*/
#include "includes.h"
+#include "util/debug.h"
#include "winbindd.h"
#include "librpc/gen_ndr/ndr_winbind_c.h"
#include "../libcli/security/security.h"
#include "libsmb/samlogon_cache.h"
+#include "librpc/gen_ndr/ndr_winbind.h"
struct wb_queryuser_state {
struct tevent_context *ev;
- struct wbint_userinfo *info;
+ struct wbint_userinfo *info;
+ const struct wb_parent_idmap_config *idmap_cfg;
bool tried_dclookup;
};
+static void wb_queryuser_idmap_setup_done(struct tevent_req *subreq);
static void wb_queryuser_got_uid(struct tevent_req *subreq);
static void wb_queryuser_got_domain(struct tevent_req *subreq);
static void wb_queryuser_got_dc(struct tevent_req *subreq);
struct tevent_req *req, *subreq;
struct wb_queryuser_state *state;
struct wbint_userinfo *info;
+ struct dom_sid_buf buf;
req = tevent_req_create(mem_ctx, &state, struct wb_queryuser_state);
if (req == NULL) {
return NULL;
}
+ D_INFO("WB command queryuser start.\nQuery user sid %s\n",
+ dom_sid_str_buf(user_sid, &buf));
state->ev = ev;
state->info = talloc_zero(state, struct wbint_userinfo);
sid_copy(&info->user_sid, user_sid);
+ subreq = wb_parent_idmap_setup_send(state, state->ev);
+ if (tevent_req_nomem(subreq, req)) {
+ return tevent_req_post(req, ev);
+ }
+ tevent_req_set_callback(subreq, wb_queryuser_idmap_setup_done, req);
+ return req;
+}
+
+static void wb_queryuser_idmap_setup_done(struct tevent_req *subreq)
+{
+ struct tevent_req *req = tevent_req_callback_data(
+ subreq, struct tevent_req);
+ struct wb_queryuser_state *state = tevent_req_data(
+ req, struct wb_queryuser_state);
+ NTSTATUS status;
+ struct dom_sid_buf buf;
+
+ status = wb_parent_idmap_setup_recv(subreq, &state->idmap_cfg);
+ TALLOC_FREE(subreq);
+ if (tevent_req_nterror(req, status)) {
+ D_WARNING("wb_parent_idmap_setup_recv() failed with %s.\n",
+ nt_errstr(status));
+ return;
+ }
+
+ D_DEBUG("Convert the user SID %s to XID.\n",
+ dom_sid_str_buf(&state->info->user_sid, &buf));
subreq = wb_sids2xids_send(
state, state->ev, &state->info->user_sid, 1);
if (tevent_req_nomem(subreq, req)) {
- return tevent_req_post(req, ev);
+ return;
}
tevent_req_set_callback(subreq, wb_queryuser_got_uid, req);
- return req;
+ return;
}
static void wb_queryuser_got_uid(struct tevent_req *subreq)
req, struct wb_queryuser_state);
struct wbint_userinfo *info = state->info;
struct netr_SamInfo3 *info3;
- struct winbindd_child *child;
+ struct dcerpc_binding_handle *child_binding_handle = NULL;
struct unixid xid;
NTSTATUS status;
+ struct dom_sid_buf buf, buf1;
status = wb_sids2xids_recv(subreq, &xid, 1);
TALLOC_FREE(subreq);
if (tevent_req_nterror(req, status)) {
+ D_WARNING("wb_sids2xids_recv() failed with %s.\n",
+ nt_errstr(status));
return;
}
if ((xid.type != ID_TYPE_UID) && (xid.type != ID_TYPE_BOTH)) {
+ D_WARNING("XID type is %d, should be ID_TYPE_UID or ID_TYPE_BOTH.\n",
