1 /* $NetBSD: kcpytkt.c,v 1.1.1.2 2014/04/24 12:45:28 pettai Exp $ */ 2 3 4 #include "kuser_locl.h" 5 6 static char *etypestr = 0; 7 static char *fromccachestr = 0; 8 static char *flagstr = 0; 9 static int quiet_flag = 0; 10 static int version_flag = 0; 11 static int help_flag = 0; 12 13 struct getargs args[] = { 14 { "cache", 'c', arg_string, &fromccachestr, 15 "Credentials cache", "cachename" }, 16 { "enctype", 'e', arg_string, &etypestr, 17 "Encryption type", "enctype" }, 18 { "flags", 'f', arg_string, &flagstr, 19 "Flags", "flags" }, 20 { "quiet", 'q', arg_flag, &quiet_flag, "Quiet" }, 21 { "version", 0, arg_flag, &version_flag }, 22 { "help", 0, arg_flag, &help_flag } 23 }; 24 25 static void 26 usage(int ret) 27 { 28 arg_printusage(args, sizeof(args)/sizeof(args[0]), 29 "Usage: ", "dest_ccache service1 [service2 ...]"); 30 exit (ret); 31 } 32 33 static void do_kcpytkt (int argc, char *argv[], char *fromccachestr, char *etypestr, int flags); 34 35 int main(int argc, char *argv[]) 36 { 37 int optidx; 38 int flags = 0; 39 40 setprogname(argv[0]); 41 42 if (getarg(args, sizeof(args)/sizeof(args[0]), argc, argv, &optidx)) 43 usage(1); 44 45 if (help_flag) 46 usage(0); 47 48 if (version_flag) { 49 print_version(NULL); 50 exit(0); 51 } 52 53 argc -= optidx; 54 argv += optidx; 55 56 if (argc < 2) 57 usage(1); 58 59 if (flagstr) 60 flags = atoi(flagstr); 61 62 do_kcpytkt(argc, argv, fromccachestr, etypestr, flags); 63 64 return 0; 65 } 66 67 static void do_kcpytkt (int count, char *names[], 68 char *fromccachestr, char *etypestr, int flags) 69 { 70 krb5_context context; 71 krb5_error_code ret; 72 int i, errors; 73 krb5_enctype etype; 74 krb5_ccache fromccache; 75 krb5_ccache destccache; 76 krb5_principal me; 77 krb5_creds in_creds, out_creds; 78 int retflags; 79 char *princ; 80 81 ret = krb5_init_context(&context); 82 if (ret) 83 errx(1, "krb5_init_context failed: %d", ret); 84 85 if (etypestr) { 86 ret = krb5_string_to_enctype(context, etypestr, &etype); 87 if (ret) 88 krb5_err(context, 1, ret, "Can't convert enctype %s", etypestr); 89 retflags = KRB5_TC_MATCH_SRV_NAMEONLY | KRB5_TC_MATCH_KEYTYPE; 90 } else { 91 etype = 0; 92 retflags = KRB5_TC_MATCH_SRV_NAMEONLY; 93 } 94 95 if (fromccachestr) 96 ret = krb5_cc_resolve(context, fromccachestr, &fromccache); 97 else 98 ret = krb5_cc_default(context, &fromccache); 99 if (ret) 100 krb5_err(context, 1, ret, "Can't resolve credentials cache"); 101 102 ret = krb5_cc_get_principal(context, fromccache, &me); 103 if (ret) 104 krb5_err(context, 1, ret, "Can't query client principal name"); 105 106 ret = krb5_cc_resolve(context, names[0], &destccache); 107 if (ret) 108 krb5_err(context, 1, ret, "Can't resolve destination cache"); 109 110 errors = 0; 111 112 for (i = 1; i < count; i++) { 113 memset(&in_creds, 0, sizeof(in_creds)); 114 115 in_creds.client = me; 116 117 ret = krb5_parse_name(context, names[i], &in_creds.server); 118 if (ret) { 119 if (!quiet_flag) 120 krb5_warn(context, ret, "Parse error for %s", names[i]); 121 errors++; 122 continue; 123 } 124 125 ret = krb5_unparse_name(context, in_creds.server, &princ); 126 if (ret) { 127 krb5_warn(context, ret, "Unparse error for %s", names[i]); 128 errors++; 129 continue; 130 } 131 132 in_creds.session.keytype = etype; 133 134 ret = krb5_cc_retrieve_cred(context, fromccache, retflags, 135 &in_creds, &out_creds); 136 if (ret) { 137 krb5_warn(context, ret, "Can't retrieve credentials for %s", princ); 138 139 krb5_free_unparsed_name(context, princ); 140 141 errors++; 142 continue; 143 } 144 145 ret = krb5_cc_store_cred(context, destccache, &out_creds); 146 147 krb5_free_principal(context, in_creds.server); 148 149 if (ret) { 150 krb5_warn(context, ret, "Can't store credentials for %s", princ); 151 152 krb5_free_cred_contents(context, &out_creds); 153 krb5_free_unparsed_name(context, princ); 154 155 errors++; 156 continue; 157 } 158 159 krb5_free_unparsed_name(context, princ); 160 krb5_free_cred_contents(context, &out_creds); 161 } 162 163 krb5_free_principal(context, me); 164 krb5_cc_close(context, fromccache); 165 krb5_cc_close(context, destccache); 166 krb5_free_context(context); 167 168 if (errors) 169 exit(1); 170 171 exit(0); 172 } 173