mirror of
https://github.com/samba-team/samba.git
synced 2024-12-24 21:34:56 +03:00
e5fbff0963
This avoids one walk of the domain list
200 lines
5.5 KiB
C
200 lines
5.5 KiB
C
/*
|
|
Unix SMB/CIFS implementation.
|
|
async implementation of WINBINDD_GETGROUPS
|
|
Copyright (C) Volker Lendecke 2009
|
|
|
|
This program is free software; you can redistribute it and/or modify
|
|
it under the terms of the GNU General Public License as published by
|
|
the Free Software Foundation; either version 3 of the License, or
|
|
(at your option) any later version.
|
|
|
|
This program is distributed in the hope that it will be useful,
|
|
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
GNU General Public License for more details.
|
|
|
|
You should have received a copy of the GNU General Public License
|
|
along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
#include "includes.h"
|
|
#include "winbindd.h"
|
|
|
|
struct winbindd_getgroups_state {
|
|
struct tevent_context *ev;
|
|
fstring domname;
|
|
fstring username;
|
|
struct dom_sid sid;
|
|
enum lsa_SidType type;
|
|
int num_sids;
|
|
struct dom_sid *sids;
|
|
int next_sid;
|
|
int num_gids;
|
|
gid_t *gids;
|
|
};
|
|
|
|
static void winbindd_getgroups_lookupname_done(struct tevent_req *subreq);
|
|
static void winbindd_getgroups_gettoken_done(struct tevent_req *subreq);
|
|
static void winbindd_getgroups_sid2gid_done(struct tevent_req *subreq);
|
|
|
|
struct tevent_req *winbindd_getgroups_send(TALLOC_CTX *mem_ctx,
|
|
struct tevent_context *ev,
|
|
struct winbindd_cli_state *cli,
|
|
struct winbindd_request *request)
|
|
{
|
|
struct tevent_req *req, *subreq;
|
|
struct winbindd_getgroups_state *state;
|
|
char *domuser, *mapped_user;
|
|
NTSTATUS status;
|
|
|
|
req = tevent_req_create(mem_ctx, &state,
|
|
struct winbindd_getgroups_state);
|
|
if (req == NULL) {
|
|
return NULL;
|
|
}
|
|
state->ev = ev;
|
|
|
|
/* Ensure null termination */
|
|
request->data.username[sizeof(request->data.username)-1]='\0';
|
|
|
|
DEBUG(3, ("getgroups %s\n", request->data.username));
|
|
|
|
domuser = request->data.username;
|
|
|
|
status = normalize_name_unmap(state, domuser, &mapped_user);
|
|
|
|
if (NT_STATUS_IS_OK(status)
|
|
|| NT_STATUS_EQUAL(status, NT_STATUS_FILE_RENAMED)) {
|
|
/* normalize_name_unmapped did something */
|
|
domuser = mapped_user;
|
|
}
|
|
|
|
if (!parse_domain_user(domuser, state->domname, state->username)) {
|
|
DEBUG(5, ("Could not parse domain user: %s\n", domuser));
|
|
tevent_req_nterror(req, NT_STATUS_INVALID_PARAMETER);
|
|
return tevent_req_post(req, ev);
|
|
}
|
|
|
|
subreq = wb_lookupname_send(state, ev, state->domname, state->username,
|
|
LOOKUP_NAME_NO_NSS);
|
|
if (tevent_req_nomem(subreq, req)) {
|
|
return tevent_req_post(req, ev);
|
|
}
|
|
tevent_req_set_callback(subreq, winbindd_getgroups_lookupname_done,
|
|
req);
|
|
return req;
|
|
}
|
|
|
|
static void winbindd_getgroups_lookupname_done(struct tevent_req *subreq)
|
|
{
|
|
struct tevent_req *req = tevent_req_callback_data(
|
|
subreq, struct tevent_req);
|
|
