Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1 | /* |
| 2 | * Neil Brown <neilb@cse.unsw.edu.au> |
| 3 | * J. Bruce Fields <bfields@umich.edu> |
| 4 | * Andy Adamson <andros@umich.edu> |
| 5 | * Dug Song <dugsong@monkey.org> |
| 6 | * |
| 7 | * RPCSEC_GSS server authentication. |
| 8 | * This implements RPCSEC_GSS as defined in rfc2203 (rpcsec_gss) and rfc2078 |
| 9 | * (gssapi) |
| 10 | * |
| 11 | * The RPCSEC_GSS involves three stages: |
| 12 | * 1/ context creation |
| 13 | * 2/ data exchange |
| 14 | * 3/ context destruction |
| 15 | * |
| 16 | * Context creation is handled largely by upcalls to user-space. |
| 17 | * In particular, GSS_Accept_sec_context is handled by an upcall |
| 18 | * Data exchange is handled entirely within the kernel |
| 19 | * In particular, GSS_GetMIC, GSS_VerifyMIC, GSS_Seal, GSS_Unseal are in-kernel. |
| 20 | * Context destruction is handled in-kernel |
| 21 | * GSS_Delete_sec_context is in-kernel |
| 22 | * |
| 23 | * Context creation is initiated by a RPCSEC_GSS_INIT request arriving. |
| 24 | * The context handle and gss_token are used as a key into the rpcsec_init cache. |
| 25 | * The content of this cache includes some of the outputs of GSS_Accept_sec_context, |
| 26 | * being major_status, minor_status, context_handle, reply_token. |
| 27 | * These are sent back to the client. |
| 28 | * Sequence window management is handled by the kernel. The window size if currently |
| 29 | * a compile time constant. |
| 30 | * |
| 31 | * When user-space is happy that a context is established, it places an entry |
| 32 | * in the rpcsec_context cache. The key for this cache is the context_handle. |
| 33 | * The content includes: |
| 34 | * uid/gidlist - for determining access rights |
| 35 | * mechanism type |
| 36 | * mechanism specific information, such as a key |
| 37 | * |
| 38 | */ |
| 39 | |
| 40 | #include <linux/types.h> |
| 41 | #include <linux/module.h> |
| 42 | #include <linux/pagemap.h> |
| 43 | |
| 44 | #include <linux/sunrpc/auth_gss.h> |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 45 | #include <linux/sunrpc/gss_err.h> |
| 46 | #include <linux/sunrpc/svcauth.h> |
| 47 | #include <linux/sunrpc/svcauth_gss.h> |
| 48 | #include <linux/sunrpc/cache.h> |
| 49 | |
| 50 | #ifdef RPC_DEBUG |
| 51 | # define RPCDBG_FACILITY RPCDBG_AUTH |
| 52 | #endif |
| 53 | |
| 54 | /* The rpcsec_init cache is used for mapping RPCSEC_GSS_{,CONT_}INIT requests |
| 55 | * into replies. |
| 56 | * |
| 57 | * Key is context handle (\x if empty) and gss_token. |
| 58 | * Content is major_status minor_status (integers) context_handle, reply_token. |
| 59 | * |
| 60 | */ |
| 61 | |
| 62 | static int netobj_equal(struct xdr_netobj *a, struct xdr_netobj *b) |
| 63 | { |
| 64 | return a->len == b->len && 0 == memcmp(a->data, b->data, a->len); |
| 65 | } |
| 66 | |
| 67 | #define RSI_HASHBITS 6 |
| 68 | #define RSI_HASHMAX (1<<RSI_HASHBITS) |
| 69 | #define RSI_HASHMASK (RSI_HASHMAX-1) |
| 70 | |
| 71 | struct rsi { |
| 72 | struct cache_head h; |
| 73 | struct xdr_netobj in_handle, in_token; |
| 74 | struct xdr_netobj out_handle, out_token; |
| 75 | int major_status, minor_status; |
| 76 | }; |
| 77 | |
| 78 | static struct cache_head *rsi_table[RSI_HASHMAX]; |
| 79 | static struct cache_detail rsi_cache; |
NeilBrown | d4d11ea | 2006-03-27 01:15:04 -0800 | [diff] [blame] | 80 | static struct rsi *rsi_update(struct rsi *new, struct rsi *old); |
| 81 | static struct rsi *rsi_lookup(struct rsi *item); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 82 | |
| 83 | static void rsi_free(struct rsi *rsii) |
| 84 | { |
| 85 | kfree(rsii->in_handle.data); |
| 86 | kfree(rsii->in_token.data); |
| 87 | kfree(rsii->out_handle.data); |
| 88 | kfree(rsii->out_token.data); |
| 89 | } |
| 90 | |
NeilBrown | baab935 | 2006-03-27 01:15:09 -0800 | [diff] [blame] | 91 | static void rsi_put(struct kref *ref) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 92 | { |
NeilBrown | baab935 | 2006-03-27 01:15:09 -0800 | [diff] [blame] | 93 | struct rsi *rsii = container_of(ref, struct rsi, h.ref); |
| 94 | rsi_free(rsii); |
| 95 | kfree(rsii); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 96 | } |
| 97 | |
| 98 | static inline int rsi_hash(struct rsi *item) |
| 99 | { |
| 100 | return hash_mem(item->in_handle.data, item->in_handle.len, RSI_HASHBITS) |
| 101 | ^ hash_mem(item->in_token.data, item->in_token.len, RSI_HASHBITS); |
| 102 | } |
| 103 | |
NeilBrown | d4d11ea | 2006-03-27 01:15:04 -0800 | [diff] [blame] | 104 | static int rsi_match(struct cache_head *a, struct cache_head *b) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 105 | { |
NeilBrown | d4d11ea | 2006-03-27 01:15:04 -0800 | [diff] [blame] | 106 | struct rsi *item = container_of(a, struct rsi, h); |
| 107 | struct rsi *tmp = container_of(b, struct rsi, h); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 108 | return netobj_equal(&item->in_handle, &tmp->in_handle) |
| 109 | && netobj_equal(&item->in_token, &tmp->in_token); |
| 110 | } |
| 111 | |
| 112 | static int dup_to_netobj(struct xdr_netobj *dst, char *src, int len) |
| 113 | { |
| 114 | dst->len = len; |
Arnaldo Carvalho de Melo | e69062b | 2006-11-21 01:21:34 -0200 | [diff] [blame] | 115 | dst->data = (len ? kmemdup(src, len, GFP_KERNEL) : NULL); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 116 | if (len && !dst->data) |
| 117 | return -ENOMEM; |
| 118 | return 0; |
| 119 | } |
| 120 | |
| 121 | static inline int dup_netobj(struct xdr_netobj *dst, struct xdr_netobj *src) |
| 122 | { |
| 123 | return dup_to_netobj(dst, src->data, src->len); |
| 124 | } |
| 125 | |
NeilBrown | d4d11ea | 2006-03-27 01:15:04 -0800 | [diff] [blame] | 126 | static void rsi_init(struct cache_head *cnew, struct cache_head *citem) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 127 | { |
NeilBrown | d4d11ea | 2006-03-27 01:15:04 -0800 | [diff] [blame] | 128 | struct rsi *new = container_of(cnew, struct rsi, h); |
| 129 | struct rsi *item = container_of(citem, struct rsi, h); |
| 130 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 131 | new->out_handle.data = NULL; |
| 132 | new->out_handle.len = 0; |
| 133 | new->out_token.data = NULL; |
| 134 | new->out_token.len = 0; |
| 135 | new->in_handle.len = item->in_handle.len; |
| 136 | item->in_handle.len = 0; |
| 137 | new->in_token.len = item->in_token.len; |
| 138 | item->in_token.len = 0; |
| 139 | new->in_handle.data = item->in_handle.data; |
| 140 | item->in_handle.data = NULL; |
| 141 | new->in_token.data = item->in_token.data; |
| 142 | item->in_token.data = NULL; |
| 143 | } |
| 144 | |
NeilBrown | d4d11ea | 2006-03-27 01:15:04 -0800 | [diff] [blame] | 145 | static void update_rsi(struct cache_head *cnew, struct cache_head *citem) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 146 | { |
NeilBrown | d4d11ea | 2006-03-27 01:15:04 -0800 | [diff] [blame] | 147 | struct rsi *new = container_of(cnew, struct rsi, h); |
| 148 | struct rsi *item = container_of(citem, struct rsi, h); |
| 149 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 150 | BUG_ON(new->out_handle.data || new->out_token.data); |
| 151 | new->out_handle.len = item->out_handle.len; |
| 152 | item->out_handle.len = 0; |
| 153 | new->out_token.len = item->out_token.len; |
| 154 | item->out_token.len = 0; |
| 155 | new->out_handle.data = item->out_handle.data; |
| 156 | item->out_handle.data = NULL; |
| 157 | new->out_token.data = item->out_token.data; |
| 158 | item->out_token.data = NULL; |
| 159 | |
| 160 | new->major_status = item->major_status; |
| 161 | new->minor_status = item->minor_status; |
| 162 | } |
| 163 | |
NeilBrown | d4d11ea | 2006-03-27 01:15:04 -0800 | [diff] [blame] | 164 | static struct cache_head *rsi_alloc(void) |
| 165 | { |
| 166 | struct rsi *rsii = kmalloc(sizeof(*rsii), GFP_KERNEL); |
| 167 | if (rsii) |
| 168 | return &rsii->h; |
| 169 | else |
| 170 | return NULL; |
| 171 | } |
| 172 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 173 | static void rsi_request(struct cache_detail *cd, |
YOSHIFUJI Hideaki | cca5172 | 2007-02-09 15:38:13 -0800 | [diff] [blame] | 174 | struct cache_head *h, |
| 175 | char **bpp, int *blen) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 176 | { |
| 177 | struct rsi *rsii = container_of(h, struct rsi, h); |
| 178 | |
| 179 | qword_addhex(bpp, blen, rsii->in_handle.data, rsii->in_handle.len); |
| 180 | qword_addhex(bpp, blen, rsii->in_token.data, rsii->in_token.len); |
| 181 | (*bpp)[-1] = '\n'; |
| 182 | } |
| 183 | |
| 184 | |
| 185 | static int rsi_parse(struct cache_detail *cd, |
