/*

 * Copyright 2008-2009 Sun Microsystems, Inc.  All Rights Reserved.

 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.

 *

 * This code is free software; you can redistribute it and/or modify it

 * under the terms of the GNU General Public License version 2 only, as

 * published by the Free Software Foundation.

 *

 * This code is distributed in the hope that it will be useful, but WITHOUT

 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or

 * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License

 * version 2 for more details (a copy is included in the LICENSE file that

 * accompanied this code).

 *

 * You should have received a copy of the GNU General Public License version

 * 2 along with this work; if not, write to the Free Software Foundation,

 * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.

 *

 * Please contact Sun Microsystems, Inc., 4150 Network Circle, Santa Clara,

 * CA 95054 USA or visit www.sun.com if you need additional information or

 * have any questions.

 */

import java.lang.reflect.Constructor;

import java.lang.reflect.Field;

import java.lang.reflect.InvocationTargetException;

import java.net.*;

import java.io.*;

import java.lang.reflect.Method;

import java.security.SecureRandom;

import java.util.*;

import java.util.concurrent.*;

import sun.net.spi.nameservice.NameService;

import sun.net.spi.nameservice.NameServiceDescriptor;

import sun.security.krb5.*;

import sun.security.krb5.internal.*;

import sun.security.krb5.internal.ccache.CredentialsCache;

import sun.security.krb5.internal.crypto.KeyUsage;

import sun.security.krb5.internal.ktab.KeyTab;

import sun.security.util.DerInputStream;

import sun.security.util.DerOutputStream;

import sun.security.util.DerValue;

/**

 * A KDC server.

 * <p>

 * Features:

 * <ol>

 * <li> Supports TCP and UDP

 * <li> Supports AS-REQ and TGS-REQ

 * <li> Principal db and other settings hard coded in application

 * <li> Options, say, request preauth or not

 * </ol>

 * Side effects:

 * <ol>

 * <li> The Sun-internal class <code>sun.security.krb5.Config</code> is a

 * singleton and initialized according to Kerberos settings (krb5.conf and

 * java.security.krb5.* system properties). This means once it's initialized

 * it will not automatically notice any changes to these settings (or file

 * changes of krb5.conf). The KDC class normally does not touch these

 * settings (except for the <code>writeKtab()</code> method). However, to make

 * sure nothing ever goes wrong, if you want to make any changes to these

 * settings after calling a KDC method, call <code>Config.refresh()</code> to

 * make sure your changes are reflected in the <code>Config</code> object.

 * </ol>

 * System properties recognized:

 * <ul>

 * <li>test.kdc.save.ccache

 * </ul>

 * Support policies:

 * <ul>

 * <li>ok-as-delegate

 * </ul>

 * Issues and TODOs:

 * <ol>

 * <li> Generates krb5.conf to be used on another machine, currently the kdc is

 * always localhost

 * <li> More options to KDC, say, error output, say, response nonce !=

 * request nonce

 * </ol>

 * Note: This program uses internal krb5 classes (including reflection to

 * access private fields and methods).

 * <p>

 * Usages:

 * <p>

 * 1. Init and start the KDC:

 * <pre>

 * KDC kdc = KDC.create("REALM.NAME", port, isDaemon);

 * KDC kdc = KDC.create("REALM.NAME");

 * </pre>

 * Here, <code>port</code> is the UDP and TCP port number the KDC server

 * listens on. If zero, a random port is chosen, which you can use getPort()

 * later to retrieve the value.

 * <p>

 * If <code>isDaemon</code> is true, the KDC worker threads will be daemons.

 * <p>

 * The shortcut <code>KDC.create("REALM.NAME")</code> has port=0 and

 * isDaemon=false, and is commonly used in an embedded KDC.

 * <p>

 * 2. Adding users:

 * <pre>

 * kdc.addPrincipal(String principal_name, char[] password);

 * kdc.addPrincipalRandKey(String principal_name);

 * </pre>

 * A service principal's name should look like "host/f.q.d.n". The second form

 * generates a random key. To expose this key, call <code>writeKtab()</code> to

 * save the keys into a keytab file.

 * <p>

 * Note that you need to add the principal name krbtgt/REALM.NAME yourself.

 * <p>

 * Note that you can safely add a principal at any time after the KDC is

 * started and before a user requests info on this principal.

