11da177e4SLinus Torvalds /* 21da177e4SLinus Torvalds * linux/net/sunrpc/auth.c 31da177e4SLinus Torvalds * 41da177e4SLinus Torvalds * Generic RPC client authentication API. 51da177e4SLinus Torvalds * 61da177e4SLinus Torvalds * Copyright (C) 1996, Olaf Kirch <okir@monad.swb.de> 71da177e4SLinus Torvalds */ 81da177e4SLinus Torvalds 91da177e4SLinus Torvalds #include <linux/types.h> 101da177e4SLinus Torvalds #include <linux/sched.h> 111da177e4SLinus Torvalds #include <linux/module.h> 121da177e4SLinus Torvalds #include <linux/slab.h> 131da177e4SLinus Torvalds #include <linux/errno.h> 141da177e4SLinus Torvalds #include <linux/sunrpc/clnt.h> 151da177e4SLinus Torvalds #include <linux/spinlock.h> 161da177e4SLinus Torvalds 171da177e4SLinus Torvalds #ifdef RPC_DEBUG 181da177e4SLinus Torvalds # define RPCDBG_FACILITY RPCDBG_AUTH 191da177e4SLinus Torvalds #endif 201da177e4SLinus Torvalds 211da177e4SLinus Torvalds static struct rpc_authops * auth_flavors[RPC_AUTH_MAXFLAVOR] = { 221da177e4SLinus Torvalds &authnull_ops, /* AUTH_NULL */ 231da177e4SLinus Torvalds &authunix_ops, /* AUTH_UNIX */ 241da177e4SLinus Torvalds NULL, /* others can be loadable modules */ 251da177e4SLinus Torvalds }; 261da177e4SLinus Torvalds 271da177e4SLinus Torvalds static u32 281da177e4SLinus Torvalds pseudoflavor_to_flavor(u32 flavor) { 291da177e4SLinus Torvalds if (flavor >= RPC_AUTH_MAXFLAVOR) 301da177e4SLinus Torvalds return RPC_AUTH_GSS; 311da177e4SLinus Torvalds return flavor; 321da177e4SLinus Torvalds } 331da177e4SLinus Torvalds 341da177e4SLinus Torvalds int 351da177e4SLinus Torvalds rpcauth_register(struct rpc_authops *ops) 361da177e4SLinus Torvalds { 371da177e4SLinus Torvalds rpc_authflavor_t flavor; 381da177e4SLinus Torvalds 391da177e4SLinus Torvalds if ((flavor = ops->au_flavor) >= RPC_AUTH_MAXFLAVOR) 401da177e4SLinus Torvalds return -EINVAL; 411da177e4SLinus Torvalds if (auth_flavors[flavor] != NULL) 421da177e4SLinus Torvalds return -EPERM; /* what else? */ 431da177e4SLinus Torvalds auth_flavors[flavor] = ops; 441da177e4SLinus Torvalds return 0; 451da177e4SLinus Torvalds } 461da177e4SLinus Torvalds 471da177e4SLinus Torvalds int 481da177e4SLinus Torvalds rpcauth_unregister(struct rpc_authops *ops) 491da177e4SLinus Torvalds { 501da177e4SLinus Torvalds rpc_authflavor_t flavor; 511da177e4SLinus Torvalds 521da177e4SLinus Torvalds if ((flavor = ops->au_flavor) >= RPC_AUTH_MAXFLAVOR) 531da177e4SLinus Torvalds return -EINVAL; 541da177e4SLinus Torvalds if (auth_flavors[flavor] != ops) 551da177e4SLinus Torvalds return -EPERM; /* what else? */ 561da177e4SLinus Torvalds auth_flavors[flavor] = NULL; 571da177e4SLinus Torvalds return 0; 581da177e4SLinus Torvalds } 591da177e4SLinus Torvalds 601da177e4SLinus Torvalds struct rpc_auth * 611da177e4SLinus Torvalds rpcauth_create(rpc_authflavor_t pseudoflavor, struct rpc_clnt *clnt) 621da177e4SLinus Torvalds { 631da177e4SLinus Torvalds struct rpc_auth *auth; 641da177e4SLinus Torvalds