1/*
2 * Copyright (c) 1992, 1993, 1994
3 *	The Regents of the University of California.  All rights reserved.
4 *
5 * This code is derived from software contributed to Berkeley by
6 * Rick Macklem at The University of Guelph.
7 *
8 * Redistribution and use in source and binary forms, with or without
9 * modification, are permitted provided that the following conditions
10 * are met:
11 * 1. Redistributions of source code must retain the above copyright
12 *    notice, this list of conditions and the following disclaimer.
13 * 2. Redistributions in binary form must reproduce the above copyright
14 *    notice, this list of conditions and the following disclaimer in the
15 *    documentation and/or other materials provided with the distribution.
16 * 4. Neither the name of the University nor the names of its contributors
17 *    may be used to endorse or promote products derived from this software
18 *    without specific prior written permission.
19 *
20 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
21 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
22 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
23 * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
24 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
25 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
26 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
27 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
28 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
29 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
30 * SUCH DAMAGE.
31 */
32
33#if 0
34#ifndef lint
35static const char copyright[] =
36"@(#) Copyright (c) 1992, 1993, 1994\n\
37	The Regents of the University of California.  All rights reserved.\n";
38#endif /* not lint */
39
40#ifndef lint
41static char sccsid[] = "@(#)mount_nfs.c	8.11 (Berkeley) 5/4/95";
42#endif /* not lint */
43#endif
44#include <sys/cdefs.h>
45__FBSDID("$FreeBSD$");
46
47#include <sys/param.h>
48#include <sys/linker.h>
49#include <sys/module.h>
50#include <sys/mount.h>
51#include <sys/socket.h>
52#include <sys/stat.h>
53#include <sys/syslog.h>
54#include <sys/uio.h>
55
56#include <rpc/rpc.h>
57#include <rpc/pmap_clnt.h>
58#include <rpc/pmap_prot.h>
59#include <rpcsvc/nfs_prot.h>
60#include <rpcsvc/mount.h>
61
62#include <nfsclient/nfs.h>
63
64#include <arpa/inet.h>
65
66#include <ctype.h>
67#include <err.h>
68#include <errno.h>
69#include <fcntl.h>
70#include <netdb.h>
71#include <stdio.h>
72#include <stdlib.h>
73#include <string.h>
74#include <strings.h>
75#include <sysexits.h>
76#include <unistd.h>
77
78#include "mntopts.h"
79#include "mounttab.h"
80
81/* Table for af,sotype -> netid conversions. */
82struct nc_protos {
83	const char *netid;
84	int af;
85	int sotype;
86} nc_protos[] = {
87	{"udp",		AF_INET,	SOCK_DGRAM},
88	{"tcp",		AF_INET,	SOCK_STREAM},
89	{"udp6",	AF_INET6,	SOCK_DGRAM},
90	{"tcp6",	AF_INET6,	SOCK_STREAM},
91	{NULL,		0,		0}
92};
93
94struct nfhret {
95	u_long		stat;
96	long		vers;
97	long		auth;
98	long		fhsize;
99	u_char		nfh[NFS3_FHSIZE];
100};
101#define	BGRND	1
102#define	ISBGRND	2
103#define	OF_NOINET4	4
104#define	OF_NOINET6	8
105int retrycnt = -1;
106int opflags = 0;
107int nfsproto = IPPROTO_TCP;
108int mnttcp_ok = 1;
109int noconn = 0;
110char *portspec = NULL;	/* Server nfs port; NULL means look up via rpcbind. */
111struct sockaddr *addr;
112int addrlen = 0;
113u_char *fh = NULL;
114int fhsize = 0;
115int secflavor = -1;
116int got_principal = 0;
117
118enum mountmode {
119	ANY,
120	V2,
121	V3,
122	V4
123} mountmode = ANY;
124
125/* Return codes for nfs_tryproto. */
126enum tryret {
127	TRYRET_SUCCESS,
128	TRYRET_TIMEOUT,		/* No response received. */
129	TRYRET_REMOTEERR,	/* Error received from remote server. */
130	TRYRET_LOCALERR		/* Local failure. */
131};
132
133static int	fallback_mount(struct iovec *iov, int iovlen);
134static int	sec_name_to_num(char *sec);
135static char	*sec_num_to_name(int num);
136static int	getnfsargs(char *, struct iovec **iov, int *iovlen);
137/* void	set_rpc_maxgrouplist(int); */
138static struct netconfig *getnetconf_cached(const char *netid);
139static const char	*netidbytype(int af, int sotype);
140static void	usage(void) __dead2;
141static int	xdr_dir(XDR *, char *);
142static int	xdr_fh(XDR *, struct nfhret *);
143static enum tryret nfs_tryproto(struct addrinfo *ai, char *hostp, char *spec,
144    char **errstr, struct iovec **iov, int *iovlen);
145static enum tryret returncode(enum clnt_stat stat, struct rpc_err *rpcerr);
