1bbd80c28SJacques Vidrine /*
2c19800e8SDoug Rabson * Copyright (c) 2003 - 2007 Kungliga Tekniska Högskolan
3bbd80c28SJacques Vidrine * (Royal Institute of Technology, Stockholm, Sweden).
4bbd80c28SJacques Vidrine * All rights reserved.
5bbd80c28SJacques Vidrine *
6bbd80c28SJacques Vidrine * Redistribution and use in source and binary forms, with or without
7bbd80c28SJacques Vidrine * modification, are permitted provided that the following conditions
8bbd80c28SJacques Vidrine * are met:
9bbd80c28SJacques Vidrine *
10bbd80c28SJacques Vidrine * 1. Redistributions of source code must retain the above copyright
11bbd80c28SJacques Vidrine * notice, this list of conditions and the following disclaimer.
12bbd80c28SJacques Vidrine *
13bbd80c28SJacques Vidrine * 2. Redistributions in binary form must reproduce the above copyright
14bbd80c28SJacques Vidrine * notice, this list of conditions and the following disclaimer in the
15bbd80c28SJacques Vidrine * documentation and/or other materials provided with the distribution.
16bbd80c28SJacques Vidrine *
17bbd80c28SJacques Vidrine * 3. Neither the name of KTH nor the names of its contributors may be
18bbd80c28SJacques Vidrine * used to endorse or promote products derived from this software without
19bbd80c28SJacques Vidrine * specific prior written permission.
20bbd80c28SJacques Vidrine *
21bbd80c28SJacques Vidrine * THIS SOFTWARE IS PROVIDED BY KTH AND ITS CONTRIBUTORS ``AS IS'' AND ANY
22bbd80c28SJacques Vidrine * EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23bbd80c28SJacques Vidrine * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
24bbd80c28SJacques Vidrine * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL KTH OR ITS CONTRIBUTORS BE
25bbd80c28SJacques Vidrine * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
26bbd80c28SJacques Vidrine * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
27bbd80c28SJacques Vidrine * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
28bbd80c28SJacques Vidrine * BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
29bbd80c28SJacques Vidrine * WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR
30bbd80c28SJacques Vidrine * OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF
31bbd80c28SJacques Vidrine * ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. */
32bbd80c28SJacques Vidrine
33bbd80c28SJacques Vidrine #include "krb5_locl.h"
34c19800e8SDoug Rabson #include <getarg.h>
35bbd80c28SJacques Vidrine #include <err.h>
36bbd80c28SJacques Vidrine
37c19800e8SDoug Rabson static int debug_flag = 0;
38bbd80c28SJacques Vidrine static int version_flag = 0;
39c19800e8SDoug Rabson static int help_flag = 0;
40c19800e8SDoug Rabson
41c19800e8SDoug Rabson #ifdef KRB5_USE_PATH_TOKENS
42bbd80c28SJacques Vidrine #define TEST_CC_NAME "%{TEMP}/krb5-cc-test-foo"
43c19800e8SDoug Rabson #else
44c19800e8SDoug Rabson #define TEST_CC_NAME "/tmp/krb5-cc-test-foo"
45bbd80c28SJacques Vidrine #endif
46bbd80c28SJacques Vidrine
47c19800e8SDoug Rabson static void
test_default_name(krb5_context context)48bbd80c28SJacques Vidrine test_default_name(krb5_context context)
49bbd80c28SJacques Vidrine {
50bbd80c28SJacques Vidrine krb5_error_code ret;
51bbd80c28SJacques Vidrine const char *p, *test_cc_name = TEST_CC_NAME;
52bbd80c28SJacques Vidrine char *p1, *p2, *p3;
53bbd80c28SJacques Vidrine
54bbd80c28SJacques Vidrine p = krb5_cc_default_name(context);
55bbd80c28SJacques Vidrine if (p == NULL)
56bbd80c28SJacques Vidrine krb5_errx (context, 1, "krb5_cc_default_name 1 failed");
57bbd80c28SJacques Vidrine p1 = estrdup(p);
58bbd80c28SJacques Vidrine
59bbd80c28SJacques Vidrine ret = krb5_cc_set_default_name(context, NULL);
60bbd80c28SJacques Vidrine if (p == NULL)
61bbd80c28SJacques Vidrine krb5_errx (context, 1, "krb5_cc_set_default_name failed");
62bbd80c28SJacques Vidrine
63bbd80c28SJacques Vidrine p = krb5_cc_default_name(context);
64bbd80c28SJacques Vidrine if (p == NULL)
65bbd80c28SJacques Vidrine krb5_errx (context, 1, "krb5_cc_default_name 2 failed");
66bbd80c28SJacques Vidrine p2 = estrdup(p);
67c19800e8SDoug Rabson
68bbd80c28SJacques Vidrine if (strcmp(p1, p2) != 0)
69bbd80c28SJacques Vidrine krb5_errx (context, 1, "krb5_cc_default_name no longer same");
70bbd80c28SJacques Vidrine
71bbd80c28SJacques Vidrine ret = krb5_cc_set_default_name(context, test_cc_name);
72bbd80c28SJacques Vidrine if (p == NULL)
73bbd80c28SJacques Vidrine krb5_errx (context, 1, "krb5_cc_set_default_name 1 failed");
74bbd80c28SJacques Vidrine
75bbd80c28SJacques Vidrine p = krb5_cc_default_name(context);
76c19800e8SDoug Rabson if (p == NULL)
77bbd80c28SJacques Vidrine krb5_errx (context, 1, "krb5_cc_default_name 2 failed");
78bbd80c28SJacques Vidrine p3 = estrdup(p);
79c19800e8SDoug Rabson
80c19800e8SDoug Rabson #ifndef KRB5_USE_PATH_TOKENS
81c19800e8SDoug Rabson /* If we are using path tokens, we don't expect the p3 and
82c19800e8SDoug Rabson test_cc_name to match since p3 is going to have expanded
83c19800e8SDoug Rabson tokens. */
84c19800e8SDoug Rabson if (strcmp(p3, test_cc_name) != 0)
85c19800e8SDoug Rabson krb5_errx (context, 1, "krb5_cc_set_default_name 1 failed");
86c19800e8SDoug Rabson #endif
87c19800e8SDoug Rabson
88c19800e8SDoug Rabson free(p1);
89c19800e8SDoug Rabson free(p2);
90c19800e8SDoug Rabson free(p3);
91c19800e8SDoug Rabson }
92c19800e8SDoug Rabson
93c19800e8SDoug Rabson /*
94c19800e8SDoug Rabson * Check that a closed cc still keeps it data and that it's no longer
95c19800e8SDoug Rabson * there when it's destroyed.
