2 Unix SMB/CIFS implementation.
3 system call wrapper interface.
4 Copyright (C) Andrew Tridgell 2002
5 Copyright (C) Andrew Barteltt 2002
7 This program is free software; you can redistribute it and/or modify
8 it under the terms of the GNU General Public License as published by
9 the Free Software Foundation; either version 3 of the License, or
10 (at your option) any later version.
12 This program is distributed in the hope that it will be useful,
13 but WITHOUT ANY WARRANTY; without even the implied warranty of
14 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15 GNU General Public License for more details.
17 You should have received a copy of the GNU General Public License
18 along with this program. If not, see <http://www.gnu.org/licenses/>.
22 This file may assume linkage with smbd - for things like become_root()
27 #include "system/passwd.h"
28 #include "nsswitch/winbind_client.h"
30 #ifndef HAVE_GETGROUPLIST
33 static int getgrouplist_getgrset(const char *user
, gid_t gid
, gid_t
*groups
,
43 grplist
= getgrset(user
);
45 DEBUG(10, ("getgrset returned %s\n", grplist
));
47 if (grplist
== NULL
) {
55 while ((grp
= strsep(&grplist
, ",")) != NULL
) {
56 l
= strtol(grp
, NULL
, 10);
58 if (temp_gid
== gid
) {
62 if (num_gids
+ 1 > *grpcnt
) {
66 groups
[num_gids
++] = temp_gid
;
70 if (num_gids
> *grpcnt
) {
75 DEBUG(10, ("Found %d groups for user %s\n", *grpcnt
, user
));
80 #else /* HAVE_GETGRSET */
83 This is a *much* faster way of getting the list of groups for a user
84 without changing the current supplementary group list. The old
85 method used getgrent() which could take 20 minutes on a really big
86 network with hundeds of thousands of groups and users. The new method
87 takes a couple of seconds.
89 NOTE!! this function only works if it is called as root!
92 static int getgrouplist_internals(const char *user
, gid_t gid
, gid_t
*groups
,
96 int ret
, ngrp_saved
, num_gids
;
98 if (non_root_mode()) {
103 /* work out how many groups we need to save */
104 ngrp_saved
= getgroups(0, NULL
);
105 if (ngrp_saved
== -1) {
106 /* this shouldn't happen */
110 gids_saved
= SMB_MALLOC_ARRAY(gid_t
, ngrp_saved
+1);
116 ngrp_saved
= getgroups(ngrp_saved
, gids_saved
);
117 if (ngrp_saved
== -1) {
118 SAFE_FREE(gids_saved
);
123 if (initgroups(user
, gid
) == -1) {
124 DEBUG(0, ("getgrouplist_internals: initgroups() failed!\n"));
125 SAFE_FREE(gids_saved
);
129 /* this must be done to cope with systems that put the current egid in the
130 return from getgroups() */
132 set_effective_gid(gid
);
135 num_gids
= getgroups(0, NULL
);
136 if (num_gids
== -1) {
137 SAFE_FREE(gids_saved
);
142 if (num_gids
+ 1 > *grpcnt
) {
143 *grpcnt
= num_gids
+ 1;
146 ret
= getgroups(*grpcnt
- 1, &groups
[1]);
148 SAFE_FREE(gids_saved
);
158 if (sys_setgroups(gid
, ngrp_saved
, gids_saved
) != 0) {
160 DEBUG(0,("ERROR: getgrouplist: failed to reset group list!\n"));
161 smb_panic("getgrouplist: failed to reset group list!");
167 #endif /* HAVE_GETGRSET */
168 #endif /* HAVE_GETGROUPLIST */
170 static int sys_getgrouplist(const char *user
, gid_t gid
, gid_t
*groups
, int *grpcnt
)
175 DEBUG(10,("sys_getgrouplist: user [%s]\n", user
));
177 /* This is only ever called for Unix users, remote memberships are
178 * always determined by the info3 coming back from auth3 or the
180 winbind_env
= winbind_env_set();
183 #ifdef HAVE_GETGROUPLIST
184 retval
= getgrouplist(user
, gid
, groups
, grpcnt
);
187 retval
= getgrouplist_getgrset(user
, gid
, groups
, grpcnt
);
190 retval
= getgrouplist_internals(user
, gid
, groups
, grpcnt
);
192 #endif /* HAVE_GETGRSET */
193 #endif /* HAVE_GETGROUPLIST */
195 /* allow winbindd lookups, but only if they were not already disabled */
203 bool getgroups_unix_user(TALLOC_CTX
*mem_ctx
, const char *user
,
205 gid_t
**ret_groups
, uint32_t *p_ngroups
)
213 max_grp
= MIN(128, groups_max());
214 temp_groups
= SMB_MALLOC_ARRAY(gid_t
, max_grp
);
219 if (sys_getgrouplist(user
, primary_gid
, temp_groups
, &max_grp
) == -1) {
220 temp_groups
= SMB_REALLOC_ARRAY(temp_groups
, gid_t
, max_grp
);
225 if (sys_getgrouplist(user
, primary_gid
,
226 temp_groups
, &max_grp
) == -1) {
227 DEBUG(0, ("get_user_groups: failed to get the unix "
229 SAFE_FREE(temp_groups
);
237 /* Add in primary group first */
238 if (!add_gid_to_array_unique(mem_ctx
, primary_gid
, &groups
, &ngrp
)) {
239 SAFE_FREE(temp_groups
);
243 for (i
=0; i
<max_grp
; i
++) {
244 if (!add_gid_to_array_unique(mem_ctx
, temp_groups
[i
],
246 SAFE_FREE(temp_groups
);
252 *ret_groups
= groups
;
253 SAFE_FREE(temp_groups
);