sunrpc/svc_authux.c

   1 /*
   2  * Sun RPC is a product of Sun Microsystems, Inc. and is provided for
   3  * unrestricted use provided that this legend is included on all tape
   4  * media and as a part of the software program in whole or part.  Users
   5  * may copy or modify Sun RPC without charge, but are not authorized
   6  * to license or distribute it to anyone else except as part of a product or
   7  * program developed by the user.
   8  *
   9  * SUN RPC IS PROVIDED AS IS WITH NO WARRANTIES OF ANY KIND INCLUDING THE
  10  * WARRANTIES OF DESIGN, MERCHANTIBILITY AND FITNESS FOR A PARTICULAR
  11  * PURPOSE, OR ARISING FROM A COURSE OF DEALING, USAGE OR TRADE PRACTICE.
  12  *
  13  * Sun RPC is provided with no support and without any obligation on the
  14  * part of Sun Microsystems, Inc. to assist in its use, correction,
  15  * modification or enhancement.
  16  *
  17  * SUN MICROSYSTEMS, INC. SHALL HAVE NO LIABILITY WITH RESPECT TO THE
  18  * INFRINGEMENT OF COPYRIGHTS, TRADE SECRETS OR ANY PATENTS BY SUN RPC
  19  * OR ANY PART THEREOF.
  20  *
  21  * In no event will Sun Microsystems, Inc. be liable for any lost revenue
  22  * or profits or other special, indirect and consequential damages, even if
  23  * Sun has been advised of the possibility of such damages.
  24  *
  25  * Sun Microsystems, Inc.
  26  * 2550 Garcia Avenue
  27  * Mountain View, California  94043
  28  */
  29
  30 /*
  31  * svc_auth_unix.c
  32  * Handles UNIX flavor authentication parameters on the service side of rpc.
  33  * There are two svc auth implementations here: AUTH_UNIX and AUTH_SHORT.
  34  * _svcauth_unix does full blown unix style uid,gid+gids auth,
  35  * _svcauth_short uses a shorthand auth to index into a cache of longhand auths.
  36  * Note: the shorthand has been gutted for efficiency.
  37  *
  38  * Copyright (C) 1984, Sun Microsystems, Inc.
  39  */
  40
  41 #include <stdio.h>
  42 #include <string.h>
  43 #include <rpc/rpc.h>
  44 #include <rpc/svc.h>
  45
  46 /*
  47  * Unix longhand authenticator
  48  */
  49 enum auth_stat
  50 _svcauth_unix (struct svc_req *rqst, struct rpc_msg *msg)
  51 {
  52   enum auth_stat stat;
  53   XDR xdrs;
  54   struct authunix_parms *aup;
  55   int32_t *buf;
  56   struct area
  57     {
  58       struct authunix_parms area_aup;
  59       char area_machname[MAX_MACHINE_NAME + 1];
  60       gid_t area_gids[NGRPS];
  61     }
  62    *area;
  63   u_int auth_len;
  64   u_int str_len, gid_len;
  65   u_int i;
  66
  67   area = (struct area *) rqst->rq_clntcred;
  68   aup = &area->area_aup;
  69   aup->aup_machname = area->area_machname;
  70   aup->aup_gids = area->area_gids;
  71   auth_len = (u_int) msg->rm_call.cb_cred.oa_length;
  72   xdrmem_create (&xdrs, msg->rm_call.cb_cred.oa_base, auth_len, XDR_DECODE);
  73   buf = XDR_INLINE (&xdrs, auth_len);
  74   if (buf != NULL)
  75     {
  76       aup->aup_time = IXDR_GET_LONG (buf);
  77       str_len = IXDR_GET_U_INT32 (buf);
  78       if (str_len > MAX_MACHINE_NAME)
  79         {
  80           stat = AUTH_BADCRED;
  81           goto done;
  82         }
  83       memcpy (aup->aup_machname, (caddr_t) buf, (u_int) str_len);
  84       aup->aup_machname[str_len] = 0;
  85       str_len = RNDUP (str_len);
  86       buf = (int32_t *) ((char *) buf + str_len);
  87       aup->aup_uid = IXDR_GET_LONG (buf);
  88       aup->aup_gid = IXDR_GET_LONG (buf);
  89       gid_len = IXDR_GET_U_INT32 (buf);
  90       if (gid_len > NGRPS)
  91         {
  92           stat = AUTH_BADCRED;
  93           goto done;
  94         }
  95       aup->aup_len = gid_len;
  96       for (i = 0; i < gid_len; i++)
  97         {
  98           aup->aup_gids[i] = IXDR_GET_LONG (buf);
  99         }
 100       /*
 101        * five is the smallest unix credentials structure -
 102        * timestamp, hostname len (0), uid, gid, and gids len (0).
 103        */
 104       if ((5 + gid_len) * BYTES_PER_XDR_UNIT + str_len > auth_len)
 105         {
 106           (void) printf ("bad auth_len gid %d str %d auth %d\n",
 107                          gid_len, str_len, auth_len);
 108           stat = AUTH_BADCRED;
 109           goto done;
 110         }
 111     }
 112   else if (!xdr_authunix_parms (&xdrs, aup))
 113     {
 114       xdrs.x_op = XDR_FREE;
 115       (void) xdr_authunix_parms (&xdrs, aup);
 116       stat = AUTH_BADCRED;
 117       goto done;
 118     }
 119
 120   /* get the verifier */
 121   if ((u_int)msg->rm_call.cb_verf.oa_length)
 122     {
 123       rqst->rq_xprt->xp_verf.oa_flavor =
 124         msg->rm_call.cb_verf.oa_flavor;
 125       rqst->rq_xprt->xp_verf.oa_base =
 126         msg->rm_call.cb_verf.oa_base;
 127       rqst->rq_xprt->xp_verf.oa_length =
 128         msg->rm_call.cb_verf.oa_length;
 129     }
 130   else
 131     {
 132       rqst->rq_xprt->xp_verf.oa_flavor = AUTH_NULL;
 133       rqst->rq_xprt->xp_verf.oa_length = 0;
 134     }
 135   stat = AUTH_OK;
 136 done:
 137   XDR_DESTROY (&xdrs);
 138   return stat;
 139 }
 140
 141
 142 /*
 143  * Shorthand unix authenticator
 144  * Looks up longhand in a cache.
 145  */
 146 /*ARGSUSED */
 147 enum auth_stat
 148 _svcauth_short (struct svc_req *rqst, struct rpc_msg *msg)
 149 {
 150   return AUTH_REJECTEDCRED;
 151 }