XrdSecProtocolkrb5.cc File Reference

#include <unistd.h>
#include <cctype>
#include <cerrno>
#include <cstdlib>
#include <string>
#include <strings.h>
#include <cstdio>
#include <sys/param.h>
#include <pwd.h>
#include <sys/types.h>
#include <sys/stat.h>
#include "krb5.h"
#include "com_err.h"
#include "XrdVersion.hh"
#include "XrdNet/XrdNetAddrInfo.hh"
#include "XrdNet/XrdNetUtils.hh"
#include "XrdOuc/XrdOucErrInfo.hh"
#include "XrdOuc/XrdOucEnv.hh"
#include "XrdSys/XrdSysHeaders.hh"
#include "XrdSys/XrdSysPthread.hh"
#include "XrdSys/XrdSysPwd.hh"
#include "XrdOuc/XrdOucTokenizer.hh"
#include "XrdSec/XrdSecInterface.hh"

Include dependency graph for XrdSecProtocolkrb5.cc:

Go to the source code of this file.

Classes
class	XrdSecProtocolkrb5

Macros
#define	CLDBG(x)   if (client_options & XrdSecDEBUG) std::cerr <<"Seckrb5: " <<x <<std::endl;
#define	CLPRT(x)   std::cerr <<"Seckrb5: " <<x <<std::endl;
#define	krb_etxt(x)   (char *)error_message(x)
#define	XrdSecDEBUG   0x1000
#define	XrdSecEXPTKN   0x0002
#define	XrdSecINITTKN   0x0004
#define	XrdSecMAXPATHLEN   4096
#define	XrdSecNOIPCHK   0x0001
#define	XrdSecPROTOIDENT   "krb5"
#define	XrdSecPROTOIDLEN   sizeof(XrdSecPROTOIDENT)

Typedefs
typedef krb5_error_code	krb_rc

Functions
void	__eprintf (const char *string, const char *expression, unsigned int line, const char *filename)
char *	XrdSecProtocolkrb5Init (const char mode, const char *parms, XrdOucErrInfo *erp)
XrdSecProtocol *	XrdSecProtocolkrb5Object (const char mode, const char *hostname, XrdNetAddrInfo &endPoint, const char *parms, XrdOucErrInfo *erp)

Macro Definition Documentation

CLDBG

#define CLDBG

(

x

)

if (client_options & XrdSecDEBUG) std::cerr <<"Seckrb5: " <<x <<std::endl;

Definition at line 82 of file XrdSecProtocolkrb5.cc.

CLPRT

#define CLPRT

(

x

)

std::cerr <<"Seckrb5: " <<x <<std::endl;

Definition at line 83 of file XrdSecProtocolkrb5.cc.

krb_etxt

#define krb_etxt

(

x

)

(char *)error_message(x)

Definition at line 71 of file XrdSecProtocolkrb5.cc.

XrdSecDEBUG

#define XrdSecDEBUG   0x1000

Definition at line 78 of file XrdSecProtocolkrb5.cc.

XrdSecEXPTKN

#define XrdSecEXPTKN   0x0002

Definition at line 76 of file XrdSecProtocolkrb5.cc.

XrdSecINITTKN

#define XrdSecINITTKN   0x0004

Definition at line 77 of file XrdSecProtocolkrb5.cc.

XrdSecMAXPATHLEN

#define XrdSecMAXPATHLEN   4096

Definition at line 80 of file XrdSecProtocolkrb5.cc.

XrdSecNOIPCHK

#define XrdSecNOIPCHK   0x0001

Definition at line 75 of file XrdSecProtocolkrb5.cc.

XrdSecPROTOIDENT

#define XrdSecPROTOIDENT   "krb5"

Definition at line 73 of file XrdSecProtocolkrb5.cc.

XrdSecPROTOIDLEN

#define XrdSecPROTOIDLEN   sizeof(XrdSecPROTOIDENT)

Definition at line 74 of file XrdSecProtocolkrb5.cc.

Typedef Documentation

krb_rc

typedef krb5_error_code krb_rc

Definition at line 85 of file XrdSecProtocolkrb5.cc.

Function Documentation

__eprintf()

void __eprintf	(	const char *	string,
		const char *	expression,
		unsigned int	line,
		const char *	filename
	)

Definition at line 1069 of file XrdSecProtocolkrb5.cc.

      {
        fprintf (stderr, string, expression, line, filename);
        fflush (stderr);
        abort ();
      }

References fflush().

Here is the call graph for this function:

XrdSecProtocolkrb5Init()

char* XrdSecProtocolkrb5Init	(	const char	mode,
		const char *	parms,
		XrdOucErrInfo *	erp
	)

Definition at line 902 of file XrdSecProtocolkrb5.cc.

{
   char *op, *KPrincipal=0, *Keytab=0, *ExpFile=0;
   char parmbuff[1024];
   XrdOucTokenizer inParms(parmbuff);
   int options = XrdSecNOIPCHK;
   static bool serverinitialized = false;
 
// For client-side one-time initialization, we only need to set debug flag and
// initialize the kerberos context and cache location.
//
   if ((mode == 'c') || (serverinitialized))
      {
       int opts = 0;
       if (getenv("XrdSecDEBUG")) opts |= XrdSecDEBUG;
       if (getenv("XrdSecKRB5INITTKN")) opts |= XrdSecINITTKN;
       XrdSecProtocolkrb5::setClientOpts(opts);
       return (XrdSecProtocolkrb5::Init(erp) ? (char *)0 : (char *)"");
      }
 
   if (!serverinitialized) {
     serverinitialized = true;
   }
 
// Duplicate the parms
//
   if (parms) strlcpy(parmbuff, parms, sizeof(parmbuff));
      else {char *msg = (char *)"Seckrb5: Kerberos parameters not specified.";
            if (erp) erp->setErrInfo(EINVAL, msg);
               else std::cerr <<msg <<std::endl;
            return (char *)0;
           }
 
