libexec/ypxfr/ypxfr_main.c

   1 /*
   2  * Copyright (c) 1995
   3  *      Bill Paul <wpaul@ctr.columbia.edu>.  All rights reserved.
   4  *
   5  * Redistribution and use in source and binary forms, with or without
   6  * modification, are permitted provided that the following conditions
   7  * are met:
   8  * 1. Redistributions of source code must retain the above copyright
   9  *    notice, this list of conditions and the following disclaimer.
  10  * 2. Redistributions in binary form must reproduce the above copyright
  11  *    notice, this list of conditions and the following disclaimer in the
  12  *    documentation and/or other materials provided with the distribution.
  13  * 3. All advertising materials mentioning features or use of this software
  14  *    must display the following acknowledgement:
  15  *      This product includes software developed by Bill Paul.
  16  * 4. Neither the name of the author nor the names of any co-contributors
  17  *    may be used to endorse or promote products derived from this software
  18  *    without specific prior written permission.
  19  *
  20  * THIS SOFTWARE IS PROVIDED BY Bill Paul AND CONTRIBUTORS ``AS IS'' AND
  21  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  22  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  23  * ARE DISCLAIMED.  IN NO EVENT SHALL Bill Paul OR CONTRIBUTORS BE LIABLE
  24  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  25  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  26  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  27  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  28  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  29  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  30  * SUCH DAMAGE.
  31  *
  32  * $FreeBSD: src/libexec/ypxfr/ypxfr_main.c,v 1.14.2.1 2002/02/15 00:46:54 des Exp $
  33  */
  34
  35 #include <errno.h>
  36 #include <stdio.h>
  37 #include <stdlib.h>
  38 #include <string.h>
  39 #include <syslog.h>
  40 #include <unistd.h>
  41 #include <sys/types.h>
  42 #include <sys/param.h>
  43 #include <sys/socket.h>
  44 #include <netinet/in.h>
  45 #include <arpa/inet.h>
  46 #include <rpc/rpc.h>
  47 #include <rpc/clnt.h>
  48 #include <rpcsvc/yp.h>
  49 struct dom_binding {};
  50 #include <rpcsvc/ypclnt.h>
  51 #include <rpcsvc/ypxfrd.h>
  52 #include "ypxfr_extern.h"
  53
  54 const char *progname = "ypxfr";
  55 const char *yp_dir = _PATH_YP;
  56 int _rpcpmstart = 0;
  57 static int ypxfr_use_yplib = 0; /* Assume the worst. */
  58 static int ypxfr_clear = 1;
  59 static int ypxfr_prognum = 0;
  60 static struct sockaddr_in ypxfr_callback_addr;
  61 static struct yppushresp_xfr ypxfr_resp;
  62 static DB *dbp;
  63
  64 static void
  65 ypxfr_exit(ypxfrstat retval, char *temp)
  66 {
  67         CLIENT *clnt;
  68         int sock = RPC_ANYSOCK;
  69         struct timeval timeout;
  70
  71         /* Clean up no matter what happened previously. */
  72         if (temp != NULL) {
  73                 if (dbp != NULL)
  74                         (void)(dbp->close)(dbp);
  75                 if (unlink(temp) == -1) {
  76                         yp_error("failed to unlink %s",strerror(errno));
  77                 }
  78         }
  79
  80         if (ypxfr_prognum) {
  81                 timeout.tv_sec = 20;
  82                 timeout.tv_usec = 0;
  83
  84                 if ((clnt = clntudp_create(&ypxfr_callback_addr, ypxfr_prognum,
  85                                         1, timeout, &sock)) == NULL) {
  86                         yp_error("%s", clnt_spcreateerror("failed to "
  87                             "establish callback handle"));
  88                         exit(1);
  89                 }
  90
  91                 ypxfr_resp.status = retval;
  92
  93                 if (yppushproc_xfrresp_1(&ypxfr_resp, clnt) == NULL) {
  94                         yp_error("%s", clnt_sperror(clnt, "callback failed"));
  95                         clnt_destroy(clnt);
  96                         exit(1);
  97                 }
