nsswitch/winbind_nss_freebsd.c

   1 /*
   2    Unix SMB/CIFS implementation.
   3
   4    AIX loadable authentication module, providing identification
   5    routines against Samba winbind/Windows NT Domain
   6
   7    Copyright (C) Aaron Collins 2003
   8    Copyright (C) Timur I. Bakeyev 2013
   9
  10    This library is free software; you can redistribute it and/or
  11    modify it under the terms of the GNU Lesser General Public
  12    License as published by the Free Software Foundation; either
  13    version 3 of the License, or (at your option) any later version.
  14
  15    This library is distributed in the hope that it will be useful,
  16    but WITHOUT ANY WARRANTY; without even the implied warranty of
  17    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  18    Library General Public License for more details.
  19
  20    You should have received a copy of the GNU Lesser General Public License
  21    along with this program.  If not, see <http://www.gnu.org/licenses/>.
  22 */
  23
  24 #include "winbind_client.h"
  25
  26 /* Make sure that the module gets registered needed by freebsd 5.1 */
  27 extern enum nss_status _nss_winbind_getgrent_r(struct group *, char *, size_t,
  28     int *);
  29 extern enum nss_status _nss_winbind_getgrnam_r(const char *, struct group *,
  30     char *, size_t, int *);
  31 extern enum nss_status _nss_winbind_getgrgid_r(gid_t gid, struct group *, char *,
  32     size_t, int *);
  33 extern enum nss_status _nss_winbind_setgrent(void);
  34 extern enum nss_status _nss_winbind_endgrent(void);
  35 extern enum nss_status _nss_winbind_initgroups_dyn(char *, gid_t, long int *,
  36     long int *, gid_t **, long int , int *);
  37
  38 extern enum nss_status _nss_winbind_getpwent_r(struct passwd *, char *, size_t,
  39     int *);
  40 extern enum nss_status _nss_winbind_getpwnam_r(const char *, struct passwd *,
  41     char *, size_t, int *);
  42 extern enum nss_status _nss_winbind_getpwuid_r(gid_t gid, struct passwd *, char *,
  43     size_t, int *);
  44 extern enum nss_status _nss_winbind_setpwent(void);
  45 extern enum nss_status _nss_winbind_endpwent(void);
  46 ns_mtab *nss_module_register(const char *, unsigned int *, nss_module_unregister_fn *);
  47
  48 NSS_METHOD_PROTOTYPE(__nss_compat_getgrnam_r);
  49 NSS_METHOD_PROTOTYPE(__nss_compat_getgrgid_r);
  50 NSS_METHOD_PROTOTYPE(__nss_compat_getgrent_r);
  51 NSS_METHOD_PROTOTYPE(__nss_compat_setgrent);
  52 NSS_METHOD_PROTOTYPE(__nss_compat_endgrent);
  53
  54 NSS_METHOD_PROTOTYPE(__nss_compat_getpwnam_r);
  55 NSS_METHOD_PROTOTYPE(__nss_compat_getpwuid_r);
  56 NSS_METHOD_PROTOTYPE(__nss_compat_getpwent_r);
  57 NSS_METHOD_PROTOTYPE(__nss_compat_setpwent);
  58 NSS_METHOD_PROTOTYPE(__nss_compat_endpwent);
  59 NSS_METHOD_PROTOTYPE(__nss_compat_endpwent);
  60
  61 NSS_METHOD_PROTOTYPE(__freebsd_getgroupmembership);
  62
  63 static ns_mtab methods[] = {
  64 { NSDB_GROUP, "getgrnam_r", __nss_compat_getgrnam_r, _nss_winbind_getgrnam_r },
  65 { NSDB_GROUP, "getgrgid_r", __nss_compat_getgrgid_r, _nss_winbind_getgrgid_r },
  66 { NSDB_GROUP, "getgrent_r", __nss_compat_getgrent_r, _nss_winbind_getgrent_r },
  67 { NSDB_GROUP, "setgrent",   __nss_compat_setgrent,   _nss_winbind_setgrent },
