1 /*
2 * Copyright (c) 2009, Sun Microsystems, Inc.
3 * All rights reserved.
4 *
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that the following conditions are met:
7 * - Redistributions of source code must retain the above copyright notice,
8 * this list of conditions and the following disclaimer.
9 * - Redistributions in binary form must reproduce the above copyright notice,
10 * this list of conditions and the following disclaimer in the documentation
11 * and/or other materials provided with the distribution.
12 * - Neither the name of Sun Microsystems, Inc. nor the names of its
13 * contributors may be used to endorse or promote products derived
14 * from this software without specific prior written permission.
15 *
16 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
17 * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
18 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
19 * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE
20 * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
21 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
22 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
23 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
24 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
25 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
26 * POSSIBILITY OF SUCH DAMAGE.
27 */
28
29 /*
30 * svc_auth_unix.c
31 * Handles UNIX flavor authentication parameters on the service side of rpc.
32 * There are two svc auth implementations here: AUTH_UNIX and AUTH_SHORT.
33 * _svcauth_unix does full blown unix style uid,gid+gids auth,
34 * _svcauth_short uses a shorthand auth to index into a cache of longhand auths.
35 * Note: the shorthand has been gutted for efficiency.
36 *
37 * Copyright (C) 1984, Sun Microsystems, Inc.
38 */
39 #include <wintirpc.h>
40 //#include <pthread.h>
41 #include <assert.h>
42 #include <stdio.h>
43 #include <string.h>
44
45 #include <rpc/rpc.h>
46
47 /*
48 * Unix longhand authenticator
49 */
50 enum auth_stat
_svcauth_unix(rqst,msg)51 _svcauth_unix(rqst, msg)
52 struct svc_req *rqst;
53 struct rpc_msg *msg;
54 {
55 enum auth_stat stat;
56 XDR xdrs;
57 struct authunix_parms *aup;
58 int32_t *buf;
59 struct area {
60 struct authunix_parms area_aup;
61 char area_machname[MAX_MACHINE_NAME+1];
62 gid_t area_gids[NGRPS];
63 } *area;
64 u_int auth_len;
65 size_t str_len, gid_len;
66 u_int i;
67
68 assert(rqst != NULL);
69 assert(msg != NULL);
70
71 area = (struct area *) rqst->rq_clntcred;
72 aup = &area->area_aup;
73 aup->aup_machname = area->area_machname;
74 aup->aup_gids = area->area_gids;
75 auth_len = (u_int)msg->rm_call.cb_cred.oa_length;
76 xdrmem_create(&xdrs, msg->rm_call.cb_cred.oa_base, auth_len,XDR_DECODE);
77 buf = XDR_INLINE(&xdrs, auth_len);
78 if (buf != NULL) {
79 aup->aup_time = IXDR_GET_INT32(buf);
80 str_len = (size_t)IXDR_GET_U_INT32(buf);
81 if (str_len > MAX_MACHINE_NAME) {
82 stat = AUTH_BADCRED;
83 goto done;
84 }
85 memmove(aup->aup_machname, buf, str_len);
86 aup->aup_machname[str_len] = 0;
87 str_len = RNDUP(str_len);
88 buf += str_len / sizeof (int32_t);
89 aup->aup_uid = (int)IXDR_GET_INT32(buf);
90 aup->aup_gid = (int)IXDR_GET_INT32(buf);
91 gid_len = (size_t)IXDR_GET_U_INT32(buf);
92 if (gid_len > NGRPS) {
93 stat = AUTH_BADCRED;
94 goto done;
95 }
96 aup->aup_len = gid_len;
97 for (i = 0; i < gid_len; i++) {
98 aup->aup_gids[i] = (int)IXDR_GET_INT32(buf);
99 }
100 /*
101 * five is the smallest unix credentials structure -
102 * timestamp, hostname len (0), uid, gid, and gids len (0).
103 */
104 if ((5 + gid_len) * BYTES_PER_XDR_UNIT + str_len > auth_len) {
105 (void) printf("bad auth_len gid %ld str %ld auth %u\n",
106 (long)gid_len, (long)str_len, auth_len);
107 stat = AUTH_BADCRED;
108 goto done;
109 }
110 } else if (! xdr_authunix_parms(&xdrs, aup)) {
111 xdrs.x_op = XDR_FREE;
112 (void)xdr_authunix_parms(&xdrs, aup);
113 stat = AUTH_BADCRED;
114 goto done;
115 }
116
117 /* get the verifier */
118 if ((u_int)msg->rm_call.cb_verf.oa_length) {
119 rqst->rq_xprt->xp_verf.oa_flavor =
120 msg->rm_call.cb_verf.oa_flavor;
121 rqst->rq_xprt->xp_verf.oa_base =
122 msg->rm_call.cb_verf.oa_base;
123 rqst->rq_xprt->xp_verf.oa_length =
124 msg->rm_call.cb_verf.oa_length;
125 } else {
126 rqst->rq_xprt->xp_verf.oa_flavor = AUTH_NULL;
127 rqst->rq_xprt->xp_verf.oa_length = 0;
128 }
129 stat = AUTH_OK;
130 done:
131 XDR_DESTROY(&xdrs);
132 return (stat);
133 }
134
135
136 /*
137 * Shorthand unix authenticator
138 * Looks up longhand in a cache.
139 */
140 /*ARGSUSED*/
141 enum auth_stat
_svcauth_short(rqst,msg)142 _svcauth_short(rqst, msg)
143 struct svc_req *rqst;
144 struct rpc_msg *msg;
145 {
146 return (AUTH_REJECTEDCRED);
147 }
148