1/*
2 * Copyright (c) 2008 Kungliga Tekniska Högskolan
3 * (Royal Institute of Technology, Stockholm, Sweden).
4 * All rights reserved.
5 *
6 * Redistribution and use in source and binary forms, with or without
7 * modification, are permitted provided that the following conditions
8 * are met:
9 *
10 * 1. Redistributions of source code must retain the above copyright
11 *    notice, this list of conditions and the following disclaimer.
12 *
13 * 2. Redistributions in binary form must reproduce the above copyright
14 *    notice, this list of conditions and the following disclaimer in the
15 *    documentation and/or other materials provided with the distribution.
16 *
17 * 3. Neither the name of KTH nor the names of its contributors may be
18 *    used to endorse or promote products derived from this software without
19 *    specific prior written permission.
20 *
21 * THIS SOFTWARE IS PROVIDED BY KTH AND ITS CONTRIBUTORS ``AS IS'' AND ANY
22 * EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
24 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL KTH OR ITS CONTRIBUTORS BE
25 * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
26 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
27 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
28 * BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
29 * WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR
30 * OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF
31 * ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. */
32
33#include "krb5_locl.h"
34#include <err.h>
35#include <getarg.h>
36
37static int version_flag = 0;
38static int help_flag	= 0;
39
40static struct getargs args[] = {
41    {"version",	0,	arg_flag,	&version_flag,
42     "print version", NULL },
43    {"help",	0,	arg_flag,	&help_flag,
44     NULL, NULL }
45};
46
47static void
48usage (int ret)
49{
50    arg_printusage (args,
51		    sizeof(args)/sizeof(*args),
52		    NULL,
53		    "hostname");
54    exit (ret);
55}
56
57int
58main(int argc, char **argv)
59{
60    const char *hostname;
61    krb5_context context;
62    krb5_auth_context ac;
63    krb5_error_code ret;
64    krb5_creds cred;
65    krb5_ccache id;
66    krb5_data data;
67    int optidx = 0;
68
69    setprogname (argv[0]);
70
71    if(getarg(args, sizeof(args) / sizeof(args[0]), argc, argv, &optidx))
72	usage(1);
73
74    if (help_flag)
75	usage (0);
76
77    if(version_flag){
78	print_version(NULL);
79	exit(0);
80    }
81
82    argc -= optidx;
83    argv += optidx;
84
85    if (argc < 1)
86	usage(1);
87
88    hostname = argv[0];
89
90    memset(&cred, 0, sizeof(cred));
91
92    ret = krb5_init_context(&context);
93    if (ret)
94	errx (1, "krb5_init_context failed: %d", ret);
95
96    ret = krb5_cc_default(context, &id);
97    if (ret)
98	krb5_err(context, 1, ret, "krb5_cc_default failed");
99
100    ret = krb5_auth_con_init(context, &ac);
101    if (ret)
102	krb5_err(context, 1, ret, "krb5_auth_con_init failed");
103
104    krb5_auth_con_addflags(context, ac,
105			   KRB5_AUTH_CONTEXT_CLEAR_FORWARDED_CRED, NULL);
106
107    ret = krb5_cc_get_principal(context, id, &cred.client);
108    if (ret)
109	krb5_err(context, 1, ret, "krb5_cc_get_principal");
110
111    ret = krb5_make_principal(context,
112			      &cred.server,
113			      krb5_principal_get_realm(context, cred.client),
114			      KRB5_TGS_NAME,
115			      krb5_principal_get_realm(context, cred.client),
116			      NULL);
117    if (ret)
118	krb5_err(context, 1, ret, "krb5_make_principal(server)");
119
120    ret = krb5_get_forwarded_creds (context,
121				    ac,
122				    id,
123				    KDC_OPT_FORWARDABLE,
124				    hostname,
125				    &cred,
126				    &data);
127    if (ret)
128	krb5_err (context, 1, ret, "krb5_get_forwarded_creds");
129
130    krb5_data_free(&data);
131    krb5_free_context(context);
132
133    return 0;
134}
135