#include <XrdAccConfig.hh>

Collaboration diagram for XrdAccConfig:

Public Member Functions
	XrdAccConfig ()

	~XrdAccConfig ()

int	ConfigDB (int Warm, XrdSysError &Eroute)

int	Configure (XrdSysError &Eroute, const char *cfn)

Public Attributes
XrdAccAccess *	Authorization

int	AuthRT

XrdAccGroups	GroupMaster

Detailed Description

Definition at line 64 of file XrdAccConfig.hh.

Constructor & Destructor Documentation

◆ XrdAccConfig()

XrdAccConfig::XrdAccConfig ( )

Definition at line 103 of file XrdAccConfig.cc.

 {
  
 // Initialize path value and databse pointer to nil
 //
    Database      = 0;
    Authorization = 0;
    spChar        = 0;
    uriPath       = false;
  
    const char *dbpath_defaults[] = {
     "/opt/xrd/etc/Authfile",
     "/etc/xrootd/authdb"
    };
  
    dbpath = nullptr;
    for (const char *path : dbpath_defaults)
      if (access(path, R_OK) == 0)
        dbpath = strdup(path);
  
 // Establish other defaults
 //
    ConfigDefaults();
 }

References access(), and Authorization.

Here is the call graph for this function:

◆ ~XrdAccConfig()

XrdAccConfig::~XrdAccConfig ( )

inline

Definition at line 84 of file XrdAccConfig.hh.

84 { free(dbpath); }

Member Function Documentation

◆ ConfigDB()

int XrdAccConfig::ConfigDB	(	int	Warm,
		XrdSysError &	Eroute
	)

Definition at line 175 of file XrdAccConfig.cc.

 {
 /*
   Function: Establish default values using a configuration file.
  
   Input:    None.
  
   Output:   0 upon success or !0 otherwise.
 */
    char buff[128];
    int  retc, anum = 0, NoGo = 0;
    struct XrdAccAccess_Tables tabs;
    XrdOucLock cdb_Lock(&Config_Context);
  
 // Indicate type of start we are doing
 //
    if (!Database) NoGo = !(Database = XrdAccAuthDBObject(&Eroute));
       else if (Warm && !Database->Changed(dbpath)) return 0;
  
 // Try to open the authorization database
 //
    if (!Database || !Database->Open(Eroute, dbpath)) return 1;
  
 // Allocate new hash tables
 //
    if (!(tabs.G_Hash = new XrdOucHash<XrdAccCapability>()) ||
        !(tabs.H_Hash = new XrdOucHash<XrdAccCapability>()) ||
        !(tabs.N_Hash = new XrdOucHash<XrdAccCapability>()) ||
        !(tabs.O_Hash = new XrdOucHash<XrdAccCapability>()) ||
        !(tabs.R_Hash = new XrdOucHash<XrdAccCapability>()) ||
        !(tabs.T_Hash = new XrdOucHash<XrdAccCapability>()) ||
        !(tabs.U_Hash = new XrdOucHash<XrdAccCapability>()) )
       {Eroute.Emsg("ConfigDB","Insufficient storage for id tables.");
        Database->Close(); return 1;
       }
  
 // Now start processing records until eof.
 //
    rulenum = 0;
    while((retc = ConfigDBrec(Eroute, tabs))) {NoGo |= retc < 0; anum++;}
    snprintf(buff, sizeof(buff), "%d auth entries processed in ", anum);
    Eroute.Say("Config ", buff, dbpath);
  
 // All done, close the database and return if we failed
 //
    if (!Database->Close() || NoGo) return 1;
  
 // Do final setup for special identifiers (this will correctly order them)
 //
    if (tabs.SYList) idChk(Eroute, tabs.SYList, tabs);
  
 // Set the access control tables
 //
    if (!tabs.G_Hash->Num()) {delete tabs.G_Hash; tabs.G_Hash=0;}
    if (!tabs.H_Hash->Num()) {delete tabs.H_Hash; tabs.H_Hash=0;}
    if (!tabs.N_Hash->Num()) {delete tabs.N_Hash; tabs.N_Hash=0;}
    if (!tabs.O_Hash->Num()) {delete tabs.O_Hash; tabs.O_Hash=0;}
    if (!tabs.R_Hash->Num()) {delete tabs.R_Hash; tabs.R_Hash=0;}
    if (!tabs.T_Hash->Num()) {delete tabs.T_Hash; tabs.T_Hash=0;}
    if (!tabs.U_Hash->Num()) {delete tabs.U_Hash; tabs.U_Hash=0;}
    Authorization->SwapTabs(tabs);
  
 // All done
 //
    return NoGo;
 }

References Authorization, XrdAccAuthDB::Changed(), XrdAccAuthDB::Close(), XrdSysError::Emsg(), XrdAccAccess_Tables::G_Hash, XrdAccAccess_Tables::H_Hash, XrdAccAccess_Tables::N_Hash, XrdOucHash< T >::Num(), XrdAccAccess_Tables::O_Hash, XrdAccAuthDB::Open(), XrdAccAccess_Tables::R_Hash, XrdSysError::Say(), XrdAccAccess::SwapTabs(), XrdAccAccess_Tables::SYList, XrdAccAccess_Tables::T_Hash, XrdAccAccess_Tables::U_Hash, and XrdAccAuthDBObject().

Referenced by Configure(), and XrdAccConfig_Refresh().

Here is the call graph for this function:

Here is the caller graph for this function:

◆ Configure()

int XrdAccConfig::Configure	(	XrdSysError &	Eroute,
		const char *	cfn
	)

Definition at line 132 of file XrdAccConfig.cc.

                                                                 {
 /*
   Function: Establish default values using a configuration file.
  
   Input:    None.
  
   Output:   0 upon success or !0 otherwise.
 */
    char *var;
    int  retc, NoGo = 0, Cold = (Database == 0);
    pthread_t reftid;
  
 // Print warm-up message
 //
    Eroute.Say("++++++ Authorization system initialization started.");
  
 // Process the configuration file and authorization database
 //
    if (!(Authorization = new XrdAccAccess(&Eroute))
    ||   (NoGo = ConfigFile(Eroute, cfn))
    ||   (NoGo = ConfigDB(0, Eroute)))
        {if (Authorization) {delete Authorization, Authorization = 0;}
         NoGo = 1;
        }
  
 // Start a refresh thread unless this was a refresh thread call
 //
    if (Cold && !NoGo)
       {if ((retc=XrdSysThread::Run(&reftid,XrdAccConfig_Refresh,(void *)&Eroute)))
           Eroute.Emsg("ConfigDB",retc,"start refresh thread.");
       }
  
 // All done
 //
    var = (NoGo > 0 ? (char *)"failed." : (char *)"completed.");
    Eroute.Say("------ Authorization system initialization ", var);
    return (NoGo > 0);
 }