#if !defined(lint) && !defined(__CODECENTER__)
static char *rcsid = "$Header$";
#endif
#include <stdio.h>
#include <stdlib.h>
#include <errno.h>
#include <com_err.h>
#include "k5-int.h"
#include <kadm5/admin.h>
#include <krb5.h>
#include "server_internal.h"
#include "osconf.h"
static int check_handle(void *handle)
{
CHECK_HANDLE(handle);
return 0;
}
static int dup_db_args(kadm5_server_handle_t handle, char **db_args)
{
int count = 0;
int ret = 0;
for (count=0; db_args && db_args[count]; count++);
if (count == 0) {
handle->db_args = NULL;
goto clean_n_exit;
}
handle->db_args = calloc(sizeof(char*), count+1);
if (handle->db_args == NULL) {
ret=ENOMEM;
goto clean_n_exit;
}
for (count=0; db_args[count]; count++) {
handle->db_args[count] = strdup(db_args[count]);
if (handle->db_args[count] == NULL) {
ret = ENOMEM;
goto clean_n_exit;
}
}
clean_n_exit:
if (ret && handle->db_args) {
for (count=0; handle->db_args[count]; count++)
free(handle->db_args[count]);
free(handle->db_args), handle->db_args = NULL;
}
return ret;
}
static void free_db_args(kadm5_server_handle_t handle)
{
int count;
if (handle->db_args) {
for (count=0; handle->db_args[count]; count++)
free(handle->db_args[count]);
free(handle->db_args), handle->db_args = NULL;
}
}
kadm5_ret_t kadm5_init_with_password(char *client_name, char *pass,
char *service_name,
kadm5_config_params *params,
krb5_ui_4 struct_version,
krb5_ui_4 api_version,
char **db_args,
void **server_handle)
{
return kadm5_init(client_name, pass, service_name, params,
struct_version, api_version, db_args,
server_handle);
}
kadm5_ret_t kadm5_init_with_creds(char *client_name,
krb5_ccache ccache,
char *service_name,
kadm5_config_params *params,
krb5_ui_4 struct_version,
krb5_ui_4 api_version,
char **db_args,
void **server_handle)
{
if (api_version == KADM5_API_VERSION_2 && params &&
(params->mask & KADM5_CONFIG_MKEY_FROM_KBD) &&
params->mkey_from_kbd)
return KADM5_BAD_SERVER_PARAMS;
return kadm5_init(client_name, NULL, service_name, params,
struct_version, api_version, db_args,
server_handle);
}
kadm5_ret_t kadm5_init_with_skey(char *client_name, char *keytab,
char *service_name,
kadm5_config_params *params,
krb5_ui_4 struct_version,
krb5_ui_4 api_version,
char **db_args,
void **server_handle)
{
if (api_version == KADM5_API_VERSION_2 && params &&
(params->mask & KADM5_CONFIG_MKEY_FROM_KBD) &&
params->mkey_from_kbd)
return KADM5_BAD_SERVER_PARAMS;
return kadm5_init(client_name, NULL, service_name, params,
struct_version, api_version, db_args,
server_handle);
}
kadm5_ret_t kadm5_init(char *client_name, char *pass,
char *service_name,
kadm5_config_params *params_in,
krb5_ui_4 struct_version,
krb5_ui_4 api_version,
char **db_args,
void **server_handle)
{
int ret;
kadm5_server_handle_t handle;
kadm5_config_params params_local;
if (! server_handle)
return EINVAL;
if (! client_name)
return EINVAL;
if (! (handle = (kadm5_server_handle_t) malloc(sizeof *handle)))
return ENOMEM;
memset(handle, 0, sizeof(*handle));
ret = dup_db_args(handle, db_args);
if (ret) {
free(handle);
return ret;
}
ret = (int) krb5int_init_context_kdc(&(handle->context));
if (ret) {
free_db_args(handle);
free(handle);
return(ret);
}
initialize_ovk_error_table();
initialize_ovku_error_table();
handle->magic_number = KADM5_SERVER_HANDLE_MAGIC;
handle->struct_version = struct_version;
handle->api_version = api_version;
GENERIC_CHECK_HANDLE(handle, KADM5_OLD_SERVER_API_VERSION,
KADM5_NEW_SERVER_API_VERSION);
memset((char *) ¶ms_local, 0, sizeof(params_local));
if (api_version == KADM5_API_VERSION_1) {
params_local.realm = (char *) params_in;
if (params_in)
params_local.mask = KADM5_CONFIG_REALM;
params_in = ¶ms_local;
}
#if 0
#define ILLEGAL_PARAMS (KADM5_CONFIG_ADMIN_SERVER)
if (params_in && (params_in->mask & ILLEGAL_PARAMS)) {
krb5_free_context(handle->context);
free_db_args(handle);
free(handle);
return KADM5_BAD_SERVER_PARAMS;
}
#endif
ret = kadm5_get_config_params(handle->context, 1, params_in,
&handle->params);
if (ret) {
krb5_free_context(handle->context);