146
147int
148main(int argc, char *argv[])
149{
150	int c;
151	struct iovec *iov;
152	int num, iovlen;
153	int osversion;
154	char *name, *p, *spec, *fstype;
155	char mntpath[MAXPATHLEN], errmsg[255];
156	char hostname[MAXHOSTNAMELEN + 1], *gssname, gssn[MAXHOSTNAMELEN + 50];
157
158	iov = NULL;
159	iovlen = 0;
160	memset(errmsg, 0, sizeof(errmsg));
161	gssname = NULL;
162
163	fstype = strrchr(argv[0], '_');
164	if (fstype == NULL)
165		errx(EX_USAGE, "argv[0] must end in _fstype");
166
167	++fstype;
168
169	while ((c = getopt(argc, argv,
170	    "23a:bcdD:g:I:iLlNo:PR:r:sTt:w:x:U")) != -1)
171		switch (c) {
172		case '2':
173			mountmode = V2;
174			break;
175		case '3':
176			mountmode = V3;
177			break;
178		case 'a':
179			printf("-a deprecated, use -o readahead=<value>\n");
180			build_iovec(&iov, &iovlen, "readahead", optarg, (size_t)-1);
181			break;
182		case 'b':
183			opflags |= BGRND;
184			break;
185		case 'c':
186			printf("-c deprecated, use -o noconn\n");
187			build_iovec(&iov, &iovlen, "noconn", NULL, 0);
188			noconn = 1;
189			break;
190		case 'D':
191			printf("-D deprecated, use -o deadthresh=<value>\n");
192			build_iovec(&iov, &iovlen, "deadthresh", optarg, (size_t)-1);
193			break;
194		case 'd':
195			printf("-d deprecated, use -o dumbtimer");
196			build_iovec(&iov, &iovlen, "dumbtimer", NULL, 0);
197			break;
198		case 'g':
199			printf("-g deprecated, use -o maxgroups");
200			num = strtol(optarg, &p, 10);
201			if (*p || num <= 0)
202				errx(1, "illegal -g value -- %s", optarg);
203			//set_rpc_maxgrouplist(num);
204			build_iovec(&iov, &iovlen, "maxgroups", optarg, (size_t)-1);
205			break;
206		case 'I':
207			printf("-I deprecated, use -o readdirsize=<value>\n");
208			build_iovec(&iov, &iovlen, "readdirsize", optarg, (size_t)-1);
209			break;
210		case 'i':
211			printf("-i deprecated, use -o intr\n");
212			build_iovec(&iov, &iovlen, "intr", NULL, 0);
213			break;
214		case 'L':
215			printf("-L deprecated, use -o nolockd\n");
216			build_iovec(&iov, &iovlen, "nolockd", NULL, 0);
217			break;
218		case 'l':
219			printf("-l deprecated, -o rdirplus\n");
220			build_iovec(&iov, &iovlen, "rdirplus", NULL, 0);
221			break;
222		case 'N':
223			printf("-N deprecated, do not specify -o resvport\n");
224			break;
225		case 'o': {
226			int pass_flag_to_nmount;
227			char *opt = optarg;
228			while (opt) {
229				char *pval = NULL;
230				char *pnextopt = NULL;
231				char *val = "";
232				pass_flag_to_nmount = 1;
233				pnextopt = strchr(opt, ',');
234				if (pnextopt != NULL) {
235					*pnextopt = '\0';
236					pnextopt++;
237				}
238				pval = strchr(opt, '=');
239				if (pval != NULL) {
240					*pval = '\0';
241					val = pval + 1;
242				}
243				if (strcmp(opt, "bg") == 0) {
244					opflags |= BGRND;
245					pass_flag_to_nmount=0;
246				} else if (strcmp(opt, "fg") == 0) {
247					/* same as not specifying -o bg */
248					pass_flag_to_nmount=0;
249				} else if (strcmp(opt, "gssname") == 0) {
250					pass_flag_to_nmount = 0;
251					gssname = val;
252				} else if (strcmp(opt, "mntudp") == 0) {
253					mnttcp_ok = 0;
254					nfsproto = IPPROTO_UDP;
255				} else if (strcmp(opt, "udp") == 0) {
256					nfsproto = IPPROTO_UDP;
257				} else if (strcmp(opt, "tcp") == 0) {
258					nfsproto = IPPROTO_TCP;
259				} else if (strcmp(opt, "noinet4") == 0) {
260					pass_flag_to_nmount=0;
261					opflags |= OF_NOINET4;
262				} else if (strcmp(opt, "noinet6") == 0) {
263					pass_flag_to_nmount=0;
264					opflags |= OF_NOINET6;
265				} else if (strcmp(opt, "noconn") == 0) {
266					noconn = 1;
267				} else if (strcmp(opt, "nfsv2") == 0) {
268					pass_flag_to_nmount=0;
269					mountmode = V2;
270				} else if (strcmp(opt, "nfsv3") == 0) {
271					mountmode = V3;
272				} else if (strcmp(opt, "nfsv4") == 0) {
273					pass_flag_to_nmount=0;
274					mountmode = V4;
275					fstype = "nfs";
276					nfsproto = IPPROTO_TCP;
277					if (portspec == NULL)
278						portspec = "2049";
279				} else if (strcmp(opt, "port") == 0) {
280					pass_flag_to_nmount=0;
281					asprintf(&portspec, "%d",
282					    atoi(val));
283					if (portspec == NULL)
284						err(1, "asprintf");
285				} else if (strcmp(opt, "principal") == 0) {
286					got_principal = 1;
287				} else if (strcmp(opt, "sec") == 0) {
288					/*
289					 * Don't add this option to
290					 * the iovec yet - we will
291					 * negotiate which sec flavor
292					 * to use with the remote
293					 * mountd.
