2 * Copyright (c) 1997-2006 Kungliga Tekniska Högskolan
3 * (Royal Institute of Technology, Stockholm, Sweden).
6 * Redistribution and use in source and binary forms, with or without
7 * modification, are permitted provided that the following conditions
10 * 1. Redistributions of source code must retain the above copyright
11 * notice, this list of conditions and the following disclaimer.
13 * 2. Redistributions in binary form must reproduce the above copyright
14 * notice, this list of conditions and the following disclaimer in the
15 * documentation and/or other materials provided with the distribution.
17 * 3. Neither the name of the Institute nor the names of its contributors
18 * may be used to endorse or promote products derived from this software
19 * without specific prior written permission.
21 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
24 * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
34 #include "kadmin_locl.h"
35 #include "kadmin-commands.h"
36 #include <parse_units.h>
39 RCSID("$Id: get.c 21745 2007-07-31 16:11:25Z lha $");
41 static struct field_name {
42 const char *fieldname;
43 unsigned int fieldvalue;
44 unsigned int subvalue;
46 const char *default_header;
47 const char *def_longheader;
50 { "principal", KADM5_PRINCIPAL, 0, 0, "Principal", "Principal", 0 },
51 { "princ_expire_time", KADM5_PRINC_EXPIRE_TIME, 0, 0, "Expiration", "Principal expires", 0 },
52 { "pw_expiration", KADM5_PW_EXPIRATION, 0, 0, "PW-exp", "Password expires", 0 },
53 { "last_pwd_change", KADM5_LAST_PWD_CHANGE, 0, 0, "PW-change", "Last password change", 0 },
54 { "max_life", KADM5_MAX_LIFE, 0, 0, "Max life", "Max ticket life", 0 },
55 { "max_rlife", KADM5_MAX_RLIFE, 0, 0, "Max renew", "Max renewable life", 0 },
56 { "mod_time", KADM5_MOD_TIME, 0, 0, "Mod time", "Last modified", 0 },
57 { "mod_name", KADM5_MOD_NAME, 0, 0, "Modifier", "Modifier", 0 },
58 { "attributes", KADM5_ATTRIBUTES, 0, 0, "Attributes", "Attributes", 0 },
59 { "kvno", KADM5_KVNO, 0, 0, "Kvno", "Kvno", RTBL_ALIGN_RIGHT },
60 { "mkvno", KADM5_MKVNO, 0, 0, "Mkvno", "Mkvno", RTBL_ALIGN_RIGHT },
61 { "last_success", KADM5_LAST_SUCCESS, 0, 0, "Last login", "Last successful login", 0 },
62 { "last_failed", KADM5_LAST_FAILED, 0, 0, "Last fail", "Last failed login", 0 },
63 { "fail_auth_count", KADM5_FAIL_AUTH_COUNT, 0, 0, "Fail count", "Failed login count", RTBL_ALIGN_RIGHT },
64 { "policy", KADM5_POLICY, 0, 0, "Policy", "Policy", 0 },
65 { "keytypes", KADM5_KEY_DATA, 0, KADM5_PRINCIPAL, "Keytypes", "Keytypes", 0 },
66 { "password", KADM5_TL_DATA, KRB5_TL_PASSWORD, KADM5_KEY_DATA, "Password", "Password", 0 },
67 { "pkinit-acl", KADM5_TL_DATA, KRB5_TL_PKINIT_ACL, 0, "PK-INIT ACL", "PK-INIT ACL", 0 },
68 { "aliases", KADM5_TL_DATA, KRB5_TL_ALIASES, 0, "Aliases", "Aliases", 0 },
73 struct field_name *ff;
75 struct field_info *next;
78 struct get_entry_data {
79 void (*format)(struct get_entry_data*, kadm5_principal_ent_t);
83 struct field_info *chead, **ctail;
87 add_column(struct get_entry_data *data, struct field_name *ff, const char *header)
89 struct field_info *f = malloc(sizeof(*f));
94 f->header = strdup(header);
99 data->ctail = &f->next;
100 data->mask |= ff->fieldvalue;
101 data->extra_mask |= ff->extra_mask;
102 if(data->table != NULL)
103 rtbl_add_column_by_id(data->table, ff->fieldvalue,
104 header ? header : ff->default_header, ff->flags);
109 * return 0 iff `salt' actually is the same as the current salt in `k'
113 cmp_salt (const krb5_salt *salt, const krb5_key_data *k)
115 if (salt->salttype != k->key_data_type[1])
117 if (salt->saltvalue.length != k->key_data_length[1])
119 return memcmp (salt->saltvalue.data, k->key_data_contents[1],
120 salt->saltvalue.length);
124 format_keytype(krb5_key_data *k, krb5_salt *def_salt, char *buf, size_t buf_len)
129 ret = krb5_enctype_to_string (context,
133 asprintf (&s, "unknown(%d)", k->key_data_type[0]);
134 strlcpy(buf, s, buf_len);
137 strlcat(buf, "(", buf_len);
139 ret = krb5_salttype_to_string (context,
144 asprintf (&s, "unknown(%d)", k->key_data_type[1]);
145 strlcat(buf, s, buf_len);
148 if (cmp_salt(def_salt, k) == 0)
150 else if(k->key_data_length[1] == 0)
153 asprintf (&s, "(%.*s)", k->key_data_length[1],
154 (char *)k->key_data_contents[1]);
155 strlcat(buf, s, buf_len);
158 strlcat(buf, ")", buf_len);
162 format_field(kadm5_principal_ent_t princ, unsigned int field,
163 unsigned int subfield, char *buf, size_t buf_len, int condensed)
166 case KADM5_PRINCIPAL:
168 krb5_unparse_name_fixed_short(context, princ->principal, buf, buf_len);
170 krb5_unparse_name_fixed(context, princ->principal, buf, buf_len);
173 case KADM5_PRINC_EXPIRE_TIME:
174 time_t2str(princ->princ_expire_time, buf, buf_len, !condensed);
177 case KADM5_PW_EXPIRATION:
178 time_t2str(princ->pw_expiration, buf, buf_len, !condensed);
181 case KADM5_LAST_PWD_CHANGE:
182 time_t2str(princ->last_pwd_change, buf, buf_len, !condensed);
186 deltat2str(princ->max_life, buf, buf_len);
189 case KADM5_MAX_RLIFE:
190 deltat2str(princ->max_renewable_life, buf, buf_len);
194 time_t2str(princ->mod_date, buf, buf_len, !condensed);
198 if (princ->mod_name == NULL)
199 strlcpy(buf, "unknown", buf_len);
201 krb5_unparse_name_fixed_short(context, princ->mod_name, buf, buf_len);
203 krb5_unparse_name_fixed(context, princ->mod_name, buf, buf_len);
205 case KADM5_ATTRIBUTES:
206 attributes2str (princ->attributes, buf, buf_len);
209 snprintf(buf, buf_len, "%d", princ->kvno);
212 snprintf(buf, buf_len, "%d", princ->mkvno);
214 case KADM5_LAST_SUCCESS:
215 time_t2str(princ->last_success, buf, buf_len, !condensed);
217 case KADM5_LAST_FAILED:
218 time_t2str(princ->last_failed, buf, buf_len, !condensed);
220 case KADM5_FAIL_AUTH_COUNT:
221 snprintf(buf, buf_len, "%d", princ->fail_auth_count);
224 if(princ->policy != NULL)
225 strlcpy(buf, princ->policy, buf_len);
227 strlcpy(buf, "none", buf_len);
229 case KADM5_KEY_DATA:{
233 krb5_get_pw_salt (context, princ->principal, &def_salt);
236 for (i = 0; i < princ->n_key_data; ++i) {
237 format_keytype(&princ->key_data[i], &def_salt, buf2, sizeof(buf2));
239 strlcat(buf, ", ", buf_len);
240 strlcat(buf, buf2, buf_len);
242 krb5_free_salt (context, def_salt);
245 case KADM5_TL_DATA: {
248 for (tl = princ->tl_data; tl != NULL; tl = tl->tl_data_next)
249 if (tl->tl_data_type == subfield)
252 strlcpy(buf, "", buf_len);
257 case KRB5_TL_PASSWORD:
258 snprintf(buf, buf_len, "\"%.*s\"",
259 (int)tl->tl_data_length,
260 (const char *)tl->tl_data_contents);
262 case KRB5_TL_PKINIT_ACL: {
263 HDB_Ext_PKINIT_acl acl;
267 ret = decode_HDB_Ext_PKINIT_acl(tl->tl_data_contents,
272 snprintf(buf, buf_len, "failed to decode ACL");
277 for (i = 0; i < acl.len; i++) {
278 strlcat(buf, "subject: ", buf_len);
279 strlcat(buf, acl.val[i].subject, buf_len);
280 if (acl.val[i].issuer) {
281 strlcat(buf, " issuer:", buf_len);
282 strlcat(buf, *acl.val[i].issuer, buf_len);
284 if (acl.val[i].anchor) {
285 strlcat(buf, " anchor:", buf_len);
286 strlcat(buf, *acl.val[i].anchor, buf_len);
289 strlcat(buf, ", ", buf_len);
291 free_HDB_Ext_PKINIT_acl(&acl);
294 case KRB5_TL_ALIASES: {
295 HDB_Ext_Aliases alias;
299 ret = decode_HDB_Ext_Aliases(tl->tl_data_contents,
304 snprintf(buf, buf_len, "failed to decode alias");
308 for (i = 0; i < alias.aliases.len; i++) {
310 ret = krb5_unparse_name(context, &alias.aliases.val[i], &p);
314 strlcat(buf, " ", buf_len);
315 strlcat(buf, p, buf_len);
318 free_HDB_Ext_Aliases(&alias);
322 snprintf(buf, buf_len, "unknown type %d", subfield);
