1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
|
/* -*- mode: c; c-basic-offset: 4; indent-tabs-mode: nil -*- */
/* tests/gssapi/t_inq_cred.c - Test program for gss_inquire_cred behavior */
/*
* Copyright 2012 by the Massachusetts Institute of Technology.
* All Rights Reserved.
*
* Export of this software from the United States of America may
* require a specific license from the United States Government.
* It is the responsibility of any person or organization contemplating
* export to obtain such a license before exporting.
*
* WITHIN THAT CONSTRAINT, permission to use, copy, modify, and
* distribute this software and its documentation for any purpose and
* without fee is hereby granted, provided that the above copyright
* notice appear in all copies and that both that copyright notice and
* this permission notice appear in supporting documentation, and that
* the name of M.I.T. not be used in advertising or publicity pertaining
* to distribution of the software without specific, written prior
* permission. Furthermore if you modify this software you must label
* your software as modified software and not distribute it in such a
* fashion that it might be confused with the original M.I.T. software.
* M.I.T. makes no representations about the suitability of
* this software for any purpose. It is provided "as is" without express
* or implied warranty.
*/
/*
* Test program for gss_inquire_cred, intended to be run from a Python test
* script. Acquires credentials, inquires them, and prints the resulting name
* and lifetime.
*
* Usage: ./t_inq_cred [-k|-s] [-a|-b|-i] [initiatorname]
*
* By default no mechanism is specified when acquiring credentials; -k
* indicates the krb5 mech and -s indicates SPNEGO. By default or with -i,
* initiator credentials are acquired; -a indicates acceptor credentials and -b
* indicates credentials of both types. The credential is acquired with no
* name by default; a krb5 principal name or host-based name (prefixed with
* "gss:") may be supplied as an argument.
*/
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include "common.h"
static void
usage(void)
{
fprintf(stderr,
"Usage: t_inq_cred [-k|-s] [-a|-b|-i] [princ|gss:service@host]\n");
exit(1);
}
int
main(int argc, char *argv[])
{
OM_uint32 minor, major, lifetime;
gss_cred_usage_t cred_usage = GSS_C_INITIATE;
gss_OID_set mechs = GSS_C_NO_OID_SET;
gss_cred_id_t cred = GSS_C_NO_CREDENTIAL;
gss_name_t name = GSS_C_NO_NAME;
gss_buffer_desc buf;
const char *name_arg = NULL;
char opt;
while (argc > 1 && argv[1][0] == '-') {
opt = argv[1][1];
argc--, argv++;
if (opt == 'a')
cred_usage = GSS_C_ACCEPT;
else if (opt == 'b')
cred_usage = GSS_C_BOTH;
else if (opt == 'i')
cred_usage = GSS_C_INITIATE;
else if (opt == 'k')
mechs = &mechset_krb5;
else if (opt == 's')
mechs = &mechset_spnego;
else
usage();
}
if (argc > 2)
usage();
if (argc > 1)
name_arg = argv[1];
/* Import the name, if given. */
if (name_arg != NULL)
name = import_name(name_arg);
/* Acquire a credential. */
major = gss_acquire_cred(&minor, name, GSS_C_INDEFINITE, mechs, cred_usage,
&cred, NULL, NULL);
check_gsserr("gss_acquire_cred", major, minor);
/* Inquire about the credential. */
(void)gss_release_name(&minor, &name);
major = gss_inquire_cred(&minor, cred, &name, &lifetime, NULL, NULL);
check_gsserr("gss_inquire_cred", major, minor);
/* Get a display form of the name. */
buf.value = NULL;
buf.length = 0;
major = gss_display_name(&minor, name, &buf, NULL);
check_gsserr("gss_display_name", major, minor);
printf("name: %.*s\n", (int)buf.length, (char *)buf.value);
printf("lifetime: %d\n", (int)lifetime);
(void)gss_release_cred(&minor, &cred);
(void)gss_release_name(&minor, &name);
(void)gss_release_buffer(&minor, &buf);
return 0;
}
|