96c19800e8SDoug Rabson */
97c19800e8SDoug Rabson
98c19800e8SDoug Rabson static void
test_mcache(krb5_context context)99c19800e8SDoug Rabson test_mcache(krb5_context context)
100c19800e8SDoug Rabson {
101c19800e8SDoug Rabson krb5_error_code ret;
102c19800e8SDoug Rabson krb5_ccache id, id2;
103c19800e8SDoug Rabson const char *nc, *tc;
104c19800e8SDoug Rabson char *c;
105c19800e8SDoug Rabson krb5_principal p, p2;
106c19800e8SDoug Rabson
107c19800e8SDoug Rabson ret = krb5_parse_name(context, "lha@SU.SE", &p);
108c19800e8SDoug Rabson if (ret)
109c19800e8SDoug Rabson krb5_err(context, 1, ret, "krb5_parse_name");
110c19800e8SDoug Rabson
111c19800e8SDoug Rabson ret = krb5_cc_new_unique(context, krb5_cc_type_memory, NULL, &id);
112c19800e8SDoug Rabson if (ret)
113c19800e8SDoug Rabson krb5_err(context, 1, ret, "krb5_cc_new_unique");
114c19800e8SDoug Rabson
115c19800e8SDoug Rabson ret = krb5_cc_initialize(context, id, p);
116c19800e8SDoug Rabson if (ret)
117c19800e8SDoug Rabson krb5_err(context, 1, ret, "krb5_cc_initialize");
118c19800e8SDoug Rabson
119c19800e8SDoug Rabson nc = krb5_cc_get_name(context, id);
120c19800e8SDoug Rabson if (nc == NULL)
121c19800e8SDoug Rabson krb5_errx(context, 1, "krb5_cc_get_name");
122c19800e8SDoug Rabson
123c19800e8SDoug Rabson tc = krb5_cc_get_type(context, id);
124c19800e8SDoug Rabson if (tc == NULL)
125c19800e8SDoug Rabson krb5_errx(context, 1, "krb5_cc_get_name");
126c19800e8SDoug Rabson
127c19800e8SDoug Rabson if (asprintf(&c, "%s:%s", tc, nc) < 0 || c == NULL)
128c19800e8SDoug Rabson errx(1, "malloc");
129c19800e8SDoug Rabson
130c19800e8SDoug Rabson krb5_cc_close(context, id);
131c19800e8SDoug Rabson
132c19800e8SDoug Rabson ret = krb5_cc_resolve(context, c, &id2);
133c19800e8SDoug Rabson if (ret)
134c19800e8SDoug Rabson krb5_err(context, 1, ret, "krb5_cc_resolve");
135c19800e8SDoug Rabson
136c19800e8SDoug Rabson ret = krb5_cc_get_principal(context, id2, &p2);
137c19800e8SDoug Rabson if (ret)
138c19800e8SDoug Rabson krb5_err(context, 1, ret, "krb5_cc_get_principal");
139c19800e8SDoug Rabson
140c19800e8SDoug Rabson if (krb5_principal_compare(context, p, p2) == FALSE)
141c19800e8SDoug Rabson krb5_errx(context, 1, "p != p2");
142c19800e8SDoug Rabson
143c19800e8SDoug Rabson krb5_cc_destroy(context, id2);
144c19800e8SDoug Rabson krb5_free_principal(context, p);
145c19800e8SDoug Rabson krb5_free_principal(context, p2);
146c19800e8SDoug Rabson
147c19800e8SDoug Rabson ret = krb5_cc_resolve(context, c, &id2);
148c19800e8SDoug Rabson if (ret)
149c19800e8SDoug Rabson krb5_err(context, 1, ret, "krb5_cc_resolve");
150c19800e8SDoug Rabson
151c19800e8SDoug Rabson ret = krb5_cc_get_principal(context, id2, &p2);
152c19800e8SDoug Rabson if (ret == 0)
153c19800e8SDoug Rabson krb5_errx(context, 1, "krb5_cc_get_principal");
154c19800e8SDoug Rabson
155c19800e8SDoug Rabson krb5_cc_destroy(context, id2);
156c19800e8SDoug Rabson free(c);
157c19800e8SDoug Rabson }
158c19800e8SDoug Rabson
159c19800e8SDoug Rabson /*
160c19800e8SDoug Rabson * Test that init works on a destroyed cc.
161c19800e8SDoug Rabson */
162c19800e8SDoug Rabson
163c19800e8SDoug Rabson static void
test_init_vs_destroy(krb5_context context,const char * type)164c19800e8SDoug Rabson test_init_vs_destroy(krb5_context context, const char *type)
165c19800e8SDoug Rabson {
166c19800e8SDoug Rabson krb5_error_code ret;
167c19800e8SDoug Rabson krb5_ccache id, id2;
168c19800e8SDoug Rabson krb5_principal p, p2;
169c19800e8SDoug Rabson char *n = NULL;
170c19800e8SDoug Rabson
171c19800e8SDoug Rabson ret = krb5_parse_name(context, "lha@SU.SE", &p);
172c19800e8SDoug Rabson if (ret)
173c19800e8SDoug Rabson krb5_err(context, 1, ret, "krb5_parse_name");
174c19800e8SDoug Rabson
175c19800e8SDoug Rabson ret = krb5_cc_new_unique(context, type, NULL, &id);
176c19800e8SDoug Rabson if (ret)
177c19800e8SDoug Rabson krb5_err(context, 1, ret, "krb5_cc_new_unique: %s", type);
178c19800e8SDoug Rabson
179c19800e8SDoug Rabson if (asprintf(&n, "%s:%s",
180c19800e8SDoug Rabson krb5_cc_get_type(context, id),
181c19800e8SDoug Rabson krb5_cc_get_name(context, id)) < 0 || n == NULL)
182c19800e8SDoug Rabson errx(1, "malloc");
183c19800e8SDoug Rabson
184c19800e8SDoug Rabson
185c19800e8SDoug Rabson ret = krb5_cc_resolve(context, n, &id2);
186c19800e8SDoug Rabson free(n);
187c19800e8SDoug Rabson if (ret)
188c19800e8SDoug Rabson krb5_err(context, 1, ret, "krb5_cc_resolve");
189c19800e8SDoug Rabson
190c19800e8SDoug Rabson krb5_cc_destroy(context, id);
191c19800e8SDoug Rabson
192c19800e8SDoug Rabson ret = krb5_cc_initialize(context, id2, p);
193c19800e8SDoug Rabson if (ret)
194c19800e8SDoug Rabson krb5_err(context, 1, ret, "krb5_cc_initialize");
195c19800e8SDoug Rabson
196c19800e8SDoug Rabson ret = krb5_cc_get_principal(context, id2, &p2);
197c19800e8SDoug Rabson if (ret)
198c19800e8SDoug Rabson krb5_err(context, 1, ret, "krb5_cc_get_principal");
199c19800e8SDoug Rabson
200c19800e8SDoug Rabson krb5_cc_destroy(context, id2);
201c19800e8SDoug Rabson krb5_free_principal(context, p);
202c19800e8SDoug Rabson krb5_free_principal(context, p2);
203c19800e8SDoug Rabson }
204c19800e8SDoug Rabson
205c19800e8SDoug Rabson static void
test_cache_remove(krb5_context context,const char * type)206c19800e8SDoug Rabson test_cache_remove(krb5_context context, const char *type)
207c19800e8SDoug Rabson {
208c19800e8SDoug Rabson krb5_error_code ret;
209c19800e8SDoug Rabson krb5_ccache id;
210c19800e8SDoug Rabson krb5_principal p;
211c19800e8SDoug Rabson krb5_creds cred;
212c19800e8SDoug Rabson
213c19800e8SDoug Rabson ret = krb5_parse_name(context, "lha@SU.SE", &p);
214c19800e8SDoug Rabson if (ret)
215c19800e8SDoug Rabson krb5_err(context, 1, ret, "krb5_parse_name");
216c19800e8SDoug Rabson
217c19800e8SDoug Rabson ret = krb5_cc_new_unique(context, type, NULL, &id);
218c19800e8SDoug Rabson if (ret)
219c19800e8SDoug Rabson krb5_err(context, 1, ret, "krb5_cc_gen_new: %s", type);
220c19800e8SDoug Rabson
221c19800e8SDoug Rabson ret = krb5_cc_initialize(context, id, p);
222c19800e8SDoug Rabson if (ret)
223c19800e8SDoug Rabson krb5_err(context, 1, ret, "krb5_cc_initialize");
224c19800e8SDoug Rabson
225c19800e8SDoug Rabson /* */
226c19800e8SDoug Rabson memset(&cred, 0, sizeof(cred));
227c19800e8SDoug Rabson ret = krb5_parse_name(context, "krbtgt/SU.SE@SU.SE", &cred.server);
228c19800e8SDoug Rabson if (ret)
229c19800e8SDoug Rabson krb5_err(context, 1, ret, "krb5_parse_name");
230c19800e8SDoug Rabson ret = krb5_parse_name(context, "lha@SU.SE", &cred.client);
231c19800e8SDoug Rabson if (ret)
232c19800e8SDoug Rabson krb5_err(context, 1, ret, "krb5_parse_name");
233c19800e8SDoug Rabson
234c19800e8SDoug Rabson ret = krb5_cc_store_cred(context, id, &cred);
235c19800e8SDoug Rabson if (ret)
236c19800e8SDoug Rabson krb5_err(context, 1, ret, "krb5_cc_store_cred");
237c19800e8SDoug Rabson
238c19800e8SDoug Rabson ret = krb5_cc_remove_cred(context, id, 0, &cred);
239c19800e8SDoug Rabson if (ret)
240c19800e8SDoug Rabson krb5_err(context, 1, ret, "krb5_cc_remove_cred");
241c19800e8SDoug Rabson
242c19800e8SDoug Rabson ret = krb5_cc_destroy(context, id);