  98                 clnt_destroy(clnt);
  99         } else {
 100                 yp_error("Exiting: %s", ypxfrerr_string(retval));
 101         }
 102
 103         exit(0);
 104 }
 105
 106 static void
 107 usage(void)
 108 {
 109         if (_rpcpmstart) {
 110                 ypxfr_exit(YPXFR_BADARGS,NULL);
 111         } else {
 112                 fprintf(stderr, "%s\n%s\n%s\n",
 113         "usage: ypxfr [-f] [-c] [-d target domain] [-h source host]",
 114         "             [-s source domain] [-p path]",
 115         "             [-C taskid program-number ipaddr port] mapname");
 116                 exit(1);
 117         }
 118 }
 119
 120 static int
 121 ypxfr_foreach(int status, char *key, int keylen, char *val, int vallen,
 122     char *data __unused)
 123 {
 124         DBT dbkey, dbval;
 125
 126         if (status != YP_TRUE)
 127                 return (status);
 128
 129         /*
 130          * XXX Do not attempt to write zero-length keys or
 131          * data into a Berkeley DB hash database. It causes a
 132          * strange failure mode where sequential searches get
 133          * caught in an infinite loop.
 134          */
 135         if (keylen) {
 136                 dbkey.data = key;
 137                 dbkey.size = keylen;
 138         } else {
 139                 dbkey.data = "";
 140                 dbkey.size = 1;
 141         }
 142         if (vallen) {
 143                 dbval.data = val;
 144                 dbval.size = vallen;
 145         } else {
 146                 dbval.data = "";
 147                 dbval.size = 1;
 148         }
 149
 150         if (yp_put_record(dbp, &dbkey, &dbval, 0) != YP_TRUE)
 151                 return(yp_errno);
 152
 153         return (0);
 154 }
 155
 156 int
 157 main(int argc, char *argv[])
 158 {
 159         int ch;
 160         int ypxfr_force = 0;
 161         char *ypxfr_dest_domain = NULL;
 162         char *ypxfr_source_host = NULL;
 163         char *ypxfr_source_domain = NULL;
 164         char *ypxfr_local_domain = NULL;
 165         char *ypxfr_master = NULL;
 166         unsigned long ypxfr_order = -1, ypxfr_skew_check = -1;
 167         char *ypxfr_mapname = NULL;
 168         int ypxfr_args = 0;
 169         char ypxfr_temp_map[MAXPATHLEN + 2 + 3];
 170         char tempmap[MAXPATHLEN + 2];
 171         char buf[MAXPATHLEN + 2];
 172         DBT key, data;
 173         int remoteport;
 174         int interdom = 0;
 175         int secure = 0;
 176
 177         debug = 1;
 178
 179         if (!isatty(fileno(stderr))) {
 180                 openlog("ypxfr", LOG_PID, LOG_DAEMON);
 181                 _rpcpmstart = 1;
 182         }
 183
 184         if (argc < 2)
 185                 usage();
 186
 187         while ((ch = getopt(argc, argv, "fcd:h:s:p:C:")) != -1) {
 188                 int my_optind;
 189                 switch (ch) {
 190                 case 'f':
 191                         ypxfr_force++;
 192                         ypxfr_args++;
 193                         break;
 194                 case 'c':
 195                         ypxfr_clear = 0;
 196                         ypxfr_args++;
 197                         break;
 198                 case 'd':
 199                         ypxfr_dest_domain = optarg;
 200                         ypxfr_args += 2;
 201                         break;
 202                 case 'h':
 203                         ypxfr_source_host = optarg;
 204                         ypxfr_args += 2;
 205                         break;
 206                 case 's':
 207                         ypxfr_source_domain = optarg;
 208                         ypxfr_args += 2;
 209                         break;
 210                 case 'p':
 211                         yp_dir = optarg;
 212                         ypxfr_args += 2;
 213                         break;
 214                 case 'C':
 215                         /*
 216                          * Whoever decided that the -C flag should take
 217                          * four arguments is a twit.
