#include "kcm_locl.h"
krb5_error_code
kcm_ccache_refresh(krb5_context context,
kcm_ccache ccache,
time_t *expire)
{
krb5_error_code ret;
krb5_creds in, *out;
krb5_kdc_flags flags;
krb5_const_realm realm;
krb5_ccache_data ccdata;
memset(&in, 0, sizeof(in));
*expire = 0;
KCM_ASSERT_VALID(ccache);
kcm_log(0, "Refresh credentials");
if (ccache->client == NULL) {
kcm_log(0, "Renew credentials requested but no client principal");
return KRB5_CC_NOTFOUND;
}
kcm_internal_ccache(context, ccache, &ccdata);
in.client = ccache->client;
if (ccache->server != NULL) {
ret = krb5_copy_principal(context, ccache->server, &in.server);
if (ret) {
kcm_log(0, "Failed to copy service principal: %s", ccache->name);
goto out;
}
} else {
realm = krb5_principal_get_realm(context, in.client);
ret = krb5_make_principal(context, &in.server, realm,
KRB5_TGS_NAME, realm, NULL);
if (ret) {
kcm_log(0, "Failed to make TGS principal for realm %s", realm);
goto out;
}
}
if (ccache->tkt_life)
in.times.endtime = time(NULL) + ccache->tkt_life;
if (ccache->renew_life)
in.times.renew_till = time(NULL) + ccache->renew_life;
flags.i = 0;
flags.b.renewable = TRUE;
flags.b.renew = TRUE;
ret = krb5_get_kdc_cred(context,
&ccdata,
flags,
NULL,
NULL,
&in,
&out);
if (ret) {
kcm_log(0, "Failed to renew credentials for cache %s",
ccache->name);
goto out;
}
*expire = out->times.endtime;
kcm_ccache_remove_creds_internal(context, ccache);
ret = kcm_ccache_store_cred_internal(context, ccache, out, NULL, 0);
if (ret) {
kcm_log(0, "Failed to store credentials for cache %s",
ccache->name);
krb5_free_creds(context, out);
goto out;
}
free(out);
out:
krb5_free_principal(context, in.server);
return ret;
}