httpd/support/htdbm.c

8a77240a809197c92c0736c431b4b88947a7bac1Christian Maeder/* Licensed to the Apache Software Foundation (ASF) under one or more
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder * contributor license agreements.  See the NOTICE file distributed with
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder * this work for additional information regarding copyright ownership.
ece3b1a5353a9af3c966a1d5453594ed35334f7bJonathan von Schroeder * The ASF licenses this file to You under the Apache License, Version 2.0
ece3b1a5353a9af3c966a1d5453594ed35334f7bJonathan von Schroeder * (the "License"); you may not use this file except in compliance with
ece3b1a5353a9af3c966a1d5453594ed35334f7bJonathan von Schroeder * the License.  You may obtain a copy of the License at
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder *
98890889ffb2e8f6f722b00e265a211f13b5a861Corneliu-Claudiu Prodescu *     http://www.apache.org/licenses/LICENSE-2.0
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder *
6820f0de92751e29d73d64db48e776591f529a76Christian Maeder * Unless required by applicable law or agreed to in writing, software
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder * distributed under the License is distributed on an "AS IS" BASIS,
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder * See the License for the specific language governing permissions and
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder * limitations under the License.
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder */
6820f0de92751e29d73d64db48e776591f529a76Christian Maeder
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder/*
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder * htdbm.c: simple program for manipulating DBM
6820f0de92751e29d73d64db48e776591f529a76Christian Maeder * password databases for the Apache HTTP server
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder *
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder * Contributed by Mladen Turk <mturk mappingsoft.com>
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder * 12 Oct 2001
6820f0de92751e29d73d64db48e776591f529a76Christian Maeder */
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder
6820f0de92751e29d73d64db48e776591f529a76Christian Maeder#include "passwd_common.h"
6820f0de92751e29d73d64db48e776591f529a76Christian Maeder#include "apr_file_io.h"
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder#include "apr_file_info.h"
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder#include "apr_pools.h"
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder#include "apr_signal.h"
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder#include "apr_md5.h"
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder#include "apr_sha1.h"
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder#include "apr_dbm.h"
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder#include "apr_getopt.h"
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder#if APR_HAVE_STDLIB_H
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder#include <stdlib.h>
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder#endif
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder#if APR_HAVE_STRING_H
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder#include <string.h>
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder#endif
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder#if APR_HAVE_STRINGS_H
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder#include <strings.h>
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder#endif
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder#include <time.h>
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder
c56a356d3fcc5e123efa790aab320781d94df3c7Jonathan von Schroeder#if APR_CHARSET_EBCDIC
c56a356d3fcc5e123efa790aab320781d94df3c7Jonathan von Schroeder#include "apr_xlate.h"
c56a356d3fcc5e123efa790aab320781d94df3c7Jonathan von Schroeder#endif /*APR_CHARSET_EBCDIC*/
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder#if APR_HAVE_UNISTD_H
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder#include <unistd.h>
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder#endif
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder#if APR_HAVE_CRYPT_H
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder#include <crypt.h>
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder#endif
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder
ece3b1a5353a9af3c966a1d5453594ed35334f7bJonathan von Schroedertypedef struct htdbm_t htdbm_t;
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroederstruct htdbm_t {
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder    apr_dbm_t               *dbm;
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder    struct passwd_ctx       ctx;
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder#if APR_CHARSET_EBCDIC
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder    apr_xlate_t             *to_ascii;
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder#endif
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder    char                    *filename;
