?  search:
summary | log | graphiclog1 | graphiclog2 | commit | commitdiff | tree | refs | edit | fork
blame | history | raw | HEAD
s3-docs: Fix make manpages3.
[Samba/gebeck_regimport.git] / nsswitch / libwbclient / wbc_sid.c
blob7aab04b86f744e2174969446fc89d6939ac94065
1 /*
2 Unix SMB/CIFS implementation.
3
4 Winbind client API
5
6 Copyright (C) Gerald (Jerry) Carter 2007
7
8
9 This library is free software; you can redistribute it and/or
10 modify it under the terms of the GNU Lesser General Public
11 License as published by the Free Software Foundation; either
12 version 3 of the License, or (at your option) any later version.
13
14 This library is distributed in the hope that it will be useful,
15 but WITHOUT ANY WARRANTY; without even the implied warranty of
16 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
17 Library General Public License for more details.
18
19 You should have received a copy of the GNU Lesser General Public License
20 along with this program. If not, see <http://www.gnu.org/licenses/>.
21 */
22
23 /* Required Headers */
24
25 #include "replace.h"
26 #include "libwbclient.h"
27 #include "../winbind_client.h"
28
29 /* Convert a binary SID to a character string */
30 wbcErr wbcSidToString(const struct wbcDomainSid *sid,
31 char **sid_string)
32 {
33 wbcErr wbc_status = WBC_ERR_UNKNOWN_FAILURE;
34 uint32_t id_auth;
35 int i;
36 char *tmp = NULL;
37
38 if (!sid) {
39 wbc_status = WBC_ERR_INVALID_SID;
40 BAIL_ON_WBC_ERROR(wbc_status);
41 }
42
43 id_auth = sid->id_auth[5] +
44 (sid->id_auth[4] << 8) +
45 (sid->id_auth[3] << 16) +
46 (sid->id_auth[2] << 24);
47
48 tmp = talloc_asprintf(NULL, "S-%d-%d", sid->sid_rev_num, id_auth);
49 BAIL_ON_PTR_ERROR(tmp, wbc_status);
50
51 for (i=0; i<sid->num_auths; i++) {
52 char *tmp2;
53 tmp2 = talloc_asprintf_append(tmp, "-%u", sid->sub_auths[i]);
54 BAIL_ON_PTR_ERROR(tmp2, wbc_status);
55
56 tmp = tmp2;
57 }
58
59 *sid_string = tmp;
60 tmp = NULL;
61
62 wbc_status = WBC_ERR_SUCCESS;
63
64 done:
65 talloc_free(tmp);
66
67 return wbc_status;
68 }
69
70 /* Convert a character string to a binary SID */
71 wbcErr wbcStringToSid(const char *str,
72 struct wbcDomainSid *sid)
73 {
74 const char *p;
75 char *q;
76 uint32_t x;
77 wbcErr wbc_status = WBC_ERR_UNKNOWN_FAILURE;
78
79 if (!sid) {
80 wbc_status = WBC_ERR_INVALID_PARAM;
81 BAIL_ON_WBC_ERROR(wbc_status);
82 }
83
84 /* Sanity check for either "S-" or "s-" */
85
86 if (!str
87 || (str[0]!='S' && str[0]!='s')
88 || (str[1]!='-'))
89 {
90 wbc_status = WBC_ERR_INVALID_PARAM;
91 BAIL_ON_WBC_ERROR(wbc_status);
92 }
93
94 /* Get the SID revision number */
95
96 p = str+2;
97 x = (uint32_t)strtol(p, &q, 10);
98 if (x==0 || !q || *q!='-') {
99 wbc_status = WBC_ERR_INVALID_SID;
100 BAIL_ON_WBC_ERROR(wbc_status);
101 }
102 sid->sid_rev_num = (uint8_t)x;
103
104 /* Next the Identifier Authority. This is stored in big-endian
105 in a 6 byte array. */
106
107 p = q+1;
