Kerberos 5 klist.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15667 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Love Hörnquist Åstrand
178
appl/ftp/ftpd/klist.c
Normal file
178
appl/ftp/ftpd/klist.c
Normal file
@@ -0,0 +1,178 @@
|
||||
/*
|
||||
* Copyright (c) 1995 - 2005 Kungliga Tekniska H<>gskolan
|
||||
* (Royal Institute of Technology, Stockholm, Sweden).
|
||||
* All rights reserved.
|
||||
*
|
||||
* Redistribution and use in source and binary forms, with or without
|
||||
* modification, are permitted provided that the following conditions
|
||||
* are met:
|
||||
*
|
||||
* 1. Redistributions of source code must retain the above copyright
|
||||
* notice, this list of conditions and the following disclaimer.
|
||||
*
|
||||
* 2. Redistributions in binary form must reproduce the above copyright
|
||||
* notice, this list of conditions and the following disclaimer in the
|
||||
* documentation and/or other materials provided with the distribution.
|
||||
*
|
||||
* 3. Neither the name of the Institute nor the names of its contributors
|
||||
* may be used to endorse or promote products derived from this software
|
||||
* without specific prior written permission.
|
||||
*
|
||||
* THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
|
||||
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
||||
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
||||
* ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
|
||||
* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
||||
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
|
||||
* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
||||
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
|
||||
* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
|
||||
* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
|
||||
* SUCH DAMAGE.
|
||||
*/
|
||||
|
||||
#include "ftpd_locl.h"
|
||||
|
||||
#ifdef KRB5
|
||||
|
||||
static int
|
||||
print_cred(krb5_context context, krb5_creds *cred)
|
||||
{
|
||||
char t1[128], t2[128], *str;
|
||||
krb5_error_code ret;
|
||||
krb5_timestamp sec;
|
||||
|
||||
krb5_timeofday (context, &sec);
|
||||
|
||||
if(cred->times.starttime)
|
||||
krb5_format_time(context, cred->times.starttime, t1, sizeof(t1), 1);
|
||||
else
|
||||
krb5_format_time(context, cred->times.authtime, t1, sizeof(t1), 1);
|
||||
|
||||
if(cred->times.endtime > sec)
|
||||
krb5_format_time(context, cred->times.endtime, t2, sizeof(t2), 1);
|
||||
else
|
||||
strlcpy(t2, ">>>Expired<<<", sizeof(t2));
|
||||
|
||||
ret = krb5_unparse_name (context, cred->server, &str);
|
||||
if (ret) {
|
||||
lreply(500, "krb5_unparse_name: %d", ret);
|
||||
return 1;
|
||||
}
|
||||
|
||||
lreply(200, "%-20s %-20s %s", t1, t2, str);
|
||||
free(str);
|
||||
return 0;
|
||||
}
|
||||
|
||||
static int
|
||||
print_tickets (krb5_context context,
|
||||
krb5_ccache ccache,
|
||||
krb5_principal principal)
|
||||
{
|
||||
krb5_error_code ret;
|
||||
krb5_cc_cursor cursor;
|
||||
krb5_creds creds;
|
||||
char *str;
|
||||
|
||||
ret = krb5_unparse_name (context, principal, &str);
|
||||
if (ret) {
|
||||
lreply(500, "krb5_unparse_name: %d", ret);
|
||||
return 500;
|
||||
}
|
||||
|
||||
lreply(200, "%17s: %s:%s",
|
||||
"Credentials cache",
|
||||
krb5_cc_get_type(context, ccache),
|
||||
krb5_cc_get_name(context, ccache));
|
||||
lreply(200, "%17s: %s", "Principal", str);
|
||||
free (str);
|
||||
|
||||
ret = krb5_cc_start_seq_get (context, ccache, &cursor);
|
||||
if (ret) {
|
||||
lreply(500, "krb5_cc_start_seq_get: %d", ret);
|
||||
return 500;
|
||||
}
|
||||
|
||||
lreply(200, " Issued Expires Principal");
|
||||
|
||||
while ((ret = krb5_cc_next_cred (context,
|
||||
ccache,
|
||||
&cursor,
|
||||
&creds)) == 0) {
|
||||
if (print_cred(context, &creds))
|
||||
return 500;
|
||||
krb5_free_creds_contents (context, &creds);
|
||||
}
|
||||
if (ret != KRB5_CC_END) {
|
||||
lreply(500, "krb5_cc_get_next: %d", ret);
|
||||
return 500;
|
||||
}
|
||||
ret = krb5_cc_end_seq_get (context, ccache, &cursor);
|
||||
if (ret) {
|
||||
lreply(500, "krb5_cc_end_seq_get: %d", ret);
|
||||
return 500;
|
||||
}
|
||||
|
||||
return 200;
|
||||
}
|
||||
|
||||
static int
|
||||
klist5(void)
|
||||
{
|
||||
krb5_error_code ret;
|
||||
krb5_context context;
|
||||
krb5_ccache ccache;
|
||||
krb5_principal principal;
|
||||
int exit_status = 200;
|
||||
|
||||
ret = krb5_init_context (&context);
|
||||
if (ret) {
|
||||
lreply(500, "krb5_init_context failed: %d", ret);
|
||||
return 500;
|
||||
}
|
||||
|
||||
if (k5ccname)
|
||||
ret = krb5_cc_resolve(context, k5ccname, &ccache);
|
||||
else
|
||||
ret = krb5_cc_default (context, &ccache);
|
||||
if (ret) {
|
||||
lreply(500, "krb5_cc_default: %d", ret);
|
||||
return 500;
|
||||
}
|
||||
|
||||
ret = krb5_cc_get_principal (context, ccache, &principal);
|
||||
if (ret) {
|
||||
if(ret == ENOENT)
|
||||
lreply(500, "No ticket file: %s",
|
||||
krb5_cc_get_name(context, ccache));
|
||||
else
|
||||
lreply(500, "krb5_cc_get_principal: %d", ret);
|
||||
|
||||
return 500;
|
||||
}
|
||||
exit_status = print_tickets (context, ccache, principal);
|
||||
|
||||
ret = krb5_cc_close (context, ccache);
|
||||
if (ret) {
|
||||
lreply(500, "krb5_cc_close: %d", ret);
|
||||
exit_status = 500;
|
||||
}
|
||||
|
||||
krb5_free_principal (context, principal);
|
||||
krb5_free_context (context);
|
||||
return exit_status;
|
||||
}
|
||||
#endif
|
||||
|
||||
void
|
||||
klist(void)
|
||||
{
|
||||
#if KRB5
|
||||
int res = klist5();
|
||||
reply(res, " ");
|
||||
#else
|
||||
reply(500, "Command not implemented.");
|
||||
#endif
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user