libtinytac: adding initial support for rc files

5 files changed, 554 insertions, 0 deletions

diff --git a/Makefile.am b/Makefile.am
index 755b8de..4162d03 100644
--- a/Makefile.am
+++ b/Makefile.am
@@ -166,6 +166,8 @@ lib_libtinytac_a_SOURCES		= $(lib_libbindle_a_SOURCES) \
                                           include/tinytac_plus.h \
                                           include/tinytac_compat.h \
                                           lib/libtinytac/libtinytac.h \
+                                          lib/libtinytac/lconf.c \
+                                          lib/libtinytac/lconf.h \
                                           lib/libtinytac/ldebug.c \
                                           lib/libtinytac/ldebug.h \
                                           lib/libtinytac/lerror.c \
diff --git a/lib/libtinytac/lconf.c b/lib/libtinytac/lconf.c
new file mode 100644
index 0000000..e3aa339
--- /dev/null
+++ b/lib/libtinytac/lconf.c
@@ -0,0 +1,475 @@
+/*
+ *  Tiny TACACS+ Client Library
+ *  Copyright (C) 2022 David M. Syzdek <david@syzdek.net>.
+ *  All rights reserved.
+ *
+ *  Redistribution and use in source and binary forms, with or without
+ *  modification, are permitted provided that the following conditions are
+ *  met:
+ *
+ *     * Redistributions of source code must retain the above copyright
+ *       notice, this list of conditions and the following disclaimer.
+ *     * Redistributions in binary form must reproduce the above copyright
+ *       notice, this list of conditions and the following disclaimer in the
+ *       documentation and/or other materials provided with the distribution.
+ *     * Neither the name of David M. Syzdek nor the
+ *       names of its contributors may be used to endorse or promote products
+ *       derived from this software without specific prior written permission.
+ *
+ *  THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS
+ *  IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
+ *  THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+ *  PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL DAVID M. SYZDEK BE LIABLE FOR
+ *  ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+ *  DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ *  SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+ *  CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
+ *  LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
+ *  OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
+ *  SUCH DAMAGE.
+ */
+#define _LIB_LIBTINYTAC_LCONF_C 1
+#include "lconf.h"
+
+
+///////////////
+//           //
+//  Headers  //
+//           //
+///////////////
+#pragma mark - Headers
+
+#include <stdlib.h>
+#include <string.h>
+#include <strings.h>
+#include <unistd.h>
+#include <fcntl.h>
+#include <syslog.h>
+#include <pwd.h>
+#include <stdatomic.h>
+#include <assert.h>
+
+#include "lmemory.h"
+
+
+///////////////////
+//               //
+//  Definitions  //
+//               //
+///////////////////
+#pragma mark - Definitions
+
+#ifndef SYSCONFDIR
+#   define SYSCONFDIR "/etc"
+#endif
+
+
+/////////////////
+//             //
+//  Variables  //
+//             //
+/////////////////
+#pragma mark - Variables
+
+#pragma mark tinytac_conf_init
+static atomic_int tinytac_conf_init;
+
+
+#pragma mark tinytac_conf_options[]
+static bindle_map_t tinytac_conf_options[] =
+{
+   { .map_name = "AUTHEN_ASCII",       .map_value = TTAC_OPT_AUTHEN_ASCII },
+   { .map_name = "AUTHEN_CHAP",        .map_value = TTAC_OPT_AUTHEN_CHAP },
+   { .map_name = "AUTHEN_MSCHAP",      .map_value = TTAC_OPT_AUTHEN_MSCHAP },
