#include <XrdDigAuth.hh>

Collaboration diagram for XrdDigAuth:

Public Member Functions
	XrdDigAuth ()

	~XrdDigAuth ()

bool	Authorize (const XrdSecEntity *client, XrdDigAuthEnt::aType aType, bool aVec[XrdDigAuthEnt::aNum]=0)

bool	Configure (const char *aFN)

Detailed Description

Definition at line 68 of file XrdDigAuth.hh.

Constructor & Destructor Documentation

◆ XrdDigAuth()

XrdDigAuth::XrdDigAuth ( )

inline

Definition at line 79 of file XrdDigAuth.hh.

79 : authFN(0), authTOD(0), authCHK(0), authList(0) {}

◆ ~XrdDigAuth()

XrdDigAuth::~XrdDigAuth ( )

inline

Definition at line 80 of file XrdDigAuth.hh.

80 {}

Member Function Documentation

◆ Authorize()

bool XrdDigAuth::Authorize	(	const XrdSecEntity *	client,
		XrdDigAuthEnt::aType	aType,
		bool	aVec[XrdDigAuthEnt::aNum] = `0`
	)

Definition at line 89 of file XrdDigAuth.cc.

 {
    XrdSysMutexHelper mHelp(&authMutex);
    time_t tNow = time(0);
    XrdDigAuthEnt *aP;
    int rc;
  
 // Check if we need to refresh the auth list
 //
    if (tNow >= authCHK)
       {struct stat Stat;
        if ((rc = stat(authFN, &Stat)) && errno != ENOENT)
           {eDest->Emsg("Config",errno,"stat dig auth file", authFN);
            authCHK = tNow + 30;
           } else {
                 if (rc) {if (authList) {if (!Refresh()) authCHK = tNow + 30;}
                             else                        authCHK = tNow + 60;
                         }
            else if (authTOD == Stat.st_mtime)           authCHK = tNow +  5;
            else if (!Refresh())                         authCHK = tNow + 30;
           }
       }
  
 // Clear aVec if so supplied (client's auth mask)
 //
    if (aVec) memset(aVec, false, XrdDigAuthEnt::aNum);
  
 // Check if we have anything to authorize with
 //
    if (!authList) return false;
  
 // Check if we are granting access to this resouce at all
 //
    if (aType != XrdDigAuthEnt::aNum && !accOK[aType]) return false;
  
 // Go through the access list and try to match the client
 //
    aP = authList;
    while(aP)
     {do {if (strcmp(client->prot, aP->prot)) break;
          if (aP->eChk[XrdDigAuthEnt::eName] && (!client->name ||
              strcmp(client->name, aP->eChk[XrdDigAuthEnt::eName]))) break;
  
          if (aP->eChk[XrdDigAuthEnt::eHost]
          &&  strcmp(client->addrInfo->Name(""),
                     aP->eChk[XrdDigAuthEnt::eHost])) break;
  
          if (aP->eChk[XrdDigAuthEnt::eVorg] && (!client->vorg ||
              strcmp(client->vorg, aP->eChk[XrdDigAuthEnt::eVorg]))) break;
  
          if (aP->eChk[XrdDigAuthEnt::eRole] && (!client->role ||
              strcmp(client->role, aP->eChk[XrdDigAuthEnt::eRole]))) break;
  
          if (aP->eChk[XrdDigAuthEnt::eGrp ] && (!client->grps ||
              !OkGrp(client->grps, aP->eChk[XrdDigAuthEnt::eGrp ]))) break;
  
          if (aVec) memcpy(aVec, aP->accOK, XrdDigAuthEnt::aNum);
          return (aType == XrdDigAuthEnt::aNum ? false : aP->accOK[aType]);
         } while(1);
      aP = aP->next;
     }
  
 // Client failed the test
 //
    return false;
 }

References XrdDigAuthEnt::accOK, XrdSecEntity::addrInfo, XrdDigAuthEnt::aNum, XrdDigAuthEnt::eChk, XrdDig::eDest, XrdDigAuthEnt::eGrp, XrdDigAuthEnt::eHost, XrdSysError::Emsg(), XrdDigAuthEnt::eName, XrdDigAuthEnt::eRole, XrdDigAuthEnt::eVorg, XrdSecEntity::grps, XrdNetAddrInfo::Name(), XrdSecEntity::name, XrdDigAuthEnt::next, XrdDigAuthEnt::prot, XrdSecEntity::prot, XrdTlsCrl::Refresh(), XrdSecEntity::role, Stat, stat, and XrdSecEntity::vorg.

Referenced by XrdDigConfig::GenAccess(), and XrdDigConfig::GenPath().

Here is the call graph for this function:

Here is the caller graph for this function:

◆ Configure()

bool XrdDigAuth::Configure ( const char * aFN )

Definition at line 163 of file XrdDigAuth.cc.

 {
 /*
   Function: Configure authorization (one time call).
  
   Input:    None.
  
   Output:   true upon success or false otherwise.
 */
  
 // Establish the location of the auth file (stable string do not copy)
 //
    if (!aFN || !(*aFN))
       {eDest->Emsg("Config", "Dig authorization file not specified.");
        return false;
       }
  
 // Initialize authorization
 //
    authFN = strdup(aFN);
    SetupAuth(false);
    return true;
 }

References XrdDig::eDest, and XrdSysError::Emsg().

Referenced by XrdDigConfig::Configure().