Root/
1 | #include <linux/ceph/ceph_debug.h> |
2 | |
3 | #include <linux/module.h> |
4 | #include <linux/err.h> |
5 | #include <linux/slab.h> |
6 | |
7 | #include <linux/ceph/types.h> |
8 | #include <linux/ceph/decode.h> |
9 | #include <linux/ceph/libceph.h> |
10 | #include <linux/ceph/messenger.h> |
11 | #include "auth_none.h" |
12 | #include "auth_x.h" |
13 | |
14 | |
15 | /* |
16 | * get protocol handler |
17 | */ |
18 | static u32 supported_protocols[] = { |
19 | CEPH_AUTH_NONE, |
20 | CEPH_AUTH_CEPHX |
21 | }; |
22 | |
23 | static int ceph_auth_init_protocol(struct ceph_auth_client *ac, int protocol) |
24 | { |
25 | switch (protocol) { |
26 | case CEPH_AUTH_NONE: |
27 | return ceph_auth_none_init(ac); |
28 | case CEPH_AUTH_CEPHX: |
29 | return ceph_x_init(ac); |
30 | default: |
31 | return -ENOENT; |
32 | } |
33 | } |
34 | |
35 | /* |
36 | * setup, teardown. |
37 | */ |
38 | struct ceph_auth_client *ceph_auth_init(const char *name, const struct ceph_crypto_key *key) |
39 | { |
40 | struct ceph_auth_client *ac; |
41 | int ret; |
42 | |
43 | dout("auth_init name '%s'\n", name); |
44 | |
45 | ret = -ENOMEM; |
46 | ac = kzalloc(sizeof(*ac), GFP_NOFS); |
47 | if (!ac) |
48 | goto out; |
49 | |
50 | ac->negotiating = true; |
51 | if (name) |
52 | ac->name = name; |
53 | else |
54 | ac->name = CEPH_AUTH_NAME_DEFAULT; |
55 | dout("auth_init name %s\n", ac->name); |
56 | ac->key = key; |
57 | return ac; |
58 | |
59 | out: |
60 | return ERR_PTR(ret); |
61 | } |
62 | |
63 | void ceph_auth_destroy(struct ceph_auth_client *ac) |
64 | { |
65 | dout("auth_destroy %p\n", ac); |
66 | if (ac->ops) |
67 | ac->ops->destroy(ac); |
68 | kfree(ac); |
69 | } |
70 | |
71 | /* |
72 | * Reset occurs when reconnecting to the monitor. |
73 | */ |
74 | void ceph_auth_reset(struct ceph_auth_client *ac) |
75 | { |
76 | dout("auth_reset %p\n", ac); |
77 | if (ac->ops && !ac->negotiating) |
78 | ac->ops->reset(ac); |
79 | ac->negotiating = true; |
80 | } |
81 | |
82 | int ceph_entity_name_encode(const char *name, void **p, void *end) |
83 | { |
84 | int len = strlen(name); |
85 | |
86 | if (*p + 2*sizeof(u32) + len > end) |
87 | return -ERANGE; |
88 | ceph_encode_32(p, CEPH_ENTITY_TYPE_CLIENT); |
89 | ceph_encode_32(p, len); |
90 | ceph_encode_copy(p, name, len); |
91 | return 0; |
92 | } |
93 | |
94 | /* |
95 | * Initiate protocol negotiation with monitor. Include entity name |
96 | * and list supported protocols. |
97 | */ |
98 | int ceph_auth_build_hello(struct ceph_auth_client *ac, void *buf, size_t len) |
99 | { |
100 | struct ceph_mon_request_header *monhdr = buf; |
101 | void *p = monhdr + 1, *end = buf + len, *lenp; |
102 | int i, num; |
103 | int ret; |
104 | |
105 | dout("auth_build_hello\n"); |
106 | monhdr->have_version = 0; |
107 | monhdr->session_mon = cpu_to_le16(-1); |
108 | monhdr->session_mon_tid = 0; |
109 | |
110 | ceph_encode_32(&p, 0); /* no protocol, yet */ |
111 | |
112 | lenp = p; |
113 | p += sizeof(u32); |
114 | |
115 | ceph_decode_need(&p, end, 1 + sizeof(u32), bad); |
116 | ceph_encode_8(&p, 1); |
117 | num = ARRAY_SIZE(supported_protocols); |
118 | ceph_encode_32(&p, num); |
119 | ceph_decode_need(&p, end, num * sizeof(u32), bad); |
120 | for (i = 0; i < num; i++) |
121 | ceph_encode_32(&p, supported_protocols[i]); |
122 | |
123 | ret = ceph_entity_name_encode(ac->name, &p, end); |
124 | if (ret < 0) |
125 | return ret; |
126 | ceph_decode_need(&p, end, sizeof(u64), bad); |
127 | ceph_encode_64(&p, ac->global_id); |
128 | |
129 | ceph_encode_32(&lenp, p - lenp - sizeof(u32)); |
130 | return p - buf; |
131 | |
132 | bad: |
133 | return -ERANGE; |
134 | } |
135 | |
136 | static int ceph_build_auth_request(struct ceph_auth_client *ac, |
137 | void *msg_buf, size_t msg_len) |
138 | { |
139 | struct ceph_mon_request_header *monhdr = msg_buf; |
140 | void *p = monhdr + 1; |
141 | void *end = msg_buf + msg_len; |
142 | int ret; |
143 | |
