s3-winbind: Fix bug #9052 resolving our own "Domain Local" groups.
[Samba.git] / source3 / winbindd / winbindd_getpwnam.c
blobf2c93362ca8e67c5e772283d715de9cea70c40da
1 /*
2 Unix SMB/CIFS implementation.
3 async implementation of WINBINDD_GETPWNAM
4 Copyright (C) Volker Lendecke 2009
6 This program is free software; you can redistribute it and/or modify
7 it under the terms of the GNU General Public License as published by
8 the Free Software Foundation; either version 3 of the License, or
9 (at your option) any later version.
11 This program is distributed in the hope that it will be useful,
12 but WITHOUT ANY WARRANTY; without even the implied warranty of
13 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 GNU General Public License for more details.
16 You should have received a copy of the GNU General Public License
17 along with this program. If not, see <http://www.gnu.org/licenses/>.
20 #include "includes.h"
21 #include "winbindd.h"
22 #include "passdb/lookup_sid.h" /* only for LOOKUP_NAME_NO_NSS flag */
24 struct winbindd_getpwnam_state {
25 struct tevent_context *ev;
26 fstring domname;
27 fstring username;
28 struct dom_sid sid;
29 enum lsa_SidType type;
30 struct winbindd_pw pw;
33 static void winbindd_getpwnam_lookupname_done(struct tevent_req *subreq);
34 static void winbindd_getpwnam_done(struct tevent_req *subreq);
36 struct tevent_req *winbindd_getpwnam_send(TALLOC_CTX *mem_ctx,
37 struct tevent_context *ev,
38 struct winbindd_cli_state *cli,
39 struct winbindd_request *request)
41 struct tevent_req *req, *subreq;
42 struct winbindd_getpwnam_state *state;
43 char *domuser, *mapped_user;
44 NTSTATUS status;
46 req = tevent_req_create(mem_ctx, &state,
47 struct winbindd_getpwnam_state);
48 if (req == NULL) {
49 return NULL;
51 state->ev = ev;
53 /* Ensure null termination */
54 request->data.username[sizeof(request->data.username)-1]='\0';
56 DEBUG(3, ("getpwnam %s\n", request->data.username));
58 domuser = request->data.username;
60 status = normalize_name_unmap(state, domuser, &mapped_user);
62 if (NT_STATUS_IS_OK(status)
63 || NT_STATUS_EQUAL(status, NT_STATUS_FILE_RENAMED)) {
64 /* normalize_name_unmapped did something */
65 domuser = mapped_user;
68 if (!parse_domain_user(domuser, state->domname, state->username)) {
69 DEBUG(5, ("Could not parse domain user: %s\n", domuser));
70 tevent_req_nterror(req, NT_STATUS_INVALID_PARAMETER);
71 return tevent_req_post(req, ev);
74 if (lp_winbind_trusted_domains_only()
75 && strequal(state->domname, lp_workgroup())) {
76 DEBUG(7,("winbindd_getpwnam: My domain -- "
77 "rejecting getpwnam() for %s\\%s.\n",
78 state->domname, state->username));
79 tevent_req_nterror(req, NT_STATUS_NO_SUCH_USER);
80 return tevent_req_post(req, ev);
83 subreq = wb_lookupname_send(state, ev, state->domname, state->username,
84 LOOKUP_NAME_NO_NSS);
85 if (tevent_req_nomem(subreq, req)) {
86 return tevent_req_post(req, ev);
88 tevent_req_set_callback(subreq, winbindd_getpwnam_lookupname_done,
89 req);
90 return req;
93 static void winbindd_getpwnam_lookupname_done(struct tevent_req *subreq)
95 struct tevent_req *req = tevent_req_callback_data(
96 subreq, struct tevent_req);
97 struct winbindd_getpwnam_state *state = tevent_req_data(
98 req, struct winbindd_getpwnam_state);
99 NTSTATUS status;
101 status = wb_lookupname_recv(subreq, &state->sid, &state->type);
102 TALLOC_FREE(subreq);
103 if (tevent_req_nterror(req, status)) {
104 return;
107 subreq = wb_getpwsid_send(state, state->ev, &state->sid, &state->pw);
108 if (tevent_req_nomem(subreq, req)) {
109 return;
111 tevent_req_set_callback(subreq, winbindd_getpwnam_done, req);
114 static void winbindd_getpwnam_done(struct tevent_req *subreq)
116 struct tevent_req *req = tevent_req_callback_data(
117 subreq, struct tevent_req);
118 NTSTATUS status;
120 status = wb_getpwsid_recv(subreq);
121 TALLOC_FREE(subreq);
122 if (tevent_req_nterror(req, status)) {
123 return;
125 tevent_req_done(req);
128 NTSTATUS winbindd_getpwnam_recv(struct tevent_req *req,
129 struct winbindd_response *response)
131 struct winbindd_getpwnam_state *state = tevent_req_data(
132 req, struct winbindd_getpwnam_state);
133 NTSTATUS status;
135 if (tevent_req_is_nterror(req, &status)) {
136 DEBUG(5, ("Could not convert sid %s: %s\n",
137 sid_string_dbg(&state->sid), nt_errstr(status)));
138 return status;
140 response->data.pw = state->pw;
141 return NT_STATUS_OK;