11da177e4SLinus Torvalds /* 21da177e4SLinus Torvalds * linux/net/sunrpc/gss_mech_switch.c 31da177e4SLinus Torvalds * 41da177e4SLinus Torvalds * Copyright (c) 2001 The Regents of the University of Michigan. 51da177e4SLinus Torvalds * All rights reserved. 61da177e4SLinus Torvalds * 71da177e4SLinus Torvalds * J. Bruce Fields <bfields@umich.edu> 81da177e4SLinus Torvalds * 91da177e4SLinus Torvalds * Redistribution and use in source and binary forms, with or without 101da177e4SLinus Torvalds * modification, are permitted provided that the following conditions 111da177e4SLinus Torvalds * are met: 121da177e4SLinus Torvalds * 131da177e4SLinus Torvalds * 1. Redistributions of source code must retain the above copyright 141da177e4SLinus Torvalds * notice, this list of conditions and the following disclaimer. 151da177e4SLinus Torvalds * 2. Redistributions in binary form must reproduce the above copyright 161da177e4SLinus Torvalds * notice, this list of conditions and the following disclaimer in the 171da177e4SLinus Torvalds * documentation and/or other materials provided with the distribution. 181da177e4SLinus Torvalds * 3. Neither the name of the University nor the names of its 191da177e4SLinus Torvalds * contributors may be used to endorse or promote products derived 201da177e4SLinus Torvalds * from this software without specific prior written permission. 211da177e4SLinus Torvalds * 221da177e4SLinus Torvalds * THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED 231da177e4SLinus Torvalds * WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF 241da177e4SLinus Torvalds * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE 251da177e4SLinus Torvalds * DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE 261da177e4SLinus Torvalds * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR 271da177e4SLinus Torvalds * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF 281da177e4SLinus Torvalds * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR 291da177e4SLinus Torvalds * BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF 301da177e4SLinus Torvalds * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING 311da177e4SLinus Torvalds * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS 321da177e4SLinus Torvalds * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 331da177e4SLinus Torvalds * 341da177e4SLinus Torvalds */ 351da177e4SLinus Torvalds 361da177e4SLinus Torvalds #include <linux/types.h> 371da177e4SLinus Torvalds #include <linux/slab.h> 381da177e4SLinus Torvalds #include <linux/module.h> 391da177e4SLinus Torvalds #include <linux/sunrpc/msg_prot.h> 401da177e4SLinus Torvalds #include <linux/sunrpc/gss_asn1.h> 411da177e4SLinus Torvalds #include <linux/sunrpc/auth_gss.h> 421da177e4SLinus Torvalds #include <linux/sunrpc/svcauth_gss.h> 431da177e4SLinus Torvalds #include <linux/sunrpc/gss_err.h> 441da177e4SLinus Torvalds #include <linux/sunrpc/sched.h> 451da177e4SLinus Torvalds #include <linux/sunrpc/gss_api.h> 461da177e4SLinus Torvalds #include <linux/sunrpc/clnt.h> 471da177e4SLinus Torvalds 481da177e4SLinus Torvalds #ifdef RPC_DEBUG 491da177e4SLinus