/*
 * clients/kdestroy/kdestroy.c
 *
 * Copyright 1990 by the Massachusetts Institute of Technology.
 * All Rights Reserved.
 *
 * Export of this software from the United States of America may
 *   require a specific license from the United States Government.
 *   It is the responsibility of any person or organization contemplating
 *   export to obtain such a license before exporting.
 * 
 * WITHIN THAT CONSTRAINT, permission to use, copy, modify, and
 * distribute this software and its documentation for any purpose and
 * without fee is hereby granted, provided that the above copyright
 * notice appear in all copies and that both that copyright notice and
 * this permission notice appear in supporting documentation, and that
 * the name of M.I.T. not be used in advertising or publicity pertaining
 * to distribution of the software without specific, written prior
 * permission.  Furthermore if you modify this software you must label
 * your software as modified software and not distribute it in such a
 * fashion that it might be confused with the original M.I.T. software.
 * M.I.T. makes no representations about the suitability of
 * this software for any purpose.  It is provided "as is" without express
 * or implied warranty.
 * 
 *
 * Destroy the contents of your credential cache.
 */

#if TARGET_HEADER_FRAMEWORK
    #include <Kerberos/Kerberos.h>
#else
    #include <krb5.h>
    #include <com_err.h>
    #ifdef KRB5_KRB4_COMPAT
        #include <kerberosIV/krb.h>
    #endif
    #if USE_CCAPI
        #include <CredentialsCache.h>
    #endif
#endif

#include <string.h>
#include <stdio.h>
#ifdef HAVE_UNISTD_H
#include <unistd.h>
#endif


#ifdef __STDC__
#define BELL_CHAR '\a'
#else
#define BELL_CHAR '\007'
#endif

extern int optind;
extern char *optarg;

#ifndef _WIN32
#define GET_PROGNAME(x) (strrchr((x), '/') ? strrchr((x), '/')+1 : (x))
#else
#define GET_PROGNAME(x) max(max(strrchr((x), '/'), strrchr((x), '\\')) + 1,(x))
#endif

char *progname;

int got_k5 = 0;
int got_k4 = 0;

int default_k5 = 1;
#ifdef KRB5_KRB4_COMPAT
int default_k4 = 1;
#else
int default_k4 = 0;
#endif


static void usage()
{
#define KRB_AVAIL_STRING(x) ((x)?"available":"not available")

    fprintf(stderr, "Usage: %s [-5] [-4] [-q] [-c cache_name]\n", progname);
    fprintf(stderr, "\t-5 Kerberos 5 (%s)\n", KRB_AVAIL_STRING(got_k5));
    fprintf(stderr, "\t-4 Kerberos 4 (%s)\n", KRB_AVAIL_STRING(got_k4));
    fprintf(stderr, "\t   (Default is %s%s%s%s)\n",
	    default_k5?"Kerberos 5":"",
	    (default_k5 && default_k4)?" and ":"",
	    default_k4?"Kerberos 4":"",
	    (!default_k5 && !default_k4)?"neither":"");
    fprintf(stderr, "\t-q quiet mode\n");
    fprintf(stderr, "\t-c specify name of credentials cache\n");
    exit(2);
}

int
main(argc, argv)
    int argc;
    char **argv;
{
    char *cache_name = NULL;
#ifndef USE_CCAPI
    krb5_context kcontext;
    krb5_error_code retval;
    krb5_ccache cache = NULL;
    int code = 0;
#ifdef KRB5_KRB4_COMPAT
    int v4code = 0;
    int v4 = 1;
#endif
#endif /* !USE_CCAPI */
    int c;
    int errflg = 0;
    int quiet = 0;

    int use_k5 = 0;
    int use_k4 = 0;

    progname = GET_PROGNAME(argv[0]);

    got_k5 = 1;
#ifdef KRB5_KRB4_COMPAT
    got_k4 = 1;
#endif

    while ((c = getopt(argc, argv, "54qc:")) != -1) {
	switch (c) {
	case 'q':
	    quiet = 1;
	    break;	
	case 'c':
	    if (cache_name) {
		fprintf(stderr, "Only one -c option allowed\n");
		errflg++;
	    } else {
		cache_name = optarg;
	    }
	    break;
	case '4':
	    if (!got_k4)
	    {
#ifdef KRB5_KRB4_COMPAT
		fprintf(stderr, "Kerberos 4 support could not be loaded\n");
#else
		fprintf(stderr, "This was not built with Kerberos 4 support\n");
#endif
		exit(3);
	    }
	    use_k4 = 1;
	    break;
	case '5':
	    if (!got_k5)
	    {
		fprintf(stderr, "Kerberos 5 support could not be loaded\n");
		exit(3);
	    }
	    use_k5 = 1;
	    break;
	case '?':
	default:
	    errflg++;
	    break;
	}
    }

    if (optind != argc)
	errflg++;
    
    if (errflg) {
	usage();
    }

    if (!use_k5 && !use_k4)
    {
	use_k5 = default_k5;
	use_k4 = default_k4;
    }

    if (!use_k5)
	got_k5 = 0;
    if (!use_k4)
	got_k4 = 0;

