kuser/kinit.c

   1 /*
   2  * Copyright (c) 1997 Kungliga Tekniska Högskolan
   3  * (Royal Institute of Technology, Stockholm, Sweden).
   4  * All rights reserved.
   5  *
   6  * Redistribution and use in source and binary forms, with or without
   7  * modification, are permitted provided that the following conditions
   8  * are met:
   9  *
  10  * 1. Redistributions of source code must retain the above copyright
  11  *    notice, this list of conditions and the following disclaimer.
  12  *
  13  * 2. Redistributions in binary form must reproduce the above copyright
  14  *    notice, this list of conditions and the following disclaimer in the
  15  *    documentation and/or other materials provided with the distribution.
  16  *
  17  * 3. All advertising materials mentioning features or use of this software
  18  *    must display the following acknowledgement:
  19  *      This product includes software developed by Kungliga Tekniska
  20  *      Högskolan and its contributors.
  21  *
  22  * 4. Neither the name of the Institute nor the names of its contributors
  23  *    may be used to endorse or promote products derived from this software
  24  *    without specific prior written permission.
  25  *
  26  * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
  27  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  28  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  29  * ARE DISCLAIMED.  IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
  30  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  31  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  32  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  33  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  34  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  35  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  36  * SUCH DAMAGE.
  37  */
  38
  39 #include "kuser_locl.h"
  40 RCSID("$Id$");
  41
  42 int forwardable;
  43 int renewable;
  44 int version_flag = 0;
  45 int help_flag = 0;
  46 char *lifetime = NULL;
  47
  48 struct getargs args[] = {
  49     { "forwardable",            'f', arg_flag, &forwardable,
  50       "get forwardable tickets", NULL },
  51     { "renewable",              'r', arg_flag, &renewable,
  52       "get renewable tickets", NULL },
  53     { "lifetime",               'l', arg_string, &lifetime,
  54       "lifetime of tickets", "seconds"},
  55     { "version",                0,   arg_flag, &version_flag,
  56       NULL, NULL },
  57     { "help",                   0,   arg_flag, &help_flag,
  58       NULL, NULL}
  59 };
  60
  61 static void
  62 usage (int ret)
  63 {
  64     arg_printusage (args,
  65                     sizeof(args)/sizeof(*args),
  66                     "[principal]");
  67     exit (ret);
  68 }
  69
  70 int
  71 main (int argc, char **argv)
  72 {
  73     krb5_error_code ret;
  74     krb5_context context;
  75     krb5_ccache  ccache;
  76     krb5_principal principal;
  77     krb5_creds cred;
  78     int optind = 0;
  79     krb5_get_init_creds_opt opt;
  80
  81     set_progname (argv[0]);
  82     memset(&cred, 0, sizeof(cred));
  83
  84     ret = krb5_init_context (&context);
  85     if (ret)
  86         errx(1, "krb5_init_context failed: %u", ret);
  87
  88     if(getarg(args, sizeof(args) / sizeof(args[0]), argc, argv, &optind))
  89         usage(1);
  90
  91     if (help_flag)
  92         usage (0);
  93
  94     if(version_flag)
  95         krb5_errx(context, 0, "%s", heimdal_version);
  96
  97     krb5_get_init_creds_opt_init (&opt);
  98
  99     if (forwardable)
 100         krb5_get_init_creds_opt_set_forwardable (&opt, forwardable);
 101     if (renewable)
 102         krb5_get_init_creds_opt_set_renew_life (&opt, 1 << 30);
 103
 104     if (lifetime) {
 105         int tmp = parse_time (lifetime, NULL);
 106         if (tmp < 0)
 107             errx (1, "unparsable time: %s", lifetime);
 108
 109         krb5_get_init_creds_opt_set_tkt_life (&opt, tmp);
 110     }
 111
 112     argc -= optind;
 113     argv += optind;
 114
 115     if (argc > 1)
 116         usage (1);
 117
 118     ret = krb5_cc_default (context, &ccache);
 119     if (ret)
 120         krb5_err (context, 1, ret, "krb5_cc_default");
 121
 122     if (argv[0]) {
 123         ret = krb5_parse_name (context, argv[0], &principal);
 124         if (ret)
 125             krb5_err (context, 1, ret, "krb5_parse_name");
 126     } else
 127         principal = NULL;
 128
 129     ret = krb5_get_init_creds_password (context,
 130                                         &cred,
 131                                         principal,
 132                                         NULL,
 133                                         krb5_prompter_posix,
 134                                         NULL,
 135                                         0,
 136                                         NULL,
 137                                         &opt);
 138     switch(ret){
 139     case 0:
 140         break;
 141     case KRB5KRB_AP_ERR_BAD_INTEGRITY:
 142     case KRB5KRB_AP_ERR_MODIFIED:
 143         krb5_errx(context, 1, "Password incorrect");
 144         break;
 145     default:
 146         krb5_err(context, 1, ret, "krb5_get_init_creds");
 147     }
 148
 149     ret = krb5_cc_initialize (context, ccache, cred.client);
 150     if (ret)
 151         krb5_err (context, 1, ret, "krb5_cc_initialize");
 152
 153     ret = krb5_cc_store_cred (context, ccache, &cred);
 154     if (ret)
 155         krb5_err (context, 1, ret, "krb5_cc_store_cred");
 156     krb5_free_creds_contents (context, &cred);
 157     krb5_cc_close (context, ccache);
 158     krb5_free_context (context);
 159     return 0;
 160 }