+   { .map_name = "AUTHEN_MSCHAPV2",    .map_value = TTAC_OPT_AUTHEN_MSCHAPV2 },
+   { .map_name = "AUTHEN_PAP",         .map_value = TTAC_OPT_AUTHEN_PAP },
+   { .map_name = "DEBUG_LEVEL",        .map_value = TTAC_OPT_DEBUG_LEVEL },
+   { .map_name = "DEBUG_SYSLOG",       .map_value = TTAC_OPT_DEBUG_SYSLOG },
+   { .map_name = "HOST",               .map_value = TTAC_OPT_HOSTS },
+   { .map_name = "IPV4",               .map_value = TTAC_OPT_IPV4 },
+   { .map_name = "IPV6",               .map_value = TTAC_OPT_IPV6 },
+   { .map_name = "KEY",                .map_value = TTAC_OPT_KEY },
+   { .map_name = "NETWORK_TIMEOUT",    .map_value = TTAC_OPT_NETWORK_TIMEOUT },
+   { .map_name = "RANDOM",             .map_value = TTAC_OPT_RANDOM },
+   { .map_name = "STOPINIT",           .map_value = TTAC_OPT_STOPINIT },
+   { .map_name = "TIMEOUT",            .map_value = TTAC_OPT_TIMEOUT },
+   { .map_name = NULL,                 .map_value = 0 }
+};
+
+
+//////////////////
+//              //
+//  Prototypes  //
+//              //
+//////////////////
+#pragma mark - Prototypes
+
+static int
+tinytac_conf_environment(
+         void );
+
+
+static int
+tinytac_conf_file(
+         const char *                  path );
+
+
+static int
+tinytac_conf_opt(
+         const bindle_map_t *          opt,
+         const char *                  value );
+
+
+static int
+tinytac_conf_opt_flag(
+         const bindle_map_t *          opt,
+         const char *                  value );
+
+
+static int
+tinytac_conf_opt_int(
+         const bindle_map_t *          opt,
+         const char *                  value );
+
+
+static int
+tinytac_conf_opt_timeval(
+         const bindle_map_t *          opt,
+         const char *                  value );
+
+
+/////////////////
+//             //
+//  Functions  //
+//             //
+/////////////////
+#pragma mark - Functions
+
+
+int
+tinytac_conf(
+         unsigned                      opts )
+{
+   const char *      tintacrc;
+   const char *      tinytacconf;
+   char              buff[4096];
+   char              path[128];
+   const char *      home;
+   struct passwd     pwd;
+   struct passwd *   pwres;
+
+   TinyTacDebugTrace();
+
+   // exit if init is disabled or already initialized
+   if ( ((opts & TTAC_NOINIT)) || ((tinytac_dflt.opts & TTAC_NOINIT)) )
+      return(TTAC_SUCCESS);
+   if ((atomic_fetch_or(&tinytac_conf_init, 1)))
+      return(TTAC_SUCCESS);
+   if ((getenv("TINYTACNOINIT")))
+      return(TTAC_SUCCESS);
+   if ((getenv("TINYTAC_NOINIT")))
+      return(TTAC_SUCCESS);
+
+   // system information
+   getpwuid_r(getuid(), &pwd, buff, sizeof(buff), &pwres);
+   home = (((pwres)) ? pwres->pw_dir : "/");
+
+   // process "/usr/local/etc/tinytac.conf"
+   tinytac_conf_file(SYSCONFDIR "/tinytac.conf");
+
+   // process "~/tinytacrc"
+   tinytacb_strlcpy(path, home,           sizeof(path));
+   tinytacb_strlcat(path, "/tinytacrc",   sizeof(path));
+   if (tinytac_conf_file(path) == TTAC_ESTOPINIT)
+      return(TTAC_SUCCESS);
+
+   // process "~/.tinytacrc"
+   tinytacb_strlcpy(path, home,           sizeof(path));
+   tinytacb_strlcat(path, "/.tinytacrc",  sizeof(path));
+   if (tinytac_conf_file(path) == TTAC_ESTOPINIT)
+      return(TTAC_SUCCESS);
+
+   // process "./tinytacrc"
+   tinytacb_strlcpy(path, "./tinytacrc",  sizeof(path));
+   if (tinytac_conf_file(path) == TTAC_ESTOPINIT)
+      return(TTAC_SUCCESS);
+
+   // process "${TINYTACCONF}"
+   if ((tinytacconf = getenv("TINYTACCONF")) != NULL)
+      if (tinytac_conf_file(tinytacconf) == TTAC_ESTOPINIT)
+         return(TTAC_SUCCESS);
+
+   // determine TINYTACRC suffix
