/* * CDDL HEADER START * * The contents of this file are subject to the terms of the * Common Development and Distribution License, Version 1.0 only * (the "License"). You may not use this file except in compliance * with the License. * * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE * or http://www.opensolaris.org/os/licensing. * See the License for the specific language governing permissions * and limitations under the License. * * When distributing Covered Code, include this CDDL HEADER in each * file and include the License file at usr/src/OPENSOLARIS.LICENSE. * If applicable, add the following below this CDDL HEADER, with the * fields enclosed by brackets "[]" replaced with your own identifying * information: Portions Copyright [yyyy] [name of copyright owner] * * CDDL HEADER END */ /* * Copyright 2005 Sun Microsystems, Inc. All rights reserved. * Use is subject to license terms. */ #pragma ident "%Z%%M% %I% %E% SMI" /* * Routines to handle getexec* calls in nscd */ #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include "server_door.h" #include "nscd.h" extern execstr_t *_getexecprof(char *, char *, char *, int, execstr_t *, char *, int, int *); static hash_t *nam_hash; static mutex_t db_lock = DEFAULTMUTEX; static waiter_t db_wait; static int getexec_namekeepalive(int keep, int interval); static int update_exec_bucket(nsc_bucket_t **old, nsc_bucket_t *new, int callnumber); static nsc_bucket_t *fixbuffer(nsc_return_t *in, int maxlen); static void do_findgnams(nsc_bucket_t *ptr, int *table, char *gnam); static void do_invalidate(nsc_bucket_t **ptr, int callnumber); static void getexec_invalidate_unlocked(void); void getexec_init(void) { nam_hash = make_hash(current_admin.exec.nsc_suggestedsize); } static void do_invalidate(nsc_bucket_t ** ptr, int callnumber) { if (*ptr != NULL && *ptr != (nsc_bucket_t *)-1) { /* leave pending calls alone */ update_exec_bucket(ptr, NULL, callnumber); } } static void do_findgnams(nsc_bucket_t *ptr, int *table, char *gnam) { /* * be careful with ptr - it may be -1 or NULL. */ if (ptr != NULL && ptr != (nsc_bucket_t *)-1) { char *tmp = (char *)insertn(table, ptr->nsc_hits, (int)strdup(gnam)); if (tmp != (char *)-1) free(tmp); } } void getexec_revalidate(void) { for (;;) { int slp; int interval; int count; slp = current_admin.exec.nsc_pos_ttl; if (slp < 60) { slp = 60; } if ((count = current_admin.exec.nsc_keephot) != 0) { interval = (slp / 2)/count; if (interval == 0) interval = 1; sleep(slp * 2 / 3); getexec_namekeepalive(count, interval); } else { sleep(slp); } } } static int getexec_namekeepalive(int keep, int interval) { int *table; union { nsc_data_t ping; char space[sizeof (nsc_data_t) + NSCDMAXNAMELEN]; } u; int i; if (!keep) return (0); table = maken(keep); mutex_lock(&db_lock); operate_hash(nam_hash, do_findgnams, (char *)table); mutex_unlock(&db_lock); for (i = 1; i <= keep; i++) { char *tmp; u.ping.nsc_call.nsc_callnumber = GETEXECID; if ((tmp = (char *)table[keep + 1 + i]) == (char *)-1) continue; /* unused slot in table */ strcpy(u.ping.nsc_call.nsc_u.name, tmp); launch_update(&u.ping.nsc_call); sleep(interval); } for (i = 1; i <= keep; i++) { char *tmp; if ((tmp = (char *)table[keep + 1 + i]) != (char *)-1) free(tmp); } free(table); return (0); } /* * This routine marks all entries as invalid * */ void getexec_invalidate(void) { mutex_lock(&db_lock); getexec_invalidate_unlocked(); mutex_unlock(&db_lock); } static void getexec_invalidate_unlocked(void) { operate_hash_addr(nam_hash, do_invalidate, (char *)GETEXECID); current_admin.exec.nsc_invalidate_count++; } void getexec_lookup(nsc_return_t *out, int maxsize, nsc_call_t *in, time_t now) { int out_of_date; nsc_bucket_t *retb; char **bucket; char *p_name; char *p_type; char *p_id; char *unique; char *lasts; char *sep = ":"; static time_t lastmod; int bufferspace = maxsize - sizeof (nsc_return_t); if (current_admin.exec.nsc_enabled == 0) { out->nsc_return_code = NOSERVER; out->nsc_bufferbytesused = sizeof (*out); return; } mutex_lock(&db_lock); if (current_admin.exec.nsc_check_files) { struct stat buf; if (stat(EXECATTR_FILENAME, &buf) < 0) { /*EMPTY*/; } else if (lastmod == 0) { lastmod = buf.st_mtime; } else if (lastmod < buf.st_mtime) { getexec_invalidate_unlocked(); lastmod = buf.st_mtime; } } if (current_admin.debug_level >= DBG_ALL) { logit("getexec_lookup: looking for name %s\n", in->nsc_u.name); } for (;;) { if (attr_strlen(in->nsc_u.name) > NSCDMAXNAMELEN) { ucred_t *uc = NULL; if (door_ucred(&uc) != 0) { logit("getexec_lookup: Name too long, " "but no user credential: %s\n", strerror(errno)); } else { logit("getexec_lookup: Name too long from pid " "%d uid %d\n", ucred_getpid(uc), ucred_getruid(uc)); ucred_free(uc); } out->nsc_errno = NSS_NOTFOUND; out->nsc_return_code = NOTFOUND; out->nsc_bufferbytesused = sizeof (*out); goto getout; } bucket = get_hash(nam_hash, in->nsc_u.name); if (*bucket == (char *)-1) { /* pending lookup */ if (get_clearance(in->nsc_callnumber) != 0) { /* no threads available */ out->nsc_return_code = NOSERVER; /* cannot process now */ out->nsc_bufferbytesused = sizeof (*out); current_admin.exec.nsc_throttle_count++; goto getout; } nscd_wait(&db_wait, &db_lock, bucket); release_clearance(in->nsc_callnumber); continue; /* go back and relookup hash bucket */ } break; } /* * check for no name_service mode */ if (*bucket == NULL && current_admin.avoid_nameservice) { out->nsc_return_code = NOTFOUND; out->nsc_bufferbytesused = sizeof (*out); } else if ((*bucket == NULL) || /* New entry in name service */ (in->nsc_callnumber & UPDATEBIT) || /* needs updating */ (out_of_date = (!current_admin.avoid_nameservice && (current_admin.exec.nsc_old_data_ok == 0) && (((nsc_bucket_t *)*bucket)->nsc_timestamp < now)))) { /* time has expired */ int saved_errno; int saved_hits = 0; execstr_t *p; if (get_clearance(in->nsc_callnumber) != 0) { /* no threads available */ out->nsc_return_code = NOSERVER; /* cannot process now */ out->nsc_bufferbytesused = sizeof (*out); current_admin.exec.nsc_throttle_count++; goto getout; } if (*bucket != NULL) { saved_hits = ((nsc_bucket_t *)*bucket)->nsc_hits; } /* * block any threads accessing this bucket if data is * non-existent out of date */ if (*bucket == NULL || out_of_date) { update_exec_bucket((nsc_bucket_t **)bucket, (nsc_bucket_t *)-1, in->nsc_callnumber); } else { /* * if still not -1 bucket we are doing update... * mark to prevent * pileups of threads if the name service is hanging.... */ ((nsc_bucket_t *)(*bucket))->nsc_status |= ST_UPDATE_PENDING; /* cleared by deletion of old data */ } mutex_unlock(&db_lock); /* * Call non-caching version in libnsl. */ unique = strdup(in->nsc_u.name); p_name = strtok_r(unique, sep, &lasts); p_type = strtok_r(NULL, sep, &lasts); p_id = strtok_r(NULL, sep, &lasts); p = _getexecprof(p_name, p_type, p_id, GET_ONE, &out->nsc_u.exec, out->nsc_u.buff + sizeof (execstr_t), bufferspace, &saved_errno); free(unique); mutex_lock(&db_lock); release_clearance(in->nsc_callnumber); if (p == NULL) { /* data not found */ if (current_admin.debug_level >= DBG_CANT_FIND) { logit("getexec_lookup: nscd COULDN'T FIND exec_attr name %s\n", in->nsc_u.name); } if (!(UPDATEBIT & in->nsc_callnumber)) current_admin.exec.nsc_neg_cache_misses++; retb = (nsc_bucket_t *)malloc(sizeof (nsc_bucket_t)); retb->nsc_refcount = 1; retb->nsc_data.nsc_bufferbytesused = sizeof (nsc_return_t); retb->nsc_data.nsc_return_code = NOTFOUND; retb->nsc_data.nsc_errno = saved_errno; memcpy(out, &retb->nsc_data, retb->nsc_data.nsc_bufferbytesused); update_exec_bucket((nsc_bucket_t **)bucket, retb, in->nsc_callnumber); goto getout; } else { if (current_admin.debug_level >= DBG_ALL) { logit("getexec_lookup: nscd FOUND exec_attr name %s\n", in->nsc_u.name); } if (!