 218                          */
 219                         my_optind = optind - 1;
 220                         if (argv[my_optind] == NULL || !strlen(argv[my_optind])) {
 221                                 yp_error("transaction ID not specified");
 222                                 usage();
 223                         }
 224                         ypxfr_resp.transid = atol(argv[my_optind]);
 225                         my_optind++;
 226                         if (argv[my_optind] == NULL || !strlen(argv[my_optind])) {
 227                                 yp_error("RPC program number not specified");
 228                                 usage();
 229                         }
 230                         ypxfr_prognum = atol(argv[my_optind]);
 231                         my_optind++;
 232                         if (argv[my_optind] == NULL || !strlen(argv[my_optind])) {
 233                                 yp_error("address not specified");
 234                                 usage();
 235                         }
 236                         if (!inet_aton(argv[my_optind], &ypxfr_callback_addr.sin_addr)) {
 237                                 yp_error("failed to convert '%s' to IP addr",
 238                                         argv[my_optind]);
 239                                 exit(1);
 240                         }
 241                         my_optind++;
 242                         if (argv[my_optind] == NULL || !strlen(argv[my_optind])) {
 243                                 yp_error("port not specified");
 244                                 usage();
 245                         }
 246                         ypxfr_callback_addr.sin_port = htons((u_short)atoi(argv[my_optind]));
 247                         ypxfr_args += 5;
 248                         break;
 249                 default:
 250                         usage();
 251                         break;
 252                 }
 253         }
 254
 255         ypxfr_mapname = argv[ypxfr_args + 1];
 256
 257         if (ypxfr_mapname == NULL) {
 258                 yp_error("no map name specified");
 259                 usage();
 260         }
 261
 262         /* Always the case. */
 263         ypxfr_callback_addr.sin_family = AF_INET;
 264
 265         /* Determine if local NIS client facilities are turned on. */
 266         if (!yp_get_default_domain(&ypxfr_local_domain) &&
 267             _yp_check(&ypxfr_local_domain))
 268                 ypxfr_use_yplib = 1;
 269
 270         /*
 271          * If no destination domain is specified, assume that the
 272          * local default domain is to be used and try to obtain it.
 273          * Fails if NIS client facilities are turned off.
 274          */
 275         if (ypxfr_dest_domain == NULL) {
 276                 if (ypxfr_use_yplib) {
 277                         yp_get_default_domain(&ypxfr_dest_domain);
 278                 } else {
 279                         yp_error("no destination domain specified and \
 280 the local domain name isn't set");
 281                         ypxfr_exit(YPXFR_BADARGS,NULL);
 282                 }
 283         }
 284
 285         /*
 286          * If a source domain is not specified, assume it to
 287          * be the same as the destination domain.
 288          */
 289         if (ypxfr_source_domain == NULL) {
 290                 ypxfr_source_domain = ypxfr_dest_domain;
 291         }
 292
 293         /*
 294          * If the source host is not specified, assume it to be the
 295          * master for the specified map. If local NIS client facilities
 296          * are turned on, we can figure this out using yp_master().
 297          * If not, we have to see if a local copy of the map exists
 298          * and extract its YP_MASTER_NAME record. If _that_ fails,
 299          * we are stuck and must ask the user for more information.
 300          */
 301         if (ypxfr_source_host == NULL) {
 302                 if (!ypxfr_use_yplib) {
 303                 /*
 304                  * Double whammy: NIS isn't turned on and the user
 305                  * didn't specify a source host.
