1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
|
/* Copyright (C) 2011,2012 the GSS-PROXY contributors, see COPYING for license */
#include "gp_rpc_process.h"
#include <gssapi/gssapi.h>
int gp_wrap(struct gp_call_ctx *gpcall,
union gp_rpc_arg *arg,
union gp_rpc_res *res)
{
gss_buffer_desc input_message_buffer = GSS_C_EMPTY_BUFFER;
gss_buffer_desc output_message_buffer = GSS_C_EMPTY_BUFFER;
gss_ctx_id_t context_handle = GSS_C_NO_CONTEXT;
struct gssx_arg_wrap *wa;
struct gssx_res_wrap *wr;
uint32_t ret_maj;
uint32_t ret_min;
int ret;
int exp_ctx_type;
int conf_state = 0;
wa = &arg->wrap;
wr = &res->wrap;
GPRPCDEBUG(gssx_arg_wrap, wa);
exp_ctx_type = gp_get_exported_context_type(&wa->call_ctx);
if (exp_ctx_type == -1) {
ret_maj = GSS_S_FAILURE;
ret_min = EINVAL;
goto done;
}
ret_maj = gp_import_gssx_to_ctx_id(&ret_min, 0,
&wa->context_handle,
&context_handle);
if (ret_maj) {
goto done;
}
/* apparently it is ok to send an empty message, in that case we dont need
* to bother to do any conversion - gd */
if ((wa->message_buffer.message_buffer_len > 0) &&
(wa->message_buffer.message_buffer_val != NULL)) {
gp_conv_gssx_to_buffer(&wa->message_buffer.message_buffer_val[0],
&input_message_buffer);
}
ret_maj = gss_wrap(&ret_min,
context_handle,
wa->conf_req,
wa->qop_state,
&input_message_buffer,
&conf_state,
&output_message_buffer);
if (ret_maj) {
goto done;
}
wr->context_handle = calloc(1, sizeof(gssx_ctx));
if (!wr->context_handle) {
ret_maj = GSS_S_FAILURE;
ret_min = ENOMEM;
goto done;
}
ret_maj = gp_export_ctx_id_to_gssx(&ret_min, exp_ctx_type, GSS_C_NO_OID,
&context_handle, wr->context_handle);
if (ret_maj) {
goto done;
}
wr->qop_state = malloc(sizeof(gssx_qop));
if (!wr->qop_state) {
ret_maj = GSS_S_FAILURE;
ret_min = ENOMEM;
goto done;
}
*wr->qop_state = wa->qop_state;
wr->conf_state = malloc(sizeof(bool_t));
if (!wr->conf_state) {
ret_maj = GSS_S_FAILURE;
ret_min = ENOMEM;
goto done;
}
*wr->conf_state = conf_state;
wr->token_buffer.token_buffer_val = calloc(1, sizeof(gssx_buffer));
if (!wr->token_buffer.token_buffer_val) {
ret_maj = GSS_S_FAILURE;
ret_min = ENOMEM;
goto done;
}
wr->token_buffer.token_buffer_len = 1;
ret = gp_conv_buffer_to_gssx(&output_message_buffer,
&wr->token_buffer.token_buffer_val[0]);
if (ret ) {
ret_maj = GSS_S_FAILURE;
ret_min = ret;
goto done;
}
ret_maj = GSS_S_COMPLETE;
ret_min = 0;
done:
ret = gp_conv_status_to_gssx(&wa->call_ctx, ret_maj, ret_min,
GSS_C_NO_OID, &wr->status);
GPRPCDEBUG(gssx_res_wrap, wr);
gss_release_buffer(&ret_min, &output_message_buffer);
return ret;
}
|
