+++ /dev/null
-#include "putty.h"\r
-\r
-#include <string.h>\r
-#include "sshgssc.h"\r
-#include "misc.h"\r
-\r
-#ifndef NO_GSSAPI\r
-\r
-static Ssh_gss_stat ssh_gssapi_indicate_mech(struct ssh_gss_library *lib,\r
- Ssh_gss_buf *mech)\r
-{\r
- /* Copy constant into mech */\r
- mech->length = GSS_MECH_KRB5->length;\r
- mech->value = GSS_MECH_KRB5->elements;\r
- return SSH_GSS_OK;\r
-}\r
-\r
-static Ssh_gss_stat ssh_gssapi_import_name(struct ssh_gss_library *lib,\r
- char *host,\r
- Ssh_gss_name *srv_name)\r
-{\r
- struct gssapi_functions *gss = &lib->u.gssapi;\r
- OM_uint32 min_stat,maj_stat;\r
- gss_buffer_desc host_buf;\r
- char *pStr;\r
-\r
- pStr = dupcat("host@", host, NULL);\r
-\r
- host_buf.value = pStr;\r
- host_buf.length = strlen(pStr);\r
-\r
- maj_stat = gss->import_name(&min_stat, &host_buf,\r
- GSS_C_NT_HOSTBASED_SERVICE, srv_name);\r
- /* Release buffer */\r
- sfree(pStr);\r
- if (maj_stat == GSS_S_COMPLETE) return SSH_GSS_OK;\r
- return SSH_GSS_FAILURE;\r
-}\r
-\r
-static Ssh_gss_stat ssh_gssapi_acquire_cred(struct ssh_gss_library *lib,\r
- Ssh_gss_ctx *ctx)\r
-{\r
- gssapi_ssh_gss_ctx *gssctx = snew(gssapi_ssh_gss_ctx);\r
-\r
- gssctx->maj_stat = gssctx->min_stat = GSS_S_COMPLETE;\r
- gssctx->ctx = GSS_C_NO_CONTEXT;\r
- *ctx = (Ssh_gss_ctx) gssctx;\r
-\r
- return SSH_GSS_OK;\r
-}\r
-\r
-static Ssh_gss_stat ssh_gssapi_init_sec_context(struct ssh_gss_library *lib,\r
- Ssh_gss_ctx *ctx,\r
- Ssh_gss_name srv_name,\r
- int to_deleg,\r
- Ssh_gss_buf *recv_tok,\r
- Ssh_gss_buf *send_tok)\r
-{\r
- struct gssapi_functions *gss = &lib->u.gssapi;\r
- gssapi_ssh_gss_ctx *gssctx = (gssapi_ssh_gss_ctx*) *ctx;\r
- OM_uint32 ret_flags;\r
-\r
- if (to_deleg) to_deleg = GSS_C_DELEG_FLAG;\r
- gssctx->maj_stat = gss->init_sec_context(&gssctx->min_stat,\r
- GSS_C_NO_CREDENTIAL,\r
- &gssctx->ctx,\r
- srv_name,\r
- (gss_OID) GSS_MECH_KRB5,\r
- GSS_C_MUTUAL_FLAG |\r
- GSS_C_INTEG_FLAG | to_deleg,\r
- 0,\r
- GSS_C_NO_CHANNEL_BINDINGS,\r
- recv_tok,\r
- NULL, /* ignore mech type */\r
- send_tok,\r
- &ret_flags,\r
- NULL); /* ignore time_rec */\r
-\r
- if (gssctx->maj_stat == GSS_S_COMPLETE) return SSH_GSS_S_COMPLETE;\r
- if (gssctx->maj_stat == GSS_S_CONTINUE_NEEDED) return SSH_GSS_S_CONTINUE_NEEDED;\r
- return SSH_GSS_FAILURE;\r
-}\r
-\r
-static Ssh_gss_stat ssh_gssapi_display_status(struct ssh_gss_library *lib,\r
- Ssh_gss_ctx ctx,\r
- Ssh_gss_buf *buf)\r
-{\r
- struct gssapi_functions *gss = &lib->u.gssapi;\r
- gssapi_ssh_gss_ctx *gssctx = (gssapi_ssh_gss_ctx *) ctx;\r
- OM_uint32 lmin,lmax;\r
- OM_uint32 ccc;\r
- gss_buffer_desc msg_maj=GSS_C_EMPTY_BUFFER;\r
- gss_buffer_desc msg_min=GSS_C_EMPTY_BUFFER;\r
-\r
- /* Return empty buffer in case of failure */\r
- SSH_GSS_CLEAR_BUF(buf);\r
-\r
- /* get first mesg from GSS */\r
- ccc=0;\r
- lmax=gss->display_status(&lmin,gssctx->maj_stat,GSS_C_GSS_CODE,(gss_OID) GSS_MECH_KRB5,&ccc,&msg_maj);\r
-\r
- if (lmax != GSS_S_COMPLETE) return SSH_GSS_FAILURE;\r
-\r
- /* get first mesg from Kerberos */\r
- ccc=0;\r
- lmax=gss->display_status(&lmin,gssctx->min_stat,GSS_C_MECH_CODE,(gss_OID) GSS_MECH_KRB5,&ccc,&msg_min);\r
-\r
- if (lmax != GSS_S_COMPLETE) {\r
- gss->release_buffer(&lmin, &msg_maj);\r
