1 6e527fbc 2005-02-13 devnull #include <u.h>
  2 6e527fbc 2005-02-13 devnull #include <libc.h>
  3 6e527fbc 2005-02-13 devnull #include <bio.h>
  4 6e527fbc 2005-02-13 devnull #include <ndb.h>
  5 6e527fbc 2005-02-13 devnull #include <mp.h>
  6 6e527fbc 2005-02-13 devnull #include <libsec.h>
  7 6e527fbc 2005-02-13 devnull #include "SConn.h"
  8 6e527fbc 2005-02-13 devnull #include "secstore.h"
  9 6e527fbc 2005-02-13 devnull 
 10 6e527fbc 2005-02-13 devnull char *SECSTORE_DIR;
 11 cbeb0b26 2006-04-01 devnull char* secureidcheck(char *, char *);   /* from /sys/src/cmd/auth/ */
 12 6e527fbc 2005-02-13 devnull extern char* dirls(char *path);
 13 6e527fbc 2005-02-13 devnull 
 14 6e527fbc 2005-02-13 devnull int verbose;
 15 6e527fbc 2005-02-13 devnull Ndb *db;
 16 6e527fbc 2005-02-13 devnull 
 17 6e527fbc 2005-02-13 devnull static void
 18 6e527fbc 2005-02-13 devnull usage(void)
 19 6e527fbc 2005-02-13 devnull {
 20 6e527fbc 2005-02-13 devnull 	fprint(2, "usage: secstored [-R] [-S servername] [-s tcp!*!5356] [-v] [-x netmtpt]\n");
 21 6e527fbc 2005-02-13 devnull 	exits("usage");
 22 6e527fbc 2005-02-13 devnull }
 23 6e527fbc 2005-02-13 devnull 
 24 6e527fbc 2005-02-13 devnull static int
 25 6e527fbc 2005-02-13 devnull getdir(SConn *conn, char *id)
 26 6e527fbc 2005-02-13 devnull {
 27 6e527fbc 2005-02-13 devnull 	char *ls, *s; 
 28 6e527fbc 2005-02-13 devnull 	uchar *msg;
 29 6e527fbc 2005-02-13 devnull 	int n, len;
 30 6e527fbc 2005-02-13 devnull 
 31 6e527fbc 2005-02-13 devnull 	s = emalloc(Maxmsg);
 32 6e527fbc 2005-02-13 devnull 	snprint(s, Maxmsg, "%s/store/%s", SECSTORE_DIR, id);
 33 6e527fbc 2005-02-13 devnull 
 34 6e527fbc 2005-02-13 devnull 	if((ls = dirls(s)) == nil)
 35 6e527fbc 2005-02-13 devnull 		len = 0;
 36 6e527fbc 2005-02-13 devnull 	else
 37 6e527fbc 2005-02-13 devnull 		len = strlen(ls);
 38 6e527fbc 2005-02-13 devnull 
 39 6e527fbc 2005-02-13 devnull 	/* send file size */
 40 6e527fbc 2005-02-13 devnull 	snprint(s, Maxmsg, "%d", len);
 41 6e527fbc 2005-02-13 devnull 	conn->write(conn, (uchar*)s, strlen(s));
 42 6e527fbc 2005-02-13 devnull 
 43 6e527fbc 2005-02-13 devnull 	/* send directory listing in Maxmsg chunks */
 44 6e527fbc 2005-02-13 devnull 	n = Maxmsg;
 45 6e527fbc 2005-02-13 devnull 	msg = (uchar*)ls;
 46 6e527fbc 2005-02-13 devnull 	while(len > 0){
 47 6e527fbc 2005-02-13 devnull 		if(len < Maxmsg)
 48 6e527fbc 2005-02-13 devnull 			n = len;
 49 6e527fbc 2005-02-13 devnull 		conn->write(conn, msg, n);
 50 6e527fbc 2005-02-13 devnull 		msg += n;
 51 6e527fbc 2005-02-13 devnull 		len -= n;
 52 6e527fbc 2005-02-13 devnull 	}
 53 6e527fbc 2005-02-13 devnull 	free(s);
 54 6e527fbc 2005-02-13 devnull 	free(ls);
 55 6e527fbc 2005-02-13 devnull 	return 0;
