oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

kdc: add wrappers for heimbase object accessors

Browse Source 
Add libkdc wrappers for heimbase object accessors so plugins can use audit and
request attribute APIs without consuming libheimbase. Exposed API surface is
minimal and is limited to reading array collections, and reading/creating base
and custom types.
This commit is contained in:
Luke Howard
2022-01-29 09:56:34 +11:00
committed by Nico Williams
parent 917e16049a
commit 144caf67fa
9 changed files with 181 additions and 22 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
kdc/altsecid_gss_preauth_authorizer.c
View File

@@ -272,7 +272,7 @@ ad_lookup(krb5_context context,
gss_const_name_t initiator_name,
gss_const_OID mech_type,
krb5_principal *canon_principal,
heim_data_t *requestor_sid)
kdc_data_t *requestor_sid)
{
krb5_error_code ret;
OM_uint32 minor;
@@ -354,7 +354,7 @@ ad_lookup(krb5_context context,
ldap_count_values_len(values) == 0)
goto out;
*requestor_sid = heim_data_create(values[0]->bv_val, values[0]->bv_len);
*requestor_sid = kdc_data_create(values[0]->bv_val, values[0]->bv_len);
if (*requestor_sid == NULL)
goto enomem;
}
@@ -371,7 +371,7 @@ out:
*canon_principal = NULL;
if (requestor_sid) {
heim_release(*requestor_sid);
kdc_object_release(*requestor_sid);
*requestor_sid = NULL;
}
}
@@ -403,7 +403,7 @@ authorize(void *ctx,
krb5_const_realm realm = krb5_principal_get_realm(context, client->principal);
krb5_boolean reconnect_p = FALSE;
krb5_boolean is_tgs;
heim_data_t requestor_sid = NULL;
kdc_data_t requestor_sid = NULL;
*authorized = FALSE;
*mapped_name = NULL;
@@ -457,7 +457,7 @@ authorize(void *ctx,
if (requestor_sid) {
kdc_request_set_attribute((kdc_request_t)r,
HSTR("org.h5l.gss-pa-requestor-sid"), requestor_sid);
heim_release(requestor_sid);
kdc_object_release(requestor_sid);
}
return ret;
@@ -466,7 +466,7 @@ authorize(void *ctx,
static KRB5_LIB_CALL krb5_error_code
finalize_pac(void *ctx, astgs_request_t r)
{
heim_data_t requestor_sid;
kdc_data_t requestor_sid;
requestor_sid = kdc_request_get_attribute((kdc_request_t)r,
HSTR("org.h5l.gss-pa-requestor-sid"));
@@ -476,7 +476,7 @@ finalize_pac(void *ctx, astgs_request_t r)
kdc_audit_setkv_object((kdc_request_t)r, "gss_requestor_sid", requestor_sid);
return kdc_request_add_pac_buffer(r, PAC_REQUESTOR_SID,
heim_data_get_data(requestor_sid));
kdc_data_get_data(requestor_sid));
}
static KRB5_LIB_CALL krb5_error_code