 * <p>

 * 3. Other public methods:

 * <ul>

 * <li> <code>getPort</code>: Returns the port number the KDC uses

 * <li> <code>getRealm</code>: Returns the realm name

 * <li> <code>writeKtab</code>: Writes all principals' keys into a keytab file

 * <li> <code>saveConfig</code>: Saves a krb5.conf file to access this KDC

 * <li> <code>setOption</code>: Sets various options

 * </ul>

 * Read the javadoc for details. Lazy developer can use <code>OneKDC</code>

 * directly.

 */

public class KDC {

    // Under the hood.

    // The random generator to generate random keys (including session keys)

    private static SecureRandom secureRandom = new SecureRandom();

    // Principal db. principal -> pass

    private Map<String,char[]> passwords = new HashMap<String,char[]>();

    // Realm name

    private String realm;

    // KDC

    private String kdc;

    // Service port number

    private int port;

    // The request/response job queue

    private BlockingQueue<Job> q = new ArrayBlockingQueue<Job>(100);

    // Options

    private Map<Option,Object> options = new HashMap<Option,Object>();

    private Thread thread1, thread2, thread3;

    DatagramSocket u1 = null;

    ServerSocket t1 = null;

    /**

     * Option names, to be expanded forever.

     */

    public static enum Option {

        /**

         * Whether pre-authentication is required. Default Boolean.TRUE

         */

        PREAUTH_REQUIRED,

    };

    static {

        System.setProperty("sun.net.spi.nameservice.provider.1", "ns,mock");

    }

    /**

     * A standalone KDC server.

     */

    public static void main(String[] args) throws Exception {

        KDC kdc = create("RABBIT.HOLE", "kdc.rabbit.hole", 0, false);

        kdc.addPrincipal("dummy", "bogus".toCharArray());

        kdc.addPrincipal("foo", "bar".toCharArray());

        kdc.addPrincipalRandKey("krbtgt/RABBIT.HOLE");

        kdc.addPrincipalRandKey("server/host.rabbit.hole");

        kdc.addPrincipalRandKey("backend/host.rabbit.hole");

        KDC.saveConfig("krb5.conf", kdc, "forwardable = true");

    }

    /**

     * Creates and starts a KDC running as a daemon on a random port.

     * @param realm the realm name

     * @return the running KDC instance

     * @throws java.io.IOException for any socket creation error

     */

    public static KDC create(String realm) throws IOException {

        return create(realm, "kdc." + realm.toLowerCase(), 0, true);

    }

    /**

     * Creates and starts a KDC server.

     * @param realm the realm name

     * @param port the TCP and UDP port to listen to. A random port will to

     *        chosen if zero.

     * @param asDaemon if true, KDC threads will be daemons. Otherwise, not.

     * @return the running KDC instance

     * @throws java.io.IOException for any socket creation error

     */

    public static KDC create(String realm, String kdc, int port, boolean asDaemon) throws IOException {

        return new KDC(realm, kdc, port, asDaemon);

    }

    /**

     * Sets an option

     * @param key the option name

     * @param obj the value

     */

    public void setOption(Option key, Object value) {

        options.put(key, value);

    }

    /**

     * Write all principals' keys from multiple KDCsinto one keytab file.

     * Note that the keys for the krbtgt principals will not be written.

     * <p>

     * Attention: This method references krb5.conf settings. If you need to

     * setup krb5.conf later, please call <code>Config.refresh()</code> after

     * the new setting. For example:

     * <pre>

     * KDC.writeKtab("/etc/kdc/ktab", kdc);  // Config is initialized,

     * System.setProperty("java.security.krb5.conf", "/home/mykrb5.conf");

     * Config.refresh();

     * </pre>

     *

     * Inside this method there are 2 places krb5.conf is used:

     * <ol>

     * <li> (Fatal) Generating keys: EncryptionKey.acquireSecretKeys

     * <li> (Has workaround) Creating PrincipalName

     * </ol>

     * @param tab The keytab filename to write to.

     * @throws java.io.IOException for any file output error

     * @throws sun.security.krb5.KrbException for any realm and/or principal

     *         name error.

     */

    public static void writeMultiKtab(String tab, KDC... kdcs)

            throws IOException, KrbException {

        KeyTab ktab = KeyTab.create(tab);

        for (KDC kdc: kdcs) {

            for (String name : kdc.passwords.keySet()) {

                ktab.addEntry(new PrincipalName(name,

                        name.indexOf('/') < 0 ?

