Home | History | Annotate | Line # | Download | only in ntlm
      1 /*	$NetBSD: iter_cred.c,v 1.2 2017/01/28 21:31:47 christos Exp $	*/
      2 
      3 /*
      4  * Copyright (c) 2006 Kungliga Tekniska Hgskolan
      5  * (Royal Institute of Technology, Stockholm, Sweden).
      6  * All rights reserved.
      7  *
      8  * Portions Copyright (c) 2009 Apple Inc. All rights reserved.
      9  *
     10  * Redistribution and use in source and binary forms, with or without
     11  * modification, are permitted provided that the following conditions
     12  * are met:
     13  *
     14  * 1. Redistributions of source code must retain the above copyright
     15  *    notice, this list of conditions and the following disclaimer.
     16  *
     17  * 2. Redistributions in binary form must reproduce the above copyright
     18  *    notice, this list of conditions and the following disclaimer in the
     19  *    documentation and/or other materials provided with the distribution.
     20  *
     21  * 3. Neither the name of the Institute nor the names of its contributors
     22  *    may be used to endorse or promote products derived from this software
     23  *    without specific prior written permission.
     24  *
     25  * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
     26  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
     27  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
     28  * ARE DISCLAIMED.  IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
     29  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
     30  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
     31  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
     32  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
     33  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
     34  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
     35  * SUCH DAMAGE.
     36  */
     37 
     38 #include "ntlm.h"
     39 
     40 void GSSAPI_CALLCONV
     41 _gss_ntlm_iter_creds_f(OM_uint32 flags,
     42 		       void *userctx ,
     43 		       void (*cred_iter)(void *, gss_OID, gss_cred_id_t))
     44 {
     45 #ifdef HAVE_KCM
     46     krb5_error_code ret;
     47     krb5_context context = NULL;
     48     krb5_storage *request, *response;
     49     krb5_data response_data;
     50 
     51     ret = krb5_init_context(&context);
     52     if (ret)
     53 	goto done;
     54 
     55     ret = krb5_kcm_storage_request(context, KCM_OP_GET_NTLM_USER_LIST, &request);
     56     if (ret)
     57 	goto done;
     58 
     59     ret = krb5_kcm_call(context, request, &response, &response_data);
     60     krb5_storage_free(request);
     61     if (ret)
     62 	goto done;
     63 
     64     while (1) {
     65 	uint32_t morep;
     66 	char *user = NULL, *domain = NULL;
     67 	ntlm_cred dn;
     68 
     69 	ret = krb5_ret_uint32(response, &morep);
     70 	if (ret) goto out;
     71 
     72 	if (!morep) goto out;
     73 
     74 	ret = krb5_ret_stringz(response, &user);
     75 	if (ret) goto out;
     76 	ret = krb5_ret_stringz(response, &domain);
     77 	if (ret) {
     78 	    free(user);
     79 	    goto out;
     80 	}
     81 
     82 	dn = calloc(1, sizeof(*dn));
     83 	if (dn == NULL) {
     84 	    free(user);
     85 	    free(domain);
     86 	    goto out;
     87 	}
     88 	dn->username = user;
     89 	dn->domain = domain;
     90 
     91 	cred_iter(userctx, GSS_NTLM_MECHANISM, (gss_cred_id_t)dn);
     92     }
     93  out:
     94     krb5_storage_free(response);
     95     krb5_data_free(&response_data);
     96  done:
     97     if (context)
     98 	krb5_free_context(context);
     99 #endif /* HAVE_KCM */
    100     (*cred_iter)(userctx, NULL, NULL);
    101 }
    102