1 /* 2 * Copyright (c) 1995, 1996 3 * Bill Paul <wpaul@ctr.columbia.edu>. All rights reserved. 4 * 5 * Redistribution and use in source and binary forms, with or without 6 * modification, are permitted provided that the following conditions 7 * are met: 8 * 1. Redistributions of source code must retain the above copyright 9 * notice, this list of conditions and the following disclaimer. 10 * 2. Redistributions in binary form must reproduce the above copyright 11 * notice, this list of conditions and the following disclaimer in the 12 * documentation and/or other materials provided with the distribution. 13 * 3. All advertising materials mentioning features or use of this software 14 * must display the following acknowledgement: 15 * This product includes software developed by Bill Paul. 16 * 4. Neither the name of the author nor the names of any co-contributors 17 * may be used to endorse or promote products derived from this software 18 * without specific prior written permission. 19 * 20 * THIS SOFTWARE IS PROVIDED BY Bill Paul AND CONTRIBUTORS ``AS IS'' AND 21 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 22 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 23 * ARE DISCLAIMED. IN NO EVENT SHALL Bill Paul OR CONTRIBUTORS BE LIABLE 24 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 25 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 26 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 27 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 28 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 29 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 30 * SUCH DAMAGE. 31 * 32 * ypupdate server implementation 33 * 34 * Written by Bill Paul <wpaul@ctr.columbia.edu> 35 * Center for Telecommunications Research 36 * Columbia University, New York City 37 * 38 * $FreeBSD: src/usr.sbin/rpc.ypupdated/ypupdated_server.c,v 1.3.2.1 2002/02/15 00:46:58 des Exp $ 39 * $DragonFly: src/usr.sbin/rpc.ypupdated/ypupdated_server.c,v 1.3 2005/11/25 00:32:49 swildner Exp $ 40 */ 41 42 #include <stdio.h> 43 #include <rpc/rpc.h> 44 #include <rpc/auth_des.h> 45 #include <rpc/key_prot.h> 46 #include <sys/param.h> 47 #include <sys/cdefs.h> 48 #include <rpcsvc/yp.h> 49 #include "ypupdate_prot.h" 50 #include "ypupdated_extern.h" 51 #include "yp_extern.h" 52 #include "ypxfr_extern.h" 53 54 int children = 0; 55 int forked = 0; 56 57 /* 58 * Try to avoid spoofing: if a client chooses to use a very large 59 * window and then tries a bunch of randomly chosen encrypted timestamps, 60 * there's a chance he might stumble onto a valid combination. 61 * We therefore reject any RPCs with a window size larger than a preset 62 * value. 63 */ 64 #ifndef WINDOW 65 #define WINDOW (60*60) 66 #endif 67 68 static enum auth_stat 69 yp_checkauth(struct svc_req *svcreq) 70 { 71 struct authdes_cred *des_cred; 72 73 switch (svcreq->rq_cred.oa_flavor) { 74 case AUTH_DES: 75 des_cred = (struct authdes_cred *) svcreq->rq_clntcred; 76 if (des_cred->adc_fullname.window > WINDOW) { 77 yp_error("warning: client-specified window size \ 78 was too large -- possible spoof attempt"); 79 return(AUTH_BADCRED); 80 } 81 return(AUTH_OK); 82 break; 83 case AUTH_UNIX: 84 case AUTH_NONE: 85 yp_error("warning: client didn't use DES authentication"); 86 return(AUTH_TOOWEAK); 87 break; 88 default: 89 yp_error("client used unknown auth flavor"); 90 return(AUTH_REJECTEDCRED); 