Home | History | Annotate | Line # | Download | only in krb5
test_alname.c revision 1.1.1.2
      1 /*	$NetBSD: test_alname.c,v 1.1.1.2 2017/01/28 20:46:52 christos Exp $	*/
      2 
      3 /*
      4  * Copyright (c) 2003 Kungliga Tekniska Hgskolan
      5  * (Royal Institute of Technology, Stockholm, Sweden).
      6  * All rights reserved.
      7  *
      8  * Redistribution and use in source and binary forms, with or without
      9  * modification, are permitted provided that the following conditions
     10  * are met:
     11  *
     12  * 1. Redistributions of source code must retain the above copyright
     13  *    notice, this list of conditions and the following disclaimer.
     14  *
     15  * 2. Redistributions in binary form must reproduce the above copyright
     16  *    notice, this list of conditions and the following disclaimer in the
     17  *    documentation and/or other materials provided with the distribution.
     18  *
     19  * 3. Neither the name of KTH nor the names of its contributors may be
     20  *    used to endorse or promote products derived from this software without
     21  *    specific prior written permission.
     22  *
     23  * THIS SOFTWARE IS PROVIDED BY KTH AND ITS CONTRIBUTORS ``AS IS'' AND ANY
     24  * EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
     25  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
     26  * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL KTH OR ITS CONTRIBUTORS BE
     27  * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
     28  * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
     29  * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
     30  * BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
     31  * WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR
     32  * OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF
     33  * ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. */
     34 
     35 #include "krb5_locl.h"
     36 #include <krb5/getarg.h>
     37 #include <err.h>
     38 
     39 char localname[1024];
     40 static size_t lname_size = sizeof (localname);
     41 static int lname_size_arg = 0;
     42 static int simple_flag = 0;
     43 static int verbose_flag = 0;
     44 static int version_flag = 0;
     45 static int help_flag	= 0;
     46 
     47 static struct getargs args[] = {
     48     {"lname-size",	0,	arg_integer,	&lname_size_arg,
     49      "set localname size (0 means use default, must be 0..1023)", "integer" },
     50     {"simple",	0,	arg_flag,	&simple_flag, /* Used for scripting */
     51      "map the given principal and print the resulting localname", NULL },
     52     {"verbose",	0,	arg_flag,	&verbose_flag,
     53      "print the actual principal name as well as the localname", NULL },
     54     {"version",	0,	arg_flag,	&version_flag,
     55      "print version", NULL },
     56     {"help",	0,	arg_flag,	&help_flag,
     57      NULL, NULL }
     58 };
     59 
     60 static void
     61 test_alname(krb5_context context, krb5_const_realm realm,
     62 	    const char *user, const char *inst,
     63 	    const char *localuser, int ok)
     64 {
     65     krb5_principal p;
     66     krb5_error_code ret;
     67     char *princ;
     68 
     69     ret = krb5_make_principal(context, &p, realm, user, inst, NULL);
     70     if (ret)
     71 	krb5_err(context, 1, ret, "krb5_build_principal");
     72 
     73     ret = krb5_unparse_name(context, p, &princ);
     74     if (ret)
     75 	krb5_err(context, 1, ret, "krb5_unparse_name");
     76 
     77     ret = krb5_aname_to_localname(context, p, lname_size, localname);
     78     krb5_free_principal(context, p);
     79     if (ret) {
     80 	if (!ok) {
     81 	    free(princ);
     82 	    return;
     83 	}
     84 	krb5_err(context, 1, ret, "krb5_aname_to_localname: %s -> %s",
     85 		 princ, localuser);
     86 	free(princ);
     87     }
     88 
     89     if (strcmp(localname, localuser) != 0) {
     90 	if (ok)
     91 	    errx(1, "compared failed %s != %s (should have succeded)",
