1 be8b315d 2004-06-17 devnull #include <u.h>
  2 be8b315d 2004-06-17 devnull #include <libc.h>
  3 be8b315d 2004-06-17 devnull #include <fcall.h>
  4 be8b315d 2004-06-17 devnull #include <auth.h>
  5 648bb6f7 2005-02-08 devnull #include <9pclient.h>
  6 be8b315d 2004-06-17 devnull #include "authlocal.h"
  7 be8b315d 2004-06-17 devnull 
  8 be8b315d 2004-06-17 devnull enum { 
  9 be8b315d 2004-06-17 devnull 	ARgiveup = 100,
 10 be8b315d 2004-06-17 devnull };
 11 be8b315d 2004-06-17 devnull 
 12 be8b315d 2004-06-17 devnull static uchar*
 13 be8b315d 2004-06-17 devnull gstring(uchar *p, uchar *ep, char **s)
 14 be8b315d 2004-06-17 devnull {
 15 be8b315d 2004-06-17 devnull 	uint n;
 16 be8b315d 2004-06-17 devnull 
 17 be8b315d 2004-06-17 devnull 	if(p == nil)
 18 be8b315d 2004-06-17 devnull 		return nil;
 19 be8b315d 2004-06-17 devnull 	if(p+BIT16SZ > ep)
 20 be8b315d 2004-06-17 devnull 		return nil;
 21 be8b315d 2004-06-17 devnull 	n = GBIT16(p);
 22 be8b315d 2004-06-17 devnull 	p += BIT16SZ;
 23 be8b315d 2004-06-17 devnull 	if(p+n > ep)
 24 be8b315d 2004-06-17 devnull 		return nil;
 25 be8b315d 2004-06-17 devnull 	*s = malloc(n+1);
 26 be8b315d 2004-06-17 devnull 	memmove((*s), p, n);
 27 be8b315d 2004-06-17 devnull 	(*s)[n] = '\0';
 28 be8b315d 2004-06-17 devnull 	p += n;
 29 be8b315d 2004-06-17 devnull 	return p;
 30 be8b315d 2004-06-17 devnull }
 31 be8b315d 2004-06-17 devnull 
 32 be8b315d 2004-06-17 devnull static uchar*
 33 be8b315d 2004-06-17 devnull gcarray(uchar *p, uchar *ep, uchar **s, int *np)
 34 be8b315d 2004-06-17 devnull {
 35 be8b315d 2004-06-17 devnull 	uint n;
 36 be8b315d 2004-06-17 devnull 
 37 be8b315d 2004-06-17 devnull 	if(p == nil)
 38 be8b315d 2004-06-17 devnull 		return nil;
 39 be8b315d 2004-06-17 devnull 	if(p+BIT16SZ > ep)
 40 be8b315d 2004-06-17 devnull 		return nil;
 41 be8b315d 2004-06-17 devnull 	n = GBIT16(p);
 42 be8b315d 2004-06-17 devnull 	p += BIT16SZ;
 43 be8b315d 2004-06-17 devnull 	if(p+n > ep)
 44 be8b315d 2004-06-17 devnull 		return nil;
 45 be8b315d 2004-06-17 devnull 	*s = malloc(n);
 46 be8b315d 2004-06-17 devnull 	if(*s == nil)
 47 be8b315d 2004-06-17 devnull 		return nil;
 48 be8b315d 2004-06-17 devnull 	memmove((*s), p, n);
 49 be8b315d 2004-06-17 devnull 	*np = n;
 50 be8b315d 2004-06-17 devnull 	p += n;
 51 be8b315d 2004-06-17 devnull 	return p;
 52 be8b315d 2004-06-17 devnull }
 53 be8b315d 2004-06-17 devnull 
 54 be8b315d 2004-06-17 devnull void
 55 be8b315d 2004-06-17 devnull auth_freeAI(AuthInfo *ai)
 56 be8b315d 2004-06-17 devnull {
 57 be8b315d 2004-06-17 devnull 	if(ai == nil)
 58 be8b315d 2004-06-17 devnull 		return;
 59 be8b315d 2004-06-17 devnull 	free(ai->cuid);
 60 be8b315d 2004-06-17 devnull 	free(ai->suid);
 61 be8b315d 2004-06-17 devnull 	free(ai->cap);
