xref: /linux/fs/nfs/callback.c (revision 3932b9ca55b0be314a36d3e84faff3e823c081f5)
1 /*
2  * linux/fs/nfs/callback.c
3  *
4  * Copyright (C) 2004 Trond Myklebust
5  *
6  * NFSv4 callback handling
7  */
8 
9 #include <linux/completion.h>
10 #include <linux/ip.h>
11 #include <linux/module.h>
12 #include <linux/sunrpc/svc.h>
13 #include <linux/sunrpc/svcsock.h>
14 #include <linux/nfs_fs.h>
15 #include <linux/errno.h>
16 #include <linux/mutex.h>
17 #include <linux/freezer.h>
18 #include <linux/kthread.h>
19 #include <linux/sunrpc/svcauth_gss.h>
20 #include <linux/sunrpc/bc_xprt.h>
21 
22 #include <net/inet_sock.h>
23 
24 #include "nfs4_fs.h"
25 #include "callback.h"
26 #include "internal.h"
27 #include "netns.h"
28 
29 #define NFSDBG_FACILITY NFSDBG_CALLBACK
30 
31 struct nfs_callback_data {
32 	unsigned int users;
33 	struct svc_serv *serv;
34 	struct svc_rqst *rqst;
35 	struct task_struct *task;
36 };
37 
38 static struct nfs_callback_data nfs_callback_info[NFS4_MAX_MINOR_VERSION + 1];
39 static DEFINE_MUTEX(nfs_callback_mutex);
40 static struct svc_program nfs4_callback_program;
41 
42 static int nfs4_callback_up_net(struct svc_serv *serv, struct net *net)
43 {
44 	int ret;
45 	struct nfs_net *nn = net_generic(net, nfs_net_id);
46 
47 	ret = svc_create_xprt(serv, "tcp", net, PF_INET,
48 				nfs_callback_set_tcpport, SVC_SOCK_ANONYMOUS);
49 	if (ret <= 0)
50 		goto out_err;
51 	nn->nfs_callback_tcpport = ret;
52 	dprintk("NFS: Callback listener port = %u (af %u, net %p)\n",
53 			nn->nfs_callback_tcpport, PF_INET, net);
54 
55 	ret = svc_create_xprt(serv, "tcp", net, PF_INET6,
56 				nfs_callback_set_tcpport, SVC_SOCK_ANONYMOUS);
57 	if (ret > 0) {
58 		nn->nfs_callback_tcpport6 = ret;
59 		dprintk("NFS: Callback listener port = %u (af %u, net %p)\n",
60 				nn->nfs_callback_tcpport6, PF_INET6, net);
61 	} else if (ret != -EAFNOSUPPORT)
62 		goto out_err;
63 	return 0;
64 
65 out_err:
66 	return (ret) ? ret : -ENOMEM;
67 }
68 
69 /*
70  * This is the NFSv4 callback kernel thread.
71  */
72 static int
73 nfs4_callback_svc(void *vrqstp)
74 {
75 	int err;
76 	struct svc_rqst *rqstp = vrqstp;
77 
78 	set_freezable();
79 
80 	while (!kthread_should_stop()) {
81 		/*
82 		 * Listen for a request on the socket
83 		 */
84 		err = svc_recv(rqstp, MAX_SCHEDULE_TIMEOUT);
85 		if (err == -EAGAIN || err == -EINTR)
86 			continue;
87 		svc_process(rqstp);
88 	}
89 	return 0;
90 }
91 
92 /*
93  * Prepare to bring up the NFSv4 callback service
94  */
95 static struct svc_rqst *
96 nfs4_callback_up(struct svc_serv *serv)
97 {
98 	return svc_prepare_thread(serv, &serv->sv_pools[0], NUMA_NO_NODE);
99 }
100 
101 #if defined(CONFIG_NFS_V4_1)
102 static int nfs41_callback_up_net(struct svc_serv *serv, struct net *net)
103 {
104 	/*
105 	 * Create an svc_sock for the back channel service that shares the
106 	 * fore channel connection.
107 	 * Returns the input port (0) and sets the svc_serv bc_xprt on success
108 	 */
109 	return svc_create_xprt(serv, "tcp-bc", net, PF_INET, 0,
110 			      SVC_SOCK_ANONYMOUS);
111 }
112 
113 /*
114  * The callback service for NFSv4.1 callbacks
115  */
116 static int
117 nfs41_callback_svc(void *vrqstp)
118 {
119 	struct svc_rqst *rqstp = vrqstp;
120 	struct svc_serv *serv = rqstp->rq_server;
121 	struct rpc_rqst *req;
122 	int error;
123 	DEFINE_WAIT(wq);
124 
125 	set_freezable();
126 
127 	while (!kthread_should_stop()) {
128 		if (try_to_freeze())
129 			continue;
130 
131 		prepare_to_wait(&serv->sv_cb_waitq, &wq, TASK_INTERRUPTIBLE);
132 		spin_lock_bh(&serv->sv_cb_lock);
133 		if (!list_empty(&serv->sv_cb_list)) {
134 			req = list_first_entry(&serv->sv_cb_list,
135 					struct rpc_rqst, rq_bc_list);
136 			list_del(&req->rq_bc_list);
137 			spin_unlock_bh(&serv->sv_cb_lock);
138 			dprintk("Invoking bc_svc_process()\n");
139 			error = bc_svc_process(serv, req, rqstp);
140 			dprintk("bc_svc_process() returned w/ error code= %d\n",
141 				error);
142 		} else {
143 			spin_unlock_bh(&serv->sv_cb_lock);
144 			schedule();
145 		}
146 		finish_wait(&serv->sv_cb_waitq, &wq);
147 	}
148 	return 0;
149 }
150 
151 /*
152  * Bring up the NFSv4.1 callback service
153  */
154 static struct svc_rqst *
155 nfs41_callback_up(struct svc_serv *serv)
156 {
157 	struct svc_rqst *rqstp;
158 
159 	INIT_LIST_HEAD(&serv->sv_cb_list);
160 	spin_lock_init(&serv->sv_cb_lock);
161 	init_waitqueue_head(&serv->sv_cb_waitq);
162 	rqstp = svc_prepare_thread(serv, &serv->sv_pools[0], NUMA_NO_NODE);
163 	if (IS_ERR(rqstp)) {
164 		svc_xprt_put(serv->sv_bc_xprt);
165 		serv->sv_bc_xprt = NULL;
166 	}
167 	dprintk("--> %s return %d\n", __func__, PTR_ERR_OR_ZERO(rqstp));
168 	return rqstp;
169 }
170 
171 static void nfs_minorversion_callback_svc_setup(struct svc_serv *serv,
172 		struct svc_rqst **rqstpp, int (**callback_svc)(void *vrqstp))
173 {
174 	*rqstpp = nfs41_callback_up(serv);
175 	*callback_svc = nfs41_callback_svc;
176 }
177 
178 static inline void nfs_callback_bc_serv(u32 minorversion, struct rpc_xprt *xprt,
179 		struct svc_serv *serv)
180 {
181 	if (minorversion)
182 		/*
183 		 * Save the svc_serv in the transport so that it can
184 		 * be referenced when the session backchannel is initialized
185 		 */
186 		xprt->bc_serv = serv;
187 }
188 #else
189 static int nfs41_callback_up_net(struct svc_serv *serv, struct net *net)
190 {
191 	return 0;
192 }
193 
194 static void nfs_minorversion_callback_svc_setup(struct svc_serv *serv,
195 		struct svc_rqst **rqstpp, int (**callback_svc)(void *vrqstp))
196 {
197 	*rqstpp = ERR_PTR(-ENOTSUPP);
198 	*callback_svc = ERR_PTR(-ENOTSUPP);
199 }
200 
201 static inline void nfs_callback_bc_serv(u32 minorversion, struct rpc_xprt *xprt,
202 		struct svc_serv *serv)
203 {
204 }
205 #endif /* CONFIG_NFS_V4_1 */
206 
207 static int nfs_callback_start_svc(int minorversion, struct rpc_xprt *xprt,
208 				  struct svc_serv *serv)
209 {
210 	struct svc_rqst *rqstp;
211 	int (*callback_svc)(void *vrqstp);
212 	struct nfs_callback_data *cb_info = &nfs_callback_info[minorversion];
213 	int ret;
214 
215 	nfs_callback_bc_serv(minorversion, xprt, serv);
216 
217 	if (cb_info->task)
218 		return 0;
219 
220 	switch (minorversion) {
221 	case 0:
222 		/* v4.0 callback setup */
223 		rqstp = nfs4_callback_up(serv);
224 		callback_svc = nfs4_callback_svc;
225 		break;
226 	default:
227 		nfs_minorversion_callback_svc_setup(serv,
228 				&rqstp, &callback_svc);
229 	}
230 
231 	if (IS_ERR(rqstp))
232 		return PTR_ERR(rqstp);
233 
234 	svc_sock_update_bufs(serv);
235 
236 	cb_info->serv = serv;
237 	cb_info->rqst = rqstp;
238 	cb_info->task = kthread_run(callback_svc, cb_info->rqst,
239 				    "nfsv4.%u-svc", minorversion);
