1 /* $NetBSD: load.c,v 1.1.1.2 2014/04/24 12:45:27 pettai Exp $ */
2
3 /*
4 * Copyright (c) 1997-2005 Kungliga Tekniska Högskolan
5 * (Royal Institute of Technology, Stockholm, Sweden).
6 * All rights reserved.
7 *
8 * Redistribution and use in source and binary forms, with or without
9 * modification, are permitted provided that the following conditions
10 * are met:
11 *
12 * 1. Redistributions of source code must retain the above copyright
13 * notice, this list of conditions and the following disclaimer.
14 *
15 * 2. Redistributions in binary form must reproduce the above copyright
16 * notice, this list of conditions and the following disclaimer in the
17 * documentation and/or other materials provided with the distribution.
18 *
19 * 3. Neither the name of the Institute nor the names of its contributors
20 * may be used to endorse or promote products derived from this software
21 * without specific prior written permission.
22 *
23 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
24 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
25 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
26 * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
27 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
28 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
29 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
30 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
31 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
32 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
33 * SUCH DAMAGE.
34 */
35
36 #include "kadmin_locl.h"
37 #include "kadmin-commands.h"
38 #include <kadm5/private.h>
39
40 struct entry {
41 char *principal;
42 char *key;
43 char *max_life;
44 char *max_renew;
45 char *created;
46 char *modified;
47 char *valid_start;
48 char *valid_end;
49 char *pw_end;
50 char *flags;
51 char *generation;
52 char *extensions;
53 };
54
55 static char *
skip_next(char * p)56 skip_next(char *p)
57 {
58 while(*p && !isspace((unsigned char)*p))
59 p++;
60 *p++ = 0;
61 while(*p && isspace((unsigned char)*p))
62 p++;
63 return p;
64 }
65
66 /*
67 * Parse the time in `s', returning:
68 * -1 if error parsing
69 * 0 if none present
70 * 1 if parsed ok
71 */
72
73 static int
parse_time_string(time_t * t,const char * s)74 parse_time_string(time_t *t, const char *s)
75 {
76 int year, month, date, hour, minute, second;
77 struct tm tm;
78
79 if(strcmp(s, "-") == 0)
80 return 0;
81 if(sscanf(s, "%04d%02d%02d%02d%02d%02d",
82 &year, &month, &date, &hour, &minute, &second) != 6)
83 return -1;
84 tm.tm_year = year - 1900;
85 tm.tm_mon = month - 1;
86 tm.tm_mday = date;
87 tm.tm_hour = hour;
88 tm.tm_min = minute;
89 tm.tm_sec = second;
90 tm.tm_isdst = 0;
91 *t = timegm(&tm);
92 return 1;
93 }
94
95 /*
96 * parse time, allocating space in *t if it's there
97 */
98
99 static int
parse_time_string_alloc(time_t ** t,const char * s)100 parse_time_string_alloc (time_t **t, const char *s)
101 {
102 time_t tmp;
103 int ret;
104
105 *t = NULL;
106 ret = parse_time_string (&tmp, s);
107 if (ret == 1) {
108 *t = malloc (sizeof (**t));
109 if (*t == NULL)
110 krb5_errx (context, 1, "malloc: out of memory");
111 **t = tmp;
112 }
113 return ret;
114 }
115
116 /*
117 * see parse_time_string for calling convention
118 */
119
120 static int
parse_integer(unsigned int * u,const char * s)121 parse_integer(unsigned int *u, const char *s)
122 {
123 if(strcmp(s, "-") == 0)
124 return 0;
125 if (sscanf(s, "%u", u) != 1)
126 return -1;
127 return 1;
128 }
129
130 static int