YOSHIFUJI Hideaki | cca5172 | 2007-02-09 15:38:13 -0800 | [diff] [blame] | 186 | char *mesg, int mlen) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 187 | { |
| 188 | /* context token expiry major minor context token */ |
| 189 | char *buf = mesg; |
| 190 | char *ep; |
| 191 | int len; |
| 192 | struct rsi rsii, *rsip = NULL; |
| 193 | time_t expiry; |
| 194 | int status = -EINVAL; |
| 195 | |
| 196 | memset(&rsii, 0, sizeof(rsii)); |
| 197 | /* handle */ |
| 198 | len = qword_get(&mesg, buf, mlen); |
| 199 | if (len < 0) |
| 200 | goto out; |
| 201 | status = -ENOMEM; |
| 202 | if (dup_to_netobj(&rsii.in_handle, buf, len)) |
| 203 | goto out; |
| 204 | |
| 205 | /* token */ |
| 206 | len = qword_get(&mesg, buf, mlen); |
| 207 | status = -EINVAL; |
| 208 | if (len < 0) |
| 209 | goto out; |
| 210 | status = -ENOMEM; |
| 211 | if (dup_to_netobj(&rsii.in_token, buf, len)) |
| 212 | goto out; |
| 213 | |
NeilBrown | d4d11ea | 2006-03-27 01:15:04 -0800 | [diff] [blame] | 214 | rsip = rsi_lookup(&rsii); |
| 215 | if (!rsip) |
| 216 | goto out; |
| 217 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 218 | rsii.h.flags = 0; |
| 219 | /* expiry */ |
| 220 | expiry = get_expiry(&mesg); |
| 221 | status = -EINVAL; |
| 222 | if (expiry == 0) |
| 223 | goto out; |
| 224 | |
| 225 | /* major/minor */ |
| 226 | len = qword_get(&mesg, buf, mlen); |
J. Bruce Fields | b39c18f | 2008-01-06 21:32:37 -0500 | [diff] [blame] | 227 | if (len <= 0) |
| 228 | goto out; |
| 229 | rsii.major_status = simple_strtoul(buf, &ep, 10); |
| 230 | if (*ep) |
| 231 | goto out; |
| 232 | len = qword_get(&mesg, buf, mlen); |
| 233 | if (len <= 0) |
| 234 | goto out; |
| 235 | rsii.minor_status = simple_strtoul(buf, &ep, 10); |
| 236 | if (*ep) |
| 237 | goto out; |
| 238 | |
| 239 | /* out_handle */ |
| 240 | len = qword_get(&mesg, buf, mlen); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 241 | if (len < 0) |
| 242 | goto out; |
J. Bruce Fields | b39c18f | 2008-01-06 21:32:37 -0500 | [diff] [blame] | 243 | status = -ENOMEM; |
| 244 | if (dup_to_netobj(&rsii.out_handle, buf, len)) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 245 | goto out; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 246 | |
J. Bruce Fields | b39c18f | 2008-01-06 21:32:37 -0500 | [diff] [blame] | 247 | /* out_token */ |
| 248 | len = qword_get(&mesg, buf, mlen); |
| 249 | status = -EINVAL; |
| 250 | if (len < 0) |
| 251 | goto out; |
| 252 | status = -ENOMEM; |
| 253 | if (dup_to_netobj(&rsii.out_token, buf, len)) |
| 254 | goto out; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 255 | rsii.h.expiry_time = expiry; |
NeilBrown | d4d11ea | 2006-03-27 01:15:04 -0800 | [diff] [blame] | 256 | rsip = rsi_update(&rsii, rsip); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 257 | status = 0; |
| 258 | out: |
| 259 | rsi_free(&rsii); |
| 260 | if (rsip) |
NeilBrown | baab935 | 2006-03-27 01:15:09 -0800 | [diff] [blame] | 261 | cache_put(&rsip->h, &rsi_cache); |
NeilBrown | d4d11ea | 2006-03-27 01:15:04 -0800 | [diff] [blame] | 262 | else |
| 263 | status = -ENOMEM; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 264 | return status; |
| 265 | } |
| 266 | |
| 267 | static struct cache_detail rsi_cache = { |
Bruce Allan | f35279d | 2005-09-06 15:17:08 -0700 | [diff] [blame] | 268 | .owner = THIS_MODULE, |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 269 | .hash_size = RSI_HASHMAX, |
| 270 | .hash_table = rsi_table, |
| 271 | .name = "auth.rpcsec.init", |
| 272 | .cache_put = rsi_put, |
| 273 | .cache_request = rsi_request, |
| 274 | .cache_parse = rsi_parse, |
NeilBrown | d4d11ea | 2006-03-27 01:15:04 -0800 | [diff] [blame] | 275 | .match = rsi_match, |
| 276 | .init = rsi_init, |
| 277 | .update = update_rsi, |
| 278 | .alloc = rsi_alloc, |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 279 | }; |
| 280 | |
NeilBrown | d4d11ea | 2006-03-27 01:15:04 -0800 | [diff] [blame] | 281 | static struct rsi *rsi_lookup(struct rsi *item) |
| 282 | { |
| 283 | struct cache_head *ch; |
| 284 | int hash = rsi_hash(item); |
| 285 | |
| 286 | ch = sunrpc_cache_lookup(&rsi_cache, &item->h, hash); |
| 287 | if (ch) |
| 288 | return container_of(ch, struct rsi, h); |
| 289 | else |
| 290 | return NULL; |
| 291 | } |
| 292 | |
| 293 | static struct rsi *rsi_update(struct rsi *new, struct rsi *old) |
| 294 | { |
| 295 | struct cache_head *ch; |
| 296 | int hash = rsi_hash(new); |
| 297 | |
| 298 | ch = sunrpc_cache_update(&rsi_cache, &new->h, |
| 299 | &old->h, hash); |
| 300 | if (ch) |
| 301 | return container_of(ch, struct rsi, h); |
| 302 | else |
| 303 | return NULL; |
| 304 | } |
| 305 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 306 | |
| 307 | /* |
| 308 | * The rpcsec_context cache is used to store a context that is |
| 309 | * used in data exchange. |
| 310 | * The key is a context handle. The content is: |
| 311 | * uid, gidlist, mechanism, service-set, mech-specific-data |
| 312 | */ |
| 313 | |
| 314 | #define RSC_HASHBITS 10 |
| 315 | #define RSC_HASHMAX (1<<RSC_HASHBITS) |
| 316 | #define RSC_HASHMASK (RSC_HASHMAX-1) |
| 317 | |
| 318 | #define GSS_SEQ_WIN 128 |
| 319 | |
| 320 | struct gss_svc_seq_data { |
| 321 | /* highest seq number seen so far: */ |
| 322 | int sd_max; |
| 323 | /* for i such that sd_max-GSS_SEQ_WIN < i <= sd_max, the i-th bit of |
| 324 | * sd_win is nonzero iff sequence number i has been seen already: */ |
| 325 | unsigned long sd_win[GSS_SEQ_WIN/BITS_PER_LONG]; |
| 326 | spinlock_t sd_lock; |
| 327 | }; |
| 328 | |
| 329 | struct rsc { |
| 330 | struct cache_head h; |
| 331 | struct xdr_netobj handle; |
| 332 | struct svc_cred cred; |
| 333 | struct gss_svc_seq_data seqdata; |
| 334 | struct gss_ctx *mechctx; |
Olga Kornievskaia | 68e76ad | 2008-12-23 16:17:15 -0500 | [diff] [blame] | 335 | char *client_name; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 336 | }; |
| 337 | |
| 338 | static struct cache_head *rsc_table[RSC_HASHMAX]; |
| 339 | static struct cache_detail rsc_cache; |
NeilBrown | 17f834b6 | 2006-03-27 01:15:05 -0800 | [diff] [blame] | 340 | static struct rsc *rsc_update(struct rsc *new, struct rsc *old); |
| 341 | static struct rsc *rsc_lookup(struct rsc *item); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 342 | |
| 343 | static void rsc_free(struct rsc *rsci) |
| 344 | { |
| 345 | kfree(rsci->handle.data); |
| 346 | if (rsci->mechctx) |
| 347 | gss_delete_sec_context(&rsci->mechctx); |
| 348 | if (rsci->cred.cr_group_info) |
| 349 | put_group_info(rsci->cred.cr_group_info); |
Olga Kornievskaia | 68e76ad | 2008-12-23 16:17:15 -0500 | [diff] [blame] | 350 | kfree(rsci->client_name); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 351 | } |
| 352 | |
NeilBrown | baab935 | 2006-03-27 01:15:09 -0800 | [diff] [blame] | 353 | static void rsc_put(struct kref *ref) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 354 | { |
NeilBrown | baab935 | 2006-03-27 01:15:09 -0800 | [diff] [blame] | 355 | struct rsc *rsci = container_of(ref, struct rsc, h.ref); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 356 | |
NeilBrown | baab935 | 2006-03-27 01:15:09 -0800 | [diff] [blame] | 357 | rsc_free(rsci); |
| 358 | kfree(rsci); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 359 | } |
| 360 | |
| 361 | static inline int |
| 362 | rsc_hash(struct rsc *rsci) |
| 363 | { |
| 364 | return hash_mem(rsci->handle.data, rsci->handle.len, RSC_HASHBITS); |
| 365 | } |
| 366 | |
NeilBrown | 17f834b6 | 2006-03-27 01:15:05 -0800 | [diff] [blame] | 367 | static int |
| 368 | rsc_match(struct cache_head *a, struct cache_head *b) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 369 | { |
NeilBrown | 17f834b6 | 2006-03-27 01:15:05 -0800 | [diff] [blame] | 370 | struct rsc *new = container_of(a, struct rsc, h); |
| 371 | struct rsc *tmp = container_of(b, struct rsc, h); |
| 372 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 373 | return netobj_equal(&new->handle, &tmp->handle); |
| 374 | } |
| 375 | |
NeilBrown | 17f834b6 | 2006-03-27 01:15:05 -0800 | [diff] [blame] | 376 | static void |
| 377 | rsc_init(struct cache_head *cnew, struct cache_head *ctmp) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 378 | { |
NeilBrown | 17f834b6 | 2006-03-27 01:15:05 -0800 | [diff] [blame] | 379 | struct rsc *new = container_of(cnew, struct rsc, h); |
| 380 | struct rsc *tmp = container_of(ctmp, struct rsc, h); |
| 381 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 382 | new->handle.len = tmp->handle.len; |
| 383 | tmp->handle.len = 0; |
