xfnw/plan9fox
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

libauthsrv: allow multiple auth= attributes for backup auth servers, authdial() tries each one in order

Browse source 
some of us run auth servers from home that are used by multiple
servers on the internet. when the home authserver becomes unreachable,
services on the outside servers stop working. so we thought about
specifing a secondary auth servers for backup when the primary
server is not reachable.

this changes authdial() to consult multiple auth= entries in
the authdom= or dom= tuples, trying each one in order until
dial() succeeds.
This commit is contained in:
cinap_lenrek 2014-09-16 16:41:05 +02:00
parent 222018340b
commit e060bc6df6
1 changed files with 22 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

29
sys/src/libauthsrv/authdial.c
View file

@ -7,6 +7,7 @@
int
authdial(char *netroot, char *dom)
{
Ndbtuple *t, *nt;
char *p;
int rv;
@ -15,22 +16,36 @@ authdial(char *netroot, char *dom)
return dial(netmkaddr("$auth", netroot, "ticket"), 0, 0, 0);
/* look up an auth server in an authentication domain */
p = csgetvalue(netroot, "authdom", dom, "auth", nil);
p = csgetvalue(netroot, "authdom", dom, "auth", &t);
/* if that didn't work, just try the IP domain */
if(p == nil)
p = csgetvalue(netroot, "dom", dom, "auth", nil);
p = csgetvalue(netroot, "dom", dom, "auth", &t);
/*
* if that didn't work, try p9auth.$dom. this is very helpful if
* you can't edit /lib/ndb.
*/
if(p == nil)
if(p == nil) {
p = smprint("p9auth.%s", dom);
if(p == nil){ /* should no longer ever happen */
werrstr("no auth server found for %s", dom);
return -1;
t = ndbnew("auth", p);
}
rv = dial(netmkaddr(p, netroot, "ticket"), 0, 0, 0);
free(p);
/*
* allow multiple auth= attributes for backup auth servers,
* try each one in order.
*/
rv = -1;
for(nt = t; nt != nil; nt = nt->entry) {
if(strcmp(nt->attr, "auth") == 0) {
p = netmkaddr(nt->val, netroot, "ticket");
rv = dial(p, 0, 0, 0);
if(rv >= 0)
break;
}
}
ndbfree(t);
return rv;
}