Home | History | Annotate | Download | only in gssapi
      1 /*
      2  * Copyright 2009 Sun Microsystems, Inc.  All rights reserved.
      3  * Use is subject to license terms.
      4  */
      5 
      6 /*
      7  * Copyright 1993 by OpenVision Technologies, Inc.
      8  *
      9  * Permission to use, copy, modify, distribute, and sell this software
     10  * and its documentation for any purpose is hereby granted without fee,
     11  * provided that the above copyright notice appears in all copies and
     12  * that both that copyright notice and this permission notice appear in
     13  * supporting documentation, and that the name of OpenVision not be used
     14  * in advertising or publicity pertaining to distribution of the software
     15  * without specific, written prior permission. OpenVision makes no
     16  * representations about the suitability of this software for any
     17  * purpose.  It is provided "as is" without express or implied warranty.
     18  *
     19  * OPENVISION DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE,
     20  * INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS, IN NO
     21  * EVENT SHALL OPENVISION BE LIABLE FOR ANY SPECIAL, INDIRECT OR
     22  * CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF
     23  * USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
     24  * OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
     25  * PERFORMANCE OF THIS SOFTWARE.
     26  */
     27 
     28 #include <mechglueP.h>
     29 
     30 /*
     31  * See krb5/gssapi_krb5.c for a description of the algorithm for
     32  * encoding an object identifier.
     33  */
     34 
     35 /*
     36  * The OID of user_name is(gss_nt_user_name, GSS_C_NT_USER_NAME):
     37  * 	iso(1) member-body(2) US(840) mit(113554) infosys(1) gssapi(2)
     38  * 	generic(1) user_name(1) = 1.2.840.113554.1.2.1.1
     39  * machine_uid_name(gss_nt_machine_uid_name, GSS_C_NT_MACHINE_UID_NAME):
     40  * 	iso(1) member-body(2) US(840) mit(113554) infosys(1) gssapi(2)
     41  * 	generic(1) machine_uid_name(2) = 1.2.840.113554.1.2.1.2
     42  * string_uid_name(gss_nt_string_uid_name,GSS_C_NT_STRING_UID_NAME):
     43  * 	iso(1) member-body(2) US(840) mit(113554) infosys(1) gssapi(2)
     44  * 	generic(1) string_uid_name(3) = 1.2.840.113554.1.2.1.3
     45  * service_name(gss_nt_service_name):
     46  * 	iso(1) member-body(2) US(840) mit(113554) infosys(1) gssapi(2)
     47  * 	generic(1) service_name(4) = 1.2.840.113554.1.2.1.4
     48  * hostbased_service_name(GSS_C_NT_HOSTBASED_SERVICE)
     49  * 	iso(1) org(3) dod(6) 1(internet) 5(security) 6(nametypes)
     50  *   	2(gss-host-based-services) == 1.3.6.1.5.6.2
     51  * anonymous_name(GSS_C_NT_ANONYMOUS)
     52  * 	iso(1) org(3) dod(6) 1(internet) 5(security) 6(nametypes)
     53  *   	3(anonymous) = 1.3.6.1.5.6.3
     54  * export_name(GSS_C_NT_EXPORT)
     55  * 	iso(1) org(3) dod(6) 1(internet) 5(security) 6(nametypes)
     56  *   	4(export) = 1.3.6.1.5.6.4
     57  */
     58 
     59 static const gss_OID_desc oids[] = {
     60 	{10, "\052\206\110\206\367\022\001\002\001\001"},
     61 	{10, "\052\206\110\206\367\022\001\002\001\002"},
     62 	{10, "\052\206\110\206\367\022\001\002\001\003"},
     63 	{10, "\052\206\110\206\367\022\001\002\001\004"},
     64 	{6, "\053\006\001\005\006\002"},
     65 	{6, "\053\006\001\005\006\003"},
     66 	{6, "\053\006\001\005\006\004"},
     67 	{11, "\x2a\x86\x48\x86\xf7\x12\x01\x02\x02\x05\x05"},
     68 
     69 };
     70 
     71 const gss_OID_desc * const gss_nt_user_name = oids+0;
     72 const gss_OID_desc * const gss_nt_machine_uid_name = oids+1;
     73 const gss_OID_desc * const gss_nt_string_uid_name = oids+2;
     74 const gss_OID_desc * const gss_nt_service_name = oids+3;
     75 /* XXXXX These are needed for Kerberos */
     76 const gss_OID_desc * const gss_nt_service_name_v2 = oids+4;
     77 const gss_OID_desc * const gss_nt_exported_name = oids+6;
     78 
     79 
     80 /*
     81  * These are added to reflect definitions in the
     82  * gss c-bindings spec.
     83  */
     84 
     85 /*
     86  * The use of the following defines are preferred over the above defines.
     87  * This is because the following are the only ones defined
     88  * in GSS-API Specs.
     89  */
     90 const gss_OID GSS_C_NT_USER_NAME = (gss_OID)oids+0;
     91 const gss_OID GSS_C_NT_MACHINE_UID_NAME = (gss_OID)oids+1;
     92 const gss_OID GSS_C_NT_STRING_UID_NAME = (gss_OID)oids+2;
     93 const gss_OID GSS_C_NT_HOSTBASED_SERVICE = (gss_OID)oids+4;
     94 const gss_OID GSS_C_NT_ANONYMOUS = (gss_OID)oids+5;
     95 const gss_OID GSS_C_NT_EXPORT_NAME = (gss_OID)oids+6;
     96 const gss_OID GSS_C_INQ_SSPI_SESSION_KEY   = (gss_OID)oids+7;
     97