 90fed32b0c
			
		
	
	90fed32b0c
	
	
	
		
			
			git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@9195 ec53bebd-3082-4978-b11e-865c3cabbd6b
		
			
				
	
	
		
			241 lines
		
	
	
		
			5.9 KiB
		
	
	
	
		
			C
		
	
	
	
	
	
			
		
		
	
	
			241 lines
		
	
	
		
			5.9 KiB
		
	
	
	
		
			C
		
	
	
	
	
	
| /*
 | |
|  * Copyright (c) 1997 - 2000 Kungliga Tekniska Högskolan
 | |
|  * (Royal Institute of Technology, Stockholm, Sweden). 
 | |
|  * All rights reserved. 
 | |
|  *
 | |
|  * Redistribution and use in source and binary forms, with or without 
 | |
|  * modification, are permitted provided that the following conditions 
 | |
|  * are met: 
 | |
|  *
 | |
|  * 1. Redistributions of source code must retain the above copyright 
 | |
|  *    notice, this list of conditions and the following disclaimer. 
 | |
|  *
 | |
|  * 2. Redistributions in binary form must reproduce the above copyright 
 | |
|  *    notice, this list of conditions and the following disclaimer in the 
 | |
|  *    documentation and/or other materials provided with the distribution. 
 | |
|  *
 | |
|  * 3. Neither the name of the Institute nor the names of its contributors 
 | |
|  *    may be used to endorse or promote products derived from this software 
 | |
|  *    without specific prior written permission. 
 | |
|  *
 | |
|  * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND 
 | |
|  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 
 | |
|  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 
 | |
|  * ARE DISCLAIMED.  IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE 
 | |
|  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 
 | |
|  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 
 | |
|  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 
 | |
|  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 
 | |
|  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 
 | |
|  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 
 | |
|  * SUCH DAMAGE. 
 | |
|  */
 | |
| 
 | |
| #include "hdb_locl.h"
 | |
| 
 | |
| RCSID("$Id$");
 | |
| 
 | |
| struct hdb_method {
 | |
|     const char *prefix;
 | |
|     krb5_error_code (*create)(krb5_context, HDB **, const char *filename);
 | |
| };
 | |
| 
 | |
| static struct hdb_method methods[] = {
 | |
| #ifdef HAVE_DB_H
 | |
|     {"db:",	hdb_db_create},
 | |
| #endif
 | |
| #if defined(HAVE_NDBM_H) || defined(HAVE_GDBM_NDBM_H)
 | |
|     {"ndbm:",	hdb_ndbm_create},
 | |
| #endif
 | |
| #ifdef OPENLDAP
 | |
|     {"ldap:",	hdb_ldap_create},
 | |
| #endif
 | |
| #ifdef HAVE_DB_H
 | |
|     {"",	hdb_db_create},
 | |
| #elif defined(HAVE_NDBM_H)
 | |
|     {"",	hdb_ndbm_create},
 | |
| #elif defined(OPENLDAP)
 | |
|     {"",	hdb_ldap_create},
 | |
| #endif
 | |
|     {NULL,	NULL}
 | |
| };
 | |
| 
 | |
| krb5_error_code
 | |
| hdb_next_enctype2key(krb5_context context,
 | |
| 		     const hdb_entry *e,
 | |
| 		     krb5_enctype enctype,
 | |
| 		     Key **key)
 | |
| {
 | |
|     Key *k;
 | |
|     
 | |
|     for (k = *key ? (*key) + 1 : e->keys.val;
 | |
| 	 k < e->keys.val + e->keys.len; 
 | |
| 	 k++)
 | |
| 	if(k->key.keytype == enctype){
 | |
| 	    *key = k;
 | |
| 	    return 0;
 | |
| 	}
 | |
|     return KRB5_PROG_ETYPE_NOSUPP; /* XXX */
 | |
| }
 | |
| 
 | |
| krb5_error_code
 | |
| hdb_enctype2key(krb5_context context, 
 | |
| 		hdb_entry *e, 
 | |
| 		krb5_enctype enctype, 
 | |
| 		Key **key)
 | |
| {
 | |
|     *key = NULL;
 | |
|     return hdb_next_enctype2key(context, e, enctype, key);
 | |
| }
 | |
| 
 | |
| void
 | |
| hdb_free_key(Key *key)
 | |
| {
 | |
|     memset(key->key.keyvalue.data, 
 | |
| 	   0,
 | |
| 	   key->key.keyvalue.length);
 | |
|     free_Key(key);
 | |
|     free(key);
 | |
| }
 | |
| 
 | |
| 
 | |
| krb5_error_code
 | |
| hdb_lock(int fd, int operation)
 | |
| {
 | |
|     int i, code = 0;
 | |
| 
 | |
|     for(i = 0; i < 3; i++){
 | |
