/* * Copyright (c) 2008 Kungliga Tekniska Högskolan * (Royal Institute of Technology, Stockholm, Sweden). * All rights reserved. * * Redistribution and use in source and binary forms, with or without * modification, are permitted provided that the following conditions * are met: * * 1. Redistributions of source code must retain the above copyright * notice, this list of conditions and the following disclaimer. * * 2. Redistributions in binary form must reproduce the above copyright * notice, this list of conditions and the following disclaimer in the * documentation and/or other materials provided with the distribution. * * 3. Neither the name of the Institute nor the names of its contributors * may be used to endorse or promote products derived from this software * without specific prior written permission. * * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF * SUCH DAMAGE. */ #include "kuser_locl.h" #ifdef HAVE_READLINE char *readline(char *prompt); #endif /* * */ static int version_flag = 0; static int help_flag = 0; static char *cache; static char *principal; static char *type; static int interactive_flag; static struct getargs args[] = { { "type", 't', arg_string, &type, NP_("type of credential cache", ""), "type" }, { "cache", 'c', arg_string, &cache, NP_("name of credential cache", ""), "cache" }, { "principal", 'p', arg_string, &principal, NP_("name of principal", ""), "principal" }, { "interactive", 'i', arg_flag, &interactive_flag, NP_("interactive selection", ""), NULL }, { "version", 0, arg_flag, &version_flag, NP_("print version", ""), NULL }, { "help", 0, arg_flag, &help_flag, NULL, NULL} }; static void usage (int ret) __attribute__((noreturn)); static void usage (int ret) { arg_printusage (args, sizeof(args)/sizeof(*args), NULL, ""); exit (ret); } int main (int argc, char **argv) { krb5_context context; krb5_error_code ret; krb5_ccache id = NULL; int optidx = 0; setprogname (argv[0]); setlocale (LC_ALL, ""); bindtextdomain ("heimdal_kuser", HEIMDAL_LOCALEDIR); textdomain("heimdal_kuser"); ret = krb5_init_context (&context); if (ret == KRB5_CONFIG_BADFORMAT) errx (1, "krb5_init_context failed to parse configuration file"); else if (ret) errx(1, "krb5_init_context failed: %d", ret); if(getarg(args, sizeof(args) / sizeof(args[0]), argc, argv, &optidx)) usage(1); if (help_flag) usage (0); if(version_flag){ print_version(NULL); exit(0); } argc -= optidx; argv += optidx; if (argc != 0) usage (1); if (cache && principal) krb5_errx(context, 1, N_("Both --cache and --principal given, choose one", "")); if (interactive_flag) { krb5_cc_cache_cursor cursor; krb5_ccache *ids; size_t i, len = 0; char *name; rtbl_t ct; ct = rtbl_create(); rtbl_add_column (ct, "", 0); rtbl_add_column (ct, "Principal", 0); rtbl_set_column_prefix(ct, "Principal", " "); ret = krb5_cc_cache_get_first (context, NULL, &cursor); if (ret) krb5_err (context, 1, ret, "krb5_cc_cache_get_first"); while (krb5_cc_cache_next (context, cursor, &id) == 0) { krb5_principal p; char num[10]; ret = krb5_cc_get_principal(context, id, &p); if (ret) continue; ret = krb5_unparse_name(context, p, &name); krb5_free_principal(context, p); snprintf(num, sizeof(num), "%d", (int)(len + 1)); rtbl_add_column_entry(ct, "", num); rtbl_add_column_entry(ct, "Principal", name); free(name); ids = erealloc(ids, (len + 1) * sizeof(ids[0])); ids[len] = id; len++; } krb5_cc_cache_end_seq_get(context, cursor); rtbl_format(ct, stdout); rtbl_destroy(ct); name = readline("Select number: "); if (name) { i = atoi(name); if (i == 0) krb5_errx(context, 1, "Cache number '%s' is invalid", name); if (i > len) krb5_errx(context, 1, "Cache number '%s' is too large", name); id = ids[i - 1]; ids[i - 1] = NULL; } else krb5_errx(context, 1, "No cache selected"); for (i = 0; i < len; i++) if (ids[i]) krb5_cc_close(context, ids[i]); } else if (principal) { krb5_principal p; ret = krb5_parse_name(context, principal, &p); if (ret) krb5_err (context, 1, ret, "krb5_parse_name: %s", principal); ret = krb5_cc_cache_match(context, p, &id); if (ret) krb5_err (context, 1, ret, N_("Did not find principal: %s", ""), principal); krb5_free_principal(context, p); } else if (cache) { const krb5_cc_ops *ops; char *str; ops = krb5_cc_get_prefix_ops(context, type); if (ops == NULL) krb5_err (context, 1, 0, "krb5_cc_get_prefix_ops"); asprintf(&str, "%s:%s", ops->prefix, cache); if (str == NULL) krb5_errx(context, 1, N_("out of memory", "")); ret = krb5_cc_resolve(context, str, &id); if (ret) krb5_err (context, 1, ret, "krb5_cc_resolve: %s", str); free(str); } else usage(1); ret = krb5_cc_switch(context, id); if (ret) krb5_err (context, 1, ret, "krb5_cc_switch"); krb5_cc_close(context, id); return 0; }