?  search:
summary | log | graphiclog1 | graphiclog2 | commit | commitdiff | tree | refs | edit | fork
blame | history | raw | HEAD
fixing typo in the 'map readonly = permissions' explanation reported by Thomas Bork
[Samba.git] / source / nsswitch / winbindd_async.c
blobad136bdc0d783eaf437a523fd5e40b424ae78c3b
1 /*
2 Unix SMB/CIFS implementation.
3
4 Async helpers for blocking functions
5
6 Copyright (C) Volker Lendecke 2005
7 Copyright (C) Gerald Carter 2006
8
9 The helpers always consist of three functions:
10
11 * A request setup function that takes the necessary parameters together
12 with a continuation function that is to be called upon completion
13
14 * A private continuation function that is internal only. This is to be
15 called by the lower-level functions in do_async(). Its only task is to
16 properly call the continuation function named above.
17
18 * A worker function that is called inside the appropriate child process.
19
20 This program is free software; you can redistribute it and/or modify
21 it under the terms of the GNU General Public License as published by
22 the Free Software Foundation; either version 2 of the License, or
23 (at your option) any later version.
24
25 This program is distributed in the hope that it will be useful,
26 but WITHOUT ANY WARRANTY; without even the implied warranty of
27 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
28 GNU General Public License for more details.
29
30 You should have received a copy of the GNU General Public License
31 along with this program; if not, write to the Free Software
32 Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
33 */
34
35 #include "includes.h"
36 #include "winbindd.h"
37
38 #undef DBGC_CLASS
39 #define DBGC_CLASS DBGC_WINBIND
40
41 struct do_async_state {
42 TALLOC_CTX *mem_ctx;
43 struct winbindd_request request;
44 struct winbindd_response response;
45 void (*cont)(TALLOC_CTX *mem_ctx,
46 BOOL success,
47 struct winbindd_response *response,
48 void *c, void *private_data);
49 void *c, *private_data;
50 };
51
52 static void do_async_recv(void *private_data, BOOL success)
53 {
54 struct do_async_state *state =
55 talloc_get_type_abort(private_data, struct do_async_state);
56
57 state->cont(state->mem_ctx, success, &state->response,
58 state->c, state->private_data);
59 }
60
61 static void do_async(TALLOC_CTX *mem_ctx, struct winbindd_child *child,
62 const struct winbindd_request *request,
63 void (*cont)(TALLOC_CTX *mem_ctx, BOOL success,
64 struct winbindd_response *response,
65 void *c, void *private_data),
66 void *c, void *private_data)
67 {
68 struct do_async_state *state;
69
70 state = TALLOC_ZERO_P(mem_ctx, struct do_async_state);
71 if (state == NULL) {
72 DEBUG(0, ("talloc failed\n"));
73 cont(mem_ctx, False, NULL, c, private_data);
74 return;
75 }
76
77 state->mem_ctx = mem_ctx;
78 state->request = *request;
79 state->request.length = sizeof(state->request);
80 state->cont = cont;
81 state->c = c;
82 state->private_data = private_data;
83
84 async_request(mem_ctx, child, &state->request,
85 &state->response, do_async_recv, state);
86 }
87
88 void do_async_domain(TALLOC_CTX *mem_ctx, struct winbindd_domain *domain,
89 const struct winbindd_request *request,
90 void (*cont)(TALLOC_CTX *mem_ctx, BOOL success,
91 struct winbindd_response *response,
92 void *c, void *private_data),
93 void *c, void *private_data)
94 {
95 struct do_async_state *state;
96
97 state = TALLOC_ZERO_P(mem_ctx, struct do_async_state);
98 if (state == NULL) {
99 DEBUG(0, ("talloc failed\n"));
100 cont(mem_ctx, False, NULL, c, private_data);
101 return;
102 }
103
104 state->mem_ctx = mem_ctx;
105 state->request = *request;
106 state->request.length = sizeof(state->request);
107 state->cont = cont;
108 state->c = c;
109 state->private_data = private_data;
110
111 async_domain_request(mem_ctx, domain, &state->request,
112 &state->response, do_async_recv, state);
113 }
114
115 static void winbindd_set_mapping_recv(TALLOC_CTX *mem_ctx, BOOL success,
116 struct winbindd_response *response,
117 void *c, void *private_data)
118 {
119 void (*cont)(void *priv, BOOL succ) = (void (*)(void *, BOOL))c;
120
121 if (!success) {
122 DEBUG(5, ("Could not trigger idmap_set_mapping\n"));
123 cont(private_data, False);
124 return;
125 }
126
127 if (response->result != WINBINDD_OK) {
128 DEBUG(5, ("idmap_set_mapping returned an error\n"));
129 cont(private_data, False);
130 return;
131 }
132
133 cont(private_data, True);
134 }
135
136 void winbindd_set_mapping_async(TALLOC_CTX *mem_ctx, const struct id_map *map,
137 void (*cont)(void *private_data, BOOL success),
138 void *private_data)
139 {
140 struct winbindd_request request;
141 ZERO_STRUCT(request);
142 request.cmd = WINBINDD_DUAL_SET_MAPPING;
143 request.data.dual_idmapset.id = map->xid.id;
144 request.data.dual_idmapset.type = map->xid.type;
145 sid_to_string(request.data.dual_idmapset.sid, map->sid);
146
147 do_async(mem_ctx, idmap_child(), &request, winbindd_set_mapping_recv,
148 (void *)cont, private_data);
149 }
150
151 enum winbindd_result winbindd_dual_set_mapping(struct winbindd_domain *domain,
152 struct winbindd_cli_state *state)
153 {
154 struct id_map map;
155 DOM_SID sid;
156 NTSTATUS result;
157
158 DEBUG(3, ("[%5lu]: dual_idmapset\n", (unsigned long)state->pid));
159
160 if (!string_to_sid(&sid, state->request.data.dual_idmapset.sid))
161 return WINBINDD_ERROR;
162
163 map.sid = &sid;
164 map.xid.id = state->request.data.dual_idmapset.id;
165 map.xid.type = state->request.data.dual_idmapset.type;
166 map.status = ID_MAPPED;
167
168 result = idmap_set_mapping(&map);
169 return NT_STATUS_IS_OK(result) ? WINBINDD_OK : WINBINDD_ERROR;
170 }
171
172 static void winbindd_set_hwm_recv(TALLOC_CTX *mem_ctx, BOOL success,
173 struct winbindd_response *response,
174 void *c, void *private_data)
175 {
176 void (*cont)(void *priv, BOOL succ) = (void (*)(void *, BOOL))c;
177
178 if (!success) {
179 DEBUG(5, ("Could not trigger idmap_set_hwm\n"));
180 cont(private_data, False);
181 return;
182 }
183
184 if (response->result != WINBINDD_OK) {
185 DEBUG(5, ("idmap_set_hwm returned an error\n"));
186 cont(private_data, False);
187 return;
188 }
189
190 cont(private_data, True);
191 }
192
193 void winbindd_set_hwm_async(TALLOC_CTX *mem_ctx, const struct unixid *xid,
194 void (*cont)(void *private_data, BOOL success),
195 void *private_data)
196 {
197 struct winbindd_request request;
198 ZERO_STRUCT(request);
199 request.cmd = WINBINDD_DUAL_SET_HWM;
200 request.data.dual_idmapset.id = xid->id;
201 request.data.dual_idmapset.type = xid->type;
202
203 do_async(mem_ctx, idmap_child(), &request, winbindd_set_hwm_recv,
204 (void *)cont, private_data);
205 }
206