+   if ((tintacrc = getenv("TINYTACRC")) != NULL)
+   {
+      // process "~/${TINYTACRC}"
+      tinytacb_strlcpy(path, home,        sizeof(path));
+      tinytacb_strlcat(path, "/",         sizeof(path));
+      tinytacb_strlcat(path, tintacrc,    sizeof(path));
+      if (tinytac_conf_file(path) == TTAC_ESTOPINIT)
+         return(TTAC_SUCCESS);
+
+      // process "~/.{$TINYTACRC}"
+      tinytacb_strlcpy(path, home,        sizeof(path));
+      tinytacb_strlcat(path, "/.",        sizeof(path));
+      tinytacb_strlcat(path, tintacrc,    sizeof(path));
+      if (tinytac_conf_file(path) == TTAC_ESTOPINIT)
+         return(TTAC_SUCCESS);
+
+      // process "./${TINYTACRC}"
+      tinytacb_strlcpy(path, "./",        sizeof(path));
+      tinytacb_strlcat(path, tintacrc,    sizeof(path));
+      if (tinytac_conf_file(path) == TTAC_ESTOPINIT)
+         return(TTAC_SUCCESS);
+   };
+
+   // process environment variables
+   if (tinytac_conf_environment() == TTAC_ESTOPINIT)
+      return(TTAC_SUCCESS);
+
+   return(TTAC_SUCCESS);
+}
+
+
+int
+tinytac_conf_environment(
+         void )
+{
+   size_t                  pos;
+   char *                  value;
+   char                    varname[64];
+   bindle_map_t *          opt;
+
+   TinyTacDebugTrace();
+
+   for(pos = 0; ((tinytac_conf_options[pos].map_name)); pos++)
+   {
+      opt = &tinytac_conf_options[pos];
+      if (opt->map_value == TTAC_OPT_STOPINIT)
+         continue;
+      tinytacb_strlcpy(varname, "TINYTAC_", sizeof(varname));
+      tinytacb_strlcat(varname, opt->map_name, sizeof(varname));
+      if ((value = getenv(varname)) != NULL)
+         tinytac_conf_opt(opt, value);
+   };
+
+   if (getenv("TINYTAC_STOPINIT") != NULL)
+      return(TTAC_ESTOPINIT);
+
+   return(TTAC_SUCCESS);
+}
+
+
+int
+tinytac_conf_file(
+         const char *                  path )
+{
+   int                     fd;
+   int                     rc;
+   ssize_t                 len;
+   int                     argc;
+   char                    buff[TTAC_LINE_MAX_LEN];
+   char                    value[TTAC_LINE_MAX_LEN];
+   char **                 argv;
+   const char *            val;
+   const bindle_map_t *    opt;
+
+   TinyTacDebugTrace();
+
+   len = 1;
+   rc  = TTAC_SUCCESS;
+
+   if (!(path))
+      return(TTAC_SUCCESS);
+   if ((fd = open(path, O_RDONLY)) == -1)
+      return(TTAC_SUCCESS);
+
+   while( ((len)) && (rc == TTAC_SUCCESS) )
+   {
+      if ((len = tinytacb_readline(fd, buff, sizeof(buff))) == -1)
+      {
+         close(fd);
+         return(TTAC_EUNKNOWN);
+      };
+      if (!(len))
+         continue;
+      if (tinytacb_strtoargs(buff, &argv, &argc) != TTAC_SUCCESS)
+      {
+         close(fd);
+         return(TTAC_ESYNTAX);
+      };
+      if ( (argc < 1) || (argc > 2) )
+      {
+         tinytacb_strsfree(argv);
+         continue;
+      };
+      if (tinytacb_map_lookup_name(tinytac_conf_options, argv[0], &opt) == 0)
+      {
+         tinytacb_strsfree(argv);
+         continue;
+      };
+      val = tinytacb_strexpand(value, argv[1], sizeof(value), TTAC_NO);
+      switch(tinytac_conf_opt(opt, val))
+      {
+         case TTAC_ESTOPINIT: rc = TTAC_ESTOPINIT; break;
+         case TTAC_ENOMEM:    rc = TTAC_ENOMEM;    break;
+         default:                                  break;
+      };
+      tinytacb_strsfree(argv);
+   };
+
+   close(fd);
+
+   return(rc);
+}
+
+
+int
+tinytac_conf_opt(
+         const bindle_map_t *          opt,
+         const char *                  value )
+{
+   int               ival;
+
+   TinyTacDebugTrace();
+
+   switch(opt->map_value)
+   {
+      case TTAC_OPT_AUTHEN_ASCII:
+      TinyTacDebug(TTAC_DEBUG_ARGS, "   == %s( TTAC_OPT_AUTHEN_ASCII, \"%s\" )", __func__, (((value)) ? value : "(null)"));
+      return(tinytac_conf_opt_flag(opt, value));
+
+      case TTAC_OPT_AUTHEN_CHAP:
+      TinyTacDebug(TTAC_DEBUG_ARGS, "   == %s( TTAC_OPT_AUTHEN_CHAP, \"%s\" )", __func__, (((value)) ? value : "(null)"));
+      return(tinytac_conf_opt_flag(opt, value));
+
+      case TTAC_OPT_AUTHEN_MSCHAP:
+      TinyTacDebug(TTAC_DEBUG_ARGS, "   == %s( TTAC_OPT_AUTHEN_MSCHAP, \"%s\" )", __func__, (((value)) ? value : "(null)"));
+      return(tinytac_conf_opt_flag(opt, value));
+
+      case TTAC_OPT_AUTHEN_MSCHAPV2:
+      TinyTacDebug(TTAC_DEBUG_ARGS, "   == %s( TTAC_OPT_AUTHEN_MSCHAPV2, \"%s\" )", __func__, (((value)) ? value : "(null)"));
+      return(tinytac_conf_opt_flag(opt, value));
+
+      case TTAC_OPT_AUTHEN_PAP:
+      TinyTacDebug(TTAC_DEBUG_ARGS, "   == %s( TTAC_OPT_AUTHEN_PAP, \"%s\" )", __func__, (((value)) ? value : "(null)"));
+      return(tinytac_conf_opt_flag(opt, value));
+
+      case TTAC_OPT_DEBUG_LEVEL:
+      TinyTacDebug(TTAC_DEBUG_ARGS, "   == %s( TTAC_OPT_DEBUG_LEVEL, \"%s\" )", __func__, (((value)) ? value : "(null)"));
+      return(tinytac_conf_opt_int(opt, value));
+
+      case TTAC_OPT_DEBUG_SYSLOG:
+      TinyTacDebug(TTAC_DEBUG_ARGS, "   == %s( TTAC_OPT_DEBUG_SYSLOG, \"%s\" )", __func__, (((value)) ? value : "(null)"));
+      return(tinytac_conf_opt_flag(opt, value));
+
+      case TTAC_OPT_HOSTS:
+      TinyTacDebug(TTAC_DEBUG_ARGS, "   == %s( TTAC_OPT_HOSTS, \"%s\" )", __func__, (((value)) ? value : "(null)"));
+      return(tinytac_set_option(NULL, TTAC_OPT_HOSTS, value));
+
+      case TTAC_OPT_IPV4:
+      TinyTacDebug(TTAC_DEBUG_ARGS, "   == %s( TTAC_OPT_IPV4, \"%s\" )", __func__, (((value)) ? value : "(null)"));
+      return(tinytac_conf_opt_flag(opt, value));
+
+      case TTAC_OPT_IPV6:
+      TinyTacDebug(TTAC_DEBUG_ARGS, "   == %s( TTAC_OPT_IPV6, \"%s\" )", __func__, (((value)) ? value : "(null)"));
+      return(tinytac_conf_opt_flag(opt, value));
+
+      case TTAC_OPT_KEY:
+      TinyTacDebug(TTAC_DEBUG_ARGS, "   == %s( TTAC_OPT_KEY, \"%s\" )", __func__, (((value)) ? value : "(null)"));
+      if ((tinytac_dflt.keys))
+         return(TTAC_SUCCESS);
+      return(tinytac_set_option(NULL, TTAC_OPT_KEY, value));
+
+      case TTAC_OPT_NETWORK_TIMEOUT:
+      TinyTacDebug(TTAC_DEBUG_ARGS, "   == %s( TTAC_OPT_NETWORK_TIMEOUT, \"%s\" )", __func__, (((value)) ? value : "(null)"));
+      return(tinytac_conf_opt_timeval(opt, value));
+
+      case TTAC_OPT_NOINIT:
+      TinyTacDebug(TTAC_DEBUG_ARGS, "   == %s( TTAC_OPT_NOINIT, \"%s\" )", __func__, (((value)) ? value : "(null)"));
+      return(tinytac_conf_opt_flag(opt, value));
+
+      case TTAC_OPT_RANDOM:
+      TinyTacDebug(TTAC_DEBUG_ARGS, "   == %s( tr, TTAC_OPT_RANDOM, \"%s\" )", __func__, (((value)) ? value : "(null)"));
+      if      (!(strcasecmp(value, "rand")))    ival = TTAC_RND_RAND;
+      else if (!(strcasecmp(value, "random")))  ival = TTAC_RND_RANDOM;
+      else if (!(strcasecmp(value, "urandom"))) ival = TTAC_RND_URANDOM;
+      else return(TTAC_SUCCESS);
+      return(tinytac_set_option(NULL, TTAC_OPT_RANDOM, &ival));
+
+      case TTAC_OPT_STOPINIT:
+      return(TTAC_ESTOPINIT);
+
+      case TTAC_OPT_TIMEOUT:
+      TinyTacDebug(TTAC_DEBUG_ARGS, "   == %s( TTAC_OPT_TIMEOUT, \"%s\" )", __func__, (((value)) ? value : "(null)"));
+      return(tinytac_conf_opt_int(opt, value));
+
+      default:
+      break;
+   };
+
+   return(TTAC_SUCCESS);
+}
+
+
+int
+tinytac_conf_opt_flag(
+         const bindle_map_t *          opt,