 62 be8b315d 2004-06-17 devnull 	free(ai->secret);
 63 be8b315d 2004-06-17 devnull 	free(ai);
 64 be8b315d 2004-06-17 devnull }
 65 be8b315d 2004-06-17 devnull 
 66 be8b315d 2004-06-17 devnull static uchar*
 67 be8b315d 2004-06-17 devnull convM2AI(uchar *p, int n, AuthInfo **aip)
 68 be8b315d 2004-06-17 devnull {
 69 be8b315d 2004-06-17 devnull 	uchar *e = p+n;
 70 be8b315d 2004-06-17 devnull 	AuthInfo *ai;
 71 be8b315d 2004-06-17 devnull 
 72 be8b315d 2004-06-17 devnull 	ai = mallocz(sizeof(*ai), 1);
 73 be8b315d 2004-06-17 devnull 	if(ai == nil)
 74 be8b315d 2004-06-17 devnull 		return nil;
 75 be8b315d 2004-06-17 devnull 
 76 be8b315d 2004-06-17 devnull 	p = gstring(p, e, &ai->cuid);
 77 be8b315d 2004-06-17 devnull 	p = gstring(p, e, &ai->suid);
 78 be8b315d 2004-06-17 devnull 	p = gstring(p, e, &ai->cap);
 79 be8b315d 2004-06-17 devnull 	p = gcarray(p, e, &ai->secret, &ai->nsecret);
 80 be8b315d 2004-06-17 devnull 	if(p == nil)
 81 be8b315d 2004-06-17 devnull 		auth_freeAI(ai);
 82 be8b315d 2004-06-17 devnull 	else
 83 be8b315d 2004-06-17 devnull 		*aip = ai;
 84 be8b315d 2004-06-17 devnull 	return p;
 85 be8b315d 2004-06-17 devnull }
 86 be8b315d 2004-06-17 devnull 
 87 be8b315d 2004-06-17 devnull AuthInfo*
 88 be8b315d 2004-06-17 devnull auth_getinfo(AuthRpc *rpc)
 89 be8b315d 2004-06-17 devnull {
 90 be8b315d 2004-06-17 devnull 	AuthInfo *a;
 91 be8b315d 2004-06-17 devnull 
 92 be8b315d 2004-06-17 devnull 	if(auth_rpc(rpc, "authinfo", nil, 0) != ARok)
 93 be8b315d 2004-06-17 devnull 		return nil;
 94 be8b315d 2004-06-17 devnull 	if(convM2AI((uchar*)rpc->arg, rpc->narg, &a) == nil){
 95 be8b315d 2004-06-17 devnull 		werrstr("bad auth info from factotum");
 96 be8b315d 2004-06-17 devnull 		return nil;
 97 be8b315d 2004-06-17 devnull 	}
 98 be8b315d 2004-06-17 devnull 	return a;
 99 be8b315d 2004-06-17 devnull }
100 be8b315d 2004-06-17 devnull 
101 be8b315d 2004-06-17 devnull static int
102 be8b315d 2004-06-17 devnull dorpc(AuthRpc *rpc, char *verb, char *val, int len, AuthGetkey *getkey)
103 be8b315d 2004-06-17 devnull {
104 be8b315d 2004-06-17 devnull 	int ret;
105 be8b315d 2004-06-17 devnull 
106 be8b315d 2004-06-17 devnull 	for(;;){
107 be8b315d 2004-06-17 devnull 		if((ret = auth_rpc(rpc, verb, val, len)) != ARneedkey && ret != ARbadkey)
108 be8b315d 2004-06-17 devnull 			return ret;
109 be8b315d 2004-06-17 devnull 		if(getkey == nil)
110 be8b315d 2004-06-17 devnull 			return ARgiveup;	/* don't know how */
111 be8b315d 2004-06-17 devnull 		if((*getkey)(rpc->arg) < 0)
112 be8b315d 2004-06-17 devnull 			return ARgiveup;	/* user punted */
113 be8b315d 2004-06-17 devnull 	}
114 be8b315d 2004-06-17 devnull }
115 be8b315d 2004-06-17 devnull 
116 be8b315d 2004-06-17 devnull /*
117 be8b315d 2004-06-17 devnull  *  this just proxies what the factotum tells it to.
