2 * Copyright (c) 2003-2007 Kungliga Tekniska Högskolan
3 * (Royal Institute of Technology, Stockholm, Sweden).
6 * Redistribution and use in source and binary forms, with or without
7 * modification, are permitted provided that the following conditions
10 * 1. Redistributions of source code must retain the above copyright
11 * notice, this list of conditions and the following disclaimer.
13 * 2. Redistributions in binary form must reproduce the above copyright
14 * notice, this list of conditions and the following disclaimer in the
15 * documentation and/or other materials provided with the distribution.
17 * 3. Neither the name of KTH nor the names of its contributors may be
18 * used to endorse or promote products derived from this software without
19 * specific prior written permission.
21 * THIS SOFTWARE IS PROVIDED BY KTH AND ITS CONTRIBUTORS ``AS IS'' AND ANY
22 * EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
24 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL KTH OR ITS CONTRIBUTORS BE
25 * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
26 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
27 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
28 * BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
29 * WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR
30 * OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF
31 * ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
44 #include <gssapi_krb5.h>
45 #include <gssapi_spnego.h>
49 #include "test_common.h"
52 print_time(OM_uint32 time_rec
)
54 if (time_rec
== GSS_C_INDEFINITE
) {
55 printf("cred never expire\n");
57 time_t t
= time_rec
+ time(NULL
);
58 printf("expiration time: %s", ctime(&t
));
65 test_add(gss_cred_id_t cred_handle
)
67 OM_uint32 major_status
, minor_status
;
68 gss_cred_id_t copy_cred
;
71 major_status
= gss_add_cred (&minor_status
,
83 if (GSS_ERROR(major_status
))
84 errx(1, "add_cred failed");
88 major_status
= gss_release_cred(&minor_status
,
90 if (GSS_ERROR(major_status
))
91 errx(1, "release_cred failed");
97 OM_uint32 major_status
, minor_status
;
98 gss_cred_id_t cred_handle
;
101 major_status
= gss_acquire_cred(&minor_status
,
109 if (GSS_ERROR(major_status
))
110 errx(1, "acquire_cred failed");
112 print_time(time_rec
);
114 test_add(cred_handle
);
115 test_add(cred_handle
);
116 test_add(cred_handle
);
118 major_status
= gss_release_cred(&minor_status
,
120 if (GSS_ERROR(major_status
))
121 errx(1, "release_cred failed");
126 acquire_cred_service(const char *service
,
131 OM_uint32 major_status
, minor_status
;
132 gss_cred_id_t cred_handle
;
134 gss_buffer_desc name_buffer
;
135 gss_name_t name
= GSS_C_NO_NAME
;
138 name_buffer
.value
= rk_UNCONST(service
);
139 name_buffer
.length
= strlen(service
);
141 major_status
= gss_import_name(&minor_status
,
145 if (GSS_ERROR(major_status
))
146 errx(1, "import_name failed");
149 major_status
= gss_acquire_cred(&minor_status
,
157 if (GSS_ERROR(major_status
)) {
158 warnx("acquire_cred failed: %s",
159 gssapi_err(major_status
, minor_status
, GSS_C_NO_OID
));
161 print_time(time_rec
);
162 gss_release_cred(&minor_status
, &cred_handle
);
165 if (name
!= GSS_C_NO_NAME
)
166 gss_release_name(&minor_status
, &name
);
168 if (GSS_ERROR(major_status
))
174 static int version_flag
= 0;
175 static int help_flag
= 0;
176 static int kerberos_flag
= 0;
177 static int enctype
= 0;
178 static char *acquire_name
;
