1 /*
2 * CDDL HEADER START
3 *
4 * The contents of this file are subject to the terms of the
5 * Common Development and Distribution License (the "License").
6 * You may not use this file except in compliance with the License.
7 *
8 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
9 * or http://www.opensolaris.org/os/licensing.
10 * See the License for the specific language governing permissions
11 * and limitations under the License.
12 *
13 * When distributing Covered Code, include this CDDL HEADER in each
14 * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
15 * If applicable, add the following below this CDDL HEADER, with the
16 * fields enclosed by brackets "[]" replaced with your own identifying
17 * information: Portions Copyright [yyyy] [name of copyright owner]
18 *
19 * CDDL HEADER END
20 */
21 /*
22 * Copyright 2007 Sun Microsystems, Inc. All rights reserved.
23 * Use is subject to license terms.
24 */
25
26 /*
27 * Usermode daemon which is responsible for sending kerberos credentials
28 * expiration warnings to the user, syslog or snmp (eventually), depending
29 * on how it is configured through /etc/krb5/warn.conf.
30 * the code in this file was borrowed from gssd.c
31 */
32
33 #include <stdio.h>
34 #include <rpc/rpc.h>
35 #include <sys/syslog.h>
36 #include <sys/termios.h>
37 #include <unistd.h>
38 #include <sys/resource.h>
39 #include <sys/utsname.h>
40 #include <sys/systeminfo.h>
41 #include <stdlib.h>
42 #include <stropts.h>
43 #include <fcntl.h>
44 #include <strings.h>
45 #include <syslog.h>
46 #include <thread.h>
47 #include <netdb.h>
48 #include <libgen.h>
49 #include "kwarnd.h"
50
51 #define MAXTHREADS 64
52
53 int kwarnd_debug = 0; /* enable debugging printfs */
54
55 extern void kwarnprog_1(struct svc_req *, register SVCXPRT *);
56 static void usage(void);
57 static void detachfromtty(void);
58 extern int svc_create_local_service(void (*) (),
59 ulong_t, ulong_t, char *, char *);
60 extern void kwarnd_check_warning_list(void);
61 extern bool_t loadConfigFile(void);
62
63 /* following declarations needed in rpcgen-generated code */
64 int _rpcpmstart = 0; /* Started by a port monitor ? */
65 int _rpcfdtype; /* Whether Stream or Datagram ? */
66 int _rpcsvcdirty; /* Still serving ? */
67 mutex_t _svcstate_lock = ERRORCHECKMUTEX;
68
69 char myhostname[MAXHOSTNAMELEN] = {0};
70 char progname[MAXNAMELEN] = {0};
71
72
73 int
main(int argc,char ** argv)74 main(int argc, char **argv)
75 {
76 SVCXPRT *transp;
77 extern int optind;
78 int c;
79 char mname[FMNAMESZ + 1];
80 int rpc_svc_mode = RPC_SVC_MT_AUTO;
81
82 /* set locale and domain for internationalization */
83 setlocale(LC_ALL, "");
84
85 #if !defined(TEXT_DOMAIN)
86 #define TEXT_DOMAIN "SYS_TEST"
87 #endif
88
89 textdomain(TEXT_DOMAIN);
90
91 (void) strlcpy(progname, basename(argv[0]), sizeof (progname));
92
93 /*
94 * Take special note that "getuid()" is called here. This call is used
95 * rather that app_krb5_user_uid(), to ensure ktkt_warnd(8) is running
96 * as root.
97 */
98 #ifdef DEBUG
99 (void) setuid(0); /* DEBUG: set ruid to root */
100 #endif /* DEBUG */
101 if (getuid()) {
102 (void) fprintf(stderr,
103 gettext("[%s] must be run as root\n"), argv[0]);
104 #ifdef DEBUG
105 (void) fprintf(stderr, gettext(" warning only\n"));
106 #else /* !DEBUG */
107 exit(1);
108 #endif /* DEBUG */
109 }
110
111 while ((c = getopt(argc, argv, "d")) != -1)
112 switch (c) {
113 case 'd':
114 /* turn on debugging */
115 kwarnd_debug = 1;
116 break;
117 default:
118 usage();
119 }
120
121 if (optind != argc) {
122 usage();
123 }
124
125 (void) gethostname(myhostname, sizeof (myhostname));
126
127 /*
128 * Started by inetd if name of module just below stream
129 * head is either a sockmod or timod.
130 */
131 if (!ioctl(0, I_LOOK, mname) && ((strcmp(mname, "sockmod") == 0) ||
132 (strcmp(mname, "timod") == 0))) {
133 char *netid;
134 struct netconfig *nconf;
135
136 openlog("kwarnd", LOG_PID, LOG_DAEMON);
137
138 if ((netid = getenv("NLSPROVIDER")) == NULL) {
139 netid = "ticotsord";
140 }
141
142 if ((nconf = getnetconfigent(netid)) == NULL) {
143 syslog(LOG_ERR, gettext("cannot get transport info"));
144 exit(1);
145 }
146
147 if (strcmp(mname, "sockmod") == 0) {
148 if (ioctl(0, I_POP, 0) || ioctl(0, I_PUSH, "timod")) {
149 syslog(LOG_ERR, gettext("could not get the "
150 "right module"));
151 exit(1);
152 }
153 }
154
155 /* XXX - is nconf even needed here? */
156 if ((transp = svc_tli_create(0, nconf, NULL, 0, 0)) == NULL) {
157 syslog(LOG_ERR, gettext("cannot create server handle"));
158 exit(1);
159 }
160
161 /*
162 * We use a NULL nconf because KWARNPROG has already been
163 * registered with rpcbind.
164 */
165 if (!svc_reg(transp, KWARNPROG, KWARNVERS, kwarnprog_1, NULL)) {
166 syslog(LOG_ERR, gettext("unable to register "
167 "(KWARNPROG, KWARNVERS)"));
168 exit(1);
169 }
170
171 if (nconf)
172 freenetconfigent(nconf);
173 } else {
174
175 if (!kwarnd_debug)
176 detachfromtty();
177
178 openlog("kwarnd", LOG_PID, LOG_DAEMON);
179
180 if (svc_create_local_service(kwarnprog_1, KWARNPROG, KWARNVERS,
181 "netpath", "kwarnd") == 0) {
182 syslog(LOG_ERR, gettext("unable to create service"));
183 exit(1);
184 }
185 }
186
187
188 if (kwarnd_debug) {
189 fprintf(stderr,
190 gettext("kwarnd start: \n"));
191 }
192
193 (void) signal(SIGCHLD, SIG_IGN);
194
195 if (thr_create(NULL, 0,
196 (void *(*)(void *))kwarnd_check_warning_list, NULL,
197 THR_DETACHED | THR_DAEMON | THR_NEW_LWP, NULL)) {
198 syslog(LOG_ERR,
199 gettext("unable to create cache_cleanup thread"));
200 exit(1);
201 }
202
203 if (!loadConfigFile()) {
204 syslog(LOG_ERR, gettext("could not read config file\n"));
205 exit(1);
206 }
207
208 if (!rpc_control(RPC_SVC_MTMODE_SET, &rpc_svc_mode)) {
209 syslog(LOG_ERR, gettext("unable to set automatic MT mode"));
210 exit(1);
211 }
212
213 svc_run();
214 abort();
215 /*NOTREACHED*/
216 #ifdef lint
217 return (1);
218 #endif
219 }
220
221 static void
usage(void)222 usage(void)
223 {
224 (void) fprintf(stderr, gettext("usage: %s [-d]\n"), progname);
225 exit(1);
226 }
227
228
229 /*
230 * detach from tty
231 */
232 static void
detachfromtty(void)233 detachfromtty(void)
234 {
235 switch (fork()) {
236 case -1:
237 perror(gettext("kwarnd: can not fork"));
238 exit(1);
239 /*NOTREACHED*/
240 case 0:
241 break;
242 default:
243 exit(0);
244 }
245
246 /*
247 * Close existing file descriptors, open "/dev/null" as
248 * standard input, output, and error, and detach from
249 * controlling terminal.
250 */
251 closefrom(0);
252 (void) open("/dev/null", O_RDONLY);
253 (void) open("/dev/null", O_WRONLY);
254 (void) dup(1);
255 (void) setsid();
256 }
257
258 /*ARGSUSED*/
259 int
kwarnprog_1_freeresult(SVCXPRT * transport,xdrproc_t xdr_res,caddr_t res)260 kwarnprog_1_freeresult(SVCXPRT *transport, xdrproc_t xdr_res, caddr_t res)
261 {
262 xdr_free(xdr_res, res);
263 return (1);
264 }
265