1 /* $NetBSD: kcpytkt.c,v 1.2 2017/01/28 21:31:45 christos Exp $ */ 2 3 4 #include "kuser_locl.h" 5 6 static char *etypestr = 0; 7 static char *fromccachestr = 0; 8 static char *flagstr = 0; 9 static int exp_ok = 0; 10 static int quiet_flag = 0; 11 static int version_flag = 0; 12 static int help_flag = 0; 13 14 struct getargs args[] = { 15 { "cache", 'c', arg_string, &fromccachestr, 16 "Credentials cache", "cachename" }, 17 { "enctype", 'e', arg_string, &etypestr, 18 "Encryption type", "enctype" }, 19 { "flags", 'f', arg_string, &flagstr, 20 "Flags", "flags" }, 21 { "expired-ok", 'E', arg_flag, &exp_ok, 22 "Keep expired tickets" }, 23 { "quiet", 'q', arg_flag, &quiet_flag, "Quiet" }, 24 { "version", 0, arg_flag, &version_flag }, 25 { "help", 0, arg_flag, &help_flag } 26 }; 27 28 static void 29 usage(int ret) 30 { 31 arg_printusage(args, sizeof(args)/sizeof(args[0]), 32 "Usage: ", "dest_ccache service1 [service2 ...]"); 33 exit (ret); 34 } 35 36 static void do_kcpytkt (int argc, char *argv[], char *fromccachestr, char *etypestr, int flags); 37 38 int main(int argc, char *argv[]) 39 { 40 int optidx; 41 int flags = 0; 42 43 setprogname(argv[0]); 44 45 if (getarg(args, sizeof(args)/sizeof(args[0]), argc, argv, &optidx)) 46 usage(1); 47 48 if (help_flag) 49 usage(0); 50 51 if (version_flag) { 52 print_version(NULL); 53 exit(0); 54 } 55 56 argc -= optidx; 57 argv += optidx; 58 59 if (argc < 2) 60 usage(1); 61 62 if (flagstr) 63 flags = atoi(flagstr); 64 65 do_kcpytkt(argc, argv, fromccachestr, etypestr, flags); 66 67 return 0; 68 } 69 70 static void do_kcpytkt (int count, char *names[], 71 char *fromccachestr, char *etypestr, int flags) 72 { 73 krb5_context context; 74 krb5_error_code ret; 75 int i, errors; 76 krb5_enctype etype; 77 krb5_ccache fromccache; 78 krb5_ccache destccache; 79 krb5_principal me; 80 krb5_creds in_creds, out_creds; 81 int retflags; 82 char *princ; 83 84 ret = krb5_init_context(&context); 85 if (ret) 86 errx(1, "krb5_init_context failed: %d", ret); 87 88 if (etypestr) { 89 ret = krb5_string_to_enctype(context, etypestr, &etype); 90 if (ret) 91 krb5_err(context, 1, ret, "Can't convert enctype %s", etypestr); 92 retflags = KRB5_TC_MATCH_SRV_NAMEONLY | KRB5_TC_MATCH_KEYTYPE; 93 } else { 94 etype = 0; 95 retflags = KRB5_TC_MATCH_SRV_NAMEONLY; 96 } 97 98 if (fromccachestr) 99 ret = krb5_cc_resolve(context, fromccachestr, &fromccache); 100 else 101 ret = krb5_cc_default(context, &fromccache); 102 if (ret) 103 krb5_err(context, 1, ret, "Can't resolve credentials cache"); 104 105 ret = krb5_cc_get_principal(context, fromccache, &me); 106 if (ret) 107 krb5_err(context, 1, ret, "Can't query client principal name"); 108 109 ret = krb5_cc_resolve(context, names[0], &destccache); 110 if (ret) 111 krb5_err(context, 1, ret, "Can't resolve destination cache"); 112 113 errors = 0; 114 115 for (i = 1; i < count; i++) { 116 memset(&in_creds, 0, sizeof(in_creds)); 117 118 in_creds.client = me; 119 120 ret = krb5_parse_name(context, names[i], &in_creds.server); 121 if (ret) { 122 if (!quiet_flag) 123 krb5_warn(context, ret, "Parse error for %s", names[i]); 124 errors++; 125 continue; 126 } 127 128 ret = krb5_unparse_name(context, in_creds.server, &princ); 129 if (ret) { 130 krb5_warn(context, ret, "Unparse error for %s", names[i]); 131 errors++; 132 continue; 133 } 134 135 in_creds.session.keytype = etype; 136 137 if (!exp_ok) { 138 krb5_timeofday(context, &in_creds.times.endtime); 139 retflags |= KRB5_TC_MATCH_TIMES; 140 } 141 142 ret = krb5_cc_retrieve_cred(context, fromccache, retflags, 143 &in_creds, &out_creds); 144 if (ret) { 145 krb5_warn(context, ret, "Can't retrieve credentials for %s", princ); 146 147 krb5_free_unparsed_name(context, princ); 148 149 errors++; 150 continue; 151 } 152 153 ret = krb5_cc_store_cred(context, destccache, &out_creds); 154 155 krb5_free_principal(context, in_creds.server); 156 157 if (ret) { 158 krb5_warn(context, ret, "Can't store credentials for %s", princ); 159 160 krb5_free_cred_contents(context, &out_creds); 161 krb5_free_unparsed_name(context, princ); 162 163 errors++; 164 continue; 165 } 166 167 krb5_free_unparsed_name(context, princ); 168 krb5_free_cred_contents(context, &out_creds); 169 } 170 171 krb5_free_principal(context, me); 172 krb5_cc_close(context, fromccache); 173 krb5_cc_close(context, destccache); 174 krb5_free_context(context); 175 176 if (errors) 177 exit(1); 178 179 exit(0); 180 } 181