294					 */
295					pass_flag_to_nmount=0;
296					secflavor = sec_name_to_num(val);
297					if (secflavor < 0) {
298						errx(1,
299						    "illegal sec value -- %s",
300						    val);
301					}
302				} else if (strcmp(opt, "retrycnt") == 0) {
303					pass_flag_to_nmount=0;
304					num = strtol(val, &p, 10);
305					if (*p || num < 0)
306						errx(1, "illegal retrycnt value -- %s", val);
307					retrycnt = num;
308				} else if (strcmp(opt, "maxgroups") == 0) {
309					num = strtol(val, &p, 10);
310					if (*p || num <= 0)
311						errx(1, "illegal maxgroups value -- %s", val);
312					//set_rpc_maxgrouplist(num);
313				} else if (strcmp(opt, "vers") == 0) {
314					num = strtol(val, &p, 10);
315					if (*p || num <= 0)
316						errx(1, "illegal vers value -- "
317						    "%s", val);
318					switch (num) {
319					case 2:
320						mountmode = V2;
321						break;
322					case 3:
323						mountmode = V3;
324						build_iovec(&iov, &iovlen,
325						    "nfsv3", NULL, 0);
326						break;
327					case 4:
328						mountmode = V4;
329						fstype = "nfs";
330						nfsproto = IPPROTO_TCP;
331						if (portspec == NULL)
332							portspec = "2049";
333						break;
334					default:
335						errx(1, "illegal nfs version "
336						    "value -- %s", val);
337					}
338					pass_flag_to_nmount=0;
339				}
340				if (pass_flag_to_nmount)
341					build_iovec(&iov, &iovlen, opt, val,
342					    strlen(val) + 1);
343				opt = pnextopt;
344			}
345			}
346			break;
347		case 'P':
348			/* obsolete for -o noresvport now default */
349			printf("-P deprecated, use -o noresvport\n");
350			build_iovec(&iov, &iovlen, "noresvport", NULL, 0);
351			break;
352		case 'R':
353			printf("-R deprecated, use -o retrycnt=<retrycnt>\n");
354			num = strtol(optarg, &p, 10);
355			if (*p || num < 0)
356				errx(1, "illegal -R value -- %s", optarg);
357			retrycnt = num;
358			break;
359		case 'r':
360			printf("-r deprecated, use -o rsize=<rsize>\n");
361			build_iovec(&iov, &iovlen, "rsize", optarg, (size_t)-1);
362			break;
363		case 's':
364			printf("-s deprecated, use -o soft\n");
365			build_iovec(&iov, &iovlen, "soft", NULL, 0);
366			break;
367		case 'T':
368			nfsproto = IPPROTO_TCP;
369			printf("-T deprecated, use -o tcp\n");
370			break;
371		case 't':
372			printf("-t deprecated, use -o timeout=<value>\n");
373			build_iovec(&iov, &iovlen, "timeout", optarg, (size_t)-1);
374			break;
375		case 'w':
376			printf("-w deprecated, use -o wsize=<value>\n");
377			build_iovec(&iov, &iovlen, "wsize", optarg, (size_t)-1);
378			break;
379		case 'x':
380			printf("-x deprecated, use -o retrans=<value>\n");
381			build_iovec(&iov, &iovlen, "retrans", optarg, (size_t)-1);
382			break;
383		case 'U':
384			printf("-U deprecated, use -o mntudp\n");
385			mnttcp_ok = 0;
386			nfsproto = IPPROTO_UDP;
387			build_iovec(&iov, &iovlen, "mntudp", NULL, 0);
388			break;
389		default:
390			usage();
391			break;
392		}
393	argc -= optind;
394	argv += optind;
395
396	if (argc != 2) {
397		usage();
398		/* NOTREACHED */
399	}
400
401	spec = *argv++;
402	name = *argv;
403
404	if (retrycnt == -1)
405		/* The default is to keep retrying forever. */
406		retrycnt = 0;
407
408	/*
409	 * If the fstye is "oldnfs", run the old NFS client unless the
410	 * "nfsv4" option was specified.
411	 */
412	if (strcmp(fstype, "nfs") == 0) {
413		if (modfind("nfscl") < 0) {
414			/* Not present in kernel, try loading it */
415			if (kldload("nfscl") < 0 ||
416			    modfind("nfscl") < 0)
417				errx(1, "nfscl is not available");
418		}
419	}
420
421	/*
422	 * Add the fqdn to the gssname, as required.
423	 */
424	if (gssname != NULL) {
425		if (strchr(gssname, '@') == NULL &&
426		    gethostname(hostname, MAXHOSTNAMELEN) == 0) {
427			snprintf(gssn, sizeof (gssn), "%s@%s", gssname,
428			    hostname);
429			gssname = gssn;
430		}
431		build_iovec(&iov, &iovlen, "gssname", gssname,
432		    strlen(gssname) + 1);
433	}
434
435	if (!getnfsargs(spec, &iov, &iovlen))
436		exit(1);
437
438	/* resolve the mountpoint with realpath(3) */
439	if (checkpath(name, mntpath) != 0)
440		err(1, "%s", mntpath);
441
442	build_iovec(&iov, &iovlen, "fstype", fstype, (size_t)-1);
443	build_iovec(&iov, &iovlen, "fspath", mntpath, (size_t)-1);
444	build_iovec(&iov, &iovlen, "errmsg", errmsg, sizeof(errmsg));
445
446	/*
447	 * XXX:
448	 * Backwards compatibility routines for older kernels.
449	 * Remove this and fallback_mount() code when we do not need to support
450	 * NFS mounts against older kernels which still need
451	 * struct nfs_args to be passed in via nmount().
452	 */
453	osversion = getosreldate();
454	if (osversion >= 702100) {
455		if (nmount(iov, iovlen, 0))
456			err(1, "%s, %s", mntpath, errmsg);
457	} else {
458		if (fallback_mount(iov, iovlen))
459			err(1, "%s, %s", mntpath, errmsg);
460	}
461
462	exit(0);
463}
464
465static int
466findopt(struct iovec *iov, int iovlen, const char *name,
467    char **valuep, int *lenp)
468{
469	int i;
470
471	for (i = 0; i < iovlen/2; i++, iov += 2) {
472		if (strcmp(name, iov[0].iov_base) == 0) {
473			if (valuep)
474				*valuep = iov[1].iov_base;
475			if (lenp)
476				*lenp = iov[1].iov_len;
477			return (0);
478		}
479	}
480	return (ENOENT);
481}
482
483static void
484copyopt(struct iovec **newiov, int *newiovlen,
485    struct iovec *iov, int iovlen, const char *name)
486{
487	char *value;
488	int len;
489
490	if (findopt(iov, iovlen, name, &value, &len) == 0)
491		build_iovec(newiov, newiovlen, name, value, len);
492}
493
494/*
495 * XXX: This function is provided for backwards
496 *      compatibility with older kernels which did not support
497 *      passing NFS mount options to nmount() as individual
498 *      parameters.  It should be eventually be removed.
