2 * Copyright (c) 1995, 1996, 1997, 1998, 1999 Kungliga Tekniska Högskolan
3 * (Royal Institute of Technology, Stockholm, Sweden).
6 * Redistribution and use in source and binary forms, with or without
7 * modification, are permitted provided that the following conditions
10 * 1. Redistributions of source code must retain the above copyright
11 * notice, this list of conditions and the following disclaimer.
13 * 2. Redistributions in binary form must reproduce the above copyright
14 * notice, this list of conditions and the following disclaimer in the
15 * documentation and/or other materials provided with the distribution.
17 * 3. Neither the name of the Institute nor the names of its contributors
18 * may be used to endorse or promote products derived from this software
19 * without specific prior written permission.
21 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
24 * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
33 /* $FreeBSD: src/crypto/kerberosIV/kadmin/ksrvutil_get.c,v 1.1.1.3.2.1 2003/02/14 22:37:37 nectar Exp $ */
34 /* $DragonFly: src/crypto/kerberosIV/kadmin/Attic/ksrvutil_get.c,v 1.2 2003/06/17 04:24:36 dillon Exp $ */
36 #include "kadm_locl.h"
39 RCSID("$Id: ksrvutil_get.c,v 1.43 1999/12/02 16:58:36 joda Exp $");
43 #define FUDGE_VALUE 15 /* for ticket expiration time */
48 static char tktstring[MaxPathLen];
51 princ_exists(char *name, char *instance, char *realm)
55 status = krb_get_pw_in_tkt(name, instance, realm,
56 KRB_TICKET_GRANTING_TICKET,
59 if ((status == KSUCCESS) || (status == INTK_BADPW))
61 else if (status == KDC_PR_UNKNOWN)
68 get_admin_password(char *myname, char *myinst, char *myrealm)
71 char admin_passwd[MAX_KPW_LEN]; /* Admin's password */
72 int ticket_life = 1; /* minimum ticket lifetime */
76 if (princ_exists(myname, myinst, myrealm) != PE_NO) {
77 snprintf(buf, sizeof(buf), "Password for %s: ",
78 krb_unparse_name_long (myname, myinst, myrealm));
79 if (des_read_pw_string(admin_passwd, sizeof(admin_passwd)-1,
81 fprintf(stderr, "Error reading admin password.\n");
84 status = krb_get_pw_in_tkt(myname, myinst, myrealm, PWSERV_NAME,
85 KADM_SINST, ticket_life, admin_passwd);
86 memset(admin_passwd, 0, sizeof(admin_passwd));
88 status = KDC_PR_UNKNOWN;
94 printf("Principal %s does not exist.\n",
95 krb_unparse_name_long(myname, myinst, myrealm));
98 printf("Incorrect admin password.\n");
101 com_err("kadmin", status+krb_err_base,
102 "while getting password tickets");
107 memset(admin_passwd, 0, sizeof(admin_passwd));
113 srvtab_put_key (int fd, char *filename, char *name, char *inst, char *realm,
114 int8_t kvno, des_cblock key)
116 char sname[ANAME_SZ]; /* name of service */
117 char sinst[INST_SZ]; /* instance of service */
118 char srealm[REALM_SZ]; /* realm of service */
122 lseek(fd, 0, SEEK_SET);
124 while(getst(fd, sname, SNAME_SZ) > 0 &&
125 getst(fd, sinst, INST_SZ) > 0 &&
126 getst(fd, srealm, REALM_SZ) > 0 &&
127 read(fd, &skvno, sizeof(skvno)) > 0 &&
128 read(fd, skey, sizeof(skey)) > 0) {
129 if(strcmp(name, sname) == 0 &&
130 strcmp(inst, sinst) == 0 &&
