mirror of
https://github.com/samba-team/samba.git
synced 2024-12-24 21:34:56 +03:00
9c2fcb689b
This makes us scale better with many simultaneous winbind requests, some of which might be slow. This implementation breaks offline logons, as the cached credentials are maintained in a child (this needs fixing). So, if the offline logons are active, only allow one DC connection. Probably the offline logon and the scalable file server cases are separate enough so that this patch is useful even with the restriction.
209 lines
5.4 KiB
C
209 lines
5.4 KiB
C
/*
|
|
Unix SMB/CIFS implementation.
|
|
async implementation of WINBINDD_LIST_GROUPS
|
|
Copyright (C) Volker Lendecke 2009
|
|
|
|
This program is free software; you can redistribute it and/or modify
|
|
it under the terms of the GNU General Public License as published by
|
|
the Free Software Foundation; either version 3 of the License, or
|
|
(at your option) any later version.
|
|
|
|
This program is distributed in the hope that it will be useful,
|
|
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
GNU General Public License for more details.
|
|
|
|
You should have received a copy of the GNU General Public License
|
|
along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
#include "includes.h"
|
|
#include "winbindd.h"
|
|
#include "librpc/gen_ndr/ndr_wbint_c.h"
|
|
|
|
struct winbindd_list_groups_domstate {
|
|
struct tevent_req *subreq;
|
|
struct winbindd_domain *domain;
|
|
struct wbint_Principals groups;
|
|
};
|
|
|
|
struct winbindd_list_groups_state {
|
|
int num_received;
|
|
/* All domains */
|
|
int num_domains;
|
|
struct winbindd_list_groups_domstate *domains;
|
|
};
|
|
|
|
static void winbindd_list_groups_done(struct tevent_req *subreq);
|
|
|
|
struct tevent_req *winbindd_list_groups_send(TALLOC_CTX *mem_ctx,
|
|
struct tevent_context *ev,
|
|
struct winbindd_cli_state *cli,
|
|
struct winbindd_request *request)
|
|
{
|
|
struct tevent_req *req;
|
|
struct winbindd_list_groups_state *state;
|
|
struct winbindd_domain *domain;
|
|
int i;
|
|
|
|
req = tevent_req_create(mem_ctx, &state,
|
|
struct winbindd_list_groups_state);
|
|
if (req == NULL) {
|
|
return NULL;
|
|
}
|
|
|
|
/* Ensure null termination */
|
|
request->domain_name[sizeof(request->domain_name)-1]='\0';
|
|
|
|
DEBUG(3, ("list_groups %s\n", request->domain_name));
|
|
|
|
if (request->domain_name[0] != '\0') {
|
|
state->num_domains = 1;
|
|
} else {
|
|
state->num_domains = 0;
|
|
for (domain = domain_list(); domain; domain = domain->next) {
|
|
state->num_domains += 1;
|
|
}
|
|
}
|
|
|
|
state->domains = talloc_array(state,
|
|
struct winbindd_list_groups_domstate,
|
|
state->num_domains);
|
|
if (tevent_req_nomem(state->domains, req)) {
|
|
return tevent_req_post(req, ev);
|
|
}
|
|
|
|
if (request->domain_name[0] != '\0') {
|
|
state->domains[0].domain = find_domain_from_name_noinit(
|
|
request->domain_name);
|
|
if (state->domains[0].domain == NULL) {
|
|
tevent_req_nterror(req, NT_STATUS_NO_SUCH_DOMAIN);
|
|
return tevent_req_post(req, ev);
|
|
}
|
|
} else {
|
|
i = 0;
|
|
for (domain = domain_list(); domain; domain = domain->next) {
|
|
state->domains[i++].domain = domain;
|
|
}
|
|
}
|
|
|
|
for (i=0; i<state->num_domains; i++) {
|
|
struct winbindd_list_groups_domstate *d = &state->domains[i];
|
|
|
|
d->subreq = dcerpc_wbint_QueryGroupList_send(
|
|
state->domains, ev, dom_child_handle(d->domain),
|
|
&d->groups);
|
|
if (tevent_req_nomem(d->subreq, req)) {
|
|
TALLOC_FREE(state->domains);
|
|
return tevent_req_post(req, ev);
|
|
}
|
|
tevent_req_set_callback(d->subreq, winbindd_list_groups_done,
|
|
req);
|
|
}
|
|
state->num_received = 0;
|
|
return req;
|
|
}
|
|
|
|
static void winbindd_list_groups_done(struct tevent_req *subreq)
|
|
{
|
|
struct tevent_req *req = tevent_req_callback_data(
|
|
subreq, struct tevent_req);
|
|
struct winbindd_list_groups_state *state = tevent_req_data(
|
|
req, struct winbindd_list_groups_state);
|
|
NTSTATUS status, result;
|
|
int i;
|
|
|
|
status = dcerpc_wbint_QueryGroupList_recv(subreq, state->domains,
|
|
&result);
|
|
|
|
for (i=0; i<state->num_domains; i++) {
|
|
if (subreq == state->domains[i].subreq) {
|
|
break;
|
|
}
|
|
}
|
|
if (i < state->num_domains) {
|
|
struct winbindd_list_groups_domstate *d = &state->domains[i];
|
|
|
|
DEBUG(10, ("Domain %s returned %d groups\n", d->domain->name,
|
|
d->groups.num_principals));
|
|
|
|
d->subreq = NULL;
|
|
|
|
if (!NT_STATUS_IS_OK(status) || !NT_STATUS_IS_OK(result)) {
|
|
DEBUG(10, ("list_groups for domain %s failed\n",
|
|
d->domain->name));
|
|
d->groups.num_principals = 0;
|
|
}
|
|
}
|
|
|
|
TALLOC_FREE(subreq);
|
|
|
|
state->num_received += 1;
|
|
|
|
if (state->num_received >= state->num_domains) {
|
|
tevent_req_done(req);
|
|
}
|
|
}
|
|
|
|
NTSTATUS winbindd_list_groups_recv(struct tevent_req *req,
|
|
struct winbindd_response *response)
|
|
{
|
|
struct winbindd_list_groups_state *state = tevent_req_data(
|
|
req, struct winbindd_list_groups_state);
|
|
NTSTATUS status;
|
|
char *result;
|
|
int i;
|
|
uint32_t j, num_entries = 0;
|
|
size_t len;
|
|
|
|
if (tevent_req_is_nterror(req, &status)) {
|
|
return status;
|
|
}
|
|
|
|
len = 0;
|
|
response->data.num_entries = 0;
|
|
for (i=0; i<state->num_domains; i++) {
|
|
struct winbindd_list_groups_domstate *d = &state->domains[i];
|
|
|
|
for (j=0; j<d->groups.num_principals; j++) {
|
|
fstring name;
|
|
fill_domain_username(name, d->domain->name,
|
|
d->groups.principals[j].name,
|
|
True);
|
|
len += strlen(name)+1;
|
|
}
|
|
response->data.num_entries += d->groups.num_principals;
|
|
}
|
|
|
|
result = talloc_array(response, char, len+1);
|
|
if (result == 0) {
|
|
return NT_STATUS_NO_MEMORY;
|
|
}
|
|
|
|
len = 0;
|
|
for (i=0; i<state->num_domains; i++) {
|
|
struct winbindd_list_groups_domstate *d = &state->domains[i];
|
|
|
|
for (j=0; j<d->groups.num_principals; j++) {
|
|
fstring name;
|
|
size_t this_len;
|
|
fill_domain_username(name, d->domain->name,
|
|
d->groups.principals[j].name,
|
|
True);
|
|
this_len = strlen(name);
|
|
memcpy(result+len, name, this_len);
|
|
len += this_len;
|
|
result[len] = ',';
|
|
len += 1;
|
|
num_entries++;
|
|
}
|
|
}
|
|
result[len-1] = '\0';
|
|
|
|
response->data.num_entries = num_entries;
|
|
response->extra_data.data = result;
|
|
response->length += len;
|
|
|
|
return NT_STATUS_OK;
|
|
}
|