Torvalds # define RPCDBG_FACILITY RPCDBG_AUTH 501da177e4SLinus Torvalds #endif 511da177e4SLinus Torvalds 521da177e4SLinus Torvalds static LIST_HEAD(registered_mechs); 531da177e4SLinus Torvalds static DEFINE_SPINLOCK(registered_mechs_lock); 541da177e4SLinus Torvalds 551da177e4SLinus Torvalds static void 561da177e4SLinus Torvalds gss_mech_free(struct gss_api_mech *gm) 571da177e4SLinus Torvalds { 581da177e4SLinus Torvalds struct pf_desc *pf; 591da177e4SLinus Torvalds int i; 601da177e4SLinus Torvalds 611da177e4SLinus Torvalds for (i = 0; i < gm->gm_pf_num; i++) { 621da177e4SLinus Torvalds pf = &gm->gm_pfs[i]; 631da177e4SLinus Torvalds kfree(pf->auth_domain_name); 641da177e4SLinus Torvalds pf->auth_domain_name = NULL; 651da177e4SLinus Torvalds } 661da177e4SLinus Torvalds } 671da177e4SLinus Torvalds 681da177e4SLinus Torvalds static inline char * 691da177e4SLinus Torvalds make_auth_domain_name(char *name) 701da177e4SLinus Torvalds { 711da177e4SLinus Torvalds static char *prefix = "gss/"; 721da177e4SLinus Torvalds char *new; 731da177e4SLinus Torvalds 741da177e4SLinus Torvalds new = kmalloc(strlen(name) + strlen(prefix) + 1, GFP_KERNEL); 751da177e4SLinus Torvalds if (new) { 761da177e4SLinus Torvalds strcpy(new, prefix); 771da177e4SLinus Torvalds strcat(new, name); 781da177e4SLinus Torvalds } 791da177e4SLinus Torvalds return new; 801da177e4SLinus Torvalds } 811da177e4SLinus Torvalds 821da177e4SLinus Torvalds static int 831da177e4SLinus Torvalds gss_mech_svc_setup(struct gss_api_mech *gm) 841da177e4SLinus Torvalds { 851da177e4SLinus Torvalds struct pf_desc *pf; 861da177e4SLinus Torvalds int i, status; 871da177e4SLinus Torvalds 881da177e4SLinus Torvalds for (i = 0; i < gm->gm_pf_num; i++) { 891da177e4SLinus Torvalds pf = &gm->gm_pfs[i]; 901da177e4SLinus Torvalds pf->auth_domain_name = make_auth_domain_name(pf->name); 911da177e4SLinus Torvalds status = -ENOMEM; 921da177e4SLinus Torvalds if (pf->auth_domain_name == NULL) 931da177e4SLinus Torvalds goto out; 941da177e4SLinus Torvalds status = svcauth_gss_register_pseudoflavor(pf->pseudoflavor, 951da177e4SLinus Torvalds pf->auth_domain_name); 961da177e4SLinus Torvalds if (status) 971da177e4SLinus Torvalds goto out; 981da177e4SLinus Torvalds } 991da177e4SLinus Torvalds return 0; 1001da177e4SLinus Torvalds out: 1011da177e4SLinus Torvalds gss_mech_free(gm); 1021da177e4SLinus Torvalds return status; 1031da177e4SLinus Torvalds } 1041da177e4SLinus Torvalds 1051da177e4SLinus Torvalds int 1061da177e4SLinus Torvalds gss_mech_register(struct gss_api_mech *gm) 1071da177e4SLinus Torvalds { 1081da177e4SLinus Torvalds int status; 1091da177e4SLinus Torvalds 1101da177e4SLinus Torvalds status = gss_mech_svc_setup(gm); 1111da177e4SLinus Torvalds if (status) 1121da177e4SLinus Torvalds return status; 1131da177e4SLinus Torvalds spin_lock(®istered_mechs_lock); 1141da177e4SLinus Torvalds list_add(&gm->gm_list, ®istered_mechs); 1151da177e4SLinus Torvalds spin_unlock(®istered_mechs_lock); 1161da177e4SLinus Torvalds dprintk("RPC: registered gss mechanism %s\n", gm->gm_name); 1171da177e4SLinus Torvalds return 0; 1181da177e4SLinus Torvalds } 1191da177e4SLinus