Line data Source code
1 : /*
2 : * Copyright (c) 2009 Kungliga Tekniska Högskolan
3 : * (Royal Institute of Technology, Stockholm, Sweden).
4 : * All rights reserved.
5 : *
6 : * Portions Copyright (c) 2010 Apple Inc. All rights reserved.
7 : *
8 : * Redistribution and use in source and binary forms, with or without
9 : * modification, are permitted provided that the following conditions
10 : * are met:
11 : *
12 : * 1. Redistributions of source code must retain the above copyright
13 : * notice, this list of conditions and the following disclaimer.
14 : *
15 : * 2. Redistributions in binary form must reproduce the above copyright
16 : * notice, this list of conditions and the following disclaimer in the
17 : * documentation and/or other materials provided with the distribution.
18 : *
19 : * 3. Neither the name of the Institute nor the names of its contributors
20 : * may be used to endorse or promote products derived from this software
21 : * without specific prior written permission.
22 : *
23 : * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
24 : * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
25 : * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
26 : * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
27 : * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
28 : * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
29 : * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
30 : * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
31 : * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
32 : * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
33 : * SUCH DAMAGE.
34 : */
35 :
36 : #include "mech_locl.h"
37 : #include "heim_threads.h"
38 : #include <krb5.h>
39 : #include "krb5_locl.h"
40 : #include "negoex_err.h"
41 :
42 : struct mg_thread_ctx {
43 : gss_OID mech;
44 : OM_uint32 min_stat;
45 : gss_buffer_desc min_error;
46 : krb5_context context;
47 : };
48 :
49 : static HEIMDAL_MUTEX context_mutex = HEIMDAL_MUTEX_INITIALIZER;
50 : static int created_key;
51 : static HEIMDAL_thread_key context_key;
52 :
53 :
54 : static void
55 0 : destroy_context(void *ptr)
56 : {
57 0 : struct mg_thread_ctx *mg = ptr;
58 0 : OM_uint32 junk;
59 :
60 0 : if (mg == NULL)
61 0 : return;
62 :
63 0 : gss_release_buffer(&junk, &mg->min_error);
64 :
65 0 : if (mg->context)
66 0 : krb5_free_context(mg->context);
67 :
68 0 : free(mg);
69 : }
70 :
71 :
72 : static struct mg_thread_ctx *
73 313378 : _gss_mechglue_thread(void)
74 : {
75 8828 : struct mg_thread_ctx *ctx;
76 313378 : int ret = 0;
77 :
78 8828 : HEIMDAL_MUTEX_lock(&context_mutex);
79 :
80 313378 : if (!created_key) {
81 13910 : HEIMDAL_key_create(&context_key, destroy_context, ret);
82 13910 : if (ret) {
83 : HEIMDAL_MUTEX_unlock(&context_mutex);
84 0 : return NULL;
85 : }
86 13910 : created_key = 1;
87 : }
88 8828 : HEIMDAL_MUTEX_unlock(&context_mutex);
89 :
90 313378 : ctx = HEIMDAL_getspecific(context_key);
91 313378 : if (ctx == NULL) {
92 :
93 13910 : ctx = calloc(1, sizeof(*ctx));
94 13910 : if (ctx == NULL)
95 0 : return NULL;
96 :
97 13910 : ret = krb5_init_context(&ctx->context);
98 13910 : if (ret) {
99 0 : free(ctx);
100 0 : return NULL;
101 : }
102 :
103 13910 : krb5_add_et_list(ctx->context, initialize_ngex_error_table_r);
104 :
105 13910 : HEIMDAL_setspecific(context_key, ctx, ret);
106 13910 : if (ret) {
107 0 : krb5_free_context(ctx->context);
108 0 : free(ctx);
109 0 : return NULL;
110 : }
111 : }
112 304550 : return ctx;
113 : }
114 :
115 : krb5_context
116 0 : _gss_mg_krb5_context(void)
117 : {
118 0 : struct mg_thread_ctx *mg;
119 :
120 0 : mg = _gss_mechglue_thread();
121 :
122 0 : return mg ? mg->context : NULL;
123 : }
124 :
125 : OM_uint32
126 56 : _gss_mg_get_error(const gss_OID mech,
127 : OM_uint32 value,
128 : gss_buffer_t string)
129 : {
130 0 : struct mg_thread_ctx *mg;
131 :
132 56 : mg = _gss_mechglue_thread();
133 56 : if (mg == NULL)
134 0 : return GSS_S_BAD_STATUS;
135 :
136 56 : if (value != mg->min_stat || mg->min_error.length == 0) {
137 21 : _mg_buffer_zero(string);
138 21 : return GSS_S_BAD_STATUS;
139 : }
140 35 : string->value = malloc(mg->min_error.length);
141 35 : if (string->value == NULL) {
142 0 : _mg_buffer_zero(string);
143 0 : return GSS_S_FAILURE;
144 : }
145 35 : string->length = mg->min_error.length;
146 35 : memcpy(string->value, mg->min_error.value, mg->min_error.length);
147 35 : return GSS_S_COMPLETE;
148 : }
149 :
150 : void
151 52 : _gss_mg_error(struct gssapi_mech_interface_desc *m, OM_uint32 min)
152 : {
153 0 : OM_uint32 major_status, minor_status;
154 52 : OM_uint32 message_content = 0;
155 0 : struct mg_thread_ctx *mg;
156 :
157 : /*
158 : * Mechs without gss_display_status() does
159 : * gss_mg_collect_error() by themself.
160 : */
161 52 : if (m->gm_display_status == NULL)
162 0 : return ;
163 :
164 52 : mg = _gss_mechglue_thread();
165 52 : if (mg == NULL)
166 0 : return;
167 :
168 52 : gss_release_buffer(&minor_status, &mg->min_error);
169 :
170 52 : mg->mech = &m->gm_mech_oid;
171 52 : mg->min_stat = min;
172 :
173 52 : major_status = m->gm_display_status(&minor_status,
174 : min,
175 : GSS_C_MECH_CODE,
176 52 : &m->gm_mech_oid,
177 : &message_content,
178 52 : &mg->min_error);
179 52 : if (major_status != GSS_S_COMPLETE) {
180 0 : _mg_buffer_zero(&mg->min_error);
181 : } else {
182 52 : _gss_mg_log(5, "_gss_mg_error: captured %.*s (%d) from underlying mech %s",
183 52 : (int)mg->min_error.length, (const char *)mg->min_error.value,
184 : (int)min, m->gm_name);
185 : }
186 : }
187 :
188 : void
189 0 : gss_mg_collect_error(gss_OID mech, OM_uint32 maj, OM_uint32 min)
190 : {
191 0 : gssapi_mech_interface m = __gss_get_mechanism(mech);
192 0 : if (m == NULL)
193 0 : return;
194 0 : _gss_mg_error(m, min);
195 : }
196 :
197 : OM_uint32
198 0 : gss_mg_set_error_string(gss_OID mech,
199 : OM_uint32 maj, OM_uint32 min,
200 : const char *fmt, ...)
201 : {
202 0 : struct mg_thread_ctx *mg;
203 0 : char *str = NULL;
204 0 : OM_uint32 junk;
205 0 : va_list ap;
206 0 : int vasprintf_ret;
207 :
208 0 : mg = _gss_mechglue_thread();
209 0 : if (mg == NULL)
210 0 : return maj;
211 :
212 0 : va_start(ap, fmt);
213 0 : vasprintf_ret = vasprintf(&str, fmt, ap);
214 0 : va_end(ap);
215 :
216 0 : if (vasprintf_ret >= 0 && str) {
217 0 : gss_release_buffer(&junk, &mg->min_error);
218 :
219 0 : mg->mech = mech;
220 0 : mg->min_stat = min;
221 :
222 0 : mg->min_error.value = str;
223 0 : mg->min_error.length = strlen(str);
224 :
225 0 : _gss_mg_log(5, "gss_mg_set_error_string: %.*s (%d/%d)",
226 0 : (int)mg->min_error.length, (const char *)mg->min_error.value,
227 : (int)maj, (int)min);
228 : }
229 0 : return maj;
230 : }
231 :
232 : static void *log_ctx = NULL;
233 : static void (*log_func)(void *ctx, int level, const char *fmt, va_list) = NULL;
234 :
235 : void GSSAPI_LIB_CALL
236 0 : gss_set_log_function(void *ctx, void (*func)(void * ctx, int level, const char *fmt, va_list))
237 : {
238 0 : if (log_func == NULL) {
239 0 : log_func = func;
240 0 : log_ctx = ctx;
241 : }
242 0 : }
243 :
244 : int
245 313270 : _gss_mg_log_level(int level)
246 : {
247 8828 : struct mg_thread_ctx *mg;
248 :
249 313270 : mg = _gss_mechglue_thread();
250 313270 : if (mg == NULL)
251 0 : return 0;
252 :
253 313270 : return _krb5_have_debug(mg->context, level);
254 : }
255 :
256 : /*
257 : * TODO: refactor logging so that it no longer depends on libkrb5
258 : * and can be configured independently.