     92 		 localname, localuser);
     93     } else {
     94 	if (!ok)
     95 	    errx(1, "compared failed %s == %s (should have failed)",
     96 		 localname, localuser);
     97     }
     98 
     99 }
    100 
    101 static void
    102 usage (int ret)
    103 {
    104     arg_printusage (args,
    105 		    sizeof(args)/sizeof(*args),
    106 		    NULL,
    107 		    "");
    108     exit (ret);
    109 }
    110 
    111 int
    112 main(int argc, char **argv)
    113 {
    114     krb5_context context;
    115     krb5_error_code ret;
    116     krb5_realm realm;
    117     int optidx = 0;
    118     char *user;
    119 
    120     setprogname(argv[0]);
    121 
    122     if(getarg(args, sizeof(args) / sizeof(args[0]), argc, argv, &optidx))
    123 	usage(1);
    124 
    125     if (help_flag)
    126 	usage (0);
    127 
    128     if(version_flag){
    129 	print_version(NULL);
    130 	exit(0);
    131     }
    132 
    133     argc -= optidx;
    134     argv += optidx;
    135 
    136     ret = krb5_init_context(&context);
    137     if (ret)
    138 	errx (1, "krb5_init_context failed: %d", ret);
    139 
    140     if (simple_flag) {
    141 	krb5_principal princ;
    142 	char *unparsed;
    143 	int status = 0;
    144 
    145 	/* Map then print the result and exit */
    146 	if (argc != 1)
    147 	    errx(1, "One argument is required and it must be a principal name");
    148 
    149 	ret = krb5_parse_name(context, argv[0], &princ);
    150 	if (ret)
    151 	    krb5_err(context, 1, ret, "krb5_build_principal");
    152 
    153 	ret = krb5_unparse_name(context, princ, &unparsed);
    154 	if (ret)
    155 	    krb5_err(context, 1, ret, "krb5_unparse_name");
    156 
    157 	if (lname_size_arg > 0 && lname_size_arg < 1024)
    158 	    lname_size = lname_size_arg;
    159 	else if (lname_size_arg != 0)
    160 	    errx(1, "local name size must be between 0 and 1023 (inclusive)");
    161 
    162 	ret = krb5_aname_to_localname(context, princ, lname_size, localname);
    163 	if (ret == KRB5_NO_LOCALNAME) {
    164 	    if (verbose_flag)
    165 		fprintf(stderr, "No mapping obtained for %s\n", unparsed);
    166 	    exit(1);
    167 	}
    168 	switch (ret) {
    169 	case KRB5_PLUGIN_NO_HANDLE:
    170 	    fprintf(stderr, "Error: KRB5_PLUGIN_NO_HANDLE leaked!\n");
    171 	    status = 2;
    172 	    break;
    173 	case KRB5_CONFIG_NOTENUFSPACE:
    174 	    fprintf(stderr, "Error: lname-size (%lu) too small\n",
    175 		    (long unsigned)lname_size);
    176 	    status = 3;
    177 	    break;
    178 	case 0:
    179 	    if (verbose_flag)
    180 		printf("%s ", unparsed);
    181 	    printf("%s\n", localname);
    182 	    break;
    183 	default:
    184 	    krb5_err(context, 4, ret, "krb5_aname_to_localname");
    185 	    break;
    186 	}
    187 	free(unparsed);
    188 	krb5_free_principal(context, princ);
    189 	krb5_free_context(context);
    190 	exit(status);
    191     }
    192 
    193     if (argc != 1)
    194 	errx(1, "first argument should be a local user that is in root .k5login");
    195 
    196     user = argv[0];
    197 
    198     ret = krb5_get_default_realm(context, &realm);
    199     if (ret)
    200 	krb5_err(context, 1, ret, "krb5_get_default_realm");
    201 
    202     test_alname(context, realm, user, NULL, user, 1);
    203     test_alname(context, realm, user, "root", "root", 1);
    204 
    205     test_alname(context, "FOO.BAR.BAZ.KAKA", user, NULL, user, 0);
    206     test_alname(context, "FOO.BAR.BAZ.KAKA", user, "root", "root", 0);
    207 
    208     test_alname(context, realm, user, NULL,
    209 		"not-same-as-user", 0);
    210     test_alname(context, realm, user, "root",
    211 		"not-same-as-user", 0);
    212 
    213     test_alname(context, "FOO.BAR.BAZ.KAKA", user, NULL,
    214 		"not-same-as-user", 0);
    215     test_alname(context, "FOO.BAR.BAZ.KAKA", user, "root",
    216 		"not-same-as-user", 0);
    217 
    218     krb5_free_context(context);
    219 
    220     return 0;
    221 }
    222