2 * Copyright 2000, International Business Machines Corporation and others.
5 * This software has been released under the terms of the IBM Public
6 * License. For details, see the LICENSE file in the top-level source
7 * directory or online at http://www.openafs.org/dl/license10.html
10 #include <afsconfig.h>
11 #include <afs/param.h>
19 #include <afs/com_err.h>
20 #include <afs/cellconfig.h>
28 /* This code borrowed heavily from the previous version of log. Here is the
29 intro comment for that program: */
32 log -- tell the Andrew Cache Manager your password
34 modified February 1986
36 Further modified in August 1987 to understand cell IDs.
40 klog [principal [password]] [-t] [-c cellname] [-servers <hostlist>]
43 principal is of the form 'name' or 'name@cell' which provides the
44 cellname. See the -c option below.
45 password is the user's password. This form is NOT recommended for
47 -t advises klog to write a Kerberos style ticket file in /tmp.
48 -c identifies cellname as the cell in which authentication is to take
50 -servers allows the explicit specification of the hosts providing
51 authentication services for the cell being used for authentication.
54 #define KLOGEXIT(code) assert(!code || code >= KAMINERROR); \
56 (!code ? exit(0) : exit((code)-KAMINERROR+1))
57 static int CommandProc(struct cmd_syndesc
*, void *);
60 static char **zero_argv
;
72 struct cmd_syndesc
*ts
;
76 * The following signal action for AIX is necessary so that in case of a
77 * crash (i.e. core is generated) we can include the user's data section
78 * in the core dump. Unfortunately, by default, only a partial core is
79 * generated which, in many cases, isn't too useful.
83 sigemptyset(&nsa
.sa_mask
);
84 nsa
.sa_handler
= SIG_DFL
;
85 nsa
.sa_flags
= SA_FULLDUMP
;
86 sigaction(SIGSEGV
, &nsa
, NULL
);
91 ts
= cmd_CreateSyntax(NULL
, CommandProc
, NULL
, 0,
92 "obtain Kerberos authentication");
106 cmd_AddParm(ts
, "-x", CMD_FLAG
, CMD_OPTIONAL
, "(obsolete, noop)");
107 cmd_Seek(ts
, aPRINCIPAL
);
108 cmd_AddParm(ts
, "-principal", CMD_SINGLE
, CMD_OPTIONAL
, "user name");
109 cmd_AddParm(ts
, "-password", CMD_SINGLE
, CMD_OPTIONAL
, "user's password");
110 cmd_AddParm(ts
, "-tmp", CMD_FLAG
, CMD_OPTIONAL
,
111 "write Kerberos-style ticket file in /tmp");
112 cmd_AddParm(ts
, "-cell", CMD_SINGLE
, CMD_OPTIONAL
, "cell name");
113 cmd_AddParm(ts
, "-servers", CMD_LIST
, CMD_OPTIONAL
,
114 "explicit list of servers");
115 cmd_AddParm(ts
, "-pipe", CMD_FLAG
, CMD_OPTIONAL
,
116 "read password from stdin");
117 cmd_AddParm(ts
, "-silent", CMD_FLAG
, CMD_OPTIONAL
, "silent operation");
118 cmd_AddParm(ts
, "-lifetime", CMD_SINGLE
, CMD_OPTIONAL
,
119 "ticket lifetime in hh[:mm[:ss]]");
120 cmd_AddParm(ts
, "-setpag", CMD_FLAG
, CMD_OPTIONAL
,
121 "Create a new setpag before authenticating");
122 cmd_AddParm(ts
, "-names", CMD_LIST
, CMD_OPTIONAL
, "multiple user names");
124 code
= cmd_Dispatch(argc
, argv
);
128 extern struct passwd
*getpwuid();
133 static char gpbuf
[BUFSIZ
];
134 /* read a password from stdin, stop on \n or eof */
136 memset(gpbuf
, 0, sizeof(gpbuf
));
137 for (i
= 0; i
< (sizeof(gpbuf
) - 1); i
++) {
139 if (tc
== '\n' || tc
== EOF
)
147 CommandProc(struct cmd_syndesc
*as
, void *arock
)
149 char name
[MAXKTCNAMELEN
];
150 char instance
[MAXKTCNAMELEN
];
151 char cell
[MAXKTCREALMLEN
];
152 char realm
[MAXKTCREALMLEN
];
153 afs_uint32 serverList
[MAXSERVERS
];
154 char *lcell
; /* local cellname */
155 char lrealm
[MAXKTCREALMLEN
]; /* uppercase copy of local cellname */
158 Date lifetime
; /* requested ticket lifetime */
161 struct passwd
*pw
= &pwent
;
162 struct passwd
*lclpw
= &pwent
;
165 static char rn
[] = "klog"; /*Routine name */
166 static int Pipe
= 0; /* reading from a pipe */
167 static int Silent
= 0; /* Don't want error messages */
169 int explicit; /* servers specified explicitly */
170 int local
; /* explicit cell is same a local one */
171 int foundPassword
= 0; /*Not yet, anyway */
172 int foundExplicitCell
= 0; /*Not yet, anyway */
173 int writeTicketFile
= 0; /* write ticket file to /tmp */
174 afs_int32 password_expires
= -1;
176 char *reason
; /* string describing errors */
178 /* blow away command line arguments */
179 for (i
= 1; i
< zero_argc
; i
++)
180 memset(zero_argv
[i
], 0, strlen(zero_argv
[i
]));
183 /* first determine quiet flag based on -silent switch */
184 Silent
= (as
->parms
[aSILENT
].items
? 1 : 0);
185 Pipe
= (as
->parms
[aPIPE
].items
? 1 : 0);
187 /* Determine if we should also do a setpag based on -setpag switch */
188 dosetpag
= (as
->parms
[aSETPAG
].items
? 1 : 0);
190 if (as
->parms
[aCELL
].items
) {
192 * cell name explicitly mentioned; take it in if no other cell name
193 * has already been specified and if the name actually appears. If
194 * the given cell name differs from our own, we don't do a lookup.
