?  search:
summary | log | graphiclog1 | graphiclog2 | commit | commitdiff | tree | refs | edit | fork
blame | history | raw | HEAD
Make it possible to change machine account sids
[Samba.git] / source3 / winbindd / winbindd_async.c
blob3905b13073f3804f1901d76134eb64fd31baed60
1 /*
2 Unix SMB/CIFS implementation.
3
4 Async helpers for blocking functions
5
6 Copyright (C) Volker Lendecke 2005
7 Copyright (C) Gerald Carter 2006
8
9 The helpers always consist of three functions:
10
11 * A request setup function that takes the necessary parameters together
12 with a continuation function that is to be called upon completion
13
14 * A private continuation function that is internal only. This is to be
15 called by the lower-level functions in do_async(). Its only task is to
16 properly call the continuation function named above.
17
18 * A worker function that is called inside the appropriate child process.
19
20 This program is free software; you can redistribute it and/or modify
21 it under the terms of the GNU General Public License as published by
22 the Free Software Foundation; either version 3 of the License, or
23 (at your option) any later version.
24
25 This program is distributed in the hope that it will be useful,
26 but WITHOUT ANY WARRANTY; without even the implied warranty of
27 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
28 GNU General Public License for more details.
29
30 You should have received a copy of the GNU General Public License
31 along with this program. If not, see <http://www.gnu.org/licenses/>.
32 */
33
34 #include "includes.h"
35 #include "winbindd.h"
36
37 #undef DBGC_CLASS
38 #define DBGC_CLASS DBGC_WINBIND
39
40 struct do_async_state {
41 TALLOC_CTX *mem_ctx;
42 struct winbindd_request request;
43 struct winbindd_response response;
44 void (*cont)(TALLOC_CTX *mem_ctx,
45 bool success,
46 struct winbindd_response *response,
47 void *c, void *private_data);
48 void *c, *private_data;
49 };
50
51 static void do_async_recv(void *private_data, bool success)
52 {
53 struct do_async_state *state =
54 talloc_get_type_abort(private_data, struct do_async_state);
55
56 state->cont(state->mem_ctx, success, &state->response,
57 state->c, state->private_data);
58 }
59
60 void do_async(TALLOC_CTX *mem_ctx, struct winbindd_child *child,
61 const struct winbindd_request *request,
62 void (*cont)(TALLOC_CTX *mem_ctx, bool success,
63 struct winbindd_response *response,
64 void *c, void *private_data),
65 void *c, void *private_data)
66 {
67 struct do_async_state *state;
68
69 state = TALLOC_ZERO_P(mem_ctx, struct do_async_state);
70 if (state == NULL) {
71 DEBUG(0, ("talloc failed\n"));
72 cont(mem_ctx, False, NULL, c, private_data);
73 return;
74 }
75
76 state->mem_ctx = mem_ctx;
77 state->request = *request;
78 state->request.length = sizeof(state->request);
79 state->cont = cont;
80 state->c = c;
81 state->private_data = private_data;
82
83 async_request(mem_ctx, child, &state->request,
84 &state->response, do_async_recv, state);
85 }
86
87 static void do_async_domain(TALLOC_CTX *mem_ctx, struct winbindd_domain *domain,
88 const struct winbindd_request *request,
89 void (*cont)(TALLOC_CTX *mem_ctx, bool success,
90 struct winbindd_response *response,
91 void *c, void *private_data),
92 void *c, void *private_data)
93 {
94 struct do_async_state *state;
95
96 state = TALLOC_ZERO_P(mem_ctx, struct do_async_state);
97 if (state == NULL) {
98 DEBUG(0, ("talloc failed\n"));
99 cont(mem_ctx, False, NULL, c, private_data);
100 return;
101 }
102
103 state->mem_ctx = mem_ctx;
104 state->request = *request;
105 state->request.length = sizeof(state->request);
106 state->cont = cont;
107 state->c = c;
108 state->private_data = private_data;
109
110 async_domain_request(mem_ctx, domain, &state->request,
111 &state->response, do_async_recv, state);
112 }
113
114 struct lookupsid_state {
115 DOM_SID sid;
116 void *caller_private_data;
117 };
118
119
