source3/lib/util_sid_passdb.c

   1 /*
   2    Unix SMB/CIFS implementation.
   3    sid utility functions
   4
   5    Copyright (C) Michael Adam 2012
   6
   7    This program is free software; you can redistribute it and/or modify
   8    it under the terms of the GNU General Public License as published by
   9    the Free Software Foundation; either version 3 of the License, or
  10    (at your option) any later version.
  11
  12    This program is distributed in the hope that it will be useful,
  13    but WITHOUT ANY WARRANTY; without even the implied warranty of
  14    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  15    GNU General Public License for more details.
  16
  17    You should have received a copy of the GNU General Public License
  18    along with this program.  If not, see <http://www.gnu.org/licenses/>.
  19  */
  20
  21 #include "includes.h"
  22 #include "lib/util_sid_passdb.h"
  23 #include "passdb/machine_sid.h"
  24 #include "passdb.h"
  25
  26 /**
  27  * check whether this is an object-sid that should
  28  * be treated by the passdb, e.g. for id-mapping.
  29  */
  30 bool sid_check_object_is_for_passdb(const struct dom_sid *sid)
  31 {
  32         if (sid_check_is_in_our_sam(sid) && pdb_is_responsible_for_our_sam()) {
  33                 return true;
  34         }
  35
  36         if (sid_check_is_in_builtin(sid) && pdb_is_responsible_for_builtin()) {
  37                 return true;
  38         }
  39
  40         if (sid_check_is_in_wellknown_domain(sid) &&
  41             pdb_is_responsible_for_wellknown())
  42         {
  43                 return true;
  44         }
  45
  46         if (sid_check_is_in_unix_users(sid) &&
  47             pdb_is_responsible_for_unix_users())
  48         {
  49                 return true;
  50         }
  51
  52         if (sid_check_is_in_unix_groups(sid) &&
  53             pdb_is_responsible_for_unix_groups())
  54         {
  55                 return true;
  56         }
  57
  58         if (pdb_is_responsible_for_everything_else())
  59         {
  60                 return true;
  61         }
  62
  63         return false;
  64 }
  65
  66 /**
  67  * check whether this is an object- or domain-sid that should
  68  * be treated by the passdb, e.g. for id-mapping.
  69  */
  70 bool sid_check_is_for_passdb(const struct dom_sid *sid)
  71 {
  72         if (sid_check_is_our_sam(sid) && pdb_is_responsible_for_our_sam()) {
  73                 return true;
  74         }
  75
  76         if (sid_check_is_in_our_sam(sid) && pdb_is_responsible_for_our_sam()) {
  77                 return true;
  78         }
  79
  80         if (sid_check_is_builtin(sid) && pdb_is_responsible_for_builtin()) {
  81                 return true;
  82         }
  83
  84         if (sid_check_is_in_builtin(sid) && pdb_is_responsible_for_builtin()) {
  85                 return true;
  86         }
  87
  88         if (sid_check_is_wellknown_domain(sid, NULL) &&
  89             pdb_is_responsible_for_wellknown())
  90         {
  91                 return true;
  92         }
  93
  94         if (sid_check_is_in_wellknown_domain(sid) &&
  95             pdb_is_responsible_for_wellknown())
  96         {
  97                 return true;
  98         }
  99
 100         if (sid_check_is_unix_users(sid) &&
 101             pdb_is_responsible_for_unix_users())
 102         {
 103                 return true;
 104         }
 105
 106         if (sid_check_is_in_unix_users(sid) &&
 107             pdb_is_responsible_for_unix_users())
 108         {
 109                 return true;
 110         }
 111
 112         if (sid_check_is_unix_groups(sid) &&
 113             pdb_is_responsible_for_unix_groups())
 114         {
 115                 return true;
 116         }
 117
 118         if (sid_check_is_in_unix_groups(sid) &&
 119             pdb_is_responsible_for_unix_groups())
 120         {
 121                 return true;
 122         }
 123
 124         if (pdb_is_responsible_for_everything_else())
 125         {
 126                 return true;
 127         }
 128
 129         return false;
 130 }