1*0a6a1f1dSLionel Sambuc /* $NetBSD: purge.c,v 1.1.1.2 2014/04/24 12:45:26 pettai Exp $ */
2ebfedea0SLionel Sambuc
3ebfedea0SLionel Sambuc /*
4ebfedea0SLionel Sambuc * Copyright (c) 1997-2004 Kungliga Tekniska Högskolan
5ebfedea0SLionel Sambuc * (Royal Institute of Technology, Stockholm, Sweden).
6ebfedea0SLionel Sambuc * All rights reserved.
7ebfedea0SLionel Sambuc *
8ebfedea0SLionel Sambuc * Redistribution and use in source and binary forms, with or without
9ebfedea0SLionel Sambuc * modification, are permitted provided that the following conditions
10ebfedea0SLionel Sambuc * are met:
11ebfedea0SLionel Sambuc *
12ebfedea0SLionel Sambuc * 1. Redistributions of source code must retain the above copyright
13ebfedea0SLionel Sambuc * notice, this list of conditions and the following disclaimer.
14ebfedea0SLionel Sambuc *
15ebfedea0SLionel Sambuc * 2. Redistributions in binary form must reproduce the above copyright
16ebfedea0SLionel Sambuc * notice, this list of conditions and the following disclaimer in the
17ebfedea0SLionel Sambuc * documentation and/or other materials provided with the distribution.
18ebfedea0SLionel Sambuc *
19ebfedea0SLionel Sambuc * 3. Neither the name of the Institute nor the names of its contributors
20ebfedea0SLionel Sambuc * may be used to endorse or promote products derived from this software
21ebfedea0SLionel Sambuc * without specific prior written permission.
22ebfedea0SLionel Sambuc *
23ebfedea0SLionel Sambuc * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
24ebfedea0SLionel Sambuc * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
25ebfedea0SLionel Sambuc * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
26ebfedea0SLionel Sambuc * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
27ebfedea0SLionel Sambuc * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
28ebfedea0SLionel Sambuc * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
29ebfedea0SLionel Sambuc * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
30ebfedea0SLionel Sambuc * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
31ebfedea0SLionel Sambuc * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
32ebfedea0SLionel Sambuc * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
33ebfedea0SLionel Sambuc * SUCH DAMAGE.
34ebfedea0SLionel Sambuc */
35ebfedea0SLionel Sambuc
36ebfedea0SLionel Sambuc #include "ktutil_locl.h"
37ebfedea0SLionel Sambuc
38*0a6a1f1dSLionel Sambuc __RCSID("NetBSD");
39ebfedea0SLionel Sambuc
40ebfedea0SLionel Sambuc /*
41ebfedea0SLionel Sambuc * keep track of the highest version for every principal.
