1 /*
2 * Copyright (c) 2006 Kungliga Tekniska Högskolan
3 * (Royal Institute of Technology, Stockholm, Sweden).
4 * All rights reserved.
5 *
6 * Portions Copyright (c) 2009 Apple Inc. All rights reserved.
7 *
8 * Redistribution and use in source and binary forms, with or without
9 * modification, are permitted provided that the following conditions
10 * are met:
11 *
12 * 1. Redistributions of source code must retain the above copyright
13 * notice, this list of conditions and the following disclaimer.
14 *
15 * 2. Redistributions in binary form must reproduce the above copyright
16 * notice, this list of conditions and the following disclaimer in the
17 * documentation and/or other materials provided with the distribution.
18 *
19 * 3. Neither the name of the Institute nor the names of its contributors
20 * may be used to endorse or promote products derived from this software
21 * without specific prior written permission.
22 *
23 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
24 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
25 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
26 * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
27 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
28 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
29 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
30 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
31 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
32 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
33 * SUCH DAMAGE.
34 */
35
36 #include "ntlm.h"
37
38 OM_uint32 GSSAPI_CALLCONV
_gss_ntlm_inquire_cred(OM_uint32 * minor_status,const gss_cred_id_t cred_handle,gss_name_t * name,OM_uint32 * lifetime,gss_cred_usage_t * cred_usage,gss_OID_set * mechanisms)39 _gss_ntlm_inquire_cred
40 (OM_uint32 * minor_status,
41 const gss_cred_id_t cred_handle,
42 gss_name_t * name,
43 OM_uint32 * lifetime,
44 gss_cred_usage_t * cred_usage,
45 gss_OID_set * mechanisms
46 )
47 {
48 OM_uint32 ret, junk;
49
50 *minor_status = 0;
51
52 if (cred_handle == NULL)
53 return GSS_S_NO_CRED;
54
55 if (name) {
56 ntlm_name n = calloc(1, sizeof(*n));
57 ntlm_cred c = (ntlm_cred)cred_handle;
58 if (n) {
59 n->user = strdup(c->username);
60 n->domain = strdup(c->domain);
61 }
62 if (n == NULL || n->user == NULL || n->domain == NULL) {
63 if (n)
64 free(n->user);
65 *minor_status = ENOMEM;
66 return GSS_S_FAILURE;
67 }
68 *name = (gss_name_t)n;
69 }
70 if (lifetime)
71 *lifetime = GSS_C_INDEFINITE;
72 if (cred_usage)
73 *cred_usage = 0;
74 if (mechanisms)
75 *mechanisms = GSS_C_NO_OID_SET;
76
77 if (cred_handle == GSS_C_NO_CREDENTIAL)
78 return GSS_S_NO_CRED;
79
80 if (mechanisms) {
81 ret = gss_create_empty_oid_set(minor_status, mechanisms);
82 if (ret)
83 goto out;
84 ret = gss_add_oid_set_member(minor_status,
85 GSS_NTLM_MECHANISM,
86 mechanisms);
87 if (ret)
88 goto out;
89 }
90
91 return GSS_S_COMPLETE;
92 out:
93 gss_release_oid_set(&junk, mechanisms);
94 return ret;
95 }
96
97 #ifdef HAVE_KCM
98 static OM_uint32
_gss_ntlm_destroy_kcm_cred(gss_cred_id_t * cred_handle)99 _gss_ntlm_destroy_kcm_cred(gss_cred_id_t *cred_handle)
100 {
101 krb5_storage *request, *response;
102 krb5_data response_data;
103 krb5_context context;
104 krb5_error_code ret;
105 ntlm_cred cred;
106
107 cred = (ntlm_cred)*cred_handle;
108
109 ret = krb5_init_context(&context);
110 if (ret)
111 return ret;
112
113 ret = krb5_kcm_storage_request(context, KCM_OP_DEL_NTLM_CRED, &request);
114 if (ret)
115 goto out;
116
117 ret = krb5_store_stringz(request, cred->username);
118 if (ret)
119 goto out;
120
121 ret = krb5_store_stringz(request, cred->domain);
122 if (ret)
123 goto out;
124
125 ret = krb5_kcm_call(context, request, &response, &response_data);
126 if (ret)
127 goto out;
128
129 krb5_storage_free(request);
130 krb5_storage_free(response);
131 krb5_data_free(&response_data);
132
133 out:
134 krb5_free_context(context);
135
136 return ret;
137 }
138 #endif /* HAVE_KCM */
139
140 OM_uint32 GSSAPI_CALLCONV
_gss_ntlm_destroy_cred(OM_uint32 * minor_status,gss_cred_id_t * cred_handle)141 _gss_ntlm_destroy_cred(OM_uint32 *minor_status,
142 gss_cred_id_t *cred_handle)
143 {
144 #ifdef HAVE_KCM
145 krb5_error_code ret;
146 #endif
147
148 if (cred_handle == NULL || *cred_handle == GSS_C_NO_CREDENTIAL)
149 return GSS_S_COMPLETE;
150
151 #ifdef HAVE_KCM
152 ret = _gss_ntlm_destroy_kcm_cred(cred_handle);
153 if (ret) {
154 *minor_status = ret;
155 return GSS_S_FAILURE;
156 }
157 #endif
158
159 return _gss_ntlm_release_cred(minor_status, cred_handle);
160 }
161