech;
102 				mn->gmn_mech_oid = mc->gmc_mech_oid;
103 				mn->gmn_name = mc_name;
104 				SLIST_INSERT_HEAD(&name->gn_mn, mn, gmn_link);
105 			} else {
106 				mc->gmc_mech->gm_release_name(minor_status,
107 				    &mc_name);
108 			}
109 
110 			if (mc_lifetime < min_lifetime)
111 				min_lifetime = mc_lifetime;
112 
113 			if (mechanisms)
114 				gss_add_oid_set_member(minor_status,
115 				    mc->gmc_mech_oid, mechanisms);
116 		}
117 	} else {
118 		SLIST_FOREACH(m, &_gss_mechs, gm_link) {
119 			gss_name_t mc_name;
120 			OM_uint32 mc_lifetime;
121 
122 			major_status = m->gm_inquire_cred(minor_status,
123 			    GSS_C_NO_CREDENTIAL, &mc_name, &mc_lifetime,
124 			    cred_usage, NULL);
125 			if (major_status)
126 				continue;
127 
128 			if (name && mc_name) {
129 				mn = malloc(
130 					sizeof(struct _gss_mechanism_name));
131 				if (!mn) {
132 					mc->gmc_mech->gm_release_name(
133 						minor_status, &mc_name);
134 					continue;
135 				}
136 				mn->gmn_mech = mc->gmc_mech;
137 				mn->gmn_mech_oid = mc->gmc_mech_oid;
138 				mn->gmn_name = mc_name;
139 				SLIST_INSERT_HEAD(&name->gn_mn, mn, gmn_link);
140 			} else if (mc_name) {
141 				mc->gmc_mech->gm_release_name(minor_status,
142 				    &mc_name);
143 			}
144 
145 			if (mc_lifetime < min_lifetime)
146 				min_lifetime = mc_lifetime;
147 
148 			if (mechanisms)
149 				gss_add_oid_set_member(minor_status,
150 				    &m->gm_mech_oid, mechanisms);
151 		}
152 
153 		if ((*mechanisms)->count == 0) {
154 			gss_release_oid_set(minor_status, mechanisms);
155 			*minor_status = 0;
156 			return (GSS_S_NO_CRED);
157 		}
158 	}
159 
160 	*minor_status = 0;
161 	if (name_ret)
162 		*name_ret = (gss_name_t) name;
163 	if (lifetime)
164 		*lifetime = min_lifetime;
165 	if (cred && cred_usage)
166 		*cred_usage = cred->gc_usage;
167 	return (GSS_S_COMPLETE);
168 }
169