144 | monhdr->have_version = 0; |
145 | monhdr->session_mon = cpu_to_le16(-1); |
146 | monhdr->session_mon_tid = 0; |
147 | |
148 | ceph_encode_32(&p, ac->protocol); |
149 | |
150 | ret = ac->ops->build_request(ac, p + sizeof(u32), end); |
151 | if (ret < 0) { |
152 | pr_err("error %d building auth method %s request\n", ret, |
153 | ac->ops->name); |
154 | return ret; |
155 | } |
156 | dout(" built request %d bytes\n", ret); |
157 | ceph_encode_32(&p, ret); |
158 | return p + ret - msg_buf; |
159 | } |
160 | |
161 | /* |
162 | * Handle auth message from monitor. |
163 | */ |
164 | int ceph_handle_auth_reply(struct ceph_auth_client *ac, |
165 | void *buf, size_t len, |
166 | void *reply_buf, size_t reply_len) |
167 | { |
168 | void *p = buf; |
169 | void *end = buf + len; |
170 | int protocol; |
171 | s32 result; |
172 | u64 global_id; |
173 | void *payload, *payload_end; |
174 | int payload_len; |
175 | char *result_msg; |
176 | int result_msg_len; |
177 | int ret = -EINVAL; |
178 | |
179 | dout("handle_auth_reply %p %p\n", p, end); |
180 | ceph_decode_need(&p, end, sizeof(u32) * 3 + sizeof(u64), bad); |
181 | protocol = ceph_decode_32(&p); |
182 | result = ceph_decode_32(&p); |
183 | global_id = ceph_decode_64(&p); |
184 | payload_len = ceph_decode_32(&p); |
185 | payload = p; |
186 | p += payload_len; |
187 | ceph_decode_need(&p, end, sizeof(u32), bad); |
188 | result_msg_len = ceph_decode_32(&p); |
189 | result_msg = p; |
190 | p += result_msg_len; |
191 | if (p != end) |
192 | goto bad; |
193 | |
194 | dout(" result %d '%.*s' gid %llu len %d\n", result, result_msg_len, |
195 | result_msg, global_id, payload_len); |
196 | |
197 | payload_end = payload + payload_len; |
198 | |
199 | if (global_id && ac->global_id != global_id) { |
200 | dout(" set global_id %lld -> %lld\n", ac->global_id, global_id); |
201 | ac->global_id = global_id; |
202 | } |
203 | |
204 | if (ac->negotiating) { |
205 | /* server does not support our protocols? */ |
206 | if (!protocol && result < 0) { |
207 | ret = result; |
208 | goto out; |
209 | } |
210 | /* set up (new) protocol handler? */ |
211 | if (ac->protocol && ac->protocol != protocol) { |
212 | ac->ops->destroy(ac); |
213 | ac->protocol = 0; |
214 | ac->ops = NULL; |
215 | } |
216 | if (ac->protocol != protocol) { |
217 | ret = ceph_auth_init_protocol(ac, protocol); |
218 | if (ret) { |
219 | pr_err("error %d on auth protocol %d init\n", |
220 | ret, protocol); |
221 | goto out; |
222 | } |
223 | } |
224 | |
225 | ac->negotiating = false; |
226 | } |
227 | |
228 | ret = ac->ops->handle_reply(ac, result, payload, payload_end); |
229 | if (ret == -EAGAIN) { |
230 | return ceph_build_auth_request(ac, reply_buf, reply_len); |
231 | } else if (ret) { |
232 | pr_err("auth method '%s' error %d\n", ac->ops->name, ret); |
233 | return ret; |
234 | } |
235 | return 0; |
236 | |
237 | bad: |
238 | pr_err("failed to decode auth msg\n"); |
239 | out: |
240 | return ret; |
241 | } |
242 | |
243 | int ceph_build_auth(struct ceph_auth_client *ac, |
244 | void *msg_buf, size_t msg_len) |
245 | { |
246 | if (!ac->protocol) |
247 | return ceph_auth_build_hello(ac, msg_buf, msg_len); |
248 | BUG_ON(!ac->ops); |
249 | if (ac->ops->should_authenticate(ac)) |
250 | return ceph_build_auth_request(ac, msg_buf, msg_len); |
251 | return 0; |
252 | } |
253 | |
254 | int ceph_auth_is_authenticated(struct ceph_auth_client *ac) |
255 | { |
256 | if (!ac->ops) |
257 | return 0; |
258 | return ac->ops->is_authenticated(ac); |
259 | } |
260 |
Branches:
ben-wpan
ben-wpan-stefan
javiroman/ks7010
jz-2.6.34
jz-2.6.34-rc5
jz-2.6.34-rc6
jz-2.6.34-rc7
jz-2.6.35
jz-2.6.36
jz-2.6.37
jz-2.6.38
jz-2.6.39
jz-3.0
jz-3.1
jz-3.11
jz-3.12
jz-3.13
jz-3.15
jz-3.16
jz-3.18-dt
jz-3.2
jz-3.3
jz-3.4
jz-3.5
jz-3.6
jz-3.6-rc2-pwm
jz-3.9
jz-3.9-clk
jz-3.9-rc8
jz47xx
jz47xx-2.6.38
master
Tags:
od-2011-09-04
od-2011-09-18
v2.6.34-rc5
v2.6.34-rc6
v2.6.34-rc7
v3.9