mirror of
https://github.com/samba-team/samba.git
synced 2025-02-01 05:47:28 +03:00
2ef9be9a99
The main change here is to move ldap into the new pluggable passdb subsystem and to take the LDAP location as a 'location' paramter on the 'passdb backend' line in the smb.conf. This is an LDAP URL, parsed by OpenLDAP where supported, and by hand where it isn't. It also adds the ldap user suffix and ldap machine suffix smb.conf options, so that machines added to the LDAP dir don't get mixed in with people. Non-unix account support is also added. This means that machines don't need to be in /etc/passwd or in nss_ldap's scope. This code has stood up well under my production environment, so it relitivly well tested. I'm commiting this now becouse others have shown interest in using it, and there is no point 'hording' the code :-). Andrew Bartlett (This used to be commit cd5234d7dd7309d88944b83d807c1f1c2ca0460a)
384 lines
9.8 KiB
C
384 lines
9.8 KiB
C
/*
|
|
Unix SMB/CIFS implementation.
|
|
Password and authentication handling
|
|
Copyright (C) Andrew Bartlett 2002
|
|
|
|
This program is free software; you can redistribute it and/or modify
|
|
it under the terms of the GNU General Public License as published by
|
|
the Free Software Foundation; either version 2 of the License, or
|
|
(at your option) any later version.
|
|
|
|
This program is distributed in the hope that it will be useful,
|
|
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
GNU General Public License for more details.
|
|
|
|
You should have received a copy of the GNU General Public License
|
|
along with this program; if not, write to the Free Software
|
|
Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
|
|
*/
|
|
|
|
#include "includes.h"
|
|
|
|
/** List of various built-in passdb modules */
|
|
|
|
const struct pdb_init_function_entry builtin_pdb_init_functions[] = {
|
|
{ "smbpasswd", pdb_init_smbpasswd },
|
|
{ "smbpasswd_nua", pdb_init_smbpasswd_nua },
|
|
{ "tdbsam", pdb_init_tdbsam },
|
|
{ "tdbsam_nua", pdb_init_tdbsam_nua },
|
|
{ "ldapsam", pdb_init_ldapsam },
|
|
{ "ldapsam_nua", pdb_init_ldapsam_nua },
|
|
#if 0
|
|
{ "nisplus", pdb_init_nisplus },
|
|
{ "unix", pdb_init_unix },
|
|
#endif
|
|
{ "plugin", pdb_init_plugin },
|
|
{ NULL, NULL}
|
|
};
|
|
|
|
static BOOL context_setsampwent(struct pdb_context *context, BOOL update)
|
|
{
|
|
if ((!context) || (!context->pdb_selected)) {
|
|
DEBUG(0, ("invalid pdb_context specified!\n"));
|
|
return False;
|
|
}
|
|
|
|
return context->pdb_selected->setsampwent(context, update);
|
|
}
|
|
|
|
static void context_endsampwent(struct pdb_context *context)
|
|
{
|
|
if ((!context) || (!context->pdb_selected)) {
|
|
DEBUG(0, ("invalid pdb_context specified!\n"));
|
|
return;
|
|
}
|
|
|
|
context->pdb_selected->endsampwent(context);
|
|
}
|
|
|
|
static BOOL context_getsampwent(struct pdb_context *context, SAM_ACCOUNT *user)
|
|
{
|
|
if ((!context) || (!context->pdb_selected)) {
|
|
DEBUG(0, ("invalid pdb_context specified!\n"));
|
|
return False;
|
|
}
|
|
|
|
return context->pdb_selected->getsampwent(context, user);
|
|
}
|
|
|
|
static BOOL context_getsampwnam(struct pdb_context *context, SAM_ACCOUNT *sam_acct, const char *username)
|
|
{
|
|
if ((!context) || (!context->pdb_selected)) {
|
|
DEBUG(0, ("invalid pdb_context specified!\n"));
|
|
return False;
|
|
}
|
|
|
|
return context->pdb_selected->getsampwnam(context, sam_acct, username);
|
|
}
|
|
|
|
static BOOL context_getsampwrid(struct pdb_context *context, SAM_ACCOUNT *sam_acct, uint32 rid)
|
|
{
|
|
if ((!context) || (!context->pdb_selected)) {
|
|
DEBUG(0, ("invalid pdb_context specified!\n"));
|
|
return False;
|
|
}
|
|
|
|
return context->pdb_selected->getsampwrid(context, sam_acct, rid);
|
|
}
|
|
|
|
static BOOL context_add_sam_account(struct pdb_context *context, SAM_ACCOUNT *sam_acct)
|
|
{
|
|
if ((!context) || (!context->pdb_selected)) {
|
|
DEBUG(0, ("invalid pdb_context specified!\n"));
|
|
return False;
|
|
}
|
|
|
|
/** @todo This is where a 're-read on add' should be done */
|
|
|
|
return context->pdb_selected->add_sam_account(context, sam_acct);
|
|
}
|
|
|
|
static BOOL context_update_sam_account(struct pdb_context *context, SAM_ACCOUNT *sam_acct)
|
|
{
|
|
if ((!context) || (!context->pdb_selected)) {
|
|
DEBUG(0, ("invalid pdb_context specified!\n"));
|
|
return False;
|
|
}
|
|
|
|
/** @todo This is where a 're-read on update' should be done */
|
|
|
|
return context->pdb_selected->update_sam_account(context, sam_acct);
|
|
}
|
|
|
|
static BOOL context_delete_sam_account(struct pdb_context *context, SAM_ACCOUNT *sam_acct)
|
|
{
|
|
if ((!context) || (!context->pdb_selected)) {
|
|
DEBUG(0, ("invalid pdb_context specified!\n"));
|
|
return False;
|
|
}
|
|
|
|
return context->pdb_selected->delete_sam_account(context, sam_acct);
|
|
}
|
|
|
|
static void free_pdb_context(struct pdb_context **context)
|
|
{
|
|
if (((*context)->pdb_selected) && ((*context)->pdb_selected->free_private_data)) {
|
|
(*context)->pdb_selected->free_private_data((*context)->pdb_selected->private_data);
|
|
}
|
|
|
|
talloc_destroy((*context)->mem_ctx);
|
|
*context = NULL;
|
|
}
|
|
|
|
/******************************************************************
|
|
Make a pdb_context from scratch.
