1*0a6a1f1dSLionel Sambuc /* $NetBSD: hprop.c,v 1.1.1.2 2014/04/24 12:45:27 pettai Exp $ */
2ebfedea0SLionel Sambuc
3ebfedea0SLionel Sambuc /*
4ebfedea0SLionel Sambuc * Copyright (c) 1997 - 2005 Kungliga Tekniska Högskolan
5ebfedea0SLionel Sambuc * (Royal Institute of Technology, Stockholm, Sweden).
6ebfedea0SLionel Sambuc * All rights reserved.
7ebfedea0SLionel Sambuc *
8ebfedea0SLionel Sambuc * Redistribution and use in source and binary forms, with or without
9ebfedea0SLionel Sambuc * modification, are permitted provided that the following conditions
10ebfedea0SLionel Sambuc * are met:
11ebfedea0SLionel Sambuc *
12ebfedea0SLionel Sambuc * 1. Redistributions of source code must retain the above copyright
13ebfedea0SLionel Sambuc * notice, this list of conditions and the following disclaimer.
14ebfedea0SLionel Sambuc *
15ebfedea0SLionel Sambuc * 2. Redistributions in binary form must reproduce the above copyright
16ebfedea0SLionel Sambuc * notice, this list of conditions and the following disclaimer in the
17ebfedea0SLionel Sambuc * documentation and/or other materials provided with the distribution.
18ebfedea0SLionel Sambuc *
19ebfedea0SLionel Sambuc * 3. Neither the name of the Institute nor the names of its contributors
20ebfedea0SLionel Sambuc * may be used to endorse or promote products derived from this software
21ebfedea0SLionel Sambuc * without specific prior written permission.
22ebfedea0SLionel Sambuc *
23ebfedea0SLionel Sambuc * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
24ebfedea0SLionel Sambuc * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
25ebfedea0SLionel Sambuc * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
26ebfedea0SLionel Sambuc * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
27ebfedea0SLionel Sambuc * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
28ebfedea0SLionel Sambuc * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
29ebfedea0SLionel Sambuc * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
30ebfedea0SLionel Sambuc * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
31ebfedea0SLionel Sambuc * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
32ebfedea0SLionel Sambuc * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
33ebfedea0SLionel Sambuc * SUCH DAMAGE.
34ebfedea0SLionel Sambuc */
35ebfedea0SLionel Sambuc
36ebfedea0SLionel Sambuc #define KRB5_DEPRECATED /* uses v4 functions that will die */
37ebfedea0SLionel Sambuc
38ebfedea0SLionel Sambuc #include "hprop.h"
39ebfedea0SLionel Sambuc
40ebfedea0SLionel Sambuc static int version_flag;
41ebfedea0SLionel Sambuc static int help_flag;
42ebfedea0SLionel Sambuc static const char *ktname = HPROP_KEYTAB;
43ebfedea0SLionel Sambuc static const char *database;
44ebfedea0SLionel Sambuc static char *mkeyfile;
45ebfedea0SLionel Sambuc static int to_stdout;
46ebfedea0SLionel Sambuc static int verbose_flag;
47ebfedea0SLionel Sambuc static int encrypt_flag;
48ebfedea0SLionel Sambuc static int decrypt_flag;