108 x = (uint32_t)strtol(p, &q, 10);
109 if (!q || *q!='-') {
110 wbc_status = WBC_ERR_INVALID_SID;
111 BAIL_ON_WBC_ERROR(wbc_status);
112 }
113 sid->id_auth[5] = (x & 0x000000ff);
114 sid->id_auth[4] = (x & 0x0000ff00) >> 8;
115 sid->id_auth[3] = (x & 0x00ff0000) >> 16;
116 sid->id_auth[2] = (x & 0xff000000) >> 24;
117 sid->id_auth[1] = 0;
118 sid->id_auth[0] = 0;
119
120 /* now read the the subauthorities */
121
122 p = q +1;
123 sid->num_auths = 0;
124 while (sid->num_auths < WBC_MAXSUBAUTHS) {
125 x=(uint32_t)strtoul(p, &q, 10);
126 if (p == q)
127 break;
128 if (q == NULL) {
129 wbc_status = WBC_ERR_INVALID_SID;
130 BAIL_ON_WBC_ERROR(wbc_status);
131 }
132 sid->sub_auths[sid->num_auths++] = x;
133
134 if ((*q!='-') || (*q=='\0'))
135 break;
136 p = q + 1;
137 }
138
139 /* IF we ended early, then the SID could not be converted */
140
141 if (q && *q!='\0') {
142 wbc_status = WBC_ERR_INVALID_SID;
143 BAIL_ON_WBC_ERROR(wbc_status);
144 }
145
146 wbc_status = WBC_ERR_SUCCESS;
147
148 done:
149 return wbc_status;
150
151 }
152
153 /* Convert a domain and name to SID */
154 wbcErr wbcLookupName(const char *domain,
155 const char *name,
156 struct wbcDomainSid *sid,
157 enum wbcSidType *name_type)
158 {
159 struct winbindd_request request;
160 struct winbindd_response response;
161 wbcErr wbc_status = WBC_ERR_UNKNOWN_FAILURE;
162
163 if (!sid || !name_type) {
164 wbc_status = WBC_ERR_INVALID_PARAM;
165 BAIL_ON_WBC_ERROR(wbc_status);
166 }
167
168 /* Initialize request */
169
170 ZERO_STRUCT(request);
171 ZERO_STRUCT(response);
172
173 /* dst is already null terminated from the memset above */
174
175 strncpy(request.data.name.dom_name, domain,
176 sizeof(request.data.name.dom_name)-1);
177 strncpy(request.data.name.name, name,
178 sizeof(request.data.name.name)-1);
179
180 wbc_status = wbcRequestResponse(WINBINDD_LOOKUPNAME,
181 &request,
182 &response);
183 BAIL_ON_WBC_ERROR(wbc_status);
184
185 wbc_status = wbcStringToSid(response.data.sid.sid, sid);
186 BAIL_ON_WBC_ERROR(wbc_status);
187
188 *name_type = (enum wbcSidType)response.data.sid.type;
189
190 wbc_status = WBC_ERR_SUCCESS;
191
192 done:
193 return wbc_status;
194 }
195
196 /* Convert a SID to a domain and name */
197 wbcErr wbcLookupSid(const struct wbcDomainSid *sid,
198 char **pdomain,
199 char **pname,
200 enum wbcSidType *pname_type)
201 {
202 struct winbindd_request request;
203 struct winbindd_response response;
204 wbcErr wbc_status = WBC_ERR_UNKNOWN_FAILURE;
205 char *sid_string = NULL;
206 char *domain = NULL;
207 char *name = NULL;
208 enum wbcSidType name_type = WBC_SID_NAME_USE_NONE;
209
210 if (!sid) {
211 wbc_status = WBC_ERR_INVALID_PARAM;
212 BAIL_ON_WBC_ERROR(wbc_status);
213 }
214
215 /* Initialize request */
216
217 ZERO_STRUCT(request);
218 ZERO_STRUCT(response);
219
220 /* dst is already null terminated from the memset above */
221
222 wbc_status = wbcSidToString(sid, &sid_string);
223 BAIL_ON_WBC_ERROR(wbc_status);
