17c478bd9Sstevel@tonic-gate /* 27c478bd9Sstevel@tonic-gate * CDDL HEADER START 37c478bd9Sstevel@tonic-gate * 47c478bd9Sstevel@tonic-gate * The contents of this file are subject to the terms of the 5004388ebScasper * Common Development and Distribution License (the "License"). 6004388ebScasper * You may not use this file except in compliance with the License. 77c478bd9Sstevel@tonic-gate * 87c478bd9Sstevel@tonic-gate * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 97c478bd9Sstevel@tonic-gate * or http://www.opensolaris.org/os/licensing. 107c478bd9Sstevel@tonic-gate * See the License for the specific language governing permissions 117c478bd9Sstevel@tonic-gate * and limitations under the License. 127c478bd9Sstevel@tonic-gate * 137c478bd9Sstevel@tonic-gate * When distributing Covered Code, include this CDDL HEADER in each 147c478bd9Sstevel@tonic-gate * file and include the License file at usr/src/OPENSOLARIS.LICENSE. 157c478bd9Sstevel@tonic-gate * If applicable, add the following below this CDDL HEADER, with the 167c478bd9Sstevel@tonic-gate * fields enclosed by brackets "[]" replaced with your own identifying 177c478bd9Sstevel@tonic-gate * information: Portions Copyright [yyyy] [name of copyright owner] 187c478bd9Sstevel@tonic-gate * 197c478bd9Sstevel@tonic-gate * CDDL HEADER END 207c478bd9Sstevel@tonic-gate */ 217c478bd9Sstevel@tonic-gate /* 22d04ccbb3Scarlsonj * Copyright 2007 Sun Microsystems, Inc. All rights reserved. 237c478bd9Sstevel@tonic-gate * Use is subject to license terms. 247c478bd9Sstevel@tonic-gate */ 257c478bd9Sstevel@tonic-gate 267c478bd9Sstevel@tonic-gate #pragma ident "%Z%%M% %I% %E% SMI" 277c478bd9Sstevel@tonic-gate 287c478bd9Sstevel@tonic-gate #include <sys/types.h> 297c478bd9Sstevel@tonic-gate #include <stdlib.h> 307c478bd9Sstevel@tonic-gate #include <errno.h> 317c478bd9Sstevel@tonic-gate #include <locale.h> 327c478bd9Sstevel@tonic-gate #include <string.h> 337c478bd9Sstevel@tonic-gate #include <unistd.h> 347c478bd9Sstevel@tonic-gate #include <signal.h> 357c478bd9Sstevel@tonic-gate #include <stdio.h> 36004388ebScasper #include <stdio_ext.h> 377c478bd9Sstevel@tonic-gate #include <dhcp_hostconf.h> 387c478bd9Sstevel@tonic-gate #include <dhcpagent_ipc.h> 39d04ccbb3Scarlsonj #include <dhcpagent_util.h> 407c478bd9Sstevel@tonic-gate #include <dhcpmsg.h> 417c478bd9Sstevel@tonic-gate #include <netinet/dhcp.h> 4269bb4bb4Scarlsonj #include <net/route.h> 4369bb4bb4Scarlsonj #include <sys/sockio.h> 447c478bd9Sstevel@tonic-gate 457c478bd9Sstevel@tonic-gate #include "async.h" 467c478bd9Sstevel@tonic-gate #include "agent.h" 477c478bd9Sstevel@tonic-gate #include "script_handler.h" 487c478bd9Sstevel@tonic-gate #include "util.h" 497c478bd9Sstevel@tonic-gate #include "class_id.h" 507c478bd9Sstevel@tonic-gate #include "states.h" 517c478bd9Sstevel@tonic-gate #include "packet.h" 52d04ccbb3Scarlsonj #include "interface.h" 53d04ccbb3Scarlsonj #include "defaults.h" 547c478bd9Sstevel@tonic-gate 557c478bd9Sstevel@tonic-gate #ifndef TEXT_DOMAIN 567c478bd9Sstevel@tonic-gate #define TEXT_DOMAIN "SYS_TEST" 577c478bd9Sstevel@tonic-gate #endif 587c478bd9Sstevel@tonic-gate 597c478bd9Sstevel@tonic-gate iu_timer_id_t inactivity_id; 607c478bd9Sstevel@tonic-gate int class_id_len = 0; 617c478bd9Sstevel@tonic-gate char *class_id; 627c478bd9Sstevel@tonic-gate iu_eh_t *eh; 637c478bd9Sstevel@tonic-gate iu_tq_t *tq; 647c478bd9Sstevel@tonic-gate pid_t grandparent; 6569bb4bb4Scarlsonj int rtsock_fd; 667c478bd9Sstevel@tonic-gate 677c478bd9Sstevel@tonic-gate static boolean_t shutdown_started = B_FALSE; 687c478bd9Sstevel@tonic-gate static boolean_t do_adopt = B_FALSE; 697c478bd9Sstevel@tonic-gate static unsigned int debug_level = 0; 7069bb4bb4Scarlsonj static iu_eh_callback_t accept_event, ipc_event, rtsock_event; 717c478bd9Sstevel@tonic-gate 727c478bd9Sstevel@tonic-gate /* 737c478bd9Sstevel@tonic-gate * The ipc_cmd_allowed[] table indicates which IPC commands are allowed in 747c478bd9Sstevel@tonic-gate * which states; a non-zero value indicates the command is permitted. 757c478bd9Sstevel@tonic-gate * 76d04ccbb3Scarlsonj * START is permitted if the state machine is fresh, or if we are in the 77d04ccbb3Scarlsonj * process of trying to obtain a lease (as a convenience to save the 78d04ccbb3Scarlsonj * administrator from having to do an explicit DROP). EXTEND, RELEASE, and 79d04ccbb3Scarlsonj * GET_TAG require a lease to be obtained in order to make sense. INFORM is 80d04ccbb3Scarlsonj * permitted if the interface is fresh or has an INFORM in progress or 81d04ccbb3Scarlsonj * previously done on it -- otherwise a DROP or RELEASE is first required. 82d04ccbb3Scarlsonj * PING and STATUS always make sense and thus are always permitted, as is DROP 83d04ccbb3Scarlsonj * in order to permit the administrator to always bail out. 847c478bd9Sstevel@tonic-gate */ 857c478bd9Sstevel@tonic-gate static int ipc_cmd_allowed[DHCP_NSTATES][DHCP_NIPC] = { 867c478bd9Sstevel@tonic-gate /* D E P R S S I G */ 877c478bd9Sstevel@tonic-gate /* R X I E T T N E */ 887c478bd9Sstevel@tonic-gate /* O T N L A A F T */ 897c478bd9Sstevel@tonic-gate /* P E G E R T O _ */ 907c478bd9Sstevel@tonic-gate /* . N . A T U R T */ 917c478bd9Sstevel@tonic-gate /* . D . S . S M A */ 927c478bd9Sstevel@tonic-gate /* . . . E . . . G */ 937c478bd9Sstevel@tonic-gate /* INIT */ { 1, 0, 1, 0, 1, 1, 1, 0 }, 947c478bd9Sstevel@tonic-gate /* SELECTING */ { 1, 0, 1, 0, 1, 1, 0, 0 }, 957c478bd9Sstevel@tonic-gate /* REQUESTING */ { 1, 0, 1, 0, 1, 1, 0, 0 }, 9669bb4bb4Scarlsonj /* PRE_BOUND */ { 1, 1, 1, 1, 0, 1, 0, 1 }, 977c478bd9Sstevel@tonic-gate /* BOUND */ { 1, 1, 1, 1, 0, 1, 0, 1 }, 987c478bd9Sstevel@tonic-gate /* RENEWING */ { 1, 1, 1, 1, 0, 1, 0, 1 }, 997c478bd9Sstevel@tonic-gate /* REBINDING */ { 1, 1, 1, 1, 0, 1, 0, 1 }, 100d04ccbb3Scarlsonj /* INFORMATION */ { 1, 0, 1, 0, 1, 1, 1, 1 }, 101d04ccbb3Scarlsonj /* INIT_REBOOT */ { 1, 0, 1, 1, 1, 1, 0, 0 }, 102d04ccbb3Scarlsonj /* ADOPTING */ { 1, 0, 1, 1, 0, 1, 0, 0 }, 103d04ccbb3Scarlsonj /* INFORM_SENT */ { 1, 0, 1, 0, 1, 1, 1, 0 }, 104d04ccbb3Scarlsonj /* DECLINING */ { 1, 1, 1, 1, 0, 1, 0, 1 }, 105d04ccbb3Scarlsonj /* RELEASING */ { 1, 0, 1, 0, 0, 1, 0, 1 }, 106d04ccbb3Scarlsonj }; 107d04ccbb3Scarlsonj 108d04ccbb3Scarlsonj #define CMD_ISPRIV 0x1 /* Command requires privileges */ 109d04ccbb3Scarlsonj #define CMD_CREATE 0x2 /* Command creates an interface */ 110d04ccbb3Scarlsonj #define CMD_BOOTP 0x4 /* Command is valid with BOOTP */ 111d04ccbb3Scarlsonj #define CMD_IMMED 0x8 /* Reply is immediate (no BUSY state) */ 112d04ccbb3Scarlsonj 113d04ccbb3Scarlsonj static uint_t ipc_cmd_flags[DHCP_NIPC] = { 114d04ccbb3Scarlsonj /* DHCP_DROP */ CMD_ISPRIV|CMD_BOOTP, 115d04ccbb3Scarlsonj /* DHCP_EXTEND */ CMD_ISPRIV, 116d04ccbb3Scarlsonj /* DHCP_PING */ CMD_BOOTP|CMD_IMMED, 117d04ccbb3Scarlsonj /* DHCP_RELEASE */ CMD_ISPRIV, 118d04ccbb3Scarlsonj /* DHCP_START */ CMD_CREATE|CMD_ISPRIV|CMD_BOOTP, 119d04ccbb3Scarlsonj /* DHCP_STATUS */ CMD_BOOTP|CMD_IMMED, 120d04ccbb3Scarlsonj /* DHCP_INFORM */ CMD_CREATE|CMD_ISPRIV, 121d04ccbb3Scarlsonj /* DHCP_GET_TAG */ CMD_BOOTP|CMD_IMMED 1227c478bd9Sstevel@tonic-gate }; 1237c478bd9Sstevel@tonic-gate 1247c478bd9Sstevel@tonic-gate int 1257c478bd9Sstevel@tonic-gate main(int argc, char **argv) 1267c478bd9Sstevel@tonic-gate { 1277c478bd9Sstevel@tonic-gate boolean_t is_daemon = B_TRUE; 128d04ccbb3Scarlsonj boolean_t is_verbose; 1297c478bd9Sstevel@tonic-gate int ipc_fd; 1307c478bd9Sstevel@tonic-gate int c; 1317c478bd9Sstevel@tonic-gate struct rlimit rl; 1327c478bd9Sstevel@tonic-gate 133d04ccbb3Scarlsonj debug_level = df_get_int("", B_FALSE, DF_DEBUG_LEVEL); 134d04ccbb3Scarlsonj is_verbose = df_get_bool("", B_FALSE, DF_VERBOSE); 135d04ccbb3Scarlsonj 1367c478bd9Sstevel@tonic-gate /* 1377c478bd9Sstevel@tonic-gate * -l is ignored for compatibility with old agent. 1387c478bd9Sstevel@tonic-gate */ 1397c478bd9Sstevel@tonic-gate 1407c478bd9Sstevel@tonic-gate while ((c = getopt(argc, argv, "vd:l:fa")) != EOF) { 1417c478bd9Sstevel@tonic-gate 1427c478bd9Sstevel@tonic-gate switch (c) { 1437c478bd9Sstevel@tonic-gate 1447c478bd9Sstevel@tonic-gate case 'a': 1457c478bd9Sstevel@tonic-gate do_adopt = B_TRUE; 1467c478bd9Sstevel@tonic-gate grandparent = getpid(); 1477c478bd9Sstevel@tonic-gate break; 1487c478bd9Sstevel@tonic-gate 1497c478bd9Sstevel@tonic-gate case 'd': 1507c478bd9Sstevel@tonic-gate debug_level = strtoul(optarg, NULL, 0); 1517c478bd9Sstevel@tonic-gate break; 1527c478bd9Sstevel@tonic-gate 1537c478bd9Sstevel@tonic-gate case 'f': 1547c478bd9Sstevel@tonic-gate is_daemon = B_FALSE; 1557c478bd9Sstevel@tonic-gate break; 1567c478bd9Sstevel@tonic-gate 1577c478bd9Sstevel@tonic-gate case 'v': 1587c478bd9Sstevel@tonic-gate is_verbose = B_TRUE; 1597c478bd9Sstevel@tonic-gate break; 1607c478bd9Sstevel@tonic-gate 1617c478bd9Sstevel@tonic-gate case '?': 1627c478bd9Sstevel@tonic-gate (void) fprintf(stderr, "usage: %s [-a] [-d n] [-f] [-v]" 1637c478bd9Sstevel@tonic-gate "\n", argv[0]); 1647c478bd9Sstevel@tonic-gate return (EXIT_FAILURE); 1657c478bd9Sstevel@tonic-gate 1667c478bd9Sstevel@tonic-gate default: 1677c478bd9Sstevel@tonic-gate break; 1687c478bd9Sstevel@tonic-gate } 1697c478bd9Sstevel@tonic-gate } 1707c478bd9Sstevel@tonic-gate 1717c478bd9Sstevel@tonic-gate (void) setlocale(LC_ALL, ""); 1727c478bd9Sstevel@tonic-gate (void) textdomain(TEXT_DOMAIN); 1737c478bd9Sstevel@tonic-gate 1747c478bd9Sstevel@tonic-gate if (geteuid() != 0) { 1757c478bd9Sstevel@tonic-gate dhcpmsg_init(argv[0], B_FALSE, is_verbose, debug_level); 1767c478bd9Sstevel@tonic-gate dhcpmsg(MSG_ERROR, "must be super-user"); 1777c478bd9Sstevel@tonic-gate dhcpmsg_fini(); 1787c478bd9Sstevel@tonic-gate return (EXIT_FAILURE); 1797c478bd9Sstevel@tonic-gate } 1807c478bd9Sstevel@tonic-gate 1817c478bd9Sstevel@tonic-gate if (is_daemon && daemonize() == 0) { 1827c478bd9Sstevel@tonic-gate dhcpmsg_init(argv[0], B_FALSE, is_verbose, debug_level); 1837c478bd9Sstevel@tonic-gate dhcpmsg(MSG_ERR, "cannot become daemon, exiting"); 1847c478bd9Sstevel@tonic-gate dhcpmsg_fini(); 1857c478bd9Sstevel@tonic-gate return (EXIT_FAILURE); 1867c478bd9Sstevel@tonic-gate } 1877c478bd9Sstevel@tonic-gate 188d04ccbb3Scarlsonj /* 189d04ccbb3Scarlsonj * Seed the random number generator, since we're going to need it 190d04ccbb3Scarlsonj * to set transaction id's and for exponential backoff. 