/*

 * Copyright 2008 by the Massachusetts Institute of Technology.

 * All Rights Reserved.

 *

 * Export of this software from the United States of America may

 *   require a specific license from the United States Government.

 *   It is the responsibility of any person or organization contemplating

 *   export to obtain such a license before exporting.

 *

 * WITHIN THAT CONSTRAINT, permission to use, copy, modify, and

 * distribute this software and its documentation for any purpose and

 * without fee is hereby granted, provided that the above copyright

 * notice appear in all copies and that both that copyright notice and

 * this permission notice appear in supporting documentation, and that

 * the name of M.I.T. not be used in advertising or publicity pertaining

 * to distribution of the software without specific, written prior

 * permission.  Furthermore if you modify this software you must label

 * your software as modified software and not distribute it in such a

 * fashion that it might be confused with the original M.I.T. software.

 * M.I.T. makes no representations about the suitability of

 * this software for any purpose.  It is provided "as is" without express

 * or implied warranty.

 */

/* Glue routine for gss_inquire_cred_by_oid */

#include "mglueP.h"

#include <stdio.h>

#ifdef HAVE_STDLIB_H

#include <stdlib.h>

#endif

#include <string.h>

#include <time.h>

static OM_uint32 append_to_buffer_set(OM_uint32 *minor_status,

				      gss_buffer_set_t *dst,

				      const gss_buffer_set_t src)

{

    size_t i;

    OM_uint32 status;

    if (src == GSS_C_NO_BUFFER_SET)

	return GSS_S_COMPLETE;

    if (*dst == GSS_C_NO_BUFFER_SET) {

	status = gss_create_empty_buffer_set(minor_status, dst);

	if (status != GSS_S_COMPLETE)

	    return status;

    }

    status = GSS_S_COMPLETE;

    for (i = 0; i < src->count; i++) {

	status = gss_add_buffer_set_member(minor_status,

					   &src->elements[i],

					   dst);

	if (status != GSS_S_COMPLETE)

	    break;

    }

    return status;

}

OM_uint32 KRB5_CALLCONV

gss_inquire_cred_by_oid(OM_uint32 *minor_status,

	                const gss_cred_id_t cred_handle,

	                const gss_OID desired_object,

	                gss_buffer_set_t *data_set)

{

    gss_union_cred_t	union_cred;

    gss_mechanism	mech;

    int			i;

    gss_buffer_set_t	union_set = GSS_C_NO_BUFFER_SET;

    gss_buffer_set_t	ret_set = GSS_C_NO_BUFFER_SET;

    OM_uint32		status, minor;

    if (minor_status != NULL)

	*minor_status = 0;

    if (data_set != NULL)

	*data_set = GSS_C_NO_BUFFER_SET;

    if (minor_status == NULL || data_set == NULL)

	return GSS_S_CALL_INACCESSIBLE_WRITE;

    if (cred_handle == GSS_C_NO_CREDENTIAL)

	return GSS_S_CALL_INACCESSIBLE_READ | GSS_S_NO_CRED;

    if (desired_object == GSS_C_NO_OID)

	return GSS_S_CALL_INACCESSIBLE_READ;

    union_cred = (gss_union_cred_t) cred_handle;

    status = GSS_S_UNAVAILABLE;

    for (i = 0; i < union_cred->count; i++) {

	mech = gssint_get_mechanism(&union_cred->mechs_array[i]);

	if (mech == NULL) {

	    status = GSS_S_BAD_MECH;

	    break;

	}

	if (mech->gss_inquire_cred_by_oid == NULL) {

	    status = GSS_S_UNAVAILABLE;

	    continue;

	}

	status = (mech->gss_inquire_cred_by_oid)(minor_status,

						 union_cred->cred_array[i],

						 desired_object,

						 &ret_set);

	if (status != GSS_S_COMPLETE) {

	    map_error(minor_status, mech);

	    continue;

	}

	if (union_cred->count == 1) {

	    union_set = ret_set;

	    break;

	}

	status = append_to_buffer_set(minor_status, &union_set, ret_set);

	gss_release_buffer_set(&minor, &ret_set);

	if (status != GSS_S_COMPLETE)

	    break;

    }

    if (status != GSS_S_COMPLETE)

	gss_release_buffer_set(&minor, &union_set);

    *data_set = union_set;

    return status;

}