#include "mglueP.h"
#include <stdio.h>
#ifdef HAVE_STDLIB_H
#include <stdlib.h>
#endif
#include <string.h>
#include <time.h>
OM_uint32 KRB5_CALLCONV
gss_inquire_cred(minor_status,
cred_handle,
name,
lifetime,
cred_usage,
mechanisms)
OM_uint32 * minor_status;
gss_cred_id_t cred_handle;
gss_name_t * name;
OM_uint32 * lifetime;
int * cred_usage;
gss_OID_set * mechanisms;
{
OM_uint32 status, elapsed_time, temp_minor_status;
gss_union_cred_t union_cred;
gss_mechanism mech;
gss_name_t internal_name;
int i;
if (minor_status != NULL)
*minor_status = 0;
if (name != NULL)
*name = GSS_C_NO_NAME;
if (mechanisms != NULL)
*mechanisms = GSS_C_NO_OID_SET;
if (minor_status == NULL)
return (GSS_S_CALL_INACCESSIBLE_WRITE);
if (cred_handle == GSS_C_NO_CREDENTIAL) {
if ((mech = gssint_get_mechanism(GSS_C_NULL_OID)) == NULL)
return (GSS_S_DEFECTIVE_CREDENTIAL);
if (!mech->gss_inquire_cred)
return (GSS_S_UNAVAILABLE);
status = mech->gss_inquire_cred(mech->context, minor_status,
GSS_C_NO_CREDENTIAL,
name ? &internal_name : NULL,
lifetime, cred_usage, mechanisms);
if (status != GSS_S_COMPLETE) {
map_error(minor_status, mech);
return(status);
}
if (name) {
status = gssint_convert_name_to_union_name(&temp_minor_status,
mech, internal_name,
name);
if (status != GSS_S_COMPLETE) {
*minor_status = temp_minor_status;
map_error(minor_status, mech);
if (mechanisms && *mechanisms) {
(void) gss_release_oid_set(
&temp_minor_status,
mechanisms);
}
return (status);
}
}
return(GSS_S_COMPLETE);
}
union_cred = (gss_union_cred_t) cred_handle;
if(cred_usage != NULL)
*cred_usage = union_cred->auxinfo.cred_usage;
if(lifetime != NULL) {
elapsed_time = time(0) - union_cred->auxinfo.creation_time;
*lifetime = union_cred->auxinfo.time_rec < elapsed_time ? 0 :
union_cred->auxinfo.time_rec - elapsed_time;
}
if(name != NULL) {
if ((gss_import_name(&temp_minor_status,
&union_cred->auxinfo.name,
union_cred->auxinfo.name_type,
name) != GSS_S_COMPLETE) ||
(gss_canonicalize_name(minor_status, *name,
&union_cred->mechs_array[0],
NULL) != GSS_S_COMPLETE)) {
status = GSS_S_DEFECTIVE_CREDENTIAL;
goto error;
}
}
if(mechanisms != NULL) {
status = GSS_S_FAILURE;
*mechanisms = (gss_OID_set) malloc(sizeof(gss_OID_set_desc));
if (*mechanisms == NULL)
goto error;
(*mechanisms)->count = 0;
(*mechanisms)->elements =
(gss_OID) malloc(sizeof(gss_OID_desc) *
union_cred->count);
if ((*mechanisms)->elements == NULL) {
free(*mechanisms);
*mechanisms = NULL;
goto error;
}
for(i=0; i < union_cred->count; i++) {
(*mechanisms)->elements[i].elements = (void *)
malloc(union_cred->mechs_array[i].length);
if ((*mechanisms)->elements[i].elements == NULL)
goto error;
g_OID_copy(&(*mechanisms)->elements[i],
&union_cred->mechs_array[i]);
(*mechanisms)->count++;
}
}
return(GSS_S_COMPLETE);
error:
if (mechanisms && *mechanisms != NULL)
(void) gss_release_oid_set(&temp_minor_status, mechanisms);
if (name && *name != NULL)
(void) gss_release_name(&temp_minor_status, name);
return (status);
}
OM_uint32 KRB5_CALLCONV
gss_inquire_cred_by_mech(minor_status, cred_handle, mech_type, name,
initiator_lifetime, acceptor_lifetime, cred_usage)
OM_uint32 *minor_status;
gss_cred_id_t cred_handle;
gss_OID mech_type;
gss_name_t *name;
OM_uint32 *initiator_lifetime;
OM_uint32 *acceptor_lifetime;
gss_cred_usage_t *cred_usage;
{
gss_union_cred_t union_cred;
gss_cred_id_t mech_cred;
gss_mechanism mech;
OM_uint32 status, temp_minor_status;
gss_name_t internal_name;
if (minor_status != NULL)
*minor_status = 0;
if (name != NULL)
*name = GSS_C_NO_NAME;
if (minor_status == NULL)
return (GSS_S_CALL_INACCESSIBLE_WRITE);
mech = gssint_get_mechanism (mech_type);
if (!mech)
return (GSS_S_BAD_MECH);
if (!mech->gss_inquire_cred_by_mech)
return (GSS_S_BAD_BINDINGS);
union_cred = (gss_union_cred_t) cred_handle;
mech_cred = gssint_get_mechanism_cred(union_cred, mech_type);
#if 0
if (mech_cred == NULL)
return (GSS_S_DEFECTIVE_CREDENTIAL);
#endif
status = mech->gss_inquire_cred_by_mech(mech->context, minor_status,
mech_cred, mech_type,
name ? &internal_name : NULL,
initiator_lifetime,
acceptor_lifetime, cred_usage);
if (status != GSS_S_COMPLETE) {
map_error(minor_status, mech);
return (status);
}
if (name) {
status = gssint_convert_name_to_union_name(
&temp_minor_status, mech,
internal_name, name);
if (status != GSS_S_COMPLETE) {
*minor_status = temp_minor_status;
map_error(minor_status, mech);
return (status);
}
}
return (GSS_S_COMPLETE);
}