summaryrefslogtreecommitdiffstats
path: root/src/lib/gssapi/krb5/inq_names.c
blob: ba95a3bc128b12de31e4c3fc4d69b2f41e693006 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
/*
 * lib/gssapi/krb5/inq_names.c
 *
 * Copyright 1995 by the Massachusetts Institute of Technology.
 * All Rights Reserved.
 *
 * Export of this software from the United States of America may
 *   require a specific license from the United States Government.
 *   It is the responsibility of any person or organization contemplating
 *   export to obtain such a license before exporting.
 *
 * WITHIN THAT CONSTRAINT, permission to use, copy, modify, and
 * distribute this software and its documentation for any purpose and
 * without fee is hereby granted, provided that the above copyright
 * notice appear in all copies and that both that copyright notice and
 * this permission notice appear in supporting documentation, and that
 * the name of M.I.T. not be used in advertising or publicity pertaining
 * to distribution of the software without specific, written prior
 * permission.  Furthermore if you modify this software you must label
 * your software as modified software and not distribute it in such a
 * fashion that it might be confused with the original M.I.T. software.
 * M.I.T. makes no representations about the suitability of
 * this software for any purpose.  It is provided "as is" without express
 * or implied warranty.
 *
 */

/*
 * inq_names.c - Return set of nametypes supported by the KRB5 mechanism.
 */
#include "gssapiP_krb5.h"

OM_uint32
krb5_gss_inquire_names_for_mech(minor_status, mechanism, name_types)
    OM_uint32	*minor_status;
    gss_OID	mechanism;
    gss_OID_set	*name_types;
{
    krb5_context context;
    OM_uint32	major, minor;

    if (GSS_ERROR(kg_get_context(minor_status, &context)))
       return(GSS_S_FAILURE);

    /*
     * We only know how to handle our own mechanism.
     */
    if ((mechanism != GSS_C_NULL_OID) &&
	!g_OID_equal(gss_mech_krb5_v2, mechanism) &&
	!g_OID_equal(gss_mech_krb5, mechanism) &&
	!g_OID_equal(gss_mech_krb5_old, mechanism)) {
	*minor_status = 0;
	return(GSS_S_BAD_MECH);
    }

    /* We're okay.  Create an empty OID set */
    major = gss_create_empty_oid_set(minor_status, name_types);
    if (major == GSS_S_COMPLETE) {
	/* Now add our members. */
	if (
	    ((major = gss_add_oid_set_member(minor_status,
					     (gss_OID) gss_nt_user_name,
					     name_types)
	      ) == GSS_S_COMPLETE) &&
	    ((major = gss_add_oid_set_member(minor_status,
					     (gss_OID) gss_nt_machine_uid_name,
					     name_types)
	      ) == GSS_S_COMPLETE) &&
	    ((major = gss_add_oid_set_member(minor_status,
					     (gss_OID) gss_nt_string_uid_name,
					     name_types)
	      ) == GSS_S_COMPLETE) &&
	    ((major = gss_add_oid_set_member(minor_status,
					     (gss_OID) gss_nt_service_name,
					     name_types)
	      ) == GSS_S_COMPLETE) &&
	    ((major = gss_add_oid_set_member(minor_status,
					     (gss_OID) gss_nt_service_name_v2,
					     name_types)
	      ) == GSS_S_COMPLETE) &&
	    ((major = gss_add_oid_set_member(minor_status,
					     (gss_OID) gss_nt_exported_name,
					     name_types)
	      ) == GSS_S_COMPLETE) &&
	    ((major = gss_add_oid_set_member(minor_status,
					     (gss_OID) gss_nt_krb5_name,
					     name_types)
	      ) == GSS_S_COMPLETE)
	    ) {
	    major = gss_add_oid_set_member(minor_status,
					   (gss_OID) gss_nt_krb5_principal,
					   name_types);
	}

	/*
	 * If we choked, then release the set, but don't overwrite the minor
	 * status with the release call.
	 */
	if (major != GSS_S_COMPLETE)
	    (void) gss_release_oid_set(&minor,
				       name_types);
    }
    return(major);
}