243c19800e8SDoug Rabson if (ret)
244c19800e8SDoug Rabson krb5_err(context, 1, ret, "krb5_cc_destroy");
245c19800e8SDoug Rabson
246c19800e8SDoug Rabson krb5_free_principal(context, p);
247c19800e8SDoug Rabson krb5_free_principal(context, cred.server);
248c19800e8SDoug Rabson krb5_free_principal(context, cred.client);
249c19800e8SDoug Rabson }
250c19800e8SDoug Rabson
251c19800e8SDoug Rabson static void
test_mcc_default(void)252c19800e8SDoug Rabson test_mcc_default(void)
253c19800e8SDoug Rabson {
254c19800e8SDoug Rabson krb5_context context;
255c19800e8SDoug Rabson krb5_error_code ret;
256c19800e8SDoug Rabson krb5_ccache id, id2;
257c19800e8SDoug Rabson int i;
258c19800e8SDoug Rabson
259c19800e8SDoug Rabson for (i = 0; i < 10; i++) {
260c19800e8SDoug Rabson
261c19800e8SDoug Rabson ret = krb5_init_context(&context);
262c19800e8SDoug Rabson if (ret)
263c19800e8SDoug Rabson krb5_err(context, 1, ret, "krb5_init_context");
264c19800e8SDoug Rabson
265c19800e8SDoug Rabson ret = krb5_cc_set_default_name(context, "MEMORY:foo");
266c19800e8SDoug Rabson if (ret)
267c19800e8SDoug Rabson krb5_err(context, 1, ret, "krb5_cc_set_default_name");
268c19800e8SDoug Rabson
269c19800e8SDoug Rabson ret = krb5_cc_default(context, &id);
270c19800e8SDoug Rabson if (ret)
271c19800e8SDoug Rabson krb5_err(context, 1, ret, "krb5_cc_default");
272c19800e8SDoug Rabson
273c19800e8SDoug Rabson ret = krb5_cc_default(context, &id2);
274c19800e8SDoug Rabson if (ret)
275c19800e8SDoug Rabson krb5_err(context, 1, ret, "krb5_cc_default");
276c19800e8SDoug Rabson
277c19800e8SDoug Rabson ret = krb5_cc_close(context, id);
278c19800e8SDoug Rabson if (ret)
279c19800e8SDoug Rabson krb5_err(context, 1, ret, "krb5_cc_close");
280c19800e8SDoug Rabson
281c19800e8SDoug Rabson ret = krb5_cc_close(context, id2);
282c19800e8SDoug Rabson if (ret)
283c19800e8SDoug Rabson krb5_err(context, 1, ret, "krb5_cc_close");
284c19800e8SDoug Rabson
285c19800e8SDoug Rabson krb5_free_context(context);
286c19800e8SDoug Rabson }
287c19800e8SDoug Rabson }
288c19800e8SDoug Rabson
289c19800e8SDoug Rabson struct {
290c19800e8SDoug Rabson char *str;
291c19800e8SDoug Rabson int fail;
292c19800e8SDoug Rabson char *res;
293c19800e8SDoug Rabson } cc_names[] = {
294c19800e8SDoug Rabson { "foo", 0, "foo" },
295c19800e8SDoug Rabson { "foo%}", 0, "foo%}" },
296c19800e8SDoug Rabson { "%{uid}", 0 },
297c19800e8SDoug Rabson { "foo%{null}", 0, "foo" },
298c19800e8SDoug Rabson { "foo%{null}bar", 0, "foobar" },
299c19800e8SDoug Rabson { "%{", 1 },
300c19800e8SDoug Rabson { "%{foo %{", 1 },
301c19800e8SDoug Rabson { "%{{", 1 },
302c19800e8SDoug Rabson { "%{{}", 1 },
303c19800e8SDoug Rabson { "%{nulll}", 1 },
304c19800e8SDoug Rabson { "%{does not exist}", 1 },
305c19800e8SDoug Rabson { "%{}", 1 },
306c19800e8SDoug Rabson #ifdef KRB5_USE_PATH_TOKENS
307c19800e8SDoug Rabson { "%{APPDATA}", 0 },
308c19800e8SDoug Rabson { "%{COMMON_APPDATA}", 0},
309c19800e8SDoug Rabson { "%{LOCAL_APPDATA}", 0},
310c19800e8SDoug Rabson { "%{SYSTEM}", 0},
311c19800e8SDoug Rabson { "%{WINDOWS}", 0},
312c19800e8SDoug Rabson { "%{TEMP}", 0},
313c19800e8SDoug Rabson { "%{USERID}", 0},
314c19800e8SDoug Rabson { "%{uid}", 0},
315c19800e8SDoug Rabson { "%{USERCONFIG}", 0},
316c19800e8SDoug Rabson { "%{COMMONCONFIG}", 0},
317c19800e8SDoug Rabson { "%{LIBDIR}", 0},
318c19800e8SDoug Rabson { "%{BINDIR}", 0},
319c19800e8SDoug Rabson { "%{LIBEXEC}", 0},
320c19800e8SDoug Rabson { "%{SBINDIR}", 0},
321c19800e8SDoug Rabson #endif
322c19800e8SDoug Rabson };
323c19800e8SDoug Rabson
324c19800e8SDoug Rabson static void
test_def_cc_name(krb5_context context)325c19800e8SDoug Rabson test_def_cc_name(krb5_context context)
326c19800e8SDoug Rabson {
327c19800e8SDoug Rabson krb5_error_code ret;
328c19800e8SDoug Rabson char *str;
329c19800e8SDoug Rabson int i;
330c19800e8SDoug Rabson
331c19800e8SDoug Rabson for (i = 0; i < sizeof(cc_names)/sizeof(cc_names[0]); i++) {
332c19800e8SDoug Rabson ret = _krb5_expand_default_cc_name(context, cc_names[i].str, &str);
