heimdal/kuser/kinit.c

213 get_server(krb5_context context,
220 	return krb5_parse_name(context, server, princ);
222     realm = krb5_principal_get_realm(context, client);
223     return krb5_make_principal(context, princ, realm,
228 renew_validate(krb5_context context,
241     ret = krb5_cc_get_principal(context, cache, &in.client);
243 	krb5_warn(context, ret, "krb5_cc_get_principal");
246     ret = get_server(context, in.client, server, &in.server);
248 	krb5_warn(context, ret, "get_server");
257 	krb5_get_credentials(context, KRB5_GC_CACHED, cache, &in, &out);
280 	krb5_free_creds (context, out);
285     ret = krb5_get_kdc_cred(context,
293 	krb5_warn(context, ret, "krb5_get_kdc_cred");
296     ret = krb5_cc_initialize(context, cache, in.client);
298 	krb5_free_creds (context, out);
299 	krb5_warn(context, ret, "krb5_cc_initialize");
302     ret = krb5_cc_store_cred(context, cache, out);
308 	    krb5_afslog(context, cache, NULL, NULL);
312     krb5_free_creds (context, out);
314 	krb5_warn(context, ret, "krb5_cc_store_cred");
318     krb5_free_cred_contents(context, &in);
325 store_ntlmkey(krb5_context context, krb5_ccache id,
334 	krb5_clear_error_message(context);
341     ret = krb5_cc_set_config(context, id, NULL, name, &data);
348 get_new_tickets(krb5_context context,
377 	    krb5_errx(context, 1, "Failed to open the password file %s",
381 	    krb5_errx(context, 1,
397 	realm = krb5_principal_get_realm(context, principal);
399 	ret = krb5_unparse_name_flags(context, principal,
419     ret = krb5_get_init_creds_opt_alloc (context, &opt);
421 	krb5_err(context, 1, ret, "krb5_get_init_creds_opt_alloc");
423     krb5_get_init_creds_opt_set_default_flags(context, "kinit",
424 	krb5_principal_get_realm(context, principal), opt);
433 	krb5_get_init_creds_opt_set_pac_request(context, opt,
436 	krb5_get_init_creds_opt_set_canonicalize(context, opt, TRUE);
438 	krb5_get_init_creds_opt_set_win2k(context, opt, TRUE);
440 	ret = krb5_get_init_creds_opt_set_pkinit(context, opt,
452 	    krb5_err(context, 1, ret, "krb5_get_init_creds_opt_set_pkinit");
454 	    krb5_get_init_creds_opt_set_pkinit_user_certs(context, opt, ent_user_id);
458 	krb5_get_init_creds_opt_set_addressless(context, opt,
491 	    ret = krb5_string_to_enctype(context,
504 	    ret = krb5_kt_resolve(context, keytab_str, &kt);
506 	    ret = krb5_kt_default(context, &kt);
508 	    krb5_err (context, 1, ret, "resolving keytab");
509 	ret = krb5_get_init_creds_keytab (context,
516 	krb5_kt_close(context, kt);
518 	ret = krb5_get_init_creds_password (context,
528 	krb5_warnx(context, "Not interactive, failed to get initial ticket");
529 	krb5_get_init_creds_opt_free(context, opt);
536 	    krb5_unparse_name (context, principal, &p);
548 	ret = krb5_get_init_creds_password (context,
558     krb5_get_init_creds_opt_free(context, opt);
573 	krb5_errx(context, 1, N_("Password incorrect", ""));
576 	krb5_errx(context, 1, N_("Looks like a Kerberos 4 reply", ""));
579 	krb5_err(context, 1, ret, "krb5_get_init_creds");
587 	    krb5_warnx(context, N_("NOTICE: ticket lifetime is %s", ""), life);
595 	    krb5_warnx(context,
601     ret = krb5_cc_new_unique(context, krb5_cc_get_type(context, ccache),
604 	krb5_err (context, 1, ret, "krb5_cc_new_unique");
606     ret = krb5_cc_initialize (context, tempccache, cred.client);
608 	krb5_err (context, 1, ret, "krb5_cc_initialize");
610     ret = krb5_cc_store_cred (context, tempccache, &cred);
612 	krb5_err (context, 1, ret, "krb5_cc_store_cred");
614     krb5_free_cred_contents (context, &cred);
