]>
git.proxmox.com Git - mirror_ubuntu-zesty-kernel.git/blob - net/ceph/auth.c
1 #include <linux/ceph/ceph_debug.h>
3 #include <linux/module.h>
5 #include <linux/slab.h>
7 #include <linux/ceph/types.h>
8 #include <linux/ceph/decode.h>
9 #include <linux/ceph/libceph.h>
10 #include <linux/ceph/messenger.h>
11 #include "auth_none.h"
16 * get protocol handler
18 static u32 supported_protocols
[] = {
23 static int ceph_auth_init_protocol(struct ceph_auth_client
*ac
, int protocol
)
27 return ceph_auth_none_init(ac
);
29 return ceph_x_init(ac
);
38 struct ceph_auth_client
*ceph_auth_init(const char *name
, const char *secret
)
40 struct ceph_auth_client
*ac
;
43 dout("auth_init name '%s' secret '%s'\n", name
, secret
);
46 ac
= kzalloc(sizeof(*ac
), GFP_NOFS
);
50 ac
->negotiating
= true;
54 ac
->name
= CEPH_AUTH_NAME_DEFAULT
;
55 dout("auth_init name %s secret %s\n", ac
->name
, secret
);
63 void ceph_auth_destroy(struct ceph_auth_client
*ac
)
65 dout("auth_destroy %p\n", ac
);
72 * Reset occurs when reconnecting to the monitor.
74 void ceph_auth_reset(struct ceph_auth_client
*ac
)
76 dout("auth_reset %p\n", ac
);
77 if (ac
->ops
&& !ac
->negotiating
)
79 ac
->negotiating
= true;
82 int ceph_entity_name_encode(const char *name
, void **p
, void *end
)
84 int len
= strlen(name
);
86 if (*p
+ 2*sizeof(u32
) + len
> end
)
88 ceph_encode_32(p
, CEPH_ENTITY_TYPE_CLIENT
);
89 ceph_encode_32(p
, len
);
90 ceph_encode_copy(p
, name
, len
);
95 * Initiate protocol negotiation with monitor. Include entity name
96 * and list supported protocols.
98 int ceph_auth_build_hello(struct ceph_auth_client
*ac
, void *buf
, size_t len
)
100 struct ceph_mon_request_header
*monhdr
= buf
;
101 void *p
= monhdr
+ 1, *end
= buf
+ len
, *lenp
;
105 dout("auth_build_hello\n");
106 monhdr
->have_version
= 0;
107 monhdr
->session_mon
= cpu_to_le16(-1);
108 monhdr
->session_mon_tid
= 0;
110 ceph_encode_32(&p
, 0); /* no protocol, yet */
115 ceph_decode_need(&p
, end
, 1 + sizeof(u32
), bad
);
116 ceph_encode_8(&p
, 1);
117 num
= ARRAY_SIZE(supported_protocols
);
118 ceph_encode_32(&p
, num
);
119 ceph_decode_need(&p
, end
, num
* sizeof(u32
), bad
);
120 for (i
= 0; i
< num
; i
++)
121 ceph_encode_32(&p
, supported_protocols
[i
]);
123 ret
= ceph_entity_name_encode(ac
->name
, &p
, end
);
126 ceph_decode_need(&p
, end
, sizeof(u64
), bad
);
127 ceph_encode_64(&p
, ac
->global_id
);
129 ceph_encode_32(&lenp
, p
- lenp
- sizeof(u32
));
136 static int ceph_build_auth_request(struct ceph_auth_client
*ac
,
137 void *msg_buf
, size_t msg_len
)
139 struct ceph_mon_request_header
*monhdr
= msg_buf
;
140 void *p
= monhdr
+ 1;
141 void *end
= msg_buf
+ msg_len
;
144 monhdr
->have_version
= 0;
145 monhdr
->session_mon
= cpu_to_le16(-1);
146 monhdr
->session_mon_tid
= 0;
148 ceph_encode_32(&p
, ac
->protocol
);
150 ret
= ac
->ops
->build_request(ac
, p
+ sizeof(u32
), end
);
152 pr_err("error %d building auth method %s request\n", ret
,
156 dout(" built request %d bytes\n", ret
);
157 ceph_encode_32(&p
, ret
);
158 return p
+ ret
- msg_buf
;
162 * Handle auth message from monitor.
164 int ceph_handle_auth_reply(struct ceph_auth_client
*ac
,
165 void *buf
, size_t len
,
166 void *reply_buf
, size_t reply_len
)
169 void *end
= buf
+ len
;
173 void *payload
, *payload_end
;
179 dout("handle_auth_reply %p %p\n", p
, end
);
180 ceph_decode_need(&p
, end
, sizeof(u32
) * 3 + sizeof(u64
), bad
);
181 protocol
= ceph_decode_32(&p
);
182 result
= ceph_decode_32(&p
);
183 global_id
= ceph_decode_64(&p
);
184 payload_len
= ceph_decode_32(&p
);
187 ceph_decode_need(&p
, end
, sizeof(u32
), bad
);
188 result_msg_len
= ceph_decode_32(&p
);
194 dout(" result %d '%.*s' gid %llu len %d\n", result
, result_msg_len
,
195 result_msg
, global_id
, payload_len
);
197 payload_end
= payload
+ payload_len
;
199 if (global_id
&& ac
->global_id
!= global_id
) {
200 dout(" set global_id %lld -> %lld\n", ac
->global_id
, global_id
);
201 ac
->global_id
= global_id
;
204 if (ac
->negotiating
) {
205 /* server does not support our protocols? */
206 if (!protocol
&& result
< 0) {
210 /* set up (new) protocol handler? */
211 if (ac
->protocol
&& ac
->protocol
!= protocol
) {
212 ac
->ops
->destroy(ac
);
216 if (ac
->protocol
!= protocol
) {
217 ret
= ceph_auth_init_protocol(ac
, protocol
);
219 pr_err("error %d on auth protocol %d init\n",
225 ac
->negotiating
= false;
228 ret
= ac
->ops
->handle_reply(ac
, result
, payload
, payload_end
);
229 if (ret
== -EAGAIN
) {
230 return ceph_build_auth_request(ac
, reply_buf
, reply_len
);
232 pr_err("auth method '%s' error %d\n", ac
->ops
->name
, ret
);
238 pr_err("failed to decode auth msg\n");
243 int ceph_build_auth(struct ceph_auth_client
*ac
,
244 void *msg_buf
, size_t msg_len
)
247 return ceph_auth_build_hello(ac
, msg_buf
, msg_len
);
249 if (ac
->ops
->should_authenticate(ac
))
250 return ceph_build_auth_request(ac
, msg_buf
, msg_len
);
254 int ceph_auth_is_authenticated(struct ceph_auth_client
*ac
)
258 return ac
->ops
->is_authenticated(ac
);