source4/winbind/wb_samba3_cmd.c

   1 /*
   2    Unix SMB/CIFS implementation.
   3    Main winbindd samba3 server routines
   4
   5    Copyright (C) Stefan Metzmacher      2005
   6    Copyright (C) Volker Lendecke        2005
   7    Copyright (C) Andrew Bartlett <abartlet@samba.org> 2005
   8
   9    This program is free software; you can redistribute it and/or modify
  10    it under the terms of the GNU General Public License as published by
  11    the Free Software Foundation; either version 3 of the License, or
  12    (at your option) any later version.
  13
  14    This program is distributed in the hope that it will be useful,
  15    but WITHOUT ANY WARRANTY; without even the implied warranty of
  16    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  17    GNU General Public License for more details.
  18
  19    You should have received a copy of the GNU General Public License
  20    along with this program.  If not, see <http://www.gnu.org/licenses/>.
  21 */
  22
  23 #include "includes.h"
  24 #include "nsswitch/winbind_nss_config.h"
  25 #include "nsswitch/winbindd_nss.h"
  26 #include "winbind/wb_server.h"
  27 #include "winbind/wb_async_helpers.h"
  28 #include "winbind/wb_helper.h"
  29 #include "libcli/composite/composite.h"
  30 #include "version.h"
  31 #include "librpc/gen_ndr/netlogon.h"
  32 #include "libcli/security/security.h"
  33 #include "auth/pam_errors.h"
  34
  35 /*
  36    Send off the reply to an async Samba3 query, handling filling in the PAM, NTSTATUS and string errors.
  37 */
  38
  39 static void wbsrv_samba3_async_auth_epilogue(NTSTATUS status,
  40                                              struct wbsrv_samba3_call *s3call)
  41 {
  42         struct winbindd_response *resp = &s3call->response;
  43         if (!NT_STATUS_IS_OK(status)) {
  44                 resp->result = WINBINDD_ERROR;
  45                 WBSRV_SAMBA3_SET_STRING(resp->data.auth.nt_status_string,
  46                                         nt_errstr(status));
  47                 WBSRV_SAMBA3_SET_STRING(resp->data.auth.error_string,
  48                                         get_friendly_nt_error_msg(status));
  49         } else {
  50                 resp->result = WINBINDD_OK;
  51         }
  52
  53         resp->data.auth.pam_error = nt_status_to_pam(status);
  54         resp->data.auth.nt_status = NT_STATUS_V(status);
  55
  56         wbsrv_samba3_send_reply(s3call);
  57 }
  58
  59 /*
  60    Send of a generic reply to a Samba3 query
  61 */
  62
  63 static void wbsrv_samba3_async_epilogue(NTSTATUS status,
  64                                         struct wbsrv_samba3_call *s3call)
  65 {
  66         struct winbindd_response *resp = &s3call->response;
  67         if (NT_STATUS_IS_OK(status)) {
  68                 resp->result = WINBINDD_OK;
  69         } else {
  70                 resp->result = WINBINDD_ERROR;
  71         }
  72
  73         wbsrv_samba3_send_reply(s3call);
  74 }
  75
  76 /*
  77    Boilerplate commands, simple queries without network traffic
  78 */
  79
  80 NTSTATUS wbsrv_samba3_interface_version(struct wbsrv_samba3_call *s3call)
  81 {
  82         s3call->response.result                 = WINBINDD_OK;
  83         s3call->response.data.interface_version = WINBIND_INTERFACE_VERSION;
  84         return NT_STATUS_OK;
  85 }
  86
  87 NTSTATUS wbsrv_samba3_info(struct wbsrv_samba3_call *s3call)
  88 {
  89         s3call->response.result                 = WINBINDD_OK;
  90         s3call->response.data.info.winbind_separator = *lp_winbind_separator();
  91         WBSRV_SAMBA3_SET_STRING(s3call->response.data.info.samba_version,
  92                                 SAMBA_VERSION_STRING);
  93         return NT_STATUS_OK;
  94 }
  95
  96 NTSTATUS wbsrv_samba3_domain_name(struct wbsrv_samba3_call *s3call)
  97 {
  98         s3call->response.result                 = WINBINDD_OK;
  99         WBSRV_SAMBA3_SET_STRING(s3call->response.data.domain_name,
 100                                 lp_workgroup());
 101         return NT_STATUS_OK;
 102 }
 103
 104 NTSTATUS wbsrv_samba3_netbios_name(struct wbsrv_samba3_call *s3call)
 105 {
 106         s3call->response.result                 = WINBINDD_OK;
 107         WBSRV_SAMBA3_SET_STRING(s3call->response.data.netbios_name,
 108                                 lp_netbios_name());
 109         return NT_STATUS_OK;
 110 }
 111
 112 NTSTATUS wbsrv_samba3_priv_pipe_dir(struct wbsrv_samba3_call *s3call)
 113 {
 114         s3call->response.result                 = WINBINDD_OK;
 115         s3call->response.extra_data.data =
 116                 smbd_tmp_path(s3call, WINBINDD_SAMBA3_PRIVILEGED_SOCKET);
 117         NT_STATUS_HAVE_NO_MEMORY(s3call->response.extra_data.data);
 118         return NT_STATUS_OK;
 119 }
 120
 121 NTSTATUS wbsrv_samba3_ping(struct wbsrv_samba3_call *s3call)
 122 {
 123         s3call->response.result                 = WINBINDD_OK;
 124         return NT_STATUS_OK;