118 be8b315d 2004-06-17 devnull  */
119 be8b315d 2004-06-17 devnull AuthInfo*
120 be8b315d 2004-06-17 devnull fauth_proxy(int fd, AuthRpc *rpc, AuthGetkey *getkey, char *params)
121 be8b315d 2004-06-17 devnull {
122 be8b315d 2004-06-17 devnull 	char *buf;
123 be8b315d 2004-06-17 devnull 	int m, n, ret;
124 be8b315d 2004-06-17 devnull 	AuthInfo *a;
125 be8b315d 2004-06-17 devnull 	char oerr[ERRMAX];
126 be8b315d 2004-06-17 devnull 
127 be8b315d 2004-06-17 devnull 	rerrstr(oerr, sizeof oerr);
128 be8b315d 2004-06-17 devnull 	werrstr("UNKNOWN AUTH ERROR");
129 be8b315d 2004-06-17 devnull 
130 be8b315d 2004-06-17 devnull 	if(dorpc(rpc, "start", params, strlen(params), getkey) != ARok){
131 be8b315d 2004-06-17 devnull 		werrstr("fauth_proxy start: %r");
132 be8b315d 2004-06-17 devnull 		return nil;
133 be8b315d 2004-06-17 devnull 	}
134 be8b315d 2004-06-17 devnull 
135 be8b315d 2004-06-17 devnull 	buf = malloc(AuthRpcMax);
136 be8b315d 2004-06-17 devnull 	if(buf == nil)
137 be8b315d 2004-06-17 devnull 		return nil;
138 be8b315d 2004-06-17 devnull 	for(;;){
139 be8b315d 2004-06-17 devnull 		switch(dorpc(rpc, "read", nil, 0, getkey)){
140 be8b315d 2004-06-17 devnull 		case ARdone:
141 be8b315d 2004-06-17 devnull 			free(buf);
142 be8b315d 2004-06-17 devnull 			a = auth_getinfo(rpc);
143 be8b315d 2004-06-17 devnull 			errstr(oerr, sizeof oerr);	/* no error, restore whatever was there */
144 be8b315d 2004-06-17 devnull 			return a;
145 be8b315d 2004-06-17 devnull 		case ARok:
146 be8b315d 2004-06-17 devnull 			if(write(fd, rpc->arg, rpc->narg) != rpc->narg){
147 be8b315d 2004-06-17 devnull 				werrstr("auth_proxy write fd: %r");
148 be8b315d 2004-06-17 devnull 				goto Error;
149 be8b315d 2004-06-17 devnull 			}
150 be8b315d 2004-06-17 devnull 			break;
151 be8b315d 2004-06-17 devnull 		case ARphase:
152 be8b315d 2004-06-17 devnull 			n = 0;
153 be8b315d 2004-06-17 devnull 			memset(buf, 0, AuthRpcMax);
154 be8b315d 2004-06-17 devnull 			while((ret = dorpc(rpc, "write", buf, n, getkey)) == ARtoosmall){
155 be8b315d 2004-06-17 devnull 				if(atoi(rpc->arg) > AuthRpcMax)
156 be8b315d 2004-06-17 devnull 					break;
157 be8b315d 2004-06-17 devnull 				m = read(fd, buf+n, atoi(rpc->arg)-n);
158 be8b315d 2004-06-17 devnull 				if(m <= 0){
159 be8b315d 2004-06-17 devnull 					if(m == 0)
160 be8b315d 2004-06-17 devnull 						werrstr("auth_proxy short read: %s", buf);
161 be8b315d 2004-06-17 devnull 					goto Error;
162 be8b315d 2004-06-17 devnull 				}
163 be8b315d 2004-06-17 devnull 				n += m;
164 be8b315d 2004-06-17 devnull 			}
165 be8b315d 2004-06-17 devnull 			if(ret != ARok){
166 be8b315d 2004-06-17 devnull 				werrstr("auth_proxy rpc write: %s: %r", buf);
167 be8b315d 2004-06-17 devnull 				goto Error;
168 be8b315d 2004-06-17 devnull 			}
169 be8b315d 2004-06-17 devnull 			break;
170 be8b315d 2004-06-17 devnull 		default:
171 be8b315d 2004-06-17 devnull 			werrstr("auth_proxy rpc: %r");
172 be8b315d 2004-06-17 devnull 			goto Error;
173 be8b315d 2004-06-17 devnull 		}
174 be8b315d 2004-06-17 devnull 	}
175 be8b315d 2004-06-17 devnull Error:
176 be8b315d 2004-06-17 devnull 	free(buf);
177 be8b315d 2004-06-17 devnull 	return nil;
178 be8b315d 2004-06-17 devnull }
179 be8b315d 2004-06-17 devnull 
180 be8b315d 2004-06-17 devnull AuthInfo*
181 be8b315d 2004-06-17 devnull auth_proxy(int fd, AuthGetkey *getkey, char *fmt, ...)
