pyceo/src/ceoc.c

#include <string.h>
#include <stdio.h>
#include <unistd.h>
#include <getopt.h>
#include <libgen.h>

#include "util.h"
#include "net.h"
#include "gss.h"
#include "ops.h"
#include "config.h"

char *prog = NULL;

static struct option opts[] = {
    { NULL, 0, NULL, '\0' },
};

static void usage() {
    fprintf(stderr, "Usage: %s op\n", prog);
    exit(2);
}

static void send_gss_token(int sock, struct sockaddr *addr, socklen_t addrlen, gss_buffer_t token) {
    OM_uint32 maj_stat, min_stat;

    if (ceo_send_message(sock, token->value, token->length, MSG_AUTH))
        fatalpe("write");

    maj_stat = gss_release_buffer(&min_stat, token);
    if (maj_stat != GSS_S_COMPLETE)
        gss_fatal("gss_release_buffer", maj_stat, min_stat);
}

static void client_gss_auth(int sock, struct sockaddr *addr, socklen_t addrlen) {
    gss_buffer_desc incoming_tok, outgoing_tok;
    struct strbuf msg = STRBUF_INIT;
    uint32_t msgtype;
    int complete;

    complete = initial_client_token(&outgoing_tok);

    for (;;) {
        if (outgoing_tok.length)
            send_gss_token(sock, addr, addrlen, &outgoing_tok);
        else if (!complete)
            fatal("no token to send during auth");

        if (complete)
            break;

        if (ceo_receive_message(sock, &msg, &msgtype))
            fatal("connection closed during auth");

        if (msgtype != MSG_AUTH)
            fatal("unexpected message type 0x%x", msgtype);

        incoming_tok.value = msg.buf;
        incoming_tok.length = msg.len;

        complete = process_client_token(&incoming_tok, &outgoing_tok);
    }

    strbuf_release(&msg);
}

void run_remote(struct op *op, struct strbuf *in, struct strbuf *out) {
    const char *hostname = op->hostname;
    int sock = socket(PF_INET, SOCK_STREAM, IPPROTO_TCP);
    struct sockaddr_in addr;
    uint32_t msgtype;
    struct strbuf in_cipher = STRBUF_INIT, out_cipher = STRBUF_INIT;

    if (!in->len)
        fatal("no data to send");

    memset(&addr, 0, sizeof(addr));
    addr.sin_family = AF_INET;
    addr.sin_port = htons(9987);
    addr.sin_addr = op->addr;

    if (connect(sock, (struct sockaddr *)&addr, sizeof(addr)))
        fatalpe("connect");

    client_acquire_creds("ceod", hostname);
    client_gss_auth(sock, (sa *)&addr, sizeof(addr));

    gss_encipher(in, &in_cipher);

    if (ceo_send_message(sock, in_cipher.buf, in_cipher.len, op->id))
        fatalpe("write");

    if (ceo_receive_message(sock, &out_cipher, &msgtype))
        fatal("no response received for op %s", op->name);

    gss_decipher(&out_cipher, out);

    if (msgtype != op->id)
        fatal("wrong message type from server: expected %d got %d", op->id, msgtype);

    if (close(sock))
        fatalpe("close");

    strbuf_release(&in_cipher);
    strbuf_release(&out_cipher);
}

int client_main(char *op_name) {
    struct op *op = find_op(op_name);

    if (!op)
        fatal("no such op: %s", op_name);

    struct strbuf in = STRBUF_INIT;
    struct strbuf out = STRBUF_INIT;

    if (strbuf_read(&in, STDIN_FILENO, 0) < 0)
        fatalpe("read");

    run_remote(op, &in, &out);

    if (strbuf_write(&out, STDOUT_FILENO) < 0)
        fatalpe("write");

    strbuf_release(&in);
    strbuf_release(&out);

    return 0;
}

int main(int argc, char *argv[]) {
    int opt;
    int ret;
    char *op;

    prog = xstrdup(basename(argv[0]));
    init_log(prog, LOG_PID, LOG_USER, 1);

    configure();
    setup_ops();
    setup_fqdn();

    while ((opt = getopt_long(argc, argv, "", opts, NULL)) != -1) {
        switch (opt) {
            case '?':
                usage();
                break;
            default:
                fatal("error parsing arguments");
        }
    }

    if (argc - optind != 1)
        usage();

    op = argv[optind++];

    ret = client_main(op);

    free_gss();
    free_fqdn();
    free_config();
    free_ops();
    free(prog);

    return ret;
}