D7net
Home
Console
Upload
information
Create File
Create Folder
About
Tools
:
/
lib64
/
perl5
/
vendor_perl
/
Filename :
GSSAPI.pm
back
Copy
package GSSAPI; require 5.005_62; use strict; use warnings; use Carp; require Exporter; use XSLoader; our @ISA = qw(Exporter); our $VERSION = '0.28'; # Items to export into callers namespace by default. Note: do not export # names by default without a very good reason. Use EXPORT_OK instead. # Do not simply export all your public functions/methods/constants. # This allows declaration use GSSAPI ':all'; # If you do not need this, moving things directly into @EXPORT or @EXPORT_OK # will save memory. our %EXPORT_TAGS = ( 'all' => [ qw( GSS_C_ACCEPT GSS_C_AF_APPLETALK GSS_C_AF_BSC GSS_C_AF_CCITT GSS_C_AF_CHAOS GSS_C_AF_DATAKIT GSS_C_AF_DECnet GSS_C_AF_DLI GSS_C_AF_DSS GSS_C_AF_ECMA GSS_C_AF_HYLINK GSS_C_AF_IMPLINK GSS_C_AF_INET GSS_C_AF_LAT GSS_C_AF_LOCAL GSS_C_AF_NBS GSS_C_AF_NS GSS_C_AF_NULLADDR GSS_C_AF_OSI GSS_C_AF_PUP GSS_C_AF_SNA GSS_C_AF_UNSPEC GSS_C_AF_X25 GSS_C_ANON_FLAG GSS_C_BOTH GSS_C_CALLING_ERROR_MASK GSS_C_CALLING_ERROR_OFFSET GSS_C_CONF_FLAG GSS_C_DELEG_FLAG GSS_C_EMPTY_BUFFER GSS_C_GSS_CODE GSS_C_INDEFINITE GSS_C_INITIATE GSS_C_INTEG_FLAG GSS_C_MECH_CODE GSS_C_MUTUAL_FLAG GSS_C_NO_BUFFER GSS_C_NO_CHANNEL_BINDINGS GSS_C_NO_CONTEXT GSS_C_NO_CREDENTIAL GSS_C_NO_NAME GSS_C_NO_OID GSS_C_NO_OID_SET GSS_C_PROT_READY_FLAG GSS_C_QOP_DEFAULT GSS_C_REPLAY_FLAG GSS_C_ROUTINE_ERROR_MASK GSS_C_ROUTINE_ERROR_OFFSET GSS_C_SEQUENCE_FLAG GSS_C_SUPPLEMENTARY_MASK GSS_C_SUPPLEMENTARY_OFFSET GSS_C_TRANS_FLAG GSS_S_BAD_BINDINGS GSS_S_BAD_MECH GSS_S_BAD_NAME GSS_S_BAD_NAMETYPE GSS_S_BAD_QOP GSS_S_BAD_SIG GSS_S_BAD_STATUS GSS_S_CALL_BAD_STRUCTURE GSS_S_CALL_INACCESSIBLE_READ GSS_S_CALL_INACCESSIBLE_WRITE GSS_S_COMPLETE GSS_S_CONTEXT_EXPIRED GSS_S_CONTINUE_NEEDED GSS_S_CREDENTIALS_EXPIRED GSS_S_CRED_UNAVAIL GSS_S_DEFECTIVE_CREDENTIAL GSS_S_DEFECTIVE_TOKEN GSS_S_DUPLICATE_ELEMENT GSS_S_DUPLICATE_TOKEN GSS_S_FAILURE GSS_S_GAP_TOKEN GSS_S_NAME_NOT_MN GSS_S_NO_CONTEXT GSS_S_NO_CRED GSS_S_OLD_TOKEN GSS_S_UNAUTHORIZED GSS_S_UNAVAILABLE GSS_S_UNSEQ_TOKEN indicate_mechs ) ] ); our @EXPORT_OK = ( @{ $EXPORT_TAGS{'all'} } ); our @EXPORT = ( @{ $EXPORT_TAGS{'all'} } ); XSLoader::load 'GSSAPI', $VERSION; sub import { my $self = shift; my @args = @_; my $package = caller; $self->export_to_level(1, $self, @args); foreach (qw(Status OID OID::Set)) { eval "package $package; use GSSAPI::$_ \@args; 1" or croak $@; } } { no strict 'refs'; foreach my $pack (qw(Context Cred Name)) { @{"GSSAPI::${pack}::ISA"} = "GSSAPI"; } } # Preloaded methods go here. use constant GSS_C_NO_NAME => undef; use constant GSS_C_NO_BUFFER => undef; use constant GSS_C_NO_OID => undef; use constant GSS_C_NO_OID_SET => undef; use constant GSS_C_NO_CONTEXT => undef; use constant GSS_C_NO_CREDENTIAL => undef; use constant GSS_C_NO_CHANNEL_BINDINGS => undef; use constant GSS_C_EMPTY_BUFFER => ""; 1; __END__ =head1 NAME GSSAPI - Perl extension providing access to the GSSAPIv2 library =head1 SYNOPSIS use GSSAPI; my $targethostname = 'HTTP@moerbsen.grolmsnet.lan'; my $status; TRY: { my ($target, $tname, $ttl ); $status = GSSAPI::Name->import( $target, $server, GSSAPI::OID::gss_nt_hostbased_service) or last; $status = $target->display($tname) or last; print "\n using Name $tname"; my $ctx = GSSAPI::Context->new(); my $imech = GSSAPI::OID::gss_mech_krb5; my $iflags = 0 ; my $bindings = GSS_C_NO_CHANNEL_BINDINGS; my $creds = GSS_C_NO_CREDENTIAL; my $itime = 0; my $itoken = q{}; my $otoken; $status = $ctx->init($creds,$target, $imech,$iflags,$itime,$bindings,$itoken, undef, $otoken,undef,undef) or last; $status = $ctx->valid_time_left($ttl) or last; print "\n Security context's time to live $ttl secs"; } unless ($status->major == GSS_S_COMPLETE ) { print "\nErrors: ", $status; } else { print "\n seems everything is fine, type klist to see the ticket\n"; =head1 DESCRIPTION This module gives access to the routines of the GSSAPI library, as described in rfc2743 and rfc2744 and implemented by the Kerberos-1.2 distribution from MIT. Since 0.14 it also compiles and works with Heimdal. Lacks of Heimdal support are gss_release_oid(), gss_str_to_oid() and fail of some tests. Have a look at the tests in t/ directory too see what tests fail on Heimdal ( the *.t tests are just skipping them at the moment) The API presented by this module is a mildly object oriented reinterpretation of the C API, where opaque C structures are Perl objects, but the style of function call has been left mostly untouched. As a result, most routines modify one or more of the parameters passed to them, reflecting the C call-by-reference (or call-by-value-return) semantics. All users of this module are therefore strongly advised to localize all usage of these routines to minimize pain if and when the API changes. =head1 USAGE This module wraps the GSSAPI C-Bindings. If you are new to GSSAPI it is a good idea to read RFC2743 and RFC2744, the documentation requires you to be familiar with the concept and the wordings of GSSAPI programming. the examples directory holds some working examples of usage: =over =item getcred_hostbased.pl gets a GSSAPI Token for a service specified on commandline. (like kgetcred on Heimdal or kvno on MIT) =item gss-client.pl a simple GSSAPI TCP client. =item gss-server.pl a simple GSSAPI TCP server. Use both as templates if you need quickhacking GSSAPI enabeled GSSAPI TCP services. =back =head2 GSSAPI::Name GSSAPI internal representation of principalname =head3 Methods =over =item import( $gssapinameobj, $servicename, $mechnism_oid ); converts stringrepresentation $servicename of service into a GSSAPI internal format and stores it in $gssapiservicename. =over =item input =over =item servicename Scalar value, like 'HTTP@moerbsen.grolmsnet.lan'. =item mechnism_oid Chose one of the predefines mechanism OIDs from GSSAPI::OID =back =item output =over =item $gssapinameobj GSSAPI internal representation of servicename =back =item return value returns GSSAPI::Status Object =item Example: $status = GSSAPI::Name->import( $gssapinameobj, 'HTTP@moerbsen.grolmsnet.lan', GSSAPI::OID::gss_nt_hostbased_service); =back =item display($tname); converts the GSSAPI internal format into a humanreadable string and stores it into $tname. =over =item output humanreadable string will be stored into $tname. =item return value returns GSSAPI::Status Object =item Example: my $tname; $status = $gssapinameobj->display($tname); die 'hmm, error...' if($status->major != GSS_S_COMPLETE ); print "\n Name is $tname"; =back =item compare( nameobj, ret) Wraps gss_compare_name(). =over =item Input =over =item nameobj the 2nd GSSAPI::Name to be compared to =back =item output =over =item ret =over =item value is non-zero names refer to same entity =item value is zero names refer to different entities. =back =back =item return value returns GSSAPI::Status Object =back =back =head2 EXPORT GSS_C_ACCEPT GSS_C_AF_APPLETALK GSS_C_AF_BSC GSS_C_AF_CCITT GSS_C_AF_CHAOS GSS_C_AF_DATAKIT GSS_C_AF_DECnet GSS_C_AF_DLI GSS_C_AF_DSS GSS_C_AF_ECMA GSS_C_AF_HYLINK GSS_C_AF_IMPLINK GSS_C_AF_INET GSS_C_AF_LAT