2 * Copyright (c) 1997-2000 Kungliga Tekniska Högskolan
3 * (Royal Institute of Technology, Stockholm, Sweden).
6 * Redistribution and use in source and binary forms, with or without
7 * modification, are permitted provided that the following conditions
10 * 1. Redistributions of source code must retain the above copyright
11 * notice, this list of conditions and the following disclaimer.
13 * 2. Redistributions in binary form must reproduce the above copyright
14 * notice, this list of conditions and the following disclaimer in the
15 * documentation and/or other materials provided with the distribution.
17 * 3. Neither the name of the Institute nor the names of its contributors
18 * may be used to endorse or promote products derived from this software
19 * without specific prior written permission.
21 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
24 * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
34 #include "kadmin_locl.h"
36 RCSID("$Id: ank.c,v 1.23 2002/06/07 19:05:38 nectar Exp $");
39 * fetch the default principal corresponding to `princ'
42 static krb5_error_code
43 get_default (kadm5_server_context *context,
45 kadm5_principal_ent_t default_ent)
48 krb5_principal def_principal;
49 krb5_realm *realm = krb5_princ_realm(context->context, princ);
51 ret = krb5_make_principal (context->context, &def_principal,
52 *realm, "default", NULL);
55 ret = kadm5_get_principal (context, def_principal, default_ent,
56 KADM5_PRINCIPAL_NORMAL_MASK);
57 krb5_free_principal (context->context, def_principal);
62 * Add the principal `name' to the database.
63 * Prompt for all data not given by the input parameters.
66 static krb5_error_code
67 add_one_principal (const char *name,
72 krb5_key_data *key_data,
73 const char *max_ticket_life,
74 const char *max_renewable_life,
75 const char *attributes,
76 const char *expiration,
77 const char *pw_expiration)
80 kadm5_principal_ent_rec princ, defrec;
81 kadm5_principal_ent_rec *default_ent = NULL;
82 krb5_principal princ_ent = NULL;
87 memset(&princ, 0, sizeof(princ));
88 ret = krb5_parse_name(context, name, &princ_ent);
90 krb5_warn(context, ret, "krb5_parse_name");
93 princ.principal = princ_ent;
94 mask |= KADM5_PRINCIPAL;
96 ret = set_entry(context, &princ, &mask,
97 max_ticket_life, max_renewable_life,
98 expiration, pw_expiration, attributes);
102 default_ent = &defrec;
103 ret = get_default (kadm_handle, princ_ent, default_ent);
108 default_mask = KADM5_ATTRIBUTES | KADM5_MAX_LIFE | KADM5_MAX_RLIFE |
109 KADM5_PRINC_EXPIRE_TIME | KADM5_PW_EXPIRATION;
113 set_defaults(&princ, &mask, default_ent, default_mask);
115 edit_entry(&princ, &mask, default_ent, default_mask);
116 if(rand_key || key_data) {
117 princ.attributes |= KRB5_KDB_DISALLOW_ALL_TIX;
118 mask |= KADM5_ATTRIBUTES;
119 strlcpy (pwbuf, "hemlig", sizeof(pwbuf));
121 } else if (rand_password) {
122 random_password (pwbuf, sizeof(pwbuf));
124 } else if(password == NULL) {
128 krb5_unparse_name(context, princ_ent, &princ_name);
129 asprintf (&prompt, "%s's Password: ", princ_name);
131 ret = des_read_pw_string (pwbuf, sizeof(pwbuf), prompt, 1);
138 ret = kadm5_create_principal(kadm_handle, &princ, mask, password);
140 krb5_warn(context, ret, "kadm5_create_principal");
142 krb5_keyblock *new_keys;
144 ret = kadm5_randkey_principal(kadm_handle, princ_ent,
