1 /* $NetBSD: aname_to_localname.c,v 1.1.1.2 2014/04/24 12:45:49 pettai Exp $ */
2
3 /*
4 * Copyright (c) 1997 - 1999, 2002 - 2003 Kungliga Tekniska Högskolan
5 * (Royal Institute of Technology, Stockholm, Sweden).
6 * All rights reserved.
7 *
8 * Redistribution and use in source and binary forms, with or without
9 * modification, are permitted provided that the following conditions
10 * are met:
11 *
12 * 1. Redistributions of source code must retain the above copyright
13 * notice, this list of conditions and the following disclaimer.
14 *
15 * 2. Redistributions in binary form must reproduce the above copyright
16 * notice, this list of conditions and the following disclaimer in the
17 * documentation and/or other materials provided with the distribution.
18 *
19 * 3. Neither the name of the Institute nor the names of its contributors
20 * may be used to endorse or promote products derived from this software
21 * without specific prior written permission.
22 *
23 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
24 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
25 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
26 * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
27 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
28 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
29 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
30 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
31 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
32 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
33 * SUCH DAMAGE.
34 */
35
36 #include "krb5_locl.h"
37
38 KRB5_LIB_FUNCTION krb5_error_code KRB5_LIB_CALL
krb5_aname_to_localname(krb5_context context,krb5_const_principal aname,size_t lnsize,char * lname)39 krb5_aname_to_localname (krb5_context context,
40 krb5_const_principal aname,
41 size_t lnsize,
42 char *lname)
43 {
44 krb5_error_code ret;
45 krb5_realm *lrealms, *r;
46 int valid;
47 size_t len;
48 const char *res;
49
50 ret = krb5_get_default_realms (context, &lrealms);
51 if (ret)
52 return ret;
53
54 valid = 0;
55 for (r = lrealms; *r != NULL; ++r) {
56 if (strcmp (*r, aname->realm) == 0) {
57 valid = 1;
58 break;
59 }
60 }
61 krb5_free_host_realm (context, lrealms);
62 if (valid == 0)
63 return KRB5_NO_LOCALNAME;
64
65 if (aname->name.name_string.len == 1)
66 res = aname->name.name_string.val[0];
67 else if (aname->name.name_string.len == 2
68 && strcmp (aname->name.name_string.val[1], "root") == 0) {
69 krb5_principal rootprinc;
70 krb5_boolean userok;
71
72 res = "root";
73
74 ret = krb5_copy_principal(context, aname, &rootprinc);
75 if (ret)
76 return ret;
77
78 userok = krb5_kuserok(context, rootprinc, res);
79 krb5_free_principal(context, rootprinc);
80 if (!userok)
81 return KRB5_NO_LOCALNAME;
82
83 } else
84 return KRB5_NO_LOCALNAME;
85
86 len = strlen (res);
87 if (len >= lnsize)
88 return ERANGE;
89 strlcpy (lname, res, lnsize);
90
91 return 0;
92 }
93