 56 6e527fbc 2005-02-13 devnull }
 57 6e527fbc 2005-02-13 devnull 
 58 6e527fbc 2005-02-13 devnull char *
 59 6e527fbc 2005-02-13 devnull validatefile(char *f)
 60 6e527fbc 2005-02-13 devnull {
 61 6e527fbc 2005-02-13 devnull 	char *nl;
 62 6e527fbc 2005-02-13 devnull 
 63 6e527fbc 2005-02-13 devnull 	if(f==nil || *f==0)
 64 6e527fbc 2005-02-13 devnull 		return nil;
 65 6e527fbc 2005-02-13 devnull 	if(nl = strchr(f, '\n'))
 66 6e527fbc 2005-02-13 devnull 		*nl = 0;
 67 6e527fbc 2005-02-13 devnull 	if(strchr(f,'/') != nil || strcmp(f,"..")==0 || strlen(f) >= 300){
 68 6e527fbc 2005-02-13 devnull 		syslog(0, LOG, "no slashes allowed: %s\n", f);
 69 6e527fbc 2005-02-13 devnull 		return nil;
 70 6e527fbc 2005-02-13 devnull 	}
 71 6e527fbc 2005-02-13 devnull 	return f;
 72 6e527fbc 2005-02-13 devnull }
 73 6e527fbc 2005-02-13 devnull 
 74 6e527fbc 2005-02-13 devnull static int
 75 6e527fbc 2005-02-13 devnull getfile(SConn *conn, char *id, char *gf)
 76 6e527fbc 2005-02-13 devnull {
 77 6e527fbc 2005-02-13 devnull 	int n, gd, len;
 78 6e527fbc 2005-02-13 devnull 	ulong mode;
 79 6e527fbc 2005-02-13 devnull 	char *s;
 80 6e527fbc 2005-02-13 devnull 	Dir *st;
 81 6e527fbc 2005-02-13 devnull 
 82 6e527fbc 2005-02-13 devnull 	if(strcmp(gf,".")==0)
 83 6e527fbc 2005-02-13 devnull 		return getdir(conn, id);
 84 6e527fbc 2005-02-13 devnull 
 85 6e527fbc 2005-02-13 devnull 	/* send file size */
 86 6e527fbc 2005-02-13 devnull 	s = emalloc(Maxmsg);
 87 6e527fbc 2005-02-13 devnull 	snprint(s, Maxmsg, "%s/store/%s/%s", SECSTORE_DIR, id, gf);
 88 6e527fbc 2005-02-13 devnull 	gd = open(s, OREAD);
 89 6e527fbc 2005-02-13 devnull 	if(gd < 0){
 90 6e527fbc 2005-02-13 devnull 		syslog(0, LOG, "can't open %s: %r\n", s);
 91 6e527fbc 2005-02-13 devnull 		free(s);
 92 6e527fbc 2005-02-13 devnull 		conn->write(conn, (uchar*)"-1", 2);
 93 6e527fbc 2005-02-13 devnull 		return -1;
 94 6e527fbc 2005-02-13 devnull 	}
 95 6e527fbc 2005-02-13 devnull 	st = dirfstat(gd);
 96 6e527fbc 2005-02-13 devnull 	if(st == nil){
 97 6e527fbc 2005-02-13 devnull 		syslog(0, LOG, "can't stat %s: %r\n", s);
 98 6e527fbc 2005-02-13 devnull 		free(s);
 99 6e527fbc 2005-02-13 devnull 		conn->write(conn, (uchar*)"-1", 2);
100 6e527fbc 2005-02-13 devnull 		return -1;
101 6e527fbc 2005-02-13 devnull 	}
102 6e527fbc 2005-02-13 devnull 	mode = st->mode;
103 6e527fbc 2005-02-13 devnull 	len = st->length;
104 6e527fbc 2005-02-13 devnull 	free(st);
105 6e527fbc 2005-02-13 devnull 	if(mode & DMDIR) {
106 6e527fbc 2005-02-13 devnull 		syslog(0, LOG, "%s should be a plain file, not a directory\n", s);
107 6e527fbc 2005-02-13 devnull 		free(s);
108 6e527fbc 2005-02-13 devnull 		conn->write(conn, (uchar*)"-1", 2);
109 6e527fbc 2005-02-13 devnull 		return -1;
110 6e527fbc 2005-02-13 devnull 	}
111 6e527fbc 2005-02-13 devnull 	if(len < 0 || len > MAXFILESIZE){
112 6e527fbc 2005-02-13 devnull 		syslog(0, LOG, "implausible filesize %d for %s\n", len, gf);
113 6e527fbc 2005-02-13 devnull 		free(s);
114 6e527fbc 2005-02-13 devnull 		conn->write(conn, (uchar*)"-3", 2);
115 6e527fbc 2005-02-13 devnull 		return -1;
116 6e527fbc 2005-02-13 devnull 	}
117 6e527fbc 2005-02-13 devnull 	snprint(s, Maxmsg, "%d", len);
118 6e527fbc 2005-02-13 devnull 	conn->write(conn, (uchar*)s, strlen(s));
119 6e527fbc 2005-02-13 devnull 
120 6e527fbc 2005-02-13 devnull 	/* send file in Maxmsg chunks */
121 6e527fbc 2005-02-13 devnull 	while(len > 0){
122 6e527fbc 2005-02-13 devnull 		n = read(gd, s, Maxmsg);
123 6e527fbc 2005-02-13 devnull 		if(n <= 0){
124 6e527fbc 2005-02-13 devnull 			syslog(0, LOG, "read error on %s: %r\n", gf);
125 6e527fbc 2005-02-13 devnull 			free(s);
126 6e527fbc 2005-02-13 devnull 			return -1;
127 6e527fbc 2005-02-13 devnull 		}
128 6e527fbc 2005-02-13 devnull 		conn->write(conn, (uchar*)s, n);
129 6e527fbc 2005-02-13 devnull 		len -= n;
130 6e527fbc 2005-02-13 devnull 	}
131 6e527fbc 2005-02-13 devnull 	close(gd);
132 6e527fbc 2005-02-13 devnull 	free(s);
133 6e527fbc 2005-02-13 devnull 	return 0;
134 6e527fbc 2005-02-13 devnull }
135 6e527fbc 2005-02-13 devnull 
136 6e527fbc 2005-02-13 devnull static int
137 6e527fbc 2005-02-13 devnull putfile(SConn *conn, char *id, char *pf)
138 6e527fbc 2005-02-13 devnull {
139 6e527fbc 2005-02-13 devnull 	int n, nw, pd;
140 6e527fbc 2005-02-13 devnull 	long len;
141 6e527fbc 2005-02-13 devnull 	char s[Maxmsg+1];
142 6e527fbc 2005-02-13 devnull 
143 6e527fbc 2005-02-13 devnull 	/* get file size */
144 6e527fbc 2005-02-13 devnull 	n = readstr(conn, s);
145 6e527fbc 2005-02-13 devnull 	if(n < 0){
146 6e527fbc 2005-02-13 devnull 		syslog(0, LOG, "remote: %s: %r\n", s);
147 6e527fbc 2005-02-13 devnull 		return -1;
148 6e527fbc 2005-02-13 devnull 	}
149 6e527fbc 2005-02-13 devnull 	len = atoi(s);
150 6e527fbc 2005-02-13 devnull 	if(len == -1){
151 6e527fbc 2005-02-13 devnull 		syslog(0, LOG, "remote file %s does not exist\n", pf);
152 6e527fbc 2005-02-13 devnull 		return -1;
153 6e527fbc 2005-02-13 devnull 	}else if(len < 0 || len > MAXFILESIZE){
154 6e527fbc 2005-02-13 devnull 		syslog(0, LOG, "implausible filesize %ld for %s\n", len, pf);
155 6e527fbc 2005-02-13 devnull 		return -1;
156 6e527fbc 2005-02-13 devnull 	}
157 6e527fbc 2005-02-13 devnull 
158 6e527fbc 2005-02-13 devnull 	/* get file in Maxmsg chunks */
159 6e527fbc 2005-02-13 devnull 	if(strchr(pf,'/') != nil || strcmp(pf,"..")==0){
160 6e527fbc 2005-02-13 devnull 		syslog(0, LOG, "no slashes allowed: %s\n", pf);
161 6e527fbc 2005-02-13 devnull 		return -1;
162 6e527fbc 2005-02-13 devnull 	}
163 6e527fbc 2005-02-13 devnull 	snprint(s, Maxmsg, "%s/store/%s/%s", SECSTORE_DIR, id, pf);
164 6e527fbc 2005-02-13 devnull 	pd = create(s, OWRITE, 0660);
165 6e527fbc 2005-02-13 devnull 	if(pd < 0){
166 6e527fbc 2005-02-13 devnull 		syslog(0, LOG, "can't open %s: %r\n", s);
167 6e527fbc 2005-02-13 devnull 		return -1;
168 6e527fbc 2005-02-13 devnull 	}
169 6e527fbc 2005-02-13 devnull 	while(len > 0){
170 6e527fbc 2005-02-13 devnull 		n = conn->read(conn, (uchar*)s, Maxmsg);
171 6e527fbc 2005-02-13 devnull 		if(n <= 0){
172 6e527fbc 2005-02-13 devnull 			syslog(0, LOG, "empty file chunk\n");
173 6e527fbc 2005-02-13 devnull 			return -1;
174 6e527fbc 2005-02-13 devnull 		}
175 6e527fbc 2005-02-13 devnull 		nw = write(pd, s, n);
176 6e527fbc 2005-02-13 devnull 		if(nw != n){
177 6e527fbc 2005-02-13 devnull 			syslog(0, LOG, "write error on %s: %r", pf);
178 6e527fbc 2005-02-13 devnull 			return -1;
179 6e527fbc 2005-02-13 devnull 		}
180 6e527fbc 2005-02-13 devnull 		len -= n;
181 6e527fbc 2005-02-13 devnull 	}
182 6e527fbc 2005-02-13 devnull 	close(pd);
183 6e527fbc 2005-02-13 devnull 	return 0;
184 6e527fbc 2005-02-13 devnull 
185 6e527fbc 2005-02-13 devnull }
186 6e527fbc 2005-02-13 devnull 
187 6e527fbc 2005-02-13 devnull static int
188 6e527fbc 2005-02-13 devnull removefile(SConn *conn, char *id, char *f)
189 6e527fbc 2005-02-13 devnull {
190 6e527fbc 2005-02-13 devnull 	Dir *d;
191 6e527fbc 2005-02-13 devnull 	char buf[Maxmsg];
192 6e527fbc 2005-02-13 devnull 
193 6e527fbc 2005-02-13 devnull 	snprint(buf, Maxmsg, "%s/store/%s/%s", SECSTORE_DIR, id, f);
194 6e527fbc 2005-02-13 devnull 
195 6e527fbc 2005-02-13 devnull 	if((d = dirstat(buf)) == nil){
196 6e527fbc 2005-02-13 devnull 		snprint(buf, sizeof buf, "remove failed: %r");
197 6e527fbc 2005-02-13 devnull 		writerr(conn, buf);
198 6e527fbc 2005-02-13 devnull 		return -1;
199 6e527fbc 2005-02-13 devnull 	}else if(d->mode & DMDIR){
200 6e527fbc 2005-02-13 devnull 		snprint(buf, sizeof buf, "can't remove a directory");
201 6e527fbc 2005-02-13 devnull 		writerr(conn, buf);
202 6e527fbc 2005-02-13 devnull 		free(d);
203 6e527fbc 2005-02-13 devnull 		return -1;
204 6e527fbc 2005-02-13 devnull 	}
205 6e527fbc 2005-02-13 devnull 
206 6e527fbc 2005-02-13 devnull 	free(d);
207 6e527fbc 2005-02-13 devnull 	if(remove(buf) < 0){
208 6e527fbc 2005-02-13 devnull 		snprint(buf, sizeof buf, "remove failed: %r");
209 6e527fbc 2005-02-13 devnull 		writerr(conn, buf);
210 6e527fbc 2005-02-13 devnull 		return -1;
211 6e527fbc 2005-02-13 devnull 	}
212 6e527fbc 2005-02-13 devnull 	return 0;
213 6e527fbc 2005-02-13 devnull }
214 6e527fbc 2005-02-13 devnull 
215 6e527fbc 2005-02-13 devnull /* given line directory from accept, returns ipaddr!port */
216 6e527fbc 2005-02-13 devnull static char*
217 6e527fbc 2005-02-13 devnull remoteIP(char *ldir)
218 6e527fbc 2005-02-13 devnull {
219 6e527fbc 2005-02-13 devnull 	int fd, n;
220 6e527fbc 2005-02-13 devnull 	char rp[100], ap[500];
221 6e527fbc 2005-02-13 devnull 
222 6e527fbc 2005-02-13 devnull 	snprint(rp, sizeof rp, "%s/remote", ldir);
223 6e527fbc 2005-02-13 devnull 	fd = open(rp, OREAD);
224 6e527fbc 2005-02-13 devnull 	if(fd < 0)
225 6e527fbc 2005-02-13 devnull 		return strdup("?!?");
226 6e527fbc 2005-02-13 devnull 	n = read(fd, ap, sizeof ap);
227 6e527fbc 2005-02-13 devnull 	if(n <= 0 || n == sizeof ap){
228 6e527fbc 2005-02-13 devnull 		fprint(2, "error %d reading %s: %r\n", n, rp);
229 6e527fbc 2005-02-13 devnull 		return strdup("?!?");
230 6e527fbc 2005-02-13 devnull 	}
231 6e527fbc 2005-02-13 devnull 	close(fd);
232 6e527fbc 2005-02-13 devnull 	ap[n--] = 0;
233 6e527fbc 2005-02-13 devnull 	if(ap[n] == '\n')
234 6e527fbc 2005-02-13 devnull 		ap[n] = 0;
235 6e527fbc 2005-02-13 devnull 	return strdup(ap);
236 6e527fbc 2005-02-13 devnull }
237 6e527fbc 2005-02-13 devnull 
238 6e527fbc 2005-02-13 devnull static int
239 6e527fbc 2005-02-13 devnull dologin(int fd, char *S, int forceSTA)
240 6e527fbc 2005-02-13 devnull {
241 6e527fbc 2005-02-13 devnull 	int i, n, rv;
242 6e527fbc 2005-02-13 devnull 	char *file, *mess;
243 6e527fbc 2005-02-13 devnull 	char msg[Maxmsg+1];
244 6e527fbc 2005-02-13 devnull 	PW *pw;
245 6e527fbc 2005-02-13 devnull 	SConn *conn;
246 6e527fbc 2005-02-13 devnull 
247 6e527fbc 2005-02-13 devnull 	pw = nil;
248 6e527fbc 2005-02-13 devnull 	rv = -1;
249 6e527fbc 2005-02-13 devnull 
250 cbeb0b26 2006-04-01 devnull 	/* collect the first message */
251 6e527fbc 2005-02-13 devnull 	if((conn = newSConn(fd)) == nil)
252 6e527fbc 2005-02-13 devnull 		return -1;
253 6e527fbc 2005-02-13 devnull 	if(readstr(conn, msg) < 0){
254 6e527fbc 2005-02-13 devnull 		fprint(2, "remote: %s: %r\n", msg);
255 6e527fbc 2005-02-13 devnull 		writerr(conn, "can't read your first message");
256 6e527fbc 2005-02-13 devnull 		goto Out;
257 6e527fbc 2005-02-13 devnull 	}
258 6e527fbc 2005-02-13 devnull 
259 cbeb0b26 2006-04-01 devnull 	/* authenticate */
260 6e527fbc 2005-02-13 devnull 	if(PAKserver(conn, S, msg, &pw) < 0){
261 6e527fbc 2005-02-13 devnull 		if(pw != nil)
262 6e527fbc 2005-02-13 devnull 			syslog(0, LOG, "secstore denied for %s", pw->id);
263 6e527fbc 2005-02-13 devnull 		goto Out;
264 6e527fbc 2005-02-13 devnull 	}
265 6e527fbc 2005-02-13 devnull 	if((forceSTA || pw->status&STA) != 0){
266 6e527fbc 2005-02-13 devnull 		conn->write(conn, (uchar*)"STA", 3);
267 6e527fbc 2005-02-13 devnull 		if(readstr(conn, msg) < 10 || strncmp(msg, "STA", 3) != 0){
268 6e527fbc 2005-02-13 devnull 			syslog(0, LOG, "no STA from %s", pw->id);
269 6e527fbc 2005-02-13 devnull 			goto Out;
270 6e527fbc 2005-02-13 devnull 		}
271 6e527fbc 2005-02-13 devnull 		mess = secureidcheck(pw->id, msg+3);
272 6e527fbc 2005-02-13 devnull 		if(mess != nil){
273 6e527fbc 2005-02-13 devnull 			syslog(0, LOG, "secureidcheck denied %s because %s", pw->id, mess);
274 6e527fbc 2005-02-13 devnull 			goto Out;
275 6e527fbc 2005-02-13 devnull 		}
276 6e527fbc 2005-02-13 devnull 	}
277 6e527fbc 2005-02-13 devnull 	conn->write(conn, (uchar*)"OK", 2);
278 6e527fbc 2005-02-13 devnull 	syslog(0, LOG, "AUTH %s", pw->id);
279 6e527fbc 2005-02-13 devnull 
280 cbeb0b26 2006-04-01 devnull 	/* perform operations as asked */
281 6e527fbc 2005-02-13 devnull 	while((n = readstr(conn, msg)) > 0){
282 6e527fbc 2005-02-13 devnull 		syslog(0, LOG, "[%s] %s", pw->id, msg);
283 6e527fbc 2005-02-13 devnull 
284 6e527fbc 2005-02-13 devnull 		if(strncmp(msg, "GET ", 4) == 0){
285 6e527fbc 2005-02-13 devnull 			file = validatefile(msg+4);
286 6e527fbc 2005-02-13 devnull 			if(file==nil || getfile(conn, pw->id, file) < 0)
287 6e527fbc 2005-02-13 devnull 				goto Err;
288 6e527fbc 2005-02-13 devnull 
289 6e527fbc 2005-02-13 devnull 		}else if(strncmp(msg, "PUT ", 4) == 0){
290 6e527fbc 2005-02-13 devnull 			file = validatefile(msg+4);
291 6e527fbc 2005-02-13 devnull 			if(file==nil || putfile(conn, pw->id, file) < 0){
292 6e527fbc 2005-02-13 devnull 				syslog(0, LOG, "failed PUT %s/%s", pw->id, file);
293 6e527fbc 2005-02-13 devnull 				goto Err;
294 6e527fbc 2005-02-13 devnull 			}
295 6e527fbc 2005-02-13 devnull 
296 6e527fbc 2005-02-13 devnull 		}else if(strncmp(msg, "RM ", 3) == 0){
297 6e527fbc 2005-02-13 devnull 			file = validatefile(msg+3);
298 6e527fbc 2005-02-13 devnull 			if(file==nil || removefile(conn, pw->id, file) < 0){
299 6e527fbc 2005-02-13 devnull 				syslog(0, LOG, "failed RM %s/%s", pw->id, file);
300 6e527fbc 2005-02-13 devnull 				goto Err;
301 6e527fbc 2005-02-13 devnull 			}
302 6e527fbc 2005-02-13 devnull 
303 6e527fbc 2005-02-13 devnull 		}else if(strncmp(msg, "CHPASS", 6) == 0){
304 6e527fbc 2005-02-13 devnull 			if(readstr(conn, msg) < 0){
305 6e527fbc 2005-02-13 devnull 				syslog(0, LOG, "protocol botch CHPASS for %s", pw->id);
306 6e527fbc 2005-02-13 devnull 				writerr(conn, "protocol botch while setting PAK");
307 6e527fbc 2005-02-13 devnull 				goto Out;
308 6e527fbc 2005-02-13 devnull 			}
309 6e527fbc 2005-02-13 devnull 			pw->Hi = strtomp(msg, nil, 64, pw->Hi);
310 6e527fbc 2005-02-13 devnull 			for(i=0; i < 4 && putPW(pw) < 0; i++)
311 6e527fbc 2005-02-13 devnull 				syslog(0, LOG, "password change failed for %s (%d): %r", pw->id, i);
312 6e527fbc 2005-02-13 devnull 			if(i==4)
313 6e527fbc 2005-02-13 devnull 				goto Out;
314 6e527fbc 2005-02-13 devnull 
315 6e527fbc 2005-02-13 devnull 		}else if(strncmp(msg, "BYE", 3) == 0){
316 6e527fbc 2005-02-13 devnull 			rv = 0;
317 6e527fbc 2005-02-13 devnull 			break;
318 6e527fbc 2005-02-13 devnull 
319 6e527fbc 2005-02-13 devnull 		}else{
320 6e527fbc 2005-02-13 devnull 			writerr(conn, "unrecognized operation");
321 6e527fbc 2005-02-13 devnull 			break;
322 6e527fbc 2005-02-13 devnull 		}
323 6e527fbc 2005-02-13 devnull 
324 6e527fbc 2005-02-13 devnull 	}
325 6e527fbc 2005-02-13 devnull 	if(n <= 0)
326 6e527fbc 2005-02-13 devnull 		syslog(0, LOG, "%s closed connection without saying goodbye\n", pw->id);
327 6e527fbc 2005-02-13 devnull 
328 6e527fbc 2005-02-13 devnull Out:
329 6e527fbc 2005-02-13 devnull 	freePW(pw);
330 6e527fbc 2005-02-13 devnull 	conn->free(conn);
331 6e527fbc 2005-02-13 devnull 	return rv;
332 6e527fbc 2005-02-13 devnull Err:
333 6e527fbc 2005-02-13 devnull 	writerr(conn, "operation failed");
334 6e527fbc 2005-02-13 devnull 	goto Out;
335 6e527fbc 2005-02-13 devnull }
336 6e527fbc 2005-02-13 devnull 
337 6e527fbc 2005-02-13 devnull void
338 6e527fbc 2005-02-13 devnull main(int argc, char **argv)
339 6e527fbc 2005-02-13 devnull {
340 6e527fbc 2005-02-13 devnull 	int afd, dfd, lcfd, forceSTA = 0;
341 6e527fbc 2005-02-13 devnull 	char adir[40], ldir[40], *remote;
342 6e527fbc 2005-02-13 devnull 	char *serve = "tcp!*!5356", *p, aserve[128];
343 6e527fbc 2005-02-13 devnull 	char *S = "secstore";
344 6e527fbc 2005-02-13 devnull 	char *dbpath;
345 6e527fbc 2005-02-13 devnull 	Ndb *db2;
346 6e527fbc 2005-02-13 devnull 
347 6e527fbc 2005-02-13 devnull 	S = sysname();
348 6e527fbc 2005-02-13 devnull 	SECSTORE_DIR = unsharp("#9/secstore");
349 cbeb0b26 2006-04-01 devnull /*	setnetmtpt(net, sizeof(net), nil); */
350 6e527fbc 2005-02-13 devnull 	ARGBEGIN{
351 6e527fbc 2005-02-13 devnull 	case 'R':
352 6e527fbc 2005-02-13 devnull 		forceSTA = 1;
353 6e527fbc 2005-02-13 devnull 		break;
354 6e527fbc 2005-02-13 devnull 	case 's':
355 6e527fbc 2005-02-13 devnull 		serve = EARGF(usage());
356 6e527fbc 2005-02-13 devnull 		break;
357 6e527fbc 2005-02-13 devnull 	case 'S':
358 6e527fbc 2005-02-13 devnull 		S = EARGF(usage());
359 6e527fbc 2005-02-13 devnull 		break;
360 6e527fbc 2005-02-13 devnull 	case 'x':
361 6e527fbc 2005-02-13 devnull 		p = ARGF();
362 6e527fbc 2005-02-13 devnull 		if(p == nil)
363 6e527fbc 2005-02-13 devnull 			usage();
364 6e527fbc 2005-02-13 devnull 		USED(p);
365 cbeb0b26 2006-04-01 devnull 	/*	setnetmtpt(net, sizeof(net), p); */
366 6e527fbc 2005-02-13 devnull 		break;
367 6e527fbc 2005-02-13 devnull 	case 'v':
368 6e527fbc 2005-02-13 devnull 		verbose++;
369 6e527fbc 2005-02-13 devnull 		break;
370 6e527fbc 2005-02-13 devnull 	default:
371 6e527fbc 2005-02-13 devnull 		usage();
372 6e527fbc 2005-02-13 devnull 	}ARGEND;
373 6e527fbc 2005-02-13 devnull 
374 6e527fbc 2005-02-13 devnull 	if(!verbose)
375 6e527fbc 2005-02-13 devnull 		switch(rfork(RFNOTEG|RFPROC|RFFDG)) {
376 6e527fbc 2005-02-13 devnull 		case -1:
377 6e527fbc 2005-02-13 devnull 			sysfatal("fork: %r");
378 6e527fbc 2005-02-13 devnull 		case 0:
379 6e527fbc 2005-02-13 devnull 			break;
380 6e527fbc 2005-02-13 devnull 		default:
381 6e527fbc 2005-02-13 devnull 			exits(0);
382 6e527fbc 2005-02-13 devnull 		}
383 6e527fbc 2005-02-13 devnull 
384 6e527fbc 2005-02-13 devnull 	snprint(aserve, sizeof aserve, "%s", serve);
385 6e527fbc 2005-02-13 devnull 	afd = announce(aserve, adir);
386 6e527fbc 2005-02-13 devnull 	if(afd < 0)
387 6e527fbc 2005-02-13 devnull 		sysfatal("%s: %r\n", aserve);
388 6e527fbc 2005-02-13 devnull 	syslog(0, LOG, "ANNOUNCE %s", aserve);
389 6e527fbc 2005-02-13 devnull 	for(;;){
390 6e527fbc 2005-02-13 devnull 		if((lcfd = listen(adir, ldir)) < 0)
391 6e527fbc 2005-02-13 devnull 			exits("can't listen");
392 ef2eeaf3 2005-02-13 devnull 		switch(rfork(RFPROC|RFFDG|RFNOWAIT)){
393 6e527fbc 2005-02-13 devnull 		case -1:
394 6e527fbc 2005-02-13 devnull 			fprint(2, "secstore forking: %r\n");
395 6e527fbc 2005-02-13 devnull 			close(lcfd);
396 6e527fbc 2005-02-13 devnull 			break;
397 6e527fbc 2005-02-13 devnull 		case 0:
398 cbeb0b26 2006-04-01 devnull 			/* "/lib/ndb/common.radius does not exist" if db set before fork */
399 6e527fbc 2005-02-13 devnull 			db = ndbopen(dbpath=unsharp("#9/ndb/auth"));
400 6e527fbc 2005-02-13 devnull 			if(db == 0)
401 6e527fbc 2005-02-13 devnull 				syslog(0, LOG, "no ndb/auth");
402 6e527fbc 2005-02-13 devnull 			db2 = ndbopen(0);
403 6e527fbc 2005-02-13 devnull 			if(db2 == 0)
404 6e527fbc 2005-02-13 devnull 				syslog(0, LOG, "no ndb/local");
405 6e527fbc 2005-02-13 devnull 			db = ndbcat(db, db2);
406 6e527fbc 2005-02-13 devnull 			if((dfd = accept(lcfd, ldir)) < 0)
407 6e527fbc 2005-02-13 devnull 				exits("can't accept");
408 cbeb0b26 2006-04-01 devnull 			alarm(30*60*1000); 	/* 30 min */
409 6e527fbc 2005-02-13 devnull 			remote = remoteIP(ldir);
410 6e527fbc 2005-02-13 devnull 			syslog(0, LOG, "secstore from %s", remote);
411 6e527fbc 2005-02-13 devnull 			free(remote);
412 6e527fbc 2005-02-13 devnull 			dologin(dfd, S, forceSTA);
413 6e527fbc 2005-02-13 devnull 			exits(nil);
414 6e527fbc 2005-02-13 devnull 		default:
415 6e527fbc 2005-02-13 devnull 			close(lcfd);
416 6e527fbc 2005-02-13 devnull 			break;
417 6e527fbc 2005-02-13 devnull 		}
418 6e527fbc 2005-02-13 devnull 	}
419 6e527fbc 2005-02-13 devnull }
420 6e527fbc 2005-02-13 devnull