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder    char                    *username;
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder    char                    *comment;
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder    char                    *type;
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder    int                     create;
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder    int                     rdonly;
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder};
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder#define HTDBM_MAKE   0
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder#define HTDBM_DELETE 1
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder#define HTDBM_VERIFY 2
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder#define HTDBM_LIST   3
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder#define HTDBM_NOFILE 4
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroederstatic void terminate(void)
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder{
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder    apr_terminate();
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder#ifdef NETWARE
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder    pressanykey();
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder#endif
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder}
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroederstatic void htdbm_terminate(htdbm_t *htdbm)
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder{
ece3b1a5353a9af3c966a1d5453594ed35334f7bJonathan von Schroeder    if (htdbm->dbm)
ece3b1a5353a9af3c966a1d5453594ed35334f7bJonathan von Schroeder        apr_dbm_close(htdbm->dbm);
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder    htdbm->dbm = NULL;
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder}
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroederstatic htdbm_t *h;
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroederstatic void htdbm_interrupted(void)
d71447e45047d07006b4c20409fbd8ea287df01fJonathan von Schroeder{
ece3b1a5353a9af3c966a1d5453594ed35334f7bJonathan von Schroeder    htdbm_terminate(h);
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder    fprintf(stderr, "htdbm Interrupted !\n");
ece3b1a5353a9af3c966a1d5453594ed35334f7bJonathan von Schroeder    exit(ERR_INTERRUPTED);
ece3b1a5353a9af3c966a1d5453594ed35334f7bJonathan von Schroeder}
d71447e45047d07006b4c20409fbd8ea287df01fJonathan von Schroeder
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroederstatic apr_status_t htdbm_init(apr_pool_t **pool, htdbm_t **hdbm)
d71447e45047d07006b4c20409fbd8ea287df01fJonathan von Schroeder{
d71447e45047d07006b4c20409fbd8ea287df01fJonathan von Schroeder
d71447e45047d07006b4c20409fbd8ea287df01fJonathan von Schroeder#if APR_CHARSET_EBCDIC
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder    apr_status_t rv;
ece3b1a5353a9af3c966a1d5453594ed35334f7bJonathan von Schroeder#endif
ece3b1a5353a9af3c966a1d5453594ed35334f7bJonathan von Schroeder
ece3b1a5353a9af3c966a1d5453594ed35334f7bJonathan von Schroeder    apr_pool_create( pool, NULL);
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder    apr_pool_abort_set(abort_on_oom, *pool);
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder    apr_file_open_stderr(&errfile, *pool);
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder    apr_signal(SIGINT, (void (*)(int)) htdbm_interrupted);
c56a356d3fcc5e123efa790aab320781d94df3c7Jonathan von Schroeder
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder    (*hdbm) = (htdbm_t *)apr_pcalloc(*pool, sizeof(htdbm_t));
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder    (*hdbm)->ctx.pool = *pool;
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder
ece3b1a5353a9af3c966a1d5453594ed35334f7bJonathan von Schroeder#if APR_CHARSET_EBCDIC
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder    rv = apr_xlate_open(&((*hdbm)->to_ascii), "ISO-8859-1", APR_DEFAULT_CHARSET, (*hdbm)->ctx.pool);
ece3b1a5353a9af3c966a1d5453594ed35334f7bJonathan von Schroeder    if (rv) {
ece3b1a5353a9af3c966a1d5453594ed35334f7bJonathan von Schroeder        fprintf(stderr, "apr_xlate_open(to ASCII)->%d\n", rv);
ece3b1a5353a9af3c966a1d5453594ed35334f7bJonathan von Schroeder        return APR_EGENERAL;
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder    }
ece3b1a5353a9af3c966a1d5453594ed35334f7bJonathan von Schroeder    rv = apr_SHA1InitEBCDIC((*hdbm)->to_ascii);
ece3b1a5353a9af3c966a1d5453594ed35334f7bJonathan von Schroeder    if (rv) {
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder        fprintf(stderr, "apr_SHA1InitEBCDIC()->%d\n", rv);
ece3b1a5353a9af3c966a1d5453594ed35334f7bJonathan von Schroeder        return APR_EGENERAL;
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder    }
ece3b1a5353a9af3c966a1d5453594ed35334f7bJonathan von Schroeder    rv = apr_MD5InitEBCDIC((*hdbm)->to_ascii);
ece3b1a5353a9af3c966a1d5453594ed35334f7bJonathan von Schroeder    if (rv) {
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder        fprintf(stderr, "apr_MD5InitEBCDIC()->%d\n", rv);
