---

lcmaps.c

Go to the documentation of this file.

/*                                                                                                            
 * Copyright (c) 2001 EU DataGrid.                                                                             
 * For license conditions see http://www.eu-datagrid.org/license.html                                          
 *
 * Copyright (c) 2001, 2002 by 
 *     Martijn Steenbakkers <martijn@nikhef.nl>,
 *     David Groep <davidg@nikhef.nl>,
 *     NIKHEF Amsterdam, the Netherlands
 */

#include "lcmaps_config.h"
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <gssapi.h>

/* LCMAPS includes */
#include "pluginmanager/_lcmaps_pluginmanager.h"
#include "pluginmanager/_lcmaps_log.h"
#include "lcmaps_types.h"
#include "lcmaps_utils.h"
#include "pluginmanager/_lcmaps_utils.h"
#include "lcmaps_cred_data.h"

/******************************************************************************
                       Define module specific variables
******************************************************************************/
static lcmaps_cred_id_t    lcmaps_cred; 
static int                 lcmaps_initialized = 0; 
/******************************************************************************
Function:   lcmaps_init
Description:
    Start PluginManager:
    read from LCMAPS config file, the plugins to be loaded

Parameters:
    fp: file handle for logging (from gatekeeper)
Returns:
    0: initialization succeeded
    1: initialization failed
******************************************************************************/
int lcmaps_init(
        FILE* fp
)
{
    if (lcmaps_initialized)
    {
        if (lcmaps_log(0,"LCMAPS already initialized\n") != 0)
        {
            fprintf(stderr,"LCMAPS already initialized, but wrongly\n");
            goto fail_lcmaps_init;
        }
        return 0;
    }

    /* set logging file descriptor, for the moment the gatekeeper logfile */
/*  if (lcmaps_log_open(NULL,fp,DO_USRLOG|DO_SYSLOG)) goto fail_lcmaps_init; */
    if (lcmaps_log_open(NULL,fp,DO_USRLOG)) goto fail_lcmaps_init;
    lcmaps_log_debug(0,"\n");
    lcmaps_log_time(LOG_NOTICE,"Initialization LCMAPS version %s\n",VERSION);

    /* Start PluginManager */
    if (startPluginManager()) {
        lcmaps_log(0,"lcmaps.mod-lcmaps_init() error: could not start plugin manager\n");
        goto fail_lcmaps_init;
    }

    /* success */
    lcmaps_initialized++;
    return 0;

 fail_lcmaps_init:
    return 1;

}


/******************************************************************************
Function:   lcmaps_run
Description:
    do the user mapping

Parameters:
    request: JDL
    user_cred : user globus credential handle
Returns:
    0: mapping succeeded
    1: mapping failed
******************************************************************************/
#if ALLOW_EMPTY_CREDENTIALS
int lcmaps_run(
        char * user_dn_tmp,
        gss_cred_id_t user_cred,
        lcmaps_request_t request
)
#else
int lcmaps_run(
        gss_cred_id_t user_cred,
        lcmaps_request_t request
)
#endif
{
    char *                        user_dn = NULL;

    if (lcmaps_initialized == 0)
    {
        fprintf(stderr,"LCMAPS has to be initialized first !\n");
        goto fail_lcmaps_run;
    }

    /*
     * Create lcmaps credential (checks if dn can be extracted)
     */
    if ( lcmaps_fill_cred(user_dn_tmp, user_cred, &lcmaps_cred) != 0)
    {
        lcmaps_log(0,"lcmaps.mod-lcmaps_run() error: could not create lcmaps credential, something wrong\n");
        lcmaps_log(0,"                                              : with user DN and user credential\n");
        goto fail_lcmaps_run;
    }
    user_dn = lcmaps_get_dn(lcmaps_cred);
    if (user_dn == NULL)
    {
        lcmaps_log(0, "lcmaps.mod-lcmaps_run() error: user DN empty\n");
        goto fail_lcmaps_run;
    }

    /* Run PluginManager */
    if (runPluginManager(request, lcmaps_cred)) {
        lcmaps_log(0,"lcmaps.mod-lcmaps_run() error: could not run plugin manager\n");
        goto fail_lcmaps_run;
    }

    /* succes */
    lcmaps_release_cred(&lcmaps_cred);
    lcmaps_log_time(0,"lcmaps.mod-lcmaps_run(): succeeded\n");
    return 0;

 fail_lcmaps_run:
    lcmaps_release_cred(&lcmaps_cred);
    lcmaps_log_time(0,"lcmaps.mod-lcmaps_run(): failed\n");
    return 1;
}

/******************************************************************************
Function:   lcmaps_run_and_return_username
Description:
    do the user mapping and return user name (needed for e.g. GridFTP)