- return SSH_GSS_FAILURE;\r
- }\r
-\r
- /* copy data into buffer */\r
- buf->length = msg_maj.length + msg_min.length + 1;\r
- buf->value = snewn(buf->length + 1, char);\r
-\r
- /* copy mem */\r
- memcpy((char *)buf->value, msg_maj.value, msg_maj.length);\r
- ((char *)buf->value)[msg_maj.length] = ' ';\r
- memcpy((char *)buf->value + msg_maj.length + 1, msg_min.value, msg_min.length);\r
- ((char *)buf->value)[buf->length] = 0;\r
- /* free mem & exit */\r
- gss->release_buffer(&lmin, &msg_maj);\r
- gss->release_buffer(&lmin, &msg_min);\r
- return SSH_GSS_OK;\r
-}\r
-\r
-static Ssh_gss_stat ssh_gssapi_free_tok(struct ssh_gss_library *lib,\r
- Ssh_gss_buf *send_tok)\r
-{\r
- struct gssapi_functions *gss = &lib->u.gssapi;\r
- OM_uint32 min_stat,maj_stat;\r
- maj_stat = gss->release_buffer(&min_stat, send_tok);\r
-\r
- if (maj_stat == GSS_S_COMPLETE) return SSH_GSS_OK;\r
- return SSH_GSS_FAILURE;\r
-}\r
-\r
-static Ssh_gss_stat ssh_gssapi_release_cred(struct ssh_gss_library *lib,\r
- Ssh_gss_ctx *ctx)\r
-{\r
- struct gssapi_functions *gss = &lib->u.gssapi;\r
- gssapi_ssh_gss_ctx *gssctx = (gssapi_ssh_gss_ctx *) *ctx;\r
- OM_uint32 min_stat;\r
- OM_uint32 maj_stat=GSS_S_COMPLETE;\r
-\r
- if (gssctx == NULL) return SSH_GSS_FAILURE;\r
- if (gssctx->ctx != GSS_C_NO_CONTEXT)\r
- maj_stat = gss->delete_sec_context(&min_stat,&gssctx->ctx,GSS_C_NO_BUFFER);\r
- sfree(gssctx);\r
-\r
- if (maj_stat == GSS_S_COMPLETE) return SSH_GSS_OK;\r
- return SSH_GSS_FAILURE;\r
-}\r
-\r
-\r
-static Ssh_gss_stat ssh_gssapi_release_name(struct ssh_gss_library *lib,\r
- Ssh_gss_name *srv_name)\r
-{\r
- struct gssapi_functions *gss = &lib->u.gssapi;\r
- OM_uint32 min_stat,maj_stat;\r
- maj_stat = gss->release_name(&min_stat, srv_name);\r
-\r
- if (maj_stat == GSS_S_COMPLETE) return SSH_GSS_OK;\r
- return SSH_GSS_FAILURE;\r
-}\r
-\r
-static Ssh_gss_stat ssh_gssapi_get_mic(struct ssh_gss_library *lib,\r
- Ssh_gss_ctx ctx, Ssh_gss_buf *buf,\r
- Ssh_gss_buf *hash)\r
-{\r
- struct gssapi_functions *gss = &lib->u.gssapi;\r
- gssapi_ssh_gss_ctx *gssctx = (gssapi_ssh_gss_ctx *) ctx;\r
- if (gssctx == NULL) return SSH_GSS_FAILURE;\r
- return gss->get_mic(&(gssctx->min_stat), gssctx->ctx, 0, buf, hash);\r
-}\r
-\r
-static Ssh_gss_stat ssh_gssapi_free_mic(struct ssh_gss_library *lib,\r
- Ssh_gss_buf *hash)\r
-{\r
- /* On Unix this is the same freeing process as ssh_gssapi_free_tok. */\r
- return ssh_gssapi_free_tok(lib, hash);\r
-}\r
-\r
-void ssh_gssapi_bind_fns(struct ssh_gss_library *lib)\r
-{\r
- lib->indicate_mech = ssh_gssapi_indicate_mech;\r
- lib->import_name = ssh_gssapi_import_name;\r
- lib->release_name = ssh_gssapi_release_name;\r
- lib->init_sec_context = ssh_gssapi_init_sec_context;\r
- lib->free_tok = ssh_gssapi_free_tok;\r
- lib->acquire_cred = ssh_gssapi_acquire_cred;\r
- lib->release_cred = ssh_gssapi_release_cred;\r
- lib->get_mic = ssh_gssapi_get_mic;\r
- lib->free_mic = ssh_gssapi_free_mic;\r
- lib->display_status = ssh_gssapi_display_status;\r
-}\r
-\r
-#else\r
-\r
-/* Dummy function so this source file defines something if NO_GSSAPI\r
- is defined. */\r
-\r
-int ssh_gssapi_init(void)\r
-{\r
- return 0;\r
-}\r
-\r
-#endif\r
OSDN Git Service