parse_integer_alloc(unsigned int ** u,const char * s)131 parse_integer_alloc (unsigned int **u, const char *s)
132 {
133 unsigned int tmp;
134 int ret;
135
136 *u = NULL;
137 ret = parse_integer (&tmp, s);
138 if (ret == 1) {
139 *u = malloc (sizeof (**u));
140 if (*u == NULL)
141 krb5_errx (context, 1, "malloc: out of memory");
142 **u = tmp;
143 }
144 return ret;
145 }
146
147 /*
148 * Parse dumped keys in `str' and store them in `ent'
149 * return -1 if parsing failed
150 */
151
152 static int
parse_keys(hdb_entry * ent,char * str)153 parse_keys(hdb_entry *ent, char *str)
154 {
155 krb5_error_code ret;
156 int tmp;
157 char *p;
158 size_t i;
159
160 p = strsep(&str, ":");
161 if (sscanf(p, "%d", &tmp) != 1)
162 return 1;
163 ent->kvno = tmp;
164 p = strsep(&str, ":");
165 while(p){
166 Key *key;
167 key = realloc(ent->keys.val,
168 (ent->keys.len + 1) * sizeof(*ent->keys.val));
169 if(key == NULL)
170 krb5_errx (context, 1, "realloc: out of memory");
171 ent->keys.val = key;
172 key = ent->keys.val + ent->keys.len;
173 ent->keys.len++;
174 memset(key, 0, sizeof(*key));
175 if(sscanf(p, "%d", &tmp) == 1) {
176 key->mkvno = malloc(sizeof(*key->mkvno));
177 *key->mkvno = tmp;
178 } else
179 key->mkvno = NULL;
180 p = strsep(&str, ":");
181 if (sscanf(p, "%d", &tmp) != 1)
182 return 1;
183 key->key.keytype = tmp;
184 p = strsep(&str, ":");
185 ret = krb5_data_alloc(&key->key.keyvalue, (strlen(p) - 1) / 2 + 1);
186 if (ret)
187 krb5_err (context, 1, ret, "krb5_data_alloc");
188 for(i = 0; i < strlen(p); i += 2) {
189 if(sscanf(p + i, "%02x", &tmp) != 1)
190 return 1;
191 ((u_char*)key->key.keyvalue.data)[i / 2] = tmp;
192 }
193 p = strsep(&str, ":");
194 if(strcmp(p, "-") != 0){
195 unsigned type;
196 size_t p_len;
197
198 if(sscanf(p, "%u/", &type) != 1)
199 return 1;
200 p = strchr(p, '/');
201 if(p == NULL)
202 return 1;
203 p++;
204 p_len = strlen(p);
205
206 key->salt = calloc(1, sizeof(*key->salt));
207 if (key->salt == NULL)
208 krb5_errx (context, 1, "malloc: out of memory");
209 key->salt->type = type;
210
211 if (p_len) {
212 if(*p == '\"') {
213 ret = krb5_data_copy(&key->salt->salt, p + 1, p_len - 2);
214 if (ret)
215 krb5_err (context, 1, ret, "krb5_data_copy");
216 } else {
217 ret = krb5_data_alloc(&key->salt->salt,
218 (p_len - 1) / 2 + 1);
219 if (ret)
220 krb5_err (context, 1, ret, "krb5_data_alloc");
221 for(i = 0; i < p_len; i += 2){
222 if (sscanf(p + i, "%02x", &tmp) != 1)
223 return 1;
224 ((u_char*)key->salt->salt.data)[i / 2] = tmp;
225 }
226 }
227 } else
228 krb5_data_zero (&key->salt->salt);
229 }
230 p = strsep(&str, ":");
231 }
232 return 0;
233 }
234
235 /*
236 * see parse_time_string for calling convention
237 */
238
239 static int
parse_event(Event * ev,char * s)240 parse_event(Event *ev, char *s)
241 {
242 krb5_error_code ret;
243 char *p;
244
245 if(strcmp(s, "-") == 0)
246 return 0;
247 memset(ev, 0, sizeof(*ev));
248 p = strsep(&s, ":");
249 if(parse_time_string(&ev->time, p) != 1)
250 return -1;
251 p = strsep(&s, ":");
252 ret = krb5_parse_name(context, p, &ev->principal);
253 if (ret)
254 return -1;
255 return 1;
256 }
257
258 static int
parse_event_alloc(Event ** ev,char * s)259 parse_event_alloc (Event **ev, char *s)
260 {
261 Event tmp;
262 int ret;
263
264 *ev = NULL;
265 ret = parse_event (&tmp, s);
266 if (ret == 1) {
267 *ev = malloc (sizeof (**ev));
268 if (*ev == NULL)
269 krb5_errx (context, 1, "malloc: out of memory");
270 **ev = tmp;
271 }
272 return ret;
273 }
274
275 static int
parse_hdbflags2int(HDBFlags * f,const char * s)276 parse_hdbflags2int(HDBFlags *f, const char *s)
277 {
278 int ret;
279 unsigned int tmp;
280
281 ret = parse_integer (&tmp, s);
282 if (ret == 1)
283 *f = int2HDBFlags (tmp);
284 return ret;
285 }
286
287 static int
parse_generation(char * str,GENERATION ** gen)288 parse_generation(char *str, GENERATION **gen)
289 {
290 char *p;
291 int v;
292
293 if(strcmp(str, "-") == 0 || *str == '\0') {
294 *gen = NULL;
295 return 0;
296 }
297 *gen = calloc(1, sizeof(**gen));
298
299 p = strsep(&str, ":");
300 if(parse_time_string(&(*gen)->time, p) != 1)
301 return -1;
302 p = strsep(&str, ":");
303 if(sscanf(p, "%d", &v) != 1)
304 return -1;
305 (*gen)->usec = v;
306 p = strsep(&str, ":");
307 if(sscanf(p, "%d", &v) != 1)
308 return -1;
309 (*gen)->gen = v - 1; /* XXX gets bumped in _hdb_store */
310 return 0;
311 }
312
313 static int
parse_extensions(char * str,HDB_extensions ** e)314 parse_extensions(char *str, HDB_extensions **e)
315 {
316 char *p;
317 int ret;
318
319 if(strcmp(str, "-") == 0 || *str == '\0') {
320 *e = NULL;
321 return 0;
322 }
323 *e = calloc(1, sizeof(**e));
324
325 p = strsep(&str, ":");
326
327 while (p) {
328 HDB_extension ext;
329 ssize_t len;
330 void *d;
331
332 len = strlen(p);
333 d = malloc(len);
334
335 len = hex_decode(p, d, len);
336 if (len < 0) {
337 free(d);
338 return -1;
339 }
340
341 ret = decode_HDB_extension(d, len, &ext, NULL);
342 free(d);
343 if (ret)
344 return -1;
345 d = realloc((*e)->val, ((*e)->len + 1) * sizeof((*e)->val[0]));
346 if (d == NULL)
347 abort();
348 (*e)->val = d;
349 (*e)->val[(*e)->len] = ext;
350 (*e)->len++;
351
352 p = strsep(&str, ":");
353 }
354
355 return 0;
356 }
357
358
359 /*
360 * Parse the dump file in `filename' and create the database (merging
361 * iff merge)
362 */
363
364 static int
doit(const char * filename,int mergep)365 doit(const char *filename, int mergep)
366 {
367 krb5_error_code ret;
368 FILE *f;
369 char s[8192]; /* XXX should fix this properly */
370 char *p;
371 int line;
372 int flags = O_RDWR;
373 struct entry e;
374 hdb_entry_ex ent;
375 HDB *db = _kadm5_s_get_db(kadm_handle);
376
377 f = fopen(filename, "r");
378 if(f == NULL){
379 krb5_warn(context, errno, "fopen(%s)", filename);
380 return 1;
381 }
382 ret = kadm5_log_truncate (kadm_handle);
383 if (ret) {
384 fclose (f);
385 krb5_warn(context, ret, "kadm5_log_truncate");
386 return 1;
387 }
388
389 if(!mergep)
390 flags |= O_CREAT | O_TRUNC;
391 ret = db->hdb_open(context, db, flags, 0600);
392 if(ret){
393 krb5_warn(context, ret, "hdb_open");
394 fclose(f);
395 return 1;
396 }
397 line = 0;
398 ret = 0;
399 while(fgets(s, sizeof(s), f) != NULL) {
400 line++;
401
402 p = s;
403 while (isspace((unsigned char)*p))
404 p++;
405
406 e.principal = p;
407 for(p = s; *p; p++){
408 if(*p == '\\')
409 p++;
410 else if(isspace((unsigned char)*p)) {
411 *p = 0;
412 break;
413 }
414 }
415 p = skip_next(p);
416
417 e.key = p;
418 p = skip_next(p);
419
420 e.created = p;
421 p = skip_next(p);
422
423 e.modified = p;
424 p = skip_next(p);
425
426 e.valid_start = p;
427 p = skip_next(p);
428
429 e.valid_end = p;
430 p = skip_next(p);
431
432 e.pw_end = p;
433 p = skip_next(p);
434
435 e.max_life = p;
436 p = skip_next(p);
437
438 e.max_renew = p;
439 p = skip_next(p);
440
441 e.flags = p;
442 p = skip_next(p);
443
444 e.generation = p;
445 p = skip_next(p);
446
447 e.extensions = p;
448 skip_next(p);
449
450 memset(&ent, 0, sizeof(ent));
451 ret = krb5_parse_name(context, e.principal, &ent.entry.principal);
