|  | /* | 
|  | * fs/nfs/idmap.c | 
|  | * | 
|  | *  UID and GID to name mapping for clients. | 
|  | * | 
|  | *  Copyright (c) 2002 The Regents of the University of Michigan. | 
|  | *  All rights reserved. | 
|  | * | 
|  | *  Marius Aamodt Eriksen <marius@umich.edu> | 
|  | * | 
|  | *  Redistribution and use in source and binary forms, with or without | 
|  | *  modification, are permitted provided that the following conditions | 
|  | *  are met: | 
|  | * | 
|  | *  1. Redistributions of source code must retain the above copyright | 
|  | *     notice, this list of conditions and the following disclaimer. | 
|  | *  2. Redistributions in binary form must reproduce the above copyright | 
|  | *     notice, this list of conditions and the following disclaimer in the | 
|  | *     documentation and/or other materials provided with the distribution. | 
|  | *  3. Neither the name of the University nor the names of its | 
|  | *     contributors may be used to endorse or promote products derived | 
|  | *     from this software without specific prior written permission. | 
|  | * | 
|  | *  THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED | 
|  | *  WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF | 
|  | *  MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE | 
|  | *  DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE | 
|  | *  FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR | 
|  | *  CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF | 
|  | *  SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR | 
|  | *  BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF | 
|  | *  LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING | 
|  | *  NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS | 
|  | *  SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. | 
|  | */ | 
|  |  | 
|  | #include <linux/module.h> | 
|  | #include <linux/mutex.h> | 
|  | #include <linux/init.h> | 
|  | #include <linux/types.h> | 
|  | #include <linux/slab.h> | 
|  | #include <linux/socket.h> | 
|  | #include <linux/in.h> | 
|  | #include <linux/sched.h> | 
|  |  | 
|  | #include <linux/sunrpc/clnt.h> | 
|  | #include <linux/workqueue.h> | 
|  | #include <linux/sunrpc/rpc_pipe_fs.h> | 
|  |  | 
|  | #include <linux/nfs_fs.h> | 
|  |  | 
|  | #include <linux/nfs_idmap.h> | 
|  | #include "nfs4_fs.h" | 
|  |  | 
|  | #define IDMAP_HASH_SZ          128 | 
|  |  | 
|  | /* Default cache timeout is 10 minutes */ | 
|  | unsigned int nfs_idmap_cache_timeout = 600 * HZ; | 
|  |  | 
|  | static int param_set_idmap_timeout(const char *val, struct kernel_param *kp) | 
|  | { | 
|  | char *endp; | 
|  | int num = simple_strtol(val, &endp, 0); | 
|  | int jif = num * HZ; | 
|  | if (endp == val || *endp || num < 0 || jif < num) | 
|  | return -EINVAL; | 
|  | *((int *)kp->arg) = jif; | 
|  | return 0; | 
|  | } | 
|  |  | 
|  | module_param_call(idmap_cache_timeout, param_set_idmap_timeout, param_get_int, | 
|  | &nfs_idmap_cache_timeout, 0644); | 
|  |  | 
|  | struct idmap_hashent { | 
|  | unsigned long ih_expires; | 
|  | __u32 ih_id; | 
|  | int ih_namelen; | 
|  | char ih_name[IDMAP_NAMESZ]; | 
|  | }; | 
|  |  | 
|  | struct idmap_hashtable { | 
|  | __u8 h_type; | 
|  | struct idmap_hashent h_entries[IDMAP_HASH_SZ]; | 
|  | }; | 
|  |  | 
|  | struct idmap { | 