+         const char *                  value )
+{
+   int               i;
+
+   TinyTacDebugTrace();
+
+   switch(i = ((value)) ? tinytacb_strtobool(value) : TTAC_YES)
+   {
+      case TTAC_NO:  return(tinytac_set_option(NULL, (int)opt->map_value, &i));
+      case TTAC_YES: return(tinytac_set_option(NULL, (int)opt->map_value, &i));
+      default: break;
+   };
+
+   return(TTAC_SUCCESS);
+}
+
+
+int
+tinytac_conf_opt_int(
+         const bindle_map_t *          opt,
+         const char *                  value )
+{
+   int      i;
+   char *   endptr;
+
+   TinyTacDebugTrace();
+
+   if ((i = (int)strtoll(value, &endptr, 10)) < 1)
+      return(TTAC_SUCCESS);
+   if ((endptr[0]))
+      return(TTAC_SUCCESS);
+
+   return(tinytac_set_option(NULL, (int)opt->map_value, &i));
+}
+
+
+int
+tinytac_conf_opt_timeval(
+         const bindle_map_t *          opt,
+         const char *                  value )
+{
+   char *            endptr;
+   struct timeval    tv;
+
+   TinyTacDebugTrace();
+
+   tv.tv_usec = 0;
+   if ((tv.tv_sec = strtoull(value, &endptr, 10)) < 1)
+      return(TTAC_SUCCESS);
+   if ((endptr[0]))
+      return(TTAC_SUCCESS);
+
+   return(tinytac_set_option(NULL, (int)opt->map_value, &tv));
+}
+
+
+
+/* end of source */
diff --git a/lib/libtinytac/lconf.h b/lib/libtinytac/lconf.h
new file mode 100644
index 0000000..4cbbaef
--- /dev/null
+++ b/lib/libtinytac/lconf.h
@@ -0,0 +1,57 @@
+/*
+ *  Tiny TACACS+ Client Library
+ *  Copyright (C) 2022 David M. Syzdek <david@syzdek.net>.
+ *  All rights reserved.
+ *
+ *  Redistribution and use in source and binary forms, with or without
+ *  modification, are permitted provided that the following conditions are
+ *  met:
+ *
+ *     * Redistributions of source code must retain the above copyright
+ *       notice, this list of conditions and the following disclaimer.
+ *     * Redistributions in binary form must reproduce the above copyright
+ *       notice, this list of conditions and the following disclaimer in the
+ *       documentation and/or other materials provided with the distribution.
+ *     * Neither the name of David M. Syzdek nor the
+ *       names of its contributors may be used to endorse or promote products
+ *       derived from this software without specific prior written permission.
+ *
+ *  THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS
+ *  IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
+ *  THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+ *  PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL DAVID M. SYZDEK BE LIABLE FOR
+ *  ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+ *  DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ *  SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+ *  CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
+ *  LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
+ *  OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
+ *  SUCH DAMAGE.
+ */
+#ifndef _LIB_LIBTINYTAC_LCONF_H
+#define _LIB_LIBTINYTAC_LCONF_H 1
+
+
+///////////////
+//           //
+//  Headers  //
+//           //
+///////////////
+#pragma mark - Headers
+
+#include "libtinytac.h"
+
+
+//////////////////
+//              //
+//  Prototypes  //
+//              //
+//////////////////
+#pragma mark - Prototypes
+
+int
+tinytac_conf(
+         unsigned                      opts );
+
+
+#endif /* end of header */
diff --git a/lib/libtinytac/libtinytac.h b/lib/libtinytac/libtinytac.h
index 83fbc6a..1aaaa52 100644
--- a/lib/libtinytac/libtinytac.h
+++ b/lib/libtinytac/libtinytac.h
@@ -93,6 +93,13 @@
 #define TTAC_MAGIC                  ((const uint8_t *)"\0TnyTac\0")
 
