]>
Commit | Line | Data |
---|---|---|
1da177e4 LT |
1 | /* |
2 | * fs/nfs/idmap.c | |
3 | * | |
4 | * UID and GID to name mapping for clients. | |
5 | * | |
6 | * Copyright (c) 2002 The Regents of the University of Michigan. | |
7 | * All rights reserved. | |
8 | * | |
9 | * Marius Aamodt Eriksen <marius@umich.edu> | |
10 | * | |
11 | * Redistribution and use in source and binary forms, with or without | |
12 | * modification, are permitted provided that the following conditions | |
13 | * are met: | |
14 | * | |
15 | * 1. Redistributions of source code must retain the above copyright | |
16 | * notice, this list of conditions and the following disclaimer. | |
17 | * 2. Redistributions in binary form must reproduce the above copyright | |
18 | * notice, this list of conditions and the following disclaimer in the | |
19 | * documentation and/or other materials provided with the distribution. | |
20 | * 3. Neither the name of the University nor the names of its | |
21 | * contributors may be used to endorse or promote products derived | |
22 | * from this software without specific prior written permission. | |
23 | * | |
24 | * THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED | |
25 | * WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF | |
26 | * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE | |
27 | * DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE | |
28 | * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR | |
29 | * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF | |
30 | * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR | |
31 | * BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF | |
32 | * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING | |
33 | * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS | |
34 | * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. | |
35 | */ | |
5cf36cfd TM |
36 | #include <linux/types.h> |
37 | #include <linux/string.h> | |
38 | #include <linux/kernel.h> | |
e44ba033 VI |
39 | #include <linux/slab.h> |
40 | #include <linux/nfs_idmap.h> | |
6926afd1 TM |
41 | #include <linux/nfs_fs.h> |
42 | ||
43 | /** | |
44 | * nfs_fattr_init_names - initialise the nfs_fattr owner_name/group_name fields | |
45 | * @fattr: fully initialised struct nfs_fattr | |
46 | * @owner_name: owner name string cache | |
47 | * @group_name: group name string cache | |
48 | */ | |
49 | void nfs_fattr_init_names(struct nfs_fattr *fattr, | |
50 | struct nfs4_string *owner_name, | |
51 | struct nfs4_string *group_name) | |
52 | { | |
53 | fattr->owner_name = owner_name; | |
54 | fattr->group_name = group_name; | |
55 | } | |
56 | ||
57 | static void nfs_fattr_free_owner_name(struct nfs_fattr *fattr) | |
58 | { | |
59 | fattr->valid &= ~NFS_ATTR_FATTR_OWNER_NAME; | |
60 | kfree(fattr->owner_name->data); | |
61 | } | |
62 | ||
63 | static void nfs_fattr_free_group_name(struct nfs_fattr *fattr) | |
64 | { | |
65 | fattr->valid &= ~NFS_ATTR_FATTR_GROUP_NAME; | |
66 | kfree(fattr->group_name->data); | |
67 | } | |
68 | ||
69 | static bool nfs_fattr_map_owner_name(struct nfs_server *server, struct nfs_fattr *fattr) | |
70 | { | |
71 | struct nfs4_string *owner = fattr->owner_name; | |
72 | __u32 uid; | |
73 | ||
74 | if (!(fattr->valid & NFS_ATTR_FATTR_OWNER_NAME)) | |
75 | return false; | |
76 | if (nfs_map_name_to_uid(server, owner->data, owner->len, &uid) == 0) { | |
77 | fattr->uid = uid; | |
78 | fattr->valid |= NFS_ATTR_FATTR_OWNER; | |
79 | } | |
80 | return true; | |
81 | } | |
82 | ||
83 | static bool nfs_fattr_map_group_name(struct nfs_server *server, struct nfs_fattr *fattr) | |
84 | { | |
85 | struct nfs4_string *group = fattr->group_name; | |
86 | __u32 gid; | |
87 | ||
88 | if (!(fattr->valid & NFS_ATTR_FATTR_GROUP_NAME)) | |
89 | return false; | |
90 | if (nfs_map_group_to_gid(server, group->data, group->len, &gid) == 0) { | |
91 | fattr->gid = gid; | |
92 | fattr->valid |= NFS_ATTR_FATTR_GROUP; | |
93 | } | |
94 | return true; | |
95 | } | |
96 | ||
97 | /** | |
98 | * nfs_fattr_free_names - free up the NFSv4 owner and group strings | |
99 | * @fattr: a fully initialised nfs_fattr structure | |
100 | */ | |
101 | void nfs_fattr_free_names(struct nfs_fattr *fattr) | |
102 | { | |
103 | if (fattr->valid & NFS_ATTR_FATTR_OWNER_NAME) | |