499 */
500static int
501fallback_mount(struct iovec *iov, int iovlen)
502{
503	struct nfs_args args = {
504	    .version = NFS_ARGSVERSION,
505	    .addr = NULL,
506	    .addrlen = sizeof (struct sockaddr_in),
507	    .sotype = SOCK_STREAM,
508	    .proto = 0,
509	    .fh = NULL,
510	    .fhsize = 0,
511	    .flags = NFSMNT_RESVPORT,
512	    .wsize = NFS_WSIZE,
513	    .rsize = NFS_RSIZE,
514	    .readdirsize = NFS_READDIRSIZE,
515	    .timeo = 10,
516	    .retrans = NFS_RETRANS,
517	    .maxgrouplist = NFS_MAXGRPS,
518	    .readahead = NFS_DEFRAHEAD,
519	    .wcommitsize = 0,			/* was: NQ_DEFLEASE */
520	    .deadthresh = NFS_MAXDEADTHRESH,	/* was: NQ_DEADTHRESH */
521	    .hostname = NULL,
522	    /* args version 4 */
523	    .acregmin = NFS_MINATTRTIMO,
524	    .acregmax = NFS_MAXATTRTIMO,
525	    .acdirmin = NFS_MINDIRATTRTIMO,
526	    .acdirmax = NFS_MAXDIRATTRTIMO,
527	};
528	int ret;
529	char *opt;
530	struct iovec *newiov;
531	int newiovlen;
532
533	if (findopt(iov, iovlen, "dumbtimer", NULL, NULL) == 0)
534		args.flags |= NFSMNT_DUMBTIMR;
535	if (findopt(iov, iovlen, "noconn", NULL, NULL) == 0)
536		args.flags |= NFSMNT_NOCONN;
537	if (findopt(iov, iovlen, "conn", NULL, NULL) == 0)
538		args.flags |= NFSMNT_NOCONN;
539	if (findopt(iov, iovlen, "nolockd", NULL, NULL) == 0)
540		args.flags |= NFSMNT_NOLOCKD;
541	if (findopt(iov, iovlen, "lockd", NULL, NULL) == 0)
542		args.flags &= ~NFSMNT_NOLOCKD;
543	if (findopt(iov, iovlen, "intr", NULL, NULL) == 0)
544		args.flags |= NFSMNT_INT;
545	if (findopt(iov, iovlen, "rdirplus", NULL, NULL) == 0)
546		args.flags |= NFSMNT_RDIRPLUS;
547	if (findopt(iov, iovlen, "resvport", NULL, NULL) == 0)
548		args.flags |= NFSMNT_RESVPORT;
549	if (findopt(iov, iovlen, "noresvport", NULL, NULL) == 0)
550		args.flags &= ~NFSMNT_RESVPORT;
551	if (findopt(iov, iovlen, "soft", NULL, NULL) == 0)
552		args.flags |= NFSMNT_SOFT;
553	if (findopt(iov, iovlen, "hard", NULL, NULL) == 0)
554		args.flags &= ~NFSMNT_SOFT;
555	if (findopt(iov, iovlen, "mntudp", NULL, NULL) == 0)
556		args.sotype = SOCK_DGRAM;
557	if (findopt(iov, iovlen, "udp", NULL, NULL) == 0)
558		args.sotype = SOCK_DGRAM;
559	if (findopt(iov, iovlen, "tcp", NULL, NULL) == 0)
560		args.sotype = SOCK_STREAM;
561	if (findopt(iov, iovlen, "nfsv3", NULL, NULL) == 0)
562		args.flags |= NFSMNT_NFSV3;
563	if (findopt(iov, iovlen, "readdirsize", &opt, NULL) == 0) {
564		if (opt == NULL) {
565			errx(1, "illegal readdirsize");
566		}
567		ret = sscanf(opt, "%d", &args.readdirsize);
568		if (ret != 1 || args.readdirsize <= 0) {
569			errx(1, "illegal readdirsize: %s", opt);
570		}
571		args.flags |= NFSMNT_READDIRSIZE;
572	}
573	if (findopt(iov, iovlen, "readahead", &opt, NULL) == 0) {
574		if (opt == NULL) {
575			errx(1, "illegal readahead");
576		}
577		ret = sscanf(opt, "%d", &args.readahead);
578		if (ret != 1 || args.readahead <= 0) {
579			errx(1, "illegal readahead: %s", opt);
580		}
581		args.flags |= NFSMNT_READAHEAD;
582	}
583	if (findopt(iov, iovlen, "wsize", &opt, NULL) == 0) {
584		if (opt == NULL) {
585			errx(1, "illegal wsize");
586		}
587		ret = sscanf(opt, "%d", &args.wsize);
588		if (ret != 1 || args.wsize <= 0) {
589			errx(1, "illegal wsize: %s", opt);
590		}
591		args.flags |= NFSMNT_WSIZE;
592	}
593	if (findopt(iov, iovlen, "rsize", &opt, NULL) == 0) {
594		if (opt == NULL) {
595			errx(1, "illegal rsize");
596		}
597		ret = sscanf(opt, "%d", &args.rsize);
598		if (ret != 1 || args.rsize <= 0) {
599			errx(1, "illegal wsize: %s", opt);
600		}
601		args.flags |= NFSMNT_RSIZE;
602	}
603	if (findopt(iov, iovlen, "retrans", &opt, NULL) == 0) {
604		if (opt == NULL) {
605			errx(1, "illegal retrans");
606		}
607		ret = sscanf(opt, "%d", &args.retrans);
608		if (ret != 1 || args.retrans <= 0) {
609			errx(1, "illegal retrans: %s", opt);
610		}
611		args.flags |= NFSMNT_RETRANS;
612	}
613	if (findopt(iov, iovlen, "acregmin", &opt, NULL) == 0) {
614		ret = sscanf(opt, "%d", &args.acregmin);
615		if (ret != 1 || args.acregmin < 0) {
616			errx(1, "illegal acregmin: %s", opt);
617		}
618		args.flags |= NFSMNT_ACREGMIN;
619	}
620	if (findopt(iov, iovlen, "acregmax", &opt, NULL) == 0) {
621		ret = sscanf(opt, "%d", &args.acregmax);
622		if (ret != 1 || args.acregmax < 0) {
623			errx(1, "illegal acregmax: %s", opt);
624		}
625		args.flags |= NFSMNT_ACREGMAX;
626	}
627	if (findopt(iov, iovlen, "acdirmin", &opt, NULL) == 0) {
628		ret = sscanf(opt, "%d", &args.acdirmin);