42ebfedea0SLionel Sambuc */
43ebfedea0SLionel Sambuc
44ebfedea0SLionel Sambuc struct e {
45ebfedea0SLionel Sambuc krb5_principal principal;
46ebfedea0SLionel Sambuc int max_vno;
47ebfedea0SLionel Sambuc time_t timestamp;
48ebfedea0SLionel Sambuc struct e *next;
49ebfedea0SLionel Sambuc };
50ebfedea0SLionel Sambuc
51ebfedea0SLionel Sambuc static struct e *
get_entry(krb5_principal princ,struct e * head)52ebfedea0SLionel Sambuc get_entry (krb5_principal princ, struct e *head)
53ebfedea0SLionel Sambuc {
54ebfedea0SLionel Sambuc struct e *e;
55ebfedea0SLionel Sambuc
56ebfedea0SLionel Sambuc for (e = head; e != NULL; e = e->next)
57ebfedea0SLionel Sambuc if (krb5_principal_compare (context, princ, e->principal))
58ebfedea0SLionel Sambuc return e;
59ebfedea0SLionel Sambuc return NULL;
60ebfedea0SLionel Sambuc }
61ebfedea0SLionel Sambuc
62ebfedea0SLionel Sambuc static void
add_entry(krb5_principal princ,int vno,time_t timestamp,struct e ** head)63ebfedea0SLionel Sambuc add_entry (krb5_principal princ, int vno, time_t timestamp, struct e **head)
64ebfedea0SLionel Sambuc {
65ebfedea0SLionel Sambuc krb5_error_code ret;
66ebfedea0SLionel Sambuc struct e *e;
67ebfedea0SLionel Sambuc
68ebfedea0SLionel Sambuc e = get_entry (princ, *head);
69ebfedea0SLionel Sambuc if (e != NULL) {
70ebfedea0SLionel Sambuc if(e->max_vno < vno) {
71ebfedea0SLionel Sambuc e->max_vno = vno;
72ebfedea0SLionel Sambuc e->timestamp = timestamp;
73ebfedea0SLionel Sambuc }
74ebfedea0SLionel Sambuc return;
75ebfedea0SLionel Sambuc }
76ebfedea0SLionel Sambuc e = malloc (sizeof (*e));
77ebfedea0SLionel Sambuc if (e == NULL)
78ebfedea0SLionel Sambuc krb5_errx (context, 1, "malloc: out of memory");
79ebfedea0SLionel Sambuc ret = krb5_copy_principal (context, princ, &e->principal);
80ebfedea0SLionel Sambuc if (ret)
81ebfedea0SLionel Sambuc krb5_err (context, 1, ret, "krb5_copy_principal");
82ebfedea0SLionel Sambuc e->max_vno = vno;
83ebfedea0SLionel Sambuc e->timestamp = timestamp;
84ebfedea0SLionel Sambuc e->next = *head;
85ebfedea0SLionel Sambuc *head = e;
86ebfedea0SLionel Sambuc }
87ebfedea0SLionel Sambuc
88ebfedea0SLionel Sambuc static void
delete_list(struct e * head)89ebfedea0SLionel Sambuc delete_list (struct e *head)
90ebfedea0SLionel Sambuc {
91ebfedea0SLionel Sambuc while (head != NULL) {
92ebfedea0SLionel Sambuc struct e *next = head->next;
93ebfedea0SLionel Sambuc krb5_free_principal (context, head->principal);
94ebfedea0SLionel Sambuc free (head);
95ebfedea0SLionel Sambuc head = next;
96ebfedea0SLionel Sambuc }
97ebfedea0SLionel Sambuc }
98ebfedea0SLionel Sambuc
99ebfedea0SLionel Sambuc /*
100ebfedea0SLionel Sambuc * Remove all entries that have newer versions and that are older
101ebfedea0SLionel Sambuc * than `age'
102ebfedea0SLionel Sambuc */
103ebfedea0SLionel Sambuc
104ebfedea0SLionel Sambuc int
kt_purge(struct purge_options * opt,int argc,char ** argv)105ebfedea0SLionel Sambuc kt_purge(struct purge_options *opt, int argc, char **argv)
106ebfedea0SLionel Sambuc {
107ebfedea0SLionel Sambuc krb5_error_code ret = 0;
108ebfedea0SLionel Sambuc krb5_kt_cursor cursor;
109ebfedea0SLionel Sambuc krb5_keytab keytab;
