2 * Copyright 2000, International Business Machines Corporation and others.
5 * This software has been released under the terms of the IBM Public
6 * License. For details, see the LICENSE file in the top-level source
7 * directory or online at http://www.openafs.org/dl/license10.html
13 #include <afsconfig.h>
14 #include "afs/param.h"
18 #include "afs/sysincludes.h" /* Standard vendor system headers */
21 #if !defined(AFS_LINUX20_ENV)
24 #include <netinet/in.h>
27 #include "h/hashing.h"
29 #if !defined(AFS_HPUX110_ENV) && !defined(AFS_LINUX20_ENV) && !defined(AFS_DARWIN_ENV)
30 #include <netinet/in_var.h>
31 #endif /* ! AFS_HPUX110_ENV */
32 #endif /* !defined(UKERNEL) */
34 #include "afsincludes.h" /* Afs-based standard headers */
35 #include "afs/afs_stats.h" /* afs statistics */
37 #if defined(AFS_SUN56_ENV)
39 #include <inet/common.h>
40 #if defined(AFS_SUN58_ENV)
41 #include <netinet/ip6.h>
46 /* Exported variables */
47 afs_rwlock_t afs_xconn; /* allocation lock for new things */
48 afs_rwlock_t afs_xinterface; /* for multiple client address */
49 afs_int32 cryptall = 0; /* encrypt all communications */
52 unsigned int VNOSERVERS = 0;
55 * Pick a security object to use for a connection to a given server,
59 * The AFS connection for which the security object is required
60 * @param[out] secLevel
61 * The security level of the returned object
64 * An rx security object. This function is guaranteed to return
65 * an object, although that object may be rxnull (with a secLevel
68 static struct rx_securityClass *
69 afs_pickSecurityObject(struct afs_conn *conn, int *secLevel)
71 struct rx_securityClass *secObj = NULL;
73 /* Do we have tokens ? */
74 if (conn->user->vid != UNDEFVID) {
76 /* kerberos tickets on channel 2 */
77 secObj = rxkad_NewClientSecurityObject(
78 cryptall ? rxkad_crypt : rxkad_clear,
79 (struct ktc_encryptionKey *)conn->user->ct.HandShakeKey,
80 conn->user->ct.AuthHandle,
81 conn->user->stLen, conn->user->stp);
85 secObj = rxnull_NewClientSecurityObject();
93 * Try setting up a connection to the server containing the specified fid.
94 * Gets the volume, checks if it's up and does the connection by server address.
97 * @param areq Request filled in by the caller.
98 * @param locktype Type of lock that will be used.
100 * @return The conn struct, or NULL.
103 afs_Conn(register struct VenusFid *afid, register struct vrequest *areq,
106 u_short fsport = AFS_FSPORT;
108 struct afs_conn *tconn = NULL;
109 struct srvAddr *lowp = NULL;
113 struct srvAddr *sa1p;
115 AFS_STATCNT(afs_Conn);
116 /* Get fid's volume. */
117 tv = afs_GetVolume(afid, areq, READ_LOCK);
120 afs_FinalizeReq(areq);
121 areq->volumeError = 1;
126 if (tv->serverHost[0] && tv->serverHost[0]->cell) {
127 fsport = tv->serverHost[0]->cell->fsport;
132 /* First is always lowest rank, if it's up */
133 if ((tv->status[0] == not_busy) && tv->serverHost[0]
134 && !(tv->serverHost[0]->addr->sa_flags & SRVR_ISDOWN) &&
135 !(((areq->idleError > 0) || (areq->tokenError > 0))
136 && (areq->skipserver[0] == 1)))
137 lowp = tv->serverHost[0]->addr;
139 /* Otherwise we look at all of them. There are seven levels of
140 * not_busy. This means we will check a volume seven times before it
141 * is marked offline. Ideally, we only need two levels, but this
142 * serves a second purpose of waiting some number of seconds before
143 * the client decides the volume is offline (ie: a clone could finish
146 for (notbusy = not_busy; (!lowp && (notbusy <= end_not_busy)); notbusy++) {
147 for (i = 0; i < AFS_MAXHOSTS && tv->serverHost[i]; i++) {
148 if (((areq->tokenError > 0)||(areq->idleError > 0))
149 && (areq->skipserver[i] == 1))
151 if (tv->status[i] != notbusy) {
152 if (tv->status[i] == rd_busy || tv->status[i] == rdwr_busy) {
153 if (!areq->busyCount)
155 } else if (tv->status[i] == offline) {
156 if (!areq->volumeError)
157 areq->volumeError = VOLMISSING;
161 for (sa1p = tv->serverHost[i]->addr; sa1p; sa1p = sa1p->next_sa) {
162 if (sa1p->sa_flags & SRVR_ISDOWN)
164 if (!lowp || (lowp->sa_iprank > sa1p->sa_iprank))
169 afs_PutVolume(tv, READ_LOCK);
172 tu = afs_GetUser(areq->uid, afid->Cell, SHARED_LOCK);
173 tconn = afs_ConnBySA(lowp, fsport, afid->Cell, tu, 0 /*!force */ ,
174 1 /*create */ , locktype);
176 afs_PutUser(tu, SHARED_LOCK);
184 * Connects to a server by it's server address.
