1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
|
/*
* Copyright 1993 by OpenVision Technologies, Inc.
*
* Permission to use, copy, modify, distribute, and sell this software
* and its documentation for any purpose is hereby granted without fee,
* provided that the above copyright notice appears in all copies and
* that both that copyright notice and this permission notice appear in
* supporting documentation, and that the name of OpenVision not be used
* in advertising or publicity pertaining to distribution of the software
* without specific, written prior permission. OpenVision makes no
* representations about the suitability of this software for any
* purpose. It is provided "as is" without express or implied warranty.
*
* OPENVISION DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE,
* INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS, IN NO
* EVENT SHALL OPENVISION BE LIABLE FOR ANY SPECIAL, INDIRECT OR
* CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF
* USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
* OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
* PERFORMANCE OF THIS SOFTWARE.
*/
#include "gssapiP_krb5.h"
/** exported constants defined in gssapi_krb5.h **/
/* these are bogus, but will compile */
/*
* The OID of the krb5 mechanism, assigned by IETF, is:
* 1.3.5.1.5.2
* The OID of the krb5_name type is:
* iso(1) member-body(2) US(840) mit(113554) infosys(1) gssapi(2)
* krb5(2) krb5_name(1) = 1.2.840.113554.2.1.2.1
* The OID of the krb5_principal type is:
* iso(1) member-body(2) US(840) mit(113554) infosys(1) gssapi(2)
* krb5(2) krb5_principal(2) = 1.2.840.113554.2.1.2.2
*/
/*
* Encoding rules: The first two values are encoded in one byte as 40
* * value1 + value2. Subsequent values are encoded base 128, most
* significant digit first, with the high bit set on all octets except
* the last in each value's encoding.
*/
static const gss_OID_desc oids[] = {
/* this OID is from Ted. It's not official yet, but it's close. */
{5, "\053\005\001\005\002"},
{10, "\052\206\110\206\367\022\001\002\002\001"},
{10, "\052\206\110\206\367\022\001\002\002\002"},
};
const gss_OID_desc * const gss_mech_krb5 = oids+0;
const gss_OID_desc * const gss_nt_krb5_name = oids+1;
const gss_OID_desc * const gss_nt_krb5_principal = oids+2;
static const gss_OID_set_desc oidsets[] = {
{1, (gss_OID) oids},
};
const gss_OID_set_desc * const gss_mech_set_krb5 = oidsets+0;
krb5_context kg_context;
void *kg_vdb = NULL;
/** default credential support */
/* default credentials */
static gss_cred_id_t defcred = GSS_C_NO_CREDENTIAL;
/* XXX what happens when the default credentials expire or are invalidated? */
OM_uint32
kg_get_defcred(minor_status, cred)
OM_uint32 *minor_status;
gss_cred_id_t *cred;
{
if (defcred == GSS_C_NO_CREDENTIAL) {
OM_uint32 major;
if (!kg_context && kg_get_context())
return GSS_S_FAILURE;
if ((major = krb5_gss_acquire_cred(kg_context, minor_status,
(gss_name_t) NULL, GSS_C_INDEFINITE,
GSS_C_NULL_OID_SET, GSS_C_INITIATE,
&defcred, NULL, NULL)) &&
GSS_ERROR(major)) {
defcred = GSS_C_NO_CREDENTIAL;
return(major);
}
}
*cred = defcred;
*minor_status = 0;
return(GSS_S_COMPLETE);
}
OM_uint32
kg_release_defcred(minor_status)
OM_uint32 *minor_status;
{
if (defcred == GSS_C_NO_CREDENTIAL) {
*minor_status = 0;
return(GSS_S_COMPLETE);
}
if (!kg_context && kg_get_context())
return GSS_S_FAILURE;
return(krb5_gss_release_cred(kg_context, minor_status, &defcred));
}
OM_uint32
kg_get_context()
{
if (kg_context)
return GSS_S_COMPLETE;
if (krb5_init_context(&kg_context))
return GSS_S_FAILURE;
krb5_init_ets(kg_context);
return GSS_S_COMPLETE;
}
|
