Blame


1 fb1a36c0 2022-01-09 op /*
2 fb1a36c0 2022-01-09 op * Copyright (c) 2021 Omar Polo <op@omarpolo.com>
3 fb1a36c0 2022-01-09 op *
4 fb1a36c0 2022-01-09 op * Permission to use, copy, modify, and distribute this software for any
5 fb1a36c0 2022-01-09 op * purpose with or without fee is hereby granted, provided that the above
6 fb1a36c0 2022-01-09 op * copyright notice and this permission notice appear in all copies.
7 fb1a36c0 2022-01-09 op *
8 fb1a36c0 2022-01-09 op * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
9 fb1a36c0 2022-01-09 op * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
10 fb1a36c0 2022-01-09 op * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
11 fb1a36c0 2022-01-09 op * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
12 fb1a36c0 2022-01-09 op * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
13 fb1a36c0 2022-01-09 op * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
14 fb1a36c0 2022-01-09 op * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
15 fb1a36c0 2022-01-09 op */
16 fb1a36c0 2022-01-09 op
17 fb1a36c0 2022-01-09 op #ifndef KAMID_H
18 fb1a36c0 2022-01-09 op #define KAMID_H
19 fb1a36c0 2022-01-09 op
20 fb1a36c0 2022-01-09 op #include <limits.h>
21 fb1a36c0 2022-01-09 op #include <stdint.h>
22 fb1a36c0 2022-01-09 op #include <tls.h>
23 fb1a36c0 2022-01-09 op
24 20f7a94e 2022-10-07 op /* Linux and OpenBSD have LOGIN_NAME_MAX, FreeBSD MAXLOGNAME. */
25 20f7a94e 2022-10-07 op #ifndef LOGIN_NAME_MAX
26 20f7a94e 2022-10-07 op # if defined(MAXLOGNAME)
27 20f7a94e 2022-10-07 op # define LOGIN_NAME_MAX MAXLOGNAME
28 20f7a94e 2022-10-07 op # elif defined(_POSIX_LOGIN_NAME_MAX)
29 20f7a94e 2022-10-07 op # define LOGIN_NAME_MAX _POSIX_LOGIN_NAME_MAX
30 20f7a94e 2022-10-07 op # else
31 20f7a94e 2022-10-07 op # define LOGIN_NAME_MAX 32
32 20f7a94e 2022-10-07 op # endif
33 20f7a94e 2022-10-07 op #endif
34 20f7a94e 2022-10-07 op
35 fb1a36c0 2022-01-09 op /* TODO: make these customizable */
36 fb1a36c0 2022-01-09 op #define KD_CONF_FILE "/etc/kamid.conf"
37 fb1a36c0 2022-01-09 op #define KD_USER "_kamid"
38 fb1a36c0 2022-01-09 op #define KD_SOCKET "/var/run/kamid.sock"
39 fb1a36c0 2022-01-09 op
40 fb1a36c0 2022-01-09 op #define IMSG_DATA_SIZE(imsg) ((imsg).hdr.len - IMSG_HEADER_SIZE)
41 fb1a36c0 2022-01-09 op
42 fb1a36c0 2022-01-09 op enum imsg_type {
43 fb1a36c0 2022-01-09 op IMSG_NONE,
44 fb1a36c0 2022-01-09 op IMSG_CTL_LOG_VERBOSE,
45 fb1a36c0 2022-01-09 op IMSG_CTL_RELOAD,
46 5c69b561 2022-01-29 op IMSG_CTL_DEBUG,
47 5c69b561 2022-01-29 op IMSG_CTL_DEBUG_BACK, /* kd_debug_info */
48 5c69b561 2022-01-29 op IMSG_CTL_DEBUG_END,
49 fb1a36c0 2022-01-09 op IMSG_STARTUP,
50 fb1a36c0 2022-01-09 op IMSG_RECONF_CONF,
51 fb1a36c0 2022-01-09 op IMSG_RECONF_PKI,
52 fb1a36c0 2022-01-09 op IMSG_RECONF_PKI_CERT,
53 fb1a36c0 2022-01-09 op IMSG_RECONF_PKI_KEY,
54 fb1a36c0 2022-01-09 op IMSG_RECONF_LISTEN,
55 fb1a36c0 2022-01-09 op IMSG_RECONF_END,
56 1e84c7b7 2022-01-10 op IMSG_AUTH, /* kd_auth_proc */
57 1e84c7b7 2022-01-10 op IMSG_AUTH_TLS, /* kd_auth_req */
58 fb1a36c0 2022-01-09 op IMSG_CONN_GONE,
59 fb1a36c0 2022-01-09 op IMSG_BUF,
60 8b0a5062 2022-05-22 op IMSG_BUF_CONT,
61 fb1a36c0 2022-01-09 op IMSG_MSIZE,
62 fb1a36c0 2022-01-09 op IMSG_CLOSE,
63 fb1a36c0 2022-01-09 op };
64 fb1a36c0 2022-01-09 op
65 fb1a36c0 2022-01-09 op struct kd_options_conf {
66 fb1a36c0 2022-01-09 op /* ... */
67 fb1a36c0 2022-01-09 op };
68 fb1a36c0 2022-01-09 op
69 35c6cd0e 2022-01-10 op struct table;
70 fb1a36c0 2022-01-09 op
71 fb1a36c0 2022-01-09 op #define L_NONE 0x0
