4 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
6 * This program is free software; you can redistribute it and/or modify
7 * it under the terms of the GNU General Public License version 2 only,
8 * as published by the Free Software Foundation.
10 * This program is distributed in the hope that it will be useful, but
11 * WITHOUT ANY WARRANTY; without even the implied warranty of
12 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
13 * General Public License version 2 for more details (a copy is included
14 * in the LICENSE file that accompanied this code).
16 * You should have received a copy of the GNU General Public License
17 * version 2 along with this program; If not, see
18 * http://www.sun.com/software/products/lustre/docs/GPLv2.pdf
20 * Please contact Sun Microsystems, Inc., 4150 Network Circle, Santa Clara,
21 * CA 95054 USA or visit www.sun.com if you need additional information or
27 * Copyright (c) 2007, 2010, Oracle and/or its affiliates. All rights reserved.
28 * Use is subject to license terms.
30 * Copyright (c) 2011, 2012, Intel Corporation.
33 * This file is part of Lustre, http://www.lustre.org/
34 * Lustre is a trademark of Sun Microsystems, Inc.
36 * lustre/mdt/mdt_identity.c
38 * Author: Lai Siyao <lsy@clusterfs.com>
39 * Author: Fan Yong <fanyong@clusterfs.com>
42 #define DEBUG_SUBSYSTEM S_MDS
44 #include <linux/module.h>
45 #include <linux/kernel.h>
47 #include <linux/kmod.h>
48 #include <linux/string.h>
49 #include <linux/stat.h>
50 #include <linux/errno.h>
51 #include <linux/version.h>
52 #include <linux/unistd.h>
53 #include <asm/uaccess.h>
55 #include <linux/stat.h>
56 #include <asm/uaccess.h>
57 #include <linux/slab.h>
59 #include <libcfs/libcfs.h>
61 #include <obd_class.h>
62 #include <obd_support.h>
63 #include <lustre_net.h>
64 #include <lustre_import.h>
65 #include <lustre_dlm.h>
66 #include <lustre_lib.h>
68 #include "mdt_internal.h"
70 static void mdt_identity_entry_init(struct upcall_cache_entry *entry,
73 entry->u.identity.mi_uc_entry = entry;
76 static void mdt_identity_entry_free(struct upcall_cache *cache,
77 struct upcall_cache_entry *entry)
79 struct md_identity *identity = &entry->u.identity;
81 if (identity->mi_ginfo) {
82 put_group_info(identity->mi_ginfo);
83 identity->mi_ginfo = NULL;
86 if (identity->mi_nperms) {
87 LASSERT(identity->mi_perms);
88 OBD_FREE(identity->mi_perms,
89 identity->mi_nperms * sizeof(struct md_perm));
90 identity->mi_nperms = 0;
94 static int mdt_identity_do_upcall(struct upcall_cache *cache,
95 struct upcall_cache_entry *entry)
99 [0] = cache->uc_upcall,
100 [1] = cache->uc_name,
106 [1] = "PATH=/sbin:/usr/sbin",
109 struct timeval start, end;
113 /* There is race condition:
114 * "uc_upcall" was changed just after "is_identity_get_disabled" check.