629		if (ret != 1 || args.acdirmin < 0) {
630			errx(1, "illegal acdirmin: %s", opt);
631		}
632		args.flags |= NFSMNT_ACDIRMIN;
633	}
634	if (findopt(iov, iovlen, "acdirmax", &opt, NULL) == 0) {
635		ret = sscanf(opt, "%d", &args.acdirmax);
636		if (ret != 1 || args.acdirmax < 0) {
637			errx(1, "illegal acdirmax: %s", opt);
638		}
639		args.flags |= NFSMNT_ACDIRMAX;
640	}
641	if (findopt(iov, iovlen, "wcommitsize", &opt, NULL) == 0) {
642		ret = sscanf(opt, "%d", &args.wcommitsize);
643		if (ret != 1 || args.wcommitsize < 0) {
644			errx(1, "illegal wcommitsize: %s", opt);
645		}
646		args.flags |= NFSMNT_WCOMMITSIZE;
647	}
648	if (findopt(iov, iovlen, "deadthresh", &opt, NULL) == 0) {
649		ret = sscanf(opt, "%d", &args.deadthresh);
650		if (ret != 1 || args.deadthresh <= 0) {
651			errx(1, "illegal deadthresh: %s", opt);
652		}
653		args.flags |= NFSMNT_DEADTHRESH;
654	}
655	if (findopt(iov, iovlen, "timeout", &opt, NULL) == 0) {
656		ret = sscanf(opt, "%d", &args.timeo);
657		if (ret != 1 || args.timeo <= 0) {
658			errx(1, "illegal timeout: %s", opt);
659		}
660		args.flags |= NFSMNT_TIMEO;
661	}
662	if (findopt(iov, iovlen, "maxgroups", &opt, NULL) == 0) {
663		ret = sscanf(opt, "%d", &args.maxgrouplist);
664		if (ret != 1 || args.timeo <= 0) {
665			errx(1, "illegal maxgroups: %s", opt);
666		}
667		args.flags |= NFSMNT_MAXGRPS;
668	}
669	if (findopt(iov, iovlen, "addr", &opt,
670		&args.addrlen) == 0) {
671		args.addr = (struct sockaddr *) opt;
672	}
673	if (findopt(iov, iovlen, "fh", &opt, &args.fhsize) == 0) {
674		args.fh = opt;
675	}
676	if (findopt(iov, iovlen, "hostname", &args.hostname,
677		NULL) == 0) {
678	}
679	if (args.hostname == NULL) {
680		errx(1, "Invalid hostname");
681	}
682
683	newiov = NULL;
684	newiovlen = 0;
685
686	build_iovec(&newiov, &newiovlen, "nfs_args", &args, sizeof(args));
687	copyopt(&newiov, &newiovlen, iov, iovlen, "fstype");
688	copyopt(&newiov, &newiovlen, iov, iovlen, "fspath");
689	copyopt(&newiov, &newiovlen, iov, iovlen, "errmsg");
690
691	return nmount(newiov, newiovlen, 0);
692}
693
694static int
695sec_name_to_num(char *sec)
696{
697	if (!strcmp(sec, "krb5"))
698		return (RPCSEC_GSS_KRB5);
699	if (!strcmp(sec, "krb5i"))
700		return (RPCSEC_GSS_KRB5I);
701	if (!strcmp(sec, "krb5p"))
702		return (RPCSEC_GSS_KRB5P);
703	if (!strcmp(sec, "sys"))
704		return (AUTH_SYS);
705	return (-1);
706}
707
708static char *
709sec_num_to_name(int flavor)
710{
711	switch (flavor) {
712	case RPCSEC_GSS_KRB5:
713		return ("krb5");
714	case RPCSEC_GSS_KRB5I:
715		return ("krb5i");
716	case RPCSEC_GSS_KRB5P:
717		return ("krb5p");
718	case AUTH_SYS:
719		return ("sys");
720	}
721	return (NULL);
722}
723
724static int
725getnfsargs(char *spec, struct iovec **iov, int *iovlen)
726{
727	struct addrinfo hints, *ai_nfs, *ai;
728	enum tryret ret;
729	int ecode, speclen, remoteerr, offset, have_bracket = 0;
730	char *hostp, *delimp, *errstr;
731	size_t len;
732	static char nam[MNAMELEN + 1], pname[MAXHOSTNAMELEN + 5];
733
734	if (*spec == '[' && (delimp = strchr(spec + 1, ']')) != NULL &&
735	    *(delimp + 1) == ':') {
736		hostp = spec + 1;
737		spec = delimp + 2;
738		have_bracket = 1;
739	} else if ((delimp = strrchr(spec, ':')) != NULL) {
740		hostp = spec;
741		spec = delimp + 1;
742	} else if ((delimp = strrchr(spec, '@')) != NULL) {
743		warnx("path@server syntax is deprecated, use server:path");
744		hostp = delimp + 1;
745	} else {
746		warnx("no <host>:<dirpath> nfs-name");
747		return (0);
748	}
749	*delimp = '\0';
750
751	/*
752	 * If there has been a trailing slash at mounttime it seems
753	 * that some mountd implementations fail to remove the mount
754	 * entries from their mountlist while unmounting.
755	 */
756	for (speclen = strlen(spec);
757		speclen > 1 && spec[speclen - 1] == '/';
758		speclen--)
759		spec[speclen - 1] = '\0';
760	if (strlen(hostp) + strlen(spec) + 1 > MNAMELEN) {
761		warnx("%s:%s: %s", hostp, spec, strerror(ENAMETOOLONG));
762		return (0);
763	}
764	/* Make both '@' and ':' notations equal */
765	if (*hostp != '\0') {
766		len = strlen(hostp);
767		offset = 0;
768		if (have_bracket)
769			nam[offset++] = '[';
770		memmove(nam + offset, hostp, len);
771		if (have_bracket)
772			nam[len + offset++] = ']';
773		nam[len + offset++] = ':';
774		memmove(nam + len + offset, spec, speclen);
775		nam[len + speclen + offset] = '\0';
776	}
777
778	/*
779	 * Handle an internet host address.
