|
Packit |
fd8b60 |
/* -*- mode: c; c-basic-offset: 4; indent-tabs-mode: nil -*- */
|
|
Packit |
fd8b60 |
/*
|
|
Packit |
fd8b60 |
* Copyright 2009 by the Massachusetts Institute of Technology.
|
|
Packit |
fd8b60 |
* All Rights Reserved.
|
|
Packit |
fd8b60 |
*
|
|
Packit |
fd8b60 |
* Export of this software from the United States of America may
|
|
Packit |
fd8b60 |
* require a specific license from the United States Government.
|
|
Packit |
fd8b60 |
* It is the responsibility of any person or organization contemplating
|
|
Packit |
fd8b60 |
* export to obtain such a license before exporting.
|
|
Packit |
fd8b60 |
*
|
|
Packit |
fd8b60 |
* WITHIN THAT CONSTRAINT, permission to use, copy, modify, and
|
|
Packit |
fd8b60 |
* distribute this software and its documentation for any purpose and
|
|
Packit |
fd8b60 |
* without fee is hereby granted, provided that the above copyright
|
|
Packit |
fd8b60 |
* notice appear in all copies and that both that copyright notice and
|
|
Packit |
fd8b60 |
* this permission notice appear in supporting documentation, and that
|
|
Packit |
fd8b60 |
* the name of M.I.T. not be used in advertising or publicity pertaining
|
|
Packit |
fd8b60 |
* to distribution of the software without specific, written prior
|
|
Packit |
fd8b60 |
* permission. Furthermore if you modify this software you must label
|
|
Packit |
fd8b60 |
* your software as modified software and not distribute it in such a
|
|
Packit |
fd8b60 |
* fashion that it might be confused with the original M.I.T. software.
|
|
Packit |
fd8b60 |
* M.I.T. makes no representations about the suitability of
|
|
Packit |
fd8b60 |
* this software for any purpose. It is provided "as is" without express
|
|
Packit |
fd8b60 |
* or implied warranty.
|
|
Packit |
fd8b60 |
*/
|
|
Packit |
fd8b60 |
|
|
Packit |
fd8b60 |
#include <stdio.h>
|
|
Packit |
fd8b60 |
#include <stdlib.h>
|
|
Packit |
fd8b60 |
#include <string.h>
|
|
Packit |
fd8b60 |
|
|
Packit |
fd8b60 |
#include "common.h"
|
|
Packit |
fd8b60 |
|
|
Packit |
fd8b60 |
static int use_spnego = 0;
|
|
Packit |
fd8b60 |
|
|
Packit |
fd8b60 |
static void
|
|
Packit |
fd8b60 |
display_name(const char *tag, gss_name_t name)
|
|
Packit |
fd8b60 |
{
|
|
Packit |
fd8b60 |
OM_uint32 major, minor;
|
|
Packit |
fd8b60 |
gss_buffer_desc buf;
|
|
Packit |
fd8b60 |
|
|
Packit |
fd8b60 |
major = gss_display_name(&minor, name, &buf, NULL);
|
|
Packit |
fd8b60 |
check_gsserr("gss_display_name", major, minor);
|
|
Packit |
fd8b60 |
|
|
Packit |
fd8b60 |
printf("%s:\t%.*s\n", tag, (int)buf.length, (char *)buf.value);
|
|
Packit |
fd8b60 |
|
|
Packit |
fd8b60 |
(void)gss_release_buffer(&minor, &buf;;
|
|
Packit |
fd8b60 |
}
|
|
Packit |
fd8b60 |
|
|
Packit |
fd8b60 |
static void
|
|
Packit |
fd8b60 |
test_export_import_name(gss_name_t name)
|
|
Packit |
fd8b60 |
{
|
|
Packit |
fd8b60 |
OM_uint32 major, minor;
|
|
Packit |
fd8b60 |
gss_buffer_desc exported_name = GSS_C_EMPTY_BUFFER;
