1 /* 2 * Copyright (c) 1995 - 2005 Kungliga Tekniska Högskolan 3 * (Royal Institute of Technology, Stockholm, Sweden). 4 * All rights reserved. 5 * 6 * Redistribution and use in source and binary forms, with or without 7 * modification, are permitted provided that the following conditions 8 * are met: 9 * 10 * 1. Redistributions of source code must retain the above copyright 11 * notice, this list of conditions and the following disclaimer. 12 * 13 * 2. Redistributions in binary form must reproduce the above copyright 14 * notice, this list of conditions and the following disclaimer in the 15 * documentation and/or other materials provided with the distribution. 16 * 17 * 3. Neither the name of the Institute nor the names of its contributors 18 * may be used to endorse or promote products derived from this software 19 * without specific prior written permission. 20 * 21 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND 22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 24 * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE 25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 31 * SUCH DAMAGE. 32 */ 33 34 #include "ftpd_locl.h" 35 36 #ifdef KRB5 37 38 static int 39 print_cred(krb5_context context, krb5_creds *cred) 40 { 41 char t1[128], t2[128], *str; 42 krb5_error_code ret; 43 krb5_timestamp sec; 44 45 krb5_timeofday (context, &sec); 46 47 if(cred->times.starttime) 48 krb5_format_time(context, cred->times.starttime, t1, sizeof(t1), 1); 49 else 50 krb5_format_time(context, cred->times.authtime, t1, sizeof(t1), 1); 51 52 if(cred->times.endtime > sec) 53 krb5_format_time(context, cred->times.endtime, t2, sizeof(t2), 1); 54 else 55 strlcpy(t2, ">>>Expired<<<", sizeof(t2)); 56 57 ret = krb5_unparse_name (context, cred->server, &str); 58 if (ret) { 59 lreply(500, "krb5_unparse_name: %d", ret); 60 return 1; 61 } 62 63 lreply(200, "%-20s %-20s %s", t1, t2, str); 64 free(str); 65 return 0; 66 } 67 68 static int 69 print_tickets (krb5_context context, 70 krb5_ccache ccache, 71 krb5_principal principal) 72 { 73 krb5_error_code ret; 74 krb5_cc_cursor cursor; 75 krb5_creds cred; 76 char *str; 77 78 ret = krb5_unparse_name (context, principal, &str); 79 if (ret) { 80 lreply(500, "krb5_unparse_name: %d", ret); 81 return 500; 82 } 83 84 lreply(200, "%17s: %s:%s", 85 "Credentials cache", 86 krb5_cc_get_type(context, ccache), 87 krb5_cc_get_name(context, ccache)); 88 lreply(200, "%17s: %s", "Principal", str); 89 free (str); 90 91 ret = krb5_cc_start_seq_get (context, ccache, &cursor); 92 if (ret) { 93 lreply(500, "krb5_cc_start_seq_get: %d", ret); 94 return 500; 95 } 96 97 lreply(200, " Issued Expires Principal"); 98 99 while ((ret = krb5_cc_next_cred (context, 100 ccache, 101 &cursor, 102 &cred)) == 0) { 103 if (print_cred(context, &cred)) 104 return 500; 105 krb5_free_cred_contents (context, &cred); 106 } 107 if (ret != KRB5_CC_END) { 108 lreply(500, "krb5_cc_get_next: %d", ret); 109 return 500; 110 } 111 ret = krb5_cc_end_seq_get (context, ccache, &cursor); 112 if (ret) { 113 lreply(500, "krb5_cc_end_seq_get: %d", ret); 114 return 500; 115 } 116 117 return 200; 118 } 119 120 static int 121 klist5(void) 122 { 123 krb5_error_code ret; 124 krb5_context context; 125 krb5_ccache ccache; 126 krb5_principal principal; 127 int exit_status = 200; 128 129 ret = krb5_init_context (&context); 130 if (ret) { 131 lreply(500, "krb5_init_context failed: %d", ret); 132 return 500; 133 } 134 135 if (k5ccname) 136 ret = krb5_cc_resolve(context, k5ccname, &ccache); 137 else 138 ret = krb5_cc_default (context, &ccache); 139 if (ret) { 140 lreply(500, "krb5_cc_default: %d", ret); 141 return 500; 142 } 143 144 ret = krb5_cc_get_principal (context, ccache, &principal); 145 if (ret) { 146 if(ret == ENOENT) 147 lreply(500, "No ticket file: %s", 148 krb5_cc_get_name(context, ccache)); 149 else 150 lreply(500, "krb5_cc_get_principal: %d", ret); 151 152 return 500; 153 } 154 exit_status = print_tickets (context, ccache, principal); 155 156 ret = krb5_cc_close (context, ccache); 157 if (ret) { 158 lreply(500, "krb5_cc_close: %d", ret); 159 exit_status = 500; 160 } 161 162 krb5_free_principal (context, principal); 163 krb5_free_context (context); 164 return exit_status; 165 } 166 #endif 167 168 void 169 klist(void) 170 { 171 #if KRB5 172 int res = klist5(); 173 reply(res, " "); 174 #else 175 reply(500, "Command not implemented."); 176 #endif 177 } 178 179