| 384 | new->handle.data = tmp->handle.data; |
| 385 | tmp->handle.data = NULL; |
| 386 | new->mechctx = NULL; |
| 387 | new->cred.cr_group_info = NULL; |
Olga Kornievskaia | 68e76ad | 2008-12-23 16:17:15 -0500 | [diff] [blame] | 388 | new->client_name = NULL; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 389 | } |
| 390 | |
NeilBrown | 17f834b6 | 2006-03-27 01:15:05 -0800 | [diff] [blame] | 391 | static void |
| 392 | update_rsc(struct cache_head *cnew, struct cache_head *ctmp) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 393 | { |
NeilBrown | 17f834b6 | 2006-03-27 01:15:05 -0800 | [diff] [blame] | 394 | struct rsc *new = container_of(cnew, struct rsc, h); |
| 395 | struct rsc *tmp = container_of(ctmp, struct rsc, h); |
| 396 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 397 | new->mechctx = tmp->mechctx; |
| 398 | tmp->mechctx = NULL; |
| 399 | memset(&new->seqdata, 0, sizeof(new->seqdata)); |
| 400 | spin_lock_init(&new->seqdata.sd_lock); |
| 401 | new->cred = tmp->cred; |
| 402 | tmp->cred.cr_group_info = NULL; |
Olga Kornievskaia | 68e76ad | 2008-12-23 16:17:15 -0500 | [diff] [blame] | 403 | new->client_name = tmp->client_name; |
| 404 | tmp->client_name = NULL; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 405 | } |
| 406 | |
NeilBrown | 17f834b6 | 2006-03-27 01:15:05 -0800 | [diff] [blame] | 407 | static struct cache_head * |
| 408 | rsc_alloc(void) |
| 409 | { |
| 410 | struct rsc *rsci = kmalloc(sizeof(*rsci), GFP_KERNEL); |
| 411 | if (rsci) |
| 412 | return &rsci->h; |
| 413 | else |
| 414 | return NULL; |
| 415 | } |
| 416 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 417 | static int rsc_parse(struct cache_detail *cd, |
| 418 | char *mesg, int mlen) |
| 419 | { |
| 420 | /* contexthandle expiry [ uid gid N <n gids> mechname ...mechdata... ] */ |
| 421 | char *buf = mesg; |
| 422 | int len, rv; |
| 423 | struct rsc rsci, *rscp = NULL; |
| 424 | time_t expiry; |
| 425 | int status = -EINVAL; |
J. Bruce Fields | 1df0cad | 2006-06-30 01:56:16 -0700 | [diff] [blame] | 426 | struct gss_api_mech *gm = NULL; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 427 | |
| 428 | memset(&rsci, 0, sizeof(rsci)); |
| 429 | /* context handle */ |
| 430 | len = qword_get(&mesg, buf, mlen); |
| 431 | if (len < 0) goto out; |
| 432 | status = -ENOMEM; |
| 433 | if (dup_to_netobj(&rsci.handle, buf, len)) |
| 434 | goto out; |
| 435 | |
| 436 | rsci.h.flags = 0; |
| 437 | /* expiry */ |
| 438 | expiry = get_expiry(&mesg); |
| 439 | status = -EINVAL; |
| 440 | if (expiry == 0) |
| 441 | goto out; |
| 442 | |
NeilBrown | 17f834b6 | 2006-03-27 01:15:05 -0800 | [diff] [blame] | 443 | rscp = rsc_lookup(&rsci); |
| 444 | if (!rscp) |
| 445 | goto out; |
| 446 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 447 | /* uid, or NEGATIVE */ |
| 448 | rv = get_int(&mesg, &rsci.cred.cr_uid); |
| 449 | if (rv == -EINVAL) |
| 450 | goto out; |
| 451 | if (rv == -ENOENT) |
| 452 | set_bit(CACHE_NEGATIVE, &rsci.h.flags); |
| 453 | else { |
| 454 | int N, i; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 455 | |
| 456 | /* gid */ |
| 457 | if (get_int(&mesg, &rsci.cred.cr_gid)) |
| 458 | goto out; |
| 459 | |
| 460 | /* number of additional gid's */ |
| 461 | if (get_int(&mesg, &N)) |
| 462 | goto out; |
| 463 | status = -ENOMEM; |
| 464 | rsci.cred.cr_group_info = groups_alloc(N); |
| 465 | if (rsci.cred.cr_group_info == NULL) |
| 466 | goto out; |
| 467 | |
| 468 | /* gid's */ |
| 469 | status = -EINVAL; |
| 470 | for (i=0; i<N; i++) { |
| 471 | gid_t gid; |
| 472 | if (get_int(&mesg, &gid)) |
| 473 | goto out; |
| 474 | GROUP_AT(rsci.cred.cr_group_info, i) = gid; |
| 475 | } |
| 476 | |
| 477 | /* mech name */ |
| 478 | len = qword_get(&mesg, buf, mlen); |
| 479 | if (len < 0) |
| 480 | goto out; |
| 481 | gm = gss_mech_get_by_name(buf); |
| 482 | status = -EOPNOTSUPP; |
| 483 | if (!gm) |
| 484 | goto out; |
| 485 | |
| 486 | status = -EINVAL; |
| 487 | /* mech-specific data: */ |
| 488 | len = qword_get(&mesg, buf, mlen); |
J. Bruce Fields | 1df0cad | 2006-06-30 01:56:16 -0700 | [diff] [blame] | 489 | if (len < 0) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 490 | goto out; |
J. Bruce Fields | 5fb8b49 | 2006-01-18 17:43:26 -0800 | [diff] [blame] | 491 | status = gss_import_sec_context(buf, len, gm, &rsci.mechctx); |
J. Bruce Fields | 1df0cad | 2006-06-30 01:56:16 -0700 | [diff] [blame] | 492 | if (status) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 493 | goto out; |
Olga Kornievskaia | 68e76ad | 2008-12-23 16:17:15 -0500 | [diff] [blame] | 494 | |
| 495 | /* get client name */ |
| 496 | len = qword_get(&mesg, buf, mlen); |
| 497 | if (len > 0) { |
| 498 | rsci.client_name = kstrdup(buf, GFP_KERNEL); |
| 499 | if (!rsci.client_name) |
| 500 | goto out; |
| 501 | } |
| 502 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 503 | } |
| 504 | rsci.h.expiry_time = expiry; |
NeilBrown | 17f834b6 | 2006-03-27 01:15:05 -0800 | [diff] [blame] | 505 | rscp = rsc_update(&rsci, rscp); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 506 | status = 0; |
| 507 | out: |
J. Bruce Fields | 1df0cad | 2006-06-30 01:56:16 -0700 | [diff] [blame] | 508 | gss_mech_put(gm); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 509 | rsc_free(&rsci); |
| 510 | if (rscp) |
NeilBrown | baab935 | 2006-03-27 01:15:09 -0800 | [diff] [blame] | 511 | cache_put(&rscp->h, &rsc_cache); |
NeilBrown | 17f834b6 | 2006-03-27 01:15:05 -0800 | [diff] [blame] | 512 | else |
| 513 | status = -ENOMEM; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 514 | return status; |
| 515 | } |
| 516 | |
| 517 | static struct cache_detail rsc_cache = { |
Bruce Allan | f35279d | 2005-09-06 15:17:08 -0700 | [diff] [blame] | 518 | .owner = THIS_MODULE, |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 519 | .hash_size = RSC_HASHMAX, |
| 520 | .hash_table = rsc_table, |
| 521 | .name = "auth.rpcsec.context", |
| 522 | .cache_put = rsc_put, |
| 523 | .cache_parse = rsc_parse, |
NeilBrown | 17f834b6 | 2006-03-27 01:15:05 -0800 | [diff] [blame] | 524 | .match = rsc_match, |
| 525 | .init = rsc_init, |
| 526 | .update = update_rsc, |
| 527 | .alloc = rsc_alloc, |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 528 | }; |
| 529 | |
NeilBrown | 17f834b6 | 2006-03-27 01:15:05 -0800 | [diff] [blame] | 530 | static struct rsc *rsc_lookup(struct rsc *item) |
| 531 | { |
| 532 | struct cache_head *ch; |
| 533 | int hash = rsc_hash(item); |
| 534 | |
| 535 | ch = sunrpc_cache_lookup(&rsc_cache, &item->h, hash); |
| 536 | if (ch) |
| 537 | return container_of(ch, struct rsc, h); |
| 538 | else |
| 539 | return NULL; |
| 540 | } |
| 541 | |
| 542 | static struct rsc *rsc_update(struct rsc *new, struct rsc *old) |
| 543 | { |
| 544 | struct cache_head *ch; |
| 545 | int hash = rsc_hash(new); |
| 546 | |
| 547 | ch = sunrpc_cache_update(&rsc_cache, &new->h, |
| 548 | &old->h, hash); |
| 549 | if (ch) |
| 550 | return container_of(ch, struct rsc, h); |
| 551 | else |
| 552 | return NULL; |
| 553 | } |
| 554 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 555 | |
| 556 | static struct rsc * |
| 557 | gss_svc_searchbyctx(struct xdr_netobj *handle) |
| 558 | { |
| 559 | struct rsc rsci; |
| 560 | struct rsc *found; |
| 561 | |
| 562 | memset(&rsci, 0, sizeof(rsci)); |
| 563 | if (dup_to_netobj(&rsci.handle, handle->data, handle->len)) |
| 564 | return NULL; |
NeilBrown | 17f834b6 | 2006-03-27 01:15:05 -0800 | [diff] [blame] | 565 | found = rsc_lookup(&rsci); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 566 | rsc_free(&rsci); |
| 567 | if (!found) |
| 568 | return NULL; |
| 569 | if (cache_check(&rsc_cache, &found->h, NULL)) |
| 570 | return NULL; |
| 571 | return found; |
| 572 | } |
| 573 | |
| 574 | /* Implements sequence number algorithm as specified in RFC 2203. */ |
| 575 | static int |
| 576 | gss_check_seq_num(struct rsc *rsci, int seq_num) |
| 577 | { |
| 578 | struct gss_svc_seq_data *sd = &rsci->seqdata; |
| 579 | |
| 580 | spin_lock(&sd->sd_lock); |
| 581 | if (seq_num > sd->sd_max) { |
| 582 | if (seq_num >= sd->sd_max + GSS_SEQ_WIN) { |
| 583 | memset(sd->sd_win,0,sizeof(sd->sd_win)); |
| 584 | sd->sd_max = seq_num; |
| 585 | } else while (sd->sd_max < seq_num) { |
| 586 | sd->sd_max++; |
| 587 | __clear_bit(sd->sd_max % GSS_SEQ_WIN, sd->sd_win); |
| 588 | } |
| 589 | __set_bit(seq_num % GSS_SEQ_WIN, sd->sd_win); |
| 590 | goto ok; |
| 591 | } else if (seq_num <= sd->sd_max - GSS_SEQ_WIN) { |
| 592 | goto drop; |
| 593 | } |
| 594 | /* sd_max - GSS_SEQ_WIN < seq_num <= sd_max */ |