struct winbindd_getgroups_state *state = tevent_req_data(
|
|
req, struct winbindd_getgroups_state);
|
|
NTSTATUS status;
|
|
|
|
status = wb_lookupname_recv(subreq, &state->sid, &state->type);
|
|
TALLOC_FREE(subreq);
|
|
if (!NT_STATUS_IS_OK(status)) {
|
|
tevent_req_nterror(req, status);
|
|
return;
|
|
}
|
|
|
|
subreq = wb_gettoken_send(state, state->ev, &state->sid);
|
|
if (tevent_req_nomem(subreq, req)) {
|
|
return;
|
|
}
|
|
tevent_req_set_callback(subreq, winbindd_getgroups_gettoken_done, req);
|
|
}
|
|
|
|
static void winbindd_getgroups_gettoken_done(struct tevent_req *subreq)
|
|
{
|
|
struct tevent_req *req = tevent_req_callback_data(
|
|
subreq, struct tevent_req);
|
|
struct winbindd_getgroups_state *state = tevent_req_data(
|
|
req, struct winbindd_getgroups_state);
|
|
NTSTATUS status;
|
|
|
|
status = wb_gettoken_recv(subreq, state, &state->num_sids,
|
|
&state->sids);
|
|
TALLOC_FREE(subreq);
|
|
if (!NT_STATUS_IS_OK(status)) {
|
|
tevent_req_nterror(req, status);
|
|
return;
|
|
}
|
|
|
|
/*
|
|
* Convert the group SIDs to gids. state->sids[0] contains the user
|
|
* sid, so start at index 1.
|
|
*/
|
|
|
|
state->gids = talloc_array(state, gid_t, state->num_sids-1);
|
|
if (tevent_req_nomem(state->gids, req)) {
|
|
return;
|
|
}
|
|
state->num_gids = 0;
|
|
state->next_sid = 1;
|
|
|
|
subreq = wb_sid2gid_send(state, state->ev,
|
|
&state->sids[state->next_sid]);
|
|
if (tevent_req_nomem(subreq, req)) {
|
|
return;
|
|
}
|
|
tevent_req_set_callback(subreq, winbindd_getgroups_sid2gid_done, req);
|
|
}
|
|
|
|
static void winbindd_getgroups_sid2gid_done(struct tevent_req *subreq)
|
|
{
|
|
struct tevent_req *req = tevent_req_callback_data(
|
|
subreq, struct tevent_req);
|
|
struct winbindd_getgroups_state *state = tevent_req_data(
|
|
req, struct winbindd_getgroups_state);
|
|
NTSTATUS status;
|
|
|
|
status = wb_sid2gid_recv(subreq, &state->gids[state->num_gids]);
|
|
TALLOC_FREE(subreq);
|
|
|
|
/*
|
|
* In case of failure, just continue with the next gid
|
|
*/
|
|
if (NT_STATUS_IS_OK(status)) {
|
|
state->num_gids += 1;
|
|
}
|
|
state->next_sid += 1;
|
|
|
|
if (state->next_sid >= state->num_sids) {
|
|
tevent_req_done(req);
|
|
return;
|
|
}
|
|
|
|
subreq = wb_sid2gid_send(state, state->ev,
|
|
&state->sids[state->next_sid]);
|
|
if (tevent_req_nomem(subreq, req)) {
|
|
return;
|
|
}
|
|
tevent_req_set_callback(subreq, winbindd_getgroups_sid2gid_done, req);
|
|
}
|
|
|
|
NTSTATUS winbindd_getgroups_recv(struct tevent_req *req,
|
|
struct winbindd_response *response)
|
|
{
|
|
struct winbindd_getgroups_state *state = tevent_req_data(
|
|
req, struct winbindd_getgroups_state);
|
|
NTSTATUS status;
|
|
|
|
if (tevent_req_is_nterror(req, &status)) {
|
|
DEBUG(5, ("Could not convert sid %s: %s\n",
|
|
sid_string_dbg(&state->sid), nt_errstr(status)));
|
|
return status;
|
|
}
|
|
|
|
response->data.num_entries = state->num_gids;
|
|
|
|
if (state->num_gids > 0) {
|
|
response->extra_data.data = talloc_move(response,
|
|
&state->gids);
|
|
response->length += state->num_gids * sizeof(gid_t);
|
|
}
|
|
return NT_STATUS_OK;
|
|
}
|