crypto/dist/heimdal/lib/krb5/test_forward.c

   1 /*
   2  * Copyright (c) 2008 Kungliga Tekniska Högskolan
   3  * (Royal Institute of Technology, Stockholm, Sweden).
   4  * All rights reserved.
   5  *
   6  * Redistribution and use in source and binary forms, with or without
   7  * modification, are permitted provided that the following conditions
   8  * are met:
   9  *
  10  * 1. Redistributions of source code must retain the above copyright
  11  *    notice, this list of conditions and the following disclaimer.
  12  *
  13  * 2. Redistributions in binary form must reproduce the above copyright
  14  *    notice, this list of conditions and the following disclaimer in the
  15  *    documentation and/or other materials provided with the distribution.
  16  *
  17  * 3. Neither the name of KTH nor the names of its contributors may be
  18  *    used to endorse or promote products derived from this software without
  19  *    specific prior written permission.
  20  *
  21  * THIS SOFTWARE IS PROVIDED BY KTH AND ITS CONTRIBUTORS ``AS IS'' AND ANY
  22  * EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  23  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
  24  * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL KTH OR ITS CONTRIBUTORS BE
  25  * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
  26  * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
  27  * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
  28  * BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
  29  * WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR
  30  * OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF
  31  * ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. */
  32
  33 #include "krb5_locl.h"
  34 #include <err.h>
  35 #include <getarg.h>
  36
  37 __RCSID("$Heimdal$"
  38         "$NetBSD$");
  39
  40 static int version_flag = 0;
  41 static int help_flag    = 0;
  42
  43 static struct getargs args[] = {
  44     {"version", 0,      arg_flag,       &version_flag,
  45      "print version", NULL },
  46     {"help",    0,      arg_flag,       &help_flag,
  47      NULL, NULL }
  48 };
  49
  50 static void
  51 usage (int ret)
  52 {
  53     arg_printusage (args,
  54                     sizeof(args)/sizeof(*args),
  55                     NULL,
  56                     "hostname");
  57     exit (ret);
  58 }
  59
  60 int
  61 main(int argc, char **argv)
  62 {
  63     const char *hostname;
  64     krb5_context context;
  65     krb5_auth_context ac;
  66     krb5_error_code ret;
  67     krb5_creds cred;
  68     krb5_ccache id;
  69     krb5_data data;
  70     int optidx = 0;
  71
  72     setprogname (argv[0]);
  73
  74     if(getarg(args, sizeof(args) / sizeof(args[0]), argc, argv, &optidx))
  75         usage(1);
  76
  77     if (help_flag)
  78         usage (0);
  79
  80     if(version_flag){
  81         print_version(NULL);
  82         exit(0);
  83     }
  84
  85     argc -= optidx;
  86     argv += optidx;
  87
  88     if (argc < 1)
  89         usage(1);
  90
  91     hostname = argv[0];
  92
  93     memset(&cred, 0, sizeof(cred));
  94
  95     ret = krb5_init_context(&context);
  96     if (ret)
  97         errx (1, "krb5_init_context failed: %d", ret);
  98
  99     ret = krb5_cc_default(context, &id);
 100     if (ret)
 101         krb5_err(context, 1, ret, "krb5_cc_default failed: %d", ret);
 102
 103     ret = krb5_auth_con_init(context, &ac);
 104     if (ret)
 105         krb5_err(context, 1, ret, "krb5_auth_con_init failed: %d", ret);
 106
 107     krb5_auth_con_addflags(context, ac,
 108                            KRB5_AUTH_CONTEXT_CLEAR_FORWARDED_CRED, NULL);
 109
 110     ret = krb5_cc_get_principal(context, id, &cred.client);
 111     if (ret)
 112         krb5_err(context, 1, ret, "krb5_cc_get_principal");
 113
 114     ret = krb5_make_principal(context,
 115                               &cred.server,
 116                               krb5_principal_get_realm(context, cred.client),
 117                               KRB5_TGS_NAME,
 118                               krb5_principal_get_realm(context, cred.client),
 119                               NULL);
 120     if (ret)
 121         krb5_err(context, 1, ret, "krb5_make_principal(server)");
 122
 123     ret = krb5_get_forwarded_creds (context,
 124                                     ac,
 125                                     id,
 126                                     KDC_OPT_FORWARDABLE,
 127                                     hostname,
 128                                     &cred,
 129                                     &data);
 130     if (ret)
 131         krb5_err (context, 1, ret, "krb5_get_forwarded_creds");
 132
 133     krb5_data_free(&data);
 134     krb5_free_context(context);
 135
 136     return 0;
 137 }