crypto/external/bsd/heimdal/dist/admin/copy.c

   1 /*      $NetBSD: copy.c,v 1.1.1.2 2014/04/24 12:45:26 pettai Exp $      */
   2
   3 /*
   4  * Copyright (c) 1997-2004 Kungliga Tekniska Högskolan
   5  * (Royal Institute of Technology, Stockholm, Sweden).
   6  * All rights reserved.
   7  *
   8  * Redistribution and use in source and binary forms, with or without
   9  * modification, are permitted provided that the following conditions
  10  * are met:
  11  *
  12  * 1. Redistributions of source code must retain the above copyright
  13  *    notice, this list of conditions and the following disclaimer.
  14  *
  15  * 2. Redistributions in binary form must reproduce the above copyright
  16  *    notice, this list of conditions and the following disclaimer in the
  17  *    documentation and/or other materials provided with the distribution.
  18  *
  19  * 3. Neither the name of the Institute nor the names of its contributors
  20  *    may be used to endorse or promote products derived from this software
  21  *    without specific prior written permission.
  22  *
  23  * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
  24  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  25  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  26  * ARE DISCLAIMED.  IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
  27  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  28  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  29  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  30  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  31  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  32  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  33  * SUCH DAMAGE.
  34  */
  35
  36 #include "ktutil_locl.h"
  37
  38 __RCSID("NetBSD");
  39
  40
  41 static krb5_boolean
  42 compare_keyblock(const krb5_keyblock *a, const krb5_keyblock *b)
  43 {
  44     if(a->keytype != b->keytype ||
  45        a->keyvalue.length != b->keyvalue.length ||
  46        memcmp(a->keyvalue.data, b->keyvalue.data, a->keyvalue.length) != 0)
  47         return FALSE;
  48     return TRUE;
  49 }
  50
  51 int
  52 kt_copy (void *opt, int argc, char **argv)
  53 {
  54     krb5_error_code ret;
  55     krb5_keytab src_keytab, dst_keytab;
  56     krb5_kt_cursor cursor;
  57     krb5_keytab_entry entry, dummy;
  58     const char *from = argv[0];
  59     const char *to = argv[1];
  60
  61     ret = krb5_kt_resolve (context, from, &src_keytab);
  62     if (ret) {
  63         krb5_warn (context, ret, "resolving src keytab `%s'", from);
  64         return 1;
  65     }
  66
  67     ret = krb5_kt_resolve (context, to, &dst_keytab);
  68     if (ret) {
  69         krb5_kt_close (context, src_keytab);
  70         krb5_warn (context, ret, "resolving dst keytab `%s'", to);
  71         return 1;
  72     }
  73
  74     ret = krb5_kt_start_seq_get (context, src_keytab, &cursor);
  75     if (ret) {
  76         krb5_warn (context, ret, "krb5_kt_start_seq_get %s", keytab_string);
  77         goto out;
  78     }
  79
  80     if (verbose_flag)
  81         fprintf(stderr, "copying %s to %s\n", from, to);
  82
  83     while((ret = krb5_kt_next_entry(context, src_keytab,
  84                                     &entry, &cursor)) == 0) {
  85         char *name_str;
  86         char *etype_str;
  87         ret = krb5_unparse_name (context, entry.principal, &name_str);
  88         if(ret) {
  89             krb5_warn(context, ret, "krb5_unparse_name");
  90             name_str = NULL; /* XXX */
  91         }
  92         ret = krb5_enctype_to_string(context, entry.keyblock.keytype, &etype_str);
  93         if(ret) {
  94             krb5_warn(context, ret, "krb5_enctype_to_string");
  95             etype_str = NULL; /* XXX */
  96         }
  97         ret = krb5_kt_get_entry(context, dst_keytab,
  98                                 entry.principal,
  99                                 entry.vno,
 100                                 entry.keyblock.keytype,
 101                                 &dummy);
 102         if(ret == 0) {
 103             /* this entry is already in the new keytab, so no need to
 104                copy it; if the keyblocks are not the same, something
 105                is weird, so complain about that */
 106             if(!compare_keyblock(&entry.keyblock, &dummy.keyblock)) {
 107                 krb5_warnx(context, "entry with different keyvalue "
 108                            "already exists for %s, keytype %s, kvno %d",
 109                            name_str, etype_str, entry.vno);
 110             }
 111             krb5_kt_free_entry(context, &dummy);
 112             krb5_kt_free_entry (context, &entry);
 113             free(name_str);
 114             free(etype_str);
 115             continue;
 116         } else if(ret != KRB5_KT_NOTFOUND) {
 117             krb5_warn (context, ret, "%s: fetching %s/%s/%u",
 118                        to, name_str, etype_str, entry.vno);
 119             krb5_kt_free_entry (context, &entry);
 120             free(name_str);
 121             free(etype_str);
 122             break;
 123         }
 124         if (verbose_flag)
 125             fprintf (stderr, "copying %s, keytype %s, kvno %d\n", name_str,
 126                      etype_str, entry.vno);
 127         ret = krb5_kt_add_entry (context, dst_keytab, &entry);
 128         krb5_kt_free_entry (context, &entry);
 129         if (ret) {
 130             krb5_warn (context, ret, "%s: adding %s/%s/%u",
 131                        to, name_str, etype_str, entry.vno);
 132             free(name_str);
 133             free(etype_str);
 134             break;
 135         }
 136         free(name_str);
 137         free(etype_str);
 138     }
 139     krb5_kt_end_seq_get (context, src_keytab, &cursor);
 140
 141   out:
 142     krb5_kt_close (context, src_keytab);
 143     krb5_kt_close (context, dst_keytab);
 144     return ret != 0;
 145 }