Merge from TNG.

(This used to be commit e5cb97dda89fe23612b75861232591e4831733e0)

diff --git a/source3/nsswitch/common.c b/source3/nsswitch/common.c
index 9719f073852f782307b0f9f3bcf278e086bce60f..f93c0e0d1162495b52084adb5fd3a8d310baee6f 100644 (file)
--- a/source3/nsswitch/common.c
+++ b/source3/nsswitch/common.c
@@ -242,7 +242,7 @@ static int read_sock(void *buffer, int count)
 
 int read_reply(struct winbindd_response *response)
 {
-    int result1, result2;
+    int result1, result2 = 0;
 
     if (!response) {
         return -1;
@@ -270,7 +270,6 @@ int read_reply(struct winbindd_response *response)
 
         if ((result2 = read_sock(response->extra_data, extra_data_len))
             == -1) {
-
             return -1;
         }
     }
@@ -280,3 +279,56 @@ int read_reply(struct winbindd_response *response)
     return result1 + result2;
 }
 
+/* Free a response structure */
+
+void free_response(struct winbindd_response *response)
+{
+       /* Free any allocated extra_data */
+
+       if (response && response->extra_data) {
+               free(response->extra_data);
+       }
+}
+
+/* Handle simple types of requests */
+
+enum nss_status generic_request(int req_type, 
+                               struct winbindd_request *request,
+                               struct winbindd_response *response)
+{
+       struct winbindd_request lrequest;
+       struct winbindd_response lresponse;
+
+       /* Check for our tricky environment variable */
+
+       if (getenv(WINBINDD_DONT_ENV)) {
+               return NSS_STATUS_NOTFOUND;
+       }
+
+       if (!response) response = &lresponse;
+       if (!request) request = &lrequest;
+       
+       /* Fill in request and send down pipe */
+       init_request(request, req_type);
+       
+       if (write_sock(request, sizeof(*request)) == -1) {
+               return NSS_STATUS_UNAVAIL;
+       }
+       
+       /* Wait for reply */
+       if (read_reply(response) == -1) {
+               return NSS_STATUS_UNAVAIL;
+       }
+
+       /* Throw away extra data if client didn't request it */
+       if (response == &lresponse) {
+               free_response(response);
+       }
+
+       /* Copy reply data from socket */
+       if (response->result != WINBINDD_OK) {
+               return NSS_STATUS_NOTFOUND;
+       }
+       
+       return NSS_STATUS_SUCCESS;
+}

diff --git a/source3/nsswitch/winbindd_nss.h b/source3/nsswitch/winbindd_nss.h
index 0cf16e9666321e1f757f7a012c6d856d1b187d1f..82f55661e996632f62e138b0f16ed94ac244d83d 100644 (file)
--- a/source3/nsswitch/winbindd_nss.h
+++ b/source3/nsswitch/winbindd_nss.h
@@ -27,22 +27,59 @@
 
 #define WINBINDD_SOCKET_NAME "pipe"            /* Name of PF_UNIX socket */
 #define WINBINDD_SOCKET_DIR  "/tmp/.winbindd"  /* Name of PF_UNIX dir */
-#define WINBINDD_DOMAIN_ENV  "WINBINDD_DOMAIN" /* Environment variable */
+#define WINBINDD_DOMAIN_ENV  "WINBINDD_DOMAIN" /* Environment variables */
+#define WINBINDD_DONT_ENV    "_NO_WINBINDD"
 
 /* Socket commands */
 
 enum winbindd_cmd {
-    WINBINDD_GETPWNAM_FROM_USER,     /* getpwnam stuff */
-    WINBINDD_GETPWNAM_FROM_UID,
-    WINBINDD_GETGRNAM_FROM_GROUP,    /* getgrnam stuff */
-    WINBINDD_GETGRNAM_FROM_GID,
-    WINBINDD_SETPWENT,               /* get/set/endpwent */
-    WINBINDD_ENDPWENT,
-    WINBINDD_GETPWENT,
-    WINBINDD_SETGRENT,               /* get/set/endgrent */
-    WINBINDD_ENDGRENT,
-    WINBINDD_GETGRENT,
-    WINBINDD_PAM_AUTH
+
+       /* Get users and groups */
+
+       WINBINDD_GETPWNAM_FROM_USER,
+       WINBINDD_GETPWNAM_FROM_UID,
+       WINBINDD_GETGRNAM_FROM_GROUP,
+       WINBINDD_GETGRNAM_FROM_GID,
+
+       /* Enumerate users and groups */
+
+       WINBINDD_SETPWENT,
+       WINBINDD_ENDPWENT,
+       WINBINDD_GETPWENT,
+       WINBINDD_SETGRENT,
+       WINBINDD_ENDGRENT,
+       WINBINDD_GETGRENT,
+
+       /* PAM authenticate and password change */
+
+       WINBINDD_PAM_AUTH,
+       WINBINDD_PAM_CHAUTHTOK,
+
+       /* List various things */
+
+        WINBINDD_LIST_USERS,         /* List w/o rid->id mapping */
+        WINBINDD_LIST_GROUPS,        /* Ditto */
+       WINBINDD_LIST_TRUSTDOM,
+
+       /* SID conversion */
+
+       WINBINDD_LOOKUPSID,
+       WINBINDD_LOOKUPNAME,
+
+       /* S*RS functions */
+
+       WINBINDD_SID_TO_UID,       
+       WINBINDD_SID_TO_GID,
+       WINBINDD_UID_TO_SID,
+       WINBINDD_GID_TO_SID,
+
+       /* Miscellaneous other stuff */
+
+       WINBINDD_CHECK_MACHACC,     /* Check machine account pw works */
+
+       /* Placeholder for end of cmd list */
+
+       WINBINDD_NUM_CMDS
 };
 
