mirror of
https://github.com/zeromq/libzmq.git
synced 2024-12-13 18:55:10 +01:00
0b185e8297
Problem: principals are looked up unconditionally with the GSS_C_NT_HOSTBASED_SERVICE name type. Solution: Add two new socket options to set the name type for ZMQ_GSSAPI_PRINCIPAL and ZMQ_GSSAPI_SERVICE_PRINCIPAL: ZMQ_GSSAPI_PRINCIPAL_NAMETYPE ZMQ_GSSAPI_SERVICE_PRINCIPAL_NAMETYPE They take an integer argument which must be one of ZMQ_GSSAPI_NT_HOSTBASED (0) - default ZMQ_GSSAPI_NT_USER_NAME (1) ZMQ_GSSAPI_NT_KRB5_PRINCIPAL (2) These correspond to GSSAPI name types of: GSS_C_NT_HOSTBASED_SERVICE GSS_C_NT_USER_NAME GSS_KRB5_NT_PRINCIPAL_NAME Fixes #2542
96 lines
2.9 KiB
C++
96 lines
2.9 KiB
C++
/*
|
|
Copyright (c) 2007-2016 Contributors as noted in the AUTHORS file
|
|
|
|
This file is part of libzmq, the ZeroMQ core engine in C++.
|
|
|
|
libzmq is free software; you can redistribute it and/or modify it under
|
|
the terms of the GNU Lesser General Public License (LGPL) as published
|
|
by the Free Software Foundation; either version 3 of the License, or
|
|
(at your option) any later version.
|
|
|
|
As a special exception, the Contributors give you permission to link
|
|
this library with independent modules to produce an executable,
|
|
regardless of the license terms of these independent modules, and to
|
|
copy and distribute the resulting executable under terms of your choice,
|
|
provided that you also meet, for each linked independent module, the
|
|
terms and conditions of the license of that module. An independent
|
|
module is a module which is not derived from or based on this library.
|
|
If you modify this library, you must extend this exception to your
|
|
version of the library.
|
|
|
|
libzmq is distributed in the hope that it will be useful, but WITHOUT
|
|
ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
|
|
FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser General Public
|
|
License for more details.
|
|
|
|
You should have received a copy of the GNU Lesser General Public License
|
|
along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
#ifndef __ZMQ_GSSAPI_CLIENT_HPP_INCLUDED__
|
|
#define __ZMQ_GSSAPI_CLIENT_HPP_INCLUDED__
|
|
|
|
#ifdef HAVE_LIBGSSAPI_KRB5
|
|
|
|
#include "gssapi_mechanism_base.hpp"
|
|
|
|
namespace zmq
|
|
{
|
|
|
|
class msg_t;
|
|
|
|
class gssapi_client_t :
|
|
public gssapi_mechanism_base_t
|
|
{
|
|
public:
|
|
|
|
gssapi_client_t (const options_t &options_);
|
|
virtual ~gssapi_client_t ();
|
|
|
|
// mechanism implementation
|
|
virtual int next_handshake_command (msg_t *msg_);
|
|
virtual int process_handshake_command (msg_t *msg_);
|
|
virtual int encode (msg_t *msg_);
|
|
virtual int decode (msg_t *msg_);
|
|
virtual status_t status () const;
|
|
|
|
private:
|
|
|
|
enum state_t {
|
|
call_next_init,
|
|
send_next_token,
|
|
recv_next_token,
|
|
send_ready,
|
|
recv_ready,
|
|
connected
|
|
};
|
|
|
|
// Human-readable principal name of the service we are connecting to
|
|
char * service_name;
|
|
|
|
gss_OID service_name_type;
|
|
|
|
// Current FSM state
|
|
state_t state;
|
|
|
|
// Points to either send_tok or recv_tok
|
|
// during context initialization
|
|
gss_buffer_desc *token_ptr;
|
|
|
|
// The desired underlying mechanism
|
|
gss_OID_set_desc mechs;
|
|
|
|
// True iff client considers the server authenticated
|
|
bool security_context_established;
|
|
|
|
int initialize_context ();
|
|
int produce_next_token (msg_t *msg_);
|
|
int process_next_token (msg_t *msg_);
|
|
};
|
|
|
|
}
|
|
|
|
#endif
|
|
|
|
#endif
|