GSS-API helper library for simplified GSS calls

diff --git a/gssapi_utils/CMakeLists.txt b/gssapi_utils/CMakeLists.txt
new file mode 100644 (file)
index 0000000..810dc79
--- /dev/null
+++ b/gssapi_utils/CMakeLists.txt
@@ -0,0 +1,8 @@
+cmake_minimum_required (VERSION 2.8)
+
+project (gssapi_utils)
+
+# add the library
+add_library (gssapi_utils SHARED gssapi_utils.c)
+target_link_libraries (gssapi_utils gssapi_krb5)
+

diff --git a/gssapi_utils/gssapi_utils.c b/gssapi_utils/gssapi_utils.c
new file mode 100644 (file)
index 0000000..3eed4c3
--- /dev/null
+++ b/gssapi_utils/gssapi_utils.c
@@ -0,0 +1,93 @@
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <ctype.h>
+#include <errno.h>
+
+#include "gssapi_utils.h"
+
+OM_uint32
+gss_construct_sec_context(
+    gss_status_t status,
+    gss_cred_id_t unused_cred_handle,
+    gss_ctx_id_t *context_handle,
+    gss_name_t target_name,
+    gss_OID mech_type,
+    OM_uint32 req_flags,
+    OM_uint32 time_req,
+    gss_channel_bindings_t unused_input_chan_bindings)
+{
+  gss_buffer_desc input_token;
+  gss_OID actual_mech_type;
+  gss_buffer_desc output_token;
+  OM_uint32 ret_flags;
+  OM_uint32 time_rec;
+  
+  gss_cred_id_t cred_handle = GSS_C_NO_CREDENTIAL;
+  gss_channel_bindings_t input_chan_bindings = GSS_C_NO_CHANNEL_BINDINGS;
+  
+  /* Setup - input validation */
+  if (status == NULL)
+  {
+    /* nothing much to be done here */
+    return(GSS_S_CALL_INACCESSIBLE_WRITE);
+  }
+  
+  if (target_name == NULL)
+  {
+    /* Kinda hard to do any meaningful processing here ... */
+    status->major = GSS_S_CALL_INACCESSIBLE_READ;
+    return(1);
+  }
+  
+  if (mech_type == NULL)
+  {
+    fprintf(stderr, "NULL mech_type; putting in one for SPNEGO\n");
+    /* Defaut to SPNEGO - 1.3.6.1.5.5.2 */
+    OM_uint32 maj = 0;
+    OM_uint32 min = 0;
+    gss_buffer_desc spnego_str;
+    
+    spnego_str.value = "1.3.6.1.5.5.2";
+    spnego_str.length = 13;
+    mech_type = (gss_OID)malloc(sizeof(gss_OID_desc));
+    maj = gss_str_to_oid(&min, &spnego_str, &mech_type);
+    fprintf(stderr, "str_to_oid major/minor %u/%u\n", maj, min);
+    fprintf(stderr, "mech_type: [length: %u, elements: %s]\n",
+           mech_type->length,
+           (char *)(mech_type->elements));
+  }
+  
+  
+  /* Main processing */
+  
+  status->major = gss_init_sec_context(&(status->minor),
+                                       cred_handle,
+                                       context_handle,
+                                       target_name,
+                                       mech_type,
+                                       req_flags,
+                                       time_req,
+                                       input_chan_bindings,
+                                       &input_token,
+                                       &actual_mech_type,
+                                       &output_token,
+                                       &ret_flags,
+                                       &time_rec);
+
+  if (status->minor != 0)
+  {
+    fprintf(stderr, "minor status is: %d/%s\n", status->minor, strerror(status->minor));
+    if (actual_mech_type == NULL)
+      fprintf(stderr, "actual mech type is NULL.\n");
+    else
+    {
+      fprintf(stderr, "actual_mech_type: [length: %u, elements: %s]\n",
+             actual_mech_type->length,
+             (char *)(actual_mech_type->elements));
+    }
+    
+  }
+  return(0);
+}
+

diff --git a/gssapi_utils/gssapi_utils.h b/gssapi_utils/gssapi_utils.h
new file mode 100644 (file)
index 0000000..0c1d8cd
--- /dev/null
+++ b/gssapi_utils/gssapi_utils.h
@@ -0,0 +1,40 @@
+#include <gssapi.h>
+
+/**********************************************************************
+ **********************************************************************
+ ** Data Structures and Typedefs                                     **
+ **********************************************************************
+ **********************************************************************/
+typedef struct gss_status_struct {
+    OM_uint32 major;
+    OM_uint32 minor;
+} *gss_status_t;
+
+
+
+
+/**********************************************************************
+ **********************************************************************
+ ** Functions                                                        **
+ **********************************************************************
+ **********************************************************************/
+
+/**********************************************************************
+ * Function:  str_to_oid
+ * Returns:   0 on success, 1 on error.
+ * Arguments: 
+ *    status: (OUT) A gss_status_t 
+ *    str:    (IN)  The string to convert to an OID
+ *    oid:    (OUT) The resultant gss_OID 
+ **********************************************************************/
+OM_uint32
+gss_construct_sec_context(
+    gss_status_t,            /* status                                        */
+    gss_cred_id_t,           /* cred_handle - reserved for future use         */
+    gss_ctx_id_t *,          /* context_handle                                */
+    gss_name_t,              /* target_name                                   */ 
+    gss_OID,                 /* mech_type                                     */
+    OM_uint32,               /* req_flags                                     */
+    OM_uint32,               /* time_req                                      */
+    gss_channel_bindings_t   /* input_chan_bindings - reserved for future use */
+);