191d04ccbb3Scarlsonj */ 192d04ccbb3Scarlsonj srand48(gethrtime() ^ gethostid() ^ getpid()); 193d04ccbb3Scarlsonj 1947c478bd9Sstevel@tonic-gate dhcpmsg_init(argv[0], is_daemon, is_verbose, debug_level); 1957c478bd9Sstevel@tonic-gate (void) atexit(dhcpmsg_fini); 1967c478bd9Sstevel@tonic-gate 1977c478bd9Sstevel@tonic-gate tq = iu_tq_create(); 1987c478bd9Sstevel@tonic-gate eh = iu_eh_create(); 1997c478bd9Sstevel@tonic-gate 2007c478bd9Sstevel@tonic-gate if (eh == NULL || tq == NULL) { 2017c478bd9Sstevel@tonic-gate errno = ENOMEM; 2027c478bd9Sstevel@tonic-gate dhcpmsg(MSG_ERR, "cannot create timer queue or event handler"); 2037c478bd9Sstevel@tonic-gate return (EXIT_FAILURE); 2047c478bd9Sstevel@tonic-gate } 2057c478bd9Sstevel@tonic-gate 2067c478bd9Sstevel@tonic-gate /* 2077c478bd9Sstevel@tonic-gate * ignore most signals that could be reasonably generated. 2087c478bd9Sstevel@tonic-gate */ 2097c478bd9Sstevel@tonic-gate 2107c478bd9Sstevel@tonic-gate (void) signal(SIGTERM, graceful_shutdown); 2117c478bd9Sstevel@tonic-gate (void) signal(SIGQUIT, graceful_shutdown); 2127c478bd9Sstevel@tonic-gate (void) signal(SIGPIPE, SIG_IGN); 2137c478bd9Sstevel@tonic-gate (void) signal(SIGUSR1, SIG_IGN); 2147c478bd9Sstevel@tonic-gate (void) signal(SIGUSR2, SIG_IGN); 2157c478bd9Sstevel@tonic-gate (void) signal(SIGINT, SIG_IGN); 2167c478bd9Sstevel@tonic-gate (void) signal(SIGHUP, SIG_IGN); 2177c478bd9Sstevel@tonic-gate (void) signal(SIGCHLD, SIG_IGN); 2187c478bd9Sstevel@tonic-gate 2197c478bd9Sstevel@tonic-gate /* 2207c478bd9Sstevel@tonic-gate * upon SIGTHAW we need to refresh any non-infinite leases. 2217c478bd9Sstevel@tonic-gate */ 2227c478bd9Sstevel@tonic-gate 223d04ccbb3Scarlsonj (void) iu_eh_register_signal(eh, SIGTHAW, refresh_smachs, NULL); 2247c478bd9Sstevel@tonic-gate 2257c478bd9Sstevel@tonic-gate class_id = get_class_id(); 2267c478bd9Sstevel@tonic-gate if (class_id != NULL) 2277c478bd9Sstevel@tonic-gate class_id_len = strlen(class_id); 2287c478bd9Sstevel@tonic-gate else 2297c478bd9Sstevel@tonic-gate dhcpmsg(MSG_WARNING, "get_class_id failed, continuing " 2307c478bd9Sstevel@tonic-gate "with no vendor class id"); 2317c478bd9Sstevel@tonic-gate 2327c478bd9Sstevel@tonic-gate /* 2337c478bd9Sstevel@tonic-gate * the inactivity timer is enabled any time there are no 2347c478bd9Sstevel@tonic-gate * interfaces under DHCP control. if DHCP_INACTIVITY_WAIT 2357c478bd9Sstevel@tonic-gate * seconds transpire without an interface under DHCP control, 2367c478bd9Sstevel@tonic-gate * the agent shuts down. 2377c478bd9Sstevel@tonic-gate */ 2387c478bd9Sstevel@tonic-gate 2397c478bd9Sstevel@tonic-gate inactivity_id = iu_schedule_timer(tq, DHCP_INACTIVITY_WAIT, 2407c478bd9Sstevel@tonic-gate inactivity_shutdown, NULL); 2417c478bd9Sstevel@tonic-gate 2427c478bd9Sstevel@tonic-gate /* 2437c478bd9Sstevel@tonic-gate * max out the number available descriptors, just in case.. 2447c478bd9Sstevel@tonic-gate */ 2457c478bd9Sstevel@tonic-gate 2467c478bd9Sstevel@tonic-gate rl.rlim_cur = RLIM_INFINITY; 2477c478bd9Sstevel@tonic-gate rl.rlim_max = RLIM_INFINITY; 2487c478bd9Sstevel@tonic-gate if (setrlimit(RLIMIT_NOFILE, &rl) == -1) 2497c478bd9Sstevel@tonic-gate dhcpmsg(MSG_ERR, "setrlimit failed"); 2507c478bd9Sstevel@tonic-gate 251004388ebScasper (void) enable_extended_FILE_stdio(-1, -1); 252004388ebScasper 253d04ccbb3Scarlsonj /* 254d04ccbb3Scarlsonj * Create and bind default IP sockets used to control interfaces and to 255d04ccbb3Scarlsonj * catch stray packets. 256d04ccbb3Scarlsonj */ 257d04ccbb3Scarlsonj 258d04ccbb3Scarlsonj if (!dhcp_ip_default()) 259d04ccbb3Scarlsonj return (EXIT_FAILURE); 260d04ccbb3Scarlsonj 2617c478bd9Sstevel@tonic-gate /* 2627c478bd9Sstevel@tonic-gate * create the ipc channel that the agent will listen for 2637c478bd9Sstevel@tonic-gate * requests on, and register it with the event handler so that 2647c478bd9Sstevel@tonic-gate * `accept_event' will be called back. 2657c478bd9Sstevel@tonic-gate */ 2667c478bd9Sstevel@tonic-gate 2677c478bd9Sstevel@tonic-gate switch (dhcp_ipc_init(&ipc_fd)) { 2687c478bd9Sstevel@tonic-gate 2697c478bd9Sstevel@tonic-gate case 0: 2707c478bd9Sstevel@tonic-gate break; 2717c478bd9Sstevel@tonic-gate 2727c478bd9Sstevel@tonic-gate case DHCP_IPC_E_BIND: 2737c478bd9Sstevel@tonic-gate dhcpmsg(MSG_ERROR, "dhcp_ipc_init: cannot bind to port " 2747c478bd9Sstevel@tonic-gate "%i (agent already running?)", IPPORT_DHCPAGENT); 2757c478bd9Sstevel@tonic-gate return (EXIT_FAILURE); 2767c478bd9Sstevel@tonic-gate 2777c478bd9Sstevel@tonic-gate default: 2787c478bd9Sstevel@tonic-gate dhcpmsg(MSG_ERROR, "dhcp_ipc_init failed"); 2797c478bd9Sstevel@tonic-gate return (EXIT_FAILURE); 2807c478bd9Sstevel@tonic-gate } 2817c478bd9Sstevel@tonic-gate 2827c478bd9Sstevel@tonic-gate if (iu_register_event(eh, ipc_fd, POLLIN, accept_event, 0) == -1) { 2837c478bd9Sstevel@tonic-gate dhcpmsg(MSG_ERR, "cannot register ipc fd for messages"); 2847c478bd9Sstevel@tonic-gate return (EXIT_FAILURE); 2857c478bd9Sstevel@tonic-gate } 2867c478bd9Sstevel@tonic-gate 28769bb4bb4Scarlsonj /* 28869bb4bb4Scarlsonj * Create the global routing socket. This is used for monitoring 28969bb4bb4Scarlsonj * interface transitions, so that we learn about the kernel's Duplicate 29069bb4bb4Scarlsonj * Address Detection status, and for inserting and removing default 291d04ccbb3Scarlsonj * routes as learned from DHCP servers. Both v4 and v6 are handed 292d04ccbb3Scarlsonj * with this one socket. 29369bb4bb4Scarlsonj */ 294d04ccbb3Scarlsonj rtsock_fd = socket(PF_ROUTE, SOCK_RAW, 0); 29569bb4bb4Scarlsonj if (rtsock_fd == -1) { 29669bb4bb4Scarlsonj dhcpmsg(MSG_ERR, "cannot open routing socket"); 29769bb4bb4Scarlsonj return (EXIT_FAILURE); 29869bb4bb4Scarlsonj } 29969bb4bb4Scarlsonj if (iu_register_event(eh, rtsock_fd, POLLIN, rtsock_event, 0) == -1) { 30069bb4bb4Scarlsonj dhcpmsg(MSG_ERR, "cannot register routing socket for messages"); 30169bb4bb4Scarlsonj return (EXIT_FAILURE); 30269bb4bb4Scarlsonj } 30369bb4bb4Scarlsonj 3047c478bd9Sstevel@tonic-gate /* 3057c478bd9Sstevel@tonic-gate * if the -a (adopt) option was specified, try to adopt the 306dc041e83Scarlsonj * kernel-managed interface before we start. 3077c478bd9Sstevel@tonic-gate */ 3087c478bd9Sstevel@tonic-gate 309d04ccbb3Scarlsonj if (do_adopt && !dhcp_adopt()) 310dc041e83Scarlsonj return (EXIT_FAILURE); 3117c478bd9Sstevel@tonic-gate 312d04ccbb3Scarlsonj /* 313d04ccbb3Scarlsonj * For DHCPv6, we own all of the interfaces marked DHCPRUNNING. As 314d04ccbb3Scarlsonj * we're starting operation here, if there are any of those interfaces 315d04ccbb3Scarlsonj * lingering around, they're strays, and need to be removed. 316d04ccbb3Scarlsonj * 317d04ccbb3Scarlsonj * It might be nice to save these addresses off somewhere -- for both 318d04ccbb3Scarlsonj * v4 and v6 -- and use them as hints for later negotiation. 319d04ccbb3Scarlsonj */ 320d04ccbb3Scarlsonj remove_v6_strays(); 321d04ccbb3Scarlsonj 3227c478bd9Sstevel@tonic-gate /* 3237c478bd9Sstevel@tonic-gate * enter the main event loop; this is where all the real work 3247c478bd9Sstevel@tonic-gate * takes place (through registering events and scheduling timers). 