1/*
2 * Copyright (c) 1997-2004 Kungliga Tekniska Högskolan
3 * (Royal Institute of Technology, Stockholm, Sweden).
4 * All rights reserved.
5 *
6 * Redistribution and use in source and binary forms, with or without
7 * modification, are permitted provided that the following conditions
8 * are met:
9 *
10 * 1. Redistributions of source code must retain the above copyright
11 *    notice, this list of conditions and the following disclaimer.
12 *
13 * 2. Redistributions in binary form must reproduce the above copyright
14 *    notice, this list of conditions and the following disclaimer in the
15 *    documentation and/or other materials provided with the distribution.
16 *
17 * 3. Neither the name of the Institute nor the names of its contributors
18 *    may be used to endorse or promote products derived from this software
19 *    without specific prior written permission.
20 *
21 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
24 * ARE DISCLAIMED.  IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
31 * SUCH DAMAGE.
32 */
33
34#include "kadmin_locl.h"
35#include "kadmin-commands.h"
36#include <kadm5/private.h>
37
38#ifdef __APPLE__
39#include <HeimODAdmin.h>
40#endif
41
42extern int local_flag;
43
44#ifdef __APPLE__
45
46static krb5_error_code
47od_dump_entry(krb5_context kcontext, HDB *db, hdb_entry_ex *entry, void *data)
48{
49    CFErrorRef error = NULL;
50    CFDictionaryRef dict;
51    CFStringRef fn, uuidstr;
52    CFUUIDRef uuid;
53    CFURLRef url;
54
55    dict = HeimODDumpHdbEntry(&entry->entry, &error);
56    if (dict == NULL) {
57	if (error)
58	    CFRelease(error);
59	return 0;
60    }
61
62    uuid = CFUUIDCreate(NULL);
63    if (uuid == NULL) {
64	krb5_warnx(kcontext, "out of memory");
65        CFRelease(dict);
66	return 0;
67    }
68
69    uuidstr = CFUUIDCreateString(NULL, uuid);
70    CFRelease(uuid);
71    if (uuidstr == NULL) {
72	krb5_warnx(kcontext, "out of memory");
73        CFRelease(dict);
74	return 0;
75    }
76
77    fn = CFStringCreateWithFormat(NULL, NULL, CFSTR("%s/%@.plist"), (char *)data, uuidstr);
78    CFRelease(uuidstr);
79    if (fn == NULL) {
80	krb5_warnx(kcontext, "out of memory");
81        CFRelease(dict);
82	return 0;
83    }
84
85    url = CFURLCreateWithFileSystemPath(NULL, fn,  kCFURLPOSIXPathStyle, false);
86    CFRelease(fn);
87    if (url == NULL) {
88	krb5_warnx(kcontext, "out of memory");
89        CFRelease(dict);
90	return 0;
91    }
92
93    CFDataRef xmldata = CFPropertyListCreateData(NULL, dict, kCFPropertyListXMLFormat_v1_0, 0, NULL);
94    CFRelease(dict);
95    if (xmldata == NULL) {
96	CFRelease(url);
97	krb5_warnx(kcontext, "out of memory");
98	return 0;
99    }
100
101    CFWriteStreamRef stream = CFWriteStreamCreateWithFile(NULL, url);
102    if (stream) {
103	if (CFWriteStreamOpen(stream))
104	    CFWriteStreamWrite(stream, CFDataGetBytePtr(xmldata), CFDataGetLength(xmldata));
105	CFWriteStreamClose(stream);
106	CFRelease(stream);
107    }
108
109    CFRelease(url);
110    CFRelease(xmldata);
111
112    return 0;
113}
114#endif
115
116int
117dump(struct dump_options *opt, int argc, char **argv)
118{
119    krb5_error_code (*func)(krb5_context, HDB *, hdb_entry_ex *, void *);
120    krb5_error_code ret;
121    void *arg;
122    const char *format = "heimdal";
123    FILE *f = NULL;
124
125    if (opt->format_string)
126	format = opt->format_string;
127
128    if (strcasecmp(format, "heimdal") == 0) {
129	func = hdb_print_entry;
130
131	if (argc == 0) {
132	    arg = stdout;
133	} else {
134	    arg = f = fopen(argv[0], "w");
135	    if (f == NULL) {
136		krb5_warn(context, errno, "failed to open %s", argv[0]);
137		return 0;
138	    }
139	}
140#ifdef __APPLE__
141    } else if (strcasecmp(format, "od") == 0) {
142
143	func = od_dump_entry;
144	if (argc == 0)
145	    arg = rk_UNCONST(".");
146	else
147	    arg = argv[0];
148#endif
149    } else {
150	krb5_warnx(context, "unknown dump format: %s", format);
151	return 0;
152    }
153
154    if (opt->mit_dump_file_string) {
155	ret = hdb_mit_dump(context, opt->mit_dump_file_string,
156			   func, arg);
157	if (ret)
158	    krb5_warn(context, ret, "hdb_mit_dump");
159
160    } else {
161	HDB *db = NULL;
162
163	if (!local_flag) {
164	    krb5_warnx(context, "od-dump is only available in local (-l) mode");
165	    return 0;
166	}
167
168	db = _kadm5_s_get_db(kadm_handle);
169
170	ret = db->hdb_open(context, db, O_RDONLY, 0600);
171	if (ret) {
172	    krb5_warn(context, ret, "hdb_open");
173	    goto out;
174	}
175
176	ret = hdb_foreach(context, db, opt->decrypt_flag ? HDB_F_DECRYPT : 0,
177			  func, arg);
178	if (ret)
179	    krb5_warn(context, ret, "hdb_foreach");
180
181	db->hdb_close(context, db);
182    }
183    if (f)
184	fclose(f);
185out:
186    return ret != 0;
187}
188
189int
190od_dump(struct od_dump_options *opt, int argc, char **argv)
191{
192    struct dump_options dumpopt;
193
194    memset(&dumpopt, 0, sizeof(dumpopt));
195    dumpopt.decrypt_flag = opt->decrypt_flag;
196    dumpopt.format_string = "od";
197
198    return dump(&dumpopt, argc, argv);
199}
200