ssh_cmd.c revision 2ffa245e79a5ed66e69d141f4001c13697e01450
0N/A/*
0N/A Authors:
0N/A Pavel Březina <pbrezina@redhat.com>
0N/A
0N/A Copyright (C) 2016 Red Hat
0N/A
0N/A This program is free software; you can redistribute it and/or modify
0N/A it under the terms of the GNU General Public License as published by
0N/A the Free Software Foundation; either version 3 of the License, or
0N/A (at your option) any later version.
0N/A
0N/A This program is distributed in the hope that it will be useful,
0N/A but WITHOUT ANY WARRANTY; without even the implied warranty of
0N/A MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
0N/A GNU General Public License for more details.
0N/A
0N/A You should have received a copy of the GNU General Public License
0N/A along with this program. If not, see <http://www.gnu.org/licenses/>.
0N/A*/
0N/A
0N/A#include "config.h"
0N/A
0N/A#include <talloc.h>
0N/A#include <string.h>
0N/A#include <pwd.h>
0N/A
0N/A#include "util/util.h"
0N/A#include "responder/common/responder.h"
0N/A#include "responder/common/cache_req/cache_req.h"
0N/A#include "responder/ssh/ssh_private.h"
0N/A
0N/Astruct ssh_cmd_ctx {
0N/A struct cli_ctx *cli_ctx;
0N/A const char *name;
0N/A const char *alias;
0N/A const char *domain;
0N/A};
0N/A
0N/Astatic errno_t
0N/Assh_check_non_sssd_user(const char *username)
0N/A{
0N/A struct passwd *pwd;
0N/A
0N/A pwd = getpwnam(username);
0N/A if (pwd != NULL) {
0N/A DEBUG(SSSDBG_TRACE_ALL, "%s is a non-SSSD user\n", username);
0N/A return ERR_NON_SSSD_USER;
0N/A }
0N/A
0N/A return ENOENT;
0N/A}
0N/A
0N/A
0N/Astatic struct sss_domain_info *
0N/Assh_get_result_domain(struct resp_ctx *rctx,
0N/A struct cache_req_result *result,
0N/A const char *name)
0N/A{
0N/A if (result != NULL) {
0N/A return result->domain;
0N/A }
0N/A
0N/A return find_domain_by_name(rctx->domains, name, true);
0N/A}
0N/A
0N/Astatic void ssh_cmd_get_user_pubkeys_done(struct tevent_req *subreq);
0N/A
0N/Astatic errno_t ssh_cmd_get_user_pubkeys(struct cli_ctx *cli_ctx)
0N/A{
0N/A struct ssh_cmd_ctx *cmd_ctx;
0N/A struct tevent_req *subreq;
0N/A errno_t ret;
0N/A
0N/A static const char *attrs[] = { SYSDB_NAME, SYSDB_SSH_PUBKEY,
0N/A SYSDB_USER_CERT, NULL };
0N/A
0N/A cmd_ctx = talloc_zero(cli_ctx, struct ssh_cmd_ctx);
0N/A if (cmd_ctx == NULL) {
0N/A ret = ENOMEM;
0N/A goto done;
0N/A }
0N/A
0N/A cmd_ctx->cli_ctx = cli_ctx;
0N/A
0N/A ret = ssh_protocol_parse_user(cli_ctx, cli_ctx->rctx->default_domain,
0N/A &cmd_ctx->name, &cmd_ctx->domain);
0N/A if (ret != EOK) {
0N/A DEBUG(SSSDBG_CRIT_FAILURE, "Invalid request message!\n");
0N/A goto done;
0N/A }
0N/A
0N/A DEBUG(SSSDBG_TRACE_FUNC,
0N/A "Requesting SSH user public keys for [%s] from [%s]\n",
0N/A cmd_ctx->name, cmd_ctx->domain ? cmd_ctx->domain : "<ALL>");
0N/A
0N/A if (strcmp(cmd_ctx->name, "root") == 0) {
0N/A ret = ERR_NON_SSSD_USER;
0N/A goto done;
0N/A }
0N/A
0N/A subreq = cache_req_user_by_name_attrs_send(cmd_ctx, cli_ctx->ev,
0N/A cli_ctx->rctx,
0N/A cli_ctx->rctx->ncache, 0,
0N/A cmd_ctx->domain,
0N/A cmd_ctx->name, attrs);
0N/A if (subreq == NULL) {
0N/A DEBUG(SSSDBG_CRIT_FAILURE, "Unable to create tevent request!\n");
0N/A ret = ENOMEM;
0N/A goto done;
0N/A }
0N/A
0N/A tevent_req_set_callback(subreq, ssh_cmd_get_user_pubkeys_done, cmd_ctx);
ret = EOK;
done:
if (ret != EOK) {
talloc_free(cmd_ctx);
return ssh_protocol_done(cli_ctx, ret);
}
return ret;
}
static void ssh_cmd_get_user_pubkeys_done(struct tevent_req *subreq)
{
struct cache_req_result *result;
struct ssh_cmd_ctx *cmd_ctx;
errno_t ret;
cmd_ctx = tevent_req_callback_data(subreq, struct ssh_cmd_ctx);
ret = cache_req_user_by_name_attrs_recv(cmd_ctx, subreq, &result);
talloc_zfree(subreq);
if (ret != EOK) {
if (ret == ENOENT) {
/* Check if it is a non SSSD user. */
ret = ssh_check_non_sssd_user(cmd_ctx->name);
}
ssh_protocol_done(cmd_ctx->cli_ctx, ret);
goto done;
}
ssh_protocol_reply(cmd_ctx->cli_ctx, result);
done:
talloc_free(cmd_ctx);
}
static void ssh_cmd_get_host_pubkeys_done(struct tevent_req *subreq);
static errno_t ssh_cmd_get_host_pubkeys(struct cli_ctx *cli_ctx)
{
struct ssh_cmd_ctx *cmd_ctx;
struct tevent_req *subreq;
errno_t ret;
static const char *attrs[] = { SYSDB_NAME, SYSDB_SSH_PUBKEY, NULL };
cmd_ctx = talloc_zero(cli_ctx, struct ssh_cmd_ctx);
if (cmd_ctx == NULL) {
ret = ENOMEM;
goto done;
}
cmd_ctx->cli_ctx = cli_ctx;
ret = ssh_protocol_parse_host(cli_ctx, &cmd_ctx->name, &cmd_ctx->alias,
&cmd_ctx->domain);
if (ret != EOK) {
DEBUG(SSSDBG_CRIT_FAILURE, "Invalid request message!\n");
goto done;
}
DEBUG(SSSDBG_TRACE_FUNC,
"Requesting SSH host public keys for [%s] from [%s]\n",
cmd_ctx->name, cmd_ctx->domain ? cmd_ctx->domain : "<ALL>");
subreq = cache_req_host_by_name_send(cmd_ctx, cli_ctx->ev,
cli_ctx->rctx,
cli_ctx->rctx->ncache, 0,
cmd_ctx->domain,
cmd_ctx->name,
cmd_ctx->alias, attrs);
if (subreq == NULL) {
DEBUG(SSSDBG_CRIT_FAILURE, "Unable to create tevent request!\n");
ret = ENOMEM;
goto done;
}
tevent_req_set_callback(subreq, ssh_cmd_get_host_pubkeys_done, cmd_ctx);
ret = EOK;
done:
if (ret != EOK) {
talloc_free(cmd_ctx);
return ssh_protocol_done(cli_ctx, ret);
}
return ret;
}
static void ssh_cmd_get_host_pubkeys_done(struct tevent_req *subreq)
{
struct cache_req_result *result = NULL;
struct sss_domain_info *domain;
struct ssh_cmd_ctx *cmd_ctx;
struct ssh_ctx *ssh_ctx;
errno_t ret;
cmd_ctx = tevent_req_callback_data(subreq, struct ssh_cmd_ctx);
ssh_ctx = talloc_get_type(cmd_ctx->cli_ctx->rctx->pvt_ctx, struct ssh_ctx);
ret = cache_req_host_by_name_recv(cmd_ctx, subreq, &result);
talloc_zfree(subreq);
if (ret == EOK || ret == ENOENT) {
domain = ssh_get_result_domain(ssh_ctx->rctx, result, cmd_ctx->domain);
ssh_update_known_hosts_file(ssh_ctx->rctx->domains, domain,
cmd_ctx->name, ssh_ctx->hash_known_hosts,
ssh_ctx->known_hosts_timeout);
}
if (ret != EOK) {
ssh_protocol_done(cmd_ctx->cli_ctx, ret);
goto done;
}
ssh_protocol_reply(cmd_ctx->cli_ctx, result);
done:
talloc_free(cmd_ctx);
}
struct cli_protocol_version *register_cli_protocol_version(void)
{
static struct cli_protocol_version ssh_cli_protocol_version[] = {
{0, NULL, NULL}
};
return ssh_cli_protocol_version;
}
struct sss_cmd_table *get_ssh_cmds(void) {
static struct sss_cmd_table ssh_cmds[] = {
{SSS_GET_VERSION, sss_cmd_get_version},
{SSS_SSH_GET_USER_PUBKEYS, ssh_cmd_get_user_pubkeys},
{SSS_SSH_GET_HOST_PUBKEYS, ssh_cmd_get_host_pubkeys},
{SSS_CLI_NULL, NULL}
};
return ssh_cmds;
}