source3/lib/util_sid_passdb.c

   1 /*
   2    Unix SMB/CIFS implementation.
   3    sid utility functions
   4
   5    Copyright (C) Michael Adam 2012
   6
   7    This program is free software; you can redistribute it and/or modify
   8    it under the terms of the GNU General Public License as published by
   9    the Free Software Foundation; either version 3 of the License, or
  10    (at your option) any later version.
  11
  12    This program is distributed in the hope that it will be useful,
  13    but WITHOUT ANY WARRANTY; without even the implied warranty of
  14    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  15    GNU General Public License for more details.
  16
  17    You should have received a copy of the GNU General Public License
  18    along with this program.  If not, see <http://www.gnu.org/licenses/>.
  19  */
  20
  21 #include "includes.h"
  22 #include "lib/util_sid_passdb.h"
  23 #include "passdb/machine_sid.h"
  24 #include "passdb.h"
  25
  26 /**
  27  * check whether this is an object-sid that should
  28  * be treated by the passdb, e.g. for id-mapping.
  29  */
  30 bool sid_check_object_is_for_passdb(const struct dom_sid *sid)
  31 {
  32         if (sid_check_is_in_our_sam(sid) && pdb_is_responsible_for_our_sam()) {
  33                 return true;
  34         }
  35
  36         if (sid_check_is_in_builtin(sid) && pdb_is_responsible_for_builtin()) {
  37                 return true;
  38         }
  39
  40         if (sid_check_is_in_wellknown_domain(sid) &&
  41             pdb_is_responsible_for_wellknown())
  42         {
  43                 return true;
  44         }
  45
  46         if (sid_check_is_in_unix_users(sid) &&
  47             pdb_is_responsible_for_unix_users())
  48         {
  49                 return true;
  50         }
  51
  52         if (sid_check_is_in_unix_groups(sid) &&
  53             pdb_is_responsible_for_unix_groups())
  54         {
  55                 return true;
  56         }
  57
  58         if (pdb_is_responsible_for_everything_else())
  59         {
  60                 return true;
  61         }
  62
  63         return false;
  64 }
  65 /**
  66  * check whether this is an object- or domain-sid that should
  67  * be treated by the passdb, e.g. for id-mapping.
  68  */
  69 bool sid_check_is_for_passdb(const struct dom_sid *sid)
  70 {
  71         if (sid_check_is_our_sam(sid) && pdb_is_responsible_for_our_sam()) {
  72                 return true;
  73         }
  74
  75         if (sid_check_is_in_our_sam(sid) && pdb_is_responsible_for_our_sam()) {
  76                 return true;
  77         }
  78
  79         if (sid_check_is_builtin(sid) && pdb_is_responsible_for_builtin()) {
  80                 return true;
  81         }
  82
  83         if (sid_check_is_in_builtin(sid) && pdb_is_responsible_for_builtin()) {
  84                 return true;
  85         }
  86
  87         if (sid_check_is_wellknown_domain(sid, NULL) &&
  88             pdb_is_responsible_for_wellknown())
  89         {
  90                 return true;
  91         }
  92
  93         if (sid_check_is_in_wellknown_domain(sid) &&
  94             pdb_is_responsible_for_wellknown())
  95         {
  96                 return true;
  97         }
  98
  99         if (sid_check_is_unix_users(sid) &&
 100             pdb_is_responsible_for_unix_users())
 101         {
 102                 return true;
 103         }
 104
 105         if (sid_check_is_in_unix_users(sid) &&
 106             pdb_is_responsible_for_unix_users())
 107         {
 108                 return true;
 109         }
 110
 111         if (sid_check_is_unix_groups(sid) &&
 112             pdb_is_responsible_for_unix_groups())
 113         {
 114                 return true;
 115         }
 116
 117         if (sid_check_is_in_unix_groups(sid) &&
 118             pdb_is_responsible_for_unix_groups())
 119         {
 120                 return true;
 121         }
 122
 123         if (pdb_is_responsible_for_everything_else())
 124         {
 125                 return true;
 126         }
 127
 128         return false;
 129 }