1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-27 03:21:53 +03:00
samba-mirror/source3/winbindd/winbindd_getgrnam.c
Andreas Schneider a05b63db62 winbind: Fix UPN handling in parse_domain_user()
BUG: https://bugzilla.samba.org/show_bug.cgi?id=13369

Pair-Programmed-With: Stefan Metzmacher <metze@samba.org>
Signed-off-by: Andreas Schneider <asn@samba.org>
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2018-05-11 09:07:37 +02:00

195 lines
5.3 KiB
C

/*
Unix SMB/CIFS implementation.
async implementation of WINBINDD_GETGRNAM
Copyright (C) Volker Lendecke 2009
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation; either version 3 of the License, or
(at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program. If not, see <http://www.gnu.org/licenses/>.
*/
#include "includes.h"
#include "winbindd.h"
struct winbindd_getgrnam_state {
struct tevent_context *ev;
fstring name_namespace, name_domain, name_group;
struct dom_sid sid;
const char *domname;
const char *name;
gid_t gid;
struct db_context *members;
};
static void winbindd_getgrnam_lookupname_done(struct tevent_req *subreq);
static void winbindd_getgrnam_done(struct tevent_req *subreq);
struct tevent_req *winbindd_getgrnam_send(TALLOC_CTX *mem_ctx,
struct tevent_context *ev,
struct winbindd_cli_state *cli,
struct winbindd_request *request)
{
struct tevent_req *req, *subreq;
struct winbindd_getgrnam_state *state;
char *tmp;
NTSTATUS nt_status;
bool ok;
req = tevent_req_create(mem_ctx, &state,
struct winbindd_getgrnam_state);
if (req == NULL) {
return NULL;
}
state->ev = ev;
/* Ensure null termination */
request->data.groupname[sizeof(request->data.groupname)-1]='\0';
DEBUG(3, ("getgrnam %s\n", request->data.groupname));
nt_status = normalize_name_unmap(state, request->data.groupname, &tmp);
/* If we didn't map anything in the above call, just reset the
tmp pointer to the original string */
if (!NT_STATUS_IS_OK(nt_status) &&
!NT_STATUS_EQUAL(nt_status, NT_STATUS_FILE_RENAMED))
{
tmp = request->data.groupname;
}
/* Parse domain and groupname */
ok = parse_domain_user(tmp,
state->name_namespace,
state->name_domain,
state->name_group);
if (!ok) {
DBG_INFO("Could not parse domain user: %s\n", tmp);
tevent_req_nterror(req, NT_STATUS_INVALID_PARAMETER);
return tevent_req_post(req, ev);
}
/* if no domain or our local domain and no local tdb group, default to
* our local domain for aliases */
if ( !*(state->name_domain) || strequal(state->name_domain,
get_global_sam_name()) ) {
fstrcpy(state->name_domain, get_global_sam_name());
}
subreq = wb_lookupname_send(state, ev,
state->name_namespace,
state->name_domain,
state->name_group,
0);
if (tevent_req_nomem(subreq, req)) {
return tevent_req_post(req, ev);
}
tevent_req_set_callback(subreq, winbindd_getgrnam_lookupname_done,
req);
return req;
}
static void winbindd_getgrnam_lookupname_done(struct tevent_req *subreq)
{
struct tevent_req *req = tevent_req_callback_data(
subreq, struct tevent_req);
struct winbindd_getgrnam_state *state = tevent_req_data(
req, struct winbindd_getgrnam_state);
enum lsa_SidType type;
NTSTATUS status;
status = wb_lookupname_recv(subreq, &state->sid, &type);
TALLOC_FREE(subreq);
if (tevent_req_nterror(req, status)) {
return;
}
switch (type) {
case SID_NAME_DOM_GRP:
case SID_NAME_ALIAS:
case SID_NAME_WKN_GRP:
/*
* Also give user types a chance:
* These might be user sids mapped to the ID_TYPE_BOTH,
* and in that case we should construct a group struct.
*/
case SID_NAME_USER:
case SID_NAME_COMPUTER:
break;
default:
tevent_req_nterror(req, NT_STATUS_NO_SUCH_GROUP);
return;
}
subreq = wb_getgrsid_send(state, state->ev, &state->sid,
lp_winbind_expand_groups());
if (tevent_req_nomem(subreq, req)) {
return;
}
tevent_req_set_callback(subreq, winbindd_getgrnam_done, req);
}
static void winbindd_getgrnam_done(struct tevent_req *subreq)
{
struct tevent_req *req = tevent_req_callback_data(
subreq, struct tevent_req);
struct winbindd_getgrnam_state *state = tevent_req_data(
req, struct winbindd_getgrnam_state);
NTSTATUS status;
status = wb_getgrsid_recv(subreq, state, &state->domname, &state->name,
&state->gid, &state->members);
TALLOC_FREE(subreq);
if (tevent_req_nterror(req, status)) {
return;
}
tevent_req_done(req);
}
NTSTATUS winbindd_getgrnam_recv(struct tevent_req *req,
struct winbindd_response *response)
{
struct winbindd_getgrnam_state *state = tevent_req_data(
req, struct winbindd_getgrnam_state);
NTSTATUS status;
int num_members;
char *buf;
if (tevent_req_is_nterror(req, &status)) {
DEBUG(5, ("Could not convert sid %s: %s\n",
sid_string_dbg(&state->sid), nt_errstr(status)));
return status;
}
if (!fill_grent(talloc_tos(), &response->data.gr, state->domname,
state->name, state->gid)) {
DEBUG(5, ("fill_grent failed\n"));
return NT_STATUS_NO_MEMORY;
}
status = winbindd_print_groupmembers(state->members, response,
&num_members, &buf);
if (!NT_STATUS_IS_OK(status)) {
return status;
}
response->data.gr.num_gr_mem = (uint32_t)num_members;
/* Group membership lives at start of extra data */
response->data.gr.gr_mem_ofs = 0;
response->extra_data.data = buf;
response->length += talloc_get_size(response->extra_data.data);
return NT_STATUS_OK;
}