/* -*- mode: c; c-basic-offset: 4; indent-tabs-mode: nil -*- */

/* tests/localauth.c - test harness for kuserok and aname_to_lname */

/*

 * Copyright (C) 2013 by the Massachusetts Institute of Technology.

 * All rights reserved.

 *

 * Redistribution and use in source and binary forms, with or without

 * modification, are permitted provided that the following conditions

 * are met:

 *

 * * Redistributions of source code must retain the above copyright

 *   notice, this list of conditions and the following disclaimer.

 *

 * * Redistributions in binary form must reproduce the above copyright

 *   notice, this list of conditions and the following disclaimer in

 *   the documentation and/or other materials provided with the

 *   distribution.

 *

 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS

 * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT

 * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS

 * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE

 * COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,

 * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES

 * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR

 * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)

 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,

 * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)

 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED

 * OF THE POSSIBILITY OF SUCH DAMAGE.

 */

#include <krb5.h>

#include <stdio.h>

static krb5_context ctx;

static void

check(krb5_error_code code)

{

    const char *errmsg;

    if (code) {

        errmsg = krb5_get_error_message(ctx, code);

        fprintf(stderr, "%s\n", errmsg);

        krb5_free_error_message(ctx, errmsg);

        exit(1);

    }

}

int

main(int argc, char **argv)

{

    krb5_principal princ;

    char buf[1024];

    if (argc < 2 || argc > 3) {

        fprintf(stderr, "Usage: localauth principal [localuser]\n");

        return 1;

    }

    check(krb5_init_context(&ctx));

    check(krb5_parse_name(ctx, argv[1], &princ));

    if (argc == 3) {

        printf("%s\n", krb5_kuserok(ctx, princ, argv[2]) ? "yes" : "no");

    } else {

        check(krb5_aname_to_localname(ctx, princ, sizeof(buf), buf));

        printf("%s\n", buf);

    }

    krb5_free_principal(ctx, princ);

    krb5_free_context(ctx);

    return 0;

}