Annotation of src/usr.bin/passwd/krb5_passwd.c, Revision 1.3
1.3 ! hin 1: /*
! 2: * Copyright (c) 1997-2000 Kungliga Tekniska Högskolan
! 3: * (Royal Institute of Technology, Stockholm, Sweden).
! 4: * All rights reserved.
! 5: *
! 6: * Redistribution and use in source and binary forms, with or without
! 7: * modification, are permitted provided that the following conditions
! 8: * are met:
! 9: *
! 10: * 1. Redistributions of source code must retain the above copyright
! 11: * notice, this list of conditions and the following disclaimer.
! 12: *
! 13: * 2. Redistributions in binary form must reproduce the above copyright
! 14: * notice, this list of conditions and the following disclaimer in the
! 15: * documentation and/or other materials provided with the distribution.
1.1 deraadt 16: *
1.3 ! hin 17: * 3. Neither the name of the Institute nor the names of its contributors
! 18: * may be used to endorse or promote products derived from this software
! 19: * without specific prior written permission.
1.1 deraadt 20: *
1.3 ! hin 21: * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
! 22: * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
! 23: * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
! 24: * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
! 25: * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
! 26: * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
! 27: * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
! 28: * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
! 29: * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
! 30: * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
! 31: * SUCH DAMAGE.
1.1 deraadt 32: */
33:
1.3 ! hin 34: #include "kpasswd_locl.h"
! 35: RCSID("$KTH: kpasswd.c,v 1.23 2000/12/31 07:48:34 assar Exp $");
1.1 deraadt 36:
1.3 ! hin 37: static int version_flag;
! 38: static int help_flag;
1.1 deraadt 39:
1.3 ! hin 40: static struct getargs args[] = {
! 41: { "version", 0, arg_flag, &version_flag },
! 42: { "help", 0, arg_flag, &help_flag }
1.1 deraadt 43: };
44:
1.3 ! hin 45: static void
! 46: usage (int ret, struct getargs *a, int num_args)
1.1 deraadt 47: {
1.3 ! hin 48: arg_printusage (a, num_args, NULL, "[principal]");
! 49: exit (ret);
1.1 deraadt 50: }
51:
1.3 ! hin 52: int
! 53: main (int argc, char **argv)
1.1 deraadt 54: {
1.3 ! hin 55: krb5_error_code ret;
! 56: krb5_context context;
! 57: krb5_principal principal;
! 58: int optind = 0;
! 59: krb5_get_init_creds_opt opt;
! 60: krb5_creds cred;
! 61: int result_code;
! 62: krb5_data result_code_string, result_string;
! 63: char pwbuf[BUFSIZ];
1.1 deraadt 64:
1.3 ! hin 65: optind = krb5_program_setup(&context, argc, argv,
! 66: args, sizeof(args) / sizeof(args[0]), usage);
1.1 deraadt 67:
1.3 ! hin 68: if (help_flag)
! 69: usage (0, args, sizeof(args) / sizeof(args[0]));
1.1 deraadt 70:
1.3 ! hin 71: if(version_flag){
! 72: print_version (NULL);
! 73: exit(0);
1.1 deraadt 74: }
75:
1.3 ! hin 76: krb5_get_init_creds_opt_init (&opt);
1.1 deraadt 77:
1.3 ! hin 78: krb5_get_init_creds_opt_set_tkt_life (&opt, 300);
! 79: krb5_get_init_creds_opt_set_forwardable (&opt, FALSE);
! 80: krb5_get_init_creds_opt_set_proxiable (&opt, FALSE);
1.1 deraadt 81:
1.3 ! hin 82: argc -= optind;
! 83: argv += optind;
1.1 deraadt 84:
1.3 ! hin 85: if (argc > 1)
! 86: usage (1, args, sizeof(args) / sizeof(args[0]));
1.1 deraadt 87:
1.3 ! hin 88: ret = krb5_init_context (&context);
! 89: if (ret)
! 90: errx (1, "krb5_init_context failed: %d", ret);
! 91:
! 92: if(argv[0]) {
! 93: ret = krb5_parse_name (context, argv[0], &principal);
! 94: if (ret)
! 95: krb5_err (context, 1, ret, "krb5_parse_name");
! 96: } else
! 97: principal = NULL;
1.1 deraadt 98:
1.3 ! hin 99: ret = krb5_get_init_creds_password (context,
! 100: &cred,
! 101: principal,
! 102: NULL,
! 103: krb5_prompter_posix,
! 104: NULL,
! 105: 0,
! 106: "kadmin/changepw",
! 107: &opt);
! 108: switch (ret) {
! 109: case 0:
! 110: break;
! 111: case KRB5_LIBOS_PWDINTR :
! 112: return 1;
! 113: case KRB5KRB_AP_ERR_BAD_INTEGRITY :
! 114: case KRB5KRB_AP_ERR_MODIFIED :
! 115: krb5_errx(context, 1, "Password incorrect");
! 116: break;
! 117: default:
! 118: krb5_err(context, 1, ret, "krb5_get_init_creds");
! 119: }
! 120:
! 121: krb5_data_zero (&result_code_string);
! 122: krb5_data_zero (&result_string);
! 123:
! 124: if(des_read_pw_string (pwbuf, sizeof(pwbuf), "New password: ", 1) != 0)
! 125: return 1;
! 126:
! 127: ret = krb5_change_password (context, &cred, pwbuf,
! 128: &result_code,
! 129: &result_code_string,
! 130: &result_string);
! 131: if (ret)
! 132: krb5_err (context, 1, ret, "krb5_change_password");
! 133:
! 134: printf ("Reply from server: %.*s\n", (int)result_string.length,
! 135: (char *)result_string.data);
! 136:
! 137: krb5_data_free (&result_code_string);
! 138: krb5_data_free (&result_string);
! 139:
! 140: krb5_free_creds_contents (context, &cred);
! 141: krb5_free_context (context);
! 142: return result_code;
1.1 deraadt 143: }