GSS_C_AF_LOCAL GSS_C_AF_NBS GSS_C_AF_NS GSS_C_AF_NULLADDR GSS_C_AF_OSI GSS_C_AF_PUP GSS_C_AF_SNA GSS_C_AF_UNSPEC GSS_C_AF_X25 GSS_C_ANON_FLAG GSS_C_BOTH GSS_C_CALLING_ERROR_MASK GSS_C_CALLING_ERROR_OFFSET GSS_C_CONF_FLAG GSS_C_DELEG_FLAG GSS_C_EMPTY_BUFFER GSS_C_GSS_CODE GSS_C_INDEFINITE GSS_C_INITIATE GSS_C_INTEG_FLAG GSS_C_MECH_CODE GSS_C_MUTUAL_FLAG GSS_C_NO_BUFFER GSS_C_NO_CHANNEL_BINDINGS GSS_C_NO_CONTEXT GSS_C_NO_CREDENTIAL GSS_C_NO_NAME GSS_C_NO_OID GSS_C_NO_OID_SET GSS_C_PROT_READY_FLAG GSS_C_QOP_DEFAULT GSS_C_REPLAY_FLAG GSS_C_ROUTINE_ERROR_MASK GSS_C_ROUTINE_ERROR_OFFSET GSS_C_SEQUENCE_FLAG GSS_C_SUPPLEMENTARY_MASK GSS_C_SUPPLEMENTARY_OFFSET GSS_C_TRANS_FLAG GSS_S_BAD_BINDINGS GSS_S_BAD_MECH GSS_S_BAD_NAME GSS_S_BAD_NAMETYPE GSS_S_BAD_QOP GSS_S_BAD_SIG GSS_S_BAD_STATUS GSS_S_CALL_BAD_STRUCTURE GSS_S_CALL_INACCESSIBLE_READ GSS_S_CALL_INACCESSIBLE_WRITE GSS_S_COMPLETE GSS_S_CONTEXT_EXPIRED GSS_S_CONTINUE_NEEDED GSS_S_CREDENTIALS_EXPIRED GSS_S_CRED_UNAVAIL GSS_S_DEFECTIVE_CREDENTIAL GSS_S_DEFECTIVE_TOKEN GSS_S_DUPLICATE_ELEMENT GSS_S_DUPLICATE_TOKEN GSS_S_FAILURE GSS_S_GAP_TOKEN GSS_S_NAME_NOT_MN GSS_S_NO_CONTEXT GSS_S_NO_CRED GSS_S_OLD_TOKEN GSS_S_UNAUTHORIZED GSS_S_UNAVAILABLE GSS_S_UNSEQ_TOKEN =head2 Exportable functions $status = indicate_mechs($oidset) Example use GSSAPI qw(:all); my $oidset; my $isin = 0; my $status = indicate_mechs( $oidset ); $status->major == GSS_S_COMPLETE || die 'error'; $status = $oidset->contains( gss_mech_krb5_old, $isin ); $status->major == GSS_S_COMPLETE || die 'error'; if ( $isin ) { print 'Support of Kerberos 5 old mechtype'; } else { print 'No Support of Kerberos 5 old mechtype'; } =head3 Constant OIDs provided: # Constant OIDs provided: $oid = gss_nt_user_name; $oid = gss_nt_machine_uid_name; $oid = gss_nt_string_uid_name; $oid = gss_nt_service_name; $oid = gss_nt_exported_name; $oid = gss_nt_service_name_v2; $oid = gss_nt_krb5_name; $oid = gss_nt_krb5_principal; $oid = gss_mech_krb5; $oid = gss_mech_krb5_old; $oid = gss_mech_spnego; All other functions are class or instance methods. =head1 SEE ALSO GSSAPI::Status(3p) GSSAPI::OID(3p) GSSAPI::OID::Set(3p) =over =item RFC2743 Generic Security Service API Version 2 : C-bindings =item RFC2744 Generic Security Service Application Program Interface =item LWP::Authen::Negotiate GSSAPI based Authentication plugin for LWP =item Authen::SASL::Perl::GSSAPI A SASL adapter, implementing the Authen::SASL interface, using GSSAPI.pm =item http://perlgssapi.sourceforge.net/ Holds an actual list of GSSAPI.pm authentication using modules =back perl(1) =head1 BUGS More documentation how to use the module has to be added. =head1 SUPPORT See our project home at <http://perlgssapi.sourceforge.net/> Mailinglist perlgssapi-users@lists.sourceforge.net =head1 AUTHOR The module ist maintained by Achim Grolms <perl@grolmsnet.de> originally written by Philip Guenther <pguen@cpan.org> =head1 THANKS TO =over =item Philip Guenther =item Leif Johansson =item Merijn Broeren =item Harald Joerg =item Christopher Odenbach =item Dax Kelson =item Marc Lehmann =item David Leonard =item Florian Ragwitz maintainer of Debian package =item Markus Moeller Solaris 10 / OpenSolaris support =back =head1 COPYRIGHT Copyright (c) 2006,2008 Achim Grolms. All rights reserved. This program is free software; you can redistribute it and/or modify it under the same terms as Perl itself. Copyright (c) 2000,2001,2005 Philip Guenther. All rights reserved. This program is free software; you can redistribute it and/or modify it under the same terms as Perl itself. =cut