xref: /dragonfly/libexec/ypxfr/ypxfr_main.c (revision 36a3d1d6)
1 /*
2  * Copyright (c) 1995
3  *	Bill Paul <wpaul@ctr.columbia.edu>.  All rights reserved.
4  *
5  * Redistribution and use in source and binary forms, with or without
6  * modification, are permitted provided that the following conditions
7  * are met:
8  * 1. Redistributions of source code must retain the above copyright
9  *    notice, this list of conditions and the following disclaimer.
10  * 2. Redistributions in binary form must reproduce the above copyright
11  *    notice, this list of conditions and the following disclaimer in the
12  *    documentation and/or other materials provided with the distribution.
13  * 3. All advertising materials mentioning features or use of this software
14  *    must display the following acknowledgement:
15  *	This product includes software developed by Bill Paul.
16  * 4. Neither the name of the author nor the names of any co-contributors
17  *    may be used to endorse or promote products derived from this software
18  *    without specific prior written permission.
19  *
20  * THIS SOFTWARE IS PROVIDED BY Bill Paul AND CONTRIBUTORS ``AS IS'' AND
21  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
22  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
23  * ARE DISCLAIMED.  IN NO EVENT SHALL Bill Paul OR CONTRIBUTORS BE LIABLE
24  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
25  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
26  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
27  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
28  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
29  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
30  * SUCH DAMAGE.
31  *
32  * $FreeBSD: src/libexec/ypxfr/ypxfr_main.c,v 1.14.2.1 2002/02/15 00:46:54 des Exp $
33  * $DragonFly: src/libexec/ypxfr/ypxfr_main.c,v 1.2 2003/06/17 04:27:08 dillon Exp $
34  */
35 
36 #include <errno.h>
37 #include <stdio.h>
38 #include <stdlib.h>
39 #include <string.h>
40 #include <syslog.h>
41 #include <unistd.h>
42 #include <sys/types.h>
43 #include <sys/param.h>
44 #include <sys/socket.h>
45 #include <netinet/in.h>
46 #include <arpa/inet.h>
47 #include <rpc/rpc.h>
48 #include <rpc/clnt.h>
49 #include <rpcsvc/yp.h>
50 struct dom_binding {};
51 #include <rpcsvc/ypclnt.h>
52 #include <rpcsvc/ypxfrd.h>
53 #include "ypxfr_extern.h"
54 
55 const char *progname = "ypxfr";
56 const char *yp_dir = _PATH_YP;
57 int _rpcpmstart = 0;
58 int ypxfr_use_yplib = 0; /* Assume the worst. */
59 int ypxfr_clear = 1;
60 int ypxfr_prognum = 0;
61 struct sockaddr_in ypxfr_callback_addr;
62 struct yppushresp_xfr ypxfr_resp;
63 DB *dbp;
64 
65 static void
66 ypxfr_exit(ypxfrstat retval, char *temp)
67 {
68 	CLIENT *clnt;
69 	int sock = RPC_ANYSOCK;
70 	struct timeval timeout;
71 
72 	/* Clean up no matter what happened previously. */
73 	if (temp != NULL) {
74 		if (dbp != NULL)
75 			(void)(dbp->close)(dbp);
76 		if (unlink(temp) == -1) {
77 			yp_error("failed to unlink %s",strerror(errno));
78 		}
79 	}
80 
81 	if (ypxfr_prognum) {
82 		timeout.tv_sec = 20;
83 		timeout.tv_usec = 0;
84 
85 		if ((clnt = clntudp_create(&ypxfr_callback_addr, ypxfr_prognum,