224
225 strncpy(request.data.sid, sid_string, sizeof(request.data.sid)-1);
226 wbcFreeMemory(sid_string);
227
228 /* Make request */
229
230 wbc_status = wbcRequestResponse(WINBINDD_LOOKUPSID,
231 &request,
232 &response);
233 BAIL_ON_WBC_ERROR(wbc_status);
234
235 /* Copy out result */
236
237 domain = talloc_strdup(NULL, response.data.name.dom_name);
238 BAIL_ON_PTR_ERROR(domain, wbc_status);
239
240 name = talloc_strdup(NULL, response.data.name.name);
241 BAIL_ON_PTR_ERROR(name, wbc_status);
242
243 name_type = (enum wbcSidType)response.data.name.type;
244
245 wbc_status = WBC_ERR_SUCCESS;
246
247 done:
248 if (WBC_ERROR_IS_OK(wbc_status)) {
249 if (pdomain != NULL) {
250 *pdomain = domain;
251 } else {
252 TALLOC_FREE(domain);
253 }
254 if (pname != NULL) {
255 *pname = name;
256 } else {
257 TALLOC_FREE(name);
258 }
259 if (pname_type != NULL) {
260 *pname_type = name_type;
261 }
262 }
263 else {
264 #if 0
265 /*
266 * Found by Coverity: In this particular routine we can't end
267 * up here with a non-NULL name. Further up there are just two
268 * exit paths that lead here, neither of which leave an
269 * allocated name. If you add more paths up there, re-activate
270 * this.
271 */
272 if (name != NULL) {
273 talloc_free(name);
274 }
275 #endif
276 if (domain != NULL) {
277 talloc_free(domain);
278 }
279 }
280
281 return wbc_status;
282 }
283
284 /* Translate a collection of RIDs within a domain to names */
285
286 wbcErr wbcLookupRids(struct wbcDomainSid *dom_sid,
287 int num_rids,
288 uint32_t *rids,
289 const char **pp_domain_name,
290 const char ***pnames,
291 enum wbcSidType **ptypes)
292 {
293 size_t i, len, ridbuf_size;
294 char *ridlist;
295 char *p;
296 struct winbindd_request request;
297 struct winbindd_response response;
298 char *sid_string = NULL;
299 char *domain_name = NULL;
300 const char **names = NULL;
301 enum wbcSidType *types = NULL;
302 wbcErr wbc_status = WBC_ERR_UNKNOWN_FAILURE;
303
304 /* Initialise request */
305
306 ZERO_STRUCT(request);
307 ZERO_STRUCT(response);
308
309 if (!dom_sid || (num_rids == 0)) {
310 wbc_status = WBC_ERR_INVALID_PARAM;
311 BAIL_ON_WBC_ERROR(wbc_status);
312 }
313
314 wbc_status = wbcSidToString(dom_sid, &sid_string);
315 BAIL_ON_WBC_ERROR(wbc_status);
316
317 strncpy(request.data.sid, sid_string, sizeof(request.data.sid)-1);
318 wbcFreeMemory(sid_string);
319
320 /* Even if all the Rids were of maximum 32bit values,
321 we would only have 11 bytes per rid in the final array
322 ("4294967296" + \n). Add one more byte for the
323 terminating '\0' */
324
325 ridbuf_size = (sizeof(char)*11) * num_rids + 1;
326
327 ridlist = talloc_zero_array(NULL, char, ridbuf_size);
328 BAIL_ON_PTR_ERROR(ridlist, wbc_status);
329
330 len = 0;
331 for (i=0; i<num_rids && (len-1)>0; i++) {
332 char ridstr[12];
333
334 len = strlen(ridlist);
335 p = ridlist + len;
336
337 snprintf( ridstr, sizeof(ridstr)-1, "%u\n", rids[i]);
