1
0
mirror of https://github.com/samba-team/samba.git synced 2025-02-01 05:47:28 +03:00
samba-mirror/source3/passdb/pdb_interface.c
Andrew Bartlett 2ef9be9a99 This patch merges my private LDAP tree into HEAD.
The main change here is to move ldap into the new pluggable passdb subsystem
and to take the LDAP location as a 'location' paramter on the 'passdb backend'
line in the smb.conf.  This is an LDAP URL, parsed by OpenLDAP where supported,
and by hand where it isn't.

It also adds the ldap user suffix and ldap machine suffix smb.conf options,
so that machines added to the LDAP dir don't get mixed in with people.

Non-unix account support is also added.  This means that machines don't need to
be in /etc/passwd or in nss_ldap's scope.

This code has stood up well under my production environment, so it relitivly
well tested.

I'm commiting this now becouse others have shown interest in using it, and
there is no point 'hording' the code :-).

Andrew Bartlett
(This used to be commit cd5234d7dd7309d88944b83d807c1f1c2ca0460a)
2002-03-02 10:16:28 +00:00

384 lines
9.8 KiB
C

/*
Unix SMB/CIFS implementation.
Password and authentication handling
Copyright (C) Andrew Bartlett 2002
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation; either version 2 of the License, or
(at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program; if not, write to the Free Software
Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
*/
#include "includes.h"
/** List of various built-in passdb modules */
const struct pdb_init_function_entry builtin_pdb_init_functions[] = {
{ "smbpasswd", pdb_init_smbpasswd },
{ "smbpasswd_nua", pdb_init_smbpasswd_nua },
{ "tdbsam", pdb_init_tdbsam },
{ "tdbsam_nua", pdb_init_tdbsam_nua },
{ "ldapsam", pdb_init_ldapsam },
{ "ldapsam_nua", pdb_init_ldapsam_nua },
#if 0
{ "nisplus", pdb_init_nisplus },
{ "unix", pdb_init_unix },
#endif
{ "plugin", pdb_init_plugin },
{ NULL, NULL}
};
static BOOL context_setsampwent(struct pdb_context *context, BOOL update)
{
if ((!context) || (!context->pdb_selected)) {
DEBUG(0, ("invalid pdb_context specified!\n"));
return False;
}
return context->pdb_selected->setsampwent(context, update);
}
static void context_endsampwent(struct pdb_context *context)
{
if ((!context) || (!context->pdb_selected)) {
DEBUG(0, ("invalid pdb_context specified!\n"));
return;
}
context->pdb_selected->endsampwent(context);
}
static BOOL context_getsampwent(struct pdb_context *context, SAM_ACCOUNT *user)
{
if ((!context) || (!context->pdb_selected)) {
DEBUG(0, ("invalid pdb_context specified!\n"));
return False;
}
return context->pdb_selected->getsampwent(context, user);
}
static BOOL context_getsampwnam(struct pdb_context *context, SAM_ACCOUNT *sam_acct, const char *username)
{
if ((!context) || (!context->pdb_selected)) {
DEBUG(0, ("invalid pdb_context specified!\n"));
return False;
}
return context->pdb_selected->getsampwnam(context, sam_acct, username);
}
static BOOL context_getsampwrid(struct pdb_context *context, SAM_ACCOUNT *sam_acct, uint32 rid)
{
if ((!context) || (!context->pdb_selected)) {
DEBUG(0, ("invalid pdb_context specified!\n"));
return False;
}
return context->pdb_selected->getsampwrid(context, sam_acct, rid);
}
static BOOL context_add_sam_account(struct pdb_context *context, SAM_ACCOUNT *sam_acct)
{
if ((!context) || (!context->pdb_selected)) {
DEBUG(0, ("invalid pdb_context specified!\n"));
return False;
}
