1 /*
2  * Copyright 2009 Sun Microsystems, Inc.  All rights reserved.
3  * Use is subject to license terms.
4  */
5 
6 /*
7  * Copyright 1993 by OpenVision Technologies, Inc.
8  *
9  * Permission to use, copy, modify, distribute, and sell this software
10  * and its documentation for any purpose is hereby granted without fee,
11  * provided that the above copyright notice appears in all copies and
12  * that both that copyright notice and this permission notice appear in
13  * supporting documentation, and that the name of OpenVision not be used
14  * in advertising or publicity pertaining to distribution of the software
15  * without specific, written prior permission. OpenVision makes no
16  * representations about the suitability of this software for any
17  * purpose.  It is provided "as is" without express or implied warranty.
18  *
19  * OPENVISION DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE,
20  * INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS, IN NO
21  * EVENT SHALL OPENVISION BE LIABLE FOR ANY SPECIAL, INDIRECT OR
22  * CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF
23  * USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
24  * OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
25  * PERFORMANCE OF THIS SOFTWARE.
26  */
27 
28 #include <mechglueP.h>
29 
30 /*
31  * See krb5/gssapi_krb5.c for a description of the algorithm for
32  * encoding an object identifier.
33  */
34 
35 /*
36  * The OID of user_name is(gss_nt_user_name, GSS_C_NT_USER_NAME):
37  * 	iso(1) member-body(2) US(840) mit(113554) infosys(1) gssapi(2)
38  * 	generic(1) user_name(1) = 1.2.840.113554.1.2.1.1
39  * machine_uid_name(gss_nt_machine_uid_name, GSS_C_NT_MACHINE_UID_NAME):
40  * 	iso(1) member-body(2) US(840) mit(113554) infosys(1) gssapi(2)
41  * 	generic(1) machine_uid_name(2) = 1.2.840.113554.1.2.1.2
42  * string_uid_name(gss_nt_string_uid_name,GSS_C_NT_STRING_UID_NAME):
43  * 	iso(1) member-body(2) US(840) mit(113554) infosys(1) gssapi(2)
44  * 	generic(1) string_uid_name(3) = 1.2.840.113554.1.2.1.3
45  * service_name(gss_nt_service_name):
46  * 	iso(1) member-body(2) US(840) mit(113554) infosys(1) gssapi(2)
47  * 	generic(1) service_name(4) = 1.2.840.113554.1.2.1.4
48  * hostbased_service_name(GSS_C_NT_HOSTBASED_SERVICE)
49  * 	iso(1) org(3) dod(6) 1(internet) 5(security) 6(nametypes)
50  *   	2(gss-host-based-services) == 1.3.6.1.5.6.2
51  * anonymous_name(GSS_C_NT_ANONYMOUS)
52  * 	iso(1) org(3) dod(6) 1(internet) 5(security) 6(nametypes)
53  *   	3(anonymous) = 1.3.6.1.5.6.3
54  * export_name(GSS_C_NT_EXPORT)
55  * 	iso(1) org(3) dod(6) 1(internet) 5(security) 6(nametypes)
56  *   	4(export) = 1.3.6.1.5.6.4
57  */
58 
59 static const gss_OID_desc oids[] = {
60 	/* GSS_C_NT_USER_NAME */
61 	{10, "\052\206\110\206\367\022\001\002\001\001"},
62 	/* GSS_C_NT_MACHINE_UID_NAME */
63 	{10, "\052\206\110\206\367\022\001\002\001\002"},
64 	/* GSS_C_NT_STRING_UID_NAME */
65 	{10, "\052\206\110\206\367\022\001\002\001\003"},
66 	/* gss_nt_service_name */
67 	{10, "\052\206\110\206\367\022\001\002\001\004"},
68 
69 	/* GSS_C_NT_HOSTBASED_SERVICE */
70 	{6, "\053\006\001\005\006\002"},
71 	/* GSS_C_NT_ANONYMOUS */
72 	{6, "\053\006\001\005\006\003"},
73 	/* GSS_C_NT_EXPORT_NAME */
74 	{6, "\053\006\001\005\006\004"},
75 
76 	/* GSS_C_INQ_SSPI_SESSION_KEY */
77 	{11, "\x2a\x86\x48\x86\xf7\x12\x01\x02\x02\x05\x05"},
78 };
79 
80 const gss_OID_desc * const gss_nt_user_name = oids+0;
81 const gss_OID_desc * const gss_nt_machine_uid_name = oids+1;
82 const gss_OID_desc * const gss_nt_string_uid_name = oids+2;
83 const gss_OID_desc * const gss_nt_service_name = oids+3;
84 /* XXXXX These are needed for Kerberos */
85 const gss_OID_desc * const gss_nt_service_name_v2 = oids+4;
86 const gss_OID_desc * const gss_nt_exported_name = oids+6;
87 
88 
89 /*
90  * These are added to reflect definitions in the
91  * gss c-bindings spec.
92  */
93 
94 /*
95  * The use of the following defines are preferred over the above defines.
96  * This is because the following are the only ones defined
97  * in GSS-API Specs.
98  */
99 const gss_OID GSS_C_NT_USER_NAME = (gss_OID)oids+0;
100 const gss_OID GSS_C_NT_MACHINE_UID_NAME = (gss_OID)oids+1;
101 const gss_OID GSS_C_NT_STRING_UID_NAME = (gss_OID)oids+2;
102 const gss_OID GSS_C_NT_HOSTBASED_SERVICE = (gss_OID)oids+4;
103 const gss_OID GSS_C_NT_ANONYMOUS = (gss_OID)oids+5;
104 const gss_OID GSS_C_NT_EXPORT_NAME = (gss_OID)oids+6;
105 const gss_OID GSS_C_INQ_SSPI_SESSION_KEY = (gss_OID)oids+7;
106