xref: /illumos-gate/usr/src/cmd/krb5/kdestroy/kdestroy.c (revision 55fea89dcaa64928bed4327112404dcb3e07b79f)
1 /*
2  * Copyright 2008 Sun Microsystems, Inc.  All rights reserved.
3  * Use is subject to license terms.
4  */
5 
6 
7 /*
8  * clients/kdestroy/kdestroy.c
9  *
10  * Copyright 1990 by the Massachusetts Institute of Technology.
11  * All Rights Reserved.
12  *
13  * Export of this software from the United States of America may
14  *   require a specific license from the United States Government.
15  *   It is the responsibility of any person or organization contemplating
16  *   export to obtain such a license before exporting.
17  *
18  * WITHIN THAT CONSTRAINT, permission to use, copy, modify, and
19  * distribute this software and its documentation for any purpose and
20  * without fee is hereby granted, provided that the above copyright
21  * notice appear in all copies and that both that copyright notice and
22  * this permission notice appear in supporting documentation, and that
23  * the name of M.I.T. not be used in advertising or publicity pertaining
24  * to distribution of the software without specific, written prior
25  * permission.  Furthermore if you modify this software you must label
26  * your software as modified software and not distribute it in such a
27  * fashion that it might be confused with the original M.I.T. software.
28  * M.I.T. makes no representations about the suitability of
29  * this software for any purpose.  It is provided "as is" without express
30  * or implied warranty.
31  *
32  *
33  * Destroy the contents of your credential cache.
34  */
35 
36 #include <krb5.h>
37 #include <com_err.h>
38 #include <string.h>
39 #include <stdio.h>
40 #ifdef HAVE_UNISTD_H
41 #include <unistd.h>
42 #endif
43 #include <locale.h>
44 #include <rpc/types.h>
45 #include <rpc/rpcsys.h>
46 #include <rpc/rpcsec_gss.h>
47 #include <syslog.h>
48 #include <libintl.h>
49 
50 #ifdef KRB5_KRB4_COMPAT
51 #include <kerberosIV/krb.h>
52 #endif
53 
54 #ifdef __STDC__
55 #define BELL_CHAR '\a'
56 #else
57 #define BELL_CHAR '\007'
58 #endif
59 
60 extern int optind;
61 extern char *optarg;
62 
63 #ifndef _WIN32
64 #define GET_PROGNAME(x) (strrchr((x), '/') ? strrchr((x), '/')+1 : (x))
65 #else
66 #define GET_PROGNAME(x) max(max(strrchr((x), '/'), strrchr((x), '\\')) + 1,(x))
67 #endif
68 
69 char *progname;
70 
71 int got_k5 = 0;
72 int got_k4 = 0;
73 
74 int default_k5 = 1;
75 #ifdef KRB5_KRB4_COMPAT
76 int default_k4 = 1;
77 #else
78 int default_k4 = 0;
79 #endif
80 
81 
usage()82 static void usage()
83 {
84 #define KRB_AVAIL_STRING(x) ((x)?gettext("available"):gettext("not available"))
85 
86     fprintf(stderr, gettext("Usage"), ": %s [-5] [-4] [-q] [-c cache_name]\n",
87             progname);
88     fprintf(stderr, "\t-5 Kerberos 5 (%s)\n", KRB_AVAIL_STRING(got_k5));
89     fprintf(stderr, "\t-4 Kerberos 4 (%s)\n", KRB_AVAIL_STRING(got_k4));
90     fprintf(stderr, gettext("\t   (Default is %s%s%s%s)\n"),
91 	    default_k5?"Kerberos 5":"",
92 	    (default_k5 && default_k4)?gettext(" and "):"",
93 	    default_k4?"Kerberos 4":"",
94 	    (!default_k5 && !default_k4)?gettext("neither"):"");
95     fprintf(stderr, gettext("\t-q quiet mode\n"));
96     fprintf(stderr, gettext("\t-c specify name of credentials cache\n"));
97     exit(2);
98 }
99 
100 int
main(argc,argv)101 main(argc, argv)
102     int argc;
103     char **argv;
104 {
105     krb5_context kcontext;
106     krb5_error_code retval;
107     int c;
108     krb5_ccache cache = NULL;
109     char *cache_name = NULL;
110     char *client_name = NULL;
111     krb5_principal me;
112     int code = 0;
113 #ifdef KRB5_KRB4_COMPAT
114     int v4code = 0;
115     int v4 = 1;
116 #endif
117     int errflg = 0;
118     int quiet = 0;
119     struct krpc_revauth desarg;
120     static  rpc_gss_OID_desc oid=
121 	{9, "\052\206\110\206\367\022\001\002\002"};
122 
123     static  rpc_gss_OID krb5_mech_type = &oid;
124 
125     int use_k5 = 0;
126     int use_k4 = 0;
127 
128     progname = GET_PROGNAME(argv[0]);
129     /* set locale and domain for internationalization */
130     (void) setlocale(LC_ALL, "");
131 
132 #if !defined(TEXT_DOMAIN)
133 #define TEXT_DOMAIN "SYS_TEST"
134 #endif /* !TEXT_DOMAIN */
135 
136     (void) textdomain(TEXT_DOMAIN);
137 
138     got_k5 = 1;
139 #ifdef KRB5_KRB4_COMPAT
140     got_k4 = 1;
141 #endif
142 
