1 /* 2 * Copyright (c) 2008 Kungliga Tekniska Högskolan 3 * (Royal Institute of Technology, Stockholm, Sweden). 4 * All rights reserved. 5 * 6 * Redistribution and use in source and binary forms, with or without 7 * modification, are permitted provided that the following conditions 8 * are met: 9 * 10 * 1. Redistributions of source code must retain the above copyright 11 * notice, this list of conditions and the following disclaimer. 12 * 13 * 2. Redistributions in binary form must reproduce the above copyright 14 * notice, this list of conditions and the following disclaimer in the 15 * documentation and/or other materials provided with the distribution. 16 * 17 * 3. Neither the name of KTH nor the names of its contributors may be 18 * used to endorse or promote products derived from this software without 19 * specific prior written permission. 20 * 21 * THIS SOFTWARE IS PROVIDED BY KTH AND ITS CONTRIBUTORS ``AS IS'' AND ANY 22 * EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR 24 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL KTH OR ITS CONTRIBUTORS BE 25 * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR 26 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF 27 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR 28 * BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, 29 * WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR 30 * OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF 31 * ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. */ 32 33 #include "krb5_locl.h" 34 #include <err.h> 35 #include <getarg.h> 36 37 static int version_flag = 0; 38 static int help_flag = 0; 39 40 static struct getargs args[] = { 41 {"version", 0, arg_flag, &version_flag, 42 "print version", NULL }, 43 {"help", 0, arg_flag, &help_flag, 44 NULL, NULL } 45 }; 46 47 static void 48 usage (int ret) 49 { 50 arg_printusage (args, 51 sizeof(args)/sizeof(*args), 52 NULL, 53 "hostname"); 54 exit (ret); 55 } 56 57 int 58 main(int argc, char **argv) 59 { 60 const char *hostname; 61 krb5_context context; 62 krb5_auth_context ac; 63 krb5_error_code ret; 64 krb5_creds cred; 65 krb5_ccache id; 66 krb5_data data; 67 int optidx = 0; 68 69 setprogname (argv[0]); 70 71 if(getarg(args, sizeof(args) / sizeof(args[0]), argc, argv, &optidx)) 72 usage(1); 73 74 if (help_flag) 75 usage (0); 76 77 if(version_flag){ 78 print_version(NULL); 79 exit(0); 80 } 81 82 argc -= optidx; 83 argv += optidx; 84 85 if (argc < 1) 86 usage(1); 87 88 hostname = argv[0]; 89 90 memset(&cred, 0, sizeof(cred)); 91 92 ret = krb5_init_context(&context); 93 if (ret) 94 errx (1, "krb5_init_context failed: %d", ret); 95 96 ret = krb5_cc_default(context, &id); 97 if (ret) 98 krb5_err(context, 1, ret, "krb5_cc_default failed"); 99 100 ret = krb5_auth_con_init(context, &ac); 101 if (ret) 102 krb5_err(context, 1, ret, "krb5_auth_con_init failed"); 103 104 krb5_auth_con_addflags(context, ac, 105 KRB5_AUTH_CONTEXT_CLEAR_FORWARDED_CRED, NULL); 106 107 ret = krb5_cc_get_principal(context, id, &cred.client); 108 if (ret) 109 krb5_err(context, 1, ret, "krb5_cc_get_principal"); 110 111 ret = krb5_make_principal(context, 112 &cred.server, 113 krb5_principal_get_realm(context, cred.client), 114 KRB5_TGS_NAME, 115 krb5_principal_get_realm(context, cred.client), 116 NULL); 117 if (ret) 118 krb5_err(context, 1, ret, "krb5_make_principal(server)"); 119 120 ret = krb5_get_forwarded_creds (context, 121 ac, 122 id, 123 KDC_OPT_FORWARDABLE, 124 hostname, 125 &cred, 126 &data); 127 if (ret) 128 krb5_err (context, 1, ret, "krb5_get_forwarded_creds"); 129 130 krb5_data_free(&data); 131 krb5_free_context(context); 132 133 return 0; 134 } 135