1/*
2 * Copyright (c) 1997 - 2004 Kungliga Tekniska H��gskolan
3 * (Royal Institute of Technology, Stockholm, Sweden).
4 * All rights reserved.
5 *
6 * Redistribution and use in source and binary forms, with or without
7 * modification, are permitted provided that the following conditions
8 * are met:
9 *
10 * 1. Redistributions of source code must retain the above copyright
11 *    notice, this list of conditions and the following disclaimer.
12 *
13 * 2. Redistributions in binary form must reproduce the above copyright
14 *    notice, this list of conditions and the following disclaimer in the
15 *    documentation and/or other materials provided with the distribution.
16 *
17 * 3. Neither the name of the Institute nor the names of its contributors
18 *    may be used to endorse or promote products derived from this software
19 *    without specific prior written permission.
20 *
21 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
24 * ARE DISCLAIMED.  IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
31 * SUCH DAMAGE.
32 */
33
34/* $Id$ */
35
36#ifdef HAVE_CONFIG_H
37#include <config.h>
38#endif
39
40#include <stdio.h>
41#include <assert.h>
42#include <stdarg.h>
43#include <ctype.h>
44#ifdef HAVE_SYS_TYPES_H
45#include <sys/types.h>
46#endif
47#ifdef HAVE_UNISTD_H
48#include <unistd.h>
49#endif
50#ifdef HAVE_SYS_WAIT_H
51#include <sys/wait.h>
52#endif
53#ifdef HAVE_SYS_SELECT_H
54#include <sys/select.h>
55#endif
56#ifdef HAVE_SYS_SOCKET_H
57#include <sys/socket.h>
58#endif
59#ifdef HAVE_NETINET_IN_H
60#include <netinet/in.h>
61#endif
62#ifdef HAVE_NETINET_IN6_H
63#include <netinet/in6.h>
64#endif
65#ifdef HAVE_NETINET6_IN6_H
66#include <netinet6/in6.h>
67#endif
68#ifdef HAVE_ARPA_INET_H
69#include <arpa/inet.h>
70#endif
71
72#ifdef HAVE_PWD_H
73#include <pwd.h>
74#endif
75#ifdef HAVE_SHADOW_H
76#include <shadow.h>
77#endif
78#ifdef HAVE_NETDB_H
79#include <netdb.h>
80#endif
81#ifdef HAVE_LIMITS_H
82#include <limits.h>
83#endif
84#include <errno.h>
85
86#ifdef HAVE_SYS_PARAM_H
87#include <sys/param.h>
88#endif
89
90#ifdef HAVE_SYSLOG_H
91#include <syslog.h>
92#endif
93#ifdef HAVE_PATHS_H
94#include <paths.h>
95#endif
96#include <err.h>
97#include <roken.h>
98#include <getarg.h>
99#ifdef KRB5
100#include <krb5.h>
101/* XXX */
102struct hx509_certs_data;
103struct krb5_pk_identity;
104struct krb5_pk_cert;
105struct ContentInfo;
106struct AlgorithmIdentifier;
107struct _krb5_krb_auth_data;
108struct krb5_dh_moduli;
109struct _krb5_key_data;
110struct _krb5_encryption_type;
111struct _krb5_key_type;
112#include "crypto-headers.h"
113#include <krb5-private.h> /* for _krb5_{get,put}_int */
114#endif
115#if defined(KRB5)
116#include <kafs.h>
117#endif
118
119#ifndef _PATH_BSHELL
120#define _PATH_BSHELL	"/bin/sh"
121#endif
122
123#ifndef _PATH_DEFPATH
124#define _PATH_DEFPATH	"/usr/bin:/bin"
125#endif
126
127#include "loginpaths.h"
128
129/*
130 *
131 */
132
133enum auth_method { AUTH_KRB5, AUTH_BROKEN };
134
135extern enum auth_method auth_method;
136extern int do_encrypt;
137#ifdef KRB5
138extern krb5_context context;
139extern krb5_keyblock *keyblock;
140extern krb5_crypto crypto;
141extern int key_usage;
142extern void *ivec_in[2];
143extern void *ivec_out[2];
144void init_ivecs(int, int);
145#endif
146
147#define KCMD_OLD_VERSION "KCMDV0.1"
148#define KCMD_NEW_VERSION "KCMDV0.2"
149
150#define USERNAME_SZ 16
151#ifndef ARG_MAX
152#define ARG_MAX 8192
153#endif
154
155#define RSH_BUFSIZ (5 * 1024) /* MIT kcmd can't handle larger buffers */
156#define RSHD_BUFSIZ (16 * 1024) /* Old maxize for Heimdal 0.4 rsh */
157
158#define PATH_RSH BINDIR "/rsh"
159
160#if defined(KRB5)
161ssize_t do_read (int, void*, size_t, void*);
162ssize_t do_write (int, void*, size_t, void*);
163#else
164#define do_write(F, B, L, I) write((F), (B), (L))
165#define do_read(F, B, L, I) read((F), (B), (L))
166#endif
167