/* * lib/krb5/os/ccdefname.c * * Copyright 1990, 2007 by the Massachusetts Institute of Technology. * All Rights Reserved. * * Export of this software from the United States of America may * require a specific license from the United States Government. * It is the responsibility of any person or organization contemplating * export to obtain such a license before exporting. * * WITHIN THAT CONSTRAINT, permission to use, copy, modify, and * distribute this software and its documentation for any purpose and * without fee is hereby granted, provided that the above copyright * notice appear in all copies and that both that copyright notice and * this permission notice appear in supporting documentation, and that * the name of M.I.T. not be used in advertising or publicity pertaining * to distribution of the software without specific, written prior * permission. Furthermore if you modify this software you must label * your software as modified software and not distribute it in such a * fashion that it might be confused with the original M.I.T. software. * M.I.T. makes no representations about the suitability of * this software for any purpose. It is provided "as is" without express * or implied warranty. * * * Return default cred. cache name. */ #define NEED_WINDOWS #include "k5-int.h" #include #if defined(USE_CCAPI) #include #endif #if defined(_WIN32) static int get_from_registry_indirect(char *name_buf, int name_size) { /* If the RegKRB5CCNAME variable is set, it will point to * the registry key that has the name of the cache to use. * The Gradient PC-DCE sets the registry key * [HKEY_CURRENT_USER\Software\Gradient\DCE\Default\KRB5CCNAME] * to point at the cache file name (including the FILE: prefix). * By indirecting with the RegKRB5CCNAME entry in kerberos.ini, * we can accomodate other versions that might set a registry * variable. */ char newkey[256]; LONG name_buf_size; HKEY hkey; int found = 0; char *cp; newkey[0] = 0; GetPrivateProfileString(INI_FILES, "RegKRB5CCNAME", "", newkey, sizeof(newkey), KERBEROS_INI); if (!newkey[0]) return 0; newkey[sizeof(newkey)-1] = 0; cp = strrchr(newkey,'\\'); if (cp) { *cp = '\0'; /* split the string */ cp++; } else cp = ""; if (RegOpenKeyEx(HKEY_CURRENT_USER, newkey, 0, KEY_QUERY_VALUE, &hkey) != ERROR_SUCCESS) return 0; name_buf_size = name_size; if (RegQueryValueEx(hkey, cp, 0, 0, name_buf, &name_buf_size) != ERROR_SUCCESS) { RegCloseKey(hkey); return 0; } RegCloseKey(hkey); return 1; } /* * get_from_registry * * This will find the ccname in the registry. Returns 0 on error, non-zero * on success. */ static int get_from_registry( HKEY hBaseKey, char *name_buf, int name_size ) { HKEY hKey; DWORD name_buf_size = (DWORD)name_size; const char *key_path = "Software\\MIT\\Kerberos5"; const char *value_name = "ccname"; if (RegOpenKeyEx(hBaseKey, key_path, 0, KEY_QUERY_VALUE, &hKey) != ERROR_SUCCESS) return 0; if (RegQueryValueEx(hKey, value_name, 0, 0, name_buf, &name_buf_size) != ERROR_SUCCESS) { RegCloseKey(hKey); return 0; } RegCloseKey(hKey); return 1; } #define APPEND_KRB5CC "\\krb5cc" static int try_dir( char* dir, char* buffer, int buf_len ) { struct _stat s; if (!dir) return 0; if (_stat(dir, &s)) return 0; if (!