108 строки
2.7 KiB
C
108 строки
2.7 KiB
C
|
/*
|
||
|
|
* Copyright (c) 2015 Intel, Inc. All rights reserved.
|
||
|
|
* $COPYRIGHT$
|
||
|
|
*
|
||
|
|
* Additional copyrights may follow
|
||
|
|
*
|
||
|
|
* $HEADER$
|
||
|
|
*
|
||
|
|
*/
|
||
|
|
|
||
|
|
#include "opal_config.h"
|
||
|
|
#include "opal/constants.h"
|
||
|
|
|
||
|
|
#ifdef HAVE_STRING_H
|
||
|
|
#include <string.h>
|
||
|
|
#endif
|
||
|
|
#include <munge.h>
|
||
|
|
|
||
|
|
#include "opal_stdint.h"
|
||
|
|
#include "opal/dss/dss_types.h"
|
||
|
|
#include "opal/util/error.h"
|
||
|
|
#include "opal/util/output.h"
|
||
|
|
#include "opal/util/show_help.h"
|
||
|
|
#include "opal/mca/dstore/dstore.h"
|
||
|
|
|
||
|
|
#include "opal/mca/sec/base/base.h"
|
||
|
|
#include "sec_munge.h"
|
||
|
|
|
||
|
|
static int init(void);
|
||
|
|
static void finalize(void);
|
||
|
|
static int get_my_cred(int dstorehandle,
|
||
|
|
opal_process_name_t *my_id,
|
||
|
|
opal_sec_cred_t **cred);
|
||
|
|
static int authenticate(opal_sec_cred_t *cred);
|
||
|
|
|
||
|
|
opal_sec_base_module_t opal_sec_munge_module = {
|
||
|
|
init,
|
||
|
|
finalize,
|
||
|
|
get_my_cred,
|
||
|
|
authenticate
|
||
|
|
};
|
||
|
|
|
||
|
|
static opal_sec_cred_t my_cred;
|
||
|
|
static bool initialized = false;
|
||
|
|
|
||
|
|
static int init(void)
|
||
|
|
{
|
||
|
|
int rc;
|
||
|
|
|
||
|
|
opal_output_verbose(2, opal_sec_base_framework.framework_output,
|
||
|
|
"sec: munge init");
|
||
|
|
|
||
|
|
/* attempt to get a credential as a way of checking that
|
||
|
|
* the munge server is available - cache the credential
|
||
|
|
* for later use */
|
||
|
|
|
||
|
|
if (EMUNGE_SUCCESS != (rc = munge_encode(&my_cred.credential, NULL, NULL, 0))) {
|
||
|
|
opal_output_verbose(2, opal_sec_base_framework.framework_output,
|
||
|
|
"sec: munge failed to create credential: %s",
|
||
|
|
munge_strerror(rc));
|
||
|
|
return OPAL_ERR_SERVER_NOT_AVAIL;
|
||
|
|
}
|
||
|
|
initialized = true;
|
||
|
|
|
||
|
|
return OPAL_SUCCESS;
|
||
|
|
}
|
||
|
|
|
||
|
|
static void finalize(void)
|
||
|
|
{
|
||
|
|
if (initialized) {
|
||
|
|
free(my_cred.credential);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
static int get_my_cred(int dstorehandle,
|
||
|
|
opal_process_name_t *my_id,
|
||
|
|
opal_sec_cred_t **cred)
|
||
|
|
{
|
||
|
|
if (initialized) {
|
||
|
|
*cred = &my_cred;
|
||
|
|
} else {
|
||
|
|
*cred = NULL;
|
||
|
|
}
|
||
|
|
|
||
|
|
return OPAL_SUCCESS;
|
||
|
|
}
|
||
|
|
|
||
|
|
static int authenticate(opal_sec_cred_t *cred)
|
||
|
|
{
|
||
|
|
munge_err_t rc;
|
||
|
|
|
||
|
|
opal_output_verbose(2, opal_sec_base_framework.framework_output,
|
||
|
|
"sec: munge validate_cred %s", cred);
|
||
|
|
|
||
|
|
/* parse the inbound string */
|
||
|
|
if (EMUNGE_SUCCESS != (rc = munge_decode(cred->credential, NULL, NULL, NULL, NULL, NULL))) {
|
||
|
|
opal_output_verbose(2, opal_sec_base_framework.framework_output,
|
||
|
|
"sec: munge failed to decode credential: %s",
|
||
|
|
munge_strerror(rc));
|
||
|
|
return OPAL_ERR_AUTHENTICATION_FAILED;
|
||
|
|
}
|
||
|
|
|
||
|
|
opal_output_verbose(2, opal_sec_base_framework.framework_output,
|
||
|
|
"sec: munge credential valid");
|
||
|
|
return OPAL_SUCCESS;
|
||
|
|
}
|
||
|
|
|