49ebfedea0SLionel Sambuc static hdb_master_key mkey5;
50ebfedea0SLionel Sambuc
51ebfedea0SLionel Sambuc static char *source_type;
52ebfedea0SLionel Sambuc
53ebfedea0SLionel Sambuc static char *local_realm=NULL;
54ebfedea0SLionel Sambuc
55ebfedea0SLionel Sambuc static int
open_socket(krb5_context context,const char * hostname,const char * port)56ebfedea0SLionel Sambuc open_socket(krb5_context context, const char *hostname, const char *port)
57ebfedea0SLionel Sambuc {
58ebfedea0SLionel Sambuc struct addrinfo *ai, *a;
59ebfedea0SLionel Sambuc struct addrinfo hints;
60ebfedea0SLionel Sambuc int error;
61ebfedea0SLionel Sambuc
62ebfedea0SLionel Sambuc memset (&hints, 0, sizeof(hints));
63ebfedea0SLionel Sambuc hints.ai_socktype = SOCK_STREAM;
64ebfedea0SLionel Sambuc hints.ai_protocol = IPPROTO_TCP;
65ebfedea0SLionel Sambuc
66ebfedea0SLionel Sambuc error = getaddrinfo (hostname, port, &hints, &ai);
67ebfedea0SLionel Sambuc if (error) {
68ebfedea0SLionel Sambuc warnx ("%s: %s", hostname, gai_strerror(error));
69ebfedea0SLionel Sambuc return -1;
70ebfedea0SLionel Sambuc }
71ebfedea0SLionel Sambuc
72ebfedea0SLionel Sambuc for (a = ai; a != NULL; a = a->ai_next) {
73ebfedea0SLionel Sambuc int s;
74ebfedea0SLionel Sambuc
75ebfedea0SLionel Sambuc s = socket (a->ai_family, a->ai_socktype, a->ai_protocol);
76ebfedea0SLionel Sambuc if (s < 0)
77ebfedea0SLionel Sambuc continue;
78ebfedea0SLionel Sambuc if (connect (s, a->ai_addr, a->ai_addrlen) < 0) {
79ebfedea0SLionel Sambuc warn ("connect(%s)", hostname);
80ebfedea0SLionel Sambuc close (s);
81ebfedea0SLionel Sambuc continue;
82ebfedea0SLionel Sambuc }
83ebfedea0SLionel Sambuc freeaddrinfo (ai);
84ebfedea0SLionel Sambuc return s;
85ebfedea0SLionel Sambuc }
86ebfedea0SLionel Sambuc warnx ("failed to contact %s", hostname);
87ebfedea0SLionel Sambuc freeaddrinfo (ai);
88ebfedea0SLionel Sambuc return -1;
89ebfedea0SLionel Sambuc }
90ebfedea0SLionel Sambuc
91ebfedea0SLionel Sambuc krb5_error_code
v5_prop(krb5_context context,HDB * db,hdb_entry_ex * entry,void * appdata)92ebfedea0SLionel Sambuc v5_prop(krb5_context context, HDB *db, hdb_entry_ex *entry, void *appdata)
93ebfedea0SLionel Sambuc {
94ebfedea0SLionel Sambuc krb5_error_code ret;
95ebfedea0SLionel Sambuc struct prop_data *pd = appdata;
96ebfedea0SLionel Sambuc krb5_data data;
97ebfedea0SLionel Sambuc
98ebfedea0SLionel Sambuc if(encrypt_flag) {
99ebfedea0SLionel Sambuc ret = hdb_seal_keys_mkey(context, &entry->entry, mkey5);
100ebfedea0SLionel Sambuc if (ret) {
101ebfedea0SLionel Sambuc krb5_warn(context, ret, "hdb_seal_keys_mkey");
102ebfedea0SLionel Sambuc return ret;
103ebfedea0SLionel Sambuc }
104ebfedea0SLionel Sambuc }
105ebfedea0SLionel Sambuc if(decrypt_flag) {
106ebfedea0SLionel Sambuc ret = hdb_unseal_keys_mkey(context, &entry->entry, mkey5);
107ebfedea0SLionel Sambuc if (ret) {
108ebfedea0SLionel Sambuc krb5_warn(context, ret, "hdb_unseal_keys_mkey");
109ebfedea0SLionel Sambuc return ret;
110ebfedea0SLionel Sambuc }
111ebfedea0SLionel Sambuc }
112ebfedea0SLionel Sambuc