|
|
*******************************************************************/
|
|
|
|
static NTSTATUS make_pdb_context(struct pdb_context **context)
|
|
{
|
|
TALLOC_CTX *mem_ctx;
|
|
|
|
mem_ctx = talloc_init_named("pdb_context internal allocation context");
|
|
|
|
if (!mem_ctx) {
|
|
DEBUG(0, ("make_pdb_context: talloc init failed!\n"));
|
|
return NT_STATUS_NO_MEMORY;
|
|
}
|
|
|
|
*context = talloc(mem_ctx, sizeof(**context));
|
|
if (!*context) {
|
|
DEBUG(0, ("make_pdb_context: talloc failed!\n"));
|
|
return NT_STATUS_NO_MEMORY;
|
|
}
|
|
|
|
ZERO_STRUCTP(*context);
|
|
|
|
(*context)->mem_ctx = mem_ctx;
|
|
|
|
(*context)->pdb_setsampwent = context_setsampwent;
|
|
(*context)->pdb_endsampwent = context_endsampwent;
|
|
(*context)->pdb_getsampwent = context_getsampwent;
|
|
(*context)->pdb_getsampwnam = context_getsampwnam;
|
|
(*context)->pdb_getsampwrid = context_getsampwrid;
|
|
(*context)->pdb_add_sam_account = context_add_sam_account;
|
|
(*context)->pdb_update_sam_account = context_update_sam_account;
|
|
(*context)->pdb_delete_sam_account = context_delete_sam_account;
|
|
|
|
(*context)->free_fn = free_pdb_context;
|
|
|
|
return NT_STATUS_OK;
|
|
}
|
|
|
|
|
|
/******************************************************************
|
|
Make a pdb_context, given a text string.
|
|
*******************************************************************/
|
|
|
|
NTSTATUS make_pdb_context_name(struct pdb_context **context, const char *selected)
|
|
{
|
|
/* HINT: Don't store 'selected' becouse its often an lp_ string and will 'go away' */
|
|
NTSTATUS nt_status = NT_STATUS_UNSUCCESSFUL;
|
|
int i;
|
|
char *module_name = smb_xstrdup(selected);
|
|
char *module_location = NULL;
|
|
char *p;
|
|
|
|
p = strchr(module_name, ':');
|
|
|
|
if (p) {
|
|
*p = 0;
|
|
|
|
module_location = p+1;
|
|
|
|
trim_string(module_location, " ", " ");
|
|
}
|
|
|
|
trim_string(module_name, " ", " ");
|
|
|
|
if (!NT_STATUS_IS_OK(nt_status = make_pdb_context(context))) {
|
|
return nt_status;
|
|
}
|
|
|
|
DEBUG(5,("Attempting to find an passdb backend to match %s (%s)\n", selected, module_name));
|
|
for (i = 0; builtin_pdb_init_functions[i].name; i++)
|
|
{
|
|
if (strequal(builtin_pdb_init_functions[i].name, module_name))
|
|
{
|
|
DEBUG(5,("Found pdb backend %s (at pos %d)\n", module_name, i));
|
|
if (NT_STATUS_IS_OK(nt_status
|
|
= builtin_pdb_init_functions[i].init(*context, &(*context)->pdb_selected, module_location))) {
|
|
DEBUG(5,("pdb backend %s has a valid init\n", selected));
|
|
} else {
|
|
DEBUG(0,("pdb backend %s did not correctly init (error was %s)\n", selected, get_nt_error_msg(nt_status)));
|
|
(*context)->pdb_selected = NULL;
|
|
}
|
|
break;
|
|
}
|
|
}
|
|
|
|
if (!(*context)->pdb_selected) {
|
|
DEBUG(0,("failed to select passdb backed!\n"));
|
|
talloc_destroy((*context)->mem_ctx);
|
|
*context = NULL;
|
|
return nt_status;
|
|
}
|
|
|
|
return NT_STATUS_OK;
|
|
}
|
|
|
|
|
|
/******************************************************************
|
|
Return an already initilised pdb_context, to facilitate backward
|
|
compatiablity (see functions below).
