obsolete.c

Go to the documentation of this file.

/* obsolete.c --- Obsolete functions kept around for backwards compatibility.
 * Copyright (C) 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009  Simon Josefsson
 *
 * This file is part of GNU SASL Library.
 *
 * GNU SASL Library is free software; you can redistribute it and/or
 * modify it under the terms of the GNU Lesser General Public License
 * as published by the Free Software Foundation; either version 2.1 of
 * the License, or (at your option) any later version.
 *
 * GNU SASL Library is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 * Lesser General Public License for more details.
 *
 * You should have received a copy of the GNU Lesser General Public
 * License License along with GNU SASL Library; if not, write to the
 * Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor,
 * Boston, MA 02110-1301, USA.
 *
 */

#include "internal.h"

#if USE_DIGEST_MD5
# include "qop.h"
#endif

int
gsasl_client_listmech (Gsasl * ctx, char *out, size_t * outlen)
{
  char *tmp;
  int rc;

  rc = gsasl_client_mechlist (ctx, &tmp);

  if (rc == GSASL_OK)
    {
      size_t tmplen = strlen (tmp);

      if (tmplen >= *outlen)
        {
          free (tmp);
          return GSASL_TOO_SMALL_BUFFER;
        }

      if (out)
        strcpy (out, tmp);
      *outlen = tmplen + 1;
      free (tmp);
    }

  return rc;
}

int
gsasl_server_listmech (Gsasl * ctx, char *out, size_t * outlen)
{
  char *tmp;
  int rc;

  rc = gsasl_server_mechlist (ctx, &tmp);

  if (rc == GSASL_OK)
    {
      size_t tmplen = strlen (tmp);

      if (tmplen >= *outlen)
        {
          free (tmp);
          return GSASL_TOO_SMALL_BUFFER;
        }

      if (out)
        strcpy (out, tmp);
      *outlen = tmplen + 1;
      free (tmp);
    }

  return rc;
}

static int
_gsasl_step (Gsasl_session * sctx,
             const char *input, size_t input_len,
             char *output, size_t * output_len)
{
  char *tmp;
  size_t tmplen;
  int rc;

  rc = gsasl_step (sctx, input, input_len, &tmp, &tmplen);

  if (rc == GSASL_OK || rc == GSASL_NEEDS_MORE)
    {
      if (tmplen >= *output_len)
        {
          free (tmp);
          /* XXX We lose the step token here, don't we? */
          return GSASL_TOO_SMALL_BUFFER;
        }

      if (output)
        memcpy (output, tmp, tmplen);
      *output_len = tmplen;
      free (tmp);
    }

  return rc;
}

int
gsasl_client_step (Gsasl_session * sctx,
                   const char *input,
                   size_t input_len, char *output, size_t * output_len)
{
  return _gsasl_step (sctx, input, input_len, output, output_len);
}

int
gsasl_server_step (Gsasl_session * sctx,
                   const char *input,
                   size_t input_len, char *output, size_t * output_len)
{
  return _gsasl_step (sctx, input, input_len, output, output_len);
}

static int
_gsasl_step64 (Gsasl_session * sctx,
               const char *b64input, char *b64output, size_t b64output_len)
{
  char *tmp;
  int rc;

  rc = gsasl_step64 (sctx, b64input, &tmp);

  if (rc == GSASL_OK || rc == GSASL_NEEDS_MORE)
    {
      if (b64output_len <= strlen (tmp))
        {
          free (tmp);
          /* XXX We lose the step token here, don't we? */
          return GSASL_TOO_SMALL_BUFFER;
        }

      if (b64output)
        strcpy (b64output, tmp);
      free (tmp);
    }

  return rc;
}

int
gsasl_client_step_base64 (Gsasl_session * sctx,
                          const char *b64input,
                          char *b64output, size_t b64output_len)
{
  return _gsasl_step64 (sctx, b64input, b64output, b64output_len);
}

int
gsasl_server_step_base64 (Gsasl_session * sctx,
                          const char *b64input,
                          char *b64output, size_t b64output_len)
{
  return _gsasl_step64 (sctx, b64input, b64output, b64output_len);
}

void
gsasl_client_finish (Gsasl_session * sctx)
{
  gsasl_finish (sctx);
}

void
gsasl_server_finish (Gsasl_session * sctx)
{
  gsasl_finish (sctx);
}

Gsasl *
gsasl_client_ctx_get (Gsasl_session * sctx)
{
  return sctx->ctx;
}

void
gsasl_client_application_data_set (Gsasl_session * sctx,
                                   void *application_data)
{
  gsasl_appinfo_set (sctx, application_data);
}

void *
gsasl_client_application_data_get (Gsasl_session * sctx)
{
  return gsasl_appinfo_get (sctx);
}

