105186eeee
(Including all changes for FreeBSD - importing the original eBones distribution would be too complex at this stage, since I don't have access to Piero's CVS.) (If you want to include eBones in your system, don't forget to include MAKE_EBONES in /etc/make.conf.) (This stuff is now also suppable from braae.ru.ac.za.) Bones originally from MIT SIPB. Original port to FreeBSD 1.x by Piero Serini. Moved to FreeBSD 2.0 by Doug Rabson and Geoff Rehmet. Nice bug fixes from Doug Rabson.
215 lines
4.7 KiB
C
215 lines
4.7 KiB
C
/*
|
|
* Copyright 1987, 1988 by the Massachusetts Institute of Technology.
|
|
* For copying and distribution information, please see the file
|
|
* <Copyright.MIT>.
|
|
*
|
|
* Routine to initialize user to Kerberos. Prompts optionally for
|
|
* user, instance and realm. Authenticates user and gets a ticket
|
|
* for the Kerberos ticket-granting service for future use.
|
|
*
|
|
* Options are:
|
|
*
|
|
* -i[instance]
|
|
* -r[realm]
|
|
* -v[erbose]
|
|
* -l[ifetime]
|
|
*
|
|
* from: kinit.c,v 4.12 90/03/20 16:11:15 jon Exp $
|
|
* $Id: kinit.c,v 1.2 1994/07/19 19:24:33 g89r4222 Exp $
|
|
*/
|
|
|
|
#ifndef lint
|
|
static char rcsid[] =
|
|
"$Id: kinit.c,v 1.2 1994/07/19 19:24:33 g89r4222 Exp $";
|
|
#endif lint
|
|
|
|
#include <stdio.h>
|
|
#include <pwd.h>
|
|
#include <krb.h>
|
|
|
|
#ifndef ORGANIZATION
|
|
#define ORGANIZATION "MIT Project Athena"
|
|
#endif /*ORGANIZATION*/
|
|
|
|
#ifdef PC
|
|
#define LEN 64 /* just guessing */
|
|
#endif PC
|
|
|
|
#if defined(BSD42) || defined(__FreeBSD__)
|
|
#include <strings.h>
|
|
#include <sys/param.h>
|
|
#if defined(ultrix) || defined(sun)
|
|
#define LEN 64
|
|
#else
|
|
#define LEN MAXHOSTNAMELEN
|
|
#endif /* defined(ultrix) || defined(sun) */
|
|
#endif /* BSD42 */
|
|
|
|
#define LIFE 96 /* lifetime of ticket in 5-minute units */
|
|
|
|
char *progname;
|
|
|
|
void
|
|
get_input(s, size, stream)
|
|
char *s;
|
|
int size;
|
|
FILE *stream;
|
|
{
|
|
char *p;
|
|
|
|
if (fgets(s, size, stream) == NULL)
|
|
exit(1);
|
|
if ((p = index(s, '\n')) != NULL)
|
|
*p = '\0';
|
|
}
|
|
|
|
main(argc, argv)
|
|
char *argv[];
|
|
{
|
|
char aname[ANAME_SZ];
|
|
char inst[INST_SZ];
|
|
char realm[REALM_SZ];
|
|
char buf[LEN];
|
|
char *username = NULL;
|
|
int iflag, rflag, vflag, lflag, lifetime, k_errno;
|
|
register char *cp;
|
|
register i;
|
|
|
|
*inst = *realm = '\0';
|
|
iflag = rflag = vflag = lflag = 0;
|
|
lifetime = LIFE;
|
|
progname = (cp = rindex(*argv, '/')) ? cp + 1 : *argv;
|
|
|
|
while (--argc) {
|
|
if ((*++argv)[0] != '-') {
|
|
if (username)
|
|
usage();
|
|
username = *argv;
|
|
continue;
|
|
}
|
|
for (i = 1; (*argv)[i] != '\0'; i++)
|
|
switch ((*argv)[i]) {
|
|
case 'i': /* Instance */
|
|
++iflag;
|
|
continue;
|
|
case 'r': /* Realm */
|
|
++rflag;
|
|
continue;
|
|
case 'v': /* Verbose */
|
|
++vflag;
|
|