780	 */
781	memset(&hints, 0, sizeof hints);
782	hints.ai_flags = AI_NUMERICHOST;
783	if (nfsproto == IPPROTO_TCP)
784		hints.ai_socktype = SOCK_STREAM;
785	else if (nfsproto == IPPROTO_UDP)
786		hints.ai_socktype = SOCK_DGRAM;
787
788	if (getaddrinfo(hostp, portspec, &hints, &ai_nfs) != 0) {
789		hints.ai_flags = AI_CANONNAME;
790		if ((ecode = getaddrinfo(hostp, portspec, &hints, &ai_nfs))
791		    != 0) {
792			if (portspec == NULL)
793				errx(1, "%s: %s", hostp, gai_strerror(ecode));
794			else
795				errx(1, "%s:%s: %s", hostp, portspec,
796				    gai_strerror(ecode));
797			return (0);
798		}
799
800		/*
801		 * For a Kerberized nfs mount where the "principal"
802		 * argument has not been set, add it here.
803		 */
804		if (got_principal == 0 && secflavor >= 0 &&
805		    secflavor != AUTH_SYS && ai_nfs->ai_canonname != NULL) {
806			snprintf(pname, sizeof (pname), "nfs@%s",
807			    ai_nfs->ai_canonname);
808			build_iovec(iov, iovlen, "principal", pname,
809			    strlen(pname) + 1);
810		}
811	}
812
813	ret = TRYRET_LOCALERR;
814	for (;;) {
815		/*
816		 * Try each entry returned by getaddrinfo(). Note the
817		 * occurrence of remote errors by setting `remoteerr'.
818		 */
819		remoteerr = 0;
820		for (ai = ai_nfs; ai != NULL; ai = ai->ai_next) {
821			if ((ai->ai_family == AF_INET6) &&
822			    (opflags & OF_NOINET6))
823				continue;
824			if ((ai->ai_family == AF_INET) &&
825			    (opflags & OF_NOINET4))
826				continue;
827			ret = nfs_tryproto(ai, hostp, spec, &errstr, iov,
828			    iovlen);
829			if (ret == TRYRET_SUCCESS)
830				break;
831			if (ret != TRYRET_LOCALERR)
832				remoteerr = 1;
833			if ((opflags & ISBGRND) == 0)
834				fprintf(stderr, "%s\n", errstr);
835		}
836		if (ret == TRYRET_SUCCESS)
837			break;
838
839		/* Exit if all errors were local. */
840		if (!remoteerr)
841			exit(1);
842
843		/*
844		 * If retrycnt == 0, we are to keep retrying forever.
845		 * Otherwise decrement it, and exit if it hits zero.
846		 */
847		if (retrycnt != 0 && --retrycnt == 0)
848			exit(1);
849
850		if ((opflags & (BGRND | ISBGRND)) == BGRND) {
851			warnx("Cannot immediately mount %s:%s, backgrounding",
852			    hostp, spec);
853			opflags |= ISBGRND;
854			if (daemon(0, 0) != 0)
855				err(1, "daemon");
856		}
857		sleep(60);
858	}
859	freeaddrinfo(ai_nfs);
860
861	build_iovec(iov, iovlen, "hostname", nam, (size_t)-1);
862	/* Add mounted file system to PATH_MOUNTTAB */
863	if (!add_mtab(hostp, spec))
864		warnx("can't update %s for %s:%s", PATH_MOUNTTAB, hostp, spec);
865	return (1);
866}
867
868/*
869 * Try to set up the NFS arguments according to the address
870 * family, protocol (and possibly port) specified in `ai'.
871 *
872 * Returns TRYRET_SUCCESS if successful, or:
873 *   TRYRET_TIMEOUT		The server did not respond.
874 *   TRYRET_REMOTEERR		The server reported an error.
875 *   TRYRET_LOCALERR		Local failure.
876 *
877 * In all error cases, *errstr will be set to a statically-allocated string
878 * describing the error.
879 */
880static enum tryret
881nfs_tryproto(struct addrinfo *ai, char *hostp, char *spec, char **errstr,
882    struct iovec **iov, int *iovlen)
883{
884	static char errbuf[256];
885	struct sockaddr_storage nfs_ss;
886	struct netbuf nfs_nb;
887	struct nfhret nfhret;
888	struct timeval try;
889	struct rpc_err rpcerr;
890	CLIENT *clp;
891	struct netconfig *nconf, *nconf_mnt;
892	const char *netid, *netid_mnt;
893	char *secname;
894	int doconnect, nfsvers, mntvers, sotype;
895	enum clnt_stat stat;
896	enum mountmode trymntmode;
897
898	sotype = 0;
899	trymntmode = mountmode;
900	errbuf[0] = '\0';
901	*errstr = errbuf;
902
903	if (nfsproto == IPPROTO_TCP)
904		sotype = SOCK_STREAM;
905	else if (nfsproto == IPPROTO_UDP)
906		sotype = SOCK_DGRAM;
907
908	if ((netid = netidbytype(ai->ai_family, sotype)) == NULL) {
909		snprintf(errbuf, sizeof errbuf,
910		    "af %d sotype %d not supported", ai->ai_family, sotype);
911		return (TRYRET_LOCALERR);
912	}
913	if ((nconf = getnetconf_cached(netid)) == NULL) {
914		snprintf(errbuf, sizeof errbuf, "%s: %s", netid, nc_sperror());
915		return (TRYRET_LOCALERR);
916	}
917	/* The RPCPROG_MNT netid may be different. */
918	if (mnttcp_ok) {
919		netid_mnt = netid;
920		nconf_mnt = nconf;
921	} else {
922		if ((netid_mnt = netidbytype(ai->ai_family, SOCK_DGRAM))
923		     == NULL) {
924			snprintf(errbuf, sizeof errbuf,
925			    "af %d sotype SOCK_DGRAM not supported",
926			     ai->ai_family);
927			return (TRYRET_LOCALERR);
928		}
929		if ((nconf_mnt = getnetconf_cached(netid_mnt)) == NULL) {
930			snprintf(errbuf, sizeof errbuf, "%s: %s", netid_mnt,
931			    nc_sperror());
932			return (TRYRET_LOCALERR);
933		}
934	}
935
936tryagain:
937	if (trymntmode == V4) {
938		nfsvers = 4;
939	} else if (trymntmode == V2) {
940		nfsvers = 2;
941		mntvers = 1;
942	} else {
943		nfsvers = 3;
944		mntvers = 3;
945	}
946
947	if (portspec != NULL) {
948		/* `ai' contains the complete nfsd sockaddr. */
949		nfs_nb.buf = ai->ai_addr;
950		nfs_nb.len = nfs_nb.maxlen = ai->ai_addrlen;
951	} else {
952		/* Ask the remote rpcbind. */
953		nfs_nb.buf = &nfs_ss;
954		nfs_nb.len = nfs_nb.maxlen = sizeof nfs_ss;
955
956		if (!rpcb_getaddr(NFS_PROGRAM, nfsvers, nconf, &nfs_nb,
957		    hostp)) {
958			if (rpc_createerr.cf_stat == RPC_PROGVERSMISMATCH &&
959			    trymntmode == ANY) {
960				trymntmode = V2;
961				goto tryagain;
962			}
963			snprintf(errbuf, sizeof errbuf, "[%s] %s:%s: %s",
964			    netid, hostp, spec,
965			    clnt_spcreateerror("RPCPROG_NFS"));
966			return (returncode(rpc_createerr.cf_stat,
967			    &rpc_createerr.cf_error));
968		}
969	}
970
971	/* Check that the server (nfsd) responds on the port we have chosen. */
972	clp = clnt_tli_create(RPC_ANYFD, nconf, &nfs_nb, NFS_PROGRAM, nfsvers,
973	    0, 0);
974	if (clp == NULL) {
975		snprintf(errbuf, sizeof errbuf, "[%s] %s:%s: %s", netid,
976		    hostp, spec, clnt_spcreateerror("nfsd: RPCPROG_NFS"));
977		return (returncode(rpc_createerr.cf_stat,
978		    &rpc_createerr.cf_error));
979	}
980	if (sotype == SOCK_DGRAM && noconn == 0) {
981		/*
982		 * Use connect(), to match what the kernel does. This
983		 * catches cases where the server responds from the
984		 * wrong source address.