3257c478bd9Sstevel@tonic-gate * this function only returns when the agent is shutting down. 3267c478bd9Sstevel@tonic-gate */ 3277c478bd9Sstevel@tonic-gate 3287c478bd9Sstevel@tonic-gate switch (iu_handle_events(eh, tq)) { 3297c478bd9Sstevel@tonic-gate 3307c478bd9Sstevel@tonic-gate case -1: 3317c478bd9Sstevel@tonic-gate dhcpmsg(MSG_WARNING, "iu_handle_events exited abnormally"); 3327c478bd9Sstevel@tonic-gate break; 3337c478bd9Sstevel@tonic-gate 3347c478bd9Sstevel@tonic-gate case DHCP_REASON_INACTIVITY: 3357c478bd9Sstevel@tonic-gate dhcpmsg(MSG_INFO, "no interfaces to manage, shutting down..."); 3367c478bd9Sstevel@tonic-gate break; 3377c478bd9Sstevel@tonic-gate 3387c478bd9Sstevel@tonic-gate case DHCP_REASON_TERMINATE: 3397c478bd9Sstevel@tonic-gate dhcpmsg(MSG_INFO, "received SIGTERM, shutting down..."); 3407c478bd9Sstevel@tonic-gate break; 3417c478bd9Sstevel@tonic-gate 3427c478bd9Sstevel@tonic-gate case DHCP_REASON_SIGNAL: 3437c478bd9Sstevel@tonic-gate dhcpmsg(MSG_WARNING, "received unexpected signal, shutting " 3447c478bd9Sstevel@tonic-gate "down..."); 3457c478bd9Sstevel@tonic-gate break; 3467c478bd9Sstevel@tonic-gate } 3477c478bd9Sstevel@tonic-gate 3487c478bd9Sstevel@tonic-gate (void) iu_eh_unregister_signal(eh, SIGTHAW, NULL); 3497c478bd9Sstevel@tonic-gate 3507c478bd9Sstevel@tonic-gate iu_eh_destroy(eh); 3517c478bd9Sstevel@tonic-gate iu_tq_destroy(tq); 3527c478bd9Sstevel@tonic-gate 3537c478bd9Sstevel@tonic-gate return (EXIT_SUCCESS); 3547c478bd9Sstevel@tonic-gate } 3557c478bd9Sstevel@tonic-gate 3567c478bd9Sstevel@tonic-gate /* 3577c478bd9Sstevel@tonic-gate * drain_script(): event loop callback during shutdown 3587c478bd9Sstevel@tonic-gate * 3597c478bd9Sstevel@tonic-gate * input: eh_t *: unused 3607c478bd9Sstevel@tonic-gate * void *: unused 3617c478bd9Sstevel@tonic-gate * output: boolean_t: B_TRUE if event loop should exit; B_FALSE otherwise 3627c478bd9Sstevel@tonic-gate */ 3637c478bd9Sstevel@tonic-gate 3647c478bd9Sstevel@tonic-gate /* ARGSUSED */ 3657c478bd9Sstevel@tonic-gate boolean_t 3667c478bd9Sstevel@tonic-gate drain_script(iu_eh_t *ehp, void *arg) 3677c478bd9Sstevel@tonic-gate { 3687c478bd9Sstevel@tonic-gate if (shutdown_started == B_FALSE) { 3697c478bd9Sstevel@tonic-gate shutdown_started = B_TRUE; 3707c478bd9Sstevel@tonic-gate if (do_adopt == B_FALSE) /* see 4291141 */ 371d04ccbb3Scarlsonj nuke_smach_list(); 3727c478bd9Sstevel@tonic-gate } 3737c478bd9Sstevel@tonic-gate return (script_count == 0); 3747c478bd9Sstevel@tonic-gate } 3757c478bd9Sstevel@tonic-gate 3767c478bd9Sstevel@tonic-gate /* 3777c478bd9Sstevel@tonic-gate * accept_event(): accepts a new connection on the ipc socket and registers 3787c478bd9Sstevel@tonic-gate * to receive its messages with the event handler 3797c478bd9Sstevel@tonic-gate * 3807c478bd9Sstevel@tonic-gate * input: iu_eh_t *: unused 3817c478bd9Sstevel@tonic-gate * int: the file descriptor in the iu_eh_t * the connection came in on 3827c478bd9Sstevel@tonic-gate * (other arguments unused) 3837c478bd9Sstevel@tonic-gate * output: void 3847c478bd9Sstevel@tonic-gate */ 3857c478bd9Sstevel@tonic-gate 3867c478bd9Sstevel@tonic-gate /* ARGSUSED */ 3877c478bd9Sstevel@tonic-gate static void 3887c478bd9Sstevel@tonic-gate accept_event(iu_eh_t *ehp, int fd, short events, iu_event_id_t id, void *arg) 3897c478bd9Sstevel@tonic-gate { 3907c478bd9Sstevel@tonic-gate int client_fd; 3917c478bd9Sstevel@tonic-gate int is_priv; 3927c478bd9Sstevel@tonic-gate 3937c478bd9Sstevel@tonic-gate if (dhcp_ipc_accept(fd, &client_fd, &is_priv) != 0) { 3947c478bd9Sstevel@tonic-gate dhcpmsg(MSG_ERR, "accept_event: accept on ipc socket"); 3957c478bd9Sstevel@tonic-gate return; 3967c478bd9Sstevel@tonic-gate } 3977c478bd9Sstevel@tonic-gate 3987c478bd9Sstevel@tonic-gate if (iu_register_event(eh, client_fd, POLLIN, ipc_event, 3997c478bd9Sstevel@tonic-gate (void *)is_priv) == -1) { 4007c478bd9Sstevel@tonic-gate dhcpmsg(MSG_ERROR, "accept_event: cannot register ipc socket " 4017c478bd9Sstevel@tonic-gate "for callback"); 4027c478bd9Sstevel@tonic-gate } 4037c478bd9Sstevel@tonic-gate } 4047c478bd9Sstevel@tonic-gate 4057c478bd9Sstevel@tonic-gate /* 4067c478bd9Sstevel@tonic-gate * ipc_event(): processes incoming ipc requests 4077c478bd9Sstevel@tonic-gate * 4087c478bd9Sstevel@tonic-gate * input: iu_eh_t *: unused 4097c478bd9Sstevel@tonic-gate * int: the file descriptor in the iu_eh_t * the request came in on 4107c478bd9Sstevel@tonic-gate * short: unused 411d04ccbb3Scarlsonj * iu_event_id_t: event ID 4127c478bd9Sstevel@tonic-gate * void *: indicates whether the request is from a privileged client 4137c478bd9Sstevel@tonic-gate * output: void 4147c478bd9Sstevel@tonic-gate */ 4157c478bd9Sstevel@tonic-gate 4167c478bd9Sstevel@tonic-gate /* ARGSUSED */ 4177c478bd9Sstevel@tonic-gate static void 4187c478bd9Sstevel@tonic-gate ipc_event(iu_eh_t *ehp, int fd, short events, iu_event_id_t id, void *arg) 4197c478bd9Sstevel@tonic-gate { 420d04ccbb3Scarlsonj ipc_action_t ia, *iap; 421d04ccbb3Scarlsonj dhcp_smach_t *dsmp; 4227c478bd9Sstevel@tonic-gate int error, is_priv = (int)arg; 423d04ccbb3Scarlsonj const char *ifname; 424d04ccbb3Scarlsonj boolean_t isv6; 425d04ccbb3Scarlsonj 426d04ccbb3Scarlsonj ipc_action_init(&ia); 427d04ccbb3Scarlsonj error = dhcp_ipc_recv_request(fd, &ia.ia_request, 428d04ccbb3Scarlsonj DHCP_IPC_REQUEST_WAIT); 429d04ccbb3Scarlsonj if (error != DHCP_IPC_SUCCESS) { 430d04ccbb3Scarlsonj if (error != DHCP_IPC_E_EOF) { 431d04ccbb3Scarlsonj dhcpmsg(MSG_ERROR, 432d04ccbb3Scarlsonj "ipc_event: dhcp_ipc_recv_request failed: %s", 433d04ccbb3Scarlsonj dhcp_ipc_strerror(error)); 434d04ccbb3Scarlsonj } else { 435d04ccbb3Scarlsonj dhcpmsg(MSG_DEBUG, "ipc_event: connection closed"); 436d04ccbb3Scarlsonj } 437d04ccbb3Scarlsonj if ((dsmp = lookup_smach_by_event(id)) != NULL) { 438d04ccbb3Scarlsonj ipc_action_finish(dsmp, error); 439d04ccbb3Scarlsonj } else { 440d04ccbb3Scarlsonj (void) iu_unregister_event(eh, id, NULL); 441d04ccbb3Scarlsonj (void) dhcp_ipc_close(fd); 442d04ccbb3Scarlsonj } 4437c478bd9Sstevel@tonic-gate return; 4447c478bd9Sstevel@tonic-gate } 4457c478bd9Sstevel@tonic-gate 446d04ccbb3Scarlsonj /* Fill in temporary ipc_action structure for utility functions */ 447d04ccbb3Scarlsonj ia.ia_cmd = DHCP_IPC_CMD(ia.ia_request->message_type); 448d04ccbb3Scarlsonj ia.ia_fd = fd; 449d04ccbb3Scarlsonj ia.ia_eid = id; 450d04ccbb3Scarlsonj 451d04ccbb3Scarlsonj if (ia.ia_cmd >= DHCP_NIPC) { 452d04ccbb3Scarlsonj dhcpmsg(MSG_ERROR, 453d04ccbb3Scarlsonj "ipc_event: invalid command (%s) attempted on %s", 454d04ccbb3Scarlsonj dhcp_ipc_type_to_string(ia.ia_cmd), ia.ia_request->ifname); 455d04ccbb3Scarlsonj send_error_reply(&ia, DHCP_IPC_E_CMD_UNKNOWN); 4567c478bd9Sstevel@tonic-gate return; 4577c478bd9Sstevel@tonic-gate } 4587c478bd9Sstevel@tonic-gate 4597c478bd9Sstevel@tonic-gate /* return EPERM for any of the privileged actions */ 4607c478bd9Sstevel@tonic-gate 461d04ccbb3Scarlsonj if (!is_priv && (ipc_cmd_flags[ia.ia_cmd] & CMD_ISPRIV)) { 462d04ccbb3Scarlsonj dhcpmsg(MSG_WARNING, 463d04ccbb3Scarlsonj "ipc_event: privileged ipc command (%s) attempted on %s", 464d04ccbb3Scarlsonj dhcp_ipc_type_to_string(ia.ia_cmd), ia.ia_request->ifname); 465d04ccbb3Scarlsonj send_error_reply(&ia, DHCP_IPC_E_PERM); 466d04ccbb3Scarlsonj return; 4677c478bd9Sstevel@tonic-gate } 4687c478bd9Sstevel@tonic-gate 4697c478bd9Sstevel@tonic-gate /* 470d04ccbb3Scarlsonj * Try to locate the state machine associated with this command. If 471d04ccbb3Scarlsonj * the command is DHCP_START or DHCP_INFORM and there isn't a state 472d04ccbb3Scarlsonj * machine already, make one (there may already be one from a previous 473d04ccbb3Scarlsonj * failed attempt to START or INFORM). Otherwise, verify the reference 474d04ccbb3Scarlsonj * is still valid. 475d04ccbb3Scarlsonj * 476d04ccbb3Scarlsonj * The interface name may be blank. In that case, we look up the 477d04ccbb3Scarlsonj * primary interface, and the requested type (v4 or v6) doesn't matter. 4787c478bd9Sstevel@tonic-gate */ 4797c478bd9Sstevel@tonic-gate 480d04ccbb3Scarlsonj isv6 = (ia.ia_request->message_type & DHCP_V6) != 0; 481d04ccbb3Scarlsonj ifname = ia.ia_request->ifname; 482d04ccbb3Scarlsonj if (*ifname == '\0') 483d04ccbb3Scarlsonj dsmp = primary_smach(isv6); 484d04ccbb3Scarlsonj else 485d04ccbb3Scarlsonj dsmp = lookup_smach(ifname, isv6); 4867c478bd9Sstevel@tonic-gate 487d04ccbb3Scarlsonj if (dsmp != NULL) { 488d04ccbb3Scarlsonj /* Note that verify_smach drops a reference */ 489d04ccbb3Scarlsonj hold_smach(dsmp); 490d04ccbb3Scarlsonj if (!verify_smach(dsmp)) 491d04ccbb3Scarlsonj dsmp = NULL; 492d04ccbb3Scarlsonj } 4937c478bd9Sstevel@tonic-gate 494d04ccbb3Scarlsonj if (dsmp == NULL) { 4957c478bd9Sstevel@tonic-gate /* 496d04ccbb3Scarlsonj * If the user asked for the primary DHCP interface, but there 497d04ccbb3Scarlsonj * is none, then report failure. 4987c478bd9Sstevel@tonic-gate */ 499d04ccbb3Scarlsonj if (ifname[0] == '\0') { 500d04ccbb3Scarlsonj error = DHCP_IPC_E_NOPRIMARY; 5017c478bd9Sstevel@tonic-gate 5027c478bd9Sstevel@tonic-gate /* 503d04ccbb3Scarlsonj * If there's no interface, and we're starting up, then create 504d04ccbb3Scarlsonj * it now, along with a state machine for it. Note that if 505d04ccbb3Scarlsonj * insert_smach fails, it discards the LIF reference. 5067c478bd9Sstevel@tonic-gate */ 507d04ccbb3Scarlsonj } else if (ipc_cmd_flags[ia.ia_cmd] & CMD_CREATE) { 508d04ccbb3Scarlsonj dhcp_lif_t *lif; 5097c478bd9Sstevel@tonic-gate 510d04ccbb3Scarlsonj lif = attach_lif(ifname, isv6, &error); 511d04ccbb3Scarlsonj if (lif != NULL && 512d04ccbb3Scarlsonj (dsmp = insert_smach(lif, &error)) != NULL) { 513d04ccbb3Scarlsonj /* 514d04ccbb3Scarlsonj * Get client ID and set "DHCPRUNNING" flag on 515d04ccbb3Scarlsonj * logical interface. (V4 only, because V6 516d04ccbb3Scarlsonj * plumbs its own interfaces.) 517d04ccbb3Scarlsonj */ 518d04ccbb3Scarlsonj error = get_smach_cid(dsmp); 519d04ccbb3Scarlsonj if (error == DHCP_IPC_SUCCESS) 520d04ccbb3Scarlsonj error = set_lif_dhcp(lif, B_FALSE); 521d04ccbb3Scarlsonj if (error != DHCP_IPC_SUCCESS) { 522*3589885cScarlsonj remove_smach(dsmp); 523d04ccbb3Scarlsonj dsmp = NULL; 524d04ccbb3Scarlsonj } 5257c478bd9Sstevel@tonic-gate } 5267c478bd9Sstevel@tonic-gate 527d04ccbb3Scarlsonj /* 528d04ccbb3Scarlsonj * Otherwise, this is an operation on an unknown interface. 