source3/passdb/util_unixsids.c

   1 /*
   2    Unix SMB/CIFS implementation.
   3    Translate unix-defined names to SIDs and vice versa
   4    Copyright (C) Volker Lendecke 2005
   5
   6    This program is free software; you can redistribute it and/or modify
   7    it under the terms of the GNU General Public License as published by
   8    the Free Software Foundation; either version 3 of the License, or
   9    (at your option) any later version.
  10
  11    This program is distributed in the hope that it will be useful,
  12    but WITHOUT ANY WARRANTY; without even the implied warranty of
  13    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  14    GNU General Public License for more details.
  15
  16    You should have received a copy of the GNU General Public License
  17    along with this program.  If not, see <http://www.gnu.org/licenses/>.
  18 */
  19
  20 #include "includes.h"
  21
  22 bool sid_check_is_unix_users(const struct dom_sid *sid)
  23 {
  24         return sid_equal(sid, &global_sid_Unix_Users);
  25 }
  26
  27 bool sid_check_is_in_unix_users(const struct dom_sid *sid)
  28 {
  29         struct dom_sid dom_sid;
  30         uint32 rid;
  31
  32         sid_copy(&dom_sid, sid);
  33         sid_split_rid(&dom_sid, &rid);
  34
  35         return sid_check_is_unix_users(&dom_sid);
  36 }
  37
  38 void uid_to_unix_users_sid(uid_t uid, struct dom_sid *sid)
  39 {
  40         /*
  41          * This can never fail, we know that global_sid_Unix_Users is
  42          * short enough for a domain sid.
  43          */
  44         sid_compose(sid, &global_sid_Unix_Users, uid);
  45 }
  46
  47 void gid_to_unix_groups_sid(gid_t gid, struct dom_sid *sid)
  48 {
  49         /*
  50          * This can never fail, we know that global_sid_Unix_Groups is
  51          * short enough for a domain sid.
  52          */
  53         sid_compose(sid, &global_sid_Unix_Groups, gid);
  54 }
  55
  56 const char *unix_users_domain_name(void)
  57 {
  58         return "Unix User";
  59 }
  60
  61 bool lookup_unix_user_name(const char *name, struct dom_sid *sid)
  62 {
  63         struct passwd *pwd;
  64         bool ret;
  65
  66         pwd = getpwnam_alloc(talloc_autofree_context(), name);
  67         if (pwd == NULL) {
  68                 return False;
  69         }
  70
  71         /*
  72          * For 64-bit uid's we have enough space in the whole SID,
  73          * should they become necessary
  74          */
  75         ret = sid_compose(sid, &global_sid_Unix_Users, pwd->pw_uid);
  76         TALLOC_FREE(pwd);
  77         return ret;
  78 }
  79
  80 bool sid_check_is_unix_groups(const struct dom_sid *sid)
  81 {
  82         return sid_equal(sid, &global_sid_Unix_Groups);
  83 }
  84
  85 bool sid_check_is_in_unix_groups(const struct dom_sid *sid)
  86 {
  87         struct dom_sid dom_sid;
  88         uint32 rid;
  89
  90         sid_copy(&dom_sid, sid);
  91         sid_split_rid(&dom_sid, &rid);
  92
  93         return sid_check_is_unix_groups(&dom_sid);
  94 }
  95
  96 const char *unix_groups_domain_name(void)
  97 {
  98         return "Unix Group";
  99 }
 100
 101 bool lookup_unix_group_name(const char *name, struct dom_sid *sid)
 102 {
 103         struct group *grp;
 104
 105         grp = sys_getgrnam(name);
 106         if (grp == NULL) {
 107                 return False;
 108         }
 109
 110         /*
 111          * For 64-bit gid's we have enough space in the whole SID,
 112          * should they become necessary
 113          */
 114         return sid_compose(sid, &global_sid_Unix_Groups, grp->gr_gid);
 115 }