xxq250
/
homework-jianmu
1
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

Merge branch 'enh/ipWhiteList' of https://github.com/taosdata/TDengine into enh/ipWhiteList

This commit is contained in:
yihaoDeng 2023-09-14 16:52:23 +08:00
parent e36dc50828
commit 2d1d74d4e8
4 changed files with 34 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
include/util/taoserror.h
View File

@ -250,6 +250,7 @@ int32_t* taosGetErrno();
#define TSDB_CODE_MND_USER_HOST_EXIST TAOS_DEF_ERROR_CODE(0, 0x035A) #define TSDB_CODE_MND_USER_HOST_EXIST TAOS_DEF_ERROR_CODE(0, 0x035A)
#define TSDB_CODE_MND_USER_HOST_NOT_EXIST TAOS_DEF_ERROR_CODE(0, 0x035B) #define TSDB_CODE_MND_USER_HOST_NOT_EXIST TAOS_DEF_ERROR_CODE(0, 0x035B)
#define TSDB_CODE_MND_TOO_MANY_USER_HOST TAOS_DEF_ERROR_CODE(0, 0x035C) #define TSDB_CODE_MND_TOO_MANY_USER_HOST TAOS_DEF_ERROR_CODE(0, 0x035C)
#define TSDB_CODE_MND_USER_LOCAL_HOST_NOT_DROP TAOS_DEF_ERROR_CODE(0, 0x035D)
// mnode-stable-part1 // mnode-stable-part1
#define TSDB_CODE_MND_STB_ALREADY_EXIST TAOS_DEF_ERROR_CODE(0, 0x0360) #define TSDB_CODE_MND_STB_ALREADY_EXIST TAOS_DEF_ERROR_CODE(0, 0x0360)