#ifdef USE_CCAPI
    {
        /* CCAPI version 4 has joint caches for v4 and v5 */
        cc_context_t				context = NULL;
        cc_ccache_t					cache = NULL;
        cc_int32					cc_err;
    
        cc_err = cc_initialize (&context, ccapi_version_4, nil, nil);
        if (cc_err != ccNoError) {
            fprintf(stderr, "%s: Unable to initialize credentials cache (error = %ld)\n", progname, cc_err);
            exit(1);
        }


        /* Open the default cache */
        if (cache_name) {
            char *name = strchr (cache_name, '.');
            if (strlen (name) > 0) {
                cc_err = cc_context_open_ccache (context, name, &cache);
                if (cc_err == ccErrCCacheNotFound) {
                    fprintf(stderr, "%s: No credentials cache found while destroying '%s'\n", 
                            progname, cache_name);
                    exit(1);                   
                }
                if (cc_err != ccNoError) {
                    fprintf(stderr, "%s: Unable to open cache '%s' (error = %ld)\n", 
                            progname, cache_name, cc_err);
                    exit(1);
                }
            }
        }
        
        /* if we didn't just open a cache, open the default */
        if (cache == NULL) {
            cc_err = cc_context_open_default_ccache (context, &cache);
            if (cc_err == ccErrCCacheNotFound) {
                fprintf(stderr, "%s: No credentials cache found while destroying default cache\n", 
                        progname);
                exit(1);                   
            }
            if (cc_err != ccNoError) {
                fprintf(stderr, "%s: Unable to open default cache (error = %ld)\n", 
                        progname, cc_err);
                exit(1);
            }
        }
        
        cc_err = cc_ccache_destroy (cache);
        if (cc_err != ccNoError) {
            fprintf(stderr, "%s: Unable to destroy cache (error = %ld)\n", 
                    progname, cc_err);
            exit(1);
        }
    }
#else
    if (got_k5) {
	retval = krb5_init_context(&kcontext);
	if (retval) {
	    com_err(progname, retval, "while initializing krb5");
	    exit(1);
	}

	if (cache_name) {
#ifdef KRB5_KRB4_COMPAT
	    v4 = 0;	/* Don't do v4 if doing v5 and cache name given. */
#endif
	    code = krb5_cc_resolve (kcontext, cache_name, &cache);
	    if (code != 0) {
		com_err (progname, code, "while resolving %s", cache_name);
		exit(1);
	    }
	} else {
	    code = krb5_cc_default(kcontext, &cache);
	    if (code) {
		com_err(progname, code, "while getting default ccache");
		exit(1);
	    }
	}

	code = krb5_cc_destroy (kcontext, cache);
	if (code != 0) {
	    com_err (progname, code, "while destroying cache");
	    if (code != KRB5_FCC_NOFILE) {
		if (quiet)
		    fprintf(stderr, "Ticket cache NOT destroyed!\n");
		else {
		    fprintf(stderr, "Ticket cache %cNOT%c destroyed!\n", 
			    BELL_CHAR, BELL_CHAR);
		}
		errflg = 1;
	    }
	}
    }
#ifdef KRB5_KRB4_COMPAT
    if (got_k4 && v4) {
	v4code = dest_tkt();
	if (v4code == KSUCCESS && code != 0)
	    fprintf(stderr, "Kerberos 4 ticket cache destroyed.\n");
	if (v4code != KSUCCESS && v4code != RET_TKFIL) {
	    if (quiet)
		fprintf(stderr, "Kerberos 4 ticket cache NOT destroyed!\n");
	    else
		fprintf(stderr, "Kerberos 4 ticket cache %cNOT%c destroyed!\n",
			BELL_CHAR, BELL_CHAR);
	    errflg = 1;
	}
    }
#endif
#endif /* USE_CCAPI */
    return errflg;
}
