xref: /netbsd-src/crypto/external/bsd/heimdal/dist/lib/krb5/convert_creds.c (revision d3273b5b76f5afaafe308cead5511dbb8df8c5e9)
1*d3273b5bSchristos /*	$NetBSD: convert_creds.c,v 1.2 2017/01/28 21:31:49 christos Exp $	*/
2ca1c9b0cSelric 
3ca1c9b0cSelric /*
4ca1c9b0cSelric  * Copyright (c) 1997 - 2004 Kungliga Tekniska Högskolan
5ca1c9b0cSelric  * (Royal Institute of Technology, Stockholm, Sweden).
6ca1c9b0cSelric  * All rights reserved.
7ca1c9b0cSelric  *
8ca1c9b0cSelric  * Redistribution and use in source and binary forms, with or without
9ca1c9b0cSelric  * modification, are permitted provided that the following conditions
10ca1c9b0cSelric  * are met:
11ca1c9b0cSelric  *
12ca1c9b0cSelric  * 1. Redistributions of source code must retain the above copyright
13ca1c9b0cSelric  *    notice, this list of conditions and the following disclaimer.
14ca1c9b0cSelric  *
15ca1c9b0cSelric  * 2. Redistributions in binary form must reproduce the above copyright
16ca1c9b0cSelric  *    notice, this list of conditions and the following disclaimer in the
17ca1c9b0cSelric  *    documentation and/or other materials provided with the distribution.
18ca1c9b0cSelric  *
19ca1c9b0cSelric  * 3. Neither the name of the Institute nor the names of its contributors
20ca1c9b0cSelric  *    may be used to endorse or promote products derived from this software
21ca1c9b0cSelric  *    without specific prior written permission.
22ca1c9b0cSelric  *
23ca1c9b0cSelric  * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
24ca1c9b0cSelric  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
25ca1c9b0cSelric  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
26ca1c9b0cSelric  * ARE DISCLAIMED.  IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
27ca1c9b0cSelric  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
28ca1c9b0cSelric  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
29ca1c9b0cSelric  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
30ca1c9b0cSelric  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
31ca1c9b0cSelric  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
32ca1c9b0cSelric  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
33ca1c9b0cSelric  * SUCH DAMAGE.
34ca1c9b0cSelric  */
35ca1c9b0cSelric 
36ca1c9b0cSelric #include "krb5_locl.h"
37ca1c9b0cSelric #include <krb5/krb5-v4compat.h>
38ca1c9b0cSelric 
39ca1c9b0cSelric #ifndef HEIMDAL_SMALLER
40ca1c9b0cSelric 
41ca1c9b0cSelric /**
42ca1c9b0cSelric  * Convert the v5 credentials in in_cred to v4-dito in v4creds.  This
43ca1c9b0cSelric  * is done by sending them to the 524 function in the KDC.  If
44ca1c9b0cSelric  * `in_cred' doesn't contain a DES session key, then a new one is
45ca1c9b0cSelric  * gotten from the KDC and stored in the cred cache `ccache'.
46ca1c9b0cSelric  *
47ca1c9b0cSelric  * @param context Kerberos 5 context.
48ca1c9b0cSelric  * @param in_cred the credential to convert
49ca1c9b0cSelric  * @param v4creds the converted credential
50ca1c9b0cSelric  *
51ca1c9b0cSelric  * @return Returns 0 to indicate success. Otherwise an kerberos et
52ca1c9b0cSelric  * error code is returned, see krb5_get_error_message().
53ca1c9b0cSelric  *
54ca1c9b0cSelric  * @ingroup krb5_v4compat
55ca1c9b0cSelric  */
56ca1c9b0cSelric 
57ca1c9b0cSelric KRB5_LIB_FUNCTION krb5_error_code KRB5_LIB_CALL
krb524_convert_creds_kdc(krb5_context context,krb5_creds * in_cred,struct credentials * v4creds)58ca1c9b0cSelric krb524_convert_creds_kdc(krb5_context context,
59ca1c9b0cSelric 			 krb5_creds *in_cred,
60ca1c9b0cSelric 			 struct credentials *v4creds)
614f77a458Spettai     KRB5_DEPRECATED_FUNCTION("Use X instead")
62ca1c9b0cSelric {
63ca1c9b0cSelric     memset(v4creds, 0, sizeof(*v4creds));
64ca1c9b0cSelric     krb5_set_error_message(context, EINVAL,
65ca1c9b0cSelric 			   N_("krb524_convert_creds_kdc not supported", ""));
66ca1c9b0cSelric     return EINVAL;
67ca1c9b0cSelric }
68ca1c9b0cSelric 
69ca1c9b0cSelric /**
70ca1c9b0cSelric  * Convert the v5 credentials in in_cred to v4-dito in v4creds,
71ca1c9b0cSelric  * check the credential cache ccache before checking with the KDC.
72ca1c9b0cSelric  *
73ca1c9b0cSelric  * @param context Kerberos 5 context.
74ca1c9b0cSelric  * @param ccache credential cache used to check for des-ticket.
75ca1c9b0cSelric  * @param in_cred the credential to convert
76ca1c9b0cSelric  * @param v4creds the converted credential
77ca1c9b0cSelric  *
78ca1c9b0cSelric  * @return Returns 0 to indicate success. Otherwise an kerberos et
79ca1c9b0cSelric  * error code is returned, see krb5_get_error_message().
80ca1c9b0cSelric  *
81ca1c9b0cSelric  * @ingroup krb5_v4compat
82ca1c9b0cSelric  */
83ca1c9b0cSelric 
84ca1c9b0cSelric KRB5_LIB_FUNCTION krb5_error_code KRB5_LIB_CALL
krb524_convert_creds_kdc_ccache(krb5_context context,krb5_ccache ccache,krb5_creds * in_cred,struct credentials * v4creds)85ca1c9b0cSelric krb524_convert_creds_kdc_ccache(krb5_context context,
86ca1c9b0cSelric 				krb5_ccache ccache,
87ca1c9b0cSelric 				krb5_creds *in_cred,
88ca1c9b0cSelric 				struct credentials *v4creds)
894f77a458Spettai     KRB5_DEPRECATED_FUNCTION("Use X instead")
90ca1c9b0cSelric {
91ca1c9b0cSelric     memset(v4creds, 0, sizeof(*v4creds));
92ca1c9b0cSelric     krb5_set_error_message(context, EINVAL,
93ca1c9b0cSelric 			   N_("krb524_convert_creds_kdc_ccache not supported", ""));
94ca1c9b0cSelric     return EINVAL;
95ca1c9b0cSelric }
96ca1c9b0cSelric 
97ca1c9b0cSelric #endif
98