                            PrincipalName.KRB_NT_UNKNOWN :

                            PrincipalName.KRB_NT_SRV_HST),

                            kdc.passwords.get(name));

            }

        }

        ktab.save();

    }

    /**

     * Write a ktab for this KDC.

     */

    public void writeKtab(String tab) throws IOException, KrbException {

        KDC.writeMultiKtab(tab, this);

    }

    /**

     * Adds a new principal to this realm with a given password.

     * @param user the principal's name. For a service principal, use the

     *        form of host/f.q.d.n

     * @param pass the password for the principal

     */

    public void addPrincipal(String user, char[] pass) {

        if (user.indexOf('@') < 0) {

            user = user + "@" + realm;

        }

        passwords.put(user, pass);

    }

    /**

     * Adds a new principal to this realm with a random password

     * @param user the principal's name. For a service principal, use the

     *        form of host/f.q.d.n

     */

    public void addPrincipalRandKey(String user) {

        addPrincipal(user, randomPassword());

    }

    /**

     * Returns the name of this realm

     * @return the name of this realm

     */

    public String getRealm() {

        return realm;

    }

    /**

     * Returns the name of kdc

     * @return the name of kdc

     */

    public String getKDC() {

        return kdc;

    }

    /**

     * Writes a krb5.conf for one or more KDC that includes KDC locations for

     * each realm and the default realm name. You can also add extra strings

     * into the file. The method should be called like:

     * <pre>

     *   KDC.saveConfig("krb5.conf", kdc1, kdc2, ..., line1, line2, ...);

     * </pre>

     * Here you can provide one or more kdc# and zero or more line# arguments.

     * The line# will be put after [libdefaults] and before [realms]. Therefore

     * you can append new lines into [libdefaults] and/or create your new

     * stanzas as well. Note that a newline character will be appended to

     * each line# argument.

     * <p>

     * For example:

     * <pre>

     * KDC.saveConfig("krb5.conf", this);

     * </pre>

     * generates:

     * <pre>

     * [libdefaults]

     * default_realm = REALM.NAME

     *

     * [realms]

     *   REALM.NAME = {

     *     kdc = host:port_number

     *   }

     * </pre>

     *

     * Another example:

     * <pre>

     * KDC.saveConfig("krb5.conf", kdc1, kdc2, "forwardable = true", "",

     *         "[domain_realm]",

     *         ".kdc1.com = KDC1.NAME");

     * </pre>

     * generates:

     * <pre>

     * [libdefaults]

     * default_realm = KDC1.NAME

     * forwardable = true

     *

     * [domain_realm]

     * .kdc1.com = KDC1.NAME

     *

     * [realms]

     *   KDC1.NAME = {

     *     kdc = host:port1

     *   }

     *   KDC2.NAME = {

     *     kdc = host:port2

     *   }

     * </pre>

     * @param file the name of the file to write into

     * @param kdc the first (and default) KDC

     * @param more more KDCs or extra lines (in their appearing order) to

     * insert into the krb5.conf file. This method reads each argument's type

     * to determine what it's for. This argument can be empty.

     * @throws java.io.IOException for any file output error

     */

    public static void saveConfig(String file, KDC kdc, Object... more)

            throws IOException {

        File f = new File(file);

        StringBuffer sb = new StringBuffer();

        sb.append("[libdefaults]\ndefault_realm = ");

        sb.append(kdc.realm);

        sb.append("\n");

        for (Object o: more) {

            if (o instanceof String) {

                sb.append(o);

                sb.append("\n");

            }

        }

        sb.append("\n[realms]\n");

        sb.append(realmLineForKDC(kdc));

        for (Object o: more) {

            if (o instanceof KDC) {

                sb.append(realmLineForKDC((KDC)o));

            }

        }

        FileOutputStream fos = new FileOutputStream(f);

        fos.write(sb.toString().getBytes());

        fos.close();

    }

    /**

     * Returns the service port of the KDC server.

     * @return the KDC service port

     */

    public int getPort() {

        return port;

    }

    // Private helper methods

    /**

     * Private constructor, cannot be called outside.

     * @param realm

     */

    private KDC(String realm, String kdc) {

        this.realm = realm;

        this.kdc = kdc;

    }

    /**

     * A constructor that starts the KDC service also.