333c19800e8SDoug Rabson if (ret) {
334c19800e8SDoug Rabson if (cc_names[i].fail == 0)
335c19800e8SDoug Rabson krb5_errx(context, 1, "test %d \"%s\" failed",
336c19800e8SDoug Rabson i, cc_names[i].str);
337c19800e8SDoug Rabson } else {
338c19800e8SDoug Rabson if (cc_names[i].fail)
339c19800e8SDoug Rabson krb5_errx(context, 1, "test %d \"%s\" was successful",
340c19800e8SDoug Rabson i, cc_names[i].str);
341c19800e8SDoug Rabson if (cc_names[i].res && strcmp(cc_names[i].res, str) != 0)
342c19800e8SDoug Rabson krb5_errx(context, 1, "test %d %s != %s",
343c19800e8SDoug Rabson i, cc_names[i].res, str);
344c19800e8SDoug Rabson if (debug_flag)
345c19800e8SDoug Rabson printf("%s => %s\n", cc_names[i].str, str);
346c19800e8SDoug Rabson free(str);
347c19800e8SDoug Rabson }
348c19800e8SDoug Rabson }
349c19800e8SDoug Rabson }
350c19800e8SDoug Rabson
351c19800e8SDoug Rabson static void
test_cache_find(krb5_context context,const char * principal,int find)352c19800e8SDoug Rabson test_cache_find(krb5_context context, const char *principal, int find)
353c19800e8SDoug Rabson {
354c19800e8SDoug Rabson krb5_principal client;
355c19800e8SDoug Rabson krb5_error_code ret;
356c19800e8SDoug Rabson krb5_ccache id = NULL;
357c19800e8SDoug Rabson
358c19800e8SDoug Rabson ret = krb5_parse_name(context, principal, &client);
359c19800e8SDoug Rabson if (ret)
360c19800e8SDoug Rabson krb5_err(context, 1, ret, "parse_name for %s failed", principal);
361c19800e8SDoug Rabson
362c19800e8SDoug Rabson ret = krb5_cc_cache_match(context, client, &id);
363c19800e8SDoug Rabson if (ret && find)
364c19800e8SDoug Rabson krb5_err(context, 1, ret, "cc_cache_match for %s failed", principal);
365c19800e8SDoug Rabson if (ret == 0 && !find)
366c19800e8SDoug Rabson krb5_err(context, 1, ret, "cc_cache_match for %s found", principal);
367c19800e8SDoug Rabson
368c19800e8SDoug Rabson if (id)
369c19800e8SDoug Rabson krb5_cc_close(context, id);
370c19800e8SDoug Rabson krb5_free_principal(context, client);
371c19800e8SDoug Rabson }
372c19800e8SDoug Rabson
373c19800e8SDoug Rabson
374c19800e8SDoug Rabson static void
test_cache_iter(krb5_context context,const char * type,int destroy)375c19800e8SDoug Rabson test_cache_iter(krb5_context context, const char *type, int destroy)
376c19800e8SDoug Rabson {
377c19800e8SDoug Rabson krb5_cc_cache_cursor cursor;
378c19800e8SDoug Rabson krb5_error_code ret;
379c19800e8SDoug Rabson krb5_ccache id;
380c19800e8SDoug Rabson
381c19800e8SDoug Rabson ret = krb5_cc_cache_get_first (context, type, &cursor);
382c19800e8SDoug Rabson if (ret == KRB5_CC_NOSUPP)
383c19800e8SDoug Rabson return;
384c19800e8SDoug Rabson else if (ret)
385c19800e8SDoug Rabson krb5_err(context, 1, ret, "krb5_cc_cache_get_first(%s)", type);
386c19800e8SDoug Rabson
387c19800e8SDoug Rabson
388c19800e8SDoug Rabson while ((ret = krb5_cc_cache_next (context, cursor, &id)) == 0) {
389c19800e8SDoug Rabson krb5_principal principal;
390c19800e8SDoug Rabson char *name;
391c19800e8SDoug Rabson
392c19800e8SDoug Rabson if (debug_flag)
393c19800e8SDoug Rabson printf("name: %s\n", krb5_cc_get_name(context, id));
394c19800e8SDoug Rabson ret = krb5_cc_get_principal(context, id, &principal);
395c19800e8SDoug Rabson if (ret == 0) {
396c19800e8SDoug Rabson ret = krb5_unparse_name(context, principal, &name);
397c19800e8SDoug Rabson if (ret == 0) {
398c19800e8SDoug Rabson if (debug_flag)
399c19800e8SDoug Rabson printf("\tprincipal: %s\n", name);
400c19800e8SDoug Rabson free(name);
401c19800e8SDoug Rabson }
402c19800e8SDoug Rabson krb5_free_principal(context, principal);
403c19800e8SDoug Rabson }
404c19800e8SDoug Rabson if (destroy)
405c19800e8SDoug Rabson krb5_cc_destroy(context, id);
406c19800e8SDoug Rabson else
407c19800e8SDoug Rabson krb5_cc_close(context, id);
408c19800e8SDoug Rabson }
409c19800e8SDoug Rabson
410c19800e8SDoug Rabson krb5_cc_cache_end_seq_get(context, cursor);
411c19800e8SDoug Rabson }
412c19800e8SDoug Rabson
413c19800e8SDoug Rabson static void
