1*ae771770SStanislav Sedov /*
2*ae771770SStanislav Sedov * Copyright (c) 2006 Kungliga Tekniska H�gskolan
3*ae771770SStanislav Sedov * (Royal Institute of Technology, Stockholm, Sweden).
4*ae771770SStanislav Sedov * All rights reserved.
5*ae771770SStanislav Sedov *
6*ae771770SStanislav Sedov * Portions Copyright (c) 2009 Apple Inc. All rights reserved.
7*ae771770SStanislav Sedov *
8*ae771770SStanislav Sedov * Redistribution and use in source and binary forms, with or without
9*ae771770SStanislav Sedov * modification, are permitted provided that the following conditions
10*ae771770SStanislav Sedov * are met:
11*ae771770SStanislav Sedov *
12*ae771770SStanislav Sedov * 1. Redistributions of source code must retain the above copyright
13*ae771770SStanislav Sedov * notice, this list of conditions and the following disclaimer.
14*ae771770SStanislav Sedov *
15*ae771770SStanislav Sedov * 2. Redistributions in binary form must reproduce the above copyright
16*ae771770SStanislav Sedov * notice, this list of conditions and the following disclaimer in the
17*ae771770SStanislav Sedov * documentation and/or other materials provided with the distribution.
18*ae771770SStanislav Sedov *
19*ae771770SStanislav Sedov * 3. Neither the name of the Institute nor the names of its contributors
20*ae771770SStanislav Sedov * may be used to endorse or promote products derived from this software
21*ae771770SStanislav Sedov * without specific prior written permission.
22*ae771770SStanislav Sedov *
23*ae771770SStanislav Sedov * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
24*ae771770SStanislav Sedov * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
25*ae771770SStanislav Sedov * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
26*ae771770SStanislav Sedov * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
27*ae771770SStanislav Sedov * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
28*ae771770SStanislav Sedov * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
29*ae771770SStanislav Sedov * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
30*ae771770SStanislav Sedov * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
31*ae771770SStanislav Sedov * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
32*ae771770SStanislav Sedov * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
33*ae771770SStanislav Sedov * SUCH DAMAGE.
34*ae771770SStanislav Sedov */
35*ae771770SStanislav Sedov
36*ae771770SStanislav Sedov #include "ntlm.h"
37*ae771770SStanislav Sedov
38*ae771770SStanislav Sedov OM_uint32 GSSAPI_CALLCONV
_gss_ntlm_inquire_sec_context_by_oid(OM_uint32 * minor_status,const gss_ctx_id_t context_handle,const gss_OID desired_object,gss_buffer_set_t * data_set)39*ae771770SStanislav Sedov _gss_ntlm_inquire_sec_context_by_oid(OM_uint32 *minor_status,
40*ae771770SStanislav Sedov const gss_ctx_id_t context_handle,
41*ae771770SStanislav Sedov const gss_OID desired_object,
42*ae771770SStanislav Sedov gss_buffer_set_t *data_set)
43*ae771770SStanislav Sedov {
44*ae771770SStanislav Sedov ntlm_ctx ctx = (ntlm_ctx)context_handle;
45*ae771770SStanislav Sedov
46*ae771770SStanislav Sedov if (ctx == NULL) {
47*ae771770SStanislav Sedov *minor_status = 0;
48*ae771770SStanislav Sedov return GSS_S_NO_CONTEXT;
49*ae771770SStanislav Sedov }
50*ae771770SStanislav Sedov
51*ae771770SStanislav Sedov if (gss_oid_equal(desired_object, GSS_NTLM_GET_SESSION_KEY_X) ||
52*ae771770SStanislav Sedov gss_oid_equal(desired_object, GSS_C_INQ_SSPI_SESSION_KEY)) {
53*ae771770SStanislav Sedov gss_buffer_desc value;
54*ae771770SStanislav Sedov
55*ae771770SStanislav Sedov value.length = ctx->sessionkey.length;
56*ae771770SStanislav Sedov value.value = ctx->sessionkey.data;
57*ae771770SStanislav Sedov
58*ae771770SStanislav Sedov return gss_add_buffer_set_member(minor_status,
59*ae771770SStanislav Sedov &value,
60*ae771770SStanislav Sedov data_set);
61*ae771770SStanislav Sedov } else if (gss_oid_equal(desired_object, GSS_C_INQ_WIN2K_PAC_X)) {
62*ae771770SStanislav Sedov if (ctx->pac.length == 0) {
63*ae771770SStanislav Sedov *minor_status = ENOENT;
64*ae771770SStanislav Sedov return GSS_S_FAILURE;
65*ae771770SStanislav Sedov }
66*ae771770SStanislav Sedov
67*ae771770SStanislav Sedov return gss_add_buffer_set_member(minor_status,
68*ae771770SStanislav Sedov &ctx->pac,
69*ae771770SStanislav Sedov data_set);
70*ae771770SStanislav Sedov
71*ae771770SStanislav Sedov } else if (gss_oid_equal(desired_object, GSS_C_NTLM_AVGUEST)) {
72*ae771770SStanislav Sedov gss_buffer_desc value;
73*ae771770SStanislav Sedov uint32_t num;
74*ae771770SStanislav Sedov
75*ae771770SStanislav Sedov if (ctx->kcmflags & KCM_NTLM_FLAG_AV_GUEST)
76*ae771770SStanislav Sedov num = 1;
77*ae771770SStanislav Sedov else
78*ae771770SStanislav Sedov num = 0;
79*ae771770SStanislav Sedov
80*ae771770SStanislav Sedov value.length = sizeof(num);
81*ae771770SStanislav Sedov value.value = #
82*ae771770SStanislav Sedov
83*ae771770SStanislav Sedov return gss_add_buffer_set_member(minor_status,
84*ae771770SStanislav Sedov &value,
85*ae771770SStanislav Sedov data_set);
86*ae771770SStanislav Sedov } else {
87*ae771770SStanislav Sedov *minor_status = 0;
88*ae771770SStanislav Sedov return GSS_S_FAILURE;
89*ae771770SStanislav Sedov }
90*ae771770SStanislav Sedov }
91