985		 */
986		doconnect = 1;
987		if (!clnt_control(clp, CLSET_CONNECT, (char *)&doconnect)) {
988			clnt_destroy(clp);
989			snprintf(errbuf, sizeof errbuf,
990			    "[%s] %s:%s: CLSET_CONNECT failed", netid, hostp,
991			    spec);
992			return (TRYRET_LOCALERR);
993		}
994	}
995
996	try.tv_sec = 10;
997	try.tv_usec = 0;
998	stat = clnt_call(clp, NFSPROC_NULL, (xdrproc_t)xdr_void, NULL,
999			 (xdrproc_t)xdr_void, NULL, try);
1000	if (stat != RPC_SUCCESS) {
1001		if (stat == RPC_PROGVERSMISMATCH && trymntmode == ANY) {
1002			clnt_destroy(clp);
1003			trymntmode = V2;
1004			goto tryagain;
1005		}
1006		clnt_geterr(clp, &rpcerr);
1007		snprintf(errbuf, sizeof errbuf, "[%s] %s:%s: %s", netid,
1008		    hostp, spec, clnt_sperror(clp, "NFSPROC_NULL"));
1009		clnt_destroy(clp);
1010		return (returncode(stat, &rpcerr));
1011	}
1012	clnt_destroy(clp);
1013
1014	/*
1015	 * For NFSv4, there is no mount protocol.
1016	 */
1017	if (trymntmode == V4) {
1018		/*
1019		 * Store the server address in nfsargsp, making
1020		 * sure to copy any locally allocated structures.
1021		 */
1022		addrlen = nfs_nb.len;
1023		addr = malloc(addrlen);
1024		if (addr == NULL)
1025			err(1, "malloc");
1026		bcopy(nfs_nb.buf, addr, addrlen);
1027
1028		build_iovec(iov, iovlen, "addr", addr, addrlen);
1029		secname = sec_num_to_name(secflavor);
1030		if (secname != NULL)
1031			build_iovec(iov, iovlen, "sec", secname, (size_t)-1);
1032		build_iovec(iov, iovlen, "nfsv4", NULL, 0);
1033		build_iovec(iov, iovlen, "dirpath", spec, (size_t)-1);
1034
1035		return (TRYRET_SUCCESS);
1036	}
1037
1038	/* Send the MOUNTPROC_MNT RPC to get the root filehandle. */
1039	try.tv_sec = 10;
1040	try.tv_usec = 0;
1041	clp = clnt_tp_create(hostp, MOUNTPROG, mntvers, nconf_mnt);
1042	if (clp == NULL) {
1043		snprintf(errbuf, sizeof errbuf, "[%s] %s:%s: %s", netid_mnt,
1044		    hostp, spec, clnt_spcreateerror("RPCMNT: clnt_create"));
1045		return (returncode(rpc_createerr.cf_stat,
1046		    &rpc_createerr.cf_error));
1047	}
1048	clp->cl_auth = authsys_create_default();
1049	nfhret.auth = secflavor;
1050	nfhret.vers = mntvers;
1051	stat = clnt_call(clp, MOUNTPROC_MNT, (xdrproc_t)xdr_dir, spec,
1052			 (xdrproc_t)xdr_fh, &nfhret,
1053	    try);
1054	auth_destroy(clp->cl_auth);
1055	if (stat != RPC_SUCCESS) {
1056		if (stat == RPC_PROGVERSMISMATCH && trymntmode == ANY) {
1057			clnt_destroy(clp);
1058			trymntmode = V2;
1059			goto tryagain;
1060		}
1061		clnt_geterr(clp, &rpcerr);
1062		snprintf(errbuf, sizeof errbuf, "[%s] %s:%s: %s", netid_mnt,
1063		    hostp, spec, clnt_sperror(clp, "RPCPROG_MNT"));
1064		clnt_destroy(clp);
1065		return (returncode(stat, &rpcerr));
1066	}
1067	clnt_destroy(clp);
1068
1069	if (nfhret.stat != 0) {
1070		snprintf(errbuf, sizeof errbuf, "[%s] %s:%s: %s", netid_mnt,
1071		    hostp, spec, strerror(nfhret.stat));
1072		return (TRYRET_REMOTEERR);
1073	}
1074
1075	/*
1076	 * Store the filehandle and server address in nfsargsp, making
1077	 * sure to copy any locally allocated structures.
