r23779: Change from v2 or later to v3 or later.
[kai/samba-autobuild/.git] / source / nsswitch / winbindd_async.c
1 /* 
2    Unix SMB/CIFS implementation.
3
4    Async helpers for blocking functions
5
6    Copyright (C) Volker Lendecke 2005
7    Copyright (C) Gerald Carter 2006
8    
9    The helpers always consist of three functions: 
10
11    * A request setup function that takes the necessary parameters together
12      with a continuation function that is to be called upon completion
13
14    * A private continuation function that is internal only. This is to be
15      called by the lower-level functions in do_async(). Its only task is to
16      properly call the continuation function named above.
17
18    * A worker function that is called inside the appropriate child process.
19
20    This program is free software; you can redistribute it and/or modify
21    it under the terms of the GNU General Public License as published by
22    the Free Software Foundation; either version 3 of the License, or
23    (at your option) any later version.
24    
25    This program is distributed in the hope that it will be useful,
26    but WITHOUT ANY WARRANTY; without even the implied warranty of
27    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
28    GNU General Public License for more details.
29    
30    You should have received a copy of the GNU General Public License
31    along with this program; if not, write to the Free Software
32    Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
33 */
34
35 #include "includes.h"
36 #include "winbindd.h"
37
38 #undef DBGC_CLASS
39 #define DBGC_CLASS DBGC_WINBIND
40
41 struct do_async_state {
42         TALLOC_CTX *mem_ctx;
43         struct winbindd_request request;
44         struct winbindd_response response;
45         void (*cont)(TALLOC_CTX *mem_ctx,
46                      BOOL success,
47                      struct winbindd_response *response,
48                      void *c, void *private_data);
49         void *c, *private_data;
50 };
51
52 static void do_async_recv(void *private_data, BOOL success)
53 {
54         struct do_async_state *state =
55                 talloc_get_type_abort(private_data, struct do_async_state);
56
57         state->cont(state->mem_ctx, success, &state->response,
58                     state->c, state->private_data);
59 }
60
61 static void do_async(TALLOC_CTX *mem_ctx, struct winbindd_child *child,
62                      const struct winbindd_request *request,
63                      void (*cont)(TALLOC_CTX *mem_ctx, BOOL success,
64                                   struct winbindd_response *response,
65                                   void *c, void *private_data),
66                      void *c, void *private_data)
67 {
68         struct do_async_state *state;
69
70         state = TALLOC_ZERO_P(mem_ctx, struct do_async_state);
71         if (state == NULL) {
72                 DEBUG(0, ("talloc failed\n"));
73                 cont(mem_ctx, False, NULL, c, private_data);
74                 return;
75         }
76
77         state->mem_ctx = mem_ctx;
78         state->request = *request;
79         state->request.length = sizeof(state->request);
80         state->cont = cont;
81         state->c = c;
82         state->private_data = private_data;
83
84         async_request(mem_ctx, child, &state->request,
85                       &state->response, do_async_recv, state);
86 }
87
88 void do_async_domain(TALLOC_CTX *mem_ctx, struct winbindd_domain *domain,
89                      const struct winbindd_request *request,
90                      void (*cont)(TALLOC_CTX *mem_ctx, BOOL success,
91                                   struct winbindd_response *response,
92                                   void *c, void *private_data),
93                      void *c, void *private_data)
94 {
95         struct do_async_state *state;
96
97         state = TALLOC_ZERO_P(mem_ctx, struct do_async_state);
98         if (state == NULL) {
99                 DEBUG(0, ("talloc failed\n"));
100                 cont(mem_ctx, False, NULL, c, private_data);
101                 return;
102         }
103
104         state->mem_ctx = mem_ctx;
105         state->request = *request;
106         state->request.length = sizeof(state->request);
107         state->cont = cont;
108         state->c = c;
109         state->private_data = private_data;
