kswitch.c   [plain text]

/*
 * Copyright (c) 2008 Kungliga Tekniska Högskolan
 * (Royal Institute of Technology, Stockholm, Sweden).
 * All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 *
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer.
 *
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in the
 *    documentation and/or other materials provided with the distribution.
 *
 * 3. Neither the name of the Institute nor the names of its contributors
 *    may be used to endorse or promote products derived from this software
 *    without specific prior written permission.
 *
 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 * ARE DISCLAIMED.  IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
 * SUCH DAMAGE.
 */

#include "kuser_locl.h"

#ifdef HAVE_READLINE
char *readline(char *prompt);
#endif

/*
 *
 */

static int version_flag		= 0;
static int help_flag		= 0;
static char *cache;
static char *principal;
static char *type;
static int interactive_flag;

static struct getargs args[] = {
    { "type",			't', arg_string, &type,
      NP_("type of credential cache", ""), "type" },
    { "cache",			'c', arg_string, &cache,
      NP_("name of credential cache", ""), "cache" },
    { "principal",		'p', arg_string, &principal,
      NP_("name of principal", ""), "principal" },
    { "interactive", 		'i', arg_flag, &interactive_flag,
      NP_("interactive selection", ""), NULL },
    { "version", 		0,   arg_flag, &version_flag,
      NP_("print version", ""), NULL },
    { "help",			0,   arg_flag, &help_flag, NULL, NULL}
};

static void
usage (int ret) __attribute__((noreturn));

static void
usage (int ret)
{
    arg_printusage (args, sizeof(args)/sizeof(*args), NULL, "");
    exit (ret);
}

int
main (int argc, char **argv)
{
    krb5_context context;
    krb5_error_code ret;
    krb5_ccache id = NULL;
    int optidx = 0;

    setprogname (argv[0]);

    setlocale (LC_ALL, "");
    bindtextdomain ("heimdal_kuser", HEIMDAL_LOCALEDIR);
    textdomain("heimdal_kuser");

    ret = krb5_init_context (&context);
    if (ret == KRB5_CONFIG_BADFORMAT)
	errx (1, "krb5_init_context failed to parse configuration file");
    else if (ret)
	errx(1, "krb5_init_context failed: %d", ret);

    if(getarg(args, sizeof(args) / sizeof(args[0]), argc, argv, &optidx))
	usage(1);

    if (help_flag)
	usage (0);

    if(version_flag){
	print_version(NULL);
	exit(0);
    }

    argc -= optidx;

    if (argc != 0)
	usage (1);

    if (cache && principal)
	krb5_errx(context, 1,
		  N_("Both --cache and --principal given, choose one", ""));

    if (interactive_flag) {
	krb5_cc_cache_cursor cursor;
	krb5_ccache *ids = NULL;
	size_t i, len = 0;
	char *name;
	rtbl_t ct;

	ct = rtbl_create();

	rtbl_add_column (ct, "", 0);
	rtbl_add_column (ct, "Principal", 0);
	rtbl_set_column_prefix(ct, "Principal", "    ");

	ret = krb5_cc_cache_get_first (context, NULL, &cursor);
	if (ret)
	    krb5_err (context, 1, ret, "krb5_cc_cache_get_first");

	while (krb5_cc_cache_next (context, cursor, &id) == 0) {
	    krb5_principal p;
	    char num[10];
	
	    ret = krb5_cc_get_principal(context, id, &p);
	    if (ret)
		continue;

	    ret = krb5_unparse_name(context, p, &name);
	    krb5_free_principal(context, p);
	    if (ret)
		krb5_err(context, 1, ret, "krb5_unparse_name");

	    snprintf(num, sizeof(num), "%d", (int)(len + 1));
	    rtbl_add_column_entry(ct, "", num);
	    rtbl_add_column_entry(ct, "Principal", name);
	    free(name);
	    
	    ids = erealloc(ids, (len + 1) * sizeof(ids[0]));
	    ids[len] = id;
	    len++;
	}
	krb5_cc_cache_end_seq_get(context, cursor);
	if (len == 0)
	    krb5_errx(context, 1, "no credentials to select");

	rtbl_format(ct, stdout);
	rtbl_destroy(ct);

	name = readline("Select number: ");
	if (name) {
	    i = atoi(name);
	    if (i == 0)
		krb5_errx(context, 1, "Cache number '%s' is invalid", name);
	    if (i > len)
		krb5_errx(context, 1, "Cache number '%s' is too large", name);
	    
	    id = ids[i - 1];
	    ids[i - 1] = NULL;
	} else
	    krb5_errx(context, 1, "No cache selected");
	for (i = 0; i < len; i++)
	    if (ids[i])
		krb5_cc_close(context, ids[i]);

    } else if (principal) {
	krb5_principal p;

	ret = krb5_parse_name(context, principal, &p);
	if (ret)
	    krb5_err (context, 1, ret, "krb5_parse_name: %s", principal);

	ret = krb5_cc_cache_match(context, p, &id);
	if (ret)
	    krb5_err (context, 1, ret,
		      N_("Did not find principal: %s", ""), principal);

	krb5_free_principal(context, p);

    } else if (cache) {
	const krb5_cc_ops *ops;
	char *str;

	ops = krb5_cc_get_prefix_ops(context, type);
	if (ops == NULL)
	    krb5_err (context, 1, 0, "krb5_cc_get_prefix_ops");
	
	asprintf(&str, "%s:%s", ops->prefix, cache);
	if (str == NULL)
	    krb5_errx(context, 1, N_("out of memory", ""));
	
	ret = krb5_cc_resolve(context, str, &id);
	if (ret)
	    krb5_err (context, 1, ret, "krb5_cc_resolve: %s", str);
	
	free(str);
    } else
	usage(1);

    ret = krb5_cc_switch(context, id);
    if (ret)
	krb5_err (context, 1, ret, "krb5_cc_switch");

    krb5_cc_close(context, id);

    return 0;
}