2 * Copyright (c) 1997-2022 Kungliga Tekniska Högskolan
3 * (Royal Institute of Technology, Stockholm, Sweden).
6 * Redistribution and use in source and binary forms, with or without
7 * modification, are permitted provided that the following conditions
10 * 1. Redistributions of source code must retain the above copyright
11 * notice, this list of conditions and the following disclaimer.
13 * 2. Redistributions in binary form must reproduce the above copyright
14 * notice, this list of conditions and the following disclaimer in the
15 * documentation and/or other materials provided with the distribution.
17 * 3. Neither the name of the Institute nor the names of its contributors
18 * may be used to endorse or promote products derived from this software
19 * without specific prior written permission.
21 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
24 * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
34 #include "ktutil_locl.h"
41 do_list(struct list_options
*opt
, const char *keytab_str
)
45 krb5_keytab_entry entry
;
46 krb5_kt_cursor cursor
;
49 /* XXX specialcase the ANY type */
50 if(strncasecmp(keytab_str
, "ANY:", 4) == 0) {
55 while (strsep_copy((const char**)&keytab_str
, ",",
56 buf
, sizeof(buf
)) != -1) {
66 ret
= krb5_kt_resolve(context
, keytab_str
, &keytab
);
68 krb5_warn(context
, ret
, "resolving keytab %s", keytab_str
);
72 ret
= krb5_kt_start_seq_get(context
, keytab
, &cursor
);
74 krb5_warn(context
, ret
, "krb5_kt_start_seq_get %s", keytab_str
);
75 krb5_kt_close(context
, keytab
);
79 printf ("%s:\n\n", keytab_str
);
81 table
= rtbl_create();
82 rtbl_add_column_by_id(table
, 0, "Vno", RTBL_ALIGN_RIGHT
);
83 rtbl_add_column_by_id(table
, 1, "Type", 0);
84 rtbl_add_column_by_id(table
, 2, "Principal", 0);
85 if (opt
->timestamp_flag
)
86 rtbl_add_column_by_id(table
, 3, "Date", 0);
88 rtbl_add_column_by_id(table
, 4, "Key", 0);
89 rtbl_add_column_by_id(table
, 5, "Aliases", 0);
90 rtbl_set_separator(table
, " ");
92 while(krb5_kt_next_entry(context
, keytab
, &entry
, &cursor
) == 0){
95 snprintf(buf
, sizeof(buf
), "%d", entry
.vno
);
96 rtbl_add_column_entry_by_id(table
, 0, buf
);
98 ret
= krb5_enctype_to_string(context
,
99 entry
.keyblock
.keytype
, &s
);
101 snprintf(buf
, sizeof(buf
), "unknown (%d)", entry
.keyblock
.keytype
);
102 rtbl_add_column_entry_by_id(table
, 1, buf
);
104 rtbl_add_column_entry_by_id(table
, 1, s
);
108 krb5_unparse_name_fixed(context
, entry
.principal
, buf
, sizeof(buf
));
109 rtbl_add_column_entry_by_id(table
, 2, buf
);
111 if (opt
->timestamp_flag
) {
112 krb5_format_time(context
, entry
.timestamp
, buf
,
114 rtbl_add_column_entry_by_id(table
, 3, buf
);
118 s
= malloc(2 * entry
.keyblock
.keyvalue
.length
+ 1);
120 krb5_warnx(context
, "malloc failed");
124 for(i
= 0; i
< entry
.keyblock
.keyvalue
.length
; i
++)
125 snprintf(s
+ 2 * i
, 3, "%02x",
126 ((unsigned char*)entry
.keyblock
.keyvalue
.data
)[i
]);
127 rtbl_add_column_entry_by_id(table
, 4, s
);
132 struct rk_strpool
*p
= NULL
;
134 for (i
= 0; i
< entry
.aliases
->len
; i
++) {
135 krb5_unparse_name_fixed(context
, &entry
.aliases
->val
[i
],
137 p
= rk_strpoolprintf(p
, "%s%s", buf
,
138 i
+ 1 < entry
.aliases
->len
? ", " : "");
141 rtbl_add_column_entry_by_id(table
, 5, (s
= rk_strpoolcollect(p
)));
145 krb5_kt_free_entry(context
, &entry
);
147 ret
= krb5_kt_end_seq_get(context
, keytab
, &cursor
);
148 rtbl_format(table
, stdout
);
153 krb5_kt_close(context
, keytab
);