113ebfedea0SLionel Sambuc ret = hdb_entry2value(context, &entry->entry, &data);
114ebfedea0SLionel Sambuc if(ret) {
115ebfedea0SLionel Sambuc krb5_warn(context, ret, "hdb_entry2value");
116ebfedea0SLionel Sambuc return ret;
117ebfedea0SLionel Sambuc }
118ebfedea0SLionel Sambuc
119ebfedea0SLionel Sambuc if(to_stdout)
120ebfedea0SLionel Sambuc ret = krb5_write_message(context, &pd->sock, &data);
121ebfedea0SLionel Sambuc else
122ebfedea0SLionel Sambuc ret = krb5_write_priv_message(context, pd->auth_context,
123ebfedea0SLionel Sambuc &pd->sock, &data);
124ebfedea0SLionel Sambuc krb5_data_free(&data);
125ebfedea0SLionel Sambuc return ret;
126ebfedea0SLionel Sambuc }
127ebfedea0SLionel Sambuc
128ebfedea0SLionel Sambuc struct getargs args[] = {
129ebfedea0SLionel Sambuc { "master-key", 'm', arg_string, &mkeyfile, "v5 master key file", "file" },
130ebfedea0SLionel Sambuc { "database", 'd', arg_string, rk_UNCONST(&database), "database", "file" },
131ebfedea0SLionel Sambuc { "source", 0, arg_string, &source_type, "type of database to read",
132ebfedea0SLionel Sambuc "heimdal"
133ebfedea0SLionel Sambuc "|mit-dump"
134ebfedea0SLionel Sambuc },
135ebfedea0SLionel Sambuc
136ebfedea0SLionel Sambuc { "keytab", 'k', arg_string, rk_UNCONST(&ktname),
137ebfedea0SLionel Sambuc "keytab to use for authentication", "keytab" },
138*0a6a1f1dSLionel Sambuc { "v5-realm", 'R', arg_string, &local_realm, "v5 realm to use", NULL },
139*0a6a1f1dSLionel Sambuc { "decrypt", 'D', arg_flag, &decrypt_flag, "decrypt keys", NULL },
140*0a6a1f1dSLionel Sambuc { "encrypt", 'E', arg_flag, &encrypt_flag, "encrypt keys", NULL },
141*0a6a1f1dSLionel Sambuc { "stdout", 'n', arg_flag, &to_stdout, "dump to stdout", NULL },
142*0a6a1f1dSLionel Sambuc { "verbose", 'v', arg_flag, &verbose_flag, NULL, NULL },
143*0a6a1f1dSLionel Sambuc { "version", 0, arg_flag, &version_flag, NULL, NULL },
144*0a6a1f1dSLionel Sambuc { "help", 'h', arg_flag, &help_flag, NULL, NULL }
145ebfedea0SLionel Sambuc };
146ebfedea0SLionel Sambuc
147ebfedea0SLionel Sambuc static int num_args = sizeof(args) / sizeof(args[0]);
148ebfedea0SLionel Sambuc
149ebfedea0SLionel Sambuc static void
usage(int ret)150ebfedea0SLionel Sambuc usage(int ret)
151ebfedea0SLionel Sambuc {
152ebfedea0SLionel Sambuc arg_printusage (args, num_args, NULL, "[host[:port]] ...");
153ebfedea0SLionel Sambuc exit (ret);
154ebfedea0SLionel Sambuc }
155ebfedea0SLionel Sambuc
156ebfedea0SLionel Sambuc static void
get_creds(krb5_context context,krb5_ccache * cache)157ebfedea0SLionel Sambuc get_creds(krb5_context context, krb5_ccache *cache)
158ebfedea0SLionel Sambuc {
159ebfedea0SLionel Sambuc krb5_keytab keytab;
160ebfedea0SLionel Sambuc krb5_principal client;
161ebfedea0SLionel Sambuc krb5_error_code ret;
162ebfedea0SLionel Sambuc krb5_get_init_creds_opt *init_opts;
163ebfedea0SLionel Sambuc krb5_preauthtype preauth = KRB5_PADATA_ENC_TIMESTAMP;
164ebfedea0SLionel Sambuc krb5_creds creds;
165ebfedea0SLionel Sambuc
