main.c revision 7c64d3750da7fda7e450b8f9b0b963905ded6379
/*
* Copyright 2008 Sun Microsystems, Inc. All rights reserved.
* Use is subject to license terms.
*/
#pragma ident "%Z%%M% %I% %E% SMI"
/*
*
* Copyright 1990,2001 by the Massachusetts Institute of Technology.
*
* Export of this software from the United States of America may
* require a specific license from the United States Government.
* It is the responsibility of any person or organization contemplating
* export to obtain such a license before exporting.
*
* WITHIN THAT CONSTRAINT, permission to use, copy, modify, and
* distribute this software and its documentation for any purpose and
* without fee is hereby granted, provided that the above copyright
* notice appear in all copies and that both that copyright notice and
* this permission notice appear in supporting documentation, and that
* the name of M.I.T. not be used in advertising or publicity pertaining
* to distribution of the software without specific, written prior
* permission. Furthermore if you modify this software you must label
* your software as modified software and not distribute it in such a
* fashion that it might be confused with the original M.I.T. software.
* M.I.T. makes no representations about the suitability of
* this software for any purpose. It is provided "as is" without express
* or implied warranty.
*
*
* Main procedure body for the KDC server process.
*/
#include <stdio.h>
#include <syslog.h>
#include <signal.h>
#include <errno.h>
#include <netdb.h>
#include "k5-int.h"
#include "com_err.h"
#include "adm.h"
#include "adm_proto.h"
#include "kdc_util.h"
#include "extern.h"
#include "kdc5_err.h"
#include <libintl.h>
#include <locale.h>
#ifdef HAVE_NETINET_IN_H
#endif
#ifdef KRB5_KRB4_COMPAT
#include <des.h>
#endif
#if defined(NEED_DAEMON_PROTO)
extern int daemon(int, int);
#endif
void usage (char *);
krb5_sigtype request_exit (int);
krb5_sigtype request_hup (int);
void setup_signal_handlers (void);
krb5_error_code setup_sam (void);
void initialize_realms (krb5_context, int, char **);
void finish_realms (char *);
static int nofork = 0;
static int rkey_init_done = 0;
/* Solaris Kerberos: global here that other functions access */
#ifdef POSIX_SIGNALS
#endif /* POSIX_SIGNALS */
#define KRB5_KDC_MAX_REALMS 32
/*
* Find the realm entry for a given realm.
*/
{
int i;
for (i=0; i<kdc_numrealms; i++) {
return(kdc_realmlist[i]);
}
return((kdc_realm_t *) NULL);
}
{
kret = 0;
if (kdc_numrealms > 1) {
else
}
else
return(kret);
}
static void
{
if (rdp->realm_dbname)
if (rdp->realm_mpname)
if (rdp->realm_stash)
if (rdp->realm_ports)
if (rdp->realm_tcp_ports)
if (rdp->realm_keytab)
if (rdp->realm_context) {
if (rdp->realm_mprinc)
}
if (rdp->realm_tgsprinc)
}
}
/*
* Initialize a realm control structure from the alternate profile or from
* the specified defaults.
*
* After we're complete here, the essence of the realm is embodied in the
* realm data and we should be all set to begin operation for that realm.
*/
static krb5_error_code
{
if (!realm) {
goto whoops;
}
if (kret) {
realm);
goto whoops;
}
/*
* Solaris Kerberos:
* Set the current context to that of the realm being init'ed
*/
if (kret) {
goto whoops;
}
/* Handle profile file name */
/* Handle master key name */
else
/* Handle KDC ports */
else
else
/* Handle stash file */
} else
manual = def_manual;
/* Handle master key type */
else
/* Handle reject-bad-transit flag */
else
/* Handle ticket maximum life */
/* Handle ticket renewable maximum life */
if (rparams)
/*
* We've got our parameters, now go and setup our realm context.
