1/* 2 * Copyright (c) 1997 - 2004 Kungliga Tekniska Högskolan 3 * (Royal Institute of Technology, Stockholm, Sweden). 4 * All rights reserved. 5 * 6 * Redistribution and use in source and binary forms, with or without 7 * modification, are permitted provided that the following conditions 8 * are met: 9 * 10 * 1. Redistributions of source code must retain the above copyright 11 * notice, this list of conditions and the following disclaimer. 12 * 13 * 2. Redistributions in binary form must reproduce the above copyright 14 * notice, this list of conditions and the following disclaimer in the 15 * documentation and/or other materials provided with the distribution. 16 * 17 * 3. Neither the name of the Institute nor the names of its contributors 18 * may be used to endorse or promote products derived from this software 19 * without specific prior written permission. 20 * 21 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND 22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 24 * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE 25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 31 * SUCH DAMAGE. 32 */ 33 34/* $Id$ */ 35 36#ifdef HAVE_CONFIG_H 37#include <config.h> 38#endif 39 40#include <stdio.h> 41#include <assert.h> 42#include <stdarg.h> 43#include <ctype.h> 44#ifdef HAVE_SYS_TYPES_H 45#include <sys/types.h> 46#endif 47#ifdef HAVE_UNISTD_H 48#include <unistd.h> 49#endif 50#ifdef HAVE_SYS_WAIT_H 51#include <sys/wait.h> 52#endif 53#ifdef HAVE_SYS_SELECT_H 54#include <sys/select.h> 55#endif 56#ifdef HAVE_SYS_SOCKET_H 57#include <sys/socket.h> 58#endif 59#ifdef HAVE_NETINET_IN_H 60#include <netinet/in.h> 61#endif 62#ifdef HAVE_NETINET_IN6_H 63#include <netinet/in6.h> 64#endif 65#ifdef HAVE_NETINET6_IN6_H 66#include <netinet6/in6.h> 67#endif 68#ifdef HAVE_ARPA_INET_H 69#include <arpa/inet.h> 70#endif 71 72#ifdef HAVE_PWD_H 73#include <pwd.h> 74#endif 75#ifdef HAVE_SHADOW_H 76#include <shadow.h> 77#endif 78#ifdef HAVE_NETDB_H 79#include <netdb.h> 80#endif 81#ifdef HAVE_LIMITS_H 82#include <limits.h> 83#endif 84#include <errno.h> 85 86#ifdef HAVE_SYS_PARAM_H 87#include <sys/param.h> 88#endif 89 90#ifdef HAVE_SYSLOG_H 91#include <syslog.h> 92#endif 93#ifdef HAVE_PATHS_H 94#include <paths.h> 95#endif 96#include <err.h> 97#include <roken.h> 98#include <getarg.h> 99#ifdef KRB5 100#include <krb5.h> 101/* XXX */ 102struct hx509_certs_data; 103struct krb5_pk_identity; 104struct krb5_pk_cert; 105struct ContentInfo; 106struct AlgorithmIdentifier; 107struct _krb5_krb_auth_data; 108struct krb5_dh_moduli; 109struct _krb5_key_data; 110struct _krb5_encryption_type; 111struct _krb5_key_type; 112#include "crypto-headers.h" 113#include <krb5-private.h> /* for _krb5_{get,put}_int */ 114#endif 115#if defined(KRB5) 116#include <kafs.h> 117#endif 118 119#ifndef _PATH_BSHELL 120#define _PATH_BSHELL "/bin/sh" 121#endif 122 123#ifndef _PATH_DEFPATH 124#define _PATH_DEFPATH "/usr/bin:/bin" 125#endif 126 127#include "loginpaths.h" 128 129/* 130 * 131 */ 132 133enum auth_method { AUTH_KRB5, AUTH_BROKEN }; 134 135extern enum auth_method auth_method; 136extern int do_encrypt; 137#ifdef KRB5 138extern krb5_context context; 139extern krb5_keyblock *keyblock; 140extern krb5_crypto crypto; 141extern int key_usage; 142extern void *ivec_in[2]; 143extern void *ivec_out[2]; 144void init_ivecs(int, int); 145#endif 146 147#define KCMD_OLD_VERSION "KCMDV0.1" 148#define KCMD_NEW_VERSION "KCMDV0.2" 149 150#define USERNAME_SZ 16 151#ifndef ARG_MAX 152#define ARG_MAX 8192 153#endif 154 155#define RSH_BUFSIZ (5 * 1024) /* MIT kcmd can't handle larger buffers */ 156#define RSHD_BUFSIZ (16 * 1024) /* Old maxize for Heimdal 0.4 rsh */ 157 158#define PATH_RSH BINDIR "/rsh" 159 160#if defined(KRB5) 161ssize_t do_read (int, void*, size_t, void*); 162ssize_t do_write (int, void*, size_t, void*); 163#else 164#define do_write(F, B, L, I) write((F), (B), (L)) 165#define do_read(F, B, L, I) read((F), (B), (L)) 166#endif 167