2 * Copyright (c) 1999-2006 Kungliga Tekniska Högskolan
3 * (Royal Institute of Technology, Stockholm, Sweden).
6 * Redistribution and use in source and binary forms, with or without
7 * modification, are permitted provided that the following conditions
10 * 1. Redistributions of source code must retain the above copyright
11 * notice, this list of conditions and the following disclaimer.
13 * 2. Redistributions in binary form must reproduce the above copyright
14 * notice, this list of conditions and the following disclaimer in the
15 * documentation and/or other materials provided with the distribution.
17 * 3. Neither the name of the Institute nor the names of its contributors
18 * may be used to endorse or promote products derived from this software
19 * without specific prior written permission.
21 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
24 * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
34 #include "kadmin_locl.h"
35 #include "kadmin-commands.h"
40 * del_enctype principal enctypes...
44 add_enctype(struct add_enctype_options
*opt
, int argc
, char **argv
)
46 kadm5_principal_ent_rec princ
;
47 krb5_principal princ_ent
= NULL
;
49 const char *princ_name
;
51 krb5_key_data
*new_key_data
;
55 if (!opt
->random_key_flag
) {
56 krb5_warnx (context
, "only random key is supported now");
60 memset (&princ
, 0, sizeof(princ
));
63 etypes
= malloc (n_etypes
* sizeof(*etypes
));
65 krb5_warnx (context
, "out of memory");
69 for (i
= 0; i
< n_etypes
; ++i
) {
70 ret
= krb5_string_to_enctype (context
, argv
[i
], &etypes
[i
]);
72 krb5_warnx (context
, "bad enctype \"%s\"", argv
[i
]);
77 ret
= krb5_parse_name(context
, princ_name
, &princ_ent
);
79 krb5_warn (context
, ret
, "krb5_parse_name %s", princ_name
);
83 ret
= kadm5_get_principal(kadm_handle
, princ_ent
, &princ
,
84 KADM5_PRINCIPAL
| KADM5_KEY_DATA
);
86 krb5_free_principal (context
, princ_ent
);
87 krb5_warnx (context
, "no such principal: %s", princ_name
);
91 new_key_data
= malloc((princ
.n_key_data
+ n_etypes
)
92 * sizeof(*new_key_data
));
93 if (new_key_data
== NULL
) {
94 krb5_warnx (context
, "out of memory");
98 for (i
= 0; i
< princ
.n_key_data
; ++i
) {
99 krb5_key_data
*key
= &princ
.key_data
[i
];
101 for (j
= 0; j
< n_etypes
; ++j
) {
102 if (etypes
[j
] == key
->key_data_type
[0]) {
103 krb5_warnx(context
, "enctype %d already exists",
108 new_key_data
[i
] = *key
;
111 for (i
= 0; i
< n_etypes
; ++i
) {
112 int n
= princ
.n_key_data
+ i
;
113 krb5_keyblock keyblock
;
115 memset(&new_key_data
[n
], 0, sizeof(new_key_data
[n
]));
116 new_key_data
[n
].key_data_ver
= 2;
117 new_key_data
[n
].key_data_kvno
= 0;
119 ret
= krb5_generate_random_keyblock (context
, etypes
[i
], &keyblock
);
121 krb5_warnx(context
, "genernate enctype %d failed", (int)etypes
[i
]);
123 free(new_key_data
[--n
].key_data_contents
[0]);
128 new_key_data
[n
].key_data_type
[0] = etypes
[i
];
129 new_key_data
[n
].key_data_contents
[0] = malloc(keyblock
.keyvalue
.length
);
130 if (new_key_data
[n
].key_data_contents
[0] == NULL
) {
132 krb5_warn(context
, ret
, "out of memory");
134 free(new_key_data
[--n
].key_data_contents
[0]);
137 new_key_data
[n
].key_data_length
[0] = keyblock
.keyvalue
.length
;
138 memcpy(new_key_data
[n
].key_data_contents
[0],
139 keyblock
.keyvalue
.data
,
140 keyblock
.keyvalue
.length
);
141 krb5_free_keyblock_contents(context
, &keyblock
);
144 new_key_data
[n
].key_data_type
[1] = KRB5_PW_SALT
;
145 new_key_data
[n
].key_data_length
[1] = 0;
146 new_key_data
[n
].key_data_contents
[1] = NULL
;
150 free (princ
.key_data
);
151 princ
.n_key_data
+= n_etypes
;
152 princ
.key_data
= new_key_data
;
155 ret
= kadm5_modify_principal (kadm_handle
, &princ
, KADM5_KEY_DATA
);
157 krb5_warn(context
, ret
, "kadm5_modify_principal");
159 krb5_free_principal (context
, princ_ent
);
160 kadm5_free_principal_ent(kadm_handle
, &princ
);