2 * Copyright (c) 2007 Kungliga Tekniska Högskolan
3 * (Royal Institute of Technology, Stockholm, Sweden).
6 * Redistribution and use in source and binary forms, with or without
7 * modification, are permitted provided that the following conditions
10 * 1. Redistributions of source code must retain the above copyright
11 * notice, this list of conditions and the following disclaimer.
13 * 2. Redistributions in binary form must reproduce the above copyright
14 * notice, this list of conditions and the following disclaimer in the
15 * documentation and/or other materials provided with the distribution.
17 * 3. Neither the name of the Institute nor the names of its contributors
18 * may be used to endorse or promote products derived from this software
19 * without specific prior written permission.
21 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
24 * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
36 static int have_plugin
= 0;
39 * Pick the first WINDC module that we find.
42 static krb5_error_code KRB5_LIB_CALL
43 load(krb5_context context
, const void *plug
, void *plugctx
, void *userctx
)
46 return KRB5_PLUGIN_NO_HANDLE
;
50 krb5_kdc_windc_init(krb5_context context
)
52 (void)_krb5_plugin_run_f(context
, "krb5", "windc",
53 KRB5_WINDC_PLUGIN_MINOR
, 0, NULL
, load
);
62 static krb5_error_code KRB5_LIB_CALL
63 generate(krb5_context context
, const void *plug
, void *plugctx
, void *userctx
)
65 krb5plugin_windc_ftable
*ft
= (krb5plugin_windc_ftable
*)plug
;
66 struct generate_uc
*uc
= (struct generate_uc
*)userctx
;
68 if (ft
->pac_generate
== NULL
)
69 return KRB5_PLUGIN_NO_HANDLE
;
70 return ft
->pac_generate((void *)plug
, context
, uc
->client
, uc
->pac
);
75 _kdc_pac_generate(krb5_context context
,
79 struct generate_uc uc
;
87 (void)_krb5_plugin_run_f(context
, "krb5", "windc",
88 KRB5_WINDC_PLUGIN_MINOR
, 0, &uc
, generate
);
93 krb5_principal client_principal
;
94 krb5_principal delegated_proxy_principal
;
102 static krb5_error_code KRB5_LIB_CALL
103 verify(krb5_context context
, const void *plug
, void *plugctx
, void *userctx
)
105 krb5plugin_windc_ftable
*ft
= (krb5plugin_windc_ftable
*)plug
;
106 struct verify_uc
*uc
= (struct verify_uc
*)userctx
;
109 if (ft
->pac_verify
== NULL
)
110 return KRB5_PLUGIN_NO_HANDLE
;
111 ret
= ft
->pac_verify((void *)plug
, context
,
112 uc
->client_principal
,
113 uc
->delegated_proxy_principal
,
114 uc
->client
, uc
->server
, uc
->krbtgt
, uc
->pac
);
122 _kdc_pac_verify(krb5_context context
,
123 const krb5_principal client_principal
,
124 const krb5_principal delegated_proxy_principal
,
125 hdb_entry_ex
*client
,
126 hdb_entry_ex
*server
,
127 hdb_entry_ex
*krbtgt
,
136 uc
.client_principal
= client_principal
;
137 uc
.delegated_proxy_principal
= delegated_proxy_principal
;
142 uc
.verified
= verified
;
144 (void)_krb5_plugin_run_f(context
, "krb5", "windc",
145 KRB5_WINDC_PLUGIN_MINOR
, 0, &uc
, verify
);
150 krb5_kdc_configuration
*config
;
151 hdb_entry_ex
*client_ex
;
152 const char *client_name
;
153 hdb_entry_ex
*server_ex
;
154 const char *server_name
;
156 METHOD_DATA
*method_data
;
159 static krb5_error_code KRB5_LIB_CALL
160 check(krb5_context context
, const void *plug
, void *plugctx
, void *userctx
)
162 krb5plugin_windc_ftable
*ft
= (krb5plugin_windc_ftable
*)plug
;
163 struct check_uc
*uc
= (struct check_uc
*)userctx
;
165 if (ft
->client_access
== NULL
)
166 return KRB5_PLUGIN_NO_HANDLE
;
167 return ft
->client_access((void *)plug
, context
, uc
->config
,
168 uc
->client_ex
, uc
->client_name
,
169 uc
->server_ex
, uc
->server_name
,
170 uc
->req
, uc
->method_data
);
175 _kdc_check_access(krb5_context context
,
176 krb5_kdc_configuration
*config
,
177 hdb_entry_ex
*client_ex
, const char *client_name
,
178 hdb_entry_ex
*server_ex
, const char *server_name
,
180 METHOD_DATA
*method_data
)
182 krb5_error_code ret
= KRB5_PLUGIN_NO_HANDLE
;
187 uc
.client_ex
= client_ex
;
188 uc
.client_name
= client_name
;
189 uc
.server_ex
= server_ex
;
190 uc
.server_name
= server_name
;
192 uc
.method_data
= method_data
;
194 ret
= _krb5_plugin_run_f(context
, "krb5", "windc",
195 KRB5_WINDC_PLUGIN_MINOR
, 0, &uc
, check
);
198 if (ret
== KRB5_PLUGIN_NO_HANDLE
)
199 return kdc_check_flags(context
, config
,
200 client_ex
, client_name
,
201 server_ex
, server_name
,
202 req
->msg_type
== krb_as_req
);