XrdAccTest.cc File Reference

#include <unistd.h>
#include <cctype>
#include <cerrno>
#include <cstdlib>
#include <strings.h>
#include <cstdio>
#include <grp.h>
#include <arpa/inet.h>
#include <sys/param.h>
#include <sys/socket.h>
#include "XrdVersion.hh"
#include "XrdAcc/XrdAccAuthorize.hh"
#include "XrdAcc/XrdAccConfig.hh"
#include "XrdAcc/XrdAccGroups.hh"
#include "XrdAcc/XrdAccPrivs.hh"
#include "XrdSys/XrdSysError.hh"
#include "XrdSys/XrdSysHeaders.hh"
#include "XrdSys/XrdSysLogger.hh"
#include "XrdNet/XrdNetAddr.hh"
#include "XrdOuc/XrdOucEnv.hh"
#include "XrdOuc/XrdOucStream.hh"

Include dependency graph for XrdAccTest.cc:

Go to the source code of this file.

Classes
struct	optab_t

Functions
Access_Operation	cmd2op (char *opname)
int	DoIt (int argpnt, int argc, char **argv, bool singleshot)
int	main (int argc, char **argv)
char *	PrivsConvert (XrdAccPrivCaps &ctab, char *buff, int blen)
void	SetID (char *&dest, char *val)
void	Usage (const char *msg)
void	ZapEntity ()

Variables
XrdAccAuthorize *	Authorize
int	extra
XrdSysLogger	myLogger
int	opcnt = sizeof(optab)/sizeof(optab[0])
optab_t	optab []

---

Class Documentation

optab_t

struct optab_t

Definition at line 81 of file XrdAccTest.cc.

Collaboration diagram for optab_t:

Class Members
Access_Operation	oper
const char *	opname

Function Documentation

cmd2op()

Access_Operation cmd2op

(

char *

opname

)

Definition at line 353 of file XrdAccTest.cc.

{
   int i;
   for (i = 0; i < opcnt; i++) 
       if (!strcmp(opname, optab[i].opname)) return optab[i].oper;
   std::cerr << "testaccess: Invalid operation - " <<opname <<std::endl;
   return AOP_Any;
}

References AOP_Any, opcnt, optab_t::oper, and optab.

Referenced by DoIt().

Here is the caller graph for this function:

DoIt()

int DoIt	(	int	argpnt,
		int	argc,
		char **	argv,
		bool	singleshot
	)

Definition at line 262 of file XrdAccTest.cc.

{
char *opc, *opv, *path, *result, buff[80];
Access_Operation cmd2op(char *opname);
void Usage(const char *);
Access_Operation optype;
XrdAccPrivCaps pargs;
XrdAccPrivs auth;
 
// Get options (this may be interactive mode)
//
   while(argpnt < argc && *argv[argpnt] == '-')
        {opc = argv[argpnt++];
         if (argpnt >= argc)
            {sprintf(buff, "%s option value not specified.", opc);
             Usage(buff);
            }
          opv = argv[argpnt++];
         if (strlen(opc) != 2)
            {sprintf(buff, "%s option is invalid.", opc);
             Usage(buff);
            }
         switch(*(opc+1))
               {case 'a': {size_t size = sizeof(Entity.prot)-1;
                           strncpy(Entity.prot, opv, size);
                           Entity.prot[size] = '\0';
                          }
                          v2 = true; break;
                case 'e': Entity.ueid = atoi(opv); v2 = true; break;
                case 'g': SetID(Entity.grps, opv); v2 = true; break;
                case 'h': SetID(Entity.host, opv); v2 = true; break;
                case 'o': SetID(Entity.vorg, opv); v2 = true; break;
                case 'r': SetID(Entity.role, opv); v2 = true; break;
                case 'u': SetID(Entity.name, opv); v2 = true; break;
                default:  sprintf(buff, "%s option is invalid.", opc);
                          Usage(buff);
                          break;
               }
        }
 
// Make sure user and host specified if v1 version being used
//
   if (!v2)
      {if (argpnt >= argc) Usage("user not specified.");
       Entity.name = argv[argpnt++];
       if (argpnt >= argc) Usage("host not specified.");
       Entity.host = argv[argpnt++];
      }
 
// Make sure op specified unless we are v2
//
   if (argpnt >= argc)
      {if (v2) return 0;
          else Usage("operation not specified.");
      }
   if (!strcmp(argv[argpnt], "*"))
      {ZapEntity();
       return 0;
      }
   optype = cmd2op(argv[argpnt++]);
 
// Make sure path specified
//
   if (argpnt >= argc) Usage("path not specified.");
 
// Set host, ignore errors
//
  if (Entity.host) netAddr.Set(Entity.host, 0);
 
// Process each path, as needed
//
   while(argpnt < argc)
        {path = argv[argpnt++];
         auth = Authorize->Access((const XrdSecEntity *)&Entity,
                                  (const char *)path,
                                                optype);
         if (optype != AOP_Any) result=(auth?(char *)"allowed":(char *)"denied");
            else {pargs.pprivs = auth; pargs.nprivs = XrdAccPriv_None;
                  result = PrivsConvert(pargs, buff, sizeof(buff));
                 }
         std::cout <<result <<": " <<path <<std::endl;
         if (singleshot) return !auth;
       }
 
return 0;
}

References XrdAccAuthorize::Access(), AOP_Any, Authorize, cmd2op(), XrdAccPrivCaps::nprivs, XrdAccPrivCaps::pprivs, PrivsConvert(), SetID(), Usage(), XrdAccPriv_None, and ZapEntity().

