1*ae771770SStanislav Sedov /*
2*ae771770SStanislav Sedov * Copyright (c) 2011, PADL Software Pty Ltd.
3*ae771770SStanislav Sedov * All rights reserved.
4*ae771770SStanislav Sedov *
5*ae771770SStanislav Sedov * Redistribution and use in source and binary forms, with or without
6*ae771770SStanislav Sedov * modification, are permitted provided that the following conditions
7*ae771770SStanislav Sedov * are met:
8*ae771770SStanislav Sedov *
9*ae771770SStanislav Sedov * 1. Redistributions of source code must retain the above copyright
10*ae771770SStanislav Sedov * notice, this list of conditions and the following disclaimer.
11*ae771770SStanislav Sedov *
12*ae771770SStanislav Sedov * 2. Redistributions in binary form must reproduce the above copyright
13*ae771770SStanislav Sedov * notice, this list of conditions and the following disclaimer in the
14*ae771770SStanislav Sedov * documentation and/or other materials provided with the distribution.
15*ae771770SStanislav Sedov *
16*ae771770SStanislav Sedov * 3. Neither the name of PADL Software nor the names of its contributors
17*ae771770SStanislav Sedov * may be used to endorse or promote products derived from this software
18*ae771770SStanislav Sedov * without specific prior written permission.
19*ae771770SStanislav Sedov *
20*ae771770SStanislav Sedov * THIS SOFTWARE IS PROVIDED BY PADL SOFTWARE AND CONTRIBUTORS ``AS IS'' AND
21*ae771770SStanislav Sedov * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
22*ae771770SStanislav Sedov * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
23*ae771770SStanislav Sedov * ARE DISCLAIMED. IN NO EVENT SHALL PADL SOFTWARE OR CONTRIBUTORS BE LIABLE
24*ae771770SStanislav Sedov * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
25*ae771770SStanislav Sedov * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
26*ae771770SStanislav Sedov * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
27*ae771770SStanislav Sedov * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
28*ae771770SStanislav Sedov * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
29*ae771770SStanislav Sedov * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
30*ae771770SStanislav Sedov * SUCH DAMAGE.
31*ae771770SStanislav Sedov */
32*ae771770SStanislav Sedov
33*ae771770SStanislav Sedov #include "mech_locl.h"
34*ae771770SStanislav Sedov
35*ae771770SStanislav Sedov static OM_uint32
mech_pname_to_uid(OM_uint32 * minor_status,struct _gss_mechanism_name * mn,uid_t * uidp)36*ae771770SStanislav Sedov mech_pname_to_uid(OM_uint32 *minor_status,
37*ae771770SStanislav Sedov struct _gss_mechanism_name *mn,
38*ae771770SStanislav Sedov uid_t *uidp)
39*ae771770SStanislav Sedov {
40*ae771770SStanislav Sedov OM_uint32 major_status = GSS_S_UNAVAILABLE;
41*ae771770SStanislav Sedov
42*ae771770SStanislav Sedov *minor_status = 0;
43*ae771770SStanislav Sedov
44*ae771770SStanislav Sedov if (mn->gmn_mech->gm_pname_to_uid == NULL)
45*ae771770SStanislav Sedov return GSS_S_UNAVAILABLE;
46*ae771770SStanislav Sedov
47*ae771770SStanislav Sedov major_status = mn->gmn_mech->gm_pname_to_uid(minor_status,
