#include <exception>
#include <new>
-static gss_eap_attr_create_cb
-gss_eap_attr_factories[ATTR_TYPE_MAX] = {
- gss_eap_radius_attr_provider::createAttrContext,
- gss_eap_saml_assertion_provider::createAttrContext,
- gss_eap_saml_attr_provider::createAttrContext,
- gss_eap_shib_attr_provider::createAttrContext
-};
+static gss_eap_attr_create_provider gssEapAttrFactories[ATTR_TYPE_MAX];
+static gss_buffer_desc gssEapAttrPrefixes[ATTR_TYPE_MAX];
-gss_eap_attr_ctx *
-gss_eap_attr_ctx::createAttrContext(gss_cred_id_t gssCred,
- gss_ctx_id_t gssCtx)
+void
+gss_eap_attr_ctx::registerProvider(unsigned int type,
+ const char *prefix,
+ gss_eap_attr_create_provider factory)
{
- gss_eap_attr_ctx *ctx;
+ assert(type < ATTR_TYPE_MAX);
- ctx = new gss_eap_attr_ctx(NULL, gssCred, gssCtx);
+ assert(gssEapAttrFactories[type] == NULL);
+ gssEapAttrFactories[type] = factory;
+ if (prefix != NULL) {
+ gssEapAttrPrefixes[type].value = (void *)prefix;
+ gssEapAttrPrefixes[type].length = strlen(prefix);
+ } else {
+ gssEapAttrPrefixes[type].value = NULL;
+ gssEapAttrPrefixes[type].length = 0;
+ }
+}
+
+void
+gss_eap_attr_ctx::unregisterProvider(unsigned int type)
+{
+ assert(type < ATTR_TYPE_MAX);
+
+ gssEapAttrFactories[type] = NULL;
+ gssEapAttrPrefixes[type].value = NULL;
+ gssEapAttrPrefixes[type].length = 0;
+}
+
+gss_eap_attr_ctx::gss_eap_attr_ctx(void)
+{
for (unsigned int i = 0; i < ATTR_TYPE_MAX; i++) {
gss_eap_attr_provider *provider;
- provider = (gss_eap_attr_factories[i])(ctx, gssCred, gssCtx);
- if (provider != NULL)
- ctx->m_providers[i] = provider;
+ provider = (gssEapAttrFactories[i])();
+
+ m_providers[i] = provider;
}
+}
- return ctx;
+unsigned int
+gss_eap_attr_ctx::attributePrefixToType(const gss_buffer_t prefix)
+{
+ unsigned int i;
+
+ for (i = ATTR_TYPE_MIN; i < ATTR_TYPE_LOCAL; i++) {
+ if (bufferEqual(&gssEapAttrPrefixes[i], prefix))
+ return i;
+ }
+
+ return ATTR_TYPE_LOCAL;
}
-gss_eap_attr_ctx::~gss_eap_attr_ctx(void)
+const gss_buffer_t
+gss_eap_attr_ctx::attributeTypeToPrefix(unsigned int type)
{
- for (unsigned int i = 0; i < ATTR_TYPE_MAX; i++)
- delete m_providers[i];
+ if (type < ATTR_TYPE_MIN || type >= ATTR_TYPE_LOCAL)
+ return GSS_C_NO_BUFFER;
+
+ return &gssEapAttrPrefixes[type];
}
bool
-gss_eap_attr_ctx::init(void)
+gss_eap_attr_ctx::initFromExistingContext(const gss_eap_attr_ctx *manager,
+ const gss_eap_attr_provider *provider)
{
- return gss_eap_radius_attr_provider::init() &&
- gss_eap_saml_assertion_provider::init() &&
- gss_eap_saml_attr_provider::init() &&
- gss_eap_shib_attr_provider::init();
+ if (!gss_eap_attr_provider::initFromExistingContext(this, provider))
+ return false;
+
+ for (unsigned int i = 0; i < ATTR_TYPE_MAX; i++) {
+ gss_eap_attr_provider *provider;
+
+ provider = m_providers[i];
+ if (provider != NULL) {
+ if (!provider->initFromExistingContext(this, provider))
+ return false;
+ }
+ }
+
+ return true;
}
-void
-gss_eap_attr_ctx::finalize(void)
+bool
+gss_eap_attr_ctx::initFromGssContext(const gss_eap_attr_ctx *manager,
+ const gss_cred_id_t cred,
+ const gss_ctx_id_t ctx)
{
- gss_eap_shib_attr_provider::finalize();
- gss_eap_saml_attr_provider::finalize();
- gss_eap_saml_assertion_provider::finalize();
- gss_eap_radius_attr_provider::finalize();
+ if (!gss_eap_attr_provider::initFromGssContext(this, cred, ctx))
+ return false;
+
+ for (unsigned int i = 0; i < ATTR_TYPE_MAX; i++) {
+ gss_eap_attr_provider *provider;
+
+ provider = m_providers[i];
