1 /* $NetBSD: creds.c,v 1.1.1.1 2011/04/13 18:14:47 elric Exp $ */ 2 3 /* 4 * Copyright (c) 2006 Kungliga Tekniska Högskolan 5 * (Royal Institute of Technology, Stockholm, Sweden). 6 * All rights reserved. 7 * 8 * Portions Copyright (c) 2009 Apple Inc. All rights reserved. 9 * 10 * Redistribution and use in source and binary forms, with or without 11 * modification, are permitted provided that the following conditions 12 * are met: 13 * 14 * 1. Redistributions of source code must retain the above copyright 15 * notice, this list of conditions and the following disclaimer. 16 * 17 * 2. Redistributions in binary form must reproduce the above copyright 18 * notice, this list of conditions and the following disclaimer in the 19 * documentation and/or other materials provided with the distribution. 20 * 21 * 3. Neither the name of the Institute nor the names of its contributors 22 * may be used to endorse or promote products derived from this software 23 * without specific prior written permission. 24 * 25 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND 26 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 27 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 28 * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE 29 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 30 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 31 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 32 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 33 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 34 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 35 * SUCH DAMAGE. 36 */ 37 38 #include "ntlm.h" 39 40 OM_uint32 _gss_ntlm_inquire_cred 41 (OM_uint32 * minor_status, 42 const gss_cred_id_t cred_handle, 43 gss_name_t * name, 44 OM_uint32 * lifetime, 45 gss_cred_usage_t * cred_usage, 46 gss_OID_set * mechanisms 47 ) 48 { 49 OM_uint32 ret, junk; 50 51 *minor_status = 0; 52 53 if (cred_handle == NULL) 54 return GSS_S_NO_CRED; 55 56 if (name) { 57 ret = _gss_ntlm_duplicate_name(minor_status, 58 (gss_name_t)cred_handle, 59 name); 60 if (ret) 61 goto out; 62 } 63 if (lifetime) 64 *lifetime = GSS_C_INDEFINITE; 65 if (cred_usage) 66 *cred_usage = 0; 67 if (mechanisms) 68 *mechanisms = GSS_C_NO_OID_SET; 69 70 if (cred_handle == GSS_C_NO_CREDENTIAL) 71 return GSS_S_NO_CRED; 72 73 if (mechanisms) { 74 ret = gss_create_empty_oid_set(minor_status, mechanisms); 75 if (ret) 76 goto out; 77 ret = gss_add_oid_set_member(minor_status, 78 GSS_NTLM_MECHANISM, 79 mechanisms); 80 if (ret) 81 goto out; 82 } 83 84 return GSS_S_COMPLETE; 85 out: 86 gss_release_oid_set(&junk, mechanisms); 87 return ret; 88 } 89 90 OM_uint32 91 _gss_ntlm_destroy_cred(OM_uint32 *minor_status, 92 gss_cred_id_t *cred_handle) 93 { 94 krb5_error_code ret; 95 krb5_storage *request, *response; 96 krb5_data response_data; 97 krb5_context context; 98 ntlm_cred cred; 99 100 if (cred_handle == NULL || *cred_handle == GSS_C_NO_CREDENTIAL) 101 return GSS_S_COMPLETE; 102 103 cred = (ntlm_cred)*cred_handle; 104 105 ret = krb5_init_context(&context); 106 if (ret) { 107 *minor_status = ret; 108 return GSS_S_FAILURE; 109 } 110 111 ret = krb5_kcm_storage_request(context, KCM_OP_DEL_NTLM_CRED, &request); 112 if (ret) 113 goto out; 114 115 ret = krb5_store_stringz(request, cred->username); 116 if (ret) 117 goto out; 118 119 ret = krb5_store_stringz(request, cred->domain); 120 if (ret) 121 goto out; 122 123 ret = krb5_kcm_call(context, request, &response, &response_data); 124 if (ret) 125 goto out; 126 127 krb5_storage_free(request); 128 krb5_storage_free(response); 129 krb5_data_free(&response_data); 130 131 out: 132 krb5_free_context(context); 133 if (ret) { 134 *minor_status = ret; 135 return GSS_S_FAILURE; 136 } 137 138 return _gss_ntlm_release_cred(minor_status, cred_handle); 139 } 140