winbindd: Do not use group_list->out.resume_index after free
[samba.git] / source4 / winbind / wb_async_helpers.c
1 /* 
2    Unix SMB/CIFS implementation.
3
4    Copyright (C) Volker Lendecke 2005
5    
6    This program is free software; you can redistribute it and/or modify
7    it under the terms of the GNU General Public License as published by
8    the Free Software Foundation; either version 3 of the License, or
9    (at your option) any later version.
10    
11    This program is distributed in the hope that it will be useful,
12    but WITHOUT ANY WARRANTY; without even the implied warranty of
13    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
14    GNU General Public License for more details.
15    
16    You should have received a copy of the GNU General Public License
17    along with this program.  If not, see <http://www.gnu.org/licenses/>.
18 */
19 /*
20   a composite API for finding a DC and its name
21 */
22
23 #include "includes.h"
24 #include <tevent.h>
25 #include "libcli/composite/composite.h"
26 #include "winbind/wb_async_helpers.h"
27
28 #include "libcli/security/security.h"
29 #include "librpc/gen_ndr/ndr_lsa_c.h"
30 #include "librpc/gen_ndr/ndr_samr_c.h"
31
32 #include "winbind/wb_helper.h"
33
34
35 struct lsa_lookupsids_state {
36         struct composite_context *ctx;
37         uint32_t num_sids;
38         struct lsa_LookupSids r;
39         struct lsa_SidArray sids;
40         struct lsa_TransNameArray names;
41         struct lsa_RefDomainList *domains;
42         uint32_t count;
43         struct wb_sid_object **result;
44 };
45
46 static void lsa_lookupsids_recv_names(struct tevent_req *subreq);
47
48 struct composite_context *wb_lsa_lookupsids_send(TALLOC_CTX *mem_ctx,
49                                                  struct tevent_context *ev,
50                                                  struct dcerpc_binding_handle *lsa_binding,
51                                                  struct policy_handle *handle,
52                                                  uint32_t num_sids,
53                                                  const struct dom_sid **sids)
54 {
55         struct composite_context *result;
56         struct lsa_lookupsids_state *state;
57         uint32_t i;
58         struct tevent_req *subreq;
59
60         result = composite_create(mem_ctx, ev);
61         if (result == NULL) goto failed;
62
63         state = talloc(result, struct lsa_lookupsids_state);
64         if (state == NULL) goto failed;
65         result->private_data = state;
66         state->ctx = result;
67
68         state->sids.num_sids = num_sids;
69         state->sids.sids = talloc_array(state, struct lsa_SidPtr, num_sids);
70         if (state->sids.sids == NULL) goto failed;
71
72         for (i=0; i<num_sids; i++) {
73                 state->sids.sids[i].sid = dom_sid_dup(state->sids.sids,
74                                                       sids[i]);
75                 if (state->sids.sids[i].sid == NULL) goto failed;
76         }
77
78         state->domains = talloc(state, struct lsa_RefDomainList);
79         if (state->domains == NULL) goto failed;
80
81         state->count = 0;
82         state->num_sids = num_sids;
83         state->names.count = 0;
84         state->names.names = NULL;
85
86         state->r.in.handle = handle;
87         state->r.in.sids = &state->sids;
88         state->r.in.names = &state->names;
89         state->r.in.level = 1;
90         state->r.in.count = &state->count;
91         state->r.out.names = &state->names;
92         state->r.out.count = &state->count;
93         state->r.out.domains = &state->domains;
94
95         subreq = dcerpc_lsa_LookupSids_r_send(state, ev,
96                                               lsa_binding,
97                                               &state->r);
98         if (subreq == NULL) goto failed;
99         tevent_req_set_callback(subreq, lsa_lookupsids_recv_names, state);
100
101         return result;
102
103  failed:
104         talloc_free(result);
105         return NULL;
106 }
107
108 static void lsa_lookupsids_recv_names(struct tevent_req *subreq)
109 {
110         struct lsa_lookupsids_state *state =
111                 tevent_req_callback_data(subreq,
112                 struct lsa_lookupsids_state);
113         uint32_t i;
114
115         state->ctx->status = dcerpc_lsa_LookupSids_r_recv(subreq, state);
116         TALLOC_FREE(subreq);
117         if (!composite_is_ok(state->ctx)) return;
118         state->ctx->status = state->r.out.result;
119         if (!NT_STATUS_IS_OK(state->ctx->status) &&
120             !NT_STATUS_EQUAL(state->ctx->status, STATUS_SOME_UNMAPPED)) {
121                 composite_error(state->ctx, state->ctx->status);
122                 return;
123         }
124
125         if (state->names.count != state->num_sids) {
126                 composite_error(state->ctx,
127                                 NT_STATUS_INVALID_NETWORK_RESPONSE);
128                 return;
129         }
130
