2 Unix SMB/CIFS implementation.
4 Winbind daemon - krb5 credential cache funcions
6 Copyright (C) Guenther Deschner 2005
8 This program is free software; you can redistribute it and/or modify
9 it under the terms of the GNU General Public License as published by
10 the Free Software Foundation; either version 2 of the License, or
11 (at your option) any later version.
13 This program is distributed in the hope that it will be useful,
14 but WITHOUT ANY WARRANTY; without even the implied warranty of
15 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16 GNU General Public License for more details.
18 You should have received a copy of the GNU General Public License
19 along with this program; if not, write to the Free Software
20 Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
26 #define DBGC_CLASS DBGC_WINBIND
28 #define MAX_CCACHES 100
30 static struct WINBINDD_CCACHE_ENTRY
*ccache_list
;
32 static TALLOC_CTX
*mem_ctx
;
34 const char *get_ccache_name_by_username(const char *username
)
36 struct WINBINDD_CCACHE_ENTRY
*entry
;
38 for (entry
= ccache_list
; entry
; entry
= entry
->next
) {
39 if (strequal(entry
->username
, username
)) {
46 struct WINBINDD_CCACHE_ENTRY
*get_ccache_by_username(const char *username
)
48 struct WINBINDD_CCACHE_ENTRY
*entry
;
50 for (entry
= ccache_list
; entry
; entry
= entry
->next
) {
51 if (strequal(entry
->username
, username
)) {
58 static int ccache_entry_count(void)
60 struct WINBINDD_CCACHE_ENTRY
*entry
;
63 for (entry
= ccache_list
; entry
; entry
= entry
->next
) {
69 NTSTATUS
remove_ccache_by_ccname(const char *ccname
)
71 struct WINBINDD_CCACHE_ENTRY
*entry
;
73 for (entry
= ccache_list
; entry
; entry
= entry
->next
) {
74 if (strequal(entry
->ccname
, ccname
)) {
75 DLIST_REMOVE(ccache_list
, entry
);
76 TALLOC_FREE(entry
->event
); /* unregisters events */
81 return NT_STATUS_OBJECT_NAME_NOT_FOUND
;
84 static void krb5_ticket_refresh_handler(struct timed_event
*te
,
85 const struct timeval
*now
,
88 struct WINBINDD_CCACHE_ENTRY
*entry
=
89 talloc_get_type_abort(private_data
, struct WINBINDD_CCACHE_ENTRY
);
95 DEBUG(10,("krb5_ticket_refresh_handler called\n"));
96 DEBUGADD(10,("event called for: %s, %s\n", entry
->ccname
, entry
->username
));
98 TALLOC_FREE(entry
->event
);
102 /* Kinit again if we have the user password and we can't renew the old
105 if ((entry
->renew_until
< time(NULL
)) && (entry
->pass
!= NULL
)) {
109 ret
= kerberos_kinit_password_ext(entry
->principal_name
,
111 0, /* hm, can we do time correction here ? */
112 &entry
->refresh_time
,
115 False
, /* no PAC required anymore */
116 WINBINDD_PAM_AUTH_KRB5_RENEW_TIME
);
120 DEBUG(3,("could not re-kinit: %s\n", error_message(ret
)));
121 TALLOC_FREE(entry
->event
);
125 DEBUG(10,("successful re-kinit for: %s in ccache: %s\n",
126 entry
->principal_name
, entry
->ccname
));
128 new_start
= entry
->refresh_time
;
135 ret
= smb_krb5_renew_ticket(entry
->ccname
,
136 entry
->principal_name
,
142 DEBUG(3,("could not renew tickets: %s\n", error_message(ret
)));
143 /* maybe we are beyond the renewing window */
149 t
= timeval_set(new_start
, 0);
151 entry
->event
= add_timed_event(mem_ctx
,
153 "krb5_ticket_refresh_handler",
154 krb5_ticket_refresh_handler
,
160 NTSTATUS
add_ccache_to_list(const char *princ_name
,
163 const char *username
,
164 const char *sid_string
,
170 BOOL schedule_refresh_event
)
172 struct WINBINDD_CCACHE_ENTRY
*new_entry
= NULL
;
175 if ((username
== NULL
&& sid_string
== NULL
&& princ_name
== NULL
) ||
177 return NT_STATUS_INVALID_PARAMETER
;
180 status
= init_ccache_list();
181 if (!NT_STATUS_IS_OK(status
)) {
185 if (mem_ctx
== NULL
) {
186 return NT_STATUS_NO_MEMORY
;
189 if (ccache_entry_count() + 1 > MAX_CCACHES
) {
190 DEBUG(10,("add_ccache_to_list: max number of ccaches reached\n"));
191 return NT_STATUS_NO_MORE_ENTRIES
;
194 new_entry
= TALLOC_P(mem_ctx
, struct WINBINDD_CCACHE_ENTRY
);
195 if (new_entry
== NULL
) {
196 return NT_STATUS_NO_MEMORY
;
199 ZERO_STRUCTP(new_entry
);
202 new_entry
->username
= talloc_strdup(mem_ctx
, username
);
203 NT_STATUS_HAVE_NO_MEMORY(new_entry
->username
);
206 new_entry
->sid_string
= talloc_strdup(mem_ctx
, sid_string
);
207 NT_STATUS_HAVE_NO_MEMORY(new_entry
->sid_string
);
210 new_entry
->principal_name
= talloc_strdup(mem_ctx
, princ_name
);
211 NT_STATUS_HAVE_NO_MEMORY(new_entry
->principal_name
);
214 new_entry
->service
= talloc_strdup(mem_ctx
, service
);
215 NT_STATUS_HAVE_NO_MEMORY(new_entry
->service
);
218 new_entry
->pass
= talloc_strdup(mem_ctx
, pass
);
219 NT_STATUS_HAVE_NO_MEMORY(new_entry
->pass
);
222 new_entry
->create_time
= create_time
;
223 new_entry
->renew_until
= renew_until
;
224 new_entry
->ccname
= talloc_strdup(mem_ctx
, ccname
);
225 if (new_entry
->ccname
== NULL
) {
226 return NT_STATUS_NO_MEMORY
;
228 new_entry
->uid
= uid
;
231 if (schedule_refresh_event
&& renew_until
> 0) {
233 struct timeval t
= timeval_set((ticket_end
-1 ), 0);
235 new_entry
->event
= add_timed_event(mem_ctx
,
237 "krb5_ticket_refresh_handler",
238 krb5_ticket_refresh_handler
,
242 DLIST_ADD(ccache_list
, new_entry
);
244 DEBUG(10,("add_ccache_to_list: added ccache [%s] for user [%s] to the list\n", ccname
, username
));
249 NTSTATUS
destroy_ccache_list(void)
251 return talloc_destroy(mem_ctx
) ? NT_STATUS_OK
: NT_STATUS_UNSUCCESSFUL
;
254 NTSTATUS
init_ccache_list(void)
260 mem_ctx
= talloc_init("winbindd_ccache_krb5_handling");
261 if (mem_ctx
== NULL
) {
262 return NT_STATUS_NO_MEMORY
;
265 ZERO_STRUCTP(ccache_list
);