ece3b1a5353a9af3c966a1d5453594ed35334f7bJonathan von Schroeder        return APR_EGENERAL;
ece3b1a5353a9af3c966a1d5453594ed35334f7bJonathan von Schroeder    }
ece3b1a5353a9af3c966a1d5453594ed35334f7bJonathan von Schroeder#endif /*APR_CHARSET_EBCDIC*/
ece3b1a5353a9af3c966a1d5453594ed35334f7bJonathan von Schroeder
80d2ec8f37d5ddec13c14b17b1bab01e9c94630aChristian Maeder    /* Set MD5 as default */
a669e4685b32ff5ca1bca785eacc5e30a545b010Christian Maeder    (*hdbm)->ctx.alg = ALG_APMD5;
ece3b1a5353a9af3c966a1d5453594ed35334f7bJonathan von Schroeder    (*hdbm)->type = "default";
ece3b1a5353a9af3c966a1d5453594ed35334f7bJonathan von Schroeder    return APR_SUCCESS;
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder}
ece3b1a5353a9af3c966a1d5453594ed35334f7bJonathan von Schroeder
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroederstatic apr_status_t htdbm_open(htdbm_t *htdbm)
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder{
d71447e45047d07006b4c20409fbd8ea287df01fJonathan von Schroeder    if (htdbm->create)
ece3b1a5353a9af3c966a1d5453594ed35334f7bJonathan von Schroeder        return apr_dbm_open_ex(&htdbm->dbm, htdbm->type, htdbm->filename, APR_DBM_RWCREATE,
ece3b1a5353a9af3c966a1d5453594ed35334f7bJonathan von Schroeder                            APR_OS_DEFAULT, htdbm->ctx.pool);
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder    else
d71447e45047d07006b4c20409fbd8ea287df01fJonathan von Schroeder        return apr_dbm_open_ex(&htdbm->dbm, htdbm->type, htdbm->filename,
ece3b1a5353a9af3c966a1d5453594ed35334f7bJonathan von Schroeder                            htdbm->rdonly ? APR_DBM_READONLY : APR_DBM_READWRITE,
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder                            APR_OS_DEFAULT, htdbm->ctx.pool);
d71447e45047d07006b4c20409fbd8ea287df01fJonathan von Schroeder}
ece3b1a5353a9af3c966a1d5453594ed35334f7bJonathan von Schroeder
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroederstatic apr_status_t htdbm_save(htdbm_t *htdbm, int *changed)
d71447e45047d07006b4c20409fbd8ea287df01fJonathan von Schroeder{
ece3b1a5353a9af3c966a1d5453594ed35334f7bJonathan von Schroeder    apr_datum_t key, val;
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder
d71447e45047d07006b4c20409fbd8ea287df01fJonathan von Schroeder    if (!htdbm->username)
ece3b1a5353a9af3c966a1d5453594ed35334f7bJonathan von Schroeder        return APR_SUCCESS;
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder
d71447e45047d07006b4c20409fbd8ea287df01fJonathan von Schroeder    key.dptr = htdbm->username;
ece3b1a5353a9af3c966a1d5453594ed35334f7bJonathan von Schroeder    key.dsize = strlen(htdbm->username);
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder    if (apr_dbm_exists(htdbm->dbm, key))
d71447e45047d07006b4c20409fbd8ea287df01fJonathan von Schroeder        *changed = 1;
ece3b1a5353a9af3c966a1d5453594ed35334f7bJonathan von Schroeder
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder    val.dsize = strlen(htdbm->ctx.passwd);
d71447e45047d07006b4c20409fbd8ea287df01fJonathan von Schroeder    if (!htdbm->comment)
ece3b1a5353a9af3c966a1d5453594ed35334f7bJonathan von Schroeder        val.dptr  = htdbm->ctx.passwd;
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder    else {
d71447e45047d07006b4c20409fbd8ea287df01fJonathan von Schroeder        val.dptr = apr_pstrcat(htdbm->ctx.pool, htdbm->ctx.passwd, ":",
ece3b1a5353a9af3c966a1d5453594ed35334f7bJonathan von Schroeder                               htdbm->comment, NULL);
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder        val.dsize += (strlen(htdbm->comment) + 1);
d71447e45047d07006b4c20409fbd8ea287df01fJonathan von Schroeder    }
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder    return apr_dbm_store(htdbm->dbm, key, val);
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder}
d71447e45047d07006b4c20409fbd8ea287df01fJonathan von Schroeder
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroederstatic apr_status_t htdbm_del(htdbm_t *htdbm)
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder{
d71447e45047d07006b4c20409fbd8ea287df01fJonathan von Schroeder    apr_datum_t key;
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder    key.dptr = htdbm->username;
d71447e45047d07006b4c20409fbd8ea287df01fJonathan von Schroeder    key.dsize = strlen(htdbm->username);
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder    if (!apr_dbm_exists(htdbm->dbm, key))
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder        return APR_ENOENT;
d71447e45047d07006b4c20409fbd8ea287df01fJonathan von Schroeder
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder    return apr_dbm_delete(htdbm->dbm, key);
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder}
d71447e45047d07006b4c20409fbd8ea287df01fJonathan von Schroeder
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroederstatic apr_status_t htdbm_verify(htdbm_t *htdbm)
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder{
d71447e45047d07006b4c20409fbd8ea287df01fJonathan von Schroeder    apr_datum_t key, val;
b35e053c2c5a5ea0f13decfd0303894861d82b4dJonathan von Schroeder    char *pwd;
    char *rec, *cmnt;

