1 /* -*- mode: c; c-basic-offset: 8; indent-tabs-mode: nil; -*-
2 * vim:expandtab:shiftwidth=8:tabstop=8:
4 * Copyright (C) 2004-2006 Cluster File Systems, Inc.
5 * Author: Lai Siyao <lsy@clusterfs.com>
6 * Author: Fan Yong <fanyong@clusterfs.com>
8 * This file is part of Lustre, http://www.lustre.org.
10 * Lustre is free software; you can redistribute it and/or
11 * modify it under the terms of version 2 of the GNU General Public
12 * License as published by the Free Software Foundation.
14 * Lustre is distributed in the hope that it will be useful,
15 * but WITHOUT ANY WARRANTY; without even the implied warranty of
16 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17 * GNU General Public License for more details.
19 * You should have received a copy of the GNU General Public License
20 * along with Lustre; if not, write to the Free Software
21 * Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
27 #define DEBUG_SUBSYSTEM S_MDS
29 #ifndef AUTOCONF_INCLUDED
30 #include <linux/config.h>
32 #include <linux/module.h>
33 #include <linux/kernel.h>
35 #include <linux/kmod.h>
36 #include <linux/string.h>
37 #include <linux/stat.h>
38 #include <linux/errno.h>
39 #include <linux/version.h>
40 #include <linux/unistd.h>
41 #include <asm/system.h>
42 #include <asm/uaccess.h>
44 #include <linux/stat.h>
45 #include <asm/uaccess.h>
46 #include <linux/slab.h>
48 #include <libcfs/kp30.h>
50 #include <obd_class.h>
51 #include <obd_support.h>
52 #include <lustre_net.h>
53 #include <lustre_import.h>
54 #include <lustre_dlm.h>
55 #include <lustre_lib.h>
56 #include <lustre_ucache.h>
58 #include "mdt_internal.h"
60 static void mdt_identity_entry_init(struct upcall_cache_entry *entry,
63 entry->u.identity.mi_uc_entry = entry;
66 static void mdt_identity_entry_free(struct upcall_cache *cache,
67 struct upcall_cache_entry *entry)
69 struct md_identity *identity = &entry->u.identity;
71 if (identity->mi_ginfo) {
72 groups_free(identity->mi_ginfo);
73 identity->mi_ginfo = NULL;
76 if (identity->mi_nperms) {
77 LASSERT(identity->mi_perms);
78 OBD_FREE(identity->mi_perms,
79 identity->mi_nperms * sizeof(struct md_perm));
80 identity->mi_nperms = 0;
84 static int mdt_identity_do_upcall(struct upcall_cache *cache,
85 struct upcall_cache_entry *entry)
87 char *upcall, keystr[16];
89 [0] = cache->uc_upcall,
96 [1] = "PATH=/sbin:/usr/sbin",
102 /* There is race condition:
103 * "uc_upcall" was changed just after "is_identity_get_disabled" check.
105 size = strlen(cache->uc_upcall) + 1;
106 OBD_ALLOC(upcall, size);
107 if (unlikely(!upcall))
110 read_lock(&cache->uc_upcall_rwlock);
111 memcpy(upcall, cache->uc_upcall, size - 1);
112 read_unlock(&cache->uc_upcall_rwlock);
113 upcall[size - 1] = 0;
114 if (unlikely(!strcmp(upcall, "NONE"))) {
115 CERROR("no upcall set\n");
116 GOTO(out, rc = -EREMCHG);
121 snprintf(keystr, sizeof(keystr), LPU64, entry->ue_key);
123 CDEBUG(D_INFO, "The upcall is: %s \n", cache->uc_upcall);
125 rc = USERMODEHELPER(argv[0], argv, envp);
127 CERROR("%s: error invoking upcall %s %s %s: rc %d; "
128 "check /proc/fs/lustre/mdt/%s/identity_upcall\n",
129 cache->uc_name, argv[0], argv[1], argv[2], rc,
132 CDEBUG(D_HA, "%s: invoked upcall %s %s %s\n", cache->uc_name,
133 argv[0], argv[1], argv[2]);
138 OBD_FREE(upcall, size);
142 static int mdt_identity_parse_downcall(struct upcall_cache *cache,
143 struct upcall_cache_entry *entry,
146 struct md_identity *identity = &entry->u.identity;
147 struct identity_downcall_data *data = args;
148 struct group_info *ginfo;
