1 | /*
|
---|
2 | Unix SMB/CIFS implementation.
|
---|
3 |
|
---|
4 | LDB wrap functions
|
---|
5 |
|
---|
6 | Copyright (C) Andrew Tridgell 2004
|
---|
7 |
|
---|
8 | This program is free software; you can redistribute it and/or modify
|
---|
9 | it under the terms of the GNU General Public License as published by
|
---|
10 | the Free Software Foundation; either version 3 of the License, or
|
---|
11 | (at your option) any later version.
|
---|
12 |
|
---|
13 | This program is distributed in the hope that it will be useful,
|
---|
14 | but WITHOUT ANY WARRANTY; without even the implied warranty of
|
---|
15 | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
---|
16 | GNU General Public License for more details.
|
---|
17 |
|
---|
18 | You should have received a copy of the GNU General Public License
|
---|
19 | along with this program. If not, see <http://www.gnu.org/licenses/>.
|
---|
20 | */
|
---|
21 |
|
---|
22 | /*
|
---|
23 | the stupidity of the unix fcntl locking design forces us to never
|
---|
24 | allow a database file to be opened twice in the same process. These
|
---|
25 | wrappers provide convenient access to a tdb or ldb, taking advantage
|
---|
26 | of talloc destructors to ensure that only a single open is done
|
---|
27 | */
|
---|
28 |
|
---|
29 | #include "includes.h"
|
---|
30 | #include "lib/events/events.h"
|
---|
31 | #include "lib/ldb/include/ldb.h"
|
---|
32 | #include "lib/ldb/include/ldb_errors.h"
|
---|
33 | #include "lib/ldb-samba/ldif_handlers.h"
|
---|
34 | #include "ldb_wrap.h"
|
---|
35 | #include "dsdb/samdb/samdb.h"
|
---|
36 | #include "param/param.h"
|
---|
37 |
|
---|
38 | /*
|
---|
39 | this is used to catch debug messages from ldb
|
---|
40 | */
|
---|
41 | static void ldb_wrap_debug(void *context, enum ldb_debug_level level,
|
---|
42 | const char *fmt, va_list ap) PRINTF_ATTRIBUTE(3,0);
|
---|
43 |
|
---|
44 | static void ldb_wrap_debug(void *context, enum ldb_debug_level level,
|
---|
45 | const char *fmt, va_list ap)
|
---|
46 | {
|
---|
47 | int samba_level = -1;
|
---|
48 | char *s = NULL;
|
---|
49 | switch (level) {
|
---|
50 | case LDB_DEBUG_FATAL:
|
---|
51 | samba_level = 0;
|
---|
52 | break;
|
---|
53 | case LDB_DEBUG_ERROR:
|
---|
54 | samba_level = 1;
|
---|
55 | break;
|
---|
56 | case LDB_DEBUG_WARNING:
|
---|
57 | samba_level = 2;
|
---|
58 | break;
|
---|
59 | case LDB_DEBUG_TRACE:
|
---|
60 | samba_level = 5;
|
---|
61 | break;
|
---|
62 |
|
---|
63 | };
|
---|
64 | vasprintf(&s, fmt, ap);
|
---|
65 | if (!s) return;
|
---|
66 | DEBUG(samba_level, ("ldb: %s\n", s));
|
---|
67 | free(s);
|
---|
68 | }
|
---|
69 |
|
---|
70 | /* check for memory leaks on the ldb context */
|
---|
71 | static int ldb_wrap_destructor(struct ldb_context *ldb)
|
---|
72 | {
|
---|
73 | size_t *startup_blocks = (size_t *)ldb_get_opaque(ldb, "startup_blocks");
|
---|
74 |
|
---|
75 | if (startup_blocks &&
|
---|
76 | talloc_total_blocks(ldb) > *startup_blocks + 400) {
|
---|
77 | DEBUG(0,("WARNING: probable memory leak in ldb %s - %lu blocks (startup %lu) %lu bytes\n",
|
---|
78 | (char *)ldb_get_opaque(ldb, "wrap_url"),
|
---|
79 | (unsigned long)talloc_total_blocks(ldb),
|
---|
80 | (unsigned long)*startup_blocks,
|
---|
81 | (unsigned long)talloc_total_size(ldb)));
|
---|
82 | #if 0
|
---|
83 | talloc_report_full(ldb, stdout);
|
---|
84 | call_backtrace();
|
---|
85 | smb_panic("probable memory leak in ldb");
|
---|
86 | #endif
|
---|
87 | }
|
---|
88 | return 0;
|
---|
89 | }
|
---|
90 |
|
---|
91 | /*
|
---|
92 | wrapped connection to a ldb database
|
---|
93 | to close just talloc_free() the returned ldb_context