166ebfedea0SLionel Sambuc ret = krb5_kt_register(context, &hdb_kt_ops);
167ebfedea0SLionel Sambuc if(ret) krb5_err(context, 1, ret, "krb5_kt_register");
168ebfedea0SLionel Sambuc
169ebfedea0SLionel Sambuc ret = krb5_kt_resolve(context, ktname, &keytab);
170ebfedea0SLionel Sambuc if(ret) krb5_err(context, 1, ret, "krb5_kt_resolve");
171ebfedea0SLionel Sambuc
172ebfedea0SLionel Sambuc ret = krb5_make_principal(context, &client, NULL,
173ebfedea0SLionel Sambuc "kadmin", HPROP_NAME, NULL);
174ebfedea0SLionel Sambuc if(ret) krb5_err(context, 1, ret, "krb5_make_principal");
175ebfedea0SLionel Sambuc
176ebfedea0SLionel Sambuc ret = krb5_get_init_creds_opt_alloc(context, &init_opts);
177ebfedea0SLionel Sambuc if(ret) krb5_err(context, 1, ret, "krb5_get_init_creds_opt_alloc");
178ebfedea0SLionel Sambuc krb5_get_init_creds_opt_set_preauth_list(init_opts, &preauth, 1);
179ebfedea0SLionel Sambuc
180ebfedea0SLionel Sambuc ret = krb5_get_init_creds_keytab(context, &creds, client, keytab, 0, NULL, init_opts);
181ebfedea0SLionel Sambuc if(ret) krb5_err(context, 1, ret, "krb5_get_init_creds");
182ebfedea0SLionel Sambuc
183ebfedea0SLionel Sambuc krb5_get_init_creds_opt_free(context, init_opts);
184ebfedea0SLionel Sambuc
185ebfedea0SLionel Sambuc ret = krb5_kt_close(context, keytab);
186ebfedea0SLionel Sambuc if(ret) krb5_err(context, 1, ret, "krb5_kt_close");
187ebfedea0SLionel Sambuc
188ebfedea0SLionel Sambuc ret = krb5_cc_new_unique(context, krb5_cc_type_memory, NULL, cache);
189ebfedea0SLionel Sambuc if(ret) krb5_err(context, 1, ret, "krb5_cc_new_unique");
190ebfedea0SLionel Sambuc
191ebfedea0SLionel Sambuc ret = krb5_cc_initialize(context, *cache, client);
192ebfedea0SLionel Sambuc if(ret) krb5_err(context, 1, ret, "krb5_cc_initialize");
193ebfedea0SLionel Sambuc
194ebfedea0SLionel Sambuc krb5_free_principal(context, client);
195ebfedea0SLionel Sambuc
196ebfedea0SLionel Sambuc ret = krb5_cc_store_cred(context, *cache, &creds);
197ebfedea0SLionel Sambuc if(ret) krb5_err(context, 1, ret, "krb5_cc_store_cred");
198ebfedea0SLionel Sambuc
199ebfedea0SLionel Sambuc krb5_free_cred_contents(context, &creds);
200ebfedea0SLionel Sambuc }
201ebfedea0SLionel Sambuc
202ebfedea0SLionel Sambuc enum hprop_source {
203ebfedea0SLionel Sambuc HPROP_HEIMDAL = 1,
204ebfedea0SLionel Sambuc HPROP_MIT_DUMP
205ebfedea0SLionel Sambuc };
206ebfedea0SLionel Sambuc
207ebfedea0SLionel Sambuc struct {
208ebfedea0SLionel Sambuc int type;
209ebfedea0SLionel Sambuc const char *name;
210ebfedea0SLionel Sambuc } types[] = {
211ebfedea0SLionel Sambuc { HPROP_HEIMDAL, "heimdal" },
212ebfedea0SLionel Sambuc { HPROP_MIT_DUMP, "mit-dump" }
213ebfedea0SLionel Sambuc };
214ebfedea0SLionel Sambuc
215ebfedea0SLionel Sambuc static int
parse_source_type(const char * s)216ebfedea0SLionel Sambuc parse_source_type(const char *s)
217ebfedea0SLionel Sambuc {
218*0a6a1f1dSLionel Sambuc size_t i;
219ebfedea0SLionel Sambuc for(i = 0; i < sizeof(types) / sizeof(types[0]); i++) {
220ebfedea0SLionel Sambuc if(strstr(types[i].name, s) == types[i].name)