131 strcmp(realm, srealm) == 0) {
132 lseek(fd, lseek(fd,0,SEEK_CUR)-(sizeof(skvno) + sizeof(skey)), SEEK_SET);
133 safe_write(filename, fd, &kvno, sizeof(kvno));
134 safe_write(filename, fd, key, sizeof(des_cblock));
138 safe_write(filename, fd, name, strlen(name) + 1);
139 safe_write(filename, fd, inst, strlen(inst) + 1);
140 safe_write(filename, fd, realm, strlen(realm) + 1);
141 safe_write(filename, fd, &kvno, sizeof(kvno));
142 safe_write(filename, fd, key, sizeof(des_cblock));
146 * node list of services
152 char realm[REALM_SZ];
153 struct srv_ent *next;
157 key_to_key(const char *user,
163 memcpy(key, arg, sizeof(des_cblock));
168 get_srvtab_ent(int unique_filename, int fd, char *filename,
169 char *name, char *inst, char *realm)
173 char old_tktfile[MaxPathLen], new_tktfile[MaxPathLen];
174 char garbage_name[ANAME_SZ];
175 char garbage_inst[ANAME_SZ];
181 strlcpy(chname, krb_get_phost(inst), sizeof(chname));
182 if(strcmp(inst, chname))
184 "Warning: Are you sure `%s' should not be `%s'?\n",
187 memset(&values, 0, sizeof(values));
188 strlcpy(values.name, name, sizeof(values.name));
189 strlcpy(values.instance, inst, sizeof(values.instance));
190 des_random_key(newkey);
191 values.key_low = (newkey[0] << 24) | (newkey[1] << 16)
192 | (newkey[2] << 8) | (newkey[3] << 0);
193 values.key_high = (newkey[4] << 24) | (newkey[5] << 16)
194 | (newkey[6] << 8) | (newkey[7] << 0);
196 SET_FIELD(KADM_NAME,values.fields);
197 SET_FIELD(KADM_INST,values.fields);
198 SET_FIELD(KADM_DESKEY,values.fields);
200 ret = kadm_mod(&values, &values);
201 if(ret == KADM_NOENTRY)
202 ret = kadm_add(&values);
203 if (ret != KSUCCESS) {
204 warnx ("Couldn't get srvtab entry for %s.%s: %s",
205 name, inst, error_message(ret));
209 values.key_low = values.key_high = 0;
211 /* get the key version number */
213 int old = krb_use_admin_server(1);
215 strlcpy(old_tktfile, tkt_string(), sizeof(old_tktfile));
216 snprintf(new_tktfile, sizeof(new_tktfile), "%s_ksrvutil-get.%u",
217 TKT_ROOT, (unsigned)getpid());
218 krb_set_tkt_string(new_tktfile);
220 ret = krb_get_in_tkt(name, inst, realm, name, inst,
221 1, key_to_key, NULL, &newkey);
222 krb_use_admin_server(old);
224 warnx ("getting tickets for %s: %s",
225 krb_unparse_name_long(name, inst, realm),
226 krb_get_err_text(ret));
231 if (ret == KSUCCESS &&
232 (ret = tf_init(tkt_string(), R_TKT_FIL)) == KSUCCESS &&
233 (ret = tf_get_pname(garbage_name)) == KSUCCESS &&
234 (ret = tf_get_pinst(garbage_inst)) == KSUCCESS &&
235 (ret = tf_get_cred(&c)) == KSUCCESS)
238 warnx ("Could not find the cred in the ticket file: %s",
239 krb_get_err_text(ret));
244 krb_set_tkt_string(old_tktfile);
247 if(ret != KSUCCESS) {
248 memset(&newkey, 0, sizeof(newkey));
249 warnx ("Could not get a ticket for %s: %s\n",
250 krb_unparse_name_long(name, inst, realm),
251 krb_get_err_text(ret));
255 /* Write the new key & c:o to the srvtab file */
259 asprintf(&fn, "%s-%s", filename,
260 krb_unparse_name_long(name, inst, realm));
262 warnx("Out of memory");
265 fd = open(fn, O_RDWR | O_CREAT | O_TRUNC, 0600); /* XXX flags, mode? */
