1/* os-local.c -- platform-specific domain socket code */
2/* $OpenLDAP$ */
3/* This work is part of OpenLDAP Software <http://www.openldap.org/>.
4 *
5 * Copyright 1998-2011 The OpenLDAP Foundation.
6 * All rights reserved.
7 *
8 * Redistribution and use in source and binary forms, with or without
9 * modification, are permitted only as authorized by the OpenLDAP
10 * Public License.
11 *
12 * A copy of this license is available in the file LICENSE in the
13 * top-level directory of the distribution or, alternatively, at
14 * <http://www.OpenLDAP.org/license.html>.
15 */
16/* Portions Copyright (c) 1995 Regents of the University of Michigan.
17 * All rights reserved.
18 */
19/* Portions (C) Copyright PADL Software Pty Ltd. 1999
20 * Redistribution and use in source and binary forms, with or without
21 * modification, are permitted provided that this notice is preserved
22 * and that due credit is given to PADL Software Pty Ltd. This software
23 * is provided ``as is'' without express or implied warranty.
24 */
25
26#include "portable.h"
27
28#ifdef LDAP_PF_LOCAL
29
30#include <stdio.h>
31
32#include <ac/stdlib.h>
33
34#include <ac/errno.h>
35#include <ac/socket.h>
36#include <ac/string.h>
37#include <ac/time.h>
38#include <ac/unistd.h>
39
40#ifdef HAVE_SYS_STAT_H
41#include <sys/stat.h>
42#endif
43#ifdef HAVE_SYS_UIO_H
44#include <sys/uio.h>
45#endif
46
47#ifdef HAVE_IO_H
48#include <io.h>
49#endif /* HAVE_IO_H */
50#ifdef HAVE_FCNTL_H
51#include <fcntl.h>
52#endif
53
54#include "ldap-int.h"
55#include "ldap_defaults.h"
56
57#ifdef LDAP_DEBUG
58
59#define oslocal_debug(ld,fmt,arg1,arg2,arg3) \
60do { \
61	ldap_log_printf(ld, LDAP_DEBUG_TRACE, fmt, arg1, arg2, arg3); \
62} while(0)
63
64#else
65
66#define oslocal_debug(ld,fmt,arg1,arg2,arg3) ((void)0)
67
68#endif /* LDAP_DEBUG */
69
70static void
71ldap_pvt_set_errno(int err)
72{
73	errno = err;
74}
75
76static int
77ldap_pvt_ndelay_on(LDAP *ld, int fd)
78{
79	oslocal_debug(ld, "ldap_ndelay_on: %d\n",fd,0,0);
80	return ber_pvt_socket_set_nonblock( fd, 1 );
81}
82
83static int
84ldap_pvt_ndelay_off(LDAP *ld, int fd)
85{
86	oslocal_debug(ld, "ldap_ndelay_off: %d\n",fd,0,0);
87	return ber_pvt_socket_set_nonblock( fd, 0 );
88}
89
90static ber_socket_t
91ldap_pvt_socket(LDAP *ld)
92{
93	ber_socket_t s = socket(PF_LOCAL, SOCK_STREAM, 0);
94	oslocal_debug(ld, "ldap_new_socket: %d\n",s,0,0);
95#ifdef FD_CLOEXEC
96	fcntl(s, F_SETFD, FD_CLOEXEC);
97#endif
98	return ( s );
99}
100
101static int
102ldap_pvt_close_socket(LDAP *ld, int s)
103{
104	oslocal_debug(ld, "ldap_close_socket: %d\n",s,0,0);
105	return tcp_close(s);
106}
107
108#undef TRACE
109#define TRACE do { \
110	char ebuf[128]; \
111	oslocal_debug(ld, \
112		"ldap_is_socket_ready: errror on socket %d: errno: %d (%s)\n", \
113		s, \
114		errno, \
115		AC_STRERROR_R(errno, ebuf, sizeof ebuf)); \
116} while( 0 )
117
118/*
119 * check the socket for errors after select returned.