 125 }
 126
 127 #if 0
 128 /*
 129    Validate that we have a working pipe to the domain controller.
 130    Return any NT error found in the process
 131 */
 132
 133 static void checkmachacc_recv_creds(struct composite_context *ctx);
 134
 135 NTSTATUS wbsrv_samba3_check_machacc(struct wbsrv_samba3_call *s3call)
 136 {
 137         struct composite_context *ctx;
 138
 139         DEBUG(5, ("wbsrv_samba3_check_machacc called\n"));
 140
 141         ctx = wb_cmd_checkmachacc_send(s3call->call);
 142         NT_STATUS_HAVE_NO_MEMORY(ctx);
 143
 144         ctx->async.fn = checkmachacc_recv_creds;
 145         ctx->async.private_data = s3call;
 146         s3call->call->flags |= WBSRV_CALL_FLAGS_REPLY_ASYNC;
 147         return NT_STATUS_OK;
 148 }
 149
 150 static void checkmachacc_recv_creds(struct composite_context *ctx)
 151 {
 152         struct wbsrv_samba3_call *s3call =
 153                 talloc_get_type(ctx->async.private_data,
 154                                 struct wbsrv_samba3_call);
 155         NTSTATUS status;
 156
 157         status = wb_cmd_checkmachacc_recv(ctx);
 158
 159         wbsrv_samba3_async_auth_epilogue(status, s3call);
 160 }
 161 #endif
 162
 163 /*
 164   Find the name of a suitable domain controller, by query on the
 165   netlogon pipe to the DC.
 166 */
 167
 168 static void getdcname_recv_dc(struct composite_context *ctx);
 169
 170 NTSTATUS wbsrv_samba3_getdcname(struct wbsrv_samba3_call *s3call)
 171 {
 172         struct composite_context *ctx;
 173         struct wbsrv_service *service =
 174                 s3call->wbconn->listen_socket->service;
 175
 176         DEBUG(5, ("wbsrv_samba3_getdcname called\n"));
 177
 178         ctx = wb_cmd_getdcname_send(s3call, service,
 179                                     s3call->request.domain_name);
 180         NT_STATUS_HAVE_NO_MEMORY(ctx);
 181
 182         ctx->async.fn = getdcname_recv_dc;
 183         ctx->async.private_data = s3call;
 184         s3call->flags |= WBSRV_CALL_FLAGS_REPLY_ASYNC;
 185         return NT_STATUS_OK;
 186 }
 187
 188 static void getdcname_recv_dc(struct composite_context *ctx)
 189 {
 190         struct wbsrv_samba3_call *s3call =
 191                 talloc_get_type(ctx->async.private_data,
 192                                 struct wbsrv_samba3_call);
 193         const char *dcname;
 194         NTSTATUS status;
 195
 196         status = wb_cmd_getdcname_recv(ctx, s3call, &dcname);
 197         if (!NT_STATUS_IS_OK(status)) goto done;
 198
 199         s3call->response.result = WINBINDD_OK;
 200         WBSRV_SAMBA3_SET_STRING(s3call->response.data.dc_name, dcname);
 201
 202  done:
 203         wbsrv_samba3_async_epilogue(status, s3call);
 204 }
 205
 206 /*
 207    Lookup a user's domain groups
 208 */
 209
 210 static void userdomgroups_recv_groups(struct composite_context *ctx);
 211
 212 NTSTATUS wbsrv_samba3_userdomgroups(struct wbsrv_samba3_call *s3call)
 213 {
 214         struct composite_context *ctx;
 215         struct dom_sid *sid;
 216
 217         DEBUG(5, ("wbsrv_samba3_userdomgroups called\n"));
 218
 219         sid = dom_sid_parse_talloc(s3call, s3call->request.data.sid);
 220         if (sid == NULL) {
 221                 DEBUG(5, ("Could not parse sid %s\n",
 222                           s3call->request.data.sid));
 223                 return NT_STATUS_NO_MEMORY;
 224         }
 225
 226         ctx = wb_cmd_userdomgroups_send(
 227                 s3call, s3call->wbconn->listen_socket->service, sid);
 228         NT_STATUS_HAVE_NO_MEMORY(ctx);
 229
 230         ctx->async.fn = userdomgroups_recv_groups;
 231         ctx->async.private_data = s3call;
 232         s3call->flags |= WBSRV_CALL_FLAGS_REPLY_ASYNC;
 233         return NT_STATUS_OK;
 234 }
 235
 236 static void userdomgroups_recv_groups(struct composite_context *ctx)
 237 {
 238         struct wbsrv_samba3_call *s3call =
 239                 talloc_get_type(ctx->async.private_data,
 240                                 struct wbsrv_samba3_call);
 241         int i, num_sids;
 242         struct dom_sid **sids;
 243         char *sids_string;
 244         NTSTATUS status;
 245
 246         status = wb_cmd_userdomgroups_recv(ctx, s3call, &num_sids, &sids);
 247         if (!NT_STATUS_IS_OK(status)) goto done;
 248
 249         sids_string = talloc_strdup(s3call, "");
 250         if (sids_string == NULL) {
 251                 status = NT_STATUS_NO_MEMORY;
 252                 goto done;
 253         }
 254
 255         for (i=0; i<num_sids; i++) {
 256                 sids_string = talloc_asprintf_append(
 257                         sids_string, "%s\n", dom_sid_string(s3call, sids[i]));
 258         }
 259
 260         if (sids_string == NULL) {
 261                 status = NT_STATUS_NO_MEMORY;
 262                 goto done;
 263         }
 264
 265         s3call->response.result = WINBINDD_OK;
 266         s3call->response.extra_data.data = sids_string;
 267         s3call->response.length += strlen(sids_string)+1;
 268         s3call->response.data.num_entries = num_sids;
 269
 270  done:
 271         wbsrv_samba3_async_epilogue(status, s3call);
 272 }
 273
 274 /*
 275    Lookup the list of SIDs for a user
 276 */
 277 static void usersids_recv_sids(struct composite_context *ctx);
 278
 279 NTSTATUS wbsrv_samba3_usersids(struct wbsrv_samba3_call *s3call)
 280 {
 281         struct composite_context *ctx;
 282         struct dom_sid *sid;
 283
 284         DEBUG(5, ("wbsrv_samba3_usersids called\n"));
 285
 286         sid = dom_sid_parse_talloc(s3call, s3call->request.data.sid);
 287         if (sid == NULL) {
 288                 DEBUG(5, ("Could not parse sid %s\n",
 289                           s3call->request.data.sid));
 290                 return NT_STATUS_NO_MEMORY;
 291         }
 292
 293         ctx = wb_cmd_usersids_send(
 294                 s3call, s3call->wbconn->listen_socket->service, sid);
 295         NT_STATUS_HAVE_NO_MEMORY(ctx);
 296
 297         ctx->async.fn = usersids_recv_sids;
 298         ctx->async.private_data = s3call;
 299         s3call->flags |= WBSRV_CALL_FLAGS_REPLY_ASYNC;
 300         return NT_STATUS_OK;
 301 }
 302
 303 static void usersids_recv_sids(struct composite_context *ctx)
 304 {
 305         struct wbsrv_samba3_call *s3call =
 306                 talloc_get_type(ctx->async.private_data,
 307                                 struct wbsrv_samba3_call);
 308         int i, num_sids;
 309         struct dom_sid **sids;
 310         char *sids_string;
 311         NTSTATUS status;
 312
 313         status = wb_cmd_usersids_recv(ctx, s3call, &num_sids, &sids);
 314         if (!NT_STATUS_IS_OK(status)) goto done;
 315
 316         sids_string = talloc_strdup(s3call, "");
 317         if (sids_string == NULL) {
 318                 status = NT_STATUS_NO_MEMORY;
 319                 goto done;
 320         }
 321
 322         for (i=0; i<num_sids; i++) {
 323                 sids_string = talloc_asprintf_append(
 324                         sids_string, "%s\n", dom_sid_string(s3call, sids[i]));
 325                 if (sids_string == NULL) {
 326                         status = NT_STATUS_NO_MEMORY;
 327                         goto done;
 328                 }
 329         }
 330
 331         s3call->response.result = WINBINDD_OK;
 332         s3call->response.extra_data.data = sids_string;
 333         s3call->response.length += strlen(sids_string);
 334         s3call->response.data.num_entries = num_sids;
 335
 336         /* Hmmmm. Nasty protocol -- who invented the zeros between the
 337          * SIDs? Hmmm. Could have been me -- vl */
 338
 339         while (*sids_string != '\0') {
 340                 if ((*sids_string) == '\n') {
 341                         *sids_string = '\0';
 342                 }
 343                 sids_string += 1;
 344         }
 345
 346  done:
 347         wbsrv_samba3_async_epilogue(status, s3call);
 348 }
 349
 350 /*
 351    Lookup a DOMAIN\\user style name, and return a SID
 352 */
 353