    key.dptr = htdbm->username;
    key.dsize = strlen(htdbm->username);
    if (!apr_dbm_exists(htdbm->dbm, key))
        return APR_ENOENT;
    if (apr_dbm_fetch(htdbm->dbm, key, &val) != APR_SUCCESS)
        return APR_ENOENT;
    rec = apr_pstrndup(htdbm->ctx.pool, val.dptr, val.dsize);
    cmnt = strchr(rec, ':');
    if (cmnt)
        pwd = apr_pstrndup(htdbm->ctx.pool, rec, cmnt - rec);
    else
        pwd = apr_pstrdup(htdbm->ctx.pool, rec);
    return apr_password_validate(htdbm->ctx.passwd, pwd);
}

static apr_status_t htdbm_list(htdbm_t *htdbm)
{
    apr_status_t rv;
    apr_datum_t key, val;
    char *cmnt;
    int i = 0;

    rv = apr_dbm_firstkey(htdbm->dbm, &key);
    if (rv != APR_SUCCESS) {
        fprintf(stderr, "Empty database -- %s\n", htdbm->filename);
        return APR_ENOENT;
    }
    fprintf(stderr, "Dumping records from database -- %s\n", htdbm->filename);
    fprintf(stderr, "    %-32s Comment\n", "Username");
    while (key.dptr != NULL) {
        rv = apr_dbm_fetch(htdbm->dbm, key, &val);
        if (rv != APR_SUCCESS) {
            fprintf(stderr, "Failed getting data from %s\n", htdbm->filename);
            return APR_EGENERAL;
        }
        /* Note: we don't store \0-terminators on our dbm data */
        fprintf(stderr, "    %-32.*s", (int)key.dsize, key.dptr);
        cmnt = memchr(val.dptr, ':', val.dsize);
        if (cmnt)
            fprintf(stderr, " %.*s", (int)(val.dptr+val.dsize - (cmnt+1)), cmnt + 1);
        fprintf(stderr, "\n");
        rv = apr_dbm_nextkey(htdbm->dbm, &key);
        if (rv != APR_SUCCESS)
            fprintf(stderr, "Failed getting NextKey\n");
        ++i;
    }

    fprintf(stderr, "Total #records : %d\n", i);
    return APR_SUCCESS;
}

static int htdbm_make(htdbm_t *htdbm)
{
    char cpw[MAX_STRING_LEN];
    int ret;