1078	 */
1079	addrlen = nfs_nb.len;
1080	addr = malloc(addrlen);
1081	fhsize = nfhret.fhsize;
1082	fh = malloc(fhsize);
1083	if (addr == NULL || fh == NULL)
1084		err(1, "malloc");
1085	bcopy(nfs_nb.buf, addr, addrlen);
1086	bcopy(nfhret.nfh, fh, fhsize);
1087
1088	build_iovec(iov, iovlen, "addr", addr, addrlen);
1089	build_iovec(iov, iovlen, "fh", fh, fhsize);
1090	secname = sec_num_to_name(nfhret.auth);
1091	if (secname)
1092		build_iovec(iov, iovlen, "sec", secname, (size_t)-1);
1093	if (nfsvers == 3)
1094		build_iovec(iov, iovlen, "nfsv3", NULL, 0);
1095
1096	return (TRYRET_SUCCESS);
1097}
1098
1099/*
1100 * Catagorise a RPC return status and error into an `enum tryret'
1101 * return code.
1102 */
1103static enum tryret
1104returncode(enum clnt_stat stat, struct rpc_err *rpcerr)
1105{
1106	switch (stat) {
1107	case RPC_TIMEDOUT:
1108		return (TRYRET_TIMEOUT);
1109	case RPC_PMAPFAILURE:
1110	case RPC_PROGNOTREGISTERED:
1111	case RPC_PROGVERSMISMATCH:
1112	/* XXX, these can be local or remote. */
1113	case RPC_CANTSEND:
1114	case RPC_CANTRECV:
1115		return (TRYRET_REMOTEERR);
1116	case RPC_SYSTEMERROR:
1117		switch (rpcerr->re_errno) {
1118		case ETIMEDOUT:
1119			return (TRYRET_TIMEOUT);
1120		case ENOMEM:
1121			break;
1122		default:
1123			return (TRYRET_REMOTEERR);
1124		}
1125		/* FALLTHROUGH */
1126	default:
1127		break;
1128	}
1129	return (TRYRET_LOCALERR);
1130}
1131
1132/*
1133 * Look up a netid based on an address family and socket type.
1134 * `af' is the address family, and `sotype' is SOCK_DGRAM or SOCK_STREAM.
1135 *
1136 * XXX there should be a library function for this.
1137 */
1138static const char *
1139netidbytype(int af, int sotype)
1140{
1141	struct nc_protos *p;
1142
1143	for (p = nc_protos; p->netid != NULL; p++) {
1144		if (af != p->af || sotype != p->sotype)
1145			continue;
1146		return (p->netid);
1147	}
1148	return (NULL);
1149}
1150
1151/*
1152 * Look up a netconfig entry based on a netid, and cache the result so
1153 * that we don't need to remember to call freenetconfigent().
1154 *
1155 * Otherwise it behaves just like getnetconfigent(), so nc_*error()
1156 * work on failure.
1157 */
1158static struct netconfig *
1159getnetconf_cached(const char *netid)
1160{
1161	static struct nc_entry {
1162		struct netconfig *nconf;
1163		struct nc_entry *next;
1164	} *head;
1165	struct nc_entry *p;
1166	struct netconfig *nconf;
1167
1168	for (p = head; p != NULL; p = p->next)
1169		if (strcmp(netid, p->nconf->nc_netid) == 0)
1170			return (p->nconf);
1171
1172	if ((nconf = getnetconfigent(netid)) == NULL)
1173		return (NULL);
1174	if ((p = malloc(sizeof(*p))) == NULL)
1175		err(1, "malloc");
1176	p->nconf = nconf;
1177	p->next = head;
1178	head = p;
1179
1180	return (p->nconf);
1181}
1182
1183/*
1184 * xdr routines for mount rpc's
1185 */
1186static int
1187xdr_dir(XDR *xdrsp, char *dirp)
1188{
1189	return (xdr_string(xdrsp, &dirp, MNTPATHLEN));
1190}
1191
1192static int
1193xdr_fh(XDR *xdrsp, struct nfhret *np)
1194{
1195	int i;
1196	long auth, authcnt, authfnd = 0;
1197
1198	if (!xdr_u_long(xdrsp, &np->stat))
1199		return (0);
1200	if (np->stat)
1201		return (1);
1202	switch (np->vers) {
1203	case 1:
1204		np->fhsize = NFS_FHSIZE;
1205		return (xdr_opaque(xdrsp, (caddr_t)np->nfh, NFS_FHSIZE));
1206	case 3:
1207		if (!xdr_long(xdrsp, &np->fhsize))
1208			return (0);
1209		if (np->fhsize <= 0 || np->fhsize > NFS3_FHSIZE)
1210			return (0);
1211		if (!xdr_opaque(xdrsp, (caddr_t)np->nfh, np->fhsize))
1212			return (0);
1213		if (!xdr_long(xdrsp, &authcnt))
1214			return (0);
1215		for (i = 0; i < authcnt; i++) {
1216			if (!xdr_long(xdrsp, &auth))
1217				return (0);
1218			if (np->auth == -1) {
1219				np->auth = auth;
1220				authfnd++;
1221			} else if (auth == np->auth) {
1222				authfnd++;
1223			}
1224		}
1225		/*
1226		 * Some servers, such as DEC's OSF/1 return a nil authenticator
1227		 * list to indicate RPCAUTH_UNIX.
1228		 */
1229		if (authcnt == 0 && np->auth == -1)
1230			np->auth = AUTH_SYS;
1231		if (!authfnd && (authcnt > 0 || np->auth != AUTH_SYS))
1232			np->stat = EAUTH;
1233		return (1);
1234	};
1235	return (0);
1236}
1237
1238static void
1239usage(void)
1240{
1241	(void)fprintf(stderr, "%s\n%s\n%s\n%s\n",
1242"usage: mount_nfs [-23bcdiLlNPsTU] [-a maxreadahead] [-D deadthresh]",
1243"                 [-g maxgroups] [-I readdirsize] [-o options] [-R retrycnt]",
1244"                 [-r readsize] [-t timeout] [-w writesize] [-x retrans]",
1245"                 rhost:path node");
1246	exit(1);
1247}
1248