120 static void lookupsid_recv2(TALLOC_CTX *mem_ctx, bool success,
121 struct winbindd_response *response,
122 void *c, void *private_data)
123 {
124 void (*cont)(void *priv, bool succ, const char *dom_name,
125 const char *name, enum lsa_SidType type) =
126 (void (*)(void *, bool, const char *, const char *,
127 enum lsa_SidType))c;
128 struct lookupsid_state *s = talloc_get_type_abort(private_data,
129 struct lookupsid_state);
130
131 if (!success) {
132 DEBUG(5, ("Could not trigger lookupsid\n"));
133 cont(s->caller_private_data, False, NULL, NULL, SID_NAME_UNKNOWN);
134 return;
135 }
136
137 if (response->result != WINBINDD_OK) {
138 DEBUG(5, ("lookupsid (forest root) returned an error\n"));
139 cont(s->caller_private_data, False, NULL, NULL, SID_NAME_UNKNOWN);
140 return;
141 }
142
143 cont(s->caller_private_data, True, response->data.name.dom_name,
144 response->data.name.name,
145 (enum lsa_SidType)response->data.name.type);
146 }
147
148 static void lookupsid_recv(TALLOC_CTX *mem_ctx, bool success,
149 struct winbindd_response *response,
150 void *c, void *private_data)
151 {
152 void (*cont)(void *priv, bool succ, const char *dom_name,
153 const char *name, enum lsa_SidType type) =
154 (void (*)(void *, bool, const char *, const char *,
155 enum lsa_SidType))c;
156 struct lookupsid_state *s = talloc_get_type_abort(private_data,
157 struct lookupsid_state);
158
159 if (!success) {
160 DEBUG(5, ("Could not trigger lookupsid\n"));
161 cont(s->caller_private_data, False, NULL, NULL, SID_NAME_UNKNOWN);
162 return;
163 }
164
165 if (response->result != WINBINDD_OK) {
166 /* Try again using the forest root */
167 struct winbindd_domain *root_domain = find_root_domain();
168 struct winbindd_request request;
169
170 if ( !root_domain ) {
171 DEBUG(5,("lookupsid_recv: unable to determine forest root\n"));
172 cont(s->caller_private_data, False, NULL, NULL, SID_NAME_UNKNOWN);
173 return;
174 }
175
176 ZERO_STRUCT(request);
177 request.cmd = WINBINDD_LOOKUPSID;
178 sid_to_fstring(request.data.sid, &s->sid);
179
180 do_async_domain(mem_ctx, root_domain, &request, lookupsid_recv2,
181 (void *)cont, s);
182
183 return;
184 }
185
186 cont(s->caller_private_data, True, response->data.name.dom_name,
187 response->data.name.name,
188 (enum lsa_SidType)response->data.name.type);
189 }
190
191 void winbindd_lookupsid_async(TALLOC_CTX *mem_ctx, const DOM_SID *sid,
192 void (*cont)(void *private_data, bool success,
193 const char *dom_name,
194 const char *name,
195 enum lsa_SidType type),
196 void *private_data)
197 {
198 struct winbindd_domain *domain;
199 struct winbindd_request request;
200 struct lookupsid_state *s;
201
202 domain = find_lookup_domain_from_sid(sid);
203 if (domain == NULL) {
204 DEBUG(5, ("Could not find domain for sid %s\n",
205 sid_string_dbg(sid)));
206 cont(private_data, False, NULL, NULL, SID_NAME_UNKNOWN);
207 return;
208 }
209
210 ZERO_STRUCT(request);
211 request.cmd = WINBINDD_LOOKUPSID;
212 sid_to_fstring(request.data.sid, sid);
213
214 if ( (s = TALLOC_ZERO_P(mem_ctx, struct lookupsid_state)) == NULL ) {
215 DEBUG(0, ("winbindd_lookupsid_async: talloc failed\n"));
216 cont(private_data, False, NULL, NULL, SID_NAME_UNKNOWN);
217 return;
218 }
219
220 sid_copy( &s->sid, sid );
221 s->caller_private_data = private_data;
222
223 do_async_domain(mem_ctx, domain, &request, lookupsid_recv,
224 (void *)cont, s);
225 }
226
227 enum winbindd_result winbindd_dual_lookupsid(struct winbindd_domain *domain,
228 struct winbindd_cli_state *state)
229 {
230 enum lsa_SidType type;
231 DOM_SID sid;
232 char *name;
233 char *dom_name;
234
235 /* Ensure null termination */
236 state->request.data.sid[sizeof(state->request.data.sid)-1]='\0';
237
238 DEBUG(3, ("[%5lu]: lookupsid %s\n", (unsigned long)state->pid,
239 state->request.data.sid));
240
241 /* Lookup sid from PDC using lsa_lookup_sids() */
242
243 if (!string_to_sid(&sid, state->request.data.sid)) {
244 DEBUG(5, ("%s not a SID\n", state->request.data.sid));