|
|
Packit |
fd8b60 |
gss_name_t imported_name = GSS_C_NO_NAME;
|
|
Packit |
fd8b60 |
gss_name_t imported_name_comp = GSS_C_NO_NAME;
|
|
Packit |
fd8b60 |
unsigned int i;
|
|
Packit |
fd8b60 |
|
|
Packit |
fd8b60 |
major = gss_export_name_composite(&minor, name, &exported_name);
|
|
Packit |
fd8b60 |
check_gsserr("gss_export_name_composite", major, minor);
|
|
Packit |
fd8b60 |
|
|
Packit |
fd8b60 |
printf("Exported name:\n");
|
|
Packit |
fd8b60 |
for (i = 0; i < exported_name.length; i++) {
|
|
Packit |
fd8b60 |
if ((i % 32) == 0)
|
|
Packit |
fd8b60 |
printf("\n");
|
|
Packit |
fd8b60 |
printf("%02x", ((char *)exported_name.value)[i] & 0xFF);
|
|
Packit |
fd8b60 |
}
|
|
Packit |
fd8b60 |
printf("\n");
|
|
Packit |
fd8b60 |
|
|
Packit |
fd8b60 |
major = gss_import_name(&minor, &exported_name, GSS_C_NT_EXPORT_NAME,
|
|
Packit |
fd8b60 |
&imported_name);
|
|
Packit |
fd8b60 |
check_gsserr("gss_import_name", major, minor);
|
|
Packit |
fd8b60 |
|
|
Packit |
fd8b60 |
major = gss_import_name(&minor, &exported_name, GSS_C_NT_COMPOSITE_EXPORT,
|
|
Packit |
fd8b60 |
&imported_name_comp);
|
|
Packit |
fd8b60 |
check_gsserr("gss_import_name", major, minor);
|
|
Packit |
fd8b60 |
(void)gss_release_buffer(&minor, &exported_name);
|
|
Packit |
fd8b60 |
|
|
Packit |
fd8b60 |
printf("\n");
|
|
Packit |
fd8b60 |
display_canon_name("Re-imported name", imported_name, &mech_krb5);
|
|
Packit |
fd8b60 |
printf("Re-imported attributes:\n\n");
|
|
Packit |
fd8b60 |
enumerate_attributes(imported_name, 0);
|
|
Packit |
fd8b60 |
|
|
Packit |
fd8b60 |
display_name("Re-imported (as composite) name", imported_name_comp);
|
|
Packit |
fd8b60 |
printf("Re-imported (as composite) attributes:\n\n");
|
|
Packit |
fd8b60 |
enumerate_attributes(imported_name_comp, 0);
|
|
Packit |
fd8b60 |
|
|
Packit |
fd8b60 |
(void)gss_release_name(&minor, &imported_name);
|
|
Packit |
fd8b60 |
(void)gss_release_name(&minor, &imported_name_comp);
|
|
Packit |
fd8b60 |
}
|
|
Packit |
fd8b60 |
|
|
Packit |
fd8b60 |
static void
|
|
Packit |
fd8b60 |
test_greet_authz_data(gss_name_t name)
|
|
Packit |
fd8b60 |
{
|
|
Packit |
fd8b60 |
OM_uint32 major, minor;
|
|
Packit |
fd8b60 |
gss_buffer_desc attr;
|
|
Packit |
fd8b60 |
gss_buffer_desc value;
|
|
Packit |
fd8b60 |
|
|
Packit |
fd8b60 |
attr.value = "urn:greet:greeting";
|
|
Packit |
fd8b60 |
attr.length = strlen((char *)attr.value);
|
|
Packit |
fd8b60 |
|
|
Packit |
fd8b60 |
major = gss_delete_name_attribute(&minor, name, &attr);
|
|
Packit |
fd8b60 |
if (major == GSS_S_UNAVAILABLE) {
|
|
Packit |
fd8b60 |
fprintf(stderr, "Warning: greet_client plugin not installed\n");
|
|
Packit |
fd8b60 |
exit(1);
|
|
Packit |
fd8b60 |
}
|
|
Packit |
fd8b60 |
check_gsserr("gss_delete_name_attribute", major, minor);
|
|
Packit |
fd8b60 |
|
|
Packit |
fd8b60 |
value.value = "Hello, acceptor world!";
|
|
Packit |
fd8b60 |
value.length = strlen((char *)value.value);
