2 * Copyright (c) 2005, PADL Software Pty Ltd.
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that the following conditions
9 * 1. Redistributions of source code must retain the above copyright
10 * notice, this list of conditions and the following disclaimer.
12 * 2. Redistributions in binary form must reproduce the above copyright
13 * notice, this list of conditions and the following disclaimer in the
14 * documentation and/or other materials provided with the distribution.
16 * 3. Neither the name of PADL Software nor the names of its contributors
17 * may be used to endorse or promote products derived from this software
18 * without specific prior written permission.
20 * THIS SOFTWARE IS PROVIDED BY PADL SOFTWARE AND CONTRIBUTORS ``AS IS'' AND
21 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
22 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
23 * ARE DISCLAIMED. IN NO EVENT SHALL PADL SOFTWARE OR CONTRIBUTORS BE LIABLE
24 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
25 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
26 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
27 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
28 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
29 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
35 #include <parse_bytes.h>
39 static const char *config_file
; /* location of kcm config file */
41 size_t max_request
= 0; /* maximal size of a request */
42 char *socket_path
= NULL
;
44 static char *max_request_str
; /* `max_request' as a string */
47 int detach_from_console
= -1;
48 #define DETACH_IS_DEFAULT FALSE
51 static const char *system_cache_name
= NULL
;
52 static const char *system_keytab
= NULL
;
53 static const char *system_principal
= NULL
;
54 static const char *system_server
= NULL
;
55 static const char *system_perms
= NULL
;
56 static const char *system_user
= NULL
;
57 static const char *system_group
= NULL
;
59 static const char *renew_life
= NULL
;
60 static const char *ticket_life
= NULL
;
62 int name_constraints
= -1;
65 static int version_flag
;
67 static struct getargs args
[] = {
69 "cache-name", 0, arg_string
, &system_cache_name
,
70 "system cache name", "cachename"
73 "config-file", 'c', arg_string
, &config_file
,
74 "location of config file", "file"
77 "group", 'g', arg_string
, &system_group
,
78 "system cache group", "group"
81 "max-request", 0, arg_string
, &max_request
,
82 "max size for a kcm-request", "size"
87 "detach", 'D', arg_negative_flag
, &detach_from_console
,
88 "don't detach from console"
92 "detach", 0 , arg_flag
, &detach_from_console
,
97 { "help", 'h', arg_flag
, &help_flag
},
99 "system-principal", 'k', arg_string
, &system_principal
,
100 "system principal name", "principal"
103 "lifetime", 'l', arg_string
, &ticket_life
,
104 "lifetime of system tickets", "time"
107 "mode", 'm', arg_string
, &system_perms
,
108 "octal mode of system cache", "mode"
111 "name-constraints", 'n', arg_negative_flag
, &name_constraints
,
112 "disable credentials cache name constraints"
115 "renewable-life", 'r', arg_string
, &renew_life
,
116 "renewable lifetime of system tickets", "time"
119 "socket-path", 's', arg_string
, &socket_path
,
120 "path to kcm domain socket", "path"
123 "server", 'S', arg_string
, &system_server
,
124 "server to get system ticket for", "principal"
127 "keytab", 't', arg_string
, &system_keytab
,
128 "system keytab name", "keytab"
131 "user", 'u', arg_string
, &system_user
,
132 "system cache owner", "user"
134 { "version", 'v', arg_flag
, &version_flag
}
137 static int num_args
= sizeof(args
) / sizeof(args
[0]);
142 arg_printusage (args
, num_args
, NULL
, "");
146 static int parse_owners(kcm_ccache ccache
)
155 if (system_user
!= NULL
) {
