1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
|
/*
* $Source$
* $Author$
*
* Copyright 1990,1991 by the Massachusetts Institute of Technology.
* All Rights Reserved.
*
* For copying and distribution information, please see the file
* <krb5/copyright.h>.
*
* krb5_get_host_realm()
*/
#if !defined(lint) && !defined(SABER)
static char rcsid_hst_realm_c[] =
"$Id$";
#endif /* !lint & !SABER */
/*
Figures out the Kerberos realm names for host, filling in a
pointer to an argv[] style list of names, terminated with a null pointer.
If host is NULL, the local host's realms are determined.
If there are no known realms for the host, the filled-in pointer is set
to NULL.
The pointer array and strings pointed to are all in allocated storage,
and should be freed by the caller when finished.
returns system errors
*/
/*
* Implementation notes:
*
* this implementation only provides one realm per host, using the same
* mapping file used in kerberos v4.
* Given a fully-qualified domain-style primary host name,
* return the name of the Kerberos realm for the host.
* If the hostname contains no discernable domain, or an error occurs,
* return the local realm name, as supplied by krb5_get_default_realm().
* If the hostname contains a domain, but no translation is found,
* the hostname's domain is converted to upper-case and returned.
*
* The format of each line of the translation file is:
* domain_name kerberos_realm
* -or-
* host_name kerberos_realm
*
* domain_name should be of the form .XXX.YYY (e.g. .LCS.MIT.EDU)
* host names should be in the usual form (e.g. FOO.BAR.BAZ)
*/
#include <krb5/krb5.h>
#include <krb5/ext-proto.h>
#include <krb5/los-proto.h>
#include <krb5/sysincl.h>
#include <ctype.h>
#include <stdio.h>
/* for old Unixes and friends ... */
#ifndef MAXHOSTNAMELEN
#define MAXHOSTNAMELEN 64
#endif
#define DEF_REALMNAME_SIZE 256
extern char *krb5_trans_file;
krb5_error_code
krb5_get_host_realm(host, realmsp)
const char *host;
char ***realmsp;
{
char **retrealms;
char *domain;
FILE *trans_file;
char trans_host[MAXHOSTNAMELEN+1];
char local_host[MAXHOSTNAMELEN+1];
char trans_realm[DEF_REALMNAME_SIZE];
krb5_error_code retval;
int scanval;
char scanstring[7+2*16]; /* 7 chars + 16 for each decimal
conversion */
if (!(retrealms = (char **)calloc(2, sizeof(*retrealms))))
return ENOMEM;
if (!host) {
if (gethostname(local_host, sizeof(local_host)-1) == -1)
return errno;
local_host[sizeof(local_host)-1] = '\0';
host = local_host;
}
domain = strchr(host, '.');
/* prepare default */
if (domain) {
char *cp;
if (!(retrealms[0] = malloc(strlen(&domain[1])+1))) {
xfree(retrealms);
return ENOMEM;
}
strcpy(retrealms[0], &domain[1]);
/* Upper-case realm */
for (cp = retrealms[0]; *cp; cp++)
if (islower(*cp))
*cp = toupper(*cp);
} else {
if (retval = krb5_get_default_realm(&retrealms[0])) {
xfree(retrealms);
return retval;
}
}
if ((trans_file = fopen(krb5_trans_file, "r")) == (FILE *) 0) {
xfree(retrealms[0]);
xfree(retrealms);
return KRB5_TRANS_CANTOPEN;
}
(void) sprintf(scanstring, "%%%ds %%%ds",
sizeof(trans_host)-1,sizeof(trans_realm)-1);
while (1) {
if ((scanval = fscanf(trans_file, scanstring,
trans_host, trans_realm)) != 2) {
if (scanval == EOF) {
fclose(trans_file);
goto out;
}
continue; /* ignore broken lines */
}
trans_host[sizeof(trans_host)-1] = '\0';
trans_realm[sizeof(trans_realm)-1] = '\0';
if (!strcasecmp(trans_host, host)) {
/* exact match of hostname, so return the realm */
if (!(retrealms[0] = realloc(retrealms[0],
strlen(trans_realm)+1))) {
xfree(retrealms);
return ENOMEM;
}
(void) strcpy(retrealms[0], trans_realm);
fclose(trans_file);
goto out;
}
if ((trans_host[0] == '.') && domain) {
/* this is a possible domain match */
if (!strcasecmp(trans_host, domain)) {
/* domain match, save for later */
if (!(retrealms[0] = realloc(retrealms[0],
strlen(trans_realm)+1))) {
xfree(retrealms);
return ENOMEM;
}
(void) strcpy(retrealms[0], trans_realm);
continue;
}
}
}
out:
*realmsp = retrealms;
return 0;
}
|
