2  * Authorization routines for the CUPS scheduler.
87  * 'cupsdAddIPMask()' - Add an IP address authorization mask.
119  * 'cupsdAddLocation()' - Add a location for authorization.
170  * 'cupsdAddNameMask()' - Add a host or interface name authorization mask.
244  * 'cupsdAuthorize()' - Validate any authorization credentials.
251   const char	*authorization;		/* Pointer into Authorization string */  in cupsdAuthorize()  local
281   * Decode the Authorization string...  in cupsdAuthorize()
284   authorization = httpGetField(con->http, HTTP_FIELD_AUTHORIZATION);  in cupsdAuthorize()
301   if (!*authorization)  in cupsdAuthorize()
304     * No authorization data provided, return early...  in cupsdAuthorize()
311   else if (!strncmp(authorization, "AuthRef ", 8) &&  in cupsdAuthorize()
318     AuthorizationItemSet *authinfo;	/* Authorization item set */  in cupsdAuthorize()
321     * Get the Authorization Services data...  in cupsdAuthorize()
324     authorization += 8;  in cupsdAuthorize()
325     while (isspace(*authorization & 255))  in cupsdAuthorize()
326       authorization ++;  in cupsdAuthorize()
329     httpDecode64_2(authdata, &authlen, authorization);  in cupsdAuthorize()
333       cupsdLogClient(con, CUPSD_LOG_ERROR, "External Authorization reference size is incorrect.");  in cupsdAuthorize()
392   else if (!strncmp(authorization, "PeerCred ", 9) &&  in cupsdAuthorize()
435     if ((pwd = getpwnam(authorization + 9)) == NULL)  in cupsdAuthorize()
437       cupsdLogClient(con, CUPSD_LOG_ERROR, "User \"%s\" does not exist.", authorization + 9);  in cupsdAuthorize()
455 …_ERROR, "Invalid peer credentials for \"%s\" - got %d, expected %d.", authorization + 9, CUPSD_UCR…  in cupsdAuthorize()
465     strlcpy(username, authorization + 9, sizeof(username));  in cupsdAuthorize()
476   else if (!strncmp(authorization, "Local", 5) &&  in cupsdAuthorize()
483     authorization += 5;  in cupsdAuthorize()
484     while (isspace(*authorization & 255))  in cupsdAuthorize()
485       authorization ++;  in cupsdAuthorize()
487     if ((localuser = cupsdFindCert(authorization)) == NULL)  in cupsdAuthorize()
498   else if (!strncmp(authorization, "Basic", 5))  in cupsdAuthorize()
507     authorization += 5;  in cupsdAuthorize()
508     while (isspace(*authorization & 255))  in cupsdAuthorize()
509       authorization ++;  in cupsdAuthorize()
512     httpDecode64_2(username, &userlen, authorization);  in cupsdAuthorize()
715   else if (!strncmp(authorization, "Negotiate", 9))  in cupsdAuthorize()
717     int			len;		/* Length of authorization string */  in cupsdAuthorize()
718     gss_ctx_id_t	context;	/* Authorization context */  in cupsdAuthorize()
745     authorization += 9;  in cupsdAuthorize()
746     while (isspace(*authorization & 255))  in cupsdAuthorize()
747       authorization ++;  in cupsdAuthorize()
749     if (!*authorization)  in cupsdAuthorize()
756     * Decode the authorization string to get the input token...  in cupsdAuthorize()
759     len                = (int)strlen(authorization) + 0;  in cupsdAuthorize()
762 					authorization);  in cupsdAuthorize()
766     * Accept the input token to get the authorization info...  in cupsdAuthorize()
864     if (sscanf(authorization, "%255s", scheme) != 1)  in cupsdAuthorize()
908     * Do authorization checks on the domain/address...  in cupsdCheckAccess()
944  * 'cupsdCheckAuth()' - Check authorization masks.
1353  * 'cupsdDeleteAllLocations()' - Free all memory used for location authorization.
1531 			auth,		/* Authorization status */  in cupsdIsAuthorized()
1537   unsigned		address[4];	/* Authorization address */  in cupsdIsAuthorized()
1770     * If an authorization reference was supplied it must match a right name...  in cupsdIsAuthorized()
1852  * 'cupsdNewLocation()' - Create a new location for authorization.
1893  * 'check_authref()' - Check if an authorization services reference has the
1902   AuthorizationItem	authright;	/* Authorization right */  in check_authref()
1903   AuthorizationRights	authrights;	/* Authorization rights */  in check_authref()
1904   AuthorizationFlags	authflags;	/* Authorization flags */  in check_authref()