The Design and Implementation of the FreeBSD Operating System, Second Edition
Now available: The Design and Implementation of the FreeBSD Operating System (Second Edition)


[ source navigation ] [ diff markup ] [ identifier search ] [ freetext search ] [ file search ] [ list types ] [ track identifier ]

FreeBSD/Linux Kernel Cross Reference
sys/kgssapi/gss_accept_sec_context.c

Version: -  FREEBSD  -  FREEBSD-13-STABLE  -  FREEBSD-13-0  -  FREEBSD-12-STABLE  -  FREEBSD-12-0  -  FREEBSD-11-STABLE  -  FREEBSD-11-0  -  FREEBSD-10-STABLE  -  FREEBSD-10-0  -  FREEBSD-9-STABLE  -  FREEBSD-9-0  -  FREEBSD-8-STABLE  -  FREEBSD-8-0  -  FREEBSD-7-STABLE  -  FREEBSD-7-0  -  FREEBSD-6-STABLE  -  FREEBSD-6-0  -  FREEBSD-5-STABLE  -  FREEBSD-5-0  -  FREEBSD-4-STABLE  -  FREEBSD-3-STABLE  -  FREEBSD22  -  l41  -  OPENBSD  -  linux-2.6  -  MK84  -  PLAN9  -  xnu-8792 
SearchContext: -  none  -  3  -  10 

    1 /*-
    2  * Copyright (c) 2008 Isilon Inc http://www.isilon.com/
    3  * Authors: Doug Rabson <dfr@rabson.org>
    4  * Developed with Red Inc: Alfred Perlstein <alfred@freebsd.org>
    5  *
    6  * Redistribution and use in source and binary forms, with or without
    7  * modification, are permitted provided that the following conditions
    8  * are met:
    9  * 1. Redistributions of source code must retain the above copyright
   10  *    notice, this list of conditions and the following disclaimer.
   11  * 2. Redistributions in binary form must reproduce the above copyright
   12  *    notice, this list of conditions and the following disclaimer in the
   13  *    documentation and/or other materials provided with the distribution.
   14  *
   15  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
   16  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
   17  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
   18  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
   19  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
   20  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
   21  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
   22  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
   23  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
   24  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
   25  * SUCH DAMAGE.
   26  */
   27 
   28 #include <sys/cdefs.h>
   29 __FBSDID("$FreeBSD: releng/9.2/sys/kgssapi/gss_accept_sec_context.c 245018 2013-01-03 23:15:36Z rmacklem $");
   30 
   31 #include <sys/param.h>
   32 #include <sys/kernel.h>
   33 #include <sys/kobj.h>
   34 #include <sys/lock.h>
   35 #include <sys/malloc.h>
   36 #include <sys/mutex.h>
   37 
   38 #include <kgssapi/gssapi.h>
   39 #include <kgssapi/gssapi_impl.h>
   40 #include <rpc/rpc.h>
   41 
   42 #include "gssd.h"
   43 #include "kgss_if.h"
   44 
   45 OM_uint32 gss_accept_sec_context(OM_uint32 *minor_status,
   46     gss_ctx_id_t *context_handle,
   47     const gss_cred_id_t acceptor_cred_handle,
   48     const gss_buffer_t input_token,
   49     const gss_channel_bindings_t input_chan_bindings,
   50     gss_name_t *src_name,
   51     gss_OID *mech_type,
   52     gss_buffer_t output_token,
   53     OM_uint32 *ret_flags,
   54     OM_uint32 *time_rec,
   55     gss_cred_id_t *delegated_cred_handle)
   56 {
   57         struct accept_sec_context_res res;
   58         struct accept_sec_context_args args;
   59         enum clnt_stat stat;
   60         gss_ctx_id_t ctx = *context_handle;
   61         gss_name_t name;
   62         gss_cred_id_t cred;
   63         CLIENT *cl;
   64 
   65         cl = kgss_gssd_client();
   66         if (cl == NULL) {
   67                 *minor_status = 0;
   68                 return (GSS_S_FAILURE);
   69         }
   70 
   71         if (ctx)
   72                 args.ctx = ctx->handle;
   73         else
   74                 args.ctx = 0;
   75         if (acceptor_cred_handle)
   76                 args.cred = acceptor_cred_handle->handle;
   77         else
   78                 args.cred = 0;
   79         args.input_token = *input_token;
   80         args.input_chan_bindings = input_chan_bindings;
   81 
   82         bzero(&res, sizeof(res));
   83         stat = gssd_accept_sec_context_1(&args, &res, cl);
   84         CLNT_RELEASE(cl);
   85         if (stat != RPC_SUCCESS) {
   86                 *minor_status = stat;
   87                 return (GSS_S_FAILURE);
   88         }
   89 
   90         if (res.major_status != GSS_S_COMPLETE
   91             && res.major_status != GSS_S_CONTINUE_NEEDED) {
   92                 *minor_status = res.minor_status;
   93                 xdr_free((xdrproc_t) xdr_accept_sec_context_res, &res);
   94                 return (res.major_status);
   95         }
   96 
   97         *minor_status = res.minor_status;
   98 
   99         if (!ctx) {
  100                 ctx = kgss_create_context(res.mech_type);
  101                 if (!ctx) {
  102                         xdr_free((xdrproc_t) xdr_accept_sec_context_res, &res);
  103                         *minor_status = 0;
  104                         return (GSS_S_BAD_MECH);
  105                 }
  106         }
  107         *context_handle = ctx;
  108 
  109         ctx->handle = res.ctx;
  110         name = malloc(sizeof(struct _gss_name_t), M_GSSAPI, M_WAITOK);
  111         name->handle = res.src_name;
  112         if (src_name) {
  113                 *src_name = name;
  114         } else {
  115                 OM_uint32 junk;
  116                 gss_release_name(&junk, &name);
  117         }
  118         if (mech_type)
  119                 *mech_type = KGSS_MECH_TYPE(ctx);
  120         kgss_copy_buffer(&res.output_token, output_token);
  121         if (ret_flags)
  122                 *ret_flags = res.ret_flags;
  123         if (time_rec)
  124                 *time_rec = res.time_rec;
  125         cred = malloc(sizeof(struct _gss_cred_id_t), M_GSSAPI, M_WAITOK);
  126         cred->handle = res.delegated_cred_handle;
  127         if (delegated_cred_handle) {
  128                 *delegated_cred_handle = cred;
  129         } else {
  130                 OM_uint32 junk;
  131                 gss_release_cred(&junk, &cred);
  132         }
  133 
  134         xdr_free((xdrproc_t) xdr_accept_sec_context_res, &res);
  135 
  136         /*
  137          * If the context establishment is complete, export it from
  138          * userland and hand the result (which includes key material
  139          * etc.) to the kernel implementation.
  140          */
  141         if (res.major_status == GSS_S_COMPLETE)
  142                 res.major_status = kgss_transfer_context(ctx);
  143 
  144         return (res.major_status);
  145 }

Cache object: 033eb75decad07459768af31a06754e4


[ source navigation ] [ diff markup ] [ identifier search ] [ freetext search ] [ file search ] [ list types ] [ track identifier ]


This page is part of the FreeBSD/Linux Linux Kernel Cross-Reference, and was automatically generated using a modified version of the LXR engine.