2 * Unix SMB/CIFS implementation.
3 * SMB parameters and setup
4 * Copyright (C) Andrew Tridgell 1992-1998
5 * Copyright (C) Simo Sorce 2000-2002
6 * Copyright (C) Gerald Carter 2000
7 * Copyright (C) Jeremy Allison 2001
8 * Copyright (C) Andrew Bartlett 2002
10 * This program is free software; you can redistribute it and/or modify it under
11 * the terms of the GNU General Public License as published by the Free
12 * Software Foundation; either version 2 of the License, or (at your option)
15 * This program is distributed in the hope that it will be useful, but WITHOUT
16 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
17 * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
20 * You should have received a copy of the GNU General Public License along with
21 * this program; if not, write to the Free Software Foundation, Inc., 675
22 * Mass Ave, Cambridge, MA 02139, USA.
27 #if 0 /* when made a module use this */
29 static int tdbsam_debug_level = DBGC_ALL;
31 #define DBGC_CLASS tdbsam_debug_level
36 #define DBGC_CLASS DBGC_PASSDB
40 #define PDB_VERSION "20010830"
41 #define PASSDB_FILE_NAME "passdb.tdb"
42 #define USERPREFIX "USER_"
43 #define RIDPREFIX "RID_"
45 struct tdbsam_privates {
46 TDB_CONTEXT *passwd_tdb;
49 /* retrive-once info */
50 const char *tdbsam_location;
53 /***************************************************************
54 Open the TDB passwd database for SAM account enumeration.
55 ****************************************************************/
57 static NTSTATUS tdbsam_setsampwent(struct pdb_methods *my_methods, BOOL update)
59 struct tdbsam_privates *tdb_state = (struct tdbsam_privates *)my_methods->private_data;
62 if (!(tdb_state->passwd_tdb = tdb_open_log(tdb_state->tdbsam_location, 0, TDB_DEFAULT, update?(O_RDWR|O_CREAT):O_RDONLY, 0600)))
64 DEBUG(0, ("Unable to open/create TDB passwd\n"));
65 return NT_STATUS_UNSUCCESSFUL;
68 tdb_state->key = tdb_firstkey(tdb_state->passwd_tdb);
73 static void close_tdb(struct tdbsam_privates *tdb_state)
75 if (tdb_state->passwd_tdb) {
76 tdb_close(tdb_state->passwd_tdb);
77 tdb_state->passwd_tdb = NULL;
81 /***************************************************************
82 End enumeration of the TDB passwd list.
83 ****************************************************************/
85 static void tdbsam_endsampwent(struct pdb_methods *my_methods)
87 struct tdbsam_privates *tdb_state = (struct tdbsam_privates *)my_methods->private_data;
88 SAFE_FREE(tdb_state->key.dptr);
91 DEBUG(7, ("endtdbpwent: closed sam database.\n"));
94 /*****************************************************************
95 Get one SAM_ACCOUNT from the TDB (next in line)
96 *****************************************************************/
98 static NTSTATUS tdbsam_getsampwent(struct pdb_methods *my_methods, SAM_ACCOUNT *user)
100 NTSTATUS nt_status = NT_STATUS_UNSUCCESSFUL;
101 struct tdbsam_privates *tdb_state = (struct tdbsam_privates *)my_methods->private_data;
102 TDB_DATA data, old_key;
103 const char *prefix = USERPREFIX;
104 int prefixlen = strlen (prefix);
108 DEBUG(0,("pdb_get_sampwent: SAM_ACCOUNT is NULL.\n"));
112 /* skip all non-USER entries (eg. RIDs) */
113 while ((tdb_state->key.dsize != 0) && (strncmp(tdb_state->key.dptr, prefix, prefixlen))) {
115 old_key = tdb_state->key;
117 /* increment to next in line */
118 tdb_state->key = tdb_nextkey(tdb_state->passwd_tdb, tdb_state->key);
120 SAFE_FREE(old_key.dptr);