104 | nfs_fattr_free_owner_name(fattr); | |
105 | if (fattr->valid & NFS_ATTR_FATTR_GROUP_NAME) | |
106 | nfs_fattr_free_group_name(fattr); | |
107 | } | |
108 | ||
109 | /** | |
110 | * nfs_fattr_map_and_free_names - map owner/group strings into uid/gid and free | |
111 | * @server: pointer to the filesystem nfs_server structure | |
112 | * @fattr: a fully initialised nfs_fattr structure | |
113 | * | |
114 | * This helper maps the cached NFSv4 owner/group strings in fattr into | |
115 | * their numeric uid/gid equivalents, and then frees the cached strings. | |
116 | */ | |
117 | void nfs_fattr_map_and_free_names(struct nfs_server *server, struct nfs_fattr *fattr) | |
118 | { | |
119 | if (nfs_fattr_map_owner_name(server, fattr)) | |
120 | nfs_fattr_free_owner_name(fattr); | |
121 | if (nfs_fattr_map_group_name(server, fattr)) | |
122 | nfs_fattr_free_group_name(fattr); | |
123 | } | |
5cf36cfd TM |
124 | |
125 | static int nfs_map_string_to_numeric(const char *name, size_t namelen, __u32 *res) | |
126 | { | |
127 | unsigned long val; | |
128 | char buf[16]; | |
129 | ||
130 | if (memchr(name, '@', namelen) != NULL || namelen >= sizeof(buf)) | |
131 | return 0; | |
132 | memcpy(buf, name, namelen); | |
133 | buf[namelen] = '\0'; | |
134 | if (strict_strtoul(buf, 0, &val) != 0) | |
135 | return 0; | |
136 | *res = val; | |
137 | return 1; | |
138 | } | |
1da177e4 | 139 | |
f0b85168 TM |
140 | static int nfs_map_numeric_to_string(__u32 id, char *buf, size_t buflen) |
141 | { | |
142 | return snprintf(buf, buflen, "%u", id); | |
143 | } | |
144 | ||
955a857e BS |
145 | #ifdef CONFIG_NFS_USE_NEW_IDMAPPER |
146 | ||
955a857e | 147 | #include <linux/cred.h> |
b064eca2 TM |
148 | #include <linux/sunrpc/sched.h> |
149 | #include <linux/nfs4.h> | |
150 | #include <linux/nfs_fs_sb.h> | |
955a857e BS |
151 | #include <linux/keyctl.h> |
152 | #include <linux/key-type.h> | |
153 | #include <linux/rcupdate.h> | |
955a857e BS |
154 | #include <linux/err.h> |
155 | ||
156 | #include <keys/user-type.h> | |
157 | ||
158 | #define NFS_UINT_MAXLEN 11 | |
159 | ||
160 | const struct cred *id_resolver_cache; | |
161 | ||
162 | struct key_type key_type_id_resolver = { | |
163 | .name = "id_resolver", | |
164 | .instantiate = user_instantiate, | |
165 | .match = user_match, | |
166 | .revoke = user_revoke, | |
167 | .destroy = user_destroy, | |
168 | .describe = user_describe, | |
169 | .read = user_read, | |
170 | }; | |
171 | ||
172 | int nfs_idmap_init(void) | |
173 | { | |
174 | struct cred *cred; | |
175 | struct key *keyring; | |
176 | int ret = 0; | |
177 | ||
f9fd2d9c WAA |
178 | printk(KERN_NOTICE "NFS: Registering the %s key type\n", |
179 | key_type_id_resolver.name); | |
955a857e BS |
180 | |
181 | cred = prepare_kernel_cred(NULL); | |
182 | if (!cred) | |
183 | return -ENOMEM; | |
184 | ||
185 | keyring = key_alloc(&key_type_keyring, ".id_resolver", 0, 0, cred, | |
186 | (KEY_POS_ALL & ~KEY_POS_SETATTR) | | |
187 | KEY_USR_VIEW | KEY_USR_READ, | |
188 | KEY_ALLOC_NOT_IN_QUOTA); | |
189 | if (IS_ERR(keyring)) { | |
190 | ret = PTR_ERR(keyring); | |
191 | goto failed_put_cred; | |
192 | } | |
193 | ||
194 | ret = key_instantiate_and_link(keyring, NULL, 0, NULL, NULL); | |
195 | if (ret < 0) | |
196 | goto failed_put_key; | |
197 | ||
198 | ret = register_key_type(&key_type_id_resolver); | |
199 | if (ret < 0) | |
200 | goto failed_put_key; | |
201 | ||
202 | cred->thread_keyring = keyring; | |
203 | cred->jit_keyring = KEY_REQKEY_DEFL_THREAD_KEYRING; | |
204 | id_resolver_cache = cred; | |
205 | return 0; | |
206 | ||
207 | failed_put_key: | |
208 | key_put(keyring); | |
209 | failed_put_cred: | |
210 | put_cred(cred); | |
211 | return ret; | |
212 | } | |
213 | ||
214 | void nfs_idmap_quit(void) | |
215 | { | |
216 | key_revoke(id_resolver_cache->thread_keyring); | |
217 | unregister_key_type(&key_type_id_resolver); | |
218 | put_cred(id_resolver_cache); | |
219 | } | |
220 | ||
221 | /* | |
222 | * Assemble the description to pass to request_key() | |
223 | * This function will allocate a new string and update dest to point | |
224 | * at it. The caller is responsible for freeing dest. | |
225 | * | |
226 | * On error 0 is returned. Otherwise, the length of dest is returned. | |
227 | */ | |
