17c478bd9Sstevel@tonic-gate /*
27c478bd9Sstevel@tonic-gate  * CDDL HEADER START
37c478bd9Sstevel@tonic-gate  *
47c478bd9Sstevel@tonic-gate  * The contents of this file are subject to the terms of the
5503a2b89SPeter Shoults  * Common Development and Distribution License (the "License").
6503a2b89SPeter Shoults  * You may not use this file except in compliance with the License.
77c478bd9Sstevel@tonic-gate  *
87c478bd9Sstevel@tonic-gate  * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
97c478bd9Sstevel@tonic-gate  * or http://www.opensolaris.org/os/licensing.
107c478bd9Sstevel@tonic-gate  * See the License for the specific language governing permissions
117c478bd9Sstevel@tonic-gate  * and limitations under the License.
127c478bd9Sstevel@tonic-gate  *
137c478bd9Sstevel@tonic-gate  * When distributing Covered Code, include this CDDL HEADER in each
147c478bd9Sstevel@tonic-gate  * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
157c478bd9Sstevel@tonic-gate  * If applicable, add the following below this CDDL HEADER, with the
167c478bd9Sstevel@tonic-gate  * fields enclosed by brackets "[]" replaced with your own identifying
177c478bd9Sstevel@tonic-gate  * information: Portions Copyright [yyyy] [name of copyright owner]
187c478bd9Sstevel@tonic-gate  *
197c478bd9Sstevel@tonic-gate  * CDDL HEADER END
207c478bd9Sstevel@tonic-gate  */
217c478bd9Sstevel@tonic-gate /*
22*5e01956fSGlenn Barry  * Copyright (c) 1999, 2010, Oracle and/or its affiliates. All rights reserved.
237c478bd9Sstevel@tonic-gate  */
247c478bd9Sstevel@tonic-gate 
257c478bd9Sstevel@tonic-gate /*
267c478bd9Sstevel@tonic-gate  *  glue routine for gss_export_sec_context
277c478bd9Sstevel@tonic-gate  */
28*5e01956fSGlenn Barry #ifndef LEAN_CLIENT
297c478bd9Sstevel@tonic-gate 
307c478bd9Sstevel@tonic-gate #include <mechglueP.h>
31*5e01956fSGlenn Barry #include "gssapiP_generic.h"
327c478bd9Sstevel@tonic-gate #include <stdio.h>
337c478bd9Sstevel@tonic-gate #include <errno.h>
347c478bd9Sstevel@tonic-gate #ifdef HAVE_STDLIB_H
357c478bd9Sstevel@tonic-gate #include <stdlib.h>
367c478bd9Sstevel@tonic-gate #endif
377c478bd9Sstevel@tonic-gate #include <string.h>
387c478bd9Sstevel@tonic-gate 
val_exp_sec_ctx_args(OM_uint32 * minor_status,gss_ctx_id_t * context_handle,gss_buffer_t interprocess_token)39503a2b89SPeter Shoults static OM_uint32 val_exp_sec_ctx_args(
40503a2b89SPeter Shoults 	OM_uint32 *minor_status,
41503a2b89SPeter Shoults 	gss_ctx_id_t *context_handle,
42503a2b89SPeter Shoults 	gss_buffer_t interprocess_token)
43503a2b89SPeter Shoults {
44503a2b89SPeter Shoults 
45503a2b89SPeter Shoults 	/* Initialize outputs. */
46503a2b89SPeter Shoults 
47503a2b89SPeter Shoults 	if (minor_status != NULL)
48503a2b89SPeter Shoults 		*minor_status = 0;
49503a2b89SPeter Shoults 
50503a2b89SPeter Shoults 	if (interprocess_token != GSS_C_NO_BUFFER) {
51503a2b89SPeter Shoults 		interprocess_token->length = 0;
52503a2b89SPeter Shoults 		interprocess_token->value = NULL;
53503a2b89SPeter Shoults 	}
54503a2b89SPeter Shoults 
55503a2b89SPeter Shoults 	/* Validate arguments. */
56503a2b89SPeter Shoults 
57503a2b89SPeter Shoults 	if (minor_status == NULL)
58503a2b89SPeter Shoults 		return (GSS_S_CALL_INACCESSIBLE_WRITE);
59503a2b89SPeter Shoults 
60503a2b89SPeter Shoults 	if (context_handle == NULL || *context_handle == GSS_C_NO_CONTEXT)
61503a2b89SPeter Shoults 		return (GSS_S_CALL_INACCESSIBLE_READ | GSS_S_NO_CONTEXT);
62503a2b89SPeter Shoults 
63503a2b89SPeter Shoults 	if (interprocess_token == GSS_C_NO_BUFFER)
64503a2b89SPeter Shoults 		return (GSS_S_CALL_INACCESSIBLE_WRITE);
65503a2b89SPeter Shoults 
66503a2b89SPeter Shoults 	return (GSS_S_COMPLETE);
67503a2b89SPeter Shoults }
68503a2b89SPeter Shoults 
697c478bd9Sstevel@tonic-gate OM_uint32
gss_export_sec_context(minor_status,context_handle,interprocess_token)707c478bd9Sstevel@tonic-gate gss_export_sec_context(minor_status,
717c478bd9Sstevel@tonic-gate 			context_handle,
727c478bd9Sstevel@tonic-gate 			interprocess_token)
737c478bd9Sstevel@tonic-gate 
747c478bd9Sstevel@tonic-gate OM_uint32 *minor_status;
757c478bd9Sstevel@tonic-gate gss_ctx_id_t *context_handle;
767c478bd9Sstevel@tonic-gate gss_buffer_t interprocess_token;
777c478bd9Sstevel@tonic-gate 
787c478bd9Sstevel@tonic-gate {
797c478bd9Sstevel@tonic-gate 	OM_uint32		status;
807c478bd9Sstevel@tonic-gate 	OM_uint32 		length;
817c478bd9Sstevel@tonic-gate 	gss_union_ctx_id_t	ctx;
827c478bd9Sstevel@tonic-gate 	gss_mechanism		mech;
837c478bd9Sstevel@tonic-gate 	gss_buffer_desc		token;
847c478bd9Sstevel@tonic-gate 	char			*buf;
857c478bd9Sstevel@tonic-gate 
86503a2b89SPeter Shoults 	status = val_exp_sec_ctx_args(minor_status,
87503a2b89SPeter Shoults 				context_handle, interprocess_token);
88503a2b89SPeter Shoults 	if (status != GSS_S_COMPLETE)
89503a2b89SPeter Shoults 		return (status);
907c478bd9Sstevel@tonic-gate 
917c478bd9Sstevel@tonic-gate 	/*
927c478bd9Sstevel@tonic-gate 	 * select the approprate underlying mechanism routine and
937c478bd9Sstevel@tonic-gate 	 * call it.
