1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-28 17:47:29 +03:00
samba-mirror/source3/sam/idmap_winbind.c
Gerald Carter 711f8d0a13 * break out more common code used between pdb_ldap and idmap_ldap
* remove 'winbind uid' and 'winbind gid' parameters (replaced
  by current idmap parameter)
* create the sambaUnixIdPool entries automatically in the 'ldap
  idmap suffix'
* add new 'ldap idmap suffix' and 'ldap group suffix' parametrer
* "idmap backend = ldap" now accepts 'ldap:ldap://server/' format
  (parameters are passed to idmap init() function
(This used to be commit 1665926281ed2be3c5affca551c9d458d013fc7f)
2003-06-06 13:48:39 +00:00

153 lines
3.6 KiB
C

/*
Unix SMB/CIFS implementation.
idmap Winbind backend
Copyright (C) Simo Sorce 2003
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation; either version 2 of the License, or
(at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program; if not, write to the Free Software
Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
*/
#include "includes.h"
#include "nsswitch/winbind_nss.h"
#undef DBGC_CLASS
#define DBGC_CLASS DBGC_IDMAP
extern DOM_SID global_sid_NULL; /* NULL sid */
NSS_STATUS winbindd_request(int req_type,
struct winbindd_request *request,
struct winbindd_response *response);
/* Get a sid from an id */
static NTSTATUS db_get_sid_from_id(DOM_SID *sid, unid_t id, int id_type)
{
struct winbindd_request request;
struct winbindd_response response;
int result, operation;
ZERO_STRUCT(request);
ZERO_STRUCT(response);
switch (id_type & ID_TYPEMASK) {
case ID_USERID:
request.data.uid = id.uid;
operation = WINBINDD_UID_TO_SID;
break;
case ID_GROUPID:
request.data.gid = id.gid;
operation = WINBINDD_GID_TO_SID;
break;
default:
return NT_STATUS_INVALID_PARAMETER;
}
/* Make The Request */
result = winbindd_request(operation, &request, &response);
if (result == NSS_STATUS_SUCCESS) {
if (!string_to_sid(sid, response.data.sid.sid)) {
return NT_STATUS_INVALID_SID;
}
return NT_STATUS_OK;
} else {
sid_copy(sid, &global_sid_NULL);
}
return NT_STATUS_UNSUCCESSFUL;
}
/* Get an id from a sid */
static NTSTATUS db_get_id_from_sid(unid_t *id, int *id_type, const DOM_SID *sid)
{
struct winbindd_request request;
struct winbindd_response response;
int result, operation;
fstring sid_str;
if (!id || !id_type) {
return NT_STATUS_INVALID_PARAMETER;
}
/* setup request */
ZERO_STRUCT(request);
ZERO_STRUCT(response);
switch (*id_type & ID_TYPEMASK) {
case ID_USERID:
operation = WINBINDD_SID_TO_UID;
break;
case ID_GROUPID:
operation = WINBINDD_SID_TO_GID;
break;
default:
return NT_STATUS_INVALID_PARAMETER;
}
sid_to_string(sid_str, sid);
fstrcpy(request.data.sid, sid_str);
/* Make The Request */
result = winbindd_request(operation, &request, &response);
if (result == NSS_STATUS_SUCCESS) {
if (operation == WINBINDD_SID_TO_UID) {
(*id).uid = response.data.uid;
} else {
(*id).gid = response.data.gid;
}
return NT_STATUS_OK;
}
return NT_STATUS_UNSUCCESSFUL;
}
static NTSTATUS db_set_mapping(const DOM_SID *sid, unid_t id, int id_type) {
return NT_STATUS_UNSUCCESSFUL;
}
/*****************************************************************************
Initialise idmap database.
*****************************************************************************/
static NTSTATUS db_init( char *params ) {
return NT_STATUS_OK;
}
/* Close the tdb */
static NTSTATUS db_close(void) {
return NT_STATUS_OK;
}
static void db_status(void) {
return;
}
static struct idmap_methods winbind_methods = {
db_init,
db_get_sid_from_id,
db_get_id_from_sid,
db_set_mapping,
db_close,
db_status
};
NTSTATUS idmap_winbind_init(void)
{
return smb_register_idmap(SMB_IDMAP_INTERFACE_VERSION, "winbind", &winbind_methods);
}