221ebfedea0SLionel Sambuc return types[i].type;
222ebfedea0SLionel Sambuc }
223ebfedea0SLionel Sambuc return 0;
224ebfedea0SLionel Sambuc }
225ebfedea0SLionel Sambuc
226ebfedea0SLionel Sambuc static int
iterate(krb5_context context,const char * database_name,HDB * db,int type,struct prop_data * pd)227ebfedea0SLionel Sambuc iterate (krb5_context context,
228ebfedea0SLionel Sambuc const char *database_name,
229ebfedea0SLionel Sambuc HDB *db,
230ebfedea0SLionel Sambuc int type,
231ebfedea0SLionel Sambuc struct prop_data *pd)
232ebfedea0SLionel Sambuc {
233ebfedea0SLionel Sambuc int ret;
234ebfedea0SLionel Sambuc
235ebfedea0SLionel Sambuc switch(type) {
236ebfedea0SLionel Sambuc case HPROP_MIT_DUMP:
237ebfedea0SLionel Sambuc ret = mit_prop_dump(pd, database_name);
238ebfedea0SLionel Sambuc if (ret)
239ebfedea0SLionel Sambuc krb5_warn(context, ret, "mit_prop_dump");
240ebfedea0SLionel Sambuc break;
241ebfedea0SLionel Sambuc case HPROP_HEIMDAL:
242ebfedea0SLionel Sambuc ret = hdb_foreach(context, db, HDB_F_DECRYPT, v5_prop, pd);
243ebfedea0SLionel Sambuc if(ret)
244ebfedea0SLionel Sambuc krb5_warn(context, ret, "hdb_foreach");
245ebfedea0SLionel Sambuc break;
246ebfedea0SLionel Sambuc default:
247ebfedea0SLionel Sambuc krb5_errx(context, 1, "unknown prop type: %d", type);
248ebfedea0SLionel Sambuc }
249ebfedea0SLionel Sambuc return ret;
250ebfedea0SLionel Sambuc }
251ebfedea0SLionel Sambuc
252ebfedea0SLionel Sambuc static int
dump_database(krb5_context context,int type,const char * database_name,HDB * db)253ebfedea0SLionel Sambuc dump_database (krb5_context context, int type,
254ebfedea0SLionel Sambuc const char *database_name, HDB *db)
255ebfedea0SLionel Sambuc {
256ebfedea0SLionel Sambuc krb5_error_code ret;
257ebfedea0SLionel Sambuc struct prop_data pd;
258ebfedea0SLionel Sambuc krb5_data data;
259ebfedea0SLionel Sambuc
260ebfedea0SLionel Sambuc pd.context = context;
261ebfedea0SLionel Sambuc pd.auth_context = NULL;
262ebfedea0SLionel Sambuc pd.sock = STDOUT_FILENO;
263ebfedea0SLionel Sambuc
264ebfedea0SLionel Sambuc ret = iterate (context, database_name, db, type, &pd);
265ebfedea0SLionel Sambuc if (ret)
266ebfedea0SLionel Sambuc krb5_errx(context, 1, "iterate failure");
267ebfedea0SLionel Sambuc krb5_data_zero (&data);
268ebfedea0SLionel Sambuc ret = krb5_write_message (context, &pd.sock, &data);
269ebfedea0SLionel Sambuc if (ret)
270ebfedea0SLionel Sambuc krb5_err(context, 1, ret, "krb5_write_message");
271ebfedea0SLionel Sambuc
272ebfedea0SLionel Sambuc return 0;
273ebfedea0SLionel Sambuc }
274ebfedea0SLionel Sambuc
275ebfedea0SLionel Sambuc static int
propagate_database(krb5_context context,int type,const char * database_name,HDB * db,krb5_ccache ccache,int optidx,int argc,char ** argv)276ebfedea0SLionel Sambuc propagate_database (krb5_context context, int type,
277ebfedea0SLionel Sambuc const char *database_name,
278ebfedea0SLionel Sambuc HDB *db, krb5_ccache ccache,
279ebfedea0SLionel Sambuc int optidx, int argc, char **argv)