Torvalds 1207bd88269STrond Myklebust EXPORT_SYMBOL_GPL(gss_mech_register); 1211da177e4SLinus Torvalds 1221da177e4SLinus Torvalds void 1231da177e4SLinus Torvalds gss_mech_unregister(struct gss_api_mech *gm) 1241da177e4SLinus Torvalds { 1251da177e4SLinus Torvalds spin_lock(®istered_mechs_lock); 1261da177e4SLinus Torvalds list_del(&gm->gm_list); 1271da177e4SLinus Torvalds spin_unlock(®istered_mechs_lock); 1281da177e4SLinus Torvalds dprintk("RPC: unregistered gss mechanism %s\n", gm->gm_name); 1291da177e4SLinus Torvalds gss_mech_free(gm); 1301da177e4SLinus Torvalds } 1311da177e4SLinus Torvalds 1327bd88269STrond Myklebust EXPORT_SYMBOL_GPL(gss_mech_unregister); 1331da177e4SLinus Torvalds 1341da177e4SLinus Torvalds struct gss_api_mech * 1351da177e4SLinus Torvalds gss_mech_get(struct gss_api_mech *gm) 1361da177e4SLinus Torvalds { 1371da177e4SLinus Torvalds __module_get(gm->gm_owner); 1381da177e4SLinus Torvalds return gm; 1391da177e4SLinus Torvalds } 1401da177e4SLinus Torvalds 1417bd88269STrond Myklebust EXPORT_SYMBOL_GPL(gss_mech_get); 1421da177e4SLinus Torvalds 143c5f5e9c5STrond Myklebust static struct gss_api_mech * 144058c5c99SJ. Bruce Fields _gss_mech_get_by_name(const char *name) 1451da177e4SLinus Torvalds { 1461da177e4SLinus Torvalds struct gss_api_mech *pos, *gm = NULL; 1471da177e4SLinus Torvalds 1481da177e4SLinus Torvalds spin_lock(®istered_mechs_lock); 1491da177e4SLinus Torvalds list_for_each_entry(pos, ®istered_mechs, gm_list) { 1501da177e4SLinus Torvalds if (0 == strcmp(name, pos->gm_name)) { 1511da177e4SLinus Torvalds if (try_module_get(pos->gm_owner)) 1521da177e4SLinus Torvalds gm = pos; 1531da177e4SLinus Torvalds break; 1541da177e4SLinus Torvalds } 1551da177e4SLinus Torvalds } 1561da177e4SLinus Torvalds spin_unlock(®istered_mechs_lock); 1571da177e4SLinus Torvalds return gm; 1581da177e4SLinus Torvalds 1591da177e4SLinus Torvalds } 1601da177e4SLinus Torvalds 161058c5c99SJ. Bruce Fields struct gss_api_mech * gss_mech_get_by_name(const char *name) 162058c5c99SJ. Bruce Fields { 163058c5c99SJ. Bruce Fields struct gss_api_mech *gm = NULL; 164058c5c99SJ. Bruce Fields 165058c5c99SJ. Bruce Fields gm = _gss_mech_get_by_name(name); 166058c5c99SJ. Bruce Fields if (!gm) { 167058c5c99SJ. Bruce Fields request_module("rpc-auth-gss-%s", name); 168058c5c99SJ. Bruce Fields gm = _gss_mech_get_by_name(name); 169058c5c99SJ. Bruce Fields } 170058c5c99SJ. Bruce Fields return gm; 171058c5c99SJ. Bruce Fields } 1727bd88269STrond Myklebust EXPORT_SYMBOL_GPL(gss_mech_get_by_name); 1731da177e4SLinus Torvalds 1749568c5e9SChuck Lever static struct gss_api_mech *gss_mech_get_by_OID(struct rpcsec_gss_oid *obj) 1757ebb9315SBryan Schumaker { 1767ebb9315SBryan Schumaker struct gss_api_mech *pos, *gm = NULL; 1777ebb9315SBryan Schumaker 1787ebb9315SBryan Schumaker spin_lock(®istered_mechs_lock); 1797ebb9315SBryan Schumaker list_for_each_entry(pos, ®istered_mechs, gm_list) { 1807ebb9315SBryan Schumaker if (obj->len == pos->gm_oid.len) { 1817ebb9315SBryan Schumaker if (0 == memcmp(obj->data, pos->gm_oid.data, obj->len)) { 1827ebb9315SBryan Schumaker if (try_module_get(pos->gm_owner)) 1837ebb9315SBryan