338 strncat(p, ridstr, ridbuf_size-len-1);
339 }
340
341 request.extra_data.data = ridlist;
342 request.extra_len = strlen(ridlist)+1;
343
344 wbc_status = wbcRequestResponse(WINBINDD_LOOKUPRIDS,
345 &request,
346 &response);
347 talloc_free(ridlist);
348 BAIL_ON_WBC_ERROR(wbc_status);
349
350 domain_name = talloc_strdup(NULL, response.data.domain_name);
351 BAIL_ON_PTR_ERROR(domain_name, wbc_status);
352
353 names = talloc_array(NULL, const char*, num_rids);
354 BAIL_ON_PTR_ERROR(names, wbc_status);
355
356 types = talloc_array(NULL, enum wbcSidType, num_rids);
357 BAIL_ON_PTR_ERROR(types, wbc_status);
358
359 p = (char *)response.extra_data.data;
360
361 for (i=0; i<num_rids; i++) {
362 char *q;
363
364 if (*p == '\0') {
365 wbc_status = WBC_ERR_INVALID_RESPONSE;
366 BAIL_ON_WBC_ERROR(wbc_status);
367 }
368
369 types[i] = (enum wbcSidType)strtoul(p, &q, 10);
370
371 if (*q != ' ') {
372 wbc_status = WBC_ERR_INVALID_RESPONSE;
373 BAIL_ON_WBC_ERROR(wbc_status);
374 }
375
376 p = q+1;
377
378 if ((q = strchr(p, '\n')) == NULL) {
379 wbc_status = WBC_ERR_INVALID_RESPONSE;
380 BAIL_ON_WBC_ERROR(wbc_status);
381 }
382
383 *q = '\0';
384
385 names[i] = talloc_strdup(names, p);
386 BAIL_ON_PTR_ERROR(names[i], wbc_status);
387
388 p = q+1;
389 }
390
391 if (*p != '\0') {
392 wbc_status = WBC_ERR_INVALID_RESPONSE;
393 BAIL_ON_WBC_ERROR(wbc_status);
394 }
395
396 wbc_status = WBC_ERR_SUCCESS;
397
398 done:
399 winbindd_free_response(&response);
400
401 if (WBC_ERROR_IS_OK(wbc_status)) {
402 *pp_domain_name = domain_name;
403 *pnames = names;
404 *ptypes = types;
405 }
406 else {
407 if (domain_name)
408 talloc_free(domain_name);
409 if (names)
410 talloc_free(names);
411 if (types)
412 talloc_free(types);
413 }
414
415 return wbc_status;
416 }
417
418 /* Get the groups a user belongs to */
419 wbcErr wbcLookupUserSids(const struct wbcDomainSid *user_sid,
420 bool domain_groups_only,
421 uint32_t *num_sids,
422 struct wbcDomainSid **_sids)
423 {
424 uint32_t i;
425 const char *s;
426 struct winbindd_request request;
427 struct winbindd_response response;
428 char *sid_string = NULL;
429 struct wbcDomainSid *sids = NULL;
430 wbcErr wbc_status = WBC_ERR_UNKNOWN_FAILURE;
431 int cmd;
432
433 /* Initialise request */
434
435 ZERO_STRUCT(request);
436 ZERO_STRUCT(response);
437
438 if (!user_sid) {
439 wbc_status = WBC_ERR_INVALID_PARAM;
440 BAIL_ON_WBC_ERROR(wbc_status);
441 }
442
443 wbc_status = wbcSidToString(user_sid, &sid_string);
444 BAIL_ON_WBC_ERROR(wbc_status);
445
446 strncpy(request.data.sid, sid_string, sizeof(request.data.sid)-1);
447 wbcFreeMemory(sid_string);
448
449 if (domain_groups_only) {
450 cmd = WINBINDD_GETUSERDOMGROUPS;
451 } else {
452 cmd = WINBINDD_GETUSERSIDS;
453 }
454
455 wbc_status = wbcRequestResponse(cmd,
456 &request,
457 &response);
458 BAIL_ON_WBC_ERROR(wbc_status);
459
460 if (response.data.num_entries &&
461 !response.extra_data.data) {
462 wbc_status = WBC_ERR_INVALID_RESPONSE;