| 595 | if (__test_and_set_bit(seq_num % GSS_SEQ_WIN, sd->sd_win)) |
| 596 | goto drop; |
| 597 | ok: |
| 598 | spin_unlock(&sd->sd_lock); |
| 599 | return 1; |
| 600 | drop: |
| 601 | spin_unlock(&sd->sd_lock); |
| 602 | return 0; |
| 603 | } |
| 604 | |
| 605 | static inline u32 round_up_to_quad(u32 i) |
| 606 | { |
| 607 | return (i + 3 ) & ~3; |
| 608 | } |
| 609 | |
| 610 | static inline int |
| 611 | svc_safe_getnetobj(struct kvec *argv, struct xdr_netobj *o) |
| 612 | { |
| 613 | int l; |
| 614 | |
| 615 | if (argv->iov_len < 4) |
| 616 | return -1; |
Alexey Dobriyan | 7699431 | 2006-09-26 22:28:46 -0700 | [diff] [blame] | 617 | o->len = svc_getnl(argv); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 618 | l = round_up_to_quad(o->len); |
| 619 | if (argv->iov_len < l) |
| 620 | return -1; |
| 621 | o->data = argv->iov_base; |
| 622 | argv->iov_base += l; |
| 623 | argv->iov_len -= l; |
| 624 | return 0; |
| 625 | } |
| 626 | |
| 627 | static inline int |
| 628 | svc_safe_putnetobj(struct kvec *resv, struct xdr_netobj *o) |
| 629 | { |
Al Viro | 753ed90 | 2006-09-26 22:30:23 -0700 | [diff] [blame] | 630 | u8 *p; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 631 | |
| 632 | if (resv->iov_len + 4 > PAGE_SIZE) |
| 633 | return -1; |
Alexey Dobriyan | 7699431 | 2006-09-26 22:28:46 -0700 | [diff] [blame] | 634 | svc_putnl(resv, o->len); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 635 | p = resv->iov_base + resv->iov_len; |
| 636 | resv->iov_len += round_up_to_quad(o->len); |
| 637 | if (resv->iov_len > PAGE_SIZE) |
| 638 | return -1; |
| 639 | memcpy(p, o->data, o->len); |
Al Viro | 753ed90 | 2006-09-26 22:30:23 -0700 | [diff] [blame] | 640 | memset(p + o->len, 0, round_up_to_quad(o->len) - o->len); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 641 | return 0; |
| 642 | } |
| 643 | |
J. Bruce Fields | 21fcd02 | 2007-08-09 20:16:22 -0400 | [diff] [blame] | 644 | /* |
| 645 | * Verify the checksum on the header and return SVC_OK on success. |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 646 | * Otherwise, return SVC_DROP (in the case of a bad sequence number) |
| 647 | * or return SVC_DENIED and indicate error in authp. |
| 648 | */ |
| 649 | static int |
| 650 | gss_verify_header(struct svc_rqst *rqstp, struct rsc *rsci, |
Alexey Dobriyan | d8ed029 | 2006-09-26 22:29:38 -0700 | [diff] [blame] | 651 | __be32 *rpcstart, struct rpc_gss_wire_cred *gc, __be32 *authp) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 652 | { |
| 653 | struct gss_ctx *ctx_id = rsci->mechctx; |
| 654 | struct xdr_buf rpchdr; |
| 655 | struct xdr_netobj checksum; |
| 656 | u32 flavor = 0; |
| 657 | struct kvec *argv = &rqstp->rq_arg.head[0]; |
| 658 | struct kvec iov; |
| 659 | |
| 660 | /* data to compute the checksum over: */ |
| 661 | iov.iov_base = rpcstart; |
| 662 | iov.iov_len = (u8 *)argv->iov_base - (u8 *)rpcstart; |
| 663 | xdr_buf_from_iov(&iov, &rpchdr); |
| 664 | |
| 665 | *authp = rpc_autherr_badverf; |
| 666 | if (argv->iov_len < 4) |
| 667 | return SVC_DENIED; |
Alexey Dobriyan | 7699431 | 2006-09-26 22:28:46 -0700 | [diff] [blame] | 668 | flavor = svc_getnl(argv); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 669 | if (flavor != RPC_AUTH_GSS) |
| 670 | return SVC_DENIED; |
| 671 | if (svc_safe_getnetobj(argv, &checksum)) |
| 672 | return SVC_DENIED; |
| 673 | |
| 674 | if (rqstp->rq_deferred) /* skip verification of revisited request */ |
| 675 | return SVC_OK; |
J. Bruce Fields | 00fd6e1 | 2005-10-13 16:55:18 -0400 | [diff] [blame] | 676 | if (gss_verify_mic(ctx_id, &rpchdr, &checksum) != GSS_S_COMPLETE) { |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 677 | *authp = rpcsec_gsserr_credproblem; |
| 678 | return SVC_DENIED; |
| 679 | } |
| 680 | |
| 681 | if (gc->gc_seq > MAXSEQ) { |
Chuck Lever | 8885cb3 | 2007-01-31 12:14:05 -0500 | [diff] [blame] | 682 | dprintk("RPC: svcauth_gss: discarding request with " |
| 683 | "large sequence number %d\n", gc->gc_seq); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 684 | *authp = rpcsec_gsserr_ctxproblem; |
| 685 | return SVC_DENIED; |
| 686 | } |
| 687 | if (!gss_check_seq_num(rsci, gc->gc_seq)) { |
Chuck Lever | 8885cb3 | 2007-01-31 12:14:05 -0500 | [diff] [blame] | 688 | dprintk("RPC: svcauth_gss: discarding request with " |
| 689 | "old sequence number %d\n", gc->gc_seq); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 690 | return SVC_DROP; |
| 691 | } |
| 692 | return SVC_OK; |
| 693 | } |
| 694 | |
| 695 | static int |
Andy Adamson | 822f100 | 2006-01-18 17:43:24 -0800 | [diff] [blame] | 696 | gss_write_null_verf(struct svc_rqst *rqstp) |
| 697 | { |
Alexey Dobriyan | d8ed029 | 2006-09-26 22:29:38 -0700 | [diff] [blame] | 698 | __be32 *p; |
Andy Adamson | 822f100 | 2006-01-18 17:43:24 -0800 | [diff] [blame] | 699 | |
Alexey Dobriyan | 7699431 | 2006-09-26 22:28:46 -0700 | [diff] [blame] | 700 | svc_putnl(rqstp->rq_res.head, RPC_AUTH_NULL); |
Andy Adamson | 822f100 | 2006-01-18 17:43:24 -0800 | [diff] [blame] | 701 | p = rqstp->rq_res.head->iov_base + rqstp->rq_res.head->iov_len; |
| 702 | /* don't really need to check if head->iov_len > PAGE_SIZE ... */ |
| 703 | *p++ = 0; |
| 704 | if (!xdr_ressize_check(rqstp, p)) |
| 705 | return -1; |
| 706 | return 0; |
| 707 | } |
| 708 | |
| 709 | static int |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 710 | gss_write_verf(struct svc_rqst *rqstp, struct gss_ctx *ctx_id, u32 seq) |
| 711 | { |
Alexey Dobriyan | d8ed029 | 2006-09-26 22:29:38 -0700 | [diff] [blame] | 712 | __be32 xdr_seq; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 713 | u32 maj_stat; |
| 714 | struct xdr_buf verf_data; |
| 715 | struct xdr_netobj mic; |
Alexey Dobriyan | d8ed029 | 2006-09-26 22:29:38 -0700 | [diff] [blame] | 716 | __be32 *p; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 717 | struct kvec iov; |
| 718 | |
Alexey Dobriyan | 7699431 | 2006-09-26 22:28:46 -0700 | [diff] [blame] | 719 | svc_putnl(rqstp->rq_res.head, RPC_AUTH_GSS); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 720 | xdr_seq = htonl(seq); |
| 721 | |
| 722 | iov.iov_base = &xdr_seq; |
| 723 | iov.iov_len = sizeof(xdr_seq); |
| 724 | xdr_buf_from_iov(&iov, &verf_data); |
| 725 | p = rqstp->rq_res.head->iov_base + rqstp->rq_res.head->iov_len; |
| 726 | mic.data = (u8 *)(p + 1); |
J. Bruce Fields | 00fd6e1 | 2005-10-13 16:55:18 -0400 | [diff] [blame] | 727 | maj_stat = gss_get_mic(ctx_id, &verf_data, &mic); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 728 | if (maj_stat != GSS_S_COMPLETE) |
| 729 | return -1; |
| 730 | *p++ = htonl(mic.len); |
| 731 | memset((u8 *)p + mic.len, 0, round_up_to_quad(mic.len) - mic.len); |
| 732 | p += XDR_QUADLEN(mic.len); |
| 733 | if (!xdr_ressize_check(rqstp, p)) |
| 734 | return -1; |
| 735 | return 0; |
| 736 | } |
| 737 | |
| 738 | struct gss_domain { |
| 739 | struct auth_domain h; |
| 740 | u32 pseudoflavor; |
| 741 | }; |
| 742 | |
| 743 | static struct auth_domain * |
| 744 | find_gss_auth_domain(struct gss_ctx *ctx, u32 svc) |
| 745 | { |
| 746 | char *name; |
| 747 | |
| 748 | name = gss_service_to_auth_domain_name(ctx->mech_type, svc); |
| 749 | if (!name) |
| 750 | return NULL; |
| 751 | return auth_domain_find(name); |
| 752 | } |
| 753 | |
NeilBrown | efc36aa | 2006-03-27 01:14:59 -0800 | [diff] [blame] | 754 | static struct auth_ops svcauthops_gss; |
| 755 | |
J. Bruce Fields | 4796f45 | 2007-07-17 04:04:51 -0700 | [diff] [blame] | 756 | u32 svcauth_gss_flavor(struct auth_domain *dom) |
| 757 | { |
| 758 | struct gss_domain *gd = container_of(dom, struct gss_domain, h); |
| 759 | |
| 760 | return gd->pseudoflavor; |
| 761 | } |
| 762 | |
Trond Myklebust | 7bd8826 | 2008-12-23 15:21:32 -0500 | [diff] [blame] | 763 | EXPORT_SYMBOL_GPL(svcauth_gss_flavor); |
J. Bruce Fields | 4796f45 | 2007-07-17 04:04:51 -0700 | [diff] [blame] | 764 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 765 | int |
| 766 | svcauth_gss_register_pseudoflavor(u32 pseudoflavor, char * name) |
| 767 | { |
| 768 | struct gss_domain *new; |
| 769 | struct auth_domain *test; |
| 770 | int stat = -ENOMEM; |
| 771 | |
| 772 | new = kmalloc(sizeof(*new), GFP_KERNEL); |
| 773 | if (!new) |
| 774 | goto out; |
NeilBrown | efc36aa | 2006-03-27 01:14:59 -0800 | [diff] [blame] | 775 | kref_init(&new->h.ref); |
Arnaldo Carvalho de Melo | e69062b | 2006-11-21 01:21:34 -0200 | [diff] [blame] | 776 | new->h.name = kstrdup(name, GFP_KERNEL); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 777 | if (!new->h.name) |
| 778 | goto out_free_dom; |
NeilBrown | efc36aa | 2006-03-27 01:14:59 -0800 | [diff] [blame] | 779 | new->h.flavour = &svcauthops_gss; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 780 | new->pseudoflavor = pseudoflavor; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 781 | |
J. Bruce Fields | cb27680 | 2007-07-23 18:43:52 -0700 | [diff] [blame] | 782 | stat = 0; |
NeilBrown | efc36aa | 2006-03-27 01:14:59 -0800 | [diff] [blame] | 783 | test = auth_domain_lookup(name, &new->h); |
J. Bruce Fields | cb27680 | 2007-07-23 18:43:52 -0700 | [diff] [blame] | 784 | if (test != &new->h) { /* Duplicate registration */ |
| 785 | auth_domain_put(test); |
| 786 | kfree(new->h.name); |
| 787 | goto out_free_dom; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 788 | } |
| 789 | return 0; |
| 790 | |
| 791 | out_free_dom: |
| 792 | kfree(new); |
| 793 | out: |
| 794 | return stat; |
| 795 | } |
| 796 | |
Trond Myklebust | 7bd8826 | 2008-12-23 15:21:32 -0500 | [diff] [blame] | 797 | EXPORT_SYMBOL_GPL(svcauth_gss_register_pseudoflavor); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 798 | |
| 799 | static inline int |
| 800 | read_u32_from_xdr_buf(struct xdr_buf *buf, int base, u32 *obj) |
| 801 | { |
Alexey Dobriyan | d8ed029 | 2006-09-26 22:29:38 -0700 | [diff] [blame] | 802 | __be32 raw; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 803 | int status; |
| 804 | |
| 805 | status = read_bytes_from_xdr_buf(buf, base, &raw, sizeof(*obj)); |
| 806 | if (status) |
| 807 | return status; |
| 808 | *obj = ntohl(raw); |
| 809 | return 0; |
| 810 | } |
| 811 | |
| 812 | /* It would be nice if this bit of code could be shared with the client. |
| 813 | * Obstacles: |
| 814 | * The client shouldn't malloc(), would have to pass in own memory. |
| 815 | * The server uses base of head iovec as read pointer, while the |
| 816 | * client uses separate pointer. */ |
| 817 | static int |
| 818 | unwrap_integ_data(struct xdr_buf *buf, u32 seq, struct gss_ctx *ctx) |
| 819 | { |
| 820 | int stat = -EINVAL; |
| 821 | u32 integ_len, maj_stat; |
| 822 | struct xdr_netobj mic; |
| 823 | struct xdr_buf integ_buf; |
| 824 | |
Alexey Dobriyan | 7699431 | 2006-09-26 22:28:46 -0700 | [diff] [blame] | 825 | integ_len = svc_getnl(&buf->head[0]); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 826 | if (integ_len & 3) |
J.Bruce Fields | b797b5b | 2006-12-13 00:35:19 -0800 | [diff] [blame] | 827 | return stat; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 828 | if (integ_len > buf->len) |
J.Bruce Fields | b797b5b | 2006-12-13 00:35:19 -0800 | [diff] [blame] | 829 | return stat; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 830 | if (xdr_buf_subsegment(buf, &integ_buf, 0, integ_len)) |
| 831 | BUG(); |
| 832 | /* copy out mic... */ |
| 833 | if (read_u32_from_xdr_buf(buf, integ_len, &mic.len)) |
| 834 | BUG(); |
| 835 | if (mic.len > RPC_MAX_AUTH_SIZE) |
J.Bruce Fields | b797b5b | 2006-12-13 00:35:19 -0800 | [diff] [blame] | 836 | return stat; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 837 | mic.data = kmalloc(mic.len, GFP_KERNEL); |
| 838 | if (!mic.data) |
J.Bruce Fields | b797b5b | 2006-12-13 00:35:19 -0800 | [diff] [blame] | 839 | return stat; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 840 | if (read_bytes_from_xdr_buf(buf, integ_len + 4, mic.data, mic.len)) |
| 841 | goto out; |
J. Bruce Fields | 00fd6e1 | 2005-10-13 16:55:18 -0400 | [diff] [blame] | 842 | maj_stat = gss_verify_mic(ctx, &integ_buf, &mic); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 843 | if (maj_stat != GSS_S_COMPLETE) |
| 844 | goto out; |
Alexey Dobriyan | 7699431 | 2006-09-26 22:28:46 -0700 | [diff] [blame] | 845 | if (svc_getnl(&buf->head[0]) != seq) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 846 | goto out; |
| 847 | stat = 0; |
| 848 | out: |
J.Bruce Fields | b797b5b | 2006-12-13 00:35:19 -0800 | [diff] [blame] | 849 | kfree(mic.data); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 850 | return stat; |
| 851 | } |
| 852 | |
J. Bruce Fields | 7c9fdcf | 2006-06-30 01:56:19 -0700 | [diff] [blame] | 853 | static inline int |
| 854 | total_buf_len(struct xdr_buf *buf) |
| 855 | { |
| 856 | return buf->head[0].iov_len + buf->page_len + buf->tail[0].iov_len; |
| 857 | } |
| 858 | |
| 859 | static void |
| 860 | fix_priv_head(struct xdr_buf *buf, int pad) |
| 861 | { |
| 862 | if (buf->page_len == 0) { |
| 863 | /* We need to adjust head and buf->len in tandem in this |
| 864 | * case to make svc_defer() work--it finds the original |
| 865 | * buffer start using buf->len - buf->head[0].iov_len. */ |
| 866 | buf->head[0].iov_len -= pad; |
| 867 | } |
| 868 | } |
| 869 | |
| 870 | static int |
| 871 | unwrap_priv_data(struct svc_rqst *rqstp, struct xdr_buf *buf, u32 seq, struct gss_ctx *ctx) |
| 872 | { |
| 873 | u32 priv_len, maj_stat; |
| 874 | int pad, saved_len, remaining_len, offset; |
| 875 | |
Jens Axboe | cf8208d | 2007-06-12 21:22:14 +0200 | [diff] [blame] | 876 | rqstp->rq_splice_ok = 0; |
J. Bruce Fields | 7c9fdcf | 2006-06-30 01:56:19 -0700 | [diff] [blame] | 877 | |
Alexey Dobriyan | 7699431 | 2006-09-26 22:28:46 -0700 | [diff] [blame] | 878 | priv_len = svc_getnl(&buf->head[0]); |
J. Bruce Fields | 7c9fdcf | 2006-06-30 01:56:19 -0700 | [diff] [blame] | 879 | if (rqstp->rq_deferred) { |
| 880 | /* Already decrypted last time through! The sequence number |
| 881 | * check at out_seq is unnecessary but harmless: */ |
| 882 | goto out_seq; |
| 883 | } |
| 884 | /* buf->len is the number of bytes from the original start of the |
| 885 | * request to the end, where head[0].iov_len is just the bytes |
| 886 | * not yet read from the head, so these two values are different: */ |
| 887 | remaining_len = total_buf_len(buf); |
| 888 | if (priv_len > remaining_len) |
| 889 | return -EINVAL; |
| 890 | pad = remaining_len - priv_len; |
| 891 | buf->len -= pad; |
| 892 | fix_priv_head(buf, pad); |
| 893 | |
| 894 | /* Maybe it would be better to give gss_unwrap a length parameter: */ |
| 895 | saved_len = buf->len; |
| 896 | buf->len = priv_len; |
| 897 | maj_stat = gss_unwrap(ctx, 0, buf); |
| 898 | pad = priv_len - buf->len; |
| 899 | buf->len = saved_len; |
| 900 | buf->len -= pad; |
| 901 | /* The upper layers assume the buffer is aligned on 4-byte boundaries. |
| 902 | * In the krb5p case, at least, the data ends up offset, so we need to |
| 903 | * move it around. */ |
| 904 | /* XXX: This is very inefficient. It would be better to either do |
| 905 | * this while we encrypt, or maybe in the receive code, if we can peak |
| 906 | * ahead and work out the service and mechanism there. */ |
| 907 | offset = buf->head[0].iov_len % 4; |
| 908 | if (offset) { |
| 909 | buf->buflen = RPCSVC_MAXPAYLOAD; |
| 910 | xdr_shift_buf(buf, offset); |
| 911 | fix_priv_head(buf, pad); |
| 912 | } |
| 913 | if (maj_stat != GSS_S_COMPLETE) |
| 914 | return -EINVAL; |
| 915 | out_seq: |
Alexey Dobriyan | 7699431 | 2006-09-26 22:28:46 -0700 | [diff] [blame] | 916 | if (svc_getnl(&buf->head[0]) != seq) |
J. Bruce Fields | 7c9fdcf | 2006-06-30 01:56:19 -0700 | [diff] [blame] | 917 | return -EINVAL; |
| 918 | return 0; |
| 919 | } |
| 920 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 921 | struct gss_svc_data { |
| 922 | /* decoded gss client cred: */ |
| 923 | struct rpc_gss_wire_cred clcred; |
J.Bruce Fields | 5b304bc | 2006-10-04 02:16:07 -0700 | [diff] [blame] | 924 | /* save a pointer to the beginning of the encoded verifier, |
| 925 | * for use in encryption/checksumming in svcauth_gss_release: */ |
| 926 | __be32 *verf_start; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 927 | struct rsc *rsci; |
| 928 | }; |
| 929 | |
Olga Kornievskaia | 68e76ad | 2008-12-23 16:17:15 -0500 | [diff] [blame] | 930 | char *svc_gss_principal(struct svc_rqst *rqstp) |
| 931 | { |
| 932 | struct gss_svc_data *gd = (struct gss_svc_data *)rqstp->rq_auth_data; |
| 933 | |
| 934 | if (gd && gd->rsci) |
| 935 | return gd->rsci->client_name; |
| 936 | return NULL; |
| 937 | } |
Olga Kornievskaia | 945b34a | 2008-12-23 16:18:34 -0500 | [diff] [blame] | 938 | EXPORT_SYMBOL_GPL(svc_gss_principal); |
Olga Kornievskaia | 68e76ad | 2008-12-23 16:17:15 -0500 | [diff] [blame] | 939 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 940 | static int |
| 941 | svcauth_gss_set_client(struct svc_rqst *rqstp) |
| 942 | { |
| 943 | struct gss_svc_data *svcdata = rqstp->rq_auth_data; |
| 944 | struct rsc *rsci = svcdata->rsci; |
| 945 | struct rpc_gss_wire_cred *gc = &svcdata->clcred; |
J. Bruce Fields | 3ab4d8b | 2007-07-17 04:04:46 -0700 | [diff] [blame] | 946 | int stat; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 947 | |
J. Bruce Fields | 3ab4d8b | 2007-07-17 04:04:46 -0700 | [diff] [blame] | 948 | /* |
| 949 | * A gss export can be specified either by: |
| 950 | * export *(sec=krb5,rw) |
| 951 | * or by |
| 952 | * export gss/krb5(rw) |
| 953 | * The latter is deprecated; but for backwards compatibility reasons |
| 954 | * the nfsd code will still fall back on trying it if the former |
| 955 | * doesn't work; so we try to make both available to nfsd, below. |
| 956 | */ |
| 957 | rqstp->rq_gssclient = find_gss_auth_domain(rsci->mechctx, gc->gc_svc); |
| 958 | if (rqstp->rq_gssclient == NULL) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 959 | return SVC_DENIED; |
J. Bruce Fields | 3ab4d8b | 2007-07-17 04:04:46 -0700 | [diff] [blame] | 960 | stat = svcauth_unix_set_client(rqstp); |
| 961 | if (stat == SVC_DROP) |
| 962 | return stat; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 963 | return SVC_OK; |
| 964 | } |
| 965 | |
Kevin Coffman | 91a4762 | 2006-01-18 17:43:25 -0800 | [diff] [blame] | 966 | static inline int |
| 967 | gss_write_init_verf(struct svc_rqst *rqstp, struct rsi *rsip) |
| 968 | { |
| 969 | struct rsc *rsci; |
Frank Filz | 54f9247 | 2007-05-09 02:34:53 -0700 | [diff] [blame] | 970 | int rc; |
Kevin Coffman | 91a4762 | 2006-01-18 17:43:25 -0800 | [diff] [blame] | 971 | |
| 972 | if (rsip->major_status != GSS_S_COMPLETE) |
| 973 | return gss_write_null_verf(rqstp); |
| 974 | rsci = gss_svc_searchbyctx(&rsip->out_handle); |
| 975 | if (rsci == NULL) { |
| 976 | rsip->major_status = GSS_S_NO_CONTEXT; |
| 977 | return gss_write_null_verf(rqstp); |
| 978 | } |
Frank Filz | 54f9247 | 2007-05-09 02:34:53 -0700 | [diff] [blame] | 979 | rc = gss_write_verf(rqstp, rsci->mechctx, GSS_SEQ_WIN); |
| 980 | cache_put(&rsci->h, &rsc_cache); |
| 981 | return rc; |
Kevin Coffman | 91a4762 | 2006-01-18 17:43:25 -0800 | [diff] [blame] | 982 | } |
| 983 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 984 | /* |
J. Bruce Fields | 21fcd02 | 2007-08-09 20:16:22 -0400 | [diff] [blame] | 985 | * Having read the cred already and found we're in the context |
| 986 | * initiation case, read the verifier and initiate (or check the results |
| 987 | * of) upcalls to userspace for help with context initiation. If |
| 988 | * the upcall results are available, write the verifier and result. |
| 989 | * Otherwise, drop the request pending an answer to the upcall. |
| 990 | */ |
| 991 | static int svcauth_gss_handle_init(struct svc_rqst *rqstp, |
| 992 | struct rpc_gss_wire_cred *gc, __be32 *authp) |
| 993 | { |
| 994 | struct kvec *argv = &rqstp->rq_arg.head[0]; |
| 995 | struct kvec *resv = &rqstp->rq_res.head[0]; |
| 996 | struct xdr_netobj tmpobj; |
| 997 | struct rsi *rsip, rsikey; |
J. Bruce Fields | 980e5a4 | 2007-12-12 18:21:17 -0500 | [diff] [blame] | 998 | int ret; |
J. Bruce Fields | 21fcd02 | 2007-08-09 20:16:22 -0400 | [diff] [blame] | 999 | |
| 1000 | /* Read the verifier; should be NULL: */ |
| 1001 | *authp = rpc_autherr_badverf; |
| 1002 | if (argv->iov_len < 2 * 4) |
| 1003 | return SVC_DENIED; |
| 1004 | if (svc_getnl(argv) != RPC_AUTH_NULL) |
| 1005 | return SVC_DENIED; |
| 1006 | if (svc_getnl(argv) != 0) |
| 1007 | return SVC_DENIED; |
| 1008 | |
| 1009 | /* Martial context handle and token for upcall: */ |
| 1010 | *authp = rpc_autherr_badcred; |
| 1011 | if (gc->gc_proc == RPC_GSS_PROC_INIT && gc->gc_ctx.len != 0) |
| 1012 | return SVC_DENIED; |
| 1013 | memset(&rsikey, 0, sizeof(rsikey)); |
| 1014 | if (dup_netobj(&rsikey.in_handle, &gc->gc_ctx)) |
| 1015 | return SVC_DROP; |
| 1016 | *authp = rpc_autherr_badverf; |
| 1017 | if (svc_safe_getnetobj(argv, &tmpobj)) { |
| 1018 | kfree(rsikey.in_handle.data); |
| 1019 | return SVC_DENIED; |
| 1020 | } |
| 1021 | if (dup_netobj(&rsikey.in_token, &tmpobj)) { |
| 1022 | kfree(rsikey.in_handle.data); |
| 1023 | return SVC_DROP; |
| 1024 | } |
| 1025 | |
| 1026 | /* Perform upcall, or find upcall result: */ |
| 1027 | rsip = rsi_lookup(&rsikey); |
| 1028 | rsi_free(&rsikey); |
| 1029 | if (!rsip) |
| 1030 | return SVC_DROP; |
| 1031 | switch (cache_check(&rsi_cache, &rsip->h, &rqstp->rq_chandle)) { |
| 1032 | case -EAGAIN: |
| 1033 | case -ETIMEDOUT: |
| 1034 | case -ENOENT: |
| 1035 | /* No upcall result: */ |
| 1036 | return SVC_DROP; |
| 1037 | case 0: |
J. Bruce Fields | 980e5a4 | 2007-12-12 18:21:17 -0500 | [diff] [blame] | 1038 | ret = SVC_DROP; |
J. Bruce Fields | 21fcd02 | 2007-08-09 20:16:22 -0400 | [diff] [blame] | 1039 | /* Got an answer to the upcall; use it: */ |
| 1040 | if (gss_write_init_verf(rqstp, rsip)) |
J. Bruce Fields | 980e5a4 | 2007-12-12 18:21:17 -0500 | [diff] [blame] | 1041 | goto out; |
J. Bruce Fields | 21fcd02 | 2007-08-09 20:16:22 -0400 | [diff] [blame] | 1042 | if (resv->iov_len + 4 > PAGE_SIZE) |
J. Bruce Fields | 980e5a4 | 2007-12-12 18:21:17 -0500 | [diff] [blame] | 1043 | goto out; |
J. Bruce Fields | 21fcd02 | 2007-08-09 20:16:22 -0400 | [diff] [blame] | 1044 | svc_putnl(resv, RPC_SUCCESS); |
| 1045 | if (svc_safe_putnetobj(resv, &rsip->out_handle)) |
J. Bruce Fields | 980e5a4 | 2007-12-12 18:21:17 -0500 | [diff] [blame] | 1046 | goto out; |
J. Bruce Fields | 21fcd02 | 2007-08-09 20:16:22 -0400 | [diff] [blame] | 1047 | if (resv->iov_len + 3 * 4 > PAGE_SIZE) |
J. Bruce Fields | 980e5a4 | 2007-12-12 18:21:17 -0500 | [diff] [blame] | 1048 | goto out; |
J. Bruce Fields | 21fcd02 | 2007-08-09 20:16:22 -0400 | [diff] [blame] | 1049 | svc_putnl(resv, rsip->major_status); |
| 1050 | svc_putnl(resv, rsip->minor_status); |
| 1051 | svc_putnl(resv, GSS_SEQ_WIN); |
| 1052 | if (svc_safe_putnetobj(resv, &rsip->out_token)) |
J. Bruce Fields | 980e5a4 | 2007-12-12 18:21:17 -0500 | [diff] [blame] | 1053 | goto out; |
J. Bruce Fields | 21fcd02 | 2007-08-09 20:16:22 -0400 | [diff] [blame] | 1054 | } |
J. Bruce Fields | 980e5a4 | 2007-12-12 18:21:17 -0500 | [diff] [blame] | 1055 | ret = SVC_COMPLETE; |
| 1056 | out: |
| 1057 | cache_put(&rsip->h, &rsi_cache); |
| 1058 | return ret; |
J. Bruce Fields | 21fcd02 | 2007-08-09 20:16:22 -0400 | [diff] [blame] | 1059 | } |
| 1060 | |
| 1061 | /* |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1062 | * Accept an rpcsec packet. |
| 1063 | * If context establishment, punt to user space |
| 1064 | * If data exchange, verify/decrypt |
| 1065 | * If context destruction, handle here |
| 1066 | * In the context establishment and destruction case we encode |
| 1067 | * response here and return SVC_COMPLETE. |
| 1068 | */ |
| 1069 | static int |
Alexey Dobriyan | d8ed029 | 2006-09-26 22:29:38 -0700 | [diff] [blame] | 1070 | svcauth_gss_accept(struct svc_rqst *rqstp, __be32 *authp) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1071 | { |
| 1072 | struct kvec *argv = &rqstp->rq_arg.head[0]; |
| 1073 | struct kvec *resv = &rqstp->rq_res.head[0]; |
| 1074 | u32 crlen; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1075 | struct gss_svc_data *svcdata = rqstp->rq_auth_data; |
| 1076 | struct rpc_gss_wire_cred *gc; |
| 1077 | struct rsc *rsci = NULL; |
Alexey Dobriyan | d8ed029 | 2006-09-26 22:29:38 -0700 | [diff] [blame] | 1078 | __be32 *rpcstart; |
| 1079 | __be32 *reject_stat = resv->iov_base + resv->iov_len; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1080 | int ret; |
| 1081 | |
Chuck Lever | 8885cb3 | 2007-01-31 12:14:05 -0500 | [diff] [blame] | 1082 | dprintk("RPC: svcauth_gss: argv->iov_len = %zd\n", |
| 1083 | argv->iov_len); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1084 | |
| 1085 | *authp = rpc_autherr_badcred; |
| 1086 | if (!svcdata) |
| 1087 | svcdata = kmalloc(sizeof(*svcdata), GFP_KERNEL); |
| 1088 | if (!svcdata) |
| 1089 | goto auth_err; |
| 1090 | rqstp->rq_auth_data = svcdata; |
J.Bruce Fields | 5b304bc | 2006-10-04 02:16:07 -0700 | [diff] [blame] | 1091 | svcdata->verf_start = NULL; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1092 | svcdata->rsci = NULL; |
| 1093 | gc = &svcdata->clcred; |
| 1094 | |
| 1095 | /* start of rpc packet is 7 u32's back from here: |
| 1096 | * xid direction rpcversion prog vers proc flavour |
| 1097 | */ |
| 1098 | rpcstart = argv->iov_base; |
| 1099 | rpcstart -= 7; |
| 1100 | |
| 1101 | /* credential is: |
| 1102 | * version(==1), proc(0,1,2,3), seq, service (1,2,3), handle |
| 1103 | * at least 5 u32s, and is preceeded by length, so that makes 6. |
| 1104 | */ |
| 1105 | |
| 1106 | if (argv->iov_len < 5 * 4) |
| 1107 | goto auth_err; |