72 fb1a36c0 2022-01-09 op #define L_TLS 0x1
73 fb1a36c0 2022-01-09 op struct kd_listen_conf {
74 fb1a36c0 2022-01-09 op STAILQ_ENTRY(kd_listen_conf) entry;
75 fb1a36c0 2022-01-09 op uint32_t id;
76 fb1a36c0 2022-01-09 op uint32_t flags;
77 fb1a36c0 2022-01-09 op int fd;
78 fb1a36c0 2022-01-09 op char iface[LINE_MAX];
79 fb1a36c0 2022-01-09 op uint16_t port;
80 fb1a36c0 2022-01-09 op
81 fb1a36c0 2022-01-09 op /* certificate hash => (virtual) user */
82 fb1a36c0 2022-01-09 op struct table *auth_table;
83 fb1a36c0 2022-01-09 op
84 fb1a36c0 2022-01-09 op /* virtual user => local user */
85 fb1a36c0 2022-01-09 op struct table *virtual_table;
86 fb1a36c0 2022-01-09 op
87 fb1a36c0 2022-01-09 op /* (virtual) user => export directory */
88 fb1a36c0 2022-01-09 op struct table *userdata_table;
89 fb1a36c0 2022-01-09 op
90 fb1a36c0 2022-01-09 op char pki[LINE_MAX];
91 fb1a36c0 2022-01-09 op struct event ev;
92 fb1a36c0 2022-01-09 op struct tls *ctx;
93 fb1a36c0 2022-01-09 op };
94 fb1a36c0 2022-01-09 op
95 fb1a36c0 2022-01-09 op struct kd_pki_conf {
96 fb1a36c0 2022-01-09 op STAILQ_ENTRY(kd_pki_conf) entry;
97 fb1a36c0 2022-01-09 op char name[LINE_MAX];
98 fb1a36c0 2022-01-09 op uint8_t *cert;
99 fb1a36c0 2022-01-09 op size_t certlen;
100 fb1a36c0 2022-01-09 op uint8_t *key;
101 fb1a36c0 2022-01-09 op size_t keylen;
102 fb1a36c0 2022-01-09 op struct tls_config *tlsconf;
103 fb1a36c0 2022-01-09 op };
104 fb1a36c0 2022-01-09 op
105 fb1a36c0 2022-01-09 op struct kd_tables_conf {
106 fb1a36c0 2022-01-09 op STAILQ_ENTRY(kd_tables_conf) entry;
107 fb1a36c0 2022-01-09 op struct table *table;
108 fb1a36c0 2022-01-09 op };
109 fb1a36c0 2022-01-09 op
110 fb1a36c0 2022-01-09 op struct kd_conf {
111 fb1a36c0 2022-01-09 op struct kd_options_conf kd_options;
112 fb1a36c0 2022-01-09 op STAILQ_HEAD(kd_pki_conf_head, kd_pki_conf) pki_head;
113 fb1a36c0 2022-01-09 op STAILQ_HEAD(kd_tables_conf_head, kd_tables_conf) table_head;
114 fb1a36c0 2022-01-09 op STAILQ_HEAD(kd_listen_conf_head, kd_listen_conf) listen_head;
115 fb1a36c0 2022-01-09 op };
116 fb1a36c0 2022-01-09 op
117 fb1a36c0 2022-01-09 op struct kd_auth_req {
118 fb1a36c0 2022-01-09 op uint32_t listen_id;
119 fb1a36c0 2022-01-09 op char hash[128+1];
120 fb1a36c0 2022-01-09 op };
121 fb1a36c0 2022-01-09 op
122 1e84c7b7 2022-01-10 op struct kd_auth_proc {
123 1e84c7b7 2022-01-10 op char uname[LOGIN_NAME_MAX];
124 1e84c7b7 2022-01-10 op char dir[PATH_MAX];
125 1e84c7b7 2022-01-10 op };
126 1e84c7b7 2022-01-10 op
127 5c69b561 2022-01-29 op struct kd_debug_info {
128 5c69b561 2022-01-29 op uint32_t client_id;
129 5c69b561 2022-01-29 op uint32_t fid;
130 5c69b561 2022-01-29 op char path[NAME_MAX];
131 5c69b561 2022-01-29 op };
132 5c69b561 2022-01-29 op
133 fb1a36c0 2022-01-09 op /* kamid.c */
134 fb1a36c0 2022-01-09 op extern int verbose;
135 a80d2bca 2022-01-23 op int main_reload(void);
136 fb1a36c0 2022-01-09 op int main_imsg_compose_listener(int, int, uint32_t, const void *, uint16_t);
137 fb1a36c0 2022-01-09 op void merge_config(struct kd_conf *, struct kd_conf *);
138 fb1a36c0 2022-01-09 op
139 fb1a36c0 2022-01-09 op struct kd_conf *config_new_empty(void);
140 fb1a36c0 2022-01-09 op void config_clear(struct kd_conf *);
141 fb1a36c0 2022-01-09 op
142 fb1a36c0 2022-01-09 op /* parse.y */
143 fb1a36c0 2022-01-09 op struct kd_conf *parse_config(const char *);
144 fb1a36c0 2022-01-09 op int cmdline_symset(char *);
145 d5207cf4 2022-01-28 op void clear_config(struct kd_conf *);
146 fb1a36c0 2022-01-09 op
147 fb1a36c0 2022-01-09 op #endif