463 BAIL_ON_WBC_ERROR(wbc_status);
464 }
465
466 sids = talloc_array(NULL, struct wbcDomainSid,
467 response.data.num_entries);
468 BAIL_ON_PTR_ERROR(sids, wbc_status);
469
470 s = (const char *)response.extra_data.data;
471 for (i = 0; i < response.data.num_entries; i++) {
472 char *n = strchr(s, '\n');
473 if (n) {
474 *n = '\0';
475 }
476 wbc_status = wbcStringToSid(s, &sids[i]);
477 BAIL_ON_WBC_ERROR(wbc_status);
478 s += strlen(s) + 1;
479 }
480
481 *num_sids = response.data.num_entries;
482 *_sids = sids;
483 sids = NULL;
484 wbc_status = WBC_ERR_SUCCESS;
485
486 done:
487 winbindd_free_response(&response);
488 if (sids) {
489 talloc_free(sids);
490 }
491
492 return wbc_status;
493 }
494
495 static inline
496 wbcErr _sid_to_rid(struct wbcDomainSid *sid, uint32_t *rid)
497 {
498 if (sid->num_auths < 1) {
499 return WBC_ERR_INVALID_RESPONSE;
500 }
501 *rid = sid->sub_auths[sid->num_auths - 1];
502
503 return WBC_ERR_SUCCESS;
504 }
505
506 /* Get alias membership for sids */
507 wbcErr wbcGetSidAliases(const struct wbcDomainSid *dom_sid,
508 struct wbcDomainSid *sids,
509 uint32_t num_sids,
510 uint32_t **alias_rids,
511 uint32_t *num_alias_rids)
512 {
513 uint32_t i;
514 const char *s;
515 struct winbindd_request request;
516 struct winbindd_response response;
517 char *sid_string = NULL;
518 ssize_t sid_len;
519 ssize_t extra_data_len = 0;
520 char * extra_data = NULL;
521 ssize_t buflen = 0;
522 struct wbcDomainSid sid;
523 wbcErr wbc_status = WBC_ERR_UNKNOWN_FAILURE;
524 uint32_t * rids = NULL;
525
526 /* Initialise request */
527
528 ZERO_STRUCT(request);
529 ZERO_STRUCT(response);
530
531 if (!dom_sid) {
532 wbc_status = WBC_ERR_INVALID_PARAM;
533 BAIL_ON_WBC_ERROR(wbc_status);
534 }
535
536 wbc_status = wbcSidToString(dom_sid, &sid_string);
537 BAIL_ON_WBC_ERROR(wbc_status);
538
539 strncpy(request.data.sid, sid_string, sizeof(request.data.sid)-1);
540 wbcFreeMemory(sid_string);
541 sid_string = NULL;
542
543 /* Lets assume each sid is around 54 characters
544 * S-1-5-AAAAAAAAAAA-BBBBBBBBBBB-CCCCCCCCCCC-DDDDDDDDDDD\n */
545 buflen = 54 * num_sids;
546 extra_data = talloc_array(NULL, char, buflen);
547 if (!extra_data) {
548 wbc_status = WBC_ERR_NO_MEMORY;
549 BAIL_ON_WBC_ERROR(wbc_status);
550 }
551
552 /* Build the sid list */
553 for (i=0; i<num_sids; i++) {
554 if (sid_string) {
555 wbcFreeMemory(sid_string);
556 sid_string = NULL;
557 }
558 wbc_status = wbcSidToString(&sids[i], &sid_string);
559 BAIL_ON_WBC_ERROR(wbc_status);
560
561 sid_len = strlen(sid_string);
562
563 if (buflen < extra_data_len + sid_len + 2) {
564 buflen *= 2;
565 extra_data = talloc_realloc(NULL, extra_data,
566 char, buflen);
567 if (!extra_data) {
568 wbc_status = WBC_ERR_NO_MEMORY;
569 BAIL_ON_WBC_ERROR(wbc_status);
570 }
571 }
572
573 strncpy(&extra_data[extra_data_len], sid_string,
574 buflen - extra_data_len);
575 extra_data_len += sid_len;
576 extra_data[extra_data_len++] = '\n';
