1a9148abdSDoug Rabson /*- 2a9148abdSDoug Rabson * Copyright (c) 2008 Isilon Inc http://www.isilon.com/ 3a9148abdSDoug Rabson * Authors: Doug Rabson <dfr@rabson.org> 4a9148abdSDoug Rabson * Developed with Red Inc: Alfred Perlstein <alfred@freebsd.org> 5a9148abdSDoug Rabson * 6a9148abdSDoug Rabson * Redistribution and use in source and binary forms, with or without 7a9148abdSDoug Rabson * modification, are permitted provided that the following conditions 8a9148abdSDoug Rabson * are met: 9a9148abdSDoug Rabson * 1. Redistributions of source code must retain the above copyright 10a9148abdSDoug Rabson * notice, this list of conditions and the following disclaimer. 11a9148abdSDoug Rabson * 2. Redistributions in binary form must reproduce the above copyright 12a9148abdSDoug Rabson * notice, this list of conditions and the following disclaimer in the 13a9148abdSDoug Rabson * documentation and/or other materials provided with the distribution. 14a9148abdSDoug Rabson * 15a9148abdSDoug Rabson * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND 16a9148abdSDoug Rabson * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 17a9148abdSDoug Rabson * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 18a9148abdSDoug Rabson * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE 19a9148abdSDoug Rabson * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 20a9148abdSDoug Rabson * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 21a9148abdSDoug Rabson * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 22a9148abdSDoug Rabson * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 23a9148abdSDoug Rabson * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 24a9148abdSDoug Rabson * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 25a9148abdSDoug Rabson * SUCH DAMAGE. 26a9148abdSDoug Rabson */ 27a9148abdSDoug Rabson 28a9148abdSDoug Rabson #include <sys/cdefs.h> 29a9148abdSDoug Rabson __FBSDID("$FreeBSD$"); 30a9148abdSDoug Rabson 31a9148abdSDoug Rabson #ifdef _KERNEL 32a9148abdSDoug Rabson #include <sys/malloc.h> 33a9148abdSDoug Rabson #else 34a9148abdSDoug Rabson #include <stdlib.h> 35a9148abdSDoug Rabson #include <string.h> 36a9148abdSDoug Rabson #endif 37a9148abdSDoug Rabson 38a9148abdSDoug Rabson #include <rpc/rpc.h> 39a9148abdSDoug Rabson #include <rpc/rpc_com.h> 40a9148abdSDoug Rabson 41a9148abdSDoug Rabson #include "gssd.h" 42a9148abdSDoug Rabson 43a9148abdSDoug Rabson bool_t 44a9148abdSDoug Rabson xdr_gss_buffer_desc(XDR *xdrs, gss_buffer_desc *buf) 45a9148abdSDoug Rabson { 46a9148abdSDoug Rabson char *val; 47a9148abdSDoug Rabson u_int len; 48a9148abdSDoug Rabson 49a9148abdSDoug Rabson len = buf->length; 50a9148abdSDoug Rabson val = buf->value; 51a9148abdSDoug Rabson if (!xdr_bytes(xdrs, &val, &len, ~0)) 52a9148abdSDoug Rabson return (FALSE); 53a9148abdSDoug Rabson buf->length = len; 54a9148abdSDoug Rabson buf->value = val; 55a9148abdSDoug Rabson 56a9148abdSDoug Rabson return (TRUE); 57a9148abdSDoug Rabson } 58a9148abdSDoug Rabson 59a9148abdSDoug Rabson bool_t 60a9148abdSDoug Rabson xdr_gss_OID_desc(XDR *xdrs, gss_OID_desc *oid) 61a9148abdSDoug Rabson { 62a9148abdSDoug Rabson char *val; 63a9148abdSDoug Rabson u_int len; 64a9148abdSDoug Rabson 65a9148abdSDoug Rabson len = oid->length; 66a9148abdSDoug Rabson val = oid->elements; 67a9148abdSDoug Rabson if (!xdr_bytes(xdrs, &val, &len, ~0)) 68a9148abdSDoug Rabson return (FALSE); 69a9148abdSDoug Rabson oid->length = len; 70a9148abdSDoug Rabson oid->elements = val; 71a9148abdSDoug Rabson 72a9148abdSDoug Rabson return (TRUE); 73a9148abdSDoug