35
source/dnode/mnode/impl/src/mndUser.c
View File

@ -432,7 +432,7 @@ static void ipRangeToStr(SIpV4Range *range, char *buf) {
addr.s_addr = range->ip; addr.s_addr = range->ip;
uv_inet_ntop(AF_INET, &addr, buf, 32); uv_inet_ntop(AF_INET, &addr, buf, 32);
if (range->mask != 32) { if (range->mask == 32) {
sprintf(buf + strlen(buf), "/%d", range->mask); sprintf(buf + strlen(buf), "/%d", range->mask);
} }
return; return;
@ -446,7 +446,7 @@ static int32_t ipRangeListToStr(SIpV4Range *range, int32_t num, char *buf) {
for (int i = 0; i < num; i++) { for (int i = 0; i < num; i++) {
char tbuf[36] = {0}; char tbuf[36] = {0};
SIpV4Range *pRange = &range[i]; SIpV4Range *pRange = &range[i];
if (isDefaultRange(pRange)) continue; // if (isDefaultRange(pRange)) continue;
ipRangeToStr(&range[i], tbuf); ipRangeToStr(&range[i], tbuf);
len += sprintf(buf + len, "%s,", tbuf); len += sprintf(buf + len, "%s,", tbuf);
@ -1118,12 +1118,23 @@ static int32_t mndCreateUser(SMnode *pMnode, char *acct, SCreateUserReq *pCreate
userObj.pIpWhiteList = createDefaultIpWhiteList(); userObj.pIpWhiteList = createDefaultIpWhiteList();
} else { } else {
SIpWhiteList *p = taosMemoryCalloc(1, sizeof(SIpWhiteList) + pCreate->numIpRanges * sizeof(SIpV4Range)); SIpWhiteList *p = taosMemoryCalloc(1, sizeof(SIpWhiteList) + pCreate->numIpRanges * sizeof(SIpV4Range) + 1);
bool localHost = false;
for (int i = 0; i < pCreate->numIpRanges; i++) { for (int i = 0; i < pCreate->numIpRanges; i++) {
p->pIpRange[i].ip = pCreate->pIpRanges[i].ip; p->pIpRange[i].ip = pCreate->pIpRanges[i].ip;
p->pIpRange[i].mask = pCreate->pIpRanges[i].mask; p->pIpRange[i].mask = pCreate->pIpRanges[i].mask;
if (isDefaultRange(&pCreate->pIpRanges[i])) {
localHost = true;
} }
}
if (localHost == false) {
p->pIpRange[pCreate->numIpRanges].ip = 16777343;
p->pIpRange[pCreate->numIpRanges].mask = 32;
p->num = pCreate->numIpRanges + 1;
} else {
p->num = pCreate->numIpRanges; p->num = pCreate->numIpRanges;
}
userObj.pIpWhiteList = p; userObj.pIpWhiteList = p;
} }
@ -1705,6 +1716,7 @@ static int32_t mndProcessAlterUserReq(SRpcMsg *pReq) {
int32_t num = pUser->pIpWhiteList->num; int32_t num = pUser->pIpWhiteList->num;
SIpWhiteList *pNew = taosMemoryCalloc(1, sizeof(SIpWhiteList) + sizeof(SIpV4Range) * num); SIpWhiteList *pNew = taosMemoryCalloc(1, sizeof(SIpWhiteList) + sizeof(SIpV4Range) * num);
bool noexist = true; bool noexist = true;
bool localHost = false;
if (pUser->pIpWhiteList->num > 0) { if (pUser->pIpWhiteList->num > 0) {
int idx = 0; int idx = 0;
@ -1713,16 +1725,21 @@ static int32_t mndProcessAlterUserReq(SRpcMsg *pReq) {
bool found = false; bool found = false;
for (int j = 0; j < alterReq.numIpRanges; j++) { for (int j = 0; j < alterReq.numIpRanges; j++) {
SIpV4Range *range = &alterReq.pIpRanges[j]; SIpV4Range *range = &alterReq.pIpRanges[j];
if (!isDefaultRange(range) && isIpRangeEqual(oldRange, range)) { if (isDefaultRange(range)) {
localHost = true;
break;
}
if (isIpRangeEqual(oldRange, range)) {
found = true; found = true;
break; break;
} }
} }
if (localHost) break;
if (found == false) { if (found == false) {
memcpy(&pNew->pIpRange[idx], oldRange, sizeof(SIpV4Range)); memcpy(&pNew->pIpRange[idx], oldRange, sizeof(SIpV4Range));
idx++; idx++;
} } else {
if (found == true) {
noexist = false; noexist = false;
} }
} }
@ -1735,6 +1752,12 @@ static int32_t mndProcessAlterUserReq(SRpcMsg *pReq) {
newUser.pIpWhiteList = pNew; newUser.pIpWhiteList = pNew;
newUser.ipWhiteListVer = pUser->ipWhiteListVer + 1; newUser.ipWhiteListVer = pUser->ipWhiteListVer + 1;
} }
if (localHost) {
terrno = TSDB_CODE_MND_USER_LOCAL_HOST_NOT_DROP;
code = terrno;
goto _OVER;
}
if (noexist) { if (noexist) {
terrno = TSDB_CODE_MND_USER_HOST_NOT_EXIST; terrno = TSDB_CODE_MND_USER_HOST_NOT_EXIST;
code = terrno; code = terrno;

1
source/util/src/terror.c
View File

@ -197,6 +197,7 @@ TAOS_DEFINE_ERROR(TSDB_CODE_MND_PRIVILEDGE_EXIST, "User already have thi
TAOS_DEFINE_ERROR(TSDB_CODE_MND_USER_HOST_EXIST, "Host already exist in ip white list") TAOS_DEFINE_ERROR(TSDB_CODE_MND_USER_HOST_EXIST, "Host already exist in ip white list")
TAOS_DEFINE_ERROR(TSDB_CODE_MND_USER_HOST_NOT_EXIST, "Host not exist in ip white list") TAOS_DEFINE_ERROR(TSDB_CODE_MND_USER_HOST_NOT_EXIST, "Host not exist in ip white list")
TAOS_DEFINE_ERROR(TSDB_CODE_MND_TOO_MANY_USER_HOST, "Too many host in ip white list") TAOS_DEFINE_ERROR(TSDB_CODE_MND_TOO_MANY_USER_HOST, "Too many host in ip white list")
TAOS_DEFINE_ERROR(TSDB_CODE_MND_USER_LOCAL_HOST_NOT_DROP, "Host can not be dropped")
//mnode-stable-part1 //mnode-stable-part1
TAOS_DEFINE_ERROR(TSDB_CODE_MND_STB_ALREADY_EXIST, "STable already exists") TAOS_DEFINE_ERROR(TSDB_CODE_MND_STB_ALREADY_EXIST, "STable already exists")