Schumaker gm = pos; 1847ebb9315SBryan Schumaker break; 1857ebb9315SBryan Schumaker } 1867ebb9315SBryan Schumaker } 1877ebb9315SBryan Schumaker } 1887ebb9315SBryan Schumaker spin_unlock(®istered_mechs_lock); 1897ebb9315SBryan Schumaker return gm; 1907ebb9315SBryan Schumaker } 1917ebb9315SBryan Schumaker 1921da177e4SLinus Torvalds static inline int 1931da177e4SLinus Torvalds mech_supports_pseudoflavor(struct gss_api_mech *gm, u32 pseudoflavor) 1941da177e4SLinus Torvalds { 1951da177e4SLinus Torvalds int i; 1961da177e4SLinus Torvalds 1971da177e4SLinus Torvalds for (i = 0; i < gm->gm_pf_num; i++) { 1981da177e4SLinus Torvalds if (gm->gm_pfs[i].pseudoflavor == pseudoflavor) 1991da177e4SLinus Torvalds return 1; 2001da177e4SLinus Torvalds } 2011da177e4SLinus Torvalds return 0; 2021da177e4SLinus Torvalds } 2031da177e4SLinus Torvalds 204c5f5e9c5STrond Myklebust static struct gss_api_mech *_gss_mech_get_by_pseudoflavor(u32 pseudoflavor) 2051da177e4SLinus Torvalds { 206058c5c99SJ. Bruce Fields struct gss_api_mech *gm = NULL, *pos; 2071da177e4SLinus Torvalds 2081da177e4SLinus Torvalds spin_lock(®istered_mechs_lock); 2091da177e4SLinus Torvalds list_for_each_entry(pos, ®istered_mechs, gm_list) { 2101da177e4SLinus Torvalds if (!mech_supports_pseudoflavor(pos, pseudoflavor)) { 2111da177e4SLinus Torvalds module_put(pos->gm_owner); 2121da177e4SLinus Torvalds continue; 2131da177e4SLinus Torvalds } 2141da177e4SLinus Torvalds if (try_module_get(pos->gm_owner)) 2151da177e4SLinus Torvalds gm = pos; 2161da177e4SLinus Torvalds break; 2171da177e4SLinus Torvalds } 2181da177e4SLinus Torvalds spin_unlock(®istered_mechs_lock); 2191da177e4SLinus Torvalds return gm; 2201da177e4SLinus Torvalds } 2211da177e4SLinus Torvalds 222058c5c99SJ. Bruce Fields struct gss_api_mech * 223058c5c99SJ. Bruce Fields gss_mech_get_by_pseudoflavor(u32 pseudoflavor) 224058c5c99SJ. Bruce Fields { 225058c5c99SJ. Bruce Fields struct gss_api_mech *gm; 226058c5c99SJ. Bruce Fields 227058c5c99SJ. Bruce Fields gm = _gss_mech_get_by_pseudoflavor(pseudoflavor); 228058c5c99SJ. Bruce Fields 229058c5c99SJ. Bruce Fields if (!gm) { 230058c5c99SJ. Bruce Fields request_module("rpc-auth-gss-%u", pseudoflavor); 231058c5c99SJ. Bruce Fields gm = _gss_mech_get_by_pseudoflavor(pseudoflavor); 232058c5c99SJ. Bruce Fields } 233058c5c99SJ. Bruce Fields return gm; 234058c5c99SJ. Bruce Fields } 235058c5c99SJ. Bruce Fields 2367bd88269STrond Myklebust EXPORT_SYMBOL_GPL(gss_mech_get_by_pseudoflavor); 2371da177e4SLinus Torvalds 2386a1a1e34SChuck Lever /** 2396a1a1e34SChuck Lever * gss_mech_list_pseudoflavors - Discover registered GSS pseudoflavors 2406a1a1e34SChuck Lever * @array: array to fill in 2416a1a1e34SChuck Lever * @size: size of "array" 2426a1a1e34SChuck Lever * 2436a1a1e34SChuck Lever * Returns the number of array items filled in, or a negative errno. 2446a1a1e34SChuck Lever * 2456a1a1e34SChuck Lever * The returned array is not sorted by any policy. Callers should not 2466a1a1e34SChuck Lever * rely on the order of the items in the returned array. 