1/*
2 * CDDL HEADER START
3 *
4 * The contents of this file are subject to the terms of the
5 * Common Development and Distribution License (the "License").
6 * You may not use this file except in compliance with the License.
7 *
8 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
9 * or http://www.opensolaris.org/os/licensing.
10 * See the License for the specific language governing permissions
11 * and limitations under the License.
12 *
13 * When distributing Covered Code, include this CDDL HEADER in each
14 * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
15 * If applicable, add the following below this CDDL HEADER, with the
16 * fields enclosed by brackets "[]" replaced with your own identifying
17 * information: Portions Copyright [yyyy] [name of copyright owner]
18 *
19 * CDDL HEADER END
20 */
21/*
22 * Copyright 2009 Sun Microsystems, Inc.  All rights reserved.
23 * Use is subject to license terms.
24 */
25
26/*
27 * Solaris Kerberos:
28 * Iterate through a keytab (keytab) looking for an entry which matches
29 * the components of a principal (princ) but match on any realm. When a
30 * suitable entry is found return the entry's realm.
31 */
32
33#include "k5-int.h"
34
35krb5_error_code krb5_kt_find_realm(krb5_context context, krb5_keytab keytab,
36    krb5_principal princ, krb5_data *realm) {
37
38	krb5_kt_cursor cur;
39	krb5_keytab_entry ent;
40	krb5_boolean match;
41	krb5_data tmp_realm;
42	krb5_error_code ret, ret2;
43
44	ret = krb5_kt_start_seq_get(context, keytab, &cur);
45	if (ret != 0) {
46		return (ret);
47	}
48
49	while ((ret = krb5_kt_next_entry(context, keytab, &ent, &cur)) == 0) {
50		/* For the comparison the realms should be the same. */
51		memcpy(&tmp_realm, &ent.principal->realm, sizeof (krb5_data));
52		memcpy(&ent.principal->realm, &princ->realm,
53		    sizeof (krb5_data));
54
55		match = krb5_principal_compare(context, ent.principal, princ);
56
57		/* Copy the realm back */
58		memcpy(&ent.principal->realm, &tmp_realm, sizeof (krb5_data));
59
60		if (match) {
61			/*
62			 * A suitable entry was found in the keytab.
63			 * Copy its realm
64			 */
65			ret = krb5int_copy_data_contents(context,
66			    &ent.principal->realm, realm);
67			if (ret) {
68				krb5_kt_free_entry(context, &ent);
69				krb5_kt_end_seq_get(context, keytab, &cur);
70				return (ret);
71			}
72
73			krb5_kt_free_entry(context, &ent);
74			break;
75		}
76
77		krb5_kt_free_entry(context, &ent);
78	}
79
80	ret2 = krb5_kt_end_seq_get(context, keytab, &cur);
81
82	if (ret == KRB5_KT_END) {
83		return (KRB5_KT_NOTFOUND);
84	}
85
86	return (ret ? ret : ret2);
87}
88