pkinit_profile.c revision 159d09a20817016f09b3ea28d1bdada4a336bb91
/*
* COPYRIGHT (C) 2006,2007
* THE REGENTS OF THE UNIVERSITY OF MICHIGAN
* ALL RIGHTS RESERVED
*
* Permission is granted to use, copy, create derivative works
* and redistribute this software and such derivative works
* for any purpose, so long as the name of The University of
* Michigan is not used in any advertising or publicity
* pertaining to the use of distribution of this software
* without specific, written prior authorization. If the
* above copyright notice or any other identification of the
* University of Michigan is included in any copy of any
* portion of this software, then the disclaimer below must
* also be included.
*
* THIS SOFTWARE IS PROVIDED AS IS, WITHOUT REPRESENTATION
* FROM THE UNIVERSITY OF MICHIGAN AS TO ITS FITNESS FOR ANY
* PURPOSE, AND WITHOUT WARRANTY BY THE UNIVERSITY OF
* MICHIGAN OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING
* WITHOUT LIMITATION THE IMPLIED WARRANTIES OF
* MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE
* REGENTS OF THE UNIVERSITY OF MICHIGAN SHALL NOT BE LIABLE
* FOR ANY DAMAGES, INCLUDING SPECIAL, INDIRECT, INCIDENTAL, OR
* CONSEQUENTIAL DAMAGES, WITH RESPECT TO ANY CLAIM ARISING
* OUT OF OR IN CONNECTION WITH THE USE OF THE SOFTWARE, EVEN
* IF IT HAS BEEN OR IS HEREAFTER ADVISED OF THE POSSIBILITY OF
* SUCH DAMAGES.
*/
#include <stdio.h>
#include <stdlib.h>
#include <errno.h>
#include <string.h>
#include "k5-int.h"
#include "pkinit.h"
/*
* Routines for handling profile [config file] options
*/
/* Forward prototypes */
static int _krb5_conf_boolean(const char *s);
/*
* XXX
* The following is duplicated verbatim from src/lib/krb5/krb/get_in_tkt.c,
* which is duplicated from somewhere else. :-/
* XXX
*/
static const char *const conf_yes[] = {
"y", "yes", "true", "t", "1", "on",
0,
};
static const char *const conf_no[] = {
"n", "no", "false", "nil", "0", "off",
0,
};
static int
_krb5_conf_boolean(const char *s)
{
const char *const *p;
for(p=conf_yes; *p; p++) {
if (strcasecmp(*p,s) == 0)
return 1;
}
for(p=conf_no; *p; p++) {
if (strcasecmp(*p,s) == 0)
return 0;
}
/* Default to "no" */
return 0;
}
/*
* XXX
* End duplicated code from src/lib/krb5/krb/get_in_tkt.c
* XXX
*/
/*
* The following are based on krb5_libdefault_* functions in
* src/lib/krb5/krb/get_in_tkt.c
* N.B. This assumes that context->default_realm has
* already been established.
*/
krb5_error_code
pkinit_kdcdefault_strings(krb5_context context, const char *realmname,
const char *option, char ***ret_value)
{
profile_t profile = NULL;
const char *names[5];
char **values = NULL;
krb5_error_code retval;
if (context == NULL)
return KV5M_CONTEXT;
profile = context->profile;
if (realmname != NULL) {
/*
* Try number one:
*
* [realms]
* REALM = {
* option = <value>
* }
*/
names[0] = "realms";
names[1] = realmname;
names[2] = option;
names[3] = 0;
retval = profile_get_values(profile, names, &values);
if (retval == 0 && values != NULL)
goto goodbye;
}
/*
* Try number two:
*
* [kdcdefaults]
* option = <value>
*/
names[0] = "kdcdefaults";
names[1] = option;
names[2] = 0;
retval = profile_get_values(profile, names, &values);
if (retval == 0 && values != NULL)
goto goodbye;
goodbye:
if (values == NULL)
retval = ENOENT;
*ret_value = values;
return retval;
}
krb5_error_code
pkinit_kdcdefault_string(krb5_context context, const char *realmname,
const char *option, char **ret_value)
{
krb5_error_code retval;
char **values = NULL;
retval = pkinit_kdcdefault_strings(context, realmname, option, &values);
if (retval)
return retval;
if (values[0] == NULL) {
retval = ENOENT;
} else {
*ret_value = malloc(strlen(values[0]) + 1);
/* Solaris Kerberos */
if (*ret_value == NULL) {
pkiDebug(error_message(ENOMEM));
retval = ENOMEM;
}
else /* Solaris Kerberos */
(void) strlcpy(*ret_value, values[0], strlen(values[0]) + 1);
}
profile_free_list(values);
return retval;
}
krb5_error_code
pkinit_kdcdefault_boolean(krb5_context context, const char *realmname,
const char *option, int default_value, int *ret_value)
{
char *string = NULL;
krb5_error_code retval;
retval = pkinit_kdcdefault_string(context, realmname, option, &string);
if (retval == 0) {
*ret_value = _krb5_conf_boolean(string);
free(string);
} else
*ret_value = default_value;
return 0;
}
krb5_error_code
pkinit_kdcdefault_integer(krb5_context context, const char *realmname,
const char *option, int default_value, int *ret_value)
{
char *string = NULL;
krb5_error_code retval;
retval = pkinit_kdcdefault_string(context, realmname, option, &string);
if (retval == 0) {
char *endptr;
long l;
l = strtol(string, &endptr, 0);
if (endptr == string)
*ret_value = default_value;
else
*ret_value = l;
free(string);
} else
*ret_value = default_value;
return 0;
}
/*
* krb5_libdefault_string() is defined as static in
* src/lib/krb5/krb/get_in_tkt.c. Create local versions of
* krb5_libdefault_* functions here. We need a libdefaults_strings()
* function which is not currently supported there anyway. Also,
* add the ability to supply a default value for the boolean and
* integer functions.