91 break; 92 } 93 } 94 95 unsigned int * 96 ypu_change_1_svc(struct ypupdate_args *args, struct svc_req *svcreq) 97 { 98 struct authdes_cred *des_cred; 99 static int res; 100 char *netname; 101 enum auth_stat astat; 102 103 res = 0; 104 105 astat = yp_checkauth(svcreq); 106 107 if (astat != AUTH_OK) { 108 svcerr_auth(svcreq->rq_xprt, astat); 109 return(&res); 110 } 111 112 des_cred = (struct authdes_cred *) svcreq->rq_clntcred; 113 netname = des_cred->adc_fullname.name; 114 115 res = localupdate(netname, "/etc/publickey", YPOP_CHANGE, 116 args->key.yp_buf_len, args->key.yp_buf_val, 117 args->datum.yp_buf_len, args->datum.yp_buf_val); 118 119 if (res) 120 return (&res); 121 122 res = ypmap_update(netname, args->mapname, YPOP_CHANGE, 123 args->key.yp_buf_len, args->key.yp_buf_val, 124 args->datum.yp_buf_len, args->datum.yp_buf_val); 125 126 return (&res); 127 } 128 129 unsigned int * 130 ypu_insert_1_svc(struct ypupdate_args *args, struct svc_req *svcreq) 131 { 132 struct authdes_cred *des_cred; 133 static int res; 134 char *netname; 135 enum auth_stat astat; 136 137 res = 0; 138 139 astat = yp_checkauth(svcreq); 140 141 if (astat != AUTH_OK) { 142 svcerr_auth(svcreq->rq_xprt, astat); 143 return(&res); 144 } 145 146 des_cred = (struct authdes_cred *) svcreq->rq_clntcred; 147 netname = des_cred->adc_fullname.name; 148 149 res = localupdate(netname, "/etc/publickey", YPOP_INSERT, 150 args->key.yp_buf_len, args->key.yp_buf_val, 151 args->datum.yp_buf_len, args->datum.yp_buf_val); 152 153 if (res) 154 return (&res); 155 156 res = ypmap_update(netname, args->mapname, YPOP_INSERT, 157 args->key.yp_buf_len, args->key.yp_buf_val, 158 args->datum.yp_buf_len, args->datum.yp_buf_val); 159 160 return (&res); 161 } 162 163 unsigned int * 164 ypu_delete_1_svc(struct ypdelete_args *args, struct svc_req *svcreq) 165 { 166 struct authdes_cred *des_cred; 167 static int res; 168 char *netname; 169 enum auth_stat astat; 170 171 res = 0; 172 173 astat = yp_checkauth(svcreq); 174 175 if (astat != AUTH_OK) { 176 svcerr_auth(svcreq->rq_xprt, astat); 177 return(&res); 178 } 179 180 des_cred = (struct authdes_cred *) svcreq->rq_clntcred; 181 netname = des_cred->adc_fullname.name; 182 183 res = localupdate(netname, "/etc/publickey", YPOP_DELETE, 184 args->key.yp_buf_len, args->key.yp_buf_val, 185 0, NULL); 186 187 if (res) 188 return (&res); 189 190 res = ypmap_update(netname, args->mapname, YPOP_DELETE, 191 args->key.yp_buf_len, args->key.yp_buf_val, 192 0, NULL); 193 194 return (&res); 195 } 196 197 unsigned int * 198 ypu_store_1_svc(struct ypupdate_args *args, struct svc_req *svcreq) 199 { 200 struct authdes_cred *des_cred; 201 static int res; 202 char *netname; 203 enum auth_stat astat; 204 205 res = 0; 206 207 astat = yp_checkauth(svcreq); 208 209 if (astat != AUTH_OK) { 210 svcerr_auth(svcreq->rq_xprt, astat); 211 return(&res); 212 } 213 214 des_cred = (struct authdes_cred *) svcreq->rq_clntcred; 215 netname = des_cred->adc_fullname.name; 216 217 res = localupdate(netname, "/etc/publickey", YPOP_STORE, 218 args->key.yp_buf_len, args->key.yp_buf_val, 219 args->datum.yp_buf_len, args->datum.yp_buf_val); 220 221 if (res) 222 return (&res); 223 224 res = ypmap_update(netname, args->mapname, YPOP_STORE, 225 args->key.yp_buf_len, args->key.yp_buf_val, 226 args->datum.yp_buf_len, args->datum.yp_buf_val); 227 228 return (&res); 229 } 230