mirror of
https://git.hardenedbsd.org/hardenedbsd/HardenedBSD.git
synced 2024-12-21 08:24:10 +01:00
214 lines
6.0 KiB
C
214 lines
6.0 KiB
C
/*
|
|
* Copyright (c) 1997 - 2002 Kungliga Tekniska Högskolan
|
|
* (Royal Institute of Technology, Stockholm, Sweden).
|
|
* All rights reserved.
|
|
*
|
|
* Redistribution and use in source and binary forms, with or without
|
|
* modification, are permitted provided that the following conditions
|
|
* are met:
|
|
*
|
|
* 1. Redistributions of source code must retain the above copyright
|
|
* notice, this list of conditions and the following disclaimer.
|
|
*
|
|
* 2. Redistributions in binary form must reproduce the above copyright
|
|
* notice, this list of conditions and the following disclaimer in the
|
|
* documentation and/or other materials provided with the distribution.
|
|
*
|
|
* 3. Neither the name of the Institute nor the names of its contributors
|
|
* may be used to endorse or promote products derived from this software
|
|
* without specific prior written permission.
|
|
*
|
|
* THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
|
|
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
|
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
|
* ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
|
|
* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
|
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
|
|
* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
|
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
|
|
* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
|
|
* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
|
|
* SUCH DAMAGE.
|
|
*/
|
|
|
|
#include "ktutil_locl.h"
|
|
|
|
RCSID("$Id: list.c,v 1.10 2002/01/30 10:12:21 joda Exp $");
|
|
|
|
static int help_flag;
|
|
static int list_keys;
|
|
static int list_timestamp;
|
|
|
|
static struct getargs args[] = {
|
|
{ "help", 'h', arg_flag, &help_flag },
|
|
{ "keys", 0, arg_flag, &list_keys, "show key value" },
|
|
{ "timestamp", 0, arg_flag, &list_timestamp, "show timestamp" },
|
|
};
|
|
|
|
static int num_args = sizeof(args) / sizeof(args[0]);
|
|
|
|
struct key_info {
|
|
char *version;
|
|
char *etype;
|
|
char *principal;
|
|
char *timestamp;
|
|
char *key;
|
|
struct key_info *next;
|
|
};
|
|
|
|
static int
|
|
do_list(const char *keytab_string)
|
|
{
|
|
krb5_error_code ret;
|
|
krb5_keytab keytab;
|
|
krb5_keytab_entry entry;
|
|
krb5_kt_cursor cursor;
|
|
struct key_info *ki, **kie = &ki, *kp;
|
|
|
|
int max_version = sizeof("Vno") - 1;
|
|
int max_etype = sizeof("Type") - 1;
|
|
int max_principal = sizeof("Principal") - 1;
|
|
int max_timestamp = sizeof("Date") - 1;
|
|
int max_key = sizeof("Key") - 1;
|
|
|
|
/* XXX specialcase the ANY type */
|
|
if(strncasecmp(keytab_string, "ANY:", 4) == 0) {
|
|
int flag = 0;
|
|
char buf[1024];
|
|
keytab_string += 4;
|
|
while (strsep_copy((const char**)&keytab_string, ",",
|
|
buf, sizeof(buf)) != -1) {
|
|
if(flag)
|
|
printf("\n");
|
|
do_list(buf);
|
|
flag = 1;
|
|
}
|
|
return 0;
|
|
}
|
|
|
|
ret = krb5_kt_resolve(context, keytab_string, &keytab);
|
|
if (ret) {
|
|
krb5_warn(context, ret, "resolving keytab %s", keytab_string);