245 return WINBINDD_ERROR;
246 }
247
248 /* Lookup the sid */
249
250 if (!winbindd_lookup_name_by_sid(state->mem_ctx, domain, &sid,
251 &dom_name, &name, &type))
252 {
253 TALLOC_FREE(dom_name);
254 TALLOC_FREE(name);
255 return WINBINDD_ERROR;
256 }
257
258 fstrcpy(state->response.data.name.dom_name, dom_name);
259 fstrcpy(state->response.data.name.name, name);
260 state->response.data.name.type = type;
261
262 TALLOC_FREE(dom_name);
263 TALLOC_FREE(name);
264 return WINBINDD_OK;
265 }
266
267 /********************************************************************
268 This is the second callback after contacting the forest root
269 ********************************************************************/
270
271 struct lookupname_state {
272 char *dom_name;
273 char *name;
274 void *caller_private_data;
275 };
276
277
278 static void lookupname_recv2(TALLOC_CTX *mem_ctx, bool success,
279 struct winbindd_response *response,
280 void *c, void *private_data)
281 {
282 void (*cont)(void *priv, bool succ, const DOM_SID *sid,
283 enum lsa_SidType type) =
284 (void (*)(void *, bool, const DOM_SID *, enum lsa_SidType))c;
285 DOM_SID sid;
286 struct lookupname_state *s = talloc_get_type_abort( private_data,
287 struct lookupname_state );
288
289 if (!success) {
290 DEBUG(5, ("Could not trigger lookup_name\n"));
291 cont(s->caller_private_data, False, NULL, SID_NAME_UNKNOWN);
292 return;
293 }
294
295 if (response->result != WINBINDD_OK) {
296 DEBUG(5, ("lookup_name returned an error\n"));
297 cont(s->caller_private_data, False, NULL, SID_NAME_UNKNOWN);
298 return;
299 }
300
301 if (!string_to_sid(&sid, response->data.sid.sid)) {
302 DEBUG(0, ("Could not convert string %s to sid\n",
303 response->data.sid.sid));
304 cont(s->caller_private_data, False, NULL, SID_NAME_UNKNOWN);
305 return;
306 }
307
308 cont(s->caller_private_data, True, &sid,
309 (enum lsa_SidType)response->data.sid.type);
310 }
311
312 /********************************************************************
313 This is the first callback after contacting our own domain
314 ********************************************************************/
315
316 static void lookupname_recv(TALLOC_CTX *mem_ctx, bool success,
317 struct winbindd_response *response,
318 void *c, void *private_data)
319 {
320 void (*cont)(void *priv, bool succ, const DOM_SID *sid,
321 enum lsa_SidType type) =
322 (void (*)(void *, bool, const DOM_SID *, enum lsa_SidType))c;
323 DOM_SID sid;
324 struct lookupname_state *s = talloc_get_type_abort( private_data,
325 struct lookupname_state );
326
327 if (!success) {
328 DEBUG(5, ("lookupname_recv: lookup_name() failed!\n"));
329 cont(s->caller_private_data, False, NULL, SID_NAME_UNKNOWN);
330 return;
331 }
332
333 if (response->result != WINBINDD_OK) {
334 /* Try again using the forest root */
335 struct winbindd_domain *root_domain = find_root_domain();
336 struct winbindd_request request;
337
338 if ( !root_domain ) {
339 DEBUG(5,("lookupname_recv: unable to determine forest root\n"));
340 cont(s->caller_private_data, False, NULL, SID_NAME_UNKNOWN);
341 return;
342 }
343
344 ZERO_STRUCT(request);
345 request.cmd = WINBINDD_LOOKUPNAME;
346
347 fstrcpy( request.data.name.dom_name, s->dom_name );
348 fstrcpy( request.data.name.name, s->name );
349
350 do_async_domain(mem_ctx, root_domain, &request, lookupname_recv2,
351 (void *)cont, s);
352
353 return;
354 }
355
356 if (!string_to_sid(&sid, response->data.sid.sid)) {
357 DEBUG(0, ("Could not convert string %s to sid\n",
358 response->data.sid.sid));
359 cont(s->caller_private_data, False, NULL, SID_NAME_UNKNOWN);
360 return;
361 }
362
363 cont(s->caller_private_data, True, &sid,
364 (enum lsa_SidType)response->data.sid.type);
365 }
366
367 /********************************************************************
368 The lookup name call first contacts a DC in its own domain
369 and fallbacks to contact a DC if the forest in our domain doesn't
370 know the name.