110ebfedea0SLionel Sambuc krb5_keytab_entry entry;
111ebfedea0SLionel Sambuc int age;
112ebfedea0SLionel Sambuc struct e *head = NULL;
113ebfedea0SLionel Sambuc time_t judgement_day;
114ebfedea0SLionel Sambuc
115ebfedea0SLionel Sambuc age = parse_time(opt->age_string, "s");
116ebfedea0SLionel Sambuc if(age < 0) {
117ebfedea0SLionel Sambuc krb5_warnx(context, "unparasable time `%s'", opt->age_string);
118ebfedea0SLionel Sambuc return 1;
119ebfedea0SLionel Sambuc }
120ebfedea0SLionel Sambuc
121ebfedea0SLionel Sambuc if((keytab = ktutil_open_keytab()) == NULL)
122ebfedea0SLionel Sambuc return 1;
123ebfedea0SLionel Sambuc
124ebfedea0SLionel Sambuc ret = krb5_kt_start_seq_get(context, keytab, &cursor);
125ebfedea0SLionel Sambuc if(ret){
126ebfedea0SLionel Sambuc krb5_warn(context, ret, "%s", keytab_string);
127ebfedea0SLionel Sambuc goto out;
128ebfedea0SLionel Sambuc }
129ebfedea0SLionel Sambuc
130ebfedea0SLionel Sambuc while(krb5_kt_next_entry(context, keytab, &entry, &cursor) == 0) {
131ebfedea0SLionel Sambuc add_entry (entry.principal, entry.vno, entry.timestamp, &head);
132ebfedea0SLionel Sambuc krb5_kt_free_entry(context, &entry);
133ebfedea0SLionel Sambuc }
134ebfedea0SLionel Sambuc krb5_kt_end_seq_get(context, keytab, &cursor);
135ebfedea0SLionel Sambuc
136ebfedea0SLionel Sambuc judgement_day = time (NULL);
137ebfedea0SLionel Sambuc
138ebfedea0SLionel Sambuc ret = krb5_kt_start_seq_get(context, keytab, &cursor);
139ebfedea0SLionel Sambuc if(ret){
140ebfedea0SLionel Sambuc krb5_warn(context, ret, "%s", keytab_string);
141ebfedea0SLionel Sambuc goto out;
142ebfedea0SLionel Sambuc }
143ebfedea0SLionel Sambuc
144ebfedea0SLionel Sambuc while(krb5_kt_next_entry(context, keytab, &entry, &cursor) == 0) {
145ebfedea0SLionel Sambuc struct e *e = get_entry (entry.principal, head);
146ebfedea0SLionel Sambuc
147ebfedea0SLionel Sambuc if (e == NULL) {
148ebfedea0SLionel Sambuc krb5_warnx (context, "ignoring extra entry");
149ebfedea0SLionel Sambuc continue;
150ebfedea0SLionel Sambuc }
151ebfedea0SLionel Sambuc
152ebfedea0SLionel Sambuc if (entry.vno < e->max_vno
153ebfedea0SLionel Sambuc && judgement_day - e->timestamp > age) {
154ebfedea0SLionel Sambuc if (verbose_flag) {
155ebfedea0SLionel Sambuc char *name_str;
156ebfedea0SLionel Sambuc
157ebfedea0SLionel Sambuc krb5_unparse_name (context, entry.principal, &name_str);
158ebfedea0SLionel Sambuc printf ("removing %s vno %d\n", name_str, entry.vno);
159ebfedea0SLionel Sambuc free (name_str);
160ebfedea0SLionel Sambuc }
161ebfedea0SLionel Sambuc ret = krb5_kt_remove_entry (context, keytab, &entry);
162ebfedea0SLionel Sambuc if (ret)
163ebfedea0SLionel Sambuc krb5_warn (context, ret, "remove");
164ebfedea0SLionel Sambuc }
165ebfedea0SLionel Sambuc krb5_kt_free_entry(context, &entry);
166ebfedea0SLionel Sambuc }
167ebfedea0SLionel Sambuc ret = krb5_kt_end_seq_get(context, keytab, &cursor);
168ebfedea0SLionel Sambuc
169ebfedea0SLionel Sambuc delete_list (head);
170ebfedea0SLionel Sambuc
171ebfedea0SLionel Sambuc out:
172ebfedea0SLionel Sambuc krb5_kt_close (context, keytab);
173ebfedea0SLionel Sambuc return ret != 0;
174ebfedea0SLionel Sambuc }
175