186 * @param sap Server address.
187 * @param aport Server port.
189 * @param tu Connect as this user.
190 * @param force_if_down
192 * @param locktype Specifies type of lock to be used for this function.
194 * @return The new connection.
197 afs_ConnBySA(struct srvAddr *sap, unsigned short aport, afs_int32 acell,
198 struct unixuser *tu, int force_if_down, afs_int32 create,
201 struct afs_conn *tc = 0;
202 struct rx_securityClass *csec; /*Security class object */
203 int isec; /*Security index */
206 if (!sap || ((sap->sa_flags & SRVR_ISDOWN) && !force_if_down)) {
207 /* sa is known down, and we don't want to force it. */
211 ObtainSharedLock(&afs_xconn, 15);
212 /* Get conn by port and user. */
213 for (tc = sap->conns; tc; tc = tc->next) {
214 if (tc->user == tu && tc->port == aport) {
219 if (!tc && !create) {
220 /* Not found and can't create a new one. */
221 ReleaseSharedLock(&afs_xconn);
225 if (AFS_IS_DISCONNECTED && !AFS_IN_SYNC) {
226 afs_warnuser("afs_ConnBySA: disconnected\n");
227 ReleaseSharedLock(&afs_xconn);
232 /* No such connection structure exists. Create one and splice it in.
233 * Make sure the server record has been marked as used (for the purposes
234 * of calculating up & down times, it's now considered to be an
235 * ``active'' server). Also make sure the server's lastUpdateEvalTime
236 * gets set, marking the time of its ``birth''.
238 UpgradeSToWLock(&afs_xconn, 37);
239 tc = (struct afs_conn *)afs_osi_Alloc(sizeof(struct afs_conn));
240 memset(tc, 0, sizeof(struct afs_conn));
245 tc->refCount = 0; /* bumped below */
246 tc->forceConnectFS = 1;
247 tc->id = (struct rx_connection *)0;
248 tc->next = sap->conns;
250 afs_ActivateServer(sap);
252 ConvertWToSLock(&afs_xconn);
253 } /* end of if (!tc) */
256 if (tu->states & UTokensBad) {
257 /* we may still have an authenticated RPC connection here,
258 * we'll have to create a new, unauthenticated, connection.
259 * Perhaps a better way to do this would be to set
260 * conn->forceConnectFS on all conns when the token first goes
261 * bad, but that's somewhat trickier, due to locking
262 * constraints (though not impossible).