    htdbm->ctx.out = cpw;
    htdbm->ctx.out_len = sizeof(cpw);
    ret = mkhash(&htdbm->ctx);
    if (ret != 0) {
        fprintf(stderr, "Error: %s\n", htdbm->ctx.errstr);
        return ret;
    }
    htdbm->ctx.passwd = apr_pstrdup(htdbm->ctx.pool, cpw);
    return 0;
}

static apr_status_t htdbm_valid_username(htdbm_t *htdbm)
{
    if (!htdbm->username || (strlen(htdbm->username) > 64) || (strlen(htdbm->username) < 1)) {
        fprintf(stderr, "Invalid username length\n");
        return APR_EINVAL;
    }
    if (strchr(htdbm->username, ':')) {
        fprintf(stderr, "Username contains invalid characters\n");
        return APR_EINVAL;
    }
    return APR_SUCCESS;
}

static void htdbm_usage(void)
{
    fprintf(stderr,
        "htdbm -- program for manipulating DBM password databases.\n\n"
        "Usage: htdbm   [-cimBdpstvx] [-C cost] [-TDBTYPE] database username\n"
        "                -b[cmBdptsv] [-C cost] [-TDBTYPE] database username password\n"
        "                -n[imBdpst]  [-C cost] username\n"
        "                -nb[mBdpst]  [-C cost] username password\n"
        "                -v[imBdps]   [-C cost] [-TDBTYPE] database username\n"
        "                -vb[mBdps]   [-C cost] [-TDBTYPE] database username password\n"
        "                -x                     [-TDBTYPE] database username\n"
        "                -l                     [-TDBTYPE] database\n"
        "Options:\n"
        "   -c   Create a new database.\n"
        "   -n   Don't update database; display results on stdout.\n"
        "   -b   Use the password from the command line rather than prompting for it.\n"
        "   -i   Read password from stdin without verification (for script usage).\n"
        "   -m   Force MD5 encryption of the password (default).\n"
        "   -B   Force BCRYPT encryption of the password (very secure).\n"
        "   -C   Set the computing time used for the bcrypt algorithm\n"
        "        (higher is more secure but slower, default: %d, valid: 4 to 31).\n"
        "   -d   Force CRYPT encryption of the password (8 chars max, insecure).\n"
        "   -s   Force SHA encryption of the password (insecure).\n"
        "   -p   Do not encrypt the password (plaintext, insecure).\n"
        "   -T   DBM Type (SDBM|GDBM|DB|default).\n"
        "   -l   Display usernames from database on stdout.\n"
        "   -v   Verify the username/password.\n"
        "   -x   Remove the username record from database.\n"
        "   -t   The last param is username comment.\n"
        "The SHA algorithm does not use a salt and is less secure than the "
        "MD5 algorithm.\n",
        BCRYPT_DEFAULT_COST);
    exit(ERR_SYNTAX);
}

int main(int argc, const char * const argv[])
{
    apr_pool_t *pool;
    apr_status_t rv;
    char errbuf[MAX_STRING_LEN];
    int  need_file = 1;
    int  need_user = 1;
    int  need_pwd  = 1;
    int  need_cmnt = 0;
    int  changed = 0;
    int  cmd = HTDBM_MAKE;
    int  i, ret, args_left = 2;
    apr_getopt_t *state;
    char opt;
    const char *opt_arg;

    apr_app_initialize(&argc, &argv, NULL);
    atexit(terminate);

    if ((rv = htdbm_init(&pool, &h)) != APR_SUCCESS) {
        fprintf(stderr, "Unable to initialize htdbm terminating!\n");
        apr_strerror(rv, errbuf, sizeof(errbuf));
        exit(1);
    }

    rv = apr_getopt_init(&state, pool, argc, argv);
    if (rv != APR_SUCCESS)
        exit(ERR_SYNTAX);

