2 Unix SMB/CIFS implementation.
5 Copyright (C) Gerald Carter 2006
6 Copyright (C) Michael Adam 2008
8 This library is free software; you can redistribute it and/or
9 modify it under the terms of the GNU Lesser General Public
10 License as published by the Free Software Foundation; either
11 version 3 of the License, or (at your option) any later version.
13 This library is distributed in the hope that it will be useful,
14 but WITHOUT ANY WARRANTY; without even the implied warranty of
15 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
16 Library General Public License for more details.
18 You should have received a copy of the GNU Lesser General Public License
19 along with this program. If not, see <http://www.gnu.org/licenses/>.
26 static struct nss_function_entry *backends = NULL;
27 static struct nss_function_entry *default_backend = NULL;
28 static struct nss_domain_entry *nss_domain_list = NULL;
30 /**********************************************************************
31 Get idmap nss methods.
32 **********************************************************************/
34 static struct nss_function_entry *nss_get_backend(const char *name )
36 struct nss_function_entry *entry = backends;
38 for(entry = backends; entry; entry = entry->next) {
39 if ( strequal(entry->name, name) )
46 /*********************************************************************
47 Allow a module to register itself as a backend.
48 **********************************************************************/
50 NTSTATUS smb_register_idmap_nss(int version, const char *name, struct nss_info_methods *methods)
52 struct nss_function_entry *entry;
54 if ((version != SMB_NSS_INFO_INTERFACE_VERSION)) {
55 DEBUG(0, ("smb_register_idmap_nss: Failed to register idmap_nss module.\n"
56 "The module was compiled against SMB_NSS_INFO_INTERFACE_VERSION %d,\n"
57 "current SMB_NSS_INFO_INTERFACE_VERSION is %d.\n"
58 "Please recompile against the current version of samba!\n",
59 version, SMB_NSS_INFO_INTERFACE_VERSION));
60 return NT_STATUS_OBJECT_TYPE_MISMATCH;
63 if (!name || !name[0] || !methods) {
64 DEBUG(0,("smb_register_idmap_nss: called with NULL pointer or empty name!\n"));
65 return NT_STATUS_INVALID_PARAMETER;
68 if ( nss_get_backend(name) ) {
69 DEBUG(5,("smb_register_idmap_nss: idmap module %s "
70 "already registered!\n", name));
71 return NT_STATUS_OBJECT_NAME_COLLISION;
74 entry = SMB_XMALLOC_P(struct nss_function_entry);
75 entry->name = smb_xstrdup(name);
76 entry->methods = methods;
78 DLIST_ADD(backends, entry);
79 DEBUG(5, ("smb_register_idmap_nss: Successfully added idmap "
80 "nss backend '%s'\n", name));
85 /********************************************************************
86 *******************************************************************/
88 static bool parse_nss_parm( const char *config, char **backend, char **domain )
92 *backend = *domain = NULL;
97 p = strchr( config, ':' );
99 /* if no : then the string must be the backend name only */
102 *backend = SMB_STRDUP( config );
103 return (*backend != NULL);
106 /* split the string and return the two parts */
108 if ( strlen(p+1) > 0 ) {
109 *domain = SMB_STRDUP( p+1 );
112 *backend = SMB_STRNDUP(config, PTR_DIFF(p, config));
113 return (*backend != NULL);
116 static NTSTATUS nss_domain_list_add_domain(const char *domain,
117 struct nss_function_entry *nss_backend)
119 struct nss_domain_entry *nss_domain;
121 nss_domain = talloc_zero(nss_domain_list, struct nss_domain_entry);
123 DEBUG(0, ("nss_domain_list_add_domain: talloc() failure!\n"));
124 return NT_STATUS_NO_MEMORY;
127 nss_domain->backend = nss_backend;
129 nss_domain->domain = talloc_strdup(nss_domain, domain);
130 if (!nss_domain->domain) {
131 DEBUG(0, ("nss_domain_list_add_domain: talloc() "
133 TALLOC_FREE(nss_domain);
134 return NT_STATUS_NO_MEMORY;
138 nss_domain->init_status = nss_domain->backend->methods->init(nss_domain);
139 if (!NT_STATUS_IS_OK(nss_domain->init_status)) {
140 DEBUG(0, ("nss_init: Failed to init backend '%s' for domain "
141 "'%s'!\n", nss_backend->name, nss_domain->domain));
144 DLIST_ADD(nss_domain_list, nss_domain);
146 DEBUG(10, ("Added domain '%s' with backend '%s' to nss_domain_list.\n",
147 domain, nss_backend->name));
152 /********************************************************************
153 Each nss backend must not store global state, but rather be able
154 to initialize the state on a per domain basis.