 306                  */
 307                         char *dptr;
 308                         key.data = "YP_MASTER_NAME";
 309                         key.size = sizeof("YP_MASTER_NAME") - 1;
 310
 311                         if (yp_get_record(ypxfr_dest_domain, ypxfr_mapname,
 312                                          &key, &data, 1) != YP_TRUE) {
 313                                 yp_error("no source host specified");
 314                                 ypxfr_exit(YPXFR_BADARGS,NULL);
 315                         }
 316                         dptr = data.data;
 317                         dptr[data.size] = '\0';
 318                         ypxfr_master = ypxfr_source_host = strdup(dptr);
 319                 }
 320         } else {
 321                 if (ypxfr_use_yplib)
 322                         ypxfr_use_yplib = 0;
 323         }
 324
 325         if (ypxfr_master == NULL) {
 326                 if ((ypxfr_master = ypxfr_get_master(ypxfr_source_domain,
 327                                                  ypxfr_mapname,
 328                                                 ypxfr_source_host,
 329                                                 ypxfr_use_yplib)) == NULL) {
 330                         yp_error("failed to find master of %s in domain %s: %s",
 331                                   ypxfr_mapname, ypxfr_source_domain,
 332                                   ypxfrerr_string(yp_errno));
 333                         ypxfr_exit(YPXFR_MADDR,NULL);
 334                 }
 335         }
 336
 337         /*
 338          * If we got here and ypxfr_source_host is still undefined,
 339          * it means we had to resort to using yp_master() to find the
 340          * master server for the map. The source host and master should
 341          * be identical.
 342          */
 343         if (ypxfr_source_host == NULL)
 344                 ypxfr_source_host = ypxfr_master;
 345
 346         /*
 347          * Don't talk to ypservs on unprivileged ports.
 348          */
 349         remoteport = getrpcport(ypxfr_source_host, YPPROG, YPVERS, IPPROTO_UDP);
 350         if (remoteport >= IPPORT_RESERVED) {
 351                 yp_error("ypserv on %s not running on reserved port",
 352                                                 ypxfr_source_host);
 353                 ypxfr_exit(YPXFR_REFUSED, NULL);
 354         }
 355
 356         if ((ypxfr_order = ypxfr_get_order(ypxfr_source_domain,
 357                                              ypxfr_mapname,
 358                                              ypxfr_master, 0)) == 0) {
 359                 yp_error("failed to get order number of %s: %s",
 360                                 ypxfr_mapname, yp_errno == YP_TRUE ?
 361                                 "map has order 0" : ypxfrerr_string(yp_errno));
 362                 ypxfr_exit(YPXFR_YPERR,NULL);
 363         }
 364
 365         if (ypxfr_match(ypxfr_master, ypxfr_source_domain, ypxfr_mapname,
 366                         "YP_INTERDOMAIN", sizeof("YP_INTERDOMAIN") - 1))
 367                 interdom++;
 368
 369         if (ypxfr_match(ypxfr_master, ypxfr_source_domain, ypxfr_mapname,
 370                         "YP_SECURE", sizeof("YP_SECURE") - 1))
 371                 secure++;
 372
 373         key.data = "YP_LAST_MODIFIED";
 374         key.size = sizeof("YP_LAST_MODIFIED") - 1;
 375
 376         /* The order number is immaterial when the 'force' flag is set. */
 377
 378         if (!ypxfr_force) {
 379                 int ignore = 0;
 380                 if (yp_get_record(ypxfr_dest_domain,ypxfr_mapname,&key,&data,1) != YP_TRUE) {
 381                         switch (yp_errno) {
 382                         case YP_NOKEY:
 383                                 ypxfr_exit(YPXFR_FORCE,NULL);
 384                                 break;
 385                         case YP_NOMAP:
 386                                 /*
 387                                  * If the map doesn't exist, we're
 388                                  * creating it. Ignore the error.