371 ********************************************************************/
372
373 void winbindd_lookupname_async(TALLOC_CTX *mem_ctx,
374 const char *dom_name, const char *name,
375 void (*cont)(void *private_data, bool success,
376 const DOM_SID *sid,
377 enum lsa_SidType type),
378 enum winbindd_cmd orig_cmd,
379 void *private_data)
380 {
381 struct winbindd_request request;
382 struct winbindd_domain *domain;
383 struct lookupname_state *s;
384
385 if ( (domain = find_lookup_domain_from_name(dom_name)) == NULL ) {
386 DEBUG(5, ("Could not find domain for name '%s'\n", dom_name));
387 cont(private_data, False, NULL, SID_NAME_UNKNOWN);
388 return;
389 }
390
391 ZERO_STRUCT(request);
392 request.cmd = WINBINDD_LOOKUPNAME;
393 request.original_cmd = orig_cmd;
394 fstrcpy(request.data.name.dom_name, dom_name);
395 fstrcpy(request.data.name.name, name);
396
397 if ( (s = TALLOC_ZERO_P(mem_ctx, struct lookupname_state)) == NULL ) {
398 DEBUG(0, ("winbindd_lookupname_async: talloc failed\n"));
399 cont(private_data, False, NULL, SID_NAME_UNKNOWN);
400 return;
401 }
402
403 s->dom_name = talloc_strdup( s, dom_name );
404 s->name = talloc_strdup( s, name );
405 if (!s->dom_name || !s->name) {
406 cont(private_data, False, NULL, SID_NAME_UNKNOWN);
407 return;
408 }
409
410 s->caller_private_data = private_data;
411
412 do_async_domain(mem_ctx, domain, &request, lookupname_recv,
413 (void *)cont, s);
414 }
415
416 enum winbindd_result winbindd_dual_lookupname(struct winbindd_domain *domain,
417 struct winbindd_cli_state *state)
418 {
419 enum lsa_SidType type;
420 char *name_domain, *name_user;
421 DOM_SID sid;
422 char *p;
423
424 /* Ensure null termination */
425 state->request.data.name.dom_name[sizeof(state->request.data.name.dom_name)-1]='\0';
426
427 /* Ensure null termination */
428 state->request.data.name.name[sizeof(state->request.data.name.name)-1]='\0';
429
430 /* cope with the name being a fully qualified name */
431 p = strstr(state->request.data.name.name, lp_winbind_separator());
432 if (p) {
433 *p = 0;
434 name_domain = state->request.data.name.name;
435 name_user = p+1;
436 } else {
437 name_domain = state->request.data.name.dom_name;
438 name_user = state->request.data.name.name;
439 }
440
441 DEBUG(3, ("[%5lu]: lookupname %s%s%s\n", (unsigned long)state->pid,
442 name_domain, lp_winbind_separator(), name_user));
443
444 /* Lookup name from DC using lsa_lookup_names() */
445 if (!winbindd_lookup_sid_by_name(state->mem_ctx, state->request.original_cmd, domain, name_domain,
446 name_user, &sid, &type)) {
447 return WINBINDD_ERROR;
448 }
449
450 sid_to_fstring(state->response.data.sid.sid, &sid);
451 state->response.data.sid.type = type;
452
453 return WINBINDD_OK;
454 }
455
456 /* This is the first callback after enumerating users/groups from a domain */
457 static void listent_recv(TALLOC_CTX *mem_ctx, bool success,
458 struct winbindd_response *response,
459 void *c, void *private_data)
460 {
461 void (*cont)(void *priv, bool succ, fstring dom_name, char *data) =
462 (void (*)(void *, bool, fstring, char*))c;
463
464 if (!success || response->result != WINBINDD_OK) {
465 DEBUG(5, ("list_ent() failed!\n"));
466 cont(private_data, False, response->data.name.dom_name, NULL);
467 return;
468 }
469
470 cont(private_data, True, response->data.name.dom_name,
471 (char *)response->extra_data.data);
472 }
473
474 /* Request the name of all users/groups in a single domain */
475 void winbindd_listent_async(TALLOC_CTX *mem_ctx,
476 struct winbindd_domain *domain,
477 void (*cont)(void *private_data, bool success,
478 fstring dom_name, char* extra_data),
479 void *private_data, enum ent_type type)
480 {
481 struct winbindd_request request;
482
483 ZERO_STRUCT(request);
484 if (type == LIST_USERS)
485 request.cmd = WINBINDD_LIST_USERS;
486 else if (type == LIST_GROUPS)
487 request.cmd = WINBINDD_LIST_GROUPS;
488
489 do_async_domain(mem_ctx, domain, &request, listent_recv,
490 (void *)cont, private_data);
491 }
492
493 enum winbindd_result winbindd_dual_list_users(struct winbindd_domain *domain,
494 struct winbindd_cli_state *state)
495 {
496 WINBIND_USERINFO *info;
497 NTSTATUS status;
498 struct winbindd_methods *methods;
499 uint32 num_entries = 0;
500 char *extra_data;
501 uint32_t extra_data_len = 0, i;
502
503 /* Must copy domain into response first for debugging in parent */
504 fstrcpy(state->response.data.name.dom_name, domain->name);
505
506 /* Query user info */
507 methods = domain->methods;
508 status = methods->query_user_list(domain, state->mem_ctx,
509 &num_entries, &info);
510
511 if (!NT_STATUS_IS_OK(status))
512 return WINBINDD_ERROR;
513
514 if (num_entries == 0)
515 return WINBINDD_OK;
516
517 /* Allocate some memory for extra data. Note that we limit
518 account names to sizeof(fstring) = 256 characters.
