2 Unix SMB/CIFS implementation.
6 Copyright (C) Simo Sorce 2006
8 This program is free software; you can redistribute it and/or modify
9 it under the terms of the GNU General Public License as published by
10 the Free Software Foundation; either version 3 of the License, or
11 (at your option) any later version.
13 This program is distributed in the hope that it will be useful,
14 but WITHOUT ANY WARRANTY; without even the implied warranty of
15 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16 GNU General Public License for more details.
18 You should have received a copy of the GNU General Public License
19 along with this program. If not, see <http://www.gnu.org/licenses/>.
24 #include "nsswitch/winbind_client.h"
28 #define DBGC_CLASS DBGC_IDMAP
30 /*****************************
31 Initialise idmap database.
32 *****************************/
34 static NTSTATUS
idmap_nss_int_init(struct idmap_domain
*dom
,
40 /**********************************
41 lookup a set of unix ids.
42 **********************************/
44 static NTSTATUS
idmap_nss_unixids_to_sids(struct idmap_domain
*dom
, struct id_map
**ids
)
49 /* initialize the status to avoid suprise */
50 for (i
= 0; ids
[i
]; i
++) {
51 ids
[i
]->status
= ID_UNKNOWN
;
54 ctx
= talloc_new(dom
);
56 DEBUG(0, ("Out of memory!\n"));
57 return NT_STATUS_NO_MEMORY
;
60 for (i
= 0; ids
[i
]; i
++) {
64 enum lsa_SidType type
;
67 switch (ids
[i
]->xid
.type
) {
69 pw
= getpwuid((uid_t
)ids
[i
]->xid
.id
);
72 ids
[i
]->status
= ID_UNMAPPED
;
78 gr
= getgrgid((gid_t
)ids
[i
]->xid
.id
);
81 ids
[i
]->status
= ID_UNMAPPED
;
87 ids
[i
]->status
= ID_UNKNOWN
;
91 /* by default calls to winbindd are disabled
92 the following call will not recurse so this is safe */
94 /* Lookup name from PDC using lsa_lookup_names() */
95 ret
= winbind_lookup_name(dom
->name
, name
, ids
[i
]->sid
, &type
);
99 /* TODO: how do we know if the name is really not mapped,
100 * or something just failed ? */
101 ids
[i
]->status
= ID_UNMAPPED
;
107 if (ids
[i
]->xid
.type
== ID_TYPE_UID
) {
108 ids
[i
]->status
= ID_MAPPED
;
112 case SID_NAME_DOM_GRP
:
114 case SID_NAME_WKN_GRP
:
115 if (ids
[i
]->xid
.type
== ID_TYPE_GID
) {
116 ids
[i
]->status
= ID_MAPPED
;
121 ids
[i
]->status
= ID_UNKNOWN
;
131 /**********************************
132 lookup a set of sids.
133 **********************************/
135 static NTSTATUS
idmap_nss_sids_to_unixids(struct idmap_domain
*dom
, struct id_map
**ids
)
140 /* initialize the status to avoid suprise */
141 for (i
= 0; ids
[i
]; i
++) {
142 ids
[i
]->status
= ID_UNKNOWN
;
145 ctx
= talloc_new(dom
);
147 DEBUG(0, ("Out of memory!\n"));
148 return NT_STATUS_NO_MEMORY
;
151 for (i
= 0; ids
[i
]; i
++) {
153 enum lsa_SidType type
;
154 const char *dom_name
= NULL
;
155 const char *name
= NULL
;
158 /* by default calls to winbindd are disabled
159 the following call will not recurse so this is safe */
161 ret
= winbind_lookup_sid(ctx
, ids
[i
]->sid
, &dom_name
, &name
, &type
);
165 /* TODO: how do we know if the name is really not mapped,
166 * or something just failed ? */
167 ids
[i
]->status
= ID_UNMAPPED
;
172 case SID_NAME_USER
: {
175 /* this will find also all lower case name and use username level */
177 pw
= Get_Pwnam_alloc(talloc_tos(), name
);
179 ids
[i
]->xid
.id
= pw
->pw_uid
;
180 ids
[i
]->xid
.type
= ID_TYPE_UID
;
181 ids
[i
]->status
= ID_MAPPED
;
187 case SID_NAME_DOM_GRP
:
189 case SID_NAME_WKN_GRP
:
193 ids
[i
]->xid
.id
= gr
->gr_gid
;
194 ids
[i
]->xid
.type
= ID_TYPE_GID
;
195 ids
[i
]->status
= ID_MAPPED
;
200 ids
[i
]->status
= ID_UNKNOWN
;
209 /**********************************
210 Close the idmap tdb instance
211 **********************************/
213 static NTSTATUS
idmap_nss_close(struct idmap_domain
*dom
)
218 static struct idmap_methods nss_methods
= {
220 .init
= idmap_nss_int_init
,
221 .unixids_to_sids
= idmap_nss_unixids_to_sids
,
222 .sids_to_unixids
= idmap_nss_sids_to_unixids
,
223 .close_fn
= idmap_nss_close
226 NTSTATUS
idmap_nss_init(void)
228 return smb_register_idmap(SMB_IDMAP_INTERFACE_VERSION
, "nss", &nss_methods
);