 354 static void lookupname_recv_sid(struct composite_context *ctx);
 355
 356 NTSTATUS wbsrv_samba3_lookupname(struct wbsrv_samba3_call *s3call)
 357 {
 358         struct composite_context *ctx;
 359         struct wbsrv_service *service =
 360                 s3call->wbconn->listen_socket->service;
 361
 362         DEBUG(5, ("wbsrv_samba3_lookupname called\n"));
 363
 364         ctx = wb_cmd_lookupname_send(s3call, service,
 365                                      s3call->request.data.name.dom_name,
 366                                      s3call->request.data.name.name);
 367         NT_STATUS_HAVE_NO_MEMORY(ctx);
 368
 369         /* setup the callbacks */
 370         ctx->async.fn = lookupname_recv_sid;
 371         ctx->async.private_data = s3call;
 372         s3call->flags |= WBSRV_CALL_FLAGS_REPLY_ASYNC;
 373         return NT_STATUS_OK;
 374 }
 375
 376 static void lookupname_recv_sid(struct composite_context *ctx)
 377 {
 378         struct wbsrv_samba3_call *s3call =
 379                 talloc_get_type(ctx->async.private_data,
 380                                 struct wbsrv_samba3_call);
 381         struct wb_sid_object *sid;
 382         NTSTATUS status;
 383
 384         status = wb_cmd_lookupname_recv(ctx, s3call, &sid);
 385         if (!NT_STATUS_IS_OK(status)) goto done;
 386
 387         s3call->response.result = WINBINDD_OK;
 388         s3call->response.data.sid.type = sid->type;
 389         WBSRV_SAMBA3_SET_STRING(s3call->response.data.sid.sid,
 390                                 dom_sid_string(s3call, sid->sid));
 391
 392  done:
 393         wbsrv_samba3_async_epilogue(status, s3call);
 394 }
 395
 396 /*
 397    Lookup a SID, and return a DOMAIN\\user style name
 398 */
 399
 400 static void lookupsid_recv_name(struct composite_context *ctx);
 401
 402 NTSTATUS wbsrv_samba3_lookupsid(struct wbsrv_samba3_call *s3call)
 403 {
 404         struct composite_context *ctx;
 405         struct wbsrv_service *service =
 406                 s3call->wbconn->listen_socket->service;
 407         struct dom_sid *sid;
 408
 409         DEBUG(5, ("wbsrv_samba3_lookupsid called\n"));
 410
 411         sid = dom_sid_parse_talloc(s3call, s3call->request.data.sid);
 412         if (sid == NULL) {
 413                 DEBUG(5, ("Could not parse sid %s\n",
 414                           s3call->request.data.sid));
 415                 return NT_STATUS_NO_MEMORY;
 416         }
 417
 418         ctx = wb_cmd_lookupsid_send(s3call, service, sid);
 419         NT_STATUS_HAVE_NO_MEMORY(ctx);
 420
 421         /* setup the callbacks */
 422         ctx->async.fn = lookupsid_recv_name;
 423         ctx->async.private_data = s3call;
 424         s3call->flags |= WBSRV_CALL_FLAGS_REPLY_ASYNC;
 425         return NT_STATUS_OK;
 426 }
 427
 428 static void lookupsid_recv_name(struct composite_context *ctx)
 429 {
 430         struct wbsrv_samba3_call *s3call =
 431                 talloc_get_type(ctx->async.private_data,
 432                                 struct wbsrv_samba3_call);
 433         struct wb_sid_object *sid;
 434         NTSTATUS status;
 435
 436         status = wb_cmd_lookupsid_recv(ctx, s3call, &sid);
 437         if (!NT_STATUS_IS_OK(status)) goto done;
 438
 439         s3call->response.result = WINBINDD_OK;
 440         s3call->response.data.name.type = sid->type;
 441         WBSRV_SAMBA3_SET_STRING(s3call->response.data.name.dom_name,
 442                                 sid->domain);
 443         WBSRV_SAMBA3_SET_STRING(s3call->response.data.name.name, sid->name);
 444
 445  done:
 446         wbsrv_samba3_async_epilogue(status, s3call);
 447 }
 448
 449 /*
 450   Challenge-response authentication.  This interface is used by
 451   ntlm_auth and the smbd auth subsystem to pass NTLM authentication
 452   requests along a common pipe to the domain controller.
 453
 454   The return value (in the async reply) may include the 'info3'
 455   (effectivly most things you would want to know about the user), or
 456   the NT and LM session keys seperated.
