authgss_prot.c File Reference

#include <stdio.h>
#include <stdlib.h>
#include <stdarg.h>
#include <rpc/types.h>
#include <rpc/xdr.h>
#include <rpc/auth.h>
#include <rpc/auth_gss.h>
#include <rpc/rpc.h>
#include <gssapi/gssapi.h>

Include dependency graph for authgss_prot.c:

Go to the source code of this file.

Functions
bool_t	xdr_rpc_gss_cred (XDR *xdrs, struct rpc_gss_cred *p)
bool_t	xdr_rpc_gss_init_args (XDR *xdrs, gss_buffer_desc *p)
bool_t	xdr_rpc_gss_init_res (XDR *xdrs, struct rpc_gss_init_res *p)
bool_t	xdr_rpc_gss_wrap_data (XDR *xdrs, xdrproc_t xdr_func, caddr_t xdr_ptr, gss_ctx_id_t ctx, gss_qop_t qop, rpc_gss_svc_t svc, u_int seq)
bool_t	xdr_rpc_gss_unwrap_data (XDR *xdrs, xdrproc_t xdr_func, caddr_t xdr_ptr, gss_ctx_id_t ctx, gss_qop_t qop, rpc_gss_svc_t svc, u_int seq)
bool_t	xdr_rpc_gss_data (XDR *xdrs, xdrproc_t xdr_func, caddr_t xdr_ptr, gss_ctx_id_t ctx, gss_qop_t qop, rpc_gss_svc_t svc, u_int seq)
void	log_debug (const char *fmt,...)
void	log_status (char *m, OM_uint32 maj_stat, OM_uint32 min_stat)
void	log_hexdump (const u_char *buf, int len, int offset)

Function Documentation

log_debug()

void log_debug	(	const char *	fmt,
			...
	)

Definition at line 340 of file authgss_prot.c.

{
}

Referenced by xdr_rpc_gss_cred(), xdr_rpc_gss_init_args(), xdr_rpc_gss_init_res(), xdr_rpc_gss_unwrap_data(), and xdr_rpc_gss_wrap_data().

log_hexdump()

void log_hexdump	(	const u_char *	buf,
		int	len,
		int	offset
	)

Definition at line 350 of file authgss_prot.c.

{
}

log_status()

void log_status	(	char *	m,
		OM_uint32	maj_stat,
		OM_uint32	min_stat
	)

Definition at line 345 of file authgss_prot.c.

{
}

Referenced by authgss_create_default(), authgss_marshal(), authgss_refresh(), authgss_validate(), svcauth_gss_accept_sec_context(), svcauth_gss_acquire_cred(), svcauth_gss_import_name(), svcauth_gss_nextverf(), svcauth_gss_release_cred(), svcauth_gss_set_svc_name(), svcauth_gss_validate(), xdr_rpc_gss_unwrap_data(), and xdr_rpc_gss_wrap_data().

xdr_rpc_gss_cred()

bool_t xdr_rpc_gss_cred	(	XDR *	xdrs,
		struct rpc_gss_cred *	p
	)

Definition at line 48 of file authgss_prot.c.

{
    bool_t xdr_stat;
 
    xdr_stat = (xdr_u_int(xdrs, &p->gc_v) &&
            xdr_enum(xdrs, (enum_t *)&p->gc_proc) &&
            xdr_u_int(xdrs, &p->gc_seq) &&
            xdr_enum(xdrs, (enum_t *)&p->gc_svc) &&
            xdr_bytes(xdrs, (char **)&p->gc_ctx.value,
                  (u_int *)&p->gc_ctx.length, MAX_AUTH_BYTES));
 
    log_debug("xdr_rpc_gss_cred: %s %s "
          "(v %d, proc %d, seq %d, svc %d, ctx %p:%d)",
          (xdrs->x_op == XDR_ENCODE) ? "encode" : "decode",
          (xdr_stat == TRUE) ? "success" : "failure",
          p->gc_v, p->gc_proc, p->gc_seq, p->gc_svc,
          p->gc_ctx.value, p->gc_ctx.length);
 
    return (xdr_stat);
}

Referenced by _svcauth_gss(), and authgss_marshal().

xdr_rpc_gss_data()

bool_t xdr_rpc_gss_data	(	XDR *	xdrs,
		xdrproc_t	xdr_func,
		caddr_t	xdr_ptr,
		gss_ctx_id_t	ctx,
		gss_qop_t	qop,
		rpc_gss_svc_t	svc,
		u_int	seq
	)

Definition at line 251 of file authgss_prot.c.