156 if (isdigit((unsigned char)system_user
[0])) {
157 pw
= getpwuid(atoi(system_user
));
159 pw
= getpwnam(system_user
);
165 system_user
= strdup(pw
->pw_name
);
166 if (system_user
== NULL
) {
170 uid
= pw
->pw_uid
; uid_p
= 1;
171 gid
= pw
->pw_gid
; gid_p
= 1;
174 if (system_group
!= NULL
) {
175 if (isdigit((unsigned char)system_group
[0])) {
176 gr
= getgrgid(atoi(system_group
));
178 gr
= getgrnam(system_group
);
184 gid
= gr
->gr_gid
; gid_p
= 1;
190 ccache
->uid
= 0; /* geteuid() XXX */
195 ccache
->gid
= 0; /* getegid() XXX */
201 kcm_system_config_get_string(const char *string
)
203 return krb5_config_get_string(kcm_context
, NULL
, "kcm",
204 "system_ccache", string
, NULL
);
207 static krb5_error_code
208 ccache_init_system(void)
213 if (system_cache_name
== NULL
)
214 system_cache_name
= kcm_system_config_get_string("cc_name");
216 ret
= kcm_ccache_new(kcm_context
,
217 system_cache_name
? system_cache_name
: "SYSTEM",
222 ccache
->flags
|= KCM_FLAGS_OWNER_IS_SYSTEM
;
223 ccache
->flags
|= KCM_FLAGS_USE_KEYTAB
;
225 ret
= parse_owners(ccache
);
229 ret
= krb5_parse_name(kcm_context
, system_principal
, &ccache
->client
);
231 kcm_release_ccache(kcm_context
, &ccache
);
235 if (system_server
== NULL
)
236 system_server
= kcm_system_config_get_string("server");
238 if (system_server
!= NULL
) {
239 ret
= krb5_parse_name(kcm_context
, system_server
, &ccache
->server
);
241 kcm_release_ccache(kcm_context
, &ccache
);
246 if (system_keytab
== NULL
)
247 system_keytab
= kcm_system_config_get_string("keytab_name");
249 if (system_keytab
!= NULL
) {
250 ret
= krb5_kt_resolve(kcm_context
, system_keytab
, &ccache
->key
.keytab
);
252 ret
= krb5_kt_default(kcm_context
, &ccache
->key
.keytab
);
255 kcm_release_ccache(kcm_context
, &ccache
);
259 if (renew_life
== NULL
)
260 renew_life
= kcm_system_config_get_string("renew_life");
262 if (renew_life
== NULL
)
263 renew_life
= "1 month";
265 if (renew_life
!= NULL
) {
266 ccache
->renew_life
= parse_time(renew_life
, "s");
267 if (ccache
->renew_life
< 0) {
268 kcm_release_ccache(kcm_context
, &ccache
);
273 if (ticket_life
== NULL
)
274 ticket_life
= kcm_system_config_get_string("ticket_life");
276 if (ticket_life
!= NULL
) {
277 ccache
->tkt_life
= parse_time(ticket_life
, "s");
278 if (ccache
->tkt_life
< 0) {
279 kcm_release_ccache(kcm_context
, &ccache
);
284 if (system_perms
== NULL
)
285 system_perms
= kcm_system_config_get_string("mode");
287 if (system_perms
!= NULL
) {
290 if (sscanf(system_perms
, "%o", &mode
) != 1)
296 /* enqueue default actions for credentials cache */
297 ret
= kcm_ccache_enqueue_default(kcm_context
, ccache
, NULL
);
299 kcm_release_ccache(kcm_context
, &ccache
); /* retained by event queue */
305 kcm_configure(int argc
, char **argv
)
311 while(getarg(args
, num_args
, argc
, argv
, &optind
))
312 warnx("error at argument `%s'", argv
[optind
]);
331 if(config_file
== NULL
)
332 config_file
= _PATH_KCM_CONF
;
334 ret
= krb5_prepend_config_files_default(config_file
, &files
);
336 krb5_err(kcm_context
, 1, ret
, "getting configuration files");
338 ret
= krb5_set_config_files(kcm_context
, files
);
339 krb5_free_config_files(files
);
341 krb5_err(kcm_context
, 1, ret
, "reading configuration files");
345 max_request
= parse_bytes(max_request_str
, NULL
);
347 if(max_request
== 0){
348 p
= krb5_config_get_string (kcm_context
,
354 max_request
= parse_bytes(p
, NULL
);
357 if (system_principal
== NULL
) {
358 system_principal
= kcm_system_config_get_string("principal");
361 if (system_principal
!= NULL
) {
362 ret
= ccache_init_system();
364 krb5_err(kcm_context
, 1, ret
, "initializing system ccache");
368 if(detach_from_console
== -1)
369 detach_from_console
= krb5_config_get_bool_default(kcm_context
, NULL
,
376 max_request
= 64 * 1024;