Gsasl *
gsasl_server_ctx_get (Gsasl_session * sctx)
{
  return sctx->ctx;
}

void
gsasl_server_application_data_set (Gsasl_session * sctx,
                                   void *application_data)
{
  gsasl_appinfo_set (sctx, application_data);
}

void *
gsasl_server_application_data_get (Gsasl_session * sctx)
{
  return gsasl_appinfo_get (sctx);
}

int
gsasl_randomize (int strong, char *data, size_t datalen)
{
  if (strong)
    return gsasl_random (data, datalen);
  return gsasl_nonce (data, datalen);
}

Gsasl *
gsasl_ctx_get (Gsasl_session * sctx)
{
  return sctx->ctx;
}

int
gsasl_encode_inline (Gsasl_session * sctx,
                     const char *input, size_t input_len,
                     char *output, size_t * output_len)
{
  char *tmp;
  size_t tmplen;
  int res;

  res = gsasl_encode (sctx, input, input_len, &tmp, &tmplen);
  if (res == GSASL_OK)
    {
      if (*output_len < tmplen)
        return GSASL_TOO_SMALL_BUFFER;
      *output_len = tmplen;
      memcpy (output, tmp, tmplen);
      free (output);
    }

  return res;
}

int
gsasl_decode_inline (Gsasl_session * sctx,
                     const char *input, size_t input_len,
                     char *output, size_t * output_len)
{
  char *tmp;
  size_t tmplen;
  int res;

  res = gsasl_decode (sctx, input, input_len, &tmp, &tmplen);
  if (res == GSASL_OK)
    {
      if (*output_len < tmplen)
        return GSASL_TOO_SMALL_BUFFER;
      *output_len = tmplen;
      memcpy (output, tmp, tmplen);
      free (output);
    }

  return res;
}

void
gsasl_application_data_set (Gsasl * ctx, void *appdata)
{
  ctx->application_hook = appdata;
}

void *
gsasl_application_data_get (Gsasl * ctx)
{
  return ctx->application_hook;
}

void
gsasl_appinfo_set (Gsasl_session * sctx, void *appdata)
{
  sctx->application_data = appdata;
}

void *
gsasl_appinfo_get (Gsasl_session * sctx)
{
  return sctx->application_data;
}

const char *
gsasl_server_suggest_mechanism (Gsasl * ctx, const char *mechlist)
{
  return NULL;                  /* This function is just silly. */
}

void
gsasl_client_callback_authentication_id_set (Gsasl * ctx,
                                             Gsasl_client_callback_authentication_id
                                             cb)
{
  ctx->cbc_authentication_id = cb;
}

Gsasl_client_callback_authentication_id
gsasl_client_callback_authentication_id_get (Gsasl * ctx)
{
  return ctx ? ctx->cbc_authentication_id : NULL;
}

void
gsasl_client_callback_authorization_id_set (Gsasl * ctx,
                                            Gsasl_client_callback_authorization_id
                                            cb)
{
  ctx->cbc_authorization_id = cb;
}

Gsasl_client_callback_authorization_id
gsasl_client_callback_authorization_id_get (Gsasl * ctx)
{
  return ctx ? ctx->cbc_authorization_id : NULL;
}

void
gsasl_client_callback_password_set (Gsasl * ctx,
                                    Gsasl_client_callback_password cb)
{
  ctx->cbc_password = cb;
}


Gsasl_client_callback_password
gsasl_client_callback_password_get (Gsasl * ctx)
{
  return ctx ? ctx->cbc_password : NULL;
}

void
gsasl_client_callback_passcode_set (Gsasl * ctx,
                                    Gsasl_client_callback_passcode cb)
{
  ctx->cbc_passcode = cb;
}


Gsasl_client_callback_passcode
gsasl_client_callback_passcode_get (Gsasl * ctx)
{
  return ctx ? ctx->cbc_passcode : NULL;
}

void
gsasl_client_callback_pin_set (Gsasl * ctx, Gsasl_client_callback_pin cb)
{
  ctx->cbc_pin = cb;
}


