/*

 * Copyright (c) 2010, 2015, Oracle and/or its affiliates. All rights reserved.

 */

/*

 * prof_solaris.c:

 * Abstracted contract private interfaces for configuring krb5.conf(4).

 */

#include <ctype.h>

#include <locale.h>

#include "prof_solaris.h"

#include "k5-int.h"

#include "../../util/profile/prof_int.h"

struct profile_string_list {

    char    **list;

    unsigned int    num;

    unsigned int    max;

};

/*

 * Initialize the string list abstraction.

 */

static errcode_t init_list(struct profile_string_list *list)

{

    list->num = 0;

    list->max = 10;

    list->list = malloc(list->max * sizeof (char *));

    if (list->list == 0)

        return ENOMEM;

    list->list[0] = 0;

    return 0;

}

/*

 * Free any memory left over in the string abstraction, returning the

 * built up list in *ret_list if it is non-null.

 */

static void end_list(struct profile_string_list *list, char ***ret_list)

{

    char    **cp;

    if (list == 0)

        return;

    if (ret_list) {

        *ret_list = list->list;

        return;

    } else {

        for (cp = list->list; *cp; cp++)

            free(*cp);

        free(list->list);

    }

    list->num = list->max = 0;

    list->list = 0;

}

/*

 * Add a string to the list.

 */

static errcode_t add_to_list(struct profile_string_list *list, const char *str)

{

    char    *newstr, **newlist;

    unsigned int    newmax;

    if (list->num+1 >= list->max) {

        newmax = list->max + 10;

        newlist = realloc(list->list, newmax * sizeof (char *));

        if (newlist == 0)

            return ENOMEM;

        list->max = newmax;

        list->list = newlist;

    }

    newstr = strdup(str);

    if (newstr == 0)

        return ENOMEM;

    list->list[list->num++] = newstr;

    list->list[list->num] = 0;

    return 0;

}

/*

 * key:

 *	If key is NULL then all entries in the section specified are returned.

 * case_ins:

 *      If set a case insensitive lookup is performed and if found then only one

 *	    entry is returned which only differs by case.

 *      If unset a case sensitive lookup is performed and all entries matching

 *	    the lookup are returned.

 */

errcode_t

k5_profile_iter_name_value(profile_t profile, char *section, char *key,

	char ***retvals, boolean_t case_ins)

{

	const char	*hierarchy[4];

	errcode_t	code, code2;

	char		*name = NULL, *value = NULL, **ret_values = NULL;

	void		*state = NULL;

	struct profile_string_list values;

	boolean_t	found = B_FALSE;

	hierarchy[0] = section;

	hierarchy[1] = NULL;

	if (code = init_list(&values))

		return (code);

	code = profile_iterator_create(profile, hierarchy,

	    PROFILE_ITER_LIST_SECTION, &state);

	/* Change loop condition to fix the profile iterator issue */

	while (state != NULL) {

		code = profile_iterator(&state, &name, &value);

		if (code == 0 && name != NULL) {

			if (key != NULL && value != NULL) {

				boolean_t ex_match = strcmp(key, value) ?

				    B_FALSE : B_TRUE;

				boolean_t match = strcasecmp(key, value) ?

				    B_FALSE : B_TRUE;

				if (ex_match == B_FALSE && case_ins == B_TRUE &&

				    match == B_TRUE) {

					code2 = add_to_list(&values, name);

					if (code2 != 0) {

						end_list(&values, 0);

						code = code2;

					} else

						end_list(&values, &ret_values);

					goto cleanup;

				} else if (ex_match == B_FALSE ||

				    case_ins == B_TRUE)

					goto not_found;

			}

			code2 = add_to_list(&values, name);

			if (code2 != 0) {

				end_list(&values, 0);

				code = code2;

				goto cleanup;

			}

			found = B_TRUE;

		}

not_found:

		if (name != NULL) {

			profile_release_string(name);

			name = NULL;

		}

		if (value != NULL) {

			profile_release_string(value);

			value = NULL;

		}

	}

	code = 0;

	if (found == B_TRUE)

		end_list(&values, &ret_values);

	else

		end_list(&values, 0);

cleanup:

	if (state != NULL)

		profile_iterator_free(&state);

	if (name != NULL)

		profile_release_string(name);

	if (value != NULL)

		profile_release_string(value);

	*retvals = ret_values;

	return (code);

}

errcode_t

k5_profile_get_domain_realm(profile_t profile, char *realm, char ***domains,

    boolean_t case_ins)

{

	if (profile == NULL || realm == NULL || domains == NULL)

		return (EINVAL);

	return (k5_profile_iter_name_value(profile, "domain_realm", realm,

	    domains, case_ins));

}

errcode_t

k5_profile_set_appdefaults(profile_t profile)

{

	const char	*hierarchy[4];

	errcode_t	code;

	if (profile == NULL)

		return (EINVAL);

	hierarchy[0] = "appdefaults";

	hierarchy[1] = "kinit";

	hierarchy[3] = NULL;

	hierarchy[2] = "renewable";

	/*

	 * Not fatal if this fails, continue on.