 
+#define TTAC_LINE_MAX_LEN           256
+
+
+// internal library get/set options
+#define TTAC_OPT_STOPINIT           10000
+
+
 //////////////////
 //              //
 //  Data Types  //
diff --git a/lib/libtinytac/lmemory.c b/lib/libtinytac/lmemory.c
index ca1332b..ccbb3ec 100644
--- a/lib/libtinytac/lmemory.c
+++ b/lib/libtinytac/lmemory.c
@@ -54,6 +54,8 @@
 #include <errno.h>
 #include <assert.h>
 
+#include "lconf.h"
+
 
 ///////////////////
 //               //
@@ -194,6 +196,7 @@ tinytac_get_option(
          int                           option,
          void *                        outvalue )
 {
+   int            rc;
    const char *   str;
    unsigned *     optsp;
 
@@ -201,6 +204,9 @@ tinytac_get_option(
 
    assert(outvalue != NULL);
 
+   if ((rc = tinytac_conf(0)) != TTAC_SUCCESS)
+      return(rc);
+
    // get global options
    switch(option)
    {
@@ -301,6 +307,9 @@ tinytac_initialize(
 
    assert(ttp != NULL);
 
+   if ((rc = tinytac_conf(0)) != TTAC_SUCCESS)
+      return(rc);
+
    if ((tt = tinytac_obj_alloc(sizeof(TinyTac), (void(*)(void*))&tinytac_tinytac_free)) == NULL)
       return(TTAC_ENOMEM);
 
@@ -334,6 +343,7 @@ tinytac_set_option(
          int                           option,
          const void *                  invalue )
 {
+   int            rc;
    int            ival;
    int            idflt;
    const char *   istr;
@@ -343,6 +353,9 @@ tinytac_set_option(
 
    assert(invalue != NULL);
 
+   if ((rc = tinytac_conf(0)) != TTAC_SUCCESS)
+      return(rc);
+
    switch(option)
    {
       case TTAC_OPT_AUTHEN_ASCII: