1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
|
/*
Copyright (c) 2008-2012 Red Hat, Inc. <http://www.redhat.com>
This file is part of GlusterFS.
This file is licensed to you under your choice of the GNU Lesser
General Public License, version 3 or any later version (LGPLv3 or
later), or the GNU General Public License, version 2 (GPLv2), in all
cases as published by the Free Software Foundation.
*/
#include "rpcsvc.h"
#include <glusterfs/list.h>
#include <glusterfs/dict.h>
#include "xdr-rpc.h"
int
auth_unix_request_init(rpcsvc_request_t *req, void *priv)
{
return 0;
}
int
auth_unix_authenticate(rpcsvc_request_t *req, void *priv)
{
int ret = RPCSVC_AUTH_REJECT;
struct authunix_parms aup;
char machname[MAX_MACHINE_NAME];
if (!req)
return ret;
req->auxgids = req->auxgidsmall;
ret = xdr_to_auth_unix_cred(req->cred.authdata, req->cred.datalen, &aup,
machname, req->auxgids);
if (ret == -1) {
gf_log("", GF_LOG_WARNING, "failed to decode unix credentials");
ret = RPCSVC_AUTH_REJECT;
goto err;
}
req->uid = aup.aup_uid;
req->gid = aup.aup_gid;
req->auxgidcount = aup.aup_len;
gf_log(GF_RPCSVC, GF_LOG_TRACE,
"Auth Info: machine name: %s, uid: %d"
", gid: %d",
machname, req->uid, req->gid);
ret = RPCSVC_AUTH_ACCEPT;
err:
return ret;
}
rpcsvc_auth_ops_t auth_unix_ops = {.transport_init = NULL,
.request_init = auth_unix_request_init,
.authenticate = auth_unix_authenticate};
rpcsvc_auth_t rpcsvc_auth_unix = {.authname = "AUTH_UNIX",
.authnum = AUTH_UNIX,
.authops = &auth_unix_ops,
.authprivate = NULL};
rpcsvc_auth_t *
rpcsvc_auth_unix_init(rpcsvc_t *svc, dict_t *options)
{
return &rpcsvc_auth_unix;
}
|
