#include <unistd.h>
#include <cctype>
#include <cerrno>
#include <cstdlib>
#include <strings.h>
#include <cstdio>
#include <sys/param.h>
#include <pwd.h>
#include <sys/types.h>
#include <sys/stat.h>
#include <fcntl.h>
#include <sys/times.h>
#include "XrdVersion.hh"
#include "XrdSys/XrdSysHeaders.hh"
#include "XrdSys/XrdSysLogger.hh"
#include "XrdSys/XrdSysError.hh"
#include "XrdSys/XrdSysPwd.hh"
#include "XrdOuc/XrdOucStream.hh"
#include "XrdSys/XrdSysPriv.hh"
#include "XrdSut/XrdSutPFCache.hh"
#include "XrdSecpwd/XrdSecProtocolpwd.hh"
#include "XrdSecpwd/XrdSecpwdPlatform.hh"

Include dependency graph for XrdSecProtocolpwd.cc:

Macros
#define	POPTS(t, y)

Functions
static const char *	ClientStepStr (int kclt)
static const char *	ServerStepStr (int ksrv)
char *	XrdSecProtocolpwdInit (const char mode, const char parms, XrdOucErrInfo erp)
XrdSecProtocol *	XrdSecProtocolpwdObject (const char mode, const char hostname, XrdNetAddrInfo &endPoint, const char parms, XrdOucErrInfo *erp)
	XrdVERSIONINFO (XrdSecProtocolpwdInit, secpwd)
	XrdVERSIONINFO (XrdSecProtocolpwdObject, secpwd)

Variables
static String	AdminRef = ProtoID + "admin"
static const char *	gPWErrStr []
static const int	kOneDay = 86400
static const short	kOptsAFSPwd = 0x0800
static const short	kOptsAregAll = 0x0008
static const short	kOptsAutoReg = 0x0004
static const short	kOptsChngPwd = 0x0400
static const short	kOptsClntTty = 0x0080
static const short	kOptsCrypPwd = 0x0200
static const short	kOptsExpCred = 0x0100
static const short	kOptsServer = 0x0001
static const short	kOptsUserPwd = 0x0002
static const short	kOptsVeriClt = 0x0040
static const short	kOptsVeriSrv = 0x0020
static String	NetRcRef = ProtoID + "netrc"
static String	Prefix = "xrd"
static String	ProtoID = XrdSecPROTOIDENT
static const char *	pwdClientSteps []
static const char *	pwdServerSteps []
XrdOucTrace *	pwdTrace = 0
static String	SrvPukRef = ProtoID + "srvpuk"
static String	UserRef = ProtoID + "user"
static const kXR_int32	Version = XrdSecpwdVERSION

Macro Definition Documentation

◆ POPTS

#define POPTS	(		t,
			y )

Value:

{if (t) {t->Beg(epname); std::cerr <<y; t->End();}}

Definition at line 61 of file XrdSecProtocolpwd.cc.

Function Documentation

◆ ClientStepStr()

const char * ClientStepStr ( int kclt )

static

Definition at line 215 of file XrdSecProtocolpwd.cc.

{
   // Return string with client step  
   static const char *ukn = "Unknown";
 
   kclt = (kclt < 0) ? 0 : kclt;
   kclt = (kclt > kXPC_reserved) ? 0 : kclt;
   kclt = (kclt >= kXPC_normal) ? (kclt - kXPC_normal + 1) : kclt;
 
   if (kclt < 0 || kclt > (kXPC_reserved - kXPC_normal + 1))
      return ukn;  
   else
      return pwdClientSteps[kclt];
}

References ClientStepStr(), kXPC_normal, kXPC_reserved, and pwdClientSteps.

Referenced by XrdSecProtocolpwd::Authenticate(), and XrdSecProtocolpwd::getCredentials().

Here is the call graph for this function:

Here is the caller graph for this function:

◆ ServerStepStr()

const char * ServerStepStr ( int ksrv )

static

Definition at line 231 of file XrdSecProtocolpwd.cc.

{
   // Return string with server step  
   static const char *ukn = "Unknown";
 
   ksrv = (ksrv < 0) ? 0 : ksrv;
   ksrv = (ksrv > kXPS_reserved) ? 0 : ksrv;
   ksrv = (ksrv >= kXPS_init) ? (ksrv - kXPS_init + 1) : ksrv;
 
   if (ksrv < 0 || ksrv > (kXPS_reserved - kXPS_init + 1))
      return ukn;  
   else
      return pwdServerSteps[ksrv];
}

References kXPS_init, kXPS_reserved, pwdServerSteps, and ServerStepStr().

Referenced by XrdSecProtocolpwd::Authenticate(), and XrdSecProtocolpwd::getCredentials().

Here is the call graph for this function:

Here is the caller graph for this function:

◆ XrdSecProtocolpwdInit()

char * XrdSecProtocolpwdInit	(	const char	mode,
		const char *	parms,
		XrdOucErrInfo *	erp )

Definition at line 1677 of file XrdSecProtocolpwd.cc.

{
   // One-time protocol initialization, filling the static flags and options
   // of the protocol.
   // For clients (mode == 'c') we use values in envs.
   // For servers (mode == 's') the command line options are passed through
   // parms.
   EPNAME("ProtocolpwdInit");
 
   pwdOptions opts;
   char *rc = (char *)"";
   char *cenv = 0;
 
   // Initiate error logging and tracing
   pwdTrace = XrdSecProtocolpwd::EnableTracing();
 
   //
   // Clients first
   if (mode == 'c') {
      //
      // Decode envs:
      //              "XrdSecDEBUG"          debug flag ("0","1","2","3")
      //              "XrdSecPWDVERIFYSRV"   "1" server verification ON [default]
      //                                     "0" server verification OFF
      //              "XrdSecPWDSRVPUK"      full path to file with server puks
      //                                     [default: $HOME/.xrd/pwdsrvpuk]
      //              "XrdSecPWDAUTOLOG"     "1" autologin ON [default]
      //                                     "0" autologin OFF
      //              "XrdSecPWDALOGFILE"    full path to file with autologin
      //                                     info [default: $HOME/.xrd/pwdnetrc]
      //              "XrdSecPWDALOGUPDT"    update autologin file option:
      //                                     "0"  never [default]
      //                                     "1"  remove_obsolete_info
      //                                     "2"  "1" + register_new_valid_info
      //              "XrdSecPWDMAXPROMPT"   max number of attemts to get valid
      //                                     input info by prompting the client
      //
      opts.mode = mode;
      // debug
      cenv = getenv("XrdSecDEBUG");
      if (cenv)
         {if (cenv[0] >= 49 && cenv[0] <= 51) opts.debug = atoi(cenv);
             else {PRINT("unsupported debug value from env XrdSecDEBUG: "<<cenv<<" - setting to 1");
                   opts.debug = 1;
                  }
         }
 
      // server verification
      cenv = getenv("XrdSecPWDVERIFYSRV");
      if (cenv)
         if (cenv[0] >= 48 && cenv[0] <= 49) opts.verisrv = atoi(cenv);  
      // file with server public keys
      cenv = getenv("XrdSecPWDSRVPUK");
      if (cenv)
         opts.srvpuk = strdup(cenv);  
      // autologin
      cenv = getenv("XrdSecPWDAUTOLOG");
      if (cenv)
         if (cenv[0] >= 48 && cenv[0] <= 50) opts.alog = atoi(cenv);  
      // autologin file
      cenv = getenv("XrdSecPWDALOGFILE");
      if (cenv)
         opts.alogfile = strdup(cenv);  
      // max re-prompts
      cenv = getenv("XrdSecPWDMAXPROMPT");
      if (cenv) {
         opts.maxprompts = strtol(cenv, (char **)0, 10);
         if (errno == ERANGE) opts.maxprompts = -1;
      }
      //
      // Setup the object with the chosen options
      rc = XrdSecProtocolpwd::Init(opts,erp);
 
      // Notify init options, if required or in case of init errors
      if (!rc) opts.debug = 1;
      opts.Print(pwdTrace);
 
      // Some cleanup
      if (opts.srvpuk) free(opts.srvpuk);
      if (opts.alogfile) free(opts.alogfile);
 
      // We are done
      return rc;
   }
 
   // Take into account xrootd debug flag
   cenv = getenv("XRDDEBUG");
   if (cenv && !strcmp(cenv,"1")) opts.debug = 1;
 
   //
   // Server initialization
   if (parms) {
      // 
      // Duplicate the parms
      char parmbuff[1024];
      strlcpy(parmbuff, parms, sizeof(parmbuff));
      //
      // The tokenizer
      XrdOucTokenizer inParms(parmbuff);
 
      //
      // Decode parms:
      // for servers: [-upwd:<user_pwd_option>]
      //              [-a:<autoreg_level>]
      //              [-vc:<client_verification_level>]
      //              [-dir:<dir_with_pwd_info>]
      //              [-udir:<sub_dir_with_user_pwd_info>]
      //              [-c:[-]ssl[:[-]<CryptoModuleName]]
      //              [-d:<debug_level>]
      //              [-syspwd]
      //              [-lf:<credential_lifetime>]
      //              [-maxfail:<max_number_of_failures>]
      //              [-keepcreds]
      //              [-expcreds:<creds_file_name>]
      //              [-expfmt:<creds_exp_format>]
      //
      // <user_pwd_opt> = 0 (do-not-use), 1 (use), 2 (also-crypt-hash)
      // <debug_level> = 0 (none), 1 (low), 2 (medium), 3 (high)   [0]
      // <autoreg_level> = 0 (none), 1 (local users + allowed tags), 2 (all) [0]
      // <credential_lifetime> = 1d, 5h:10m, ... (see XrdSutAux::ParseTime)
      // <client_verification_level> = 0 (none), 1 (timestamp), 2 (random tag) [2]
      // <creds_file_name> = can be a fully specified path or in the templated form
      //                     /path/<user>/file, with <user> expanded at the moment
      //                     of use with the login name.
      // <creds_exp_format> = 0 (XrdSutPFEntry in dedicated file),
      //                      1 (hex form), 2 (plain), 3 (plain, no keywords) [0]
      //
      int debug = -1;
      int areg = -1;
      int vc = -1;
      int upw = -1;
      int syspwd = -1;
      int lifetime = -1;
      int maxfail = -1;
      String dir = "";
      String udir = "";
      String clist = "";
      String cpass = "";
      int keepcreds = -1;
      String expcreds = "";
      int expfmt = 0;
      char *op = 0;
      while (inParms.GetLine()) { 
         while ((op = inParms.GetToken())) {
            if (!strncmp(op, "-upwd:",6)) {
               upw = atoi(op+6);
            } else if (!strncmp(op, "-dir:",5)) {
               dir = (const char *)(op+5);
            } else if (!strncmp(op, "-udir:",6)) {
               udir = (const char *)(op+6);
            } else if (!strncmp(op, "-c:",3)) {
               clist = (const char *)(op+3);
            } else if (!strncmp(op, "-d:",3)) {
               debug = atoi(op+3);
            } else if (!strncmp(op, "-a:",3)) {
               areg = atoi(op+3);
            } else if (!strncmp(op, "-vc:",4)) {
               vc = atoi(op+4);
            } else if (!strncmp(op, "-syspwd",7)) {
               syspwd = 1;
            } else if (!strncmp(op, "-lf:",4)) {
               lifetime = XrdSutParseTime(op+4);
            } else if (!strncmp(op, "-maxfail:",9)) {
               maxfail =  atoi(op+9);
            } else if (!strncmp(op, "-cryptfile:",11)) {
               cpass = (const char *)(op+11);
            } else if (!strncmp(op, "-keepcreds",10)) {
               keepcreds = 1;
            } else if (!strncmp(op, "-expcreds:",10)) {
               expcreds = (const char *)(op+10);
            } else if (!strncmp(op, "-expfmt:",8)) {
               expfmt =  atoi(op+8);
            }
         }
         // Check inputs
         areg = (areg >= 0 && areg <= 2) ? areg : 0;
         vc = (vc >= 0 && vc <= 2) ? vc : 2;
      }
 
      //
      // Build the option object
      opts.debug = (debug > -1) ? debug : opts.debug;
      opts.mode = 's';
      opts.areg = areg;
      opts.vericlnt = vc;
      opts.upwd = upw;
      opts.syspwd = syspwd;
      opts.lifecreds = lifetime;
      opts.maxfailures = maxfail;
      opts.expfmt = expfmt;
      if (dir.length() > 0)
         opts.dir = (char *)dir.c_str();
      if (udir.length() > 0)
         opts.udir = (char *)udir.c_str();
      if (clist.length() > 0)
         opts.clist = (char *)clist.c_str();
      if (cpass.length() > 0)
         opts.cpass = (char *)cpass.c_str();
      opts.keepcreds = keepcreds;
      if (expcreds.length() > 0)
         opts.expcreds = (char *)expcreds.c_str();
 