|
|
Packit |
fd8b60 |
major = gss_set_name_attribute(&minor, name, 1, &attr, &value);
|
|
Packit |
fd8b60 |
if (major == GSS_S_UNAVAILABLE)
|
|
Packit |
fd8b60 |
return;
|
|
Packit |
fd8b60 |
check_gsserr("gss_set_name_attribute", major, minor);
|
|
Packit |
fd8b60 |
}
|
|
Packit |
fd8b60 |
|
|
Packit |
fd8b60 |
static void
|
|
Packit |
fd8b60 |
test_map_name_to_any(gss_name_t name)
|
|
Packit |
fd8b60 |
{
|
|
Packit |
fd8b60 |
OM_uint32 major, minor;
|
|
Packit |
fd8b60 |
gss_buffer_desc type_id;
|
|
Packit |
fd8b60 |
krb5_pac pac;
|
|
Packit |
fd8b60 |
krb5_context context = NULL;
|
|
Packit |
fd8b60 |
krb5_error_code ret;
|
|
Packit |
fd8b60 |
size_t len, i;
|
|
Packit |
fd8b60 |
krb5_ui_4 *types;
|
|
Packit |
fd8b60 |
|
|
Packit |
fd8b60 |
type_id.value = "mspac";
|
|
Packit |
fd8b60 |
type_id.length = strlen((char *)type_id.value);
|
|
Packit |
fd8b60 |
|
|
Packit |
fd8b60 |
major = gss_map_name_to_any(&minor, name, 1, &type_id, (gss_any_t *)&pac;;
|
|
Packit |
fd8b60 |
if (major == GSS_S_UNAVAILABLE)
|
|
Packit |
fd8b60 |
return;
|
|
Packit |
fd8b60 |
check_gsserr("gss_map_name_to_any", major, minor);
|
|
Packit |
fd8b60 |
|
|
Packit |
fd8b60 |
ret = krb5_init_context(&context);
|
|
Packit |
fd8b60 |
check_k5err(context, "krb5_init_context", ret);
|
|
Packit |
fd8b60 |
|
|
Packit |
fd8b60 |
if (krb5_pac_get_types(context, pac, &len, &types) == 0) {
|
|
Packit |
fd8b60 |
printf("PAC buffer types:");
|
|
Packit |
fd8b60 |
for (i = 0; i < len; i++)
|
|
Packit |
fd8b60 |
printf(" %d", types[i]);
|
|
Packit |
fd8b60 |
printf("\n");
|
|
Packit |
fd8b60 |
free(types);
|
|
Packit |
fd8b60 |
}
|
|
Packit |
fd8b60 |
|
|
Packit |
fd8b60 |
(void)gss_release_any_name_mapping(&minor, name, &type_id,
|
|
Packit |
fd8b60 |
(gss_any_t *)&pac;;
|
|
Packit |
fd8b60 |
}
|
|
Packit |
fd8b60 |
|
|
Packit |
fd8b60 |
static void
|
|
Packit |
fd8b60 |
init_accept_sec_context(gss_cred_id_t verifier_cred_handle)
|
|
Packit |
fd8b60 |
{
|
|
Packit |
fd8b60 |
OM_uint32 major, minor, flags;
|
|
Packit |
fd8b60 |
gss_name_t source_name = GSS_C_NO_NAME, target_name = GSS_C_NO_NAME;
|
|
Packit |
fd8b60 |
gss_ctx_id_t initiator_context, acceptor_context;
|
|
Packit |
fd8b60 |
gss_OID mech = use_spnego ? &mech_spnego : &mech_krb5;
|
|
Packit |
fd8b60 |
|
|
Packit |
fd8b60 |
major = gss_inquire_cred(&minor, verifier_cred_handle, &target_name, NULL,
|
|
Packit |
fd8b60 |
NULL, NULL);
|
|
Packit |
fd8b60 |
check_gsserr("gss_inquire_cred", major, minor);
|
|
Packit |
fd8b60 |
|
|
Packit |
fd8b60 |
display_canon_name("Target name", target_name, &mech_krb5);
|
|
Packit |
fd8b60 |
|
|
Packit |
fd8b60 |
flags = GSS_C_REPLAY_FLAG | GSS_C_SEQUENCE_FLAG;
|
|
Packit |
fd8b60 |
establish_contexts(mech, verifier_cred_handle, verifier_cred_handle,
|
|
Packit |
fd8b60 |
target_name, flags, &initiator_context,
|
|
Packit |
fd8b60 |
&acceptor_context, &source_name, NULL, NULL);
|
|
Packit |
fd8b60 |
|
|
Packit |