131         state->result = talloc_array(state, struct wb_sid_object *,
132                                      state->num_sids);
133         if (composite_nomem(state->result, state->ctx)) return;
134
135         for (i=0; i<state->num_sids; i++) {
136                 struct lsa_TranslatedName *name =
137                         &state->r.out.names->names[i];
138                 struct lsa_DomainInfo *dom;
139                 struct lsa_RefDomainList *domains =
140                         state->domains;
141
142                 state->result[i] = talloc_zero(state->result,
143                                                struct wb_sid_object);
144                 if (composite_nomem(state->result[i], state->ctx)) return;
145
146                 state->result[i]->type = name->sid_type;
147                 if (state->result[i]->type == SID_NAME_UNKNOWN) {
148                         continue;
149                 }
150
151                 if (domains == NULL) {
152                         composite_error(state->ctx,
153                                         NT_STATUS_INVALID_NETWORK_RESPONSE);
154                         return;
155                 }
156                 if (name->sid_index >= domains->count) {
157                         composite_error(state->ctx,
158                                         NT_STATUS_INVALID_NETWORK_RESPONSE);
159                         return;
160                 }
161
162                 dom = &domains->domains[name->sid_index];
163                 state->result[i]->domain = talloc_reference(state->result[i],
164                                                             dom->name.string);
165                 if ((name->sid_type == SID_NAME_DOMAIN) ||
166                     (name->name.string == NULL)) {
167                         state->result[i]->name =
168                                 talloc_strdup(state->result[i], "");
169                 } else {
170                         state->result[i]->name =
171                                 talloc_steal(state->result[i],
172                                              name->name.string);
173                 }
174
175                 if (composite_nomem(state->result[i]->name, state->ctx)) {
176                         return;
177                 }
178         }
179
180         composite_done(state->ctx);
181 }
182
183 NTSTATUS wb_lsa_lookupsids_recv(struct composite_context *c,
184                                 TALLOC_CTX *mem_ctx,
185                                 struct wb_sid_object ***names)
186 {
187         NTSTATUS status = composite_wait(c);
188         if (NT_STATUS_IS_OK(status)) {
189                 struct lsa_lookupsids_state *state =
190                         talloc_get_type(c->private_data,
191                                         struct lsa_lookupsids_state);
192                 *names = talloc_steal(mem_ctx, state->result);
193         }
194         talloc_free(c);
195         return status;
196 }
197
198
199 struct lsa_lookupnames_state {
200         struct composite_context *ctx;
201         uint32_t num_names;
202         struct lsa_LookupNames r;
203         struct lsa_TransSidArray sids;
204         struct lsa_RefDomainList *domains;
205         uint32_t count;
206         struct wb_sid_object **result;
207 };
208
209 static void lsa_lookupnames_recv_sids(struct tevent_req *subreq);
210
211 struct composite_context *wb_lsa_lookupnames_send(TALLOC_CTX *mem_ctx,
212                                                   struct tevent_context *ev,
213                                                   struct dcerpc_binding_handle *lsa_binding,
214                                                   struct policy_handle *handle,
215                                                   uint32_t num_names,
216                                                   const char **names)
217 {
218         struct composite_context *result;
219         struct lsa_lookupnames_state *state;
220         struct tevent_req *subreq;
221
222         struct lsa_String *lsa_names;
223         uint32_t i;
224
225         result = composite_create(mem_ctx, ev);
226         if (result == NULL) goto failed;
227
228         state = talloc(result, struct lsa_lookupnames_state);
229         if (state == NULL) goto failed;
230         result->private_data = state;
231         state->ctx = result;
232
233         state->sids.count = 0;
234         state->sids.sids = NULL;
235         state->num_names = num_names;
236         state->count = 0;
237
238         lsa_names = talloc_array(state, struct lsa_String, num_names);
239         if (lsa_names == NULL) goto failed;
240
241         for (i=0; i<num_names; i++) {
242                 lsa_names[i].string = names[i];
243         }
244
245         state->domains = talloc(state, struct lsa_RefDomainList);
246         if (state->domains == NULL) goto failed;
247
248         state->r.in.handle = handle;
249         state->r.in.num_names = num_names;
250         state->r.in.names = lsa_names;