228 | static ssize_t nfs_idmap_get_desc(const char *name, size_t namelen, | |
229 | const char *type, size_t typelen, char **desc) | |
230 | { | |
231 | char *cp; | |
232 | size_t desclen = typelen + namelen + 2; | |
233 | ||
234 | *desc = kmalloc(desclen, GFP_KERNEL); | |
8f0d97b4 | 235 | if (!*desc) |
955a857e BS |
236 | return -ENOMEM; |
237 | ||
238 | cp = *desc; | |
239 | memcpy(cp, type, typelen); | |
240 | cp += typelen; | |
241 | *cp++ = ':'; | |
242 | ||
243 | memcpy(cp, name, namelen); | |
244 | cp += namelen; | |
245 | *cp = '\0'; | |
246 | return desclen; | |
247 | } | |
248 | ||
249 | static ssize_t nfs_idmap_request_key(const char *name, size_t namelen, | |
250 | const char *type, void *data, size_t data_size) | |
251 | { | |
252 | const struct cred *saved_cred; | |
253 | struct key *rkey; | |
254 | char *desc; | |
255 | struct user_key_payload *payload; | |
256 | ssize_t ret; | |
257 | ||
258 | ret = nfs_idmap_get_desc(name, namelen, type, strlen(type), &desc); | |
259 | if (ret <= 0) | |
260 | goto out; | |
261 | ||
262 | saved_cred = override_creds(id_resolver_cache); | |
263 | rkey = request_key(&key_type_id_resolver, desc, ""); | |
264 | revert_creds(saved_cred); | |
265 | kfree(desc); | |
266 | if (IS_ERR(rkey)) { | |
267 | ret = PTR_ERR(rkey); | |
268 | goto out; | |
269 | } | |
270 | ||
271 | rcu_read_lock(); | |
272 | rkey->perm |= KEY_USR_VIEW; | |
273 | ||
274 | ret = key_validate(rkey); | |
275 | if (ret < 0) | |
276 | goto out_up; | |
277 | ||
278 | payload = rcu_dereference(rkey->payload.data); | |
279 | if (IS_ERR_OR_NULL(payload)) { | |
280 | ret = PTR_ERR(payload); | |
281 | goto out_up; | |
282 | } | |
283 | ||
284 | ret = payload->datalen; | |
285 | if (ret > 0 && ret <= data_size) | |
286 | memcpy(data, payload->data, ret); | |
287 | else | |
288 | ret = -EINVAL; | |
289 | ||
290 | out_up: | |
291 | rcu_read_unlock(); | |
292 | key_put(rkey); | |
293 | out: | |
294 | return ret; | |
295 | } | |
296 | ||
297 | ||
298 | /* ID -> Name */ | |
299 | static ssize_t nfs_idmap_lookup_name(__u32 id, const char *type, char *buf, size_t buflen) | |
300 | { | |
301 | char id_str[NFS_UINT_MAXLEN]; | |
302 | int id_len; | |
303 | ssize_t ret; | |
304 | ||
305 | id_len = snprintf(id_str, sizeof(id_str), "%u", id); | |
306 | ret = nfs_idmap_request_key(id_str, id_len, type, buf, buflen); | |
307 | if (ret < 0) | |
308 | return -EINVAL; | |
309 | return ret; | |
310 | } | |
311 | ||
312 | /* Name -> ID */ | |
313 | static int nfs_idmap_lookup_id(const char *name, size_t namelen, | |
314 | const char *type, __u32 *id) | |
315 | { | |
316 | char id_str[NFS_UINT_MAXLEN]; | |
317 | long id_long; | |
318 | ssize_t data_size; | |
319 | int ret = 0; | |
320 | ||
321 | data_size = nfs_idmap_request_key(name, namelen, type, id_str, NFS_UINT_MAXLEN); | |
322 | if (data_size <= 0) { | |
323 | ret = -EINVAL; | |
324 | } else { | |
325 | ret = strict_strtol(id_str, 10, &id_long); | |
326 | *id = (__u32)id_long; | |
327 | } | |
328 | return ret; | |
329 | } | |
330 | ||
e4fd72a1 | 331 | int nfs_map_name_to_uid(const struct nfs_server *server, const char *name, size_t namelen, __u32 *uid) |
955a857e | 332 | { |
5cf36cfd TM |
333 | if (nfs_map_string_to_numeric(name, namelen, uid)) |
334 | return 0; | |
955a857e BS |
335 | return nfs_idmap_lookup_id(name, namelen, "uid", uid); |
336 | } | |
337 | ||
e4fd72a1 | 338 | int nfs_map_group_to_gid(const struct nfs_server *server, const char *name, size_t namelen, __u32 *gid) |
955a857e | 339 | { |
5cf36cfd TM |
340 | if (nfs_map_string_to_numeric(name, namelen, gid)) |
341 | return 0; | |
955a857e BS |
342 | return nfs_idmap_lookup_id(name, namelen, "gid", gid); |
343 | } | |
344 | ||
e4fd72a1 | 345 | int nfs_map_uid_to_name(const struct nfs_server *server, __u32 uid, char *buf, size_t buflen) |
955a857e | 346 | { |
b064eca2 TM |
347 | int ret = -EINVAL; |
348 | ||
349 | if (!(server->caps & NFS_CAP_UIDGID_NOMAP)) | |
350 | ret = nfs_idmap_lookup_name(uid, "user", buf, buflen); | |
f0b85168 TM |
351 | if (ret < 0) |
352 | ret = nfs_map_numeric_to_string(uid, buf, buflen); | |
353 | return ret; | |
955a857e | 354 | } |
e4fd72a1 | 355 | int nfs_map_gid_to_group(const struct nfs_server *server, __u32 gid, char *buf, size_t buflen) |
955a857e | 356 | { |
b064eca2 | 357 | int ret = -EINVAL; |