147 krb5_warn(context, ret, "kadm5_randkey_principal");
150 for(i = 0; i < n_keys; i++)
151 krb5_free_keyblock_contents(context, &new_keys[i]);
154 kadm5_get_principal(kadm_handle, princ_ent, &princ,
155 KADM5_PRINCIPAL | KADM5_KVNO | KADM5_ATTRIBUTES);
156 princ.attributes &= (~KRB5_KDB_DISALLOW_ALL_TIX);
158 kadm5_modify_principal(kadm_handle, &princ,
159 KADM5_ATTRIBUTES | KADM5_KVNO);
160 kadm5_free_principal_ent(kadm_handle, &princ);
161 } else if (key_data) {
162 ret = kadm5_chpass_principal_with_key (kadm_handle, princ_ent,
165 krb5_warn(context, ret, "kadm5_chpass_principal_with_key");
167 kadm5_get_principal(kadm_handle, princ_ent, &princ,
168 KADM5_PRINCIPAL | KADM5_ATTRIBUTES);
169 princ.attributes &= (~KRB5_KDB_DISALLOW_ALL_TIX);
170 kadm5_modify_principal(kadm_handle, &princ, KADM5_ATTRIBUTES);
171 kadm5_free_principal_ent(kadm_handle, &princ);
172 } else if (rand_password) {
175 krb5_unparse_name(context, princ_ent, &princ_name);
176 printf ("added %s with password `%s'\n", princ_name, password);
181 krb5_free_principal (context, princ_ent);
183 kadm5_free_principal_ent (context, default_ent);
184 if (password != NULL)
185 memset (password, 0, strlen(password));
190 * parse the string `key_string' into `key', returning 0 iff succesful.
197 static struct getargs args[] = {
198 { "random-key", 'r', arg_flag, NULL, "set random key" },
199 { "random-password", 0, arg_flag, NULL, "set random password" },
200 { "password", 'p', arg_string, NULL, "princial's password" },
201 { "key", 0, arg_string, NULL, "DES-key in hex" },
202 { "max-ticket-life", 0, arg_string, NULL, "max ticket lifetime",
204 { "max-renewable-life", 0, arg_string, NULL,
205 "max renewable lifetime", "lifetime" },
206 { "attributes", 0, arg_string, NULL, "principal attributes",
208 { "expiration-time",0, arg_string, NULL, "expiration time",
210 { "pw-expiration-time", 0, arg_string, NULL,
211 "password expiration time", "time"},
212 { "use-defaults", 0, arg_flag, NULL, "use default values" }
215 static int num_args = sizeof(args) / sizeof(args[0]);
220 arg_printusage (args, num_args, "add", "principal...");
224 * Parse arguments and add all the principals.
228 add_new_key(int argc, char **argv)
230 char *password = NULL;
233 int random_password = 0;
236 char *max_ticket_life = NULL;
237 char *max_renewable_life = NULL;
238 char *attributes = NULL;
239 char *expiration = NULL;
240 char *pw_expiration = NULL;
241 int use_defaults = 0;
244 krb5_key_data key_data[3];
245 krb5_key_data *kdp = NULL;
247 args[0].value = &random_key;
248 args[1].value = &random_password;
249 args[2].value = &password;
250 args[3].value = &key;
251 args[4].value = &max_ticket_life;
252 args[5].value = &max_renewable_life;
253 args[6].value = &attributes;
254 args[7].value = &expiration;
255 args[8].value = &pw_expiration;
256 args[9].value = &use_defaults;
258 if(getarg(args, num_args, argc, argv, &optind)) {
278 printf ("give only one of "
279 "--random-key, --random-password, --password, --key\n");
286 if (parse_des_key (key, key_data, &error)) {
287 printf ("failed parsing key `%s': %s\n", key, error);
293 for (i = optind; i < argc; ++i) {
294 ret = add_one_principal (argv[i], random_key, random_password,
304 krb5_warn (context, ret, "adding %s", argv[i]);
310 kadm5_free_key_data (kadm_handle, &dummy, key_data);