(s.st_mode & _S_IFDIR)) return 0; if (buffer != dir) { strncpy(buffer, dir, buf_len); buffer[buf_len-1]='\0'; } strncat(buffer, APPEND_KRB5CC, buf_len-strlen(buffer)); buffer[buf_len-1] = '\0'; return 1; } #endif #if defined(_WIN32) static krb5_error_code get_from_os(char *name_buf, unsigned int name_size) { char *prefix = krb5_cc_dfl_ops->prefix; int size; char *p; DWORD gle; SetLastError(0); GetEnvironmentVariable(KRB5_ENV_CCNAME, name_buf, name_size); gle = GetLastError(); if (gle == 0) return 0; else if (gle != ERROR_ENVVAR_NOT_FOUND) return ENOMEM; if (get_from_registry(HKEY_CURRENT_USER, name_buf, name_size) != 0) return 0; if (get_from_registry(HKEY_LOCAL_MACHINE, name_buf, name_size) != 0) return 0; if (get_from_registry_indirect(name_buf, name_size) != 0) return 0; strncpy(name_buf, prefix, name_size - 1); name_buf[name_size - 1] = 0; size = name_size - strlen(prefix); if (size > 0) strcat(name_buf, ":"); size--; p = name_buf + name_size - size; if (!strcmp(prefix, "API")) { strncpy(p, "krb5cc", size); } else if (!strcmp(prefix, "FILE") || !strcmp(prefix, "STDIO")) { if (!try_dir(getenv("TEMP"), p, size) && !try_dir(getenv("TMP"), p, size)) { int len = GetWindowsDirectory(p, size); name_buf[name_size - 1] = 0; if (len < size - sizeof(APPEND_KRB5CC)) strcat(p, APPEND_KRB5CC); } } else { strncpy(p, "default_cache_name", size); } name_buf[name_size - 1] = 0; return 0; } #endif #if defined(USE_CCAPI) static krb5_error_code get_from_os(char *name_buf, unsigned int name_size) { krb5_error_code result = 0; cc_context_t cc_context = NULL; cc_string_t default_name = NULL; cc_int32 ccerr = cc_initialize (&cc_context, ccapi_version_3, NULL, NULL); if (ccerr == ccNoError) { ccerr = cc_context_get_default_ccache_name (cc_context, &default_name); } if (ccerr == ccNoError) { if (strlen (default_name -> data) + 5 > name_size) { result = ENOMEM; goto cleanup; } else { snprintf (name_buf, name_size, "API:%s", default_name -> data); } } cleanup: if (cc_context != NULL) { cc_context_release (cc_context); } if (default_name != NULL) { cc_string_release (default_name); } return result; } #else #if !(defined(_WIN32)) static krb5_error_code get_from_os(char *name_buf, unsigned int name_size) { snprintf(name_buf, name_size, "FILE:/tmp/krb5cc_%ld", (long) getuid()); return 0; } #endif #endif krb5_error_code KRB5_CALLCONV krb5_cc_set_default_name(krb5_context context, const char *name) { krb5_error_code err = 0; char *new_ccname = NULL; if (!context || context->magic != KV5M_CONTEXT) { err = KV5M_CONTEXT; } if (name != NULL) { if (!err) { /* If the name isn't NULL, make a copy of it */ new_ccname = strdup (name); if (new_ccname == NULL) { err = ENOMEM; } } } if (!err) { /* free the old ccname and store the new one */ krb5_os_context os_ctx = &context->os_context; if (os_ctx->default_ccname) { free (os_ctx->default_ccname); } os_ctx->default_ccname = new_ccname; new_ccname = NULL; /* don't free */ } return err; } const char * KRB5_CALLCONV krb5_cc_default_name(krb5_context context) { krb5_error_code err = 0; krb5_os_context os_ctx = NULL; if (!context || context->magic != KV5M_CONTEXT) { err = KV5M_CONTEXT; } if (!err) { os_ctx = &context->os_context; if (os_ctx->default_ccname == NULL) { /* Default ccache name has not been set yet */ char *new_ccname = NULL; char new_ccbuf[1024]; /* try the environment variable first */ new_ccname = getenv(KRB5_ENV_CCNAME); if (new_ccname == NULL) { /* fall back on the default ccache name for the OS */ new_ccname = new_ccbuf; err = get_from_os (new_ccbuf, sizeof (new_ccbuf)); } if (!err) { err = krb5_cc_set_default_name (context, new_ccname); } } } return err ? NULL : os_ctx->default_ccname; } /* * caller must free name */ krb5_error_code krb5int_cc_os_default_name(krb5_context context, char **name) { krb5_error_code retval = 0; char *tmpname = NULL; *name = NULL; tmpname = malloc(BUFSIZ); if (tmpname == NULL) return ENOMEM; retval = get_from_os(tmpname, BUFSIZ); *name = tmpname; return retval; }