1 /* $NetBSD: gss_pname_to_uid.c,v 1.4 2023/06/19 21:41:43 christos Exp $ */
2
3 /*
4 * Copyright (c) 2011, PADL Software Pty Ltd.
5 * All rights reserved.
6 *
7 * Redistribution and use in source and binary forms, with or without
8 * modification, are permitted provided that the following conditions
9 * are met:
10 *
11 * 1. Redistributions of source code must retain the above copyright
12 * notice, this list of conditions and the following disclaimer.
13 *
14 * 2. Redistributions in binary form must reproduce the above copyright
15 * notice, this list of conditions and the following disclaimer in the
16 * documentation and/or other materials provided with the distribution.
17 *
18 * 3. Neither the name of PADL Software nor the names of its contributors
19 * may be used to endorse or promote products derived from this software
20 * without specific prior written permission.
21 *
22 * THIS SOFTWARE IS PROVIDED BY PADL SOFTWARE AND CONTRIBUTORS ``AS IS'' AND
23 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
24 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
25 * ARE DISCLAIMED. IN NO EVENT SHALL PADL SOFTWARE OR CONTRIBUTORS BE LIABLE
26 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
27 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
28 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
29 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
30 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
31 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
32 * SUCH DAMAGE.
33 */
34
35 #include "mech_locl.h"
36
37 static OM_uint32
mech_localname(OM_uint32 * minor_status,struct _gss_mechanism_name * mn,gss_buffer_t localname)38 mech_localname(OM_uint32 *minor_status,
39 struct _gss_mechanism_name *mn,
40 gss_buffer_t localname)
41 {
42 OM_uint32 major_status = GSS_S_UNAVAILABLE;
43
44 *minor_status = 0;
45
46 if (mn->gmn_mech->gm_localname == NULL)
47 return GSS_S_UNAVAILABLE;
48
49 major_status = mn->gmn_mech->gm_localname(minor_status,
50 mn->gmn_name,
51 mn->gmn_mech_oid,
52 localname);
53 if (GSS_ERROR(major_status))
54 _gss_mg_error(mn->gmn_mech, major_status, *minor_status);
55
56 return major_status;
57 }
58
59 static OM_uint32
attr_localname(OM_uint32 * minor_status,struct _gss_mechanism_name * mn,gss_buffer_t localname)60 attr_localname(OM_uint32 *minor_status,
61 struct _gss_mechanism_name *mn,
62 gss_buffer_t localname)
63 {
64 OM_uint32 major_status = GSS_S_UNAVAILABLE;
65 OM_uint32 tmpMinor;
66 gss_buffer_desc value = GSS_C_EMPTY_BUFFER;
67 gss_buffer_desc display_value = GSS_C_EMPTY_BUFFER;
68 int authenticated = 0, complete = 0;
69 int more = -1;
70
71 *minor_status = 0;
72
73 localname->length = 0;
74 localname->value = NULL;
75
76 if (mn->gmn_mech->gm_get_name_attribute == NULL)
77 return GSS_S_UNAVAILABLE;
78
79 major_status = mn->gmn_mech->gm_get_name_attribute(minor_status,
80 mn->gmn_name,
81 GSS_C_ATTR_LOCAL_LOGIN_USER,
82 &authenticated,
83 &complete,
84 &value,
85 &display_value,
86 &more);
87 if (GSS_ERROR(major_status)) {
88 _gss_mg_error(mn->gmn_mech, major_status, *minor_status);
89 return major_status;
90 }
91
92 if (authenticated) {
93 *localname = value;
94 } else {
95 major_status = GSS_S_UNAVAILABLE;
96 gss_release_buffer(&tmpMinor, &value);
97 }
98
99 gss_release_buffer(&tmpMinor, &display_value);
100
101 return major_status;
102 }
103
104 GSSAPI_LIB_FUNCTION OM_uint32 GSSAPI_LIB_CALL
gss_localname(OM_uint32 * minor_status,gss_const_name_t pname,const gss_OID mech_type,gss_buffer_t localname)105 gss_localname(OM_uint32 *minor_status,
106 gss_const_name_t pname,
107 const gss_OID mech_type,
108 gss_buffer_t localname)
109 {
110 OM_uint32 major_status = GSS_S_UNAVAILABLE;
111 struct _gss_name *name = (struct _gss_name *) pname;
112 struct _gss_mechanism_name *mn = NULL;
113
114 *minor_status = 0;
115
116 if (mech_type != GSS_C_NO_OID) {
117 major_status = _gss_find_mn(minor_status, name, mech_type, &mn);
118 if (GSS_ERROR(major_status))
119 return major_status;
120
121 major_status = mech_localname(minor_status, mn, localname);
122 if (major_status != GSS_S_COMPLETE)
123 major_status = attr_localname(minor_status, mn, localname);
124 } else {
125 HEIM_SLIST_FOREACH(mn, &name->gn_mn, gmn_link) {
126 major_status = mech_localname(minor_status, mn, localname);
127 if (major_status != GSS_S_COMPLETE)
128 major_status = attr_localname(minor_status, mn, localname);
129 if (major_status != GSS_S_UNAVAILABLE)
130 break;
131 }
132 }
133
134 if (major_status != GSS_S_COMPLETE && mn != NULL)
135 _gss_mg_error(mn->gmn_mech, major_status, *minor_status);
136
137 return major_status;
138 }
139
140
141 GSSAPI_LIB_FUNCTION OM_uint32 GSSAPI_LIB_CALL
gss_pname_to_uid(OM_uint32 * minor_status,gss_const_name_t pname,const gss_OID mech_type,uid_t * uidp)142 gss_pname_to_uid(OM_uint32 *minor_status,
143 gss_const_name_t pname,
144 const gss_OID mech_type,
145 uid_t *uidp)
146 {
147 #ifdef NO_LOCALNAME
148 return GSS_S_UNAVAILABLE;
149 #else
150 OM_uint32 major, tmpMinor;
151 gss_buffer_desc localname = GSS_C_EMPTY_BUFFER;
152 char *szLocalname;
153 char pwbuf[2048];
154 struct passwd pw, *pwd;
155
156 major = gss_localname(minor_status, pname, mech_type, &localname);
157 if (GSS_ERROR(major))
158 return major;
159 if (localname.length == 0) {
160 *minor_status = KRB5_NO_LOCALNAME;
161 return GSS_S_FAILURE;
162 }
163
164 szLocalname = malloc(localname.length + 1);
165 if (szLocalname == NULL) {
166 gss_release_buffer(&tmpMinor, &localname);
167 *minor_status = ENOMEM;
168 return GSS_S_FAILURE;
169 }
170
171 memcpy(szLocalname, localname.value, localname.length);
172 szLocalname[localname.length] = '\0';
173
174 if (rk_getpwnam_r(szLocalname, &pw, pwbuf, sizeof(pwbuf), &pwd) != 0)
175 pwd = NULL;
176
177 gss_release_buffer(&tmpMinor, &localname);
178 free(szLocalname);
179
180 *minor_status = 0;
181
182 if (pwd != NULL) {
183 *uidp = pwd->pw_uid;
184 major = GSS_S_COMPLETE;
185 } else {
186 major = GSS_S_UNAVAILABLE;
187 }
188
189 return major;
190 #endif
191 }
192