s3:libsmb: add cli_{query,set}_security_descriptor() which take sec_info flags
[Samba/gebeck_regimport.git] / source3 / winbindd / idmap_rid.c
blob4112fb860aee9cb5abcb3978dc01ce2f330024cc
1 /*
2 * idmap_rid: static map between Active Directory/NT RIDs and RFC 2307 accounts
3 * Copyright (C) Guenther Deschner, 2004
4 * Copyright (C) Sumit Bose, 2004
6 * This program is free software; you can redistribute it and/or modify
7 * it under the terms of the GNU General Public License as published by
8 * the Free Software Foundation; either version 3 of the License, or
9 * (at your option) any later version.
11 * This program is distributed in the hope that it will be useful,
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 * GNU General Public License for more details.
16 * You should have received a copy of the GNU General Public License
17 * along with this program; if not, see <http://www.gnu.org/licenses/>.
21 #include "includes.h"
22 #include "winbindd.h"
23 #include "idmap.h"
24 #include "../libcli/security/dom_sid.h"
26 #undef DBGC_CLASS
27 #define DBGC_CLASS DBGC_IDMAP
29 struct idmap_rid_context {
30 uint32_t base_rid;
33 /******************************************************************************
34 compat params can't be used because of the completely different way
35 we support multiple domains in the new idmap
36 *****************************************************************************/
38 static NTSTATUS idmap_rid_initialize(struct idmap_domain *dom)
40 NTSTATUS ret;
41 struct idmap_rid_context *ctx;
42 char *config_option = NULL;
44 ctx = talloc_zero(dom, struct idmap_rid_context);
45 if (ctx == NULL) {
46 DEBUG(0, ("Out of memory!\n"));
47 return NT_STATUS_NO_MEMORY;
50 config_option = talloc_asprintf(ctx, "idmap config %s", dom->name);
51 if ( ! config_option) {
52 DEBUG(0, ("Out of memory!\n"));
53 ret = NT_STATUS_NO_MEMORY;
54 goto failed;
57 ctx->base_rid = lp_parm_int(-1, config_option, "base_rid", 0);
59 dom->private_data = ctx;
61 talloc_free(config_option);
62 return NT_STATUS_OK;
64 failed:
65 talloc_free(ctx);
66 return ret;
69 static NTSTATUS idmap_rid_id_to_sid(struct idmap_domain *dom, struct id_map *map)
71 struct winbindd_domain *domain;
72 struct idmap_rid_context *ctx;
74 ctx = talloc_get_type(dom->private_data, struct idmap_rid_context);
76 /* apply filters before checking */
77 if (!idmap_unix_id_is_in_range(map->xid.id, dom)) {
78 DEBUG(5, ("Requested id (%u) out of range (%u - %u). Filtered!\n",
79 map->xid.id, dom->low_id, dom->high_id));
80 return NT_STATUS_NONE_MAPPED;
83 domain = find_domain_from_name_noinit(dom->name);
84 if (domain == NULL ) {
85 return NT_STATUS_NO_SUCH_DOMAIN;
88 sid_compose(map->sid, &domain->sid, map->xid.id - dom->low_id + ctx->base_rid);
90 /* We **really** should have some way of validating
91 the SID exists and is the correct type here. But
92 that is a deficiency in the idmap_rid design. */
94 map->status = ID_MAPPED;
96 return NT_STATUS_OK;
99 /**********************************
100 Single sid to id lookup function.
101 **********************************/
103 static NTSTATUS idmap_rid_sid_to_id(struct idmap_domain *dom, struct id_map *map)
105 uint32_t rid;
106 struct idmap_rid_context *ctx;
108 ctx = talloc_get_type(dom->private_data, struct idmap_rid_context);
110 sid_peek_rid(map->sid, &rid);
111 map->xid.id = rid - ctx->base_rid + dom->low_id;
113 /* apply filters before returning result */
115 if (!idmap_unix_id_is_in_range(map->xid.id, dom)) {
116 DEBUG(5, ("Requested id (%u) out of range (%u - %u). Filtered!\n",
117 map->xid.id, dom->low_id, dom->high_id));
118 map->status = ID_UNMAPPED;
119 return NT_STATUS_NONE_MAPPED;
122 map->status = ID_MAPPED;
124 return NT_STATUS_OK;
127 /**********************************
128 lookup a set of unix ids.
129 **********************************/
131 static NTSTATUS idmap_rid_unixids_to_sids(struct idmap_domain *dom, struct id_map **ids)
133 NTSTATUS ret;
134 int i;
136 /* initialize the status to avoid suprise */
137 for (i = 0; ids[i]; i++) {
138 ids[i]->status = ID_UNKNOWN;
141 for (i = 0; ids[i]; i++) {
143 ret = idmap_rid_id_to_sid(dom, ids[i]);
145 if (( ! NT_STATUS_IS_OK(ret)) &&
146 ( ! NT_STATUS_EQUAL(ret, NT_STATUS_NONE_MAPPED))) {
147 /* some fatal error occurred, log it */
148 DEBUG(3, ("Unexpected error resolving an ID (%d)\n", ids[i]->xid.id));
152 return NT_STATUS_OK;
155 /**********************************
156 lookup a set of sids.
157 **********************************/
159 static NTSTATUS idmap_rid_sids_to_unixids(struct idmap_domain *dom, struct id_map **ids)
161 NTSTATUS ret;
162 int i;
164 /* initialize the status to avoid suprise */
165 for (i = 0; ids[i]; i++) {
166 ids[i]->status = ID_UNKNOWN;
169 for (i = 0; ids[i]; i++) {
171 ret = idmap_rid_sid_to_id(dom, ids[i]);
173 if (( ! NT_STATUS_IS_OK(ret)) &&
174 ( ! NT_STATUS_EQUAL(ret, NT_STATUS_NONE_MAPPED))) {
175 /* some fatal error occurred, log it */
176 DEBUG(3, ("Unexpected error resolving a SID (%s)\n",
177 sid_string_dbg(ids[i]->sid)));
181 return NT_STATUS_OK;
184 static struct idmap_methods rid_methods = {
185 .init = idmap_rid_initialize,
186 .unixids_to_sids = idmap_rid_unixids_to_sids,
187 .sids_to_unixids = idmap_rid_sids_to_unixids,
190 NTSTATUS samba_init_module(void)
192 return smb_register_idmap(SMB_IDMAP_INTERFACE_VERSION, "rid", &rid_methods);