Gsasl_client_callback_pin
gsasl_client_callback_pin_get (Gsasl * ctx)
{
  return ctx ? ctx->cbc_pin : NULL;
}

void
gsasl_client_callback_service_set (Gsasl * ctx,
                                   Gsasl_client_callback_service cb)
{
  ctx->cbc_service = cb;
}

Gsasl_client_callback_service
gsasl_client_callback_service_get (Gsasl * ctx)
{
  return ctx ? ctx->cbc_service : NULL;
}

void
gsasl_client_callback_anonymous_set (Gsasl * ctx,
                                     Gsasl_client_callback_anonymous cb)
{
  ctx->cbc_anonymous = cb;
}

Gsasl_client_callback_anonymous
gsasl_client_callback_anonymous_get (Gsasl * ctx)
{
  return ctx ? ctx->cbc_anonymous : NULL;
}

void
gsasl_client_callback_qop_set (Gsasl * ctx, Gsasl_client_callback_qop cb)
{
  ctx->cbc_qop = cb;
}

Gsasl_client_callback_qop
gsasl_client_callback_qop_get (Gsasl * ctx)
{
  return ctx ? ctx->cbc_qop : NULL;
}

void
gsasl_client_callback_maxbuf_set (Gsasl * ctx,
                                  Gsasl_client_callback_maxbuf cb)
{
  ctx->cbc_maxbuf = cb;
}

Gsasl_client_callback_maxbuf
gsasl_client_callback_maxbuf_get (Gsasl * ctx)
{
  return ctx ? ctx->cbc_maxbuf : NULL;
}

void
gsasl_client_callback_realm_set (Gsasl * ctx, Gsasl_client_callback_realm cb)
{
  ctx->cbc_realm = cb;
}

Gsasl_client_callback_realm
gsasl_client_callback_realm_get (Gsasl * ctx)
{
  return ctx ? ctx->cbc_realm : NULL;
}

void
gsasl_server_callback_validate_set (Gsasl * ctx,
                                    Gsasl_server_callback_validate cb)
{
  ctx->cbs_validate = cb;
}

Gsasl_server_callback_validate
gsasl_server_callback_validate_get (Gsasl * ctx)
{
  return ctx ? ctx->cbs_validate : NULL;
}

void
gsasl_server_callback_retrieve_set (Gsasl * ctx,
                                    Gsasl_server_callback_retrieve cb)
{
  ctx->cbs_retrieve = cb;
}

Gsasl_server_callback_retrieve
gsasl_server_callback_retrieve_get (Gsasl * ctx)
{
  return ctx ? ctx->cbs_retrieve : NULL;
}

void
gsasl_server_callback_cram_md5_set (Gsasl * ctx,
                                    Gsasl_server_callback_cram_md5 cb)
{
  ctx->cbs_cram_md5 = cb;
}

Gsasl_server_callback_cram_md5
gsasl_server_callback_cram_md5_get (Gsasl * ctx)
{
  return ctx ? ctx->cbs_cram_md5 : NULL;
}

void
gsasl_server_callback_digest_md5_set (Gsasl * ctx,
                                      Gsasl_server_callback_digest_md5 cb)
{
  ctx->cbs_digest_md5 = cb;
}

Gsasl_server_callback_digest_md5
gsasl_server_callback_digest_md5_get (Gsasl * ctx)
{
  return ctx->cbs_digest_md5;
}

void
gsasl_server_callback_external_set (Gsasl * ctx,
                                    Gsasl_server_callback_external cb)
{
  ctx->cbs_external = cb;
}

Gsasl_server_callback_external
gsasl_server_callback_external_get (Gsasl * ctx)
{
  return ctx ? ctx->cbs_external : NULL;
}

void
gsasl_server_callback_anonymous_set (Gsasl * ctx,
                                     Gsasl_server_callback_anonymous cb)
{
  ctx->cbs_anonymous = cb;
}

Gsasl_server_callback_anonymous
gsasl_server_callback_anonymous_get (Gsasl * ctx)
{
  return ctx ? ctx->cbs_anonymous : NULL;
}

void
gsasl_server_callback_realm_set (Gsasl * ctx, Gsasl_server_callback_realm cb)
{
  ctx->cbs_realm = cb;
}

Gsasl_server_callback_realm
gsasl_server_callback_realm_get (Gsasl * ctx)
{
  return ctx ? ctx->cbs_realm : NULL;
}

void
gsasl_server_callback_qop_set (Gsasl * ctx, Gsasl_server_callback_qop cb)
{
  ctx->cbs_qop = cb;
}

