1/* 2 * Copyright (c) 1997-2004 Kungliga Tekniska Högskolan 3 * (Royal Institute of Technology, Stockholm, Sweden). 4 * All rights reserved. 5 * 6 * Redistribution and use in source and binary forms, with or without 7 * modification, are permitted provided that the following conditions 8 * are met: 9 * 10 * 1. Redistributions of source code must retain the above copyright 11 * notice, this list of conditions and the following disclaimer. 12 * 13 * 2. Redistributions in binary form must reproduce the above copyright 14 * notice, this list of conditions and the following disclaimer in the 15 * documentation and/or other materials provided with the distribution. 16 * 17 * 3. Neither the name of the Institute nor the names of its contributors 18 * may be used to endorse or promote products derived from this software 19 * without specific prior written permission. 20 * 21 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND 22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 24 * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE 25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 31 * SUCH DAMAGE. 32 */ 33 34#include "kadmin_locl.h" 35#include "kadmin-commands.h" 36#include <kadm5/private.h> 37 38#ifdef __APPLE__ 39#include <HeimODAdmin.h> 40#endif 41 42extern int local_flag; 43 44#ifdef __APPLE__ 45 46static krb5_error_code 47od_dump_entry(krb5_context kcontext, HDB *db, hdb_entry_ex *entry, void *data) 48{ 49 CFErrorRef error = NULL; 50 CFDictionaryRef dict; 51 CFStringRef fn, uuidstr; 52 CFUUIDRef uuid; 53 CFURLRef url; 54 55 dict = HeimODDumpHdbEntry(&entry->entry, &error); 56 if (dict == NULL) { 57 if (error) 58 CFRelease(error); 59 return 0; 60 } 61 62 uuid = CFUUIDCreate(NULL); 63 if (uuid == NULL) { 64 krb5_warnx(kcontext, "out of memory"); 65 CFRelease(dict); 66 return 0; 67 } 68 69 uuidstr = CFUUIDCreateString(NULL, uuid); 70 CFRelease(uuid); 71 if (uuidstr == NULL) { 72 krb5_warnx(kcontext, "out of memory"); 73 CFRelease(dict); 74 return 0; 75 } 76 77 fn = CFStringCreateWithFormat(NULL, NULL, CFSTR("%s/%@.plist"), (char *)data, uuidstr); 78 CFRelease(uuidstr); 79 if (fn == NULL) { 80 krb5_warnx(kcontext, "out of memory"); 81 CFRelease(dict); 82 return 0; 83 } 84 85 url = CFURLCreateWithFileSystemPath(NULL, fn, kCFURLPOSIXPathStyle, false); 86 CFRelease(fn); 87 if (url == NULL) { 88 krb5_warnx(kcontext, "out of memory"); 89 CFRelease(dict); 90 return 0; 91 } 92 93 CFDataRef xmldata = CFPropertyListCreateXMLData(NULL, dict); 94 CFRelease(dict); 95 if (xmldata == NULL) { 96 CFRelease(url); 97 krb5_warnx(kcontext, "out of memory"); 98 return 0; 99 } 100 101 CFWriteStreamRef stream = CFWriteStreamCreateWithFile(NULL, url); 102 if (stream) { 103 if (CFWriteStreamOpen(stream)) 104 CFWriteStreamWrite(stream, CFDataGetBytePtr(xmldata), CFDataGetLength(xmldata)); 105 CFWriteStreamClose(stream); 106 CFRelease(stream); 107 } 108 109 CFRelease(url); 110 CFRelease(xmldata); 111 112 return 0; 113} 114#endif 115 116int 117dump(struct dump_options *opt, int argc, char **argv) 118{ 119 krb5_error_code (*func)(krb5_context, HDB *, hdb_entry_ex *, void *); 120 krb5_error_code ret; 121 void *arg; 122 const char *format = "heimdal"; 123 FILE *f = NULL; 124 125 if (opt->format_string) 126 format = opt->format_string; 127 128 if (strcasecmp(format, "heimdal") == 0) { 129 func = hdb_print_entry; 130 131 if (argc == 0) { 132 arg = stdout; 133 } else { 134 arg = f = fopen(argv[0], "w"); 135 if (f == NULL) { 136 krb5_warn(context, errno, "failed to open %s", argv[0]); 137 return 0; 138 } 139 } 140#ifdef __APPLE__ 141 } else if (strcasecmp(format, "od") == 0) { 142 143 func = od_dump_entry; 144 if (argc == 0) 145 arg = rk_UNCONST("."); 146 else 147 arg = argv[0]; 148#endif 149 } else { 150 krb5_warnx(context, "unknown dump format: %s", format); 151 return 0; 152 } 153 154 if (opt->mit_dump_file_string) { 155 ret = hdb_mit_dump(context, opt->mit_dump_file_string, 156 func, arg); 157 if (ret) 158 krb5_warn(context, ret, "hdb_mit_dump"); 159 160 } else { 161 HDB *db = NULL; 162 163 if (!local_flag) { 164 krb5_warnx(context, "od-dump is only available in local (-l) mode"); 165 return 0; 166 } 167 168 db = _kadm5_s_get_db(kadm_handle); 169 170 ret = db->hdb_open(context, db, O_RDONLY, 0600); 171 if (ret) { 172 krb5_warn(context, ret, "hdb_open"); 173 goto out; 174 } 175 176 ret = hdb_foreach(context, db, opt->decrypt_flag ? HDB_F_DECRYPT : 0, 177 func, arg); 178 if (ret) 179 krb5_warn(context, ret, "hdb_foreach"); 180 181 db->hdb_close(context, db); 182 } 183 if (f) 184 fclose(f); 185out: 186 return ret != 0; 187} 188 189int 190od_dump(struct od_dump_options *opt, int argc, char **argv) 191{ 192 struct dump_options dumpopt; 193 194 memset(&dumpopt, 0, sizeof(dumpopt)); 195 dumpopt.decrypt_flag = opt->decrypt_flag; 196 dumpopt.format_string = "od"; 197 198 return dump(&dumpopt, argc, argv); 199} 200