519 +1 for the ',' between group names */
520 extra_data = talloc_array(state->mem_ctx, char,
521 (sizeof(fstring) + 1) * num_entries);
522
523 if (!extra_data) {
524 DEBUG(0,("failed to enlarge buffer!\n"));
525 return WINBINDD_ERROR;
526 }
527
528 /* Pack user list into extra data fields */
529 for (i = 0; i < num_entries; i++) {
530 fstring acct_name, name;
531
532 if (info[i].acct_name == NULL)
533 fstrcpy(acct_name, "");
534 else
535 fstrcpy(acct_name, info[i].acct_name);
536
537 fill_domain_username(name, domain->name, acct_name, True);
538 /* Append to extra data */
539 memcpy(&extra_data[extra_data_len], name, strlen(name));
540 extra_data_len += strlen(name);
541 extra_data[extra_data_len++] = ',';
542 }
543
544 /* Assign extra_data fields in response structure */
545 if (extra_data) {
546 /* remove trailing ',' */
547 extra_data[extra_data_len - 1] = '\0';
548 state->response.extra_data.data = extra_data;
549 state->response.length += extra_data_len;
550 }
551
552 return WINBINDD_OK;
553 }
554
555 enum winbindd_result winbindd_dual_list_groups(struct winbindd_domain *domain,
556 struct winbindd_cli_state *state)
557 {
558 struct getent_state groups;
559 char *extra_data;
560 uint32_t extra_data_len = 0, i;
561
562 ZERO_STRUCT(groups);
563
564 /* Must copy domain into response first for debugging in parent */
565 fstrcpy(state->response.data.name.dom_name, domain->name);
566 fstrcpy(groups.domain_name, domain->name);
567
568 /* Get list of sam groups */
569 if (!get_sam_group_entries(&groups)) {
570 /* this domain is empty or in an error state */
571 return WINBINDD_ERROR;
572 }
573
574 /* Allocate some memory for extra data. Note that we limit
575 account names to sizeof(fstring) = 256 characters.
576 +1 for the ',' between group names */
577 extra_data = talloc_array(
578 state->mem_ctx, char,
579 (sizeof(fstring) + 1) * groups.num_sam_entries);
580
581 if (!extra_data) {
582 DEBUG(0,("failed to enlarge buffer!\n"));
583 SAFE_FREE(groups.sam_entries);
584 return WINBINDD_ERROR;
585 }
586
587 /* Pack group list into extra data fields */
588 for (i = 0; i < groups.num_sam_entries; i++) {
589 char *group_name = ((struct acct_info *)
590 groups.sam_entries)[i].acct_name;
591 fstring name;
592
593 fill_domain_username(name, domain->name, group_name, True);
594 /* Append to extra data */
595 memcpy(&extra_data[extra_data_len], name, strlen(name));
596 extra_data_len += strlen(name);
597 extra_data[extra_data_len++] = ',';
598 }
599
600 SAFE_FREE(groups.sam_entries);
601
602 /* Assign extra_data fields in response structure */
603 if (extra_data) {
604 /* remove trailing ',' */
605 extra_data[extra_data_len - 1] = '\0';
606 state->response.extra_data.data = extra_data;
607 state->response.length += extra_data_len;
608 }
609
610 return WINBINDD_OK;
611 }
612
613 bool print_sidlist(TALLOC_CTX *mem_ctx, const DOM_SID *sids,
614 size_t num_sids, char **result, ssize_t *len)
615 {
616 size_t i;
617 size_t buflen = 0;
618
619 *len = 0;
620 *result = NULL;
621 for (i=0; i<num_sids; i++) {
622 fstring tmp;
623 sprintf_append(mem_ctx, result, len, &buflen,
624 "%s\n", sid_to_fstring(tmp, &sids[i]));
625 }
626
627 if ((num_sids != 0) && (*result == NULL)) {
628 return False;
629 }
630
631 return True;
632 }
633
634 bool parse_sidlist(TALLOC_CTX *mem_ctx, char *sidstr,
635 DOM_SID **sids, size_t *num_sids)
636 {
637 char *p, *q;
638
639 p = sidstr;
640 if (p == NULL)
641 return False;
642
643 while (p[0] != '\0') {
644 DOM_SID sid;
645 q = strchr(p, '\n');
646 if (q == NULL) {
647 DEBUG(0, ("Got invalid sidstr: %s\n", p));
648 return False;
649 }
650 *q = '\0';