452 if(ret) {
453 const char *msg = krb5_get_error_message(context, ret);
454 fprintf(stderr, "%s:%d:%s (%s)\n",
455 filename, line, msg, e.principal);
456 krb5_free_error_message(context, msg);
457 continue;
458 }
459
460 if (parse_keys(&ent.entry, e.key)) {
461 fprintf (stderr, "%s:%d:error parsing keys (%s)\n",
462 filename, line, e.key);
463 hdb_free_entry (context, &ent);
464 continue;
465 }
466
467 if (parse_event(&ent.entry.created_by, e.created) == -1) {
468 fprintf (stderr, "%s:%d:error parsing created event (%s)\n",
469 filename, line, e.created);
470 hdb_free_entry (context, &ent);
471 continue;
472 }
473 if (parse_event_alloc (&ent.entry.modified_by, e.modified) == -1) {
474 fprintf (stderr, "%s:%d:error parsing event (%s)\n",
475 filename, line, e.modified);
476 hdb_free_entry (context, &ent);
477 continue;
478 }
479 if (parse_time_string_alloc (&ent.entry.valid_start, e.valid_start) == -1) {
480 fprintf (stderr, "%s:%d:error parsing time (%s)\n",
481 filename, line, e.valid_start);
482 hdb_free_entry (context, &ent);
483 continue;
484 }
485 if (parse_time_string_alloc (&ent.entry.valid_end, e.valid_end) == -1) {
486 fprintf (stderr, "%s:%d:error parsing time (%s)\n",
487 filename, line, e.valid_end);
488 hdb_free_entry (context, &ent);
489 continue;
490 }
491 if (parse_time_string_alloc (&ent.entry.pw_end, e.pw_end) == -1) {
492 fprintf (stderr, "%s:%d:error parsing time (%s)\n",
493 filename, line, e.pw_end);
494 hdb_free_entry (context, &ent);
495 continue;
496 }
497
498 if (parse_integer_alloc (&ent.entry.max_life, e.max_life) == -1) {
499 fprintf (stderr, "%s:%d:error parsing lifetime (%s)\n",
500 filename, line, e.max_life);
501 hdb_free_entry (context, &ent);
502 continue;
503
504 }
505 if (parse_integer_alloc (&ent.entry.max_renew, e.max_renew) == -1) {
506 fprintf (stderr, "%s:%d:error parsing lifetime (%s)\n",
507 filename, line, e.max_renew);
508 hdb_free_entry (context, &ent);
509 continue;
510 }
511
512 if (parse_hdbflags2int (&ent.entry.flags, e.flags) != 1) {
513 fprintf (stderr, "%s:%d:error parsing flags (%s)\n",
514 filename, line, e.flags);
515 hdb_free_entry (context, &ent);
516 continue;
517 }
518
519 if(parse_generation(e.generation, &ent.entry.generation) == -1) {
520 fprintf (stderr, "%s:%d:error parsing generation (%s)\n",
521 filename, line, e.generation);
522 hdb_free_entry (context, &ent);
523 continue;
524 }
525
526 if(parse_extensions(e.extensions, &ent.entry.extensions) == -1) {
527 fprintf (stderr, "%s:%d:error parsing extension (%s)\n",
528 filename, line, e.extensions);
529 hdb_free_entry (context, &ent);
530 continue;
531 }
532
533 ret = db->hdb_store(context, db, HDB_F_REPLACE, &ent);
534 hdb_free_entry (context, &ent);
535 if (ret) {
536 krb5_warn(context, ret, "db_store");
537 break;
538 }
539 }
540 db->hdb_close(context, db);
541 fclose(f);
542 return ret != 0;
543 }
544
545
546 extern int local_flag;
547
548 static int
loadit(int mergep,const char * name,int argc,char ** argv)549 loadit(int mergep, const char *name, int argc, char **argv)
550 {
551 if(!local_flag) {
552 krb5_warnx(context, "%s is only available in local (-l) mode", name);
553 return 0;
554 }
555
556 return doit(argv[0], mergep);
557 }
558
559 int
load(void * opt,int argc,char ** argv)560 load(void *opt, int argc, char **argv)
561 {
562 return loadit(0, "load", argc, argv);
563 }
564
565 int
merge(void * opt,int argc,char ** argv)566 merge(void *opt, int argc, char **argv)
567 {
568 return loadit(1, "merge", argc, argv);
569 }
570