context_s.c revision 1.1.1.2 
1/*	$NetBSD: context_s.c,v 1.1.1.2 2014/04/24 12:45:48 pettai Exp $	*/
2
3/*
4 * Copyright (c) 1997 - 2002 Kungliga Tekniska H��gskolan
5 * (Royal Institute of Technology, Stockholm, Sweden).
6 * All rights reserved.
7 *
8 * Redistribution and use in source and binary forms, with or without
9 * modification, are permitted provided that the following conditions
10 * are met:
11 *
12 * 1. Redistributions of source code must retain the above copyright
13 *    notice, this list of conditions and the following disclaimer.
14 *
15 * 2. Redistributions in binary form must reproduce the above copyright
16 *    notice, this list of conditions and the following disclaimer in the
17 *    documentation and/or other materials provided with the distribution.
18 *
19 * 3. Neither the name of the Institute nor the names of its contributors
20 *    may be used to endorse or promote products derived from this software
21 *    without specific prior written permission.
22 *
23 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
24 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
25 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
26 * ARE DISCLAIMED.  IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
27 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
28 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
29 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
30 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
31 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
32 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
33 * SUCH DAMAGE.
34 */
35
36#include "kadm5_locl.h"
37
38__RCSID("NetBSD");
39
40static void
41set_funcs(kadm5_server_context *c)
42{
43#define SET(C, F) (C)->funcs.F = kadm5_s_ ## F
44    SET(c, chpass_principal);
45    SET(c, chpass_principal_with_key);
46    SET(c, create_principal);
47    SET(c, delete_principal);
48    SET(c, destroy);
49    SET(c, flush);
50    SET(c, get_principal);
51    SET(c, get_principals);
52    SET(c, get_privs);
53    SET(c, modify_principal);
54    SET(c, randkey_principal);
55    SET(c, rename_principal);
56}
57
58#ifndef NO_UNIX_SOCKETS
59
60static void
61set_socket_name(krb5_context context, struct sockaddr_un *un)
62{
63    const char *fn = kadm5_log_signal_socket(context);
64
65    memset(un, 0, sizeof(*un));
66    un->sun_family = AF_UNIX;
67    strlcpy (un->sun_path, fn, sizeof(un->sun_path));
68
69}
70#else
71
72static void
73set_socket_info(krb5_context context, struct addrinfo **info)
74{
75    kadm5_log_signal_socket_info(context, 0, info);
76}
77
78#endif
79
80static kadm5_ret_t
81find_db_spec(kadm5_server_context *ctx)
82{
83    krb5_context context = ctx->context;
84    struct hdb_dbinfo *info, *d;
85    krb5_error_code ret;
86
87    if (ctx->config.realm) {
88	/* fetch the databases */
89	ret = hdb_get_dbinfo(context, &info);
90	if (ret)
91	    return ret;
92
93	d = NULL;
94	while ((d = hdb_dbinfo_get_next(info, d)) != NULL) {
95	    const char *p = hdb_dbinfo_get_realm(context, d);
96
97	    /* match default (realm-less) */
98	    if(p != NULL && strcmp(ctx->config.realm, p) != 0)
99		continue;
100
101	    p = hdb_dbinfo_get_dbname(context, d);
102	    if (p)
103		ctx->config.dbname = strdup(p);
104
105	    p = hdb_dbinfo_get_acl_file(context, d);
106	    if (p)
107		ctx->config.acl_file = strdup(p);
108
109	    p = hdb_dbinfo_get_mkey_file(context, d);
110	    if (p)
111		ctx->config.stash_file = strdup(p);
112
113	    p = hdb_dbinfo_get_log_file(context, d);
114	    if (p)
115		ctx->log_context.log_file = strdup(p);
116	    break;
117	}
118	hdb_free_dbinfo(context, &info);
119    }
120
121    /* If any of the values was unset, pick up the default value */
122
123    if (ctx->config.dbname == NULL)
124	ctx->config.dbname = strdup(hdb_default_db(context));
125    if (ctx->config.acl_file == NULL)
126	asprintf(&ctx->config.acl_file, "%s/kadmind.acl", hdb_db_dir(context));
127    if (ctx->config.stash_file == NULL)
128	asprintf(&ctx->config.stash_file, "%s/m-key", hdb_db_dir(context));
129    if (ctx->log_context.log_file == NULL)
130	asprintf(&ctx->log_context.log_file, "%s/log", hdb_db_dir(context));
131
132#ifndef NO_UNIX_SOCKETS
133    set_socket_name(context, &ctx->log_context.socket_name);
134#else
135    set_socket_info(context, &ctx->log_context.socket_info);
136#endif
137
138    return 0;
139}
140
141kadm5_ret_t
142_kadm5_s_init_context(kadm5_server_context **ctx,
143		      kadm5_config_params *params,
144		      krb5_context context)
145{
146    *ctx = malloc(sizeof(**ctx));
147    if(*ctx == NULL)
148	return ENOMEM;
149    memset(*ctx, 0, sizeof(**ctx));
150    set_funcs(*ctx);
151    (*ctx)->context = context;
152    krb5_add_et_list (context, initialize_kadm5_error_table_r);
153#define is_set(M) (params && params->mask & KADM5_CONFIG_ ## M)
154    if(is_set(REALM))
155	(*ctx)->config.realm = strdup(params->realm);
156    else
157	krb5_get_default_realm(context, &(*ctx)->config.realm);
158    if(is_set(DBNAME))
159	(*ctx)->config.dbname = strdup(params->dbname);
160    if(is_set(ACL_FILE))
161	(*ctx)->config.acl_file = strdup(params->acl_file);
162    if(is_set(STASH_FILE))
163	(*ctx)->config.stash_file = strdup(params->stash_file);
164
165    find_db_spec(*ctx);
166
167    /* PROFILE can't be specified for now */
168    /* KADMIND_PORT is supposed to be used on the server also,
169       but this doesn't make sense */
170    /* ADMIN_SERVER is client only */
171    /* ADNAME is not used at all (as far as I can tell) */
172    /* ADB_LOCKFILE ditto */
173    /* DICT_FILE */
174    /* ADMIN_KEYTAB */
175    /* MKEY_FROM_KEYBOARD is not supported */
176    /* MKEY_NAME neither */
177    /* ENCTYPE */
178    /* MAX_LIFE */
179    /* MAX_RLIFE */
180    /* EXPIRATION */
181    /* FLAGS */
182    /* ENCTYPES */
183
184    return 0;
185}
186
187HDB *
188_kadm5_s_get_db(void *server_handle)
189{
190    kadm5_server_context *context = server_handle;
191    return context->db;
192}
193