// Expected parameters: [<keytab>] [-ipchk] [-exptkn[:filetemplate]] <principal>
//
   if (inParms.GetLine())
      {if ((op = inParms.GetToken()) && *op == '/')
          {Keytab = op; op = inParms.GetToken();}
           if (op && !strcmp(op, "-ipchk"))
              {options &= ~XrdSecNOIPCHK;
               op = inParms.GetToken();
              }
           if (op && !strncmp(op, "-exptkn", 7))
              {options |= XrdSecEXPTKN;
               if (op[7] == ':') ExpFile = op+8;
               op = inParms.GetToken();
              }
           KPrincipal = strdup(op);
      }
 
    if (ExpFile)
       fprintf(stderr,"Template for exports: %s\n", ExpFile);
    else
       fprintf(stderr,"Template for exports not set\n");
 
// Now make sure that we have all the right info
//
   if (!KPrincipal)
      {char *msg = (char *)"Seckrb5: Kerberos principal not specified.";
       if (erp) erp->setErrInfo(EINVAL, msg);
          else std::cerr <<msg <<std::endl;
       return (char *)0;
      }
 
// Expand possible keywords in the principal
//
    int plen = strlen(KPrincipal);
    int lkey = strlen("<host>");
    char *phost = (char *) strstr(&KPrincipal[0], "<host>");
    if (phost)
       {char *hn = XrdNetUtils::MyHostName();
        if (hn)
           {int lhn = strlen(hn);
            if (lhn != lkey) {
              // Allocate, if needed
              int lnew = plen - lkey + lhn;
              if (lnew > plen) {
                 KPrincipal = (char *) realloc(KPrincipal, lnew+1);
                 KPrincipal[lnew] = 0;
                 phost = (char *) strstr(&KPrincipal[0], "<host>");
              }
              // Adjust the space
              int lm = plen - (int)(phost + lkey - &KPrincipal[0]); 
              memmove(phost + lhn, phost + lkey, lm);
            }
            // Copy the name
            memcpy(phost, hn, lhn);
            // Cleanup
            free(hn);
           }
       }
 
// Now initialize the server
//
   options |= XrdSecDEBUG;
   XrdSecProtocolkrb5::setExpFile(ExpFile);
   XrdSecProtocolkrb5::setOpts(options);
   if (!XrdSecProtocolkrb5::Init(erp, KPrincipal, Keytab))
      {free(KPrincipal);
       int lpars = strlen(XrdSecProtocolkrb5::getPrincipal());
       if (options & XrdSecEXPTKN)
          lpars += strlen(",fwd");
       char *params = (char *)malloc(lpars+1);
       if (params)
          {memset(params,0,lpars+1);
           strcpy(params,XrdSecProtocolkrb5::getPrincipal());
           if (options & XrdSecEXPTKN)
              strcat(params,",fwd");
           XrdSecProtocolkrb5::setParms(params);
           return params;
          }
       return (char *)0;
      }
 
// Failure
//
   free(KPrincipal);
   return (char *)0;
}

References XrdOucTokenizer::GetLine(), XrdSecProtocolkrb5::getPrincipal(), XrdOucTokenizer::GetToken(), XrdSecProtocolkrb5::Init(), XrdNetUtils::MyHostName(), opts, XrdSecProtocolkrb5::setClientOpts(), XrdOucErrInfo::setErrInfo(), XrdSecProtocolkrb5::setExpFile(), XrdSecProtocolkrb5::setOpts(), XrdSecProtocolkrb5::setParms(), strlcpy(), XrdSecDEBUG, XrdSecEXPTKN, XrdSecINITTKN, and XrdSecNOIPCHK.

Here is the call graph for this function:

XrdSecProtocolkrb5Object()

XrdSecProtocol* XrdSecProtocolkrb5Object	(	const char	mode,
		const char *	hostname,
		XrdNetAddrInfo &	endPoint,
		const char *	parms,
		XrdOucErrInfo *	erp
	)

Definition at line 1031 of file XrdSecProtocolkrb5.cc.

{
   XrdSecProtocolkrb5 *prot;
   char *KPrincipal=0;
 
// If this is a client call, then we need to get the target principal from the
// parms (which must be the first and only token). For servers, we use the
// context we established at initialization time.
//
   if (mode == 'c')
      {if ((KPrincipal = (char *)parms)) while(*KPrincipal == ' ') KPrincipal++;
       if (!KPrincipal || !*KPrincipal)
          {char *msg = (char *)"Seckrb5: Kerberos principal not specified.";
           if (erp) erp->setErrInfo(EINVAL, msg);
              else std::cerr <<msg <<std::endl;
           return (XrdSecProtocol *)0;
          }
      }
 
// Get a new protocol object
//
   if (!(prot = new XrdSecProtocolkrb5(KPrincipal, hostname, endPoint)))
      {char *msg = (char *)"Seckrb5: Insufficient memory for protocol.";
       if (erp) erp->setErrInfo(ENOMEM, msg);
          else std::cerr <<msg <<std::endl;
       return (XrdSecProtocol *)0;
      }
 
// All done
//
   return prot;
}

References XrdOucErrInfo::setErrInfo().

Here is the call graph for this function: