1  /*
  2   * Copyright (c) 2006 Kungliga Tekniska Högskolan
  3   * (Royal Institute of Technology, Stockholm, Sweden). 
  4   * All rights reserved. 
  5   *
  6   * Portions Copyright (c) 2009 - 2010 Apple Inc. All rights reserved.
  7   *
  8   * Redistribution and use in source and binary forms, with or without 
  9   * modification, are permitted provided that the following conditions 
 10   * are met: 
 11   *
 12   * 1. Redistributions of source code must retain the above copyright 
 13   *    notice, this list of conditions and the following disclaimer. 
 14   *
 15   * 2. Redistributions in binary form must reproduce the above copyright 
 16   *    notice, this list of conditions and the following disclaimer in the 
 17   *    documentation and/or other materials provided with the distribution. 
 18   *
 19   * 3. Neither the name of the Institute nor the names of its contributors 
 20   *    may be used to endorse or promote products derived from this software 
 21   *    without specific prior written permission. 
 22   *
 23   * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND 
 24   * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 
 25   * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 
 26   * ARE DISCLAIMED.  IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE 
 27   * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 
 28   * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 
 29   * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 
 30   * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 
 31   * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 
 32   * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 
 33   * SUCH DAMAGE. 
 34   */
 35  /* $Id$ */
 36  
 37  command = {
 38  	name = "supported-mechanisms"
 39  	help = "Print the supported mechanisms"
 40  	option = {
 41  		long = "options"
 42  		type = "flag"
 43  	}
 44  }
 45  command = {
 46  	name = "acquire-credential"
 47  	help = "Acquire initial credential"
 48  	option = {
 49  		long = "user"
 50  		type = "string"
 51  		argument = "domain"
 52  	}
 53  	option = {
 54  		long = "realm"
 55  		type = "string"
 56  		argument = "domain"
 57  	}
 58  	option = {
 59  		long = "kdc-hostname"
 60  		type = "string"
 61  		argument = "hostname"
 62  	}
 63  	option = {
 64  		long = "certificate-persistant"
 65  		type = "string"
 66  		argument = "persistent reference"
 67  	}
 68  	option = {
 69  		long = "mech"
 70  		type = "string"
 71  		argument = "gssapi mechanism"
 72  	}
 73  	option = {
 74  		long = "validate"
 75  		type = "flag"
 76  	}
 77  	option = {
 78  		long = "server-hostname"
 79  		type = "string"
 80  		argument = "server name used for validation"
 81  	}
 82  	option = {
 83  		long = "source-app-identifier"
 84  		type = "string"
 85  		argument = "source app identifier for per app vpn"
 86  	}
 87  	option = {
 88  		long = "source-app-audit-token"
 89  		type = "string"
 90  		argument = "file containing the audit token"
 91  	}
 92  	min_args = "0"
 93  	max_args = "1"
 94  	argument = "[user name]"
 95  }
 96  command = {
 97  	name = "list-credentials"
 98  	help = "List available credentials"
 99  	option = {
100  		long = "verbose"
101  		type = "flag"
102  	}
103  	option = {
104  		long = "mech"
105  		type = "string"
106  		argument = "gssapi mechanism"
107  	}
108  
109  	min_args = "0"
110  	max_args = "0"
111  }
112  command = {
113  	option = {
114  		long = "name-type"
115  		type = "string"
116  		argument = "name-type"
117  	}
118  	option = {
119  		long = "mech"
120  		type = "string"
121  		argument = "gssapi mechanism"
122  	}
123  	option = {
124  		long = "all"
125  		short = "A"
126  		type = "flag"
127  	}
128  	option = {
129  		long = "uuid"
130  		type = "string"
131  		argument = "cache entry"
132  	}
133  	name = "destroy"
134  	argument = "[user name]"
135  	min_args = "0"
136  	max_args = "1"
137  	help = "Destroy one or all credentials of optional mech type."
138  }
139  command = {
140  	option = {
141  		long = "name-type"
142  		type = "string"
143  		argument = "name-type"
144  	}
145  	option = {
146  		long = "mech"
147  		type = "string"
148  		argument = "gssapi mechanism"
149  	}
150  	name = "hold"
151  	argument = "user"
152  	help = "Retain refcount on credential"
153  	min_args = "0"
154  	max_args = "1"
155  }
156  command = {
157  	option = {
158  		long = "name-type"
159  		type = "string"
160  		argument = "name-type"
161  	}
162  	option = {
163  		long = "mech"
164  		type = "string"
165  		argument = "gssapi mechanism"
166  	}
167  	name = "unhold"
168  	argument = "user"
169  	help = "Release refcount on credential"
170  	min_args = "0"
171  	max_args = "1"
172  }
173  command = {
174  	option = {
175  		long = "name-type"
176  		type = "string"
177  		argument = "name-type"
178  	}
179  	option = {
180  		long = "mech"
181  		type = "string"
182  		argument = "gssapi mechanism"
183  	}
184  	name = "get-label"
185  	argument = "name label"
186  	help = "Get label on credential"
187  	min_args = "2"
188  	max_args = "2"
189  }
190  command = {
191  	option = {
192  		long = "name-type"
193  		type = "string"
194  		argument = "name-type"
195  	}
196  	option = {
197  		long = "mech"
198  		type = "string"
199  		argument = "gssapi mechanism"
200  	}
201  	name = "set-label"
202  	argument = "name label data"
203  	help = "Set label on credential"
204  	min_args = "2"
205  	max_args = "3"
206  }
207  command = {
208  	name = "attrs-for-mech"
209  	help = "Print the attributes for mechs"
210  	option = {
211  		long = "all"
212  		type = "flag"
213  	}
214  	option = {
215  		long = "mech"
216  		type = "string"
217  		argument = "mechanism"
218  	}
219  }
220  command = {
221  	option = {
222  		long = "mech"
223  		type = "string"
224  		argument = "mechanism"
225  	}
226  	option = {
227  		long = "minor-status"
228  		type = "flag"
229  	}
230  	name = "display-status"
231  	argument = "status-code"
232  	help = "unparse major and minor status codes"
233  	min_args = "1"
234  }
235  command = {
236  	option = {
237  		long = "mech"
238  		type = "string"
239  		argument = "mechanism"
240  	}
241  	name = "credentials-status"
242  	help = "dump status of credentials available in caches"
243  }
244  command = {
245  	name = "delete-all"
246  	argument = "alt-dsid"
247  	help = "delete all the credentials for the supplied altdsid"
248  	max_args = "1"
249  	min_args = "1"
250  }
251  command = {
252  	name = "help"
253  	name = "?"
254  	argument = "[command]"
255  	min_args = "0"
256  	max_args = "1"
257  	help = "Help! I need somebody."
258  }