 457 */
 458
 459 static void pam_auth_crap_recv(struct composite_context *ctx);
 460
 461 NTSTATUS wbsrv_samba3_pam_auth_crap(struct wbsrv_samba3_call *s3call)
 462 {
 463         struct composite_context *ctx;
 464         struct wbsrv_service *service =
 465                 s3call->wbconn->listen_socket->service;
 466         DATA_BLOB chal, nt_resp, lm_resp;
 467
 468         DEBUG(5, ("wbsrv_samba3_pam_auth_crap called\n"));
 469
 470         chal.data       = s3call->request.data.auth_crap.chal;
 471         chal.length     = sizeof(s3call->request.data.auth_crap.chal);
 472         nt_resp.data    = (uint8_t *)s3call->request.data.auth_crap.nt_resp;
 473         nt_resp.length  = s3call->request.data.auth_crap.nt_resp_len;
 474         lm_resp.data    = (uint8_t *)s3call->request.data.auth_crap.lm_resp;
 475         lm_resp.length  = s3call->request.data.auth_crap.lm_resp_len;
 476
 477         ctx = wb_cmd_pam_auth_crap_send(
 478                 s3call, service,
 479                 s3call->request.data.auth_crap.logon_parameters,
 480                 s3call->request.data.auth_crap.domain,
 481                 s3call->request.data.auth_crap.user,
 482                 s3call->request.data.auth_crap.workstation,
 483                 chal, nt_resp, lm_resp);
 484         NT_STATUS_HAVE_NO_MEMORY(ctx);
 485
 486         ctx->async.fn = pam_auth_crap_recv;
 487         ctx->async.private_data = s3call;
 488         s3call->flags |= WBSRV_CALL_FLAGS_REPLY_ASYNC;
 489         return NT_STATUS_OK;
 490 }
 491
 492 static void pam_auth_crap_recv(struct composite_context *ctx)
 493 {
 494         struct wbsrv_samba3_call *s3call =
 495                 talloc_get_type(ctx->async.private_data,
 496                                 struct wbsrv_samba3_call);
 497         NTSTATUS status;
 498         DATA_BLOB info3;
 499         struct netr_UserSessionKey user_session_key;
 500         struct netr_LMSessionKey lm_key;
 501         char *unix_username;
 502
 503         status = wb_cmd_pam_auth_crap_recv(ctx, s3call, &info3,
 504                                            &user_session_key, &lm_key, &unix_username);
 505         if (!NT_STATUS_IS_OK(status)) goto done;
 506
 507         if (s3call->request.flags & WBFLAG_PAM_USER_SESSION_KEY) {
 508                 memcpy(s3call->response.data.auth.user_session_key,
 509                        &user_session_key.key,
 510                        sizeof(s3call->response.data.auth.user_session_key));
 511         }
 512
 513         if (s3call->request.flags & WBFLAG_PAM_INFO3_NDR) {
 514                 s3call->response.extra_data.data = info3.data;
 515                 s3call->response.length += info3.length;
 516         }
 517
 518         if (s3call->request.flags & WBFLAG_PAM_LMKEY) {
 519                 memcpy(s3call->response.data.auth.first_8_lm_hash,
 520                        lm_key.key,
 521                        sizeof(s3call->response.data.auth.first_8_lm_hash));
 522         }
 523
 524         if (s3call->request.flags & WBFLAG_PAM_UNIX_NAME) {
 525                 s3call->response.extra_data.data = unix_username;
 526                 s3call->response.length += strlen(unix_username)+1;
 527         }
 528
 529  done:
 530         wbsrv_samba3_async_auth_epilogue(status, s3call);
 531 }
 532
 533 /* Plaintext authentication
 534
 535    This interface is used by ntlm_auth in it's 'basic' authentication
 536    mode, as well as by pam_winbind to authenticate users where we are
 537    given a plaintext password.
 538 */
 539
 540 static void pam_auth_recv(struct composite_context *ctx);
 541
 542 NTSTATUS wbsrv_samba3_pam_auth(struct wbsrv_samba3_call *s3call)
 543 {
 544         struct composite_context *ctx;
 545         struct wbsrv_service *service =
 546                 s3call->wbconn->listen_socket->service;
 547         char *user, *domain;
 548
 549         if (!wb_samba3_split_username(s3call,
 550                                  s3call->request.data.auth.user,
 551                                  &domain, &user)) {
 552                 return NT_STATUS_NO_SUCH_USER;
 553         }
 554
 555         ctx = wb_cmd_pam_auth_send(s3call, service, domain, user,
 556                                    s3call->request.data.auth.pass);
 557         NT_STATUS_HAVE_NO_MEMORY(ctx);
 558
 559         ctx->async.fn = pam_auth_recv;
 560         ctx->async.private_data = s3call;
 561         s3call->flags |= WBSRV_CALL_FLAGS_REPLY_ASYNC;
 562         return NT_STATUS_OK;
 563 }
 564
 565 static void pam_auth_recv(struct composite_context *ctx)
 566 {
 567         struct wbsrv_samba3_call *s3call =
 568                 talloc_get_type(ctx->async.private_data,
 569                                 struct wbsrv_samba3_call);
 570         NTSTATUS status;
 571
 572         status = wb_cmd_pam_auth_recv(ctx);
 573
 574         if (!NT_STATUS_IS_OK(status)) goto done;
 575
 576  done:
 577         wbsrv_samba3_async_auth_epilogue(status, s3call);
 578 }
 579
 580 /*
 581    List trusted domains
 582 */
 583
 584 static void list_trustdom_recv_doms(struct composite_context *ctx);
 585
 586 NTSTATUS wbsrv_samba3_list_trustdom(struct wbsrv_samba3_call *s3call)
 587 {
 588         struct composite_context *ctx;
 589         struct wbsrv_service *service =
 590                 s3call->wbconn->listen_socket->service;
 591
 592         DEBUG(5, ("wbsrv_samba3_list_trustdom called\n"));
 593
 594         ctx = wb_cmd_list_trustdoms_send(s3call, service);
 595         NT_STATUS_HAVE_NO_MEMORY(ctx);
 596
 597         ctx->async.fn = list_trustdom_recv_doms;
 598         ctx->async.private_data = s3call;
 599         s3call->flags |= WBSRV_CALL_FLAGS_REPLY_ASYNC;
 600         return NT_STATUS_OK;
 601 }
 602
 603 static void list_trustdom_recv_doms(struct composite_context *ctx)
 604 {
 605         struct wbsrv_samba3_call *s3call =
 606                 talloc_get_type(ctx->async.private_data,
 607                                 struct wbsrv_samba3_call);
 608         int i, num_domains;
 609         struct wb_dom_info **domains;
 610         NTSTATUS status;
 611         char *result;
 612
 613         status = wb_cmd_list_trustdoms_recv(ctx, s3call, &num_domains,
 614                                             &domains);
 615         if (!NT_STATUS_IS_OK(status)) goto done;
 616
 617         result = talloc_strdup(s3call, "");
 618         if (result == NULL) {
 619                 status = NT_STATUS_NO_MEMORY;
 620                 goto done;
 621         }
 622
 623         for (i=0; i<num_domains; i++) {
 624                 result = talloc_asprintf_append(
 625                         result, "%s\\%s\\%s",
 626                         domains[i]->name, domains[i]->name,
 627                         dom_sid_string(s3call, domains[i]->sid));
 628         }
 629
 630         if (result == NULL) {
 631                 status = NT_STATUS_NO_MEMORY;
 632                 goto done;
 633         }
 634
 635         s3call->response.result = WINBINDD_OK;
 636         if (num_domains > 0) {
 637                 s3call->response.extra_data.data = result;
 638                 s3call->response.length += strlen(result)+1;
 639         }
 640
 641  done:
 642         wbsrv_samba3_async_epilogue(status, s3call);
 643 }
 644
 645 /* NSS calls */
 646
 647 static void getpwnam_recv(struct composite_context *ctx);
 648
 649 NTSTATUS wbsrv_samba3_getpwnam(struct wbsrv_samba3_call *s3call)
 650 {
 651         struct composite_context *ctx;
 652         struct wbsrv_service *service =
 653                 s3call->wbconn->listen_socket->service;
 654
 655         DEBUG(5, ("wbsrv_samba3_getpwnam called\n"));
 656
 657         ctx = wb_cmd_getpwnam_send(s3call, service,
 658                         s3call->request.data.username);
 659         NT_STATUS_HAVE_NO_MEMORY(ctx);
 660
 661         ctx->async.fn = getpwnam_recv;
 662         ctx->async.private_data = s3call;
 663         s3call->flags |= WBSRV_CALL_FLAGS_REPLY_ASYNC;
 664         return NT_STATUS_OK;
 665 }
 666
 667 static void getpwnam_recv(struct composite_context *ctx)
 668 {
 669         struct wbsrv_samba3_call *s3call =
 670                 talloc_get_type(ctx->async.private_data,
 671                                 struct wbsrv_samba3_call);
 672         NTSTATUS status;
 673         struct winbindd_pw *pw;
 674
 675         DEBUG(5, ("getpwnam_recv called\n"));
 676
 677         status = wb_cmd_getpwnam_recv(ctx, s3call, &pw);
 678         if(NT_STATUS_IS_OK(status))
 679                 s3call->response.data.pw = *pw;
 680
 681         wbsrv_samba3_async_epilogue(status, s3call);
 682 }
 683
 684 static void getpwuid_recv(struct composite_context *ctx);
 685
 686 NTSTATUS wbsrv_samba3_getpwuid(struct wbsrv_samba3_call *s3call)
 687 {
 688         struct composite_context *ctx;
 689         struct wbsrv_service *service = s3call->wbconn->listen_socket->service;
 690
 691         DEBUG(5, ("wbsrv_samba3_getpwuid called\n"));
 692
 693         ctx = wb_cmd_getpwuid_send(s3call, service,
