kpasswd/kpasswd.c

   1 /*
   2  * Copyright (c) 1997-2001 Kungliga Tekniska Högskolan
   3  * (Royal Institute of Technology, Stockholm, Sweden).
   4  * All rights reserved.
   5  *
   6  * Redistribution and use in source and binary forms, with or without
   7  * modification, are permitted provided that the following conditions
   8  * are met:
   9  *
  10  * 1. Redistributions of source code must retain the above copyright
  11  *    notice, this list of conditions and the following disclaimer.
  12  *
  13  * 2. Redistributions in binary form must reproduce the above copyright
  14  *    notice, this list of conditions and the following disclaimer in the
  15  *    documentation and/or other materials provided with the distribution.
  16  *
  17  * 3. Neither the name of the Institute nor the names of its contributors
  18  *    may be used to endorse or promote products derived from this software
  19  *    without specific prior written permission.
  20  *
  21  * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
  22  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  23  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  24  * ARE DISCLAIMED.  IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
  25  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  26  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  27  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  28  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  29  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  30  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  31  * SUCH DAMAGE.
  32  */
  33
  34 #include "kpasswd_locl.h"
  35 RCSID("$Id$");
  36
  37 static int version_flag;
  38 static int help_flag;
  39
  40 static struct getargs args[] = {
  41     { "version",                0,   arg_flag, &version_flag },
  42     { "help",                   0,   arg_flag, &help_flag }
  43 };
  44
  45 static void
  46 usage (int ret, struct getargs *a, int num_args)
  47 {
  48     arg_printusage (a, num_args, NULL, "[principal]");
  49     exit (ret);
  50 }
  51
  52 int
  53 main (int argc, char **argv)
  54 {
  55     krb5_error_code ret;
  56     krb5_context context;
  57     krb5_principal principal;
  58     int optind = 0;
  59     krb5_get_init_creds_opt opt;
  60     krb5_creds cred;
  61     int result_code;
  62     krb5_data result_code_string, result_string;
  63     char pwbuf[BUFSIZ];
  64
  65     optind = krb5_program_setup(&context, argc, argv,
  66                                 args, sizeof(args) / sizeof(args[0]), usage);
  67
  68     if (help_flag)
  69         usage (0, args, sizeof(args) / sizeof(args[0]));
  70
  71     if(version_flag){
  72         print_version (NULL);
  73         exit(0);
  74     }
  75
  76     krb5_get_init_creds_opt_init (&opt);
  77
  78     krb5_get_init_creds_opt_set_tkt_life (&opt, 300);
  79     krb5_get_init_creds_opt_set_forwardable (&opt, FALSE);
  80     krb5_get_init_creds_opt_set_proxiable (&opt, FALSE);
  81
  82     argc -= optind;
  83     argv += optind;
  84
  85     if (argc > 1)
  86         usage (1, args, sizeof(args) / sizeof(args[0]));
  87
  88     ret = krb5_init_context (&context);
  89     if (ret)
  90         errx (1, "krb5_init_context failed: %d", ret);
  91
  92     if(argv[0]) {
  93         ret = krb5_parse_name (context, argv[0], &principal);
  94         if (ret)
  95             krb5_err (context, 1, ret, "krb5_parse_name");
  96     } else
  97         principal = NULL;
  98
  99     ret = krb5_get_init_creds_password (context,
 100                                         &cred,
 101                                         principal,
 102                                         NULL,
 103                                         krb5_prompter_posix,
 104                                         NULL,
 105                                         0,
 106                                         "kadmin/changepw",
 107                                         &opt);
 108     switch (ret) {
 109     case 0:
 110         break;
 111     case KRB5_LIBOS_PWDINTR :
 112         return 1;
 113     case KRB5KRB_AP_ERR_BAD_INTEGRITY :
 114     case KRB5KRB_AP_ERR_MODIFIED :
 115         krb5_errx(context, 1, "Password incorrect");
 116         break;
 117     default:
 118         krb5_err(context, 1, ret, "krb5_get_init_creds");
 119     }
 120
 121     krb5_data_zero (&result_code_string);
 122     krb5_data_zero (&result_string);
 123
 124     if(des_read_pw_string (pwbuf, sizeof(pwbuf), "New password: ", 1) != 0)
 125         return 1;
 126
 127     ret = krb5_change_password (context, &cred, pwbuf,
 128                                 &result_code,
 129                                 &result_code_string,
 130                                 &result_string);
 131     if (ret)
 132         krb5_err (context, 1, ret, "krb5_change_password");
 133
 134     printf ("%s%s%.*s\n", krb5_passwd_result_to_string(context,
 135                                                        result_code),
 136             result_string.length > 0 ? " : " : "",
 137             (int)result_string.length,
 138             (char *)result_string.data);
 139
 140     krb5_data_free (&result_code_string);
 141     krb5_data_free (&result_string);
 142
 143     krb5_free_creds_contents (context, &cred);
 144     krb5_free_context (context);
 145     return result_code;
 146 }