|  | struct dentry        *idmap_dentry; | 
|  | wait_queue_head_t     idmap_wq; | 
|  | struct idmap_msg      idmap_im; | 
|  | struct mutex          idmap_lock;    /* Serializes upcalls */ | 
|  | struct mutex          idmap_im_lock; /* Protects the hashtable */ | 
|  | struct idmap_hashtable idmap_user_hash; | 
|  | struct idmap_hashtable idmap_group_hash; | 
|  | }; | 
|  |  | 
|  | static ssize_t   idmap_pipe_upcall(struct file *, struct rpc_pipe_msg *, | 
|  | char __user *, size_t); | 
|  | static ssize_t   idmap_pipe_downcall(struct file *, const char __user *, | 
|  | size_t); | 
|  | static void      idmap_pipe_destroy_msg(struct rpc_pipe_msg *); | 
|  |  | 
|  | static unsigned int fnvhash32(const void *, size_t); | 
|  |  | 
|  | static struct rpc_pipe_ops idmap_upcall_ops = { | 
|  | .upcall         = idmap_pipe_upcall, | 
|  | .downcall       = idmap_pipe_downcall, | 
|  | .destroy_msg    = idmap_pipe_destroy_msg, | 
|  | }; | 
|  |  | 
|  | int | 
|  | nfs_idmap_new(struct nfs_client *clp) | 
|  | { | 
|  | struct idmap *idmap; | 
|  | int error; | 
|  |  | 
|  | BUG_ON(clp->cl_idmap != NULL); | 
|  |  | 
|  | if ((idmap = kzalloc(sizeof(*idmap), GFP_KERNEL)) == NULL) | 
|  | return -ENOMEM; | 
|  |  | 
|  | idmap->idmap_dentry = rpc_mkpipe(clp->cl_rpcclient->cl_dentry, "idmap", | 
|  | idmap, &idmap_upcall_ops, 0); | 
|  | if (IS_ERR(idmap->idmap_dentry)) { | 
|  | error = PTR_ERR(idmap->idmap_dentry); | 
|  | kfree(idmap); | 
|  | return error; | 
|  | } | 
|  |  | 
|  | mutex_init(&idmap->idmap_lock); | 
|  | mutex_init(&idmap->idmap_im_lock); | 
|  | init_waitqueue_head(&idmap->idmap_wq); | 
|  | idmap->idmap_user_hash.h_type = IDMAP_TYPE_USER; | 
|  | idmap->idmap_group_hash.h_type = IDMAP_TYPE_GROUP; | 
|  |  | 
|  | clp->cl_idmap = idmap; | 
|  | return 0; | 
|  | } | 
|  |  | 
|  | void | 
|  | nfs_idmap_delete(struct nfs_client *clp) | 
|  | { | 
|  | struct idmap *idmap = clp->cl_idmap; | 
|  |  | 
|  | if (!idmap) | 
|  | return; | 
|  | rpc_unlink(idmap->idmap_dentry); | 
|  | clp->cl_idmap = NULL; | 
|  | kfree(idmap); | 
|  | } | 
|  |  | 
|  | /* | 
|  | * Helper routines for manipulating the hashtable | 
|  | */ | 
|  | static inline struct idmap_hashent * | 
|  | idmap_name_hash(struct idmap_hashtable* h, const char *name, size_t len) | 
|  | { | 
|  | return &h->h_entries[fnvhash32(name, len) % IDMAP_HASH_SZ]; | 
|  | } | 
|  |  | 
|  | static struct idmap_hashent * | 
|  | idmap_lookup_name(struct idmap_hashtable *h, const char *name, size_t len) | 
|  | { | 
|  | struct idmap_hashent *he = idmap_name_hash(h, name, len); | 
|  |  | 
|  | if (he->ih_namelen != len || memcmp(he->ih_name, name, len) != 0) | 
|  | return NULL; | 
|  | if (time_after(jiffies, he->ih_expires)) | 
|  | return NULL; | 
|  | return he; | 
|  | } | 
|  |  | 
|  | static inline struct idmap_hashent * | 
|  | idmap_id_hash(struct idmap_hashtable* h, __u32 id) | 
|  | { | 
|  | return &h->h_entries[fnvhash32(&id, sizeof(id)) % IDMAP_HASH_SZ]; | 
|  | } | 
|  |  | 
|  | static struct idmap_hashent * | 
|  | idmap_lookup_id(struct idmap_hashtable *h, __u32 id) | 
|  | { | 
|  | struct idmap_hashent *he = idmap_id_hash(h, id); | 
|  | if (he->ih_id != id || he->ih_namelen == 0) | 
|  | return NULL; | 
|  | if (time_after(jiffies, he->ih_expires)) | 
|  | return NULL; | 
|  | return he; | 
|  | } | 