86 					1, timeout, &sock)) == NULL) {
87 			yp_error("%s", clnt_spcreateerror("failed to "
88 			    "establish callback handle"));
89 			exit(1);
90 		}
91 
92 		ypxfr_resp.status = retval;
93 
94 		if (yppushproc_xfrresp_1(&ypxfr_resp, clnt) == NULL) {
95 			yp_error("%s", clnt_sperror(clnt, "callback failed"));
96 			clnt_destroy(clnt);
97 			exit(1);
98 		}
99 		clnt_destroy(clnt);
100 	} else {
101 		yp_error("Exiting: %s", ypxfrerr_string(retval));
102 	}
103 
104 	exit(0);
105 }
106 
107 static void
108 usage(void)
109 {
110 	if (_rpcpmstart) {
111 		ypxfr_exit(YPXFR_BADARGS,NULL);
112 	} else {
113 		fprintf(stderr, "%s\n%s\n%s\n",
114 	"usage: ypxfr [-f] [-c] [-d target domain] [-h source host]",
115 	"             [-s source domain] [-p path]",
116 	"             [-C taskid program-number ipaddr port] mapname");
117 		exit(1);
118 	}
119 }
120 
121 static int
122 ypxfr_foreach(int status, char *key, int keylen, char *val, int vallen,
123     char *data __unused)
124 {
125 	DBT dbkey, dbval;
126 
127 	if (status != YP_TRUE)
128 		return (status);
129 
130 	/*
131 	 * XXX Do not attempt to write zero-length keys or
132 	 * data into a Berkeley DB hash database. It causes a
133 	 * strange failure mode where sequential searches get
134 	 * caught in an infinite loop.
135 	 */
136 	if (keylen) {
137 		dbkey.data = key;
138 		dbkey.size = keylen;
139 	} else {
140 		dbkey.data = "";
141 		dbkey.size = 1;
142 	}
143 	if (vallen) {
144 		dbval.data = val;
145 		dbval.size = vallen;
146 	} else {
147 		dbval.data = "";
148 		dbval.size = 1;
149 	}
150 
151 	if (yp_put_record(dbp, &dbkey, &dbval, 0) != YP_TRUE)
152 		return(yp_errno);
153 
154 	return (0);
155 }
156 
157 int
158 main(int argc, char *argv[])
159 {
160 	int ch;
161 	int ypxfr_force = 0;
162 	char *ypxfr_dest_domain = NULL;
163 	char *ypxfr_source_host = NULL;
164 	char *ypxfr_source_domain = NULL;
165 	char *ypxfr_local_domain = NULL;
166 	char *ypxfr_master = NULL;
167 	unsigned long ypxfr_order = -1, ypxfr_skew_check = -1;
168 	char *ypxfr_mapname = NULL;
169 	int ypxfr_args = 0;
170 	char ypxfr_temp_map[MAXPATHLEN + 2];
171 	char tempmap[MAXPATHLEN + 2];
172 	char buf[MAXPATHLEN + 2];
173 	DBT key, data;
174 	int remoteport;
175 	int interdom = 0;
176 	int secure = 0;
177 
178 	debug = 1;
179 
180 	if (!isatty(fileno(stderr))) {
181 		openlog("ypxfr", LOG_PID, LOG_DAEMON);
182 		_rpcpmstart = 1;
183 	}
184 
185 	if (argc < 2)
186 		usage();
187 
188 	while ((ch = getopt(argc, argv, "fcd:h:s:p:C:")) != -1) {
189 		int my_optind;
190 		switch (ch) {
191 		case 'f':
192 			ypxfr_force++;
193 			ypxfr_args++;
194 			break;
195 		case 'c':
196 			ypxfr_clear = 0;
197 			ypxfr_args++;
198 			break;
199 		case 'd':
200 			ypxfr_dest_domain = optarg;
201 			ypxfr_args += 2;
202 			break;
203 		case 'h':
204 			ypxfr_source_host = optarg;
205 			ypxfr_args += 2;
206 			break;
207 		case 's':
208 			ypxfr_source_domain = optarg;
209 			ypxfr_args += 2;
210 			break;
211 		case 'p':
212 			yp_dir = optarg;
213 			ypxfr_args += 2;
214 			break;
215 		case 'C':
216 			/*
217 			 * Whoever decided that the -C flag should take
218 			 * four arguments is a twit.
