1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
|
/*
* Copyright 2004 Sun Microsystems, Inc. All rights reserved.
* Use is subject to license terms.
*/
/* #pragma ident "@(#)g_userok.c 1.1 04/03/25 SMI" */
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <unistd.h>
#include <mglueP.h>
#include <gssapi/gssapi.h>
static OM_uint32
compare_names(OM_uint32 *minor,
const gss_OID mech_type,
const gss_name_t name,
const char *user,
int *user_ok)
{
OM_uint32 status, tmpMinor;
gss_name_t imported_name;
gss_name_t canon_name;
gss_buffer_desc gss_user;
int match = 0;
*user_ok = 0;
gss_user.value = (void *)user;
if (!gss_user.value || !name || !mech_type)
return (GSS_S_BAD_NAME);
gss_user.length = strlen(gss_user.value);
status = gss_import_name(minor,
&gss_user,
GSS_C_NT_USER_NAME,
&imported_name);
if (status != GSS_S_COMPLETE) {
goto out;
}
status = gss_canonicalize_name(minor,
imported_name,
mech_type,
&canon_name);
if (status != GSS_S_COMPLETE) {
(void) gss_release_name(&tmpMinor, &imported_name);
goto out;
}
status = gss_compare_name(minor,
canon_name,
name,
&match);
(void) gss_release_name(&tmpMinor, &canon_name);
(void) gss_release_name(&tmpMinor, &imported_name);
if (status == GSS_S_COMPLETE) {
if (match)
*user_ok = 1; /* remote user is a-ok */
}
out:
return (status);
}
OM_uint32
gssint_userok(OM_uint32 *minor,
const gss_name_t name,
const char *user,
int *user_ok)
{
gss_mechanism mech;
gss_union_name_t intName;
gss_name_t mechName = NULL;
OM_uint32 major;
if (minor == NULL || user_ok == NULL)
return (GSS_S_CALL_INACCESSIBLE_WRITE);
if (name == NULL || user == NULL)
return (GSS_S_CALL_INACCESSIBLE_READ);
*user_ok = 0;
*minor = GSS_S_COMPLETE;
intName = (gss_union_name_t)name;
mech = gssint_get_mechanism(intName->mech_type);
if (mech == NULL)
return (GSS_S_UNAVAILABLE);
/* may need to import the name if this is not MN */
if (intName->mech_type == NULL) {
return (GSS_S_FAILURE);
} else
mechName = intName->mech_name;
if (mech->gssint_userok) {
major = mech->gssint_userok(minor, mechName,
user, user_ok);
if (major != GSS_S_COMPLETE)
map_error(minor_status, mech);
} else
major = compare_names(minor, intName->mech_type,
name, user, user_ok);
return (major);
} /* gss_userok */
|