651 q += 1;
652 if (!string_to_sid(&sid, p)) {
653 DEBUG(0, ("Could not parse sid %s\n", p));
654 return False;
655 }
656 if (!NT_STATUS_IS_OK(add_sid_to_array(mem_ctx, &sid, sids,
657 num_sids)))
658 {
659 return False;
660 }
661 p = q;
662 }
663 return True;
664 }
665
666 static bool parse_ridlist(TALLOC_CTX *mem_ctx, char *ridstr,
667 uint32 **rids, size_t *num_rids)
668 {
669 char *p;
670
671 p = ridstr;
672 if (p == NULL)
673 return False;
674
675 while (p[0] != '\0') {
676 uint32 rid;
677 char *q;
678 rid = strtoul(p, &q, 10);
679 if (*q != '\n') {
680 DEBUG(0, ("Got invalid ridstr: %s\n", p));
681 return False;
682 }
683 p = q+1;
684 ADD_TO_ARRAY(mem_ctx, uint32, rid, rids, num_rids);
685 }
686 return True;
687 }
688
689 enum winbindd_result winbindd_dual_lookuprids(struct winbindd_domain *domain,
690 struct winbindd_cli_state *state)
691 {
692 uint32 *rids = NULL;
693 size_t i, buflen, num_rids = 0;
694 ssize_t len;
695 DOM_SID domain_sid;
696 char *domain_name;
697 char **names;
698 enum lsa_SidType *types;
699 NTSTATUS status;
700 char *result;
701
702 DEBUG(10, ("Looking up RIDs for domain %s (%s)\n",
703 state->request.domain_name,
704 state->request.data.sid));
705
706 if (!parse_ridlist(state->mem_ctx, state->request.extra_data.data,
707 &rids, &num_rids)) {
708 DEBUG(5, ("Could not parse ridlist\n"));
709 return WINBINDD_ERROR;
710 }
711
712 if (!string_to_sid(&domain_sid, state->request.data.sid)) {
713 DEBUG(5, ("Could not parse domain sid %s\n",
714 state->request.data.sid));
715 return WINBINDD_ERROR;
716 }
717
718 status = domain->methods->rids_to_names(domain, state->mem_ctx,
719 &domain_sid, rids, num_rids,
720 &domain_name,
721 &names, &types);
722
723 if (!NT_STATUS_IS_OK(status) &&
724 !NT_STATUS_EQUAL(status, STATUS_SOME_UNMAPPED)) {
725 return WINBINDD_ERROR;
726 }
727
728 len = 0;
729 buflen = 0;
730 result = NULL;
731
732 for (i=0; i<num_rids; i++) {
733 sprintf_append(state->mem_ctx, &result, &len, &buflen,
734 "%d %s\n", types[i], names[i]);
735 }
736
737 fstrcpy(state->response.data.domain_name, domain_name);
738
739 if (result != NULL) {
740 state->response.extra_data.data = result;
741 state->response.length += len+1;
742 }
743
744 return WINBINDD_OK;
745 }
746
747 static void getsidaliases_recv(TALLOC_CTX *mem_ctx, bool success,
748 struct winbindd_response *response,
749 void *c, void *private_data)
750 {
751 void (*cont)(void *priv, bool succ,
752 DOM_SID *aliases, size_t num_aliases) =
753 (void (*)(void *, bool, DOM_SID *, size_t))c;
754 char *aliases_str;
755 DOM_SID *sids = NULL;
756 size_t num_sids = 0;
757
758 if (!success) {
759 DEBUG(5, ("Could not trigger getsidaliases\n"));
760 cont(private_data, success, NULL, 0);
761 return;
762 }
763
764 if (response->result != WINBINDD_OK) {
765 DEBUG(5, ("getsidaliases returned an error\n"));
766 cont(private_data, False, NULL, 0);
767 return;
768 }
769
770 aliases_str = (char *)response->extra_data.data;
771
772 if (aliases_str == NULL) {
773 DEBUG(10, ("getsidaliases return 0 SIDs\n"));
774 cont(private_data, True, NULL, 0);
775 return;
776 }
777
778 if (!parse_sidlist(mem_ctx, aliases_str, &sids, &num_sids)) {
779 DEBUG(0, ("Could not parse sids\n"));
780 cont(private_data, False, NULL, 0);
781 return;
782 }
783
784 SAFE_FREE(response->extra_data.data);
785
786 cont(private_data, True, sids, num_sids);
787 }
788
789 void winbindd_getsidaliases_async(struct winbindd_domain *domain,
790 TALLOC_CTX *mem_ctx,
791 const DOM_SID *sids, size_t num_sids,
792 void (*cont)(void *private_data,
793 bool success,
794 const DOM_SID *aliases,
795 size_t num_aliases),
