/* -*- mode: c; c-basic-offset: 4; indent-tabs-mode: nil -*- */

#include <stdio.h>

#include <krb5.h>

#include <kadm5/admin.h>

#include <kdb.h>

#include <string.h>

char *whoami;

static void usage()

{

    fprintf(stderr,

            "Usage: %s {shared|exclusive|permanent|release|"

            "get name|wait} ...\n", whoami);

    exit(1);

}

int main(int argc, char **argv)

{

    krb5_error_code ret;

    osa_policy_ent_t entry;

    krb5_context context;

    kadm5_config_params params;

    krb5_error_code kret;

    whoami = argv[0];

    kret = kadm5_init_krb5_context(&context);

    if (kret) {

        com_err(whoami, kret, "while initializing krb5");

        exit(1);

    }

    params.mask = 0;

    ret = kadm5_get_config_params(context, 1, &params, &params);

    if (ret) {

        com_err(whoami, ret, "while retrieving configuration parameters");

        exit(1);

    }

    if (! (params.mask & KADM5_CONFIG_ADBNAME)) {

        com_err(whoami, KADM5_BAD_SERVER_PARAMS,

                "while retrieving configuration parameters");

        exit(1);

    }

    ret = krb5_db_open( context, NULL, KRB5_KDB_OPEN_RW);

    if (ret) {

        com_err(whoami, ret, "while opening database");

        exit(1);

    }

    argc--; argv++;

    while (argc) {

        if (strcmp(*argv, "shared") == 0) {

            ret = krb5_db_lock(context, KRB5_DB_LOCKMODE_SHARED);

            if (ret)

                com_err(whoami, ret, "while getting shared lock");

            else

                printf("shared\n");

        } else if (strcmp(*argv, "exclusive") == 0) {

            ret = krb5_db_lock(context, KRB5_DB_LOCKMODE_EXCLUSIVE );

            if (ret)

                com_err(whoami, ret, "while getting exclusive lock");

            else

                printf("exclusive\n");

        } else if (strcmp(*argv, "permanent") == 0) {

            ret = krb5_db_lock(context, KRB5_DB_LOCKMODE_EXCLUSIVE );

            if (ret)

                com_err(whoami, ret, "while getting permanent lock");

            else

                printf("permanent\n");

        } else if (strcmp(*argv, "release") == 0) {

            ret = krb5_db_unlock(context);

            if (ret)

                com_err(whoami, ret, "while releasing lock");

            else

                printf("released\n");

        } else if (strcmp(*argv, "get") == 0) {

            argc--; argv++;

            if (!argc) usage();

            if ((ret = krb5_db_get_policy(context, *argv, &entry))) {

                com_err(whoami, ret, "while getting policy");

            } else {

                printf("retrieved\n");

                krb5_db_free_policy(context, entry);

            }

        } else if (strcmp(*argv, "wait") == 0) {

            getchar();

        } else {

            fprintf(stderr, "%s: Invalid argument \"%s\"\n",

                    whoami, *argv);

            usage();

        }

        argc--; argv++;

    }

    ret = krb5_db_fini(context);

    if (ret) {

        com_err(whoami, ret, "while closing database");

        exit(1);

    }

    return 0;

}