182 be8b315d 2004-06-17 devnull {
183 be8b315d 2004-06-17 devnull 	char *p;
184 be8b315d 2004-06-17 devnull 	va_list arg;
185 be8b315d 2004-06-17 devnull 	AuthInfo *ai;
186 be8b315d 2004-06-17 devnull 	AuthRpc *rpc;
187 be8b315d 2004-06-17 devnull 
188 be8b315d 2004-06-17 devnull 	quotefmtinstall();	/* just in case */
189 be8b315d 2004-06-17 devnull 	va_start(arg, fmt);
190 be8b315d 2004-06-17 devnull 	p = vsmprint(fmt, arg);
191 be8b315d 2004-06-17 devnull 	va_end(arg);
192 be8b315d 2004-06-17 devnull 
193 648bb6f7 2005-02-08 devnull 	rpc = auth_allocrpc();
194 648bb6f7 2005-02-08 devnull 	if(rpc == nil){
195 be8b315d 2004-06-17 devnull 		free(p);
196 be8b315d 2004-06-17 devnull 		return nil;
197 be8b315d 2004-06-17 devnull 	}
198 be8b315d 2004-06-17 devnull 
199 648bb6f7 2005-02-08 devnull 	ai = fauth_proxy(fd, rpc, getkey, p);
200 648bb6f7 2005-02-08 devnull 	free(p);
201 648bb6f7 2005-02-08 devnull 	auth_freerpc(rpc);
202 648bb6f7 2005-02-08 devnull 	return ai;
203 648bb6f7 2005-02-08 devnull }
204 648bb6f7 2005-02-08 devnull 
205 648bb6f7 2005-02-08 devnull /*
206 648bb6f7 2005-02-08 devnull  *  this just proxies what the factotum tells it to.
207 648bb6f7 2005-02-08 devnull  */
208 648bb6f7 2005-02-08 devnull AuthInfo*
209 648bb6f7 2005-02-08 devnull fsfauth_proxy(CFid *fid, AuthRpc *rpc, AuthGetkey *getkey, char *params)
210 648bb6f7 2005-02-08 devnull {
211 648bb6f7 2005-02-08 devnull 	char *buf;
212 648bb6f7 2005-02-08 devnull 	int m, n, ret;
213 648bb6f7 2005-02-08 devnull 	AuthInfo *a;
214 648bb6f7 2005-02-08 devnull 	char oerr[ERRMAX];
215 648bb6f7 2005-02-08 devnull 
216 648bb6f7 2005-02-08 devnull 	rerrstr(oerr, sizeof oerr);
217 648bb6f7 2005-02-08 devnull 	werrstr("UNKNOWN AUTH ERROR");
218 648bb6f7 2005-02-08 devnull 
219 648bb6f7 2005-02-08 devnull 	if(dorpc(rpc, "start", params, strlen(params), getkey) != ARok){
220 648bb6f7 2005-02-08 devnull 		werrstr("fauth_proxy start: %r");
221 648bb6f7 2005-02-08 devnull 		return nil;
222 648bb6f7 2005-02-08 devnull 	}
223 648bb6f7 2005-02-08 devnull 
224 648bb6f7 2005-02-08 devnull 	buf = malloc(AuthRpcMax);
225 648bb6f7 2005-02-08 devnull 	if(buf == nil)
226 648bb6f7 2005-02-08 devnull 		return nil;
227 648bb6f7 2005-02-08 devnull 	for(;;){
228 648bb6f7 2005-02-08 devnull 		switch(dorpc(rpc, "read", nil, 0, getkey)){
229 648bb6f7 2005-02-08 devnull 		case ARdone:
230 648bb6f7 2005-02-08 devnull 			free(buf);
231 648bb6f7 2005-02-08 devnull 			a = auth_getinfo(rpc);
232 648bb6f7 2005-02-08 devnull 			errstr(oerr, sizeof oerr);	/* no error, restore whatever was there */
233 648bb6f7 2005-02-08 devnull 			return a;
234 648bb6f7 2005-02-08 devnull 		case ARok:
235 648bb6f7 2005-02-08 devnull 			if(fswrite(fid, rpc->arg, rpc->narg) != rpc->narg){
236 648bb6f7 2005-02-08 devnull 				werrstr("auth_proxy write fid: %r");
