1
2#include "kuser_locl.h"
3
4static char *etypestr = 0;
5static char *fromccachestr = 0;
6static char *flagstr = 0;
7static int  quiet_flag = 0;
8static int  version_flag = 0;
9static int  help_flag = 0;
10
11struct getargs args[] = {
12    { "cache",  'c', arg_string, &fromccachestr,
13      "Credentials cache", "cachename" },
14    { "enctype", 'e', arg_string, &etypestr,
15      "Encryption type", "enctype" },
16    { "flags", 'f', arg_string, &flagstr,
17      "Flags", "flags" },
18    { "quiet", 'q', arg_flag, &quiet_flag, "Quiet" },
19    { "version",        0, arg_flag, &version_flag },
20    { "help",           0, arg_flag, &help_flag }
21};
22
23static void
24usage(int ret)
25{
26    arg_printusage(args, sizeof(args)/sizeof(args[0]),
27                   "Usage: ", "dest_ccache service1 [service2 ...]");
28    exit (ret);
29}
30
31static void do_kcpytkt (int argc, char *argv[], char *fromccachestr, char *etypestr, int flags);
32
33int main(int argc, char *argv[])
34{
35    int optidx;
36    int flags = 0;
37
38    setprogname(argv[0]);
39
40    if (getarg(args, sizeof(args)/sizeof(args[0]), argc, argv, &optidx))
41        usage(1);
42
43    if (help_flag)
44        usage(0);
45
46    if (version_flag) {
47        print_version(NULL);
48        exit(0);
49    }
50
51    argc -= optidx;
52    argv += optidx;
53
54    if (argc < 2)
55        usage(1);
56
57    if (flagstr)
58        flags = atoi(flagstr);
59
60    do_kcpytkt(argc, argv, fromccachestr, etypestr, flags);
61
62    return 0;
63}
64
65static void do_kcpytkt (int count, char *names[],
66                        char *fromccachestr, char *etypestr, int flags)
67{
68    krb5_context context;
69    krb5_error_code ret;
70    int i, errors;
71    krb5_enctype etype;
72    krb5_ccache fromccache;
73    krb5_ccache destccache;
74    krb5_principal me;
75    krb5_creds in_creds, out_creds;
76    int retflags;
77    char *princ;
78
79    ret = krb5_init_context(&context);
80    if (ret)
81	errx(1, "krb5_init_context failed: %d", ret);
82
83    if (etypestr) {
84        ret = krb5_string_to_enctype(context, etypestr, &etype);
85	if (ret)
86	    krb5_err(context, 1, ret, "Can't convert enctype %s", etypestr);
87        retflags = KRB5_TC_MATCH_SRV_NAMEONLY | KRB5_TC_MATCH_KEYTYPE;
88    } else {
89	etype = 0;
90        retflags = KRB5_TC_MATCH_SRV_NAMEONLY;
91    }
92
93    if (fromccachestr)
94        ret = krb5_cc_resolve(context, fromccachestr, &fromccache);
95    else
96        ret = krb5_cc_default(context, &fromccache);
97    if (ret)
98        krb5_err(context, 1, ret, "Can't resolve credentials cache");
99
100    ret = krb5_cc_get_principal(context, fromccache, &me);
101    if (ret)
102        krb5_err(context, 1, ret, "Can't query client principal name");
103
104    ret = krb5_cc_resolve(context, names[0], &destccache);
105    if (ret)
106        krb5_err(context, 1, ret, "Can't resolve destination cache");
107
108    errors = 0;
109
110    for (i = 1; i < count; i++) {
111	memset(&in_creds, 0, sizeof(in_creds));
112
113	in_creds.client = me;
114
115	ret = krb5_parse_name(context, names[i], &in_creds.server);
116	if (ret) {
117	    if (!quiet_flag)
118                krb5_warn(context, ret, "Parse error for %s", names[i]);
119	    errors++;
120	    continue;
121	}
122
123	ret = krb5_unparse_name(context, in_creds.server, &princ);
124	if (ret) {
125            krb5_warn(context, ret, "Unparse error for %s", names[i]);
126	    errors++;
127	    continue;
128	}
129
130	in_creds.session.keytype = etype;
131
132        ret = krb5_cc_retrieve_cred(context, fromccache, retflags,
133                                    &in_creds, &out_creds);
134	if (ret) {
135            krb5_warn(context, ret, "Can't retrieve credentials for %s", princ);
136
137	    krb5_free_unparsed_name(context, princ);
138
139	    errors++;
140	    continue;
141	}
142
143	ret = krb5_cc_store_cred(context, destccache, &out_creds);
144
145	krb5_free_principal(context, in_creds.server);
146
147	if (ret) {
148            krb5_warn(context, ret, "Can't store credentials for %s", princ);
149
150            krb5_free_cred_contents(context, &out_creds);
151	    krb5_free_unparsed_name(context, princ);
152
153	    errors++;
154	    continue;
155	}
156
157	krb5_free_unparsed_name(context, princ);
158        krb5_free_cred_contents(context, &out_creds);
159    }
160
161    krb5_free_principal(context, me);
162    krb5_cc_close(context, fromccache);
163    krb5_cc_close(context, destccache);
164    krb5_free_context(context);
165
166    if (errors)
167	exit(1);
168
169    exit(0);
170}
171