219 			 */
220 			my_optind = optind - 1;
221 			if (argv[my_optind] == NULL || !strlen(argv[my_optind])) {
222 				yp_error("transaction ID not specified");
223 				usage();
224 			}
225 			ypxfr_resp.transid = atol(argv[my_optind]);
226 			my_optind++;
227 			if (argv[my_optind] == NULL || !strlen(argv[my_optind])) {
228 				yp_error("RPC program number not specified");
229 				usage();
230 			}
231 			ypxfr_prognum = atol(argv[my_optind]);
232 			my_optind++;
233 			if (argv[my_optind] == NULL || !strlen(argv[my_optind])) {
234 				yp_error("address not specified");
235 				usage();
236 			}
237 			if (!inet_aton(argv[my_optind], &ypxfr_callback_addr.sin_addr)) {
238 				yp_error("failed to convert '%s' to IP addr",
239 					argv[my_optind]);
240 				exit(1);
241 			}
242 			my_optind++;
243 			if (argv[my_optind] == NULL || !strlen(argv[my_optind])) {
244 				yp_error("port not specified");
245 				usage();
246 			}
247 			ypxfr_callback_addr.sin_port = htons((u_short)atoi(argv[my_optind]));
248 			ypxfr_args += 5;
249 			break;
250 		default:
251 			usage();
252 			break;
253 		}
254 	}
255 
256 	ypxfr_mapname = argv[ypxfr_args + 1];
257 
258 	if (ypxfr_mapname == NULL) {
259 		yp_error("no map name specified");
260 		usage();
261 	}
262 
263 	/* Always the case. */
264 	ypxfr_callback_addr.sin_family = AF_INET;
265 
266 	/* Determine if local NIS client facilities are turned on. */
267 	if (!yp_get_default_domain(&ypxfr_local_domain) &&
268 	    _yp_check(&ypxfr_local_domain))
269 		ypxfr_use_yplib = 1;
270 
271 	/*
272 	 * If no destination domain is specified, assume that the
273 	 * local default domain is to be used and try to obtain it.
274 	 * Fails if NIS client facilities are turned off.
275 	 */
276 	if (ypxfr_dest_domain == NULL) {
277 		if (ypxfr_use_yplib) {
278 			yp_get_default_domain(&ypxfr_dest_domain);
279 		} else {
280 			yp_error("no destination domain specified and \
281 the local domain name isn't set");
282 			ypxfr_exit(YPXFR_BADARGS,NULL);
283 		}
284 	}
285 
286 	/*
287 	 * If a source domain is not specified, assume it to
288 	 * be the same as the destination domain.
289 	 */
290 	if (ypxfr_source_domain == NULL) {
291 		ypxfr_source_domain = ypxfr_dest_domain;
292 	}
293 
294 	/*
295 	 * If the source host is not specified, assume it to be the
296 	 * master for the specified map. If local NIS client facilities
297 	 * are turned on, we can figure this out using yp_master().
298 	 * If not, we have to see if a local copy of the map exists
299 	 * and extract its YP_MASTER_NAME record. If _that_ fails,
300 	 * we are stuck and must ask the user for more information.
301 	 */
302 	if (ypxfr_source_host == NULL) {
303 		if (!ypxfr_use_yplib) {
304 		/*
305 		 * Double whammy: NIS isn't turned on and the user
306 		 * didn't specify a source host.