616     ret = krb5_cc_move(context, tempccache, ccache);
618 	krb5_err (context, 1, ret, "krb5_cc_move");
621 	krb5_cc_switch(context, ccache);
625 	store_ntlmkey(context, ccache, ntlm_domain, &ntlmkey);
640 	krb5_cc_set_config(context, ccache, NULL, "realm-config", &data);
651 ticket_lifetime(krb5_context context, krb5_ccache cache,
660     ret = krb5_cc_get_principal(context, cache, &in_cred.client);
662 	krb5_warn(context, ret, "krb5_cc_get_principal");
665     ret = get_server(context, in_cred.client, server, &in_cred.server);
667 	krb5_free_principal(context, in_cred.client);
668 	krb5_warn(context, ret, "get_server");
672     ret = krb5_get_credentials(context, KRB5_GC_CACHED,
674     krb5_free_principal(context, in_cred.client);
675     krb5_free_principal(context, in_cred.server);
677 	krb5_warn(context, ret, "krb5_get_credentials");
683     krb5_free_creds(context, cred);
688     krb5_context context;
703 	ret = renew_validate(ctx->context, renewable_flag, validate_flag,
711 	get_new_tickets(ctx->context, ctx->principal,
716 	krb5_afslog(ctx->context, ctx->ccache, NULL, NULL);
719     expire = ticket_lifetime(ctx->context, ctx->ccache, ctx->principal,
728     krb5_context context;
741     ret = krb5_init_context (&context);
765 	ret = krb5_pk_enterprise_cert(context, pk_user_id,
769 	    krb5_err(context, 1, ret, "krb5_pk_enterprise_certs");
775 	ret = krb5_make_principal(context, &principal, argv[0],
779 	    krb5_err(context, 1, ret, "krb5_make_principal");
780 	krb5_principal_set_type(context, principal, KRB5_NT_WELLKNOWN);
784 	    ret = krb5_parse_name_flags (context, argv[0], parseflags,
787 		krb5_err (context, 1, ret, "krb5_parse_name");
789 	    ret = krb5_get_default_principal (context, &principal);
791 		krb5_err (context, 1, ret, "krb5_get_default_principal");
796 	krb5_set_fcache_version(context, fcache_version);
800 	krb5_appdefault_boolean(context, "kinit",
801 				krb5_principal_get_realm(context, principal),
804 	krb5_appdefault_boolean(context, "kinit",
805 				krb5_principal_get_realm(context, principal),
809 	ret = krb5_cc_resolve(context, cred_cache, &ccache);
813 	    ret = krb5_cc_new_unique(context, NULL, NULL, &ccache);
815 		krb5_err(context, 1, ret, "creating cred cache");
817 		     krb5_cc_get_type(context, ccache),
818 		     krb5_cc_get_name(context, ccache));
821 	    ret = krb5_cc_cache_match(context, principal, &ccache);
824 		ret = krb5_cc_default (context, &ccache);
826 		    krb5_err (context, 1, ret, N_("resolving credentials cache", ""));
833 		type = krb5_cc_get_type(context, ccache);
834 		if (krb5_cc_support_switch(context, type)) {
835 		    krb5_cc_close(context, ccache);
836 		    ret = krb5_cc_new_unique(context, type, NULL, &ccache);
842 	krb5_err (context, 1, ret, N_("resolving credentials cache", ""));
858 	krb5_errx(context, 1,
866 	    ret = krb5_parse_address(context, extra_addresses.strings[i],
869 		krb5_add_extra_addresses(context, &addresses);
870 		krb5_free_addresses(context, &addresses);
877 	ret = renew_validate(context, renew_flag, validate_flag,
882     get_new_tickets(context, principal, ccache, ticket_life, 1);
886 	krb5_afslog(context, ccache, NULL, NULL);
892 	timeout = ticket_lifetime(context, ccache, principal, server_str) / 2;
894 	ctx.context = context;
904 	    krb5_warnx(context, N_("permission denied: %s", ""), argv[1]);
906 	    krb5_warnx(context, N_("command not found: %s", ""), argv[1]);
908 	krb5_cc_destroy(context, ccache);
914 	krb5_cc_close (context, ccache);
917     krb5_free_principal(context, principal);
918     krb5_free_context (context);