      // Notify init options, if required
      opts.Print(pwdTrace);
      //
      // Setup the plug-in with the chosen options
      return XrdSecProtocolpwd::Init(opts,erp);
   }
 
   // Notify init options, if required
   opts.Print(pwdTrace);
   //
   // Setup the plug-in with the defaults
   return XrdSecProtocolpwd::Init(opts,erp);
}}

References XrdOucString::c_str(), myOpts::debug, XrdSecProtocolpwd::EnableTracing(), EPNAME, XrdOucTokenizer::GetLine(), XrdOucTokenizer::GetToken(), XrdSecProtocolpwd::Init(), XrdOucString::length(), opts, PRINT, pwdTrace, strlcpy(), XrdSecProtocolpwdInit(), and XrdSutParseTime().

Referenced by XrdSecProtocolpwdInit(), and XrdVERSIONINFO().

Here is the call graph for this function:

Here is the caller graph for this function:

◆ XrdSecProtocolpwdObject()

XrdSecProtocol * XrdSecProtocolpwdObject	(	const char	mode,
		const char *	hostname,
		XrdNetAddrInfo &	endPoint,
		const char *	parms,
		XrdOucErrInfo *	erp )

Definition at line 1903 of file XrdSecProtocolpwd.cc.

{
   XrdSecProtocolpwd *prot;
   int options = XrdSecNOIPCHK;
 
   //
   // Get a new protocol object
   if (!(prot = new XrdSecProtocolpwd(options, hostname, endPoint, parms))) {
      const char *msg = "Secpwd: Insufficient memory for protocol.";
      if (erp) 
         erp->setErrInfo(ENOMEM, msg);
      else 
         std::cerr <<msg <<std::endl;
      return (XrdSecProtocol *)0;
   }
   //
   // We are done
   if (!erp)
      std::cerr << "protocol object instantiated" << std::endl;
   return prot;
}}

References XrdSecProtocolpwd::XrdSecProtocolpwd(), XrdOucErrInfo::setErrInfo(), XrdSecNOIPCHK, and XrdSecProtocolpwdObject().

Referenced by XrdSecProtocolpwdObject(), and XrdVERSIONINFO().

Here is the call graph for this function:

Here is the caller graph for this function:

◆ XrdVERSIONINFO() [1/2]

XrdVERSIONINFO	(	XrdSecProtocolpwdInit	,
		secpwd	)

References XrdSecProtocolpwdInit(), and XrdVERSIONINFO().

Here is the call graph for this function:

◆ XrdVERSIONINFO() [2/2]

XrdVERSIONINFO	(	XrdSecProtocolpwdObject	,
		secpwd	)

References XrdSecProtocolpwdObject(), and XrdVERSIONINFO().

Here is the call graph for this function:

Variable Documentation

◆ AdminRef

String AdminRef = ProtoID + "admin"

static

Definition at line 73 of file XrdSecProtocolpwd.cc.

Referenced by XrdSecProtocolpwd::Init(), and ParseArguments().

◆ gPWErrStr

const char* gPWErrStr[]

static

Definition at line 101 of file XrdSecProtocolpwd.cc.

◆ kOneDay

const int kOneDay = 86400

static

Definition at line 155 of file XrdSecProtocolpwd.cc.

◆ kOptsAFSPwd

const short kOptsAFSPwd = 0x0800

static

Definition at line 153 of file XrdSecProtocolpwd.cc.

Referenced by XrdSecProtocolpwd::Authenticate().

◆ kOptsAregAll

const short kOptsAregAll = 0x0008

static

Definition at line 146 of file XrdSecProtocolpwd.cc.

◆ kOptsAutoReg

const short kOptsAutoReg = 0x0004

static

Definition at line 145 of file XrdSecProtocolpwd.cc.

◆ kOptsChngPwd

const short kOptsChngPwd = 0x0400

static

Definition at line 152 of file XrdSecProtocolpwd.cc.

Referenced by XrdSecProtocolpwd::Authenticate(), and XrdSecProtocolpwd::getCredentials().

◆ kOptsClntTty

const short kOptsClntTty = 0x0080

static

Definition at line 149 of file XrdSecProtocolpwd.cc.

Referenced by XrdSecProtocolpwd::Authenticate(), and XrdSecProtocolpwd::getCredentials().

◆ kOptsCrypPwd

const short kOptsCrypPwd = 0x0200

static

Definition at line 151 of file XrdSecProtocolpwd.cc.