264 if (tc->id && (rx_SecurityClassOf(tc->id) != 0)) {
265 tc->forceConnectFS = 1; /* force recreation of connection */
267 tu->vid = UNDEFVID; /* forcibly disconnect the authentication info */
270 if (tc->forceConnectFS) {
271 UpgradeSToWLock(&afs_xconn, 38);
272 csec = (struct rx_securityClass *)0;
275 rx_DestroyConnection(tc->id);
279 * Stupid hack to determine if using vldb service or file system
282 if (aport == sap->server->cell->vlport)
288 csec = afs_pickSecurityObject(tc, &isec);
291 tc->id = rx_NewConnection(sap->sa_ip, aport, service, csec, isec);
294 rx_SetConnHardDeadTime(tc->id, afs_rx_harddead);
296 rx_SetConnIdleDeadTime(tc->id, afs_rx_idledead);
298 rx_SetConnSecondsUntilNatPing(tc->id, 20);
300 tc->forceConnectFS = 0; /* apparently we're appropriately connected now */
303 ConvertWToSLock(&afs_xconn);
304 } /* end of if (tc->forceConnectFS)*/
306 ReleaseSharedLock(&afs_xconn);
311 * forceConnectFS is set whenever we must recompute the connection. UTokensBad
312 * is true only if we know that the tokens are bad. We thus clear this flag
313 * when we get a new set of tokens..
314 * Having force... true and UTokensBad true simultaneously means that the tokens
315 * went bad and we're supposed to create a new, unauthenticated, connection.
317 * @param aserver Server to connect to.
318 * @param aport Connection port.
319 * @param acell The cell where all of this happens.
320 * @param areq The request.
321 * @param aforce Force connection?
322 * @param locktype Type of lock to be used.
324 * @return The established connection.
327 afs_ConnByHost(struct server *aserver, unsigned short aport, afs_int32 acell,
328 struct vrequest *areq, int aforce, afs_int32 locktype)
331 struct afs_conn *tc = 0;
332 struct srvAddr *sa = 0;
334 AFS_STATCNT(afs_ConnByHost);
336 if (AFS_IS_DISCONNECTED && !AFS_IN_SYNC) {
337 afs_warnuser("afs_ConnByHost: disconnected\n");
342 1. look for an existing connection
343 2. create a connection at an address believed to be up
344 (if aforce is true, create a connection at the first address)
347 tu = afs_GetUser(areq->uid, acell, SHARED_LOCK);
349 for (sa = aserver->addr; sa; sa = sa->next_sa) {
350 tc = afs_ConnBySA(sa, aport, acell, tu, aforce,
351 0 /*don't create one */ ,
358 for (sa = aserver->addr; sa; sa = sa->next_sa) {
359 tc = afs_ConnBySA(sa, aport, acell, tu, aforce,
367 afs_PutUser(tu, SHARED_LOCK);
370 } /*afs_ConnByHost */
374 * Connect by multiple hosts.
375 * Try to connect to one of the hosts from the ahosts array.
377 * @param ahosts Multiple hosts to connect to.
378 * @param aport Connection port.
379 * @param acell The cell where all of this happens.
380 * @param areq The request.
381 * @param locktype Type of lock to be used.
383 * @return The established connection or NULL.
386 afs_ConnByMHosts(struct server *ahosts[], unsigned short aport,
387 afs_int32 acell, register struct vrequest *areq,
390 register afs_int32 i;
391 register struct afs_conn *tconn;
392 register struct server *ts;
394 /* try to find any connection from the set */
395 AFS_STATCNT(afs_ConnByMHosts);
396 for (i = 0; i < AFS_MAXCELLHOSTS; i++) {
397 if ((ts = ahosts[i]) == NULL)
399 tconn = afs_ConnByHost(ts, aport, acell, areq, 0, locktype);
406 } /*afs_ConnByMHosts */
410 * Decrement reference count to this connection.
415 afs_PutConn(register struct afs_conn *ac, afs_int32 locktype)
417 AFS_STATCNT(afs_PutConn);
423 * For multi homed clients, a RPC may timeout because of a
424 * client network interface going down. We need to reopen new
425 * connections in this case.
427 * @param sap Server address.
430 ForceNewConnections(struct srvAddr *sap)
432 struct afs_conn *tc = 0;
435 return; /* defensive check */
437 ObtainWriteLock(&afs_xconn, 413);
438 for (tc = sap->conns; tc; tc = tc->next)
439 tc->forceConnectFS = 1;
440 ReleaseWriteLock(&afs_xconn);