#include <cstdio>
#include <cstdlib>
#include <cstring>
#include <cerrno>
#include "XrdVersion.hh"
#include "XrdOuc/XrdOucHash.hh"
#include "XrdOuc/XrdOucString.hh"
#include "XrdOuc/XrdOucTrace.hh"
#include "XrdSys/XrdSysError.hh"
#include "XrdSys/XrdSysLogger.hh"

Include dependency graph for XrdSecgsiGMAPFunDN.cc:

Classes
class	XrdSecgsiMapEntry_t

Macros
#define	DEBUG(y) if (dnTrace && (dnTrace->What & TRACE_Authen)) PRINT(y)

#define	EPNAME(x) static const char *epname = x;

#define	PRINT(y) {if (dnTrace) {dnTrace->Beg(epname); std::cerr <<y; dnTrace->End();}}

#define	TRACE_Authen 0x0002

Enumerations
enum	XrdSecgsi_Match { kFull = 0 , kBegins = 1 , kEnds = 2 , kContains = 4 }

Functions
static int	FindMatchingCondition (const char , XrdSecgsiMapEntry_t mc, void *xmp)

char *	XrdSecgsiGMAPFun (const char *dn, int now)

int	XrdSecgsiGMAPInit (const char *cfg)

	XrdVERSIONINFO (XrdSecgsiGMAPFun, secgsigmap)

Variables
static XrdSysError	dnDest (0, "gmapdn_")

static XrdSysLogger	dnLogger

static XrdOucTrace *	dnTrace = 0

static XrdOucHash< XrdSecgsiMapEntry_t >	gMappings

Macro Definition Documentation

◆ DEBUG

#define DEBUG ( y ) if (dnTrace && (dnTrace->What & TRACE_Authen)) PRINT(y)

Definition at line 55 of file XrdSecgsiGMAPFunDN.cc.

◆ EPNAME

#define EPNAME ( x ) static const char *epname = x;

Definition at line 53 of file XrdSecgsiGMAPFunDN.cc.

◆ PRINT

#define PRINT ( y ) {if (dnTrace) {dnTrace->Beg(epname); std::cerr <<y; dnTrace->End();}}

Definition at line 54 of file XrdSecgsiGMAPFunDN.cc.

◆ TRACE_Authen

#define TRACE_Authen 0x0002

Definition at line 52 of file XrdSecgsiGMAPFunDN.cc.

Enumeration Type Documentation

◆ XrdSecgsi_Match

enum XrdSecgsi_Match

Enumerator
kFull
kBegins
kEnds
kContains

Definition at line 68 of file XrdSecgsiGMAPFunDN.cc.

                      {kFull     = 0,
                       kBegins   = 1,
                       kEnds     = 2,
                       kContains = 4
                      };

Function Documentation

◆ FindMatchingCondition()

static int FindMatchingCondition	(	const char *	,
		XrdSecgsiMapEntry_t *	mc,
		void *	xmp
	)

static

Definition at line 91 of file XrdSecgsiGMAPFunDN.cc.

 {
    // Print content of entry 'ui' and go to next
  
    XrdSecgsiMapEntry_t *mpe = (XrdSecgsiMapEntry_t *)xmp;
  
    bool match = 0;
    if (mc && mpe) {
       if (mc->type == kContains) {
          if (mpe->val.find(mc->val) != STR_NPOS) match = 1;
       } else if (mc->type == kBegins) {
          if (mpe->val.beginswith(mc->val)) match = 1;
       } else if (mc->type == kEnds) {
          if (mpe->val.endswith(mc->val)) match = 1;
       } else {
          if (mpe->val.matches(mc->val.c_str())) match = 1;
       }
       if (match) mpe->user = mc->user;
    }
  
    // We stop if matched, otherwise we continue
    return (match) ? 1 : 0;
 }

References XrdOucString::beginswith(), XrdOucString::c_str(), XrdOucString::endswith(), XrdOucString::find(), kBegins, kContains, kEnds, XrdOucString::matches(), STR_NPOS, XrdSecgsiMapEntry_t::type, XrdSecgsiMapEntry_t::user, and XrdSecgsiMapEntry_t::val.

Referenced by XrdSecgsiGMAPFun().

Here is the call graph for this function:

Here is the caller graph for this function:

◆ XrdSecgsiGMAPFun()

char* XrdSecgsiGMAPFun	(	const char *	dn,
		int	now
	)

Definition at line 123 of file XrdSecgsiGMAPFunDN.cc.