123 /* do we have an valid iteration pointer? */
124 if(tdb_state->passwd_tdb == NULL) {
125 DEBUG(0,("pdb_get_sampwent: Bad TDB Context pointer.\n"));
129 data = tdb_fetch(tdb_state->passwd_tdb, tdb_state->key);
131 DEBUG(5,("pdb_getsampwent: database entry not found.\n"));
135 /* unpack the buffer */
136 if (!init_sam_from_buffer(user, data.dptr, data.dsize)) {
137 DEBUG(0,("pdb_getsampwent: Bad SAM_ACCOUNT entry returned from TDB!\n"));
138 SAFE_FREE(data.dptr);
141 SAFE_FREE(data.dptr);
143 old_key = tdb_state->key;
145 /* increment to next in line */
146 tdb_state->key = tdb_nextkey(tdb_state->passwd_tdb, tdb_state->key);
148 SAFE_FREE(old_key.dptr);
153 /******************************************************************
154 Lookup a name in the SAM TDB
155 ******************************************************************/
157 static NTSTATUS tdbsam_getsampwnam (struct pdb_methods *my_methods, SAM_ACCOUNT *user, const char *sname)
159 NTSTATUS nt_status = NT_STATUS_UNSUCCESSFUL;
160 struct tdbsam_privates *tdb_state = (struct tdbsam_privates *)my_methods->private_data;
161 TDB_CONTEXT *pwd_tdb;
167 DEBUG(0,("pdb_getsampwnam: SAM_ACCOUNT is NULL.\n"));
172 /* Data is stored in all lower-case */
173 fstrcpy(name, sname);
177 slprintf(keystr, sizeof(keystr)-1, "%s%s", USERPREFIX, name);
179 key.dsize = strlen(keystr) + 1;
181 /* open the accounts TDB */
182 if (!(pwd_tdb = tdb_open_log(tdb_state->tdbsam_location, 0, TDB_DEFAULT, O_RDONLY, 0600))) {
183 DEBUG(0, ("pdb_getsampwnam: Unable to open TDB passwd (%s)!\n", tdb_state->tdbsam_location));
188 data = tdb_fetch(pwd_tdb, key);
190 DEBUG(5,("pdb_getsampwnam (TDB): error fetching database.\n"));
191 DEBUGADD(5, (" Error: %s\n", tdb_errorstr(pwd_tdb)));
192 DEBUGADD(5, (" Key: %s\n", keystr));
197 /* unpack the buffer */
198 if (!init_sam_from_buffer(user, data.dptr, data.dsize)) {
199 DEBUG(0,("pdb_getsampwent: Bad SAM_ACCOUNT entry returned from TDB!\n"));
200 SAFE_FREE(data.dptr);
204 SAFE_FREE(data.dptr);
206 /* no further use for database, close it now */
212 /***************************************************************************
214 **************************************************************************/
216 static NTSTATUS tdbsam_getsampwrid (struct pdb_methods *my_methods, SAM_ACCOUNT *user, uint32 rid)
218 NTSTATUS nt_status = NT_STATUS_UNSUCCESSFUL;
219 struct tdbsam_privates *tdb_state = (struct tdbsam_privates *)my_methods->private_data;
220 TDB_CONTEXT *pwd_tdb;
226 DEBUG(0,("pdb_getsampwrid: SAM_ACCOUNT is NULL.\n"));
231 slprintf(keystr, sizeof(keystr)-1, "%s%.8x", RIDPREFIX, rid);
233 key.dsize = strlen (keystr) + 1;
235 /* open the accounts TDB */
236 if (!(pwd_tdb = tdb_open_log(tdb_state->tdbsam_location, 0, TDB_DEFAULT, O_RDONLY, 0600))) {
237 DEBUG(0, ("pdb_getsampwrid: Unable to open TDB rid database!\n"));
242 data = tdb_fetch (pwd_tdb, key);
244 DEBUG(5,("pdb_getsampwrid (TDB): error looking up RID %d by key %s.\n", rid, keystr));
245 DEBUGADD(5, (" Error: %s\n", tdb_errorstr(pwd_tdb)));
250 fstrcpy(name, data.dptr);
251 SAFE_FREE(data.dptr);
255 return tdbsam_getsampwnam (my_methods, user, name);
258 static NTSTATUS tdbsam_getsampwsid(struct pdb_methods *my_methods, SAM_ACCOUNT * user, const DOM_SID *sid)
261 if (!sid_peek_check_rid(get_global_sam_sid(), sid, &rid))
262 return NT_STATUS_UNSUCCESSFUL;
263 return tdbsam_getsampwrid(my_methods, user, rid);