struct rpc_authops *ops; 651da177e4SLinus Torvalds u32 flavor = pseudoflavor_to_flavor(pseudoflavor); 661da177e4SLinus Torvalds 67f344f6dfSOlaf Kirch auth = ERR_PTR(-EINVAL); 68f344f6dfSOlaf Kirch if (flavor >= RPC_AUTH_MAXFLAVOR) 69f344f6dfSOlaf Kirch goto out; 70f344f6dfSOlaf Kirch 71f344f6dfSOlaf Kirch /* FIXME - auth_flavors[] really needs an rw lock, 72f344f6dfSOlaf Kirch * and module refcounting. */ 73f344f6dfSOlaf Kirch #ifdef CONFIG_KMOD 74f344f6dfSOlaf Kirch if ((ops = auth_flavors[flavor]) == NULL) 75f344f6dfSOlaf Kirch request_module("rpc-auth-%u", flavor); 76f344f6dfSOlaf Kirch #endif 77f344f6dfSOlaf Kirch if ((ops = auth_flavors[flavor]) == NULL) 78f344f6dfSOlaf Kirch goto out; 791da177e4SLinus Torvalds auth = ops->create(clnt, pseudoflavor); 806a19275aSJ. Bruce Fields if (IS_ERR(auth)) 816a19275aSJ. Bruce Fields return auth; 821da177e4SLinus Torvalds if (clnt->cl_auth) 831da177e4SLinus Torvalds rpcauth_destroy(clnt->cl_auth); 841da177e4SLinus Torvalds clnt->cl_auth = auth; 85f344f6dfSOlaf Kirch 86f344f6dfSOlaf Kirch out: 871da177e4SLinus Torvalds return auth; 881da177e4SLinus Torvalds } 891da177e4SLinus Torvalds 901da177e4SLinus Torvalds void 911da177e4SLinus Torvalds rpcauth_destroy(struct rpc_auth *auth) 921da177e4SLinus Torvalds { 931da177e4SLinus Torvalds if (!atomic_dec_and_test(&auth->au_count)) 941da177e4SLinus Torvalds return; 951da177e4SLinus Torvalds auth->au_ops->destroy(auth); 961da177e4SLinus Torvalds } 971da177e4SLinus Torvalds 981da177e4SLinus Torvalds static DEFINE_SPINLOCK(rpc_credcache_lock); 991da177e4SLinus Torvalds 1001da177e4SLinus Torvalds /* 1011da177e4SLinus Torvalds * Initialize RPC credential cache 1021da177e4SLinus Torvalds */ 1031da177e4SLinus Torvalds int 1041da177e4SLinus Torvalds rpcauth_init_credcache(struct rpc_auth *auth, unsigned long expire) 1051da177e4SLinus Torvalds { 1061da177e4SLinus Torvalds struct rpc_cred_cache *new; 1071da177e4SLinus Torvalds int i; 1081da177e4SLinus Torvalds 1098b3a7005SKris Katterjohn new = kmalloc(sizeof(*new), GFP_KERNEL); 1101da177e4SLinus Torvalds if (!new) 1111da177e4SLinus Torvalds return -ENOMEM; 1121da177e4SLinus Torvalds for (i = 0; i < RPC_CREDCACHE_NR; i++) 1131da177e4SLinus Torvalds INIT_HLIST_HEAD(&new->hashtable[i]); 1141da177e4SLinus Torvalds new->expire = expire; 1151da177e4SLinus Torvalds new->nextgc = jiffies + (expire >> 1); 1161da177e4SLinus Torvalds auth->au_credcache = new; 1171da177e4SLinus Torvalds return 0; 1181da177e4SLinus Torvalds } 1191da177e4SLinus Torvalds 1201da177e4SLinus Torvalds /* 1211da177e4SLinus Torvalds * Destroy a list of credentials 1221da177e4SLinus Torvalds */ 1231da177e4SLinus Torvalds static inline 1241da177e4SLinus Torvalds void rpcauth_destroy_credlist(struct hlist_head *head) 1251da177e4SLinus Torvalds { 1261da177e4SLinus Torvalds struct rpc_cred *cred; 1271da177e4SLinus Torvalds 1281da177e4SLinus Torvalds while (!hlist_empty(head)) { 1291da177e4SLinus Torvalds cred = hlist_entry(head->first, struct rpc_cred, cr_hash); 1301da177e4SLinus Torvalds hlist_del_init(&cred->cr_hash); 1311da177e4SLinus Torvalds put_rpccred(cred); 1321da177e4SLinus Torvalds } 1331da177e4SLinus Torvalds } 1341da177e4SLinus Torvalds 1351da177e4SLinus Torvalds /* 1361da177e4SLinus Torvalds * Clear the RPC credential cache, and delete those credentials 1371da177e4SLinus Torvalds * that are not referenced. 