diff options
Diffstat (limited to 'crypto/heimdal/appl/ftp/ftpd/klist.c')
| -rw-r--r-- | crypto/heimdal/appl/ftp/ftpd/klist.c | 178 |
1 files changed, 178 insertions, 0 deletions
diff --git a/crypto/heimdal/appl/ftp/ftpd/klist.c b/crypto/heimdal/appl/ftp/ftpd/klist.c new file mode 100644 index 0000000..4afa9b8 --- /dev/null +++ b/crypto/heimdal/appl/ftp/ftpd/klist.c @@ -0,0 +1,178 @@ +/* + * Copyright (c) 1995 - 2005 Kungliga Tekniska Högskolan + * (Royal Institute of Technology, Stockholm, Sweden). + * All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that the following conditions + * are met: + * + * 1. Redistributions of source code must retain the above copyright + * notice, this list of conditions and the following disclaimer. + * + * 2. Redistributions in binary form must reproduce the above copyright + * notice, this list of conditions and the following disclaimer in the + * documentation and/or other materials provided with the distribution. + * + * 3. Neither the name of the Institute nor the names of its contributors + * may be used to endorse or promote products derived from this software + * without specific prior written permission. + * + * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND + * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE + * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE + * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE + * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL + * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS + * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) + * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT + * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY + * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF + * SUCH DAMAGE. + */ + +#include "ftpd_locl.h" + +#ifdef KRB5 + +static int +print_cred(krb5_context context, krb5_creds *cred) +{ + char t1[128], t2[128], *str; + krb5_error_code ret; + krb5_timestamp sec; + + krb5_timeofday (context, &sec); + + if(cred->times.starttime) + krb5_format_time(context, cred->times.starttime, t1, sizeof(t1), 1); + else + krb5_format_time(context, cred->times.authtime, t1, sizeof(t1), 1); + + if(cred->times.endtime > sec) + krb5_format_time(context, cred->times.endtime, t2, sizeof(t2), 1); + else + strlcpy(t2, ">>>Expired<<<", sizeof(t2)); + + ret = krb5_unparse_name (context, cred->server, &str); + if (ret) { + lreply(500, "krb5_unparse_name: %d", ret); + return 1; + } + + lreply(200, "%-20s %-20s %s", t1, t2, str); + free(str); + return 0; +} + +static int +print_tickets (krb5_context context, + krb5_ccache ccache, + krb5_principal principal) +{ + krb5_error_code ret; + krb5_cc_cursor cursor; + krb5_creds cred; + char *str; + + ret = krb5_unparse_name (context, principal, &str); + if (ret) { + lreply(500, "krb5_unparse_name: %d", ret); + return 500; + } + + lreply(200, "%17s: %s:%s", + "Credentials cache", + krb5_cc_get_type(context, ccache), + krb5_cc_get_name(context, ccache)); + lreply(200, "%17s: %s", "Principal", str); + free (str); + + ret = krb5_cc_start_seq_get (context, ccache, &cursor); + if (ret) { + lreply(500, "krb5_cc_start_seq_get: %d", ret); + return 500; + } + + lreply(200, " Issued Expires Principal"); + + while ((ret = krb5_cc_next_cred (context, + ccache, + &cursor, + &cred)) == 0) { + if (print_cred(context, &cred)) + return 500; + krb5_free_cred_contents (context, &cred); + } + if (ret != KRB5_CC_END) { + lreply(500, "krb5_cc_get_next: %d", ret); + return 500; + } + ret = krb5_cc_end_seq_get (context, ccache, &cursor); + if (ret) { + lreply(500, "krb5_cc_end_seq_get: %d", ret); + return 500; + } + + return 200; +} + +static int +klist5(void) +{ + krb5_error_code ret; + krb5_context context; + krb5_ccache ccache; + krb5_principal principal; + int exit_status = 200; + + ret = krb5_init_context (&context); + if (ret) { + lreply(500, "krb5_init_context failed: %d", ret); + return 500; + } + + if (k5ccname) + ret = krb5_cc_resolve(context, k5ccname, &ccache); + else + ret = krb5_cc_default (context, &ccache); + if (ret) { + lreply(500, "krb5_cc_default: %d", ret); + return 500; + } + + ret = krb5_cc_get_principal (context, ccache, &principal); + if (ret) { + if(ret == ENOENT) + lreply(500, "No ticket file: %s", + krb5_cc_get_name(context, ccache)); + else + lreply(500, "krb5_cc_get_principal: %d", ret); + + return 500; + } + exit_status = print_tickets (context, ccache, principal); + + ret = krb5_cc_close (context, ccache); + if (ret) { + lreply(500, "krb5_cc_close: %d", ret); + exit_status = 500; + } + + krb5_free_principal (context, principal); + krb5_free_context (context); + return exit_status; +} +#endif + +void +klist(void) +{ +#if KRB5 + int res = klist5(); + reply(res, " "); +#else + reply(500, "Command not implemented."); +#endif +} + |
