type keytab git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@10816 ec53bebd-3082-4978-b11e-865c3cabbd6b
		
			
				
	
	
		
			214 lines
		
	
	
		
			5.9 KiB
		
	
	
	
		
			C
		
	
	
	
	
	
			
		
		
	
	
			214 lines
		
	
	
		
			5.9 KiB
		
	
	
	
		
			C
		
	
	
	
	
	
/*
 | 
						|
 * Copyright (c) 1997 - 2002 Kungliga Tekniska Högskolan
 | 
						|
 * (Royal Institute of Technology, Stockholm, Sweden). 
 | 
						|
 * All rights reserved. 
 | 
						|
 *
 | 
						|
 * Redistribution and use in source and binary forms, with or without 
 | 
						|
 * modification, are permitted provided that the following conditions 
 | 
						|
 * are met: 
 | 
						|
 *
 | 
						|
 * 1. Redistributions of source code must retain the above copyright 
 | 
						|
 *    notice, this list of conditions and the following disclaimer. 
 | 
						|
 *
 | 
						|
 * 2. Redistributions in binary form must reproduce the above copyright 
 | 
						|
 *    notice, this list of conditions and the following disclaimer in the 
 | 
						|
 *    documentation and/or other materials provided with the distribution. 
 | 
						|
 *
 | 
						|
 * 3. Neither the name of the Institute nor the names of its contributors 
 | 
						|
 *    may be used to endorse or promote products derived from this software 
 | 
						|
 *    without specific prior written permission. 
 | 
						|
 *
 | 
						|
 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND 
 | 
						|
 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 
 | 
						|
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 
 | 
						|
 * ARE DISCLAIMED.  IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE 
 | 
						|
 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 
 | 
						|
 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 
 | 
						|
 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 
 | 
						|
 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 
 | 
						|
 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 
 | 
						|
 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 
 | 
						|
 * SUCH DAMAGE. 
 | 
						|
 */
 | 
						|
 | 
						|
#include "ktutil_locl.h"
 | 
						|
 | 
						|
RCSID("$Id$");
 | 
						|
 | 
						|
static int help_flag;
 | 
						|
static int list_keys;
 | 
						|
static int list_timestamp;
 | 
						|
 | 
						|
static struct getargs args[] = {
 | 
						|
    { "help",      'h', arg_flag, &help_flag },
 | 
						|
    { "keys",	   0,   arg_flag, &list_keys, "show key value" },
 | 
						|
    { "timestamp", 0,   arg_flag, &list_timestamp, "show timestamp" },
 | 
						|
};
 | 
						|
 | 
						|
static int num_args = sizeof(args) / sizeof(args[0]);
 | 
						|
 | 
						|
struct key_info {
 | 
						|
    char *version;
 | 
						|
    char *etype;
 | 
						|
    char *principal;
 | 
						|
    char *timestamp;
 | 
						|
    char *key;
 | 
						|
    struct key_info *next;
 | 
						|
};
 | 
						|
 | 
						|
static int
 | 
						|
do_list(const char *keytab_string)
 | 
						|
{
 | 
						|
    krb5_error_code ret;
 | 
						|
    krb5_keytab keytab;
 | 
						|
    krb5_keytab_entry entry;
 | 
						|
    krb5_kt_cursor cursor;
 | 
						|
    struct key_info *ki, **kie = &ki, *kp;
 | 
						|
 | 
						|
    int max_version = sizeof("Vno") - 1;
 | 
						|
    int max_etype = sizeof("Type") - 1;
 | 
						|
    int max_principal = sizeof("Principal") - 1;
 | 
						|
    int max_timestamp = sizeof("Date") - 1;
 | 
						|
    int max_key = sizeof("Key") - 1;
 | 
						|
 | 
						|
    /* XXX specialcase the ANY type */
 | 
						|
    if(strncasecmp(keytab_string, "ANY:", 4) == 0) {
 | 
						|
	int flag = 0;
 | 
						|
	char buf[1024];
 | 
						|
	keytab_string += 4;
 | 
						|
	while (strsep_copy((const char**)&keytab_string, ",", 
 | 
						|
			   buf, sizeof(buf)) != -1) {
 | 
						|
	    if(flag)
 | 
						|
		printf("\n");
 | 
						|
	    do_list(buf);
 | 
						|
	    flag = 1;
 | 
						|
	}
 | 
						|
	return 0;
 | 
						|
    }
 | 
						|
 | 
						|
    ret = krb5_kt_resolve(context, keytab_string, &keytab);
 | 
						|
    if (ret) {
 | 
						|
	krb5_warn(context, ret, "resolving keytab %s", keytab_string);
 | 
						|
	return 0;
 | 
						|
    }
 | 
						|
 | 
						|
    ret = krb5_kt_start_seq_get(context, keytab, &cursor);
 | 
						|
    if(ret){
 | 
						|
	krb5_warn(context, ret, "krb5_kt_start_seq_get %s", keytab_string);
 | 
						|
	goto out;
 | 
						|
    }
 | 
						|
 | 
						|
    printf ("%s:\n\n", keytab_string);
 | 
						|
	
