1 files changed, 116 insertions, 0 deletions
diff --git a/src/tests/gssapi/t_inq_cred.c b/src/tests/gssapi/t_inq_cred.c
new file mode 100644
index 0000000000000..8dd331d679a71
--- /dev/null
+++ b/src/tests/gssapi/t_inq_cred.c
@@ -0,0 +1,116 @@
+/* -*- mode: c; c-basic-offset: 4; indent-tabs-mode: nil -*- */
+/* tests/gssapi/t_inq_cred.c - Test program for gss_inquire_cred behavior */
+/*
+ * Copyright 2012 by the Massachusetts Institute of Technology.
+ * All Rights Reserved.
+ *
+ * Export of this software from the United States of America may
+ *   require a specific license from the United States Government.
+ *   It is the responsibility of any person or organization contemplating
+ *   export to obtain such a license before exporting.
+ *
+ * WITHIN THAT CONSTRAINT, permission to use, copy, modify, and
+ * distribute this software and its documentation for any purpose and
+ * without fee is hereby granted, provided that the above copyright
+ * notice appear in all copies and that both that copyright notice and
+ * this permission notice appear in supporting documentation, and that
+ * the name of M.I.T. not be used in advertising or publicity pertaining
+ * to distribution of the software without specific, written prior
+ * permission.  Furthermore if you modify this software you must label
+ * your software as modified software and not distribute it in such a
+ * fashion that it might be confused with the original M.I.T. software.
+ * M.I.T. makes no representations about the suitability of
+ * this software for any purpose.  It is provided "as is" without express
+ * or implied warranty.
+ */
+
+/*
+ * Test program for gss_inquire_cred, intended to be run from a Python test
+ * script.  Acquires credentials, inquires them, and prints the resulting name
+ * and lifetime.
+ *
+ * Usage: ./t_inq_cred [-k|-s] [-a|-b|-i] [initiatorname]
+ *
+ * By default no mechanism is specified when acquiring credentials; -k
+ * indicates the krb5 mech and -s indicates SPNEGO.  By default or with -i,
+ * initiator credentials are acquired; -a indicates acceptor credentials and -b
+ * indicates credentials of both types.  The credential is acquired with no
+ * name by default; a krb5 principal name or host-based name (prefixed with
+ * "gss:") may be supplied as an argument.
+ */
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+
+#include "common.h"
+
+static void
+usage(void)
+{
+    fprintf(stderr,
+            "Usage: t_inq_cred [-k|-s] [-a|-b|-i] [princ|gss:service@host]\n");
+    exit(1);
+}
+
+int
+main(int argc, char *argv[])
+{
+    OM_uint32 minor, major, lifetime;
+    gss_cred_usage_t cred_usage = GSS_C_INITIATE;
+    gss_OID_set mechs = GSS_C_NO_OID_SET;
+    gss_cred_id_t cred = GSS_C_NO_CREDENTIAL;
+    gss_name_t name = GSS_C_NO_NAME;
+    gss_buffer_desc buf;
+    const char *name_arg = NULL;
+    char opt;
+
+    while (argc > 1 && argv[1][0] == '-') {
+        opt = argv[1][1];
+        argc--, argv++;
+        if (opt == 'a')
+            cred_usage = GSS_C_ACCEPT;
+        else if (opt == 'b')
+            cred_usage = GSS_C_BOTH;
+        else if (opt == 'i')
+            cred_usage = GSS_C_INITIATE;
+        else if (opt == 'k')
+            mechs = &mechset_krb5;
+        else if (opt == 's')
+            mechs = &mechset_spnego;
+        else
+            usage();
+    }
+    if (argc > 2)
+        usage();
+    if (argc > 1)
+        name_arg = argv[1];
+
+    /* Import the name, if given. */
+    if (name_arg != NULL)
+        name = import_name(name_arg);
+
+    /* Acquire a credential. */
+    major = gss_acquire_cred(&minor, name, GSS_C_INDEFINITE, mechs, cred_usage,
+                             &cred, NULL, NULL);
+    check_gsserr("gss_acquire_cred", major, minor);
+
+    /* Inquire about the credential. */
+    (void)gss_release_name(&minor, &name);
+    major = gss_inquire_cred(&minor, cred, &name, &lifetime, NULL, NULL);
+    check_gsserr("gss_inquire_cred", major, minor);
+
+    /* Get a display form of the name. */
+    buf.value = NULL;
+    buf.length = 0;
+    major = gss_display_name(&minor, name, &buf, NULL);
+    check_gsserr("gss_display_name", major, minor);
+
+    printf("name: %.*s\n", (int)buf.length, (char *)buf.value);
+    printf("lifetime: %d\n", (int)lifetime);
+
+    (void)gss_release_cred(&minor, &cred);
+    (void)gss_release_name(&minor, &name);
+    (void)gss_release_buffer(&minor, &buf);
+    return 0;
+}