	 */

	(void) profile_clear_relation(profile, hierarchy);

	code = profile_add_relation(profile, hierarchy, "true");

	if (code != 0)

		return (code);

	hierarchy[2] = "forwardable";

	(void) profile_clear_relation(profile, hierarchy);

	code = profile_add_relation(profile, hierarchy, "true");

	return (code);

}

errcode_t

k5_profile_set_logging(profile_t profile)

{

	const char	*hierarchy[4];

	errcode_t	code;

	if (profile == NULL)

		return (EINVAL);

	hierarchy[0] = "logging";

	hierarchy[2] = NULL;

	hierarchy[3] = NULL;

	hierarchy[1] = "default";

	/*

	 * Not fatal if this fails, continue on.

	 */

	(void) profile_clear_relation(profile, hierarchy);

	code = profile_add_relation(profile, hierarchy,

	    "FILE:/var/krb5/kdc.log");

	if (code != 0)

		return (code);

	hierarchy[1] = "kdc";

	(void) profile_clear_relation(profile, hierarchy);

	code = profile_add_relation(profile, hierarchy,

	    "FILE:/var/krb5/kdc.log");

	if (code != 0)

		return (code);

	hierarchy[1] = "kdc_rotate";

	hierarchy[2] = "period";

	(void) profile_clear_relation(profile, hierarchy);

	code = profile_add_relation(profile, hierarchy, "1d");

	if (code != 0)

		return (code);

	hierarchy[2] = "versions";

	(void) profile_clear_relation(profile, hierarchy);

	code = profile_add_relation(profile, hierarchy, "10");

	return (code);

}

/*

 * DEPRECATED - use k5_profile_add_libdefaults_entry() instead.

 *

 * errcode_t k5_profile_set_libdefaults(profile_t profile, char *realm)

 *

 * where profile was the pointer passed back by k5_profile_init

 * where realm is the realm name to be added as the default_realm

 */

errcode_t

k5_profile_set_libdefaults(profile_t profile, char *realm)

{

	const char	*hierarchy[4];

	errcode_t	code;

	if (profile == NULL || realm == NULL)

		return (EINVAL);

	hierarchy[0] = "libdefaults";

	hierarchy[1] = "default_realm";

	hierarchy[2] = NULL;

	/*

	 * Not fatal if this fails, continue on.

	 */

	(void) profile_clear_relation(profile, hierarchy);

	code = profile_add_relation(profile, hierarchy, realm);

	return (code);

}

errcode_t

k5_profile_set_kdc(profile_t profile, char *realm, char *kdc,

	boolean_t overwrite)

{

	const char	*hierarchy[4];

	errcode_t	code;

	if (profile == NULL || realm == NULL || kdc == NULL)

		return (EINVAL);

	hierarchy[0] = "realms";

	hierarchy[1] = realm;

	hierarchy[3] = NULL;

	hierarchy[2] = "kdc";

	if (overwrite == B_TRUE) {

		/*

		 * Not fatal if this fails, continue on.

		 */

		(void) profile_clear_relation(profile, hierarchy);

	}

	code = profile_add_relation(profile, hierarchy, kdc);

	return (code);

}

/*

 * errcode_t k5_profile_release(profile_t profile)

 *

 * where profile was the pointer passed back by k5_profile_init

 * Note: used to commit the associated profile to the backing store

 * (e.g. file) and free profile memory

 * Note: that this function returns an error code which profile_release

 * does not.  With the error code, the application can determine if they

 * need to free the resulting profile information in memory

 */

errcode_t

k5_profile_release(profile_t profile)

{

	prf_file_t	p, next;

	errcode_t	code;

	if (profile == NULL || profile->magic != PROF_MAGIC_PROFILE)

		return (EINVAL);

	for (p = profile->first_file; p; p = next) {

		next = p->next;

		if ((code = profile_close_file(p)) != 0)

			return (code);

	}

	profile->magic = 0;

	free(profile);

	return (0);

}

/*

 * void k5_profile_abandon(profile_t profile)

 *

 * where profile was the pointer passed back by k5_profile_init

 * Note: used to free any profile information in memory.  Typically can

 * be used in conjunction with k5_profile_release upon error

 */

void

k5_profile_abandon(profile_t profile)

