Blame


1 be8b315d 2004-06-17 devnull #include <u.h>
2 be8b315d 2004-06-17 devnull #include <libc.h>
3 be8b315d 2004-06-17 devnull #include <fcall.h>
4 be8b315d 2004-06-17 devnull #include <auth.h>
5 be8b315d 2004-06-17 devnull #include "authlocal.h"
6 be8b315d 2004-06-17 devnull
7 be8b315d 2004-06-17 devnull enum {
8 be8b315d 2004-06-17 devnull ARgiveup = 100,
9 be8b315d 2004-06-17 devnull };
10 be8b315d 2004-06-17 devnull
11 be8b315d 2004-06-17 devnull static uchar*
12 be8b315d 2004-06-17 devnull gstring(uchar *p, uchar *ep, char **s)
13 be8b315d 2004-06-17 devnull {
14 be8b315d 2004-06-17 devnull uint n;
15 be8b315d 2004-06-17 devnull
16 be8b315d 2004-06-17 devnull if(p == nil)
17 be8b315d 2004-06-17 devnull return nil;
18 be8b315d 2004-06-17 devnull if(p+BIT16SZ > ep)
19 be8b315d 2004-06-17 devnull return nil;
20 be8b315d 2004-06-17 devnull n = GBIT16(p);
21 be8b315d 2004-06-17 devnull p += BIT16SZ;
22 be8b315d 2004-06-17 devnull if(p+n > ep)
23 be8b315d 2004-06-17 devnull return nil;
24 be8b315d 2004-06-17 devnull *s = malloc(n+1);
25 be8b315d 2004-06-17 devnull memmove((*s), p, n);
26 be8b315d 2004-06-17 devnull (*s)[n] = '\0';
27 be8b315d 2004-06-17 devnull p += n;
28 be8b315d 2004-06-17 devnull return p;
29 be8b315d 2004-06-17 devnull }
30 be8b315d 2004-06-17 devnull
31 be8b315d 2004-06-17 devnull static uchar*
32 be8b315d 2004-06-17 devnull gcarray(uchar *p, uchar *ep, uchar **s, int *np)
33 be8b315d 2004-06-17 devnull {
34 be8b315d 2004-06-17 devnull uint n;
35 be8b315d 2004-06-17 devnull
36 be8b315d 2004-06-17 devnull if(p == nil)
37 be8b315d 2004-06-17 devnull return nil;
38 be8b315d 2004-06-17 devnull if(p+BIT16SZ > ep)
39 be8b315d 2004-06-17 devnull return nil;
40 be8b315d 2004-06-17 devnull n = GBIT16(p);
41 be8b315d 2004-06-17 devnull p += BIT16SZ;
42 be8b315d 2004-06-17 devnull if(p+n > ep)
43 be8b315d 2004-06-17 devnull return nil;
44 be8b315d 2004-06-17 devnull *s = malloc(n);
45 be8b315d 2004-06-17 devnull if(*s == nil)
46 be8b315d 2004-06-17 devnull return nil;
47 be8b315d 2004-06-17 devnull memmove((*s), p, n);
48 be8b315d 2004-06-17 devnull *np = n;
49 be8b315d 2004-06-17 devnull p += n;
50 be8b315d 2004-06-17 devnull return p;
51 be8b315d 2004-06-17 devnull }
52 be8b315d 2004-06-17 devnull
53 be8b315d 2004-06-17 devnull void
54 be8b315d 2004-06-17 devnull auth_freeAI(AuthInfo *ai)
55 be8b315d 2004-06-17 devnull {
56 be8b315d 2004-06-17 devnull if(ai == nil)
57 be8b315d 2004-06-17 devnull return;
58 be8b315d 2004-06-17 devnull free(ai->cuid);
59 be8b315d 2004-06-17 devnull free(ai->suid);
60 be8b315d 2004-06-17 devnull free(ai->cap);
61 be8b315d 2004-06-17 devnull free(ai->secret);
62 be8b315d 2004-06-17 devnull free(ai);
63 be8b315d 2004-06-17 devnull }
64 be8b315d 2004-06-17 devnull
65 be8b315d 2004-06-17 devnull static uchar*
66 be8b315d 2004-06-17 devnull convM2AI(uchar *p, int n, AuthInfo **aip)
67 be8b315d 2004-06-17 devnull {
68 be8b315d 2004-06-17 devnull uchar *e = p+n;
69 be8b315d 2004-06-17 devnull AuthInfo *ai;
70 be8b315d 2004-06-17 devnull
71 be8b315d 2004-06-17 devnull ai = mallocz(sizeof(*ai), 1);
72 be8b315d 2004-06-17 devnull if(ai == nil)
73 be8b315d 2004-06-17 devnull return nil;
74 be8b315d 2004-06-17 devnull
75 be8b315d 2004-06-17 devnull p = gstring(p, e, &ai->cuid);
76 be8b315d 2004-06-17 devnull p = gstring(p, e, &ai->suid);
