The Design and Implementation of the FreeBSD Operating System, Second Edition
Now available: The Design and Implementation of the FreeBSD Operating System (Second Edition)


[ source navigation ] [ diff markup ] [ identifier search ] [ freetext search ] [ file search ] [ list types ] [ track identifier ]

FreeBSD/Linux Kernel Cross Reference
sys/kgssapi/gss_accept_sec_context.c

Version: -  FREEBSD  -  FREEBSD-13-STABLE  -  FREEBSD-13-0  -  FREEBSD-12-STABLE  -  FREEBSD-12-0  -  FREEBSD-11-STABLE  -  FREEBSD-11-0  -  FREEBSD-10-STABLE  -  FREEBSD-10-0  -  FREEBSD-9-STABLE  -  FREEBSD-9-0  -  FREEBSD-8-STABLE  -  FREEBSD-8-0  -  FREEBSD-7-STABLE  -  FREEBSD-7-0  -  FREEBSD-6-STABLE  -  FREEBSD-6-0  -  FREEBSD-5-STABLE  -  FREEBSD-5-0  -  FREEBSD-4-STABLE  -  FREEBSD-3-STABLE  -  FREEBSD22  -  l41  -  OPENBSD  -  linux-2.6  -  MK84  -  PLAN9  -  xnu-8792 
SearchContext: -  none  -  3  -  10 

    1 /*-
    2  * Copyright (c) 2008 Isilon Inc http://www.isilon.com/
    3  * Authors: Doug Rabson <dfr@rabson.org>
    4  * Developed with Red Inc: Alfred Perlstein <alfred@freebsd.org>
    5  *
    6  * Redistribution and use in source and binary forms, with or without
    7  * modification, are permitted provided that the following conditions
    8  * are met:
    9  * 1. Redistributions of source code must retain the above copyright
   10  *    notice, this list of conditions and the following disclaimer.
   11  * 2. Redistributions in binary form must reproduce the above copyright
   12  *    notice, this list of conditions and the following disclaimer in the
   13  *    documentation and/or other materials provided with the distribution.
   14  *
   15  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
   16  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
   17  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
   18  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
   19  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
   20  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
   21  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
   22  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
   23  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
   24  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
   25  * SUCH DAMAGE.
   26  */
   27 
   28 #include <sys/cdefs.h>
   29 __FBSDID("$FreeBSD: releng/8.1/sys/kgssapi/gss_accept_sec_context.c 199583 2009-11-20 15:27:52Z jhb $");
   30 
   31 #include <sys/param.h>
   32 #include <sys/kernel.h>
   33 #include <sys/kobj.h>
   34 #include <sys/malloc.h>
   35 
   36 #include <kgssapi/gssapi.h>
   37 #include <kgssapi/gssapi_impl.h>
   38 #include <rpc/rpc.h>
   39 
   40 #include "gssd.h"
   41 #include "kgss_if.h"
   42 
   43 OM_uint32 gss_accept_sec_context(OM_uint32 *minor_status,
   44     gss_ctx_id_t *context_handle,
   45     const gss_cred_id_t acceptor_cred_handle,
   46     const gss_buffer_t input_token,
   47     const gss_channel_bindings_t input_chan_bindings,
   48     gss_name_t *src_name,
   49     gss_OID *mech_type,
   50     gss_buffer_t output_token,
   51     OM_uint32 *ret_flags,
   52     OM_uint32 *time_rec,
   53     gss_cred_id_t *delegated_cred_handle)
   54 {
   55         struct accept_sec_context_res res;
   56         struct accept_sec_context_args args;
   57         enum clnt_stat stat;
   58         gss_ctx_id_t ctx = *context_handle;
   59         gss_name_t name;
   60         gss_cred_id_t cred;
   61 
   62         if (!kgss_gssd_handle)
   63                 return (GSS_S_FAILURE);
   64 
   65         if (ctx)
   66                 args.ctx = ctx->handle;
   67         else
   68                 args.ctx = 0;
   69         if (acceptor_cred_handle)
   70                 args.cred = acceptor_cred_handle->handle;
   71         else
   72                 args.cred = 0;
   73         args.input_token = *input_token;
   74         args.input_chan_bindings = input_chan_bindings;
   75 
   76         bzero(&res, sizeof(res));
   77         stat = gssd_accept_sec_context_1(&args, &res, kgss_gssd_handle);
   78         if (stat != RPC_SUCCESS) {
   79                 *minor_status = stat;
   80                 return (GSS_S_FAILURE);
   81         }
   82 
   83         if (res.major_status != GSS_S_COMPLETE
   84             && res.major_status != GSS_S_CONTINUE_NEEDED) {
   85                 *minor_status = res.minor_status;
   86                 xdr_free((xdrproc_t) xdr_accept_sec_context_res, &res);
   87                 return (res.major_status);
   88         }
   89 
   90         *minor_status = res.minor_status;
   91 
   92         if (!ctx) {
   93                 ctx = kgss_create_context(res.mech_type);
   94                 if (!ctx) {
   95                         xdr_free((xdrproc_t) xdr_accept_sec_context_res, &res);
   96                         *minor_status = 0;
   97                         return (GSS_S_BAD_MECH);
   98                 }
   99         }
  100         *context_handle = ctx;
  101 
  102         ctx->handle = res.ctx;
  103         name = malloc(sizeof(struct _gss_name_t), M_GSSAPI, M_WAITOK);
  104         name->handle = res.src_name;
  105         if (src_name) {
  106                 *src_name = name;
  107         } else {
  108                 OM_uint32 junk;
  109                 gss_release_name(&junk, &name);
  110         }
  111         if (mech_type)
  112                 *mech_type = KGSS_MECH_TYPE(ctx);
  113         kgss_copy_buffer(&res.output_token, output_token);
  114         if (ret_flags)
  115                 *ret_flags = res.ret_flags;
  116         if (time_rec)
  117                 *time_rec = res.time_rec;
  118         cred = malloc(sizeof(struct _gss_cred_id_t), M_GSSAPI, M_WAITOK);
  119         cred->handle = res.delegated_cred_handle;
  120         if (delegated_cred_handle) {
  121                 *delegated_cred_handle = cred;
  122         } else {
  123                 OM_uint32 junk;
  124                 gss_release_cred(&junk, &cred);
  125         }
  126 
  127         xdr_free((xdrproc_t) xdr_accept_sec_context_res, &res);
  128 
  129         /*
  130          * If the context establishment is complete, export it from
  131          * userland and hand the result (which includes key material
  132          * etc.) to the kernel implementation.
  133          */
  134         if (res.major_status == GSS_S_COMPLETE)
  135                 res.major_status = kgss_transfer_context(ctx);
  136 
  137         return (res.major_status);
  138 }

Cache object: 7b39f7e6c2c140e342ec31666f5da707


[ source navigation ] [ diff markup ] [ identifier search ] [ freetext search ] [ file search ] [ list types ] [ track identifier ]


This page is part of the FreeBSD/Linux Linux Kernel Cross-Reference, and was automatically generated using a modified version of the LXR engine.