240 	if (IS_ERR(cb_info->task)) {
241 		ret = PTR_ERR(cb_info->task);
242 		svc_exit_thread(cb_info->rqst);
243 		cb_info->rqst = NULL;
244 		cb_info->task = NULL;
245 		return ret;
246 	}
247 	dprintk("nfs_callback_up: service started\n");
248 	return 0;
249 }
250 
251 static void nfs_callback_down_net(u32 minorversion, struct svc_serv *serv, struct net *net)
252 {
253 	struct nfs_net *nn = net_generic(net, nfs_net_id);
254 
255 	if (--nn->cb_users[minorversion])
256 		return;
257 
258 	dprintk("NFS: destroy per-net callback data; net=%p\n", net);
259 	svc_shutdown_net(serv, net);
260 }
261 
262 static int nfs_callback_up_net(int minorversion, struct svc_serv *serv, struct net *net)
263 {
264 	struct nfs_net *nn = net_generic(net, nfs_net_id);
265 	int ret;
266 
267 	if (nn->cb_users[minorversion]++)
268 		return 0;
269 
270 	dprintk("NFS: create per-net callback data; net=%p\n", net);
271 
272 	ret = svc_bind(serv, net);
273 	if (ret < 0) {
274 		printk(KERN_WARNING "NFS: bind callback service failed\n");
275 		goto err_bind;
276 	}
277 
278 	switch (minorversion) {
279 		case 0:
280 			ret = nfs4_callback_up_net(serv, net);
281 			break;
282 		case 1:
283 		case 2:
284 			ret = nfs41_callback_up_net(serv, net);
285 			break;
286 		default:
287 			printk(KERN_ERR "NFS: unknown callback version: %d\n",
288 					minorversion);
289 			ret = -EINVAL;
290 			break;
291 	}
292 
293 	if (ret < 0) {
294 		printk(KERN_ERR "NFS: callback service start failed\n");
295 		goto err_socks;
296 	}
297 	return 0;
298 
299 err_socks:
300 	svc_rpcb_cleanup(serv, net);
301 err_bind:
302 	dprintk("NFS: Couldn't create callback socket: err = %d; "
303 			"net = %p\n", ret, net);
304 	return ret;
305 }
306 
307 static struct svc_serv *nfs_callback_create_svc(int minorversion)
308 {
309 	struct nfs_callback_data *cb_info = &nfs_callback_info[minorversion];
310 	struct svc_serv *serv;
311 
312 	/*
313 	 * Check whether we're already up and running.
314 	 */
315 	if (cb_info->task) {
316 		/*
317 		 * Note: increase service usage, because later in case of error
318 		 * svc_destroy() will be called.
319 		 */
320 		svc_get(cb_info->serv);
321 		return cb_info->serv;
322 	}
323 
324 	/*
325 	 * Sanity check: if there's no task,
326 	 * we should be the first user ...
327 	 */
328 	if (cb_info->users)
329 		printk(KERN_WARNING "nfs_callback_create_svc: no kthread, %d users??\n",
330 			cb_info->users);
331 
332 	serv = svc_create(&nfs4_callback_program, NFS4_CALLBACK_BUFSIZE, NULL);
333 	if (!serv) {
334 		printk(KERN_ERR "nfs_callback_create_svc: create service failed\n");
335 		return ERR_PTR(-ENOMEM);
336 	}
337 	/* As there is only one thread we need to over-ride the
338 	 * default maximum of 80 connections
339 	 */
340 	serv->sv_maxconn = 1024;
341 	dprintk("nfs_callback_create_svc: service created\n");
342 	return serv;
343 }
344 
345 /*
346  * Bring up the callback thread if it is not already up.
347  */
348 int nfs_callback_up(u32 minorversion, struct rpc_xprt *xprt)
349 {
350 	struct svc_serv *serv;
351 	struct nfs_callback_data *cb_info = &nfs_callback_info[minorversion];
352 	int ret;
353 	struct net *net = xprt->xprt_net;
354 
355 	mutex_lock(&nfs_callback_mutex);
356 
357 	serv = nfs_callback_create_svc(minorversion);
358 	if (IS_ERR(serv)) {
359 		ret = PTR_ERR(serv);
360 		goto err_create;
361 	}
362 
363 	ret = nfs_callback_up_net(minorversion, serv, net);
364 	if (ret < 0)
365 		goto err_net;
366 
367 	ret = nfs_callback_start_svc(minorversion, xprt, serv);
368 	if (ret < 0)
369 		goto err_start;
370 
371 	cb_info->users++;
372 	/*
373 	 * svc_create creates the svc_serv with sv_nrthreads == 1, and then
374 	 * svc_prepare_thread increments that. So we need to call svc_destroy
375 	 * on both success and failure so that the refcount is 1 when the
376 	 * thread exits.