266 /***************************************************************************
268 ****************************************************************************/
270 static NTSTATUS tdbsam_delete_sam_account(struct pdb_methods *my_methods, SAM_ACCOUNT *sam_pass)
272 NTSTATUS nt_status = NT_STATUS_UNSUCCESSFUL;
273 struct tdbsam_privates *tdb_state = (struct tdbsam_privates *)my_methods->private_data;
274 TDB_CONTEXT *pwd_tdb;
280 fstrcpy(name, pdb_get_username(sam_pass));
284 if (!(pwd_tdb = tdb_open_log(tdb_state->tdbsam_location, 0, TDB_DEFAULT, O_RDWR, 0600))) {
285 DEBUG(0, ("Unable to open TDB passwd!"));
289 /* set the search key */
290 slprintf(keystr, sizeof(keystr)-1, "%s%s", USERPREFIX, name);
292 key.dsize = strlen (keystr) + 1;
294 rid = pdb_get_user_rid(sam_pass);
296 /* it's outaa here! 8^) */
297 if (tdb_delete(pwd_tdb, key) != TDB_SUCCESS) {
298 DEBUG(5, ("Error deleting entry from tdb passwd database!\n"));
299 DEBUGADD(5, (" Error: %s\n", tdb_errorstr(pwd_tdb)));
304 /* delete also the RID key */
306 /* set the search key */
307 slprintf(keystr, sizeof(keystr)-1, "%s%.8x", RIDPREFIX, rid);
309 key.dsize = strlen (keystr) + 1;
311 /* it's outaa here! 8^) */
312 if (tdb_delete(pwd_tdb, key) != TDB_SUCCESS) {
313 DEBUG(5, ("Error deleting entry from tdb rid database!\n"));
314 DEBUGADD(5, (" Error: %s\n", tdb_errorstr(pwd_tdb)));
324 /***************************************************************************
326 ****************************************************************************/
328 static BOOL tdb_update_sam(struct pdb_methods *my_methods, SAM_ACCOUNT* newpwd, int flag)
330 struct tdbsam_privates *tdb_state = (struct tdbsam_privates *)my_methods->private_data;
331 TDB_CONTEXT *pwd_tdb = NULL;
339 /* invalidate the existing TDB iterator if it is open */
341 if (tdb_state->passwd_tdb) {
342 tdb_close(tdb_state->passwd_tdb);
343 tdb_state->passwd_tdb = NULL;
346 /* open the account TDB passwd*/
348 pwd_tdb = tdb_open_log(tdb_state->tdbsam_location, 0, TDB_DEFAULT, O_RDWR | O_CREAT, 0600);
351 DEBUG(0, ("tdb_update_sam: Unable to open TDB passwd (%s)!\n",
352 tdb_state->tdbsam_location));
356 if (!pdb_get_group_rid(newpwd)) {
357 DEBUG (0,("tdb_update_sam: Failing to store a SAM_ACCOUNT for [%s] without a primary group RID\n",
358 pdb_get_username(newpwd)));
363 if ( !(user_rid = pdb_get_user_rid(newpwd)) ) {
364 DEBUG(0,("tdb_update_sam: SAM_ACCOUNT (%s) with no RID!\n", pdb_get_username(newpwd)));
369 /* copy the SAM_ACCOUNT struct into a BYTE buffer for storage */
370 if ((data.dsize=init_buffer_from_sam (&buf, newpwd, False)) == -1) {
371 DEBUG(0,("tdb_update_sam: ERROR - Unable to copy SAM_ACCOUNT info BYTE buffer!\n"));
377 fstrcpy(name, pdb_get_username(newpwd));
380 DEBUG(5, ("Storing %saccount %s with RID %d\n", flag == TDB_INSERT ? "(new) " : "", name, user_rid));
382 /* setup the USER index key */
383 slprintf(keystr, sizeof(keystr)-1, "%s%s", USERPREFIX, name);
385 key.dsize = strlen(keystr) + 1;
387 /* add the account */
388 if (tdb_store(pwd_tdb, key, data, flag) != TDB_SUCCESS) {
389 DEBUG(0, ("Unable to modify passwd TDB!"));
390 DEBUGADD(0, (" Error: %s", tdb_errorstr(pwd_tdb)));
391 DEBUGADD(0, (" occured while storing the main record (%s)\n", keystr));
397 data.dsize = strlen(name) + 1;
400 /* setup the RID index key */
401 slprintf(keystr, sizeof(keystr)-1, "%s%.8x", RIDPREFIX, user_rid);
403 key.dsize = strlen (keystr) + 1;
