1 /*-
2 * Copyright (c) 2008 Isilon Inc http://www.isilon.com/
3 * Authors: Doug Rabson <dfr@rabson.org>
4 * Developed with Red Inc: Alfred Perlstein <alfred@freebsd.org>
5 *
6 * Redistribution and use in source and binary forms, with or without
7 * modification, are permitted provided that the following conditions
8 * are met:
9 * 1. Redistributions of source code must retain the above copyright
10 * notice, this list of conditions and the following disclaimer.
11 * 2. Redistributions in binary form must reproduce the above copyright
12 * notice, this list of conditions and the following disclaimer in the
13 * documentation and/or other materials provided with the distribution.
14 *
15 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
16 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
17 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
18 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
19 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
20 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
21 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
22 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
23 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
24 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
25 * SUCH DAMAGE.
26 */
27
28 #include <sys/cdefs.h>
29 __FBSDID("$FreeBSD: releng/11.2/sys/kgssapi/gss_pname_to_uid.c 244370 2012-12-18 00:25:48Z rmacklem $");
30
31 #include <sys/param.h>
32 #include <sys/kernel.h>
33 #include <sys/kobj.h>
34 #include <sys/lock.h>
35 #include <sys/malloc.h>
36 #include <sys/mutex.h>
37
38 #include <kgssapi/gssapi.h>
39 #include <kgssapi/gssapi_impl.h>
40
41 #include "kgss_if.h"
42
43 OM_uint32
44 gss_pname_to_uid(OM_uint32 *minor_status, const gss_name_t pname,
45 const gss_OID mech, uid_t *uidp)
46 {
47 struct pname_to_uid_res res;
48 struct pname_to_uid_args args;
49 enum clnt_stat stat;
50 CLIENT *cl;
51
52 *minor_status = 0;
53
54 if (pname == GSS_C_NO_NAME)
55 return (GSS_S_BAD_NAME);
56
57 cl = kgss_gssd_client();
58 if (cl == NULL)
59 return (GSS_S_FAILURE);
60
61 args.pname = pname->handle;
62 args.mech = mech;
63
64 bzero(&res, sizeof(res));
65 stat = gssd_pname_to_uid_1(&args, &res, cl);
66 CLNT_RELEASE(cl);
67 if (stat != RPC_SUCCESS) {
68 *minor_status = stat;
69 return (GSS_S_FAILURE);
70 }
71
72 if (res.major_status != GSS_S_COMPLETE) {
73 *minor_status = res.minor_status;
74 return (res.major_status);
75 }
76
77 *uidp = res.uid;
78 return (GSS_S_COMPLETE);
79 }
80
81 OM_uint32
82 gss_pname_to_unix_cred(OM_uint32 *minor_status, const gss_name_t pname,
83 const gss_OID mech, uid_t *uidp, gid_t *gidp,
84 int *numgroups, gid_t *groups)
85
86 {
87 struct pname_to_uid_res res;
88 struct pname_to_uid_args args;
89 enum clnt_stat stat;
90 int i, n;
91 CLIENT *cl;
92
93 *minor_status = 0;
94
95 if (pname == GSS_C_NO_NAME)
96 return (GSS_S_BAD_NAME);
97
98 cl = kgss_gssd_client();
99 if (cl == NULL)
100 return (GSS_S_FAILURE);
101
102 args.pname = pname->handle;
103 args.mech = mech;
104
105 bzero(&res, sizeof(res));
106 stat = gssd_pname_to_uid_1(&args, &res, cl);
107 CLNT_RELEASE(cl);
108 if (stat != RPC_SUCCESS) {
109 *minor_status = stat;
110 return (GSS_S_FAILURE);
111 }
112
113 if (res.major_status != GSS_S_COMPLETE) {
114 *minor_status = res.minor_status;
115 return (res.major_status);
116 }
117
118 *uidp = res.uid;
119 *gidp = res.gid;
120 n = res.gidlist.gidlist_len;
121 if (n > *numgroups)
122 n = *numgroups;
123 for (i = 0; i < n; i++)
124 groups[i] = res.gidlist.gidlist_val[i];
125 *numgroups = n;
126
127 xdr_free((xdrproc_t) xdr_pname_to_uid_res, &res);
128
129 return (GSS_S_COMPLETE);
130 }
Cache object: 678432370336f05079ea7e28f7668bbc
|