307 		 */
308 			char *dptr;
309 			key.data = "YP_MASTER_NAME";
310 			key.size = sizeof("YP_MASTER_NAME") - 1;
311 
312 			if (yp_get_record(ypxfr_dest_domain, ypxfr_mapname,
313 					 &key, &data, 1) != YP_TRUE) {
314 				yp_error("no source host specified");
315 				ypxfr_exit(YPXFR_BADARGS,NULL);
316 			}
317 			dptr = data.data;
318 			dptr[data.size] = '\0';
319 			ypxfr_master = ypxfr_source_host = strdup(dptr);
320 		}
321 	} else {
322 		if (ypxfr_use_yplib)
323 			ypxfr_use_yplib = 0;
324 	}
325 
326 	if (ypxfr_master == NULL) {
327 		if ((ypxfr_master = ypxfr_get_master(ypxfr_source_domain,
328 					    	 ypxfr_mapname,
329 					     	ypxfr_source_host,
330 					     	ypxfr_use_yplib)) == NULL) {
331 			yp_error("failed to find master of %s in domain %s: %s",
332 				  ypxfr_mapname, ypxfr_source_domain,
333 				  ypxfrerr_string(yp_errno));
334 			ypxfr_exit(YPXFR_MADDR,NULL);
335 		}
336 	}
337 
338 	/*
339 	 * If we got here and ypxfr_source_host is still undefined,
340 	 * it means we had to resort to using yp_master() to find the
341 	 * master server for the map. The source host and master should
342 	 * be identical.
343 	 */
344 	if (ypxfr_source_host == NULL)
345 		ypxfr_source_host = ypxfr_master;
346 
347 	/*
348 	 * Don't talk to ypservs on unprivileged ports.
349 	 */
350 	remoteport = getrpcport(ypxfr_source_host, YPPROG, YPVERS, IPPROTO_UDP);
351 	if (remoteport >= IPPORT_RESERVED) {
352 		yp_error("ypserv on %s not running on reserved port",
353 						ypxfr_source_host);
354 		ypxfr_exit(YPXFR_REFUSED, NULL);
355 	}
356 
357 	if ((ypxfr_order = ypxfr_get_order(ypxfr_source_domain,
358 					     ypxfr_mapname,
359 					     ypxfr_master, 0)) == 0) {
360 		yp_error("failed to get order number of %s: %s",
361 				ypxfr_mapname, yp_errno == YPXFR_SUCC ?
362 				"map has order 0" : ypxfrerr_string(yp_errno));
363 		ypxfr_exit(YPXFR_YPERR,NULL);
364 	}
365 
366 	if (ypxfr_match(ypxfr_master, ypxfr_source_domain, ypxfr_mapname,
367 			"YP_INTERDOMAIN", sizeof("YP_INTERDOMAIN") - 1))
368 		interdom++;
369 
370 	if (ypxfr_match(ypxfr_master, ypxfr_source_domain, ypxfr_mapname,
371 			"YP_SECURE", sizeof("YP_SECURE") - 1))
372 		secure++;
373 
374 	key.data = "YP_LAST_MODIFIED";
375 	key.size = sizeof("YP_LAST_MODIFIED") - 1;
376 
377 	/* The order number is immaterial when the 'force' flag is set. */
378 
379 	if (!ypxfr_force) {
380 		int ignore = 0;
381 		if (yp_get_record(ypxfr_dest_domain,ypxfr_mapname,&key,&data,1) != YP_TRUE) {
382 			switch (yp_errno) {
383 			case YP_NOKEY:
384 				ypxfr_exit(YPXFR_FORCE,NULL);
385 				break;
386 			case YP_NOMAP:
387 				/*
388 				 * If the map doesn't exist, we're
389 				 * creating it. Ignore the error.
