#include "kafs_locl.h"
#define AUTH_SUPERUSER "afs"
#define IsAsciiLower(c) ('a' <= (c) && (c) <= 'z')
#define ToAsciiUpper(c) ((c) - 'a' + 'A')
static void (*kafs_verbose)(void *, const char *);
static void *kafs_verbose_ctx;
void
_kafs_foldup(char *a, const char *b)
{
for (; *b; a++, b++)
if (IsAsciiLower(*b))
*a = ToAsciiUpper(*b);
else
*a = *b;
*a = '\0';
}
void
kafs_set_verbose(void (*f)(void *, const char *), void *ctx)
{
if (f) {
kafs_verbose = f;
kafs_verbose_ctx = ctx;
}
}
int
kafs_settoken_rxkad(const char *cell, struct ClearToken *ct,
void *ticket, size_t ticket_len)
{
struct ViceIoctl parms;
char buf[2048], *t;
int32_t sizeof_x;
t = buf;
sizeof_x = ticket_len;
memcpy(t, &sizeof_x, sizeof(sizeof_x));
t += sizeof(sizeof_x);
memcpy(t, ticket, sizeof_x);
t += sizeof_x;
sizeof_x = sizeof(*ct);
memcpy(t, &sizeof_x, sizeof(sizeof_x));
t += sizeof(sizeof_x);
memcpy(t, ct, sizeof_x);
t += sizeof_x;
sizeof_x = 0;
memcpy(t, &sizeof_x, sizeof(sizeof_x));
t += sizeof(sizeof_x);
sizeof_x = strlen(cell) + 1;
memcpy(t, cell, sizeof_x);
t += sizeof_x;
parms.in = buf;
parms.in_size = t - buf;
parms.out = 0;
parms.out_size = 0;
return k_pioctl(0, VIOCSETTOK, &parms, 0);
}
void
_kafs_fixup_viceid(struct ClearToken *ct, uid_t uid)
{
#define ODD(x) ((x) & 1)
if (uid != 0)
{
if (!ODD(ct->EndTimestamp - ct->BeginTimestamp))
ct->EndTimestamp--;
}
else
{
if (ODD(ct->EndTimestamp - ct->BeginTimestamp))
ct->EndTimestamp--;
}
}
static int
dns_find_cell(const char *cell, char *dbserver, size_t len)
{
struct rk_dns_reply *r;
int ok = -1;
r = rk_dns_lookup(cell, "afsdb");
if(r){
struct rk_resource_record *rr = r->head;
while(rr){
if(rr->type == rk_ns_t_afsdb && rr->u.afsdb->preference == 1){
strlcpy(dbserver,
rr->u.afsdb->domain,
len);
ok = 0;
break;
}
rr = rr->next;
}
rk_dns_free_data(r);
}
return ok;
}
static void
find_cells(const char *file, char ***cells, int *idx)
{
FILE *f;
char cell[64];
int i;
int ind = *idx;
f = fopen(file, "r");
if (f == NULL)
return;
while (fgets(cell, sizeof(cell), f)) {
char *t;
t = cell + strlen(cell);
for (; t >= cell; t--)
if (*t == '\n' || *t == '\t' || *t == ' ')
*t = 0;
if (cell[0] == '\0' || cell[0] == '#')
continue;
for(i = 0; i < ind; i++)
if(strcmp((*cells)[i], cell) == 0)
break;
if(i == ind){
char **tmp;
tmp = realloc(*cells, (ind + 1) * sizeof(**cells));
if (tmp == NULL)
break;
*cells = tmp;
(*cells)[ind] = strdup(cell);
if ((*cells)[ind] == NULL)
break;
++ind;
}
}
fclose(f);
*idx = ind;
}
static int
afslog_cells(struct kafs_data *data, char **cells, int max, uid_t uid,
const char *homedir)
{
int ret = 0;
int i;
for (i = 0; i < max; i++) {
int er = (*data->afslog_uid)(data, cells[i], 0, uid, homedir);
if (er)
ret = er;
}
return ret;
}
int
_kafs_afslog_all_local_cells(struct kafs_data *data,
uid_t uid, const char *homedir)
{
int ret;
char **cells = NULL;
int idx = 0;
if (homedir == NULL)
homedir = getenv("HOME");
if (homedir != NULL) {
char home[MaxPathLen];
snprintf(home, sizeof(home), "%s/.TheseCells", homedir);
find_cells(home, &cells, &idx);
}
find_cells(_PATH_THESECELLS, &cells, &idx);
find_cells(_PATH_THISCELL, &cells, &idx);
find_cells(_PATH_ARLA_THESECELLS, &cells, &idx);
find_cells(_PATH_ARLA_THISCELL, &cells, &idx);
find_cells(_PATH_OPENAFS_DEBIAN_THESECELLS, &cells, &idx);
find_cells(_PATH_OPENAFS_DEBIAN_THISCELL, &cells, &idx);
find_cells(_PATH_OPENAFS_MACOSX_THESECELLS, &cells, &idx);
find_cells(_PATH_OPENAFS_MACOSX_THISCELL, &cells, &idx);
find_cells(_PATH_ARLA_DEBIAN_THESECELLS, &cells, &idx);
find_cells(_PATH_ARLA_DEBIAN_THISCELL, &cells, &idx);
find_cells(_PATH_ARLA_OPENBSD_THESECELLS, &cells, &idx);
find_cells(_PATH_ARLA_OPENBSD_THISCELL, &cells, &idx);
ret = afslog_cells(data, cells, idx, uid, homedir);
while(idx > 0)
free(cells[--idx]);
free(cells);
return ret;
}
static int
file_find_cell(struct kafs_data *data,
const char *cell, char **realm, int exact)
{
FILE *F;
char buf[1024];
char *p;
int ret = -1;
if ((F = fopen(_PATH_CELLSERVDB, "r"))
|| (F = fopen(_PATH_ARLA_CELLSERVDB, "r"))
|| (F = fopen(_PATH_OPENAFS_DEBIAN_CELLSERVDB, "r"))
|| (F = fopen(_PATH_OPENAFS_MACOSX_CELLSERVDB, "r"))
|| (F = fopen(_PATH_ARLA_DEBIAN_CELLSERVDB, "r"))) {
while (fgets(buf, sizeof(buf), F)) {
int cmp;
if (buf[0] != '>')
continue;
p = buf;
strsep(&p, " \t\n#");
if (exact)
cmp = strcmp(buf + 1, cell);
else
cmp = strncmp(buf + 1, cell, strlen(cell));
if (cmp == 0) {
if (fgets(buf, sizeof(buf), F) == NULL)
break;
p = strchr(buf, '#');
if (p == NULL)
break;
p++;
if (buf[strlen(buf) - 1] == '\n')
buf[strlen(buf) - 1] = '\0';
*realm = (*data->get_realm)(data, p);
if (*realm && **realm != '\0')
ret = 0;
break;
}
}
fclose(F);
}
return ret;
}
int
_kafs_realm_of_cell(struct kafs_data *data,
const char *cell, char **realm)
{
char buf[1024];
int ret;
ret = file_find_cell(data, cell, realm, 1);
if (ret == 0)
return ret;
if (dns_find_cell(cell, buf, sizeof(buf)) == 0) {
*realm = (*data->get_realm)(data, buf);
if(*realm != NULL)
return 0;
}
return file_find_cell(data, cell, realm, 0);
}
static int
_kafs_try_get_cred(struct kafs_data *data, const char *user, const char *cell,
const char *realm, uid_t uid, struct kafs_token *kt)
{
int ret;
ret = (*data->get_cred)(data, user, cell, realm, uid, kt);
if (kafs_verbose) {
const char *estr = (*data->get_error)(data, ret);
char *str;
asprintf(&str, "%s tried afs%s%s@%s -> %s (%d)",
data->name, cell ? "/" : "",
cell ? cell : "", realm, estr ? estr : "unknown", ret);
(*kafs_verbose)(kafs_verbose_ctx, str);
if (estr)
(*data->free_error)(data, estr);
free(str);
}
return ret;
}
int
_kafs_get_cred(struct kafs_data *data,
const char *cell,
const char *realm_hint,
const char *realm,
uid_t uid,
struct kafs_token *kt)
{
int ret = -1;
char *vl_realm;
char CELL[64];
if (realm_hint) {
ret = _kafs_try_get_cred(data, AUTH_SUPERUSER,
cell, realm_hint, uid, kt);
if (ret == 0) return 0;
ret = _kafs_try_get_cred(data, AUTH_SUPERUSER,
NULL, realm_hint, uid, kt);
if (ret == 0) return 0;
}
_kafs_foldup(CELL, cell);
ret = _kafs_try_get_cred(data, AUTH_SUPERUSER,
cell, realm, uid, kt);
if (ret == 0) return 0;
if (strcmp(CELL, realm) == 0) {
ret = _kafs_try_get_cred(data, AUTH_SUPERUSER,
NULL, realm, uid, kt);
if (ret == 0) return 0;
}
ret = _kafs_try_get_cred(data, AUTH_SUPERUSER,
NULL, CELL, uid, kt);
if (ret == 0) return 0;
ret = _kafs_try_get_cred(data, AUTH_SUPERUSER,
cell, CELL, uid, kt);
if (ret == 0) return 0;
if (_kafs_realm_of_cell(data, cell, &vl_realm) == 0
&& strcmp(vl_realm, realm) != 0
&& strcmp(vl_realm, CELL) != 0) {
ret = _kafs_try_get_cred(data, AUTH_SUPERUSER,
cell, vl_realm, uid, kt);
if (ret)
ret = _kafs_try_get_cred(data, AUTH_SUPERUSER,
NULL, vl_realm, uid, kt);
free(vl_realm);
if (ret == 0) return 0;
}
return ret;
}