110
111         async_domain_request(mem_ctx, domain, &state->request,
112                              &state->response, do_async_recv, state);
113 }
114
115 static void winbindd_set_mapping_recv(TALLOC_CTX *mem_ctx, BOOL success,
116                                    struct winbindd_response *response,
117                                    void *c, void *private_data)
118 {
119         void (*cont)(void *priv, BOOL succ) = (void (*)(void *, BOOL))c;
120
121         if (!success) {
122                 DEBUG(5, ("Could not trigger idmap_set_mapping\n"));
123                 cont(private_data, False);
124                 return;
125         }
126
127         if (response->result != WINBINDD_OK) {
128                 DEBUG(5, ("idmap_set_mapping returned an error\n"));
129                 cont(private_data, False);
130                 return;
131         }
132
133         cont(private_data, True);
134 }
135
136 void winbindd_set_mapping_async(TALLOC_CTX *mem_ctx, const struct id_map *map,
137                              void (*cont)(void *private_data, BOOL success),
138                              void *private_data)
139 {
140         struct winbindd_request request;
141         ZERO_STRUCT(request);
142         request.cmd = WINBINDD_DUAL_SET_MAPPING;
143         request.data.dual_idmapset.id = map->xid.id;
144         request.data.dual_idmapset.type = map->xid.type;
145         sid_to_string(request.data.dual_idmapset.sid, map->sid);
146
147         do_async(mem_ctx, idmap_child(), &request, winbindd_set_mapping_recv,
148                  (void *)cont, private_data);
149 }
150
151 enum winbindd_result winbindd_dual_set_mapping(struct winbindd_domain *domain,
152                                             struct winbindd_cli_state *state)
153 {
154         struct id_map map;
155         DOM_SID sid;
156         NTSTATUS result;
157
158         DEBUG(3, ("[%5lu]: dual_idmapset\n", (unsigned long)state->pid));
159
160         if (!string_to_sid(&sid, state->request.data.dual_idmapset.sid))
161                 return WINBINDD_ERROR;
162
163         map.sid = &sid;
164         map.xid.id = state->request.data.dual_idmapset.id;
165         map.xid.type = state->request.data.dual_idmapset.type;
166         map.status = ID_MAPPED;
167
168         result = idmap_set_mapping(&map);
169         return NT_STATUS_IS_OK(result) ? WINBINDD_OK : WINBINDD_ERROR;
170 }
171
172 static void winbindd_set_hwm_recv(TALLOC_CTX *mem_ctx, BOOL success,
173                                    struct winbindd_response *response,
174                                    void *c, void *private_data)
175 {
176         void (*cont)(void *priv, BOOL succ) = (void (*)(void *, BOOL))c;
177
178         if (!success) {
179                 DEBUG(5, ("Could not trigger idmap_set_hwm\n"));
180                 cont(private_data, False);
181                 return;
182         }
183
184         if (response->result != WINBINDD_OK) {
185                 DEBUG(5, ("idmap_set_hwm returned an error\n"));
186                 cont(private_data, False);
187                 return;
188         }
189
190         cont(private_data, True);
191 }
192
193 void winbindd_set_hwm_async(TALLOC_CTX *mem_ctx, const struct unixid *xid,
194                              void (*cont)(void *private_data, BOOL success),
195                              void *private_data)
196 {
197         struct winbindd_request request;
198         ZERO_STRUCT(request);
199         request.cmd = WINBINDD_DUAL_SET_HWM;
200         request.data.dual_idmapset.id = xid->id;
201         request.data.dual_idmapset.type = xid->type;
202
203         do_async(mem_ctx, idmap_child(), &request, winbindd_set_hwm_recv,
204                  (void *)cont, private_data);
205 }
206
207 enum winbindd_result winbindd_dual_set_hwm(struct winbindd_domain *domain,
208                                             struct winbindd_cli_state *state)
209 {
210         struct unixid xid;
211         NTSTATUS result;
212
213         DEBUG(3, ("[%5lu]: dual_set_hwm\n", (unsigned long)state->pid));
214
215         xid.id = state->request.data.dual_idmapset.id;
216         xid.type = state->request.data.dual_idmapset.type;
217
218         switch (xid.type) {
219         case ID_TYPE_UID:
220                 result = idmap_set_uid_hwm(&xid);
221                 break;
222         case ID_TYPE_GID:
223                 result = idmap_set_gid_hwm(&xid);
224                 break;
225         default:
226                 return WINBINDD_ERROR;
227         }
228         return NT_STATUS_IS_OK(result) ? WINBINDD_OK : WINBINDD_ERROR;
229 }
230
231 static void winbindd_sids2xids_recv(TALLOC_CTX *mem_ctx, BOOL success,
232                                struct winbindd_response *response,
233                                void *c, void *private_data)
234 {
235         void (*cont)(void *priv, BOOL succ, void *, int) =
236                 (void (*)(void *, BOOL, void *, int))c;
237
238         if (!success) {
239                 DEBUG(5, ("Could not trigger sids2xids\n"));
240                 cont(private_data, False, NULL, 0);
241                 return;
242         }
243
244         if (response->result != WINBINDD_OK) {
245                 DEBUG(5, ("sids2xids returned an error\n"));
246                 cont(private_data, False, NULL, 0);
247                 return;
248         }
249
250         cont(private_data, True, response->extra_data.data, response->length - sizeof(response));
251 }
252                          
253 void winbindd_sids2xids_async(TALLOC_CTX *mem_ctx, void *sids, int size,
254                          void (*cont)(void *private_data, BOOL success, void *data, int len),
255                          void *private_data)
256 {
257         struct winbindd_request request;
258         ZERO_STRUCT(request);
259         request.cmd = WINBINDD_DUAL_SIDS2XIDS;
260         request.extra_data.data = (char *)sids;
261         request.extra_len = size;
262         do_async(mem_ctx, idmap_child(), &request, winbindd_sids2xids_recv,
263                  (void *)cont, private_data);
264 }
265
266 enum winbindd_result winbindd_dual_sids2xids(struct winbindd_domain *domain,
267                                            struct winbindd_cli_state *state)
268 {
269         DOM_SID *sids;
270         struct unixid *xids;
271         struct id_map **ids;
272         NTSTATUS result;
273         int num, i;
274
275         DEBUG(3, ("[%5lu]: sids to unix ids\n", (unsigned long)state->pid));
276
277         if (state->request.extra_len == 0) {
278                 DEBUG(0, ("Invalid buffer size!\n"));
279                 return WINBINDD_ERROR;
280         }
281
282         sids = (DOM_SID *)state->request.extra_data.data;
283         num = state->request.extra_len / sizeof(DOM_SID);
284
285         ids = TALLOC_ZERO_ARRAY(state->mem_ctx, struct id_map *, num + 1);
286         if ( ! ids) {
287                 DEBUG(0, ("Out of memory!\n"));
288                 return WINBINDD_ERROR;
289         }
290         for (i = 0; i < num; i++) {
291                 ids[i] = TALLOC_P(ids, struct id_map);
292                 if ( ! ids[i]) {
293                         DEBUG(0, ("Out of memory!\n"));
294                         talloc_free(ids);
295                         return WINBINDD_ERROR;
296                 }
297                 ids[i]->sid = &sids[i];
298         }
299
300         result = idmap_sids_to_unixids(ids);
301
302         if (NT_STATUS_IS_OK(result)) {
303
304                 xids = SMB_MALLOC_ARRAY(struct unixid, num);
305                 if ( ! xids) {
306                         DEBUG(0, ("Out of memory!\n"));
307                         talloc_free(ids);
308                         return WINBINDD_ERROR;
309                 }
310                 
311                 for (i = 0; i < num; i++) {
312                         if (ids[i]->status == ID_MAPPED) {
313                                 xids[i].type = ids[i]->xid.type;
314                                 xids[i].id = ids[i]->xid.id;
315                         } else {
316                                 xids[i].type = -1;
317                         }
318                 }
319
320                 state->response.length = sizeof(state->response) + (sizeof(struct unixid) * num);
321                 state->response.extra_data.data = xids;
322
323         } else {
324                 DEBUG (2, ("idmap_sids_to_unixids returned an error: 0x%08x\n", NT_STATUS_V(result)));
325                 talloc_free(ids);
326                 return WINBINDD_ERROR;
327         }
328
329         talloc_free(ids);
330         return WINBINDD_OK;
331 }
332
333 static void winbindd_sid2uid_recv(TALLOC_CTX *mem_ctx, BOOL success,
334                                struct winbindd_response *response,
