#include <cstdio>
#include <cstdlib>
#include <cstring>
#include <cerrno>
#include "XrdVersion.hh"
#include "XrdOuc/XrdOucHash.hh"
#include "XrdOuc/XrdOucString.hh"
#include "XrdOuc/XrdOucTrace.hh"
#include "XrdSys/XrdSysError.hh"
#include "XrdSys/XrdSysLogger.hh"

Include dependency graph for XrdSecgsiGMAPFunDN.cc:

Classes
class	XrdSecgsiMapEntry_t

Macros
#define	DEBUG(y)
#define	EPNAME(x)
#define	PRINT(y)
#define	TRACE_Authen 0x0002

Enumerations
enum	XrdSecgsi_Match { kFull = 0 , kBegins = 1 , kEnds = 2 , kContains = 4 }

Functions
static int	FindMatchingCondition (const char , XrdSecgsiMapEntry_t mc, void *xmp)
char *	XrdSecgsiGMAPFun (const char *dn, int now)
int	XrdSecgsiGMAPInit (const char *cfg)
	XrdVERSIONINFO (XrdSecgsiGMAPFun, secgsigmap)

Variables
static XrdSysError	dnDest (0, "gmapdn_")
static XrdSysLogger	dnLogger
static XrdOucTrace *	dnTrace = 0
static XrdOucHash< XrdSecgsiMapEntry_t >	gMappings

Macro Definition Documentation

◆ DEBUG

#define DEBUG ( y )

Value:

if (dnTrace && (dnTrace->What & TRACE_Authen)) PRINT(y)

PRINT

#define PRINT(y)

Definition XrdCryptosslTrace.hh:39

TRACE_Authen

#define TRACE_Authen

Definition XrdSecTrace.hh:62

dnTrace

static XrdOucTrace * dnTrace

Definition XrdSecgsiGMAPFunDN.cc:50

Definition at line 55 of file XrdSecgsiGMAPFunDN.cc.

Referenced by XrdSecgsiGMAPFun(), and XrdSecgsiGMAPInit().

◆ EPNAME

#define EPNAME ( x )

Value:

static const char *epname = x;

Definition at line 53 of file XrdSecgsiGMAPFunDN.cc.

Referenced by XrdSecgsiGMAPFun(), and XrdSecgsiGMAPInit().

◆ PRINT

#define PRINT ( y )

Value:

{if (dnTrace) {dnTrace->Beg(epname); std::cerr <<y; dnTrace->End();}}

Definition at line 54 of file XrdSecgsiGMAPFunDN.cc.

Referenced by XrdSecgsiGMAPInit().

◆ TRACE_Authen

#define TRACE_Authen 0x0002

Definition at line 52 of file XrdSecgsiGMAPFunDN.cc.

Enumeration Type Documentation

◆ XrdSecgsi_Match

enum XrdSecgsi_Match

Enumerator
kFull
kBegins
kEnds
kContains

Definition at line 68 of file XrdSecgsiGMAPFunDN.cc.

                     {kFull     = 0,
                      kBegins   = 1,
                      kEnds     = 2,
                      kContains = 4
                     };

Function Documentation

◆ FindMatchingCondition()

int FindMatchingCondition	(	const char *	,
		XrdSecgsiMapEntry_t *	mc,
		void *	xmp )

static

Definition at line 91 of file XrdSecgsiGMAPFunDN.cc.

{
   // Print content of entry 'ui' and go to next
 
   XrdSecgsiMapEntry_t *mpe = (XrdSecgsiMapEntry_t *)xmp;
 
   bool match = 0;
   if (mc && mpe) {
      if (mc->type == kContains) {
         if (mpe->val.find(mc->val) != STR_NPOS) match = 1;
      } else if (mc->type == kBegins) {
         if (mpe->val.beginswith(mc->val)) match = 1;
      } else if (mc->type == kEnds) {
         if (mpe->val.endswith(mc->val)) match = 1;
      } else {
         if (mpe->val.matches(mc->val.c_str())) match = 1;
      }
      if (match) mpe->user = mc->user;
   }
 
   // We stop if matched, otherwise we continue
   return (match) ? 1 : 0;
}

References XrdOucString::beginswith(), XrdOucString::c_str(), XrdOucString::endswith(), XrdOucString::find(), kBegins, kContains, kEnds, XrdOucString::matches(), STR_NPOS, XrdSecgsiMapEntry_t::type, XrdSecgsiMapEntry_t::user, and XrdSecgsiMapEntry_t::val.