  68 { NSDB_GROUP, "endgrent",   __nss_compat_endgrent,   _nss_winbind_endgrent },
  69 { NSDB_GROUP, "getgroupmembership", __freebsd_getgroupmembership, NULL },
  70
  71 { NSDB_PASSWD, "getpwnam_r", __nss_compat_getpwnam_r, _nss_winbind_getpwnam_r },
  72 { NSDB_PASSWD, "getpwuid_r", __nss_compat_getpwuid_r, _nss_winbind_getpwuid_r },
  73 { NSDB_PASSWD, "getpwent_r", __nss_compat_getpwent_r, _nss_winbind_getpwent_r },
  74 { NSDB_PASSWD, "setpwent",   __nss_compat_setpwent,   _nss_winbind_setpwent },
  75 { NSDB_PASSWD, "endpwent",   __nss_compat_endpwent,   _nss_winbind_endpwent },
  76
  77 };
  78
  79 /* Taken from libc */
  80 static int
  81 gr_addgid(gid_t gid, gid_t *groups, int maxgrp, int *grpcnt)
  82 {
  83         int     ret, dupc;
  84
  85         /* skip duplicates */
  86         for (dupc = 0; dupc < MIN(maxgrp, *grpcnt); dupc++) {
  87                 if (groups[dupc] == gid)
  88                         return 1;
  89         }
  90
  91         ret = 1;
  92         if (*grpcnt < maxgrp)                   /* add this gid */
  93                 groups[*grpcnt] = gid;
  94         else
  95                 ret = 0;
  96
  97         (*grpcnt)++;
  98
  99         return ret;
 100 }
 101
 102 /*
 103     rv = _nsdispatch(NULL, dtab, NSDB_GROUP, "getgroupmembership",
 104                     defaultsrc, uname, agroup, groups, maxgrp, grpcnt);
 105 */
 106
 107 int
 108 __freebsd_getgroupmembership(void *retval, void *mdata, va_list ap)
 109 {
 110         const char      *uname  = va_arg(ap, const char *);
 111         gid_t            group  = va_arg(ap, gid_t);
 112         gid_t           *groups = va_arg(ap, gid_t *);
 113         int              maxgrp = va_arg(ap, int);
 114         int             *groupc = va_arg(ap, int *);
 115
 116         NSS_STATUS ret;
 117         long int lcount, lsize;
 118         int i, errnop;
 119         gid_t *tmpgroups;
 120
 121         /* Can be realloc() inside _nss_winbind_initgroups_dyn() */
 122         if ((tmpgroups=calloc(maxgrp, sizeof(gid_t))) == NULL) {
 123                 errno = ENOMEM;
 124                 return NS_TRYAGAIN;
 125         }
 126
 127         lcount = 0;
 128         lsize = maxgrp;
 129         /* insert primary membership(possibly already there) */
 130         gr_addgid(group, groups, maxgrp, groupc);
 131         /* Don't limit number of groups, we want to know total size */
 132         ret = _nss_winbind_initgroups_dyn(uname, group, &lcount, &lsize,
 133                 &tmpgroups, 0, &errnop);
 134         if (ret == NSS_STATUS_SUCCESS) {
 135                 /* lcount potentially can be bigger than maxgrp, so would groupc */
 136                 for (i = 0; i < lcount; i++)
 137                          gr_addgid(tmpgroups[i], groups, maxgrp, groupc);
 138         }
 139         free(tmpgroups);
 140         /* Let following nsswitch backend(s) add more groups(?) */
 141         return NSS_STATUS_NOTFOUND;
 142 }
 143
 144 ns_mtab *
 145 nss_module_register(const char *source, unsigned int *mtabsize,
 146     nss_module_unregister_fn *unreg)
 147 {
 148         *mtabsize = sizeof(methods)/sizeof(methods[0]);
 149         *unreg = NULL;
 150         return (methods);
 151 }