X-Git-Url: https://git.decadent.org.uk/gitweb/?p=nfs-utils.git;a=blobdiff_plain;f=support%2Fexport%2Fclient.c;h=e06c874bca15b5b831745df0257be3519627eda8;hp=833f4a9d954320565fce0aa6c01a83da8fa8ebd0;hb=e1c93f691348392ee36b763bf57946540891ff16;hpb=6abde64e6a605443dfc283ffb2642cb853f8b5b0 diff --git a/support/export/client.c b/support/export/client.c index 833f4a9..e06c874 100644 --- a/support/export/client.c +++ b/support/export/client.c @@ -32,7 +32,6 @@ extern int innetgr(char *netgr, char *host, char *, char *); static char *add_name(char *old, const char *add); static void client_init(nfs_client *clp, const char *hname, struct hostent *hp); -static int client_checkaddr(nfs_client *clp, struct in_addr addr); nfs_client *clientlist[MCL_MAXTYPES] = { NULL, }; @@ -138,6 +137,7 @@ client_init(nfs_client *clp, const char *hname, struct hostent *hp) clp->m_exported = 0; clp->m_count = 0; + clp->m_naddr = 0; if (clp->m_type == MCL_SUBNETWORK) { char *cp = strchr(clp->m_hostname, '/'); @@ -161,10 +161,10 @@ client_init(nfs_client *clp, const char *hname, struct hostent *hp) } } *cp = '/'; - clp->m_naddr = 0; - } else if (!hp) { - clp->m_naddr = 0; - } else { + return; + } + + if (hp) { char **ap = hp->h_addr_list; int i; @@ -351,94 +351,136 @@ check_fqdn(const nfs_client *clp, const struct hostent *hp) } /* - * Match a host (given its hostent record) to a client record. This - * is usually called from mountd. + * Check each address listed in @hp against the subnetwork or + * host address stored in @clp. Return 1 if an address in @hp + * matches the host address stored in @clp, otherwise zero. */ -int -client_check(nfs_client *clp, struct hostent *hp) +static int +check_subnetwork(const nfs_client *clp, const struct hostent *hp) { - char *hname = (char *) hp->h_name; - char *cname = clp->m_hostname; - char **ap; + struct in_addr addr; + char **ap; - switch (clp->m_type) { - case MCL_FQDN: - return check_fqdn(clp, hp); - case MCL_SUBNETWORK: - for (ap = hp->h_addr_list; *ap; ap++) { - if (client_checkaddr(clp, *(struct in_addr *) *ap)) - return 1; - } - return 0; - case MCL_WILDCARD: - if (wildmat(hname, cname)) + for (ap = hp->h_addr_list; *ap; ap++) { + addr = *(struct in_addr *)*ap; + + if (!((clp->m_addrlist[0].s_addr ^ addr.s_addr) & + clp->m_addrlist[1].s_addr)) return 1; - else { - for (ap = hp->h_aliases; *ap; ap++) - if (wildmat(*ap, cname)) - return 1; - } - return 0; - case MCL_NETGROUP: -#ifdef HAVE_INNETGR - { - char *dot; - int match, i; - struct hostent *nhp = NULL; - struct sockaddr_in addr; - - /* First, try to match the hostname without - * splitting off the domain */ - if (innetgr(cname+1, hname, NULL, NULL)) - return 1; + } + return 0; +} - /* try the aliases as well */ - for (i = 0; hp->h_aliases[i]; i++) { - if (innetgr(cname+1, hp->h_aliases[i], NULL, NULL)) - return 1; - } +/* + * Check if a wildcard nfs_client record matches the canonical name + * or the aliases of a host. Return 1 if a match is found, otherwise + * zero. + */ +static int +check_wildcard(const nfs_client *clp, const struct hostent *hp) +{ + char *cname = clp->m_hostname; + char *hname = hp->h_name; + char **ap; - /* If hname is ip address convert to FQDN */ - if (inet_aton(hname, &addr.sin_addr) && - (nhp = gethostbyaddr((const char *)&(addr.sin_addr), - sizeof(addr.sin_addr), AF_INET))) { - hname = (char *)nhp->h_name; - if (innetgr(cname+1, hname, NULL, NULL)) - return 1; - } + if (wildmat(hname, cname)) + return 1; - /* Okay, strip off the domain (if we have one) */ - if ((dot = strchr(hname, '.')) == NULL) - return 0; + /* See if hname aliases listed in /etc/hosts or nis[+] + * match the requested wildcard */ + for (ap = hp->h_aliases; *ap; ap++) { + if (wildmat(*ap, cname)) + return 1; + } - *dot = '\0'; - match = innetgr(cname+1, hname, NULL, NULL); - *dot = '.'; + return 0; +} - return match; - } -#else - return 0; -#endif - case MCL_ANONYMOUS: +/* + * Check if @hp's hostname or aliases fall in a given netgroup. + * Return 1 if @hp represents a host in the netgroup, otherwise zero. + */ +#ifdef HAVE_INNETGR +static int +check_netgroup(const nfs_client *clp, const struct hostent *hp) +{ + const char *netgroup = clp->m_hostname + 1; + const char *hname = hp->h_name; + struct hostent *nhp = NULL; + struct sockaddr_in addr; + int match, i; + char *dot; + + /* First, try to match the hostname without + * splitting off the domain */ + if (innetgr(netgroup, hname, NULL, NULL)) return 1; - case MCL_GSS: - return 0; - default: - xlog(L_FATAL, "internal: bad client type %d", clp->m_type); + + /* See if hname aliases listed in /etc/hosts or nis[+] + * match the requested netgroup */ + for (i = 0; hp->h_aliases[i]; i++) { + if (innetgr(netgroup, hp->h_aliases[i], NULL, NULL)) + return 1; } + /* If hname is ip address convert to FQDN */ + if (inet_aton(hname, &addr.sin_addr) && + (nhp = gethostbyaddr((const char *)&(addr.sin_addr), + sizeof(addr.sin_addr), AF_INET))) { + hname = nhp->h_name; + if (innetgr(netgroup, hname, NULL, NULL)) + return 1; + } + + /* Okay, strip off the domain (if we have one) */ + dot = strchr(hname, '.'); + if (dot == NULL) + return 0; + + *dot = '\0'; + match = innetgr(netgroup, hname, NULL, NULL); + *dot = '.'; + + return match; +} +#else /* !HAVE_INNETGR */ +static int +check_netgroup(__attribute__((unused)) const nfs_client *clp, + __attribute__((unused)) const struct hostent *hp) +{ return 0; } +#endif /* !HAVE_INNETGR */ -static int -client_checkaddr(nfs_client *clp, struct in_addr addr) +/** + * client_check - check if IP address information matches a cached nfs_client + * @clp: pointer to a cached nfs_client record + * @hp: pointer to hostent containing host IP information + * + * Returns 1 if the address information matches the cached nfs_client, + * otherwise zero. + */ +int +client_check(nfs_client *clp, struct hostent *hp) { switch (clp->m_type) { + case MCL_FQDN: + return check_fqdn(clp, hp); case MCL_SUBNETWORK: - return !((clp->m_addrlist[0].s_addr ^ addr.s_addr) - & clp->m_addrlist[1].s_addr); + return check_subnetwork(clp, hp); + case MCL_WILDCARD: + return check_wildcard(clp, hp); + case MCL_NETGROUP: + return check_netgroup(clp, hp); + case MCL_ANONYMOUS: + return 1; + case MCL_GSS: + return 0; + default: + xlog(D_GENERAL, "%s: unrecognized client type: %d", + __func__, clp->m_type); } + return 0; }