bsd/nfs/nfs_gss.c

415 nfs_gss_clnt_cred_put(struct nfsreq *req, struct nfsm_chain *nmc, mbuf_t args)
528 	nfsm_chain_add_32(error, nmc, RPCSEC_GSS);
529 	nfsm_chain_add_32(error, nmc, 5 * NFSX_UNSIGNED + cp->gss_clnt_handle_len);
530 	nfsm_chain_add_32(error, nmc, RPCSEC_GSS_VERS_1);
531 	nfsm_chain_add_32(error, nmc, cp->gss_clnt_proc);
532 	nfsm_chain_add_32(error, nmc, seqnum);
533 	nfsm_chain_add_32(error, nmc, cp->gss_clnt_service);
534 	nfsm_chain_add_32(error, nmc, cp->gss_clnt_handle_len);
538 		nfsm_chain_add_opaque(error, nmc, cp->gss_clnt_handle, cp->gss_clnt_handle_len);
551 		nfsm_chain_add_32(error, nmc, RPCAUTH_NULL);	// flavor
552 		nfsm_chain_add_32(error, nmc, 0);		// length
553 		nfsm_chain_build_done(error, nmc);
555 			nfs_gss_append_chain(nmc, args);
560 	nfsm_chain_build_done(error, nmc);
561 	nfs_gss_cksum_chain(ki, nmc, ALG_MIC(ki), offset, 0, cksum);
564 	nfsm_chain_add_32(error, nmc, RPCSEC_GSS);	// flavor
565 	nfsm_chain_add_32(error, nmc, toklen);		// length
566 	nfsm_chain_add_opaque(error, nmc, tokbuf, toklen);
567 	nfsm_chain_build_done(error, nmc);
577 		nfs_gss_append_chain(nmc, args);
583 		nfsm_chain_add_32(error, nmc, len);	// and insert it
584 		start = nfsm_chain_offset(nmc);
585 		nfsm_chain_add_32(error, nmc, seqnum);	// Insert seqnum
586 		req->r_gss_argoff = nfsm_chain_offset(nmc); // Offset to args
587 		nfsm_chain_build_done(error, nmc);
590 		nfs_gss_append_chain(nmc, args);	// Append the args mbufs
593 		nfs_gss_cksum_chain(ki, nmc, ALG_MIC(ki), start, len, cksum);
597 		nfsm_chain_finish_mbuf(error, nmc);	// force checksum into new mbuf
598 		nfsm_chain_add_32(error, nmc, toklen);
599 		nfsm_chain_add_opaque(error, nmc, tokbuf, toklen);
600 		nfsm_chain_build_done(error, nmc);
638 		nfsm_chain_add_32(error, nmc, toklen + len);	// token + args length
639 		nfsm_chain_add_opaque_nopad(error, nmc, tokbuf, toklen);
640 		req->r_gss_argoff = nfsm_chain_offset(nmc);	// Stash offset
641 		nfsm_chain_build_done(error, nmc);
644 		nfs_gss_append_chain(nmc, nmc_tmp.nmc_mhead);	// Append the args mbufs
652 			nfsm_chain_add_opaque_nopad(error, nmc, iv0, pad);
653 			nfsm_chain_build_done(error, nmc);
672 	struct nfsm_chain *nmc,
706 			nfsm_chain_adv(error, nmc, nfsm_rndup(verflen));
707 		nfsm_chain_get_32(error, nmc, *accepted_statusp);
725 		nfsm_chain_get_opaque(error, nmc, verflen, cp->gss_clnt_verf);
726 		nfsm_chain_get_32(error, nmc, *accepted_statusp);
737 	nfsm_chain_get_opaque(error, nmc, verflen, tokbuf);
760 	nfsm_chain_get_32(error, nmc, *accepted_statusp);
782 		nfsm_chain_get_32(error, nmc, reslen);		// length of results
789 		start = nfsm_chain_offset(nmc);
790 		nfs_gss_cksum_chain(ki, nmc, ALG_MIC(ki), start, reslen, cksum1);
796 		nfsm_chain_get_32(error, nmc, seqnum);
810 		nmc_tmp = *nmc;
841 		nfsm_chain_get_32(error, nmc, reslen);		// length of results
848 		nfsm_chain_get_opaque(error, nmc, KRB5_SZ_TOKMAX(ki->hash_len), tokbuf);
855 		nfsm_chain_reverse(nmc, nfsm_pad(toklen));
859 		start = nfsm_chain_offset(nmc);
860 		nfs_gss_encrypt_chain(ki, nmc, start, reslen, DES_DECRYPT);
863 		nfs_gss_cksum_chain(ki, nmc, ALG_WRAP(ki), start, reslen, cksum2);
871 		nfsm_chain_adv(error, nmc, 8);	// skip over the confounder
877 		nfsm_chain_get_32(error, nmc, seqnum);
909 	struct nfsm_chain mchain, *nmc = &mchain;
918 	nfsm_chain_dissect_init(error, nmc, req->r_mhead);	// start at RPC header
919 	nfsm_chain_adv(error, nmc, req->r_gss_argoff);		// advance to args
933 		nfsm_chain_adv(error, nmc, req->r_gss_arglen);	// adv to last args mbuf