test_cache_iter_all(krb5_context context)414c19800e8SDoug Rabson test_cache_iter_all(krb5_context context)
415c19800e8SDoug Rabson {
416c19800e8SDoug Rabson krb5_cccol_cursor cursor;
417c19800e8SDoug Rabson krb5_error_code ret;
418c19800e8SDoug Rabson krb5_ccache id;
419c19800e8SDoug Rabson
420c19800e8SDoug Rabson ret = krb5_cccol_cursor_new (context, &cursor);
421c19800e8SDoug Rabson if (ret)
422c19800e8SDoug Rabson krb5_err(context, 1, ret, "krb5_cccol_cursor_new");
423c19800e8SDoug Rabson
424c19800e8SDoug Rabson
425c19800e8SDoug Rabson while ((ret = krb5_cccol_cursor_next (context, cursor, &id)) == 0 && id != NULL) {
426c19800e8SDoug Rabson krb5_principal principal;
427c19800e8SDoug Rabson char *name;
428c19800e8SDoug Rabson
429c19800e8SDoug Rabson if (debug_flag)
430c19800e8SDoug Rabson printf("name: %s\n", krb5_cc_get_name(context, id));
431c19800e8SDoug Rabson ret = krb5_cc_get_principal(context, id, &principal);
432c19800e8SDoug Rabson if (ret == 0) {
433c19800e8SDoug Rabson ret = krb5_unparse_name(context, principal, &name);
434c19800e8SDoug Rabson if (ret == 0) {
435c19800e8SDoug Rabson if (debug_flag)
436c19800e8SDoug Rabson printf("\tprincipal: %s\n", name);
437c19800e8SDoug Rabson free(name);
438c19800e8SDoug Rabson }
439c19800e8SDoug Rabson krb5_free_principal(context, principal);
440c19800e8SDoug Rabson }
441c19800e8SDoug Rabson krb5_cc_close(context, id);
442c19800e8SDoug Rabson }
443c19800e8SDoug Rabson
444c19800e8SDoug Rabson krb5_cccol_cursor_free(context, &cursor);
445c19800e8SDoug Rabson }
446c19800e8SDoug Rabson
447c19800e8SDoug Rabson
448c19800e8SDoug Rabson static void
test_copy(krb5_context context,const char * from,const char * to)449c19800e8SDoug Rabson test_copy(krb5_context context, const char *from, const char *to)
450c19800e8SDoug Rabson {
451c19800e8SDoug Rabson krb5_ccache fromid, toid;
452c19800e8SDoug Rabson krb5_error_code ret;
453c19800e8SDoug Rabson krb5_principal p, p2;
454c19800e8SDoug Rabson
455c19800e8SDoug Rabson ret = krb5_parse_name(context, "lha@SU.SE", &p);
456c19800e8SDoug Rabson if (ret)
457c19800e8SDoug Rabson krb5_err(context, 1, ret, "krb5_parse_name");
458c19800e8SDoug Rabson
459c19800e8SDoug Rabson ret = krb5_cc_new_unique(context, from, NULL, &fromid);
460c19800e8SDoug Rabson if (ret)
461c19800e8SDoug Rabson krb5_err(context, 1, ret, "krb5_cc_new_unique: %s", from);
462c19800e8SDoug Rabson
463c19800e8SDoug Rabson ret = krb5_cc_initialize(context, fromid, p);
464c19800e8SDoug Rabson if (ret)
465c19800e8SDoug Rabson krb5_err(context, 1, ret, "krb5_cc_initialize");
466c19800e8SDoug Rabson
467c19800e8SDoug Rabson ret = krb5_cc_new_unique(context, to, NULL, &toid);
468c19800e8SDoug Rabson if (ret)
469c19800e8SDoug Rabson krb5_err(context, 1, ret, "krb5_cc_gen_new: %s", to);
470c19800e8SDoug Rabson
471c19800e8SDoug Rabson ret = krb5_cc_copy_cache(context, fromid, toid);
472c19800e8SDoug Rabson if (ret)
473c19800e8SDoug Rabson krb5_err(context, 1, ret, "krb5_cc_copy_cache");
474c19800e8SDoug Rabson
475c19800e8SDoug Rabson ret = krb5_cc_get_principal(context, toid, &p2);
476c19800e8SDoug Rabson if (ret)
477c19800e8SDoug Rabson krb5_err(context, 1, ret, "krb5_cc_get_principal");
478c19800e8SDoug Rabson
479c19800e8SDoug Rabson if (krb5_principal_compare(context, p, p2) == FALSE)
480c19800e8SDoug Rabson krb5_errx(context, 1, "p != p2");
481c19800e8SDoug Rabson
482c19800e8SDoug Rabson krb5_free_principal(context, p);
483c19800e8SDoug Rabson krb5_free_principal(context, p2);
484c19800e8SDoug Rabson
485c19800e8SDoug Rabson krb5_cc_destroy(context, fromid);
486c19800e8SDoug Rabson krb5_cc_destroy(context, toid);
487c19800e8SDoug Rabson }
488c19800e8SDoug Rabson
489c19800e8SDoug Rabson static void
test_move(krb5_context context,const char * type)490c19800e8SDoug Rabson test_move(krb5_context context, const char *type)
491c19800e8SDoug Rabson {
492c19800e8SDoug Rabson const krb5_cc_ops *ops;
493c19800e8SDoug Rabson krb5_ccache fromid, toid;
494c19800e8SDoug Rabson krb5_error_code ret;
495c19800e8SDoug Rabson krb5_principal p, p2;