116 down_read(&cache->uc_upcall_rwsem);
117 CDEBUG(D_INFO, "The upcall is: '%s'\n", cache->uc_upcall);
119 if (unlikely(!strcmp(cache->uc_upcall, "NONE"))) {
120 CERROR("no upcall set\n");
121 GOTO(out, rc = -EREMCHG);
124 argv[0] = cache->uc_upcall;
125 snprintf(keystr, sizeof(keystr), "%llu", entry->ue_key);
127 do_gettimeofday(&start);
128 rc = call_usermodehelper(argv[0], argv, envp, UMH_WAIT_EXEC);
129 do_gettimeofday(&end);
131 CERROR("%s: error invoking upcall %s %s %s: rc %d; "
132 "check /proc/fs/lustre/mdt/%s/identity_upcall, "
134 cache->uc_name, argv[0], argv[1], argv[2], rc,
135 cache->uc_name, cfs_timeval_sub(&end, &start, NULL));
137 CDEBUG(D_HA, "%s: invoked upcall %s %s %s, time %ldus\n",
138 cache->uc_name, argv[0], argv[1], argv[2],
139 cfs_timeval_sub(&end, &start, NULL));
144 up_read(&cache->uc_upcall_rwsem);
148 static int mdt_identity_parse_downcall(struct upcall_cache *cache,
149 struct upcall_cache_entry *entry,
152 struct md_identity *identity = &entry->u.identity;
153 struct identity_downcall_data *data = args;
154 struct group_info *ginfo = NULL;
155 struct md_perm *perms = NULL;
160 if (data->idd_ngroups > NGROUPS_MAX)
163 if (data->idd_ngroups > 0) {
164 ginfo = groups_alloc(data->idd_ngroups);
166 CERROR("failed to alloc %d groups\n", data->idd_ngroups);
170 lustre_groups_from_list(ginfo, data->idd_groups);
171 lustre_groups_sort(ginfo);
174 if (data->idd_nperms) {
175 size = data->idd_nperms * sizeof(*perms);
176 OBD_ALLOC(perms, size);
178 CERROR("failed to alloc %d permissions\n",
181 put_group_info(ginfo);
185 for (i = 0; i < data->idd_nperms; i++) {
186 perms[i].mp_nid = data->idd_perms[i].pdd_nid;
187 perms[i].mp_perm = data->idd_perms[i].pdd_perm;
191 identity->mi_uid = data->idd_uid;
192 identity->mi_gid = data->idd_gid;
193 identity->mi_ginfo = ginfo;
194 identity->mi_nperms = data->idd_nperms;
195 identity->mi_perms = perms;
197 CDEBUG(D_OTHER, "parse mdt identity@%p: %d:%d, ngroups %u, nperms %u\n",
198 identity, identity->mi_uid, identity->mi_gid,
199 data->idd_ngroups, data->idd_nperms);
204 struct md_identity *mdt_identity_get(struct upcall_cache *cache, __u32 uid)
206 struct upcall_cache_entry *entry;
209 return ERR_PTR(-ENOENT);
211 entry = upcall_cache_get_entry(cache, (__u64)uid, NULL);
213 return ERR_PTR(PTR_ERR(entry));
214 else if (unlikely(!entry))
215 return ERR_PTR(-ENOENT);
217 return &entry->u.identity;
220 void mdt_identity_put(struct upcall_cache *cache, struct md_identity *identity)
226 upcall_cache_put_entry(cache, identity->mi_uc_entry);
229 struct upcall_cache_ops mdt_identity_upcall_cache_ops = {
230 .init_entry = mdt_identity_entry_init,
231 .free_entry = mdt_identity_entry_free,
232 .do_upcall = mdt_identity_do_upcall,
233 .parse_downcall = mdt_identity_parse_downcall,
236 void mdt_flush_identity(struct upcall_cache *cache, int uid)
239 upcall_cache_flush_idle(cache);
241 upcall_cache_flush_one(cache, (__u64)uid, NULL);
245 * If there is LNET_NID_ANY in perm[i].mp_nid,
246 * it must be perm[0].mp_nid, and act as default perm.
248 __u32 mdt_identity_get_perm(struct md_identity *identity, lnet_nid_t nid)
251 struct md_perm *perm;
255 return CFS_SETGRP_PERM;
257 perm = identity->mi_perms;
258 /* check exactly matched nid first */
259 for (i = identity->mi_nperms - 1; i > 0; i--) {
260 if (perm[i].mp_nid != nid)
262 return perm[i].mp_perm;
265 /* check LNET_NID_ANY then */
266 if ((identity->mi_nperms > 0) &&
267 ((perm[0].mp_nid == nid) || (perm[0].mp_nid == LNET_NID_ANY)))
268 return perm[0].mp_perm;
270 /* return default last */
271 return CFS_SETGRP_PERM;