77 be8b315d 2004-06-17 devnull p = gstring(p, e, &ai->cap);
78 be8b315d 2004-06-17 devnull p = gcarray(p, e, &ai->secret, &ai->nsecret);
79 be8b315d 2004-06-17 devnull if(p == nil)
80 be8b315d 2004-06-17 devnull auth_freeAI(ai);
81 be8b315d 2004-06-17 devnull else
82 be8b315d 2004-06-17 devnull *aip = ai;
83 be8b315d 2004-06-17 devnull return p;
84 be8b315d 2004-06-17 devnull }
85 be8b315d 2004-06-17 devnull
86 be8b315d 2004-06-17 devnull AuthInfo*
87 be8b315d 2004-06-17 devnull auth_getinfo(AuthRpc *rpc)
88 be8b315d 2004-06-17 devnull {
89 be8b315d 2004-06-17 devnull AuthInfo *a;
90 be8b315d 2004-06-17 devnull
91 be8b315d 2004-06-17 devnull if(auth_rpc(rpc, "authinfo", nil, 0) != ARok)
92 be8b315d 2004-06-17 devnull return nil;
93 be8b315d 2004-06-17 devnull if(convM2AI((uchar*)rpc->arg, rpc->narg, &a) == nil){
94 be8b315d 2004-06-17 devnull werrstr("bad auth info from factotum");
95 be8b315d 2004-06-17 devnull return nil;
96 be8b315d 2004-06-17 devnull }
97 be8b315d 2004-06-17 devnull return a;
98 be8b315d 2004-06-17 devnull }
99 be8b315d 2004-06-17 devnull
100 be8b315d 2004-06-17 devnull static int
101 be8b315d 2004-06-17 devnull dorpc(AuthRpc *rpc, char *verb, char *val, int len, AuthGetkey *getkey)
102 be8b315d 2004-06-17 devnull {
103 be8b315d 2004-06-17 devnull int ret;
104 be8b315d 2004-06-17 devnull
105 be8b315d 2004-06-17 devnull for(;;){
106 be8b315d 2004-06-17 devnull if((ret = auth_rpc(rpc, verb, val, len)) != ARneedkey && ret != ARbadkey)
107 be8b315d 2004-06-17 devnull return ret;
108 be8b315d 2004-06-17 devnull if(getkey == nil)
109 be8b315d 2004-06-17 devnull return ARgiveup; /* don't know how */
110 be8b315d 2004-06-17 devnull if((*getkey)(rpc->arg) < 0)
111 be8b315d 2004-06-17 devnull return ARgiveup; /* user punted */
112 be8b315d 2004-06-17 devnull }
113 be8b315d 2004-06-17 devnull }
114 be8b315d 2004-06-17 devnull
115 be8b315d 2004-06-17 devnull /*
116 be8b315d 2004-06-17 devnull * this just proxies what the factotum tells it to.
117 be8b315d 2004-06-17 devnull */
118 be8b315d 2004-06-17 devnull AuthInfo*
119 be8b315d 2004-06-17 devnull fauth_proxy(int fd, AuthRpc *rpc, AuthGetkey *getkey, char *params)
120 be8b315d 2004-06-17 devnull {
121 be8b315d 2004-06-17 devnull char *buf;
122 be8b315d 2004-06-17 devnull int m, n, ret;
123 be8b315d 2004-06-17 devnull AuthInfo *a;
124 be8b315d 2004-06-17 devnull char oerr[ERRMAX];
125 be8b315d 2004-06-17 devnull
126 be8b315d 2004-06-17 devnull rerrstr(oerr, sizeof oerr);
127 be8b315d 2004-06-17 devnull werrstr("UNKNOWN AUTH ERROR");
128 be8b315d 2004-06-17 devnull
129 be8b315d 2004-06-17 devnull if(dorpc(rpc, "start", params, strlen(params), getkey) != ARok){
130 be8b315d 2004-06-17 devnull werrstr("fauth_proxy start: %r");
131 be8b315d 2004-06-17 devnull return nil;
132 be8b315d 2004-06-17 devnull }
133 be8b315d 2004-06-17 devnull
134 be8b315d 2004-06-17 devnull buf = malloc(AuthRpcMax);
135 be8b315d 2004-06-17 devnull if(buf == nil)
136 be8b315d 2004-06-17 devnull return nil;
137 be8b315d 2004-06-17 devnull for(;;){
138 be8b315d 2004-06-17 devnull switch(dorpc(rpc, "read", nil, 0, getkey)){
139 be8b315d 2004-06-17 devnull case ARdone:
140 be8b315d 2004-06-17 devnull free(buf);
141 be8b315d 2004-06-17 devnull a = auth_getinfo(rpc);
142 be8b315d 2004-06-17 devnull errstr(oerr, sizeof oerr); /* no error, restore whatever was there */
143 be8b315d 2004-06-17 devnull return a;
144 be8b315d 2004-06-17 devnull case ARok:
145 be8b315d 2004-06-17 devnull if(write(fd, rpc->arg, rpc->narg) != rpc->narg){
146 be8b315d 2004-06-17 devnull werrstr("auth_proxy write fd: %r");
147 be8b315d 2004-06-17 devnull goto Error;
148 be8b315d 2004-06-17 devnull }
149 be8b315d 2004-06-17 devnull break;
150 be8b315d 2004-06-17 devnull case ARphase:
151 be8b315d 2004-06-17 devnull n = 0;
152 be8b315d 2004-06-17 devnull memset(buf, 0, AuthRpcMax);
153 be8b315d 2004-06-17 devnull while((ret = dorpc(rpc, "write", buf, n, getkey)) == ARtoosmall){
154 be8b315d 2004-06-17 devnull if(atoi(rpc->arg) > AuthRpcMax)
155 be8b315d 2004-06-17 devnull break;
156 be8b315d 2004-06-17 devnull m = read(fd, buf+n, atoi(rpc->arg)-n);
157 be8b315d 2004-06-17 devnull if(m <= 0){
158 be8b315d 2004-06-17 devnull if(m == 0)
159 be8b315d 2004-06-17 devnull werrstr("auth_proxy short read: %s", buf);
160 be8b315d 2004-06-17 devnull goto Error;
161 be8b315d 2004-06-17 devnull }
162 be8b315d 2004-06-17 devnull n += m;
163 be8b315d 2004-06-17 devnull }
164 be8b315d 2004-06-17 devnull if(ret != ARok){
165 be8b315d 2004-06-17 devnull werrstr("auth_proxy rpc write: %s: %r", buf);
166 be8b315d 2004-06-17 devnull goto Error;
167 be8b315d 2004-06-17 devnull }
168 be8b315d 2004-06-17 devnull break;
169 be8b315d 2004-06-17 devnull default:
170 be8b315d 2004-06-17 devnull werrstr("auth_proxy rpc: %r");
171 be8b315d 2004-06-17 devnull goto Error;
172 be8b315d 2004-06-17 devnull }
173 be8b315d 2004-06-17 devnull }
174 be8b315d 2004-06-17 devnull Error:
175 be8b315d 2004-06-17 devnull free(buf);
176 be8b315d 2004-06-17 devnull return nil;
177 be8b315d 2004-06-17 devnull }
178 be8b315d 2004-06-17 devnull
179 be8b315d 2004-06-17 devnull AuthInfo*
180 be8b315d 2004-06-17 devnull auth_proxy(int fd, AuthGetkey *getkey, char *fmt, ...)
181 be8b315d 2004-06-17 devnull {
182 be8b315d 2004-06-17 devnull int afd;
183 be8b315d 2004-06-17 devnull char *p;
184 be8b315d 2004-06-17 devnull va_list arg;
185 be8b315d 2004-06-17 devnull AuthInfo *ai;
186 be8b315d 2004-06-17 devnull AuthRpc *rpc;
187 be8b315d 2004-06-17 devnull
188 be8b315d 2004-06-17 devnull quotefmtinstall(); /* just in case */
189 be8b315d 2004-06-17 devnull va_start(arg, fmt);
190 be8b315d 2004-06-17 devnull p = vsmprint(fmt, arg);
191 be8b315d 2004-06-17 devnull va_end(arg);
192 be8b315d 2004-06-17 devnull
193 be8b315d 2004-06-17 devnull afd = open("/mnt/factotum/rpc", ORDWR);
194 be8b315d 2004-06-17 devnull if(afd < 0){
195 be8b315d 2004-06-17 devnull werrstr("opening /mnt/factotum/rpc: %r");
196 be8b315d 2004-06-17 devnull free(p);
197 be8b315d 2004-06-17 devnull return nil;
198 be8b315d 2004-06-17 devnull }
199 be8b315d 2004-06-17 devnull
200 be8b315d 2004-06-17 devnull rpc = auth_allocrpc(afd);
201 be8b315d 2004-06-17 devnull if(rpc == nil){
202 be8b315d 2004-06-17 devnull free(p);
203 be8b315d 2004-06-17 devnull return nil;
204 be8b315d 2004-06-17 devnull }
205 be8b315d 2004-06-17 devnull
206 be8b315d 2004-06-17 devnull ai = fauth_proxy(fd, rpc, getkey, p);
207 be8b315d 2004-06-17 devnull free(p);
208 be8b315d 2004-06-17 devnull auth_freerpc(rpc);
209 be8b315d 2004-06-17 devnull close(afd);
210 be8b315d 2004-06-17 devnull return ai;
211 be8b315d 2004-06-17 devnull }
212 be8b315d 2004-06-17 devnull