2 * Copyright (c) 1997-2005 Kungliga Tekniska Högskolan
3 * (Royal Institute of Technology, Stockholm, Sweden).
6 * Portions Copyright (c) 2009 Apple Inc. All rights reserved.
8 * Redistribution and use in source and binary forms, with or without
9 * modification, are permitted provided that the following conditions
12 * 1. Redistributions of source code must retain the above copyright
13 * notice, this list of conditions and the following disclaimer.
15 * 2. Redistributions in binary form must reproduce the above copyright
16 * notice, this list of conditions and the following disclaimer in the
17 * documentation and/or other materials provided with the distribution.
19 * 3. Neither the name of the Institute nor the names of its contributors
20 * may be used to endorse or promote products derived from this software
21 * without specific prior written permission.
23 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
24 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
25 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
26 * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
27 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
28 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
29 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
30 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
31 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
32 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
45 sig_atomic_t exit_flag = 0;
48 int detach_from_console = -1;
58 * Allow dropping root bit, since heimdal reopens the database all the
59 * time the database needs to be owned by the user you are switched
60 * too. A better solution is to split the kdc in to more processes and
61 * run the network facing part with very low privilege.
65 switch_environment(void)
68 if ((runas_string || chroot_string) && geteuid() != 0)
69 errx(1, "no running as root, can't switch user/chroot");
71 if (chroot_string && chroot(chroot_string) != 0)
72 errx(1, "chroot(%s)", "chroot_string failed");
77 pw = getpwnam(runas_string);
79 errx(1, "unknown user %s", runas_string);
81 if (initgroups(pw->pw_name, pw->pw_gid) < 0)
82 err(1, "initgroups failed");
85 if (setgid(pw->pw_gid) < 0)
86 err(1, "setgid(%s) failed", runas_string);
88 if (setuid(pw->pw_uid) < 0)
89 err(1, "setuid(%s)", runas_string);
91 capng_clear (CAPNG_EFFECTIVE | CAPNG_PERMITTED);
92 if (capng_updatev (CAPNG_ADD, CAPNG_EFFECTIVE | CAPNG_PERMITTED,
93 CAP_NET_BIND_SERVICE, CAP_SETPCAP, -1) < 0)
94 err(1, "capng_updateev");
96 if (capng_change_id(pw->pw_uid, pw->pw_gid,
97 CAPNG_CLEAR_BOUNDING) < 0)
98 err(1, "capng_change_id(%s)", runas_string);
106 main(int argc, char **argv)
109 krb5_context context;
110 krb5_kdc_configuration *config;
112 setprogname(argv[0]);
114 ret = krb5_init_context(&context);
115 if (ret == KRB5_CONFIG_BADFORMAT)
116 errx (1, "krb5_init_context failed to parse configuration file");
118 errx (1, "krb5_init_context failed: %d", ret);
120 ret = krb5_kt_register(context, &hdb_kt_ops);
122 errx (1, "krb5_kt_register(HDB) failed: %d", ret);
124 config = configure(context, argc, argv);
126 #ifdef HAVE_SIGACTION
131 sa.sa_handler = sigterm;
132 sigemptyset(&sa.sa_mask);
134 sigaction(SIGINT, &sa, NULL);
135 sigaction(SIGTERM, &sa, NULL);
137 sigaction(SIGXCPU, &sa, NULL);
140 sa.sa_handler = SIG_IGN;
142 sigaction(SIGPIPE, &sa, NULL);
146 signal(SIGINT, sigterm);
147 signal(SIGTERM, sigterm);
149 signal(SIGXCPU, sigterm);
152 signal(SIGPIPE, SIG_IGN);
155 #ifdef SUPPORT_DETACH
156 if (detach_from_console)
160 bonjour_announce(context, config);
164 switch_environment();
166 loop(context, config);
167 krb5_free_context(context);