+ xid.type);
tevent_req_nterror(req, NT_STATUS_NO_SUCH_USER);
return;
}
+ D_DEBUG("Received XID %"PRIu32" for SID %s.\n",
+ xid.id,
+ dom_sid_str_buf(&info->user_sid, &buf1));
info->uid = xid.id;
/*
sid_split_rid(&info->group_sid, NULL);
sid_append_rid(&info->group_sid, DOMAIN_RID_USERS);
+ D_DEBUG("Preconfigured 'Domain Users' RID %u was used to create group SID %s from user SID %s.\n",
+ DOMAIN_RID_USERS,
+ dom_sid_str_buf(&info->group_sid, &buf),
+ dom_sid_str_buf(&info->user_sid, &buf1));
+
info->homedir = talloc_strdup(info, lp_template_homedir());
+ D_DEBUG("Setting 'homedir' to the template '%s'.\n", info->homedir);
if (tevent_req_nomem(info->homedir, req)) {
return;
}
info->shell = talloc_strdup(info, lp_template_shell());
+ D_DEBUG("Setting 'shell' to the template '%s'.\n", info->shell);
if (tevent_req_nomem(info->shell, req)) {
return;
}
info3 = netsamlogon_cache_get(state, &info->user_sid);
if (info3 != NULL) {
-
+ D_DEBUG("Filling data received from netsamlogon_cache\n");
sid_compose(&info->group_sid, info3->base.domain_sid,
info3->base.primary_gid);
info->acct_name = talloc_move(
TALLOC_FREE(info3);
}
+ NDR_PRINT_DEBUG_LEVEL(DBGLVL_DEBUG, wbint_userinfo, state->info);
if (info->domain_name == NULL) {
+ D_DEBUG("Domain name is empty, calling wb_lookupsid_send() to get it.\n");
subreq = wb_lookupsid_send(state, state->ev, &info->user_sid);
if (tevent_req_nomem(subreq, req)) {
return;
return;
}
- child = idmap_child();
-
+ /*
+ * Note wb_sids2xids_send/recv was called before,
+ * so we're sure that wb_parent_idmap_setup_send/recv
+ * was already called.
+ */
+ child_binding_handle = idmap_child_handle();
+ D_DEBUG("Domain name is set, calling dcerpc_wbint_GetNssInfo_send()\n");
subreq = dcerpc_wbint_GetNssInfo_send(
- state, state->ev, child->binding_handle, info);
+ state, state->ev, child_binding_handle, info);
if (tevent_req_nomem(subreq, req)) {
return;
}
req, struct wb_queryuser_state);
struct wbint_userinfo *info = state->info;
enum lsa_SidType type;
- struct winbindd_child *child;
+ struct dcerpc_binding_handle *child_binding_handle = NULL;
NTSTATUS status;
status = wb_lookupsid_recv(subreq, state, &type,
&info->domain_name, &info->acct_name);
TALLOC_FREE(subreq);
if (tevent_req_nterror(req, status)) {
+ D_WARNING("wb_lookupsid_recv failed with %s.\n",
+ nt_errstr(status));
return;
}
+ NDR_PRINT_DEBUG_LEVEL(DBGLVL_DEBUG, wbint_userinfo, state->info);
switch (type) {
case SID_NAME_USER:
case SID_NAME_COMPUTER:
sid_copy(&info->group_sid, &info->user_sid);
break;
default:
+ D_WARNING("Unknown type:%d, return NT_STATUS_NO_SUCH_USER.\n",
+ type);
tevent_req_nterror(req, NT_STATUS_NO_SUCH_USER);
return;
}
- child = idmap_child();
-
+ /*
+ * Note wb_sids2xids_send/recv was called before,
+ * so we're sure that wb_parent_idmap_setup_send/recv
+ * was already called.