529d04ccbb3Scarlsonj */ 530d04ccbb3Scarlsonj } else { 531d04ccbb3Scarlsonj error = DHCP_IPC_E_UNKIF; 532d04ccbb3Scarlsonj } 533d04ccbb3Scarlsonj if (dsmp == NULL) { 534d04ccbb3Scarlsonj send_error_reply(&ia, error); 5357c478bd9Sstevel@tonic-gate return; 5367c478bd9Sstevel@tonic-gate } 5377c478bd9Sstevel@tonic-gate } 5387c478bd9Sstevel@tonic-gate 539d04ccbb3Scarlsonj if ((dsmp->dsm_dflags & DHCP_IF_BOOTP) && 540d04ccbb3Scarlsonj !(ipc_cmd_flags[ia.ia_cmd] & CMD_BOOTP)) { 541d04ccbb3Scarlsonj dhcpmsg(MSG_ERROR, "command %s not valid for BOOTP on %s", 542d04ccbb3Scarlsonj dhcp_ipc_type_to_string(ia.ia_cmd), dsmp->dsm_name); 543d04ccbb3Scarlsonj send_error_reply(&ia, DHCP_IPC_E_BOOTP); 5447c478bd9Sstevel@tonic-gate return; 5457c478bd9Sstevel@tonic-gate } 5467c478bd9Sstevel@tonic-gate 5477c478bd9Sstevel@tonic-gate /* 548d04ccbb3Scarlsonj * verify that the state machine is in a state which will allow the 5497c478bd9Sstevel@tonic-gate * command. we do this up front so that we can return an error 5507c478bd9Sstevel@tonic-gate * *before* needlessly cancelling an in-progress transaction. 5517c478bd9Sstevel@tonic-gate */ 5527c478bd9Sstevel@tonic-gate 553d04ccbb3Scarlsonj if (!check_cmd_allowed(dsmp->dsm_state, ia.ia_cmd)) { 554d04ccbb3Scarlsonj dhcpmsg(MSG_DEBUG, 555d04ccbb3Scarlsonj "in state %s; not allowing %s command on %s", 556d04ccbb3Scarlsonj dhcp_state_to_string(dsmp->dsm_state), 557d04ccbb3Scarlsonj dhcp_ipc_type_to_string(ia.ia_cmd), dsmp->dsm_name); 558d04ccbb3Scarlsonj send_error_reply(&ia, 559d04ccbb3Scarlsonj ia.ia_cmd == DHCP_START && dsmp->dsm_state != INIT ? 560d04ccbb3Scarlsonj DHCP_IPC_E_RUNNING : DHCP_IPC_E_OUTSTATE); 5617c478bd9Sstevel@tonic-gate return; 5627c478bd9Sstevel@tonic-gate } 5637c478bd9Sstevel@tonic-gate 564d04ccbb3Scarlsonj dhcpmsg(MSG_DEBUG, "in state %s; allowing %s command on %s", 565d04ccbb3Scarlsonj dhcp_state_to_string(dsmp->dsm_state), 566d04ccbb3Scarlsonj dhcp_ipc_type_to_string(ia.ia_cmd), dsmp->dsm_name); 567d04ccbb3Scarlsonj 568d04ccbb3Scarlsonj if ((ia.ia_request->message_type & DHCP_PRIMARY) && is_priv) 569d04ccbb3Scarlsonj make_primary(dsmp); 5707c478bd9Sstevel@tonic-gate 5717c478bd9Sstevel@tonic-gate /* 572d04ccbb3Scarlsonj * The current design dictates that there can be only one outstanding 573d04ccbb3Scarlsonj * transaction per state machine -- this simplifies the code 574d04ccbb3Scarlsonj * considerably and also fits well with RFCs 2131 and 3315. It is 575d04ccbb3Scarlsonj * worth classifying the different DHCP commands into synchronous 576d04ccbb3Scarlsonj * (those which we will handle now and reply to immediately) and 577d04ccbb3Scarlsonj * asynchronous (those which require transactions and will be completed 578d04ccbb3Scarlsonj * at an indeterminate time in the future): 5797c478bd9Sstevel@tonic-gate * 580d04ccbb3Scarlsonj * DROP: removes the agent's management of a state machine. 5817c478bd9Sstevel@tonic-gate * asynchronous as the script program may be invoked. 5827c478bd9Sstevel@tonic-gate * 583d04ccbb3Scarlsonj * PING: checks to see if the agent has a named state machine. 5847c478bd9Sstevel@tonic-gate * synchronous, since no packets need to be sent 5857c478bd9Sstevel@tonic-gate * to the DHCP server. 5867c478bd9Sstevel@tonic-gate * 587d04ccbb3Scarlsonj * STATUS: returns information about a state machine. 5887c478bd9Sstevel@tonic-gate * synchronous, since no packets need to be sent 5897c478bd9Sstevel@tonic-gate * to the DHCP server. 5907c478bd9Sstevel@tonic-gate * 591d04ccbb3Scarlsonj * RELEASE: releases the agent's management of a state machine 592d04ccbb3Scarlsonj * and brings the associated interfaces down. asynchronous 593d04ccbb3Scarlsonj * as the script program may be invoked. 5947c478bd9Sstevel@tonic-gate * 5957c478bd9Sstevel@tonic-gate * EXTEND: renews a lease. asynchronous, since the agent 5967c478bd9Sstevel@tonic-gate * needs to wait for an ACK, etc. 5977c478bd9Sstevel@tonic-gate * 598d04ccbb3Scarlsonj * START: starts DHCP on a named state machine. asynchronous since 5997c478bd9Sstevel@tonic-gate * the agent needs to wait for OFFERs, ACKs, etc. 6007c478bd9Sstevel@tonic-gate * 601d04ccbb3Scarlsonj * INFORM: obtains configuration parameters for the system using 602d04ccbb3Scarlsonj * externally configured interface. asynchronous, since the 6037c478bd9Sstevel@tonic-gate * agent needs to wait for an ACK. 6047c478bd9Sstevel@tonic-gate * 605d04ccbb3Scarlsonj * Notice that EXTEND, INFORM, START, DROP and RELEASE are 606d04ccbb3Scarlsonj * asynchronous. Notice also that asynchronous commands may occur from 607d04ccbb3Scarlsonj * within the agent -- for instance, the agent will need to do implicit 608d04ccbb3Scarlsonj * EXTENDs to extend the lease. In order to make the code simpler, the 609d04ccbb3Scarlsonj * following rules apply for asynchronous commands: 6107c478bd9Sstevel@tonic-gate * 611d04ccbb3Scarlsonj * There can only be one asynchronous command at a time per state 612d04ccbb3Scarlsonj * machine. The current asynchronous command is managed by the async_* 613d04ccbb3Scarlsonj * api: async_start(), async_finish(), and async_cancel(). 614d04ccbb3Scarlsonj * async_start() starts management of a new asynchronous command on an 615d04ccbb3Scarlsonj * state machine, which should only be done after async_cancel() to 616d04ccbb3Scarlsonj * terminate a previous command. When the command is completed, 617d04ccbb3Scarlsonj * async_finish() should be called. 6187c478bd9Sstevel@tonic-gate * 619d04ccbb3Scarlsonj * Asynchronous commands started by a user command have an associated 620d04ccbb3Scarlsonj * ipc_action which provides the agent with information for how to get 621d04ccbb3Scarlsonj * in touch with the user command when the action completes. These 622d04ccbb3Scarlsonj * ipc_action records also have an associated timeout which may be 623d04ccbb3Scarlsonj * infinite. ipc_action_start() should be called when starting an 624d04ccbb3Scarlsonj * asynchronous command requested by a user, which sets up the timer 625d04ccbb3Scarlsonj * and keeps track of the ipc information (file descriptor, request 626d04ccbb3Scarlsonj * type). When the asynchronous command completes, ipc_action_finish() 627d04ccbb3Scarlsonj * should be called to return a command status code to the user and 628d04ccbb3Scarlsonj * close the ipc connection). If the command does not complete before 629d04ccbb3Scarlsonj * the timer fires, ipc_action_timeout() is called which closes the ipc 630d04ccbb3Scarlsonj * connection and returns DHCP_IPC_E_TIMEOUT to the user. Note that 631d04ccbb3Scarlsonj * independent of ipc_action_timeout(), ipc_action_finish() should be 632d04ccbb3Scarlsonj * called. 6337c478bd9Sstevel@tonic-gate * 634d04ccbb3Scarlsonj * on a case-by-case basis, here is what happens (per state machine): 6357c478bd9Sstevel@tonic-gate * 636d04ccbb3Scarlsonj * o When an asynchronous command is requested, then 637d04ccbb3Scarlsonj * async_cancel() is called to terminate any non-user 638d04ccbb3Scarlsonj * action in progress. If there's a user action running, 6397c478bd9Sstevel@tonic-gate * the user command is sent DHCP_IPC_E_PEND. 6407c478bd9Sstevel@tonic-gate * 6417c478bd9Sstevel@tonic-gate * o otherwise, the the transaction is started with 6427c478bd9Sstevel@tonic-gate * async_start(). if the transaction is on behalf 6437c478bd9Sstevel@tonic-gate * of a user, ipc_action_start() is called to keep 6447c478bd9Sstevel@tonic-gate * track of the ipc information and set up the 6457c478bd9Sstevel@tonic-gate * ipc_action timer. 6467c478bd9Sstevel@tonic-gate * 6477c478bd9Sstevel@tonic-gate * o if the command completes normally and before a 6487c478bd9Sstevel@tonic-gate * timeout fires, then async_finish() is called. 6497c478bd9Sstevel@tonic-gate * if there was an associated ipc_action, 6507c478bd9Sstevel@tonic-gate * ipc_action_finish() is called to complete it. 6517c478bd9Sstevel@tonic-gate * 6527c478bd9Sstevel@tonic-gate * o if the command fails before a timeout fires, then 653d04ccbb3Scarlsonj * async_finish() is called, and the state machine is 6547c478bd9Sstevel@tonic-gate * is returned to a known state based on the command. 6557c478bd9Sstevel@tonic-gate * if there was an associated ipc_action, 6567c478bd9Sstevel@tonic-gate * ipc_action_finish() is called to complete it. 6577c478bd9Sstevel@tonic-gate * 6587c478bd9Sstevel@tonic-gate * o if the ipc_action timer fires before command 6597c478bd9Sstevel@tonic-gate * completion, then DHCP_IPC_E_TIMEOUT is returned to 6607c478bd9Sstevel@tonic-gate * the user. however, the transaction continues to 6617c478bd9Sstevel@tonic-gate * be carried out asynchronously. 6627c478bd9Sstevel@tonic-gate */ 6637c478bd9Sstevel@tonic-gate 664d04ccbb3Scarlsonj if (ipc_cmd_flags[ia.ia_cmd] & CMD_IMMED) { 665d04ccbb3Scarlsonj /* 666d04ccbb3Scarlsonj * Only immediate commands (ping, status, get_tag) need to 667d04ccbb3Scarlsonj * worry about freeing ia through one of the reply functions 668d04ccbb3Scarlsonj * before returning. 669d04ccbb3Scarlsonj */ 670d04ccbb3Scarlsonj iap = &ia; 671d04ccbb3Scarlsonj } else { 6727c478bd9Sstevel@tonic-gate /* 6737c478bd9Sstevel@tonic-gate * if shutdown request has been received, send back an error. 