155 *******************************************************************/
157 static NTSTATUS nss_init(const char **nss_list)
160 static bool nss_initialized = false;
162 char *backend, *domain;
163 struct nss_function_entry *nss_backend;
165 /* check for previous successful initializations */
167 if (nss_initialized) {
171 /* The "template" backend should always be registered as it
172 is a static module */
174 nss_backend = nss_get_backend("template");
175 if (nss_backend == NULL) {
176 static_init_nss_info(NULL);
179 /* Create the list of nss_domains (loading any shared plugins
182 for ( i=0; nss_list && nss_list[i]; i++ ) {
184 if ( !parse_nss_parm(nss_list[i], &backend, &domain) ) {
185 DEBUG(0,("nss_init: failed to parse \"%s\"!\n",
190 DEBUG(10, ("parsed backend = '%s', domain = '%s'\n",
193 /* validate the backend */
195 nss_backend = nss_get_backend(backend);
196 if (nss_backend == NULL) {
198 * This is a freaking hack. We don't have proper
199 * modules for nss_info backends. Right now we have
200 * our standard nss_info backends in the ad backend.
202 status = smb_probe_module("idmap", "ad");
203 if ( !NT_STATUS_IS_OK(status) ) {
208 nss_backend = nss_get_backend(backend);
209 if (nss_backend == NULL) {
210 /* attempt to register the backend */
211 status = smb_probe_module( "nss_info", backend );
212 if ( !NT_STATUS_IS_OK(status) ) {
218 nss_backend = nss_get_backend(backend);
219 if (nss_backend == NULL) {
220 DEBUG(0, ("nss_init: unregistered backend %s!. "
221 "Skipping\n", backend));
226 * The first config item of the list without an explicit domain
227 * is treated as the default nss info backend.
229 if ((domain == NULL) && (default_backend == NULL)) {
230 DEBUG(10, ("nss_init: using '%s' as default backend.\n",
232 default_backend = nss_backend;
235 status = nss_domain_list_add_domain(domain, nss_backend);
236 if (!NT_STATUS_IS_OK(status)) {
242 SAFE_FREE( backend );
246 if ( !nss_domain_list ) {
247 DEBUG(3,("nss_init: no nss backends configured. "
248 "Defaulting to \"template\".\n"));
251 /* we should default to use template here */
254 nss_initialized = true;
259 /********************************************************************
260 *******************************************************************/
262 static struct nss_domain_entry *find_nss_domain( const char *domain )
265 struct nss_domain_entry *p;
267 status = nss_init( lp_winbind_nss_info() );
268 if ( !NT_STATUS_IS_OK(status) ) {
269 DEBUG(4,("find_nss_domain: Failed to init nss_info API "
270 "(%s)!\n", nt_errstr(status)));
274 for ( p=nss_domain_list; p; p=p->next ) {
275 if ( strequal( p->domain, domain ) )
279 /* If we didn't find a match, then use the default nss backend */
282 if (!default_backend) {
286 status = nss_domain_list_add_domain(domain, default_backend);
287 if (!NT_STATUS_IS_OK(status)) {
293 * Here, we use the fact that the new domain was added at
294 * the beginning of the list...
299 if ( !NT_STATUS_IS_OK( p->init_status ) ) {
300 p->init_status = p->backend->methods->init( p );
306 /********************************************************************
307 *******************************************************************/
309 NTSTATUS nss_map_to_alias( TALLOC_CTX *mem_ctx, const char *domain,
310 const char *name, char **alias )
312 struct nss_domain_entry *p;
313 struct nss_info_methods *m;
315 if ( (p = find_nss_domain( domain )) == NULL ) {
316 DEBUG(4,("nss_map_to_alias: Failed to find nss domain pointer for %s\n",
318 return NT_STATUS_NOT_FOUND;
321 m = p->backend->methods;
323 return m->map_to_alias(mem_ctx, p, name, alias);
327 /********************************************************************
328 *******************************************************************/
330 NTSTATUS nss_map_from_alias( TALLOC_CTX *mem_ctx, const char *domain,
331 const char *alias, char **name )
333 struct nss_domain_entry *p;
334 struct nss_info_methods *m;
336 if ( (p = find_nss_domain( domain )) == NULL ) {
337 DEBUG(4,("nss_map_from_alias: Failed to find nss domain pointer for %s\n",
339 return NT_STATUS_NOT_FOUND;
342 m = p->backend->methods;
344 return m->map_from_alias( mem_ctx, p, alias, name );
347 /********************************************************************
348 *******************************************************************/
350 NTSTATUS nss_close( const char *parameters )
352 struct nss_domain_entry *p = nss_domain_list;
353 struct nss_domain_entry *q;
355 while ( p && p->backend && p->backend->methods ) {
356 /* close the backend */
357 p->backend->methods->close_fn();
359 /* free the memory */