free_db_args(handle);
free(handle);
return(ret);
}
#define REQUIRED_PARAMS (KADM5_CONFIG_REALM | KADM5_CONFIG_DBNAME | \
KADM5_CONFIG_ADBNAME | \
KADM5_CONFIG_ADB_LOCKFILE | \
KADM5_CONFIG_ENCTYPE | \
KADM5_CONFIG_FLAGS | \
KADM5_CONFIG_MAX_LIFE | KADM5_CONFIG_MAX_RLIFE | \
KADM5_CONFIG_EXPIRATION | KADM5_CONFIG_ENCTYPES)
if ((handle->params.mask & REQUIRED_PARAMS) != REQUIRED_PARAMS) {
krb5_free_context(handle->context);
free_db_args(handle);
free(handle);
return KADM5_MISSING_CONF_PARAMS;
}
ret = krb5_set_default_realm(handle->context, handle->params.realm);
if (ret) {
krb5_free_context(handle->context);
free_db_args(handle);
free(handle);
return ret;
}
ret = krb5_db_open(handle->context, db_args,
KRB5_KDB_OPEN_RW | KRB5_KDB_SRV_TYPE_ADMIN);
if (ret) {
krb5_free_context(handle->context);
free_db_args(handle);
free(handle);
return(ret);
}
if ((ret = krb5_parse_name(handle->context, client_name,
&handle->current_caller))) {
krb5_db_fini(handle->context);
krb5_free_context(handle->context);
free_db_args(handle);
free(handle);
return ret;
}
if (! (handle->lhandle = malloc(sizeof(*handle)))) {
krb5_db_fini(handle->context);
krb5_free_context(handle->context);
free_db_args(handle);
free(handle);
return ENOMEM;
}
*handle->lhandle = *handle;
handle->lhandle->api_version = KADM5_API_VERSION_2;
handle->lhandle->struct_version = KADM5_STRUCT_VERSION;
handle->lhandle->lhandle = handle->lhandle;
ret = check_handle((void *) handle);
if (ret) {
free_db_args(handle);
free(handle);
return ret;
}
ret = kdb_init_master(handle, handle->params.realm,
(handle->api_version == KADM5_API_VERSION_1 ?
((pass == NULL) || !(strlen(pass))) :
((handle->params.mask & KADM5_CONFIG_MKEY_FROM_KBD)
&& handle->params.mkey_from_kbd)
));
if (ret) {
krb5_db_fini(handle->context);
krb5_free_context(handle->context);
free_db_args(handle);
free(handle);
return ret;
}
ret = kdb_init_hist(handle, handle->params.realm);
if (ret) {
krb5_db_fini(handle->context);
krb5_free_context(handle->context);
free_db_args(handle);
free(handle);
return ret;
}
ret = init_dict(&handle->params);
if (ret) {
krb5_db_fini(handle->context);
krb5_free_principal(handle->context, handle->current_caller);
krb5_free_context(handle->context);
free_db_args(handle);
free(handle);
return ret;
}
*server_handle = (void *) handle;
return KADM5_OK;
}
kadm5_ret_t kadm5_destroy(void *server_handle)
{
kadm5_server_handle_t handle = server_handle;
CHECK_HANDLE(server_handle);
destroy_dict();
adb_policy_close(handle);
krb5_db_fini(handle->context);
krb5_free_principal(handle->context, handle->current_caller);
kadm5_free_config_params(handle->context, &handle->params);
krb5_free_context(handle->context);
handle->magic_number = 0;
free(handle->lhandle);
free_db_args(handle);
free(handle);
return KADM5_OK;
}
kadm5_ret_t kadm5_lock(void *server_handle)
{
kadm5_server_handle_t handle = server_handle;
kadm5_ret_t ret;
CHECK_HANDLE(server_handle);
ret = krb5_db_lock(handle->context, KRB5_DB_LOCKMODE_EXCLUSIVE);
if (ret)
return ret;
return KADM5_OK;
}
kadm5_ret_t kadm5_unlock(void *server_handle)
{
kadm5_server_handle_t handle = server_handle;
kadm5_ret_t ret;
CHECK_HANDLE(server_handle);
ret = krb5_db_unlock(handle->context);
if (ret)
return ret;
return KADM5_OK;
}
kadm5_ret_t kadm5_flush(void *server_handle)
{
kadm5_server_handle_t handle = server_handle;
kadm5_ret_t ret;
CHECK_HANDLE(server_handle);
if ((ret = krb5_db_fini(handle->context)) ||
(ret = krb5_db_open(handle->context, handle->db_args,
KRB5_KDB_OPEN_RW | KRB5_KDB_SRV_TYPE_ADMIN)) ||
(ret = adb_policy_close(handle)) ||
(ret = adb_policy_init(handle))) {
(void) kadm5_destroy(server_handle);
return ret;
}
return KADM5_OK;
}
int _kadm5_check_handle(void *handle)
{
CHECK_HANDLE(handle);
return 0;
}
#include "gssapiP_krb5.h"
krb5_error_code kadm5_init_krb5_context (krb5_context *ctx)
{
static int first_time = 1;
if (first_time) {
krb5_error_code err;
err = krb5_gss_use_kdc_context();
if (err)
return err;
first_time = 0;
}
return krb5int_init_context_kdc(ctx);
}