|  |  | 
|  | /* | 
|  | * Routines for allocating new entries in the hashtable. | 
|  | * For now, we just have 1 entry per bucket, so it's all | 
|  | * pretty trivial. | 
|  | */ | 
|  | static inline struct idmap_hashent * | 
|  | idmap_alloc_name(struct idmap_hashtable *h, char *name, unsigned len) | 
|  | { | 
|  | return idmap_name_hash(h, name, len); | 
|  | } | 
|  |  | 
|  | static inline struct idmap_hashent * | 
|  | idmap_alloc_id(struct idmap_hashtable *h, __u32 id) | 
|  | { | 
|  | return idmap_id_hash(h, id); | 
|  | } | 
|  |  | 
|  | static void | 
|  | idmap_update_entry(struct idmap_hashent *he, const char *name, | 
|  | size_t namelen, __u32 id) | 
|  | { | 
|  | he->ih_id = id; | 
|  | memcpy(he->ih_name, name, namelen); | 
|  | he->ih_name[namelen] = '\0'; | 
|  | he->ih_namelen = namelen; | 
|  | he->ih_expires = jiffies + nfs_idmap_cache_timeout; | 
|  | } | 
|  |  | 
|  | /* | 
|  | * Name -> ID | 
|  | */ | 
|  | static int | 
|  | nfs_idmap_id(struct idmap *idmap, struct idmap_hashtable *h, | 
|  | const char *name, size_t namelen, __u32 *id) | 
|  | { | 
|  | struct rpc_pipe_msg msg; | 
|  | struct idmap_msg *im; | 
|  | struct idmap_hashent *he; | 
|  | DECLARE_WAITQUEUE(wq, current); | 
|  | int ret = -EIO; | 
|  |  | 
|  | im = &idmap->idmap_im; | 
|  |  | 
|  | /* | 
|  | * String sanity checks | 
|  | * Note that the userland daemon expects NUL terminated strings | 
|  | */ | 
|  | for (;;) { | 
|  | if (namelen == 0) | 
|  | return -EINVAL; | 
|  | if (name[namelen-1] != '\0') | 
|  | break; | 
|  | namelen--; | 
|  | } | 
|  | if (namelen >= IDMAP_NAMESZ) | 
|  | return -EINVAL; | 
|  |  | 
|  | mutex_lock(&idmap->idmap_lock); | 
|  | mutex_lock(&idmap->idmap_im_lock); | 
|  |  | 
|  | he = idmap_lookup_name(h, name, namelen); | 
|  | if (he != NULL) { | 
|  | *id = he->ih_id; | 
|  | ret = 0; | 
|  | goto out; | 
|  | } | 
|  |  | 
|  | memset(im, 0, sizeof(*im)); | 
|  | memcpy(im->im_name, name, namelen); | 
|  |  | 
|  | im->im_type = h->h_type; | 
|  | im->im_conv = IDMAP_CONV_NAMETOID; | 
|  |  | 
|  | memset(&msg, 0, sizeof(msg)); | 
|  | msg.data = im; | 
|  | msg.len = sizeof(*im); | 
|  |  | 
|  | add_wait_queue(&idmap->idmap_wq, &wq); | 
|  | if (rpc_queue_upcall(idmap->idmap_dentry->d_inode, &msg) < 0) { | 
|  | remove_wait_queue(&idmap->idmap_wq, &wq); | 
|  | goto out; | 
|  | } | 
|  |  | 
|  | set_current_state(TASK_UNINTERRUPTIBLE); | 
|  | mutex_unlock(&idmap->idmap_im_lock); | 
|  | schedule(); | 
|  | __set_current_state(TASK_RUNNING); | 
|  | remove_wait_queue(&idmap->idmap_wq, &wq); | 
|  | mutex_lock(&idmap->idmap_im_lock); | 
|  |  | 
|  | if (im->im_status & IDMAP_STATUS_SUCCESS) { | 
|  | *id = im->im_id; | 
|  | ret = 0; | 
|  | } | 
|  |  | 
|  | out: | 
|  | memset(im, 0, sizeof(*im)); | 
|  | mutex_unlock(&idmap->idmap_im_lock); | 
|  | mutex_unlock(&idmap->idmap_lock); | 
|  | return (ret); | 
|  | } | 
|  |  | 
|  | /* | 
|  | * ID -> Name | 
|  | */ | 
|  | static int | 
|  | nfs_idmap_name(struct idmap *idmap, struct idmap_hashtable *h, | 
|  | __u32 id, char *name) | 
|  | { | 
|  | struct rpc_pipe_msg msg; | 
|  | struct idmap_msg *im; | 
|  | struct idmap_hashent *he; | 
|  | DECLARE_WAITQUEUE(wq, current); | 
|  | int ret = -EIO; | 
|  | unsigned int len; | 
|  |  | 
|  | im = &idmap->idmap_im; | 
|  |  | 
