1*4882a593Smuzhiyun // SPDX-License-Identifier: GPL-2.0
2*4882a593Smuzhiyun
3*4882a593Smuzhiyun #include <linux/ceph/ceph_debug.h>
4*4882a593Smuzhiyun
5*4882a593Smuzhiyun #include <linux/err.h>
6*4882a593Smuzhiyun #include <linux/module.h>
7*4882a593Smuzhiyun #include <linux/random.h>
8*4882a593Smuzhiyun #include <linux/slab.h>
9*4882a593Smuzhiyun
10*4882a593Smuzhiyun #include <linux/ceph/decode.h>
11*4882a593Smuzhiyun #include <linux/ceph/auth.h>
12*4882a593Smuzhiyun
13*4882a593Smuzhiyun #include "auth_none.h"
14*4882a593Smuzhiyun
reset(struct ceph_auth_client * ac)15*4882a593Smuzhiyun static void reset(struct ceph_auth_client *ac)
16*4882a593Smuzhiyun {
17*4882a593Smuzhiyun struct ceph_auth_none_info *xi = ac->private;
18*4882a593Smuzhiyun
19*4882a593Smuzhiyun xi->starting = true;
20*4882a593Smuzhiyun }
21*4882a593Smuzhiyun
destroy(struct ceph_auth_client * ac)22*4882a593Smuzhiyun static void destroy(struct ceph_auth_client *ac)
23*4882a593Smuzhiyun {
24*4882a593Smuzhiyun kfree(ac->private);
25*4882a593Smuzhiyun ac->private = NULL;
26*4882a593Smuzhiyun }
27*4882a593Smuzhiyun
is_authenticated(struct ceph_auth_client * ac)28*4882a593Smuzhiyun static int is_authenticated(struct ceph_auth_client *ac)
29*4882a593Smuzhiyun {
30*4882a593Smuzhiyun struct ceph_auth_none_info *xi = ac->private;
31*4882a593Smuzhiyun
32*4882a593Smuzhiyun return !xi->starting;
33*4882a593Smuzhiyun }
34*4882a593Smuzhiyun
should_authenticate(struct ceph_auth_client * ac)35*4882a593Smuzhiyun static int should_authenticate(struct ceph_auth_client *ac)
36*4882a593Smuzhiyun {
37*4882a593Smuzhiyun struct ceph_auth_none_info *xi = ac->private;
38*4882a593Smuzhiyun
39*4882a593Smuzhiyun return xi->starting;
40*4882a593Smuzhiyun }
41*4882a593Smuzhiyun
ceph_auth_none_build_authorizer(struct ceph_auth_client * ac,struct ceph_none_authorizer * au)42*4882a593Smuzhiyun static int ceph_auth_none_build_authorizer(struct ceph_auth_client *ac,
43*4882a593Smuzhiyun struct ceph_none_authorizer *au)
44*4882a593Smuzhiyun {
45*4882a593Smuzhiyun void *p = au->buf;
46*4882a593Smuzhiyun void *const end = p + sizeof(au->buf);
47*4882a593Smuzhiyun int ret;
48*4882a593Smuzhiyun
49*4882a593Smuzhiyun ceph_encode_8_safe(&p, end, 1, e_range);
50*4882a593Smuzhiyun ret = ceph_auth_entity_name_encode(ac->name, &p, end);
51*4882a593Smuzhiyun if (ret < 0)
52*4882a593Smuzhiyun return ret;
53*4882a593Smuzhiyun
54*4882a593Smuzhiyun ceph_encode_64_safe(&p, end, ac->global_id, e_range);
55*4882a593Smuzhiyun au->buf_len = p - (void *)au->buf;
56*4882a593Smuzhiyun dout("%s built authorizer len %d\n", __func__, au->buf_len);
57*4882a593Smuzhiyun return 0;
58*4882a593Smuzhiyun
59*4882a593Smuzhiyun e_range:
60*4882a593Smuzhiyun return -ERANGE;
61*4882a593Smuzhiyun }
62*4882a593Smuzhiyun
build_request(struct ceph_auth_client * ac,void * buf,void * end)63*4882a593Smuzhiyun static int build_request(struct ceph_auth_client *ac, void *buf, void *end)
64*4882a593Smuzhiyun {
65*4882a593Smuzhiyun return 0;
66*4882a593Smuzhiyun }
67*4882a593Smuzhiyun
68*4882a593Smuzhiyun /*
69*4882a593Smuzhiyun * the generic auth code decode the global_id, and we carry no actual
70*4882a593Smuzhiyun * authenticate state, so nothing happens here.
71*4882a593Smuzhiyun */
handle_reply(struct ceph_auth_client * ac,int result,void * buf,void * end)72*4882a593Smuzhiyun static int handle_reply(struct ceph_auth_client *ac, int result,
73*4882a593Smuzhiyun void *buf, void *end)
74*4882a593Smuzhiyun {
75*4882a593Smuzhiyun struct ceph_auth_none_info *xi = ac->private;
76*4882a593Smuzhiyun
77*4882a593Smuzhiyun xi->starting = false;
78*4882a593Smuzhiyun return result;
79*4882a593Smuzhiyun }
80*4882a593Smuzhiyun
ceph_auth_none_destroy_authorizer(struct ceph_authorizer * a)81*4882a593Smuzhiyun static void ceph_auth_none_destroy_authorizer(struct ceph_authorizer *a)
82*4882a593Smuzhiyun {
83*4882a593Smuzhiyun kfree(a);
84*4882a593Smuzhiyun }
85*4882a593Smuzhiyun
86*4882a593Smuzhiyun /*
87*4882a593Smuzhiyun * build an 'authorizer' with our entity_name and global_id. it is
88*4882a593Smuzhiyun * identical for all services we connect to.
89*4882a593Smuzhiyun */
ceph_auth_none_create_authorizer(struct ceph_auth_client * ac,int peer_type,struct ceph_auth_handshake * auth)90*4882a593Smuzhiyun static int ceph_auth_none_create_authorizer(
91*4882a593Smuzhiyun struct ceph_auth_client *ac, int peer_type,
92*4882a593Smuzhiyun struct ceph_auth_handshake *auth)
93*4882a593Smuzhiyun {
94*4882a593Smuzhiyun struct ceph_none_authorizer *au;
95*4882a593Smuzhiyun int ret;
96*4882a593Smuzhiyun
97*4882a593Smuzhiyun au = kmalloc(sizeof(*au), GFP_NOFS);
98*4882a593Smuzhiyun if (!au)
99*4882a593Smuzhiyun return -ENOMEM;
100*4882a593Smuzhiyun
101*4882a593Smuzhiyun au->base.destroy = ceph_auth_none_destroy_authorizer;
102*4882a593Smuzhiyun
103*4882a593Smuzhiyun ret = ceph_auth_none_build_authorizer(ac, au);
104*4882a593Smuzhiyun if (ret) {
105*4882a593Smuzhiyun kfree(au);
106*4882a593Smuzhiyun return ret;
107*4882a593Smuzhiyun }
108*4882a593Smuzhiyun
109*4882a593Smuzhiyun auth->authorizer = (struct ceph_authorizer *) au;
110*4882a593Smuzhiyun auth->authorizer_buf = au->buf;
111*4882a593Smuzhiyun auth->authorizer_buf_len = au->buf_len;
112*4882a593Smuzhiyun auth->authorizer_reply_buf = au->reply_buf;
113*4882a593Smuzhiyun auth->authorizer_reply_buf_len = sizeof (au->reply_buf);
114*4882a593Smuzhiyun
115*4882a593Smuzhiyun return 0;
116*4882a593Smuzhiyun }
117*4882a593Smuzhiyun
118*4882a593Smuzhiyun static const struct ceph_auth_client_ops ceph_auth_none_ops = {
119*4882a593Smuzhiyun .name = "none",
120*4882a593Smuzhiyun .reset = reset,
121*4882a593Smuzhiyun .destroy = destroy,
122*4882a593Smuzhiyun .is_authenticated = is_authenticated,
123*4882a593Smuzhiyun .should_authenticate = should_authenticate,
124*4882a593Smuzhiyun .build_request = build_request,
125*4882a593Smuzhiyun .handle_reply = handle_reply,
126*4882a593Smuzhiyun .create_authorizer = ceph_auth_none_create_authorizer,
127*4882a593Smuzhiyun };
128*4882a593Smuzhiyun
ceph_auth_none_init(struct ceph_auth_client * ac)129*4882a593Smuzhiyun int ceph_auth_none_init(struct ceph_auth_client *ac)
130*4882a593Smuzhiyun {
131*4882a593Smuzhiyun struct ceph_auth_none_info *xi;
132*4882a593Smuzhiyun
133*4882a593Smuzhiyun dout("ceph_auth_none_init %p\n", ac);
134*4882a593Smuzhiyun xi = kzalloc(sizeof(*xi), GFP_NOFS);
135*4882a593Smuzhiyun if (!xi)
136*4882a593Smuzhiyun return -ENOMEM;
137*4882a593Smuzhiyun
138*4882a593Smuzhiyun xi->starting = true;
139*4882a593Smuzhiyun
140*4882a593Smuzhiyun ac->protocol = CEPH_AUTH_NONE;
141*4882a593Smuzhiyun ac->private = xi;
142*4882a593Smuzhiyun ac->ops = &ceph_auth_none_ops;
143*4882a593Smuzhiyun return 0;
144*4882a593Smuzhiyun }
145