2 * Copyright (c) 1997, 2003 Kungliga Tekniska Högskolan
3 * (Royal Institute of Technology, Stockholm, Sweden).
6 * Redistribution and use in source and binary forms, with or without
7 * modification, are permitted provided that the following conditions
10 * 1. Redistributions of source code must retain the above copyright
11 * notice, this list of conditions and the following disclaimer.
13 * 2. Redistributions in binary form must reproduce the above copyright
14 * notice, this list of conditions and the following disclaimer in the
15 * documentation and/or other materials provided with the distribution.
17 * 3. Neither the name of the Institute nor the names of its contributors
18 * may be used to endorse or promote products derived from this software
19 * without specific prior written permission.
21 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
24 * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
34 #include "gsskrb5_locl.h"
36 OM_uint32 GSSAPI_CALLCONV _gsskrb5_inquire_cred
37 (OM_uint32
* minor_status
,
38 gss_const_cred_id_t cred_handle
,
39 gss_name_t
* output_name
,
41 gss_cred_usage_t
* cred_usage
,
42 gss_OID_set
* mechanisms
46 gss_cred_id_t aqcred_init
= GSS_C_NO_CREDENTIAL
;
47 gss_cred_id_t aqcred_accept
= GSS_C_NO_CREDENTIAL
;
48 gsskrb5_cred acred
= NULL
, icred
= NULL
;
56 *mechanisms
= GSS_C_NO_OID_SET
;
58 GSSAPI_KRB5_INIT (&context
);
60 if (cred_handle
== GSS_C_NO_CREDENTIAL
) {
61 ret
= _gsskrb5_acquire_cred(minor_status
,
69 if (ret
== GSS_S_COMPLETE
)
70 acred
= (gsskrb5_cred
)aqcred_accept
;
72 ret
= _gsskrb5_acquire_cred(minor_status
,
80 if (ret
== GSS_S_COMPLETE
)
81 icred
= (gsskrb5_cred
)aqcred_init
;
83 if (icred
== NULL
&& acred
== NULL
) {
88 acred
= (gsskrb5_cred
)cred_handle
;
91 HEIMDAL_MUTEX_lock(&acred
->cred_id_mutex
);
93 HEIMDAL_MUTEX_lock(&icred
->cred_id_mutex
);
95 if (output_name
!= NULL
) {
96 if (icred
&& icred
->principal
!= NULL
) {
99 if (acred
&& acred
->principal
)
100 name
= (gss_name_t
)acred
->principal
;
102 name
= (gss_name_t
)icred
->principal
;
104 ret
= _gsskrb5_duplicate_name(minor_status
, name
, output_name
);
107 } else if (acred
&& acred
->usage
== GSS_C_ACCEPT
) {
108 krb5_principal princ
;
109 *minor_status
= krb5_sname_to_principal(context
, NULL
,
110 NULL
, KRB5_NT_SRV_HST
,
116 *output_name
= (gss_name_t
)princ
;
118 krb5_principal princ
;
119 *minor_status
= krb5_get_default_principal(context
,
125 *output_name
= (gss_name_t
)princ
;
128 if (lifetime
!= NULL
) {
129 OM_uint32 alife
= GSS_C_INDEFINITE
, ilife
= GSS_C_INDEFINITE
;
131 if (acred
) alife
= acred
->lifetime
;
132 if (icred
) ilife
= icred
->lifetime
;
134 ret
= _gsskrb5_lifetime_left(minor_status
,
141 if (cred_usage
!= NULL
) {
143 *cred_usage
= GSS_C_BOTH
;
145 *cred_usage
= GSS_C_ACCEPT
;
147 *cred_usage
= GSS_C_INITIATE
;
152 if (mechanisms
!= NULL
) {
153 ret
= gss_create_empty_oid_set(minor_status
, mechanisms
);
157 ret
= gss_add_oid_set_member(minor_status
,
158 &acred
->mechanisms
->elements
[0],
160 if (ret
== GSS_S_COMPLETE
&& icred
)
161 ret
= gss_add_oid_set_member(minor_status
,
162 &icred
->mechanisms
->elements
[0],
167 ret
= GSS_S_COMPLETE
;
170 HEIMDAL_MUTEX_unlock(&acred
->cred_id_mutex
);
172 HEIMDAL_MUTEX_unlock(&icred
->cred_id_mutex
);
174 if (aqcred_init
!= GSS_C_NO_CREDENTIAL
)
175 ret
= _gsskrb5_release_cred(minor_status
, &aqcred_init
);
176 if (aqcred_accept
!= GSS_C_NO_CREDENTIAL
)
177 ret
= _gsskrb5_release_cred(minor_status
, &aqcred_accept
);