Rabson } 74a9148abdSDoug Rabson 75a9148abdSDoug Rabson bool_t 76a9148abdSDoug Rabson xdr_gss_OID(XDR *xdrs, gss_OID *oidp) 77a9148abdSDoug Rabson { 78a9148abdSDoug Rabson gss_OID oid; 79a9148abdSDoug Rabson bool_t is_null; 80a9148abdSDoug Rabson 81a9148abdSDoug Rabson switch (xdrs->x_op) { 82a9148abdSDoug Rabson case XDR_ENCODE: 83a9148abdSDoug Rabson oid = *oidp; 84a9148abdSDoug Rabson if (oid) { 85a9148abdSDoug Rabson is_null = FALSE; 86a9148abdSDoug Rabson if (!xdr_bool(xdrs, &is_null) 87a9148abdSDoug Rabson || !xdr_gss_OID_desc(xdrs, oid)) 88a9148abdSDoug Rabson return (FALSE); 89a9148abdSDoug Rabson } else { 90a9148abdSDoug Rabson is_null = TRUE; 91a9148abdSDoug Rabson if (!xdr_bool(xdrs, &is_null)) 92a9148abdSDoug Rabson return (FALSE); 93a9148abdSDoug Rabson } 94a9148abdSDoug Rabson break; 95a9148abdSDoug Rabson 96a9148abdSDoug Rabson case XDR_DECODE: 97a9148abdSDoug Rabson if (!xdr_bool(xdrs, &is_null)) 98a9148abdSDoug Rabson return (FALSE); 99a9148abdSDoug Rabson if (is_null) { 100a9148abdSDoug Rabson *oidp = GSS_C_NO_OID; 101a9148abdSDoug Rabson } else { 102a9148abdSDoug Rabson oid = mem_alloc(sizeof(gss_OID_desc)); 103a9148abdSDoug Rabson memset(oid, 0, sizeof(*oid)); 104a9148abdSDoug Rabson if (!xdr_gss_OID_desc(xdrs, oid)) 105a9148abdSDoug Rabson return (FALSE); 106a9148abdSDoug Rabson *oidp = oid; 107a9148abdSDoug Rabson } 108a9148abdSDoug Rabson break; 109a9148abdSDoug Rabson 110a9148abdSDoug Rabson case XDR_FREE: 111a9148abdSDoug Rabson oid = *oidp; 112a9148abdSDoug Rabson if (oid) { 113a9148abdSDoug Rabson xdr_gss_OID_desc(xdrs, oid); 114a9148abdSDoug Rabson mem_free(oid, sizeof(gss_OID_desc)); 115a9148abdSDoug Rabson } 116a9148abdSDoug Rabson } 117a9148abdSDoug Rabson 118a9148abdSDoug Rabson return (TRUE); 119a9148abdSDoug Rabson } 120a9148abdSDoug Rabson 121a9148abdSDoug Rabson bool_t 122a9148abdSDoug Rabson xdr_gss_OID_set_desc(XDR *xdrs, gss_OID_set_desc *set) 123a9148abdSDoug Rabson { 124a9148abdSDoug Rabson caddr_t addr; 125a9148abdSDoug Rabson u_int len; 126a9148abdSDoug Rabson 127a9148abdSDoug Rabson len = set->count; 128a9148abdSDoug Rabson addr = (caddr_t) set->elements; 129a9148abdSDoug Rabson if (!xdr_array(xdrs, &addr, &len, ~0, sizeof(gss_OID_desc), 130a9148abdSDoug Rabson (xdrproc_t) xdr_gss_OID_desc)) 131a9148abdSDoug Rabson return (FALSE); 132a9148abdSDoug Rabson set->count = len; 133a9148abdSDoug Rabson set->elements = (gss_OID) addr; 134a9148abdSDoug Rabson 135a9148abdSDoug Rabson return (TRUE); 136a9148abdSDoug Rabson } 137a9148abdSDoug Rabson 138a9148abdSDoug Rabson bool_t 139a9148abdSDoug Rabson xdr_gss_OID_set(XDR *xdrs, gss_OID_set *setp) 140a9148abdSDoug Rabson { 141a9148abdSDoug Rabson gss_OID_set set; 142a9148abdSDoug Rabson bool_t is_null; 143a9148abdSDoug Rabson 144a9148abdSDoug Rabson switch (xdrs->x_op) { 145a9148abdSDoug Rabson case XDR_ENCODE: 146a9148abdSDoug Rabson set = *setp; 147a9148abdSDoug Rabson if (set) { 148a9148abdSDoug Rabson is_null = FALSE; 149a9148abdSDoug Rabson if (!xdr_bool(xdrs, &is_null) 150a9148abdSDoug Rabson || !xdr_gss_OID_set_desc(xdrs, set)) 151a9148abdSDoug Rabson return (FALSE); 152a9148abdSDoug Rabson } else { 153a9148abdSDoug Rabson is_null = TRUE; 154a9148abdSDoug Rabson if (!xdr_bool(xdrs, &is_null)) 155a9148abdSDoug Rabson return (FALSE); 156a9148abdSDoug Rabson } 157a9148abdSDoug Rabson break; 158a9148abdSDoug Rabson 159a9148abdSDoug Rabson case XDR_DECODE: 160a9148abdSDoug Rabson if (!xdr_bool(xdrs, &is_null)) 161a9148abdSDoug Rabson return (FALSE); 162a9148abdSDoug Rabson if (is_null) { 163a9148abdSDoug Rabson *setp = GSS_C_NO_OID_SET; 164a9148abdSDoug Rabson } else { 165a9148abdSDoug Rabson set = mem_alloc(sizeof(gss_OID_set_desc)); 166a9148abdSDoug Rabson memset(set, 0, sizeof(*set)); 167a9148abdSDoug Rabson if (!xdr_gss_OID_set_desc(xdrs, set)) 168a9148abdSDoug Rabson return (FALSE); 169a9148abdSDoug Rabson *setp = set; 170a9148abdSDoug Rabson } 171a9148abdSDoug Rabson break; 172a9148abdSDoug Rabson 173a9148abdSDoug Rabson case XDR_FREE: 174a9148abdSDoug Rabson set = *setp; 175a9148abdSDoug Rabson if (set) { 176a9148abdSDoug Rabson xdr_gss_OID_set_desc(xdrs, set); 177a9148abdSDoug Rabson mem_free(set, sizeof(gss_OID_set_desc)); 178a9148abdSDoug Rabson } 179a9148abdSDoug Rabson } 180a9148abdSDoug Rabson 181a9148abdSDoug Rabson return (TRUE); 182a9148abdSDoug Rabson } 183a9148abdSDoug Rabson 184a9148abdSDoug Rabson bool_t 185a9148abdSDoug Rabson xdr_gss_channel_bindings_t(XDR *xdrs, gss_channel_bindings_t *chp) 186a9148abdSDoug Rabson { 187a9148abdSDoug Rabson gss_channel_bindings_t ch; 188a9148abdSDoug Rabson bool_t is_null; 189a9148abdSDoug Rabson 190a9148abdSDoug Rabson switch (xdrs->x_op) { 191a9148abdSDoug Rabson case XDR_ENCODE: 192a9148abdSDoug Rabson ch = *chp; 193a9148abdSDoug Rabson if (ch) { 194a9148abdSDoug Rabson is_null = FALSE; 195a9148abdSDoug Rabson if (!xdr_bool(xdrs, &is_null) 196a9148abdSDoug Rabson || !xdr_uint32_t(xdrs, &ch->initiator_addrtype) 197a9148abdSDoug Rabson || !xdr_gss_buffer_desc(xdrs, 198a9148abdSDoug Rabson &ch->initiator_address) 199a9148abdSDoug Rabson || !xdr_uint32_t(xdrs, &ch->acceptor_addrtype) 200a9148abdSDoug Rabson || !xdr_gss_buffer_desc(xdrs, 201a9148abdSDoug Rabson &ch->acceptor_address) 202a9148abdSDoug Rabson || !xdr_gss_buffer_desc(xdrs, 203a9148abdSDoug Rabson &ch->application_data)) 204a9148abdSDoug Rabson return (FALSE); 205a9148abdSDoug Rabson } else { 206a9148abdSDoug Rabson is_null = TRUE; 207a9148abdSDoug Rabson if (!xdr_bool(xdrs, &is_null)) 208a9148abdSDoug Rabson return (FALSE); 209a9148abdSDoug Rabson } 210a9148abdSDoug Rabson break; 211a9148abdSDoug Rabson 212a9148abdSDoug Rabson case XDR_DECODE: 213a9148abdSDoug Rabson if (!xdr_bool(xdrs, &is_null)) 214a9148abdSDoug Rabson return (FALSE); 215a9148abdSDoug Rabson if (is_null) { 216a9148abdSDoug Rabson *chp = GSS_C_NO_CHANNEL_BINDINGS; 217a9148abdSDoug Rabson } else { 218a9148abdSDoug Rabson ch = mem_alloc(sizeof(*ch)); 219a9148abdSDoug Rabson memset(ch, 0, sizeof(*ch)); 220a9148abdSDoug Rabson if (!xdr_uint32_t(xdrs, &ch->initiator_addrtype) 221a9148abdSDoug Rabson || !xdr_gss_buffer_desc(xdrs, 222a9148abdSDoug Rabson &ch->initiator_address) 223a9148abdSDoug Rabson || !xdr_uint32_t(xdrs, &ch->acceptor_addrtype) 224a9148abdSDoug Rabson || !xdr_gss_buffer_desc(xdrs, 225a9148abdSDoug Rabson &ch->acceptor_address) 226a9148abdSDoug Rabson || !xdr_gss_buffer_desc(xdrs, 227a9148abdSDoug Rabson &ch->application_data)) 228a9148abdSDoug Rabson return (FALSE); 229a9148abdSDoug Rabson *chp = ch; 230a9148abdSDoug Rabson } 231a9148abdSDoug Rabson break; 232a9148abdSDoug Rabson 233a9148abdSDoug Rabson case XDR_FREE: 234a9148abdSDoug Rabson ch = *chp; 235a9148abdSDoug Rabson if (ch) { 236a9148abdSDoug Rabson xdr_gss_buffer_desc(xdrs, &ch->initiator_address); 237a9148abdSDoug Rabson xdr_gss_buffer_desc(xdrs, &ch->acceptor_address); 238a9148abdSDoug Rabson xdr_gss_buffer_desc(xdrs, &ch->application_data); 239a9148abdSDoug Rabson mem_free(ch, sizeof(*ch)); 240a9148abdSDoug Rabson } 241a9148abdSDoug Rabson } 242a9148abdSDoug Rabson 243a9148abdSDoug Rabson return (TRUE); 244a9148abdSDoug Rabson } 245