f0b85168 | 358 | |
b064eca2 TM |
359 | if (!(server->caps & NFS_CAP_UIDGID_NOMAP)) |
360 | ret = nfs_idmap_lookup_name(gid, "group", buf, buflen); | |
f0b85168 TM |
361 | if (ret < 0) |
362 | ret = nfs_map_numeric_to_string(gid, buf, buflen); | |
363 | return ret; | |
955a857e BS |
364 | } |
365 | ||
5f3e97c9 | 366 | #else /* CONFIG_NFS_USE_NEW_IDMAPPER not defined */ |
955a857e | 367 | |
1da177e4 | 368 | #include <linux/module.h> |
c9d5128a | 369 | #include <linux/mutex.h> |
1da177e4 | 370 | #include <linux/init.h> |
1da177e4 LT |
371 | #include <linux/socket.h> |
372 | #include <linux/in.h> | |
373 | #include <linux/sched.h> | |
1da177e4 LT |
374 | #include <linux/sunrpc/clnt.h> |
375 | #include <linux/workqueue.h> | |
376 | #include <linux/sunrpc/rpc_pipe_fs.h> | |
377 | ||
1da177e4 LT |
378 | #include <linux/nfs_fs.h> |
379 | ||
4ce79717 | 380 | #include "nfs4_fs.h" |
eee17325 | 381 | #include "internal.h" |
1da177e4 LT |
382 | |
383 | #define IDMAP_HASH_SZ 128 | |
384 | ||
58df095b TM |
385 | /* Default cache timeout is 10 minutes */ |
386 | unsigned int nfs_idmap_cache_timeout = 600 * HZ; | |
387 | ||
7d4e2747 DH |
388 | static int param_set_idmap_timeout(const char *val, struct kernel_param *kp) |
389 | { | |
390 | char *endp; | |
391 | int num = simple_strtol(val, &endp, 0); | |
392 | int jif = num * HZ; | |
393 | if (endp == val || *endp || num < 0 || jif < num) | |
394 | return -EINVAL; | |
395 | *((int *)kp->arg) = jif; | |
396 | return 0; | |
397 | } | |
398 | ||
399 | module_param_call(idmap_cache_timeout, param_set_idmap_timeout, param_get_int, | |
400 | &nfs_idmap_cache_timeout, 0644); | |
401 | ||
1da177e4 | 402 | struct idmap_hashent { |
369af0f1 CL |
403 | unsigned long ih_expires; |
404 | __u32 ih_id; | |
d24aae41 | 405 | size_t ih_namelen; |
369af0f1 | 406 | char ih_name[IDMAP_NAMESZ]; |
1da177e4 LT |
407 | }; |
408 | ||
409 | struct idmap_hashtable { | |
369af0f1 CL |
410 | __u8 h_type; |
411 | struct idmap_hashent h_entries[IDMAP_HASH_SZ]; | |
1da177e4 LT |
412 | }; |
413 | ||
414 | struct idmap { | |
c239d83b | 415 | struct rpc_pipe *idmap_pipe; |
369af0f1 CL |
416 | wait_queue_head_t idmap_wq; |
417 | struct idmap_msg idmap_im; | |
418 | struct mutex idmap_lock; /* Serializes upcalls */ | |
419 | struct mutex idmap_im_lock; /* Protects the hashtable */ | |
420 | struct idmap_hashtable idmap_user_hash; | |
421 | struct idmap_hashtable idmap_group_hash; | |
1da177e4 LT |
422 | }; |
423 | ||
369af0f1 CL |
424 | static ssize_t idmap_pipe_downcall(struct file *, const char __user *, |
425 | size_t); | |
426 | static void idmap_pipe_destroy_msg(struct rpc_pipe_msg *); | |
1da177e4 LT |
427 | |
428 | static unsigned int fnvhash32(const void *, size_t); | |
429 | ||
b693ba4a | 430 | static const struct rpc_pipe_ops idmap_upcall_ops = { |
c1225158 | 431 | .upcall = rpc_pipe_generic_upcall, |
369af0f1 CL |
432 | .downcall = idmap_pipe_downcall, |
433 | .destroy_msg = idmap_pipe_destroy_msg, | |
1da177e4 LT |
434 | }; |
435 | ||
4929d1d3 SK |
436 | static void __nfs_idmap_unregister(struct rpc_pipe *pipe) |
437 | { | |
438 | if (pipe->dentry) | |
439 | rpc_unlink(pipe->dentry); | |
440 | } | |
441 | ||
442 | static int __nfs_idmap_register(struct dentry *dir, | |
443 | struct idmap *idmap, | |
444 | struct rpc_pipe *pipe) | |
445 | { | |
446 | struct dentry *dentry; | |
447 | ||
448 | dentry = rpc_mkpipe_dentry(dir, "idmap", idmap, pipe); | |
449 | if (IS_ERR(dentry)) | |
450 | return PTR_ERR(dentry); | |
451 | pipe->dentry = dentry; | |
452 | return 0; | |
453 | } | |
454 | ||
455 | static void nfs_idmap_unregister(struct nfs_client *clp, | |
456 | struct rpc_pipe *pipe) | |
457 | { | |
458 | struct net *net = clp->net; | |
459 | struct super_block *pipefs_sb; | |
460 | ||
461 | pipefs_sb = rpc_get_sb_net(net); | |
462 | if (pipefs_sb) { | |
463 | __nfs_idmap_unregister(pipe); | |
464 | rpc_put_sb_net(net); | |
465 | } | |
466 | } | |
467 | ||
468 | static int nfs_idmap_register(struct nfs_client *clp, | |
469 | struct idmap *idmap, | |
470 | struct rpc_pipe *pipe) | |
471 | { | |
472 | struct net *net = clp->net; | |
473 | struct super_block *pipefs_sb; | |
474 | int err = 0; | |
475 | ||
476 | pipefs_sb = rpc_get_sb_net(net); | |
477 | if (pipefs_sb) { | |
478 | if (clp->cl_rpcclient->cl_dentry) | |
