1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
|
/*
* Copyright 1993 by OpenVision Technologies, Inc.
*
* Permission to use, copy, modify, distribute, and sell this software
* and its documentation for any purpose is hereby granted without fee,
* provided that the above copyright notice appears in all copies and
* that both that copyright notice and this permission notice appear in
* supporting documentation, and that the name of OpenVision not be used
* in advertising or publicity pertaining to distribution of the software
* without specific, written prior permission. OpenVision makes no
* representations about the suitability of this software for any
* purpose. It is provided "as is" without express or implied warranty.
*
* OPENVISION DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE,
* INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS, IN NO
* EVENT SHALL OPENVISION BE LIABLE FOR ANY SPECIAL, INDIRECT OR
* CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF
* USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
* OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
* PERFORMANCE OF THIS SOFTWARE.
*/
#include "gssapiP_krb5.h"
/*
* $Id$
*/
OM_uint32
krb5_gss_inquire_cred(minor_status, cred_handle, name, lifetime_ret,
cred_usage, mechanisms)
OM_uint32 *minor_status;
gss_cred_id_t cred_handle;
gss_name_t *name;
OM_uint32 *lifetime_ret;
int *cred_usage;
gss_OID_set *mechanisms;
{
krb5_gss_cred_id_t cred;
krb5_error_code code;
krb5_timestamp now;
krb5_deltat lifetime;
krb5_principal ret_name;
gss_OID_set mechs;
if (name) *name = NULL;
if (mechanisms) *mechanisms = NULL;
/* check for default credential */
/*SUPPRESS 29*/
if (cred_handle == GSS_C_NO_CREDENTIAL) {
OM_uint32 major;
if ((major = kg_get_defcred(minor_status, &cred_handle)) &&
GSS_ERROR(major)) {
return(major);
}
} else {
if (! kg_validate_cred_id(cred_handle)) {
*minor_status = G_VALIDATE_FAILED;
return(GSS_S_CALL_BAD_STRUCTURE|GSS_S_NO_CRED);
}
}
cred = (krb5_gss_cred_id_t) cred_handle;
if (code = krb5_timeofday(&now)) {
*minor_status = code;
return(GSS_S_FAILURE);
}
if ((lifetime = cred->tgt_expire - now) < 0)
lifetime = 0;
if (name) {
if (code = krb5_copy_principal(cred->princ, &ret_name)) {
*minor_status = code;
return(GSS_S_FAILURE);
}
}
if (mechanisms)
if (! g_copy_OID_set(gss_mech_set_krb5, &mechs)) {
krb5_free_principal(ret_name);
*minor_status = ENOMEM;
return(GSS_S_FAILURE);
}
if (name) {
if (! kg_save_name((gss_name_t) ret_name)) {
(void)gss_release_oid_set(minor_status, &mechs);
krb5_free_principal(ret_name);
*minor_status = G_VALIDATE_FAILED;
return(GSS_S_FAILURE);
}
*name = (gss_name_t) ret_name;
}
if (lifetime_ret)
*lifetime_ret = lifetime;
if (cred_usage)
*cred_usage = cred->usage;
if (mechanisms)
*mechanisms = mechs;
*minor_status = 0;
return((lifetime == 0)?GSS_S_CREDENTIALS_EXPIRED:GSS_S_COMPLETE);
}
|
