mirror of
https://github.com/samba-team/samba.git
synced 2024-12-23 17:34:34 +03:00
b8c30abb02
BUG: https://bugzilla.samba.org/show_bug.cgi?id=13344 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Björn Jacke <bjacke@samba.org>
138 lines
4.3 KiB
C
138 lines
4.3 KiB
C
/*
|
|
Unix SMB/CIFS implementation.
|
|
|
|
AIX loadable authentication module, providing identification
|
|
routines against Samba winbind/Windows NT Domain
|
|
|
|
Copyright (C) Aaron Collins 2003
|
|
Copyright (C) Timur I. Bakeyev 2013
|
|
|
|
This library is free software; you can redistribute it and/or
|
|
modify it under the terms of the GNU Lesser General Public
|
|
License as published by the Free Software Foundation; either
|
|
version 3 of the License, or (at your option) any later version.
|
|
|
|
This library is distributed in the hope that it will be useful,
|
|
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
Library General Public License for more details.
|
|
|
|
You should have received a copy of the GNU Lesser General Public License
|
|
along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
#include "winbind_client.h"
|
|
|
|
/* Make sure that the module gets registered needed by freebsd 5.1 */
|
|
ns_mtab *nss_module_register(const char *, unsigned int *, nss_module_unregister_fn *);
|
|
|
|
NSS_METHOD_PROTOTYPE(__nss_compat_getgrnam_r);
|
|
NSS_METHOD_PROTOTYPE(__nss_compat_getgrgid_r);
|
|
NSS_METHOD_PROTOTYPE(__nss_compat_getgrent_r);
|
|
NSS_METHOD_PROTOTYPE(__nss_compat_setgrent);
|
|
NSS_METHOD_PROTOTYPE(__nss_compat_endgrent);
|
|
|
|
NSS_METHOD_PROTOTYPE(__nss_compat_getpwnam_r);
|
|
NSS_METHOD_PROTOTYPE(__nss_compat_getpwuid_r);
|
|
NSS_METHOD_PROTOTYPE(__nss_compat_getpwent_r);
|
|
NSS_METHOD_PROTOTYPE(__nss_compat_setpwent);
|
|
NSS_METHOD_PROTOTYPE(__nss_compat_endpwent);
|
|
NSS_METHOD_PROTOTYPE(__nss_compat_endpwent);
|
|
|
|
NSS_METHOD_PROTOTYPE(__freebsd_getgroupmembership);
|
|
|
|
static ns_mtab methods[] = {
|
|
{ NSDB_GROUP, "getgrnam_r", __nss_compat_getgrnam_r, _nss_winbind_getgrnam_r },
|
|
{ NSDB_GROUP, "getgrgid_r", __nss_compat_getgrgid_r, _nss_winbind_getgrgid_r },
|
|
{ NSDB_GROUP, "getgrent_r", __nss_compat_getgrent_r, _nss_winbind_getgrent_r },
|
|
{ NSDB_GROUP, "setgrent", __nss_compat_setgrent, _nss_winbind_setgrent },
|
|
{ NSDB_GROUP, "endgrent", __nss_compat_endgrent, _nss_winbind_endgrent },
|
|
{ NSDB_GROUP, "getgroupmembership", __freebsd_getgroupmembership, NULL },
|
|
|
|
{ NSDB_PASSWD, "getpwnam_r", __nss_compat_getpwnam_r, _nss_winbind_getpwnam_r },
|
|
{ NSDB_PASSWD, "getpwuid_r", __nss_compat_getpwuid_r, _nss_winbind_getpwuid_r },
|
|
{ NSDB_PASSWD, "getpwent_r", __nss_compat_getpwent_r, _nss_winbind_getpwent_r },
|
|
{ NSDB_PASSWD, "setpwent", __nss_compat_setpwent, _nss_winbind_setpwent },
|
|
{ NSDB_PASSWD, "endpwent", __nss_compat_endpwent, _nss_winbind_endpwent },
|
|
|
|
};
|
|
|
|
/* Taken from libc */
|
|
static int
|
|
gr_addgid(gid_t gid, gid_t *groups, int maxgrp, int *grpcnt)
|
|
{
|
|
int ret, dupc;
|
|
|
|
/* skip duplicates */
|
|
for (dupc = 0; dupc < MIN(maxgrp, *grpcnt); dupc++) {
|
|
if (groups[dupc] == gid)
|
|
return 1;
|
|
}
|
|
|
|
ret = 1;
|
|
if (*grpcnt < maxgrp) /* add this gid */
|
|
groups[*grpcnt] = gid;
|
|
else
|
|
ret = 0;
|
|
|
|
(*grpcnt)++;
|
|
|
|
return ret;
|
|
}
|
|
|
|
/*
|
|
rv = _nsdispatch(NULL, dtab, NSDB_GROUP, "getgroupmembership",
|
|
defaultsrc, uname, agroup, groups, maxgrp, grpcnt);
|
|
*/
|
|
|
|
int
|
|
__freebsd_getgroupmembership(void *retval, void *mdata, va_list ap)
|
|
{
|
|
const char *uname = va_arg(ap, const char *);
|
|
gid_t group = va_arg(ap, gid_t);
|
|
gid_t *groups = va_arg(ap, gid_t *);
|
|
int maxgrp = va_arg(ap, int);
|
|
int *groupc = va_arg(ap, int *);
|
|
|
|
NSS_STATUS ret;
|
|
long int lcount, lsize;
|
|
int i, errnop;
|
|
gid_t *tmpgroups;
|
|
|
|
/* Can be realloc() inside _nss_winbind_initgroups_dyn() */
|
|
if ((tmpgroups=calloc(maxgrp, sizeof(gid_t))) == NULL) {
|
|
errno = ENOMEM;
|
|
return NS_TRYAGAIN;
|
|
}
|
|
|
|
lcount = 0;
|
|
lsize = maxgrp;
|
|
/* insert primary membership(possibly already there) */
|
|
gr_addgid(group, groups, maxgrp, groupc);
|
|
/* Don't limit number of groups, we want to know total size */
|
|
ret = _nss_winbind_initgroups_dyn(discard_const(uname),
|
|
group,
|
|
&lcount,
|
|
&lsize,
|
|
&tmpgroups,
|
|
0,
|
|
&errnop);
|
|
if (ret == NSS_STATUS_SUCCESS) {
|
|
/* lcount potentially can be bigger than maxgrp, so would groupc */
|
|
for (i = 0; i < lcount; i++)
|
|
gr_addgid(tmpgroups[i], groups, maxgrp, groupc);
|
|
}
|
|
free(tmpgroups);
|
|
/* Let following nsswitch backend(s) add more groups(?) */
|
|
return NSS_STATUS_NOTFOUND;
|
|
}
|
|
|
|
ns_mtab *
|
|
nss_module_register(const char *source, unsigned int *mtabsize,
|
|
nss_module_unregister_fn *unreg)
|
|
{
|
|
*mtabsize = sizeof(methods)/sizeof(methods[0]);
|
|
*unreg = NULL;
|
|
return (methods);
|
|
}
|