Fix bug 10196 - RW Deny for a specific user is not overriding RW Allow for a group.
[Samba.git] / source4 / winbind / wb_cmd_list_groups.c
blobdb256761d32beb76ec2fa47247e524968bbfaec1
1 /*
2 Unix SMB/CIFS implementation.
4 Command backend for wbinfo -g
6 Copyright (C) Kai Blin 2009
8 This program is free software; you can redistribute it and/or modify
9 it under the terms of the GNU General Public License as published by
10 the Free Software Foundation; either version 3 of the License, or
11 (at your option) any later version.
13 This program is distributed in the hope that it will be useful,
14 but WITHOUT ANY WARRANTY; without even the implied warranty of
15 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16 GNU General Public License for more details.
18 You should have received a copy of the GNU General Public License
19 along with this program. If not, see <http://www.gnu.org/licenses/>.
22 #include "includes.h"
23 #include "libcli/composite/composite.h"
24 #include "winbind/wb_server.h"
25 #include "smbd/service_task.h"
27 struct cmd_list_groups_state {
28 struct composite_context *ctx;
29 struct wbsrv_service *service;
31 struct wbsrv_domain *domain;
32 char *domain_name;
33 uint32_t resume_index;
34 char *result;
35 uint32_t num_groups;
38 static void cmd_list_groups_recv_domain(struct composite_context *ctx);
39 static void cmd_list_groups_recv_group_list(struct composite_context *ctx);
41 struct composite_context *wb_cmd_list_groups_send(TALLOC_CTX *mem_ctx,
42 struct wbsrv_service *service, const char *domain_name)
44 struct composite_context *ctx, *result;
45 struct cmd_list_groups_state *state;
47 DEBUG(5, ("wb_cmd_list_groups_send called\n"));
49 result = composite_create(mem_ctx, service->task->event_ctx);
50 if (!result) return NULL;
52 state = talloc(result, struct cmd_list_groups_state);
53 if (composite_nomem(state, result)) return result;
55 state->ctx = result;
56 result->private_data = state;
57 state->service = service;
58 state->resume_index = 0;
59 state->num_groups = 0;
60 state->result = talloc_strdup(state, "");
61 if (composite_nomem(state->result, state->ctx)) return result;
63 /*FIXME: We should look up the domain in the winbind request if it is
64 * set, not just take the primary domain. However, I want to get the
65 * libnet logic to work first. */
67 if (domain_name && *domain_name != '\0') {
68 state->domain_name = talloc_strdup(state, domain_name);
69 if (composite_nomem(state->domain_name, state->ctx))
70 return result;
71 } else {
72 state->domain_name = NULL;
75 ctx = wb_sid2domain_send(state, service, service->primary_sid);
76 if (composite_nomem(ctx, state->ctx)) return result;
78 composite_continue(state->ctx, ctx, cmd_list_groups_recv_domain, state);
79 return result;
82 static void cmd_list_groups_recv_domain(struct composite_context *ctx)
84 struct cmd_list_groups_state *state = talloc_get_type(
85 ctx->async.private_data, struct cmd_list_groups_state);
86 struct wbsrv_domain *domain;
87 struct libnet_GroupList *group_list;
89 DEBUG(5, ("cmd_list_groups_recv_domain called\n"));
91 state->ctx->status = wb_sid2domain_recv(ctx, &domain);
92 if (!composite_is_ok(state->ctx)) return;
94 /* we use this entry also for context purposes (libnet_GroupList) */
95 state->domain = domain;
97 /* If this is non-null, we've looked up the domain given in the winbind
98 * request, otherwise we'll just use the default name .*/
99 if (state->domain_name == NULL) {
100 state->domain_name = talloc_strdup(state,
101 state->domain->libnet_ctx->samr.name);
102 if (composite_nomem(state->domain_name, state->ctx)) return;
105 group_list = talloc(state, struct libnet_GroupList);
106 if (composite_nomem(group_list, state->ctx)) return;
108 group_list->in.domain_name = state->domain_name;
110 /* Rafal suggested that 128 is a good number here. I don't like magic
111 * numbers too much, but for now it'll have to do.
113 group_list->in.page_size = 128;
114 group_list->in.resume_index = state->resume_index;
116 ctx = libnet_GroupList_send(state->domain->libnet_ctx, state,
117 group_list, NULL);
119 composite_continue(state->ctx, ctx, cmd_list_groups_recv_group_list,
120 state);
123 static void cmd_list_groups_recv_group_list(struct composite_context *ctx)
125 struct cmd_list_groups_state *state = talloc_get_type(
126 ctx->async.private_data, struct cmd_list_groups_state);
127 struct libnet_GroupList *group_list;
128 NTSTATUS status;
129 int i;
131 DEBUG(5, ("cmd_list_groups_recv_group_list called\n"));
133 group_list = talloc(state, struct libnet_GroupList);
134 if (composite_nomem(group_list, state->ctx)) return;
136 status = libnet_GroupList_recv(ctx, state, group_list);
138 /* If NTSTATUS is neither OK nor MORE_ENTRIES, something broke */
139 if (!NT_STATUS_IS_OK(status) &&
140 !NT_STATUS_EQUAL(status, STATUS_MORE_ENTRIES) &&
141 !NT_STATUS_EQUAL(status, NT_STATUS_NO_MORE_ENTRIES)) {
142 composite_error(state->ctx, status);
143 return;
146 for (i = 0; i < group_list->out.count; ++i) {
147 DEBUG(5, ("Appending group '%s'\n",
148 group_list->out.groups[i].groupname));
149 state->result = talloc_asprintf_append_buffer(state->result,
150 "%s,",
151 group_list->out.groups[i].groupname);
152 state->num_groups++;
155 /* If the status is OK, we're finished, there's no more groups.
156 * So we'll trim off the trailing ',' and are done.*/
157 if (NT_STATUS_IS_OK(status)) {
158 size_t str_len = strlen(state->result);
159 DEBUG(5, ("list_GroupList_recv returned NT_STATUS_OK\n"));
160 if (str_len > 0) {
161 state->result[str_len - 1] = '\0';
163 composite_done(state->ctx);
164 return;
167 DEBUG(5, ("list_GroupList_recv returned NT_STATUS_MORE_ENTRIES\n"));
169 /* Otherwise there's more groups to get, so call out to libnet and
170 * continue on this function here. */
172 group_list->in.domain_name = state->domain_name;
173 /* See comment above about the page size. 128 seems like a good default.
175 group_list->in.page_size = 128;
176 group_list->in.resume_index = group_list->out.resume_index;
178 ctx = libnet_GroupList_send(state->domain->libnet_ctx, state,group_list,
179 NULL);
181 composite_continue(state->ctx, ctx, cmd_list_groups_recv_group_list,
182 state);
185 NTSTATUS wb_cmd_list_groups_recv(struct composite_context *ctx,
186 TALLOC_CTX *mem_ctx, uint32_t *extra_data_len,
187 char **extra_data, uint32_t *num_groups)
189 NTSTATUS status = composite_wait(ctx);
191 DEBUG(5, ("wb_cmd_list_groups_recv called\n"));
193 if (NT_STATUS_IS_OK(status)) {
194 struct cmd_list_groups_state *state = talloc_get_type(
195 ctx->private_data, struct cmd_list_groups_state);
197 *extra_data_len = strlen(state->result);
198 *extra_data = talloc_steal(mem_ctx, state->result);
199 *num_groups = state->num_groups;
202 talloc_free(ctx);
203 return status;