Parameters:
    request: JDL
    user_cred : user globus credential handle
    usernamep : pointer to user name
Returns:
    0: mapping succeeded
    1: mapping failed
******************************************************************************/
#if ALLOW_EMPTY_CREDENTIALS
int lcmaps_run_and_return_username(
        char * user_dn_tmp,
        gss_cred_id_t user_cred,
        lcmaps_request_t request,
        char ** usernamep
)
#else
int lcmaps_run_and_return_username(
        gss_cred_id_t user_cred,
        lcmaps_request_t request,
        char ** usernamep
)
#endif
{
    uid_t *          uid;
    int              cntUid;
    struct passwd *  user_info   = NULL;

    int retval = 0;

    fprintf(stderr,"Using lcmaps_run_and_return_username interface of LCMAPS\n");
    if (usernamep == NULL)
        return 1;

    *usernamep = NULL;

#if ALLOW_EMPTY_CREDENTIALS
    retval = lcmaps_run(user_dn_tmp, user_cred, request);
#else
    retval = lcmaps_run(user_cred, request);
#endif
    if (retval != 0)
    {
        fprintf(stderr,"LCMAPS failed to map the user credential\n");
        return 1;
    }
    /*
     * Apparently lcmaps succeeded, so let's get the username from the credential repository
     * and return happily
     */

    /* Now try to get the userid drom the credential data */
    uid    = getCredentialData(UID,     &cntUid);
    if (uid)
    {
        if ( (user_info = getpwuid(uid[0])) == NULL )
        {
            fprintf(stderr,"LCMAPS could not find the username related to uid: %d\n",uid[0]);
            return 1;
        }
        (*usernamep) = strdup(user_info->pw_name);
    }
    else
    {
        fprintf(stderr,"LCMAPS could not find any uid\n");
        return 1;
    }

    return 0;
}

/******************************************************************************
Function:   lcmaps_run_without_credentials
Description:
    do the user mapping without credentials, only the user DN

Parameters:
    user_dn_tmp: user DN
Returns:
    0: mapping succeeded
    1: mapping failed
******************************************************************************/
int lcmaps_run_without_credentials(
        char * user_dn_tmp
)
{
    gss_cred_id_t user_cred  = GSS_C_NO_CREDENTIAL;
    lcmaps_request_t request = (lcmaps_request_t) NULL;
    char *           user_dn = NULL;

    if (lcmaps_initialized == 0)
    {
        fprintf(stderr,"LCMAPS has to be initialized first !\n");
        goto fail_lcmaps_run_without_credentials;
    }

    /*
     * Create lcmaps credential (checks if dn can be extracted)
     */
    if ( lcmaps_fill_cred(user_dn_tmp, user_cred, &lcmaps_cred) != 0)
    {
        lcmaps_log(0,"lcmaps.mod-lcmaps_run_without_credentials() error: could not create lcmaps credential, something wrong\n");
        lcmaps_log(0,"                                              : with user DN and user credential\n");
        goto fail_lcmaps_run_without_credentials;
    }
    user_dn = lcmaps_get_dn(lcmaps_cred);
    if (user_dn == NULL)
    {
        lcmaps_log(0, "lcmaps.mod-lcmaps_run_without_credentials() error: user DN empty\n");
        goto fail_lcmaps_run_without_credentials;
    }

    /* Run PluginManager */
    if (runPluginManager(request, lcmaps_cred)) {
        lcmaps_log(0,"lcmaps.mod-lcmaps_run_without_credentials() error: could not run plugin manager\n");
        goto fail_lcmaps_run_without_credentials;
    }

    /* succes */
    lcmaps_release_cred(&lcmaps_cred);
    lcmaps_log_debug(0,"lcmaps.mod-lcmaps_run_without_credentials(): succeeded\n");
    return 0;

 fail_lcmaps_run_without_credentials:
    lcmaps_release_cred(&lcmaps_cred);
    lcmaps_log_debug(0,"lcmaps.mod-lcmaps_run_without_credentials(): failed\n");
    return 1;
}


/******************************************************************************
Function:   lcmaps_term
Description:
    Terminate LCMAPS module: 

Parameters:
Returns:
    0: termination succeeded
    1: termination failed
******************************************************************************/
int lcmaps_term()
{
    lcmaps_log_time(0,"lcmaps.mod-lcmaps_term(): terminating\n");
    return stopPluginManager();
}

/******************************************************************************
CVS Information:
    $Source: /cvs/fabric_mgt/gridification/lcmaps/src/lcmaps.c,v $
    $Date: 2004/03/04 16:34:33 $
    $Revision: 1.8 $
    $Author: martijn $
******************************************************************************/

---