* Sun RPC is a product of Sun Microsystems, Inc. and is provided for
* unrestricted use provided that this legend is included on all tape
* media and as a part of the software program in whole or part. Users
* may copy or modify Sun RPC without charge, but are not authorized
* to license or distribute it to anyone else except as part of a product or
* program developed by the user.
* SUN RPC IS PROVIDED AS IS WITH NO WARRANTIES OF ANY KIND INCLUDING THE
* WARRANTIES OF DESIGN, MERCHANTIBILITY AND FITNESS FOR A PARTICULAR
* PURPOSE, OR ARISING FROM A COURSE OF DEALING, USAGE OR TRADE PRACTICE.
* Sun RPC is provided with no support and without any obligation on the
* part of Sun Microsystems, Inc. to assist in its use, correction,
* modification or enhancement.
* SUN MICROSYSTEMS, INC. SHALL HAVE NO LIABILITY WITH RESPECT TO THE
* INFRINGEMENT OF COPYRIGHTS, TRADE SECRETS OR ANY PATENTS BY SUN RPC
* In no event will Sun Microsystems, Inc. be liable for any lost revenue
* or profits or other special, indirect and consequential damages, even if
* Sun has been advised of the possibility of such damages.
* Mountain View, California 94043
#if defined(LIBC_SCCS) && !defined(lint)
/*static char *sccsid = "from: @(#)svc_auth.c 1.19 87/08/11 Copyr 1984 Sun Micro";*/
/*static char *sccsid = "from: @(#)svc_auth.c 2.1 88/08/07 4.0 RPCSRC";*/
static char *rcsid
= "$Id: svc_auth.c,v 1.3 1993/08/26 00:53:38 jtc Exp $";
* svc_auth_nodes.c, Server-side rpc authenticator interface,
* *WITHOUT* DES authentication.
* Copyright (C) 1984, Sun Microsystems, Inc.
* svcauthsw is the bdevsw of server side authentication.
* Server side authenticators are called from authenticate by
* using the client auth struct flavor field to index into svcauthsw.
* The server auth flavors must implement a routine that looks
* flavorx_auth(rqst, msg)
* register struct svc_req *rqst;
* register struct rpc_msg *msg;
enum auth_stat
_svcauth_null(); /* no authentication */
enum auth_stat
_svcauth_unix(); /* unix style (uid, gids) */
enum auth_stat
_svcauth_short(); /* short hand unix style */
enum auth_stat (*authenticator
)();
_svcauth_null
, /* AUTH_NULL */
_svcauth_unix
, /* AUTH_UNIX */
_svcauth_short
, /* AUTH_SHORT */
#define AUTH_MAX 2 /* HIGHEST AUTH NUMBER */
* The call rpc message, msg has been obtained from the wire. The msg contains
* the raw form of credentials and verifiers. authenticate returns AUTH_OK
* if the msg is successfully authenticated. If AUTH_OK then the routine also
* does the following things:
* set rqst->rq_xprt->verf to the appropriate response verifier;
* sets rqst->rq_client_cred to the "cooked" form of the credentials.
* NB: rqst->rq_cxprt->verf must be pre-alloctaed;
* its length is set appropriately.
* The caller still owns and is responsible for msg->u.cmb.cred and
* msg->u.cmb.verf. The authentication system retains ownership of
* rqst->rq_client_cred, the cooked credentials.
* There is an assumption that any flavour less than AUTH_NULL is
register struct svc_req
*rqst
;
register int cred_flavor
;
rqst
->rq_cred
= msg
->rm_call
.cb_cred
;
rqst
->rq_xprt
->xp_verf
.oa_flavor
= _null_auth
.oa_flavor
;
rqst
->rq_xprt
->xp_verf
.oa_length
= 0;
cred_flavor
= rqst
->rq_cred
.oa_flavor
;
if ((cred_flavor
<= AUTH_MAX
) && (cred_flavor
>= AUTH_NULL
)) {
return ((*(svcauthsw
[cred_flavor
].authenticator
))(rqst
, msg
));
return (AUTH_REJECTEDCRED
);
_svcauth_null(/*rqst, msg*/)