#include <cstdio>
#include <cstdlib>
#include <cstring>
#include <unistd.h>
#include "XrdVersion.hh"
#include "XrdSys/XrdSysHeaders.hh"
#include "XrdSys/XrdSysPthread.hh"
#include "XrdSec/XrdSecEntity.hh"
#include "XrdOuc/XrdOucEnv.hh"
#include "XrdOuc/XrdOucLock.hh"

Include dependency graph for XrdSecgsiAuthzFunVO.cc:

Macros
#define	PRINT(y)

#define	PROUT(_x_)

Functions
int	XrdSecgsiAuthzFun (XrdSecEntity &entity)

int	XrdSecgsiAuthzInit (const char *cfg)

int	XrdSecgsiAuthzKey (XrdSecEntity &entity, char **key)

	XrdVERSIONINFO (XrdSecgsiAuthzFun, secgsiauthz)

	XrdVERSIONINFO (XrdSecgsiAuthzInit, secgsiauthz)

	XrdVERSIONINFO (XrdSecgsiAuthzKey, secgsiauthz)

Macro Definition Documentation

◆ PRINT

#define PRINT ( y )

Value:

if (g_debug) {std::cerr << y << "\n";}

Definition at line 124 of file XrdSecgsiAuthzFunVO.cc.

Referenced by XrdSecgsiAuthzInit(), and XrdSecgsiAuthzKey().

◆ PROUT

#define PROUT ( _x_ )

Value:

std::cerr <<inf_pfx <<"entity." #_x_ "='" <<(entity._x_ ? entity._x_ : "") <<"'.\n"

Definition at line 126 of file XrdSecgsiAuthzFunVO.cc.

126#define PROUT(_x_) \

127 std::cerr <<inf_pfx <<"entity." #_x_ "='" <<(entity._x_ ? entity._x_ : "") <<"'.\n"

Referenced by XrdSecgsiAuthzFun().

Function Documentation

◆ XrdSecgsiAuthzFun()

int XrdSecgsiAuthzFun ( XrdSecEntity & entity )

Definition at line 140 of file XrdSecgsiAuthzFunVO.cc.

{
   static const char* inf_pfx = "INFO in AuthzFun: ";
   static XrdSysMutex Mutex;
   const char *vtxt = "", *etxt = 0;
   char vbuff[(g_maxvolen+1)*2];
   int n = 0;
 
// We must have a vo, it must be shorter than 255 bytes, and it must be in our
// vo list of we have one
//
        if (!entity.vorg) etxt = "missing";
   else if ((n = strlen(entity.vorg)) > g_maxvolen) etxt = "too long";
   else if (g_valido)
           {*vbuff = ',';
            strcpy(vbuff+1, entity.vorg);
            if (!strstr(g_valido, vbuff))
               {vtxt = entity.vorg; etxt = " not allowed";}
           }
 
// Check if we passed the tests
//
   if (etxt)
      {std::cerr <<"AuthzVO: Invalid cert; vo " <<vtxt <<etxt <<std::endl;
       return -1;
      }
 
// Format group name if so wanted
//
   if (g_vo2grp)
      {snprintf(vbuff, sizeof(vbuff), g_vo2grp, entity.vorg);
       if (entity.grps) free(entity.grps);
       entity.grps = strdup(vbuff);
      }
 
// Format user  name if so wanted
//
   if (g_vo2usr)
      {snprintf(vbuff, sizeof(vbuff), g_vo2usr, entity.vorg);
       if (entity.name) free(entity.name);
       entity.name = strdup(vbuff);
      } else if (g_cn2usr && entity.name && (vtxt=strstr(entity.name,"/CN=")))
                {char *cP = vbuff;
                 strncpy(vbuff, vtxt+4, g_maxvolen); vbuff[n] = 0;
                 while(*cP) {if (*cP == ' ') *cP = '_'; cP++;}
                 for (int i = n-1; i >= 0; i--) {if (*cP == '_') *cP = 0;}
                 if (*vbuff)
                    {if (entity.name) free(entity.name);
                     entity.name = strdup(vbuff);
                    }
                }
 
// If debugging then print information. However, get a global mutex to keep
// from inter-leaving these lines with other threads, as much as possible.
//
   if (g_debug)
      {XrdOucLock lock(&Mutex);
       PROUT(name); PROUT(host); PROUT(grps); PROUT(vorg); PROUT(role);
      }
 
// All done
//
   return 0;
}

References XrdSecEntity::grps, XrdSecEntity::name, PROUT, and XrdSecEntity::vorg.

◆ XrdSecgsiAuthzInit()

int XrdSecgsiAuthzInit ( const char * cfg )

Definition at line 237 of file XrdSecgsiAuthzFunVO.cc.

{
   // Return:
   //   -1 on falure
   //    0 to get credentials in raw form
   //    1 to get credentials in PEM base64 encoded form
 
   static const char* inf_pfx = "INFO in AuthzInit: ";
   XrdOucEnv *envP;
   char cfgbuff[2048], *sP;
   int i;
 
// The configuration string may mistakingly include other parms following
// the auzparms. So, trim the string.
//
   if (cfg)
      {i = strlen(cfg);
       if (i >= (int)sizeof(cfgbuff)) i = sizeof(cfgbuff)-1;
       memcpy(cfgbuff, cfg, i);
       cfgbuff[i] = 0;
       if ((sP = index(cfgbuff, ' '))) *sP = 0;
      }
   if (!cfg || !(*cfg)) return g_certificate_format;
 
// Parse the config line (it's in cgi format)
//
   envP = new XrdOucEnv(cfgbuff);
 
// Set debug value
//
   if ((sP = envP->Get("debug")) && *sP == '1') g_debug = 1;
 
// Get the mapping strings
//
   if ((g_vo2grp = envP->Get("vo2grp"))) g_vo2grp = strdup(g_vo2grp);
   if ((g_vo2usr = envP->Get("vo2usr")))
      {g_cn2usr = 0;
       g_vo2usr = (!strcmp(g_vo2usr, "*") ? 0 :     strdup(g_vo2usr));
      }
 
// Now process the valid vo's
//
   if ((sP = envP->Get("valido")))
      {i = strlen(sP);
       g_valido = (char *)malloc(i+2);
       *g_valido = ',';
       strcpy(g_valido+1, sP);
      }
 
// All done with environment
//
   delete envP;
 
// All done.
//
   PRINT(inf_pfx <<"cfg='"<< (cfg ? cfg : "null") << "'.");
   return g_certificate_format;
}

References XrdOucEnv::Get(), and PRINT.

Here is the call graph for this function:

◆ XrdSecgsiAuthzKey()

int XrdSecgsiAuthzKey	(	XrdSecEntity &	entity,
		char **	key )

Definition at line 209 of file XrdSecgsiAuthzFunVO.cc.

{
   // Return key by which entity.creds will be hashed.
   // For now return entity.creds itself.
   // The plan is to use DN + VO endorsements in the future.
 
   static const char* err_pfx = "ERR  in AuthzKey: ";
   static const char* inf_pfx = "INFO in AuthzKey: ";
 
   // Must have got something
   if (!key) {
      PRINT(err_pfx << "'key' is not defined!");
      return -1;
   }
 
   PRINT(inf_pfx << "Returning creds of len " << entity.credslen << " as key.");
 
   // Set the key
   *key = new char[entity.credslen + 1];
   strcpy(*key, entity.creds);
 
   return entity.credslen;
}