svc_auth_unix.c 4.4 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157
  1. /*
  2. * Sun RPC is a product of Sun Microsystems, Inc. and is provided for
  3. * unrestricted use provided that this legend is included on all tape
  4. * media and as a part of the software program in whole or part. Users
  5. * may copy or modify Sun RPC without charge, but are not authorized
  6. * to license or distribute it to anyone else except as part of a product or
  7. * program developed by the user.
  8. *
  9. * SUN RPC IS PROVIDED AS IS WITH NO WARRANTIES OF ANY KIND INCLUDING THE
  10. * WARRANTIES OF DESIGN, MERCHANTIBILITY AND FITNESS FOR A PARTICULAR
  11. * PURPOSE, OR ARISING FROM A COURSE OF DEALING, USAGE OR TRADE PRACTICE.
  12. *
  13. * Sun RPC is provided with no support and without any obligation on the
  14. * part of Sun Microsystems, Inc. to assist in its use, correction,
  15. * modification or enhancement.
  16. *
  17. * SUN MICROSYSTEMS, INC. SHALL HAVE NO LIABILITY WITH RESPECT TO THE
  18. * INFRINGEMENT OF COPYRIGHTS, TRADE SECRETS OR ANY PATENTS BY SUN RPC
  19. * OR ANY PART THEREOF.
  20. *
  21. * In no event will Sun Microsystems, Inc. be liable for any lost revenue
  22. * or profits or other special, indirect and consequential damages, even if
  23. * Sun has been advised of the possibility of such damages.
  24. *
  25. * Sun Microsystems, Inc.
  26. * 2550 Garcia Avenue
  27. * Mountain View, California 94043
  28. */
  29. /*
  30. * svc_auth_unix.c
  31. * Handles UNIX flavor authentication parameters on the service side of rpc.
  32. * There are two svc auth implementations here: AUTH_UNIX and AUTH_SHORT.
  33. * _svcauth_unix does full blown unix style uid,gid+gids auth,
  34. * _svcauth_short uses a shorthand auth to index into a cache of longhand auths.
  35. * Note: the shorthand has been gutted for efficiency.
  36. *
  37. * Copyright (C) 1984, Sun Microsystems, Inc.
  38. */
  39. #define xdrmem_create __xdrmem_create
  40. #define __FORCE_GLIBC
  41. #define _GNU_SOURCE
  42. #include <features.h>
  43. #include <stdio.h>
  44. #include <string.h>
  45. #include <rpc/rpc.h>
  46. #include <rpc/svc.h>
  47. /*
  48. * Unix longhand authenticator
  49. */
  50. enum auth_stat
  51. _svcauth_unix (struct svc_req *rqst, struct rpc_msg *msg)
  52. {
  53. enum auth_stat stat;
  54. XDR xdrs;
  55. struct authunix_parms *aup;
  56. int32_t *buf;
  57. struct area
  58. {
  59. struct authunix_parms area_aup;
  60. char area_machname[MAX_MACHINE_NAME + 1];
  61. gid_t area_gids[NGRPS];
  62. }
  63. *area;
  64. u_int auth_len;
  65. u_int str_len, gid_len;
  66. u_int i;
  67. area = (struct area *) rqst->rq_clntcred;
  68. aup = &area->area_aup;
  69. aup->aup_machname = area->area_machname;
  70. aup->aup_gids = area->area_gids;
  71. auth_len = (u_int) msg->rm_call.cb_cred.oa_length;
  72. xdrmem_create (&xdrs, msg->rm_call.cb_cred.oa_base, auth_len, XDR_DECODE);
  73. buf = XDR_INLINE (&xdrs, auth_len);
  74. if (buf != NULL)
  75. {
  76. aup->aup_time = IXDR_GET_LONG (buf);
  77. str_len = IXDR_GET_U_INT32 (buf);
  78. if (str_len > MAX_MACHINE_NAME)
  79. {
  80. stat = AUTH_BADCRED;
  81. goto done;
  82. }
  83. __memcpy (aup->aup_machname, (caddr_t) buf, (u_int) str_len);
  84. aup->aup_machname[str_len] = 0;
  85. str_len = RNDUP (str_len);
  86. buf = (int32_t *) ((char *) buf + str_len);
  87. aup->aup_uid = IXDR_GET_LONG (buf);
  88. aup->aup_gid = IXDR_GET_LONG (buf);
  89. gid_len = IXDR_GET_U_INT32 (buf);
  90. if (gid_len > NGRPS)
  91. {
  92. stat = AUTH_BADCRED;
  93. goto done;
  94. }
  95. aup->aup_len = gid_len;
  96. for (i = 0; i < gid_len; i++)
  97. {
  98. aup->aup_gids[i] = IXDR_GET_LONG (buf);
  99. }
  100. /*
  101. * five is the smallest unix credentials structure -
  102. * timestamp, hostname len (0), uid, gid, and gids len (0).
  103. */
  104. if ((5 + gid_len) * BYTES_PER_XDR_UNIT + str_len > auth_len)
  105. {
  106. (void) printf ("bad auth_len gid %d str %d auth %d\n",
  107. gid_len, str_len, auth_len);
  108. stat = AUTH_BADCRED;
  109. goto done;
  110. }
  111. }
  112. else if (!xdr_authunix_parms (&xdrs, aup))
  113. {
  114. xdrs.x_op = XDR_FREE;
  115. (void) xdr_authunix_parms (&xdrs, aup);
  116. stat = AUTH_BADCRED;
  117. goto done;
  118. }
  119. /* get the verifier */
  120. if ((u_int)msg->rm_call.cb_verf.oa_length)
  121. {
  122. rqst->rq_xprt->xp_verf.oa_flavor =
  123. msg->rm_call.cb_verf.oa_flavor;
  124. rqst->rq_xprt->xp_verf.oa_base =
  125. msg->rm_call.cb_verf.oa_base;
  126. rqst->rq_xprt->xp_verf.oa_length =
  127. msg->rm_call.cb_verf.oa_length;
  128. }
  129. else
  130. {
  131. rqst->rq_xprt->xp_verf.oa_flavor = AUTH_NULL;
  132. rqst->rq_xprt->xp_verf.oa_length = 0;
  133. }
  134. stat = AUTH_OK;
  135. done:
  136. XDR_DESTROY (&xdrs);
  137. return stat;
  138. }
  139. /*
  140. * Shorthand unix authenticator
  141. * Looks up longhand in a cache.
  142. */
  143. /*ARGSUSED */
  144. enum auth_stat
  145. _svcauth_short (struct svc_req *rqst, struct rpc_msg *msg)
  146. {
  147. return AUTH_REJECTEDCRED;
  148. }