Here is the call graph for this function:

◆ XrdSecgsiGMAPFun()

char * XrdSecgsiGMAPFun	(	const char *	dn,
		int	now )

Definition at line 123 of file XrdSecgsiGMAPFunDN.cc.

{
   // Implementation of XrdSecgsiGMAPFun extracting the information from the 
   // distinguished name 'dn'
   EPNAME("GMAPFunDN");
 
   // Init the relevant fields (only once)
   if (now <= 0) {
      if (XrdSecgsiGMAPInit(dn) != 0)
         return (char *)-1;
      return (char *)0;
   }
 
   // Output
   char *name = 0;
 
   XrdSecgsiMapEntry_t *mc = 0;
   // Try the full match first
   if ((mc = gMappings.Find(dn))) {
      // Get the associated user
      name = new char[mc->val.length() + 1];
      strcpy(name, mc->val.c_str());
   } else {
      // Else scan the available mappings
      mc = new XrdSecgsiMapEntry_t(dn, "", kFull);
      gMappings.Apply(FindMatchingCondition, (void *)mc);
      if (mc->user.length() > 0) {
         name = new char[mc->user.length() + 1];
         strcpy(name, mc->user.c_str());
      }
   }
   if (name) {
      DEBUG("mapping DN '"<<dn<<"' to '"<<name<<"'");
   } else {
      DEBUG("no valid match found for DN '"<<dn<<"'");
   }
  
   // Done
   return name;
}}

References XrdOucString::c_str(), DEBUG, EPNAME, FindMatchingCondition(), gMappings, kFull, XrdOucString::length(), XrdSecgsiMapEntry_t::val, and XrdSecgsiGMAPInit().

Referenced by XrdVERSIONINFO().

Here is the call graph for this function:

Here is the caller graph for this function:

◆ XrdSecgsiGMAPInit()

int XrdSecgsiGMAPInit ( const char * cfg )

Definition at line 167 of file XrdSecgsiGMAPFunDN.cc.

{
   // Initialize the relevant parameters
   //      parms = "[cfg]|[d|dbg|debug]"
   // The config file 'cfg' can also be defined by XRDGSIGMAPDNCF.
   // The flag 'd|dbg|debug' enables some verbosity.
   // Return 0 on success, -1 otherwise
   EPNAME("GMAPInitDN");
 
   bool debug = 0;
   XrdOucString pps(parms), p, cfg;
   int from = 0;
   while ((from = pps.tokenize(p, from, '|')) != -1) {
      if (p.length() > 0) {
         if (p == "d" || p == "dbg" || p == "debug") {
            debug = 1;
         } else {
            cfg = p;
         }
      }
   }
   // Initiate error logging and tracing
   dnDest.logger(&dnLogger);
   dnTrace = new XrdOucTrace(&dnDest);
   if (debug) dnTrace->What |= TRACE_Authen;
 
   if (cfg.length() <= 0) cfg = getenv("XRDGSIGMAPDNCF");
   if (cfg.length() <= 0) {
      PRINT("ERROR: undefined config file path");
      return -1;
   }
 
   FILE *fcf = fopen(cfg.c_str(), "r");
   if (fcf) {
      char l[4096], val[4096], usr[256];
      while (fgets(l, sizeof(l), fcf)) {
         int len = strlen(l);
         if (len < 2) continue;
         if (l[0] == '#') continue;
         if (l[len-1] == '\n') l[len-1] = '\0';
         if (sscanf(l, "%4095s %255s", val, usr) >= 2) {
            XrdOucString stype = "matching";
            char *p = &val[0];
            int type = kFull;
            if (val[0] == '^') {
               // Starts-with
               type = kBegins;
               p = &val[1];
               stype = "beginning with";
            } else {
               int vlen = strlen(val);
               if (val[vlen-1] == '$') {
                  // Ends-with
                  type = kEnds;
                  val[vlen-1] = '\0';
                  stype = "ending with";
               } else if (val[vlen-1] == '+') {
                  // Contains
                  type = kContains;
                  val[vlen-1] = '\0';
                  stype = "containing";
               }
            }
            // Register
            gMappings.Add(p, new XrdSecgsiMapEntry_t(p, usr, type));
            //
            DEBUG("mapping DNs "<<stype<<" '"<<p<<"' to '"<<usr<<"'");
         }
      }
      fclose(fcf);
   } else {
      PRINT("ERROR: config file '"<<cfg<<"' could not be open (errno: "<<errno<<")");
      return -1;
   }
   // Done
   return 0;
}