2 * Samba Unix/Linux SMB client library
4 * Copyright (C) Gregor Beck 2011
6 * This program is free software; you can redistribute it and/or modify
7 * it under the terms of the GNU General Public License as published by
8 * the Free Software Foundation; either version 3 of the License, or
9 * (at your option) any later version.
11 * This program is distributed in the hope that it will be useful,
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 * GNU General Public License for more details.
16 * You should have received a copy of the GNU General Public License
17 * along with this program. If not, see <http://www.gnu.org/licenses/>.
21 #include "smbd/globals.h"
22 #include "smbd/smbd.h"
23 #include "../libcli/security/dom_sid.h"
24 #include "idmap_cache.h"
25 #include "passdb/lookup_sid.h"
28 #include "lib/id_cache.h"
30 static bool uid_in_use(const struct user_struct
* user
, uid_t uid
)
33 if (user
->session_info
&& (user
->session_info
->unix_token
->uid
== uid
)) {
41 static bool gid_in_use(const struct user_struct
* user
, gid_t gid
)
44 if (user
->session_info
!= NULL
) {
46 struct security_unix_token
*utok
= user
->session_info
->unix_token
;
47 if (utok
->gid
== gid
) {
50 for(i
=0; i
<utok
->ngroups
; i
++) {
51 if (utok
->groups
[i
] == gid
) {
61 static bool sid_in_use(const struct user_struct
* user
, const struct dom_sid
* psid
)
65 if (sid_to_gid(psid
, &gid
)) {
66 return gid_in_use(user
, gid
);
67 } else if (sid_to_uid(psid
, &uid
)) {
68 return uid_in_use(user
, uid
);
73 static bool id_in_use(const struct user_struct
* user
,
74 const struct id_cache_ref
* id
)
78 return uid_in_use(user
, id
->id
.uid
);
80 return gid_in_use(user
, id
->id
.gid
);
82 return sid_in_use(user
, &id
->id
.sid
);
89 static void message_idmap_kill(struct messaging_context
*msg_ctx
,
92 struct server_id server_id
,
95 const char *msg
= (data
&& data
->data
) ? (const char *)data
->data
: "<NULL>";
96 struct user_struct
*validated_users
= smbd_server_conn
->smb1
.sessions
.validated_users
;
97 struct id_cache_ref id
;
99 if (!id_cache_ref_parse(msg
, &id
)) {
100 DEBUG(0, ("Invalid ?ID: %s\n", msg
));
104 if (id_in_use(validated_users
, &id
)) {
105 exit_server_cleanly(msg
);
109 void msg_idmap_register_kill_msg(struct messaging_context
*ctx
)
111 messaging_register(ctx
, NULL
, MSG_IDMAP_KILL
, message_idmap_kill
);