Gsasl_server_callback_qop
gsasl_server_callback_qop_get (Gsasl * ctx)
{
  return ctx ? ctx->cbs_qop : NULL;
}

void
gsasl_server_callback_maxbuf_set (Gsasl * ctx,
                                  Gsasl_server_callback_maxbuf cb)
{
  ctx->cbs_maxbuf = cb;
}

Gsasl_server_callback_maxbuf
gsasl_server_callback_maxbuf_get (Gsasl * ctx)
{
  return ctx ? ctx->cbs_maxbuf : NULL;
}

void
gsasl_server_callback_cipher_set (Gsasl * ctx,
                                  Gsasl_server_callback_cipher cb)
{
  ctx->cbs_cipher = cb;
}

Gsasl_server_callback_cipher
gsasl_server_callback_cipher_get (Gsasl * ctx)
{
  return ctx ? ctx->cbs_cipher : NULL;
}

void
gsasl_server_callback_securid_set (Gsasl * ctx,
                                   Gsasl_server_callback_securid cb)
{
  ctx->cbs_securid = cb;
}

Gsasl_server_callback_securid
gsasl_server_callback_securid_get (Gsasl * ctx)
{
  return ctx ? ctx->cbs_securid : NULL;
}

void
gsasl_server_callback_gssapi_set (Gsasl * ctx,
                                  Gsasl_server_callback_gssapi cb)
{
  ctx->cbs_gssapi = cb;
}

Gsasl_server_callback_gssapi
gsasl_server_callback_gssapi_get (Gsasl * ctx)
{
  return ctx ? ctx->cbs_gssapi : NULL;
}

void
gsasl_server_callback_service_set (Gsasl * ctx,
                                   Gsasl_server_callback_service cb)
{
  ctx->cbs_service = cb;
}

Gsasl_server_callback_service
gsasl_server_callback_service_get (Gsasl * ctx)
{
  return ctx ? ctx->cbs_service : NULL;
}

#if HAVE_LIBIDN
# include <stringprep.h>
#endif

char *
gsasl_stringprep_nfkc (const char *in, ssize_t len)
{
  char *out = NULL;

#if HAVE_LIBIDN
  out = stringprep_utf8_nfkc_normalize (in, len);
#endif

  return out;
}

char *
gsasl_stringprep_saslprep (const char *in, int *stringprep_rc)
{
  char *out = NULL;
#if HAVE_LIBIDN
  int rc;

  rc = stringprep_profile (in, &out, "SASLprep", 0);
  if (stringprep_rc)
    *stringprep_rc = rc;
  if (rc != STRINGPREP_OK)
    out = NULL;
#endif

  return out;
}

char *
gsasl_stringprep_trace (const char *in, int *stringprep_rc)
{
  char *out = NULL;
#if HAVE_LIBIDN
  int rc;

  rc = stringprep_profile (in, &out, "trace", 0);
  if (stringprep_rc)
    *stringprep_rc = rc;
  if (rc != STRINGPREP_OK)
    out = NULL;
#endif

  return out;
}

int
gsasl_md5pwd_get_password (const char *filename,
                           const char *username, char *key, size_t * keylen)
{
  char *tmp;
  size_t tmplen;
  int res;
  FILE *fh;

  fh = fopen (filename, "r");
  if (fh == NULL)
    return GSASL_FOPEN_ERROR;
  fclose (fh);

  res = gsasl_simple_getpass (filename, username, &tmp);
  if (res != GSASL_OK)
    return res;

  tmplen = strlen (tmp);

  if (*keylen < tmplen + 1)
    {
      free (tmp);
      return GSASL_TOO_SMALL_BUFFER;
    }

  *keylen = tmplen;

  if (key)
    memcpy (key, tmp, tmplen);

  free (tmp);

  return GSASL_OK;
}

#include <minmax.h>

int
gsasl_base64_encode (char const *src,
                     size_t srclength, char *target, size_t targsize)
{
  int rc;
  char *out;
  size_t outlen;
  int copied;

  rc = gsasl_base64_to (src, srclength, &out, &outlen);
  if (rc)
    return -1;

  copied = MIN (outlen, targsize);
  memcpy (target, out, copied);
  free (out);

  return copied;
}

int
gsasl_base64_decode (char const *src, char *target, size_t targsize)
{
  int rc;
  char *out;
  size_t outlen;
  int copied;

  rc = gsasl_base64_from (src, strlen (src), &out, &outlen);
  if (rc)
    return -1;

  copied = MIN (outlen, targsize);
  memcpy (target, out, copied);
  free (out);

  return copied;
}

static const char *
pmap (Gsasl_session * sctx, Gsasl_property prop, char *buf, size_t buflen)
{
  int res;

  buf[0] = '\0';