fd8b60 |
display_canon_name("Source name", source_name, &mech_krb5);
|
|
Packit |
fd8b60 |
enumerate_attributes(source_name, 1);
|
|
Packit |
fd8b60 |
test_export_import_name(source_name);
|
|
Packit |
fd8b60 |
test_map_name_to_any(source_name);
|
|
Packit |
fd8b60 |
|
|
Packit |
fd8b60 |
(void)gss_release_name(&minor, &source_name);
|
|
Packit |
fd8b60 |
(void)gss_release_name(&minor, &target_name);
|
|
Packit |
fd8b60 |
(void)gss_delete_sec_context(&minor, &initiator_context, NULL);
|
|
Packit |
fd8b60 |
(void)gss_delete_sec_context(&minor, &acceptor_context, NULL);
|
|
Packit |
fd8b60 |
}
|
|
Packit |
fd8b60 |
|
|
Packit |
fd8b60 |
int
|
|
Packit |
fd8b60 |
main(int argc, char *argv[])
|
|
Packit |
fd8b60 |
{
|
|
Packit |
fd8b60 |
OM_uint32 minor, major;
|
|
Packit |
fd8b60 |
gss_cred_id_t cred_handle = GSS_C_NO_CREDENTIAL;
|
|
Packit |
fd8b60 |
gss_OID_set mechs, actual_mechs = GSS_C_NO_OID_SET;
|
|
Packit |
fd8b60 |
gss_name_t tmp_name, name;
|
|
Packit |
fd8b60 |
|
|
Packit |
fd8b60 |
if (argc > 1 && strcmp(argv[1], "--spnego") == 0) {
|
|
Packit |
fd8b60 |
use_spnego++;
|
|
Packit |
fd8b60 |
argc--;
|
|
Packit |
fd8b60 |
argv++;
|
|
Packit |
fd8b60 |
}
|
|
Packit |
fd8b60 |
|
|
Packit |
fd8b60 |
if (argc < 2) {
|
|
Packit |
fd8b60 |
fprintf(stderr, "Usage: %s [--spnego] principal [keytab]\n", argv[0]);
|
|
Packit |
fd8b60 |
exit(1);
|
|
Packit |
fd8b60 |
}
|
|
Packit |
fd8b60 |
|
|
Packit |
fd8b60 |
tmp_name = import_name(argv[1]);
|
|
Packit |
fd8b60 |
major = gss_canonicalize_name(&minor, tmp_name, &mech_krb5, &name);
|
|
Packit |
fd8b60 |
check_gsserr("gss_canonicalze_name", major, minor);
|
|
Packit |
fd8b60 |
(void)gss_release_name(&minor, &tmp_name);
|
|
Packit |
fd8b60 |
|
|
Packit |
fd8b60 |
test_greet_authz_data(name);
|
|
Packit |
fd8b60 |
|
|
Packit |
fd8b60 |
if (argc >= 3) {
|
|
Packit |
fd8b60 |
major = krb5_gss_register_acceptor_identity(argv[2]);
|
|
Packit |
fd8b60 |
check_gsserr("krb5_gss_register_acceptor_identity", major, minor);
|
|
Packit |
fd8b60 |
}
|
|
Packit |
fd8b60 |
|
|
Packit |
fd8b60 |
mechs = use_spnego ? &mechset_spnego : &mechset_krb5;
|
|
Packit |
fd8b60 |
|
|
Packit |
fd8b60 |
/* get default cred */
|
|
Packit |
fd8b60 |
major = gss_acquire_cred(&minor, name, GSS_C_INDEFINITE, mechs, GSS_C_BOTH,
|
|
Packit |
fd8b60 |
&cred_handle, &actual_mechs, NULL);
|
|
Packit |
fd8b60 |
check_gsserr("gss_acquire_cred", major, minor);
|
|
Packit |
fd8b60 |
|
|
Packit |
fd8b60 |
(void)gss_release_oid_set(&minor, &actual_mechs);
|
|
Packit |
fd8b60 |
|
|
Packit |
fd8b60 |
init_accept_sec_context(cred_handle);
|
|
Packit |
fd8b60 |
|
|
Packit |
fd8b60 |
printf("\n");
|
|
Packit |
fd8b60 |
|
|
Packit |
fd8b60 |
(void)gss_release_cred(&minor, &cred_handle);
|
|
Packit |
fd8b60 |
(void)gss_release_oid_set(&minor, &actual_mechs);
|
|
Packit |
fd8b60 |
(void)gss_release_name(&minor, &name);
|
|
Packit |
fd8b60 |
return 0;
|
|
Packit |
fd8b60 |
}
|