|
|
*******************************************************************/
|
|
|
|
static struct pdb_context *pdb_get_static_context(BOOL reload)
|
|
{
|
|
static struct pdb_context *pdb_context = NULL;
|
|
|
|
if ((pdb_context) && (reload)) {
|
|
pdb_context->free_fn(&pdb_context);
|
|
if (!NT_STATUS_IS_OK(make_pdb_context_name(&pdb_context, lp_passdb_backend()))) {
|
|
return NULL;
|
|
}
|
|
}
|
|
|
|
if (!pdb_context) {
|
|
if (!NT_STATUS_IS_OK(make_pdb_context_name(&pdb_context, lp_passdb_backend()))) {
|
|
return NULL;
|
|
}
|
|
}
|
|
|
|
return pdb_context;
|
|
}
|
|
|
|
#if !defined(WITH_NISPLUS_SAM)
|
|
|
|
/******************************************************************
|
|
Backward compatability functions for the original passdb interface
|
|
*******************************************************************/
|
|
|
|
BOOL pdb_setsampwent(BOOL update)
|
|
{
|
|
struct pdb_context *pdb_context = pdb_get_static_context(False);
|
|
|
|
if (!pdb_context) {
|
|
return False;
|
|
}
|
|
|
|
return pdb_context->pdb_setsampwent(pdb_context, update);
|
|
}
|
|
|
|
void pdb_endsampwent(void)
|
|
{
|
|
struct pdb_context *pdb_context = pdb_get_static_context(False);
|
|
|
|
if (!pdb_context) {
|
|
return;
|
|
}
|
|
|
|
pdb_context->pdb_endsampwent(pdb_context);
|
|
}
|
|
|
|
BOOL pdb_getsampwent(SAM_ACCOUNT *user)
|
|
{
|
|
struct pdb_context *pdb_context = pdb_get_static_context(False);
|
|
|
|
if (!pdb_context) {
|
|
return False;
|
|
}
|
|
|
|
return pdb_context->pdb_getsampwent(pdb_context, user);
|
|
}
|
|
|
|
BOOL pdb_getsampwnam(SAM_ACCOUNT *sam_acct, const char *username)
|
|
{
|
|
struct pdb_context *pdb_context = pdb_get_static_context(False);
|
|
|
|
if (!pdb_context) {
|
|
return False;
|
|
}
|
|
|
|
return pdb_context->pdb_getsampwnam(pdb_context, sam_acct, username);
|
|
}
|
|
|
|
BOOL pdb_getsampwrid(SAM_ACCOUNT *sam_acct, uint32 rid)
|
|
{
|
|
struct pdb_context *pdb_context = pdb_get_static_context(False);
|
|
|
|
if (!pdb_context) {
|
|
return False;
|
|
}
|
|
|
|
return pdb_context->pdb_getsampwrid(pdb_context, sam_acct, rid);
|
|
}
|
|
|
|
BOOL pdb_add_sam_account(SAM_ACCOUNT *sam_acct)
|
|
{
|
|
struct pdb_context *pdb_context = pdb_get_static_context(False);
|
|
|
|
if (!pdb_context) {
|
|
return False;
|
|
}
|
|
|
|
return pdb_context->pdb_add_sam_account(pdb_context, sam_acct);
|
|
}
|
|
|
|
BOOL pdb_update_sam_account(SAM_ACCOUNT *sam_acct)
|
|
{
|
|
struct pdb_context *pdb_context = pdb_get_static_context(False);
|
|
|
|
if (!pdb_context) {
|
|
return False;
|
|
}
|
|
|
|
return pdb_context->pdb_update_sam_account(pdb_context, sam_acct);
|
|
}
|
|
|
|
BOOL pdb_delete_sam_account(SAM_ACCOUNT *sam_acct)
|
|
{
|
|
struct pdb_context *pdb_context = pdb_get_static_context(False);
|
|
|
|
if (!pdb_context) {
|
|
return False;
|
|
}
|
|
|
|
return pdb_context->pdb_delete_sam_account(pdb_context, sam_acct);
|
|
}
|
|
|
|
#endif /* !defined(WITH_NISPLUS_SAM) */
|
|
|
|
/***************************************************************
|
|
Initialize the static context (at smbd startup etc).
|
|
|
|
If uninitialised, context will auto-init on first use.
|
|
***************************************************************/
|
|
|
|
BOOL initialize_password_db(BOOL reload)
|
|
{
|
|
return (pdb_get_static_context(reload) != NULL);
|
|
}
|
|
|
|
|
|
NTSTATUS make_pdb_methods(TALLOC_CTX *mem_ctx, PDB_METHODS **methods)
|
|
{
|
|
*methods = talloc(mem_ctx, sizeof(struct pdb_methods));
|
|
|
|
if (!*methods) {
|
|
return NT_STATUS_NO_MEMORY;
|
|
}
|
|
|
|
ZERO_STRUCTP(*methods);
|
|
|
|
return NT_STATUS_OK;
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|