1381da177e4SLinus Torvalds */ 1391da177e4SLinus Torvalds void 1401da177e4SLinus Torvalds rpcauth_free_credcache(struct rpc_auth *auth) 1411da177e4SLinus Torvalds { 1421da177e4SLinus Torvalds struct rpc_cred_cache *cache = auth->au_credcache; 1431da177e4SLinus Torvalds HLIST_HEAD(free); 1441da177e4SLinus Torvalds struct hlist_node *pos, *next; 1451da177e4SLinus Torvalds struct rpc_cred *cred; 1461da177e4SLinus Torvalds int i; 1471da177e4SLinus Torvalds 1481da177e4SLinus Torvalds spin_lock(&rpc_credcache_lock); 1491da177e4SLinus Torvalds for (i = 0; i < RPC_CREDCACHE_NR; i++) { 1501da177e4SLinus Torvalds hlist_for_each_safe(pos, next, &cache->hashtable[i]) { 1511da177e4SLinus Torvalds cred = hlist_entry(pos, struct rpc_cred, cr_hash); 1521da177e4SLinus Torvalds __hlist_del(&cred->cr_hash); 1531da177e4SLinus Torvalds hlist_add_head(&cred->cr_hash, &free); 1541da177e4SLinus Torvalds } 1551da177e4SLinus Torvalds } 1561da177e4SLinus Torvalds spin_unlock(&rpc_credcache_lock); 1571da177e4SLinus Torvalds rpcauth_destroy_credlist(&free); 1581da177e4SLinus Torvalds } 1591da177e4SLinus Torvalds 1601da177e4SLinus Torvalds static void 1611da177e4SLinus Torvalds rpcauth_prune_expired(struct rpc_auth *auth, struct rpc_cred *cred, struct hlist_head *free) 1621da177e4SLinus Torvalds { 1631da177e4SLinus Torvalds if (atomic_read(&cred->cr_count) != 1) 1641da177e4SLinus Torvalds return; 1651da177e4SLinus Torvalds if (time_after(jiffies, cred->cr_expire + auth->au_credcache->expire)) 1661da177e4SLinus Torvalds cred->cr_flags &= ~RPCAUTH_CRED_UPTODATE; 1671da177e4SLinus Torvalds if (!(cred->cr_flags & RPCAUTH_CRED_UPTODATE)) { 1681da177e4SLinus Torvalds __hlist_del(&cred->cr_hash); 1691da177e4SLinus Torvalds hlist_add_head(&cred->cr_hash, free); 1701da177e4SLinus Torvalds } 1711da177e4SLinus Torvalds } 1721da177e4SLinus Torvalds 1731da177e4SLinus Torvalds /* 1741da177e4SLinus Torvalds * Remove stale credentials. Avoid sleeping inside the loop. 1751da177e4SLinus Torvalds */ 1761da177e4SLinus Torvalds static void 1771da177e4SLinus Torvalds rpcauth_gc_credcache(struct rpc_auth *auth, struct hlist_head *free) 1781da177e4SLinus Torvalds { 1791da177e4SLinus Torvalds struct rpc_cred_cache *cache = auth->au_credcache; 1801da177e4SLinus Torvalds struct hlist_node *pos, *next; 1811da177e4SLinus Torvalds struct rpc_cred *cred; 1821da177e4SLinus Torvalds int i; 1831da177e4SLinus Torvalds 1841da177e4SLinus Torvalds dprintk("RPC: gc'ing RPC credentials for auth %p\n", auth); 