120 */
121static int
122ldap_pvt_is_socket_ready(LDAP *ld, int s)
123{
124	oslocal_debug(ld, "ldap_is_sock_ready: %d\n",s,0,0);
125
126#if defined( notyet ) /* && defined( SO_ERROR ) */
127{
128	int so_errno;
129	ber_socklen_t dummy = sizeof(so_errno);
130	if ( getsockopt( s, SOL_SOCKET, SO_ERROR, &so_errno, &dummy )
131		== AC_SOCKET_ERROR )
132	{
133		return -1;
134	}
135	if ( so_errno ) {
136		ldap_pvt_set_errno(so_errno);
137		TRACE;
138		return -1;
139	}
140	return 0;
141}
142#else
143{
144	/* error slippery */
145	struct sockaddr_un sa;
146	char ch;
147	ber_socklen_t dummy = sizeof(sa);
148	if ( getpeername( s, (struct sockaddr *) &sa, &dummy )
149		== AC_SOCKET_ERROR )
150	{
151		/* XXX: needs to be replace with ber_stream_read() */
152		(void)read(s, &ch, 1);
153		TRACE;
154		return -1;
155	}
156	return 0;
157}
158#endif
159	return -1;
160}
161#undef TRACE
162
163#ifdef LDAP_PF_LOCAL_SENDMSG
164static const char abandonPDU[] = {LDAP_TAG_MESSAGE, 6,
165	LDAP_TAG_MSGID, 1, 0, LDAP_REQ_ABANDON, 1, 0};
166#endif
167
168static int
169ldap_pvt_connect(LDAP *ld, ber_socket_t s, struct sockaddr_un *sa, int async)
170{
171	int rc;
172	struct timeval	tv, *opt_tv = NULL;
173
174	if ( ld->ld_options.ldo_tm_net.tv_sec >= 0 ) {
175		tv = ld->ld_options.ldo_tm_net;
176		opt_tv = &tv;
177	}
178
179	oslocal_debug(ld, "ldap_connect_timeout: fd: %d tm: %ld async: %d\n",
180		s, opt_tv ? tv.tv_sec : -1L, async);
181
182	if ( ldap_pvt_ndelay_on(ld, s) == -1 ) return -1;
183
184	if ( connect(s, (struct sockaddr *) sa, sizeof(struct sockaddr_un))
185		!= AC_SOCKET_ERROR )
186	{
187		if ( ldap_pvt_ndelay_off(ld, s) == -1 ) return -1;
188
189#ifdef LDAP_PF_LOCAL_SENDMSG
190	/* Send a dummy message with access rights. Remote side will
191	 * obtain our uid/gid by fstat'ing this descriptor. The
192	 * descriptor permissions must match exactly, and we also
193	 * send the socket name, which must also match.
194	 */
195sendcred:
196		{
197			int fds[2];
198			ber_socklen_t salen = sizeof(*sa);
199			if (pipe(fds) == 0) {
200				/* Abandon, noop, has no reply */
201				struct iovec iov;
202				struct msghdr msg = {0};
203# ifdef HAVE_STRUCT_MSGHDR_MSG_CONTROL
204# ifndef CMSG_SPACE
205# define CMSG_SPACE(len)	(_CMSG_ALIGN( sizeof(struct cmsghdr)) + _CMSG_ALIGN(len) )
206# endif
207# ifndef CMSG_LEN
208# define CMSG_LEN(len)		(_CMSG_ALIGN( sizeof(struct cmsghdr)) + (len) )
209# endif
210				union {
211					struct cmsghdr cm;
212					unsigned char control[CMSG_SPACE(sizeof(int))];
213				} control_un;
214				struct cmsghdr *cmsg;
215# endif /* HAVE_STRUCT_MSGHDR_MSG_CONTROL */
216				msg.msg_name = NULL;
217				msg.msg_namelen = 0;
218				iov.iov_base = (char *) abandonPDU;
219				iov.iov_len = sizeof abandonPDU;
220				msg.msg_iov = &iov;
221				msg.msg_iovlen = 1;
222# ifdef HAVE_STRUCT_MSGHDR_MSG_CONTROL
223				msg.msg_control = control_un.control;
224				msg.msg_controllen = sizeof( control_un.control );
225				msg.msg_flags = 0;
226
227				cmsg = CMSG_FIRSTHDR( &msg );
228				cmsg->cmsg_len = CMSG_LEN( sizeof(int) );
229				cmsg->cmsg_level = SOL_SOCKET;
230				cmsg->cmsg_type = SCM_RIGHTS;
231
232				*((int *)CMSG_DATA(cmsg)) = fds[0];
233# else