479 | err = __nfs_idmap_register(clp->cl_rpcclient->cl_dentry, | |
480 | idmap, pipe); | |
481 | rpc_put_sb_net(net); | |
482 | } | |
483 | return err; | |
484 | } | |
485 | ||
b7162792 | 486 | int |
adfa6f98 | 487 | nfs_idmap_new(struct nfs_client *clp) |
1da177e4 LT |
488 | { |
489 | struct idmap *idmap; | |
c239d83b | 490 | struct rpc_pipe *pipe; |
b7162792 | 491 | int error; |
1da177e4 | 492 | |
54ceac45 | 493 | BUG_ON(clp->cl_idmap != NULL); |
b7162792 | 494 | |
369af0f1 CL |
495 | idmap = kzalloc(sizeof(*idmap), GFP_KERNEL); |
496 | if (idmap == NULL) | |
497 | return -ENOMEM; | |
1da177e4 | 498 | |
c239d83b SK |
499 | pipe = rpc_mkpipe_data(&idmap_upcall_ops, 0); |
500 | if (IS_ERR(pipe)) { | |
501 | error = PTR_ERR(pipe); | |
1da177e4 | 502 | kfree(idmap); |
b7162792 | 503 | return error; |
1da177e4 | 504 | } |
4929d1d3 SK |
505 | error = nfs_idmap_register(clp, idmap, pipe); |
506 | if (error) { | |
c239d83b SK |
507 | rpc_destroy_pipe_data(pipe); |
508 | kfree(idmap); | |
509 | return error; | |
510 | } | |
511 | idmap->idmap_pipe = pipe; | |
369af0f1 CL |
512 | mutex_init(&idmap->idmap_lock); |
513 | mutex_init(&idmap->idmap_im_lock); | |
1da177e4 LT |
514 | init_waitqueue_head(&idmap->idmap_wq); |
515 | idmap->idmap_user_hash.h_type = IDMAP_TYPE_USER; | |
516 | idmap->idmap_group_hash.h_type = IDMAP_TYPE_GROUP; | |
517 | ||
518 | clp->cl_idmap = idmap; | |
b7162792 | 519 | return 0; |
1da177e4 LT |
520 | } |
521 | ||
522 | void | |
adfa6f98 | 523 | nfs_idmap_delete(struct nfs_client *clp) |
1da177e4 LT |
524 | { |
525 | struct idmap *idmap = clp->cl_idmap; | |
526 | ||
527 | if (!idmap) | |
528 | return; | |
4929d1d3 | 529 | nfs_idmap_unregister(clp, idmap->idmap_pipe); |
c239d83b | 530 | rpc_destroy_pipe_data(idmap->idmap_pipe); |
1da177e4 LT |
531 | clp->cl_idmap = NULL; |
532 | kfree(idmap); | |
533 | } | |
534 | ||
eee17325 SK |
535 | static int __rpc_pipefs_event(struct nfs_client *clp, unsigned long event, |
536 | struct super_block *sb) | |
537 | { | |
538 | int err = 0; | |
539 | ||
540 | switch (event) { | |
541 | case RPC_PIPEFS_MOUNT: | |
542 | BUG_ON(clp->cl_rpcclient->cl_dentry == NULL); | |
543 | err = __nfs_idmap_register(clp->cl_rpcclient->cl_dentry, | |
544 | clp->cl_idmap, | |
545 | clp->cl_idmap->idmap_pipe); | |
546 | break; | |
547 | case RPC_PIPEFS_UMOUNT: | |
548 | if (clp->cl_idmap->idmap_pipe) { | |
549 | struct dentry *parent; | |
550 | ||
551 | parent = clp->cl_idmap->idmap_pipe->dentry->d_parent; | |
552 | __nfs_idmap_unregister(clp->cl_idmap->idmap_pipe); | |
553 | /* | |
554 | * Note: This is a dirty hack. SUNRPC hook has been | |
555 | * called already but simple_rmdir() call for the | |
556 | * directory returned with error because of idmap pipe | |
557 | * inside. Thus now we have to remove this directory | |
558 | * here. | |
559 | */ | |
560 | if (rpc_rmdir(parent)) | |
561 | printk(KERN_ERR "%s: failed to remove clnt dir!\n", __func__); | |
562 | } | |
563 | break; | |
564 | default: | |
565 | printk(KERN_ERR "%s: unknown event: %ld\n", __func__, event); | |
566 | return -ENOTSUPP; | |
567 | } | |
568 | return err; | |
569 | } | |
570 | ||
571 | static int rpc_pipefs_event(struct notifier_block *nb, unsigned long event, | |
572 | void *ptr) | |
573 | { | |
574 | struct super_block *sb = ptr; | |
575 | struct nfs_client *clp; | |
576 | int error = 0; | |
577 | ||
578 | spin_lock(&nfs_client_lock); | |
579 | list_for_each_entry(clp, &nfs_client_list, cl_share_link) { | |
580 | if (clp->net != sb->s_fs_info) | |
581 | continue; | |
582 | if (clp->rpc_ops != &nfs_v4_clientops) | |
583 | continue; | |
584 | error = __rpc_pipefs_event(clp, event, sb); | |
585 | if (error) | |
586 | break; | |
587 | } | |
588 | spin_unlock(&nfs_client_lock); | |
589 | return error; | |
590 | } | |
591 | ||
592 | #define PIPEFS_NFS_PRIO 1 | |
593 | ||
594 | static struct notifier_block nfs_idmap_block = { | |
595 | .notifier_call = rpc_pipefs_event, | |
596 | .priority = SUNRPC_PIPEFS_NFS_PRIO, | |
597 | }; | |
598 | ||
599 | int nfs_idmap_init(void) | |
600 | { | |
601 | return rpc_pipefs_notifier_register(&nfs_idmap_block); | |
602 | } | |
603 | ||
604 | void nfs_idmap_quit(void) | |
605 | { | |
606 | rpc_pipefs_notifier_unregister(&nfs_idmap_block); | |
607 | } | |