|
|
return 0;
|
|
}
|
|
|
|
ret = krb5_kt_start_seq_get(context, keytab, &cursor);
|
|
if(ret){
|
|
krb5_warn(context, ret, "krb5_kt_start_seq_get %s", keytab_string);
|
|
goto out;
|
|
}
|
|
|
|
printf ("%s:\n\n", keytab_string);
|
|
|
|
while((ret = krb5_kt_next_entry(context, keytab, &entry, &cursor)) == 0){
|
|
#define CHECK_MAX(F) if(max_##F < strlen(kp->F)) max_##F = strlen(kp->F)
|
|
|
|
kp = malloc(sizeof(*kp));
|
|
if (kp == NULL) {
|
|
krb5_kt_free_entry(context, &entry);
|
|
krb5_kt_end_seq_get(context, keytab, &cursor);
|
|
krb5_warn(context, ret, "malloc failed");
|
|
goto out;
|
|
}
|
|
|
|
asprintf(&kp->version, "%d", entry.vno);
|
|
CHECK_MAX(version);
|
|
ret = krb5_enctype_to_string(context,
|
|
entry.keyblock.keytype, &kp->etype);
|
|
if (ret != 0)
|
|
asprintf(&kp->etype, "unknown (%d)", entry.keyblock.keytype);
|
|
CHECK_MAX(etype);
|
|
krb5_unparse_name(context, entry.principal, &kp->principal);
|
|
CHECK_MAX(principal);
|
|
if (list_timestamp) {
|
|
char tstamp[256];
|
|
|
|
krb5_format_time(context, entry.timestamp,
|
|
tstamp, sizeof(tstamp), FALSE);
|
|
|
|
kp->timestamp = strdup(tstamp);
|
|
CHECK_MAX(timestamp);
|
|
}
|
|
if(list_keys) {
|
|
int i;
|
|
kp->key = malloc(2 * entry.keyblock.keyvalue.length + 1);
|
|
for(i = 0; i < entry.keyblock.keyvalue.length; i++)
|
|
snprintf(kp->key + 2 * i, 3, "%02x",
|
|
((unsigned char*)entry.keyblock.keyvalue.data)[i]);
|
|
CHECK_MAX(key);
|
|
}
|
|
*kie = kp;
|
|
kie = &kp->next;
|
|
krb5_kt_free_entry(context, &entry);
|
|
}
|
|
*kie = NULL; /* termiate list */
|
|
ret = krb5_kt_end_seq_get(context, keytab, &cursor);
|
|
|
|
printf("%-*s %-*s %-*s", max_version, "Vno",
|
|
max_etype, "Type",
|
|
max_principal, "Principal");
|
|
if(list_timestamp)
|
|
printf(" %-*s", max_timestamp, "Date");
|
|
if(list_keys)
|
|
printf(" %s", "Key");
|
|
printf("\n");
|
|
|
|
for(kp = ki; kp; ) {
|
|
printf("%*s %-*s %-*s", max_version, kp->version,
|
|
max_etype, kp->etype,
|
|
max_principal, kp->principal);
|
|
if(list_timestamp)
|
|
printf(" %-*s", max_timestamp, kp->timestamp);
|
|
if(list_keys)
|
|
printf(" %s", kp->key);
|
|
printf("\n");
|
|
|
|
/* free entries */
|
|
free(kp->version);
|
|
free(kp->etype);
|
|
free(kp->principal);
|
|
if(list_timestamp)
|
|
free(kp->timestamp);
|
|
if(list_keys) {
|
|
memset(kp->key, 0, strlen(kp->key));
|
|
free(kp->key);
|
|
}
|
|
ki = kp;
|
|
kp = kp->next;
|
|
free(ki);
|
|
}
|
|
out:
|
|
krb5_kt_close(context, keytab);
|
|
return 0;
|
|
}
|
|
|
|
int
|
|
kt_list(int argc, char **argv)
|
|
{
|
|
krb5_error_code ret;
|
|
int optind = 0;
|
|
char kt[1024];
|
|
|
|
if(verbose_flag)
|
|
list_timestamp = 1;
|
|
|
|
if(getarg(args, num_args, argc, argv, &optind)){
|
|
arg_printusage(args, num_args, "ktutil list", "");
|
|
return 1;
|
|
}
|
|
if(help_flag){
|
|
arg_printusage(args, num_args, "ktutil list", "");
|
|
return 0;
|
|
}
|
|
|
|
if (keytab_string == NULL) {
|
|
if((ret = krb5_kt_default_name(context, kt, sizeof(kt))) != 0) {
|
|
krb5_warn(context, ret, "getting default keytab name");
|
|
return 0;
|
|
}
|
|
keytab_string = kt;
|
|
}
|
|
do_list(keytab_string);
|
|
return 0;
|
|
}
|