280ebfedea0SLionel Sambuc {
281ebfedea0SLionel Sambuc krb5_principal server;
282ebfedea0SLionel Sambuc krb5_error_code ret;
283ebfedea0SLionel Sambuc int i, failed = 0;
284ebfedea0SLionel Sambuc
285ebfedea0SLionel Sambuc for(i = optidx; i < argc; i++){
286ebfedea0SLionel Sambuc krb5_auth_context auth_context;
287ebfedea0SLionel Sambuc int fd;
288ebfedea0SLionel Sambuc struct prop_data pd;
289ebfedea0SLionel Sambuc krb5_data data;
290ebfedea0SLionel Sambuc
291ebfedea0SLionel Sambuc char *port, portstr[NI_MAXSERV];
292ebfedea0SLionel Sambuc char *host = argv[i];
293ebfedea0SLionel Sambuc
294ebfedea0SLionel Sambuc port = strchr(host, ':');
295ebfedea0SLionel Sambuc if(port == NULL) {
296ebfedea0SLionel Sambuc snprintf(portstr, sizeof(portstr), "%u",
297ebfedea0SLionel Sambuc ntohs(krb5_getportbyname (context, "hprop", "tcp",
298ebfedea0SLionel Sambuc HPROP_PORT)));
299ebfedea0SLionel Sambuc port = portstr;
300ebfedea0SLionel Sambuc } else
301ebfedea0SLionel Sambuc *port++ = '\0';
302ebfedea0SLionel Sambuc
303ebfedea0SLionel Sambuc fd = open_socket(context, host, port);
304ebfedea0SLionel Sambuc if(fd < 0) {
305ebfedea0SLionel Sambuc failed++;
306ebfedea0SLionel Sambuc krb5_warn (context, errno, "connect %s", host);
307ebfedea0SLionel Sambuc continue;
308ebfedea0SLionel Sambuc }
309ebfedea0SLionel Sambuc
310ebfedea0SLionel Sambuc ret = krb5_sname_to_principal(context, argv[i],
311ebfedea0SLionel Sambuc HPROP_NAME, KRB5_NT_SRV_HST, &server);
312ebfedea0SLionel Sambuc if(ret) {
313ebfedea0SLionel Sambuc failed++;
314ebfedea0SLionel Sambuc krb5_warn(context, ret, "krb5_sname_to_principal(%s)", host);
315ebfedea0SLionel Sambuc close(fd);
316ebfedea0SLionel Sambuc continue;
317ebfedea0SLionel Sambuc }
318ebfedea0SLionel Sambuc
319ebfedea0SLionel Sambuc if (local_realm) {
320ebfedea0SLionel Sambuc krb5_realm my_realm;
321ebfedea0SLionel Sambuc krb5_get_default_realm(context,&my_realm);
322ebfedea0SLionel Sambuc krb5_principal_set_realm(context,server,my_realm);
323ebfedea0SLionel Sambuc krb5_xfree(my_realm);
324ebfedea0SLionel Sambuc }
325ebfedea0SLionel Sambuc
326ebfedea0SLionel Sambuc auth_context = NULL;
327ebfedea0SLionel Sambuc ret = krb5_sendauth(context,
328ebfedea0SLionel Sambuc &auth_context,
329ebfedea0SLionel Sambuc &fd,
330ebfedea0SLionel Sambuc HPROP_VERSION,
331ebfedea0SLionel Sambuc NULL,
332ebfedea0SLionel Sambuc server,
333ebfedea0SLionel Sambuc AP_OPTS_MUTUAL_REQUIRED | AP_OPTS_USE_SUBKEY,
334ebfedea0SLionel Sambuc NULL, /* in_data */
335ebfedea0SLionel Sambuc NULL, /* in_creds */
336ebfedea0SLionel Sambuc ccache,
337ebfedea0SLionel Sambuc NULL,
338ebfedea0SLionel Sambuc NULL,
339ebfedea0SLionel Sambuc NULL);
340ebfedea0SLionel Sambuc
341ebfedea0SLionel Sambuc krb5_free_principal(context, server);
342ebfedea0SLionel Sambuc
343ebfedea0SLionel Sambuc if(ret) {
344ebfedea0SLionel Sambuc failed++;
345ebfedea0SLionel Sambuc krb5_warn(context, ret, "krb5_sendauth (%s)", host);
346ebfedea0SLionel Sambuc close(fd);
