X-Git-Url: https://git.sur5r.net/?a=blobdiff_plain;f=bacula%2Fsrc%2Fdird%2Fauthenticate.c;h=f2f0bdb2698e185cdb49ccbfa456b4fc0f15a645;hb=7ebf8f564b27ca8448a9a7365ba73b130ae69c21;hp=9dacdb6d8712f616d8ab3f76a426b07ed94bf573;hpb=099fc761d52104a69c0d0fd2f114b0a0735307e7;p=bacula%2Fbacula diff --git a/bacula/src/dird/authenticate.c b/bacula/src/dird/authenticate.c index 9dacdb6d87..f2f0bdb269 100644 --- a/bacula/src/dird/authenticate.c +++ b/bacula/src/dird/authenticate.c @@ -63,22 +63,28 @@ int authenticate_storage_daemon(JCR *jcr) */ bstrncpy(dirname, director->hdr.name, sizeof(dirname)); bash_spaces(dirname); + /* Timeout Hello after 5 mins */ + btimer_t *tid = start_bsock_timer(sd, 60 * 5); if (!bnet_fsend(sd, hello, dirname)) { + stop_bsock_timer(tid); Jmsg(jcr, M_FATAL, 0, _("Error sending Hello to Storage daemon. ERR=%s\n"), bnet_strerror(sd)); return 0; } if (!cram_md5_get_auth(sd, jcr->store->password, ssl_need) || !cram_md5_auth(sd, jcr->store->password, ssl_need)) { + stop_bsock_timer(tid); Jmsg0(jcr, M_FATAL, 0, _("Director and Storage daemon passwords or names not the same.\n")); return 0; } Dmsg1(116, ">stored: %s", sd->msg); if (bnet_recv(sd) <= 0) { + stop_bsock_timer(tid); Jmsg1(jcr, M_FATAL, 0, _("bdirdmsg); + stop_bsock_timer(tid); if (strncmp(sd->msg, OKhello, sizeof(OKhello)) != 0) { Jmsg0(jcr, M_FATAL, 0, _("Storage daemon rejected Hello command\n")); return 0; @@ -100,22 +106,28 @@ int authenticate_file_daemon(JCR *jcr) */ bstrncpy(dirname, director->hdr.name, sizeof(dirname)); bash_spaces(dirname); + /* Timeout Hello after 5 mins */ + btimer_t *tid = start_bsock_timer(fd, 60 * 5); if (!bnet_fsend(fd, hello, dirname)) { + stop_bsock_timer(tid); Jmsg(jcr, M_FATAL, 0, _("Error sending Hello to File daemon. ERR=%s\n"), bnet_strerror(fd)); return 0; } if (!cram_md5_get_auth(fd, jcr->client->password, ssl_need) || !cram_md5_auth(fd, jcr->client->password, ssl_need)) { + stop_bsock_timer(tid); Jmsg(jcr, M_FATAL, 0, _("Director and File daemon passwords or names not the same.\n")); return 0; } Dmsg1(116, ">filed: %s", fd->msg); if (bnet_recv(fd) <= 0) { + stop_bsock_timer(tid); Jmsg(jcr, M_FATAL, 0, _("Bad response from File daemon to Hello command: ERR=%s\n"), bnet_strerror(fd)); return 0; } Dmsg1(110, "msg); + stop_bsock_timer(tid); if (strncmp(fd->msg, FDOKhello, sizeof(FDOKhello)) != 0) { Jmsg(jcr, M_FATAL, 0, _("File daemon rejected Hello command\n")); return 0; @@ -126,25 +138,27 @@ int authenticate_file_daemon(JCR *jcr) /********************************************************************* * */ -int authenticate_user_agent(BSOCK *ua) +int authenticate_user_agent(UAContext *uac) { char name[MAX_NAME_LENGTH]; int ssl_need = BNET_SSL_NONE; bool ok; + BSOCK *ua = uac->UA_sock; if (ua->msglen < 16 || ua->msglen >= MAX_NAME_LENGTH + 15) { - Emsg2(M_ERROR, 0, _("UA Hello from %s is invalid. Len=%d\n"), ua->who, - ua->msglen); + Emsg4(M_ERROR, 0, _("UA Hello from %s:%s:%d is invalid. Len=%d\n"), ua->who, + ua->host, ua->port, ua->msglen); return 0; } if (sscanf(ua->msg, "Hello %127s calling\n", name) != 1) { ua->msg[100] = 0; /* terminate string */ - Emsg2(M_ERROR, 0, _("UA Hello from %s is invalid. Got: %s\n"), ua->who, - ua->msg); + Emsg4(M_ERROR, 0, _("UA Hello from %s:%s:%d is invalid. Got: %s\n"), ua->who, + ua->host, ua->port, ua->msg); return 0; } - name[MAXSTRING-1] = 0; /* terminate name */ +// Dmsg2(000, "Console=%s addr=%s\n", name, inet_ntoa(ua->client_addr.sin_addr)); + name[sizeof(name)-1] = 0; /* terminate name */ if (strcmp(name, "*UserAgent*") == 0) { /* default console */ ok = cram_md5_auth(ua, director->password, ssl_need) && cram_md5_get_auth(ua, director->password, ssl_need); @@ -154,14 +168,17 @@ int authenticate_user_agent(BSOCK *ua) if (cons) { ok = cram_md5_auth(ua, cons->password, ssl_need) && cram_md5_get_auth(ua, cons->password, ssl_need); + if (ok) { + uac->cons = cons; /* save console resource pointer */ + } } else { ok = false; } } if (!ok) { bnet_fsend(ua, "%s", _(Dir_sorry)); - Emsg2(M_ERROR, 0, _("Unable to authenticate User Agent \"%s\" at %s.\n"), - name, ua->who); + Emsg4(M_ERROR, 0, _("Unable to authenticate console \"%s\" at %s:%s:%d.\n"), + name, ua->who, ua->host, ua->port); sleep(5); return 0; }