LU-17015 gss: support large kerberos token for rpc sec init

[fs/lustre-release.git] / lustre / ptlrpc / gss / gss_internal.h

diff --git a/lustre/ptlrpc/gss/gss_internal.h b/lustre/ptlrpc/gss/gss_internal.h
index fc37409..abc511d 100644 (file)
--- a/lustre/ptlrpc/gss/gss_internal.h
+++ b/lustre/ptlrpc/gss/gss_internal.h
@@ -14,6 +14,7 @@
 #include <crypto/hash.h>
 #include <libcfs/libcfs_crypto.h>
 #include <lustre_sec.h>
+#include <upcall_cache.h>
 
 /*
  * rawobj stuff
@@ -139,43 +140,6 @@ static inline __u64 gss_handle_to_u64(rawobj_t *handle)
         return *((__u64 *) handle->data);
 }
 
-#define GSS_SEQ_WIN                     (2048)
-#define GSS_SEQ_WIN_MAIN                GSS_SEQ_WIN
-#define GSS_SEQ_WIN_BACK                (128)
-#define GSS_SEQ_REPACK_THRESHOLD        (GSS_SEQ_WIN_MAIN / 2 + \
-                                         GSS_SEQ_WIN_MAIN / 4)
-
-struct gss_svc_seq_data {
-       spinlock_t              ssd_lock;
-        /*
-         * highest sequence number seen so far, for main and back window
-         */
-        __u32                   ssd_max_main;
-        __u32                   ssd_max_back;
-        /*
-         * main and back window
-         * for i such that ssd_max - GSS_SEQ_WIN < i <= ssd_max, the i-th bit
-         * of ssd_win is nonzero iff sequence number i has been seen already.
-         */
-        unsigned long           ssd_win_main[GSS_SEQ_WIN_MAIN/BITS_PER_LONG];
-        unsigned long           ssd_win_back[GSS_SEQ_WIN_BACK/BITS_PER_LONG];
-};
-
-struct gss_svc_ctx {
-        struct gss_ctx         *gsc_mechctx;
-        struct gss_svc_seq_data gsc_seqdata;
-        rawobj_t                gsc_rvs_hdl;
-        __u32                   gsc_rvs_seq;
-        uid_t                   gsc_uid;
-        gid_t                   gsc_gid;
-        uid_t                   gsc_mapped_uid;
-        unsigned int            gsc_usr_root:1,
-                                gsc_usr_mds:1,
-                                gsc_usr_oss:1,
-                                gsc_remote:1,
-                                gsc_reverse:1;
-};
-
 struct gss_svc_reqctx {
         struct ptlrpc_svc_ctx           src_base;
         /*
@@ -479,4 +443,13 @@ static inline unsigned int ll_read_key_usage(struct key *key)
 #endif
 }
 
+#define RSI_UPCALL_PATH "/usr/sbin/l_getauth"
+#define UC_RSICACHE_HASH_SIZE 64
+
+extern struct upcall_cache_ops rsi_upcall_cache_ops;
+extern struct upcall_cache *rsicache;
+struct gss_rsi *rsi_entry_get(struct upcall_cache *cache, struct gss_rsi *rsi);
+void rsi_entry_put(struct upcall_cache *cache, struct gss_rsi *rsi);
+void rsi_flush(struct upcall_cache *cache, int hash);
+
 #endif /* __PTLRPC_GSS_GSS_INTERNAL_H_ */