251         state->r.in.sids = &state->sids;
252         state->r.in.level = 1;
253         state->r.in.count = &state->count;
254         state->r.out.count = &state->count;
255         state->r.out.sids = &state->sids;
256         state->r.out.domains = &state->domains;
257
258         subreq = dcerpc_lsa_LookupNames_r_send(state, ev,
259                                                lsa_binding,
260                                                &state->r);
261         if (subreq == NULL) goto failed;
262         tevent_req_set_callback(subreq, lsa_lookupnames_recv_sids, state);
263
264         return result;
265
266  failed:
267         talloc_free(result);
268         return NULL;
269 }
270
271 static void lsa_lookupnames_recv_sids(struct tevent_req *subreq)
272 {
273         struct lsa_lookupnames_state *state =
274                 tevent_req_callback_data(subreq,
275                 struct lsa_lookupnames_state);
276         uint32_t i;
277
278         state->ctx->status = dcerpc_lsa_LookupNames_r_recv(subreq, state);
279         TALLOC_FREE(subreq);
280         if (!composite_is_ok(state->ctx)) return;
281         state->ctx->status = state->r.out.result;
282         if (!NT_STATUS_IS_OK(state->ctx->status) &&
283             !NT_STATUS_EQUAL(state->ctx->status, STATUS_SOME_UNMAPPED)) {
284                 composite_error(state->ctx, state->ctx->status);
285                 return;
286         }
287
288         if (state->sids.count != state->num_names) {
289                 composite_error(state->ctx,
290                                 NT_STATUS_INVALID_NETWORK_RESPONSE);
291                 return;
292         }
293
294         state->result = talloc_array(state, struct wb_sid_object *,
295                                      state->num_names);
296         if (composite_nomem(state->result, state->ctx)) return;
297
298         for (i=0; i<state->num_names; i++) {
299                 struct lsa_TranslatedSid *sid = &state->r.out.sids->sids[i];
300                 struct lsa_RefDomainList *domains = state->domains;
301                 struct lsa_DomainInfo *dom;
302
303                 state->result[i] = talloc_zero(state->result,
304                                                struct wb_sid_object);
305                 if (composite_nomem(state->result[i], state->ctx)) return;
306
307                 state->result[i]->type = sid->sid_type;
308                 if (state->result[i]->type == SID_NAME_UNKNOWN) {
309                         continue;
310                 }
311
312                 if (domains == NULL) {
313                         composite_error(state->ctx,
314                                         NT_STATUS_INVALID_NETWORK_RESPONSE);
315                         return;
316                 }
317                 if (sid->sid_index >= domains->count) {
318                         composite_error(state->ctx,
319                                         NT_STATUS_INVALID_NETWORK_RESPONSE);
320                         return;
321                 }
322
323                 dom = &domains->domains[sid->sid_index];
324
325                 state->result[i]->sid = dom_sid_add_rid(state->result[i],
326                                                         dom->sid, sid->rid);
327         }
328
329         composite_done(state->ctx);
330 }
331
332 NTSTATUS wb_lsa_lookupnames_recv(struct composite_context *c,
333                                  TALLOC_CTX *mem_ctx,
334                                  struct wb_sid_object ***sids)
335 {
336         NTSTATUS status = composite_wait(c);
337         if (NT_STATUS_IS_OK(status)) {
338                 struct lsa_lookupnames_state *state =
339                         talloc_get_type(c->private_data,
340                                         struct lsa_lookupnames_state);
341                 *sids = talloc_steal(mem_ctx, state->result);
342         }
343         talloc_free(c);
344         return status;
345 }
346 struct samr_getuserdomgroups_state {
347         struct composite_context *ctx;
348         struct dcerpc_binding_handle *samr_binding;
349
350         uint32_t num_rids;
351         uint32_t *rids;
352
353         struct samr_RidWithAttributeArray *rid_array;
354
355         struct policy_handle *user_handle;
356         struct samr_OpenUser o;
357         struct samr_GetGroupsForUser g;
358         struct samr_Close c;
359 };
360
361 static void samr_usergroups_recv_open(struct tevent_req *subreq);
362 static void samr_usergroups_recv_groups(struct tevent_req *subreq);
363 static void samr_usergroups_recv_close(struct tevent_req *subreq);
364
365 struct composite_context *wb_samr_userdomgroups_send(TALLOC_CTX *mem_ctx,
366                                                      struct tevent_context *ev,
367                                                      struct dcerpc_binding_handle *samr_binding,
368                                                      struct policy_handle *domain_handle,
369                                                      uint32_t rid)
370 {