608 | ||
1da177e4 LT |
609 | /* |
610 | * Helper routines for manipulating the hashtable | |
611 | */ | |
612 | static inline struct idmap_hashent * | |
613 | idmap_name_hash(struct idmap_hashtable* h, const char *name, size_t len) | |
614 | { | |
615 | return &h->h_entries[fnvhash32(name, len) % IDMAP_HASH_SZ]; | |
616 | } | |
617 | ||
618 | static struct idmap_hashent * | |
619 | idmap_lookup_name(struct idmap_hashtable *h, const char *name, size_t len) | |
620 | { | |
621 | struct idmap_hashent *he = idmap_name_hash(h, name, len); | |
622 | ||
623 | if (he->ih_namelen != len || memcmp(he->ih_name, name, len) != 0) | |
624 | return NULL; | |
58df095b TM |
625 | if (time_after(jiffies, he->ih_expires)) |
626 | return NULL; | |
1da177e4 LT |
627 | return he; |
628 | } | |
629 | ||
630 | static inline struct idmap_hashent * | |
631 | idmap_id_hash(struct idmap_hashtable* h, __u32 id) | |
632 | { | |
633 | return &h->h_entries[fnvhash32(&id, sizeof(id)) % IDMAP_HASH_SZ]; | |
634 | } | |
635 | ||
636 | static struct idmap_hashent * | |
637 | idmap_lookup_id(struct idmap_hashtable *h, __u32 id) | |
638 | { | |
639 | struct idmap_hashent *he = idmap_id_hash(h, id); | |
640 | if (he->ih_id != id || he->ih_namelen == 0) | |
641 | return NULL; | |
58df095b TM |
642 | if (time_after(jiffies, he->ih_expires)) |
643 | return NULL; | |
1da177e4 LT |
644 | return he; |
645 | } | |
646 | ||
647 | /* | |
648 | * Routines for allocating new entries in the hashtable. | |
649 | * For now, we just have 1 entry per bucket, so it's all | |
650 | * pretty trivial. | |
651 | */ | |
652 | static inline struct idmap_hashent * | |
d24aae41 | 653 | idmap_alloc_name(struct idmap_hashtable *h, char *name, size_t len) |
1da177e4 LT |
654 | { |
655 | return idmap_name_hash(h, name, len); | |
656 | } | |
657 | ||
658 | static inline struct idmap_hashent * | |
659 | idmap_alloc_id(struct idmap_hashtable *h, __u32 id) | |
660 | { | |
661 | return idmap_id_hash(h, id); | |
662 | } | |
663 | ||
664 | static void | |
665 | idmap_update_entry(struct idmap_hashent *he, const char *name, | |
666 | size_t namelen, __u32 id) | |
667 | { | |
668 | he->ih_id = id; | |
669 | memcpy(he->ih_name, name, namelen); | |
670 | he->ih_name[namelen] = '\0'; | |
671 | he->ih_namelen = namelen; | |
58df095b | 672 | he->ih_expires = jiffies + nfs_idmap_cache_timeout; |
1da177e4 LT |
673 | } |
674 | ||
675 | /* | |
676 | * Name -> ID | |
677 | */ | |
678 | static int | |
679 | nfs_idmap_id(struct idmap *idmap, struct idmap_hashtable *h, | |
680 | const char *name, size_t namelen, __u32 *id) | |
681 | { | |
682 | struct rpc_pipe_msg msg; | |
683 | struct idmap_msg *im; | |
684 | struct idmap_hashent *he; | |
685 | DECLARE_WAITQUEUE(wq, current); | |
686 | int ret = -EIO; | |
687 | ||
688 | im = &idmap->idmap_im; | |
689 | ||
690 | /* | |
691 | * String sanity checks | |
692 | * Note that the userland daemon expects NUL terminated strings | |
693 | */ | |
694 | for (;;) { | |
695 | if (namelen == 0) | |
696 | return -EINVAL; | |
697 | if (name[namelen-1] != '\0') | |
698 | break; | |
699 | namelen--; | |
700 | } | |
701 | if (namelen >= IDMAP_NAMESZ) | |
702 | return -EINVAL; | |
703 | ||
c9d5128a IM |
704 | mutex_lock(&idmap->idmap_lock); |
705 | mutex_lock(&idmap->idmap_im_lock); | |
1da177e4 LT |
706 | |
707 | he = idmap_lookup_name(h, name, namelen); | |
708 | if (he != NULL) { | |
709 | *id = he->ih_id; | |
710 | ret = 0; | |
711 | goto out; | |
712 | } | |
713 | ||
714 | memset(im, 0, sizeof(*im)); | |
715 | memcpy(im->im_name, name, namelen); | |
716 | ||
717 | im->im_type = h->h_type; | |
718 | im->im_conv = IDMAP_CONV_NAMETOID; | |
719 | ||
720 | memset(&msg, 0, sizeof(msg)); | |
721 | msg.data = im; | |
722 | msg.len = sizeof(*im); | |
723 | ||
724 | add_wait_queue(&idmap->idmap_wq, &wq); | |
c239d83b | 725 | if (rpc_queue_upcall(idmap->idmap_pipe, &msg) < 0) { |
1da177e4 LT |
726 | remove_wait_queue(&idmap->idmap_wq, &wq); |
727 | goto out; | |
728 | } | |
729 | ||
730 | set_current_state(TASK_UNINTERRUPTIBLE); | |
c9d5128a | 731 | mutex_unlock(&idmap->idmap_im_lock); |
1da177e4 | 732 | schedule(); |
fee7f23f | 733 | __set_current_state(TASK_RUNNING); |
1da177e4 | 734 | remove_wait_queue(&idmap->idmap_wq, &wq); |
c9d5128a | 735 | mutex_lock(&idmap->idmap_im_lock); |