390 				 */
391 				ignore++;
392 				break;
393 			case YP_BADDB:
394 			default:
395 				ypxfr_exit(YPXFR_DBM,NULL);
396 				break;
397 			}
398 		}
399 		if (!ignore && ypxfr_order <= (unsigned)atoi(data.data))
400 			ypxfr_exit(YPXFR_AGE, NULL);
401 
402 	}
403 
404 	/* Construct a temporary map file name */
405 	snprintf(tempmap, sizeof(tempmap), "%s.%d",ypxfr_mapname, getpid());
406 	snprintf(ypxfr_temp_map, sizeof(ypxfr_temp_map), "%s/%s/%s", yp_dir,
407 		 ypxfr_dest_domain, tempmap);
408 
409 	if ((remoteport = getrpcport(ypxfr_source_host, YPXFRD_FREEBSD_PROG,
410 					YPXFRD_FREEBSD_VERS, IPPROTO_TCP))) {
411 
412 		/* Don't talk to rpc.ypxfrds on unprovileged ports. */
413 		if (remoteport >= IPPORT_RESERVED) {
414 			yp_error("rpc.ypxfrd on %s not using privileged port",
415 							ypxfr_source_host);
416 			ypxfr_exit(YPXFR_REFUSED, NULL);
417 		}
418 
419 		/* Try to send using ypxfrd. If it fails, use old method. */
420 		if (!ypxfrd_get_map(ypxfr_source_host, ypxfr_mapname,
421 					ypxfr_source_domain, ypxfr_temp_map))
422 			goto leave;
423 	}
424 
425 	/* Open the temporary map read/write. */
426 	if ((dbp = yp_open_db_rw(ypxfr_dest_domain, tempmap, 0)) == NULL) {
427 		yp_error("failed to open temporary map file");
428 		ypxfr_exit(YPXFR_DBM,NULL);
429 	}
430 
431 	/*
432 	 * Fill in the keys we already know, such as the order number,
433 	 * master name, input file name (we actually make up a bogus
434 	 * name for that) and output file name.
435 	 */
436 	snprintf(buf, sizeof(buf), "%lu", ypxfr_order);
437 	data.data = buf;
438 	data.size = strlen(buf);
439 
440 	if (yp_put_record(dbp, &key, &data, 0) != YP_TRUE) {
441 		yp_error("failed to write order number to database");
442 		ypxfr_exit(YPXFR_DBM, ypxfr_temp_map);
443 	}
444 
445 	key.data = "YP_MASTER_NAME";
446 	key.size = sizeof("YP_MASTER_NAME") - 1;
447 	data.data = ypxfr_master;
448 	data.size = strlen(ypxfr_master);
449 
450 	if (yp_put_record(dbp, &key, &data, 0) != YP_TRUE) {
451 		yp_error("failed to write master name to database");
452 		ypxfr_exit(YPXFR_DBM, ypxfr_temp_map);
453 	}
454 
455 	key.data = "YP_DOMAIN_NAME";
456 	key.size = sizeof("YP_DOMAIN_NAME") - 1;
457 	data.data = ypxfr_dest_domain;
458 	data.size = strlen(ypxfr_dest_domain);
459 
460 	if (yp_put_record(dbp, &key, &data, 0) != YP_TRUE) {
461 		yp_error("failed to write domain name to database");
462 		ypxfr_exit(YPXFR_DBM, ypxfr_temp_map);
463 	}
464 
465 	snprintf (buf, sizeof(buf), "%s:%s", ypxfr_source_host, ypxfr_mapname);
466 
467 	key.data = "YP_INPUT_NAME";
468 	key.size = sizeof("YP_INPUT_NAME") - 1;
469 	data.data = &buf;
470 	data.size = strlen(buf);
471 
472 	if (yp_put_record(dbp, &key, &data, 0) != YP_TRUE) {
473 		yp_error("failed to write input name to database");
474 		ypxfr_exit(YPXFR_DBM, ypxfr_temp_map);
475 
476 	}
477 
478 	snprintf(buf, sizeof(buf), "%s/%s/%s", yp_dir, ypxfr_dest_domain,
479 							ypxfr_mapname);
480 
481 	key.data = "YP_OUTPUT_NAME";
482 	key.size = sizeof("YP_OUTPUT_NAME") - 1;