/** @todo This is where a 're-read on add' should be done */
return context->pdb_selected->add_sam_account(context, sam_acct);
}
static BOOL context_update_sam_account(struct pdb_context *context, SAM_ACCOUNT *sam_acct)
{
if ((!context) || (!context->pdb_selected)) {
DEBUG(0, ("invalid pdb_context specified!\n"));
return False;
}
/** @todo This is where a 're-read on update' should be done */
return context->pdb_selected->update_sam_account(context, sam_acct);
}
static BOOL context_delete_sam_account(struct pdb_context *context, SAM_ACCOUNT *sam_acct)
{
if ((!context) || (!context->pdb_selected)) {
DEBUG(0, ("invalid pdb_context specified!\n"));
return False;
}
return context->pdb_selected->delete_sam_account(context, sam_acct);
}
static void free_pdb_context(struct pdb_context **context)
{
if (((*context)->pdb_selected) && ((*context)->pdb_selected->free_private_data)) {
(*context)->pdb_selected->free_private_data((*context)->pdb_selected->private_data);
}
talloc_destroy((*context)->mem_ctx);
*context = NULL;
}
/******************************************************************
Make a pdb_context from scratch.
*******************************************************************/
static NTSTATUS make_pdb_context(struct pdb_context **context)
{
TALLOC_CTX *mem_ctx;
mem_ctx = talloc_init_named("pdb_context internal allocation context");
if (!mem_ctx) {
DEBUG(0, ("make_pdb_context: talloc init failed!\n"));
return NT_STATUS_NO_MEMORY;
}
*context = talloc(mem_ctx, sizeof(**context));
if (!*context) {
DEBUG(0, ("make_pdb_context: talloc failed!\n"));
return NT_STATUS_NO_MEMORY;
}
ZERO_STRUCTP(*context);
(*context)->mem_ctx = mem_ctx;
(*context)->pdb_setsampwent = context_setsampwent;
(*context)->pdb_endsampwent = context_endsampwent;
(*context)->pdb_getsampwent = context_getsampwent;
(*context)->pdb_getsampwnam = context_getsampwnam;
(*context)->pdb_getsampwrid = context_getsampwrid;
(*context)->pdb_add_sam_account = context_add_sam_account;
(*context)->pdb_update_sam_account = context_update_sam_account;
(*context)->pdb_delete_sam_account = context_delete_sam_account;
(*context)->free_fn = free_pdb_context;
return NT_STATUS_OK;
}
/******************************************************************
Make a pdb_context, given a text string.
*******************************************************************/
NTSTATUS make_pdb_context_name(struct pdb_context **context, const char *selected)
{
/* HINT: Don't store 'selected' becouse its often an lp_ string and will 'go away' */
NTSTATUS nt_status = NT_STATUS_UNSUCCESSFUL;
int i;
char *module_name = smb_xstrdup(selected);
char *module_location = NULL;
char *p;
p = strchr(module_name, ':');
if (p) {
*p = 0;
module_location = p+1;
trim_string(module_location, " ", " ");
}
trim_string(module_name, " ", " ");
if (!NT_STATUS_IS_OK(nt_status = make_pdb_context(context))) {
return nt_status;
}
DEBUG(5,("Attempting to find an passdb backend to match %s (%s)\n", selected, module_name));
for (i = 0; builtin_pdb_init_functions[i].name; i++)
{
if (strequal(builtin_pdb_init_functions[i].name, module_name))
{
DEBUG(5,("Found pdb backend %s (at pos %d)\n", module_name, i));
if (NT_STATUS_IS_OK(nt_status
= builtin_pdb_init_functions[i].init(*context, &(*context)->pdb_selected, module_location))) {
DEBUG(5,("pdb backend %s has a valid init\n", selected));
} else {
DEBUG(0,("pdb backend %s did not correctly init (error was %s)\n", selected, get_nt_error_msg(nt_status)));