347ebfedea0SLionel Sambuc goto next_host;
348ebfedea0SLionel Sambuc }
349ebfedea0SLionel Sambuc
350ebfedea0SLionel Sambuc pd.context = context;
351ebfedea0SLionel Sambuc pd.auth_context = auth_context;
352ebfedea0SLionel Sambuc pd.sock = fd;
353ebfedea0SLionel Sambuc
354ebfedea0SLionel Sambuc ret = iterate (context, database_name, db, type, &pd);
355ebfedea0SLionel Sambuc if (ret) {
356ebfedea0SLionel Sambuc krb5_warnx(context, "iterate to host %s failed", host);
357ebfedea0SLionel Sambuc failed++;
358ebfedea0SLionel Sambuc goto next_host;
359ebfedea0SLionel Sambuc }
360ebfedea0SLionel Sambuc
361ebfedea0SLionel Sambuc krb5_data_zero (&data);
362ebfedea0SLionel Sambuc ret = krb5_write_priv_message(context, auth_context, &fd, &data);
363ebfedea0SLionel Sambuc if(ret) {
364ebfedea0SLionel Sambuc krb5_warn(context, ret, "krb5_write_priv_message");
365ebfedea0SLionel Sambuc failed++;
366ebfedea0SLionel Sambuc goto next_host;
367ebfedea0SLionel Sambuc }
368ebfedea0SLionel Sambuc
369ebfedea0SLionel Sambuc ret = krb5_read_priv_message(context, auth_context, &fd, &data);
370ebfedea0SLionel Sambuc if(ret) {
371ebfedea0SLionel Sambuc krb5_warn(context, ret, "krb5_read_priv_message: %s", host);
372ebfedea0SLionel Sambuc failed++;
373ebfedea0SLionel Sambuc goto next_host;
374ebfedea0SLionel Sambuc } else
375ebfedea0SLionel Sambuc krb5_data_free (&data);
376ebfedea0SLionel Sambuc
377ebfedea0SLionel Sambuc next_host:
378ebfedea0SLionel Sambuc krb5_auth_con_free(context, auth_context);
379ebfedea0SLionel Sambuc close(fd);
380ebfedea0SLionel Sambuc }
381ebfedea0SLionel Sambuc if (failed)
382ebfedea0SLionel Sambuc return 1;
383ebfedea0SLionel Sambuc return 0;
384ebfedea0SLionel Sambuc }
385ebfedea0SLionel Sambuc
386ebfedea0SLionel Sambuc int
main(int argc,char ** argv)387ebfedea0SLionel Sambuc main(int argc, char **argv)
388ebfedea0SLionel Sambuc {
389ebfedea0SLionel Sambuc krb5_error_code ret;
390ebfedea0SLionel Sambuc krb5_context context;
391ebfedea0SLionel Sambuc krb5_ccache ccache = NULL;
392ebfedea0SLionel Sambuc HDB *db = NULL;
393ebfedea0SLionel Sambuc int optidx = 0;
394ebfedea0SLionel Sambuc
395ebfedea0SLionel Sambuc int type, exit_code;
396ebfedea0SLionel Sambuc
397ebfedea0SLionel Sambuc setprogname(argv[0]);
398ebfedea0SLionel Sambuc
399ebfedea0SLionel Sambuc if(getarg(args, num_args, argc, argv, &optidx))
400ebfedea0SLionel Sambuc usage(1);
401ebfedea0SLionel Sambuc
402ebfedea0SLionel Sambuc if(help_flag)
403ebfedea0SLionel Sambuc usage(0);
404ebfedea0SLionel Sambuc
405ebfedea0SLionel Sambuc if(version_flag){
406ebfedea0SLionel Sambuc print_version(NULL);
407ebfedea0SLionel Sambuc exit(0);
408ebfedea0SLionel Sambuc }
409ebfedea0SLionel Sambuc
410ebfedea0SLionel Sambuc ret = krb5_init_context(&context);
411ebfedea0SLionel Sambuc if(ret)
412ebfedea0SLionel Sambuc exit(1);
413ebfedea0SLionel Sambuc
414ebfedea0SLionel Sambuc /* We may be reading an old database encrypted with a DES master key. */
415ebfedea0SLionel Sambuc ret = krb5_allow_weak_crypto(context, 1);