947c478bd9Sstevel@tonic-gate 	 */
957c478bd9Sstevel@tonic-gate 
967c478bd9Sstevel@tonic-gate 	ctx = (gss_union_ctx_id_t)*context_handle;
977c478bd9Sstevel@tonic-gate 	mech = __gss_get_mechanism(ctx->mech_type);
987c478bd9Sstevel@tonic-gate 	if (!mech)
997c478bd9Sstevel@tonic-gate 		return (GSS_S_BAD_MECH);
1007c478bd9Sstevel@tonic-gate 	if (!mech->gss_export_sec_context)
1017c478bd9Sstevel@tonic-gate 		return (GSS_S_UNAVAILABLE);
1027c478bd9Sstevel@tonic-gate 
1037c478bd9Sstevel@tonic-gate 	status = mech->gss_export_sec_context(mech->context, minor_status,
1047c478bd9Sstevel@tonic-gate 					&ctx->internal_ctx_id, &token);
105*5e01956fSGlenn Barry 	if (status != GSS_S_COMPLETE) {
106*5e01956fSGlenn Barry 		map_error(minor_status, mech);
1077c478bd9Sstevel@tonic-gate 		return (status);
108*5e01956fSGlenn Barry 	}
1097c478bd9Sstevel@tonic-gate 
1107c478bd9Sstevel@tonic-gate 	length = token.length + 4 + ctx->mech_type->length;
1117c478bd9Sstevel@tonic-gate 	interprocess_token->length = length;
1127c478bd9Sstevel@tonic-gate 	interprocess_token->value = malloc(length);
1137c478bd9Sstevel@tonic-gate 	if (interprocess_token->value == 0) {
1147c478bd9Sstevel@tonic-gate 		(void) gss_release_buffer(minor_status, &token);
1157c478bd9Sstevel@tonic-gate 		return (GSS_S_FAILURE);
1167c478bd9Sstevel@tonic-gate 	}
1177c478bd9Sstevel@tonic-gate 	buf = interprocess_token->value;
1187c478bd9Sstevel@tonic-gate 	length = ctx->mech_type->length;
1197c478bd9Sstevel@tonic-gate 	buf[3] = (unsigned char) (length & 0xFF);
1207c478bd9Sstevel@tonic-gate 	length >>= 8;
1217c478bd9Sstevel@tonic-gate 	buf[2] = (unsigned char) (length & 0xFF);
1227c478bd9Sstevel@tonic-gate 	length >>= 8;
1237c478bd9Sstevel@tonic-gate 	buf[1] = (unsigned char) (length & 0xFF);
1247c478bd9Sstevel@tonic-gate 	length >>= 8;
1257c478bd9Sstevel@tonic-gate 	buf[0] = (unsigned char) (length & 0xFF);
1267c478bd9Sstevel@tonic-gate 	(void) memcpy(buf+4, ctx->mech_type->elements,
1277c478bd9Sstevel@tonic-gate 			(size_t)ctx->mech_type->length);
1287c478bd9Sstevel@tonic-gate 	(void) memcpy(buf+4+ctx->mech_type->length, token.value, token.length);
1297c478bd9Sstevel@tonic-gate 
1307c478bd9Sstevel@tonic-gate 	(void) gss_release_buffer(minor_status, &token);
1317c478bd9Sstevel@tonic-gate 
1327c478bd9Sstevel@tonic-gate 	free(ctx->mech_type->elements);
1337c478bd9Sstevel@tonic-gate 	free(ctx->mech_type);
1347c478bd9Sstevel@tonic-gate 	free(ctx);
1357c478bd9Sstevel@tonic-gate 	*context_handle = 0;
1367c478bd9Sstevel@tonic-gate 
1377c478bd9Sstevel@tonic-gate 	return (GSS_S_COMPLETE);
1387c478bd9Sstevel@tonic-gate }
139*5e01956fSGlenn Barry #endif /*LEAN_CLIENT */
140