Referenced by XrdSecProtocolpwd::Authenticate().

◆ kOptsExpCred

const short kOptsExpCred = 0x0100

static

Definition at line 150 of file XrdSecProtocolpwd.cc.

Referenced by XrdSecProtocolpwd::Authenticate().

◆ kOptsServer

const short kOptsServer = 0x0001

static

Definition at line 143 of file XrdSecProtocolpwd.cc.

◆ kOptsUserPwd

const short kOptsUserPwd = 0x0002

static

Definition at line 144 of file XrdSecProtocolpwd.cc.

◆ kOptsVeriClt

const short kOptsVeriClt = 0x0040

static

Definition at line 148 of file XrdSecProtocolpwd.cc.

◆ kOptsVeriSrv

const short kOptsVeriSrv = 0x0020

static

Definition at line 147 of file XrdSecProtocolpwd.cc.

◆ NetRcRef

String NetRcRef = ProtoID + "netrc"

static

Definition at line 76 of file XrdSecProtocolpwd.cc.

Referenced by XrdSecProtocolpwd::Init(), and ParseArguments().

◆ Prefix

String Prefix = "xrd"

static

Definition at line 70 of file XrdSecProtocolpwd.cc.

Referenced by XrdSecProtocolpwd::Init().

◆ ProtoID

String ProtoID = XrdSecPROTOIDENT

static

Definition at line 71 of file XrdSecProtocolpwd.cc.

◆ pwdClientSteps

const char* pwdClientSteps[]

static

Initial value:

                                 = {
   "kXPC_none",
   "kXPC_normal",
   "kXPC_verifysrv",
   "kXPC_signedrtag",
   "kXPC_creds",
   "kXPC_autoreg",
   "kXPC_failureack",
   "kXPC_reserved"
}

Definition at line 78 of file XrdSecProtocolpwd.cc.

Referenced by ClientStepStr().

◆ pwdServerSteps

const char* pwdServerSteps[]

static

Initial value:

                                 = {
   "kXPS_none",
   "kXPS_init",
   "kXPS_credsreq",
   "kXPS_rtag",
   "kXPS_signedrtag",
   "kXPS_newpuk",
   "kXPS_puk",
   "kXPS_failure",
   "kXPS_reserved"
}

Definition at line 89 of file XrdSecProtocolpwd.cc.

Referenced by ServerStepStr().

◆ pwdTrace

XrdOucTrace* pwdTrace = 0

Definition at line 209 of file XrdSecProtocolpwd.cc.

Referenced by XrdSecProtocolpwd::Init(), and XrdSecProtocolpwdInit().

◆ SrvPukRef

String SrvPukRef = ProtoID + "srvpuk"

static

Definition at line 74 of file XrdSecProtocolpwd.cc.

Referenced by XrdSecProtocolpwd::Init(), and ParseArguments().

◆ UserRef

String UserRef = ProtoID + "user"

static

Definition at line 75 of file XrdSecProtocolpwd.cc.

Referenced by XrdSecProtocolpwd::Init(), and ParseArguments().

◆ Version

const kXR_int32 Version = XrdSecpwdVERSION

static

Definition at line 72 of file XrdSecProtocolpwd.cc.

Referenced by XrdSecProtocolpwd::XrdSecProtocolpwd(), XrdSecProtocolpwd::getCredentials(), and XrdSecProtocolpwd::Init().

	XRootD

Macros

Functions

Variables

Macro Definition Documentation

◆ POPTS

Function Documentation

◆ ClientStepStr()

◆ ServerStepStr()

◆ XrdSecProtocolpwdInit()

◆ XrdSecProtocolpwdObject()

◆ XrdVERSIONINFO() [1/2]

◆ XrdVERSIONINFO() [2/2]

Variable Documentation

◆ AdminRef

◆ gPWErrStr

◆ kOneDay

◆ kOptsAFSPwd

◆ kOptsAregAll

◆ kOptsAutoReg

◆ kOptsChngPwd

◆ kOptsClntTty

◆ kOptsCrypPwd

◆ kOptsExpCred

◆ kOptsServer

◆ kOptsUserPwd

◆ kOptsVeriClt

◆ kOptsVeriSrv

◆ NetRcRef

◆ Prefix

◆ ProtoID

◆ pwdClientSteps

◆ pwdServerSteps

◆ pwdTrace

◆ SrvPukRef

◆ UserRef

◆ Version