 694                         s3call->request.data.uid);
 695         NT_STATUS_HAVE_NO_MEMORY(ctx);
 696
 697         ctx->async.fn = getpwuid_recv;
 698         ctx->async.private_data = s3call;
 699         s3call->flags |= WBSRV_CALL_FLAGS_REPLY_ASYNC;
 700         return NT_STATUS_OK;
 701 }
 702
 703 static void getpwuid_recv(struct composite_context *ctx)
 704 {
 705         struct wbsrv_samba3_call *s3call =
 706                 talloc_get_type(ctx->async.private_data,
 707                                 struct wbsrv_samba3_call);
 708         NTSTATUS status;
 709         struct winbindd_pw *pw;
 710
 711         DEBUG(5, ("getpwuid_recv called\n"));
 712
 713         status = wb_cmd_getpwuid_recv(ctx, s3call, &pw);
 714         if (NT_STATUS_IS_OK(status))
 715                 s3call->response.data.pw = *pw;
 716
 717         wbsrv_samba3_async_epilogue(status, s3call);
 718 }
 719
 720 NTSTATUS wbsrv_samba3_setpwent(struct wbsrv_samba3_call *s3call)
 721 {
 722         DEBUG(5, ("wbsrv_samba3_setpwent called\n"));
 723         s3call->response.result = WINBINDD_OK;
 724         return NT_STATUS_OK;
 725 }
 726
 727 NTSTATUS wbsrv_samba3_getpwent(struct wbsrv_samba3_call *s3call)
 728 {
 729         DEBUG(5, ("wbsrv_samba3_getpwent called\n"));
 730         s3call->response.result = WINBINDD_ERROR;
 731         return NT_STATUS_OK;
 732 }
 733
 734 NTSTATUS wbsrv_samba3_endpwent(struct wbsrv_samba3_call *s3call)
 735 {
 736         DEBUG(5, ("wbsrv_samba3_endpwent called\n"));
 737         s3call->response.result = WINBINDD_OK;
 738         return NT_STATUS_OK;
 739 }
 740
 741 NTSTATUS wbsrv_samba3_getgrnam(struct wbsrv_samba3_call *s3call)
 742 {
 743         DEBUG(5, ("wbsrv_samba3_getgrnam called\n"));
 744         s3call->response.result = WINBINDD_ERROR;
 745         return NT_STATUS_OK;
 746 }
 747
 748 NTSTATUS wbsrv_samba3_getgrgid(struct wbsrv_samba3_call *s3call)
 749 {
 750         DEBUG(5, ("wbsrv_samba3_getgrgid called\n"));
 751         s3call->response.result = WINBINDD_ERROR;
 752         return NT_STATUS_OK;
 753 }
 754
 755 NTSTATUS wbsrv_samba3_getgroups(struct wbsrv_samba3_call *s3call)
 756 {
 757         DEBUG(5, ("wbsrv_samba3_getgroups called\n"));
 758         s3call->response.result = WINBINDD_ERROR;
 759         return NT_STATUS_OK;
 760 }
 761
 762 NTSTATUS wbsrv_samba3_setgrent(struct wbsrv_samba3_call *s3call)
 763 {
 764         DEBUG(5, ("wbsrv_samba3_setgrent called\n"));
 765         s3call->response.result = WINBINDD_OK;
 766         return NT_STATUS_OK;
 767 }
 768
 769 NTSTATUS wbsrv_samba3_getgrent(struct wbsrv_samba3_call *s3call)
 770 {
 771         DEBUG(5, ("wbsrv_samba3_getgrent called\n"));
 772         s3call->response.result = WINBINDD_ERROR;
 773         return NT_STATUS_OK;
 774 }
 775
 776 NTSTATUS wbsrv_samba3_endgrent(struct wbsrv_samba3_call *s3call)
 777 {
 778         DEBUG(5, ("wbsrv_samba3_endgrent called\n"));
 779         s3call->response.result = WINBINDD_OK;
 780         return NT_STATUS_OK;
 781 }
 782
 783 static void sid2uid_recv(struct composite_context *ctx);
 784
 785 NTSTATUS wbsrv_samba3_sid2uid(struct wbsrv_samba3_call *s3call)
 786 {
 787         struct composite_context *ctx;
 788         struct wbsrv_service *service =
 789                 s3call->wbconn->listen_socket->service;
 790         struct dom_sid *sid;
 791
 792         DEBUG(5, ("wbsrv_samba3_sid2uid called\n"));
 793
 794         sid = dom_sid_parse_talloc(s3call, s3call->request.data.sid);
 795         NT_STATUS_HAVE_NO_MEMORY(sid);
 796
 797         ctx = wb_sid2uid_send(s3call, service, sid);
 798         NT_STATUS_HAVE_NO_MEMORY(ctx);
 799
 800         ctx->async.fn = sid2uid_recv;
 801         ctx->async.private_data = s3call;
 802         s3call->flags |= WBSRV_CALL_FLAGS_REPLY_ASYNC;
 803         return NT_STATUS_OK;
 804
 805 }
 806
 807 static void sid2uid_recv(struct composite_context *ctx)
 808 {
 809         struct wbsrv_samba3_call *s3call =
 810                 talloc_get_type(ctx->async.private_data,
 811                                 struct wbsrv_samba3_call);
 812         NTSTATUS status;
 813
 814         DEBUG(5, ("sid2uid_recv called\n"));
 815
 816         status = wb_sid2uid_recv(ctx, &s3call->response.data.uid);
 817
 818         wbsrv_samba3_async_epilogue(status, s3call);
 819 }
 820
 821 static void sid2gid_recv(struct composite_context *ctx);
 822
 823 NTSTATUS wbsrv_samba3_sid2gid(struct wbsrv_samba3_call *s3call)
 824 {
 825         struct composite_context *ctx;
 826         struct wbsrv_service *service =
 827                 s3call->wbconn->listen_socket->service;
 828         struct dom_sid *sid;
 829
 830         DEBUG(5, ("wbsrv_samba3_sid2gid called\n"));
 831
 832         sid = dom_sid_parse_talloc(s3call, s3call->request.data.sid);
 833         NT_STATUS_HAVE_NO_MEMORY(sid);
 834
 835         ctx = wb_sid2gid_send(s3call, service, sid);
 836         NT_STATUS_HAVE_NO_MEMORY(ctx);
 837
 838         ctx->async.fn = sid2gid_recv;
 839         ctx->async.private_data = s3call;
 840         s3call->flags |= WBSRV_CALL_FLAGS_REPLY_ASYNC;
 841         return NT_STATUS_OK;
 842
 843 }
 844
 845 static void sid2gid_recv(struct composite_context *ctx)
 846 {
 847         struct wbsrv_samba3_call *s3call =
 848                 talloc_get_type(ctx->async.private_data,
 849                                 struct wbsrv_samba3_call);
 850         NTSTATUS status;
 851
 852         DEBUG(5, ("sid2gid_recv called\n"));
 853
 854         status = wb_sid2gid_recv(ctx, &s3call->response.data.gid);
 855
 856         wbsrv_samba3_async_epilogue(status, s3call);
 857 }
 858
 859 static void uid2sid_recv(struct composite_context *ctx);
 860
 861 NTSTATUS wbsrv_samba3_uid2sid(struct wbsrv_samba3_call *s3call)
 862 {
 863         struct composite_context *ctx;
 864         struct wbsrv_service *service =
 865                 s3call->wbconn->listen_socket->service;
 866
 867         DEBUG(5, ("wbsrv_samba3_uid2sid called\n"));
 868
 869         ctx = wb_uid2sid_send(s3call, service, s3call->request.data.uid);
 870         NT_STATUS_HAVE_NO_MEMORY(ctx);
 871
 872         ctx->async.fn = uid2sid_recv;
 873         ctx->async.private_data = s3call;
 874         s3call->flags |= WBSRV_CALL_FLAGS_REPLY_ASYNC;
 875         return NT_STATUS_OK;
 876
 877 }
 878
 879 static void uid2sid_recv(struct composite_context *ctx)
 880 {
 881         struct wbsrv_samba3_call *s3call =
 882                 talloc_get_type(ctx->async.private_data,
 883                                 struct wbsrv_samba3_call);
 884         NTSTATUS status;
 885         struct dom_sid *sid;
 886         char *sid_str;
 887
 888         DEBUG(5, ("uid2sid_recv called\n"));
 889
 890         status = wb_uid2sid_recv(ctx, s3call, &sid);
 891         if(NT_STATUS_IS_OK(status)) {
 892                 sid_str = dom_sid_string(s3call, sid);
 893
 894                 /* If the conversion failed, bail out with a failure. */
 895                 if (sid_str == NULL)
 896                         wbsrv_samba3_async_epilogue(NT_STATUS_NO_MEMORY,s3call);
 897
 898                 /* But we assume this worked, so we'll set the string. Work
 899                  * done. */
 900                 WBSRV_SAMBA3_SET_STRING(s3call->response.data.sid.sid, sid_str);
 901                 s3call->response.data.sid.type = SID_NAME_USER;
 902         }
 903
 904         wbsrv_samba3_async_epilogue(status, s3call);
 905 }
 906
 907 static void gid2sid_recv(struct composite_context *ctx);
 908
 909 NTSTATUS wbsrv_samba3_gid2sid(struct wbsrv_samba3_call *s3call)
 910 {
 911         struct composite_context *ctx;
 912         struct wbsrv_service *service =
 913                 s3call->wbconn->listen_socket->service;
 914
 915         DEBUG(5, ("wbsrv_samba3_gid2sid called\n"));
 916
 917         ctx = wb_gid2sid_send(s3call, service, s3call->request.data.gid);
 918         NT_STATUS_HAVE_NO_MEMORY(ctx);
 919
 920         ctx->async.fn = gid2sid_recv;
 921         ctx->async.private_data = s3call;
 922         s3call->flags |= WBSRV_CALL_FLAGS_REPLY_ASYNC;
 923         return NT_STATUS_OK;
 924
 925 }
 926
 927 static void gid2sid_recv(struct composite_context *ctx)
 928 {
 929         struct wbsrv_samba3_call *s3call =
 930                 talloc_get_type(ctx->async.private_data,
 931                                 struct wbsrv_samba3_call);
 932         NTSTATUS status;
 933         struct dom_sid *sid;
 934         char *sid_str;
 935
 936         DEBUG(5, ("gid2sid_recv called\n"));
 937
 938         status = wb_gid2sid_recv(ctx, s3call, &sid);
 939         if(NT_STATUS_IS_OK(status)) {
 940                 sid_str = dom_sid_string(s3call, sid);
 941
 942                 if (sid_str == NULL)
 943                         wbsrv_samba3_async_epilogue(NT_STATUS_NO_MEMORY,s3call);
 944
 945                 WBSRV_SAMBA3_SET_STRING(s3call->response.data.sid.sid, sid_str);
 946                 s3call->response.data.sid.type = SID_NAME_DOMAIN;
 947         }
 948
 949         wbsrv_samba3_async_epilogue(status, s3call);
 950 }
 951