|  | mutex_lock(&idmap->idmap_lock); | 
|  | mutex_lock(&idmap->idmap_im_lock); | 
|  |  | 
|  | he = idmap_lookup_id(h, id); | 
|  | if (he != 0) { | 
|  | memcpy(name, he->ih_name, he->ih_namelen); | 
|  | ret = he->ih_namelen; | 
|  | goto out; | 
|  | } | 
|  |  | 
|  | memset(im, 0, sizeof(*im)); | 
|  | im->im_type = h->h_type; | 
|  | im->im_conv = IDMAP_CONV_IDTONAME; | 
|  | im->im_id = id; | 
|  |  | 
|  | memset(&msg, 0, sizeof(msg)); | 
|  | msg.data = im; | 
|  | msg.len = sizeof(*im); | 
|  |  | 
|  | add_wait_queue(&idmap->idmap_wq, &wq); | 
|  |  | 
|  | if (rpc_queue_upcall(idmap->idmap_dentry->d_inode, &msg) < 0) { | 
|  | remove_wait_queue(&idmap->idmap_wq, &wq); | 
|  | goto out; | 
|  | } | 
|  |  | 
|  | set_current_state(TASK_UNINTERRUPTIBLE); | 
|  | mutex_unlock(&idmap->idmap_im_lock); | 
|  | schedule(); | 
|  | __set_current_state(TASK_RUNNING); | 
|  | remove_wait_queue(&idmap->idmap_wq, &wq); | 
|  | mutex_lock(&idmap->idmap_im_lock); | 
|  |  | 
|  | if (im->im_status & IDMAP_STATUS_SUCCESS) { | 
|  | if ((len = strnlen(im->im_name, IDMAP_NAMESZ)) == 0) | 
|  | goto out; | 
|  | memcpy(name, im->im_name, len); | 
|  | ret = len; | 
|  | } | 
|  |  | 
|  | out: | 
|  | memset(im, 0, sizeof(*im)); | 
|  | mutex_unlock(&idmap->idmap_im_lock); | 
|  | mutex_unlock(&idmap->idmap_lock); | 
|  | return ret; | 
|  | } | 
|  |  | 
|  | /* RPC pipefs upcall/downcall routines */ | 
|  | static ssize_t | 
|  | idmap_pipe_upcall(struct file *filp, struct rpc_pipe_msg *msg, | 
|  | char __user *dst, size_t buflen) | 
|  | { | 
|  | char *data = (char *)msg->data + msg->copied; | 
|  | ssize_t mlen = msg->len - msg->copied; | 
|  | ssize_t left; | 
|  |  | 
|  | if (mlen > buflen) | 
|  | mlen = buflen; | 
|  |  | 
|  | left = copy_to_user(dst, data, mlen); | 
|  | if (left < 0) { | 
|  | msg->errno = left; | 
|  | return left; | 
|  | } | 
|  | mlen -= left; | 
|  | msg->copied += mlen; | 
|  | msg->errno = 0; | 
|  | return mlen; | 
|  | } | 
|  |  | 
|  | static ssize_t | 
|  | idmap_pipe_downcall(struct file *filp, const char __user *src, size_t mlen) | 
|  | { | 
|  | struct rpc_inode *rpci = RPC_I(filp->f_path.dentry->d_inode); | 
|  | struct idmap *idmap = (struct idmap *)rpci->private; | 
|  | struct idmap_msg im_in, *im = &idmap->idmap_im; | 
|  | struct idmap_hashtable *h; | 
|  | struct idmap_hashent *he = NULL; | 
|  | int namelen_in; | 
|  | int ret; | 
|  |  | 
|  | if (mlen != sizeof(im_in)) | 
|  | return (-ENOSPC); | 
|  |  | 
|  | if (copy_from_user(&im_in, src, mlen) != 0) | 
|  | return (-EFAULT); | 
|  |  | 
|  | mutex_lock(&idmap->idmap_im_lock); | 
|  |  | 
|  | ret = mlen; | 
|  | im->im_status = im_in.im_status; | 
|  | /* If we got an error, terminate now, and wake up pending upcalls */ | 
|  | if (!(im_in.im_status & IDMAP_STATUS_SUCCESS)) { | 
|  | wake_up(&idmap->idmap_wq); | 
|  | goto out; | 
|  | } | 
|  |  | 
|  | /* Sanity checking of strings */ | 
|  | ret = -EINVAL; | 
|  | namelen_in = strnlen(im_in.im_name, IDMAP_NAMESZ); | 
|  | if (namelen_in == 0 || namelen_in == IDMAP_NAMESZ) | 
|  | goto out; | 
|  |  | 
|  | switch (im_in.im_type) { | 
|  | case IDMAP_TYPE_USER: | 
|  | h = &idmap->idmap_user_hash; | 
|  | break; | 
|  | case IDMAP_TYPE_GROUP: | 
|  | h = &idmap->idmap_group_hash; | 
|  | break; | 
|  | default: | 
|  | goto out; | 
|  | } | 
