xref: /illumos-gate/usr/src/lib/libgss/g_userok.c (revision 7c478bd9)
1 /*
2  * CDDL HEADER START
3  *
4  * The contents of this file are subject to the terms of the
5  * Common Development and Distribution License, Version 1.0 only
6  * (the "License").  You may not use this file except in compliance
7  * with the License.
8  *
9  * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
10  * or http://www.opensolaris.org/os/licensing.
11  * See the License for the specific language governing permissions
12  * and limitations under the License.
13  *
14  * When distributing Covered Code, include this CDDL HEADER in each
15  * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
16  * If applicable, add the following below this CDDL HEADER, with the
17  * fields enclosed by brackets "[]" replaced with your own identifying
18  * information: Portions Copyright [yyyy] [name of copyright owner]
19  *
20  * CDDL HEADER END
21  */
22 /*
23  * Copyright 2004 Sun Microsystems, Inc.  All rights reserved.
24  * Use is subject to license terms.
25  */
26 
27 #pragma ident	"%Z%%M%	%I%	%E% SMI"
28 
29 #include <stdio.h>
30 #include <stdlib.h>
31 #include <unistd.h>
32 #include <deflt.h>
33 #include <mechglueP.h>
34 #include <gssapi/gssapi.h>
35 #include <gssapi/gssapi_ext.h>
36 
37 
38 static OM_uint32
compare_names(OM_uint32 * minor,const gss_OID mech_type,const gss_name_t name,const char * user,int * user_ok)39 compare_names(OM_uint32 *minor,
40 	    const gss_OID mech_type,
41 	    const gss_name_t name,
42 	    const char *user,
43 	    int *user_ok)
44 {
45 
46 	OM_uint32 status, tmpMinor;
47 	gss_name_t imported_name;
48 	gss_name_t canon_name;
49 	gss_buffer_desc gss_user;
50 	int match = 0;
51 
52 	*user_ok = 0;
53 
54 	gss_user.value = (void *)user;
55 	if (!gss_user.value || !name || !mech_type)
56 		return (GSS_S_BAD_NAME);
57 	gss_user.length = strlen(gss_user.value);
58 
59 	status = gss_import_name(minor,
60 				&gss_user,
61 				GSS_C_NT_USER_NAME,
62 				&imported_name);
63 	if (status != GSS_S_COMPLETE) {
64 		goto out;
65 	}
66 
67 	status = gss_canonicalize_name(minor,
68 				    imported_name,
69 				    mech_type,
70 				    &canon_name);
71 	if (status != GSS_S_COMPLETE) {
72 		(void) gss_release_name(&tmpMinor, &imported_name);
73 		goto out;
74 	}
75 
76 	status = gss_compare_name(minor,
77 				canon_name,
78 				name,
79 				&match);
80 	(void) gss_release_name(&tmpMinor, &canon_name);
81 	(void) gss_release_name(&tmpMinor, &imported_name);
82 	if (status == GSS_S_COMPLETE) {
83 		if (match)
84 			*user_ok = 1; /* remote user is a-ok */
85 	}
86 
87 out:
88 	return (status);
89 }
90 
91 
92 OM_uint32
__gss_userok(OM_uint32 * minor,const gss_name_t name,const char * user,int * user_ok)93 __gss_userok(OM_uint32 *minor,
94 	    const gss_name_t name,
95 	    const char *user,
96 	    int *user_ok)
97 
98 {
99 	gss_mechanism mech;
100 	gss_union_name_t intName;
101 	gss_name_t mechName = NULL;
102 	OM_uint32 major;
103 
104 	if (minor == NULL || user_ok == NULL)
105 		return (GSS_S_CALL_INACCESSIBLE_WRITE);
106 
107 	if (name == NULL || user == NULL)
108 		return (GSS_S_CALL_INACCESSIBLE_READ);
109 
110 	*user_ok = 0;
111 	*minor = GSS_S_COMPLETE;
112 
113 	intName = (gss_union_name_t)name;
114 
115 	mech = __gss_get_mechanism(intName->mech_type);
116 	if (mech == NULL)
117 		return (GSS_S_UNAVAILABLE);
118 
119 	/* may need to import the name if this is not MN */
120 	if (intName->mech_type == NULL) {
121 		return (GSS_S_FAILURE);
122 	} else
123 		mechName = intName->mech_name;
124 
125 	if (mech->__gss_userok)
126 		major = mech->__gss_userok(mech->context,  minor, mechName,
127 				user, user_ok);
128 	else
129 		major = compare_names(minor, intName->mech_type,
130 				    name, user, user_ok);
131 
132 	return (major);
133 } /* gss_userok */
134