Alexey Dobriyan | 7699431 | 2006-09-26 22:28:46 -0700 | [diff] [blame] | 1108 | crlen = svc_getnl(argv); |
| 1109 | if (svc_getnl(argv) != RPC_GSS_VERSION) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1110 | goto auth_err; |
Alexey Dobriyan | 7699431 | 2006-09-26 22:28:46 -0700 | [diff] [blame] | 1111 | gc->gc_proc = svc_getnl(argv); |
| 1112 | gc->gc_seq = svc_getnl(argv); |
| 1113 | gc->gc_svc = svc_getnl(argv); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1114 | if (svc_safe_getnetobj(argv, &gc->gc_ctx)) |
| 1115 | goto auth_err; |
| 1116 | if (crlen != round_up_to_quad(gc->gc_ctx.len) + 5 * 4) |
| 1117 | goto auth_err; |
| 1118 | |
| 1119 | if ((gc->gc_proc != RPC_GSS_PROC_DATA) && (rqstp->rq_proc != 0)) |
| 1120 | goto auth_err; |
| 1121 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1122 | *authp = rpc_autherr_badverf; |
| 1123 | switch (gc->gc_proc) { |
| 1124 | case RPC_GSS_PROC_INIT: |
| 1125 | case RPC_GSS_PROC_CONTINUE_INIT: |
J. Bruce Fields | 21fcd02 | 2007-08-09 20:16:22 -0400 | [diff] [blame] | 1126 | return svcauth_gss_handle_init(rqstp, gc, authp); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1127 | case RPC_GSS_PROC_DATA: |
| 1128 | case RPC_GSS_PROC_DESTROY: |
J. Bruce Fields | 21fcd02 | 2007-08-09 20:16:22 -0400 | [diff] [blame] | 1129 | /* Look up the context, and check the verifier: */ |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1130 | *authp = rpcsec_gsserr_credproblem; |
| 1131 | rsci = gss_svc_searchbyctx(&gc->gc_ctx); |
| 1132 | if (!rsci) |
| 1133 | goto auth_err; |
| 1134 | switch (gss_verify_header(rqstp, rsci, rpcstart, gc, authp)) { |
| 1135 | case SVC_OK: |
| 1136 | break; |
| 1137 | case SVC_DENIED: |
| 1138 | goto auth_err; |
| 1139 | case SVC_DROP: |
| 1140 | goto drop; |
| 1141 | } |
| 1142 | break; |
| 1143 | default: |
| 1144 | *authp = rpc_autherr_rejectedcred; |
| 1145 | goto auth_err; |
| 1146 | } |
| 1147 | |
| 1148 | /* now act upon the command: */ |
| 1149 | switch (gc->gc_proc) { |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1150 | case RPC_GSS_PROC_DESTROY: |
Wei Yongjun | c5e434c | 2007-05-09 02:34:54 -0700 | [diff] [blame] | 1151 | if (gss_write_verf(rqstp, rsci->mechctx, gc->gc_seq)) |
| 1152 | goto auth_err; |
J. Bruce Fields | cb5c7d6 | 2008-01-14 16:05:07 -0500 | [diff] [blame] | 1153 | rsci->h.expiry_time = get_seconds(); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1154 | set_bit(CACHE_NEGATIVE, &rsci->h.flags); |
| 1155 | if (resv->iov_len + 4 > PAGE_SIZE) |
| 1156 | goto drop; |
Alexey Dobriyan | 7699431 | 2006-09-26 22:28:46 -0700 | [diff] [blame] | 1157 | svc_putnl(resv, RPC_SUCCESS); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1158 | goto complete; |
| 1159 | case RPC_GSS_PROC_DATA: |
| 1160 | *authp = rpcsec_gsserr_ctxproblem; |
J.Bruce Fields | 5b304bc | 2006-10-04 02:16:07 -0700 | [diff] [blame] | 1161 | svcdata->verf_start = resv->iov_base + resv->iov_len; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1162 | if (gss_write_verf(rqstp, rsci->mechctx, gc->gc_seq)) |
| 1163 | goto auth_err; |
| 1164 | rqstp->rq_cred = rsci->cred; |
| 1165 | get_group_info(rsci->cred.cr_group_info); |
| 1166 | *authp = rpc_autherr_badcred; |
| 1167 | switch (gc->gc_svc) { |
| 1168 | case RPC_GSS_SVC_NONE: |
| 1169 | break; |
| 1170 | case RPC_GSS_SVC_INTEGRITY: |
J. Bruce Fields | b620754 | 2008-07-03 15:26:35 -0400 | [diff] [blame] | 1171 | /* placeholders for length and seq. number: */ |
| 1172 | svc_putnl(resv, 0); |
| 1173 | svc_putnl(resv, 0); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1174 | if (unwrap_integ_data(&rqstp->rq_arg, |
| 1175 | gc->gc_seq, rsci->mechctx)) |
Harshula Jayasuriya | dd35210 | 2008-02-20 10:56:56 +1100 | [diff] [blame] | 1176 | goto garbage_args; |
J. Bruce Fields | b620754 | 2008-07-03 15:26:35 -0400 | [diff] [blame] | 1177 | break; |
| 1178 | case RPC_GSS_SVC_PRIVACY: |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1179 | /* placeholders for length and seq. number: */ |
Alexey Dobriyan | 7699431 | 2006-09-26 22:28:46 -0700 | [diff] [blame] | 1180 | svc_putnl(resv, 0); |
| 1181 | svc_putnl(resv, 0); |
J. Bruce Fields | 7c9fdcf | 2006-06-30 01:56:19 -0700 | [diff] [blame] | 1182 | if (unwrap_priv_data(rqstp, &rqstp->rq_arg, |
| 1183 | gc->gc_seq, rsci->mechctx)) |
Harshula Jayasuriya | dd35210 | 2008-02-20 10:56:56 +1100 | [diff] [blame] | 1184 | goto garbage_args; |
J. Bruce Fields | 7c9fdcf | 2006-06-30 01:56:19 -0700 | [diff] [blame] | 1185 | break; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1186 | default: |
| 1187 | goto auth_err; |
| 1188 | } |
| 1189 | svcdata->rsci = rsci; |
| 1190 | cache_get(&rsci->h); |
Andy Adamson | c417058 | 2007-07-17 04:04:42 -0700 | [diff] [blame] | 1191 | rqstp->rq_flavor = gss_svc_to_pseudoflavor( |
| 1192 | rsci->mechctx->mech_type, gc->gc_svc); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1193 | ret = SVC_OK; |
| 1194 | goto out; |
| 1195 | } |
Harshula Jayasuriya | dd35210 | 2008-02-20 10:56:56 +1100 | [diff] [blame] | 1196 | garbage_args: |
Harshula Jayasuriya | dd35210 | 2008-02-20 10:56:56 +1100 | [diff] [blame] | 1197 | ret = SVC_GARBAGE; |
| 1198 | goto out; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1199 | auth_err: |
J. Bruce Fields | 21fcd02 | 2007-08-09 20:16:22 -0400 | [diff] [blame] | 1200 | /* Restore write pointer to its original value: */ |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1201 | xdr_ressize_check(rqstp, reject_stat); |
| 1202 | ret = SVC_DENIED; |
| 1203 | goto out; |
| 1204 | complete: |
| 1205 | ret = SVC_COMPLETE; |
| 1206 | goto out; |
| 1207 | drop: |
| 1208 | ret = SVC_DROP; |
| 1209 | out: |
| 1210 | if (rsci) |
NeilBrown | baab935 | 2006-03-27 01:15:09 -0800 | [diff] [blame] | 1211 | cache_put(&rsci->h, &rsc_cache); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1212 | return ret; |
| 1213 | } |
| 1214 | |
Al Viro | cfbdbab | 2006-10-10 22:49:27 +0100 | [diff] [blame] | 1215 | static __be32 * |
J.Bruce Fields | 3c15a48 | 2006-10-04 02:16:06 -0700 | [diff] [blame] | 1216 | svcauth_gss_prepare_to_wrap(struct xdr_buf *resbuf, struct gss_svc_data *gsd) |
| 1217 | { |
Al Viro | cfbdbab | 2006-10-10 22:49:27 +0100 | [diff] [blame] | 1218 | __be32 *p; |
| 1219 | u32 verf_len; |
J.Bruce Fields | 3c15a48 | 2006-10-04 02:16:06 -0700 | [diff] [blame] | 1220 | |
J.Bruce Fields | 5b304bc | 2006-10-04 02:16:07 -0700 | [diff] [blame] | 1221 | p = gsd->verf_start; |
| 1222 | gsd->verf_start = NULL; |
| 1223 | |
| 1224 | /* If the reply stat is nonzero, don't wrap: */ |
| 1225 | if (*(p-1) != rpc_success) |
| 1226 | return NULL; |
| 1227 | /* Skip the verifier: */ |
| 1228 | p += 1; |
| 1229 | verf_len = ntohl(*p++); |
| 1230 | p += XDR_QUADLEN(verf_len); |
J.Bruce Fields | 3c15a48 | 2006-10-04 02:16:06 -0700 | [diff] [blame] | 1231 | /* move accept_stat to right place: */ |
| 1232 | memcpy(p, p + 2, 4); |
J.Bruce Fields | 5b304bc | 2006-10-04 02:16:07 -0700 | [diff] [blame] | 1233 | /* Also don't wrap if the accept stat is nonzero: */ |
J.Bruce Fields | 3c15a48 | 2006-10-04 02:16:06 -0700 | [diff] [blame] | 1234 | if (*p != rpc_success) { |
| 1235 | resbuf->head[0].iov_len -= 2 * 4; |
| 1236 | return NULL; |
| 1237 | } |
| 1238 | p++; |
| 1239 | return p; |
| 1240 | } |
| 1241 | |
J. Bruce Fields | e142ede | 2006-06-30 01:56:18 -0700 | [diff] [blame] | 1242 | static inline int |
| 1243 | svcauth_gss_wrap_resp_integ(struct svc_rqst *rqstp) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1244 | { |
| 1245 | struct gss_svc_data *gsd = (struct gss_svc_data *)rqstp->rq_auth_data; |
| 1246 | struct rpc_gss_wire_cred *gc = &gsd->clcred; |
| 1247 | struct xdr_buf *resbuf = &rqstp->rq_res; |
| 1248 | struct xdr_buf integ_buf; |
| 1249 | struct xdr_netobj mic; |
| 1250 | struct kvec *resv; |
Alexey Dobriyan | d8ed029 | 2006-09-26 22:29:38 -0700 | [diff] [blame] | 1251 | __be32 *p; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1252 | int integ_offset, integ_len; |
| 1253 | int stat = -EINVAL; |
| 1254 | |
J.Bruce Fields | 3c15a48 | 2006-10-04 02:16:06 -0700 | [diff] [blame] | 1255 | p = svcauth_gss_prepare_to_wrap(resbuf, gsd); |
| 1256 | if (p == NULL) |
J. Bruce Fields | e142ede | 2006-06-30 01:56:18 -0700 | [diff] [blame] | 1257 | goto out; |
J. Bruce Fields | e142ede | 2006-06-30 01:56:18 -0700 | [diff] [blame] | 1258 | integ_offset = (u8 *)(p + 1) - (u8 *)resbuf->head[0].iov_base; |
| 1259 | integ_len = resbuf->len - integ_offset; |
| 1260 | BUG_ON(integ_len % 4); |
| 1261 | *p++ = htonl(integ_len); |
| 1262 | *p++ = htonl(gc->gc_seq); |
| 1263 | if (xdr_buf_subsegment(resbuf, &integ_buf, integ_offset, |