149 struct md_perm *perms = NULL;
154 if (data->idd_ngroups > NGROUPS_MAX)
157 ginfo = groups_alloc(data->idd_ngroups);
159 CERROR("failed to alloc %d groups\n", data->idd_ngroups);
163 lustre_groups_from_list(ginfo, data->idd_groups);
164 lustre_groups_sort(ginfo);
166 if (data->idd_nperms) {
167 size = data->idd_nperms * sizeof(*perms);
168 OBD_ALLOC(perms, size);
170 CERROR("failed to alloc %d permissions\n",
176 for (i = 0; i < data->idd_nperms; i++) {
177 perms[i].mp_nid = data->idd_perms[i].pdd_nid;
178 perms[i].mp_perm = data->idd_perms[i].pdd_perm;
182 identity->mi_uid = data->idd_uid;
183 identity->mi_gid = data->idd_gid;
184 identity->mi_ginfo = ginfo;
185 identity->mi_nperms = data->idd_nperms;
186 identity->mi_perms = perms;
188 CDEBUG(D_OTHER, "parse mdt identity@%p: %d:%d, ngroups %u, nperms %u\n",
189 identity, identity->mi_uid, identity->mi_gid,
190 identity->mi_ginfo->ngroups, identity->mi_nperms);
195 struct md_identity *mdt_identity_get(struct upcall_cache *cache, __u32 uid)
197 struct upcall_cache_entry *entry;
200 return ERR_PTR(-ENOENT);
202 entry = upcall_cache_get_entry(cache, (__u64)uid, NULL);
204 return ERR_PTR(PTR_ERR(entry));
205 else if (unlikely(!entry))
206 return ERR_PTR(-ENOENT);
208 return &entry->u.identity;
211 void mdt_identity_put(struct upcall_cache *cache, struct md_identity *identity)
217 upcall_cache_put_entry(cache, identity->mi_uc_entry);
220 struct upcall_cache_ops mdt_identity_upcall_cache_ops = {
221 .init_entry = mdt_identity_entry_init,
222 .free_entry = mdt_identity_entry_free,
223 .do_upcall = mdt_identity_do_upcall,
224 .parse_downcall = mdt_identity_parse_downcall,
227 void mdt_flush_identity(struct upcall_cache *cache, int uid)
230 upcall_cache_flush_idle(cache);
232 upcall_cache_flush_one(cache, (__u64)uid, NULL);
236 * If there is LNET_NID_ANY in perm[i].mp_nid,
237 * it must be perm[0].mp_nid, and act as default perm.
239 __u32 mdt_identity_get_perm(struct md_identity *identity,
240 __u32 is_rmtclient, lnet_nid_t nid)
242 struct md_perm *perm;
246 LASSERT(is_rmtclient == 0);
247 return CFS_SETGRP_PERM;
250 perm = identity->mi_perms;
251 /* check exactly matched nid first */
252 for (i = identity->mi_nperms - 1; i > 0; i--) {
253 if (perm[i].mp_nid != nid)
255 return perm[i].mp_perm;
258 /* check LNET_NID_ANY then */
259 if ((identity->mi_nperms > 0) &&
260 ((perm[0].mp_nid == nid) || (perm[0].mp_nid == LNET_NID_ANY)))
261 return perm[0].mp_perm;
263 /* return default last */
264 return is_rmtclient ? 0 : CFS_SETGRP_PERM;
267 int mdt_pack_remote_perm(struct mdt_thread_info *info, struct mdt_object *o,
270 struct ptlrpc_request *req = mdt_info_req(info);
271 struct md_ucred *uc = mdt_ucred(info);
272 struct md_object *next = mdt_object_child(o);
273 struct mdt_export_data *med = mdt_req2med(req);
274 struct mdt_remote_perm *perm = buf;
278 /* remote client request always pack ptlrpc_user_desc! */
281 if (!med->med_rmtclient)
284 if ((uc->mu_valid != UCRED_OLD) && (uc->mu_valid != UCRED_NEW))
287 perm->rp_uid = uc->mu_o_uid;
288 perm->rp_gid = uc->mu_o_gid;
289 perm->rp_fsuid = uc->mu_o_fsuid;
290 perm->rp_fsgid = uc->mu_o_fsgid;
292 perm->rp_access_perm = 0;
293 if (mo_permission(info->mti_env, NULL, next, NULL, MAY_READ) == 0)
294 perm->rp_access_perm |= MAY_READ;
295 if (mo_permission(info->mti_env, NULL, next, NULL, MAY_WRITE) == 0)
296 perm->rp_access_perm |= MAY_WRITE;
297 if (mo_permission(info->mti_env, NULL, next, NULL, MAY_EXEC) == 0)
298 perm->rp_access_perm |= MAY_EXEC;