 389                                  */
 390                                 ignore++;
 391                                 break;
 392                         case YP_BADDB:
 393                         default:
 394                                 ypxfr_exit(YPXFR_DBM,NULL);
 395                                 break;
 396                         }
 397                 }
 398                 if (!ignore && ypxfr_order <= (unsigned)atoi(data.data))
 399                         ypxfr_exit(YPXFR_AGE, NULL);
 400
 401         }
 402
 403         /* Construct a temporary map file name */
 404         snprintf(tempmap, sizeof(tempmap), "%s.%d",ypxfr_mapname, getpid());
 405         snprintf(ypxfr_temp_map, sizeof(ypxfr_temp_map), "%s/%s/%s", yp_dir,
 406                  ypxfr_dest_domain, tempmap);
 407
 408         if ((remoteport = getrpcport(ypxfr_source_host, YPXFRD_FREEBSD_PROG,
 409                                         YPXFRD_FREEBSD_VERS, IPPROTO_TCP))) {
 410
 411                 /* Don't talk to rpc.ypxfrds on unprovileged ports. */
 412                 if (remoteport >= IPPORT_RESERVED) {
 413                         yp_error("rpc.ypxfrd on %s not using privileged port",
 414                                                         ypxfr_source_host);
 415                         ypxfr_exit(YPXFR_REFUSED, NULL);
 416                 }
 417
 418                 /* Try to send using ypxfrd. If it fails, use old method. */
 419                 if (!ypxfrd_get_map(ypxfr_source_host, ypxfr_mapname,
 420                                         ypxfr_source_domain, ypxfr_temp_map))
 421                         goto leave;
 422         }
 423
 424         /* Open the temporary map read/write. */
 425         if ((dbp = yp_open_db_rw(ypxfr_dest_domain, tempmap, 0)) == NULL) {
 426                 yp_error("failed to open temporary map file");
 427                 ypxfr_exit(YPXFR_DBM,NULL);
 428         }
 429
 430         /*
 431          * Fill in the keys we already know, such as the order number,
 432          * master name, input file name (we actually make up a bogus
 433          * name for that) and output file name.
 434          */
 435         snprintf(buf, sizeof(buf), "%lu", ypxfr_order);
 436         data.data = buf;
 437         data.size = strlen(buf);
 438
 439         if (yp_put_record(dbp, &key, &data, 0) != YP_TRUE) {
 440                 yp_error("failed to write order number to database");
 441                 ypxfr_exit(YPXFR_DBM, ypxfr_temp_map);
 442         }
 443
 444         key.data = "YP_MASTER_NAME";
 445         key.size = sizeof("YP_MASTER_NAME") - 1;
 446         data.data = ypxfr_master;
 447         data.size = strlen(ypxfr_master);
 448
 449         if (yp_put_record(dbp, &key, &data, 0) != YP_TRUE) {
 450                 yp_error("failed to write master name to database");
 451                 ypxfr_exit(YPXFR_DBM, ypxfr_temp_map);
 452         }
 453
 454         key.data = "YP_DOMAIN_NAME";
 455         key.size = sizeof("YP_DOMAIN_NAME") - 1;
 456         data.data = ypxfr_dest_domain;
 457         data.size = strlen(ypxfr_dest_domain);
 458
 459         if (yp_put_record(dbp, &key, &data, 0) != YP_TRUE) {
 460                 yp_error("failed to write domain name to database");
 461                 ypxfr_exit(YPXFR_DBM, ypxfr_temp_map);
 462         }
 463
 464         snprintf (buf, sizeof(buf), "%s:%s", ypxfr_source_host, ypxfr_mapname);
 465
 466         key.data = "YP_INPUT_NAME";
 467         key.size = sizeof("YP_INPUT_NAME") - 1;
 468         data.data = &buf;
 469         data.size = strlen(buf);
 470
 471         if (yp_put_record(dbp, &key, &data, 0) != YP_TRUE) {
 472                 yp_error("failed to write input name to database");
 473                 ypxfr_exit(YPXFR_DBM, ypxfr_temp_map);
 474
 475         }
 476
 477         snprintf(buf, sizeof(buf), "%s/%s/%s", yp_dir, ypxfr_dest_domain,
 478                                                         ypxfr_mapname);
 479
 480         key.data = "YP_OUTPUT_NAME";
 481         key.size = sizeof("YP_OUTPUT_NAME") - 1;