Referenced by XrdPfc::IO::Detach(), main(), and XrdPfc::ResourceMonitor::perform_purge_check().

Here is the call graph for this function:

Here is the caller graph for this function:

main()

int main	(	int	argc,
		char **	argv
	)

Definition at line 152 of file XrdAccTest.cc.

{
static XrdVERSIONINFODEF(myVer, XrdAccTest, XrdVNUMBER, XrdVERSION);
extern int   optind;
extern char *optarg;
extern XrdAccAuthorize *XrdAccDefaultAuthorizeObject(XrdSysLogger   *lp,
                                                     const char     *cfn,
                                                     const char     *parm,
                                                     XrdVersionInfo &myVer);
int DoIt(int argpnt, int argc, char **argv, bool singleshot);
 
const char *cfHost = "localhost", *cfProg = "xrootd";
char *p2l(XrdAccPrivs priv, char *buff, int blen);
char *argval[32], buff[255], tident[80], c;
int DoIt(int argnum, int argc, char **argv, int singleshot);
XrdOucStream Command;
const int maxargs = sizeof(argval)/sizeof(argval[0]);
char *at, *lp, *ConfigFN = (char *)"./acc.cf";
int argnum, rc = 0;
bool singleshot=false;
 
// Print help if no args
//
  if (argc == 1) Usage(0);
  Entity.addrInfo = &netAddr;
  sprintf(tident, "acctest.%d:0@localhost", getpid());
  Entity.tident = tident;
 
// Get all of the options.
//
   while ((c=getopt(argc,argv,"a:c:de:g:h:o:r:u:s")) != (char)EOF)
     { switch(c)
       {
       case 'a': 
                 {size_t size = sizeof(Entity.prot)-1;
                  strncpy(Entity.prot, optarg, size);
                  Entity.prot[size] = '\0';
                 }
                                             v2 = true;    break;
       case 'd':                                           break;
       case 'e': Entity.ueid = atoi(optarg); v2 = true;    break;
       case 'g': SetID(Entity.grps, optarg); v2 = true;    break;
       case 'h': SetID(Entity.host, optarg); v2 = true;    break;
       case 'o': SetID(Entity.vorg, optarg); v2 = true;    break;
       case 'r': SetID(Entity.role, optarg); v2 = true;    break;
       case 'u': SetID(Entity.name, optarg); v2 = true;    break;
       case 'c': ConfigFN = optarg;                        break;
       case 's': singleshot = true;                        break;
       default:  sprintf(buff, "-%c option is invalid.", c);
                 Usage(buff);
       }
     }
 
// Establish environment
//
   if ((at = index(ConfigFN, '@')))
      {*at++ = 0; if (*at) cfHost = at;}
   sprintf(buff, "%s anon@%s", cfProg, cfHost);
   XrdOucEnv::Export("XRDINSTANCE", buff);
 
// Obtain the authorization object
//
if (!(Authorize = XrdAccDefaultAuthorizeObject(&myLogger, ConfigFN, 0, myVer)))
   {std::cerr << "testaccess: Initialization failed." <<std::endl;
    exit(2);
   }
 
// If command line options specified, process this
//
   if (optind < argc) {rc = DoIt(optind, argc, argv, singleshot); exit(rc);}
 
// Start accepting command from standard in until eof
//
   bool dequote;
   Command.Attach(0);
   std::cerr << "Enter arguments: ";
   while((lp = Command.GetLine()) && *lp)
      {dequote = false;
       char *xp = lp;
       while(*xp)
            {if (*xp == '\'')
                {*xp++ = ' ';
                 dequote = true;
                 while(*xp)
                      {if (*xp == ' ') *xp = '\t';
                          else if (*xp == '\'') {*xp++ = ' '; break;}
                       xp++;
                      }
                } else xp++;
             }
 
       for (argnum=1;
            argnum < maxargs && (argval[argnum]=Command.GetToken());
            argnum++) {}
       if (dequote)
          {for (int i = 1; i < argnum; i++)
               {char *ap = argval[i];
                while(*ap) {if (*ap == '\t') *ap = ' '; ap++;}
               }
          }
       Entity.ueid++;
       rc |= DoIt(1, argnum, argval, singleshot=0);
       std::cerr << "Enter arguments: ";
      }
 
// All done
//
   exit(rc);
}

References XrdOucStream::Attach(), Authorize, DoIt(), XrdOucEnv::Export(), XrdOucStream::GetLine(), XrdOucStream::GetToken(), myLogger, optind, SetID(), tident, Usage(), XrdAccDefaultAuthorizeObject(), and XrdCms::XrdVERSIONINFODEF().

Here is the call graph for this function:

PrivsConvert()

char * PrivsConvert	(	XrdAccPrivCaps &	ctab,
		char *	buff,
		int	blen
	)

Definition at line 366 of file XrdAccTest.cc.

{
     int i=0, j, k=2, bmax = blen-1;
     XrdAccPrivs privs;
     static struct {XrdAccPrivs pcode; char plet;} p2l[] =
                   {{XrdAccPriv_Delete,  'd'},
                    {XrdAccPriv_Insert,  'i'},
                    {XrdAccPriv_Lock,    'k'},
                    {XrdAccPriv_Lookup,  'l'},
                    {XrdAccPriv_Rename,  'n'},
                    {XrdAccPriv_Read,    'r'},
                    {XrdAccPriv_Write,   'w'}
                   };
     static int p2lnum = sizeof(p2l)/sizeof(p2l[0]);
 
     privs = ctab.pprivs;
     while(k--)
       {for (j = 0; j < p2lnum && i < bmax; j++)
            if (privs & p2l[j].pcode) buff[i++] = p2l[j].plet;
        if (i < bmax && ctab.nprivs != XrdAccPriv_None) buff[i++] = '-';
           else break;
        privs = ctab.nprivs;
       }
     buff[i] = '\0';
     return buff;
}

References XrdAccPrivCaps::nprivs, XrdAccPrivCaps::pprivs, XrdAccPriv_Delete, XrdAccPriv_Insert, XrdAccPriv_Lock, XrdAccPriv_Lookup, XrdAccPriv_None, XrdAccPriv_Read, XrdAccPriv_Rename, and XrdAccPriv_Write.

Referenced by DoIt().

Here is the caller graph for this function:

SetID()

void SetID	(	char *&	dest,
		char *	val
	)

Definition at line 123 of file XrdAccTest.cc.

{
   if (dest) free(dest);
   dest = (strcmp(val, "none") ? strdup(val) : 0);
}

Referenced by DoIt(), and main().

Here is the caller graph for this function:

Usage()

void Usage

(

const char *

msg

)

Definition at line 105 of file XrdAccTest.cc.

{
   if (msg) std::cerr <<"xrdacctest: " <<msg <<std::endl;
   std::cerr <<"Usage: xrdacctest [-c <cfn>] [<ids> | <user> <host>] <act>\n\n";
   std::cerr <<"<ids>: -a <auth> -g <grp> -h <host> -o <org> -r <role> -u <user>\n";
   std::cerr <<"<act>: <opc> <path> [<path> [...]]\n";
   std::cerr <<"<opc>: cr - create    mv - rename    st - status    lk - lock\n";
   std::cerr <<"       rd - read      wr - write     ls - readdir   rm - remove\n";
   std::cerr <<"       ec - excl create              ei - excl rename\n";
   std::cerr <<"       *  - zap args  ?  - display privs\n";
   std::cerr << std::flush;
   exit(msg ? 1 : 0);
}

Referenced by XrdOssCache::Adjust(), XrdConfig::Configure(), XrdCmsConfig::Configure1(), DoIt(), XrdOssCache::Init(), main(), XrdCmsCluster::MonPerf(), and XrdOssCache::Scan().

Here is the caller graph for this function:

ZapEntity()

void ZapEntity

(

)

Definition at line 133 of file XrdAccTest.cc.

{
   strncpy(Entity.prot, "host", sizeof(Entity.prot));
   if (Entity.grps) free(Entity.grps);
   Entity.grps = 0;
   if (Entity.host) free(Entity.host);
   Entity.host = 0;
   if (Entity.vorg) free(Entity.vorg);
   Entity.vorg = 0;
   if (Entity.role) free(Entity.role);
   Entity.role = 0;
   if (Entity.name) free(Entity.name);
   Entity.name = 0;
}

Referenced by DoIt().

Here is the caller graph for this function:

Variable Documentation

Authorize

XrdAccAuthorize* Authorize

Definition at line 61 of file XrdAccTest.cc.

Referenced by DoIt(), main(), and XrdPssSys::P2DST().

extra

int extra

Definition at line 63 of file XrdAccTest.cc.

Referenced by XrdZip::Extra::Extra().

myLogger

XrdSysError eroute & myLogger

Definition at line 65 of file XrdAccTest.cc.

Referenced by main().

opcnt

int opcnt = sizeof(optab)/sizeof(optab[0])

Definition at line 99 of file XrdAccTest.cc.

Referenced by cmd2op().

optab

optab_t optab[]

Initial value:

=
             {{"?",      AOP_Any},
              {"cm",     AOP_Chmod},
              {"co",     AOP_Chown},
              {"cr",     AOP_Create},
              {"ec",     AOP_Excl_Create},
              {"rm",     AOP_Delete},
              {"lk",     AOP_Lock},
              {"mk",     AOP_Mkdir},
              {"mv",     AOP_Rename},
              {"ei",     AOP_Excl_Insert},
              {"rd",     AOP_Read},
              {"ls",     AOP_Readdir},
              {"st",     AOP_Stat},
              {"wr",     AOP_Update}
             }

Definition at line 82 of file XrdAccTest.cc.

Referenced by cmd2op().