2 Unix SMB/CIFS implementation.
4 Command backend for wbinfo --user-sids
6 Copyright (C) Volker Lendecke 2005
8 This program is free software; you can redistribute it and/or modify
9 it under the terms of the GNU General Public License as published by
10 the Free Software Foundation; either version 2 of the License, or
11 (at your option) any later version.
13 This program is distributed in the hope that it will be useful,
14 but WITHOUT ANY WARRANTY; without even the implied warranty of
15 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16 GNU General Public License for more details.
18 You should have received a copy of the GNU General Public License
19 along with this program; if not, write to the Free Software
20 Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
24 #include "libcli/composite/composite.h"
25 #include "winbind/wb_server.h"
26 #include "smbd/service_task.h"
27 #include "librpc/gen_ndr/ndr_samr_c.h"
28 #include "libcli/security/security.h"
30 /* Calculate the token in two steps: Go the user's originating domain, ask for
31 * the user's domain groups. Then with the resulting list of sids go to our
32 * own domain to expand the aliases aka domain local groups. */
34 struct cmd_usersids_state {
35 struct composite_context *ctx;
36 struct wbsrv_service *service;
37 struct dom_sid *user_sid;
39 struct dom_sid **domgroups;
41 struct lsa_SidArray lsa_sids;
43 struct samr_GetAliasMembership r;
46 struct dom_sid **sids;
49 static void usersids_recv_domgroups(struct composite_context *ctx);
50 static void usersids_recv_domain(struct composite_context *ctx);
51 static void usersids_recv_aliases(struct rpc_request *req);
53 struct composite_context *wb_cmd_usersids_send(TALLOC_CTX *mem_ctx,
54 struct wbsrv_service *service,
55 const struct dom_sid *sid)
57 struct composite_context *result, *ctx;
58 struct cmd_usersids_state *state;
61 result = composite_create(mem_ctx, service->task->event_ctx);
62 if (result == NULL) goto failed;
64 state = talloc(result, struct cmd_usersids_state);
65 if (state == NULL) goto failed;
67 result->private_data = state;
69 state->service = service;
70 state->user_sid = dom_sid_dup(state, sid);
71 if (state->user_sid == NULL) goto failed;
73 ctx = wb_cmd_userdomgroups_send(state, service, sid);
74 if (ctx == NULL) goto failed;
76 ctx->async.fn = usersids_recv_domgroups;
77 ctx->async.private_data = state;
85 static void usersids_recv_domgroups(struct composite_context *ctx)
87 struct cmd_usersids_state *state =
88 talloc_get_type(ctx->async.private_data,
89 struct cmd_usersids_state);
91 state->ctx->status = wb_cmd_userdomgroups_recv(ctx, state,
92 &state->num_domgroups,
94 if (!composite_is_ok(state->ctx)) return;
96 ctx = wb_sid2domain_send(state, state->service,
97 state->service->primary_sid);
98 composite_continue(state->ctx, ctx, usersids_recv_domain, state);
101 static void usersids_recv_domain(struct composite_context *ctx)
103 struct cmd_usersids_state *state =
104 talloc_get_type(ctx->async.private_data,
105 struct cmd_usersids_state);
106 struct rpc_request *req;
107 struct wbsrv_domain *domain;
110 state->ctx->status = wb_sid2domain_recv(ctx, &domain);
111 if (!composite_is_ok(state->ctx)) return;
113 state->lsa_sids.num_sids = state->num_domgroups+1;
114 state->lsa_sids.sids = talloc_array(state, struct lsa_SidPtr,
115 state->lsa_sids.num_sids);
116 if (composite_nomem(state->lsa_sids.sids, state->ctx)) return;
118 state->lsa_sids.sids[0].sid = state->user_sid;
119 for (i=0; i<state->num_domgroups; i++) {
120 state->lsa_sids.sids[i+1].sid = state->domgroups[i];
123 state->rids.count = 0;
124 state->rids.ids = NULL;
126 state->r.in.domain_handle = domain->domain_handle;
127 state->r.in.sids = &state->lsa_sids;
128 state->r.out.rids = &state->rids;
130 req = dcerpc_samr_GetAliasMembership_send(domain->samr_pipe, state,
132 composite_continue_rpc(state->ctx, req, usersids_recv_aliases, state);
135 static void usersids_recv_aliases(struct rpc_request *req)
137 struct cmd_usersids_state *state =
138 talloc_get_type(req->async.private_data,
139 struct cmd_usersids_state);
142 state->ctx->status = dcerpc_ndr_request_recv(req);
143 if (!composite_is_ok(state->ctx)) return;
144 state->ctx->status = state->r.out.result;
145 if (!composite_is_ok(state->ctx)) return;
147 state->num_sids = 1 + state->num_domgroups + state->r.out.rids->count;
148 state->sids = talloc_array(state, struct dom_sid *, state->num_sids);
149 if (composite_nomem(state->sids, state->ctx)) return;
151 state->sids[0] = talloc_steal(state->sids, state->user_sid);
153 for (i=0; i<state->num_domgroups; i++) {
155 talloc_steal(state->sids, state->domgroups[i]);
158 for (i=0; i<state->r.out.rids->count; i++) {
159 state->sids[1+state->num_domgroups+i] = dom_sid_add_rid(
160 state->sids, state->service->primary_sid,
161 state->r.out.rids->ids[i]);
163 if (composite_nomem(state->sids[1+state->num_domgroups+i],
167 composite_done(state->ctx);
170 NTSTATUS wb_cmd_usersids_recv(struct composite_context *ctx,
172 int *num_sids, struct dom_sid ***sids)
174 NTSTATUS status = composite_wait(ctx);
175 if (NT_STATUS_IS_OK(status)) {
176 struct cmd_usersids_state *state =
177 talloc_get_type(ctx->private_data,
178 struct cmd_usersids_state);
179 *num_sids = state->num_sids;
180 *sids = talloc_steal(mem_ctx, state->sids);
186 NTSTATUS wb_cmd_usersids(TALLOC_CTX *mem_ctx, struct wbsrv_service *service,
187 const struct dom_sid *sid,
188 int *num_sids, struct dom_sid ***sids)
190 struct composite_context *c =
191 wb_cmd_usersids_send(mem_ctx, service, sid);
192 return wb_cmd_usersids_recv(c, mem_ctx, num_sids, sids);