2N/A/*
2N/A * CDDL HEADER START
2N/A *
2N/A * The contents of this file are subject to the terms of the
2N/A * Common Development and Distribution License (the "License").
2N/A * You may not use this file except in compliance with the License.
2N/A *
2N/A * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
2N/A * or http://www.opensolaris.org/os/licensing.
2N/A * See the License for the specific language governing permissions
2N/A * and limitations under the License.
2N/A *
2N/A * When distributing Covered Code, include this CDDL HEADER in each
2N/A * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
2N/A * If applicable, add the following below this CDDL HEADER, with the
2N/A * fields enclosed by brackets "[]" replaced with your own identifying
2N/A * information: Portions Copyright [yyyy] [name of copyright owner]
2N/A *
2N/A * CDDL HEADER END
2N/A */
2N/A/*
2N/A * Copyright (c) 1999, 2011, Oracle and/or its affiliates. All rights reserved.
2N/A */
2N/A
2N/A/*
2N/A * glue routine for gss_store_cred
2N/A */
2N/A
2N/A#include <mglueP.h>
2N/A#include "gssapiP_generic.h"
2N/A#include <errno.h>
2N/A
2N/Astatic OM_uint32
2N/Aval_store_cred_args(
2N/A OM_uint32 *minor_status,
2N/A const gss_cred_id_t input_cred_handle,
2N/A gss_cred_usage_t cred_usage,
2N/A /*LINTED*/
2N/A const gss_OID desired_mech,
2N/A /*LINTED*/
2N/A OM_uint32 overwrite_cred,
2N/A /*LINTED*/
2N/A OM_uint32 default_cred,
2N/A gss_OID_set *elements_stored,
2N/A /*LINTED*/
2N/A gss_cred_usage_t *cred_usage_stored)
2N/A{
2N/A
2N/A /* Initialize outputs. */
2N/A
2N/A if (minor_status != NULL)
2N/A *minor_status = 0;
2N/A
2N/A if (elements_stored != NULL)
2N/A *elements_stored = GSS_C_NULL_OID_SET;
2N/A
2N/A /* Validate arguments. */
2N/A
2N/A if (minor_status == NULL)
2N/A return (GSS_S_CALL_INACCESSIBLE_WRITE);
2N/A
2N/A if (input_cred_handle == GSS_C_NO_CREDENTIAL)
2N/A return (GSS_S_CALL_INACCESSIBLE_READ | GSS_S_NO_CRED);
2N/A
2N/A if (cred_usage != GSS_C_ACCEPT &&
2N/A cred_usage != GSS_C_INITIATE &&
2N/A cred_usage != GSS_C_BOTH) {
2N/A if (minor_status) {
2N/A *minor_status = EINVAL;
2N/A map_errcode(minor_status);
2N/A }
2N/A return (GSS_S_FAILURE);
2N/A }
2N/A
2N/A return (GSS_S_COMPLETE);
2N/A}
2N/A
2N/AOM_uint32 gss_store_cred(minor_status,
2N/A input_cred_handle,
2N/A cred_usage,
2N/A desired_mech,
2N/A overwrite_cred,
2N/A default_cred,
2N/A elements_stored,
2N/A cred_usage_stored)
2N/A
2N/AOM_uint32 *minor_status;
2N/Aconst gss_cred_id_t input_cred_handle;
2N/Agss_cred_usage_t cred_usage;
2N/Aconst gss_OID desired_mech;
2N/AOM_uint32 overwrite_cred;
2N/AOM_uint32 default_cred;
2N/Agss_OID_set *elements_stored;
2N/Agss_cred_usage_t *cred_usage_stored;
2N/A
2N/A{
2N/A OM_uint32 major_status = GSS_S_FAILURE;
2N/A gss_union_cred_t union_cred;
2N/A gss_cred_id_t mech_cred;
2N/A gss_mechanism mech;
