/* * #ident "@(#)gss_init_sec_context.c 1.20 95/08/07 SMI" */ /* * Copyright 1996 by Sun Microsystems, Inc. * * Permission to use, copy, modify, distribute, and sell this software * and its documentation for any purpose is hereby granted without fee, * provided that the above copyright notice appears in all copies and * that both that copyright notice and this permission notice appear in * supporting documentation, and that the name of Sun Microsystems not be used * in advertising or publicity pertaining to distribution of the software * without specific, written prior permission. Sun Microsystems makes no * representations about the suitability of this software for any * purpose. It is provided "as is" without express or implied warranty. * * SUN MICROSYSTEMS DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE, * INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS, IN NO * EVENT SHALL SUN MICROSYSTEMS BE LIABLE FOR ANY SPECIAL, INDIRECT OR * CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF * USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR * OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR * PERFORMANCE OF THIS SOFTWARE. */ /* * glue routine for gss_init_sec_context */ #include "mglueP.h" #include #include #include #include OM_uint32 gss_init_sec_context(OM_uint32 *minor_status, gss_cred_id_t claimant_cred_handle, gss_ctx_id_t *context_handle, gss_name_t target_name, gss_OID req_mech_type, OM_uint32 req_flags, OM_uint32 time_req, gss_channel_bindings_t input_chan_bindings, gss_buffer_t input_token, gss_OID *actual_mech_type, gss_buffer_t output_token, OM_uint32 *ret_flags, OM_uint32 *time_rec) { OM_uint32 status, temp_status, temp_minor_status; gss_union_name_t union_name; gss_union_cred_t union_cred; gss_name_t internal_name; gss_union_ctx_id_t union_ctx_id; gss_OID mech_type = (gss_OID) req_mech_type; gss_mechanism mech; gss_cred_id_t input_cred_handle; GSS_INITIALIZE; if (context_handle == NULL) return GSS_S_NO_CONTEXT; union_name = (gss_union_name_t) target_name; /* * If mech_type is NULL, and the target_name is * mechanism-specific, then set it to the mech_type of * target_name. */ if ((mech_type == GSS_C_NULL_OID) && union_name->mech_type) mech_type = union_name->mech_type; /* * obtain the gss mechanism information for the requested * mechanism. If mech_type is NULL, set it to the resultant * mechanism */ mech = __gss_get_mechanism(mech_type); if (mech == NULL) return (GSS_S_BAD_MECH); if (mech->gss_init_sec_context == NULL) return GSS_S_UNAVAILABLE; if (mech_type == GSS_C_NULL_OID) mech_type = &mech->mech_type; /* * If target_name is mechanism_specific, then it must match the * mech_type that we're about to use. Otherwise, do an import on * the external_name form of the target name. */ if (union_name->mech_type) { if (!g_OID_equal(union_name->mech_type, mech_type)) return (GSS_S_BAD_MECH); internal_name = union_name->mech_name; } else { if ((temp_status = __gss_import_internal_name(minor_status, mech_type, union_name, &internal_name))) return (GSS_S_BAD_NAME); } /* * if context_handle is GSS_C_NO_CONTEXT, allocate a union context * descriptor to hold the mech type information as well as the * underlying mechanism context handle. Otherwise, cast the * value of *context_handle to the union context variable. */ if (*context_handle == GSS_C_NO_CONTEXT) { union_ctx_id = (gss_union_ctx_id_t) malloc(sizeof(gss_union_ctx_id_desc)); if (!union_ctx_id) { *minor_status = ENOMEM; status = GSS_S_FAILURE; goto end; } union_ctx_id->mech_type = (gss_OID) malloc(sizeof(gss_OID_desc)); if (!union_ctx_id->mech_type) { free(union_ctx_id); *minor_status = ENOMEM; status = GSS_S_FAILURE; goto end; } /* * copy in the mech type information */ union_ctx_id->mech_type->elements = (void *) malloc(mech_type->length); if (!union_ctx_id->mech_type->elements) { free(union_ctx_id->mech_type); free(union_ctx_id); *minor_status = ENOMEM; status = GSS_S_FAILURE; goto end; } union_ctx_id->mech_type->length = mech_type->length; memcpy(union_ctx_id->mech_type->elements, mech_type->elements, mech_type->length); /* * copy the supplied context handle */ union_ctx_id->internal_ctx_id = *context_handle; } else union_ctx_id = *context_handle; /* * get the appropriate cred handle from the union cred struct. * defaults to GSS_C_NO_CREDENTIAL if there is no cred, which will * use the default credential. */ union_cred = (gss_union_cred_t) claimant_cred_handle; input_cred_handle = __gss_get_mechanism_cred(union_cred, mech_type); /* * now call the approprate underlying mechanism routine */ status = mech->gss_init_sec_context(minor_status, input_cred_handle, &union_ctx_id->internal_ctx_id, internal_name, mech_type, req_flags, time_req, input_chan_bindings, input_token, actual_mech_type, output_token, ret_flags, time_rec); if (status != GSS_S_COMPLETE && status != GSS_S_CONTINUE_NEEDED) { /* * RFC 2744 5.19 requires that we not create a context on a failed * first call to init, and recommends that on a failed subsequent call * we make the caller responsible for calling gss_delete_sec_context. * Even if the mech deleted its context, keep the union context around * for the caller to delete. */ if (*context_handle == GSS_C_NO_CONTEXT) { free(union_ctx_id->mech_type->elements); free(union_ctx_id->mech_type); free(union_ctx_id); } } else if (*context_handle == GSS_C_NO_CONTEXT) { *context_handle = (gss_ctx_id_t) union_ctx_id; } end: if (union_name->mech_name == NULL || union_name->mech_name != internal_name) { (void) __gss_release_internal_name(&temp_minor_status, mech_type, &internal_name); } return (status); }