259 : */
260 : void
261 265420 : _gss_mg_log(int level, const char *fmt, ...)
262 : {
263 6913 : struct mg_thread_ctx *mg;
264 6913 : va_list ap;
265 :
266 265420 : if (!_gss_mg_log_level(level))
267 265420 : return;
268 :
269 0 : mg = _gss_mechglue_thread();
270 0 : if (mg == NULL)
271 0 : return;
272 :
273 0 : if (mg->context && _krb5_have_debug(mg->context, level)) {
274 0 : va_start(ap, fmt);
275 0 : krb5_vlog(mg->context, heim_get_debug_dest(mg->context->hcontext),
276 : level, fmt, ap);
277 0 : va_end(ap);
278 : }
279 :
280 0 : if (log_func) {
281 0 : va_start(ap, fmt);
282 0 : log_func(log_ctx, level, fmt, ap);
283 0 : va_end(ap);
284 : }
285 : }
286 :
287 : void
288 0 : _gss_mg_log_name(int level,
289 : struct _gss_name *name,
290 : gss_OID mech_type,
291 : const char *fmt, ...)
292 : {
293 0 : struct _gss_mechanism_name *mn = NULL;
294 0 : gssapi_mech_interface m;
295 0 : OM_uint32 junk;
296 :
297 0 : if (!_gss_mg_log_level(level))
298 0 : return;
299 :
300 0 : m = __gss_get_mechanism(mech_type);
301 0 : if (m == NULL)
302 0 : return;
303 :
304 0 : if (_gss_find_mn(&junk, name, mech_type, &mn) == GSS_S_COMPLETE) {
305 0 : OM_uint32 maj_stat = GSS_S_COMPLETE;
306 0 : gss_buffer_desc namebuf;
307 0 : int ret;
308 :
309 0 : if (mn == NULL) {
310 0 : namebuf.value = "no name";
311 0 : namebuf.length = strlen((char *)namebuf.value);
312 : } else {
313 0 : maj_stat = m->gm_display_name(&junk, mn->gmn_name,
314 : &namebuf, NULL);
315 : }
316 0 : if (maj_stat == GSS_S_COMPLETE) {
317 0 : char *str = NULL;
318 0 : va_list ap;
319 :
320 0 : va_start(ap, fmt);
321 0 : ret = vasprintf(&str, fmt, ap);
322 0 : va_end(ap);
323 :
324 0 : if (ret >= 0 && str)
325 0 : _gss_mg_log(level, "%s %.*s", str,
326 0 : (int)namebuf.length, (char *)namebuf.value);
327 0 : free(str);
328 0 : if (mn != NULL)
329 0 : gss_release_buffer(&junk, &namebuf);
330 : }
331 : }
332 :
333 : }
334 :
335 : void
336 0 : _gss_mg_log_cred(int level,
337 : struct _gss_cred *cred,
338 : const char *fmt, ...)
339 : {
340 0 : struct _gss_mechanism_cred *mc;
341 0 : char *str;
342 0 : va_list ap;
343 0 : int ret;
344 :
345 0 : if (!_gss_mg_log_level(level))
346 0 : return;
347 :
348 0 : va_start(ap, fmt);
349 0 : ret = vasprintf(&str, fmt, ap);
350 0 : va_end(ap);
351 :
352 0 : if (ret >=0 && cred) {
353 0 : HEIM_TAILQ_FOREACH(mc, &cred->gc_mc, gmc_link) {
354 0 : _gss_mg_log(1, "%s: %s", str, mc->gmc_mech->gm_name);
355 : }
356 : } else {
357 0 : _gss_mg_log(1, "%s: GSS_C_NO_CREDENTIAL", str);
358 : }
359 0 : free(str);
360 : }
361 :
|