496c19800e8SDoug Rabson
497c19800e8SDoug Rabson ops = krb5_cc_get_prefix_ops(context, type);
498c19800e8SDoug Rabson if (ops == NULL)
499c19800e8SDoug Rabson return;
500c19800e8SDoug Rabson
501c19800e8SDoug Rabson ret = krb5_cc_new_unique(context, type, NULL, &fromid);
502c19800e8SDoug Rabson if (ret == KRB5_CC_NOSUPP)
503c19800e8SDoug Rabson return;
504c19800e8SDoug Rabson else if (ret)
505c19800e8SDoug Rabson krb5_err(context, 1, ret, "krb5_cc_new_unique: %s", type);
506c19800e8SDoug Rabson
507c19800e8SDoug Rabson ret = krb5_parse_name(context, "lha@SU.SE", &p);
508c19800e8SDoug Rabson if (ret)
509c19800e8SDoug Rabson krb5_err(context, 1, ret, "krb5_parse_name");
510c19800e8SDoug Rabson
511c19800e8SDoug Rabson ret = krb5_cc_initialize(context, fromid, p);
512c19800e8SDoug Rabson if (ret)
513c19800e8SDoug Rabson krb5_err(context, 1, ret, "krb5_cc_initialize");
514c19800e8SDoug Rabson
515c19800e8SDoug Rabson ret = krb5_cc_new_unique(context, type, NULL, &toid);
516c19800e8SDoug Rabson if (ret)
517c19800e8SDoug Rabson krb5_err(context, 1, ret, "krb5_cc_new_unique");
518c19800e8SDoug Rabson
519c19800e8SDoug Rabson ret = krb5_cc_initialize(context, toid, p);
520c19800e8SDoug Rabson if (ret)
521c19800e8SDoug Rabson krb5_err(context, 1, ret, "krb5_cc_initialize");
522c19800e8SDoug Rabson
523c19800e8SDoug Rabson ret = krb5_cc_get_principal(context, toid, &p2);
524c19800e8SDoug Rabson if (ret)
525c19800e8SDoug Rabson krb5_err(context, 1, ret, "krb5_cc_get_principal");
526c19800e8SDoug Rabson
527c19800e8SDoug Rabson if (krb5_principal_compare(context, p, p2) == FALSE)
528c19800e8SDoug Rabson krb5_errx(context, 1, "p != p2");
529bbd80c28SJacques Vidrine
530bbd80c28SJacques Vidrine krb5_free_principal(context, p);
531bbd80c28SJacques Vidrine krb5_free_principal(context, p2);
532bbd80c28SJacques Vidrine
533 krb5_cc_destroy(context, toid);
534 krb5_cc_destroy(context, fromid);
535 }
536
537
538 static void
test_prefix_ops(krb5_context context,const char * name,const krb5_cc_ops * ops)539 test_prefix_ops(krb5_context context, const char *name, const krb5_cc_ops *ops)
540 {
541 const krb5_cc_ops *o;
542
543 o = krb5_cc_get_prefix_ops(context, name);
544 if (o == NULL)
545 krb5_errx(context, 1, "found no match for prefix '%s'", name);
546 if (strcmp(o->prefix, ops->prefix) != 0)
547 krb5_errx(context, 1, "ops for prefix '%s' is not "
548 "the expected %s != %s", name, o->prefix, ops->prefix);
549 }
550
551 static void
test_cc_config(krb5_context context)552 test_cc_config(krb5_context context)
553 {
554 krb5_error_code ret;
555 krb5_principal p;
556 krb5_ccache id;
557 unsigned int i;
558
559 ret = krb5_cc_new_unique(context, "MEMORY", "bar", &id);
560 if (ret)
561 krb5_err(context, 1, ret, "krb5_cc_new_unique");
562
563 ret = krb5_parse_name(context, "lha@SU.SE", &p);
564 if (ret)
565 krb5_err(context, 1, ret, "krb5_parse_name");
566
567 ret = krb5_cc_initialize(context, id, p);
568 if (ret)
569 krb5_err(context, 1, ret, "krb5_cc_initialize");
570
571 for (i = 0; i < 1000; i++) {
572 krb5_data data, data2;
573 const char *name = "foo";
574 krb5_principal p1 = NULL;
575
576 if (i & 1)
577 p1 = p;
578
579 data.data = rk_UNCONST(name);
580 data.length = strlen(name);
581
582 ret = krb5_cc_set_config(context, id, p1, "FriendlyName", &data);
583 if (ret)
584 krb5_errx(context, 1, "krb5_cc_set_config: add");
585
586 ret = krb5_cc_get_config(context, id, p1, "FriendlyName", &data2);
587 if (ret)
588 krb5_errx(context, 1, "krb5_cc_get_config: first");
589 krb5_data_free(&data2);
590
591 ret = krb5_cc_set_config(context, id, p1, "FriendlyName", &data);
592 if (ret)
593 krb5_errx(context, 1, "krb5_cc_set_config: add -second");
594
595 ret = krb5_cc_get_config(context, id, p1, "FriendlyName", &data2);
596 if (ret)
597 krb5_errx(context, 1, "krb5_cc_get_config: second");
598 krb5_data_free(&data2);
599
600 ret = krb5_cc_set_config(context, id, p1, "FriendlyName", NULL);
601 if (ret)
602 krb5_errx(context, 1, "krb5_cc_set_config: delete");