1851da177e4SLinus Torvalds for (i = 0; i < RPC_CREDCACHE_NR; i++) { 1861da177e4SLinus Torvalds hlist_for_each_safe(pos, next, &cache->hashtable[i]) { 1871da177e4SLinus Torvalds cred = hlist_entry(pos, struct rpc_cred, cr_hash); 1881da177e4SLinus Torvalds rpcauth_prune_expired(auth, cred, free); 1891da177e4SLinus Torvalds } 1901da177e4SLinus Torvalds } 1911da177e4SLinus Torvalds cache->nextgc = jiffies + cache->expire; 1921da177e4SLinus Torvalds } 1931da177e4SLinus Torvalds 1941da177e4SLinus Torvalds /* 1951da177e4SLinus Torvalds * Look up a process' credentials in the authentication cache 1961da177e4SLinus Torvalds */ 1971da177e4SLinus Torvalds struct rpc_cred * 1981da177e4SLinus Torvalds rpcauth_lookup_credcache(struct rpc_auth *auth, struct auth_cred * acred, 1998a317760STrond Myklebust int flags) 2001da177e4SLinus Torvalds { 2011da177e4SLinus Torvalds struct rpc_cred_cache *cache = auth->au_credcache; 2021da177e4SLinus Torvalds HLIST_HEAD(free); 2031da177e4SLinus Torvalds struct hlist_node *pos, *next; 2041da177e4SLinus Torvalds struct rpc_cred *new = NULL, 2051da177e4SLinus Torvalds *cred = NULL; 2061da177e4SLinus Torvalds int nr = 0; 2071da177e4SLinus Torvalds 2088a317760STrond Myklebust if (!(flags & RPCAUTH_LOOKUP_ROOTCREDS)) 2091da177e4SLinus Torvalds nr = acred->uid & RPC_CREDCACHE_MASK; 2101da177e4SLinus Torvalds retry: 2111da177e4SLinus Torvalds spin_lock(&rpc_credcache_lock); 2121da177e4SLinus Torvalds if (time_before(cache->nextgc, jiffies)) 2131da177e4SLinus Torvalds rpcauth_gc_credcache(auth, &free); 2141da177e4SLinus Torvalds hlist_for_each_safe(pos, next, &cache->hashtable[nr]) { 2151da177e4SLinus Torvalds struct rpc_cred *entry; 2161da177e4SLinus Torvalds entry = hlist_entry(pos, struct rpc_cred, cr_hash); 2178a317760STrond Myklebust if (entry->cr_ops->crmatch(acred, entry, flags)) { 2181da177e4SLinus Torvalds hlist_del(&entry->cr_hash); 2191da177e4SLinus Torvalds cred = entry; 2201da177e4SLinus Torvalds break; 2211da177e4SLinus Torvalds } 2221da177e4SLinus Torvalds rpcauth_prune_expired(auth, entry, &free); 2231da177e4SLinus Torvalds } 2241da177e4SLinus Torvalds if (new) { 2251da177e4SLinus Torvalds if (cred) 2261da177e4SLinus Torvalds hlist_add_head(&new->cr_hash, &free); 2271da177e4SLinus Torvalds else 2281da177e4SLinus Torvalds cred = new; 2291da177e4SLinus Torvalds } 2301da177e4SLinus Torvalds if (cred) { 2311da177e4SLinus Torvalds hlist_add_head(&cred->cr_hash, &cache->hashtable[nr]); 2321da177e4SLinus Torvalds get_rpccred(cred); 2331da177e4SLinus Torvalds } 2341da177e4SLinus Torvalds spin_unlock(&rpc_credcache_lock); 2351da177e4SLinus Torvalds 2361da177e4SLinus Torvalds rpcauth_destroy_credlist(&free); 2371da177e4SLinus Torvalds 2381da177e4SLinus Torvalds if (!cred) { 2398a317760STrond Myklebust new = auth->au_ops->crcreate(auth, acred, flags); 2401da177e4SLinus Torvalds if (!IS_ERR(new)) { 2411da177e4SLinus Torvalds #ifdef RPC_DEBUG 2421da177e4SLinus Torvalds new->cr_magic = RPCAUTH_CRED_MAGIC; 2431da177e4SLinus Torvalds #endif 2441da177e4SLinus Torvalds goto retry; 2451da177e4SLinus Torvalds } else 2461da177e4SLinus Torvalds cred = new; 247fba3bad4STrond Myklebust } else if ((cred->cr_flags & RPCAUTH_CRED_NEW) 248fba3bad4STrond Myklebust && cred->cr_ops->cr_init != NULL 249fba3bad4STrond Myklebust && !(flags & RPCAUTH_LOOKUP_NEW)) { 250fba3bad4STrond Myklebust int res = cred->cr_ops->cr_init(auth, cred); 251fba3bad4STrond Myklebust if (res < 0) { 252fba3bad4STrond Myklebust put_rpccred(cred); 253fba3bad4STrond Myklebust cred = ERR_PTR(res); 254fba3bad4STrond Myklebust } 2551da177e4SLinus Torvalds } 2561da177e4SLinus Torvalds 2571da177e4SLinus Torvalds return (struct rpc_cred *) cred; 2581da177e4SLinus Torvalds } 2591da177e4SLinus Torvalds 2601da177e4SLinus Torvalds struct rpc_cred * 2618a317760STrond Myklebust rpcauth_lookupcred(struct rpc_auth *auth, int flags) 2621da177e4SLinus Torvalds { 2631da177e4SLinus Torvalds struct auth_cred acred = { 2641da177e4SLinus Torvalds .uid = current->fsuid, 2651da177e4SLinus Torvalds .gid = current->fsgid, 2661da177e4SLinus Torvalds .group_info = current->group_info, 2671da177e4SLinus Torvalds }; 2681da177e4SLinus Torvalds struct rpc_cred *ret; 2691da177e4SLinus Torvalds 2701da177e4SLinus Torvalds dprintk("RPC: looking up %s cred\n", 2711da177e4SLinus Torvalds auth->au_ops->au_name); 2721da177e4SLinus Torvalds get_group_info(acred.group_info); 2738a317760STrond Myklebust ret = auth->au_ops->lookup_cred(auth, &acred, flags); 2741da177e4SLinus Torvalds put_group_info(acred.group_info); 2751da177e4SLinus Torvalds return ret; 2761da177e4SLinus Torvalds } 2771da177e4SLinus Torvalds 2781da177e4SLinus Torvalds struct rpc_cred * 2791da177e4SLinus Torvalds rpcauth_bindcred(struct rpc_task *task) 2801da177e4SLinus Torvalds { 2811da177e4SLinus Torvalds struct rpc_auth *auth = task->tk_auth; 2821da177e4SLinus Torvalds struct auth_cred acred = { 2831da177e4SLinus Torvalds .uid = current->fsuid, 2841da177e4SLinus Torvalds .gid = current->fsgid, 2851da177e4SLinus Torvalds .group_info = current->group_info, 2861da177e4SLinus Torvalds }; 2871da177e4SLinus Torvalds struct rpc_cred *ret; 2888a317760STrond Myklebust int flags = 0; 2891da177e4SLinus Torvalds 2901da177e4SLinus Torvalds dprintk("RPC: %4d looking up %s cred\n", 2911da177e4SLinus Torvalds task->tk_pid, task->tk_auth->au_ops->au_name); 2921da177e4SLinus Torvalds get_group_info(acred.group_info); 2938a317760STrond Myklebust if (task->tk_flags & RPC_TASK_ROOTCREDS) 2948a317760STrond Myklebust flags |= RPCAUTH_LOOKUP_ROOTCREDS; 2958a317760STrond Myklebust ret = auth->au_ops->lookup_cred(auth, &acred, flags); 2961da177e4SLinus Torvalds if (!IS_ERR(ret)) 2971da177e4SLinus Torvalds task->tk_msg.rpc_cred = ret; 2981da177e4SLinus Torvalds else 2991da177e4SLinus Torvalds task->tk_status = PTR_ERR(ret); 3001da177e4SLinus Torvalds put_group_info(acred.group_info); 