416ebfedea0SLionel Sambuc if(ret)
417ebfedea0SLionel Sambuc krb5_err(context, 1, ret, "krb5_allow_weak_crypto");
418ebfedea0SLionel Sambuc
419ebfedea0SLionel Sambuc if(local_realm)
420ebfedea0SLionel Sambuc krb5_set_default_realm(context, local_realm);
421ebfedea0SLionel Sambuc
422ebfedea0SLionel Sambuc if(encrypt_flag && decrypt_flag)
423ebfedea0SLionel Sambuc krb5_errx(context, 1,
424ebfedea0SLionel Sambuc "only one of `--encrypt' and `--decrypt' is meaningful");
425ebfedea0SLionel Sambuc
426ebfedea0SLionel Sambuc if(source_type != NULL) {
427ebfedea0SLionel Sambuc type = parse_source_type(source_type);
428ebfedea0SLionel Sambuc if(type == 0)
429ebfedea0SLionel Sambuc krb5_errx(context, 1, "unknown source type `%s'", source_type);
430ebfedea0SLionel Sambuc } else
431ebfedea0SLionel Sambuc type = HPROP_HEIMDAL;
432ebfedea0SLionel Sambuc
433ebfedea0SLionel Sambuc if(!to_stdout)
434ebfedea0SLionel Sambuc get_creds(context, &ccache);
435ebfedea0SLionel Sambuc
436ebfedea0SLionel Sambuc if(decrypt_flag || encrypt_flag) {
437ebfedea0SLionel Sambuc ret = hdb_read_master_key(context, mkeyfile, &mkey5);
438ebfedea0SLionel Sambuc if(ret && ret != ENOENT)
439ebfedea0SLionel Sambuc krb5_err(context, 1, ret, "hdb_read_master_key");
440ebfedea0SLionel Sambuc if(ret)
441ebfedea0SLionel Sambuc krb5_errx(context, 1, "No master key file found");
442ebfedea0SLionel Sambuc }
443ebfedea0SLionel Sambuc
444ebfedea0SLionel Sambuc switch(type) {
445ebfedea0SLionel Sambuc case HPROP_MIT_DUMP:
446ebfedea0SLionel Sambuc if (database == NULL)
447ebfedea0SLionel Sambuc krb5_errx(context, 1, "no dump file specified");
448ebfedea0SLionel Sambuc break;
449ebfedea0SLionel Sambuc case HPROP_HEIMDAL:
450ebfedea0SLionel Sambuc ret = hdb_create (context, &db, database);
451ebfedea0SLionel Sambuc if(ret)
452ebfedea0SLionel Sambuc krb5_err(context, 1, ret, "hdb_create: %s", database);
453ebfedea0SLionel Sambuc ret = db->hdb_open(context, db, O_RDONLY, 0);
454ebfedea0SLionel Sambuc if(ret)
455ebfedea0SLionel Sambuc krb5_err(context, 1, ret, "db->hdb_open");
456ebfedea0SLionel Sambuc break;
457ebfedea0SLionel Sambuc default:
458ebfedea0SLionel Sambuc krb5_errx(context, 1, "unknown dump type `%d'", type);
459ebfedea0SLionel Sambuc break;
460ebfedea0SLionel Sambuc }
461ebfedea0SLionel Sambuc
462ebfedea0SLionel Sambuc if (to_stdout)
463ebfedea0SLionel Sambuc exit_code = dump_database (context, type, database, db);
464ebfedea0SLionel Sambuc else
465ebfedea0SLionel Sambuc exit_code = propagate_database (context, type, database,
466ebfedea0SLionel Sambuc db, ccache, optidx, argc, argv);
467ebfedea0SLionel Sambuc
468ebfedea0SLionel Sambuc if(ccache != NULL)
469ebfedea0SLionel Sambuc krb5_cc_destroy(context, ccache);
470ebfedea0SLionel Sambuc
471ebfedea0SLionel Sambuc if(db != NULL)
472ebfedea0SLionel Sambuc (*db->hdb_destroy)(context, db);
473ebfedea0SLionel Sambuc
474ebfedea0SLionel Sambuc krb5_free_context(context);
475ebfedea0SLionel Sambuc return exit_code;
476ebfedea0SLionel Sambuc }
477