/* -*- mode: c; c-basic-offset: 4; indent-tabs-mode: nil -*- */ /* * COPYRIGHT (C) 2006,2007 * THE REGENTS OF THE UNIVERSITY OF MICHIGAN * ALL RIGHTS RESERVED * * Permission is granted to use, copy, create derivative works * and redistribute this software and such derivative works * for any purpose, so long as the name of The University of * Michigan is not used in any advertising or publicity * pertaining to the use of distribution of this software * without specific, written prior authorization. If the * above copyright notice or any other identification of the * University of Michigan is included in any copy of any * portion of this software, then the disclaimer below must * also be included. * * THIS SOFTWARE IS PROVIDED AS IS, WITHOUT REPRESENTATION * FROM THE UNIVERSITY OF MICHIGAN AS TO ITS FITNESS FOR ANY * PURPOSE, AND WITHOUT WARRANTY BY THE UNIVERSITY OF * MICHIGAN OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING * WITHOUT LIMITATION THE IMPLIED WARRANTIES OF * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE * REGENTS OF THE UNIVERSITY OF MICHIGAN SHALL NOT BE LIABLE * FOR ANY DAMAGES, INCLUDING SPECIAL, INDIRECT, INCIDENTAL, OR * CONSEQUENTIAL DAMAGES, WITH RESPECT TO ANY CLAIM ARISING * OUT OF OR IN CONNECTION WITH THE USE OF THE SOFTWARE, EVEN * IF IT HAS BEEN OR IS HEREAFTER ADVISED OF THE POSSIBILITY OF * SUCH DAMAGES. */ #include "k5-int.h" #include "pkinit.h" /* * Routines for handling profile [config file] options */ /* Forward prototypes */ static int _krb5_conf_boolean(const char *s); /* * XXX * The following is duplicated verbatim from src/lib/krb5/krb/get_in_tkt.c, * which is duplicated from somewhere else. :-/ * XXX */ static const char *const conf_yes[] = { "y", "yes", "true", "t", "1", "on", 0, }; static const char *const conf_no[] = { "n", "no", "false", "nil", "0", "off", 0, }; static int _krb5_conf_boolean(const char *s) { const char *const *p; for(p=conf_yes; *p; p++) { if (strcasecmp(*p,s) == 0) return 1; } for(p=conf_no; *p; p++) { if (strcasecmp(*p,s) == 0) return 0; } /* Default to "no" */ return 0; } /* * XXX * End duplicated code from src/lib/krb5/krb/get_in_tkt.c * XXX */ /* * The following are based on krb5_libdefault_* functions in * src/lib/krb5/krb/get_in_tkt.c * N.B. This assumes that context->default_realm has * already been established. */ krb5_error_code pkinit_kdcdefault_strings(krb5_context context, const char *realmname, const char *option, char ***ret_value) { profile_t profile = NULL; const char *names[5]; char **values = NULL; krb5_error_code retval; if (context == NULL) return KV5M_CONTEXT; profile = context->profile; if (realmname != NULL) { /* * Try number one: * * [realms] * REALM = { * option = * } */ names[0] = KRB5_CONF_REALMS; names[1] = realmname; names[2] = option; names[3] = 0; retval = profile_get_values(profile, names, &values); if (retval == 0 && values != NULL) goto goodbye; } /* * Try number two: * * [kdcdefaults] * option = */ names[0] = KRB5_CONF_KDCDEFAULTS; names[1] = option; names[2] = 0; retval = profile_get_values(profile, names, &values); if (retval == 0 && values != NULL) goto goodbye; goodbye: if (values == NULL) retval = ENOENT; *ret_value = values; return retval; } krb5_error_code pkinit_kdcdefault_string(krb5_context context, const char *realmname, const char *option, char **ret_value) { krb5_error_code retval; char **values = NULL; retval = pkinit_kdcdefault_strings(context, realmname, option, &values); if (retval) return retval; if (values[0] == NULL) { retval = ENOENT; } else { *ret_value = strdup(values[0]); if (*ret_value == NULL) retval = ENOMEM; } profile_free_list(values); return retval; } krb5_error_code pkinit_kdcdefault_boolean(krb5_context context, const char *realmname, const