577 extra_data[extra_data_len] = '\0';
578 }
579
580 request.extra_data.data = extra_data;
581 request.extra_len = extra_data_len;
582
583 wbc_status = wbcRequestResponse(WINBINDD_GETSIDALIASES,
584 &request,
585 &response);
586 BAIL_ON_WBC_ERROR(wbc_status);
587
588 if (response.data.num_entries &&
589 !response.extra_data.data) {
590 wbc_status = WBC_ERR_INVALID_RESPONSE;
591 BAIL_ON_WBC_ERROR(wbc_status);
592 }
593
594 rids = talloc_array(NULL, uint32_t,
595 response.data.num_entries);
596 BAIL_ON_PTR_ERROR(sids, wbc_status);
597
598 s = (const char *)response.extra_data.data;
599 for (i = 0; i < response.data.num_entries; i++) {
600 char *n = strchr(s, '\n');
601 if (n) {
602 *n = '\0';
603 }
604 wbc_status = wbcStringToSid(s, &sid);
605 BAIL_ON_WBC_ERROR(wbc_status);
606 wbc_status = _sid_to_rid(&sid, &rids[i]);
607 BAIL_ON_WBC_ERROR(wbc_status);
608 s += strlen(s) + 1;
609 }
610
611 *num_alias_rids = response.data.num_entries;
612 *alias_rids = rids;
613 rids = NULL;
614 wbc_status = WBC_ERR_SUCCESS;
615
616 done:
617 if (sid_string) {
618 wbcFreeMemory(sid_string);
619 }
620 if (extra_data) {
621 talloc_free(extra_data);
622 }
623 winbindd_free_response(&response);
624 if (rids) {
625 talloc_free(rids);
626 }
627
628 return wbc_status;
629 }
630
631
632 /* Lists Users */
633 wbcErr wbcListUsers(const char *domain_name,
634 uint32_t *_num_users,
635 const char ***_users)
636 {
637 wbcErr wbc_status = WBC_ERR_UNKNOWN_FAILURE;
638 struct winbindd_request request;
639 struct winbindd_response response;
640 uint32_t num_users = 0;
641 const char **users = NULL;
642 const char *next;
643
644 /* Initialise request */
645
646 ZERO_STRUCT(request);
647 ZERO_STRUCT(response);
648
649 if (domain_name) {
650 strncpy(request.domain_name, domain_name,
651 sizeof(request.domain_name)-1);
652 }
653
654 wbc_status = wbcRequestResponse(WINBINDD_LIST_USERS,
655 &request,
656 &response);
657 BAIL_ON_WBC_ERROR(wbc_status);
658
659 /* Look through extra data */
660
661 next = (const char *)response.extra_data.data;
662 while (next) {
663 const char **tmp;
664 const char *current = next;
665 char *k = strchr(next, ',');
666 if (k) {
667 k[0] = '\0';
668 next = k+1;
669 } else {
670 next = NULL;
671 }
672
673 tmp = talloc_realloc(NULL, users,
674 const char *,
675 num_users+1);
676 BAIL_ON_PTR_ERROR(tmp, wbc_status);
677 users = tmp;
678
679 users[num_users] = talloc_strdup(users, current);
680 BAIL_ON_PTR_ERROR(users[num_users], wbc_status);
681
682 num_users++;
683 }
684
685 *_num_users = num_users;
686 *_users = users;
687 users = NULL;
688 wbc_status = WBC_ERR_SUCCESS;
689
690 done:
691 winbindd_free_response(&response);
692 if (users) {
693 talloc_free(users);
694 }
695 return wbc_status;
696 }
697
698 /* Lists Groups */
699 wbcErr wbcListGroups(const char *domain_name,
700 uint32_t *_num_groups,
701 const char ***_groups)
702 {
703 wbcErr wbc_status = WBC_ERR_UNKNOWN_FAILURE;
704 struct winbindd_request request;