    while ((rv = apr_getopt(state, "cnmspdBbtivxlC:T:", &opt, &opt_arg)) == APR_SUCCESS) {
        switch (opt) {
        case 'c':
            h->create = 1;
            break;
        case 'n':
            need_file = 0;
            cmd = HTDBM_NOFILE;
                args_left--;
            break;
        case 'l':
            need_pwd = 0;
            need_user = 0;
            cmd = HTDBM_LIST;
            h->rdonly = 1;
            args_left--;
            break;
        case 't':
            need_cmnt = 1;
            args_left++;
            break;
        case 'T':
            h->type = apr_pstrdup(h->ctx.pool, opt_arg);
            break;
        case 'v':
            h->rdonly = 1;
            cmd = HTDBM_VERIFY;
            break;
        case 'x':
            need_pwd = 0;
            cmd = HTDBM_DELETE;
            break;
        default:
            ret = parse_common_options(&h->ctx, opt, opt_arg);
            if (ret) {
                fprintf(stderr, "Error: %s\n", h->ctx.errstr);
                exit(ret);
            }
        }
    }
    if (h->ctx.passwd_src == PW_ARG) {
            need_pwd = 0;
            args_left++;
    }
    /*
     * Make sure we still have exactly the right number of arguments left
     * (the filename, the username, and possibly the password if -b was
     * specified).
     */
    i = state->ind;
    if (rv != APR_EOF || argc - i != args_left)
        htdbm_usage();

    if (need_file) {
        h->filename = apr_pstrdup(h->ctx.pool, argv[i++]);
        if ((rv = htdbm_open(h)) != APR_SUCCESS) {
            fprintf(stderr, "Error opening database %s\n", h->filename);
            apr_strerror(rv, errbuf, sizeof(errbuf));
            fprintf(stderr,"%s\n",errbuf);
            exit(ERR_FILEPERM);
        }
    }
    if (need_user) {
        h->username = apr_pstrdup(pool, argv[i++]);
        if (htdbm_valid_username(h) != APR_SUCCESS)
            exit(ERR_BADUSER);
    }
    if (h->ctx.passwd_src == PW_ARG)
        h->ctx.passwd = apr_pstrdup(pool, argv[i++]);

    if (need_pwd) {
        ret = get_password(&h->ctx);
        if (ret) {
            fprintf(stderr, "Error: %s\n", h->ctx.errstr);
            exit(ret);
        }
    }
    if (need_cmnt)
        h->comment = apr_pstrdup(pool, argv[i++]);

    switch (cmd) {
        case HTDBM_VERIFY:
            if ((rv = htdbm_verify(h)) != APR_SUCCESS) {
                if (APR_STATUS_IS_ENOENT(rv)) {
                    fprintf(stderr, "The user '%s' could not be found in database\n", h->username);
                    exit(ERR_BADUSER);
                }
                else {
                    fprintf(stderr, "Password mismatch for user '%s'\n", h->username);
                    exit(ERR_PWMISMATCH);
                }
            }
            else
                fprintf(stderr, "Password validated for user '%s'\n", h->username);
            break;
        case HTDBM_DELETE:
            if (htdbm_del(h) != APR_SUCCESS) {
                fprintf(stderr, "Cannot find user '%s' in database\n", h->username);
                exit(ERR_BADUSER);
            }
            h->username = NULL;
            changed = 1;
            break;
        case HTDBM_LIST:
            htdbm_list(h);
            break;
        default:
            ret = htdbm_make(h);
            if (ret)
                exit(ret);
            break;
    }
    if (need_file && !h->rdonly) {
        if ((rv = htdbm_save(h, &changed)) != APR_SUCCESS) {
            apr_strerror(rv, errbuf, sizeof(errbuf));
            exit(ERR_FILEPERM);
        }
        fprintf(stdout, "Database %s %s.\n", h->filename,
                h->create ? "created" : (changed ? "modified" : "updated"));
    }
    if (cmd == HTDBM_NOFILE) {
        if (!need_cmnt) {
            fprintf(stderr, "%s:%s\n", h->username, h->ctx.passwd);
        }
        else {
            fprintf(stderr, "%s:%s:%s\n", h->username, h->ctx.passwd,
                    h->comment);
        }
    }
    htdbm_terminate(h);

    return 0; /* Suppress compiler warning. */
}