sunrpc/svc_authux.c

   1 /*
   2  * svc_auth_unix.c
   3  * Handles UNIX flavor authentication parameters on the service side of rpc.
   4  * There are two svc auth implementations here: AUTH_UNIX and AUTH_SHORT.
   5  * _svcauth_unix does full blown unix style uid,gid+gids auth,
   6  * _svcauth_short uses a shorthand auth to index into a cache of longhand auths.
   7  * Note: the shorthand has been gutted for efficiency.
   8  *
   9  * Copyright (c) 2010, Oracle America, Inc.
  10  *
  11  * Redistribution and use in source and binary forms, with or without
  12  * modification, are permitted provided that the following conditions are
  13  * met:
  14  *
  15  *     * Redistributions of source code must retain the above copyright
  16  *       notice, this list of conditions and the following disclaimer.
  17  *     * Redistributions in binary form must reproduce the above
  18  *       copyright notice, this list of conditions and the following
  19  *       disclaimer in the documentation and/or other materials
  20  *       provided with the distribution.
  21  *     * Neither the name of the "Oracle America, Inc." nor the names of its
  22  *       contributors may be used to endorse or promote products derived
  23  *       from this software without specific prior written permission.
  24  *
  25  *   THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
  26  *   "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
  27  *   LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
  28  *   FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
  29  *   COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
  30  *   INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  31  *   DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE
  32  *   GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
  33  *   INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
  34  *   WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
  35  *   NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
  36  *   OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  37  */
  38
  39 #include <stdio.h>
  40 #include <string.h>
  41 #include <rpc/rpc.h>
  42 #include <rpc/svc.h>
  43
  44 /*
  45  * Unix longhand authenticator
  46  */
  47 enum auth_stat
  48 _svcauth_unix (struct svc_req *rqst, struct rpc_msg *msg)
  49 {
  50   enum auth_stat stat;
  51   XDR xdrs;
  52   struct authunix_parms *aup;
  53   int32_t *buf;
  54   struct area
  55     {
  56       struct authunix_parms area_aup;
  57       char area_machname[MAX_MACHINE_NAME + 1];
  58       gid_t area_gids[NGRPS];
  59     }
  60    *area;
  61   u_int auth_len;
  62   u_int str_len, gid_len;
  63   u_int i;
  64
  65   area = (struct area *) rqst->rq_clntcred;
  66   aup = &area->area_aup;
  67   aup->aup_machname = area->area_machname;
  68   aup->aup_gids = area->area_gids;
  69   auth_len = (u_int) msg->rm_call.cb_cred.oa_length;
  70   INTUSE(xdrmem_create) (&xdrs, msg->rm_call.cb_cred.oa_base, auth_len,
  71                          XDR_DECODE);
  72   buf = XDR_INLINE (&xdrs, auth_len);
  73   if (buf != NULL)
  74     {
  75       aup->aup_time = IXDR_GET_LONG (buf);
  76       str_len = IXDR_GET_U_INT32 (buf);
  77       if (str_len > MAX_MACHINE_NAME)
  78         {
  79           stat = AUTH_BADCRED;
  80           goto done;
  81         }
  82       memcpy (aup->aup_machname, (caddr_t) buf, (u_int) str_len);
  83       aup->aup_machname[str_len] = 0;
  84       str_len = RNDUP (str_len);
  85       buf = (int32_t *) ((char *) buf + str_len);
  86       aup->aup_uid = IXDR_GET_LONG (buf);
  87       aup->aup_gid = IXDR_GET_LONG (buf);
  88       gid_len = IXDR_GET_U_INT32 (buf);
  89       if (gid_len > NGRPS)
  90         {
  91           stat = AUTH_BADCRED;
  92           goto done;
  93         }
  94       aup->aup_len = gid_len;
  95       for (i = 0; i < gid_len; i++)
  96         {
  97           aup->aup_gids[i] = IXDR_GET_LONG (buf);
  98         }
  99       /*
 100        * five is the smallest unix credentials structure -
 101        * timestamp, hostname len (0), uid, gid, and gids len (0).
 102        */
 103       if ((5 + gid_len) * BYTES_PER_XDR_UNIT + str_len > auth_len)
 104         {
 105           stat = AUTH_BADCRED;
 106           goto done;
 107         }
 108     }
 109   else if (!INTUSE(xdr_authunix_parms) (&xdrs, aup))
 110     {
 111       xdrs.x_op = XDR_FREE;
 112       (void) INTUSE(xdr_authunix_parms) (&xdrs, aup);
 113       stat = AUTH_BADCRED;
 114       goto done;
 115     }
 116
 117   /* get the verifier */
 118   if ((u_int)msg->rm_call.cb_verf.oa_length)
 119     {
 120       rqst->rq_xprt->xp_verf.oa_flavor =
 121         msg->rm_call.cb_verf.oa_flavor;
 122       rqst->rq_xprt->xp_verf.oa_base =
 123         msg->rm_call.cb_verf.oa_base;
 124       rqst->rq_xprt->xp_verf.oa_length =
 125         msg->rm_call.cb_verf.oa_length;
 126     }
 127   else
 128     {
 129       rqst->rq_xprt->xp_verf.oa_flavor = AUTH_NULL;
 130       rqst->rq_xprt->xp_verf.oa_length = 0;
 131     }
 132   stat = AUTH_OK;
 133 done:
 134   XDR_DESTROY (&xdrs);
 135   return stat;
 136 }
 137
 138
 139 /*
 140  * Shorthand unix authenticator
 141  * Looks up longhand in a cache.
 142  */
 143 /*ARGSUSED */
 144 enum auth_stat
 145 _svcauth_short (struct svc_req *rqst, struct rpc_msg *msg)
 146 {
 147   return AUTH_REJECTEDCRED;
 148 }