  /* Translate obsolete callbacks to modern properties. */

  switch (prop)
    {
    case GSASL_SERVICE:
      {
        Gsasl_client_callback_service cb_service
          = gsasl_client_callback_service_get (sctx->ctx);
        if (!cb_service)
          break;
        res = cb_service (sctx, buf, &buflen, NULL, 0, NULL, 0);
        if (res != GSASL_OK)
          break;
        buf[buflen] = '\0';
        gsasl_property_set (sctx, prop, buf);
        break;
      }

    case GSASL_HOSTNAME:
      {
        Gsasl_client_callback_service cb_service
          = gsasl_client_callback_service_get (sctx->ctx);
        if (!cb_service)
          break;
        res = cb_service (sctx, NULL, 0, buf, &buflen, NULL, 0);
        if (res != GSASL_OK)
          break;
        buf[buflen] = '\0';
        gsasl_property_set (sctx, prop, buf);
        break;
      }

    case GSASL_ANONYMOUS_TOKEN:
      {
        Gsasl_client_callback_anonymous cb_anonymous
          = gsasl_client_callback_anonymous_get (sctx->ctx);
        if (!cb_anonymous)
          break;
        res = cb_anonymous (sctx, buf, &buflen);
        if (res != GSASL_OK)
          break;
        buf[buflen] = '\0';
        gsasl_property_set (sctx, prop, buf);
        break;
      }

    case GSASL_AUTHID:
      {
        Gsasl_client_callback_authentication_id cb_authentication_id
          = gsasl_client_callback_authentication_id_get (sctx->ctx);
        if (!cb_authentication_id)
          break;
        res = cb_authentication_id (sctx, buf, &buflen);
        if (res != GSASL_OK)
          break;
        buf[buflen] = '\0';
        gsasl_property_set (sctx, prop, buf);
        break;
      }

    case GSASL_AUTHZID:
      {
        Gsasl_client_callback_authorization_id cb_authorization_id
          = gsasl_client_callback_authorization_id_get (sctx->ctx);
        if (!cb_authorization_id)
          break;
        res = cb_authorization_id (sctx, buf, &buflen);
        if (res != GSASL_OK)
          break;
        buf[buflen] = '\0';
        gsasl_property_set (sctx, prop, buf);
        break;
      }

    case GSASL_PASSWORD:
      {
        Gsasl_client_callback_password cb_password
          = gsasl_client_callback_password_get (sctx->ctx);
        if (!cb_password)
          break;
        res = cb_password (sctx, buf, &buflen);
        if (res != GSASL_OK)
          break;
        buf[buflen] = '\0';
        gsasl_property_set (sctx, prop, buf);
        break;
      }

    case GSASL_PASSCODE:
      {
        Gsasl_client_callback_passcode cb_passcode
          = gsasl_client_callback_passcode_get (sctx->ctx);
        if (!cb_passcode)
          break;
        res = cb_passcode (sctx, buf, &buflen);
        if (res != GSASL_OK)
          break;
        buf[buflen] = '\0';
        gsasl_property_set (sctx, prop, buf);
        break;
      }

    case GSASL_PIN:
      {
        Gsasl_client_callback_pin cb_pin
          = gsasl_client_callback_pin_get (sctx->ctx);
        if (!cb_pin)
          break;
        res = cb_pin (sctx, sctx->suggestedpin, buf, &buflen);
        if (res != GSASL_OK)
          break;
        buf[buflen] = '\0';
        gsasl_property_set (sctx, prop, buf);
        break;
      }

    case GSASL_REALM:
      {
        Gsasl_client_callback_realm cb_realm
          = gsasl_client_callback_realm_get (sctx->ctx);
        if (!cb_realm)
          break;
        res = cb_realm (sctx, buf, &buflen);
        if (res != GSASL_OK)
          break;
        buf[buflen] = '\0';
        gsasl_property_set (sctx, prop, buf);
        break;
      }