 | 
						|
    while((ret = krb5_kt_next_entry(context, keytab, &entry, &cursor)) == 0){
 | 
						|
#define CHECK_MAX(F) if(max_##F < strlen(kp->F)) max_##F = strlen(kp->F)
 | 
						|
 | 
						|
	kp = malloc(sizeof(*kp));
 | 
						|
	if (kp == NULL) {
 | 
						|
	    krb5_kt_free_entry(context, &entry);
 | 
						|
	    krb5_kt_end_seq_get(context, keytab, &cursor);
 | 
						|
	    krb5_warn(context, ret, "malloc failed");
 | 
						|
	    goto out;
 | 
						|
	}
 | 
						|
 | 
						|
	asprintf(&kp->version, "%d", entry.vno);
 | 
						|
	CHECK_MAX(version);
 | 
						|
	ret = krb5_enctype_to_string(context, 
 | 
						|
				     entry.keyblock.keytype, &kp->etype);
 | 
						|
	if (ret != 0) 
 | 
						|
	    asprintf(&kp->etype, "unknown (%d)", entry.keyblock.keytype);
 | 
						|
	CHECK_MAX(etype);
 | 
						|
	krb5_unparse_name(context, entry.principal, &kp->principal);
 | 
						|
	CHECK_MAX(principal);
 | 
						|
	if (list_timestamp) {
 | 
						|
	    char tstamp[256];
 | 
						|
 | 
						|
	    krb5_format_time(context, entry.timestamp, 
 | 
						|
			     tstamp, sizeof(tstamp), FALSE);
 | 
						|
 | 
						|
	    kp->timestamp = strdup(tstamp);
 | 
						|
	    CHECK_MAX(timestamp);
 | 
						|
	}
 | 
						|
	if(list_keys) {
 | 
						|
	    int i;
 | 
						|
	    kp->key = malloc(2 * entry.keyblock.keyvalue.length + 1);
 | 
						|
	    for(i = 0; i < entry.keyblock.keyvalue.length; i++)
 | 
						|
		snprintf(kp->key + 2 * i, 3, "%02x", 
 | 
						|
			 ((unsigned char*)entry.keyblock.keyvalue.data)[i]);
 | 
						|
	    CHECK_MAX(key);
 | 
						|
	}
 | 
						|
	*kie = kp;
 | 
						|
	kie = &kp->next;
 | 
						|
	krb5_kt_free_entry(context, &entry);
 | 
						|
    }
 | 
						|
    *kie = NULL; /* termiate list */
 | 
						|
    ret = krb5_kt_end_seq_get(context, keytab, &cursor);
 | 
						|
 | 
						|
    printf("%-*s  %-*s  %-*s", max_version, "Vno", 
 | 
						|
	   max_etype, "Type", 
 | 
						|
	   max_principal, "Principal");
 | 
						|
    if(list_timestamp)
 | 
						|
	printf("  %-*s", max_timestamp, "Date");
 | 
						|
    if(list_keys)
 | 
						|
	printf("  %s", "Key");
 | 
						|
    printf("\n");
 | 
						|
 | 
						|
    for(kp = ki; kp; ) {
 | 
						|
	printf("%*s  %-*s  %-*s", max_version, kp->version, 
 | 
						|
	       max_etype, kp->etype, 
 | 
						|
	       max_principal, kp->principal);
 | 
						|
	if(list_timestamp)
 | 
						|
	    printf("  %-*s", max_timestamp, kp->timestamp);
 | 
						|
	if(list_keys)
 | 
						|
	    printf("  %s", kp->key);
 | 
						|
	printf("\n");
 | 
						|
 | 
						|
	/* free entries */
 | 
						|
	free(kp->version);
 | 
						|
	free(kp->etype);
 | 
						|
	free(kp->principal);
 | 
						|
	if(list_timestamp)
 | 
						|
	    free(kp->timestamp);
 | 
						|
	if(list_keys) {
 | 
						|
	    memset(kp->key, 0, strlen(kp->key));
 | 
						|
	    free(kp->key);
 | 
						|
	}
 | 
						|
	ki = kp;
 | 
						|
	kp = kp->next;
 | 
						|
	free(ki);
 | 
						|
    }
 | 
						|
out:
 | 
						|
    krb5_kt_close(context, keytab);
 | 
						|
    return 0;
 | 
						|
}
 | 
						|
 | 
						|
int
 | 
						|
kt_list(int argc, char **argv)
 | 
						|
{
 | 
						|
    krb5_error_code ret;
 | 
						|
    int optind = 0;
 | 
						|
    char kt[1024];
 | 
						|
 | 
						|
    if(verbose_flag)
 | 
						|
	list_timestamp = 1;
 | 
						|
 | 
						|
    if(getarg(args, num_args, argc, argv, &optind)){
 | 
						|
	arg_printusage(args, num_args, "ktutil list", "");
 | 
						|
	return 1;
 | 
						|
    }
 | 
						|
    if(help_flag){
 | 
						|
	arg_printusage(args, num_args, "ktutil list", "");
 | 
						|
	return 0;
 | 
						|
    }
 | 
						|
 | 
						|
    if (keytab_string == NULL) {
 | 
						|
	if((ret = krb5_kt_default_name(context, kt, sizeof(kt))) != 0) {
 | 
						|
	    krb5_warn(context, ret, "getting default keytab name");
 | 
						|
	    return 0;
 | 
						|
	}
 | 
						|
	keytab_string = kt;
 | 
						|
    }
 | 
						|
    do_list(keytab_string);
 | 
						|
    return 0;
 | 
						|
}
 |