| 	code = flock(fd, (operation == HDB_RLOCK ? LOCK_SH : LOCK_EX) | LOCK_NB);
 | |
| 	if(code == 0 || errno != EWOULDBLOCK)
 | |
| 	    break;
 | |
| 	sleep(1);
 | |
|     }
 | |
|     if(code == 0)
 | |
| 	return 0;
 | |
|     if(errno == EWOULDBLOCK)
 | |
| 	return HDB_ERR_DB_INUSE;
 | |
|     return HDB_ERR_CANT_LOCK_DB;
 | |
| }
 | |
| 
 | |
| krb5_error_code
 | |
| hdb_unlock(int fd)
 | |
| {
 | |
|     int code;
 | |
|     code = flock(fd, LOCK_UN);
 | |
|     if(code)
 | |
| 	return 4711 /* XXX */;
 | |
|     return 0;
 | |
| }
 | |
| 
 | |
| void
 | |
| hdb_free_entry(krb5_context context, hdb_entry *ent)
 | |
| {
 | |
|     int i;
 | |
| 
 | |
|     for(i = 0; i < ent->keys.len; ++i) {
 | |
| 	Key *k = &ent->keys.val[i];
 | |
| 
 | |
| 	memset (k->key.keyvalue.data, 0, k->key.keyvalue.length);
 | |
|     }
 | |
|     free_hdb_entry(ent);
 | |
| }
 | |
| 
 | |
| krb5_error_code
 | |
| hdb_foreach(krb5_context context,
 | |
| 	    HDB *db,
 | |
| 	    unsigned flags,
 | |
| 	    hdb_foreach_func_t func,
 | |
| 	    void *data)
 | |
| {
 | |
|     krb5_error_code ret;
 | |
|     hdb_entry entry;
 | |
|     ret = db->firstkey(context, db, flags, &entry);
 | |
|     while(ret == 0){
 | |
| 	ret = (*func)(context, db, &entry, data);
 | |
| 	hdb_free_entry(context, &entry);
 | |
| 	if(ret == 0)
 | |
| 	    ret = db->nextkey(context, db, flags, &entry);
 | |
|     }
 | |
|     if(ret == HDB_ERR_NOENTRY)
 | |
| 	ret = 0;
 | |
|     return ret;
 | |
| }
 | |
| 
 | |
| krb5_error_code
 | |
| hdb_check_db_format(krb5_context context, HDB *db)
 | |
| {
 | |
|     krb5_data tag;
 | |
|     krb5_data version;
 | |
|     krb5_error_code ret;
 | |
|     unsigned ver;
 | |
|     int foo;
 | |
| 
 | |
|     tag.data = HDB_DB_FORMAT_ENTRY;
 | |
|     tag.length = strlen(tag.data);
 | |
|     ret = (*db->_get)(context, db, tag, &version);
 | |
|     if(ret)
 | |
| 	return ret;
 | |
|     foo = sscanf(version.data, "%u", &ver);
 | |
|     krb5_data_free (&version);
 | |
|     if (foo != 1)
 | |
| 	return HDB_ERR_BADVERSION;
 | |
|     if(ver != HDB_DB_FORMAT)
 | |
| 	return HDB_ERR_BADVERSION;
 | |
|     return 0;
 | |
| }
 | |
| 
 | |
| krb5_error_code
 | |
| hdb_init_db(krb5_context context, HDB *db)
 | |
| {
 | |
|     krb5_error_code ret;
 | |
|     krb5_data tag;
 | |
|     krb5_data version;
 | |
|     char ver[32];
 | |
|     
 | |
|     ret = hdb_check_db_format(context, db);
 | |
|     if(ret != HDB_ERR_NOENTRY)
 | |
| 	return ret;
 | |
|     
 | |
|     tag.data = HDB_DB_FORMAT_ENTRY;
 | |
|     tag.length = strlen(tag.data);
 | |
|     snprintf(ver, sizeof(ver), "%u", HDB_DB_FORMAT);
 | |
|     version.data = ver;
 | |
|     version.length = strlen(version.data) + 1; /* zero terminated */
 | |
|     ret = (*db->_put)(context, db, 0, tag, version);
 | |
|     return ret;
 | |
| }
 | |
| 
 | |
| /*
 | |
|  * find the relevant method for `filename', returning a pointer to the
 | |
|  * rest in `rest'.
 | |
|  * return NULL if there's no such method.
 | |
|  */
 | |
| 
 | |
| static const struct hdb_method *
 | |
| find_method (const char *filename, const char **rest)
 | |
| {
 | |
|     const struct hdb_method *h;
 | |
| 
 | |
|     for (h = methods; h->prefix != NULL; ++h)
 | |
| 	if (strncmp (filename, h->prefix, strlen(h->prefix)) == 0) {
 | |
| 	    *rest = filename + strlen(h->prefix);
 | |
| 	    return h;
 | |
| 	}
 | |
|     return NULL;
 | |
| }
 | |
| 
 | |
| krb5_error_code
 | |
| hdb_create(krb5_context context, HDB **db, const char *filename)
 | |
| {
 | |
|     const struct hdb_method *h;
 | |
|     const char *residual;
 | |
| 
 | |
|     if(filename == NULL)
 | |
| 	filename = HDB_DEFAULT_DB;
 | |
|     initialize_hdb_error_table_r(&context->et_list);
 | |
|     h = find_method (filename, &residual);
 | |
|     if (h == NULL)
 | |
| 	krb5_errx(context, 1, "No database support! (hdb_create)");
 | |
|     return (*h->create)(context, db, residual);
 | |
| }
 |