143     while ((c = getopt(argc, argv, "54qc:")) != -1) {
144 	switch (c) {
145 	case 'q':
146 	    quiet = 1;
147 	    break;
148 	case 'c':
149 	    if (cache_name) {
150 		fprintf(stderr, gettext("Only one -c option allowed\n"));
151 		errflg++;
152 	    } else {
153 		cache_name = optarg;
154 	    }
155 	    break;
156 	case '4':
157 	    if (!got_k4)
158 	    {
159 #ifdef KRB5_KRB4_COMPAT
160 		fprintf(stderr, "Kerberos 4 support could not be loaded\n");
161 #else
162 		fprintf(stderr, gettext("This was not built with Kerberos 4 support\n"));
163 #endif
164 		exit(3);
165 	    }
166 	    use_k4 = 1;
167 	    break;
168 	case '5':
169 	    if (!got_k5)
170 	    {
171 		fprintf(stderr, gettext("Kerberos 5 support could not be loaded\n"));
172 		exit(3);
173 	    }
174 	    use_k5 = 1;
175 	    break;
176 	case '?':
177 	default:
178 	    errflg++;
179 	    break;
180 	}
181     }
182 
183     if (optind != argc)
184 	errflg++;
185 
186     if (errflg) {
187 	usage();
188     }
189 
190     if (!use_k5 && !use_k4)
191     {
192 	use_k5 = default_k5;
193 	use_k4 = default_k4;
194     }
195 
196     if (!use_k5)
197 	got_k5 = 0;
198     if (!use_k4)
199 	got_k4 = 0;
200 
201     if (got_k5) {
202 	retval = krb5_init_context(&kcontext);
203 	if (retval) {
204 	    com_err(progname, retval, gettext("while initializing krb5"));
205 	    exit(1);
206 	}
207 
208     	/*
209      	 *  Solaris Kerberos
210      	 *  Let us destroy the kernel cache first
211      	 */
212     	desarg.version = 1;
213     	desarg.uid_1 = geteuid();
214     	desarg.rpcsec_flavor_1 = RPCSEC_GSS;
215     	desarg.flavor_data_1 = (void *) krb5_mech_type;
216     	code = krpc_sys(KRPC_REVAUTH, (void *)&desarg);
217 
218     	if (code != 0) {
219         	fprintf(stderr,
220             		gettext("%s: kernel creds cache error %d \n"),
221             		progname, code);
222     	}
223 
224     	if (cache == NULL) {
225         	if (code = krb5_cc_default(kcontext, &cache)) {
226             	com_err(progname, code,
227                 	gettext("while getting default ccache"));
228             	exit(1);
229         	}
230     	}
231 
232 	if (cache_name) {
233 #ifdef KRB5_KRB4_COMPAT
234 	    v4 = 0;	/* Don't do v4 if doing v5 and cache name given. */
235 #endif
236 	    code = krb5_cc_resolve (kcontext, cache_name, &cache);
237 	    if (code != 0) {
238 		com_err (progname, code, gettext("while resolving %s"), cache_name);
239 		exit(1);
240 	    }
241 	} else {
242 	    code = krb5_cc_default(kcontext, &cache);
243 	    if (code) {
244 		com_err(progname, code, gettext("while getting default ccache"));
245 		exit(1);
246 	    }
247 	}
248 
249 	/*
250 	 * Solaris Kerberos
251          * Get client name for kwarn_del_warning.
252 	 */
253         code = krb5_cc_get_principal(kcontext, cache, &me);
254         if (code != 0)
255             fprintf(stderr, gettext
256                 ("%s: Could not obtain principal name from cache\n"), progname);
257         else
258             if ((code = krb5_unparse_name(kcontext, me, &client_name)))
259                 fprintf(stderr, gettext
260                     ("%s: Could not unparse principal name found in cache\n"), progname);
261 
262 	code = krb5_cc_destroy (kcontext, cache);
263 	if (code != 0) {
264 	    com_err (progname, code, gettext("while destroying cache"));
265 	    if (code != KRB5_FCC_NOFILE) {
266 		if (quiet)
267 		    fprintf(stderr, gettext("Ticket cache NOT destroyed!\n"));
268 		else {
269 		    fprintf(stderr, gettext("Ticket cache %cNOT%c destroyed!\n"),
270 			    BELL_CHAR, BELL_CHAR);
271 		}
272 		errflg = 1;
273 	    }
274 	}
275     }
276 #ifdef KRB5_KRB4_COMPAT
277     if (got_k4 && v4) {
278 	v4code = dest_tkt();
279 	if (v4code == KSUCCESS && code != 0)
280 	    fprintf(stderr, "Kerberos 4 ticket cache destroyed.\n");
281 	if (v4code != KSUCCESS && v4code != RET_TKFIL) {
282 	    if (quiet)
283 		fprintf(stderr, "Kerberos 4 ticket cache NOT destroyed!\n");
284 	    else
285 		fprintf(stderr, "Kerberos 4 ticket cache %cNOT%c destroyed!\n",
286 			BELL_CHAR, BELL_CHAR);
287 	    errflg = 1;
288 	}
289     }
290 #endif
291 
292     /* Solaris Kerberos */
293     if (!errflg && client_name)
294         kwarn_del_warning(client_name);
295     else
296         fprintf(stderr, gettext
297             ("%s: TGT expire warning NOT deleted\n"), progname);
298 
299     return errflg;
300 }
301