1da177e4 LT |
736 | |
737 | if (im->im_status & IDMAP_STATUS_SUCCESS) { | |
738 | *id = im->im_id; | |
739 | ret = 0; | |
740 | } | |
741 | ||
742 | out: | |
743 | memset(im, 0, sizeof(*im)); | |
c9d5128a IM |
744 | mutex_unlock(&idmap->idmap_im_lock); |
745 | mutex_unlock(&idmap->idmap_lock); | |
369af0f1 | 746 | return ret; |
1da177e4 LT |
747 | } |
748 | ||
749 | /* | |
750 | * ID -> Name | |
751 | */ | |
752 | static int | |
753 | nfs_idmap_name(struct idmap *idmap, struct idmap_hashtable *h, | |
754 | __u32 id, char *name) | |
755 | { | |
756 | struct rpc_pipe_msg msg; | |
757 | struct idmap_msg *im; | |
758 | struct idmap_hashent *he; | |
759 | DECLARE_WAITQUEUE(wq, current); | |
760 | int ret = -EIO; | |
761 | unsigned int len; | |
762 | ||
763 | im = &idmap->idmap_im; | |
764 | ||
c9d5128a IM |
765 | mutex_lock(&idmap->idmap_lock); |
766 | mutex_lock(&idmap->idmap_im_lock); | |
1da177e4 LT |
767 | |
768 | he = idmap_lookup_id(h, id); | |
90dc7d27 | 769 | if (he) { |
1da177e4 LT |
770 | memcpy(name, he->ih_name, he->ih_namelen); |
771 | ret = he->ih_namelen; | |
772 | goto out; | |
773 | } | |
774 | ||
775 | memset(im, 0, sizeof(*im)); | |
776 | im->im_type = h->h_type; | |
777 | im->im_conv = IDMAP_CONV_IDTONAME; | |
778 | im->im_id = id; | |
779 | ||
780 | memset(&msg, 0, sizeof(msg)); | |
781 | msg.data = im; | |
782 | msg.len = sizeof(*im); | |
783 | ||
784 | add_wait_queue(&idmap->idmap_wq, &wq); | |
785 | ||
c239d83b | 786 | if (rpc_queue_upcall(idmap->idmap_pipe, &msg) < 0) { |
1da177e4 LT |
787 | remove_wait_queue(&idmap->idmap_wq, &wq); |
788 | goto out; | |
789 | } | |
790 | ||
791 | set_current_state(TASK_UNINTERRUPTIBLE); | |
c9d5128a | 792 | mutex_unlock(&idmap->idmap_im_lock); |
1da177e4 | 793 | schedule(); |
fee7f23f | 794 | __set_current_state(TASK_RUNNING); |
1da177e4 | 795 | remove_wait_queue(&idmap->idmap_wq, &wq); |
c9d5128a | 796 | mutex_lock(&idmap->idmap_im_lock); |
1da177e4 LT |
797 | |
798 | if (im->im_status & IDMAP_STATUS_SUCCESS) { | |
799 | if ((len = strnlen(im->im_name, IDMAP_NAMESZ)) == 0) | |
800 | goto out; | |
801 | memcpy(name, im->im_name, len); | |
802 | ret = len; | |
803 | } | |
804 | ||
805 | out: | |
806 | memset(im, 0, sizeof(*im)); | |
c9d5128a IM |
807 | mutex_unlock(&idmap->idmap_im_lock); |
808 | mutex_unlock(&idmap->idmap_lock); | |
1da177e4 LT |
809 | return ret; |
810 | } | |
811 | ||
1da177e4 LT |
812 | static ssize_t |
813 | idmap_pipe_downcall(struct file *filp, const char __user *src, size_t mlen) | |
814 | { | |
369af0f1 | 815 | struct rpc_inode *rpci = RPC_I(filp->f_path.dentry->d_inode); |
1da177e4 LT |
816 | struct idmap *idmap = (struct idmap *)rpci->private; |
817 | struct idmap_msg im_in, *im = &idmap->idmap_im; | |
818 | struct idmap_hashtable *h; | |
819 | struct idmap_hashent *he = NULL; | |
d24aae41 | 820 | size_t namelen_in; |
1da177e4 LT |
821 | int ret; |
822 | ||
369af0f1 CL |
823 | if (mlen != sizeof(im_in)) |
824 | return -ENOSPC; | |
1da177e4 | 825 | |
369af0f1 CL |
826 | if (copy_from_user(&im_in, src, mlen) != 0) |
827 | return -EFAULT; | |
1da177e4 | 828 | |
c9d5128a | 829 | mutex_lock(&idmap->idmap_im_lock); |
1da177e4 LT |
830 | |
831 | ret = mlen; | |
832 | im->im_status = im_in.im_status; | |
833 | /* If we got an error, terminate now, and wake up pending upcalls */ | |
834 | if (!(im_in.im_status & IDMAP_STATUS_SUCCESS)) { | |
835 | wake_up(&idmap->idmap_wq); | |
836 | goto out; | |
837 | } | |
838 | ||
839 | /* Sanity checking of strings */ | |
840 | ret = -EINVAL; | |
841 | namelen_in = strnlen(im_in.im_name, IDMAP_NAMESZ); | |
842 | if (namelen_in == 0 || namelen_in == IDMAP_NAMESZ) | |
843 | goto out; | |
844 | ||
845 | switch (im_in.im_type) { | |
846 | case IDMAP_TYPE_USER: | |
847 | h = &idmap->idmap_user_hash; | |
848 | break; | |
849 | case IDMAP_TYPE_GROUP: | |
850 | h = &idmap->idmap_group_hash; | |
851 | break; | |
852 | default: | |
853 | goto out; | |
854 | } | |
855 | ||
856 | switch (im_in.im_conv) { | |
857 | case IDMAP_CONV_IDTONAME: | |
858 | /* Did we match the current upcall? */ | |
859 | if (im->im_conv == IDMAP_CONV_IDTONAME | |
860 | && im->im_type == im_in.im_type | |
861 | && im->im_id == im_in.im_id) { | |
862 | /* Yes: copy string, including the terminating '\0' */ | |