48*ae771770SStanislav Sedov mn->gmn_name,
49*ae771770SStanislav Sedov mn->gmn_mech_oid,
50*ae771770SStanislav Sedov uidp);
51*ae771770SStanislav Sedov if (GSS_ERROR(major_status))
52*ae771770SStanislav Sedov _gss_mg_error(mn->gmn_mech, major_status, *minor_status);
53*ae771770SStanislav Sedov
54*ae771770SStanislav Sedov return major_status;
55*ae771770SStanislav Sedov }
56*ae771770SStanislav Sedov
57*ae771770SStanislav Sedov static OM_uint32
attr_pname_to_uid(OM_uint32 * minor_status,struct _gss_mechanism_name * mn,uid_t * uidp)58*ae771770SStanislav Sedov attr_pname_to_uid(OM_uint32 *minor_status,
59*ae771770SStanislav Sedov struct _gss_mechanism_name *mn,
60*ae771770SStanislav Sedov uid_t *uidp)
61*ae771770SStanislav Sedov {
62*ae771770SStanislav Sedov #ifdef NO_LOCALNAME
63*ae771770SStanislav Sedov return GSS_S_UNAVAILABLE;
64*ae771770SStanislav Sedov #else
65*ae771770SStanislav Sedov OM_uint32 major_status = GSS_S_UNAVAILABLE;
66*ae771770SStanislav Sedov OM_uint32 tmpMinor;
67*ae771770SStanislav Sedov int more = -1;
68*ae771770SStanislav Sedov
69*ae771770SStanislav Sedov *minor_status = 0;
70*ae771770SStanislav Sedov
71*ae771770SStanislav Sedov if (mn->gmn_mech->gm_get_name_attribute == NULL)
72*ae771770SStanislav Sedov return GSS_S_UNAVAILABLE;
73*ae771770SStanislav Sedov
74*ae771770SStanislav Sedov while (more != 0) {
75*ae771770SStanislav Sedov gss_buffer_desc value;
76*ae771770SStanislav Sedov gss_buffer_desc display_value;
77*ae771770SStanislav Sedov int authenticated = 0, complete = 0;
78*ae771770SStanislav Sedov #ifdef POSIX_GETPWNAM_R
79*ae771770SStanislav Sedov char pwbuf[2048];
80*ae771770SStanislav Sedov struct passwd pw, *pwd;
81*ae771770SStanislav Sedov #else
82*ae771770SStanislav Sedov struct passwd *pwd;
83*ae771770SStanislav Sedov #endif
84*ae771770SStanislav Sedov char *localname;
85*ae771770SStanislav Sedov
86*ae771770SStanislav Sedov major_status = mn->gmn_mech->gm_get_name_attribute(minor_status,
87*ae771770SStanislav Sedov mn->gmn_name,
88*ae771770SStanislav Sedov GSS_C_ATTR_LOCAL_LOGIN_USER,
89*ae771770SStanislav Sedov &authenticated,
90*ae771770SStanislav Sedov &complete,
91*ae771770SStanislav Sedov &value,
92*ae771770SStanislav Sedov &display_value,
93*ae771770SStanislav Sedov &more);
94*ae771770SStanislav Sedov if (GSS_ERROR(major_status)) {
95*ae771770SStanislav Sedov _gss_mg_error(mn->gmn_mech, major_status, *minor_status);
96*ae771770SStanislav Sedov break;
97*ae771770SStanislav Sedov }
98*ae771770SStanislav Sedov
99*ae771770SStanislav Sedov localname = malloc(value.length + 1);
100*ae771770SStanislav Sedov if (localname == NULL) {
101*ae771770SStanislav Sedov major_status = GSS_S_FAILURE;
102*ae771770SStanislav Sedov *minor_status = ENOMEM;
103*ae771770SStanislav Sedov break;
104*ae771770SStanislav Sedov }
105*ae771770SStanislav Sedov
106*ae771770SStanislav Sedov memcpy(localname, value.value, value.length);
107*ae771770SStanislav Sedov localname[value.length] = '\0';
108*ae771770SStanislav Sedov
109*ae771770SStanislav Sedov #ifdef POSIX_GETPWNAM_R
110*ae771770SStanislav Sedov if (getpwnam_r(localname, &pw, pwbuf, sizeof(pwbuf), &pwd) != 0)