 482         data.data = &buf;
 483         data.size = strlen(buf);
 484
 485         if (yp_put_record(dbp, &key, &data, 0) != YP_TRUE) {
 486                 yp_error("failed to write output name to database");
 487                 ypxfr_exit(YPXFR_DBM, ypxfr_temp_map);
 488         }
 489
 490         if (interdom) {
 491                 key.data = "YP_INTERDOMAIN";
 492                 key.size = sizeof("YP_INTERDOMAIN") - 1;
 493                 data.data = "";
 494                 data.size = 0;
 495
 496                 if (yp_put_record(dbp, &key, &data, 0) != YP_TRUE) {
 497                         yp_error("failed to add interdomain flag to database");
 498                         ypxfr_exit(YPXFR_DBM, ypxfr_temp_map);
 499                 }
 500         }
 501
 502         if (secure) {
 503                 key.data = "YP_SECURE";
 504                 key.size = sizeof("YP_SECURE") - 1;
 505                 data.data = "";
 506                 data.size = 0;
 507
 508                 if (yp_put_record(dbp, &key, &data, 0) != YP_TRUE) {
 509                         yp_error("failed to add secure flag to database");
 510                         ypxfr_exit(YPXFR_DBM, ypxfr_temp_map);
 511                 }
 512         }
 513
 514         /* Now suck over the contents of the map from the master. */
 515
 516         if (ypxfr_get_map(ypxfr_mapname,ypxfr_source_domain,
 517                           ypxfr_source_host, ypxfr_foreach)){
 518                 yp_error("failed to retrieve map from source host");
 519                 ypxfr_exit(YPXFR_YPERR, ypxfr_temp_map);
 520         }
 521
 522         (void)(dbp->close)(dbp);
 523         dbp = NULL; /* <- yes, it seems this is necessary. */
 524
 525 leave:
 526
 527         snprintf(buf, sizeof(buf), "%s/%s/%s", yp_dir, ypxfr_dest_domain,
 528                                                         ypxfr_mapname);
 529
 530         /* Peek at the order number again and check for skew. */
 531         if ((ypxfr_skew_check = ypxfr_get_order(ypxfr_source_domain,
 532                                              ypxfr_mapname,
 533                                              ypxfr_master, 0)) == 0) {
 534                 yp_error("failed to get order number of %s: %s",
 535                                 ypxfr_mapname, yp_errno == YP_TRUE ?
 536                                 "map has order 0" : ypxfrerr_string(yp_errno));
 537                 ypxfr_exit(YPXFR_YPERR, ypxfr_temp_map);
 538         }
 539
 540         if (ypxfr_order != ypxfr_skew_check)
 541                 ypxfr_exit(YPXFR_SKEW, ypxfr_temp_map);
 542
 543         /*
 544          * Send a YPPROC_CLEAR to the local ypserv.
 545          */
 546         if (ypxfr_clear) {
 547                 char in = 0;
 548                 char *out = NULL;
 549                 int stat;
 550                 if ((stat = callrpc("localhost",YPPROG,YPVERS,YPPROC_CLEAR,
 551                         (xdrproc_t)xdr_void, (void *)&in,
 552                         (xdrproc_t)xdr_void, (void *)out)) != RPC_SUCCESS) {
 553                         yp_error("failed to send 'clear' to local ypserv: %s",
 554                                  clnt_sperrno((enum clnt_stat) stat));
 555                         ypxfr_exit(YPXFR_CLEAR, ypxfr_temp_map);
 556                 }
 557         }
 558
 559         /*
 560          * Put the new map in place immediately. I'm not sure if the
 561          * kernel does an unlink() and rename() atomically in the event
 562          * that we move a new copy of a map over the top of an existing
 563          * one, but there's less chance of a race condition happening
 564          * than if we were to do the unlink() ourselves.
 565          */
 566         if (rename(ypxfr_temp_map, buf) == -1) {
 567                 yp_error("rename(%s,%s) failed: %s", ypxfr_temp_map, buf,
 568                                                         strerror(errno));
 569                 ypxfr_exit(YPXFR_FILE,NULL);
 570         }
 571
 572         ypxfr_exit(YPXFR_SUCC,NULL);
 573
 574         return(1);
 575 }