234				msg.msg_accrights = (char *)fds;
235				msg.msg_accrightslen = sizeof(int);
236# endif /* HAVE_STRUCT_MSGHDR_MSG_CONTROL */
237				getpeername( s, (struct sockaddr *) sa, &salen );
238				fchmod( fds[0], S_ISUID|S_IRWXU );
239				write( fds[1], sa, salen );
240				sendmsg( s, &msg, 0 );
241				close(fds[0]);
242				close(fds[1]);
243			}
244		}
245#endif
246		return 0;
247	}
248
249	if ( errno != EINPROGRESS && errno != EWOULDBLOCK ) return -1;
250
251#ifdef notyet
252	if ( async ) return -2;
253#endif
254
255#ifdef HAVE_POLL
256	{
257		struct pollfd fd;
258		int timeout = INFTIM;
259
260		if( opt_tv != NULL ) timeout = TV2MILLISEC( &tv );
261
262		fd.fd = s;
263		fd.events = POLL_WRITE;
264
265		do {
266			fd.revents = 0;
267			rc = poll( &fd, 1, timeout );
268		} while( rc == AC_SOCKET_ERROR && errno == EINTR &&
269			LDAP_BOOL_GET(&ld->ld_options, LDAP_BOOL_RESTART ));
270
271		if( rc == AC_SOCKET_ERROR ) return rc;
272
273		if( fd.revents & POLL_WRITE ) {
274			if ( ldap_pvt_is_socket_ready(ld, s) == -1 ) return -1;
275			if ( ldap_pvt_ndelay_off(ld, s) == -1 ) return -1;
276#ifdef LDAP_PF_LOCAL_SENDMSG
277			goto sendcred;
278#else
279			return ( 0 );
280#endif
281		}
282	}
283#else
284	{
285		fd_set wfds, *z=NULL;
286
287#ifdef FD_SETSIZE
288		if ( s >= FD_SETSIZE ) {
289			rc = AC_SOCKET_ERROR;
290			tcp_close( s );
291			ldap_pvt_set_errno( EMFILE );
292			return rc;
293		}
294#endif
295		do {
296			FD_ZERO(&wfds);
297			FD_SET(s, &wfds );
298			rc = select( ldap_int_tblsize, z, &wfds, z, opt_tv ? &tv : NULL );
299		} while( rc == AC_SOCKET_ERROR && errno == EINTR &&
300			LDAP_BOOL_GET(&ld->ld_options, LDAP_BOOL_RESTART ));
301
302		if( rc == AC_SOCKET_ERROR ) return rc;
303
304		if ( FD_ISSET(s, &wfds) ) {
305			if ( ldap_pvt_is_socket_ready(ld, s) == -1 ) return -1;
306			if ( ldap_pvt_ndelay_off(ld, s) == -1 ) return -1;
307#ifdef LDAP_PF_LOCAL_SENDMSG
308			goto sendcred;
309#else
310			return ( 0 );
311#endif
312		}
313	}
314#endif
315
316	oslocal_debug(ld, "ldap_connect_timeout: timed out\n",0,0,0);
317	ldap_pvt_set_errno( ETIMEDOUT );
318	return ( -1 );
319}
320
321int
322ldap_connect_to_path(LDAP *ld, Sockbuf *sb, LDAPURLDesc *srv, int async)
323{
324	struct sockaddr_un	server;
325	ber_socket_t		s;
326	int			rc;
327	const char *path = srv->lud_host;
328
329	oslocal_debug(ld, "ldap_connect_to_path\n",0,0,0);
330
331	if ( path == NULL || path[0] == '\0' ) {
332		path = LDAPI_SOCK;
333	} else {
334		if ( strlen(path) > (sizeof( server.sun_path ) - 1) ) {
335			ldap_pvt_set_errno( ENAMETOOLONG );
336			return -1;
337		}
338	}
339
340	s = ldap_pvt_socket( ld );
341	if ( s == AC_SOCKET_INVALID ) {
342		return -1;
343	}
344
345	oslocal_debug(ld, "ldap_connect_to_path: Trying %s\n", path, 0, 0);
346
347	memset( &server, '\0', sizeof(server) );
348	server.sun_family = AF_LOCAL;
349	strcpy( server.sun_path, path );
350
351	rc = ldap_pvt_connect(ld, s, &server, async);
352
353	if (rc == 0) {
354		rc = ldap_int_connect_cbs( ld, sb, &s, srv, (struct sockaddr *)&server );
355	}
356	if ( rc ) {
357		ldap_pvt_close_socket(ld, s);
358	}
359	return rc;
360}
361#else
362static int dummy;
363#endif /* LDAP_PF_LOCAL */
364