*/
/* Set the default realm of this context */
realm);
goto whoops;
}
/* first open the database before doing anything */
#ifdef KRBCONF_KDC_MODIFIES_KDB
#else
#endif
/*
* Solaris Kerberos:
* Make sure that error messages are printed using gettext
*/
goto whoops;
}
/* Assemble and parse the master key name */
&rdp->realm_mprinc))) {
gettext("while setting up master key name %s for realm %s"),
goto whoops;
}
/*
* Get the master key.
*/
0, &rdp->realm_mkey))) {
gettext("while fetching master key %s for realm %s"),
goto whoops;
}
/* Verify the master key */
&rdp->realm_mkey))) {
gettext("while verifying master key for realm %s"),
realm);
goto whoops;
}
gettext("while processing master key for realm %s"),
realm);
goto whoops;
}
/* Set up the keytab */
&rdp->realm_keytab))) {
gettext("while resolving kdb keytab for realm %s"),
realm);
goto whoops;
}
/* Preformat the TGS name */
gettext("while building TGS name for realm %s"),
realm);
goto whoops;
}
if (!rkey_init_done) {
#ifdef KRB5_KRB4_COMPAT
#endif
/*
* If all that worked, then initialize the random key
* generators.
*/
/* SUNW14resync - XXX */
#if 0
goto whoops;
#endif
#ifdef KRB5_KRB4_COMPAT
ENCTYPE_DES_CBC_CRC, &temp_key))) {
"while initializing V4 random key generator");
goto whoops;
}
#endif
rkey_init_done = 1;
}
/*
* If we choked, then clean up any dirt we may have dropped on the floor.
*/
if (kret) {
}
/*
* Solaris Kerberos:
* Set the current context back to the general context
*/
return(kret);
}
request_exit(int signo)
{
signal_requests_exit = 1;
#ifdef POSIX_SIGTYPE
return;
#else
return(0);
#endif
}
request_hup(int signo)
{
signal_requests_hup = 1;
#ifdef POSIX_SIGTYPE
return;
#else
return(0);
#endif
}
void
setup_signal_handlers(void)
{
#ifdef POSIX_SIGNALS
#else /* POSIX_SIGNALS */
#endif /* POSIX_SIGNALS */
return;
}
setup_sam(void)
{
}
void
{
fprintf(stderr, gettext("usage: %s [-d dbpathname] [-r dbrealmname] [-R replaycachename ]\n\t[-m] [-k masterenctype] [-M masterkeyname] [-p port] [-n]\n"), name);
fprintf(stderr, "usage: %s [-x db_args]* [-d dbpathname] [-r dbrealmname] [-R replaycachename ]\n\t[-m] [-k masterenctype] [-M masterkeyname] [-p port] [-X] [-n]\n"
"\nwhere,\n\t[-x db_args]* - any number of database specific arguments.\n"
"\t\t\tLook at each database documentation for supported arguments\n",
name);
return;
}
void
{
int c;
char *default_udp_ports = 0;
char *default_tcp_ports = 0;
const char *hierarchy[3];
int db_args_size = 0;
#ifdef KRB5_KRB4_COMPAT
char *v4mode = 0;
#endif
extern char *optarg;
hierarchy[0] = "kdcdefaults";
default_udp_ports = 0;
default_tcp_ports = 0;
} else if (max_tcp_data_connections < MIN_KDC_TCP_CONNECTIONS) {
}
#ifdef KRB5_KRB4_COMPAT
v4mode = 0;
#endif
/* aprof_init can return 0 with aprof == NULL */
if (aprof)
}
if (default_udp_ports == 0)
if (default_tcp_ports == 0)
/*
* Loop through the option list. Each time we encounter a realm name,
* use the previously scanned options to fill in for defaults.