179 static char *acquire_type
;
180 static char *target_name
;
181 static char *name_type
;
183 static int num_loops
= 1;
185 static struct getargs args
[] = {
186 {"acquire-name", 0, arg_string
, &acquire_name
, "name", NULL
},
187 {"acquire-type", 0, arg_string
, &acquire_type
, "type", NULL
},
188 {"enctype", 0, arg_integer
, &enctype
, "enctype-num", NULL
},
189 {"loops", 0, arg_integer
, &num_loops
, "enctype-num", NULL
},
190 {"kerberos", 0, arg_flag
, &kerberos_flag
, "enctype-num", NULL
},
191 {"target-name", 0, arg_string
, &target_name
, "name", NULL
},
192 {"ccache", 0, arg_string
, &ccache
, "name", NULL
},
193 {"name-type", 0, arg_string
, &name_type
, "type", NULL
},
194 {"version", 0, arg_flag
, &version_flag
, "print version", NULL
},
195 {"help", 0, arg_flag
, &help_flag
, NULL
, NULL
}
201 arg_printusage (args
, sizeof(args
)/sizeof(*args
), NULL
, "");
206 main(int argc
, char **argv
)
208 gss_OID_set oidset
= GSS_C_NULL_OID_SET
;
209 gss_OID mechoid
= GSS_C_NO_OID
;
210 OM_uint32 maj_stat
, min_stat
;
212 gss_name_t target
= GSS_C_NO_NAME
;
217 setprogname(argv
[0]);
218 if(getarg(args
, sizeof(args
) / sizeof(args
[0]), argc
, argv
, &optidx
))
236 if (strcasecmp(acquire_type
, "both") == 0)
238 else if (strcasecmp(acquire_type
, "accept") == 0)
240 else if (strcasecmp(acquire_type
, "initiate") == 0)
241 flag
= GSS_C_INITIATE
;
243 errx(1, "unknown type %s", acquire_type
);
248 if (strcasecmp("hostbased-service", name_type
) == 0)
249 type
= GSS_C_NT_HOSTBASED_SERVICE
;
250 else if (strcasecmp("user-name", name_type
) == 0)
251 type
= GSS_C_NT_USER_NAME
;
253 errx(1, "unknown name type %s", name_type
);
255 type
= GSS_C_NT_HOSTBASED_SERVICE
;
258 maj_stat
= gss_krb5_ccache_name(&min_stat
, ccache
, NULL
);
259 if (GSS_ERROR(maj_stat
))
260 errx(1, "gss_krb5_ccache_name %s",
261 gssapi_err(maj_stat
, min_stat
, GSS_C_NO_OID
));
265 mechoid
= GSS_KRB5_MECHANISM
;
267 maj_stat
= gss_create_empty_oid_set(&min_stat
, &oidset
);
268 if (maj_stat
!= GSS_S_COMPLETE
)
269 errx(1, "gss_create_empty_oid_set: %s",
270 gssapi_err(maj_stat
, min_stat
, GSS_C_NO_OID
));
272 maj_stat
= gss_add_oid_set_member(&min_stat
, GSS_KRB5_MECHANISM
, &oidset
);
273 if (maj_stat
!= GSS_S_COMPLETE
)
274 errx(1, "gss_add_oid_set_member: %s",
275 gssapi_err(maj_stat
, min_stat
, GSS_C_NO_OID
));
279 gss_buffer_desc name
;
281 name
.value
= target_name
;
282 name
.length
= strlen(target_name
);
283 maj_stat
= gss_import_name(&min_stat
, &name
,
284 GSS_C_NT_HOSTBASED_SERVICE
, &target
);
285 if (maj_stat
!= GSS_S_COMPLETE
)
286 errx(1, "gss_import_name: %s",
287 gssapi_err(maj_stat
, min_stat
, GSS_C_NO_OID
));
290 for (i
= 0; i
< num_loops
; i
++) {
292 cred
= acquire_cred_service(acquire_name
, type
, oidset
, flag
);
295 int32_t enctypelist
= enctype
;
297 maj_stat
= gss_krb5_set_allowable_enctypes(&min_stat
, cred
,
300 errx(1, "gss_krb5_set_allowable_enctypes: %s",
301 gssapi_err(maj_stat
, min_stat
, GSS_C_NO_OID
));
305 gss_ctx_id_t context
= GSS_C_NO_CONTEXT
;
311 maj_stat
= gss_init_sec_context(&min_stat
,
314 GSS_C_MUTUAL_FLAG
, 0, NULL
,
315 GSS_C_NO_BUFFER
, NULL
,
317 if (maj_stat
!= GSS_S_COMPLETE
&& maj_stat
!= GSS_S_CONTINUE_NEEDED
)
318 errx(1, "init_sec_context failed: %s",
319 gssapi_err(maj_stat
, min_stat
, GSS_C_NO_OID
));
321 gss_release_buffer(&min_stat
, &out
);
322 gss_delete_sec_context(&min_stat
, &context
, NULL
);
324 gss_release_cred(&min_stat
, &cred
);