603
604 ret = krb5_cc_get_config(context, id, p1, "FriendlyName", &data2);
605 if (ret == 0)
606 krb5_errx(context, 1, "krb5_cc_get_config: non-existant");
607 }
608
609 krb5_cc_destroy(context, id);
610 krb5_free_principal(context, p);
611 }
612
613
614 static struct getargs args[] = {
615 {"debug", 'd', arg_flag, &debug_flag,
616 "turn on debuggin", NULL },
617 {"version", 0, arg_flag, &version_flag,
618 "print version", NULL },
619 {"help", 0, arg_flag, &help_flag,
620 NULL, NULL }
621 };
622
623 static void
usage(int ret)624 usage (int ret)
625 {
626 arg_printusage (args, sizeof(args)/sizeof(*args), NULL, "hostname ...");
627 exit (ret);
628 }
629
630 int
main(int argc,char ** argv)631 main(int argc, char **argv)
632 {
633 krb5_context context;
634 krb5_error_code ret;
635 int optidx = 0;
636 krb5_ccache id1, id2;
637
638 setprogname(argv[0]);
639
640 if(getarg(args, sizeof(args) / sizeof(args[0]), argc, argv, &optidx))
641 usage(1);
642
643 if (help_flag)
644 usage (0);
645
646 if(version_flag){
647 print_version(NULL);
648 exit(0);
649 }
650
651 argc -= optidx;
652 argv += optidx;
653
654 ret = krb5_init_context(&context);
655 if (ret)
656 errx (1, "krb5_init_context failed: %d", ret);
657
658 test_cache_remove(context, krb5_cc_type_file);
659 test_cache_remove(context, krb5_cc_type_memory);
660 #ifdef USE_SQLITE
661 test_cache_remove(context, krb5_cc_type_scc);
662 #endif
663
664 test_default_name(context);
665 test_mcache(context);
666 test_init_vs_destroy(context, krb5_cc_type_memory);
667 test_init_vs_destroy(context, krb5_cc_type_file);
668 #if 0
669 test_init_vs_destroy(context, krb5_cc_type_api);
670 #endif
671 test_init_vs_destroy(context, krb5_cc_type_scc);
672 test_mcc_default();
673 test_def_cc_name(context);
674
675 test_cache_iter_all(context);
676
677 test_cache_iter(context, krb5_cc_type_memory, 0);
678 {
679 krb5_principal p;
680 krb5_cc_new_unique(context, krb5_cc_type_memory, "bar", &id1);
681 krb5_cc_new_unique(context, krb5_cc_type_memory, "baz", &id2);
682 krb5_parse_name(context, "lha@SU.SE", &p);
683 krb5_cc_initialize(context, id1, p);
684 krb5_free_principal(context, p);
685 }
686
687 test_cache_find(context, "lha@SU.SE", 1);
688 test_cache_find(context, "hulabundulahotentot@SU.SE", 0);
689
690 test_cache_iter(context, krb5_cc_type_memory, 0);
691 test_cache_iter(context, krb5_cc_type_memory, 1);
692 test_cache_iter(context, krb5_cc_type_memory, 0);
693 test_cache_iter(context, krb5_cc_type_file, 0);
694 test_cache_iter(context, krb5_cc_type_api, 0);
695 test_cache_iter(context, krb5_cc_type_scc, 0);
696 test_cache_iter(context, krb5_cc_type_scc, 1);
697
698 test_copy(context, krb5_cc_type_file, krb5_cc_type_file);
699 test_copy(context, krb5_cc_type_memory, krb5_cc_type_memory);
700 test_copy(context, krb5_cc_type_file, krb5_cc_type_memory);
701 test_copy(context, krb5_cc_type_memory, krb5_cc_type_file);
702 test_copy(context, krb5_cc_type_scc, krb5_cc_type_file);
703 test_copy(context, krb5_cc_type_file, krb5_cc_type_scc);
704 test_copy(context, krb5_cc_type_scc, krb5_cc_type_memory);
705 test_copy(context, krb5_cc_type_memory, krb5_cc_type_scc);
706
707 test_move(context, krb5_cc_type_file);
708 test_move(context, krb5_cc_type_memory);
709 #ifdef HAVE_KCM
710 test_move(context, krb5_cc_type_kcm);
711 #endif
712 test_move(context, krb5_cc_type_scc);
713
714 test_prefix_ops(context, "FILE:/tmp/foo", &krb5_fcc_ops);
715 test_prefix_ops(context, "FILE", &krb5_fcc_ops);
716 test_prefix_ops(context, "MEMORY", &krb5_mcc_ops);
717 test_prefix_ops(context, "MEMORY:foo", &krb5_mcc_ops);
718 test_prefix_ops(context, "/tmp/kaka", &krb5_fcc_ops);
719 #ifdef HAVE_SCC
720 test_prefix_ops(context, "SCC:", &krb5_scc_ops);
721 test_prefix_ops(context, "SCC:foo", &krb5_scc_ops);
722 #endif
723
724 krb5_cc_destroy(context, id1);
725 krb5_cc_destroy(context, id2);
726
727 test_cc_config(context);
728
729 krb5_free_context(context);
730
731 #if 0
732 sleep(60);
733 #endif
734
735 return 0;
736 }
737