*/
switch(c) {
case 'x':
db_args_size++;
{
{
/* Solaris Kerberos: Keep error messages consistent */
exit(1);
}
}
break;
case 'r': /* realm name for db */
/* Solaris Kerberos: Keep error messages consistent */
exit(1);
}
}
else
{
/* Solaris Kerberos: Keep error messages consistent */
exit(1);
}
}
break;
case 'd': /* pathname for db */
/* now db_name is not a seperate argument. It has to be passed as part of the db_args */
{
{
/* Solaris Kerberos: Keep error messages consistent */
exit(1);
}
}
db_args_size++;
{
{
/* Solaris Kerberos: Keep error messages consistent */
exit(1);
}
}
break;
case 'm': /* manual type-in of master key */
if (menctype == ENCTYPE_UNKNOWN)
break;
case 'M': /* master key name in DB */
break;
case 'n':
nofork++; /* don't detach from terminal */
break;
case 'k': /* enctype for master key */
/* Solaris Kerberos: Keep error messages consistent */
break;
case 'R':
break;
case 'p':
if (default_udp_ports)
if (default_tcp_ports)
break;
case '4':
#ifdef KRB5_KRB4_COMPAT
if (v4mode)
#endif
break;
case 'X':
#ifdef KRB5_KRB4_COMPAT
enable_v4_crossrealm(argv[0]);
#endif
break;
case '?':
default:
exit(1);
}
}
#ifdef KRB5_KRB4_COMPAT
/*
* Setup the v4 mode
*/
#endif
/*
* Check to see if we processed any realms.
*/
if (kdc_numrealms == 0) {
/* no realm specified, use default realm */
gettext("while attempting to retrieve default realm"));
/* Solaris Kerberos: avoid double logging */
#if 0
gettext("attempting to retrieve default realm\n"));
#endif
exit(1);
}
/* Solaris Kerberos: Keep error messages consistent */
exit(1);
}
kdc_realmlist[0] = rdatap;
}
}
#ifdef USE_RCACHE
/*
* Now handle the replay cache.
*/
rcname);
exit(1);
}
#endif
/* Ensure that this is set for our first request. */
if (lrealm)
if (default_udp_ports)
if (default_tcp_ports)
if (db_args)
if (db_name)
return;
}
void
finish_realms(char *prog)
{
int i;
for (i = 0; i < kdc_numrealms; i++) {
kdc_realmlist[i] = 0;
}
}
/*
outline:
process args & setup
initialize database access (fetch master key, open DB)
initialize network
loop:
listen for packet
determine packet type, dispatch to handling routine
(AS or TGS (or V4?))
reflect response
exit on signal
clean up secrets, close db
shut down network
exit
*/
{
int errout = 0;
#if !defined(TEXT_DOMAIN) /* Should be defined by cc -D */
#endif
(void) textdomain(TEXT_DOMAIN);
KRB5_KDC_MAX_REALMS))) {
exit(1);
}
memset((char *) kdc_realmlist, 0,
/*
* A note about Kerberos contexts: This context, "kcontext", is used
* for the KDC operations, i.e. setup, network connection and error
* reporting. The per-realm operations use the "realm_context"
* associated with each realm.
*/
if (retval) {
exit(1);
}
/*
* Solaris Kerberos:
* In the early stages of krb5kdc it is desirable to log error messages
* to stderr as well as any other logging locations specified in config
* files.
*/
if (log_stderr_set != TRUE) {
}
/* initialize_kdc5_error_table(); SUNWresync121 XXX */
/*
* Scan through the argument list
*/
if (retval) {
finish_realms(argv[0]);
return 1;
}
finish_realms(argv[0]);
return 1;
}
/* Solaris Kerberos: Remove the extra stderr logging */
if (log_stderr_set != TRUE)
/*
* Solaris Kerberos:
* List the logs (FILE, STDERR, etc) which are currently being
* logged to and print that to stderr. Useful when trying to
* track down a failure via SMF.
*/
if (log_stderr_set != TRUE) {
}
}
if (log_stderr_set != TRUE) {
}
finish_realms(argv[0]);
return 1;
}
errout++;
};
errout++;
}
errout++;
}
finish_realms(argv[0]);
if (kdc_realmlist)
#ifdef USE_RCACHE
#endif
#ifndef NOCACHE
#endif
return errout;
}