237 648bb6f7 2005-02-08 devnull 				goto Error;
238 648bb6f7 2005-02-08 devnull 			}
239 648bb6f7 2005-02-08 devnull 			break;
240 648bb6f7 2005-02-08 devnull 		case ARphase:
241 648bb6f7 2005-02-08 devnull 			n = 0;
242 648bb6f7 2005-02-08 devnull 			memset(buf, 0, AuthRpcMax);
243 648bb6f7 2005-02-08 devnull 			while((ret = dorpc(rpc, "write", buf, n, getkey)) == ARtoosmall){
244 648bb6f7 2005-02-08 devnull 				if(atoi(rpc->arg) > AuthRpcMax)
245 648bb6f7 2005-02-08 devnull 					break;
246 648bb6f7 2005-02-08 devnull 				m = fsread(fid, buf+n, atoi(rpc->arg)-n);
247 648bb6f7 2005-02-08 devnull 				if(m <= 0){
248 648bb6f7 2005-02-08 devnull 					if(m == 0)
249 648bb6f7 2005-02-08 devnull 						werrstr("auth_proxy short read: %s", buf);
250 648bb6f7 2005-02-08 devnull 					goto Error;
251 648bb6f7 2005-02-08 devnull 				}
252 648bb6f7 2005-02-08 devnull 				n += m;
253 648bb6f7 2005-02-08 devnull 			}
254 648bb6f7 2005-02-08 devnull 			if(ret != ARok){
255 648bb6f7 2005-02-08 devnull 				werrstr("auth_proxy rpc write: %s: %r", buf);
256 648bb6f7 2005-02-08 devnull 				goto Error;
257 648bb6f7 2005-02-08 devnull 			}
258 648bb6f7 2005-02-08 devnull 			break;
259 648bb6f7 2005-02-08 devnull 		default:
260 648bb6f7 2005-02-08 devnull 			werrstr("auth_proxy rpc: %r");
261 648bb6f7 2005-02-08 devnull 			goto Error;
262 648bb6f7 2005-02-08 devnull 		}
263 648bb6f7 2005-02-08 devnull 	}
264 648bb6f7 2005-02-08 devnull Error:
265 648bb6f7 2005-02-08 devnull 	free(buf);
266 648bb6f7 2005-02-08 devnull 	return nil;
267 648bb6f7 2005-02-08 devnull }
268 648bb6f7 2005-02-08 devnull 
269 648bb6f7 2005-02-08 devnull AuthInfo*
270 648bb6f7 2005-02-08 devnull fsauth_proxy(CFid *fid, AuthGetkey *getkey, char *fmt, ...)
271 648bb6f7 2005-02-08 devnull {
272 648bb6f7 2005-02-08 devnull 	char *p;
273 648bb6f7 2005-02-08 devnull 	va_list arg;
274 648bb6f7 2005-02-08 devnull 	AuthInfo *ai;
275 648bb6f7 2005-02-08 devnull 	AuthRpc *rpc;
276 648bb6f7 2005-02-08 devnull 
277 648bb6f7 2005-02-08 devnull 	quotefmtinstall();	/* just in case */
278 648bb6f7 2005-02-08 devnull 	va_start(arg, fmt);
279 648bb6f7 2005-02-08 devnull 	p = vsmprint(fmt, arg);
280 648bb6f7 2005-02-08 devnull 	va_end(arg);
281 648bb6f7 2005-02-08 devnull 
282 648bb6f7 2005-02-08 devnull 	rpc = auth_allocrpc();
283 be8b315d 2004-06-17 devnull 	if(rpc == nil){
284 be8b315d 2004-06-17 devnull 		free(p);
285 be8b315d 2004-06-17 devnull 		return nil;
286 be8b315d 2004-06-17 devnull 	}
287 be8b315d 2004-06-17 devnull 
288 648bb6f7 2005-02-08 devnull 	ai = fsfauth_proxy(fid, rpc, getkey, p);
289 be8b315d 2004-06-17 devnull 	free(p);
290 be8b315d 2004-06-17 devnull 	auth_freerpc(rpc);
291 be8b315d 2004-06-17 devnull 	return ai;
292 be8b315d 2004-06-17 devnull }
293 be8b315d 2004-06-17 devnull