/* Copyright (C) 2011 the GSS-PROXY contributors, see COPYING for license */

#ifndef _GP_PROXY_H_

#define _GP_PROXY_H_

#include <libintl.h>

#include <stdbool.h>

#include <stdint.h>

#include <gssapi/gssapi_ext.h>

#include "verto.h"

#include "gp_common.h"

#include "gp_selinux.h"

#define _(STRING) gettext(STRING)

#define discard_const(ptr) ((void *)((uintptr_t)(ptr)))

#define LINUX_PROC_USE_GSS_PROXY_FILE "/proc/net/rpc/use-gss-proxy"

#define GP_CRED_KRB5    0x01

struct gp_creds_handle;

struct gp_cred_krb5 {

    char *principal;

    gss_key_value_set_desc store;

    struct gp_creds_handle *creds_handle;

};

struct gp_service {

    char *name;

    uid_t euid;

    bool any_uid;

    bool allow_proto_trans;

    bool allow_const_deleg;

    bool allow_cc_sync;

    bool trusted;

    bool kernel_nfsd;

    bool impersonate;

    char *socket;

    SELINUX_CTX selinux_ctx;

    gss_cred_usage_t cred_usage;

    uint32_t filter_flags;

    uint32_t enforce_flags;

    char *program;

    uint32_t mechs;

    struct gp_cred_krb5 krb5;

    verto_ev *ev;

};

struct gp_config {

    char *config_file;      /* gssproxy configuration file */

    char *config_dir;       /* gssproxy configuration directory */

    bool daemonize;         /* let gssproxy daemonize */

    char *socket_name;      /* the socket name to use for */

    int num_workers;        /* number of worker threads */

    struct gp_service **svcs;

    int num_svcs;

    char *proxy_user;       /* user to drop privs to if not NULL */

};

struct gp_workers;

struct gssproxy_ctx {

    struct gp_config *config;

    struct gp_workers *workers;

    verto_ctx *vctx;

    verto_ev *sock_ev;      /* default socket event */

};

struct gp_sock_ctx {

    struct gssproxy_ctx *gpctx;

    const char *socket;

    int fd;

};

struct gp_conn;

struct gp_call_ctx {

    struct gssproxy_ctx *gpctx;

    struct gp_service *service;

    struct gp_conn *connection;

    void (*destroy_callback)(void *);

    void *destroy_callback_data;

};

/* from gp_config.c */

struct gp_config *read_config(char *config_file, char *config_dir,

                              char *socket_name, int opt_daemonize);

struct gp_creds_handle *gp_service_get_creds_handle(struct gp_service *svc);

void free_config(struct gp_config **config);

void free_cred_store_elements(gss_key_value_set_desc *cs);

/* from gp_init.c */

void init_server(bool daemonize, int *wait_fd);

void init_done(int wait_fd);

void fini_server(void);

verto_ctx *init_event_loop(void);

void init_proc_nfsd(struct gp_config *cfg);

void write_pid(void);

int drop_privs(struct gp_config *cfg);

/* from gp_socket.c */

void free_unix_socket(verto_ctx *ctx, verto_ev *ev);

struct gp_sock_ctx *init_unix_socket(struct gssproxy_ctx *gpctx,

                                     const char *file_name);

void accept_sock_conn(verto_ctx *vctx, verto_ev *ev);

void gp_conn_free(struct gp_conn *conn);

void gp_socket_send_data(verto_ctx *vctx, struct gp_conn *conn,

                         uint8_t *buffer, size_t buflen);

struct gp_creds *gp_conn_get_creds(struct gp_conn *conn);

uid_t gp_conn_get_uid(struct gp_conn *conn);

const char *gp_conn_get_socket(struct gp_conn *conn);

int gp_conn_get_cid(struct gp_conn *conn);

const char *gp_conn_get_program(struct gp_conn *conn);

bool gp_selinux_ctx_equal(SELINUX_CTX ctx1, SELINUX_CTX ctx2);

bool gp_conn_check_selinux(struct gp_conn *conn, SELINUX_CTX ctx);

/* from gp_workers.c */

int gp_workers_init(struct gssproxy_ctx *gpctx);

void gp_workers_free(struct gp_workers *w);

int gp_query_new(struct gp_workers *w, struct gp_conn *conn,

                 uint8_t *buffer, size_t buflen);

/* from gp_rpc.c */

int gp_rpc_process_call(struct gp_call_ctx *gpcall,

                        uint8_t *inbuf, size_t inlen,

                        uint8_t **outbuf, size_t *outlen);

/* from gp_creds.c */

struct gp_service *gp_creds_match_conn(struct gssproxy_ctx *gpctx,

                                       struct gp_conn *conn);

/* from gp_export.c */

uint32_t gp_init_creds_handle(uint32_t *min, const char *svc_name,

                              const char *keytab,

                              struct gp_creds_handle **out);

void gp_free_creds_handle(struct gp_creds_handle **in);

#endif /* _GP_PROXY_H_ */