335                                void *c, void *private_data)
336 {
337         void (*cont)(void *priv, BOOL succ, uid_t uid) =
338                 (void (*)(void *, BOOL, uid_t))c;
339
340         if (!success) {
341                 DEBUG(5, ("Could not trigger sid2uid\n"));
342                 cont(private_data, False, 0);
343                 return;
344         }
345
346         if (response->result != WINBINDD_OK) {
347                 DEBUG(5, ("sid2uid returned an error\n"));
348                 cont(private_data, False, 0);
349                 return;
350         }
351
352         cont(private_data, True, response->data.uid);
353 }
354                          
355 void winbindd_sid2uid_async(TALLOC_CTX *mem_ctx, const DOM_SID *sid,
356                          void (*cont)(void *private_data, BOOL success, uid_t uid),
357                          void *private_data)
358 {
359         struct winbindd_request request;
360         ZERO_STRUCT(request);
361         request.cmd = WINBINDD_DUAL_SID2UID;
362         sid_to_string(request.data.dual_sid2id.sid, sid);
363         do_async(mem_ctx, idmap_child(), &request, winbindd_sid2uid_recv,
364                  (void *)cont, private_data);
365 }
366
367 enum winbindd_result winbindd_dual_sid2uid(struct winbindd_domain *domain,
368                                            struct winbindd_cli_state *state)
369 {
370         DOM_SID sid;
371         NTSTATUS result;
372
373         DEBUG(3, ("[%5lu]: sid to uid %s\n", (unsigned long)state->pid,
374                   state->request.data.dual_sid2id.sid));
375
376         if (!string_to_sid(&sid, state->request.data.dual_sid2id.sid)) {
377                 DEBUG(1, ("Could not get convert sid %s from string\n",
378                           state->request.data.dual_sid2id.sid));
379                 return WINBINDD_ERROR;
380         }
381
382         /* Find uid for this sid and return it, possibly ask the slow remote idmap */
383
384         result = idmap_sid_to_uid(&sid, &(state->response.data.uid));
385
386         return NT_STATUS_IS_OK(result) ? WINBINDD_OK : WINBINDD_ERROR;
387 }
388
389 #if 0   /* not used */
390 static void uid2name_recv(TALLOC_CTX *mem_ctx, BOOL success,
391                           struct winbindd_response *response,
392                           void *c, void *private_data);
393
394 void winbindd_uid2name_async(TALLOC_CTX *mem_ctx, uid_t uid,
395                              void (*cont)(void *private_data, BOOL success,
396                                           const char *name),
397                              void *private_data)
398 {
399         struct winbindd_request request;
400         ZERO_STRUCT(request);
401         request.cmd = WINBINDD_DUAL_UID2NAME;
402         request.data.uid = uid;
403         do_async(mem_ctx, idmap_child(), &request, uid2name_recv,
404                  (void *)cont, private_data);
405 }
406 #endif  /* not used */
407
408 enum winbindd_result winbindd_dual_uid2name(struct winbindd_domain *domain,
409                                             struct winbindd_cli_state *state)
410 {
411         struct passwd *pw;
412
413         DEBUG(3, ("[%5lu]: uid2name %lu\n", (unsigned long)state->pid, 
414                   (unsigned long)state->request.data.uid));
415
416         pw = getpwuid(state->request.data.uid);
417         if (pw == NULL) {
418                 DEBUG(5, ("User %lu not found\n",
419                           (unsigned long)state->request.data.uid));
420                 return WINBINDD_ERROR;
421         }
422
423         fstrcpy(state->response.data.name.name, pw->pw_name);
424         return WINBINDD_OK;
425 }
426
427 #if 0   /* not used */
428 static void uid2name_recv(TALLOC_CTX *mem_ctx, BOOL success,
429                           struct winbindd_response *response,
430                           void *c, void *private_data)
431 {
432         void (*cont)(void *priv, BOOL succ, const char *name) =
433                 (void (*)(void *, BOOL, const char *))c;
434
435         if (!success) {
436                 DEBUG(5, ("Could not trigger uid2name\n"));
437                 cont(private_data, False, NULL);
438                 return;
439         }
440
441         if (response->result != WINBINDD_OK) {
442                 DEBUG(5, ("uid2name returned an error\n"));
443                 cont(private_data, False, NULL);
