2 * Copyright (c) 1997 - 2003 Kungliga Tekniska Högskolan
3 * (Royal Institute of Technology, Stockholm, Sweden).
6 * Redistribution and use in source and binary forms, with or without
7 * modification, are permitted provided that the following conditions
10 * 1. Redistributions of source code must retain the above copyright
11 * notice, this list of conditions and the following disclaimer.
13 * 2. Redistributions in binary form must reproduce the above copyright
14 * notice, this list of conditions and the following disclaimer in the
15 * documentation and/or other materials provided with the distribution.
17 * 3. Neither the name of the Institute nor the names of its contributors
18 * may be used to endorse or promote products derived from this software
19 * without specific prior written permission.
21 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
24 * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
34 #include "gssapi_locl.h"
36 RCSID("$Id: import_name.c,v 1.13 2003/03/16 17:33:31 lha Exp $");
39 parse_krb5_name (OM_uint32
*minor_status
,
41 gss_name_t
*output_name
)
45 kerr
= krb5_parse_name (gssapi_krb5_context
, name
, output_name
);
48 return GSS_S_COMPLETE
;
49 else if (kerr
== KRB5_PARSE_ILLCHAR
|| kerr
== KRB5_PARSE_MALFORMED
) {
50 gssapi_krb5_set_error_string ();
52 return GSS_S_BAD_NAME
;
54 gssapi_krb5_set_error_string ();
61 import_krb5_name (OM_uint32
*minor_status
,
62 const gss_buffer_t input_name_buffer
,
63 gss_name_t
*output_name
)
68 tmp
= malloc (input_name_buffer
->length
+ 1);
70 *minor_status
= ENOMEM
;
74 input_name_buffer
->value
,
75 input_name_buffer
->length
);
76 tmp
[input_name_buffer
->length
] = '\0';
78 ret
= parse_krb5_name(minor_status
, tmp
, output_name
);
85 import_hostbased_name (OM_uint32
*minor_status
,
86 const gss_buffer_t input_name_buffer
,
87 gss_name_t
*output_name
)
93 char local_hostname
[MAXHOSTNAMELEN
];
97 tmp
= malloc (input_name_buffer
->length
+ 1);
99 *minor_status
= ENOMEM
;
100 return GSS_S_FAILURE
;
103 input_name_buffer
->value
,
104 input_name_buffer
->length
);
105 tmp
[input_name_buffer
->length
] = '\0';
107 p
= strchr (tmp
, '@');
112 if (gethostname(local_hostname
, sizeof(local_hostname
)) < 0) {
113 *minor_status
= errno
;
115 return GSS_S_FAILURE
;
117 host
= local_hostname
;
120 kerr
= krb5_sname_to_principal (gssapi_krb5_context
,
126 *minor_status
= kerr
;
128 return GSS_S_COMPLETE
;
129 else if (kerr
== KRB5_PARSE_ILLCHAR
|| kerr
== KRB5_PARSE_MALFORMED
) {
130 gssapi_krb5_set_error_string ();
131 *minor_status
= kerr
;
132 return GSS_S_BAD_NAME
;
134 gssapi_krb5_set_error_string ();
135 *minor_status
= kerr
;
136 return GSS_S_FAILURE
;
141 import_export_name (OM_uint32
*minor_status
,
142 const gss_buffer_t input_name_buffer
,
143 gss_name_t
*output_name
)
150 if (input_name_buffer
->length
< 10 + GSS_KRB5_MECHANISM
->length
)
151 return GSS_S_BAD_NAME
;
153 /* TOK, MECH_OID_LEN, DER(MECH_OID), NAME_LEN, NAME */
155 p
= input_name_buffer
->value
;
157 if (memcmp(&p
[0], "\x04\x01\x00", 3) != 0 ||
158 p
[3] != GSS_KRB5_MECHANISM
->length
+ 2 ||
160 p
[5] != GSS_KRB5_MECHANISM
->length
||
161 memcmp(&p
[6], GSS_KRB5_MECHANISM
->elements
,
162 GSS_KRB5_MECHANISM
->length
) != 0)
163 return GSS_S_BAD_NAME
;
165 p
+= 6 + GSS_KRB5_MECHANISM
->length
;
167 length
= p
[0] << 24 | p
[1] << 16 | p
[2] << 8 | p
[3];
170 if (length
> input_name_buffer
->length
- 10 - GSS_KRB5_MECHANISM
->length
)
171 return GSS_S_BAD_NAME
;
173 name
= malloc(length
+ 1);
175 *minor_status
= ENOMEM
;
176 return GSS_S_FAILURE
;
178 memcpy(name
, p
, length
);
181 ret
= parse_krb5_name(minor_status
, name
, output_name
);
188 gss_oid_equal(const gss_OID a
, const gss_OID b
)
192 else if (a
== GSS_C_NO_OID
|| b
== GSS_C_NO_OID
|| a
->length
!= b
->length
)
195 return memcmp(a
->elements
, b
->elements
, a
->length
) == 0;
198 OM_uint32 gss_import_name
199 (OM_uint32
* minor_status
,
200 const gss_buffer_t input_name_buffer
,
201 const gss_OID input_name_type
,
202 gss_name_t
* output_name
208 *output_name
= GSS_C_NO_NAME
;
210 if (gss_oid_equal(input_name_type
, GSS_C_NT_HOSTBASED_SERVICE
))
211 return import_hostbased_name (minor_status
,
214 else if (gss_oid_equal(input_name_type
, GSS_C_NO_OID
)
215 || gss_oid_equal(input_name_type
, GSS_C_NT_USER_NAME
)
216 || gss_oid_equal(input_name_type
, GSS_KRB5_NT_PRINCIPAL_NAME
))
217 /* default printable syntax */
218 return import_krb5_name (minor_status
,
221 else if (gss_oid_equal(input_name_type
, GSS_C_NT_EXPORT_NAME
)) {
222 return import_export_name(minor_status
,
227 return GSS_S_BAD_NAMETYPE
;