assert(ctx->acceptorName == GSS_C_NO_NAME);
- if (cred != GSS_C_NO_CREDENTIAL && cred->name != GSS_C_NO_NAME) {
+ if (cred->name != GSS_C_NO_NAME) {
major = gssEapDuplicateName(minor, cred->name, &ctx->acceptorName);
if (GSS_ERROR(major))
return major;
return GSS_S_FAILURE;
}
- if (cred != GSS_C_NO_CREDENTIAL) {
- if (cred->radiusConfigFile != NULL)
- configFile = cred->radiusConfigFile;
- if (cred->radiusConfigStanza != NULL)
- configStanza = cred->radiusConfigStanza;
- }
+ if (cred->radiusConfigFile != NULL)
+ configFile = cred->radiusConfigFile;
+ if (cred->radiusConfigStanza != NULL)
+ configStanza = cred->radiusConfigStanza;
ralloc.calloc = GSSEAP_CALLOC;
ralloc.malloc = GSSEAP_MALLOC;
rconn = ctx->acceptorCtx.radConn;
- if (rs_packet_create_acc_request(rconn, &req, NULL, NULL) != 0) {
+ if (rs_packet_create_auth_request(rconn, &req, NULL, NULL) != 0) {
major = gssEapRadiusMapError(minor, rs_err_conn_pop(rconn));
goto cleanup;
}
GSSEAP_MUTEX_LOCK(&ctx->mutex);
- /* Validate and lock credentials */
- if (cred != GSS_C_NO_CREDENTIAL) {
- GSSEAP_MUTEX_LOCK(&cred->mutex);
-
- if ((cred->flags & CRED_FLAG_ACCEPT) == 0) {
- *minor = GSSEAP_CRED_USAGE_MISMATCH;
- major = GSS_S_NO_CRED;
- goto cleanup;
+ if (cred == GSS_C_NO_CREDENTIAL) {
+ if (ctx->defaultCred == GSS_C_NO_CREDENTIAL) {
+ major = gssEapAcquireCred(minor,
+ GSS_C_NO_NAME,
+ GSS_C_NO_BUFFER,
+ GSS_C_INDEFINITE,
+ GSS_C_NO_OID_SET,
+ GSS_C_ACCEPT,
+ &ctx->defaultCred,
+ NULL,
+ NULL);
+ if (GSS_ERROR(major))
+ goto cleanup;
}
+
+ cred = ctx->defaultCred;
}
+ GSSEAP_MUTEX_LOCK(&cred->mutex);
+
sm = &eapGssAcceptorSm[ctx->state];
major = gssEapVerifyToken(minor, ctx, input_token,
{
OM_uint32 major;
- major = gssEapGlueToMechName(minor, initiator, &ctx->initiatorName);
+ major = gssEapGlueToMechName(minor, ctx, initiator, &ctx->initiatorName);
if (GSS_ERROR(major))
return major;
- if (cred != GSS_C_NO_CREDENTIAL && cred->name != GSS_C_NO_NAME) {
+ if (cred->name != GSS_C_NO_NAME) {
major = gssEapDuplicateName(minor, cred->name, &ctx->acceptorName);
if (GSS_ERROR(major))
return major;
gss_buffer_t outputToken)
{
OM_uint32 major, tmpMinor;
- gss_cred_id_t krbCred = GSS_C_NO_CREDENTIAL;
gss_name_t krbInitiator = GSS_C_NO_NAME;
gss_OID mech = GSS_C_NO_OID;
OM_uint32 gssFlags, timeRec = GSS_C_INDEFINITE;
ctx->flags |= CTX_FLAG_KRB_REAUTH;
- if (cred != GSS_C_NO_CREDENTIAL)
- krbCred = cred->krbCred;
-
major = gssAcceptSecContext(minor,
&ctx->kerberosCtx,
- krbCred,
+ cred->krbCred,
inputToken,
chanBindings,
&krbInitiator,