3011da177e4SLinus Torvalds return ret; 3021da177e4SLinus Torvalds } 3031da177e4SLinus Torvalds 3041da177e4SLinus Torvalds void 3051da177e4SLinus Torvalds rpcauth_holdcred(struct rpc_task *task) 3061da177e4SLinus Torvalds { 3071da177e4SLinus Torvalds dprintk("RPC: %4d holding %s cred %p\n", 3081da177e4SLinus Torvalds task->tk_pid, task->tk_auth->au_ops->au_name, task->tk_msg.rpc_cred); 3091da177e4SLinus Torvalds if (task->tk_msg.rpc_cred) 3101da177e4SLinus Torvalds get_rpccred(task->tk_msg.rpc_cred); 3111da177e4SLinus Torvalds } 3121da177e4SLinus Torvalds 3131da177e4SLinus Torvalds void 3141da177e4SLinus Torvalds put_rpccred(struct rpc_cred *cred) 3151da177e4SLinus Torvalds { 3161da177e4SLinus Torvalds cred->cr_expire = jiffies; 3171da177e4SLinus Torvalds if (!atomic_dec_and_test(&cred->cr_count)) 3181da177e4SLinus Torvalds return; 3191da177e4SLinus Torvalds cred->cr_ops->crdestroy(cred); 3201da177e4SLinus Torvalds } 3211da177e4SLinus Torvalds 3221da177e4SLinus Torvalds void 3231da177e4SLinus Torvalds rpcauth_unbindcred(struct rpc_task *task) 3241da177e4SLinus Torvalds { 3251da177e4SLinus Torvalds struct rpc_cred *cred = task->tk_msg.rpc_cred; 3261da177e4SLinus Torvalds 3271da177e4SLinus Torvalds dprintk("RPC: %4d releasing %s cred %p\n", 3280bbacc40SChuck Lever task->tk_pid, task->tk_auth->au_ops->au_name, cred); 3291da177e4SLinus Torvalds 3301da177e4SLinus Torvalds put_rpccred(cred); 3311da177e4SLinus Torvalds task->tk_msg.rpc_cred = NULL; 3321da177e4SLinus Torvalds } 3331da177e4SLinus Torvalds 3341da177e4SLinus Torvalds u32 * 3351da177e4SLinus Torvalds rpcauth_marshcred(struct rpc_task *task, u32 *p) 3361da177e4SLinus Torvalds { 3371da177e4SLinus Torvalds struct rpc_cred *cred = task->tk_msg.rpc_cred; 3381da177e4SLinus Torvalds 3391da177e4SLinus Torvalds dprintk("RPC: %4d marshaling %s cred %p\n", 3400bbacc40SChuck Lever task->tk_pid, task->tk_auth->au_ops->au_name, cred); 3410bbacc40SChuck Lever 3421da177e4SLinus Torvalds return cred->cr_ops->crmarshal(task, p); 3431da177e4SLinus Torvalds } 3441da177e4SLinus Torvalds 3451da177e4SLinus Torvalds u32 * 3461da177e4SLinus Torvalds rpcauth_checkverf(struct rpc_task *task, u32 *p) 3471da177e4SLinus Torvalds { 3481da177e4SLinus Torvalds struct rpc_cred *cred = task->tk_msg.rpc_cred; 3491da177e4SLinus Torvalds 3501da177e4SLinus Torvalds dprintk("RPC: %4d validating %s cred %p\n", 3510bbacc40SChuck Lever task->tk_pid, task->tk_auth->au_ops->au_name, cred); 3520bbacc40SChuck Lever 3531da177e4SLinus Torvalds return cred->cr_ops->crvalidate(task, p); 3541da177e4SLinus Torvalds } 3551da177e4SLinus Torvalds 3561da177e4SLinus Torvalds int 3571da177e4SLinus Torvalds rpcauth_wrap_req(struct rpc_task *task, kxdrproc_t encode, void *rqstp, 3581da177e4SLinus Torvalds u32 *data, void *obj) 3591da177e4SLinus Torvalds { 3601da177e4SLinus Torvalds struct rpc_cred *cred = task->tk_msg.rpc_cred; 3611da177e4SLinus Torvalds 3621da177e4SLinus Torvalds