2 Unix SMB/CIFS implementation.
4 Copyright (C) Andrew Bartlett <abartlet@samba.org> 2009
6 This program is free software; you can redistribute it and/or modify
7 it under the terms of the GNU General Public License as published by
8 the Free Software Foundation; either version 3 of the License, or
9 (at your option) any later version.
11 This program is distributed in the hope that it will be useful,
12 but WITHOUT ANY WARRANTY; without even the implied warranty of
13 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 GNU General Public License for more details.
16 You should have received a copy of the GNU General Public License
17 along with this program. If not, see <http://www.gnu.org/licenses/>.
21 #include "system/kerberos.h"
22 #include "auth/kerberos/kerberos.h"
24 #include "kdc/samba_kdc.h"
25 #include "libnet/libnet_export_keytab.h"
27 NTSTATUS libnet_export_keytab(struct libnet_context *ctx, TALLOC_CTX *mem_ctx, struct libnet_export_keytab *r)
30 struct smb_krb5_context *smb_krb5_context;
31 const char *from_keytab;
33 /* Register hdb-samba4 hooks for use as a keytab */
35 struct samba_kdc_base_context *base_ctx = talloc_zero(mem_ctx, struct samba_kdc_base_context);
37 return NT_STATUS_NO_MEMORY;
40 base_ctx->ev_ctx = ctx->event_ctx;
41 base_ctx->lp_ctx = ctx->lp_ctx;
43 from_keytab = talloc_asprintf(base_ctx, "HDB:samba4&%p", base_ctx);
45 return NT_STATUS_NO_MEMORY;
48 ret = smb_krb5_init_context(ctx, ctx->lp_ctx, &smb_krb5_context);
50 return NT_STATUS_NO_MEMORY;
53 ret = krb5_plugin_register(smb_krb5_context->krb5_context,
54 PLUGIN_TYPE_DATA, "hdb",
55 &hdb_samba4_interface);
57 return NT_STATUS_NO_MEMORY;
60 ret = krb5_kt_register(smb_krb5_context->krb5_context, &hdb_kt_ops);
62 return NT_STATUS_NO_MEMORY;
65 if (r->in.principal) {
66 ret = kt_copy_one_principal(smb_krb5_context->krb5_context, from_keytab, r->in.keytab_name, r->in.principal, 0, samba_all_enctypes());
68 unlink(r->in.keytab_name);
69 ret = kt_copy(smb_krb5_context->krb5_context, from_keytab, r->in.keytab_name);
73 r->out.error_string = smb_get_krb5_error_message(smb_krb5_context->krb5_context,
75 if (ret == KRB5_KT_NOTFOUND) {
76 return NT_STATUS_NO_SUCH_USER;
78 return NT_STATUS_UNSUCCESSFUL;