6747c478bd9Sstevel@tonic-gate */ 6757c478bd9Sstevel@tonic-gate if (shutdown_started) { 676d04ccbb3Scarlsonj send_error_reply(&ia, DHCP_IPC_E_OUTSTATE); 6777c478bd9Sstevel@tonic-gate return; 6787c478bd9Sstevel@tonic-gate } 6797c478bd9Sstevel@tonic-gate 680d04ccbb3Scarlsonj if (dsmp->dsm_dflags & DHCP_IF_BUSY) { 681d04ccbb3Scarlsonj send_error_reply(&ia, DHCP_IPC_E_PEND); 6827c478bd9Sstevel@tonic-gate return; 6837c478bd9Sstevel@tonic-gate } 6847c478bd9Sstevel@tonic-gate 685d04ccbb3Scarlsonj if (!ipc_action_start(dsmp, &ia)) { 6867c478bd9Sstevel@tonic-gate dhcpmsg(MSG_WARNING, "ipc_event: ipc_action_start " 687d04ccbb3Scarlsonj "failed for %s", dsmp->dsm_name); 688d04ccbb3Scarlsonj send_error_reply(&ia, DHCP_IPC_E_MEMORY); 6897c478bd9Sstevel@tonic-gate return; 6907c478bd9Sstevel@tonic-gate } 6917c478bd9Sstevel@tonic-gate 692d04ccbb3Scarlsonj /* Action structure consumed by above function */ 693d04ccbb3Scarlsonj iap = &dsmp->dsm_ia; 6947c478bd9Sstevel@tonic-gate } 6957c478bd9Sstevel@tonic-gate 696d04ccbb3Scarlsonj switch (iap->ia_cmd) { 6977c478bd9Sstevel@tonic-gate 6987c478bd9Sstevel@tonic-gate case DHCP_DROP: 699d04ccbb3Scarlsonj (void) script_start(dsmp, isv6 ? EVENT_DROP6 : EVENT_DROP, 700d04ccbb3Scarlsonj dhcp_drop, NULL, NULL); 701d04ccbb3Scarlsonj break; /* not an immediate function */ 7027c478bd9Sstevel@tonic-gate 7037c478bd9Sstevel@tonic-gate case DHCP_EXTEND: 704d04ccbb3Scarlsonj (void) dhcp_extending(dsmp); 7057c478bd9Sstevel@tonic-gate break; 7067c478bd9Sstevel@tonic-gate 7077c478bd9Sstevel@tonic-gate case DHCP_GET_TAG: { 7087c478bd9Sstevel@tonic-gate dhcp_optnum_t optnum; 709d04ccbb3Scarlsonj void *opt = NULL; 710d04ccbb3Scarlsonj uint_t optlen; 7117c478bd9Sstevel@tonic-gate boolean_t did_alloc = B_FALSE; 712d04ccbb3Scarlsonj PKT_LIST *ack = dsmp->dsm_ack; 7137c478bd9Sstevel@tonic-gate 7147c478bd9Sstevel@tonic-gate /* 7157c478bd9Sstevel@tonic-gate * verify the request makes sense. 7167c478bd9Sstevel@tonic-gate */ 7177c478bd9Sstevel@tonic-gate 718d04ccbb3Scarlsonj if (iap->ia_request->data_type != DHCP_TYPE_OPTNUM || 719d04ccbb3Scarlsonj iap->ia_request->data_length != sizeof (dhcp_optnum_t)) { 720d04ccbb3Scarlsonj send_error_reply(iap, DHCP_IPC_E_PROTO); 721d04ccbb3Scarlsonj break; 7227c478bd9Sstevel@tonic-gate } 7237c478bd9Sstevel@tonic-gate 724d04ccbb3Scarlsonj (void) memcpy(&optnum, iap->ia_request->buffer, 725d04ccbb3Scarlsonj sizeof (dhcp_optnum_t)); 726d04ccbb3Scarlsonj 7277c478bd9Sstevel@tonic-gate load_option: 7287c478bd9Sstevel@tonic-gate switch (optnum.category) { 7297c478bd9Sstevel@tonic-gate 7307c478bd9Sstevel@tonic-gate case DSYM_SITE: /* FALLTHRU */ 7317c478bd9Sstevel@tonic-gate case DSYM_STANDARD: 732d04ccbb3Scarlsonj if (isv6) { 733d04ccbb3Scarlsonj opt = dhcpv6_pkt_option(ack, NULL, optnum.code, 734d04ccbb3Scarlsonj NULL); 735d04ccbb3Scarlsonj } else { 736d04ccbb3Scarlsonj if (optnum.code <= DHCP_LAST_OPT) 737d04ccbb3Scarlsonj opt = ack->opts[optnum.code]; 738d04ccbb3Scarlsonj } 7397c478bd9Sstevel@tonic-gate break; 7407c478bd9Sstevel@tonic-gate 7417c478bd9Sstevel@tonic-gate case DSYM_VENDOR: 742d04ccbb3Scarlsonj if (isv6) { 743d04ccbb3Scarlsonj dhcpv6_option_t *d6o; 744d04ccbb3Scarlsonj uint32_t ent; 7457c478bd9Sstevel@tonic-gate 746d04ccbb3Scarlsonj /* 747d04ccbb3Scarlsonj * Look through vendor options to find our 748d04ccbb3Scarlsonj * enterprise number. 749d04ccbb3Scarlsonj */ 750d04ccbb3Scarlsonj d6o = NULL; 751d04ccbb3Scarlsonj for (;;) { 752d04ccbb3Scarlsonj d6o = dhcpv6_pkt_option(ack, d6o, 753d04ccbb3Scarlsonj DHCPV6_OPT_VENDOR_OPT, &optlen); 754d04ccbb3Scarlsonj if (d6o == NULL) 755d04ccbb3Scarlsonj break; 756d04ccbb3Scarlsonj optlen -= sizeof (*d6o); 757d04ccbb3Scarlsonj if (optlen < sizeof (ent)) 758d04ccbb3Scarlsonj continue; 759d04ccbb3Scarlsonj (void) memcpy(&ent, d6o + 1, 760d04ccbb3Scarlsonj sizeof (ent)); 761d04ccbb3Scarlsonj if (ntohl(ent) != DHCPV6_SUN_ENT) 762d04ccbb3Scarlsonj continue; 763d04ccbb3Scarlsonj break; 764d04ccbb3Scarlsonj } 765d04ccbb3Scarlsonj if (d6o != NULL) { 766d04ccbb3Scarlsonj /* 767d04ccbb3Scarlsonj * Now find the requested vendor option 768d04ccbb3Scarlsonj * within the vendor options block. 769d04ccbb3Scarlsonj */ 770d04ccbb3Scarlsonj opt = dhcpv6_find_option( 771d04ccbb3Scarlsonj (char *)(d6o + 1) + sizeof (ent), 772d04ccbb3Scarlsonj optlen - sizeof (ent), NULL, 773d04ccbb3Scarlsonj optnum.code, NULL); 774d04ccbb3Scarlsonj } 775d04ccbb3Scarlsonj } else { 776d04ccbb3Scarlsonj /* 777d04ccbb3Scarlsonj * the test against VS_OPTION_START is broken 778d04ccbb3Scarlsonj * up into two tests to avoid compiler warnings 779d04ccbb3Scarlsonj * under intel. 780d04ccbb3Scarlsonj */ 781d04ccbb3Scarlsonj if ((optnum.code > VS_OPTION_START || 782d04ccbb3Scarlsonj optnum.code == VS_OPTION_START) && 783d04ccbb3Scarlsonj optnum.code <= VS_OPTION_END) 784d04ccbb3Scarlsonj opt = ack->vs[optnum.code]; 785d04ccbb3Scarlsonj } 7867c478bd9Sstevel@tonic-gate break; 7877c478bd9Sstevel@tonic-gate 7887c478bd9Sstevel@tonic-gate case DSYM_FIELD: 789d04ccbb3Scarlsonj if (isv6) { 790d04ccbb3Scarlsonj dhcpv6_message_t *d6m = 791d04ccbb3Scarlsonj (dhcpv6_message_t *)ack->pkt; 792d04ccbb3Scarlsonj dhcpv6_option_t *d6o; 793d04ccbb3Scarlsonj 794d04ccbb3Scarlsonj /* Validate the packet field the user wants */ 795d04ccbb3Scarlsonj optlen = optnum.code + optnum.size; 796d04ccbb3Scarlsonj if (d6m->d6m_msg_type == 797d04ccbb3Scarlsonj DHCPV6_MSG_RELAY_FORW || 798d04ccbb3Scarlsonj d6m->d6m_msg_type == 799d04ccbb3Scarlsonj DHCPV6_MSG_RELAY_REPL) { 800d04ccbb3Scarlsonj if (optlen > sizeof (dhcpv6_relay_t)) 801d04ccbb3Scarlsonj break; 802d04ccbb3Scarlsonj } else { 803d04ccbb3Scarlsonj if (optlen > sizeof (*d6m)) 804d04ccbb3Scarlsonj break; 805d04ccbb3Scarlsonj } 806d04ccbb3Scarlsonj 807d04ccbb3Scarlsonj opt = malloc(sizeof (*d6o) + optnum.size); 808d04ccbb3Scarlsonj if (opt != NULL) { 809d04ccbb3Scarlsonj d6o = opt; 810d04ccbb3Scarlsonj d6o->d6o_code = htons(optnum.code); 811d04ccbb3Scarlsonj d6o->d6o_len = htons(optnum.size); 812d04ccbb3Scarlsonj (void) memcpy(d6o + 1, (caddr_t)d6m + 813d04ccbb3Scarlsonj optnum.code, optnum.size); 814d04ccbb3Scarlsonj } 815d04ccbb3Scarlsonj } else { 816d04ccbb3Scarlsonj if (optnum.code + optnum.size > sizeof (PKT)) 817d04ccbb3Scarlsonj break; 818d04ccbb3Scarlsonj 819d04ccbb3Scarlsonj /* 820d04ccbb3Scarlsonj * + 2 to account for option code and length 821d04ccbb3Scarlsonj * byte 822d04ccbb3Scarlsonj */ 823d04ccbb3Scarlsonj opt = malloc(optnum.size + 2); 824d04ccbb3Scarlsonj if (opt != NULL) { 825d04ccbb3Scarlsonj DHCP_OPT *v4opt = opt; 826d04ccbb3Scarlsonj 827d04ccbb3Scarlsonj v4opt->len = optnum.size; 828d04ccbb3Scarlsonj v4opt->code = optnum.code; 829d04ccbb3Scarlsonj (void) memcpy(v4opt->value, 830d04ccbb3Scarlsonj (caddr_t)ack->pkt + optnum.code, 831d04ccbb3Scarlsonj optnum.size); 832d04ccbb3Scarlsonj } 833d04ccbb3Scarlsonj } 8347c478bd9Sstevel@tonic-gate 8357c478bd9Sstevel@tonic-gate if (opt == NULL) { 836d04ccbb3Scarlsonj send_error_reply(iap, DHCP_IPC_E_MEMORY); 8377c478bd9Sstevel@tonic-gate return; 8387c478bd9Sstevel@tonic-gate } 8397c478bd9Sstevel@tonic-gate did_alloc = B_TRUE; 8407c478bd9Sstevel@tonic-gate break; 8417c478bd9Sstevel@tonic-gate 8427c478bd9Sstevel@tonic-gate default: 843d04ccbb3Scarlsonj send_error_reply(iap, DHCP_IPC_E_PROTO); 8447c478bd9Sstevel@tonic-gate return; 8457c478bd9Sstevel@tonic-gate } 8467c478bd9Sstevel@tonic-gate 8477c478bd9Sstevel@tonic-gate /* 8487c478bd9Sstevel@tonic-gate * return the option payload, if there was one. the "+ 2" 8497c478bd9Sstevel@tonic-gate * accounts for the option code number and length byte. 8507c478bd9Sstevel@tonic-gate */ 8517c478bd9Sstevel@tonic-gate 8527c478bd9Sstevel@tonic-gate if (opt != NULL) { 853d04ccbb3Scarlsonj if (isv6) { 854d04ccbb3Scarlsonj dhcpv6_option_t d6ov; 855d04ccbb3Scarlsonj 856d04ccbb3Scarlsonj (void) memcpy(&d6ov, opt, sizeof (d6ov)); 857d04ccbb3Scarlsonj optlen = ntohs(d6ov.d6o_len) + sizeof (d6ov); 858d04ccbb3Scarlsonj } else { 859d04ccbb3Scarlsonj optlen = ((DHCP_OPT *)opt)->len + 2; 860d04ccbb3Scarlsonj } 861d04ccbb3Scarlsonj send_data_reply(iap, 0, DHCP_TYPE_OPTION, opt, optlen); 8627c478bd9Sstevel@tonic-gate 8637c478bd9Sstevel@tonic-gate if (did_alloc) 8647c478bd9Sstevel@tonic-gate free(opt); 865d04ccbb3Scarlsonj break; 866d04ccbb3Scarlsonj } else if (ack != dsmp->dsm_orig_ack) { 8677c478bd9Sstevel@tonic-gate /* 8687c478bd9Sstevel@tonic-gate * There wasn't any definition for the option in the 8697c478bd9Sstevel@tonic-gate * current ack, so now retry with the original ack if 8707c478bd9Sstevel@tonic-gate * the original ack is not the current ack. 8717c478bd9Sstevel@tonic-gate */ 872d04ccbb3Scarlsonj ack = dsmp->dsm_orig_ack; 8737c478bd9Sstevel@tonic-gate goto load_option; 8747c478bd9Sstevel@tonic-gate } 8757c478bd9Sstevel@tonic-gate 8767c478bd9Sstevel@tonic-gate /* 8777c478bd9Sstevel@tonic-gate * note that an "okay" response is returned either in 8787c478bd9Sstevel@tonic-gate * the case of an unknown option or a known option 8797c478bd9Sstevel@tonic-gate * with no payload. this is okay (for now) since 8807c478bd9Sstevel@tonic-gate * dhcpinfo checks whether an option is valid before 8817c478bd9Sstevel@tonic-gate * ever performing ipc with the agent. 