+OM_uint32 gssEapExportName(OM_uint32 *minor,
+ const gss_name_t name,
+ gss_buffer_t exportedName,
+ int composite)
+{
+ OM_uint32 major, tmpMinor;
+ krb5_context krbContext;
+ char *krbName = NULL;
+ size_t krbNameLen;
+ unsigned char *p;
+
+ exportedName->length = 0;
+ exportedName->value = NULL;
+
+ GSSEAP_KRB_INIT(&krbContext);
+
+ if (name == GSS_C_NO_NAME) {
+ *minor = EINVAL;
+ return GSS_S_CALL_INACCESSIBLE_READ | GSS_S_BAD_NAME;
+ }
+
+ GSSEAP_MUTEX_LOCK(&name->mutex);
+
+ /*
+ * Don't export a composite name if we don't have any attributes.
+ */
+ if (composite &&
+ (name->flags & (NAME_FLAG_SAML | NAME_FLAG_RADIUS)) == 0) {
+ composite = 0;
+ }
+
+ *minor = krb5_unparse_name(krbContext, name->krbPrincipal, &krbName);
+ if (*minor != 0) {
+ major = GSS_S_FAILURE;
+ goto cleanup;
+ }
+ krbNameLen = strlen(krbName);
+
+ exportedName->length = 6 + GSS_EAP_MECHANISM->length + krbNameLen;
+ if (composite) {
+ /* TODO: export SAML/AVP, this is pending specification */
+ GSSEAP_NOT_IMPLEMENTED;
+ }
+
+ exportedName->value = GSSEAP_MALLOC(exportedName->value);
+ if (exportedName->value == NULL) {
+ *minor = ENOMEM;
+ major = GSS_S_FAILURE;
+ goto cleanup;
+ }
+
+ p = (unsigned char *)exportedName->value;
+ *p++ = 0x04;
+ if (composite) {
+ *p++ = 0x02;
+ } else {
+ *p++ = 0x01;
+ }
+ store_uint16_be(GSS_EAP_MECHANISM->length + 2, p);
+ p += 2;
+ *p++ = 0x06;
+ *p++ = GSS_EAP_MECHANISM->length & 0xff;
+ memcpy(p, GSS_EAP_MECHANISM->elements, GSS_EAP_MECHANISM->length);
+ p += GSS_EAP_MECHANISM->length;
+
+ store_uint32_be(krbNameLen, p);
+ p += 4;
+ memcpy(p, krbName, krbNameLen);
+ p += krbNameLen;
+
+ *minor = 0;
+ major = GSS_S_COMPLETE;
+
+cleanup:
+ GSSEAP_MUTEX_UNLOCK(&name->mutex);
+ if (GSS_ERROR(major))
+ gss_release_buffer(&tmpMinor, exportedName);
+ krb5_free_unparsed_name(krbContext, krbName);
+
+ return major;
+}