     */

    protected KDC(String realm, String kdc, int port, boolean asDaemon)

            throws IOException {

        this(realm, kdc);

        startServer(port, asDaemon);

    }

    /**

     * Generates a 32-char random password

     * @return the password

     */

    private static char[] randomPassword() {

        char[] pass = new char[32];

        for (int i=0; i<32; i++)

            pass[i] = (char)secureRandom.nextInt();

        return pass;

    }

    /**

     * Generates a random key for the given encryption type.

     * @param eType the encryption type

     * @return the generated key

     * @throws sun.security.krb5.KrbException for unknown/unsupported etype

     */

    private static EncryptionKey generateRandomKey(int eType)

            throws KrbException  {

        // Is 32 enough for AES256? I should have generated the keys directly

        // but different cryptos have different rules on what keys are valid.

        char[] pass = randomPassword();

        String algo;

        switch (eType) {

            case EncryptedData.ETYPE_DES_CBC_MD5: algo = "DES"; break;

            case EncryptedData.ETYPE_DES3_CBC_HMAC_SHA1_KD: algo = "DESede"; break;

            case EncryptedData.ETYPE_AES128_CTS_HMAC_SHA1_96: algo = "AES128"; break;

            case EncryptedData.ETYPE_ARCFOUR_HMAC: algo = "ArcFourHMAC"; break;

            case EncryptedData.ETYPE_AES256_CTS_HMAC_SHA1_96: algo = "AES256"; break;

            default: algo = "DES"; break;

        }

        return new EncryptionKey(pass, "NOTHING", algo);    // Silly

    }

    /**

     * Returns the password for a given principal

     * @param p principal

     * @return the password

     * @throws sun.security.krb5.KrbException when the principal is not inside

     *         the database.

     */

    private char[] getPassword(PrincipalName p, boolean server)

            throws KrbException {

        String pn = p.toString();

        if (p.getRealmString() == null) {

            pn = pn + "@" + getRealm();

        }

        char[] pass = passwords.get(pn);

        if (pass == null) {

            throw new KrbException(server?

                Krb5.KDC_ERR_S_PRINCIPAL_UNKNOWN:

                Krb5.KDC_ERR_C_PRINCIPAL_UNKNOWN);

        }

        return pass;

    }

    /**

     * Returns the salt string for the principal.

     * @param p principal

     * @return the salt

     */

    private String getSalt(PrincipalName p) {

        String[] ns = p.getNameStrings();

        String s = p.getRealmString();

        if (s == null) s = getRealm();

        for (String n: p.getNameStrings()) {

            s += n;

        }

        return s;

    }

    /**

     * Returns the key for a given principal of the given encryption type

     * @param p the principal

     * @param etype the encryption type

     * @param server looking for a server principal?

     * @return the key

     * @throws sun.security.krb5.KrbException for unknown/unsupported etype

     */

    private EncryptionKey keyForUser(PrincipalName p, int etype, boolean server)

            throws KrbException {

        try {

            // Do not call EncryptionKey.acquireSecretKeys(), otherwise

            // the krb5.conf config file would be loaded.

            Method stringToKey = EncryptionKey.class.getDeclaredMethod("stringToKey", char[].class, String.class, byte[].class, Integer.TYPE);

            stringToKey.setAccessible(true);

            Integer kvno = null;

            // For service whose password ending with a number, use it as kvno.

            // Kvno must be postive.

            if (p.toString().indexOf('/') > 0) {

                char[] pass = getPassword(p, server);

                if (Character.isDigit(pass[pass.length-1])) {

                    kvno = pass[pass.length-1] - '0';

                }

            }

            return new EncryptionKey((byte[]) stringToKey.invoke(

                    null, getPassword(p, server), getSalt(p), null, etype),

                    etype, kvno);

        } catch (InvocationTargetException ex) {

            KrbException ke = (KrbException)ex.getCause();

            throw ke;

        } catch (KrbException ke) {

            throw ke;

        } catch (Exception e) {

            throw new RuntimeException(e);  // should not happen

        }

    }

    private Map<String,String> policies = new HashMap<String,String>();

    public void setPolicy(String rule, String value) {

        if (value == null) {

            policies.remove(rule);

        } else {

            policies.put(rule, value);

        }