796 void *private_data)
797 {
798 struct winbindd_request request;
799 char *sidstr = NULL;
800 ssize_t len;
801
802 if (num_sids == 0) {
803 cont(private_data, True, NULL, 0);
804 return;
805 }
806
807 if (!print_sidlist(mem_ctx, sids, num_sids, &sidstr, &len)) {
808 cont(private_data, False, NULL, 0);
809 return;
810 }
811
812 ZERO_STRUCT(request);
813 request.cmd = WINBINDD_DUAL_GETSIDALIASES;
814 request.extra_len = len;
815 request.extra_data.data = sidstr;
816
817 do_async_domain(mem_ctx, domain, &request, getsidaliases_recv,
818 (void *)cont, private_data);
819 }
820
821 struct gettoken_state {
822 TALLOC_CTX *mem_ctx;
823 DOM_SID user_sid;
824 struct winbindd_domain *alias_domain;
825 struct winbindd_domain *local_alias_domain;
826 struct winbindd_domain *builtin_domain;
827 DOM_SID *sids;
828 size_t num_sids;
829 void (*cont)(void *private_data, bool success, DOM_SID *sids, size_t num_sids);
830 void *private_data;
831 };
832
833 static void gettoken_recvdomgroups(TALLOC_CTX *mem_ctx, bool success,
834 struct winbindd_response *response,
835 void *c, void *private_data);
836 static void gettoken_recvaliases(void *private_data, bool success,
837 const DOM_SID *aliases,
838 size_t num_aliases);
839
840
841 void winbindd_gettoken_async(TALLOC_CTX *mem_ctx, const DOM_SID *user_sid,
842 void (*cont)(void *private_data, bool success,
843 DOM_SID *sids, size_t num_sids),
844 void *private_data)
845 {
846 struct winbindd_domain *domain;
847 struct winbindd_request request;
848 struct gettoken_state *state;
849
850 state = TALLOC_ZERO_P(mem_ctx, struct gettoken_state);
851 if (state == NULL) {
852 DEBUG(0, ("talloc failed\n"));
853 cont(private_data, False, NULL, 0);
854 return;
855 }
856
857 state->mem_ctx = mem_ctx;
858 sid_copy(&state->user_sid, user_sid);
859 state->alias_domain = find_our_domain();
860 state->local_alias_domain = find_domain_from_name( get_global_sam_name() );
861 state->builtin_domain = find_builtin_domain();
862 state->cont = cont;
863 state->private_data = private_data;
864
865 domain = find_domain_from_sid_noinit(user_sid);
866 if (domain == NULL) {
867 DEBUG(5, ("Could not find domain from SID %s\n",
868 sid_string_dbg(user_sid)));
869 cont(private_data, False, NULL, 0);
870 return;
871 }
872
873 ZERO_STRUCT(request);
874 request.cmd = WINBINDD_GETUSERDOMGROUPS;
875 sid_to_fstring(request.data.sid, user_sid);
876
877 do_async_domain(mem_ctx, domain, &request, gettoken_recvdomgroups,
878 NULL, state);
879 }
880
881 static void gettoken_recvdomgroups(TALLOC_CTX *mem_ctx, bool success,
882 struct winbindd_response *response,
883 void *c, void *private_data)
884 {
885 struct gettoken_state *state =
886 talloc_get_type_abort(private_data, struct gettoken_state);
887 char *sids_str;
888
889 if (!success) {
890 DEBUG(10, ("Could not get domain groups\n"));
891 state->cont(state->private_data, False, NULL, 0);
892 return;
893 }
894
895 sids_str = (char *)response->extra_data.data;
896
897 if (sids_str == NULL) {
898 /* This could be normal if we are dealing with a
899 local user and local groups */
900
901 if ( !sid_check_is_in_our_domain( &state->user_sid ) ) {
902 DEBUG(10, ("Received no domain groups\n"));
903 state->cont(state->private_data, True, NULL, 0);
904 return;
905 }
906 }
907
908 state->sids = NULL;
909 state->num_sids = 0;
910
911 if (!NT_STATUS_IS_OK(add_sid_to_array(mem_ctx, &state->user_sid,
912 &state->sids, &state->num_sids)))
913 {
914 DEBUG(0, ("Out of memory\n"));
915 state->cont(state->private_data, False, NULL, 0);
916 return;
917 }
918
919 if (sids_str && !parse_sidlist(mem_ctx, sids_str, &state->sids,
