VERSION: Bump version number up to 4.1.0...
[Samba.git] / source4 / libnet / libnet_export_keytab.c
blob16165b81c7b7232e606e0910ad9baccbe74318e3
1 /*
2 Unix SMB/CIFS implementation.
4 Copyright (C) Andrew Bartlett <abartlet@samba.org> 2009
6 This program is free software; you can redistribute it and/or modify
7 it under the terms of the GNU General Public License as published by
8 the Free Software Foundation; either version 3 of the License, or
9 (at your option) any later version.
11 This program is distributed in the hope that it will be useful,
12 but WITHOUT ANY WARRANTY; without even the implied warranty of
13 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 GNU General Public License for more details.
16 You should have received a copy of the GNU General Public License
17 along with this program. If not, see <http://www.gnu.org/licenses/>.
20 #include "includes.h"
21 #include "system/kerberos.h"
22 #include "auth/kerberos/kerberos.h"
23 #include <hdb.h>
24 #include "kdc/samba_kdc.h"
25 #include "libnet/libnet_export_keytab.h"
27 NTSTATUS libnet_export_keytab(struct libnet_context *ctx, TALLOC_CTX *mem_ctx, struct libnet_export_keytab *r)
29 krb5_error_code ret;
30 struct smb_krb5_context *smb_krb5_context;
31 const char *from_keytab;
33 /* Register hdb-samba4 hooks for use as a keytab */
35 struct samba_kdc_base_context *base_ctx = talloc_zero(mem_ctx, struct samba_kdc_base_context);
36 if (!base_ctx) {
37 return NT_STATUS_NO_MEMORY;
40 base_ctx->ev_ctx = ctx->event_ctx;
41 base_ctx->lp_ctx = ctx->lp_ctx;
43 from_keytab = talloc_asprintf(base_ctx, "HDB:samba4&%p", base_ctx);
44 if (!from_keytab) {
45 return NT_STATUS_NO_MEMORY;
48 ret = smb_krb5_init_context(ctx, ctx->event_ctx, ctx->lp_ctx, &smb_krb5_context);
49 if (ret) {
50 return NT_STATUS_NO_MEMORY;
53 ret = krb5_plugin_register(smb_krb5_context->krb5_context,
54 PLUGIN_TYPE_DATA, "hdb",
55 &hdb_samba4_interface);
56 if(ret) {
57 return NT_STATUS_NO_MEMORY;
60 ret = krb5_kt_register(smb_krb5_context->krb5_context, &hdb_kt_ops);
61 if(ret) {
62 return NT_STATUS_NO_MEMORY;
65 if (r->in.principal) {
66 ret = kt_copy_one_principal(smb_krb5_context->krb5_context, from_keytab, r->in.keytab_name, r->in.principal, 0, samba_all_enctypes());
67 } else {
68 unlink(r->in.keytab_name);
69 ret = kt_copy(smb_krb5_context->krb5_context, from_keytab, r->in.keytab_name);
72 if(ret) {
73 r->out.error_string = smb_get_krb5_error_message(smb_krb5_context->krb5_context,
74 ret, mem_ctx);
75 if (ret == KRB5_KT_NOTFOUND) {
76 return NT_STATUS_NO_SUCH_USER;
77 } else {
78 return NT_STATUS_UNSUCCESSFUL;
81 return NT_STATUS_OK;