char *option, int default_value, int *ret_value) { char *string = NULL; krb5_error_code retval; retval = pkinit_kdcdefault_string(context, realmname, option, &string); if (retval == 0) { *ret_value = _krb5_conf_boolean(string); free(string); } else *ret_value = default_value; return 0; } krb5_error_code pkinit_kdcdefault_integer(krb5_context context, const char *realmname, const char *option, int default_value, int *ret_value) { char *string = NULL; krb5_error_code retval; retval = pkinit_kdcdefault_string(context, realmname, option, &string); if (retval == 0) { char *endptr; long l; l = strtol(string, &endptr, 0); if (endptr == string) *ret_value = default_value; else *ret_value = l; free(string); } else *ret_value = default_value; return 0; } /* * krb5_libdefault_string() is defined as static in * src/lib/krb5/krb/get_in_tkt.c. Create local versions of * krb5_libdefault_* functions here. We need a libdefaults_strings() * function which is not currently supported there anyway. Also, * add the ability to supply a default value for the boolean and * integer functions. */ krb5_error_code pkinit_libdefault_strings(krb5_context context, const krb5_data *realm, const char *option, char ***ret_value) { profile_t profile; const char *names[5]; char **values = NULL; krb5_error_code retval; char realmstr[1024]; if (realm != NULL && realm->length > sizeof(realmstr)-1) return EINVAL; if (realm != NULL) { strncpy(realmstr, realm->data, realm->length); realmstr[realm->length] = '\0'; } if (!context || (context->magic != KV5M_CONTEXT)) return KV5M_CONTEXT; profile = context->profile; if (realm != NULL) { /* * Try number one: * * [libdefaults] * REALM = { * option = * } */ names[0] = KRB5_CONF_LIBDEFAULTS; names[1] = realmstr; names[2] = option; names[3] = 0; retval = profile_get_values(profile, names, &values); if (retval == 0 && values != NULL && values[0] != NULL) goto goodbye; /* * Try number two: * * [realms] * REALM = { * option = * } */ names[0] = KRB5_CONF_REALMS; names[1] = realmstr; names[2] = option; names[3] = 0; retval = profile_get_values(profile, names, &values); if (retval == 0 && values != NULL && values[0] != NULL) goto goodbye; } /* * Try number three: * * [libdefaults] * option = */ names[0] = KRB5_CONF_LIBDEFAULTS; names[1] = option; names[2] = 0; retval = profile_get_values(profile, names, &values); if (retval == 0 && values != NULL && values[0] != NULL) goto goodbye; goodbye: if (values == NULL) return ENOENT; *ret_value = values; return retval; } krb5_error_code pkinit_libdefault_string(krb5_context context, const krb5_data *realm, const char *option, char **ret_value) { krb5_error_code retval; char **values = NULL; retval = pkinit_libdefault_strings(context, realm, option, &values); if (retval) return retval; if (values[0] == NULL) { retval = ENOENT; } else { *ret_value = strdup(values[0]); if (*ret_value == NULL) retval = ENOMEM; } profile_free_list(values); return retval; } krb5_error_code pkinit_libdefault_boolean(krb5_context context, const krb5_data *realm, const char *option, int default_value, int *ret_value) { char *string = NULL; krb5_error_code retval; retval = pkinit_libdefault_string(context, realm, option, &string); if (retval == 0) { *ret_value = _krb5_conf_boolean(string); free(string); } else *ret_value = default_value; return 0; } krb5_error_code pkinit_libdefault_integer(krb5_context context, const krb5_data *realm, const char *option, int default_value, int *ret_value) { char *string = NULL; krb5_error_code retval; retval = pkinit_libdefault_string(context, realm, option, &string); if (retval == 0) { char *endptr; long l; l = strtol(string, &endptr, 0); if (endptr == string) *ret_value = default_value; else *ret_value = l; free(string); } return retval; }