+ */
+ child_binding_handle = idmap_child_handle();
+ D_DEBUG("About to call dcerpc_wbint_GetNssInfo_send()\n");
subreq = dcerpc_wbint_GetNssInfo_send(
- state, state->ev, child->binding_handle, info);
+ state, state->ev, child_binding_handle, info);
if (tevent_req_nomem(subreq, req)) {
return;
}
status = dcerpc_wbint_GetNssInfo_recv(subreq, info, &result);
TALLOC_FREE(subreq);
if (tevent_req_nterror(req, status)) {
+ D_WARNING("GetNssInfo failed with %s.\n", nt_errstr(status));
return;
}
if (NT_STATUS_EQUAL(result, NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND) &&
!state->tried_dclookup) {
+ D_DEBUG("GetNssInfo got DOMAIN_CONTROLLER_NOT_FOUND, calling wb_dsgetdcname_send()\n");
subreq = wb_dsgetdcname_send(
state, state->ev, state->info->domain_name, NULL, NULL,
DS_RETURN_DNS_NAME);
*/
if (state->info->primary_gid == (gid_t)-1) {
+ D_DEBUG("Calling wb_sids2xids_send() to resolve primary gid.\n");
subreq = wb_sids2xids_send(
state, state->ev, &info->group_sid, 1);
if (tevent_req_nomem(subreq, req)) {
}
if (need_group_name && state->info->primary_group_name == NULL) {
+ D_DEBUG("Calling wb_lookupsid_send() to resolve primary group name.\n");
subreq = wb_lookupsid_send(state, state->ev, &info->group_sid);
if (tevent_req_nomem(subreq, req)) {
return;
return;
}
+ NDR_PRINT_DEBUG_LEVEL(DBGLVL_DEBUG, wbint_userinfo, state->info);
tevent_req_done(req);
}
req, struct wb_queryuser_state);
struct wbint_userinfo *info = state->info;
struct netr_DsRGetDCNameInfo *dcinfo;
- struct winbindd_child *child;
+ struct dcerpc_binding_handle *child_binding_handle = NULL;
NTSTATUS status;
status = wb_dsgetdcname_recv(subreq, state, &dcinfo);
TALLOC_FREE(subreq);
if (tevent_req_nterror(req, status)) {
+ D_WARNING("wb_dsgetdcname_recv() failed with %s.\n",
+ nt_errstr(status));
return;
}
state->tried_dclookup = true;
+ D_DEBUG("Got DC name, calling wb_dsgetdcname_gencache_set().\n");
status = wb_dsgetdcname_gencache_set(info->domain_name, dcinfo);
if (tevent_req_nterror(req, status)) {
+ D_WARNING("wb_dsgetdcname_gencache_set() failed with %s.\n",
+ nt_errstr(status));
return;
}
+ NDR_PRINT_DEBUG_LEVEL(DBGLVL_DEBUG, wbint_userinfo, state->info);
- child = idmap_child();
-
+ /*
+ * Note wb_sids2xids_send/recv was called before,
+ * so we're sure that wb_parent_idmap_setup_send/recv
+ * was already called.
+ */
+ child_binding_handle = idmap_child_handle();
subreq = dcerpc_wbint_GetNssInfo_send(
- state, state->ev, child->binding_handle, info);
+ state, state->ev, child_binding_handle, info);
if (tevent_req_nomem(subreq, req)) {
return;
}
NTSTATUS status;
bool need_group_name = false;
const char *tmpl = NULL;
+ struct dom_sid_buf buf;
status = wb_sids2xids_recv(subreq, &xid, 1);
TALLOC_FREE(subreq);
if (tevent_req_nterror(req, status)) {
+ D_WARNING("wb_sids2xids_recv() failed with %s.\n",
+ nt_errstr(status));
return;
}
+ D_DEBUG("Got XID %"PRIu32" with type %d.\n", xid.id, xid.type);
if ((xid.type != ID_TYPE_GID) && (xid.type != ID_TYPE_BOTH)) {
+ D_WARNING("Returning NT_STATUS_NO_SUCH_USER\n"
+ "xid.type must be ID_TYPE_UID or ID_TYPE_BOTH.\n");
tevent_req_nterror(req, NT_STATUS_NO_SUCH_USER);
return;
}
need_group_name = true;
}
+ NDR_PRINT_DEBUG_LEVEL(DBGLVL_DEBUG, wbint_userinfo, state->info);
+
if (need_group_name && state->info->primary_group_name == NULL) {
+ D_DEBUG("Calling wb_lookupsid_send for group SID %s.\n",
+ dom_sid_str_buf(&state->info->group_sid, &buf));
subreq = wb_lookupsid_send(state, state->ev,
&state->info->group_sid);
if (tevent_req_nomem(subreq, req)) {
return;
}
+ D_DEBUG("No need to lookup primary group name. Request is done!\n");
tevent_req_done(req);
}
&state->info->primary_group_name);
TALLOC_FREE(subreq);
if (tevent_req_nterror(req, status)) {
+ D_WARNING("wb_lookupsid_recv() failed with %s.\n",
+ nt_errstr(status));
return;
}
tevent_req_done(req);
req, struct wb_queryuser_state);
NTSTATUS status;
+ D_INFO("WB command queryuser end.\n");
+ NDR_PRINT_DEBUG_LEVEL(DBGLVL_INFO, wbint_userinfo, state->info);
if (tevent_req_is_nterror(req, &status)) {
return status;
}
git.samba.org / bbaumbach / samba-autobuild / .git / blobdiff