937 		mbuf_freem(mbuf_next(nmc->nmc_mcur));		// free the cksum mbuf
938 		error = mbuf_setnext(nmc->nmc_mcur, NULL);
951 		nfs_gss_encrypt_chain(&cp->gss_clnt_kinfo, nmc,
953 		nfsm_chain_adv(error, nmc, req->r_gss_arglen);
956 		mbuf_freem(mbuf_next(nmc->nmc_mcur));		// free the pad mbuf
957 		error = mbuf_setnext(nmc->nmc_mcur, NULL);
1936 nfs_gss_svc_cred_get(struct nfsrv_descript *nd, struct nfsm_chain *nmc)
1952 	nfsm_chain_get_32(error, nmc, vers);
1958 	nfsm_chain_get_32(error, nmc, proc);
1959 	nfsm_chain_get_32(error, nmc, seqnum);
1960 	nfsm_chain_get_32(error, nmc, service);
1961 	nfsm_chain_get_32(error, nmc, handle_len);
2016 		nfsm_chain_get_32(error, nmc, handle);
2049 		nfs_gss_cksum_chain(ki, nmc, ALG_MIC(ki), 0, 0, cksum1);
2059 		nfsm_chain_get_32(error, nmc, flavor);
2060 		nfsm_chain_get_32(error, nmc, verflen);
2065 		nfsm_chain_get_opaque(error, nmc, verflen, tokbuf);
2116 			nfsm_chain_get_32(error, nmc, arglen);		// length of args
2123 			start = nfsm_chain_offset(nmc);
2124 			nfs_gss_cksum_chain(ki, nmc, ALG_MIC(ki), start, arglen, cksum1);
2131 			nfsm_chain_get_32(error, nmc, seqnum);
2141 			nmc_tmp = *nmc;
2171 			nfsm_chain_get_32(error, nmc, arglen);		// length of args
2178 			nfsm_chain_get_opaque(error, nmc, KRB5_SZ_TOKMAX(ki->hash_len), tokbuf);
2185 			nfsm_chain_reverse(nmc, nfsm_pad(toklen));
2188 			start = nfsm_chain_offset(nmc);
2190 			nfs_gss_encrypt_chain(ki, nmc, start, arglen, DES_DECRYPT);
2193 			nfs_gss_cksum_chain(ki, nmc, ALG_WRAP(ki), start, arglen, cksum2);
2206 			nfsm_chain_adv(error, nmc, 8);			// skip over the confounder
2207 			nfsm_chain_get_32(error, nmc, seqnum);
2219 		nfsm_chain_get_32(error, nmc, flavor);
2220 		nfsm_chain_get_32(error, nmc, verflen);
2248 nfs_gss_svc_verf_put(struct nfsrv_descript *nd, struct nfsm_chain *nmc)
2265 		nfsm_chain_add_32(error, nmc, RPCAUTH_NULL);
2266 		nfsm_chain_add_32(error, nmc, 0);
2286 	nfsm_chain_add_32(error, nmc, RPCSEC_GSS);
2287 	nfsm_chain_add_32(error, nmc, toklen);
2288 	nfsm_chain_add_opaque(error, nmc, tokbuf, toklen);
2302 nfs_gss_svc_prepare_reply(struct nfsrv_descript *nd, struct nfsm_chain *nmc)
2316 		nd->nd_gss_mb = nmc->nmc_mcur;			// record current mbuf
2317 		nfsm_chain_finish_mbuf(error, nmc);		// split the chain here
2318 		nfsm_chain_add_32(error, nmc, nd->nd_gss_seqnum); // req sequence number
2321 		nd->nd_gss_mb = nmc->nmc_mcur;			// record current mbuf
2322 		nfsm_chain_finish_mbuf(error, nmc);		// split the chain here
2323 		nfsm_chain_add_32(error, nmc, random());	// confounder bytes 1-4
2324 		nfsm_chain_add_32(error, nmc, random());	// confounder bytes 5-8
2325 		nfsm_chain_add_32(error, nmc, nd->nd_gss_seqnum); // req sequence number
3136 nfs_gss_append_chain(struct nfsm_chain *nmc, mbuf_t mc)
3142 	error = mbuf_setnext(nmc->nmc_mcur, mc);
3151 	nmc->nmc_mcur = tail;
3152 	nmc->nmc_ptr = (caddr_t) mbuf_data(tail) + mbuf_len(tail);
3153 	nmc->nmc_left = mbuf_trailingspace(tail);
3162 nfs_gss_nfsm_chain(struct nfsm_chain *nmc, mbuf_t mc)
3171 	nmc->nmc_mhead = mc;
3172 	nmc->nmc_mcur = tail;
3173 	nmc->nmc_ptr = (caddr_t) mbuf_data(tail) + mbuf_len(tail);
3174 	nmc->nmc_left = mbuf_trailingspace(tail);
3175 	nmc->nmc_flags = 0;
3246 	struct nfsm_chain *nmc,
3258 		len = nfsm_chain_offset(nmc) - offset;
3260 	return (nfs_gss_cksum_mchain(ki, nmc->nmc_mhead, alg, offset, len, cksum));
3365 	struct nfsm_chain *nmc,
3376 		len = nfsm_chain_offset(nmc) - offset;
3378 	return (nfs_gss_encrypt_mchain(ki, nmc->nmc_mhead, offset, len, encrypt));