371         struct composite_context *result;
372         struct samr_getuserdomgroups_state *state;
373         struct tevent_req *subreq;
374
375         result = composite_create(mem_ctx, ev);
376         if (result == NULL) goto failed;
377
378         state = talloc(result, struct samr_getuserdomgroups_state);
379         if (state == NULL) goto failed;
380         result->private_data = state;
381         state->ctx = result;
382
383         state->samr_binding = samr_binding;
384
385         state->user_handle = talloc(state, struct policy_handle);
386         if (state->user_handle == NULL) goto failed;
387
388         state->o.in.domain_handle = domain_handle;
389         state->o.in.access_mask = SEC_FLAG_MAXIMUM_ALLOWED;
390         state->o.in.rid = rid;
391         state->o.out.user_handle = state->user_handle;
392
393         subreq = dcerpc_samr_OpenUser_r_send(state,
394                                              state->ctx->event_ctx,
395                                              state->samr_binding,
396                                              &state->o);
397         if (subreq == NULL) goto failed;
398         tevent_req_set_callback(subreq, samr_usergroups_recv_open, state);
399
400         return result;
401
402  failed:
403         talloc_free(result);
404         return NULL;
405 }
406                                               
407 static void samr_usergroups_recv_open(struct tevent_req *subreq)
408 {
409         struct samr_getuserdomgroups_state *state =
410                 tevent_req_callback_data(subreq,
411                 struct samr_getuserdomgroups_state);
412
413         state->ctx->status = dcerpc_samr_OpenUser_r_recv(subreq, state);
414         TALLOC_FREE(subreq);
415         if (!composite_is_ok(state->ctx)) return;
416         state->ctx->status = state->o.out.result;
417         if (!composite_is_ok(state->ctx)) return;
418
419         state->g.in.user_handle = state->user_handle;
420         state->g.out.rids = &state->rid_array;
421
422         subreq = dcerpc_samr_GetGroupsForUser_r_send(state,
423                                                      state->ctx->event_ctx,
424                                                      state->samr_binding,
425                                                      &state->g);
426         if (composite_nomem(subreq, state->ctx)) return;
427         tevent_req_set_callback(subreq, samr_usergroups_recv_groups, state);
428 }
429
430 static void samr_usergroups_recv_groups(struct tevent_req *subreq)
431 {
432         struct samr_getuserdomgroups_state *state =
433                 tevent_req_callback_data(subreq,
434                 struct samr_getuserdomgroups_state);
435
436         state->ctx->status = dcerpc_samr_GetGroupsForUser_r_recv(subreq, state);
437         TALLOC_FREE(subreq);
438         if (!composite_is_ok(state->ctx)) return;
439         state->ctx->status = state->g.out.result;
440         if (!composite_is_ok(state->ctx)) return;
441
442         state->c.in.handle = state->user_handle;
443         state->c.out.handle = state->user_handle;
444
445         subreq = dcerpc_samr_Close_r_send(state,
446                                           state->ctx->event_ctx,
447                                           state->samr_binding,
448                                           &state->c);
449         if (composite_nomem(subreq, state->ctx)) return;
450         tevent_req_set_callback(subreq, samr_usergroups_recv_close, state);
451 }
452
453 static void samr_usergroups_recv_close(struct tevent_req *subreq)
454 {
455         struct samr_getuserdomgroups_state *state =
456                 tevent_req_callback_data(subreq,
457                 struct samr_getuserdomgroups_state);
458
459         state->ctx->status = dcerpc_samr_Close_r_recv(subreq, state);
460         TALLOC_FREE(subreq);
461         if (!composite_is_ok(state->ctx)) return;
462         state->ctx->status = state->c.out.result;
463         if (!composite_is_ok(state->ctx)) return;
464
465         composite_done(state->ctx);
466 }
467
468 NTSTATUS wb_samr_userdomgroups_recv(struct composite_context *ctx,
469                                     TALLOC_CTX *mem_ctx,
470                                     uint32_t *num_rids, uint32_t **rids)
471 {
472         struct samr_getuserdomgroups_state *state =
473                 talloc_get_type(ctx->private_data,
474                                 struct samr_getuserdomgroups_state);
475
476         uint32_t i;
477         NTSTATUS status = composite_wait(ctx);
478         if (!NT_STATUS_IS_OK(status)) goto done;
479
480         *num_rids = state->rid_array->count;
481         *rids = talloc_array(mem_ctx, uint32_t, *num_rids);
482         if (*rids == NULL) {
483                 status = NT_STATUS_NO_MEMORY;
484                 goto done;
485         }
486
487         for (i=0; i<*num_rids; i++) {
488                 (*rids)[i] = state->rid_array->rids[i].rid;
489         }
490
491  done:
492         talloc_free(ctx);
493         return status;
494 }