2 Unix SMB/CIFS implementation.
3 system call wrapper interface.
4 Copyright (C) Andrew Tridgell 2002
5 Copyright (C) Andrew Barteltt 2002
7 This program is free software; you can redistribute it and/or modify
8 it under the terms of the GNU General Public License as published by
9 the Free Software Foundation; either version 3 of the License, or
10 (at your option) any later version.
12 This program is distributed in the hope that it will be useful,
13 but WITHOUT ANY WARRANTY; without even the implied warranty of
14 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15 GNU General Public License for more details.
17 You should have received a copy of the GNU General Public License
18 along with this program. If not, see <http://www.gnu.org/licenses/>.
22 This file may assume linkage with smbd - for things like become_root()
28 #ifndef HAVE_GETGROUPLIST
31 static int getgrouplist_getgrset(const char *user
, gid_t gid
, gid_t
*groups
,
41 grplist
= getgrset(user
);
43 DEBUG(10, ("getgrset returned %s\n", grplist
));
45 if (grplist
== NULL
) {
53 while ((grp
= strsep(&grplist
, ",")) != NULL
) {
54 l
= strtol(grp
, NULL
, 10);
56 if (temp_gid
== gid
) {
60 if (num_gids
+ 1 > *grpcnt
) {
64 groups
[num_gids
++] = temp_gid
;
68 if (num_gids
> *grpcnt
) {
73 DEBUG(10, ("Found %d groups for user %s\n", *grpcnt
, user
));
78 #else /* HAVE_GETGRSET */
81 This is a *much* faster way of getting the list of groups for a user
82 without changing the current supplementary group list. The old
83 method used getgrent() which could take 20 minutes on a really big
84 network with hundeds of thousands of groups and users. The new method
85 takes a couple of seconds.
87 NOTE!! this function only works if it is called as root!
90 static int getgrouplist_internals(const char *user
, gid_t gid
, gid_t
*groups
,
94 int ret
, ngrp_saved
, num_gids
;
96 if (non_root_mode()) {
101 /* work out how many groups we need to save */
102 ngrp_saved
= getgroups(0, NULL
);
103 if (ngrp_saved
== -1) {
104 /* this shouldn't happen */
108 gids_saved
= SMB_MALLOC_ARRAY(gid_t
, ngrp_saved
+1);
114 ngrp_saved
= getgroups(ngrp_saved
, gids_saved
);
115 if (ngrp_saved
== -1) {
116 SAFE_FREE(gids_saved
);
121 if (initgroups(user
, gid
) != 0) {
122 DEBUG(0, ("getgrouplist_internals: initgroups() failed!\n"));
123 SAFE_FREE(gids_saved
);
127 /* this must be done to cope with systems that put the current egid in the
128 return from getgroups() */
130 set_effective_gid(gid
);
133 num_gids
= getgroups(0, NULL
);
134 if (num_gids
== -1) {
135 SAFE_FREE(gids_saved
);
140 if (num_gids
+ 1 > *grpcnt
) {
141 *grpcnt
= num_gids
+ 1;
144 ret
= getgroups(*grpcnt
- 1, &groups
[1]);
146 SAFE_FREE(gids_saved
);
156 if (sys_setgroups(gid
, ngrp_saved
, gids_saved
) != 0) {
158 DEBUG(0,("ERROR: getgrouplist: failed to reset group list!\n"));
159 smb_panic("getgrouplist: failed to reset group list!");
165 #endif /* HAVE_GETGRSET */
166 #endif /* HAVE_GETGROUPLIST */
168 static int sys_getgrouplist(const char *user
, gid_t gid
, gid_t
*groups
, int *grpcnt
)
173 DEBUG(10,("sys_getgrouplist: user [%s]\n", user
));
175 /* This is only ever called for Unix users, remote memberships are
176 * always determined by the info3 coming back from auth3 or the
178 winbind_env
= winbind_env_set();
181 #ifdef HAVE_GETGROUPLIST
182 retval
= getgrouplist(user
, gid
, groups
, grpcnt
);
185 retval
= getgrouplist_getgrset(user
, gid
, groups
, grpcnt
);
188 retval
= getgrouplist_internals(user
, gid
, groups
, grpcnt
);
190 #endif /* HAVE_GETGRSET */
191 #endif /* HAVE_GETGROUPLIST */
193 /* allow winbindd lookups, but only if they were not already disabled */
201 bool getgroups_unix_user(TALLOC_CTX
*mem_ctx
, const char *user
,
203 gid_t
**ret_groups
, size_t *p_ngroups
)
211 max_grp
= MIN(128, groups_max());
212 temp_groups
= SMB_MALLOC_ARRAY(gid_t
, max_grp
);
217 if (sys_getgrouplist(user
, primary_gid
, temp_groups
, &max_grp
) == -1) {
218 temp_groups
= SMB_REALLOC_ARRAY(temp_groups
, gid_t
, max_grp
);
223 if (sys_getgrouplist(user
, primary_gid
,
224 temp_groups
, &max_grp
) == -1) {
225 DEBUG(0, ("get_user_groups: failed to get the unix "
227 SAFE_FREE(temp_groups
);
235 /* Add in primary group first */
236 if (!add_gid_to_array_unique(mem_ctx
, primary_gid
, &groups
, &ngrp
)) {
237 SAFE_FREE(temp_groups
);
241 for (i
=0; i
<max_grp
; i
++) {
242 if (!add_gid_to_array_unique(mem_ctx
, temp_groups
[i
],
244 SAFE_FREE(temp_groups
);
250 *ret_groups
= groups
;
251 SAFE_FREE(temp_groups
);