158 do_list1_json(struct list_options
*opt
,
159 const char *keytab_str
,
164 krb5_keytab_entry entry
;
165 krb5_kt_cursor cursor
;
167 ret
= krb5_kt_resolve(context
, keytab_str
, &keytab
);
169 krb5_warn(context
, ret
, "resolving keytab %s", keytab_str
);
173 ret
= krb5_kt_start_seq_get(context
, keytab
, &cursor
);
175 krb5_warn(context
, ret
, "krb5_kt_start_seq_get %s", keytab_str
);
176 krb5_kt_close(context
, keytab
);
180 //if (opt->timestamp_flag)
181 //if (opt->keys_flag)
183 while (krb5_kt_next_entry(context
, keytab
, &entry
, &cursor
) == 0) {
184 heim_dict_t d
= heim_dict_create(5);
188 heim_array_append_value(a
, d
);
189 heim_dict_set_value(d
, HSTR("keytab"),
190 o
= heim_string_create(keytab_str
)); heim_release(o
);
191 heim_dict_set_value(d
, HSTR("kvno"), o
= heim_number_create(entry
.vno
));
193 heim_dict_set_value(d
, HSTR("enctype_number"),
194 o
= heim_number_create(entry
.keyblock
.keytype
));
196 heim_dict_set_value(d
, HSTR("flags"),
197 o
= heim_number_create(entry
.flags
));
199 ret
= krb5_enctype_to_string(context
, entry
.keyblock
.keytype
, &s
);
201 heim_dict_set_value(d
, HSTR("enctype"), o
= heim_string_create(s
));
205 heim_dict_set_value(d
, HSTR("timestamp"),
206 o
= heim_number_create(entry
.timestamp
));
209 ret
= krb5_unparse_name(context
, entry
.principal
, &s
);
211 krb5_err(context
, 1, ret
, "Could not format principal");
212 heim_dict_set_value(d
, HSTR("principal"), o
= heim_string_create(s
));
216 if (opt
->keys_flag
) {
217 o
= heim_data_create(entry
.keyblock
.keyvalue
.data
,
218 entry
.keyblock
.keyvalue
.length
);
219 heim_dict_set_value(d
, HSTR("key"), o
);
223 heim_array_t aliases
= heim_array_create();
226 for (i
= 0; i
< entry
.aliases
->len
; i
++) {
227 ret
= krb5_unparse_name(context
, &entry
.aliases
->val
[i
], &s
);
229 krb5_err(context
, 1, ret
, "Could not format principal");
230 heim_array_append_value(aliases
, o
= heim_string_create(s
));
234 heim_dict_set_value(d
, HSTR("aliases"), aliases
);
235 heim_release(aliases
);
238 krb5_kt_free_entry(context
, &entry
);
242 ret
= krb5_kt_end_seq_get(context
, keytab
, &cursor
);
243 krb5_kt_close(context
, keytab
);
248 do_list_json(struct list_options
*opt
, const char *keytab_str
)
250 krb5_error_code ret
= 0;
251 heim_json_flags_t flags
=
252 (HEIM_JSON_F_STRICT
| HEIM_JSON_F_INDENT2
| HEIM_JSON_F_NO_DATA_DICT
) &
253 ~HEIM_JSON_F_NO_DATA
;
254 heim_array_t a
= heim_array_create();
258 * Special-case the ANY: keytab type. What do we get from this? We get to
259 * include the actual keytab name for each entry in its JSON
260 * representation. Otherwise there would be no point because the ANY:
261 * keytab type iterates all the keytabs it joins.
263 * Why strncasecmp() though? Because do_list() uses it, though it arguably
266 if (strncasecmp(keytab_str
, "ANY:", 4) == 0) {
271 while (strsep_copy((const char**)&keytab_str
, ",",
272 buf
, sizeof(buf
)) != -1) {
273 if (do_list1_json(opt
, buf
, a
))
277 ret
= do_list1_json(opt
, keytab_str
, a
);
280 s
= heim_json_copy_serialize(a
, flags
, NULL
);
281 printf("%s", heim_string_get_utf8(s
));
288 kt_list(struct list_options
*opt
, int argc
, char **argv
)
294 opt
->timestamp_flag
= 1;
296 if (keytab_string
== NULL
) {
297 if((ret
= krb5_kt_default_name(context
, kt
, sizeof(kt
))) != 0) {
298 krb5_warn(context
, ret
, "getting default keytab name");
304 return do_list_json(opt
, keytab_string
) != 0;
305 return do_list(opt
, keytab_string
) != 0;