continue;
|
|
case 'l':
|
|
++lflag;
|
|
continue;
|
|
default:
|
|
usage();
|
|
exit(1);
|
|
}
|
|
}
|
|
if (username &&
|
|
(k_errno = kname_parse(aname, inst, realm, username))
|
|
!= KSUCCESS) {
|
|
fprintf(stderr, "%s: %s\n", progname, krb_err_txt[k_errno]);
|
|
iflag = rflag = 1;
|
|
username = NULL;
|
|
}
|
|
if (k_gethostname(buf, LEN)) {
|
|
fprintf(stderr, "%s: k_gethostname failed\n", progname);
|
|
exit(1);
|
|
}
|
|
printf("%s (%s)\n", ORGANIZATION, buf);
|
|
if (username) {
|
|
printf("Kerberos Initialization for \"%s", aname);
|
|
if (*inst)
|
|
printf(".%s", inst);
|
|
if (*realm)
|
|
printf("@%s", realm);
|
|
printf("\"\n");
|
|
} else {
|
|
if (iflag) {
|
|
printf("Kerberos Initialization\n");
|
|
printf("Kerberos name: ");
|
|
get_input(aname, sizeof(aname), stdin);
|
|
} else {
|
|
int uid = getuid();
|
|
char *getenv();
|
|
struct passwd *pwd;
|
|
|
|
/* default to current user name unless running as root */
|
|
if (uid == 0 && (username = getenv("USER")) &&
|
|
strcmp(username, "root") != 0) {
|
|
strncpy(aname, username, sizeof(aname));
|
|
strncpy(inst, "root", sizeof(inst));
|
|
} else {
|
|
pwd = getpwuid(uid);
|
|
|
|
if (pwd == (struct passwd *) NULL) {
|
|
fprintf(stderr, "Unknown name for your uid\n");
|
|
printf("Kerberos name: ");
|
|
gets(aname);
|
|
} else
|
|
strncpy(aname, pwd->pw_name, sizeof(aname));
|
|
}
|
|
}
|
|
|
|
if (!*aname)
|
|
exit(0);
|
|
if (!k_isname(aname)) {
|
|
fprintf(stderr, "%s: bad Kerberos name format\n",
|
|
progname);
|
|
exit(1);
|
|
}
|
|
}
|
|
/* optional instance */
|
|
if (iflag) {
|
|
printf("Kerberos instance: ");
|
|
get_input(inst, sizeof(inst), stdin);
|
|
if (!k_isinst(inst)) {
|
|
fprintf(stderr, "%s: bad Kerberos instance format\n",
|
|
progname);
|
|
exit(1);
|
|
}
|
|
}
|
|
if (rflag) {
|
|
printf("Kerberos realm: ");
|
|
get_input(realm, sizeof(realm), stdin);
|
|
if (!k_isrealm(realm)) {
|
|
fprintf(stderr, "%s: bad Kerberos realm format\n",
|
|
progname);
|
|
exit(1);
|
|
}
|
|
}
|
|
if (lflag) {
|
|
printf("Kerberos ticket lifetime (minutes): ");
|
|
get_input(buf, sizeof(buf), stdin);
|
|
lifetime = atoi(buf);
|
|
if (lifetime < 5)
|
|
lifetime = 1;
|
|
else
|
|
lifetime /= 5;
|
|
/* This should be changed if the maximum ticket lifetime */
|
|
/* changes */
|
|
if (lifetime > 255)
|
|
lifetime = 255;
|
|
}
|
|
if (!*realm && krb_get_lrealm(realm, 1)) {
|
|
fprintf(stderr, "%s: krb_get_lrealm failed\n", progname);
|
|
exit(1);
|
|
}
|
|
k_errno = krb_get_pw_in_tkt(aname, inst, realm, "krbtgt", realm,
|
|
lifetime, 0);
|
|
if (vflag) {
|
|
printf("Kerberos realm %s:\n", realm);
|
|
printf("%s\n", krb_err_txt[k_errno]);
|
|
} else if (k_errno) {
|
|
fprintf(stderr, "%s: %s\n", progname, krb_err_txt[k_errno]);
|
|
exit(1);
|
|
}
|
|
}
|
|
|
|
usage()
|
|
{
|
|
fprintf(stderr, "Usage: %s [-irvl] [name]\n", progname);
|
|
exit(1);
|
|
}
|