 {
    // Implementation of XrdSecgsiGMAPFun extracting the information from the 
    // distinguished name 'dn'
    EPNAME("GMAPFunDN");
  
    // Init the relevant fields (only once)
    if (now <= 0) {
       if (XrdSecgsiGMAPInit(dn) != 0)
          return (char *)-1;
       return (char *)0;
    }
  
    // Output
    char *name = 0;
  
    XrdSecgsiMapEntry_t *mc = 0;
    // Try the full match first
    if ((mc = gMappings.Find(dn))) {
       // Get the associated user
       name = new char[mc->val.length() + 1];
       strcpy(name, mc->val.c_str());
    } else {
       // Else scan the available mappings
       mc = new XrdSecgsiMapEntry_t(dn, "", kFull);
       gMappings.Apply(FindMatchingCondition, (void *)mc);
       if (mc->user.length() > 0) {
          name = new char[mc->user.length() + 1];
          strcpy(name, mc->user.c_str());
       }
    }
    if (name) {
       DEBUG("mapping DN '"<<dn<<"' to '"<<name<<"'");
    } else {
       DEBUG("no valid match found for DN '"<<dn<<"'");
    }
   
    // Done
    return name;
 }}

References XrdOucString::c_str(), DEBUG, EPNAME, FindMatchingCondition(), gMappings, kFull, XrdOucString::length(), XrdSecgsiMapEntry_t::val, and XrdSecgsiGMAPInit().

Here is the call graph for this function:

◆ XrdSecgsiGMAPInit()

int XrdSecgsiGMAPInit ( const char * cfg )

Definition at line 167 of file XrdSecgsiGMAPFunDN.cc.

 {
    // Initialize the relevant parameters
    //      parms = "[cfg]|[d|dbg|debug]"
    // The config file 'cfg' can also be defined by XRDGSIGMAPDNCF.
    // The flag 'd|dbg|debug' enables some verbosity.
    // Return 0 on success, -1 otherwise
    EPNAME("GMAPInitDN");
  
    bool debug = 0;
    XrdOucString pps(parms), p, cfg;
    int from = 0;
    while ((from = pps.tokenize(p, from, '|')) != -1) {
       if (p.length() > 0) {
          if (p == "d" || p == "dbg" || p == "debug") {
             debug = 1;
          } else {
             cfg = p;
          }
       }
    }
    // Initiate error logging and tracing
    dnDest.logger(&dnLogger);
    dnTrace = new XrdOucTrace(&dnDest);
    if (debug) dnTrace->What |= TRACE_Authen;
  
    if (cfg.length() <= 0) cfg = getenv("XRDGSIGMAPDNCF");
    if (cfg.length() <= 0) {
       PRINT("ERROR: undefined config file path");
       return -1;
    }
  
    FILE *fcf = fopen(cfg.c_str(), "r");
    if (fcf) {
       char l[4096], val[4096], usr[256];
       while (fgets(l, sizeof(l), fcf)) {
          int len = strlen(l);
          if (len < 2) continue;
          if (l[0] == '#') continue;
          if (l[len-1] == '\n') l[len-1] = '\0';
          if (sscanf(l, "%4095s %255s", val, usr) >= 2) {
             XrdOucString stype = "matching";
             char *p = &val[0];
             int type = kFull;
             if (val[0] == '^') {
                // Starts-with
                type = kBegins;
                p = &val[1];
                stype = "beginning with";
             } else {
                int vlen = strlen(val);
                if (val[vlen-1] == '$') {
                   // Ends-with
                   type = kEnds;
                   val[vlen-1] = '\0';
                   stype = "ending with";
                } else if (val[vlen-1] == '+') {
                   // Contains
                   type = kContains;
                   val[vlen-1] = '\0';
                   stype = "containing";
                }
             }
             // Register
             gMappings.Add(p, new XrdSecgsiMapEntry_t(p, usr, type));
             //
             DEBUG("mapping DNs "<<stype<<" '"<<p<<"' to '"<<usr<<"'");
          }
       }
       fclose(fcf);
    } else {
       PRINT("ERROR: config file '"<<cfg<<"' could not be open (errno: "<<errno<<")");
       return -1;
    }
    // Done
    return 0;
 }