The Design and Implementation of the FreeBSD Operating System, Second Edition
Now available: The Design and Implementation of the FreeBSD Operating System (Second Edition)


[ source navigation ] [ diff markup ] [ identifier search ] [ freetext search ] [ file search ] [ list types ] [ track identifier ]

FreeBSD/Linux Kernel Cross Reference
sys/kgssapi/gss_init_sec_context.c

Version: -  FREEBSD  -  FREEBSD-13-STABLE  -  FREEBSD-13-0  -  FREEBSD-12-STABLE  -  FREEBSD-12-0  -  FREEBSD-11-STABLE  -  FREEBSD-11-0  -  FREEBSD-10-STABLE  -  FREEBSD-10-0  -  FREEBSD-9-STABLE  -  FREEBSD-9-0  -  FREEBSD-8-STABLE  -  FREEBSD-8-0  -  FREEBSD-7-STABLE  -  FREEBSD-7-0  -  FREEBSD-6-STABLE  -  FREEBSD-6-0  -  FREEBSD-5-STABLE  -  FREEBSD-5-0  -  FREEBSD-4-STABLE  -  FREEBSD-3-STABLE  -  FREEBSD22  -  l41  -  OPENBSD  -  linux-2.6  -  MK84  -  PLAN9  -  xnu-8792 
SearchContext: -  none  -  3  -  10 

    1 /*-
    2  * SPDX-License-Identifier: BSD-2-Clause-FreeBSD
    3  *
    4  * Copyright (c) 2008 Isilon Inc http://www.isilon.com/
    5  * Authors: Doug Rabson <dfr@rabson.org>
    6  * Developed with Red Inc: Alfred Perlstein <alfred@freebsd.org>
    7  *
    8  * Redistribution and use in source and binary forms, with or without
    9  * modification, are permitted provided that the following conditions
   10  * are met:
   11  * 1. Redistributions of source code must retain the above copyright
   12  *    notice, this list of conditions and the following disclaimer.
   13  * 2. Redistributions in binary form must reproduce the above copyright
   14  *    notice, this list of conditions and the following disclaimer in the
   15  *    documentation and/or other materials provided with the distribution.
   16  *
   17  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
   18  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
   19  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
   20  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
   21  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
   22  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
   23  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
   24  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
   25  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
   26  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
   27  * SUCH DAMAGE.
   28  */
   29 
   30 #include <sys/cdefs.h>
   31 __FBSDID("$FreeBSD$");
   32 
   33 #include <sys/param.h>
   34 #include <sys/kernel.h>
   35 #include <sys/kobj.h>
   36 #include <sys/lock.h>
   37 #include <sys/malloc.h>
   38 #include <sys/mutex.h>
   39 #include <sys/proc.h>
   40 
   41 #include <kgssapi/gssapi.h>
   42 #include <kgssapi/gssapi_impl.h>
   43 #include <rpc/rpc.h>
   44 
   45 #include "gssd.h"
   46 #include "kgss_if.h"
   47 
   48 OM_uint32
   49 gss_init_sec_context(OM_uint32 * minor_status,
   50     const gss_cred_id_t initiator_cred_handle,
   51     gss_ctx_id_t * context_handle,
   52     const gss_name_t target_name,
   53     const gss_OID input_mech_type,
   54     OM_uint32 req_flags,
   55     OM_uint32 time_req,
   56     const gss_channel_bindings_t input_chan_bindings,
   57     const gss_buffer_t input_token,
   58     gss_OID * actual_mech_type,
   59     gss_buffer_t output_token,
   60     OM_uint32 * ret_flags,
   61     OM_uint32 * time_rec)
   62 {
   63         struct init_sec_context_res res;
   64         struct init_sec_context_args args;
   65         enum clnt_stat stat;
   66         gss_ctx_id_t ctx = *context_handle;
   67         CLIENT *cl;
   68 
   69         *minor_status = 0;
   70 
   71         cl = kgss_gssd_client();
   72         if (cl == NULL)
   73                 return (GSS_S_FAILURE);
   74 
   75         args.uid = curthread->td_ucred->cr_uid;
   76         if  (initiator_cred_handle)
   77                 args.cred = initiator_cred_handle->handle;
   78         else
   79                 args.cred = 0;
   80         if (ctx)
   81                 args.ctx = ctx->handle;
   82         else
   83                 args.ctx = 0;
   84         args.name = target_name->handle;
   85         args.mech_type = input_mech_type;
   86         args.req_flags = req_flags;
   87         args.time_req = time_req;
   88         args.input_chan_bindings = input_chan_bindings;
   89         if (input_token)
   90                 args.input_token = *input_token;
   91         else {
   92                 args.input_token.length = 0;
   93                 args.input_token.value = NULL;
   94         }
   95 
   96         bzero(&res, sizeof(res));
   97         stat = gssd_init_sec_context_1(&args, &res, cl);
   98         CLNT_RELEASE(cl);
   99         if (stat != RPC_SUCCESS) {
  100                 *minor_status = stat;
  101                 return (GSS_S_FAILURE);
  102         }
  103 
  104         if (res.major_status != GSS_S_COMPLETE
  105             && res.major_status != GSS_S_CONTINUE_NEEDED) {
  106                 *minor_status = res.minor_status;
  107                 xdr_free((xdrproc_t) xdr_init_sec_context_res, &res);
  108                 return (res.major_status);
  109         }
  110 
  111         *minor_status = res.minor_status;
  112 
  113         if (!ctx) {
  114                 ctx = kgss_create_context(res.actual_mech_type);
  115                 if (!ctx) {
  116                         xdr_free((xdrproc_t) xdr_init_sec_context_res, &res);
  117                         *minor_status = 0;
  118                         return (GSS_S_BAD_MECH);
  119                 }
  120         }
  121         *context_handle = ctx;
  122         ctx->handle = res.ctx;
  123         if (actual_mech_type)
  124                 *actual_mech_type = KGSS_MECH_TYPE(ctx);
  125         kgss_copy_buffer(&res.output_token, output_token);
  126         if (ret_flags)
  127                 *ret_flags = res.ret_flags;
  128         if (time_rec)
  129                 *time_rec = res.time_rec;
  130 
  131         xdr_free((xdrproc_t) xdr_init_sec_context_res, &res);
  132 
  133         /*
  134          * If the context establishment is complete, export it from
  135          * userland and hand the result (which includes key material
  136          * etc.) to the kernel implementation.
  137          */
  138         if (res.major_status == GSS_S_COMPLETE)
  139                 res.major_status = kgss_transfer_context(ctx);
  140 
  141         return (res.major_status);
  142 }

Cache object: cc3f0e51cc89da180fee3b23193d5654


[ source navigation ] [ diff markup ] [ identifier search ] [ freetext search ] [ file search ] [ list types ] [ track identifier ]


This page is part of the FreeBSD/Linux Linux Kernel Cross-Reference, and was automatically generated using a modified version of the LXR engine.