|  |  | 
|  | switch (im_in.im_conv) { | 
|  | case IDMAP_CONV_IDTONAME: | 
|  | /* Did we match the current upcall? */ | 
|  | if (im->im_conv == IDMAP_CONV_IDTONAME | 
|  | && im->im_type == im_in.im_type | 
|  | && im->im_id == im_in.im_id) { | 
|  | /* Yes: copy string, including the terminating '\0'  */ | 
|  | memcpy(im->im_name, im_in.im_name, namelen_in); | 
|  | im->im_name[namelen_in] = '\0'; | 
|  | wake_up(&idmap->idmap_wq); | 
|  | } | 
|  | he = idmap_alloc_id(h, im_in.im_id); | 
|  | break; | 
|  | case IDMAP_CONV_NAMETOID: | 
|  | /* Did we match the current upcall? */ | 
|  | if (im->im_conv == IDMAP_CONV_NAMETOID | 
|  | && im->im_type == im_in.im_type | 
|  | && strnlen(im->im_name, IDMAP_NAMESZ) == namelen_in | 
|  | && memcmp(im->im_name, im_in.im_name, namelen_in) == 0) { | 
|  | im->im_id = im_in.im_id; | 
|  | wake_up(&idmap->idmap_wq); | 
|  | } | 
|  | he = idmap_alloc_name(h, im_in.im_name, namelen_in); | 
|  | break; | 
|  | default: | 
|  | goto out; | 
|  | } | 
|  |  | 
|  | /* If the entry is valid, also copy it to the cache */ | 
|  | if (he != NULL) | 
|  | idmap_update_entry(he, im_in.im_name, namelen_in, im_in.im_id); | 
|  | ret = mlen; | 
|  | out: | 
|  | mutex_unlock(&idmap->idmap_im_lock); | 
|  | return ret; | 
|  | } | 
|  |  | 
|  | static void | 
|  | idmap_pipe_destroy_msg(struct rpc_pipe_msg *msg) | 
|  | { | 
|  | struct idmap_msg *im = msg->data; | 
|  | struct idmap *idmap = container_of(im, struct idmap, idmap_im); | 
|  |  | 
|  | if (msg->errno >= 0) | 
|  | return; | 
|  | mutex_lock(&idmap->idmap_im_lock); | 
|  | im->im_status = IDMAP_STATUS_LOOKUPFAIL; | 
|  | wake_up(&idmap->idmap_wq); | 
|  | mutex_unlock(&idmap->idmap_im_lock); | 
|  | } | 
|  |  | 
|  | /* | 
|  | * Fowler/Noll/Vo hash | 
|  | *    http://www.isthe.com/chongo/tech/comp/fnv/ | 
|  | */ | 
|  |  | 
|  | #define FNV_P_32 ((unsigned int)0x01000193) /* 16777619 */ | 
|  | #define FNV_1_32 ((unsigned int)0x811c9dc5) /* 2166136261 */ | 
|  |  | 
|  | static unsigned int fnvhash32(const void *buf, size_t buflen) | 
|  | { | 
|  | const unsigned char *p, *end = (const unsigned char *)buf + buflen; | 
|  | unsigned int hash = FNV_1_32; | 
|  |  | 
|  | for (p = buf; p < end; p++) { | 
|  | hash *= FNV_P_32; | 
|  | hash ^= (unsigned int)*p; | 
|  | } | 
|  |  | 
|  | return (hash); | 
|  | } | 
|  |  | 
|  | int nfs_map_name_to_uid(struct nfs_client *clp, const char *name, size_t namelen, __u32 *uid) | 
|  | { | 
|  | struct idmap *idmap = clp->cl_idmap; | 
|  |  | 
|  | return nfs_idmap_id(idmap, &idmap->idmap_user_hash, name, namelen, uid); | 
|  | } | 
|  |  | 
|  | int nfs_map_group_to_gid(struct nfs_client *clp, const char *name, size_t namelen, __u32 *uid) | 
|  | { | 
|  | struct idmap *idmap = clp->cl_idmap; | 
|  |  | 
|  | return nfs_idmap_id(idmap, &idmap->idmap_group_hash, name, namelen, uid); | 
|  | } | 
|  |  | 
|  | int nfs_map_uid_to_name(struct nfs_client *clp, __u32 uid, char *buf) | 
|  | { | 
|  | struct idmap *idmap = clp->cl_idmap; | 
|  |  | 
|  | return nfs_idmap_name(idmap, &idmap->idmap_user_hash, uid, buf); | 
|  | } | 
|  | int nfs_map_gid_to_group(struct nfs_client *clp, __u32 uid, char *buf) | 
|  | { | 
|  | struct idmap *idmap = clp->cl_idmap; | 
|  |  | 
|  | return nfs_idmap_name(idmap, &idmap->idmap_group_hash, uid, buf); | 
|  | } | 
|  |  |