111*ae771770SStanislav Sedov pwd = NULL;
112*ae771770SStanislav Sedov #else
113*ae771770SStanislav Sedov pwd = getpwnam(localname);
114*ae771770SStanislav Sedov #endif
115*ae771770SStanislav Sedov
116*ae771770SStanislav Sedov free(localname);
117*ae771770SStanislav Sedov gss_release_buffer(&tmpMinor, &value);
118*ae771770SStanislav Sedov gss_release_buffer(&tmpMinor, &display_value);
119*ae771770SStanislav Sedov
120*ae771770SStanislav Sedov if (pwd != NULL) {
121*ae771770SStanislav Sedov *uidp = pwd->pw_uid;
122*ae771770SStanislav Sedov major_status = GSS_S_COMPLETE;
123*ae771770SStanislav Sedov *minor_status = 0;
124*ae771770SStanislav Sedov break;
125*ae771770SStanislav Sedov } else
126*ae771770SStanislav Sedov major_status = GSS_S_UNAVAILABLE;
127*ae771770SStanislav Sedov }
128*ae771770SStanislav Sedov
129*ae771770SStanislav Sedov return major_status;
130*ae771770SStanislav Sedov #endif /* NO_LOCALNAME */
131*ae771770SStanislav Sedov }
132*ae771770SStanislav Sedov
133*ae771770SStanislav Sedov GSSAPI_LIB_FUNCTION OM_uint32 GSSAPI_LIB_CALL
gss_pname_to_uid(OM_uint32 * minor_status,const gss_name_t pname,const gss_OID mech_type,uid_t * uidp)134*ae771770SStanislav Sedov gss_pname_to_uid(OM_uint32 *minor_status,
135*ae771770SStanislav Sedov const gss_name_t pname,
136*ae771770SStanislav Sedov const gss_OID mech_type,
137*ae771770SStanislav Sedov uid_t *uidp)
138*ae771770SStanislav Sedov {
139*ae771770SStanislav Sedov OM_uint32 major_status = GSS_S_UNAVAILABLE;
140*ae771770SStanislav Sedov struct _gss_name *name = (struct _gss_name *) pname;
141*ae771770SStanislav Sedov struct _gss_mechanism_name *mn = NULL;
142*ae771770SStanislav Sedov
143*ae771770SStanislav Sedov *minor_status = 0;
144*ae771770SStanislav Sedov
145*ae771770SStanislav Sedov if (mech_type != GSS_C_NO_OID) {
146*ae771770SStanislav Sedov major_status = _gss_find_mn(minor_status, name, mech_type, &mn);
147*ae771770SStanislav Sedov if (GSS_ERROR(major_status))
148*ae771770SStanislav Sedov return major_status;
149*ae771770SStanislav Sedov
150*ae771770SStanislav Sedov major_status = mech_pname_to_uid(minor_status, mn, uidp);
151*ae771770SStanislav Sedov if (major_status != GSS_S_COMPLETE)
152*ae771770SStanislav Sedov major_status = attr_pname_to_uid(minor_status, mn, uidp);
153*ae771770SStanislav Sedov } else {
154*ae771770SStanislav Sedov HEIM_SLIST_FOREACH(mn, &name->gn_mn, gmn_link) {
155*ae771770SStanislav Sedov major_status = mech_pname_to_uid(minor_status, mn, uidp);
156*ae771770SStanislav Sedov if (major_status != GSS_S_COMPLETE)
157*ae771770SStanislav Sedov major_status = attr_pname_to_uid(minor_status, mn, uidp);
158*ae771770SStanislav Sedov if (major_status != GSS_S_UNAVAILABLE)
159*ae771770SStanislav Sedov break;
160*ae771770SStanislav Sedov }
161*ae771770SStanislav Sedov }
162*ae771770SStanislav Sedov
163*ae771770SStanislav Sedov if (major_status != GSS_S_COMPLETE && mn != NULL)
164*ae771770SStanislav Sedov _gss_mg_error(mn->gmn_mech, major_status, *minor_status);
165*ae771770SStanislav Sedov
166*ae771770SStanislav Sedov return major_status;
167*ae771770SStanislav Sedov }
168