+ if (provider != NULL) {
+ if (!provider->initFromGssContext(this, cred, ctx))
+ return false;
+ }
+ }
+
+ return true;
+}
+
+gss_eap_attr_ctx::~gss_eap_attr_ctx(void)
+{
+ for (unsigned int i = 0; i < ATTR_TYPE_MAX; i++)
+ delete m_providers[i];
}
gss_eap_attr_provider *
return m_providers[type];
}
-gss_eap_attr_ctx::gss_eap_attr_ctx(const gss_eap_attr_ctx &ctx)
- : gss_eap_attr_provider(ctx)
-{
- for (unsigned int i = 0; i < ATTR_TYPE_MAX; i++) {
- if (ctx.m_providers[i] != NULL) {
- m_providers[i] = (gss_eap_attr_factories[i])(&ctx,
- GSS_C_NO_CREDENTIAL,
- GSS_C_NO_CONTEXT);
- }
- }
-}
-
void
gss_eap_attr_ctx::setAttribute(int complete,
const gss_buffer_t attr,
}
void
-gss_eap_attr_ctx::marshall(gss_buffer_t buffer) const
+gss_eap_attr_ctx::exportToBuffer(gss_buffer_t buffer) const
{
- /* For now, just marshall the RADIUS context. */
+ m_providers[ATTR_TYPE_RADIUS]->exportToBuffer(buffer);
}
bool
-gss_eap_attr_ctx::unmarshall(const gss_eap_attr_ctx *ctx,
- const gss_buffer_t buffer)
+gss_eap_attr_ctx::initFromBuffer(const gss_eap_attr_ctx *manager,
+ const gss_buffer_t buffer)
{
- int i;
+ unsigned int i;
+ bool ret;
- for (i = 0; i < ATTR_TYPE_MAX; i++) {
+ ret = m_providers[ATTR_TYPE_RADIUS]->initFromBuffer(this, buffer);
+ if (!ret)
+ return false;
+
+ for (i = ATTR_TYPE_RADIUS + 1; i < ATTR_TYPE_MAX; i++) {
gss_eap_attr_provider *provider = m_providers[i];
+ ret = provider->initFromGssContext(this,
+ GSS_C_NO_CREDENTIAL,
+ GSS_C_NO_CONTEXT);
+ if (!ret)
+ break;
}
+
+ return ret;
}
return GSS_S_FAILURE;
}
-static gss_buffer_desc attributePrefixes[] = {
- {
- /* ATTR_TYPE_RADIUS_AVP */
- sizeof("urn:ietf:params:gss-eap:radius-avp"),
- (void *)"urn:ietf:params:gss-eap:radius-avp",
- },
- {
- /* ATTR_TYPE_SAML_AAA_ASSERTION */
- sizeof("urn:ietf:params:gss-eap:saml-aaa-assertion"),
- (void *)"urn:ietf:params:gss-eap:saml-aaa-assertion"
- },
- {
- /* ATTR_TYPE_SAML_ATTR */
- sizeof("urn:ietf:params:gss-eap:saml-attr"),
- (void *)"urn:ietf:params:gss-eap:saml-attr"
- },
-};
-
-unsigned int
-gss_eap_attr_ctx::attributePrefixToType(const gss_buffer_t prefix)
-{
- unsigned int i;
-
- for (i = ATTR_TYPE_MIN;
- i < sizeof(attributePrefixes) / sizeof(attributePrefixes[0]);
- i++)
- {
- if (bufferEqual(&attributePrefixes[i], prefix))
- return i;
- }
-
- return ATTR_TYPE_LOCAL;
-}
-
-gss_buffer_t
-gss_eap_attr_ctx::attributeTypeToPrefix(unsigned int type)
-{
- if (type < ATTR_TYPE_MIN || type >= ATTR_TYPE_LOCAL)
- return GSS_C_NO_BUFFER;
-
- return &attributePrefixes[type];
-}
-
void
gss_eap_attr_ctx::decomposeAttributeName(const gss_buffer_t attribute,
gss_buffer_t prefix,
}
}
-void
+std::string
gss_eap_attr_ctx::composeAttributeName(const gss_buffer_t prefix,
- const gss_buffer_t suffix,
- gss_buffer_t attribute)
+ const gss_buffer_t suffix)
{
- size_t len = 0;
- char *p;
-
- attribute->length = 0;
- attribute->value = NULL;
+ std::string str;
if (prefix == GSS_C_NO_BUFFER || prefix->length == 0)
- return;
+ return str;
+
+ str.append((const char *)prefix->value, prefix->length);
- len = prefix->length;
if (suffix != GSS_C_NO_BUFFER) {
- len += 1 + suffix->length;
+ str.append(" ");
+ str.append((const char *)suffix->value, suffix->length);
}
- attribute->value = GSSEAP_MALLOC(len + 1);
- if (attribute->value == NULL) {
- throw new std::bad_alloc;
- }
- attribute->length = len;
+ return str;
+}
- p = (char *)attribute->value;
- memcpy(p, prefix->value, prefix->length);
- if (suffix != NULL) {