(*context)->pdb_selected = NULL;
}
break;
}
}
if (!(*context)->pdb_selected) {
DEBUG(0,("failed to select passdb backed!\n"));
talloc_destroy((*context)->mem_ctx);
*context = NULL;
return nt_status;
}
return NT_STATUS_OK;
}
/******************************************************************
Return an already initilised pdb_context, to facilitate backward
compatiablity (see functions below).
*******************************************************************/
static struct pdb_context *pdb_get_static_context(BOOL reload)
{
static struct pdb_context *pdb_context = NULL;
if ((pdb_context) && (reload)) {
pdb_context->free_fn(&pdb_context);
if (!NT_STATUS_IS_OK(make_pdb_context_name(&pdb_context, lp_passdb_backend()))) {
return NULL;
}
}
if (!pdb_context) {
if (!NT_STATUS_IS_OK(make_pdb_context_name(&pdb_context, lp_passdb_backend()))) {
return NULL;
}
}
return pdb_context;
}
#if !defined(WITH_NISPLUS_SAM)
/******************************************************************
Backward compatability functions for the original passdb interface
*******************************************************************/
BOOL pdb_setsampwent(BOOL update)
{
struct pdb_context *pdb_context = pdb_get_static_context(False);
if (!pdb_context) {
return False;
}
return pdb_context->pdb_setsampwent(pdb_context, update);
}
void pdb_endsampwent(void)
{
struct pdb_context *pdb_context = pdb_get_static_context(False);
if (!pdb_context) {
return;
}
pdb_context->pdb_endsampwent(pdb_context);
}
BOOL pdb_getsampwent(SAM_ACCOUNT *user)
{
struct pdb_context *pdb_context = pdb_get_static_context(False);
if (!pdb_context) {
return False;
}
return pdb_context->pdb_getsampwent(pdb_context, user);
}
BOOL pdb_getsampwnam(SAM_ACCOUNT *sam_acct, const char *username)
{
struct pdb_context *pdb_context = pdb_get_static_context(False);
if (!pdb_context) {
return False;
}
return pdb_context->pdb_getsampwnam(pdb_context, sam_acct, username);
}
BOOL pdb_getsampwrid(SAM_ACCOUNT *sam_acct, uint32 rid)
{
struct pdb_context *pdb_context = pdb_get_static_context(False);
if (!pdb_context) {
return False;
}
return pdb_context->pdb_getsampwrid(pdb_context, sam_acct, rid);
}
BOOL pdb_add_sam_account(SAM_ACCOUNT *sam_acct)
{
struct pdb_context *pdb_context = pdb_get_static_context(False);
if (!pdb_context) {
return False;
}
return pdb_context->pdb_add_sam_account(pdb_context, sam_acct);
}
BOOL pdb_update_sam_account(SAM_ACCOUNT *sam_acct)
{
struct pdb_context *pdb_context = pdb_get_static_context(False);
if (!pdb_context) {
return False;
}
return pdb_context->pdb_update_sam_account(pdb_context, sam_acct);
}
BOOL pdb_delete_sam_account(SAM_ACCOUNT *sam_acct)
{
struct pdb_context *pdb_context = pdb_get_static_context(False);
if (!pdb_context) {
return False;
}
return pdb_context->pdb_delete_sam_account(pdb_context, sam_acct);
}
#endif /* !defined(WITH_NISPLUS_SAM) */
/***************************************************************
Initialize the static context (at smbd startup etc).
If uninitialised, context will auto-init on first use.
***************************************************************/
BOOL initialize_password_db(BOOL reload)
{
return (pdb_get_static_context(reload) != NULL);
}
NTSTATUS make_pdb_methods(TALLOC_CTX *mem_ctx, PDB_METHODS **methods)
{
*methods = talloc(mem_ctx, sizeof(struct pdb_methods));
if (!*methods) {
return NT_STATUS_NO_MEMORY;
}
ZERO_STRUCTP(*methods);
return NT_STATUS_OK;
}