2476a1a1e34SChuck Lever */ 2486a1a1e34SChuck Lever int gss_mech_list_pseudoflavors(rpc_authflavor_t *array_ptr, int size) 2498f70e95fSBryan Schumaker { 2508f70e95fSBryan Schumaker struct gss_api_mech *pos = NULL; 2517bdf7415SSteve Dickson int j, i = 0; 2528f70e95fSBryan Schumaker 2538f70e95fSBryan Schumaker spin_lock(®istered_mechs_lock); 2548f70e95fSBryan Schumaker list_for_each_entry(pos, ®istered_mechs, gm_list) { 2557bdf7415SSteve Dickson for (j = 0; j < pos->gm_pf_num; j++) { 256013448c5STrond Myklebust if (i >= size) { 257013448c5STrond Myklebust spin_unlock(®istered_mechs_lock); 2586a1a1e34SChuck Lever return -ENOMEM; 259013448c5STrond Myklebust } 2607bdf7415SSteve Dickson array_ptr[i++] = pos->gm_pfs[j].pseudoflavor; 2617bdf7415SSteve Dickson } 2628f70e95fSBryan Schumaker } 2638f70e95fSBryan Schumaker spin_unlock(®istered_mechs_lock); 2648f70e95fSBryan Schumaker return i; 2658f70e95fSBryan Schumaker } 2668f70e95fSBryan Schumaker 2671da177e4SLinus Torvalds u32 268c4170583SAndy Adamson gss_svc_to_pseudoflavor(struct gss_api_mech *gm, u32 service) 269c4170583SAndy Adamson { 270c4170583SAndy Adamson int i; 271c4170583SAndy Adamson 272c4170583SAndy Adamson for (i = 0; i < gm->gm_pf_num; i++) { 273c4170583SAndy Adamson if (gm->gm_pfs[i].service == service) { 274c4170583SAndy Adamson return gm->gm_pfs[i].pseudoflavor; 275c4170583SAndy Adamson } 276c4170583SAndy Adamson } 277c4170583SAndy Adamson return RPC_AUTH_MAXFLAVOR; /* illegal value */ 278c4170583SAndy Adamson } 2797bd88269STrond Myklebust EXPORT_SYMBOL_GPL(gss_svc_to_pseudoflavor); 280c4170583SAndy Adamson 2819568c5e9SChuck Lever /** 2829568c5e9SChuck Lever * gss_mech_info2flavor - look up a pseudoflavor given a GSS tuple 2839568c5e9SChuck Lever * @info: a GSS mech OID, quality of protection, and service value 2849568c5e9SChuck Lever * 2859568c5e9SChuck Lever * Returns a matching pseudoflavor, or RPC_AUTH_MAXFLAVOR if the tuple is 2869568c5e9SChuck Lever * not supported. 2879568c5e9SChuck Lever */ 2889568c5e9SChuck Lever rpc_authflavor_t gss_mech_info2flavor(struct rpcsec_gss_info *info) 2899568c5e9SChuck Lever { 2909568c5e9SChuck Lever rpc_authflavor_t pseudoflavor; 2919568c5e9SChuck Lever struct gss_api_mech *gm; 2929568c5e9SChuck Lever 2939568c5e9SChuck Lever gm = gss_mech_get_by_OID(&info->oid); 2949568c5e9SChuck Lever if (gm == NULL) 2959568c5e9SChuck Lever return RPC_AUTH_MAXFLAVOR; 2969568c5e9SChuck Lever 2979568c5e9SChuck Lever pseudoflavor = gss_svc_to_pseudoflavor(gm, info->service); 2989568c5e9SChuck Lever 2999568c5e9SChuck Lever gss_mech_put(gm); 3009568c5e9SChuck Lever return pseudoflavor; 3019568c5e9SChuck Lever } 3029568c5e9SChuck Lever 303c4170583SAndy Adamson u32 3041da177e4SLinus Torvalds gss_pseudoflavor_to_service(struct gss_api_mech *gm, u32 pseudoflavor) 3051da177e4SLinus Torvalds { 3061da177e4SLinus Torvalds int i; 3071da177e4SLinus Torvalds 3081da177e4SLinus Torvalds for (i = 0; i < gm->gm_pf_num; i++) { 3091da177e4SLinus Torvalds if (gm->gm_pfs[i].pseudoflavor == pseudoflavor) 3101da177e4SLinus Torvalds return gm->gm_pfs[i].service; 3111da177e4SLinus Torvalds } 3121da177e4SLinus Torvalds return 0; 3131da177e4SLinus Torvalds } 3141da177e4SLinus Torvalds 3157bd88269STrond