source3/utils/net_idmap.c

   1 /*
   2    Samba Unix/Linux SMB client library
   3    Distributed SMB/CIFS Server Management Utility
   4    Copyright (C) 2003 Andrew Bartlett (abartlet@samba.org)
   5
   6    This program is free software; you can redistribute it and/or modify
   7    it under the terms of the GNU General Public License as published by
   8    the Free Software Foundation; either version 2 of the License, or
   9    (at your option) any later version.
  10
  11    This program is distributed in the hope that it will be useful,
  12    but WITHOUT ANY WARRANTY; without even the implied warranty of
  13    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  14    GNU General Public License for more details.
  15
  16    You should have received a copy of the GNU General Public License
  17    along with this program; if not, write to the Free Software
  18    Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.  */
  19
  20 #include "includes.h"
  21 #include "../utils/net.h"
  22
  23
  24 /***********************************************************
  25  Helper function for net_idmap_dump. Dump one entry.
  26  **********************************************************/
  27 static int net_idmap_dump_one_entry(TDB_CONTEXT *tdb,
  28                                     TDB_DATA key,
  29                                     TDB_DATA data,
  30                                     void *unused)
  31 {
  32         if (strcmp(key.dptr, "USER HWM") == 0) {
  33                 printf("USER HWM %d\n", IVAL(data.dptr,0));
  34                 return 0;
  35         }
  36
  37         if (strcmp(key.dptr, "GROUP HWM") == 0) {
  38                 printf("GROUP HWM %d\n", IVAL(data.dptr,0));
  39                 return 0;
  40         }
  41
  42         if (strncmp(key.dptr, "S-", 2) != 0)
  43                 return 0;
  44
  45         printf("%s %s\n", data.dptr, key.dptr);
  46         return 0;
  47 }
  48
  49 /***********************************************************
  50  Dump the current idmap
  51  **********************************************************/
  52 static int net_idmap_dump(int argc, const char **argv)
  53 {
  54         TDB_CONTEXT *idmap_tdb;
  55
  56         if ( argc != 1 )
  57                 return net_help_idmap( argc, argv );
  58
  59         idmap_tdb = tdb_open_log(argv[0], 0, TDB_DEFAULT, O_RDONLY, 0);
  60
  61         if (idmap_tdb == NULL) {
  62                 d_printf("Could not open idmap: %s\n", argv[0]);
  63                 return -1;
  64         }
  65
  66         tdb_traverse(idmap_tdb, net_idmap_dump_one_entry, NULL);
  67
  68         tdb_close(idmap_tdb);
  69
  70         return 0;
  71 }
  72
  73 /***********************************************************
  74  Fix up the HWMs after a idmap restore.
  75  **********************************************************/
  76
  77 struct hwms {
  78         BOOL ok;
  79         int user_hwm;
  80         int group_hwm;
  81 };
  82
  83 static int net_idmap_find_max_id(TDB_CONTEXT *tdb, TDB_DATA key, TDB_DATA data,
  84                                  void *handle)
  85 {
  86         struct hwms *hwms = (struct hwms *)handle;
  87         int *idptr = NULL;
  88         int id;
  89
  90         if (strncmp(key.dptr, "S-", 2) != 0)
  91                 return 0;
  92
  93         if (sscanf(data.dptr, "GID %d", &id) == 1) {
  94                 idptr = &hwms->group_hwm;
  95         }
  96
  97         if (sscanf(data.dptr, "UID %d", &id) == 1) {
  98                 idptr = &hwms->user_hwm;
  99         }
 100
 101         if (idptr == NULL) {
 102                 d_printf("Illegal idmap entry: [%s]->[%s]\n",
 103                          key.dptr, data.dptr);
 104                 hwms->ok = False;
 105                 return -1;
 106         }
 107
 108         if (*idptr <= id)
 109                 *idptr = id+1;
 110
 111         return 0;
 112 }
 113
 114 static NTSTATUS net_idmap_fixup_hwm(void)
 115 {
 116         NTSTATUS result = NT_STATUS_UNSUCCESSFUL;
 117         TDB_CONTEXT *idmap_tdb;
 118         char *tdbfile = NULL;
 119         int dummy;
 120
 121         struct hwms hwms;
 122         struct hwms highest;
 123
 124         if (!lp_idmap_uid(&hwms.user_hwm, &highest.user_hwm) ||
 125             !lp_idmap_gid(&hwms.group_hwm, &highest.group_hwm)) {
 126                 d_printf("idmap range missing\n");
 127                 return NT_STATUS_UNSUCCESSFUL;
 128         }
 129
 130         tdbfile = strdup(lock_path("winbindd_idmap.tdb"));
 131         if (!tdbfile) {
 132                 DEBUG(0, ("idmap_init: out of memory!\n"));
 133                 return NT_STATUS_NO_MEMORY;
