|
Lines 275-287
ssh_gssapi_do_child(char ***envp, u_int
Link Here
|
| 275 |
int |
275 |
int |
| 276 |
ssh_gssapi_userok(char *user) |
276 |
ssh_gssapi_userok(char *user) |
| 277 |
{ |
277 |
{ |
|
|
278 |
OM_uint32 lmin; |
| 279 |
|
| 278 |
if (gssapi_client.exportedname.length == 0 || |
280 |
if (gssapi_client.exportedname.length == 0 || |
| 279 |
gssapi_client.exportedname.value == NULL) { |
281 |
gssapi_client.exportedname.value == NULL) { |
| 280 |
debug("No suitable client data"); |
282 |
debug("No suitable client data"); |
| 281 |
return 0; |
283 |
return 0; |
| 282 |
} |
284 |
} |
| 283 |
if (gssapi_client.mech && gssapi_client.mech->userok) |
285 |
if (gssapi_client.mech && gssapi_client.mech->userok) |
| 284 |
return ((*gssapi_client.mech->userok)(&gssapi_client, user)); |
286 |
if ((*gssapi_client.mech->userok)(&gssapi_client, user)) |
|
|
287 |
return 1; |
| 288 |
else { |
| 289 |
/* Destroy delegated credentials if userok fails */ |
| 290 |
gss_release_buffer(&lmin, &gssapi_client.displayname); |
| 291 |
gss_release_buffer(&lmin, &gssapi_client.exportedname); |
| 292 |
gss_release_cred(&lmin, &gssapi_client.creds); |
| 293 |
memset(&gssapi_client, 0, sizeof(ssh_gssapi_client)); |
| 294 |
return 0; |
| 295 |
} |
| 285 |
else |
296 |
else |
| 286 |
debug("ssh_gssapi_userok: Unknown GSSAPI mechanism"); |
297 |
debug("ssh_gssapi_userok: Unknown GSSAPI mechanism"); |
| 287 |
return (0); |
298 |
return (0); |