Myklebust EXPORT_SYMBOL_GPL(gss_pseudoflavor_to_service); 3161da177e4SLinus Torvalds 3171da177e4SLinus Torvalds char * 3181da177e4SLinus Torvalds gss_service_to_auth_domain_name(struct gss_api_mech *gm, u32 service) 3191da177e4SLinus Torvalds { 3201da177e4SLinus Torvalds int i; 3211da177e4SLinus Torvalds 3221da177e4SLinus Torvalds for (i = 0; i < gm->gm_pf_num; i++) { 3231da177e4SLinus Torvalds if (gm->gm_pfs[i].service == service) 3241da177e4SLinus Torvalds return gm->gm_pfs[i].auth_domain_name; 3251da177e4SLinus Torvalds } 3261da177e4SLinus Torvalds return NULL; 3271da177e4SLinus Torvalds } 3281da177e4SLinus Torvalds 3297bd88269STrond Myklebust EXPORT_SYMBOL_GPL(gss_service_to_auth_domain_name); 3301da177e4SLinus Torvalds 3311da177e4SLinus Torvalds void 3321da177e4SLinus Torvalds gss_mech_put(struct gss_api_mech * gm) 3331da177e4SLinus Torvalds { 3341df0cadaSJ. Bruce Fields if (gm) 3351da177e4SLinus Torvalds module_put(gm->gm_owner); 3361da177e4SLinus Torvalds } 3371da177e4SLinus Torvalds 3387bd88269STrond Myklebust EXPORT_SYMBOL_GPL(gss_mech_put); 3391da177e4SLinus Torvalds 3401da177e4SLinus Torvalds /* The mech could probably be determined from the token instead, but it's just 3411da177e4SLinus Torvalds * as easy for now to pass it in. */ 3421da177e4SLinus Torvalds int 3431da177e4SLinus Torvalds gss_import_sec_context(const void *input_token, size_t bufsize, 3441da177e4SLinus Torvalds struct gss_api_mech *mech, 3451f4c86c0STrond Myklebust struct gss_ctx **ctx_id, 3461f4c86c0STrond Myklebust gfp_t gfp_mask) 3471da177e4SLinus Torvalds { 3481f4c86c0STrond Myklebust if (!(*ctx_id = kzalloc(sizeof(**ctx_id), gfp_mask))) 349b891e4a0STrond Myklebust return -ENOMEM; 3501da177e4SLinus Torvalds (*ctx_id)->mech_type = gss_mech_get(mech); 3511da177e4SLinus Torvalds 3521da177e4SLinus Torvalds return mech->gm_ops 3531f4c86c0STrond Myklebust ->gss_import_sec_context(input_token, bufsize, *ctx_id, gfp_mask); 3541da177e4SLinus Torvalds } 3551da177e4SLinus Torvalds 3561da177e4SLinus Torvalds /* gss_get_mic: compute a mic over message and return mic_token. */ 3571da177e4SLinus Torvalds 3581da177e4SLinus Torvalds u32 3591da177e4SLinus Torvalds gss_get_mic(struct gss_ctx *context_handle, 3601da177e4SLinus Torvalds struct xdr_buf *message, 3611da177e4SLinus Torvalds struct xdr_netobj *mic_token) 3621da177e4SLinus Torvalds { 3631da177e4SLinus Torvalds return context_handle->mech_type->gm_ops 3641da177e4SLinus Torvalds ->gss_get_mic(context_handle, 3651da177e4SLinus Torvalds message, 3661da177e4SLinus Torvalds mic_token); 3671da177e4SLinus Torvalds } 3681da177e4SLinus Torvalds 3691da177e4SLinus Torvalds /* gss_verify_mic: check whether the provided mic_token verifies message. */ 3701da177e4SLinus Torvalds 3711da177e4SLinus Torvalds u32 3721da177e4SLinus Torvalds gss_verify_mic(struct gss_ctx *context_handle, 3731da177e4SLinus Torvalds struct xdr_buf *message, 37400fd6e14SJ. Bruce Fields struct xdr_netobj *mic_token) 3751da177e4SLinus Torvalds { 3761da177e4SLinus Torvalds return context_handle->mech_type->gm_ops 3771da177e4SLinus Torvalds ->gss_verify_mic(context_handle, 