source: branches/samba-3.2.x/source/winbindd/idmap_nss.c

Last change on this file was 133, checked in by Paul Smedley, 17 years ago

Update trunk to 3.2.0pre3
File size: 4.8 KB
Line 
1/*
2 Unix SMB/CIFS implementation.
3
4 idmap PASSDB backend
5
6 Copyright (C) Simo Sorce 2006
7
8 This program is free software; you can redistribute it and/or modify
9 it under the terms of the GNU General Public License as published by
10 the Free Software Foundation; either version 3 of the License, or
11 (at your option) any later version.
12
13 This program is distributed in the hope that it will be useful,
14 but WITHOUT ANY WARRANTY; without even the implied warranty of
15 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16 GNU General Public License for more details.
17
18 You should have received a copy of the GNU General Public License
19 along with this program. If not, see <http://www.gnu.org/licenses/>.
20*/
21
22#include "includes.h"
23#include "winbindd.h"
24
25#undef DBGC_CLASS
26#define DBGC_CLASS DBGC_IDMAP
27
28/*****************************
29 Initialise idmap database.
30*****************************/
31
32static NTSTATUS idmap_nss_int_init(struct idmap_domain *dom)
33{
34 dom->initialized = True;
35 return NT_STATUS_OK;
36}
37
38/**********************************
39 lookup a set of unix ids.
40**********************************/
41
42static NTSTATUS idmap_nss_unixids_to_sids(struct idmap_domain *dom, struct id_map **ids)
43{
44 TALLOC_CTX *ctx;
45 int i;
46
47 if (! dom->initialized) {
48 return NT_STATUS_UNSUCCESSFUL;
49 }
50
51 ctx = talloc_new(dom);
52 if ( ! ctx) {
53 DEBUG(0, ("Out of memory!\n"));
54 return NT_STATUS_NO_MEMORY;
55 }
56
57 for (i = 0; ids[i]; i++) {
58 struct passwd *pw;
59 struct group *gr;
60 const char *name;
61 enum lsa_SidType type;
62 bool ret;
63
64 switch (ids[i]->xid.type) {
65 case ID_TYPE_UID:
66 pw = getpwuid((uid_t)ids[i]->xid.id);
67
68 if (!pw) {
69 ids[i]->status = ID_UNMAPPED;
70 continue;
71 }
72 name = pw->pw_name;
73 break;
74 case ID_TYPE_GID:
75 gr = getgrgid((gid_t)ids[i]->xid.id);
76
77 if (!gr) {
78 ids[i]->status = ID_UNMAPPED;
79 continue;
80 }
81 name = gr->gr_name;
82 break;
83 default: /* ?? */
84 ids[i]->status = ID_UNKNOWN;
85 continue;
86 }
87
88 /* by default calls to winbindd are disabled
89 the following call will not recurse so this is safe */
90 (void)winbind_on();
91 /* Lookup name from PDC using lsa_lookup_names() */
92 ret = winbind_lookup_name(dom->name, name, ids[i]->sid, &type);
93 (void)winbind_off();
94
95 if (!ret) {
96 /* TODO: how do we know if the name is really not mapped,
97 * or something just failed ? */
98 ids[i]->status = ID_UNMAPPED;
99 continue;
100 }
101
102 switch (type) {
103 case SID_NAME_USER:
104 if (ids[i]->xid.type == ID_TYPE_UID) {
105 ids[i]->status = ID_MAPPED;
106 }
107 break;
108
109 case SID_NAME_DOM_GRP:
110 case SID_NAME_ALIAS:
111 case SID_NAME_WKN_GRP:
112 if (ids[i]->xid.type == ID_TYPE_GID) {
113 ids[i]->status = ID_MAPPED;
114 }
115 break;
116
117 default:
118 ids[i]->status = ID_UNKNOWN;
119 break;
120 }
121 }
122
123
124 talloc_free(ctx);
125 return NT_STATUS_OK;
126}
127
128/**********************************
129 lookup a set of sids.
130**********************************/
131
132static NTSTATUS idmap_nss_sids_to_unixids(struct idmap_domain *dom, struct id_map **ids)
133{
134 TALLOC_CTX *ctx;
135 int i;
136
137 if (! dom->initialized) {
138 return NT_STATUS_UNSUCCESSFUL;
139 }
140
141 ctx = talloc_new(dom);
142 if ( ! ctx) {
143 DEBUG(0, ("Out of memory!\n"));
144 return NT_STATUS_NO_MEMORY;
145 }
146
147 for (i = 0; ids[i]; i++) {
148 struct group *gr;
149 enum lsa_SidType type;
150 const char *dom_name = NULL;
151 const char *name = NULL;
152 bool ret;
153
154 /* by default calls to winbindd are disabled
155 the following call will not recurse so this is safe */
156 (void)winbind_on();
157 ret = winbind_lookup_sid(ctx, ids[i]->sid, &dom_name, &name, &type);
158 (void)winbind_off();
159
160 if (!ret) {
161 /* TODO: how do we know if the name is really not mapped,
162 * or something just failed ? */
163 ids[i]->status = ID_UNMAPPED;
164 continue;
165 }
166
167 switch (type) {
168 case SID_NAME_USER: {
169 struct passwd *pw;
170
171 /* this will find also all lower case name and use username level */
172
173 pw = Get_Pwnam_alloc(talloc_tos(), name);
174 if (pw) {
175 ids[i]->xid.id = pw->pw_uid;
176 ids[i]->xid.type = ID_TYPE_UID;
177 ids[i]->status = ID_MAPPED;
178 }
179 TALLOC_FREE(pw);
180 break;
181 }
182
183 case SID_NAME_DOM_GRP:
184 case SID_NAME_ALIAS:
185 case SID_NAME_WKN_GRP:
186
187 gr = getgrnam(name);
188 if (gr) {
189 ids[i]->xid.id = gr->gr_gid;
190 ids[i]->xid.type = ID_TYPE_GID;
191 ids[i]->status = ID_MAPPED;
192 }
193 break;
194
195 default:
196 ids[i]->status = ID_UNKNOWN;
197 break;
198 }
199 }
200
201 talloc_free(ctx);
202 return NT_STATUS_OK;
203}
204
205/**********************************
206 Close the idmap tdb instance
207**********************************/
208
209static NTSTATUS idmap_nss_close(struct idmap_domain *dom)
210{
211 return NT_STATUS_OK;
212}
213
214static struct idmap_methods nss_methods = {
215
216 .init = idmap_nss_int_init,
217 .unixids_to_sids = idmap_nss_unixids_to_sids,
218 .sids_to_unixids = idmap_nss_sids_to_unixids,
219 .close_fn = idmap_nss_close
220};
221
222NTSTATUS idmap_nss_init(void)
223{
224 return smb_register_idmap(SMB_IDMAP_INTERFACE_VERSION, "nss", &nss_methods);
225}
Note: See TracBrowser for help on using the repository browser.