328 strlcpy(buf, "<unknown>", buf_len);
334 print_entry_short(struct get_entry_data *data, kadm5_principal_ent_t princ)
337 struct field_info *f;
339 for(f = data->chead; f != NULL; f = f->next) {
340 format_field(princ, f->ff->fieldvalue, f->ff->subvalue, buf, sizeof(buf), 1);
341 rtbl_add_column_entry_by_id(data->table, f->ff->fieldvalue, buf);
346 print_entry_long(struct get_entry_data *data, kadm5_principal_ent_t princ)
349 struct field_info *f;
352 for(f = data->chead; f != NULL; f = f->next) {
353 int w = strlen(f->header ? f->header : f->ff->def_longheader);
357 for(f = data->chead; f != NULL; f = f->next) {
358 format_field(princ, f->ff->fieldvalue, f->ff->subvalue, buf, sizeof(buf), 0);
359 printf("%*s: %s\n", width, f->header ? f->header : f->ff->def_longheader, buf);
365 do_get_entry(krb5_principal principal, void *data)
367 kadm5_principal_ent_rec princ;
369 struct get_entry_data *e = data;
371 memset(&princ, 0, sizeof(princ));
372 ret = kadm5_get_principal(kadm_handle, principal,
374 e->mask | e->extra_mask);
378 (e->format)(e, &princ);
379 kadm5_free_principal_ent(kadm_handle, &princ);
385 free_columns(struct get_entry_data *data)
387 struct field_info *f, *next;
388 for(f = data->chead; f != NULL; f = next) {
394 data->ctail = &data->chead;
398 setup_columns(struct get_entry_data *data, const char *column_info)
401 char *field, *header;
402 struct field_name *f;
404 while(strsep_copy(&column_info, ",", buf, sizeof(buf)) != -1) {
406 field = strsep(&q, "=");
407 header = strsep(&q, "=");
408 for(f = field_names; f->fieldname != NULL; f++) {
409 if(strcasecmp(field, f->fieldname) == 0) {
410 add_column(data, f, header);
414 if(f->fieldname == NULL) {
415 krb5_warnx(context, "unknown field name \"%s\"", field);
423 #define DEFAULT_COLUMNS_SHORT "principal,princ_expire_time,pw_expiration,last_pwd_change,max_life,max_rlife"
424 #define DEFAULT_COLUMNS_LONG "principal,princ_expire_time,pw_expiration,last_pwd_change,max_life,max_rlife,kvno,mkvno,last_success,last_failed,fail_auth_count,mod_time,mod_name,attributes,keytypes,pkinit-acl,aliases"
425 #define DEFAULT_COLUMNS_TERSE "principal="
428 getit(struct get_options *opt, const char *name, int argc, char **argv)
432 struct get_entry_data data;
434 if(opt->long_flag == -1 && (opt->short_flag == 1 || opt->terse_flag == 1))
436 if(opt->short_flag == -1 && (opt->long_flag == 1 || opt->terse_flag == 1))
438 if(opt->terse_flag == -1 && (opt->long_flag == 1 || opt->short_flag == 1))
440 if(opt->long_flag == 0 && opt->short_flag == 0 && opt->terse_flag == 0)
445 data.ctail = &data.chead;
449 if(opt->short_flag || opt->terse_flag) {
450 data.table = rtbl_create();
451 rtbl_set_separator(data.table, " ");
452 data.format = print_entry_short;
454 data.format = print_entry_long;
455 if(opt->column_info_string == NULL) {
457 ret = setup_columns(&data, DEFAULT_COLUMNS_LONG);
458 else if(opt->short_flag)
459 ret = setup_columns(&data, DEFAULT_COLUMNS_SHORT);
461 ret = setup_columns(&data, DEFAULT_COLUMNS_TERSE);
462 rtbl_set_flags(data.table, RTBL_HEADER_STYLE_NONE);
465 ret = setup_columns(&data, opt->column_info_string);
468 if(data.table != NULL)
469 rtbl_destroy(data.table);
473 for(i = 0; i < argc; i++)
474 ret = foreach_principal(argv[i], do_get_entry, "get", &data);
476 if(data.table != NULL) {
477 rtbl_format(data.table, stdout);
478 rtbl_destroy(data.table);
485 get_entry(struct get_options *opt, int argc, char **argv)
487 return getit(opt, "get", argc, argv);
491 list_princs(struct list_options *opt, int argc, char **argv)
493 if(sizeof(struct get_options) != sizeof(struct list_options)) {
494 krb5_warnx(context, "programmer error: sizeof(struct get_options) != sizeof(struct list_options)");
497 return getit((struct get_options*)opt, "list", argc, argv);