2 Unix SMB/CIFS implementation.
4 idmap TDB2 backend, used for clustered Samba setups.
6 This uses dbwrap to access tdb files. The location can be set
7 using tdb:idmap2.tdb =" in smb.conf
9 Copyright (C) Andrew Tridgell 2007
11 This is heavily based upon idmap_tdb.c, which is:
13 Copyright (C) Tim Potter 2000
14 Copyright (C) Jim McDonough <jmcd@us.ibm.com> 2003
15 Copyright (C) Jeremy Allison 2006
16 Copyright (C) Simo Sorce 2003-2006
17 Copyright (C) Michael Adam 2009-2010
19 This program is free software; you can redistribute it and/or modify
20 it under the terms of the GNU General Public License as published by
21 the Free Software Foundation; either version 2 of the License, or
22 (at your option) any later version.
24 This program is distributed in the hope that it will be useful,
25 but WITHOUT ANY WARRANTY; without even the implied warranty of
26 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
27 GNU General Public License for more details.
29 You should have received a copy of the GNU General Public License
30 along with this program; if not, write to the Free Software
31 Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
35 #include "system/filesys.h"
39 #include "dbwrap/dbwrap.h"
40 #include "dbwrap/dbwrap_open.h"
41 #include "../libcli/security/dom_sid.h"
45 #define DBGC_CLASS DBGC_IDMAP
47 struct idmap_tdb2_context
{
48 struct db_context
*db
;
49 const char *script
; /* script to provide idmaps */
50 struct idmap_rw_ops
*rw_ops
;
53 /* High water mark keys */
54 #define HWM_GROUP "GROUP HWM"
55 #define HWM_USER "USER HWM"
59 * check and initialize high/low water marks in the db
61 static NTSTATUS
idmap_tdb2_init_hwm(struct idmap_domain
*dom
)
65 struct idmap_tdb2_context
*ctx
;
67 ctx
= talloc_get_type(dom
->private_data
, struct idmap_tdb2_context
);
69 /* Create high water marks for group and user id */
71 status
= dbwrap_fetch_uint32(ctx
->db
, HWM_USER
, &low_id
);
72 if (!NT_STATUS_IS_OK(status
) || (low_id
< dom
->low_id
)) {
73 status
= dbwrap_trans_store_uint32(ctx
->db
, HWM_USER
,
75 if (!NT_STATUS_IS_OK(status
)) {
76 DEBUG(0, ("Unable to initialise user hwm in idmap "
77 "database: %s\n", nt_errstr(status
)));
78 return NT_STATUS_INTERNAL_DB_ERROR
;
82 status
= dbwrap_fetch_uint32(ctx
->db
, HWM_GROUP
, &low_id
);
83 if (!NT_STATUS_IS_OK(status
) || (low_id
< dom
->low_id
)) {
84 status
= dbwrap_trans_store_uint32(ctx
->db
, HWM_GROUP
,
86 if (!NT_STATUS_IS_OK(status
)) {
87 DEBUG(0, ("Unable to initialise group hwm in idmap "
88 "database: %s\n", nt_errstr(status
)));
89 return NT_STATUS_INTERNAL_DB_ERROR
;
98 open the permanent tdb
100 static NTSTATUS
idmap_tdb2_open_db(struct idmap_domain
*dom
)
103 struct idmap_tdb2_context
*ctx
;
105 ctx
= talloc_get_type(dom
->private_data
, struct idmap_tdb2_context
);
108 /* its already open */
112 db_path
= talloc_asprintf(NULL
, "%s/idmap2.tdb", lp_private_dir());
113 NT_STATUS_HAVE_NO_MEMORY(db_path
);
115 /* Open idmap repository */
116 ctx
->db
= db_open(ctx
, db_path
, 0, TDB_DEFAULT
, O_RDWR
|O_CREAT
, 0644,
117 DBWRAP_LOCK_ORDER_1
);
118 TALLOC_FREE(db_path
);
120 if (ctx
->db
== NULL
) {
121 DEBUG(0, ("Unable to open idmap_tdb2 database '%s'\n",
123 return NT_STATUS_UNSUCCESSFUL
;
126 return idmap_tdb2_init_hwm(dom
);
134 struct idmap_tdb2_allocate_id_context
{
141 static NTSTATUS
idmap_tdb2_allocate_id_action(struct db_context
*db
,
145 struct idmap_tdb2_allocate_id_context
*state
;
148 state
= (struct idmap_tdb2_allocate_id_context
*)private_data
;
150 ret
= dbwrap_fetch_uint32(db
, state
->hwmkey
, &hwm
);
151 if (!NT_STATUS_IS_OK(ret
)) {
152 ret
= NT_STATUS_INTERNAL_DB_ERROR
;
156 /* check it is in the range */
157 if (hwm
> state
->high_hwm
) {
158 DEBUG(1, ("Fatal Error: %s range full!! (max: %lu)\n",
159 state
->hwmtype
, (unsigned long)state
->high_hwm
));
160 ret
= NT_STATUS_UNSUCCESSFUL
;
164 /* fetch a new id and increment it */
165 ret
= dbwrap_trans_change_uint32_atomic(db
, state
->hwmkey
, &hwm
, 1);
166 if (!NT_STATUS_IS_OK(ret
)) {
167 DEBUG(1, ("Fatal error while fetching a new %s value\n!",
172 /* recheck it is in the range */
173 if (hwm
> state
->high_hwm
) {
174 DEBUG(1, ("Fatal Error: %s range full!! (max: %lu)\n",
175 state
->hwmtype
, (unsigned long)state
->high_hwm
));
176 ret
= NT_STATUS_UNSUCCESSFUL
;
187 static NTSTATUS
idmap_tdb2_allocate_id(struct idmap_domain
*dom
,
195 struct idmap_tdb2_allocate_id_context state
;
196 struct idmap_tdb2_context
*ctx
;
198 status
= idmap_tdb2_open_db(dom
);
199 NT_STATUS_NOT_OK_RETURN(status
);
201 ctx
= talloc_get_type(dom
->private_data
, struct idmap_tdb2_context
);
203 /* Get current high water mark */
217 DEBUG(2, ("Invalid ID type (0x%x)\n", xid
->type
));
218 return NT_STATUS_INVALID_PARAMETER
;
221 high_hwm
= dom
->high_id
;
224 state
.high_hwm
= high_hwm
;
225 state
.hwmtype
= hwmtype
;
226 state
.hwmkey
= hwmkey
;
228 status
= dbwrap_trans_do(ctx
->db
, idmap_tdb2_allocate_id_action
,
231 if (NT_STATUS_IS_OK(status
)) {
233 DEBUG(10,("New %s = %d\n", hwmtype
, state
.hwm
));
235 DEBUG(1, ("Error allocating a new %s\n", hwmtype
));
242 * Allocate a new unix-ID.
243 * For now this is for the default idmap domain only.
244 * Should be extended later on.
246 static NTSTATUS
idmap_tdb2_get_new_id(struct idmap_domain
*dom
,
251 if (!strequal(dom
->name
, "*")) {
252 DEBUG(3, ("idmap_tdb2_get_new_id: "
253 "Refusing creation of mapping for domain'%s'. "
254 "Currently only supported for the default "
257 return NT_STATUS_NOT_IMPLEMENTED
;
260 ret
= idmap_tdb2_allocate_id(dom
, id
);
266 IDMAP MAPPING TDB BACKEND
269 static NTSTATUS
idmap_tdb2_set_mapping(struct idmap_domain
*dom
,
270 const struct id_map
*map
);
273 Initialise idmap database.
275 static NTSTATUS
idmap_tdb2_db_init(struct idmap_domain
*dom
)
278 struct idmap_tdb2_context
*ctx
;
279 char *config_option
= NULL
;
280 const char * idmap_script
= NULL
;
282 ctx
= talloc_zero(dom
, struct idmap_tdb2_context
);
284 DEBUG(0, ("Out of memory!\n"));
285 return NT_STATUS_NO_MEMORY
;
288 config_option
= talloc_asprintf(ctx
, "idmap config %s", dom
->name
);
289 if (config_option
== NULL
) {
290 DEBUG(0, ("Out of memory!\n"));
291 ret
= NT_STATUS_NO_MEMORY
;
294 ctx
->script
= lp_parm_const_string(-1, config_option
, "script", NULL
);
295 talloc_free(config_option
);
297 idmap_script
= lp_parm_const_string(-1, "idmap", "script", NULL
);
298 if (idmap_script
!= NULL
) {
299 DEBUG(0, ("Warning: 'idmap:script' is deprecated. "
300 " Please use 'idmap config * : script' instead!\n"));
303 if (strequal(dom
->name
, "*") && ctx
->script
== NULL
) {
304 /* fall back to idmap:script for backwards compatibility */
305 ctx
->script
= idmap_script
;
309 DEBUG(1, ("using idmap script '%s'\n", ctx
->script
));
312 ctx
->rw_ops
= talloc_zero(ctx
, struct idmap_rw_ops
);
313 if (ctx
->rw_ops
== NULL
) {
314 DEBUG(0, ("Out of memory!\n"));
315 ret
= NT_STATUS_NO_MEMORY
;
319 ctx
->rw_ops
->get_new_id
= idmap_tdb2_get_new_id
;
320 ctx
->rw_ops
->set_mapping
= idmap_tdb2_set_mapping
;
322 dom
->private_data
= ctx
;
324 ret
= idmap_tdb2_open_db(dom
);
325 if (!NT_STATUS_IS_OK(ret
)) {
338 * store a mapping in the database.
341 struct idmap_tdb2_set_mapping_context
{
346 static NTSTATUS
idmap_tdb2_set_mapping_action(struct db_context
*db
,
351 struct idmap_tdb2_set_mapping_context
*state
;
352 TALLOC_CTX
*tmp_ctx
= talloc_stackframe();
354 state
= (struct idmap_tdb2_set_mapping_context
*)private_data
;
356 DEBUG(10, ("Storing %s <-> %s map\n", state
->ksidstr
, state
->kidstr
));
358 /* check wheter sid mapping is already present in db */
359 ret
= dbwrap_fetch_bystring(db
, tmp_ctx
, state
->ksidstr
, &data
);
360 if (!NT_STATUS_IS_OK(ret
)) {
361 ret
= NT_STATUS_OBJECT_NAME_COLLISION
;
365 ret
= dbwrap_store_bystring(db
, state
->ksidstr
,
366 string_term_tdb_data(state
->kidstr
),
368 if (!NT_STATUS_IS_OK(ret
)) {
369 DEBUG(0, ("Error storing SID -> ID: %s\n", nt_errstr(ret
)));
373 ret
= dbwrap_store_bystring(db
, state
->kidstr
,
374 string_term_tdb_data(state
->ksidstr
),
376 if (!NT_STATUS_IS_OK(ret
)) {
377 DEBUG(0, ("Error storing ID -> SID: %s\n", nt_errstr(ret
)));
378 /* try to remove the previous stored SID -> ID map */
379 dbwrap_delete_bystring(db
, state
->ksidstr
);
383 DEBUG(10,("Stored %s <-> %s\n", state
->ksidstr
, state
->kidstr
));
386 talloc_free(tmp_ctx
);
390 static NTSTATUS
idmap_tdb2_set_mapping(struct idmap_domain
*dom
, const struct id_map
*map
)
392 struct idmap_tdb2_context
*ctx
;
394 char *ksidstr
, *kidstr
;
395 struct idmap_tdb2_set_mapping_context state
;
397 if (!map
|| !map
->sid
) {
398 return NT_STATUS_INVALID_PARAMETER
;
401 ksidstr
= kidstr
= NULL
;
403 /* TODO: should we filter a set_mapping using low/high filters ? */
405 ctx
= talloc_get_type(dom
->private_data
, struct idmap_tdb2_context
);
407 switch (map
->xid
.type
) {
410 kidstr
= talloc_asprintf(ctx
, "UID %lu", (unsigned long)map
->xid
.id
);
414 kidstr
= talloc_asprintf(ctx
, "GID %lu", (unsigned long)map
->xid
.id
);
418 DEBUG(2, ("INVALID unix ID type: 0x02%x\n", map
->xid
.type
));
419 return NT_STATUS_INVALID_PARAMETER
;
422 if (kidstr
== NULL
) {
423 DEBUG(0, ("ERROR: Out of memory!\n"));
424 ret
= NT_STATUS_NO_MEMORY
;
428 ksidstr
= sid_string_talloc(ctx
, map
->sid
);
429 if (ksidstr
== NULL
) {
430 DEBUG(0, ("Out of memory!\n"));
431 ret
= NT_STATUS_NO_MEMORY
;
435 state
.ksidstr
= ksidstr
;
436 state
.kidstr
= kidstr
;
438 ret
= dbwrap_trans_do(ctx
->db
, idmap_tdb2_set_mapping_action
,
442 talloc_free(ksidstr
);
448 * Create a new mapping for an unmapped SID, also allocating a new ID.
449 * This should be run inside a transaction.
452 * Properly integrate this with multi domain idmap config:
453 * Currently, the allocator is default-config only.
455 static NTSTATUS
idmap_tdb2_new_mapping(struct idmap_domain
*dom
, struct id_map
*map
)
458 struct idmap_tdb2_context
*ctx
;
460 ctx
= talloc_get_type(dom
->private_data
, struct idmap_tdb2_context
);
462 ret
= idmap_rw_new_mapping(dom
, ctx
->rw_ops
, map
);
469 run a script to perform a mapping
471 The script should the following command lines:
477 and should return one of the following as a single line of text
483 static NTSTATUS
idmap_tdb2_script(struct idmap_tdb2_context
*ctx
, struct id_map
*map
,
484 const char *fmt
, ...)
492 cmd
= talloc_asprintf(ctx
, "%s ", ctx
->script
);
493 NT_STATUS_HAVE_NO_MEMORY(cmd
);
496 cmd
= talloc_vasprintf_append(cmd
, fmt
, ap
);
498 NT_STATUS_HAVE_NO_MEMORY(cmd
);
503 return NT_STATUS_NONE_MAPPED
;
506 if (fgets(line
, sizeof(line
)-1, p
) == NULL
) {
508 return NT_STATUS_NONE_MAPPED
;
512 DEBUG(10,("idmap script gave: %s\n", line
));
514 if (sscanf(line
, "UID:%lu", &v
) == 1) {
516 map
->xid
.type
= ID_TYPE_UID
;
517 } else if (sscanf(line
, "GID:%lu", &v
) == 1) {
519 map
->xid
.type
= ID_TYPE_GID
;
520 } else if (strncmp(line
, "SID:S-", 6) == 0) {
521 if (!string_to_sid(map
->sid
, &line
[4])) {
522 DEBUG(0,("Bad SID in '%s' from idmap script %s\n",
524 return NT_STATUS_NONE_MAPPED
;
527 DEBUG(0,("Bad reply '%s' from idmap script %s\n",
529 return NT_STATUS_NONE_MAPPED
;
538 Single id to sid lookup function.
540 static NTSTATUS
idmap_tdb2_id_to_sid(struct idmap_domain
*dom
, struct id_map
*map
)
546 struct idmap_tdb2_context
*ctx
;
550 return NT_STATUS_INVALID_PARAMETER
;
553 status
= idmap_tdb2_open_db(dom
);
554 NT_STATUS_NOT_OK_RETURN(status
);
556 ctx
= talloc_get_type(dom
->private_data
, struct idmap_tdb2_context
);
558 /* apply filters before checking */
559 if (!idmap_unix_id_is_in_range(map
->xid
.id
, dom
)) {
560 DEBUG(5, ("Requested id (%u) out of range (%u - %u). Filtered!\n",
561 map
->xid
.id
, dom
->low_id
, dom
->high_id
));
562 return NT_STATUS_NONE_MAPPED
;
565 switch (map
->xid
.type
) {
568 keystr
= talloc_asprintf(ctx
, "UID %lu", (unsigned long)map
->xid
.id
);
572 keystr
= talloc_asprintf(ctx
, "GID %lu", (unsigned long)map
->xid
.id
);
576 DEBUG(2, ("INVALID unix ID type: 0x02%x\n", map
->xid
.type
));
577 return NT_STATUS_INVALID_PARAMETER
;
580 if (keystr
== NULL
) {
581 DEBUG(0, ("Out of memory!\n"));
582 ret
= NT_STATUS_NO_MEMORY
;
586 DEBUG(10,("Fetching record %s\n", keystr
));
588 /* Check if the mapping exists */
589 status
= dbwrap_fetch_bystring(ctx
->db
, keystr
, keystr
, &data
);
591 if (!NT_STATUS_IS_OK(status
)) {
593 struct idmap_tdb2_set_mapping_context store_state
;
595 DEBUG(10,("Record %s not found\n", keystr
));
596 if (ctx
->script
== NULL
) {
597 ret
= NT_STATUS_NONE_MAPPED
;
601 ret
= idmap_tdb2_script(ctx
, map
, "IDTOSID %s", keystr
);
602 if (!NT_STATUS_IS_OK(ret
)) {
606 sidstr
= sid_string_talloc(keystr
, map
->sid
);
608 ret
= NT_STATUS_NO_MEMORY
;
612 store_state
.ksidstr
= sidstr
;
613 store_state
.kidstr
= keystr
;
615 ret
= dbwrap_trans_do(ctx
->db
, idmap_tdb2_set_mapping_action
,
620 if (!string_to_sid(map
->sid
, (const char *)data
.dptr
)) {
621 DEBUG(10,("INVALID SID (%s) in record %s\n",
622 (const char *)data
.dptr
, keystr
));
623 ret
= NT_STATUS_INTERNAL_DB_ERROR
;
627 DEBUG(10,("Found record %s -> %s\n", keystr
, (const char *)data
.dptr
));
637 Single sid to id lookup function.
639 static NTSTATUS
idmap_tdb2_sid_to_id(struct idmap_domain
*dom
, struct id_map
*map
)
644 unsigned long rec_id
= 0;
645 struct idmap_tdb2_context
*ctx
;
646 TALLOC_CTX
*tmp_ctx
= talloc_stackframe();
648 ret
= idmap_tdb2_open_db(dom
);
649 NT_STATUS_NOT_OK_RETURN(ret
);
651 ctx
= talloc_get_type(dom
->private_data
, struct idmap_tdb2_context
);
653 keystr
= sid_string_talloc(tmp_ctx
, map
->sid
);
654 if (keystr
== NULL
) {
655 DEBUG(0, ("Out of memory!\n"));
656 ret
= NT_STATUS_NO_MEMORY
;
660 DEBUG(10,("Fetching record %s\n", keystr
));
662 /* Check if sid is present in database */
663 ret
= dbwrap_fetch_bystring(ctx
->db
, tmp_ctx
, keystr
, &data
);
664 if (!NT_STATUS_IS_OK(ret
)) {
666 struct idmap_tdb2_set_mapping_context store_state
;
668 DEBUG(10,(__location__
" Record %s not found\n", keystr
));
670 if (ctx
->script
== NULL
) {
671 ret
= NT_STATUS_NONE_MAPPED
;
675 ret
= idmap_tdb2_script(ctx
, map
, "SIDTOID %s", keystr
);
676 if (!NT_STATUS_IS_OK(ret
)) {
680 /* apply filters before returning result */
681 if (!idmap_unix_id_is_in_range(map
->xid
.id
, dom
)) {
682 DEBUG(5, ("Script returned id (%u) out of range "
683 "(%u - %u). Filtered!\n",
684 map
->xid
.id
, dom
->low_id
, dom
->high_id
));
685 ret
= NT_STATUS_NONE_MAPPED
;
689 idstr
= talloc_asprintf(tmp_ctx
, "%cID %lu",
690 map
->xid
.type
== ID_TYPE_UID
?'U':'G',
691 (unsigned long)map
->xid
.id
);
693 ret
= NT_STATUS_NO_MEMORY
;
697 store_state
.ksidstr
= keystr
;
698 store_state
.kidstr
= idstr
;
700 ret
= dbwrap_trans_do(ctx
->db
, idmap_tdb2_set_mapping_action
,
705 /* What type of record is this ? */
706 if (sscanf((const char *)data
.dptr
, "UID %lu", &rec_id
) == 1) { /* Try a UID record. */
707 map
->xid
.id
= rec_id
;
708 map
->xid
.type
= ID_TYPE_UID
;
709 DEBUG(10,("Found uid record %s -> %s \n", keystr
, (const char *)data
.dptr
));
712 } else if (sscanf((const char *)data
.dptr
, "GID %lu", &rec_id
) == 1) { /* Try a GID record. */
713 map
->xid
.id
= rec_id
;
714 map
->xid
.type
= ID_TYPE_GID
;
715 DEBUG(10,("Found gid record %s -> %s \n", keystr
, (const char *)data
.dptr
));
718 } else { /* Unknown record type ! */
719 DEBUG(2, ("Found INVALID record %s -> %s\n", keystr
, (const char *)data
.dptr
));
720 ret
= NT_STATUS_INTERNAL_DB_ERROR
;
724 /* apply filters before returning result */
725 if (!idmap_unix_id_is_in_range(map
->xid
.id
, dom
)) {
726 DEBUG(5, ("Requested id (%u) out of range (%u - %u). Filtered!\n",
727 map
->xid
.id
, dom
->low_id
, dom
->high_id
));
728 ret
= NT_STATUS_NONE_MAPPED
;
732 talloc_free(tmp_ctx
);
737 lookup a set of unix ids.
739 static NTSTATUS
idmap_tdb2_unixids_to_sids(struct idmap_domain
*dom
, struct id_map
**ids
)
744 /* initialize the status to avoid suprise */
745 for (i
= 0; ids
[i
]; i
++) {
746 ids
[i
]->status
= ID_UNKNOWN
;
749 for (i
= 0; ids
[i
]; i
++) {
750 ret
= idmap_tdb2_id_to_sid(dom
, ids
[i
]);
751 if ( ! NT_STATUS_IS_OK(ret
)) {
753 /* if it is just a failed mapping continue */
754 if (NT_STATUS_EQUAL(ret
, NT_STATUS_NONE_MAPPED
)) {
756 /* make sure it is marked as unmapped */
757 ids
[i
]->status
= ID_UNMAPPED
;
761 /* some fatal error occurred, return immediately */
765 /* all ok, id is mapped */
766 ids
[i
]->status
= ID_MAPPED
;
776 lookup a set of sids.
779 struct idmap_tdb2_sids_to_unixids_context
{
780 struct idmap_domain
*dom
;
782 bool allocate_unmapped
;
785 static NTSTATUS
idmap_tdb2_sids_to_unixids_action(struct db_context
*db
,
788 struct idmap_tdb2_sids_to_unixids_context
*state
;
790 NTSTATUS ret
= NT_STATUS_OK
;
792 state
= (struct idmap_tdb2_sids_to_unixids_context
*)private_data
;
794 DEBUG(10, ("idmap_tdb2_sids_to_unixids_action: "
795 " domain: [%s], allocate: %s\n",
797 state
->allocate_unmapped
? "yes" : "no"));
799 for (i
= 0; state
->ids
[i
]; i
++) {
800 if ((state
->ids
[i
]->status
== ID_UNKNOWN
) ||
801 /* retry if we could not map in previous run: */
802 (state
->ids
[i
]->status
== ID_UNMAPPED
))
806 ret2
= idmap_tdb2_sid_to_id(state
->dom
, state
->ids
[i
]);
807 if (!NT_STATUS_IS_OK(ret2
)) {
809 /* if it is just a failed mapping, continue */
810 if (NT_STATUS_EQUAL(ret2
, NT_STATUS_NONE_MAPPED
)) {
812 /* make sure it is marked as unmapped */
813 state
->ids
[i
]->status
= ID_UNMAPPED
;
814 ret
= STATUS_SOME_UNMAPPED
;
816 /* some fatal error occurred, return immediately */
821 /* all ok, id is mapped */
822 state
->ids
[i
]->status
= ID_MAPPED
;
826 if ((state
->ids
[i
]->status
== ID_UNMAPPED
) &&
827 state
->allocate_unmapped
)
829 ret
= idmap_tdb2_new_mapping(state
->dom
, state
->ids
[i
]);
830 if (!NT_STATUS_IS_OK(ret
)) {
840 static NTSTATUS
idmap_tdb2_sids_to_unixids(struct idmap_domain
*dom
, struct id_map
**ids
)
844 struct idmap_tdb2_sids_to_unixids_context state
;
845 struct idmap_tdb2_context
*ctx
;
847 ctx
= talloc_get_type(dom
->private_data
, struct idmap_tdb2_context
);
849 /* initialize the status to avoid suprise */
850 for (i
= 0; ids
[i
]; i
++) {
851 ids
[i
]->status
= ID_UNKNOWN
;
856 state
.allocate_unmapped
= false;
858 ret
= idmap_tdb2_sids_to_unixids_action(ctx
->db
, &state
);
860 if (NT_STATUS_EQUAL(ret
, STATUS_SOME_UNMAPPED
) && !dom
->read_only
) {
861 state
.allocate_unmapped
= true;
862 ret
= dbwrap_trans_do(ctx
->db
,
863 idmap_tdb2_sids_to_unixids_action
,
871 static struct idmap_methods db_methods
= {
872 .init
= idmap_tdb2_db_init
,
873 .unixids_to_sids
= idmap_tdb2_unixids_to_sids
,
874 .sids_to_unixids
= idmap_tdb2_sids_to_unixids
,
875 .allocate_id
= idmap_tdb2_get_new_id
878 NTSTATUS
samba_init_module(void)
880 return smb_register_idmap(SMB_IDMAP_INTERFACE_VERSION
, "tdb2", &db_methods
);