377 	 */
378 err_net:
379 	svc_destroy(serv);
380 err_create:
381 	mutex_unlock(&nfs_callback_mutex);
382 	return ret;
383 
384 err_start:
385 	nfs_callback_down_net(minorversion, serv, net);
386 	dprintk("NFS: Couldn't create server thread; err = %d\n", ret);
387 	goto err_net;
388 }
389 
390 /*
391  * Kill the callback thread if it's no longer being used.
392  */
393 void nfs_callback_down(int minorversion, struct net *net)
394 {
395 	struct nfs_callback_data *cb_info = &nfs_callback_info[minorversion];
396 
397 	mutex_lock(&nfs_callback_mutex);
398 	nfs_callback_down_net(minorversion, cb_info->serv, net);
399 	cb_info->users--;
400 	if (cb_info->users == 0 && cb_info->task != NULL) {
401 		kthread_stop(cb_info->task);
402 		dprintk("nfs_callback_down: service stopped\n");
403 		svc_exit_thread(cb_info->rqst);
404 		dprintk("nfs_callback_down: service destroyed\n");
405 		cb_info->serv = NULL;
406 		cb_info->rqst = NULL;
407 		cb_info->task = NULL;
408 	}
409 	mutex_unlock(&nfs_callback_mutex);
410 }
411 
412 /* Boolean check of RPC_AUTH_GSS principal */
413 int
414 check_gss_callback_principal(struct nfs_client *clp, struct svc_rqst *rqstp)
415 {
416 	char *p = rqstp->rq_cred.cr_principal;
417 
418 	if (rqstp->rq_authop->flavour != RPC_AUTH_GSS)
419 		return 1;
420 
421 	/* No RPC_AUTH_GSS on NFSv4.1 back channel yet */
422 	if (clp->cl_minorversion != 0)
423 		return 0;
424 	/*
425 	 * It might just be a normal user principal, in which case
426 	 * userspace won't bother to tell us the name at all.
427 	 */
428 	if (p == NULL)
429 		return 0;
430 
431 	/*
432 	 * Did we get the acceptor from userland during the SETCLIENID
433 	 * negotiation?
434 	 */
435 	if (clp->cl_acceptor)
436 		return !strcmp(p, clp->cl_acceptor);
437 
438 	/*
439 	 * Otherwise try to verify it using the cl_hostname. Note that this
440 	 * doesn't work if a non-canonical hostname was used in the devname.
441 	 */
442 
443 	/* Expect a GSS_C_NT_HOSTBASED_NAME like "nfs@serverhostname" */
444 
445 	if (memcmp(p, "nfs@", 4) != 0)
446 		return 0;
447 	p += 4;
448 	if (strcmp(p, clp->cl_hostname) != 0)
449 		return 0;
450 	return 1;
451 }
452 
453 /*
454  * pg_authenticate method for nfsv4 callback threads.
455  *
456  * The authflavor has been negotiated, so an incorrect flavor is a server
457  * bug. Drop packets with incorrect authflavor.
458  *
459  * All other checking done after NFS decoding where the nfs_client can be
460  * found in nfs4_callback_compound
461  */
462 static int nfs_callback_authenticate(struct svc_rqst *rqstp)
463 {
464 	switch (rqstp->rq_authop->flavour) {
465 	case RPC_AUTH_NULL:
466 		if (rqstp->rq_proc != CB_NULL)
467 			return SVC_DROP;
468 		break;
469 	case RPC_AUTH_GSS:
470 		/* No RPC_AUTH_GSS support yet in NFSv4.1 */
471 		 if (svc_is_backchannel(rqstp))
472 			return SVC_DROP;
473 	}
474 	return SVC_OK;
475 }
476 
477 /*
478  * Define NFS4 callback program
479  */
480 static struct svc_version *nfs4_callback_version[] = {
481 	[1] = &nfs4_callback_version1,
482 	[4] = &nfs4_callback_version4,
483 };
484 
485 static struct svc_stat nfs4_callback_stats;
486 
487 static struct svc_program nfs4_callback_program = {
488 	.pg_prog = NFS4_CALLBACK,			/* RPC service number */
489 	.pg_nvers = ARRAY_SIZE(nfs4_callback_version),	/* Number of entries */
490 	.pg_vers = nfs4_callback_version,		/* version table */
491 	.pg_name = "NFSv4 callback",			/* service name */
492 	.pg_class = "nfs",				/* authentication class */
493 	.pg_stats = &nfs4_callback_stats,
494 	.pg_authenticate = nfs_callback_authenticate,
495 };
496