/* -*- mode: c; c-basic-offset: 4; indent-tabs-mode: nil -*- */
/* tests/gssapi/t_inq_cred.c - Test program for gss_inquire_cred behavior */
/*
 * Copyright 2012 by the Massachusetts Institute of Technology.
 * All Rights Reserved.
 *
 * Export of this software from the United States of America may
 *   require a specific license from the United States Government.
 *   It is the responsibility of any person or organization contemplating
 *   export to obtain such a license before exporting.
 *
 * WITHIN THAT CONSTRAINT, permission to use, copy, modify, and
 * distribute this software and its documentation for any purpose and
 * without fee is hereby granted, provided that the above copyright
 * notice appear in all copies and that both that copyright notice and
 * this permission notice appear in supporting documentation, and that
 * the name of M.I.T. not be used in advertising or publicity pertaining
 * to distribution of the software without specific, written prior
 * permission.  Furthermore if you modify this software you must label
 * your software as modified software and not distribute it in such a
 * fashion that it might be confused with the original M.I.T. software.
 * M.I.T. makes no representations about the suitability of
 * this software for any purpose.  It is provided "as is" without express
 * or implied warranty.
 */

/*
 * Test program for gss_inquire_cred, intended to be run from a Python test
 * script.  Acquires credentials, inquires them, and prints the resulting name
 * and lifetime.
 *
 * Usage: ./t_inq_cred [-k|-s] [-a|-b|-i] [initiatorname]
 *
 * By default no mechanism is specified when acquiring credentials; -k
 * indicates the krb5 mech and -s indicates SPNEGO.  By default or with -i,
 * initiator credentials are acquired; -a indicates acceptor credentials and -b
 * indicates credentials of both types.  The credential is acquired with no
 * name by default; a krb5 principal name or host-based name (prefixed with
 * "gss:") may be supplied as an argument.
 */

#include <stdio.h>
#include <stdlib.h>
#include <string.h>

#include "common.h"

static void
usage(void)
{
    fprintf(stderr,
            "Usage: t_inq_cred [-k|-s] [-a|-b|-i] [princ|gss:service@host]\n");
    exit(1);
}

int
main(int argc, char *argv[])
{
    OM_uint32 minor, major, lifetime;
    gss_cred_usage_t cred_usage = GSS_C_INITIATE;
    gss_OID_set mechs = GSS_C_NO_OID_SET;
    gss_cred_id_t cred = GSS_C_NO_CREDENTIAL;
    gss_name_t name = GSS_C_NO_NAME;
    gss_buffer_desc buf;
    const char *name_arg = NULL;
    char opt;

    while (argc > 1 && argv[1][0] == '-') {
        opt = argv[1][1];
        argc--, argv++;
        if (opt == 'a')
            cred_usage = GSS_C_ACCEPT;
        else if (opt == 'b')
            cred_usage = GSS_C_BOTH;
        else if (opt == 'i')
            cred_usage = GSS_C_INITIATE;
        else if (opt == 'k')
            mechs = &mechset_krb5;
        else if (opt == 's')
            mechs = &mechset_spnego;
        else
            usage();
    }
    if (argc > 2)
        usage();
    if (argc > 1)
        name_arg = argv[1];

    /* Import the name, if given. */
    if (name_arg != NULL)
        name = import_name(name_arg);

    /* Acquire a credential. */
    major = gss_acquire_cred(&minor, name, GSS_C_INDEFINITE, mechs, cred_usage,
                             &cred, NULL, NULL);
    check_gsserr("gss_acquire_cred", major, minor);

    /* Inquire about the credential. */
    (void)gss_release_name(&minor, &name);
    major = gss_inquire_cred(&minor, cred, &name, &lifetime, NULL, NULL);
    check_gsserr("gss_inquire_cred", major, minor);

    /* Get a display form of the name. */
    buf.value = NULL;
    buf.length = 0;
    major = gss_display_name(&minor, name, &buf, NULL);
    check_gsserr("gss_display_name", major, minor);

    printf("name: %.*s\n", (int)buf.length, (char *)buf.value);
    printf("lifetime: %d\n", (int)lifetime);

    (void)gss_release_cred(&minor, &cred);
    (void)gss_release_name(&minor, &name);
    (void)gss_release_buffer(&minor, &buf);
    return 0;
}