3781da177e4SLinus Torvalds message, 37900fd6e14SJ. Bruce Fields mic_token); 3801da177e4SLinus Torvalds } 3811da177e4SLinus Torvalds 3827561042fSKevin Coffman /* 3837561042fSKevin Coffman * This function is called from both the client and server code. 3847561042fSKevin Coffman * Each makes guarantees about how much "slack" space is available 3857561042fSKevin Coffman * for the underlying function in "buf"'s head and tail while 3867561042fSKevin Coffman * performing the wrap. 3877561042fSKevin Coffman * 3887561042fSKevin Coffman * The client and server code allocate RPC_MAX_AUTH_SIZE extra 3897561042fSKevin Coffman * space in both the head and tail which is available for use by 3907561042fSKevin Coffman * the wrap function. 3917561042fSKevin Coffman * 3927561042fSKevin Coffman * Underlying functions should verify they do not use more than 3937561042fSKevin Coffman * RPC_MAX_AUTH_SIZE of extra space in either the head or tail 3947561042fSKevin Coffman * when performing the wrap. 3957561042fSKevin Coffman */ 396293f1eb5SJ. Bruce Fields u32 397293f1eb5SJ. Bruce Fields gss_wrap(struct gss_ctx *ctx_id, 398293f1eb5SJ. Bruce Fields int offset, 399293f1eb5SJ. Bruce Fields struct xdr_buf *buf, 400293f1eb5SJ. Bruce Fields struct page **inpages) 401293f1eb5SJ. Bruce Fields { 402293f1eb5SJ. Bruce Fields return ctx_id->mech_type->gm_ops 40300fd6e14SJ. Bruce Fields ->gss_wrap(ctx_id, offset, buf, inpages); 404293f1eb5SJ. Bruce Fields } 405293f1eb5SJ. Bruce Fields 406293f1eb5SJ. Bruce Fields u32 407293f1eb5SJ. Bruce Fields gss_unwrap(struct gss_ctx *ctx_id, 408293f1eb5SJ. Bruce Fields int offset, 409293f1eb5SJ. Bruce Fields struct xdr_buf *buf) 410293f1eb5SJ. Bruce Fields { 411293f1eb5SJ. Bruce Fields return ctx_id->mech_type->gm_ops 41200fd6e14SJ. Bruce Fields ->gss_unwrap(ctx_id, offset, buf); 413293f1eb5SJ. Bruce Fields } 414293f1eb5SJ. Bruce Fields 415293f1eb5SJ. Bruce Fields 4161da177e4SLinus Torvalds /* gss_delete_sec_context: free all resources associated with context_handle. 4171da177e4SLinus Torvalds * Note this differs from the RFC 2744-specified prototype in that we don't 4181da177e4SLinus Torvalds * bother returning an output token, since it would never be used anyway. */ 4191da177e4SLinus Torvalds 4201da177e4SLinus Torvalds u32 4211da177e4SLinus Torvalds gss_delete_sec_context(struct gss_ctx **context_handle) 4221da177e4SLinus Torvalds { 4231da177e4SLinus Torvalds dprintk("RPC: gss_delete_sec_context deleting %p\n", 4241da177e4SLinus Torvalds *context_handle); 4251da177e4SLinus Torvalds 4261da177e4SLinus Torvalds if (!*context_handle) 427a02cec21SEric Dumazet return GSS_S_NO_CONTEXT; 42827724426SAl Viro if ((*context_handle)->internal_ctx_id) 4291da177e4SLinus Torvalds (*context_handle)->mech_type->gm_ops 4301da177e4SLinus Torvalds ->gss_delete_sec_context((*context_handle) 4311da177e4SLinus Torvalds ->internal_ctx_id); 4321da177e4SLinus Torvalds gss_mech_put((*context_handle)->mech_type); 4331da177e4SLinus Torvalds kfree(*context_handle); 4341da177e4SLinus Torvalds *context_handle=NULL; 4351da177e4SLinus Torvalds return GSS_S_COMPLETE; 4361da177e4SLinus Torvalds } 437