483 	data.data = &buf;
484 	data.size = strlen(buf);
485 
486 	if (yp_put_record(dbp, &key, &data, 0) != YP_TRUE) {
487 		yp_error("failed to write output name to database");
488 		ypxfr_exit(YPXFR_DBM, ypxfr_temp_map);
489 	}
490 
491 	if (interdom) {
492 		key.data = "YP_INTERDOMAIN";
493 		key.size = sizeof("YP_INTERDOMAIN") - 1;
494 		data.data = "";
495 		data.size = 0;
496 
497 		if (yp_put_record(dbp, &key, &data, 0) != YP_TRUE) {
498 			yp_error("failed to add interdomain flag to database");
499 			ypxfr_exit(YPXFR_DBM, ypxfr_temp_map);
500 		}
501 	}
502 
503 	if (secure) {
504 		key.data = "YP_SECURE";
505 		key.size = sizeof("YP_SECURE") - 1;
506 		data.data = "";
507 		data.size = 0;
508 
509 		if (yp_put_record(dbp, &key, &data, 0) != YP_TRUE) {
510 			yp_error("failed to add secure flag to database");
511 			ypxfr_exit(YPXFR_DBM, ypxfr_temp_map);
512 		}
513 	}
514 
515 	/* Now suck over the contents of the map from the master. */
516 
517 	if (ypxfr_get_map(ypxfr_mapname,ypxfr_source_domain,
518 			  ypxfr_source_host, ypxfr_foreach)){
519 		yp_error("failed to retrieve map from source host");
520 		ypxfr_exit(YPXFR_YPERR, ypxfr_temp_map);
521 	}
522 
523 	(void)(dbp->close)(dbp);
524 	dbp = NULL; /* <- yes, it seems this is necessary. */
525 
526 leave:
527 
528 	snprintf(buf, sizeof(buf), "%s/%s/%s", yp_dir, ypxfr_dest_domain,
529 							ypxfr_mapname);
530 
531 	/* Peek at the order number again and check for skew. */
532 	if ((ypxfr_skew_check = ypxfr_get_order(ypxfr_source_domain,
533 					     ypxfr_mapname,
534 					     ypxfr_master, 0)) == 0) {
535 		yp_error("failed to get order number of %s: %s",
536 				ypxfr_mapname, yp_errno == YPXFR_SUCC ?
537 				"map has order 0" : ypxfrerr_string(yp_errno));
538 		ypxfr_exit(YPXFR_YPERR, ypxfr_temp_map);
539 	}
540 
541 	if (ypxfr_order != ypxfr_skew_check)
542 		ypxfr_exit(YPXFR_SKEW, ypxfr_temp_map);
543 
544 	/*
545 	 * Send a YPPROC_CLEAR to the local ypserv.
546 	 */
547 	if (ypxfr_clear) {
548 		char in = 0;
549 		char *out = NULL;
550 		int stat;
551 		if ((stat = callrpc("localhost",YPPROG,YPVERS,YPPROC_CLEAR,
552 			(xdrproc_t)xdr_void, (void *)&in,
553 			(xdrproc_t)xdr_void, (void *)out)) != RPC_SUCCESS) {
554 			yp_error("failed to send 'clear' to local ypserv: %s",
555 				 clnt_sperrno((enum clnt_stat) stat));
556 			ypxfr_exit(YPXFR_CLEAR, ypxfr_temp_map);
557 		}
558 	}
559 
560 	/*
561 	 * Put the new map in place immediately. I'm not sure if the
562 	 * kernel does an unlink() and rename() atomically in the event
563 	 * that we move a new copy of a map over the top of an existing
564 	 * one, but there's less chance of a race condition happening
565 	 * than if we were to do the unlink() ourselves.
566 	 */
567 	if (rename(ypxfr_temp_map, buf) == -1) {
568 		yp_error("rename(%s,%s) failed: %s", ypxfr_temp_map, buf,
569 							strerror(errno));
570 		ypxfr_exit(YPXFR_FILE,NULL);
571 	}
572 
573 	ypxfr_exit(YPXFR_SUCC,NULL);
574 
575 	return(1);
576 }
577