920 &state->num_sids)) {
921 DEBUG(0, ("Could not parse sids\n"));
922 state->cont(state->private_data, False, NULL, 0);
923 return;
924 }
925
926 SAFE_FREE(response->extra_data.data);
927
928 if (state->alias_domain == NULL) {
929 DEBUG(10, ("Don't expand domain local groups\n"));
930 state->cont(state->private_data, True, state->sids,
931 state->num_sids);
932 return;
933 }
934
935 winbindd_getsidaliases_async(state->alias_domain, mem_ctx,
936 state->sids, state->num_sids,
937 gettoken_recvaliases, state);
938 }
939
940 static void gettoken_recvaliases(void *private_data, bool success,
941 const DOM_SID *aliases,
942 size_t num_aliases)
943 {
944 struct gettoken_state *state = (struct gettoken_state *)private_data;
945 size_t i;
946
947 if (!success) {
948 DEBUG(10, ("Could not receive domain local groups\n"));
949 state->cont(state->private_data, False, NULL, 0);
950 return;
951 }
952
953 for (i=0; i<num_aliases; i++) {
954 if (!NT_STATUS_IS_OK(add_sid_to_array(state->mem_ctx,
955 &aliases[i],
956 &state->sids,
957 &state->num_sids)))
958 {
959 DEBUG(0, ("Out of memory\n"));
960 state->cont(state->private_data, False, NULL, 0);
961 return;
962 }
963 }
964
965 if (state->local_alias_domain != NULL) {
966 struct winbindd_domain *local_domain = state->local_alias_domain;
967 DEBUG(10, ("Expanding our own local groups\n"));
968 state->local_alias_domain = NULL;
969 winbindd_getsidaliases_async(local_domain, state->mem_ctx,
970 state->sids, state->num_sids,
971 gettoken_recvaliases, state);
972 return;
973 }
974
975 if (state->builtin_domain != NULL) {
976 struct winbindd_domain *builtin_domain = state->builtin_domain;
977 DEBUG(10, ("Expanding our own BUILTIN groups\n"));
978 state->builtin_domain = NULL;
979 winbindd_getsidaliases_async(builtin_domain, state->mem_ctx,
980 state->sids, state->num_sids,
981 gettoken_recvaliases, state);
982 return;
983 }
984
985 state->cont(state->private_data, True, state->sids, state->num_sids);
986 }
987
988 static void query_user_recv(TALLOC_CTX *mem_ctx, bool success,
989 struct winbindd_response *response,
990 void *c, void *private_data)
991 {
992 void (*cont)(void *priv, bool succ, const char *acct_name,
993 const char *full_name, const char *homedir,
994 const char *shell, uint32 gid, uint32 group_rid) =
995 (void (*)(void *, bool, const char *, const char *,
996 const char *, const char *, uint32, uint32))c;
997
998 if (!success) {
999 DEBUG(5, ("Could not trigger query_user\n"));
1000 cont(private_data, False, NULL, NULL, NULL, NULL, -1, -1);
1001 return;
1002 }
1003
1004 if (response->result != WINBINDD_OK) {
1005 DEBUG(5, ("query_user returned an error\n"));
1006 cont(private_data, False, NULL, NULL, NULL, NULL, -1, -1);
1007 return;
1008 }
1009
1010 cont(private_data, True, response->data.user_info.acct_name,
1011 response->data.user_info.full_name,
1012 response->data.user_info.homedir,
1013 response->data.user_info.shell,
1014 response->data.user_info.primary_gid,
1015 response->data.user_info.group_rid);
1016 }
1017
1018 void query_user_async(TALLOC_CTX *mem_ctx, struct winbindd_domain *domain,
1019 const DOM_SID *sid,
1020 void (*cont)(void *private_data, bool success,
1021 const char *acct_name,
1022 const char *full_name,
1023 const char *homedir,
1024 const char *shell,
1025 gid_t gid,
1026 uint32 group_rid),
1027 void *private_data)
1028 {
1029 struct winbindd_request request;
1030 ZERO_STRUCT(request);
1031 request.cmd = WINBINDD_DUAL_USERINFO;
1032 sid_to_fstring(request.data.sid, sid);
1033 do_async_domain(mem_ctx, domain, &request, query_user_recv,
1034 (void *)cont, private_data);
1035 }
Samba GIT mirror