(UPDATEBIT & in->nsc_callnumber)) current_admin.exec.nsc_pos_cache_misses++; retb = fixbuffer(out, bufferspace); update_exec_bucket((nsc_bucket_t **)bucket, retb, in->nsc_callnumber); if (saved_hits) retb->nsc_hits = saved_hits; } } else { /* found entry in cache */ retb = (nsc_bucket_t *)*bucket; retb->nsc_hits++; memcpy(out, &(retb->nsc_data), retb->nsc_data.nsc_bufferbytesused); if (out->nsc_return_code == SUCCESS) { if (!(UPDATEBIT & in->nsc_callnumber)) current_admin.exec.nsc_pos_cache_hits++; if (current_admin.debug_level >= DBG_ALL) { logit("getexec_lookup: found name %s in cache\n", in->nsc_u.name); } } else { if (!(UPDATEBIT & in->nsc_callnumber)) current_admin.exec.nsc_neg_cache_hits++; if (current_admin.debug_level >= DBG_ALL) { logit("getexec_lookup: %s marked as NOT FOUND in cache.\n", in->nsc_u.name); } } if ((retb->nsc_timestamp < now) && !(in->nsc_callnumber & UPDATEBIT) && !(retb->nsc_status & ST_UPDATE_PENDING)) { logit("launch update since time = %d\n", retb->nsc_timestamp); retb->nsc_status |= ST_UPDATE_PENDING; /* cleared by deletion of old data */ launch_update(in); } } getout: mutex_unlock(&db_lock); } /*ARGSUSED*/ static int update_exec_bucket(nsc_bucket_t **old, nsc_bucket_t *new, int callnumber) { if (*old != NULL && *old != (nsc_bucket_t *)-1) { /* old data exists */ free(*old); current_admin.exec.nsc_entries--; } /* * we can do this before reseting *old since we're holding the lock */ else if (*old == (nsc_bucket_t *)-1) { nscd_signal(&db_wait, (char **)old); } *old = new; if ((new != NULL) && (new != (nsc_bucket_t *)-1)) { /* real data, not just update pending or invalidate */ new->nsc_hits = 1; new->nsc_status = 0; new->nsc_refcount = 1; current_admin.exec.nsc_entries++; if (new->nsc_data.nsc_return_code == SUCCESS) { new->nsc_timestamp = time(NULL) + current_admin.exec.nsc_pos_ttl; } else { new->nsc_timestamp = time(NULL) + current_admin.exec.nsc_neg_ttl; } } return (0); } /*ARGSUSED*/ static nsc_bucket_t * fixbuffer(nsc_return_t *in, int maxlen) { nsc_bucket_t *retb; nsc_return_t *out; char *dest; int offset; int strs; /* * find out the size of the data block we're going to need */ strs = attr_strlen(in->nsc_u.exec.name) + attr_strlen(in->nsc_u.exec.policy) + attr_strlen(in->nsc_u.exec.type) + attr_strlen(in->nsc_u.exec.res1) + attr_strlen(in->nsc_u.exec.res2) + attr_strlen(in->nsc_u.exec.id) + attr_strlen(in->nsc_u.exec.attr) + EXECATTR_DB_NCOL; /* * allocate it and copy it in * code doesn't assume packing order in original buffer */ if ((retb = (nsc_bucket_t *)malloc(sizeof (*retb) + strs)) == NULL) { return (NULL); } out = &(retb->nsc_data); out->nsc_bufferbytesused = strs + ((int)&out->nsc_u.exec - (int)out) + sizeof (execstr_t); out->nsc_return_code = SUCCESS; out->nsc_errno = 0; dest = retb->nsc_data.nsc_u.buff + sizeof (execstr_t); offset = (int)dest; attr_strcpy(dest, in->nsc_u.exec.name); strs = 1 + attr_strlen(in->nsc_u.exec.name); out->nsc_u.exec.name = dest - offset; dest += strs; attr_strcpy(dest, in->nsc_u.exec.policy); strs = 1 + attr_strlen(in->nsc_u.exec.policy); out->nsc_u.exec.policy = dest - offset; dest += strs; attr_strcpy(dest, in->nsc_u.exec.type); strs = 1 + attr_strlen(in->nsc_u.exec.type); out->nsc_u.exec.type = dest - offset; dest += strs; attr_strcpy(dest, in->nsc_u.exec.res1); strs = 1 + attr_strlen(in->nsc_u.exec.res1); out->nsc_u.exec.res1 = dest - offset; dest += strs; attr_strcpy(dest, in->nsc_u.exec.res2); strs = 1 + attr_strlen(in->nsc_u.exec.res2); out->nsc_u.exec.res2 = dest - offset; dest += strs; attr_strcpy(dest, in->nsc_u.exec.id); strs = 1 + attr_strlen(in->nsc_u.exec.id); out->nsc_u.exec.id = dest - offset; dest += strs; attr_strcpy(dest, in->nsc_u.exec.attr); out->nsc_u.exec.attr = dest - offset; memcpy(in, out, out->nsc_bufferbytesused); return (retb); } void getexec_reaper(void) { nsc_reaper("getexec", nam_hash, ¤t_admin.exec, &db_lock); }