2N/A gss_OID dmech;
2N/A int i;
2N/A
2N/A major_status = val_store_cred_args(minor_status,
2N/A input_cred_handle,
2N/A cred_usage,
2N/A desired_mech,
2N/A overwrite_cred,
2N/A default_cred,
2N/A elements_stored,
2N/A cred_usage_stored);
2N/A if (major_status != GSS_S_COMPLETE)
2N/A return (major_status);
2N/A
2N/A /* Initial value needed below. */
2N/A major_status = GSS_S_FAILURE;
2N/A
2N/A if (cred_usage_stored != NULL)
2N/A *cred_usage_stored = GSS_C_BOTH; /* there's no GSS_C_NEITHER */
2N/A
2N/A union_cred = (gss_union_cred_t)input_cred_handle;
2N/A
2N/A /* desired_mech != GSS_C_NULL_OID -> store one element */
2N/A if (desired_mech != GSS_C_NULL_OID) {
2N/A mech = __gss_get_mechanism(desired_mech);
2N/A if (mech == NULL)
2N/A return (GSS_S_BAD_MECH);
2N/A
2N/A if (mech->gss_store_cred == NULL)
2N/A return (major_status);
2N/A
2N/A mech_cred = __gss_get_mechanism_cred(union_cred, desired_mech);
2N/A if (mech_cred == GSS_C_NO_CREDENTIAL)
2N/A return (GSS_S_NO_CRED);
2N/A
2N/A major_status = mech->gss_store_cred(minor_status,
2N/A (gss_cred_id_t)mech_cred,
2N/A cred_usage,
2N/A desired_mech,
2N/A overwrite_cred,
2N/A default_cred,
2N/A elements_stored,
2N/A cred_usage_stored);
2N/A if (major_status != GSS_S_COMPLETE)
2N/A map_error(minor_status, mech);
2N/A return (major_status);
2N/A }
2N/A
2N/A /* desired_mech == GSS_C_NULL_OID -> store all elements */
2N/A
2N/A *minor_status = 0;
2N/A
2N/A for (i = 0; i < union_cred->count; i++) {
2N/A /* Get mech and cred element */
2N/A dmech = &union_cred->mechs_array[i];
2N/A mech = __gss_get_mechanism(dmech);
2N/A if (mech == NULL)
2N/A continue;
2N/A
2N/A if (mech->gss_store_cred == NULL)
2N/A continue;
2N/A
2N/A mech_cred = __gss_get_mechanism_cred(union_cred, dmech);
2N/A if (mech_cred == GSS_C_NO_CREDENTIAL)
2N/A continue; /* can't happen, but safe to ignore */
2N/A
2N/A major_status = mech->gss_store_cred(minor_status,
2N/A (gss_cred_id_t)mech_cred,
2N/A cred_usage,
2N/A dmech,
2N/A overwrite_cred,
2N/A default_cred,
2N/A NULL,
2N/A cred_usage_stored);
2N/A if (major_status != GSS_S_COMPLETE) {
2N/A map_error(minor_status, mech);
2N/A continue;
2N/A }
2N/A
2N/A /* Succeeded for at least one mech */
2N/A
2N/A if (elements_stored == NULL)
2N/A continue;
2N/A
2N/A if (*elements_stored == GSS_C_NULL_OID_SET) {
2N/A major_status = gss_create_empty_oid_set(minor_status,
2N/A elements_stored);
2N/A
2N/A if (GSS_ERROR(major_status))
2N/A return (major_status);
2N/A }
2N/A
2N/A major_status = gss_add_oid_set_member(minor_status, dmech,
2N/A elements_stored);
2N/A
2N/A /* The caller should clean up elements_stored */
2N/A if (GSS_ERROR(major_status))
2N/A return (major_status);
2N/A }
2N/A
2N/A /*
2N/A * Success with some mechs may mask failure with others, but
2N/A * that's what elements_stored is for.
2N/A */
2N/A return (major_status);
2N/A}