207 enum winbindd_result winbindd_dual_set_hwm(struct winbindd_domain *domain,
208 struct winbindd_cli_state *state)
209 {
210 struct unixid xid;
211 NTSTATUS result;
212
213 DEBUG(3, ("[%5lu]: dual_set_hwm\n", (unsigned long)state->pid));
214
215 xid.id = state->request.data.dual_idmapset.id;
216 xid.type = state->request.data.dual_idmapset.type;
217
218 switch (xid.type) {
219 case ID_TYPE_UID:
220 result = idmap_set_uid_hwm(&xid);
221 break;
222 case ID_TYPE_GID:
223 result = idmap_set_gid_hwm(&xid);
224 break;
225 default:
226 return WINBINDD_ERROR;
227 }
228 return NT_STATUS_IS_OK(result) ? WINBINDD_OK : WINBINDD_ERROR;
229 }
230
231 static void winbindd_sids2xids_recv(TALLOC_CTX *mem_ctx, BOOL success,
232 struct winbindd_response *response,
233 void *c, void *private_data)
234 {
235 void (*cont)(void *priv, BOOL succ, void *, int) =
236 (void (*)(void *, BOOL, void *, int))c;
237
238 if (!success) {
239 DEBUG(5, ("Could not trigger sids2xids\n"));
240 cont(private_data, False, NULL, 0);
241 return;
242 }
243
244 if (response->result != WINBINDD_OK) {
245 DEBUG(5, ("sids2xids returned an error\n"));
246 cont(private_data, False, NULL, 0);
247 return;
248 }
249
250 cont(private_data, True, response->extra_data.data, response->length - sizeof(response));
251 }
252
253 void winbindd_sids2xids_async(TALLOC_CTX *mem_ctx, void *sids, int size,
254 void (*cont)(void *private_data, BOOL success, void *data, int len),
255 void *private_data)
256 {
257 struct winbindd_request request;
258 ZERO_STRUCT(request);
259 request.cmd = WINBINDD_DUAL_SIDS2XIDS;
260 request.extra_data.data = (char *)sids;
261 request.extra_len = size;
262 do_async(mem_ctx, idmap_child(), &request, winbindd_sids2xids_recv,
263 (void *)cont, private_data);
264 }
265
266 enum winbindd_result winbindd_dual_sids2xids(struct winbindd_domain *domain,
267 struct winbindd_cli_state *state)
268 {
269 DOM_SID *sids;
270 struct unixid *xids;
271 struct id_map **ids;
272 NTSTATUS result;
273 int num, i;
274
275 DEBUG(3, ("[%5lu]: sids to unix ids\n", (unsigned long)state->pid));
276
277 if (state->request.extra_len == 0) {
278 DEBUG(0, ("Invalid buffer size!\n"));
279 return WINBINDD_ERROR;
280 }
281
282 sids = (DOM_SID *)state->request.extra_data.data;
283 num = state->request.extra_len / sizeof(DOM_SID);
284
285 ids = TALLOC_ZERO_ARRAY(state->mem_ctx, struct id_map *, num + 1);
286 if ( ! ids) {
287 DEBUG(0, ("Out of memory!\n"));
288 return WINBINDD_ERROR;
289 }
290 for (i = 0; i < num; i++) {
291 ids[i] = TALLOC_P(ids, struct id_map);
292 if ( ! ids[i]) {
293 DEBUG(0, ("Out of memory!\n"));
294 talloc_free(ids);
295 return WINBINDD_ERROR;
296 }
297 ids[i]->sid = &sids[i];
298 }
299
300 result = idmap_sids_to_unixids(ids);
301
302 if (NT_STATUS_IS_OK(result)) {
303
304 xids = SMB_MALLOC_ARRAY(struct unixid, num);
305 if ( ! xids) {
306 DEBUG(0, ("Out of memory!\n"));
307 talloc_free(ids);
308 return WINBINDD_ERROR;
309 }
310
311 for (i = 0; i < num; i++) {
312 if (ids[i]->status == ID_MAPPED) {
313 xids[i].type = ids[i]->xid.type;
314 xids[i].id = ids[i]->xid.id;
315 } else {
316 xids[i].type = -1;
317 }
318 }
319
320 state->response.length = sizeof(state->response) + (sizeof(struct unixid) * num);
321 state->response.extra_data.data = xids;
322
323 } else {
324 DEBUG (2, ("idmap_sids_to_unixids returned an error: 0x%08x\n", NT_STATUS_V(result)));
325 talloc_free(ids);
326 return WINBINDD_ERROR;
327 }
328
329 talloc_free(ids);
330 return WINBINDD_OK;
331 }
332
333 static void winbindd_sid2uid_recv(TALLOC_CTX *mem_ctx, BOOL success,
334 struct winbindd_response *response,
335 void *c, void *private_data)
336 {
337 void (*cont)(void *priv, BOOL succ, uid_t uid) =
338 (void (*)(void *, BOOL, uid_t))c;
339
340 if (!success) {
341 DEBUG(5, ("Could not trigger sid2uid\n"));
342 cont(private_data, False, 0);
343 return;
344 }
345
346 if (response->result != WINBINDD_OK) {
347 DEBUG(5, ("sid2uid returned an error\n"));
348 cont(private_data, False, 0);
349 return;
350 }
351
352 cont(private_data, True, response->data.uid);
353 }
354
355 void winbindd_sid2uid_async(TALLOC_CTX *mem_ctx, const DOM_SID *sid,
356 void (*cont)(void *private_data, BOOL success, uid_t uid),
357 void *private_data)
358 {
359 struct winbindd_request request;
360 ZERO_STRUCT(request);
361 request.cmd = WINBINDD_DUAL_SID2UID;
362 sid_to_string(request.data.dual_sid2id.sid, sid);
363 do_async(mem_ctx, idmap_child(), &request, winbindd_sid2uid_recv,
364 (void *)cont, private_data);
365 }
366
367 enum winbindd_result winbindd_dual_sid2uid(struct winbindd_domain *domain,
368 struct winbindd_cli_state *state)
369 {
370 DOM_SID sid;
371 NTSTATUS result;
372
373 DEBUG(3, ("[%5lu]: sid to uid %s\n", (unsigned long)state->pid,
374 state->request.data.dual_sid2id.sid));
375
376 if (!string_to_sid(&sid, state->request.data.dual_sid2id.sid)) {
377 DEBUG(1, ("Could not get convert sid %s from string\n",
378 state->request.data.dual_sid2id.sid));
379 return WINBINDD_ERROR;
380 }
381
382 /* Find uid for this sid and return it, possibly ask the slow remote idmap */
383
384 result = idmap_sid_to_uid(&sid, &(state->response.data.uid));
385
386 return NT_STATUS_IS_OK(result) ? WINBINDD_OK : WINBINDD_ERROR;
387 }
388
389 #if 0 /* not used */
390 static void uid2name_recv(TALLOC_CTX *mem_ctx, BOOL success,
391 struct winbindd_response *response,
392 void *c, void *private_data);
393
394 void winbindd_uid2name_async(TALLOC_CTX *mem_ctx, uid_t uid,
395 void (*cont)(void *private_data, BOOL success,
396 const char *name),
397 void *private_data)
398 {
399 struct winbindd_request request;
400 ZERO_STRUCT(request);
401 request.cmd = WINBINDD_DUAL_UID2NAME;
402 request.data.uid = uid;
403 do_async(mem_ctx, idmap_child(), &request, uid2name_recv,
404 (void *)cont, private_data);
405 }
406 #endif /* not used */
407
408 enum winbindd_result winbindd_dual_uid2name(struct winbindd_domain *domain,
409 struct winbindd_cli_state *state)
410 {
411 struct passwd *pw;
412
413 DEBUG(3, ("[%5lu]: uid2name %lu\n", (unsigned long)state->pid,
414 (unsigned long)state->request.data.uid));
415
416 pw = getpwuid(state->request.data.uid);
417 if (pw == NULL) {
418 DEBUG(5, ("User %lu not found\n",
419 (unsigned long)state->request.data.uid));
420 return WINBINDD_ERROR;
421 }
422
423 fstrcpy(state->response.data.name.name, pw->pw_name);
424 return WINBINDD_OK;
425 }
426
427 #if 0 /* not used */
428 static void uid2name_recv(TALLOC_CTX *mem_ctx, BOOL success,
429 struct winbindd_response *response,
430 void *c, void *private_data)
431 {
432 void (*cont)(void *priv, BOOL succ, const char *name) =
433 (void (*)(void *, BOOL, const char *))c;
434
435 if (!success) {
436 DEBUG(5, ("Could not trigger uid2name\n"));
437 cont(private_data, False, NULL);
438 return;
439 }
440
441 if (response->result != WINBINDD_OK) {
442 DEBUG(5, ("uid2name returned an error\n"));
443 cont(private_data, False, NULL);
444 return;
445 }
446
447 cont(private_data, True, response->data.name.name);
448 }
449
450 static void name2uid_recv(TALLOC_CTX *mem_ctx, BOOL success,
451 struct winbindd_response *response,
452 void *c, void *private_data);
453
454 static void winbindd_name2uid_async(TALLOC_CTX *mem_ctx, const char *name,
455 void (*cont)(void *private_data, BOOL success,
456 uid_t uid),
457 void *private_data)
458 {
459 struct winbindd_request request;
460 ZERO_STRUCT(request);
461 request.cmd = WINBINDD_DUAL_NAME2UID;
462 fstrcpy(request.data.username, name);
463 do_async(mem_ctx, idmap_child(), &request, name2uid_recv,
464 (void *)cont, private_data);
465 }
466 #endif /* not used */
467
468 enum winbindd_result winbindd_dual_name2uid(struct winbindd_domain *domain,
469 struct winbindd_cli_state *state)
470 {
471 struct passwd *pw;
472
473 /* Ensure null termination */
474 state->request.data.username
475 [sizeof(state->request.data.username)-1] = '\0';
476
477 DEBUG(3, ("[%5lu]: name2uid %s\n", (unsigned long)state->pid,
478 state->request.data.username));
479
480 pw = getpwnam(state->request.data.username);
481 if (pw == NULL) {
482 return WINBINDD_ERROR;
483 }
484
485 state->response.data.uid = pw->pw_uid;
486 return WINBINDD_OK;
487 }
488
489 #if 0 /* not used */
490 static void name2uid_recv(TALLOC_CTX *mem_ctx, BOOL success,
491 struct winbindd_response *response,
492 void *c, void *private_data)
493 {
494 void (*cont)(void *priv, BOOL succ, uid_t uid) =
495 (void (*)(void *, BOOL, uid_t))c;
496
497 if (!success) {
498 DEBUG(5, ("Could not trigger name2uid\n"));
499 cont(private_data, False, 0);
500 return;
501 }
502
503 if (response->result != WINBINDD_OK) {
504 DEBUG(5, ("name2uid returned an error\n"));
505 cont(private_data, False, 0);
506 return;
507 }
508
509 cont(private_data, True, response->data.uid);
510 }
511 #endif /* not used */
512
513 static void winbindd_sid2gid_recv(TALLOC_CTX *mem_ctx, BOOL success,
514 struct winbindd_response *response,
515 void *c, void *private_data)
516 {
517 void (*cont)(void *priv, BOOL succ, gid_t gid) =
518 (void (*)(void *, BOOL, gid_t))c;
519
520 if (!success) {
521 DEBUG(5, ("Could not trigger sid2gid\n"));
522 cont(private_data, False, 0);
523 return;
524 }
525
526 if (response->result != WINBINDD_OK) {
527 DEBUG(5, ("sid2gid returned an error\n"));
528 cont(private_data, False, 0);
529 return;
530 }
531
532 cont(private_data, True, response->data.gid);
533 }
534
535 void winbindd_sid2gid_async(TALLOC_CTX *mem_ctx, const DOM_SID *sid,
536 void (*cont)(void *private_data, BOOL success, gid_t gid),
537 void *private_data)
538 {
539 struct winbindd_request request;
540 ZERO_STRUCT(request);
541 request.cmd = WINBINDD_DUAL_SID2GID;
542 sid_to_string(request.data.dual_sid2id.sid, sid);
543
544 DEBUG(7,("winbindd_sid2gid_async: Resolving %s to a gid\n",
545 request.data.dual_sid2id.sid));
546
547 do_async(mem_ctx, idmap_child(), &request, winbindd_sid2gid_recv,
548 (void *)cont, private_data);
549 }
550
551 enum winbindd_result winbindd_dual_sid2gid(struct winbindd_domain *domain,
552 struct winbindd_cli_state *state)
553 {
554 DOM_SID sid;
555 NTSTATUS result;
556
557 DEBUG(3, ("[%5lu]: sid to gid %s\n", (unsigned long)state->pid,
558 state->request.data.dual_sid2id.sid));
559
560 if (!string_to_sid(&sid, state->request.data.dual_sid2id.sid)) {
561 DEBUG(1, ("Could not get convert sid %s from string\n",
562 state->request.data.dual_sid2id.sid));
563 return WINBINDD_ERROR;
564 }
565
566 /* Find gid for this sid and return it, possibly ask the slow remote idmap */
567
568 result = idmap_sid_to_gid(&sid, &state->response.data.gid);
569
570 DEBUG(10, ("winbindd_dual_sid2gid: 0x%08x - %s - %u\n", NT_STATUS_V(result), sid_string_static(&sid), state->response.data.gid));
571
572 return NT_STATUS_IS_OK(result) ? WINBINDD_OK : WINBINDD_ERROR;
573 }
574
575 static void gid2name_recv(TALLOC_CTX *mem_ctx, BOOL success,
576 struct winbindd_response *response,
577 void *c, void *private_data)
578 {
579 void (*cont)(void *priv, BOOL succ, const char *name) =
580 (void (*)(void *, BOOL, const char *))c;
581
582 if (!success) {
583 DEBUG(5, ("Could not trigger gid2name\n"));
584 cont(private_data, False, NULL);
585 return;
586 }
587
588 if (response->result != WINBINDD_OK) {
589 DEBUG(5, ("gid2name returned an error\n"));
590 cont(private_data, False, NULL);
591 return;
592 }
593
594 cont(private_data, True, response->data.name.name);
595 }
596
597 void winbindd_gid2name_async(TALLOC_CTX *mem_ctx, gid_t gid,
598 void (*cont)(void *private_data, BOOL success,
599 const char *name),
600 void *private_data)
601 {
602 struct winbindd_request request;
603 ZERO_STRUCT(request);
604 request.cmd = WINBINDD_DUAL_GID2NAME;
605 request.data.gid = gid;
606 do_async(mem_ctx, idmap_child(), &request, gid2name_recv,
607 (void *)cont, private_data);
608 }
609
610 enum winbindd_result winbindd_dual_gid2name(struct winbindd_domain *domain,
611 struct winbindd_cli_state *state)
612 {
613 struct group *gr;
614
615 DEBUG(3, ("[%5lu]: gid2name %lu\n", (unsigned long)state->pid,
616 (unsigned long)state->request.data.gid));
617
618 gr = getgrgid(state->request.data.gid);
619 if (gr == NULL)
620 return WINBINDD_ERROR;
621
622 fstrcpy(state->response.data.name.name, gr->gr_name);
623 return WINBINDD_OK;
624 }
625
626 #if 0 /* not used */
627 static void name2gid_recv(TALLOC_CTX *mem_ctx, BOOL success,
628 struct winbindd_response *response,
629 void *c, void *private_data);
630
631 static void winbindd_name2gid_async(TALLOC_CTX *mem_ctx, const char *name,
632 void (*cont)(void *private_data, BOOL success,
633 gid_t gid),
634 void *private_data)
635 {
636 struct winbindd_request request;
637 ZERO_STRUCT(request);
638 request.cmd = WINBINDD_DUAL_NAME2GID;
639 fstrcpy(request.data.groupname, name);
640 do_async(mem_ctx, idmap_child(), &request, name2gid_recv,
641 (void *)cont, private_data);
642 }
643 #endif /* not used */
644
645 enum winbindd_result winbindd_dual_name2gid(struct winbindd_domain *domain,
646 struct winbindd_cli_state *state)
647 {
648 struct group *gr;
649
650 /* Ensure null termination */
651 state->request.data.groupname
652 [sizeof(state->request.data.groupname)-1] = '\0';
653
654 DEBUG(3, ("[%5lu]: name2gid %s\n", (unsigned long)state->pid,
655 state->request.data.groupname));
656
657 gr = getgrnam(state->request.data.groupname);
658 if (gr == NULL) {
659 return WINBINDD_ERROR;
660 }
661
662 state->response.data.gid = gr->gr_gid;
663 return WINBINDD_OK;
664 }
665
666 #if 0 /* not used */
667 static void name2gid_recv(TALLOC_CTX *mem_ctx, BOOL success,
668 struct winbindd_response *response,
669 void *c, void *private_data)
670 {
671 void (*cont)(void *priv, BOOL succ, gid_t gid) =
672 (void (*)(void *, BOOL, gid_t))c;
673
674 if (!success) {
675 DEBUG(5, ("Could not trigger name2gid\n"));
676 cont(private_data, False, 0);
677 return;
678 }
679
680 if (response->result != WINBINDD_OK) {
681 DEBUG(5, ("name2gid returned an error\n"));
682 cont(private_data, False, 0);
683 return;
684 }
685
686 cont(private_data, True, response->data.gid);
687 }
688 #endif /* not used */
689
690 static void lookupsid_recv(TALLOC_CTX *mem_ctx, BOOL success,
691 struct winbindd_response *response,
692 void *c, void *private_data)
693 {
694 void (*cont)(void *priv, BOOL succ, const char *dom_name,
695 const char *name, enum lsa_SidType type) =
696 (void (*)(void *, BOOL, const char *, const char *,
697 enum lsa_SidType))c;
698
699 if (!success) {
700 DEBUG(5, ("Could not trigger lookupsid\n"));
701 cont(private_data, False, NULL, NULL, SID_NAME_UNKNOWN);
702 return;
703 }
704
705 if (response->result != WINBINDD_OK) {
706 DEBUG(5, ("lookupsid returned an error\n"));
707 cont(private_data, False, NULL, NULL, SID_NAME_UNKNOWN);
708 return;
709 }
710
711 cont(private_data, True, response->data.name.dom_name,
712 response->data.name.name,
713 (enum lsa_SidType)response->data.name.type);
714 }
715
716 void winbindd_lookupsid_async(TALLOC_CTX *mem_ctx, const DOM_SID *sid,
717 void (*cont)(void *private_data, BOOL success,
718 const char *dom_name,
719 const char *name,
720 enum lsa_SidType type),
721 void *private_data)
722 {
723 struct winbindd_domain *domain;
724 struct winbindd_request request;
725
726 domain = find_lookup_domain_from_sid(sid);
727 if (domain == NULL) {
728 DEBUG(5, ("Could not find domain for sid %s\n",
729 sid_string_static(sid)));
730 cont(private_data, False, NULL, NULL, SID_NAME_UNKNOWN);
731 return;
732 }
733
734 ZERO_STRUCT(request);
735 request.cmd = WINBINDD_LOOKUPSID;
736 fstrcpy(request.data.sid, sid_string_static(sid));
737
738 do_async_domain(mem_ctx, domain, &request, lookupsid_recv,
739 (void *)cont, private_data);
740 }
741
742 enum winbindd_result winbindd_dual_lookupsid(struct winbindd_domain *domain,
743 struct winbindd_cli_state *state)
744 {
745 enum lsa_SidType type;
746 DOM_SID sid;
747 char *name;
748 char *dom_name;
749
750 /* Ensure null termination */
751 state->request.data.sid[sizeof(state->request.data.sid)-1]='\0';
752
753 DEBUG(3, ("[%5lu]: lookupsid %s\n", (unsigned long)state->pid,
754 state->request.data.sid));
755
756 /* Lookup sid from PDC using lsa_lookup_sids() */
757
758 if (!string_to_sid(&sid, state->request.data.sid)) {
759 DEBUG(5, ("%s not a SID\n", state->request.data.sid));
760 return WINBINDD_ERROR;
761 }
762
763 /* Lookup the sid */
764
765 if (!winbindd_lookup_name_by_sid(state->mem_ctx, &sid, &dom_name, &name,
766 &type)) {
767 TALLOC_FREE(dom_name);
768 TALLOC_FREE(name);
769 return WINBINDD_ERROR;
770 }
771
772 fstrcpy(state->response.data.name.dom_name, dom_name);
773 fstrcpy(state->response.data.name.name, name);
774 state->response.data.name.type = type;
775
776 TALLOC_FREE(dom_name);
777 TALLOC_FREE(name);
778 return WINBINDD_OK;
779 }
780
781 /********************************************************************
782 This is the second callback after contacting the forest root
783 ********************************************************************/
784
785 struct lookupname_state {
786 char *dom_name;
787 char *name;
788 void *caller_private_data;
789 };
790
791 static void lookupname_recv2(TALLOC_CTX *mem_ctx, BOOL success,
792 struct winbindd_response *response,
793 void *c, void *private_data)
794 {
795 void (*cont)(void *priv, BOOL succ, const DOM_SID *sid,
796 enum lsa_SidType type) =
797 (void (*)(void *, BOOL, const DOM_SID *, enum lsa_SidType))c;
798 DOM_SID sid;
799 struct lookupname_state *s = talloc_get_type_abort(private_data, struct lookupname_state);
800
801 if (!success) {
802 DEBUG(5, ("Could not trigger lookup_name\n"));
803 cont(s->caller_private_data, False, NULL, SID_NAME_UNKNOWN);
804 return;
805 }
806
807 if (response->result != WINBINDD_OK) {
808 DEBUG(5, ("lookup_name returned an error\n"));
809 cont(s->caller_private_data, False, NULL, SID_NAME_UNKNOWN);
810 return;
811 }
812
813 if (!string_to_sid(&sid, response->data.sid.sid)) {
814 DEBUG(0, ("Could not convert string %s to sid\n",
815 response->data.sid.sid));
816 cont(s->caller_private_data, False, NULL, SID_NAME_UNKNOWN);
817 return;
818 }
819
820 cont(s->caller_private_data, True, &sid,
821 (enum lsa_SidType)response->data.sid.type);
822 }
823
824 /********************************************************************
825 This is the first callback after contacting our own domain
826 ********************************************************************/
827
828 static void lookupname_recv(TALLOC_CTX *mem_ctx, BOOL success,
829 struct winbindd_response *response,
830 void *c, void *private_data)
831 {
832 void (*cont)(void *priv, BOOL succ, const DOM_SID *sid,
833 enum lsa_SidType type) =
834 (void (*)(void *, BOOL, const DOM_SID *, enum lsa_SidType))c;
835 DOM_SID sid;
836 struct lookupname_state *s = talloc_get_type_abort(private_data, struct lookupname_state);
837
838 if (!success) {
839 DEBUG(5, ("lookupname_recv: lookup_name() failed!\n"));
840 cont(s->caller_private_data, False, NULL, SID_NAME_UNKNOWN);
841 return;
842 }
843
844 if (response->result != WINBINDD_OK) {
845 /* Try again using the forest root */
846 struct winbindd_domain *root_domain = find_root_domain();
847 struct winbindd_request request;
848
849 if ( !root_domain ) {
850 DEBUG(5,("lookupname_recv: unable to determine forest root\n"));
851 cont(s->caller_private_data, False, NULL, SID_NAME_UNKNOWN);
852 return;
853 }
854
855 ZERO_STRUCT(request);
856 request.cmd = WINBINDD_LOOKUPNAME;
857 fstrcpy(request.data.name.dom_name, s->dom_name);
858 fstrcpy(request.data.name.name, s->name);
859
860 do_async_domain(mem_ctx, root_domain, &request, lookupname_recv2,
861 (void *)cont, s);
862
863 return;
864 }
865
866 if (!string_to_sid(&sid, response->data.sid.sid)) {
867 DEBUG(0, ("Could not convert string %s to sid\n",
868 response->data.sid.sid));
869 cont(s->caller_private_data, False, NULL, SID_NAME_UNKNOWN);
870 return;
871 }
872
873 cont(s->caller_private_data, True, &sid,
874 (enum lsa_SidType)response->data.sid.type);
875 }
876
877 /********************************************************************
878 The lookup name call first contacts a DC in its own domain
879 and fallbacks to contact a DC in the forest in our domain doesn't
880 know the name.
881 ********************************************************************/
882
883 void winbindd_lookupname_async(TALLOC_CTX *mem_ctx,
884 const char *dom_name, const char *name,
885 void (*cont)(void *private_data, BOOL success,
886 const DOM_SID *sid,
887 enum lsa_SidType type),
888 void *private_data)
889 {
890 struct winbindd_request request;
891 struct winbindd_domain *domain;
892 struct lookupname_state *s;
893
894 if ( (domain = find_lookup_domain_from_name(dom_name)) == NULL ) {
895 DEBUG(5, ("Could not find domain for name %s\n", dom_name));
896 cont(private_data, False, NULL, SID_NAME_UNKNOWN);
897 return;
898 }
899
900 ZERO_STRUCT(request);
901 request.cmd = WINBINDD_LOOKUPNAME;
902 fstrcpy(request.data.name.dom_name, dom_name);
903 fstrcpy(request.data.name.name, name);
904
905 if ( (s = TALLOC_ZERO_P(mem_ctx, struct lookupname_state)) == NULL ) {
906 DEBUG(0, ("winbindd_lookupname_async: talloc failed\n"));
907 cont(private_data, False, NULL, SID_NAME_UNKNOWN);
908 return;
909 }
910
911 s->dom_name = talloc_strdup( s, dom_name );
912 s->name = talloc_strdup( s, name );
913 if (!s->dom_name || !s->name) {
914 cont(private_data, False, NULL, SID_NAME_UNKNOWN);
915 return;
916 }
917
918 s->caller_private_data = private_data;
919
920 do_async_domain(mem_ctx, domain, &request, lookupname_recv,
921 (void *)cont, s);
922 }
923
924 enum winbindd_result winbindd_dual_lookupname(struct winbindd_domain *domain,
925 struct winbindd_cli_state *state)
926 {
927 enum lsa_SidType type;
928 char *name_domain, *name_user;
929 DOM_SID sid;
930 char *p;
931
932 /* Ensure null termination */
933 state->request.data.name.dom_name[sizeof(state->request.data.name.dom_name)-1]='\0';
934
935 /* Ensure null termination */
936 state->request.data.name.name[sizeof(state->request.data.name.name)-1]='\0';
937
938 /* cope with the name being a fully qualified name */
939 p = strstr(state->request.data.name.name, lp_winbind_separator());
940 if (p) {
941 *p = 0;
942 name_domain = state->request.data.name.name;
943 name_user = p+1;
944 } else {
945 name_domain = state->request.data.name.dom_name;
946 name_user = state->request.data.name.name;
947 }
948
949 DEBUG(3, ("[%5lu]: lookupname %s%s%s\n", (unsigned long)state->pid,
950 name_domain, lp_winbind_separator(), name_user));
951
952 /* Lookup name from DC using lsa_lookup_names() */
953 if (!winbindd_lookup_sid_by_name(state->mem_ctx, domain, name_domain,
954 name_user, &sid, &type)) {
955 return WINBINDD_ERROR;
956 }
957
958 sid_to_string(state->response.data.sid.sid, &sid);
959 state->response.data.sid.type = type;
960
961 return WINBINDD_OK;
962 }
963
964 BOOL print_sidlist(TALLOC_CTX *mem_ctx, const DOM_SID *sids,
965 size_t num_sids, char **result, ssize_t *len)
966 {
967 size_t i;
968 size_t buflen = 0;
969
970 *len = 0;
971 *result = NULL;
972 for (i=0; i<num_sids; i++) {
973 sprintf_append(mem_ctx, result, len, &buflen,
974 "%s\n", sid_string_static(&sids[i]));
975 }
976
977 if ((num_sids != 0) && (*result == NULL)) {
978 return False;
979 }
980
981 return True;
982 }
983
984 static BOOL parse_sidlist(TALLOC_CTX *mem_ctx, char *sidstr,
985 DOM_SID **sids, size_t *num_sids)
986 {
987 char *p, *q;
988
989 p = sidstr;
990 if (p == NULL)
991 return False;
992
993 while (p[0] != '\0') {
994 DOM_SID sid;
995 q = strchr(p, '\n');
996 if (q == NULL) {
997 DEBUG(0, ("Got invalid sidstr: %s\n", p));
998 return False;
999 }
1000 *q = '\0';
1001 q += 1;
1002 if (!string_to_sid(&sid, p)) {
1003 DEBUG(0, ("Could not parse sid %s\n", p));
1004 return False;
1005 }
1006 if (!add_sid_to_array(mem_ctx, &sid, sids, num_sids)) {
1007 return False;
1008 }
1009 p = q;
1010 }
1011 return True;
1012 }
1013
1014 static BOOL parse_ridlist(TALLOC_CTX *mem_ctx, char *ridstr,
1015 uint32 **rids, size_t *num_rids)
1016 {
1017 char *p;
1018
1019 p = ridstr;
1020 if (p == NULL)
1021 return False;
1022
1023 while (p[0] != '\0') {
1024 uint32 rid;
1025 char *q;
1026 rid = strtoul(p, &q, 10);
1027 if (*q != '\n') {
1028 DEBUG(0, ("Got invalid ridstr: %s\n", p));
1029 return False;
1030 }
1031 p = q+1;
1032 ADD_TO_ARRAY(mem_ctx, uint32, rid, rids, num_rids);
1033 }
1034 return True;
1035 }
1036
1037 enum winbindd_result winbindd_dual_lookuprids(struct winbindd_domain *domain,
1038 struct winbindd_cli_state *state)
1039 {
1040 uint32 *rids = NULL;
1041 size_t i, buflen, num_rids = 0;
1042 ssize_t len;
1043 DOM_SID domain_sid;
1044 char *domain_name;
1045 char **names;
1046 enum lsa_SidType *types;
1047 NTSTATUS status;
1048 char *result;
1049
1050 DEBUG(10, ("Looking up RIDs for domain %s (%s)\n",
1051 state->request.domain_name,
1052 state->request.data.sid));
1053
1054 if (!parse_ridlist(state->mem_ctx, state->request.extra_data.data,
1055 &rids, &num_rids)) {
1056 DEBUG(5, ("Could not parse ridlist\n"));
1057 return WINBINDD_ERROR;
1058 }
1059
1060 if (!string_to_sid(&domain_sid, state->request.data.sid)) {
1061 DEBUG(5, ("Could not parse domain sid %s\n",
1062 state->request.data.sid));
1063 return WINBINDD_ERROR;
1064 }
1065
1066 status = domain->methods->rids_to_names(domain, state->mem_ctx,
1067 &domain_sid, rids, num_rids,
1068 &domain_name,
1069 &names, &types);
1070
1071 if (!NT_STATUS_IS_OK(status) &&
1072 !NT_STATUS_EQUAL(status, STATUS_SOME_UNMAPPED)) {
1073 return WINBINDD_ERROR;
1074 }
1075
1076 len = 0;
1077 buflen = 0;
1078 result = NULL;
1079
1080 for (i=0; i<num_rids; i++) {
1081 sprintf_append(state->mem_ctx, &result, &len, &buflen,
1082 "%d %s\n", types[i], names[i]);
1083 }
1084
1085 fstrcpy(state->response.data.domain_name, domain_name);
1086
1087 if (result != NULL) {
1088 state->response.extra_data.data = SMB_STRDUP(result);
1089 if (!state->response.extra_data.data) {
1090 return WINBINDD_ERROR;
1091 }
1092 state->response.length += len+1;
1093 }
1094
1095 return WINBINDD_OK;
1096 }
1097
1098 static void getsidaliases_recv(TALLOC_CTX *mem_ctx, BOOL success,
1099 struct winbindd_response *response,
1100 void *c, void *private_data)
1101 {
1102 void (*cont)(void *priv, BOOL succ,
1103 DOM_SID *aliases, size_t num_aliases) =
1104 (void (*)(void *, BOOL, DOM_SID *, size_t))c;
1105 char *aliases_str;
1106 DOM_SID *sids = NULL;
1107 size_t num_sids = 0;
1108
1109 if (!success) {
1110 DEBUG(5, ("Could not trigger getsidaliases\n"));
1111 cont(private_data, success, NULL, 0);
1112 return;
1113 }
1114
1115 if (response->result != WINBINDD_OK) {
1116 DEBUG(5, ("getsidaliases returned an error\n"));
1117 cont(private_data, False, NULL, 0);
1118 return;
1119 }
1120
1121 aliases_str = (char *)response->extra_data.data;
1122
1123 if (aliases_str == NULL) {
1124 DEBUG(10, ("getsidaliases return 0 SIDs\n"));
1125 cont(private_data, True, NULL, 0);
1126 return;
1127 }
1128
1129 if (!parse_sidlist(mem_ctx, aliases_str, &sids, &num_sids)) {
1130 DEBUG(0, ("Could not parse sids\n"));
1131 cont(private_data, False, NULL, 0);
1132 return;
1133 }
1134
1135 SAFE_FREE(response->extra_data.data);
1136
1137 cont(private_data, True, sids, num_sids);
1138 }
1139
1140 void winbindd_getsidaliases_async(struct winbindd_domain *domain,
1141 TALLOC_CTX *mem_ctx,
1142 const DOM_SID *sids, size_t num_sids,
1143 void (*cont)(void *private_data,
1144 BOOL success,
1145 const DOM_SID *aliases,
1146 size_t num_aliases),
1147 void *private_data)
1148 {
1149 struct winbindd_request request;
1150 char *sidstr = NULL;
1151 ssize_t len;
1152
1153 if (num_sids == 0) {
1154 cont(private_data, True, NULL, 0);
1155 return;
1156 }
1157
1158 if (!print_sidlist(mem_ctx, sids, num_sids, &sidstr, &len)) {
1159 cont(private_data, False, NULL, 0);
1160 return;
1161 }
1162
1163 ZERO_STRUCT(request);
1164 request.cmd = WINBINDD_DUAL_GETSIDALIASES;
1165 request.extra_len = len;
1166 request.extra_data.data = sidstr;
1167
1168 do_async_domain(mem_ctx, domain, &request, getsidaliases_recv,
1169 (void *)cont, private_data);
1170 }
1171
1172 enum winbindd_result winbindd_dual_getsidaliases(struct winbindd_domain *domain,
1173 struct winbindd_cli_state *state)
1174 {
1175 DOM_SID *sids = NULL;
1176 size_t num_sids = 0;
1177 char *sidstr = NULL;
1178 ssize_t len;
1179 size_t i;
1180 uint32 num_aliases;
1181 uint32 *alias_rids;
1182 NTSTATUS result;
1183
1184 DEBUG(3, ("[%5lu]: getsidaliases\n", (unsigned long)state->pid));
1185
1186 sidstr = state->request.extra_data.data;
1187 if (sidstr == NULL) {
1188 sidstr = talloc_strdup(state->mem_ctx, "\n"); /* No SID */
1189 if (!sidstr) {
1190 DEBUG(0, ("Out of memory\n"));
1191 return WINBINDD_ERROR;
1192 }
1193 }
1194
1195 DEBUG(10, ("Sidlist: %s\n", sidstr));
1196
1197 if (!parse_sidlist(state->mem_ctx, sidstr, &sids, &num_sids)) {
1198 DEBUG(0, ("Could not parse SID list: %s\n", sidstr));
1199 return WINBINDD_ERROR;
1200 }
1201
1202 num_aliases = 0;
1203 alias_rids = NULL;
1204
1205 result = domain->methods->lookup_useraliases(domain,
1206 state->mem_ctx,
1207 num_sids, sids,
1208 &num_aliases,
1209 &alias_rids);
1210
1211 if (!NT_STATUS_IS_OK(result)) {
1212 DEBUG(3, ("Could not lookup_useraliases: %s\n",
1213 nt_errstr(result)));
1214 return WINBINDD_ERROR;
1215 }
1216
1217 num_sids = 0;
1218 sids = NULL;
1219 sidstr = NULL;
1220
1221 DEBUG(10, ("Got %d aliases\n", num_aliases));
1222
1223 for (i=0; i<num_aliases; i++) {
1224 DOM_SID sid;
1225 DEBUGADD(10, (" rid %d\n", alias_rids[i]));
1226 sid_copy(&sid, &domain->sid);
1227 sid_append_rid(&sid, alias_rids[i]);
1228 if (!add_sid_to_array(state->mem_ctx, &sid, &sids, &num_sids)) {
1229 return WINBINDD_ERROR;
1230 }
1231 }
1232
1233
1234 if (!print_sidlist(state->mem_ctx, sids, num_sids, &sidstr, &len)) {
1235 DEBUG(0, ("Could not print_sidlist\n"));
1236 state->response.extra_data.data = NULL;
1237 return WINBINDD_ERROR;
1238 }
1239
1240 state->response.extra_data.data = NULL;
1241
1242 if (sidstr) {
1243 state->response.extra_data.data = SMB_STRDUP(sidstr);
1244 if (!state->response.extra_data.data) {
1245 DEBUG(0, ("Out of memory\n"));
1246 return WINBINDD_ERROR;
1247 }
1248 DEBUG(10, ("aliases_list: %s\n",
1249 (char *)state->response.extra_data.data));
1250 state->response.length += len+1;
1251 }
1252
1253 return WINBINDD_OK;
1254 }
1255
1256 struct gettoken_state {
1257 TALLOC_CTX *mem_ctx;
1258 DOM_SID user_sid;
1259 struct winbindd_domain *alias_domain;
1260 struct winbindd_domain *local_alias_domain;
1261 struct winbindd_domain *builtin_domain;
1262 DOM_SID *sids;
1263 size_t num_sids;
1264 void (*cont)(void *private_data, BOOL success, DOM_SID *sids, size_t num_sids);
1265 void *private_data;
1266 };
1267
1268 static void gettoken_recvdomgroups(TALLOC_CTX *mem_ctx, BOOL success,
1269 struct winbindd_response *response,
1270 void *c, void *private_data);
1271 static void gettoken_recvaliases(void *private_data, BOOL success,
1272 const DOM_SID *aliases,
1273 size_t num_aliases);
1274
1275
1276 void winbindd_gettoken_async(TALLOC_CTX *mem_ctx, const DOM_SID *user_sid,
1277 void (*cont)(void *private_data, BOOL success,
1278 DOM_SID *sids, size_t num_sids),
1279 void *private_data)
1280 {
1281 struct winbindd_domain *domain;
1282 struct winbindd_request request;
1283 struct gettoken_state *state;
1284
1285 state = TALLOC_ZERO_P(mem_ctx, struct gettoken_state);
1286 if (state == NULL) {
1287 DEBUG(0, ("talloc failed\n"));
1288 cont(private_data, False, NULL, 0);
1289 return;
1290 }
1291
1292 state->mem_ctx = mem_ctx;
1293 sid_copy(&state->user_sid, user_sid);
1294 state->alias_domain = find_our_domain();
1295 state->local_alias_domain = find_domain_from_name( get_global_sam_name() );
1296 state->builtin_domain = find_builtin_domain();
1297 state->cont = cont;
1298 state->private_data = private_data;
1299
1300 domain = find_domain_from_sid_noinit(user_sid);
1301 if (domain == NULL) {
1302 DEBUG(5, ("Could not find domain from SID %s\n",
1303 sid_string_static(user_sid)));
1304 cont(private_data, False, NULL, 0);
1305 return;
1306 }
1307
1308 ZERO_STRUCT(request);
1309 request.cmd = WINBINDD_GETUSERDOMGROUPS;
1310 fstrcpy(request.data.sid, sid_string_static(user_sid));
1311
1312 do_async_domain(mem_ctx, domain, &request, gettoken_recvdomgroups,
1313 NULL, state);
1314 }
1315
1316 static void gettoken_recvdomgroups(TALLOC_CTX *mem_ctx, BOOL success,
1317 struct winbindd_response *response,
1318 void *c, void *private_data)
1319 {
1320 struct gettoken_state *state =
1321 talloc_get_type_abort(private_data, struct gettoken_state);
1322 char *sids_str;
1323
1324 if (!success) {
1325 DEBUG(10, ("Could not get domain groups\n"));
1326 state->cont(state->private_data, False, NULL, 0);
1327 return;
1328 }
1329
1330 sids_str = (char *)response->extra_data.data;
1331
1332 if (sids_str == NULL) {
1333 /* This could be normal if we are dealing with a
1334 local user and local groups */
1335
1336 if ( !sid_check_is_in_our_domain( &state->user_sid ) ) {
1337 DEBUG(10, ("Received no domain groups\n"));
1338 state->cont(state->private_data, True, NULL, 0);
1339 return;
1340 }
1341 }
1342
1343 state->sids = NULL;
1344 state->num_sids = 0;
1345
1346 if (!add_sid_to_array(mem_ctx, &state->user_sid, &state->sids,
1347 &state->num_sids)) {
1348 DEBUG(0, ("Out of memory\n"));
1349 state->cont(state->private_data, False, NULL, 0);
1350 return;
1351 }
1352
1353 if (sids_str && !parse_sidlist(mem_ctx, sids_str, &state->sids,
1354 &state->num_sids)) {
1355 DEBUG(0, ("Could not parse sids\n"));
1356 state->cont(state->private_data, False, NULL, 0);
1357 return;
1358 }
1359
1360 SAFE_FREE(response->extra_data.data);
1361
1362 if (state->alias_domain == NULL) {
1363 DEBUG(10, ("Don't expand domain local groups\n"));
1364 state->cont(state->private_data, True, state->sids,
1365 state->num_sids);
1366 return;
1367 }
1368
1369 winbindd_getsidaliases_async(state->alias_domain, mem_ctx,
1370 state->sids, state->num_sids,
1371 gettoken_recvaliases, state);
1372 }
1373
1374 static void gettoken_recvaliases(void *private_data, BOOL success,
1375 const DOM_SID *aliases,
1376 size_t num_aliases)
1377 {
1378 struct gettoken_state *state = (struct gettoken_state *)private_data;
1379 size_t i;
1380
1381 if (!success) {
1382 DEBUG(10, ("Could not receive domain local groups\n"));
1383 state->cont(state->private_data, False, NULL, 0);
1384 return;
1385 }
1386
1387 for (i=0; i<num_aliases; i++) {
1388 if (!add_sid_to_array(state->mem_ctx, &aliases[i],
1389 &state->sids, &state->num_sids)) {
1390 DEBUG(0, ("Out of memory\n"));
1391 state->cont(state->private_data, False, NULL, 0);
1392 return;
1393 }
1394 }
1395
1396 if (state->local_alias_domain != NULL) {
1397 struct winbindd_domain *local_domain = state->local_alias_domain;
1398 DEBUG(10, ("Expanding our own local groups\n"));
1399 state->local_alias_domain = NULL;
1400 winbindd_getsidaliases_async(local_domain, state->mem_ctx,
1401 state->sids, state->num_sids,
1402 gettoken_recvaliases, state);
1403 return;
1404 }
1405
1406 if (state->builtin_domain != NULL) {
1407 struct winbindd_domain *builtin_domain = state->builtin_domain;
1408 DEBUG(10, ("Expanding our own BUILTIN groups\n"));
1409 state->builtin_domain = NULL;
1410 winbindd_getsidaliases_async(builtin_domain, state->mem_ctx,
1411 state->sids, state->num_sids,
1412 gettoken_recvaliases, state);
1413 return;
1414 }
1415
1416 state->cont(state->private_data, True, state->sids, state->num_sids);
1417 }
1418
1419 static void query_user_recv(TALLOC_CTX *mem_ctx, BOOL success,
1420 struct winbindd_response *response,
1421 void *c, void *private_data)
1422 {
1423 void (*cont)(void *priv, BOOL succ, const char *acct_name,
1424 const char *full_name, const char *homedir,
1425 const char *shell, uint32 gid, uint32 group_rid) =
1426 (void (*)(void *, BOOL, const char *, const char *,
1427 const char *, const char *, uint32, uint32))c;
1428
1429 if (!success) {
1430 DEBUG(5, ("Could not trigger query_user\n"));
1431 cont(private_data, False, NULL, NULL, NULL, NULL, -1, -1);
1432 return;
1433 }
1434
1435 if (response->result != WINBINDD_OK) {
1436 DEBUG(5, ("query_user returned an error\n"));
1437 cont(private_data, False, NULL, NULL, NULL, NULL, -1, -1);
1438 return;
1439 }
1440
1441 cont(private_data, True, response->data.user_info.acct_name,
1442 response->data.user_info.full_name,
1443 response->data.user_info.homedir,
1444 response->data.user_info.shell,
1445 response->data.user_info.primary_gid,
1446 response->data.user_info.group_rid);
1447 }
1448
1449 void query_user_async(TALLOC_CTX *mem_ctx, struct winbindd_domain *domain,
1450 const DOM_SID *sid,
1451 void (*cont)(void *private_data, BOOL success,
1452 const char *acct_name,
1453 const char *full_name,
1454 const char *homedir,
1455 const char *shell,
1456 gid_t gid,
1457 uint32 group_rid),
1458 void *private_data)
1459 {
1460 struct winbindd_request request;
1461 ZERO_STRUCT(request);
1462 request.cmd = WINBINDD_DUAL_USERINFO;
1463 sid_to_string(request.data.sid, sid);
1464 do_async_domain(mem_ctx, domain, &request, query_user_recv,
1465 (void *)cont, private_data);
1466 }
1467
1468 /* The following uid2sid/gid2sid functions has been contributed by
1469 * Keith Reynolds <Keith.Reynolds@centrify.com> */
1470
1471 static void winbindd_uid2sid_recv(TALLOC_CTX *mem_ctx, BOOL success,
1472 struct winbindd_response *response,
1473 void *c, void *private_data)
1474 {
1475 void (*cont)(void *priv, BOOL succ, const char *sid) =
1476 (void (*)(void *, BOOL, const char *))c;
1477
1478 if (!success) {
1479 DEBUG(5, ("Could not trigger uid2sid\n"));
1480 cont(private_data, False, NULL);
1481 return;
1482 }
1483
1484 if (response->result != WINBINDD_OK) {
1485 DEBUG(5, ("uid2sid returned an error\n"));
1486 cont(private_data, False, NULL);
1487 return;
1488 }
1489
1490 cont(private_data, True, response->data.sid.sid);
1491 }
1492
1493 void winbindd_uid2sid_async(TALLOC_CTX *mem_ctx, uid_t uid,
1494 void (*cont)(void *private_data, BOOL success, const char *sid),
1495 void *private_data)
1496 {
1497 struct winbindd_request request;
1498
1499 ZERO_STRUCT(request);
1500 request.cmd = WINBINDD_DUAL_UID2SID;
1501 request.data.uid = uid;
1502 do_async(mem_ctx, idmap_child(), &request, winbindd_uid2sid_recv,
1503 (void *)cont, private_data);
1504 }
1505
1506 enum winbindd_result winbindd_dual_uid2sid(struct winbindd_domain *domain,
1507 struct winbindd_cli_state *state)
1508 {
1509 DOM_SID sid;
1510 NTSTATUS result;
1511
1512 DEBUG(3,("[%5lu]: uid to sid %lu\n",
1513 (unsigned long)state->pid,
1514 (unsigned long) state->request.data.uid));
1515
1516 /* Find sid for this uid and return it, possibly ask the slow remote idmap */
1517 result = idmap_uid_to_sid(&sid, state->request.data.uid);
1518
1519 if (NT_STATUS_IS_OK(result)) {
1520 sid_to_string(state->response.data.sid.sid, &sid);
1521 state->response.data.sid.type = SID_NAME_USER;
1522 return WINBINDD_OK;
1523 }
1524
1525 return WINBINDD_ERROR;
1526 }
1527
1528 static void winbindd_gid2sid_recv(TALLOC_CTX *mem_ctx, BOOL success,
1529 struct winbindd_response *response,
1530 void *c, void *private_data)
1531 {
1532 void (*cont)(void *priv, BOOL succ, const char *sid) =
1533 (void (*)(void *, BOOL, const char *))c;
1534
1535 if (!success) {
1536 DEBUG(5, ("Could not trigger gid2sid\n"));
1537 cont(private_data, False, NULL);
1538 return;
1539 }
1540
1541 if (response->result != WINBINDD_OK) {
1542 DEBUG(5, ("gid2sid returned an error\n"));
1543 cont(private_data, False, NULL);
1544 return;
1545 }
1546
1547 cont(private_data, True, response->data.sid.sid);
1548 }
1549
1550 void winbindd_gid2sid_async(TALLOC_CTX *mem_ctx, gid_t gid,
1551 void (*cont)(void *private_data, BOOL success, const char *sid),
1552 void *private_data)
1553 {
1554 struct winbindd_request request;
1555
1556 ZERO_STRUCT(request);
1557 request.cmd = WINBINDD_DUAL_GID2SID;
1558 request.data.gid = gid;
1559 do_async(mem_ctx, idmap_child(), &request, winbindd_gid2sid_recv,
1560 (void *)cont, private_data);
1561 }
1562
1563 enum winbindd_result winbindd_dual_gid2sid(struct winbindd_domain *domain,
1564 struct winbindd_cli_state *state)
1565 {
1566 DOM_SID sid;
1567 NTSTATUS result;
1568
1569 DEBUG(3,("[%5lu]: gid %lu to sid\n",
1570 (unsigned long)state->pid,
1571 (unsigned long) state->request.data.gid));
1572
1573 /* Find sid for this gid and return it, possibly ask the slow remote idmap */
1574 result = idmap_gid_to_sid(&sid, state->request.data.gid);
1575
1576 if (NT_STATUS_IS_OK(result)) {
1577 sid_to_string(state->response.data.sid.sid, &sid);
1578 DEBUG(10, ("[%5lu]: retrieved sid: %s\n",
1579 (unsigned long)state->pid,
1580 state->response.data.sid.sid));
1581 state->response.data.sid.type = SID_NAME_DOM_GRP;
1582 return WINBINDD_OK;
1583 }
1584
1585 return WINBINDD_ERROR;
1586 }
1587
1588 static void winbindd_dump_id_maps_recv(TALLOC_CTX *mem_ctx, BOOL success,
1589 struct winbindd_response *response,
1590 void *c, void *private_data)
1591 {
1592 void (*cont)(void *priv, BOOL succ) =
1593 (void (*)(void *, BOOL))c;
1594
1595 if (!success) {
1596 DEBUG(5, ("Could not trigger a map dump\n"));
1597 cont(private_data, False);
1598 return;
1599 }
1600
1601 if (response->result != WINBINDD_OK) {
1602 DEBUG(5, ("idmap dump maps returned an error\n"));
1603 cont(private_data, False);
1604 return;
1605 }
1606
1607 cont(private_data, True);
1608 }
1609
1610 void winbindd_dump_maps_async(TALLOC_CTX *mem_ctx, void *data, int size,
1611 void (*cont)(void *private_data, BOOL success),
1612 void *private_data)
1613 {
1614 struct winbindd_request request;
1615 ZERO_STRUCT(request);
1616 request.cmd = WINBINDD_DUAL_DUMP_MAPS;
1617 request.extra_data.data = (char *)data;
1618 request.extra_len = size;
1619 do_async(mem_ctx, idmap_child(), &request, winbindd_dump_id_maps_recv,
1620 (void *)cont, private_data);
1621 }
1622
1623 enum winbindd_result winbindd_dual_dump_maps(struct winbindd_domain *domain,
1624 struct winbindd_cli_state *state)
1625 {
1626 DEBUG(3, ("[%5lu]: dual dump maps\n", (unsigned long)state->pid));
1627
1628 idmap_dump_maps((char *)state->request.extra_data.data);
1629
1630 return WINBINDD_OK;
1631 }
1632
Samba GIT mirror