source3/passdb/util_unixsids.c

   1 /*
   2    Unix SMB/CIFS implementation.
   3    Translate unix-defined names to SIDs and vice versa
   4    Copyright (C) Volker Lendecke 2005
   5
   6    This program is free software; you can redistribute it and/or modify
   7    it under the terms of the GNU General Public License as published by
   8    the Free Software Foundation; either version 3 of the License, or
   9    (at your option) any later version.
  10
  11    This program is distributed in the hope that it will be useful,
  12    but WITHOUT ANY WARRANTY; without even the implied warranty of
  13    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  14    GNU General Public License for more details.
  15
  16    You should have received a copy of the GNU General Public License
  17    along with this program.  If not, see <http://www.gnu.org/licenses/>.
  18 */
  19
  20 #include "includes.h"
  21 #include "../libcli/security/security.h"
  22
  23 bool sid_check_is_unix_users(const struct dom_sid *sid)
  24 {
  25         return dom_sid_equal(sid, &global_sid_Unix_Users);
  26 }
  27
  28 bool sid_check_is_in_unix_users(const struct dom_sid *sid)
  29 {
  30         struct dom_sid dom_sid;
  31         uint32 rid;
  32
  33         sid_copy(&dom_sid, sid);
  34         sid_split_rid(&dom_sid, &rid);
  35
  36         return sid_check_is_unix_users(&dom_sid);
  37 }
  38
  39 void uid_to_unix_users_sid(uid_t uid, struct dom_sid *sid)
  40 {
  41         /*
  42          * This can never fail, we know that global_sid_Unix_Users is
  43          * short enough for a domain sid.
  44          */
  45         sid_compose(sid, &global_sid_Unix_Users, uid);
  46 }
  47
  48 void gid_to_unix_groups_sid(gid_t gid, struct dom_sid *sid)
  49 {
  50         /*
  51          * This can never fail, we know that global_sid_Unix_Groups is
  52          * short enough for a domain sid.
  53          */
  54         sid_compose(sid, &global_sid_Unix_Groups, gid);
  55 }
  56
  57 const char *unix_users_domain_name(void)
  58 {
  59         return "Unix User";
  60 }
  61
  62 bool lookup_unix_user_name(const char *name, struct dom_sid *sid)
  63 {
  64         struct passwd *pwd;
  65         bool ret;
  66
  67         pwd = Get_Pwnam_alloc(talloc_tos(), name);
  68         if (pwd == NULL) {
  69                 return False;
  70         }
  71
  72         /*
  73          * For 64-bit uid's we have enough space in the whole SID,
  74          * should they become necessary
  75          */
  76         ret = sid_compose(sid, &global_sid_Unix_Users, pwd->pw_uid);
  77         TALLOC_FREE(pwd);
  78         return ret;
  79 }
  80
  81 bool sid_check_is_unix_groups(const struct dom_sid *sid)
  82 {
  83         return dom_sid_equal(sid, &global_sid_Unix_Groups);
  84 }
  85
  86 bool sid_check_is_in_unix_groups(const struct dom_sid *sid)
  87 {
  88         struct dom_sid dom_sid;
  89         uint32 rid;
  90
  91         sid_copy(&dom_sid, sid);
  92         sid_split_rid(&dom_sid, &rid);
  93
  94         return sid_check_is_unix_groups(&dom_sid);
  95 }
  96
  97 const char *unix_groups_domain_name(void)
  98 {
  99         return "Unix Group";
 100 }
 101
 102 bool lookup_unix_group_name(const char *name, struct dom_sid *sid)
 103 {
 104         struct group *grp;
 105
 106         grp = sys_getgrnam(name);
 107         if (grp == NULL) {
 108                 return False;
 109         }
 110
 111         /*
 112          * For 64-bit gid's we have enough space in the whole SID,
 113          * should they become necessary
 114          */
 115         return sid_compose(sid, &global_sid_Unix_Groups, grp->gr_gid);
 116 }