- p[prefix->length] = ' ';
- memcpy(p + prefix->length + 1, suffix->value, suffix->length);
- }
+std::string
+gss_eap_attr_ctx::composeAttributeName(unsigned int type,
+ const gss_buffer_t suffix)
+{
+ const gss_buffer_t prefix = attributeTypeToPrefix(type);
- p[attribute->length] = '\0';
+ return composeAttributeName(prefix, suffix);
+}
+
+void
+gss_eap_attr_ctx::composeAttributeName(const gss_buffer_t prefix,
+ const gss_buffer_t suffix,
+ gss_buffer_t attribute)
+{
+ std::string str = composeAttributeName(prefix, suffix);
+
+ if (str.length() != 0) {
+ return duplicateBuffer(str, attribute);
+ } else {
+ attribute->length = 0;
+ attribute->value = NULL;
+ }
}
void
gss_eap_attr_ctx::decomposeAttributeName(const gss_buffer_t attribute,
- unsigned int*type,
+ unsigned int *type,
gss_buffer_t suffix)
{
gss_buffer_desc prefix = GSS_C_EMPTY_BUFFER;
{
gss_buffer_t prefix = attributeTypeToPrefix(type);
- composeAttributeName(prefix, suffix, attribute);
+ return composeAttributeName(prefix, suffix, attribute);
}
OM_uint32
gss_name_t name,
gss_buffer_t buffer)
{
- if (name->attrCtx == NULL)
- return GSS_S_UNAVAILABLE;
+ if (name->attrCtx == NULL) {
+ buffer->length = 0;
+ buffer->value = NULL;
+
+ return GSS_S_COMPLETE;
+ };
try {
- name->attrCtx->marshall(buffer);
+ name->attrCtx->exportToBuffer(buffer);
} catch (std::exception &e) {
return mapException(minor, e);
}
gss_buffer_t buffer,
gss_name_t name)
{
- GSSEAP_NOT_IMPLEMENTED;
+ gss_eap_attr_ctx *ctx = NULL;
+
+ assert(name->attrCtx == NULL);
+
+ if (buffer->length != 0) {
+ try {
+ ctx = new gss_eap_attr_ctx;
+
+ if (!ctx->initFromBuffer(NULL, buffer)) {
+ delete ctx;
+ return GSS_S_DEFECTIVE_TOKEN;
+ }
+ name->attrCtx = ctx;
+ } catch (std::exception &e) {
+ delete ctx;
+ return mapException(minor, e);
+ }
+ }
+
+ return GSS_S_COMPLETE;
}
OM_uint32
gss_name_t in,
gss_name_t out)
{
+ gss_eap_attr_ctx *ctx = NULL;
+
+ assert(out->attrCtx == NULL);
+
try {
- if (in->attrCtx != NULL)
- out->attrCtx = new gss_eap_attr_ctx(*(in->attrCtx));
- else
- out->attrCtx = NULL;
+ if (in->attrCtx != NULL) {
+ if (!ctx->initFromExistingContext(NULL, in->attrCtx)) {
+ delete ctx;
+ return GSS_S_FAILURE;
+ }
+ out->attrCtx = ctx;
+ }
} catch (std::exception &e) {
+ delete ctx;
return mapException(minor, e);
}
gssEapAttrProvidersInit(OM_uint32 *minor)
{
try {
- gss_eap_attr_ctx::init();
+ if (gss_eap_radius_attr_provider::init() &&
+ gss_eap_saml_assertion_provider::init() &&
+ gss_eap_saml_attr_provider::init() &&
+ gss_eap_shib_attr_provider::init())
+ return GSS_S_COMPLETE;
} catch (std::exception &e) {
return mapException(minor, e);
}
- return GSS_S_COMPLETE;
+ return GSS_S_FAILURE;
}
OM_uint32
gssEapAttrProvidersFinalize(OM_uint32 *minor)
{
try {
- gss_eap_attr_ctx::finalize();
+ gss_eap_shib_attr_provider::finalize();
+ gss_eap_saml_attr_provider::finalize();
+ gss_eap_saml_assertion_provider::finalize();
+ gss_eap_radius_attr_provider::finalize();
} catch (std::exception &e) {
return mapException(minor, e);
}
}
struct gss_eap_attr_ctx *
-gssEapCreateAttrContext(gss_cred_id_t cred,
- gss_ctx_id_t ctx)
+gssEapCreateAttrContext(gss_cred_id_t gssCred,
+ gss_ctx_id_t gssCtx)
{
- assert(ctx != GSS_C_NO_CONTEXT);
- return gss_eap_attr_ctx::createAttrContext(cred, ctx);
+ gss_eap_attr_ctx *ctx;
+
+ ctx = new gss_eap_attr_ctx;
+ if (!ctx->initFromGssContext(NULL, gssCred, gssCtx)) {
+ delete ctx;
+ return NULL;
+ }
+
+ return ctx;
}
projects / mech_eap.orig / blobdiff