 134         }
 135
 136         idmap_tdb = tdb_open_log(tdbfile, 0, TDB_DEFAULT, O_RDWR, 0);
 137
 138         if (idmap_tdb == NULL) {
 139                 d_printf("Could not open idmap: %s\n", tdbfile);
 140                 return NT_STATUS_NO_SUCH_FILE;
 141         }
 142
 143         hwms.ok = True;
 144
 145         tdb_traverse(idmap_tdb, net_idmap_find_max_id, &hwms);
 146
 147         if (!hwms.ok) {
 148                 goto done;
 149         }
 150
 151         d_printf("USER HWM: %d  GROUP HWM: %d\n",
 152                  hwms.user_hwm, hwms.group_hwm);
 153
 154         if (hwms.user_hwm >= highest.user_hwm) {
 155                 d_printf("Highest UID out of uid range\n");
 156                 goto done;
 157         }
 158
 159         if (hwms.group_hwm >= highest.group_hwm) {
 160                 d_printf("Highest GID out of gid range\n");
 161                 goto done;
 162         }
 163
 164         if ((tdb_store_int32(idmap_tdb, "USER HWM", hwms.user_hwm) != 0) ||
 165             (tdb_store_int32(idmap_tdb, "GROUP HWM", hwms.group_hwm) != 0)) {
 166                 d_printf("Could not store HWMs\n");
 167                 goto done;
 168         }
 169
 170         result = NT_STATUS_OK;
 171  done:
 172         tdb_close(idmap_tdb);
 173         return result;
 174 }
 175
 176 /***********************************************************
 177  Write entries from stdin to current local idmap
 178  **********************************************************/
 179 static int net_idmap_restore(int argc, const char **argv)
 180 {
 181         if (!idmap_init(lp_idmap_backend())) {
 182                 d_printf("Could not init idmap\n");
 183                 return -1;
 184         }
 185
 186         while (!feof(stdin)) {
 187                 fstring line, sid_string;
 188                 int len;
 189                 unid_t id;
 190                 int type = ID_EMPTY;
 191                 DOM_SID sid;
 192
 193                 if (fgets(line, sizeof(line)-1, stdin) == NULL)
 194                         break;
 195
 196                 len = strlen(line);
 197
 198                 if ( (len > 0) && (line[len-1] == '\n') )
 199                         line[len-1] = '\0';
 200
 201                 /* Yuck - this is broken for sizeof(gid_t) != sizeof(int) */
 202
 203                 if (sscanf(line, "GID %d %s", &id.gid, sid_string) == 2) {
 204                         type = ID_GROUPID;
 205                 }
 206
 207                 /* Yuck - this is broken for sizeof(uid_t) != sizeof(int) */
 208
 209                 if (sscanf(line, "UID %d %s", &id.uid, sid_string) == 2) {
 210                         type = ID_USERID;
 211                 }
 212
 213                 if (type == ID_EMPTY) {
 214                         d_printf("ignoring invalid line [%s]\n", line);
 215                         continue;
 216                 }
 217
 218                 if (!string_to_sid(&sid, sid_string)) {
 219                         d_printf("ignoring invalid sid [%s]\n", sid_string);
 220                         continue;
 221                 }
 222
 223                 if (!NT_STATUS_IS_OK(idmap_set_mapping(&sid, id, type))) {
 224                         d_printf("Could not set mapping of %s %lu to sid %s\n",
 225                                  (type == ID_GROUPID) ? "GID" : "UID",
 226                                  (type == ID_GROUPID) ? (unsigned long)id.gid:
 227                                  (unsigned long)id.uid,
 228                                  sid_string_static(&sid));
 229                         continue;
 230                 }
 231
 232         }
 233
 234         idmap_close();
 235
 236         return NT_STATUS_IS_OK(net_idmap_fixup_hwm()) ? 0 : -1;
 237 }
 238
 239 int net_help_idmap(int argc, const char **argv)
 240 {
 241         d_printf("net idmap dump filename"\
 242                  "\n  Dump current id mapping\n");
 243
 244         d_printf("net idmap restore"\
 245                  "\n  Restore entries from stdin to current local idmap\n");
 246
 247         return -1;
 248 }
 249
 250 /***********************************************************
 251  Look at the current idmap
 252  **********************************************************/
 253 int net_idmap(int argc, const char **argv)
 254 {
 255         struct functable func[] = {
 256                 {"dump", net_idmap_dump},
 257                 {"restore", net_idmap_restore},
 258                 {"help", net_help_idmap},
 259                 {NULL, NULL}
 260         };
 261
 262         return net_run_function(argc, argv, func, net_help_idmap);
 263 }
 264
 265