dprintk("RPC: %4d using %s cred %p to wrap rpc data\n", 3631da177e4SLinus Torvalds task->tk_pid, cred->cr_ops->cr_name, cred); 3641da177e4SLinus Torvalds if (cred->cr_ops->crwrap_req) 3651da177e4SLinus Torvalds return cred->cr_ops->crwrap_req(task, encode, rqstp, data, obj); 3661da177e4SLinus Torvalds /* By default, we encode the arguments normally. */ 3671da177e4SLinus Torvalds return encode(rqstp, data, obj); 3681da177e4SLinus Torvalds } 3691da177e4SLinus Torvalds 3701da177e4SLinus Torvalds int 3711da177e4SLinus Torvalds rpcauth_unwrap_resp(struct rpc_task *task, kxdrproc_t decode, void *rqstp, 3721da177e4SLinus Torvalds u32 *data, void *obj) 3731da177e4SLinus Torvalds { 3741da177e4SLinus Torvalds struct rpc_cred *cred = task->tk_msg.rpc_cred; 3751da177e4SLinus Torvalds 3761da177e4SLinus Torvalds dprintk("RPC: %4d using %s cred %p to unwrap rpc data\n", 3771da177e4SLinus Torvalds task->tk_pid, cred->cr_ops->cr_name, cred); 3781da177e4SLinus Torvalds if (cred->cr_ops->crunwrap_resp) 3791da177e4SLinus Torvalds return cred->cr_ops->crunwrap_resp(task, decode, rqstp, 3801da177e4SLinus Torvalds data, obj); 3811da177e4SLinus Torvalds /* By default, we decode the arguments normally. */ 3821da177e4SLinus Torvalds return decode(rqstp, data, obj); 3831da177e4SLinus Torvalds } 3841da177e4SLinus Torvalds 3851da177e4SLinus Torvalds int 3861da177e4SLinus Torvalds rpcauth_refreshcred(struct rpc_task *task) 3871da177e4SLinus Torvalds { 3881da177e4SLinus Torvalds struct rpc_cred *cred = task->tk_msg.rpc_cred; 3891da177e4SLinus Torvalds int err; 3901da177e4SLinus Torvalds 3911da177e4SLinus Torvalds dprintk("RPC: %4d refreshing %s cred %p\n", 3920bbacc40SChuck Lever task->tk_pid, task->tk_auth->au_ops->au_name, cred); 3930bbacc40SChuck Lever 3941da177e4SLinus Torvalds err = cred->cr_ops->crrefresh(task); 3951da177e4SLinus Torvalds if (err < 0) 3961da177e4SLinus Torvalds task->tk_status = err; 3971da177e4SLinus Torvalds return err; 3981da177e4SLinus Torvalds } 3991da177e4SLinus Torvalds 4001da177e4SLinus Torvalds void 4011da177e4SLinus Torvalds rpcauth_invalcred(struct rpc_task *task) 4021da177e4SLinus Torvalds { 4031da177e4SLinus Torvalds dprintk("RPC: %4d invalidating %s cred %p\n", 4041da177e4SLinus Torvalds task->tk_pid, task->tk_auth->au_ops->au_name, task->tk_msg.rpc_cred); 4051da177e4SLinus Torvalds spin_lock(&rpc_credcache_lock); 4061da177e4SLinus Torvalds if (task->tk_msg.rpc_cred) 4071da177e4SLinus Torvalds task->tk_msg.rpc_cred->cr_flags &= ~RPCAUTH_CRED_UPTODATE; 4081da177e4SLinus Torvalds spin_unlock(&rpc_credcache_lock); 4091da177e4SLinus Torvalds } 4101da177e4SLinus Torvalds 4111da177e4SLinus Torvalds int 4121da177e4SLinus Torvalds rpcauth_uptodatecred(struct rpc_task *task) 4131da177e4SLinus Torvalds { 4141da177e4SLinus Torvalds return !(task->tk_msg.rpc_cred) || 4151da177e4SLinus Torvalds (task->tk_msg.rpc_cred->cr_flags & RPCAUTH_CRED_UPTODATE); 4161da177e4SLinus Torvalds } 417