405 /* add the reference */
406 if (tdb_store(pwd_tdb, key, data, flag) != TDB_SUCCESS) {
407 DEBUG(0, ("Unable to modify TDB passwd !"));
408 DEBUGADD(0, (" Error: %s\n", tdb_errorstr(pwd_tdb)));
409 DEBUGADD(0, (" occured while storing the RID index (%s)\n", keystr));
423 /***************************************************************************
424 Allocates a new RID and returns it to the caller as a domain sid
426 NOTE: Use carefullt, do not waste RIDs they are a limited resource!
428 ***************************************************************************/
430 static NTSTATUS tdbsam_get_next_sid (struct pdb_methods *my_methods, DOM_SID *sid)
432 NTSTATUS ret = NT_STATUS_UNSUCCESSFUL;
433 struct tdbsam_privates *tdb_state = (struct tdbsam_privates *)my_methods->private_data;
434 TDB_CONTEXT *pwd_tdb;
438 return NT_STATUS_INVALID_PARAMETER;
441 pwd_tdb = tdb_open_log(tdb_state->tdbsam_location, 0, TDB_DEFAULT, O_RDWR | O_CREAT, 0600);
444 DEBUG(0, ("tdbsam_get_next_sid: Unable to open TDB passwd (%s)!\n", tdb_state->tdbsam_location));
445 return NT_STATUS_UNSUCCESSFUL;
449 if (tdb_change_uint32_atomic(pwd_tdb, "RID_COUNTER", &rid, 1)) {
451 sid_copy(sid, get_global_sam_sid());
452 if (!sid_append_rid(sid, rid)) {
465 /***************************************************************************
466 Modifies an existing SAM_ACCOUNT
467 ****************************************************************************/
469 static NTSTATUS tdbsam_update_sam_account (struct pdb_methods *my_methods, SAM_ACCOUNT *newpwd)
471 if (tdb_update_sam(my_methods, newpwd, TDB_MODIFY))
474 return NT_STATUS_UNSUCCESSFUL;
477 /***************************************************************************
478 Adds an existing SAM_ACCOUNT
479 ****************************************************************************/
481 static NTSTATUS tdbsam_add_sam_account (struct pdb_methods *my_methods, SAM_ACCOUNT *newpwd)
483 if (tdb_update_sam(my_methods, newpwd, TDB_INSERT))
486 return NT_STATUS_UNSUCCESSFUL;
489 static void free_private_data(void **vp)
491 struct tdbsam_privates **tdb_state = (struct tdbsam_privates **)vp;
492 close_tdb(*tdb_state);
495 /* No need to free any further, as it is talloc()ed */
499 static NTSTATUS pdb_init_tdbsam(PDB_CONTEXT *pdb_context, PDB_METHODS **pdb_method, const char *location)
502 struct tdbsam_privates *tdb_state;
504 if (!NT_STATUS_IS_OK(nt_status = make_pdb_methods(pdb_context->mem_ctx, pdb_method))) {
508 (*pdb_method)->name = "tdbsam";
510 (*pdb_method)->setsampwent = tdbsam_setsampwent;
511 (*pdb_method)->endsampwent = tdbsam_endsampwent;
512 (*pdb_method)->getsampwent = tdbsam_getsampwent;
513 (*pdb_method)->getsampwnam = tdbsam_getsampwnam;
514 (*pdb_method)->getsampwsid = tdbsam_getsampwsid;
515 (*pdb_method)->add_sam_account = tdbsam_add_sam_account;
516 (*pdb_method)->update_sam_account = tdbsam_update_sam_account;
517 (*pdb_method)->delete_sam_account = tdbsam_delete_sam_account;
519 tdb_state = talloc_zero(pdb_context->mem_ctx, sizeof(struct tdbsam_privates));
522 DEBUG(0, ("talloc() failed for tdbsam private_data!\n"));
523 return NT_STATUS_NO_MEMORY;
527 tdb_state->tdbsam_location = talloc_strdup(pdb_context->mem_ctx, location);
530 get_private_directory(tdbfile);
531 pstrcat(tdbfile, "/");
532 pstrcat(tdbfile, PASSDB_FILE_NAME);
533 tdb_state->tdbsam_location = talloc_strdup(pdb_context->mem_ctx, tdbfile);
536 (*pdb_method)->private_data = tdb_state;
538 (*pdb_method)->free_private_data = free_private_data;
543 NTSTATUS pdb_tdbsam_init(void)
545 return smb_register_passdb(PASSDB_INTERFACE_VERSION, "tdbsam", pdb_init_tdbsam);