863 | memcpy(im->im_name, im_in.im_name, namelen_in); | |
864 | im->im_name[namelen_in] = '\0'; | |
865 | wake_up(&idmap->idmap_wq); | |
866 | } | |
867 | he = idmap_alloc_id(h, im_in.im_id); | |
868 | break; | |
869 | case IDMAP_CONV_NAMETOID: | |
870 | /* Did we match the current upcall? */ | |
871 | if (im->im_conv == IDMAP_CONV_NAMETOID | |
872 | && im->im_type == im_in.im_type | |
873 | && strnlen(im->im_name, IDMAP_NAMESZ) == namelen_in | |
874 | && memcmp(im->im_name, im_in.im_name, namelen_in) == 0) { | |
875 | im->im_id = im_in.im_id; | |
876 | wake_up(&idmap->idmap_wq); | |
877 | } | |
878 | he = idmap_alloc_name(h, im_in.im_name, namelen_in); | |
879 | break; | |
880 | default: | |
881 | goto out; | |
882 | } | |
883 | ||
884 | /* If the entry is valid, also copy it to the cache */ | |
885 | if (he != NULL) | |
886 | idmap_update_entry(he, im_in.im_name, namelen_in, im_in.im_id); | |
887 | ret = mlen; | |
888 | out: | |
c9d5128a | 889 | mutex_unlock(&idmap->idmap_im_lock); |
1da177e4 LT |
890 | return ret; |
891 | } | |
892 | ||
75c96f85 | 893 | static void |
1da177e4 LT |
894 | idmap_pipe_destroy_msg(struct rpc_pipe_msg *msg) |
895 | { | |
896 | struct idmap_msg *im = msg->data; | |
897 | struct idmap *idmap = container_of(im, struct idmap, idmap_im); | |
898 | ||
899 | if (msg->errno >= 0) | |
900 | return; | |
c9d5128a | 901 | mutex_lock(&idmap->idmap_im_lock); |
1da177e4 LT |
902 | im->im_status = IDMAP_STATUS_LOOKUPFAIL; |
903 | wake_up(&idmap->idmap_wq); | |
c9d5128a | 904 | mutex_unlock(&idmap->idmap_im_lock); |
1da177e4 LT |
905 | } |
906 | ||
907 | /* | |
908 | * Fowler/Noll/Vo hash | |
909 | * http://www.isthe.com/chongo/tech/comp/fnv/ | |
910 | */ | |
911 | ||
912 | #define FNV_P_32 ((unsigned int)0x01000193) /* 16777619 */ | |
913 | #define FNV_1_32 ((unsigned int)0x811c9dc5) /* 2166136261 */ | |
914 | ||
915 | static unsigned int fnvhash32(const void *buf, size_t buflen) | |
916 | { | |
917 | const unsigned char *p, *end = (const unsigned char *)buf + buflen; | |
918 | unsigned int hash = FNV_1_32; | |
919 | ||
920 | for (p = buf; p < end; p++) { | |
921 | hash *= FNV_P_32; | |
922 | hash ^= (unsigned int)*p; | |
923 | } | |
924 | ||
369af0f1 | 925 | return hash; |
1da177e4 LT |
926 | } |
927 | ||
e4fd72a1 | 928 | int nfs_map_name_to_uid(const struct nfs_server *server, const char *name, size_t namelen, __u32 *uid) |
1da177e4 | 929 | { |
e4fd72a1 | 930 | struct idmap *idmap = server->nfs_client->cl_idmap; |
1da177e4 | 931 | |
5cf36cfd TM |
932 | if (nfs_map_string_to_numeric(name, namelen, uid)) |
933 | return 0; | |
1da177e4 LT |
934 | return nfs_idmap_id(idmap, &idmap->idmap_user_hash, name, namelen, uid); |
935 | } | |
936 | ||
e4fd72a1 | 937 | int nfs_map_group_to_gid(const struct nfs_server *server, const char *name, size_t namelen, __u32 *uid) |
1da177e4 | 938 | { |
e4fd72a1 | 939 | struct idmap *idmap = server->nfs_client->cl_idmap; |
1da177e4 | 940 | |
5cf36cfd TM |
941 | if (nfs_map_string_to_numeric(name, namelen, uid)) |
942 | return 0; | |
1da177e4 LT |
943 | return nfs_idmap_id(idmap, &idmap->idmap_group_hash, name, namelen, uid); |
944 | } | |
945 | ||
e4fd72a1 | 946 | int nfs_map_uid_to_name(const struct nfs_server *server, __u32 uid, char *buf, size_t buflen) |
1da177e4 | 947 | { |
e4fd72a1 | 948 | struct idmap *idmap = server->nfs_client->cl_idmap; |
b064eca2 | 949 | int ret = -EINVAL; |
1da177e4 | 950 | |
b064eca2 TM |
951 | if (!(server->caps & NFS_CAP_UIDGID_NOMAP)) |
952 | ret = nfs_idmap_name(idmap, &idmap->idmap_user_hash, uid, buf); | |
f0b85168 TM |
953 | if (ret < 0) |
954 | ret = nfs_map_numeric_to_string(uid, buf, buflen); | |
955 | return ret; | |
1da177e4 | 956 | } |
e4fd72a1 | 957 | int nfs_map_gid_to_group(const struct nfs_server *server, __u32 uid, char *buf, size_t buflen) |
1da177e4 | 958 | { |
e4fd72a1 | 959 | struct idmap *idmap = server->nfs_client->cl_idmap; |
b064eca2 | 960 | int ret = -EINVAL; |
1da177e4 | 961 | |
b064eca2 TM |
962 | if (!(server->caps & NFS_CAP_UIDGID_NOMAP)) |
963 | ret = nfs_idmap_name(idmap, &idmap->idmap_group_hash, uid, buf); | |
f0b85168 TM |
964 | if (ret < 0) |
965 | ret = nfs_map_numeric_to_string(uid, buf, buflen); | |
966 | return ret; | |
1da177e4 LT |
967 | } |
968 | ||
955a857e | 969 | #endif /* CONFIG_NFS_USE_NEW_IDMAPPER */ |