1/* $NetBSD: get_default_principal.c,v 1.1.1.1 2011/04/13 18:15:33 elric Exp $ */ 2 3/* 4 * Copyright (c) 1997 - 2001 Kungliga Tekniska Högskolan 5 * (Royal Institute of Technology, Stockholm, Sweden). 6 * All rights reserved. 7 * 8 * Redistribution and use in source and binary forms, with or without 9 * modification, are permitted provided that the following conditions 10 * are met: 11 * 12 * 1. Redistributions of source code must retain the above copyright 13 * notice, this list of conditions and the following disclaimer. 14 * 15 * 2. Redistributions in binary form must reproduce the above copyright 16 * notice, this list of conditions and the following disclaimer in the 17 * documentation and/or other materials provided with the distribution. 18 * 19 * 3. Neither the name of the Institute nor the names of its contributors 20 * may be used to endorse or promote products derived from this software 21 * without specific prior written permission. 22 * 23 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND 24 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 25 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 26 * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE 27 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 28 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 29 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 30 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 31 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 32 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 33 * SUCH DAMAGE. 34 */ 35 36#include "krb5_locl.h" 37 38/* 39 * Try to find out what's a reasonable default principal. 40 */ 41 42static const char* 43get_env_user(void) 44{ 45 const char *user = getenv("USER"); 46 if(user == NULL) 47 user = getenv("LOGNAME"); 48 if(user == NULL) 49 user = getenv("USERNAME"); 50 return user; 51} 52 53#ifndef _WIN32 54 55/* 56 * Will only use operating-system dependant operation to get the 57 * default principal, for use of functions that in ccache layer to 58 * avoid recursive calls. 59 */ 60 61krb5_error_code 62_krb5_get_default_principal_local (krb5_context context, 63 krb5_principal *princ) 64{ 65 krb5_error_code ret; 66 const char *user; 67 uid_t uid; 68 69 *princ = NULL; 70 71 uid = getuid(); 72 if(uid == 0) { 73 user = getlogin(); 74 if(user == NULL) 75 user = get_env_user(); 76 if(user != NULL && strcmp(user, "root") != 0) 77 ret = krb5_make_principal(context, princ, NULL, user, "root", NULL); 78 else 79 ret = krb5_make_principal(context, princ, NULL, "root", NULL); 80 } else { 81 struct passwd *pw = getpwuid(uid); 82 if(pw != NULL) 83 user = pw->pw_name; 84 else { 85 user = get_env_user(); 86 if(user == NULL) 87 user = getlogin(); 88 } 89 if(user == NULL) { 90 krb5_set_error_message(context, ENOTTY, 91 N_("unable to figure out current " 92 "principal", "")); 93 return ENOTTY; /* XXX */ 94 } 95 ret = krb5_make_principal(context, princ, NULL, user, NULL); 96 } 97 return ret; 98} 99 100#else /* _WIN32 */ 101 102#define SECURITY_WIN32 103#include <security.h> 104 105krb5_error_code 106_krb5_get_default_principal_local(krb5_context context, 107 krb5_principal *princ) 108{ 109 /* See if we can get the principal first. We only expect this to 110 work if logged into a domain. */ 111 { 112 char username[1024]; 113 ULONG sz = sizeof(username); 114 115 if (GetUserNameEx(NameUserPrincipal, username, &sz)) { 116 return krb5_parse_name_flags(context, username, 117 KRB5_PRINCIPAL_PARSE_ENTERPRISE, 118 princ); 119 } 120 } 121 122 /* Just get the Windows username. This should pretty much always 123 work. */ 124 { 125 char username[1024]; 126 DWORD dsz = sizeof(username); 127 128 if (GetUserName(username, &dsz)) { 129 return krb5_make_principal(context, princ, NULL, username, NULL); 130 } 131 } 132 133 /* Failing that, we look at the environment */ 134 { 135 const char * username = get_env_user(); 136 137 if (username == NULL) { 138 krb5_set_error_string(context, 139 "unable to figure out current principal"); 140 return ENOTTY; /* Really? */ 141 } 142 143 return krb5_make_principal(context, princ, NULL, username, NULL); 144 } 145} 146 147#endif 148 149KRB5_LIB_FUNCTION krb5_error_code KRB5_LIB_CALL 150krb5_get_default_principal (krb5_context context, 151 krb5_principal *princ) 152{ 153 krb5_error_code ret; 154 krb5_ccache id; 155 156 *princ = NULL; 157 158 ret = krb5_cc_default (context, &id); 159 if (ret == 0) { 160 ret = krb5_cc_get_principal (context, id, princ); 161 krb5_cc_close (context, id); 162 if (ret == 0) 163 return 0; 164 } 165 166 return _krb5_get_default_principal_local(context, princ); 167} 168