196 foundExplicitCell
= 1;
197 strncpy(realm
, as
->parms
[aCELL
].items
->data
, sizeof(realm
));
198 /* XXX the following is just a hack to handle the afscell environment XXX */
199 (void)afsconf_GetCellInfo((struct afsconf_dir
*)0, realm
, 0,
200 (struct afsconf_cell
*)0);
204 p
if (code
|| !(lcell
= ka_LocalCell())) {
207 afs_com_err(rn
, code
, "Can't get local cell name!");
210 if (code
= ka_CellToRealm(lcell
, lrealm
, 0))
213 strcpy(instance
, "");
215 /* Parse our arguments. */
217 if (as
->parms
[aTMP
].items
) {
221 if (as
->parms
[aCELL
].items
) {
223 * cell name explicitly mentioned; take it in if no other cell name
224 * has already been specified and if the name actually appears. If
225 * the given cell name differs from our own, we don't do a lookup.
227 foundExplicitCell
= 1;
228 strncpy(realm
, as
->parms
[aCELL
].items
->data
, sizeof(realm
));
231 if (as
->parms
[aSERVERS
].items
) {
232 /* explicit server list */
235 char *ap
[MAXSERVERS
+ 2];
237 for (ip
= as
->parms
[aSERVERS
].items
, i
= 2; ip
; ip
= ip
->next
, i
++)
241 code
= ubik_ParseClientList(i
, ap
, serverList
);
244 afs_com_err(rn
, code
, "could not parse server list");
252 if (as
->parms
[aPRINCIPAL
].items
) {
253 ka_ParseLoginName(as
->parms
[aPRINCIPAL
].items
->data
, name
, instance
,
255 if (strlen(instance
) > 0)
258 "Non-null instance (%s) may cause strange behavior.\n",
261 if (strlen(cell
) > 0) {
262 if (foundExplicitCell
) {
265 "%s: May not specify an explicit cell twice.\n",
270 foundExplicitCell
= 1;
271 strncpy(realm
, cell
, sizeof(realm
));
273 lclpw
->pw_name
= name
;
275 /* No explicit name provided: use Unix uid. */
276 pw
= getpwuid(getuid());
280 "Can't figure out your name in local cell %s from your user id.\n",
282 fprintf(stderr
, "Try providing the user name.\n");
284 KLOGEXIT(KABADARGUMENT
);
289 if (as
->parms
[aPASSWORD
].items
) {
291 * Current argument is the desired password string. Remember it in
292 * our local buffer, and zero out the argument string - anyone can
293 * see it there with ps!
296 strncpy(passwd
, as
->parms
[aPASSWORD
].items
->data
, sizeof(passwd
));
297 memset(as
->parms
[aPASSWORD
].items
->data
, 0,
298 strlen(as
->parms
[aPASSWORD
].items
->data
));
301 if (as
->parms
[aLIFETIME
].items
) {
302 char *life
= as
->parms
[aLIFETIME
].items
->data
;
303 char *sp
; /* string ptr to rest of life */
304 lifetime
= 3600 * strtol(life
, &sp
, 0); /* hours */
308 fprintf(stderr
, "%s: translating '%s' to lifetime\n", rn
,
313 life
= sp
+ 1; /* skip the colon */
314 lifetime
+= 60 * strtol(life
, &sp
, 0); /* minutes */
319 lifetime
+= strtol(life
, &sp
, 0); /* seconds */
328 if (lifetime
> MAXKTCTICKETLIFETIME
) {
331 "%s: a lifetime of %.2f hours is too long, must be less than %d.\n",
332 rn
, (double)lifetime
/ 3600.0,
333 MAXKTCTICKETLIFETIME
/ 3600);
334 KLOGEXIT(KABADARGUMENT
);
339 if (!foundExplicitCell
)
340 strcpy(realm
, lcell
);
341 if (code
= ka_CellToRealm(realm
, realm
, &local
)) {
343 afs_com_err(rn
, code
, "Can't convert cell to realm");
347 /* Get the password if it wasn't provided. */
348 if (!foundPassword
) {
350 strncpy(passwd
, getpipepass(), sizeof(passwd
));
352 if (ka_UserReadPassword
353 ("Password:", passwd
, sizeof(passwd
), &reason
)) {
354 fprintf(stderr
, "Unable to login because %s.\n", reason
);
355 KLOGEXIT(KABADARGUMENT
);
361 ka_ExplicitCell(realm
, serverList
);
363 for (itp
= as
->parms
[aNAMES
].items
; itp
; itp
= itp
->next
) {
364 *name
= *instance
= *cell
= '\0';
365 ka_ParseLoginName(itp
->data
, name
, instance
, cell
);
366 if (strlen(cell
) > 0) {
367 foundExplicitCell
= 1;
368 strncpy(realm
, cell
, sizeof(realm
));
372 ka_UserAuthenticateGeneral(KA_USERAUTH_VERSION
+
373 (dosetpag
? KA_USERAUTH_DOSETPAG2
: 0),
374 name
, instance
, realm
, passwd
,
375 lifetime
, &password_expires
, 0,
379 fprintf(stderr
, "Unable to authenticate to AFS because %s.\n",
385 if (password_expires
>= 0) {
386 printf("password expires at %ld\n", password_expires
);