{
    switch (xdrs->x_op) {
 
    case XDR_ENCODE:
        return (xdr_rpc_gss_wrap_data(xdrs, xdr_func, xdr_ptr,
                          ctx, qop, svc, seq));
    case XDR_DECODE:
        return (xdr_rpc_gss_unwrap_data(xdrs, xdr_func, xdr_ptr,
                        ctx, qop,svc, seq));
    case XDR_FREE:
        return (TRUE);
    }
    return (FALSE);
}

Referenced by authgss_unwrap(), authgss_wrap(), svcauth_gss_unwrap(), and svcauth_gss_wrap().

xdr_rpc_gss_init_args()

bool_t xdr_rpc_gss_init_args	(	XDR *	xdrs,
		gss_buffer_desc *	p
	)

Definition at line 70 of file authgss_prot.c.

{
    bool_t xdr_stat;
 
    xdr_stat = xdr_bytes(xdrs, (char **)&p->value,
                  (u_int *)&p->length, MAX_NETOBJ_SZ);
 
    log_debug("xdr_rpc_gss_init_args: %s %s (token %p:%d)",
          (xdrs->x_op == XDR_ENCODE) ? "encode" : "decode",
          (xdr_stat == TRUE) ? "success" : "failure",
          p->value, p->length);
 
    return (xdr_stat);
}

Referenced by authgss_refresh(), and svcauth_gss_accept_sec_context().

xdr_rpc_gss_init_res()

bool_t xdr_rpc_gss_init_res	(	XDR *	xdrs,
		struct rpc_gss_init_res *	p
	)

Definition at line 86 of file authgss_prot.c.

{
    bool_t xdr_stat;
 
    xdr_stat = (xdr_bytes(xdrs, (char **)&p->gr_ctx.value,
                  (u_int *)&p->gr_ctx.length, MAX_NETOBJ_SZ) &&
            xdr_u_int(xdrs, &p->gr_major) &&
            xdr_u_int(xdrs, &p->gr_minor) &&
            xdr_u_int(xdrs, &p->gr_win) &&
            xdr_bytes(xdrs, (char **)&p->gr_token.value,
                  (u_int *)&p->gr_token.length, MAX_NETOBJ_SZ));
 
    log_debug("xdr_rpc_gss_init_res %s %s "
          "(ctx %p:%d, maj %d, min %d, win %d, token %p:%d)",
          (xdrs->x_op == XDR_ENCODE) ? "encode" : "decode",
          (xdr_stat == TRUE) ? "success" : "failure",
          p->gr_ctx.value, p->gr_ctx.length,
          p->gr_major, p->gr_minor, p->gr_win,
          p->gr_token.value, p->gr_token.length);
 
    return (xdr_stat);
}

Referenced by _svcauth_gss(), and authgss_refresh().

xdr_rpc_gss_unwrap_data()

bool_t xdr_rpc_gss_unwrap_data	(	XDR *	xdrs,
		xdrproc_t	xdr_func,
		caddr_t	xdr_ptr,
		gss_ctx_id_t	ctx,
		gss_qop_t	qop,
		rpc_gss_svc_t	svc,
		u_int	seq
	)

Definition at line 172 of file authgss_prot.c.

{
    XDR     tmpxdrs;
    gss_buffer_desc databuf, wrapbuf;
    OM_uint32   maj_stat, min_stat;
    u_int       seq_num, qop_state;
    int         conf_state;
    bool_t      xdr_stat;
 
    if (xdr_func == (xdrproc_t)xdr_void || xdr_ptr == NULL)
        return (TRUE);
 
    memset(&databuf, 0, sizeof(databuf));
    memset(&wrapbuf, 0, sizeof(wrapbuf));
 
    if (svc == RPCSEC_GSS_SVC_INTEGRITY) {
        /* Decode databody_integ. */
        if (!xdr_bytes(xdrs, (char **)&databuf.value, (u_int *)&databuf.length,
                   MAX_NETOBJ_SZ)) {
            log_debug("xdr decode databody_integ failed");
            return (FALSE);
        }
        /* Decode checksum. */
        if (!xdr_bytes(xdrs, (char **)&wrapbuf.value, (u_int *)&wrapbuf.length,
                   MAX_NETOBJ_SZ)) {
            gss_release_buffer(&min_stat, &databuf);
            log_debug("xdr decode checksum failed");
            return (FALSE);
        }
        /* Verify checksum and QOP. */
        maj_stat = gss_verify_mic(&min_stat, ctx, &databuf,
                      &wrapbuf, &qop_state);
        gss_release_buffer(&min_stat, &wrapbuf);
 
        if (maj_stat != GSS_S_COMPLETE || qop_state != qop) {
            gss_release_buffer(&min_stat, &databuf);
            log_status("gss_verify_mic", maj_stat, min_stat);
            return (FALSE);
        }
    }
    else if (svc == RPCSEC_GSS_SVC_PRIVACY) {
        /* Decode databody_priv. */
        if (!xdr_bytes(xdrs, (char **)&wrapbuf.value, (u_int *)&wrapbuf.length,
                   MAX_NETOBJ_SZ)) {
            log_debug("xdr decode databody_priv failed");
            return (FALSE);
        }
        /* Decrypt databody. */
        maj_stat = gss_unwrap(&min_stat, ctx, &wrapbuf, &databuf,
                      &conf_state, &qop_state);
 
        gss_release_buffer(&min_stat, &wrapbuf);
 