*/
krb5_error_code
pkinit_libdefault_strings(krb5_context context, const krb5_data *realm,
const char *option, char ***ret_value)
{
profile_t profile;
const char *names[5];
char **values = NULL;
krb5_error_code retval;
char realmstr[1024];
if (realm != NULL && realm->length > sizeof(realmstr)-1)
return EINVAL;
if (realm != NULL) {
/* Solaris Kerberos */
(void) strlcpy(realmstr, realm->data, realm->length + 1);
realmstr[realm->length] = '\0';
}
if (!context || (context->magic != KV5M_CONTEXT))
return KV5M_CONTEXT;
profile = context->profile;
if (realm != NULL) {
/*
* Try number one:
*
* [libdefaults]
* REALM = {
* option = <value>
* }
*/
names[0] = "libdefaults";
names[1] = realmstr;
names[2] = option;
names[3] = 0;
retval = profile_get_values(profile, names, &values);
if (retval == 0 && values != NULL && values[0] != NULL)
goto goodbye;
/*
* Try number two:
*
* [realms]
* REALM = {
* option = <value>
* }
*/
names[0] = "realms";
names[1] = realmstr;
names[2] = option;
names[3] = 0;
retval = profile_get_values(profile, names, &values);
if (retval == 0 && values != NULL && values[0] != NULL)
goto goodbye;
}
/*
* Try number three:
*
* [libdefaults]
* option = <value>
*/
names[0] = "libdefaults";
names[1] = option;
names[2] = 0;
retval = profile_get_values(profile, names, &values);
if (retval == 0 && values != NULL && values[0] != NULL)
goto goodbye;
goodbye:
if (values == NULL)
return ENOENT;
*ret_value = values;
return retval;
}
krb5_error_code
pkinit_libdefault_string(krb5_context context, const krb5_data *realm,
const char *option, char **ret_value)
{
krb5_error_code retval;
char **values = NULL;
retval = pkinit_libdefault_strings(context, realm, option, &values);
if (retval)
return retval;
if (values[0] == NULL) {
retval = ENOENT;
} else {
*ret_value = malloc(strlen(values[0]) + 1);
if (*ret_value == NULL)
retval = ENOMEM;
else /* Solaris Kerberos */
(void) strlcpy(*ret_value, values[0], strlen(values[0]) + 1);
}
profile_free_list(values);
return retval;
}
krb5_error_code
pkinit_libdefault_boolean(krb5_context context, const krb5_data *realm,
const char *option, int default_value,
int *ret_value)
{
char *string = NULL;
krb5_error_code retval;
retval = pkinit_libdefault_string(context, realm, option, &string);
if (retval == 0) {
*ret_value = _krb5_conf_boolean(string);
free(string);
} else
*ret_value = default_value;
return 0;
}
krb5_error_code
pkinit_libdefault_integer(krb5_context context, const krb5_data *realm,
const char *option, int default_value,
int *ret_value)
{
char *string = NULL;
krb5_error_code retval;
retval = pkinit_libdefault_string(context, realm, option, &string);
if (retval == 0) {
char *endptr;
long l;
l = strtol(string, &endptr, 0);
if (endptr == string)
*ret_value = default_value;
else
*ret_value = l;
free(string);
}
return retval;
}