|
---|
94 |
|
---|
95 | TODO: We need an error_string parameter
|
---|
96 | */
|
---|
97 | struct ldb_context *ldb_wrap_connect(TALLOC_CTX *mem_ctx,
|
---|
98 | struct tevent_context *ev,
|
---|
99 | struct loadparm_context *lp_ctx,
|
---|
100 | const char *url,
|
---|
101 | struct auth_session_info *session_info,
|
---|
102 | struct cli_credentials *credentials,
|
---|
103 | unsigned int flags,
|
---|
104 | const char *options[])
|
---|
105 | {
|
---|
106 | struct ldb_context *ldb;
|
---|
107 | int ret;
|
---|
108 | char *real_url = NULL;
|
---|
109 | size_t *startup_blocks;
|
---|
110 |
|
---|
111 | /* we want to use the existing event context if possible. This
|
---|
112 | relies on the fact that in smbd, everything is a child of
|
---|
113 | the main event_context */
|
---|
114 | if (ev == NULL) {
|
---|
115 | return NULL;
|
---|
116 | }
|
---|
117 |
|
---|
118 | ldb = ldb_init(mem_ctx, ev);
|
---|
119 | if (ldb == NULL) {
|
---|
120 | return NULL;
|
---|
121 | }
|
---|
122 |
|
---|
123 | ldb_set_modules_dir(ldb,
|
---|
124 | talloc_asprintf(ldb,
|
---|
125 | "%s/ldb",
|
---|
126 | lp_modulesdir(lp_ctx)));
|
---|
127 |
|
---|
128 | if (ldb_set_opaque(ldb, "sessionInfo", session_info)) {
|
---|
129 | talloc_free(ldb);
|
---|
130 | return NULL;
|
---|
131 | }
|
---|
132 |
|
---|
133 | if (ldb_set_opaque(ldb, "credentials", credentials)) {
|
---|
134 | talloc_free(ldb);
|
---|
135 | return NULL;
|
---|
136 | }
|
---|
137 |
|
---|
138 | if (ldb_set_opaque(ldb, "loadparm", lp_ctx)) {
|
---|
139 | talloc_free(ldb);
|
---|
140 | return NULL;
|
---|
141 | }
|
---|
142 |
|
---|
143 | /* This must be done before we load the schema, as these
|
---|
144 | * handlers for objectSid and objectGUID etc must take
|
---|
145 | * precedence over the 'binary attribute' declaration in the
|
---|
146 | * schema */
|
---|
147 | ret = ldb_register_samba_handlers(ldb);
|
---|
148 | if (ret == -1) {
|
---|
149 | talloc_free(ldb);
|
---|
150 | return NULL;
|
---|
151 | }
|
---|
152 |
|
---|
153 | if (lp_ctx != NULL && strcmp(lp_sam_url(lp_ctx), url) == 0) {
|
---|
154 | dsdb_set_global_schema(ldb);
|
---|
155 | }
|
---|
156 |
|
---|
157 | ldb_set_debug(ldb, ldb_wrap_debug, NULL);
|
---|
158 |
|
---|
159 | ldb_set_utf8_fns(ldb, NULL, wrap_casefold);
|
---|
160 |
|
---|
161 | real_url = private_path(ldb, lp_ctx, url);
|
---|
162 | if (real_url == NULL) {
|
---|
163 | talloc_free(ldb);
|
---|
164 | return NULL;
|
---|
165 | }
|
---|
166 |
|
---|
167 | /* allow admins to force non-sync ldb for all databases */
|
---|
168 | if (lp_parm_bool(lp_ctx, NULL, "ldb", "nosync", false)) {
|
---|
169 | flags |= LDB_FLG_NOSYNC;
|
---|
170 | }
|
---|
171 |
|
---|
172 | if (DEBUGLVL(10)) {
|
---|
173 | flags |= LDB_FLG_ENABLE_TRACING;
|
---|
174 | }
|
---|
175 |
|
---|
176 | /* we usually want Samba databases to be private. If we later
|
---|
177 | find we need one public, we will need to add a parameter to
|
---|
178 | ldb_wrap_connect() */
|
---|
179 | ldb_set_create_perms(ldb, 0600);
|
---|
180 |
|
---|
181 | ret = ldb_connect(ldb, real_url, flags, options);
|
---|
182 | if (ret != LDB_SUCCESS) {
|
---|
183 | talloc_free(ldb);
|
---|
184 | return NULL;
|
---|
185 | }
|
---|
186 |
|
---|
187 | /* setup for leak detection */
|
---|
188 | ldb_set_opaque(ldb, "wrap_url", real_url);
|
---|
189 | startup_blocks = talloc(ldb, size_t);
|
---|
190 | *startup_blocks = talloc_total_blocks(ldb);
|
---|
191 | ldb_set_opaque(ldb, "startup_blocks", startup_blocks);
|
---|
192 |
|
---|
193 | talloc_set_destructor(ldb, ldb_wrap_destructor);
|
---|
194 |
|
---|
195 | return ldb;
|
---|
196 | }
|
---|