705 struct winbindd_response response;
706 uint32_t num_groups = 0;
707 const char **groups = NULL;
708 const char *next;
709
710 /* Initialise request */
711
712 ZERO_STRUCT(request);
713 ZERO_STRUCT(response);
714
715 if (domain_name) {
716 strncpy(request.domain_name, domain_name,
717 sizeof(request.domain_name)-1);
718 }
719
720 wbc_status = wbcRequestResponse(WINBINDD_LIST_GROUPS,
721 &request,
722 &response);
723 BAIL_ON_WBC_ERROR(wbc_status);
724
725 /* Look through extra data */
726
727 next = (const char *)response.extra_data.data;
728 while (next) {
729 const char **tmp;
730 const char *current = next;
731 char *k = strchr(next, ',');
732 if (k) {
733 k[0] = '\0';
734 next = k+1;
735 } else {
736 next = NULL;
737 }
738
739 tmp = talloc_realloc(NULL, groups,
740 const char *,
741 num_groups+1);
742 BAIL_ON_PTR_ERROR(tmp, wbc_status);
743 groups = tmp;
744
745 groups[num_groups] = talloc_strdup(groups, current);
746 BAIL_ON_PTR_ERROR(groups[num_groups], wbc_status);
747
748 num_groups++;
749 }
750
751 *_num_groups = num_groups;
752 *_groups = groups;
753 groups = NULL;
754 wbc_status = WBC_ERR_SUCCESS;
755
756 done:
757 winbindd_free_response(&response);
758 if (groups) {
759 talloc_free(groups);
760 }
761 return wbc_status;
762 }
763
764 wbcErr wbcGetDisplayName(const struct wbcDomainSid *sid,
765 char **pdomain,
766 char **pfullname,
767 enum wbcSidType *pname_type)
768 {
769 wbcErr wbc_status;
770 char *domain = NULL;
771 char *name = NULL;
772 enum wbcSidType name_type;
773
774 wbc_status = wbcLookupSid(sid, &domain, &name, &name_type);
775 BAIL_ON_WBC_ERROR(wbc_status);
776
777 if (name_type == WBC_SID_NAME_USER) {
778 uid_t uid;
779 struct passwd *pwd;
780
781 wbc_status = wbcSidToUid(sid, &uid);
782 BAIL_ON_WBC_ERROR(wbc_status);
783
784 wbc_status = wbcGetpwuid(uid, &pwd);
785 BAIL_ON_WBC_ERROR(wbc_status);
786
787 wbcFreeMemory(name);
788
789 name = talloc_strdup(NULL, pwd->pw_gecos);
790 BAIL_ON_PTR_ERROR(name, wbc_status);
791 }
792
793 wbc_status = WBC_ERR_SUCCESS;
794
795 done:
796 if (WBC_ERROR_IS_OK(wbc_status)) {
797 *pdomain = domain;
798 *pfullname = name;
799 *pname_type = name_type;
800 } else {
801 wbcFreeMemory(domain);
802 wbcFreeMemory(name);
803 }
804
805 return wbc_status;
806 }
807
808 const char* wbcSidTypeString(enum wbcSidType type)
809 {
810 switch (type) {
811 case WBC_SID_NAME_USE_NONE: return "SID_NONE";
812 case WBC_SID_NAME_USER: return "SID_USER";
813 case WBC_SID_NAME_DOM_GRP: return "SID_DOM_GROUP";
814 case WBC_SID_NAME_DOMAIN: return "SID_DOMAIN";
815 case WBC_SID_NAME_ALIAS: return "SID_ALIAS";
816 case WBC_SID_NAME_WKN_GRP: return "SID_WKN_GROUP";
817 case WBC_SID_NAME_DELETED: return "SID_DELETED";
818 case WBC_SID_NAME_INVALID: return "SID_INVALID";
819 case WBC_SID_NAME_UNKNOWN: return "SID_UNKNOWN";
820 case WBC_SID_NAME_COMPUTER: return "SID_COMPUTER";
821 default: return "Unknown type";
822 }
823 }
reg import