 /* Winbind request structure */
@@ -52,15 +89,21 @@ struct winbindd_request {
        pid_t pid;               /* pid of calling process */
 
        union {
-               fstring username;    /* getpwnam() */
-               fstring groupname;   /* getgrnam() */
-               uid_t uid;           /* getpwuid() */
-               gid_t gid;           /* getgrgid() */
+               fstring username;    /* getpwnam */
+               fstring groupname;   /* getgrnam */
+               uid_t uid;           /* getpwuid, uid_to_sid */
+               gid_t gid;           /* getgrgid, gid_to_sid */
                struct {
-                       /* the following is used by pam_winbind */
                        fstring user;
                        fstring pass;
-               } auth;
+               } auth;              /* pam_winbind auth module */
+                struct {
+                    fstring user;
+                    fstring oldpass;
+                    fstring newpass;
+                } chauthtok;         /* pam_winbind passwd module */
+               fstring sid;         /* lookupsid, sid_to_[ug]id */
+               fstring name;        /* lookupname */
        } data;
         fstring domain;      /* {set,get,end}{pw,gr}ent() */
 };
@@ -68,51 +111,58 @@ struct winbindd_request {
 /* Response values */
 
 enum winbindd_result {
-    WINBINDD_ERROR,
-    WINBINDD_OK
+       WINBINDD_ERROR,
+       WINBINDD_OK
 };
 
 /* Winbind response structure */
 
 struct winbindd_response {
     
-    /* Header information */
-
-    int length;                           /* Length of response */
-    enum winbindd_result result;          /* Result code */
-
-    /* Fixed length return data */
+       /* Header information */
 
-    union {
-        
-        /* getpwnam, getpwuid, getpwent */
+       int length;                           /* Length of response */
+       enum winbindd_result result;          /* Result code */
 
-        struct winbindd_pw {
-            fstring pw_name;
-            fstring pw_passwd;
-            uid_t pw_uid;
-            gid_t pw_gid;
-            fstring pw_gecos;
-            fstring pw_dir;
-            fstring pw_shell;
-            int pwent_ndx;
-        } pw;
-
-        /* getgrnam, getgrgid, getgrent */
-
-        struct winbindd_gr {
-            fstring gr_name;
-            fstring gr_passwd;
-            gid_t gr_gid;
-            int num_gr_mem;
-            int grent_ndx;
-        } gr;
-
-    } data;
+       /* Fixed length return data */
+       
+       union {
+               
+               /* getpwnam, getpwuid, getpwent */
+               
+               struct winbindd_pw {
+                       fstring pw_name;
+                       fstring pw_passwd;
+                       uid_t pw_uid;
+                       gid_t pw_gid;
+                       fstring pw_gecos;
+                       fstring pw_dir;
+                       fstring pw_shell;
+                       int pwent_ndx;
+               } pw;
+
+               /* getgrnam, getgrgid, getgrent */
+
+               struct winbindd_gr {
+                       fstring gr_name;
+                       fstring gr_passwd;
+                       gid_t gr_gid;
+                       int num_gr_mem;
+                       int grent_ndx;
+               } gr;
+
+               fstring sid;        /* lookupname, [ug]id_to_sid */
+               struct {
+                       fstring name;       /* lookupsid */
+                       int type;
+               } name;
+               uid_t uid;          /* sid_to_uid */
+               gid_t gid;          /* sid_to_gid */
+       } data;
 
-    /* Variable length return data */
+       /* Variable length return data */
 
-    void *extra_data;                    /* getgrnam, getgrgid, getgrent */
+       void *extra_data;               /* getgrnam, getgrgid, getgrent */
 };
 
 #endif