{

	profile_abandon(profile);

}

/*

 * errcode_t k5_profile_add_domain_mapping(profile_t profile, char *domain,

 *	char *realm)

 *

 * where profile was the pointer passed back by k5_profile_init

 * where domain is the domain name of the associated realm name

 * where realm is the corresponding realm name for the domain

 */

errcode_t

k5_profile_add_domain_mapping(profile_t profile, char *domain, char *realm)

{

	const char	*hierarchy[4];

	errcode_t	code = 0;

	if (profile == NULL || domain == NULL || realm == NULL)

		return (EINVAL);

	hierarchy[0] = "domain_realm";

	hierarchy[1] = domain;

	hierarchy[2] = NULL;

	/*

	 * Not fatal if relation can't be cleared, continue on.

	 */

	(void) profile_clear_relation(profile, hierarchy);

	code = profile_add_relation(profile, hierarchy, realm);

	return (code);

}

/*

 * errcode_t k5_profile_remove_domain_mapping(profile_t profile, char *realm)

 *

 * where profile was the pointer passed back by k5_profile_init

 * where realm is the corresponding realm name for the domain

 * Note: for the remove function, all matching domain - realm mappings

 * will be removed for realm

 */

errcode_t

k5_profile_remove_domain_mapping(profile_t profile, char *realm)

{

	const char	*hierarchy[4];

	errcode_t	code;

	char		**domains = NULL, **domain = NULL;

	if (profile == NULL || realm == NULL)

		return (EINVAL);

	hierarchy[0] = "domain_realm";

	hierarchy[1] = NULL;

	hierarchy[2] = NULL;

	code = k5_profile_get_domain_realm(profile, realm, &domains, B_FALSE);

	if (code == 0 && domains != NULL) {

		for (domain = domains; *domain; domain++) {

			hierarchy[1] = *domain;

			code = profile_clear_relation(profile, hierarchy);

			if (code != 0)

				goto error;

		}

	}

error:

	if (domains != NULL)

		profile_free_list(domains);

	return (code);

}

/*

 * errcode_t k5_profile_get_realm_entry(profile_t profile, char *realm,

 *	char *name, char ***ret_value)

 *

 * where profile was the pointer passed back by k5_profile_init

 * where realm is the target realm for lookup

 * where name is the name in the realm section requested

 * where ret_value is a string array of any matching values assigned to name.

 * The array is terminated with a NULL pointer.

 * Note: if name has not been configured then NULL is returned for ret_value.

 */

errcode_t

k5_profile_get_realm_entry(profile_t profile, char *realm, char *name,

	char ***ret_value)

{

	const char	*hierarchy[4];

	errcode_t	code;

	if (profile == NULL || realm == NULL || name == NULL ||

	    ret_value == NULL)

		return (EINVAL);

	*ret_value = NULL;

	hierarchy[0] = "realms";

	hierarchy[1] = realm;

	hierarchy[2] = name;

	hierarchy[3] = NULL;

	code = profile_get_values(profile, hierarchy, ret_value);

	if (code == PROF_NO_RELATION)

		code = 0;

	return (code);

}

/*

 * errcode_t k5_profile_add_realm_entry(profile_t profile, char *realm,

 *	char *name, char **value)

 *

 * where profile was the pointer passed back by k5_profile_init

 * where realm is the target realm for the name-value pair

 * where name is the name in the realm subsection to add

 * where value is a string array values to assigned to name.  The array is

 * terminated with a NULL pointer.

 * Note: if the realm subsection does no exist then an error is returned

 * Note: if the name already exists the set is overwritten with the values

 * passed

 */

errcode_t

k5_profile_add_realm_entry(profile_t profile, char *realm, char *name,

	char **values)

{

	const char	*hierarchy[4];

	errcode_t	code;

	char		**tvalue = NULL;

	if (profile == NULL || realm == NULL || name == NULL || values == NULL)

		return (EINVAL);

	hierarchy[0] = "realms";

	hierarchy[1] = realm;

	hierarchy[2] = name;

	hierarchy[3] = NULL;

	/*

	 * Not fatal if this fails, continue on.

	 */

	(void) profile_clear_relation(profile, hierarchy);

	for (tvalue = values; *tvalue; tvalue++) {

		code = profile_add_relation(profile, hierarchy, *tvalue);

		if (code != 0)

			return (code);

	}

	return (0);

}

/*

 * DEPRECATED - use k5_profile_get_libdefaults_entry() instead.

 *

 * errcode_t k5_profile_get_default_realm(profile_t profile, char **realm)

 * where profile was the pointer passed back by k5_profile_init

 * where realm is the default_realm configured for the system