summaryrefslogtreecommitdiffstats
path: root/src/auth/krb/KrbAuthorizeHandler.cpp
blob: 1faad8bbe4df44be3e9e325ff57a80df653d6abb (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
// -*- mode:C++; tab-width:8; c-basic-offset:2; indent-tabs-mode:t -*-
// vim: ts=8 sw=2 smarttab
/*
 * Ceph - scalable distributed file system
 *
 * Copyright (c) 2018 SUSE LLC.
 * Author: Daniel Oliveira <doliveira@suse.com>
 * 
 * This is free software; you can redistribute it and/or
 * modify it under the terms of the GNU Lesser General Public
 * License version 2.1, as published by the Free Software
 * Foundation.  See file COPYING.
 *
 */

#include "KrbAuthorizeHandler.hpp"

#include "common/debug.h"

#define dout_subsys ceph_subsys_auth 

bool KrbAuthorizeHandler::verify_authorizer(
  CephContext* ceph_ctx,
  KeyStore* keys,
  const bufferlist& authorizer_data,
  size_t connection_secret_required_len,
  bufferlist *authorizer_reply,
  EntityName *entity_name,
  uint64_t *global_id,
  AuthCapsInfo *caps_info,
  CryptoKey *session_key,
  std::string *connection_secret,
  std::unique_ptr<AuthAuthorizerChallenge>* challenge)
{
  auto itr(authorizer_data.cbegin());

  try {
    uint8_t value = (1);

    using ceph::decode;
    decode(value, itr);
    decode(*entity_name, itr);
    decode(*global_id, itr);
  } catch (const buffer::error& err) {
    ldout(ceph_ctx, 0) 
        << "Error: KrbAuthorizeHandler::verify_authorizer() failed!" << dendl;
    return false;
  }
  caps_info->allow_all = true;
  return true;
}