270 srvtab_put_key (fd, fn, name, inst, realm, kvno, newkey);
272 fprintf (stderr, "Created %s\n", fn);
275 srvtab_put_key (fd, filename, name, inst, realm, kvno, newkey);
276 fprintf (stderr, "Added %s\n",
277 krb_unparse_name_long (name, inst, realm));
279 memset(&newkey, 0, sizeof(newkey));
283 ksrvutil_kadm(int unique_filename, int fd, char *filename, struct srv_ent *p)
288 ret = kadm_init_link(PWSERV_NAME, KADM_SINST, u_realm);
289 if (ret != KADM_SUCCESS) {
290 warnx("Couldn't initialize kadmin link: %s", error_message(ret));
294 ret = krb_get_cred (PWSERV_NAME, KADM_SINST, u_realm, &c);
295 if (ret != KSUCCESS) {
299 * create ticket file and get admin tickets
301 snprintf(tktstring, sizeof(tktstring), "%s_ksrvutil_%d",
302 TKT_ROOT, (int)getpid());
303 krb_set_tkt_string(tktstring);
306 ret = get_admin_password(u_name, u_inst, u_realm);
308 warnx("Couldn't get admin password.");
313 get_srvtab_ent(unique_filename, fd, filename, p->name, p->inst, p->realm);
320 parseinput (char *result, size_t sz, char *val, char *def)
325 if (val[0] == '\0') {
326 strlcpy (result, def, sz);
329 lim = result + sz - 1;
331 while(*val && result < lim) {
349 ksrvutil_get(int unique_filename, int fd, char *filename, int argc, char **argv)
351 char sname[ANAME_SZ]; /* name of service */
352 char sinst[INST_SZ]; /* instance of service */
353 char srealm[REALM_SZ]; /* realm of service */
354 char databuf[BUFSIZ];
355 char local_hostname[100];
357 struct srv_ent *head=NULL;
360 gethostname(local_hostname, sizeof(local_hostname));
361 strlcpy(local_hostname,
362 krb_get_phost(local_hostname),
363 sizeof(local_hostname));
366 for(i=0; i < argc; ++i) {
367 struct srv_ent *p=malloc(sizeof(*p));
370 warnx ("out of memory in malloc");
374 strlcpy (p->realm, u_realm, sizeof(p->realm));
375 if (kname_parse (p->name, p->inst, p->realm, argv[i]) !=
377 warnx ("parse error on '%s'\n", argv[i]);
381 if (p->name[0] == '\0')
382 strlcpy(p->name, "rcmd", sizeof(p->name));
383 if (p->inst[0] == '\0')
384 strlcpy(p->inst, local_hostname, sizeof(p->inst));
385 if (p->realm[0] == '\0')
386 strlcpy(p->realm, u_realm, sizeof(p->realm));
392 safe_read_stdin("Name [rcmd]: ", databuf, sizeof(databuf));
393 parseinput (sname, sizeof(sname), databuf, "rcmd");
395 snprintf(prompt, sizeof(prompt), "Instance [%s]: ", local_hostname);
396 safe_read_stdin(prompt, databuf, sizeof(databuf));
397 parseinput (sinst, sizeof(sinst), databuf, local_hostname);
399 snprintf(prompt, sizeof(prompt), "Realm [%s]: ", u_realm);
400 safe_read_stdin(prompt, databuf, sizeof(databuf));
401 parseinput (srealm, sizeof(srealm), databuf, u_realm);
403 if(yn("Is this correct?")){
404 struct srv_ent *p=(struct srv_ent*)malloc(sizeof(struct srv_ent));
406 warnx ("out of memory in malloc");
411 strlcpy(p->name, sname, sizeof(p->name));
412 strlcpy(p->inst, sinst, sizeof(p->inst));
413 strlcpy(p->realm, srealm, sizeof(p->realm));
415 }while(ny("Add more keys?"));
418 ksrvutil_kadm(unique_filename, fd, filename, head);
421 struct srv_ent *p=head, *q;