        /* Verify encryption and QOP. */
        if (maj_stat != GSS_S_COMPLETE || qop_state != qop ||
            conf_state != TRUE) {
            gss_release_buffer(&min_stat, &databuf);
            log_status("gss_unwrap", maj_stat, min_stat);
            return (FALSE);
        }
    }
    /* Decode rpc_gss_data_t (sequence number + arguments). */
    xdrmem_create(&tmpxdrs, databuf.value, databuf.length, XDR_DECODE);
    xdr_stat = (xdr_u_int(&tmpxdrs, &seq_num) &&
            (*xdr_func)(&tmpxdrs, xdr_ptr));
    XDR_DESTROY(&tmpxdrs);
    gss_release_buffer(&min_stat, &databuf);
 
    /* Verify sequence number. */
    if (xdr_stat == TRUE && seq_num != seq) {
        log_debug("wrong sequence number in databody");
        return (FALSE);
    }
    return (xdr_stat);
}

Referenced by xdr_rpc_gss_data().

xdr_rpc_gss_wrap_data()

bool_t xdr_rpc_gss_wrap_data	(	XDR *	xdrs,
		xdrproc_t	xdr_func,
		caddr_t	xdr_ptr,
		gss_ctx_id_t	ctx,
		gss_qop_t	qop,
		rpc_gss_svc_t	svc,
		u_int	seq
	)

Definition at line 110 of file authgss_prot.c.

{
    gss_buffer_desc databuf, wrapbuf;
    OM_uint32   maj_stat, min_stat;
    int     start, end, conf_state;
    bool_t      xdr_stat;
 
    /* Skip databody length. */
    start = XDR_GETPOS(xdrs);
    XDR_SETPOS(xdrs, start + 4);
 
    /* Marshal rpc_gss_data_t (sequence number + arguments). */
    if (!xdr_u_int(xdrs, &seq) || !(*xdr_func)(xdrs, xdr_ptr))
        return (FALSE);
    end = XDR_GETPOS(xdrs);
 
    /* Set databuf to marshalled rpc_gss_data_t. */
    databuf.length = end - start - 4;
    XDR_SETPOS(xdrs, start + 4);
    databuf.value = XDR_INLINE(xdrs, databuf.length);
 
    xdr_stat = FALSE;
 
    if (svc == RPCSEC_GSS_SVC_INTEGRITY) {
        /* Marshal databody_integ length. */
        XDR_SETPOS(xdrs, start);
        if (!xdr_u_int(xdrs, (u_int *)&databuf.length))
            return (FALSE);
 
        /* Checksum rpc_gss_data_t. */
        maj_stat = gss_get_mic(&min_stat, ctx, qop,
                       &databuf, &wrapbuf);
        if (maj_stat != GSS_S_COMPLETE) {
            log_debug("gss_get_mic failed");
            return (FALSE);
        }
        /* Marshal checksum. */
        XDR_SETPOS(xdrs, end);
        xdr_stat = xdr_bytes(xdrs, (char **)&wrapbuf.value,
                     (u_int *)&wrapbuf.length, MAX_NETOBJ_SZ);
        gss_release_buffer(&min_stat, &wrapbuf);
    }
    else if (svc == RPCSEC_GSS_SVC_PRIVACY) {
        /* Encrypt rpc_gss_data_t. */
        maj_stat = gss_wrap(&min_stat, ctx, TRUE, qop, &databuf,
                    &conf_state, &wrapbuf);
        if (maj_stat != GSS_S_COMPLETE) {
            log_status("gss_wrap", maj_stat, min_stat);
            return (FALSE);
        }
        /* Marshal databody_priv. */
        XDR_SETPOS(xdrs, start);
        xdr_stat = xdr_bytes(xdrs, (char **)&wrapbuf.value,
                     (u_int *)&wrapbuf.length, MAX_NETOBJ_SZ);
        gss_release_buffer(&min_stat, &wrapbuf);
    }
    return (xdr_stat);
}

Referenced by xdr_rpc_gss_data().