1/* 2 * Copyright (c) 1999-2006 Kungliga Tekniska H�gskolan 3 * (Royal Institute of Technology, Stockholm, Sweden). 4 * All rights reserved. 5 * 6 * Redistribution and use in source and binary forms, with or without 7 * modification, are permitted provided that the following conditions 8 * are met: 9 * 10 * 1. Redistributions of source code must retain the above copyright 11 * notice, this list of conditions and the following disclaimer. 12 * 13 * 2. Redistributions in binary form must reproduce the above copyright 14 * notice, this list of conditions and the following disclaimer in the 15 * documentation and/or other materials provided with the distribution. 16 * 17 * 3. Neither the name of the Institute nor the names of its contributors 18 * may be used to endorse or promote products derived from this software 19 * without specific prior written permission. 20 * 21 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND 22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 24 * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE 25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 31 * SUCH DAMAGE. 32 */ 33 34#include "kadmin_locl.h" 35#include "kadmin-commands.h" 36 37RCSID("$Id: add_enctype.c 20287 2007-02-22 03:12:30Z lha $"); 38 39/* 40 * del_enctype principal enctypes... 41 */ 42 43int 44add_enctype(struct add_enctype_options*opt, int argc, char **argv) 45{ 46 kadm5_principal_ent_rec princ; 47 krb5_principal princ_ent = NULL; 48 krb5_error_code ret; 49 const char *princ_name; 50 int i, j; 51 krb5_key_data *new_key_data; 52 int n_etypes; 53 krb5_enctype *etypes; 54 55 if (!opt->random_key_flag) { 56 krb5_warnx (context, "only random key is supported now"); 57 return 0; 58 } 59 60 memset (&princ, 0, sizeof(princ)); 61 princ_name = argv[0]; 62 n_etypes = argc - 1; 63 etypes = malloc (n_etypes * sizeof(*etypes)); 64 if (etypes == NULL) { 65 krb5_warnx (context, "out of memory"); 66 return 0; 67 } 68 argv++; 69 for (i = 0; i < n_etypes; ++i) { 70 ret = krb5_string_to_enctype (context, argv[i], &etypes[i]); 71 if (ret) { 72 krb5_warnx (context, "bad enctype \"%s\"", argv[i]); 73 goto out2; 74 } 75 } 76 77 ret = krb5_parse_name(context, princ_name, &princ_ent); 78 if (ret) { 79 krb5_warn (context, ret, "krb5_parse_name %s", princ_name); 80 goto out2; 81 } 82 83 ret = kadm5_get_principal(kadm_handle, princ_ent, &princ, 84 KADM5_PRINCIPAL | KADM5_KEY_DATA); 85 if (ret) { 86 krb5_free_principal (context, princ_ent); 87 krb5_warnx (context, "no such principal: %s", princ_name); 88 goto out2; 89 } 90 91 new_key_data = malloc((princ.n_key_data + n_etypes) 92 * sizeof(*new_key_data)); 93 if (new_key_data == NULL) { 94 krb5_warnx (context, "out of memory"); 95 goto out; 96 } 97 98 for (i = 0; i < princ.n_key_data; ++i) { 99 krb5_key_data *key = &princ.key_data[i]; 100 101 for (j = 0; j < n_etypes; ++j) { 102 if (etypes[j] == key->key_data_type[0]) { 103 krb5_warnx(context, "enctype %d already exists", 104 (int)etypes[j]); 105 goto out; 106 } 107 } 108 new_key_data[i] = *key; 109 } 110 111 for (i = 0; i < n_etypes; ++i) { 112 int n = princ.n_key_data + i; 113 krb5_keyblock keyblock; 114 115 memset(&new_key_data[n], 0, sizeof(new_key_data[n])); 116 new_key_data[n].key_data_ver = 2; 117 new_key_data[n].key_data_kvno = 0; 118 119 ret = krb5_generate_random_keyblock (context, etypes[i], &keyblock); 120 if (ret) { 121 krb5_warnx(context, "genernate enctype %d failed", (int)etypes[i]); 122 while (--i >= 0) 123 free(new_key_data[--n].key_data_contents[0]); 124 goto out; 125 } 126 127 /* key */ 128 new_key_data[n].key_data_type[0] = etypes[i]; 129 new_key_data[n].key_data_contents[0] = malloc(keyblock.keyvalue.length); 130 if (new_key_data[n].key_data_contents[0] == NULL) { 131 ret = ENOMEM; 132 krb5_warn(context, ret, "out of memory"); 133 while (--i >= 0) 134 free(new_key_data[--n].key_data_contents[0]); 135 goto out; 136 } 137 new_key_data[n].key_data_length[0] = keyblock.keyvalue.length; 138 memcpy(new_key_data[n].key_data_contents[0], 139 keyblock.keyvalue.data, 140 keyblock.keyvalue.length); 141 krb5_free_keyblock_contents(context, &keyblock); 142 143 /* salt */ 144 new_key_data[n].key_data_type[1] = KRB5_PW_SALT; 145 new_key_data[n].key_data_length[1] = 0; 146 new_key_data[n].key_data_contents[1] = NULL; 147 148 } 149 150 free (princ.key_data); 151 princ.n_key_data += n_etypes; 152 princ.key_data = new_key_data; 153 new_key_data = NULL; 154 155 ret = kadm5_modify_principal (kadm_handle, &princ, KADM5_KEY_DATA); 156 if (ret) 157 krb5_warn(context, ret, "kadm5_modify_principal"); 158out: 159 krb5_free_principal (context, princ_ent); 160 kadm5_free_principal_ent(kadm_handle, &princ); 161out2: 162 free (etypes); 163 return ret != 0; 164} 165