1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
|
/* cvm/module_request.c - Request parsing code
* Copyright (C)2006 Bruce Guenter <bruce@untroubled.org>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation; either version 2 of the License, or
* (at your option) any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program; if not, write to the Free Software
* Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
*/
#include <stdlib.h>
#include <string.h>
#include "module.h"
#include "protocol.h"
const char* cvm_account_name;
const char* cvm_account_domain;
unsigned char cvm_module_inbuffer[BUFSIZE+1];
unsigned cvm_module_inbuflen;
const char* cvm_module_lookup_secret = 0;
str cvm_module_credentials[CVM_CRED_MAX+1];
void cvm_module_init_request(void)
{
/* Determine if the module is to operate in lookup mode, and if not
set the local credential values appropriately. */
cvm_module_lookup_secret = getenv("CVM_LOOKUP_SECRET");
memset(cvm_module_credentials, 0, sizeof cvm_module_credentials);
}
static int v1copy_advance(const char** ptr, char** buf, unsigned* len)
{
char* tmp;
if ((tmp = memchr(*buf, 0, *len)) == 0) return 0;
++tmp;
if (*len < (unsigned)(tmp - *buf)) return 0;
*ptr = *buf;
*len -= tmp - *buf;
*buf = tmp;
return 1;
}
static int parse_v1_input(void)
{
char* buf;
unsigned len;
const char* cred;
/* Prevent buffer run-off by ensuring there is at least one NUL byte */
cvm_module_inbuffer[BUFSIZE] = 0;
buf = cvm_module_inbuffer + 1;
len = cvm_module_inbuflen - 1;
/* Account name */
if (!v1copy_advance(&cred, &buf, &len)) return CVME_BAD_CLIDATA;
if (!str_copys(&cvm_module_credentials[CVM_CRED_ACCOUNT], cred))
return CVME_IO;
/* Domain name */
if (!v1copy_advance(&cred, &buf, &len)) return CVME_BAD_CLIDATA;
if (*cred != 0
&& !str_copys(&cvm_module_credentials[CVM_CRED_DOMAIN], cred))
return CVME_IO;
if (len > 1) {
/* Allow for only a single credential if one is present.
No existing CVM1 module could handle more than one. */
if (!v1copy_advance(&cred, &buf, &len))
return CVME_BAD_CLIDATA;
if (!str_copys((cvm_module_lookup_secret != 0)
? &cvm_module_credentials[CVM_CRED_SECRET]
: &cvm_module_credentials[CVM_CRED_PASSWORD], cred))
return CVME_IO;
}
if (len != 1) return CVME_BAD_CLIDATA;
return 0;
}
static int parse_v2_input(void)
{
unsigned i;
unsigned len;
unsigned type;
for (i = cvm_module_inbuffer[1] + 2;
i < cvm_module_inbuflen - 2;
i += len + 2) {
type = cvm_module_inbuffer[i];
len = cvm_module_inbuffer[i+1];
if (type <= CVM_CRED_MAX)
if (!str_copyb(&cvm_module_credentials[type],
cvm_module_inbuffer+i+2, len))
return CVME_IO;
}
if (i >= cvm_module_inbuflen
|| cvm_module_inbuffer[i] != 0)
return CVME_BAD_CLIDATA;
return 0;
}
static int parse_input(void)
{
if (cvm_module_inbuffer[0] == CVM2_PROTOCOL)
return parse_v2_input();
if (cvm_module_inbuffer[0] == CVM1_PROTOCOL)
return parse_v1_input();
return CVME_BAD_CLIDATA;
}
int cvm_module_handle_request(void)
{
int code;
unsigned i;
for (i = 0; i <= CVM_CRED_MAX; ++i)
cvm_module_credentials[i].len = 0;
cvm_module_fact_start();
if ((code = parse_input()) != 0) return code;
if (cvm_module_lookup_secret != 0 && *cvm_module_lookup_secret != 0) {
if (cvm_module_credentials[CVM_CRED_SECRET].len == 0
|| str_diffs(&cvm_module_credentials[CVM_CRED_SECRET],
cvm_module_lookup_secret) != 0)
return CVME_NOCRED;
}
if ((code = cvm_module_lookup()) != 0) return code;
if (cvm_module_lookup_secret == 0)
if ((code = cvm_module_authenticate()) != 0) return code;
if ((code = cvm_module_results()) != 0) return code;
cvm_module_fact_str(CVM_FACT_USERNAME, cvm_fact_username);
cvm_module_fact_uint(CVM_FACT_USERID, cvm_fact_userid);
cvm_module_fact_uint(CVM_FACT_GROUPID, cvm_fact_groupid);
if (cvm_fact_realname)
cvm_module_fact_str(CVM_FACT_REALNAME, cvm_fact_realname);
cvm_module_fact_str(CVM_FACT_DIRECTORY, cvm_fact_directory);
if (cvm_fact_shell)
cvm_module_fact_str(CVM_FACT_SHELL, cvm_fact_shell);
if (cvm_fact_groupname)
cvm_module_fact_str(CVM_FACT_GROUPNAME, cvm_fact_groupname);
if (cvm_fact_sys_username)
cvm_module_fact_str(CVM_FACT_SYS_USERNAME, cvm_fact_sys_username);
if (cvm_fact_sys_directory)
cvm_module_fact_str(CVM_FACT_SYS_DIRECTORY, cvm_fact_sys_directory);
if (cvm_fact_domain)
cvm_module_fact_str(CVM_FACT_DOMAIN, cvm_fact_domain);
if (cvm_fact_mailbox)
cvm_module_fact_str(CVM_FACT_MAILBOX, cvm_fact_mailbox);
return 0;
}
|