8827c478bd9Sstevel@tonic-gate */ 8837c478bd9Sstevel@tonic-gate 884d04ccbb3Scarlsonj send_ok_reply(iap); 885d04ccbb3Scarlsonj break; 8867c478bd9Sstevel@tonic-gate } 8877c478bd9Sstevel@tonic-gate 8887c478bd9Sstevel@tonic-gate case DHCP_INFORM: 889d04ccbb3Scarlsonj dhcp_inform(dsmp); 8907c478bd9Sstevel@tonic-gate /* next destination: dhcp_acknak() */ 891d04ccbb3Scarlsonj break; /* not an immediate function */ 8927c478bd9Sstevel@tonic-gate 8937c478bd9Sstevel@tonic-gate case DHCP_PING: 894d04ccbb3Scarlsonj if (dsmp->dsm_dflags & DHCP_IF_FAILED) 895d04ccbb3Scarlsonj send_error_reply(iap, DHCP_IPC_E_FAILEDIF); 8967c478bd9Sstevel@tonic-gate else 897d04ccbb3Scarlsonj send_ok_reply(iap); 898d04ccbb3Scarlsonj break; 8997c478bd9Sstevel@tonic-gate 9007c478bd9Sstevel@tonic-gate case DHCP_RELEASE: 901d04ccbb3Scarlsonj (void) script_start(dsmp, isv6 ? EVENT_RELEASE6 : 902d04ccbb3Scarlsonj EVENT_RELEASE, dhcp_release, "Finished with lease.", NULL); 903d04ccbb3Scarlsonj break; /* not an immediate function */ 904d04ccbb3Scarlsonj 905d04ccbb3Scarlsonj case DHCP_START: { 906d04ccbb3Scarlsonj PKT_LIST *ack, *oack; 907d04ccbb3Scarlsonj PKT_LIST *plp[2]; 9087c478bd9Sstevel@tonic-gate 909d04ccbb3Scarlsonj deprecate_leases(dsmp); 9107c478bd9Sstevel@tonic-gate 9117c478bd9Sstevel@tonic-gate /* 9127c478bd9Sstevel@tonic-gate * if we have a valid hostconf lying around, then jump 9137c478bd9Sstevel@tonic-gate * into INIT_REBOOT. if it fails, we'll end up going 9147c478bd9Sstevel@tonic-gate * through the whole selecting() procedure again. 9157c478bd9Sstevel@tonic-gate */ 9167c478bd9Sstevel@tonic-gate 917d04ccbb3Scarlsonj error = read_hostconf(dsmp->dsm_name, plp, 2, dsmp->dsm_isv6); 918d04ccbb3Scarlsonj ack = error > 0 ? plp[0] : NULL; 919d04ccbb3Scarlsonj oack = error > 1 ? plp[1] : NULL; 920d04ccbb3Scarlsonj 921d04ccbb3Scarlsonj /* 922d04ccbb3Scarlsonj * If the allocation of the old ack fails, that's fine; 923d04ccbb3Scarlsonj * continue without it. 924d04ccbb3Scarlsonj */ 925d04ccbb3Scarlsonj if (oack == NULL) 926d04ccbb3Scarlsonj oack = ack; 927d04ccbb3Scarlsonj 928d04ccbb3Scarlsonj /* 929d04ccbb3Scarlsonj * As long as we've allocated something, start using it. 930d04ccbb3Scarlsonj */ 931d04ccbb3Scarlsonj if (ack != NULL) { 932d04ccbb3Scarlsonj dsmp->dsm_orig_ack = oack; 933d04ccbb3Scarlsonj dsmp->dsm_ack = ack; 934d04ccbb3Scarlsonj dhcp_init_reboot(dsmp); 9357c478bd9Sstevel@tonic-gate /* next destination: dhcp_acknak() */ 936d04ccbb3Scarlsonj break; 9377c478bd9Sstevel@tonic-gate } 9387c478bd9Sstevel@tonic-gate 9397c478bd9Sstevel@tonic-gate /* 9407c478bd9Sstevel@tonic-gate * if not debugging, wait for a few seconds before 9417c478bd9Sstevel@tonic-gate * going into SELECTING. 9427c478bd9Sstevel@tonic-gate */ 9437c478bd9Sstevel@tonic-gate 944d04ccbb3Scarlsonj if (debug_level == 0 && 945d04ccbb3Scarlsonj iu_schedule_timer_ms(tq, lrand48() % DHCP_SELECT_WAIT, 946d04ccbb3Scarlsonj dhcp_start, dsmp) != -1) { 947d04ccbb3Scarlsonj hold_smach(dsmp); 948d04ccbb3Scarlsonj /* next destination: dhcp_start() */ 949d04ccbb3Scarlsonj break; 9507c478bd9Sstevel@tonic-gate } 9517c478bd9Sstevel@tonic-gate 952d04ccbb3Scarlsonj dhcp_selecting(dsmp); 9537c478bd9Sstevel@tonic-gate /* next destination: dhcp_requesting() */ 954d04ccbb3Scarlsonj break; 955d04ccbb3Scarlsonj } 9567c478bd9Sstevel@tonic-gate 9577c478bd9Sstevel@tonic-gate case DHCP_STATUS: { 9587c478bd9Sstevel@tonic-gate dhcp_status_t status; 959d04ccbb3Scarlsonj dhcp_lease_t *dlp; 960d04ccbb3Scarlsonj 961d04ccbb3Scarlsonj status.if_began = monosec_to_time(dsmp->dsm_curstart_monosec); 9627c478bd9Sstevel@tonic-gate 963d04ccbb3Scarlsonj /* 964d04ccbb3Scarlsonj * We return information on just the first lease as being 965d04ccbb3Scarlsonj * representative of the lot. A better status mechanism is 966d04ccbb3Scarlsonj * needed. 967d04ccbb3Scarlsonj */ 968d04ccbb3Scarlsonj dlp = dsmp->dsm_leases; 9697c478bd9Sstevel@tonic-gate 970d04ccbb3Scarlsonj if (dlp == NULL || 971d04ccbb3Scarlsonj dlp->dl_lifs->lif_expire.dt_start == DHCP_PERM) { 9727c478bd9Sstevel@tonic-gate status.if_t1 = DHCP_PERM; 9737c478bd9Sstevel@tonic-gate status.if_t2 = DHCP_PERM; 9747c478bd9Sstevel@tonic-gate status.if_lease = DHCP_PERM; 9757c478bd9Sstevel@tonic-gate } else { 976d04ccbb3Scarlsonj status.if_t1 = status.if_began + 977d04ccbb3Scarlsonj dlp->dl_t1.dt_start; 978d04ccbb3Scarlsonj status.if_t2 = status.if_began + 979d04ccbb3Scarlsonj dlp->dl_t2.dt_start; 980d04ccbb3Scarlsonj status.if_lease = status.if_began + 981d04ccbb3Scarlsonj dlp->dl_lifs->lif_expire.dt_start; 9827c478bd9Sstevel@tonic-gate } 9837c478bd9Sstevel@tonic-gate 9847c478bd9Sstevel@tonic-gate status.version = DHCP_STATUS_VER; 985d04ccbb3Scarlsonj status.if_state = dsmp->dsm_state; 986d04ccbb3Scarlsonj status.if_dflags = dsmp->dsm_dflags; 987d04ccbb3Scarlsonj status.if_sent = dsmp->dsm_sent; 988d04ccbb3Scarlsonj status.if_recv = dsmp->dsm_received; 989d04ccbb3Scarlsonj status.if_bad_offers = dsmp->dsm_bad_offers; 9907c478bd9Sstevel@tonic-gate 991d04ccbb3Scarlsonj (void) strlcpy(status.if_name, dsmp->dsm_name, IFNAMSIZ); 9927c478bd9Sstevel@tonic-gate 993d04ccbb3Scarlsonj send_data_reply(iap, 0, DHCP_TYPE_STATUS, &status, 9947c478bd9Sstevel@tonic-gate sizeof (dhcp_status_t)); 995d04ccbb3Scarlsonj break; 9967c478bd9Sstevel@tonic-gate } 9977c478bd9Sstevel@tonic-gate } 9987c478bd9Sstevel@tonic-gate } 99969bb4bb4Scarlsonj 100069bb4bb4Scarlsonj /* 100169bb4bb4Scarlsonj * check_rtm_addr(): determine if routing socket message matches interface 100269bb4bb4Scarlsonj * address 100369bb4bb4Scarlsonj * 1004d04ccbb3Scarlsonj * input: const struct if_msghdr *: pointer to routing socket message 1005d04ccbb3Scarlsonj * int: routing socket message length 1006d04ccbb3Scarlsonj * boolean_t: set to B_TRUE if IPv6 1007d04ccbb3Scarlsonj * const in6_addr_t *: pointer to IP address 1008d04ccbb3Scarlsonj * output: boolean_t: B_TRUE if address is a match 100969bb4bb4Scarlsonj */ 1010d04ccbb3Scarlsonj 101169bb4bb4Scarlsonj static boolean_t 1012d04ccbb3Scarlsonj check_rtm_addr(const struct ifa_msghdr *ifam, int msglen, boolean_t isv6, 1013d04ccbb3Scarlsonj const in6_addr_t *addr) 101469bb4bb4Scarlsonj { 1015d04ccbb3Scarlsonj const char *cp, *lim; 101669bb4bb4Scarlsonj uint_t flag; 1017d04ccbb3Scarlsonj const struct sockaddr *sa; 101869bb4bb4Scarlsonj 101969bb4bb4Scarlsonj if (!(ifam->ifam_addrs & RTA_IFA)) 102069bb4bb4Scarlsonj return (B_FALSE); 102169bb4bb4Scarlsonj 1022d04ccbb3Scarlsonj cp = (const char *)(ifam + 1); 1023d04ccbb3Scarlsonj lim = (const char *)ifam + msglen; 102469bb4bb4Scarlsonj for (flag = 1; flag < RTA_IFA; flag <<= 1) { 102569bb4bb4Scarlsonj if (ifam->ifam_addrs & flag) { 102669bb4bb4Scarlsonj /* LINTED: alignment */ 1027d04ccbb3Scarlsonj sa = (const struct sockaddr *)cp; 1028d04ccbb3Scarlsonj if ((const char *)(sa + 1) > lim) 102969bb4bb4Scarlsonj return (B_FALSE); 103069bb4bb4Scarlsonj switch (sa->sa_family) { 103169bb4bb4Scarlsonj case AF_INET: 103269bb4bb4Scarlsonj cp += sizeof (struct sockaddr_in); 103369bb4bb4Scarlsonj break; 103469bb4bb4Scarlsonj case AF_LINK: 103569bb4bb4Scarlsonj cp += sizeof (struct sockaddr_dl); 103669bb4bb4Scarlsonj break; 103769bb4bb4Scarlsonj case AF_INET6: 103869bb4bb4Scarlsonj cp += sizeof (struct sockaddr_in6); 103969bb4bb4Scarlsonj break; 104069bb4bb4Scarlsonj default: 104169bb4bb4Scarlsonj cp += sizeof (struct sockaddr); 104269bb4bb4Scarlsonj break; 104369bb4bb4Scarlsonj } 104469bb4bb4Scarlsonj } 104569bb4bb4Scarlsonj } 1046d04ccbb3Scarlsonj if (isv6) { 1047d04ccbb3Scarlsonj const struct sockaddr_in6 *sin6; 1048d04ccbb3Scarlsonj 1049d04ccbb3Scarlsonj /* LINTED: alignment */ 1050d04ccbb3Scarlsonj sin6 = (const struct sockaddr_in6 *)cp; 1051d04ccbb3Scarlsonj if ((const char *)(sin6 + 1) > lim) 1052d04ccbb3Scarlsonj return (B_FALSE); 1053d04ccbb3Scarlsonj if (sin6->sin6_family != AF_INET6) 1054d04ccbb3Scarlsonj return (B_FALSE); 1055d04ccbb3Scarlsonj return (IN6_ARE_ADDR_EQUAL(&sin6->sin6_addr, addr)); 1056d04ccbb3Scarlsonj } else { 1057d04ccbb3Scarlsonj const struct sockaddr_in *sinp; 1058d04ccbb3Scarlsonj ipaddr_t v4addr; 1059d04ccbb3Scarlsonj 1060d04ccbb3Scarlsonj /* LINTED: alignment */ 1061d04ccbb3Scarlsonj sinp = (const struct sockaddr_in *)cp; 1062d04ccbb3Scarlsonj if ((const char *)(sinp + 1) > lim) 1063d04ccbb3Scarlsonj return (B_FALSE); 1064d04ccbb3Scarlsonj if (sinp->sin_family != AF_INET) 1065d04ccbb3Scarlsonj return (B_FALSE); 1066d04ccbb3Scarlsonj IN6_V4MAPPED_TO_IPADDR(addr, v4addr); 1067d04ccbb3Scarlsonj return (sinp->sin_addr.s_addr == v4addr); 1068d04ccbb3Scarlsonj } 1069d04ccbb3Scarlsonj } 1070d04ccbb3Scarlsonj 1071d04ccbb3Scarlsonj /* 1072d04ccbb3Scarlsonj * is_rtm_v6(): determine if routing socket message is IPv6 1073d04ccbb3Scarlsonj * 1074d04ccbb3Scarlsonj * input: struct ifa_msghdr *: pointer to routing socket message 1075d04ccbb3Scarlsonj * int: message length 1076d04ccbb3Scarlsonj * output: boolean_t 1077d04ccbb3Scarlsonj */ 1078d04ccbb3Scarlsonj 1079d04ccbb3Scarlsonj static boolean_t 1080d04ccbb3Scarlsonj is_rtm_v6(const struct ifa_msghdr *ifam, int msglen) 1081d04ccbb3Scarlsonj { 1082d04ccbb3Scarlsonj const char *cp, *lim; 1083d04ccbb3Scarlsonj uint_t flag; 1084d04ccbb3Scarlsonj const struct sockaddr *sa; 1085d04ccbb3Scarlsonj 1086d04ccbb3Scarlsonj cp = (const char *)(ifam + 1); 1087d04ccbb3Scarlsonj lim = (const char *)ifam + msglen; 1088d04ccbb3Scarlsonj for (flag = ifam->ifam_addrs; flag != 0; flag &= flag - 1) { 1089d04ccbb3Scarlsonj /* LINTED: alignment */ 1090d04ccbb3Scarlsonj sa = (const struct sockaddr *)cp; 1091d04ccbb3Scarlsonj if ((const char *)(sa + 1) > lim) 1092d04ccbb3Scarlsonj return (B_FALSE); 1093d04ccbb3Scarlsonj switch (sa->sa_family) { 1094d04ccbb3Scarlsonj case AF_INET: 1095d04ccbb3Scarlsonj return (B_FALSE); 1096d04ccbb3Scarlsonj case AF_LINK: 1097d04ccbb3Scarlsonj cp += sizeof (struct sockaddr_dl); 1098d04ccbb3Scarlsonj break; 1099d04ccbb3Scarlsonj case AF_INET6: 1100d04ccbb3Scarlsonj return (B_TRUE); 1101d04ccbb3Scarlsonj default: 1102d04ccbb3Scarlsonj cp += sizeof (struct sockaddr); 1103d04ccbb3Scarlsonj break; 1104d04ccbb3Scarlsonj } 1105d04ccbb3Scarlsonj } 1106d04ccbb3Scarlsonj return (B_FALSE); 1107d04ccbb3Scarlsonj } 1108d04ccbb3Scarlsonj 1109d04ccbb3Scarlsonj /* 1110d04ccbb3Scarlsonj * check_lif(): check the state of a given logical interface and its DHCP 1111d04ccbb3Scarlsonj * lease. We've been told by the routing socket that the 1112d04ccbb3Scarlsonj * corresponding ifIndex has changed. This may mean that DAD has 1113d04ccbb3Scarlsonj * completed or failed. 1114d04ccbb3Scarlsonj * 1115d04ccbb3Scarlsonj * input: dhcp_lif_t *: pointer to the LIF 1116d04ccbb3Scarlsonj * const struct ifa_msghdr *: routing socket message 1117d04ccbb3Scarlsonj * int: size of routing socket message 1118d04ccbb3Scarlsonj * output: boolean_t: B_TRUE if DAD has completed on this interface 1119d04ccbb3Scarlsonj */ 1120d04ccbb3Scarlsonj 1121d04ccbb3Scarlsonj static boolean_t 1122d04ccbb3Scarlsonj check_lif(dhcp_lif_t *lif, const struct ifa_msghdr *ifam, int msglen) 1123d04ccbb3Scarlsonj { 1124d04ccbb3Scarlsonj boolean_t isv6, dad_wait, unplumb; 1125d04ccbb3Scarlsonj int fd; 1126d04ccbb3Scarlsonj struct lifreq lifr; 1127d04ccbb3Scarlsonj 1128d04ccbb3Scarlsonj isv6 = lif->lif_pif->pif_isv6; 1129d04ccbb3Scarlsonj fd = isv6 ? v6_sock_fd : v4_sock_fd; 1130d04ccbb3Scarlsonj 1131d04ccbb3Scarlsonj /* 1132d04ccbb3Scarlsonj * Get the real (64 bit) logical interface flags. Note that the 1133d04ccbb3Scarlsonj * routing socket message has flags, but these are just the lower 32 1134d04ccbb3Scarlsonj * bits. 1135d04ccbb3Scarlsonj */ 1136d04ccbb3Scarlsonj unplumb = B_FALSE; 1137d04ccbb3Scarlsonj (void) memset(&lifr, 0, sizeof (lifr)); 1138d04ccbb3Scarlsonj (void) strlcpy(lifr.lifr_name, lif->lif_name, sizeof (lifr.lifr_name)); 1139d04ccbb3Scarlsonj if (ioctl(fd, SIOCGLIFFLAGS, &lifr) == -1) { 1140d04ccbb3Scarlsonj /* 1141d04ccbb3Scarlsonj * Failing to retrieve flags means that the interface is gone. 1142d04ccbb3Scarlsonj * It hasn't failed to verify with DAD, but we still have to 1143d04ccbb3Scarlsonj * give up on it. 1144d04ccbb3Scarlsonj */ 1145d04ccbb3Scarlsonj lifr.lifr_flags = 0; 1146d04ccbb3Scarlsonj if (errno == ENXIO) { 1147d04ccbb3Scarlsonj lif->lif_plumbed = B_FALSE; 1148d04ccbb3Scarlsonj dhcpmsg(MSG_INFO, "%s has been removed; abandoning", 1149d04ccbb3Scarlsonj lif->lif_name); 1150d04ccbb3Scarlsonj } else { 1151d04ccbb3Scarlsonj dhcpmsg(MSG_ERR, 1152d04ccbb3Scarlsonj "unable to retrieve interface flags on %s", 1153d04ccbb3Scarlsonj lif->lif_name); 1154d04ccbb3Scarlsonj } 1155d04ccbb3Scarlsonj unplumb = B_TRUE; 1156d04ccbb3Scarlsonj } else if (!check_rtm_addr(ifam, msglen, isv6, &lif->lif_v6addr)) { 1157d04ccbb3Scarlsonj /* 1158d04ccbb3Scarlsonj * If the message is not about this logical interface, 1159d04ccbb3Scarlsonj * then just ignore it. 1160d04ccbb3Scarlsonj */ 116169bb4bb4Scarlsonj return (B_FALSE); 1162d04ccbb3Scarlsonj } else if (lifr.lifr_flags & IFF_DUPLICATE) { 1163d04ccbb3Scarlsonj dhcpmsg(MSG_ERROR, "interface %s has duplicate address", 1164d04ccbb3Scarlsonj lif->lif_name); 1165d04ccbb3Scarlsonj lif_mark_decline(lif, "duplicate address"); 1166d04ccbb3Scarlsonj close_ip_lif(lif); 1167d04ccbb3Scarlsonj } 1168d04ccbb3Scarlsonj 1169d04ccbb3Scarlsonj dad_wait = lif->lif_dad_wait; 1170d04ccbb3Scarlsonj if (dad_wait) { 1171d04ccbb3Scarlsonj dhcpmsg(MSG_VERBOSE, "check_lif: %s has finished DAD", 1172d04ccbb3Scarlsonj lif->lif_name); 1173d04ccbb3Scarlsonj lif->lif_dad_wait = B_FALSE; 1174d04ccbb3Scarlsonj } 1175d04ccbb3Scarlsonj 1176d04ccbb3Scarlsonj if (unplumb) 1177d04ccbb3Scarlsonj unplumb_lif(lif); 1178d04ccbb3Scarlsonj 1179d04ccbb3Scarlsonj return (dad_wait); 1180d04ccbb3Scarlsonj } 1181d04ccbb3Scarlsonj 1182d04ccbb3Scarlsonj /* 1183d04ccbb3Scarlsonj * check_main_lif(): check the state of a main logical interface for a state 1184d04ccbb3Scarlsonj * machine. This is used only for DHCPv6. 1185d04ccbb3Scarlsonj * 1186d04ccbb3Scarlsonj * input: dhcp_smach_t *: pointer to the state machine 1187d04ccbb3Scarlsonj * const struct ifa_msghdr *: routing socket message 1188d04ccbb3Scarlsonj * int: size of routing socket message 1189d04ccbb3Scarlsonj * output: boolean_t: B_TRUE if LIF is ok. 1190d04ccbb3Scarlsonj */ 1191d04ccbb3Scarlsonj 1192d04ccbb3Scarlsonj static boolean_t 1193d04ccbb3Scarlsonj check_main_lif(dhcp_smach_t *dsmp, const struct ifa_msghdr *ifam, int msglen) 1194d04ccbb3Scarlsonj { 1195d04ccbb3Scarlsonj dhcp_lif_t *lif = dsmp->dsm_lif; 1196d04ccbb3Scarlsonj struct lifreq lifr; 1197d04ccbb3Scarlsonj 1198d04ccbb3Scarlsonj /* 1199d04ccbb3Scarlsonj * Get the real (64 bit) logical interface flags. Note that the 1200d04ccbb3Scarlsonj * routing socket message has flags, but these are just the lower 32 1201d04ccbb3Scarlsonj * bits. 1202d04ccbb3Scarlsonj */ 1203d04ccbb3Scarlsonj (void) memset(&lifr, 0, sizeof (lifr)); 1204d04ccbb3Scarlsonj (void) strlcpy(lifr.lifr_name, lif->lif_name, sizeof (lifr.lifr_name)); 1205d04ccbb3Scarlsonj if (ioctl(v6_sock_fd, SIOCGLIFFLAGS, &lifr) == -1) { 1206d04ccbb3Scarlsonj /* 1207d04ccbb3Scarlsonj * Failing to retrieve flags means that the interface is gone. 1208d04ccbb3Scarlsonj * Our state machine is now trash. 1209d04ccbb3Scarlsonj */ 1210d04ccbb3Scarlsonj if (errno == ENXIO) { 1211d04ccbb3Scarlsonj dhcpmsg(MSG_INFO, "%s has been removed; abandoning", 1212d04ccbb3Scarlsonj lif->lif_name); 1213d04ccbb3Scarlsonj } else { 1214d04ccbb3Scarlsonj dhcpmsg(MSG_ERR, 1215d04ccbb3Scarlsonj "unable to retrieve interface flags on %s", 1216d04ccbb3Scarlsonj lif->lif_name); 1217d04ccbb3Scarlsonj } 1218d04ccbb3Scarlsonj return (B_FALSE); 1219d04ccbb3Scarlsonj } else if (!check_rtm_addr(ifam, msglen, B_TRUE, &lif->lif_v6addr)) { 1220d04ccbb3Scarlsonj /* 1221d04ccbb3Scarlsonj * If the message is not about this logical interface, 1222d04ccbb3Scarlsonj * then just ignore it. 1223d04ccbb3Scarlsonj */ 1224d04ccbb3Scarlsonj return (B_TRUE); 1225d04ccbb3Scarlsonj } else if (lifr.lifr_flags & IFF_DUPLICATE) { 1226d04ccbb3Scarlsonj dhcpmsg(MSG_ERROR, "interface %s has duplicate address", 1227d04ccbb3Scarlsonj lif->lif_name); 1228d04ccbb3Scarlsonj return (B_FALSE); 1229d04ccbb3Scarlsonj } else { 1230d04ccbb3Scarlsonj return (B_TRUE); 1231d04ccbb3Scarlsonj } 1232d04ccbb3Scarlsonj } 1233d04ccbb3Scarlsonj 1234d04ccbb3Scarlsonj /* 1235d04ccbb3Scarlsonj * process_link_up_down(): check the state of a physical interface for up/down 1236d04ccbb3Scarlsonj * transitions; must go through INIT_REBOOT state if 1237d04ccbb3Scarlsonj * the link flaps. 1238d04ccbb3Scarlsonj * 1239d04ccbb3Scarlsonj * input: dhcp_pif_t *: pointer to the physical interface to check 1240d04ccbb3Scarlsonj * const struct if_msghdr *: routing socket message 1241d04ccbb3Scarlsonj * output: none 1242d04ccbb3Scarlsonj */ 1243d04ccbb3Scarlsonj 1244d04ccbb3Scarlsonj static void 1245d04ccbb3Scarlsonj process_link_up_down(dhcp_pif_t *pif, const struct if_msghdr *ifm) 1246d04ccbb3Scarlsonj { 1247d04ccbb3Scarlsonj struct lifreq lifr; 1248d04ccbb3Scarlsonj boolean_t isv6; 1249d04ccbb3Scarlsonj int fd; 1250d04ccbb3Scarlsonj 1251d04ccbb3Scarlsonj /* 1252d04ccbb3Scarlsonj * If the message implies no change of flags, then we're done; no need 1253d04ccbb3Scarlsonj * to check further. Note that if we have multiple state machines on a 1254d04ccbb3Scarlsonj * single physical interface, this test keeps us from issuing an ioctl 1255d04ccbb3Scarlsonj * for each one. 1256d04ccbb3Scarlsonj */ 1257d04ccbb3Scarlsonj if ((ifm->ifm_flags & IFF_RUNNING) && pif->pif_running || 1258d04ccbb3Scarlsonj !(ifm->ifm_flags & IFF_RUNNING) && !pif->pif_running) 1259d04ccbb3Scarlsonj return; 1260d04ccbb3Scarlsonj 1261d04ccbb3Scarlsonj /* 1262d04ccbb3Scarlsonj * We don't know what the real interface flags are, because the 1263d04ccbb3Scarlsonj * if_index number is only 16 bits; we must go ask. 1264d04ccbb3Scarlsonj */ 1265d04ccbb3Scarlsonj isv6 = pif->pif_isv6; 1266d04ccbb3Scarlsonj fd = isv6 ? v6_sock_fd : v4_sock_fd; 1267d04ccbb3Scarlsonj (void) memset(&lifr, 0, sizeof (lifr)); 1268d04ccbb3Scarlsonj (void) strlcpy(lifr.lifr_name, pif->pif_name, sizeof (lifr.lifr_name)); 1269d04ccbb3Scarlsonj 1270d04ccbb3Scarlsonj if (ioctl(fd, SIOCGLIFFLAGS, &lifr) == -1 || 1271d04ccbb3Scarlsonj !(lifr.lifr_flags & IFF_RUNNING)) { 1272d04ccbb3Scarlsonj /* 1273d04ccbb3Scarlsonj * If we've lost the interface or it has gone down, then 1274d04ccbb3Scarlsonj * nothing special to do; just turn off the running flag. 1275d04ccbb3Scarlsonj */ 1276d04ccbb3Scarlsonj pif_status(pif, B_FALSE); 1277d04ccbb3Scarlsonj } else { 1278d04ccbb3Scarlsonj /* 1279d04ccbb3Scarlsonj * Interface has come back up: go through verification process. 1280d04ccbb3Scarlsonj */ 1281d04ccbb3Scarlsonj pif_status(pif, B_TRUE); 1282d04ccbb3Scarlsonj } 128369bb4bb4Scarlsonj } 128469bb4bb4Scarlsonj 128569bb4bb4Scarlsonj /* 128669bb4bb4Scarlsonj * rtsock_event(): fetches routing socket messages and updates internal 128769bb4bb4Scarlsonj * interface state based on those messages. 128869bb4bb4Scarlsonj * 128969bb4bb4Scarlsonj * input: iu_eh_t *: unused 129069bb4bb4Scarlsonj * int: the routing socket file descriptor 129169bb4bb4Scarlsonj * (other arguments unused) 129269bb4bb4Scarlsonj * output: void 129369bb4bb4Scarlsonj */ 129469bb4bb4Scarlsonj 129569bb4bb4Scarlsonj /* ARGSUSED */ 129669bb4bb4Scarlsonj static void 129769bb4bb4Scarlsonj rtsock_event(iu_eh_t *ehp, int fd, short events, iu_event_id_t id, void *arg) 129869bb4bb4Scarlsonj { 1299d04ccbb3Scarlsonj dhcp_smach_t *dsmp, *dsmnext; 130069bb4bb4Scarlsonj union { 130169bb4bb4Scarlsonj struct ifa_msghdr ifam; 1302d04ccbb3Scarlsonj struct if_msghdr ifm; 130369bb4bb4Scarlsonj char buf[1024]; 130469bb4bb4Scarlsonj } msg; 130569bb4bb4Scarlsonj uint16_t ifindex; 130669bb4bb4Scarlsonj int msglen; 1307d04ccbb3Scarlsonj boolean_t isv6; 130869bb4bb4Scarlsonj 130969bb4bb4Scarlsonj if ((msglen = read(fd, &msg, sizeof (msg))) <= 0) 131069bb4bb4Scarlsonj return; 131169bb4bb4Scarlsonj 1312d04ccbb3Scarlsonj /* Note that the routing socket interface index is just 16 bits */ 1313d04ccbb3Scarlsonj if (msg.ifm.ifm_type == RTM_IFINFO) { 1314d04ccbb3Scarlsonj ifindex = msg.ifm.ifm_index; 1315d04ccbb3Scarlsonj isv6 = (msg.ifm.ifm_flags & IFF_IPV6) ? B_TRUE : B_FALSE; 1316d04ccbb3Scarlsonj } else if (msg.ifam.ifam_type == RTM_DELADDR || 1317d04ccbb3Scarlsonj msg.ifam.ifam_type == RTM_NEWADDR) { 1318d04ccbb3Scarlsonj ifindex = msg.ifam.ifam_index; 1319d04ccbb3Scarlsonj isv6 = is_rtm_v6(&msg.ifam, msglen); 1320d04ccbb3Scarlsonj } else { 132169bb4bb4Scarlsonj return; 1322d04ccbb3Scarlsonj } 132369bb4bb4Scarlsonj 1324d04ccbb3Scarlsonj for (dsmp = lookup_smach_by_uindex(ifindex, NULL, isv6); 1325d04ccbb3Scarlsonj dsmp != NULL; dsmp = dsmnext) { 1326d04ccbb3Scarlsonj DHCPSTATE oldstate; 1327d04ccbb3Scarlsonj boolean_t lif_finished; 1328d04ccbb3Scarlsonj boolean_t lease_removed; 1329d04ccbb3Scarlsonj dhcp_lease_t *dlp, *dlnext; 133069bb4bb4Scarlsonj 1331d04ccbb3Scarlsonj /* 1332d04ccbb3Scarlsonj * Note that script_start can call dhcp_drop directly, and 1333d04ccbb3Scarlsonj * that will do release_smach. 1334d04ccbb3Scarlsonj */ 1335d04ccbb3Scarlsonj dsmnext = lookup_smach_by_uindex(ifindex, dsmp, isv6); 1336d04ccbb3Scarlsonj oldstate = dsmp->dsm_state; 133769bb4bb4Scarlsonj 133869bb4bb4Scarlsonj /* 1339d04ccbb3Scarlsonj * Look for link up/down notifications. These occur on a 1340d04ccbb3Scarlsonj * physical interface basis. 134169bb4bb4Scarlsonj */ 1342d04ccbb3Scarlsonj if (msg.ifm.ifm_type == RTM_IFINFO) { 1343d04ccbb3Scarlsonj process_link_up_down(dsmp->dsm_lif->lif_pif, &msg.ifm); 134469bb4bb4Scarlsonj continue; 1345d04ccbb3Scarlsonj } 134669bb4bb4Scarlsonj 134769bb4bb4Scarlsonj /* 134869bb4bb4Scarlsonj * Since we cannot trust the flags reported by the routing 134969bb4bb4Scarlsonj * socket (they're just 32 bits -- and thus never include 135069bb4bb4Scarlsonj * IFF_DUPLICATE), and we can't trust the ifindex (it's only 16 135169bb4bb4Scarlsonj * bits and also doesn't reflect the alias in use), we get 135269bb4bb4Scarlsonj * flags on all matching interfaces, and go by that. 135369bb4bb4Scarlsonj */ 1354d04ccbb3Scarlsonj lif_finished = B_FALSE; 1355d04ccbb3Scarlsonj lease_removed = B_FALSE; 1356d04ccbb3Scarlsonj for (dlp = dsmp->dsm_leases; dlp != NULL; dlp = dlnext) { 1357d04ccbb3Scarlsonj dhcp_lif_t *lif, *lifnext; 1358d04ccbb3Scarlsonj uint_t nlifs = dlp->dl_nlifs; 1359d04ccbb3Scarlsonj 1360d04ccbb3Scarlsonj dlnext = dlp->dl_next; 1361d04ccbb3Scarlsonj for (lif = dlp->dl_lifs; lif != NULL && nlifs > 0; 1362d04ccbb3Scarlsonj lif = lifnext, nlifs--) { 1363d04ccbb3Scarlsonj lifnext = lif->lif_next; 1364d04ccbb3Scarlsonj if (check_lif(lif, &msg.ifam, msglen)) { 1365d04ccbb3Scarlsonj dsmp->dsm_lif_wait--; 1366d04ccbb3Scarlsonj lif_finished = B_TRUE; 1367d04ccbb3Scarlsonj } 1368d04ccbb3Scarlsonj } 1369d04ccbb3Scarlsonj if (dlp->dl_nlifs == 0) { 1370d04ccbb3Scarlsonj remove_lease(dlp); 1371d04ccbb3Scarlsonj lease_removed = B_TRUE; 1372dc041e83Scarlsonj } 137369bb4bb4Scarlsonj } 137469bb4bb4Scarlsonj 1375d04ccbb3Scarlsonj if ((isv6 && !check_main_lif(dsmp, &msg.ifam, msglen)) || 1376d04ccbb3Scarlsonj (!isv6 && !verify_lif(dsmp->dsm_lif))) { 1377d04ccbb3Scarlsonj if (dsmp->dsm_script_pid != -1) 1378d04ccbb3Scarlsonj script_stop(dsmp); 1379d04ccbb3Scarlsonj (void) script_start(dsmp, EVENT_DROP6, dhcp_drop, NULL, 1380d04ccbb3Scarlsonj NULL); 1381d04ccbb3Scarlsonj continue; 138269bb4bb4Scarlsonj } 138369bb4bb4Scarlsonj 138469bb4bb4Scarlsonj /* 1385d04ccbb3Scarlsonj * Ignore this state machine if nothing interesting has 1386d04ccbb3Scarlsonj * happened. 1387d04ccbb3Scarlsonj */ 1388d04ccbb3Scarlsonj if (!lif_finished && dsmp->dsm_lif_down == 0 && 1389d04ccbb3Scarlsonj (dsmp->dsm_leases != NULL || !lease_removed)) 1390d04ccbb3Scarlsonj continue; 1391d04ccbb3Scarlsonj 1392d04ccbb3Scarlsonj /* 1393d04ccbb3Scarlsonj * If we're still waiting for DAD to complete on some of the 1394d04ccbb3Scarlsonj * configured LIFs, then don't send a response. 139569bb4bb4Scarlsonj */ 1396d04ccbb3Scarlsonj if (dsmp->dsm_lif_wait != 0) { 1397d04ccbb3Scarlsonj dhcpmsg(MSG_VERBOSE, "rtsock_event: %s still has %d " 1398d04ccbb3Scarlsonj "LIFs waiting on DAD", dsmp->dsm_name, 1399d04ccbb3Scarlsonj dsmp->dsm_lif_wait); 1400d04ccbb3Scarlsonj continue; 1401d04ccbb3Scarlsonj } 140269bb4bb4Scarlsonj 1403d04ccbb3Scarlsonj /* 1404d04ccbb3Scarlsonj * If we have some failed LIFs, then handle them now. We'll 1405d04ccbb3Scarlsonj * remove them from the list. Any leases that become empty are 1406d04ccbb3Scarlsonj * also removed as part of the decline-generation process. 1407d04ccbb3Scarlsonj */ 1408d04ccbb3Scarlsonj if (dsmp->dsm_lif_down != 0) { 1409d04ccbb3Scarlsonj /* 1410d04ccbb3Scarlsonj * We need to switch back to PRE_BOUND state so that 1411d04ccbb3Scarlsonj * send_pkt_internal() uses DLPI instead of sockets. 1412d04ccbb3Scarlsonj * Our logical interface has already been torn down by 1413d04ccbb3Scarlsonj * the kernel, and thus we can't send DHCPDECLINE by 1414d04ccbb3Scarlsonj * way of regular IP. (Unless we're adopting -- allow 1415d04ccbb3Scarlsonj * the grandparent to be handled as expected.) 1416d04ccbb3Scarlsonj */ 1417d04ccbb3Scarlsonj if (oldstate != ADOPTING) { 1418d04ccbb3Scarlsonj (void) set_smach_state(dsmp, PRE_BOUND); 1419d04ccbb3Scarlsonj } 1420d04ccbb3Scarlsonj send_declines(dsmp); 1421d04ccbb3Scarlsonj } 142269bb4bb4Scarlsonj 1423d04ccbb3Scarlsonj if (dsmp->dsm_leases == NULL) { 1424d04ccbb3Scarlsonj dsmp->dsm_bad_offers++; 1425d04ccbb3Scarlsonj /* 1426d04ccbb3Scarlsonj * For DHCPv6, we'll process the restart once we're 1427d04ccbb3Scarlsonj * done sending Decline messages, because these are 1428d04ccbb3Scarlsonj * supposed to be acknowledged. With DHCPv4, there's 1429d04ccbb3Scarlsonj * no acknowledgment for a DECLINE, so after sending 1430d04ccbb3Scarlsonj * it, we just restart right away. 1431d04ccbb3Scarlsonj */ 1432d04ccbb3Scarlsonj if (!dsmp->dsm_isv6) { 1433d04ccbb3Scarlsonj dhcpmsg(MSG_VERBOSE, "rtsock_event: %s has no " 1434d04ccbb3Scarlsonj "LIFs left; restarting", dsmp->dsm_name); 1435d04ccbb3Scarlsonj dhcp_restart(dsmp); 1436d04ccbb3Scarlsonj } 1437d04ccbb3Scarlsonj } else { 1438d04ccbb3Scarlsonj /* 1439d04ccbb3Scarlsonj * If we're now up on at least some of the leases and 1440d04ccbb3Scarlsonj * we were waiting for that, then kick off the rest of 1441d04ccbb3Scarlsonj * configuration. Lease validation and DAD are done. 1442d04ccbb3Scarlsonj */ 1443d04ccbb3Scarlsonj dhcpmsg(MSG_VERBOSE, "rtsock_event: all LIFs verified " 1444d04ccbb3Scarlsonj "on %s in %s state", dsmp->dsm_name, 1445d04ccbb3Scarlsonj dhcp_state_to_string(oldstate)); 1446d04ccbb3Scarlsonj if (oldstate == PRE_BOUND || 1447d04ccbb3Scarlsonj oldstate == ADOPTING) 1448d04ccbb3Scarlsonj dhcp_bound_complete(dsmp); 1449d04ccbb3Scarlsonj if (oldstate == ADOPTING) 1450d04ccbb3Scarlsonj dhcp_adopt_complete(dsmp); 1451d04ccbb3Scarlsonj } 145269bb4bb4Scarlsonj } 145369bb4bb4Scarlsonj } 1454d04ccbb3Scarlsonj 1455d04ccbb3Scarlsonj /* 1456d04ccbb3Scarlsonj * check_cmd_allowed(): check whether the requested command is allowed in the 1457d04ccbb3Scarlsonj * state specified. 1458d04ccbb3Scarlsonj * 1459d04ccbb3Scarlsonj * input: DHCPSTATE: current state 1460d04ccbb3Scarlsonj * dhcp_ipc_type_t: requested command 1461d04ccbb3Scarlsonj * output: boolean_t: B_TRUE if command is allowed in this state 1462d04ccbb3Scarlsonj */ 1463d04ccbb3Scarlsonj 1464d04ccbb3Scarlsonj boolean_t 1465d04ccbb3Scarlsonj check_cmd_allowed(DHCPSTATE state, dhcp_ipc_type_t cmd) 1466d04ccbb3Scarlsonj { 1467d04ccbb3Scarlsonj return (ipc_cmd_allowed[state][cmd] != 0); 1468d04ccbb3Scarlsonj } 1469