#if USE_DIGEST_MD5
    case GSASL_QOP:
      {
        Gsasl_client_callback_qop cb_qop
          = gsasl_client_callback_qop_get (sctx->ctx);
        int serverqops;
        Gsasl_qop qop;
        if (!cb_qop)
          break;
        serverqops = digest_md5_qopstr2qops (sctx->qops);
        if (serverqops == -1)
          return NULL;
        qop = cb_qop (sctx, serverqops);
        if (qop & 0x07)
          gsasl_property_set (sctx, prop, digest_md5_qops2qopstr (qop));
        break;
      }
      break;
#endif

    default:
      break;
    }

  return gsasl_property_fast (sctx, prop);
}

const char *
_gsasl_obsolete_property_map (Gsasl_session * sctx, Gsasl_property prop)
{
  const char *ret;
  char *buf;

  buf = malloc (BUFSIZ);
  if (!buf)
    return NULL;

  ret = pmap (sctx, prop, buf, BUFSIZ - 1);

  free (buf);

  return ret;
}

int
_gsasl_obsolete_callback (Gsasl * ctx, Gsasl_session * sctx,
                          Gsasl_property prop)
{
  int res;

  /* Call obsolete callbacks. */

  switch (prop)
    {
    case GSASL_VALIDATE_ANONYMOUS:
      {
        Gsasl_server_callback_anonymous cb_anonymous;
        if (!sctx->anonymous_token)
          break;
        cb_anonymous = gsasl_server_callback_anonymous_get (sctx->ctx);
        if (!cb_anonymous)
          break;
        res = cb_anonymous (sctx, sctx->anonymous_token);
        return res;
        break;
      }

    case GSASL_VALIDATE_EXTERNAL:
      {
        Gsasl_server_callback_external cb_external
          = gsasl_server_callback_external_get (sctx->ctx);
        if (!cb_external)
          break;
        res = cb_external (sctx);
        return res;
        break;
      }

    case GSASL_VALIDATE_SECURID:
      {
        Gsasl_server_callback_securid cb_securid
          = gsasl_server_callback_securid_get (sctx->ctx);
#define MAX_SECURID 32 /* See RFC 2808. */
        char buf[MAX_SECURID + 1];
        size_t buflen = MAX_SECURID;
        if (!cb_securid)
          break;
        res = cb_securid (sctx, sctx->authid, sctx->authzid, sctx->passcode,
                          sctx->pin, buf, &buflen);
        if (buflen > 0 && buflen < MAX_SECURID)
          {
            buf[buflen] = '\0';
            gsasl_property_set (sctx, GSASL_SUGGESTED_PIN, buf);
          }
        return res;
        break;
      }

    case GSASL_VALIDATE_GSSAPI:
      {
        Gsasl_server_callback_gssapi cb_gssapi
          = gsasl_server_callback_gssapi_get (sctx->ctx);
        if (!cb_gssapi)
          break;
        res = cb_gssapi (sctx, sctx->gssapi_display_name, sctx->authzid);
        return res;
        break;
      }

    case GSASL_VALIDATE_SIMPLE:
      {
        Gsasl_server_callback_validate cb_validate
          = gsasl_server_callback_validate_get (sctx->ctx);
        if (!cb_validate)
          break;
        res = cb_validate (sctx, sctx->authzid, sctx->authid, sctx->password);
        return res;
        break;
      }

    case GSASL_PASSWORD:
      {
        Gsasl_server_callback_retrieve cb_retrieve
          = gsasl_server_callback_retrieve_get (sctx->ctx);
        char *buf;
        size_t buflen = BUFSIZ - 1;
        if (!cb_retrieve)
          break;
        buf = malloc (BUFSIZ);
        if (!buf)
          return GSASL_MALLOC_ERROR;
        res = cb_retrieve (sctx, sctx->authid, sctx->authzid,
                           sctx->hostname, buf, &buflen);
        if (res == GSASL_OK)
          gsasl_property_set_raw (sctx, GSASL_PASSWORD, buf, buflen);
        /* FIXME else if (res == GSASL_TOO_SMALL_BUFFER)... */
        free (buf);
        return res;
        break;
      }

#if USE_DIGEST_MD5
    case GSASL_QOPS:
      {
        Gsasl_server_callback_qop cb_qop
          = gsasl_server_callback_qop_get (sctx->ctx);
        Gsasl_qop qops;
        if (!cb_qop)
          break;
        qops = cb_qop (sctx);
        if (qops & 0x07)
          gsasl_property_set (sctx, GSASL_QOPS, digest_md5_qops2qopstr(qops));
        return GSASL_OK;
        break;
      }
#endif

    default:
      break;
    }

  return GSASL_NO_CALLBACK;
}