| 1264 | integ_len)) |
| 1265 | BUG(); |
NeilBrown | 153e44d | 2007-05-09 02:34:52 -0700 | [diff] [blame] | 1266 | if (resbuf->tail[0].iov_base == NULL) { |
J. Bruce Fields | e142ede | 2006-06-30 01:56:18 -0700 | [diff] [blame] | 1267 | if (resbuf->head[0].iov_len + RPC_MAX_AUTH_SIZE > PAGE_SIZE) |
| 1268 | goto out_err; |
| 1269 | resbuf->tail[0].iov_base = resbuf->head[0].iov_base |
| 1270 | + resbuf->head[0].iov_len; |
| 1271 | resbuf->tail[0].iov_len = 0; |
J. Bruce Fields | e142ede | 2006-06-30 01:56:18 -0700 | [diff] [blame] | 1272 | resv = &resbuf->tail[0]; |
| 1273 | } else { |
| 1274 | resv = &resbuf->tail[0]; |
| 1275 | } |
| 1276 | mic.data = (u8 *)resv->iov_base + resv->iov_len + 4; |
| 1277 | if (gss_get_mic(gsd->rsci->mechctx, &integ_buf, &mic)) |
| 1278 | goto out_err; |
Alexey Dobriyan | 7699431 | 2006-09-26 22:28:46 -0700 | [diff] [blame] | 1279 | svc_putnl(resv, mic.len); |
J. Bruce Fields | e142ede | 2006-06-30 01:56:18 -0700 | [diff] [blame] | 1280 | memset(mic.data + mic.len, 0, |
| 1281 | round_up_to_quad(mic.len) - mic.len); |
| 1282 | resv->iov_len += XDR_QUADLEN(mic.len) << 2; |
| 1283 | /* not strictly required: */ |
| 1284 | resbuf->len += XDR_QUADLEN(mic.len) << 2; |
| 1285 | BUG_ON(resv->iov_len > PAGE_SIZE); |
| 1286 | out: |
| 1287 | stat = 0; |
| 1288 | out_err: |
| 1289 | return stat; |
| 1290 | } |
| 1291 | |
J. Bruce Fields | 7c9fdcf | 2006-06-30 01:56:19 -0700 | [diff] [blame] | 1292 | static inline int |
| 1293 | svcauth_gss_wrap_resp_priv(struct svc_rqst *rqstp) |
| 1294 | { |
| 1295 | struct gss_svc_data *gsd = (struct gss_svc_data *)rqstp->rq_auth_data; |
| 1296 | struct rpc_gss_wire_cred *gc = &gsd->clcred; |
| 1297 | struct xdr_buf *resbuf = &rqstp->rq_res; |
| 1298 | struct page **inpages = NULL; |
Al Viro | 753ed90 | 2006-09-26 22:30:23 -0700 | [diff] [blame] | 1299 | __be32 *p, *len; |
| 1300 | int offset; |
J. Bruce Fields | 7c9fdcf | 2006-06-30 01:56:19 -0700 | [diff] [blame] | 1301 | int pad; |
| 1302 | |
J.Bruce Fields | 3c15a48 | 2006-10-04 02:16:06 -0700 | [diff] [blame] | 1303 | p = svcauth_gss_prepare_to_wrap(resbuf, gsd); |
| 1304 | if (p == NULL) |
J. Bruce Fields | 7c9fdcf | 2006-06-30 01:56:19 -0700 | [diff] [blame] | 1305 | return 0; |
J. Bruce Fields | 7c9fdcf | 2006-06-30 01:56:19 -0700 | [diff] [blame] | 1306 | len = p++; |
| 1307 | offset = (u8 *)p - (u8 *)resbuf->head[0].iov_base; |
| 1308 | *p++ = htonl(gc->gc_seq); |
| 1309 | inpages = resbuf->pages; |
| 1310 | /* XXX: Would be better to write some xdr helper functions for |
| 1311 | * nfs{2,3,4}xdr.c that place the data right, instead of copying: */ |
NeilBrown | 4452435 | 2006-10-04 02:15:46 -0700 | [diff] [blame] | 1312 | if (resbuf->tail[0].iov_base) { |
J. Bruce Fields | 7c9fdcf | 2006-06-30 01:56:19 -0700 | [diff] [blame] | 1313 | BUG_ON(resbuf->tail[0].iov_base >= resbuf->head[0].iov_base |
| 1314 | + PAGE_SIZE); |
| 1315 | BUG_ON(resbuf->tail[0].iov_base < resbuf->head[0].iov_base); |
| 1316 | if (resbuf->tail[0].iov_len + resbuf->head[0].iov_len |
| 1317 | + 2 * RPC_MAX_AUTH_SIZE > PAGE_SIZE) |
| 1318 | return -ENOMEM; |
| 1319 | memmove(resbuf->tail[0].iov_base + RPC_MAX_AUTH_SIZE, |
| 1320 | resbuf->tail[0].iov_base, |
| 1321 | resbuf->tail[0].iov_len); |
| 1322 | resbuf->tail[0].iov_base += RPC_MAX_AUTH_SIZE; |
| 1323 | } |
| 1324 | if (resbuf->tail[0].iov_base == NULL) { |
| 1325 | if (resbuf->head[0].iov_len + 2*RPC_MAX_AUTH_SIZE > PAGE_SIZE) |
| 1326 | return -ENOMEM; |
| 1327 | resbuf->tail[0].iov_base = resbuf->head[0].iov_base |
| 1328 | + resbuf->head[0].iov_len + RPC_MAX_AUTH_SIZE; |
| 1329 | resbuf->tail[0].iov_len = 0; |
J. Bruce Fields | 7c9fdcf | 2006-06-30 01:56:19 -0700 | [diff] [blame] | 1330 | } |
| 1331 | if (gss_wrap(gsd->rsci->mechctx, offset, resbuf, inpages)) |
| 1332 | return -ENOMEM; |
| 1333 | *len = htonl(resbuf->len - offset); |
| 1334 | pad = 3 - ((resbuf->len - offset - 1)&3); |
Alexey Dobriyan | d8ed029 | 2006-09-26 22:29:38 -0700 | [diff] [blame] | 1335 | p = (__be32 *)(resbuf->tail[0].iov_base + resbuf->tail[0].iov_len); |
J. Bruce Fields | 7c9fdcf | 2006-06-30 01:56:19 -0700 | [diff] [blame] | 1336 | memset(p, 0, pad); |
| 1337 | resbuf->tail[0].iov_len += pad; |
| 1338 | resbuf->len += pad; |
| 1339 | return 0; |
| 1340 | } |
| 1341 | |
J. Bruce Fields | e142ede | 2006-06-30 01:56:18 -0700 | [diff] [blame] | 1342 | static int |
| 1343 | svcauth_gss_release(struct svc_rqst *rqstp) |
| 1344 | { |
| 1345 | struct gss_svc_data *gsd = (struct gss_svc_data *)rqstp->rq_auth_data; |
| 1346 | struct rpc_gss_wire_cred *gc = &gsd->clcred; |
| 1347 | struct xdr_buf *resbuf = &rqstp->rq_res; |
| 1348 | int stat = -EINVAL; |
| 1349 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1350 | if (gc->gc_proc != RPC_GSS_PROC_DATA) |
| 1351 | goto out; |
| 1352 | /* Release can be called twice, but we only wrap once. */ |
J.Bruce Fields | 5b304bc | 2006-10-04 02:16:07 -0700 | [diff] [blame] | 1353 | if (gsd->verf_start == NULL) |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1354 | goto out; |
| 1355 | /* normally not set till svc_send, but we need it here: */ |
J. Bruce Fields | 7c9fdcf | 2006-06-30 01:56:19 -0700 | [diff] [blame] | 1356 | /* XXX: what for? Do we mess it up the moment we call svc_putu32 |
| 1357 | * or whatever? */ |
| 1358 | resbuf->len = total_buf_len(resbuf); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1359 | switch (gc->gc_svc) { |
| 1360 | case RPC_GSS_SVC_NONE: |
| 1361 | break; |
| 1362 | case RPC_GSS_SVC_INTEGRITY: |
J. Bruce Fields | 7c9fdcf | 2006-06-30 01:56:19 -0700 | [diff] [blame] | 1363 | stat = svcauth_gss_wrap_resp_integ(rqstp); |
| 1364 | if (stat) |
| 1365 | goto out_err; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1366 | break; |
| 1367 | case RPC_GSS_SVC_PRIVACY: |
J. Bruce Fields | 7c9fdcf | 2006-06-30 01:56:19 -0700 | [diff] [blame] | 1368 | stat = svcauth_gss_wrap_resp_priv(rqstp); |
| 1369 | if (stat) |
| 1370 | goto out_err; |
| 1371 | break; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1372 | default: |
| 1373 | goto out_err; |
| 1374 | } |
| 1375 | |
| 1376 | out: |
| 1377 | stat = 0; |
| 1378 | out_err: |
| 1379 | if (rqstp->rq_client) |
| 1380 | auth_domain_put(rqstp->rq_client); |
| 1381 | rqstp->rq_client = NULL; |
J. Bruce Fields | 3ab4d8b | 2007-07-17 04:04:46 -0700 | [diff] [blame] | 1382 | if (rqstp->rq_gssclient) |
| 1383 | auth_domain_put(rqstp->rq_gssclient); |
| 1384 | rqstp->rq_gssclient = NULL; |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1385 | if (rqstp->rq_cred.cr_group_info) |
| 1386 | put_group_info(rqstp->rq_cred.cr_group_info); |
| 1387 | rqstp->rq_cred.cr_group_info = NULL; |
| 1388 | if (gsd->rsci) |
NeilBrown | baab935 | 2006-03-27 01:15:09 -0800 | [diff] [blame] | 1389 | cache_put(&gsd->rsci->h, &rsc_cache); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1390 | gsd->rsci = NULL; |
| 1391 | |
| 1392 | return stat; |
| 1393 | } |
| 1394 | |
| 1395 | static void |
| 1396 | svcauth_gss_domain_release(struct auth_domain *dom) |
| 1397 | { |
| 1398 | struct gss_domain *gd = container_of(dom, struct gss_domain, h); |
| 1399 | |
| 1400 | kfree(dom->name); |
| 1401 | kfree(gd); |
| 1402 | } |
| 1403 | |
| 1404 | static struct auth_ops svcauthops_gss = { |
| 1405 | .name = "rpcsec_gss", |
| 1406 | .owner = THIS_MODULE, |
| 1407 | .flavour = RPC_AUTH_GSS, |
| 1408 | .accept = svcauth_gss_accept, |
| 1409 | .release = svcauth_gss_release, |
| 1410 | .domain_release = svcauth_gss_domain_release, |
| 1411 | .set_client = svcauth_gss_set_client, |
| 1412 | }; |
| 1413 | |
| 1414 | int |
| 1415 | gss_svc_init(void) |
| 1416 | { |
| 1417 | int rv = svc_auth_register(RPC_AUTH_GSS, &svcauthops_gss); |
J. Bruce Fields | dbf847e | 2007-11-08 17:20:34 -0500 | [diff] [blame] | 1418 | if (rv) |
| 1419 | return rv; |
| 1420 | rv = cache_register(&rsc_cache); |
| 1421 | if (rv) |
| 1422 | goto out1; |
| 1423 | rv = cache_register(&rsi_cache); |
| 1424 | if (rv) |
| 1425 | goto out2; |
| 1426 | return 0; |
| 1427 | out2: |
| 1428 | cache_unregister(&rsc_cache); |
| 1429 | out1: |
| 1430 | svc_auth_unregister(RPC_AUTH_GSS); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1431 | return rv; |
| 1432 | } |
| 1433 | |
| 1434 | void |
| 1435 | gss_svc_shutdown(void) |
| 1436 | { |
J. Bruce Fields | df95a9d | 2007-11-08 16:09:59 -0500 | [diff] [blame] | 1437 | cache_unregister(&rsc_cache); |
| 1438 | cache_unregister(&rsi_cache); |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1439 | svc_auth_unregister(RPC_AUTH_GSS); |
| 1440 | } |