156fdc7cc9fc91bbf04adf570e4c79b23ad9e098
[amitay/samba.git] / source3 / winbindd / idmap_nss.c
1 /* 
2    Unix SMB/CIFS implementation.
3
4    idmap PASSDB backend
5
6    Copyright (C) Simo Sorce 2006
7    
8    This program is free software; you can redistribute it and/or modify
9    it under the terms of the GNU General Public License as published by
10    the Free Software Foundation; either version 3 of the License, or
11    (at your option) any later version.
12    
13    This program is distributed in the hope that it will be useful,
14    but WITHOUT ANY WARRANTY; without even the implied warranty of
15    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
16    GNU General Public License for more details.
17    
18    You should have received a copy of the GNU General Public License
19    along with this program.  If not, see <http://www.gnu.org/licenses/>.
20 */
21
22 #include "includes.h"
23 #include "winbindd.h"
24
25 #undef DBGC_CLASS
26 #define DBGC_CLASS DBGC_IDMAP
27
28 /*****************************
29  Initialise idmap database. 
30 *****************************/
31
32 static NTSTATUS idmap_nss_int_init(struct idmap_domain *dom,
33                                    const char *params)
34 {       
35         return NT_STATUS_OK;
36 }
37
38 /**********************************
39  lookup a set of unix ids. 
40 **********************************/
41
42 static NTSTATUS idmap_nss_unixids_to_sids(struct idmap_domain *dom, struct id_map **ids)
43 {
44         TALLOC_CTX *ctx;
45         int i;
46
47         ctx = talloc_new(dom);
48         if ( ! ctx) {
49                 DEBUG(0, ("Out of memory!\n"));
50                 return NT_STATUS_NO_MEMORY;
51         }
52
53         for (i = 0; ids[i]; i++) {
54                 struct passwd *pw;
55                 struct group *gr;
56                 const char *name;
57                 enum lsa_SidType type;
58                 bool ret;
59                 
60                 switch (ids[i]->xid.type) {
61                 case ID_TYPE_UID:
62                         pw = getpwuid((uid_t)ids[i]->xid.id);
63
64                         if (!pw) {
65                                 ids[i]->status = ID_UNMAPPED;
66                                 continue;
67                         }
68                         name = pw->pw_name;
69                         break;
70                 case ID_TYPE_GID:
71                         gr = getgrgid((gid_t)ids[i]->xid.id);
72
73                         if (!gr) {
74                                 ids[i]->status = ID_UNMAPPED;
75                                 continue;
76                         }
77                         name = gr->gr_name;
78                         break;
79                 default: /* ?? */
80                         ids[i]->status = ID_UNKNOWN;
81                         continue;
82                 }
83
84                 /* by default calls to winbindd are disabled
85                    the following call will not recurse so this is safe */
86                 (void)winbind_on();
87                 /* Lookup name from PDC using lsa_lookup_names() */
88                 ret = winbind_lookup_name(dom->name, name, ids[i]->sid, &type);
89                 (void)winbind_off();
90
91                 if (!ret) {
92                         /* TODO: how do we know if the name is really not mapped,
93                          * or something just failed ? */
94                         ids[i]->status = ID_UNMAPPED;
95                         continue;
96                 }
97
98                 switch (type) {
99                 case SID_NAME_USER:
100                         if (ids[i]->xid.type == ID_TYPE_UID) {
101                                 ids[i]->status = ID_MAPPED;
102                         }
103                         break;
104
105                 case SID_NAME_DOM_GRP:
106                 case SID_NAME_ALIAS:
107                 case SID_NAME_WKN_GRP:
108                         if (ids[i]->xid.type == ID_TYPE_GID) {
109                                 ids[i]->status = ID_MAPPED;
110                         }
111                         break;
112
113                 default:
114                         ids[i]->status = ID_UNKNOWN;
115                         break;
116                 }
117         }
118
119
120         talloc_free(ctx);
121         return NT_STATUS_OK;
122 }
123
124 /**********************************
125  lookup a set of sids. 
126 **********************************/
127
128 static NTSTATUS idmap_nss_sids_to_unixids(struct idmap_domain *dom, struct id_map **ids)
129 {
130         TALLOC_CTX *ctx;
131         int i;
132
133         ctx = talloc_new(dom);
134         if ( ! ctx) {
135                 DEBUG(0, ("Out of memory!\n"));
136                 return NT_STATUS_NO_MEMORY;
137         }
138
139         for (i = 0; ids[i]; i++) {
140                 struct group *gr;
141                 enum lsa_SidType type;
142                 const char *dom_name = NULL;
143                 const char *name = NULL;
144                 bool ret;
145
146                 /* by default calls to winbindd are disabled
147                    the following call will not recurse so this is safe */
148                 (void)winbind_on();
149                 ret = winbind_lookup_sid(ctx, ids[i]->sid, &dom_name, &name, &type);
150                 (void)winbind_off();
151
152                 if (!ret) {
153                         /* TODO: how do we know if the name is really not mapped,
154                          * or something just failed ? */
155                         ids[i]->status = ID_UNMAPPED;
156                         continue;
157                 }
158
159                 switch (type) {
160                 case SID_NAME_USER: {
161                         struct passwd *pw;
162
163                         /* this will find also all lower case name and use username level */
164
165                         pw = Get_Pwnam_alloc(talloc_tos(), name);
166                         if (pw) {
167                                 ids[i]->xid.id = pw->pw_uid;
168                                 ids[i]->xid.type = ID_TYPE_UID;
169                                 ids[i]->status = ID_MAPPED;
170                         }
171                         TALLOC_FREE(pw);
172                         break;
173                 }
174
175                 case SID_NAME_DOM_GRP:
176                 case SID_NAME_ALIAS:
177                 case SID_NAME_WKN_GRP:
178
179                         gr = getgrnam(name);
180                         if (gr) {
181                                 ids[i]->xid.id = gr->gr_gid;
182                                 ids[i]->xid.type = ID_TYPE_GID;
183                                 ids[i]->status = ID_MAPPED;
184                         }
185                         break;
186
187                 default:
188                         ids[i]->status = ID_UNKNOWN;
189                         break;
190                 }
191         }
192
193         talloc_free(ctx);
194         return NT_STATUS_OK;
195 }
196
197 /**********************************
198  Close the idmap tdb instance
199 **********************************/
200
201 static NTSTATUS idmap_nss_close(struct idmap_domain *dom)
202 {
203         return NT_STATUS_OK;
204 }
205
206 static struct idmap_methods nss_methods = {
207
208         .init = idmap_nss_int_init,
209         .unixids_to_sids = idmap_nss_unixids_to_sids,
210         .sids_to_unixids = idmap_nss_sids_to_unixids,
211         .close_fn = idmap_nss_close
212 };
213
214 NTSTATUS idmap_nss_init(void)
215 {
216         return smb_register_idmap(SMB_IDMAP_INTERFACE_VERSION, "nss", &nss_methods);
217 }