branch-0.23.1/hadoop-common-project/hadoop-common/src/test/system/c++/runAs/runAs.c

/**
 * Licensed to the Apache Software Foundation (ASF) under one
 * or more contributor license agreements.  See the NOTICE file
 * distributed with this work for additional information
 * regarding copyright ownership.  The ASF licenses this file
 * to you under the Apache License, Version 2.0 (the
 * "License"); you may not use this file except in compliance
 * with the License.  You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

#include "runAs.h"

/*
 * Function to get the user details populated given a user name. 
 */
int getuserdetail(char *user, struct passwd *user_detail) {
  struct passwd *tempPwdPtr;
  int size = sysconf(_SC_GETPW_R_SIZE_MAX);
  char pwdbuffer[size];
  if ((getpwnam_r(user, user_detail, pwdbuffer, size, &tempPwdPtr)) != 0) {
    fprintf(stderr, "Invalid user provided to getpwnam\n");
    return -1;
  }
  return 0;
}

/**
 * Function to switch the user identity and set the appropriate 
 * group control as the user specified in the argument.
 */
int switchuser(char *user) {
  //populate the user details
  struct passwd user_detail;
  if ((getuserdetail(user, &user_detail)) != 0) {
    return INVALID_USER_NAME;
  }
  //set the right supplementary groups for the user.
  if (initgroups(user_detail.pw_name, user_detail.pw_gid) != 0) {
    fprintf(stderr, "Init groups call for the user : %s failed\n",
        user_detail.pw_name);
    return INITGROUPS_FAILED;
  }
  errno = 0;
  //switch the group.
  setgid(user_detail.pw_gid);
  if (errno != 0) {
    fprintf(stderr, "Setgid for the user : %s failed\n", user_detail.pw_name);
    return SETUID_OPER_FAILED;
  }
  errno = 0;
  //swith the user
  setuid(user_detail.pw_uid);
  if (errno != 0) {
    fprintf(stderr, "Setuid for the user : %s failed\n", user_detail.pw_name);
    return SETUID_OPER_FAILED;
  }
  errno = 0;
  //set the effective user id.
  seteuid(user_detail.pw_uid);
  if (errno != 0) {
    fprintf(stderr, "Seteuid for the user : %s failed\n", user_detail.pw_name);
    return SETUID_OPER_FAILED;
  }
  return 0;
}

/*
 * Top level method which processes a cluster management
 * command.
 */
int process_cluster_command(char * user,  char * node , char *command) {
  char *finalcommandstr;
  int len;
  int errorcode = 0;
  if (strncmp(command, "", strlen(command)) == 0) {
    fprintf(stderr, "Invalid command passed\n");
    return INVALID_COMMAND_PASSED;
  }
  len = STRLEN + strlen(command);
  finalcommandstr = (char *) malloc((len + 1) * sizeof(char));
  snprintf(finalcommandstr, len, SCRIPT_DIR_PATTERN, HADOOP_PREFIX,
      command);
  finalcommandstr[len + 1] = '\0';
  errorcode = switchuser(user);
  if (errorcode != 0) {
    fprintf(stderr, "switch user failed\n");
    return errorcode;
  }
  errno = 0;
  execlp(SSH_COMMAND, SSH_COMMAND, node, finalcommandstr, NULL);
  if (errno != 0) {
    fprintf(stderr, "Excelp failed dude to : %s\n", strerror(errno));
  }
  return 0;
}

/*
 * Process cluster controller command the API exposed to the 
 * main in order to execute the cluster commands.
 */
int process_controller_command(char *user, char * node, char *command) {
  return process_cluster_command(user, node, command);
}