444                 return;
445         }
446
447         cont(private_data, True, response->data.name.name);
448 }
449
450 static void name2uid_recv(TALLOC_CTX *mem_ctx, BOOL success,
451                           struct winbindd_response *response,
452                           void *c, void *private_data);
453
454 static void winbindd_name2uid_async(TALLOC_CTX *mem_ctx, const char *name,
455                                     void (*cont)(void *private_data, BOOL success,
456                                                  uid_t uid),
457                                     void *private_data)
458 {
459         struct winbindd_request request;
460         ZERO_STRUCT(request);
461         request.cmd = WINBINDD_DUAL_NAME2UID;
462         fstrcpy(request.data.username, name);
463         do_async(mem_ctx, idmap_child(), &request, name2uid_recv,
464                  (void *)cont, private_data);
465 }
466 #endif  /* not used */
467
468 enum winbindd_result winbindd_dual_name2uid(struct winbindd_domain *domain,
469                                             struct winbindd_cli_state *state)
470 {
471         struct passwd *pw;
472
473         /* Ensure null termination */
474         state->request.data.username
475                 [sizeof(state->request.data.username)-1] = '\0';
476
477         DEBUG(3, ("[%5lu]: name2uid %s\n", (unsigned long)state->pid, 
478                   state->request.data.username));
479
480         pw = getpwnam(state->request.data.username);
481         if (pw == NULL) {
482                 return WINBINDD_ERROR;
483         }
484
485         state->response.data.uid = pw->pw_uid;
486         return WINBINDD_OK;
487 }
488
489 #if 0   /* not used */
490 static void name2uid_recv(TALLOC_CTX *mem_ctx, BOOL success,
491                           struct winbindd_response *response,
492                           void *c, void *private_data)
493 {
494         void (*cont)(void *priv, BOOL succ, uid_t uid) =
495                 (void (*)(void *, BOOL, uid_t))c;
496
497         if (!success) {
498                 DEBUG(5, ("Could not trigger name2uid\n"));
499                 cont(private_data, False, 0);
500                 return;
501         }
502
503         if (response->result != WINBINDD_OK) {
504                 DEBUG(5, ("name2uid returned an error\n"));
505                 cont(private_data, False, 0);
506                 return;
507         }
508
509         cont(private_data, True, response->data.uid);
510 }
511 #endif  /* not used */
512
513 static void winbindd_sid2gid_recv(TALLOC_CTX *mem_ctx, BOOL success,
514                                struct winbindd_response *response,
515                                void *c, void *private_data)
516 {
517         void (*cont)(void *priv, BOOL succ, gid_t gid) =
518                 (void (*)(void *, BOOL, gid_t))c;
519
520         if (!success) {
521                 DEBUG(5, ("Could not trigger sid2gid\n"));
522                 cont(private_data, False, 0);
523                 return;
524         }
525
526         if (response->result != WINBINDD_OK) {
527                 DEBUG(5, ("sid2gid returned an error\n"));
528                 cont(private_data, False, 0);
529                 return;
530         }
531
532         cont(private_data, True, response->data.gid);
533 }
534                          
535 void winbindd_sid2gid_async(TALLOC_CTX *mem_ctx, const DOM_SID *sid,
536                          void (*cont)(void *private_data, BOOL success, gid_t gid),
537                          void *private_data)
538 {
539         struct winbindd_request request;
540         ZERO_STRUCT(request);
541         request.cmd = WINBINDD_DUAL_SID2GID;
542         sid_to_string(request.data.dual_sid2id.sid, sid);
543
544         DEBUG(7,("winbindd_sid2gid_async: Resolving %s to a gid\n", 
545                 request.data.dual_sid2id.sid));
546
547         do_async(mem_ctx, idmap_child(), &request, winbindd_sid2gid_recv,
548                  (void *)cont, private_data);
549 }
550
551 enum winbindd_result winbindd_dual_sid2gid(struct winbindd_domain *domain,
552                                            struct winbindd_cli_state *state)
553 {
554         DOM_SID sid;
555         NTSTATUS result;
556
557         DEBUG(3, ("[%5lu]: sid to gid %s\n", (unsigned long)state->pid,
558                   state->request.data.dual_sid2id.sid));
559
560         if (!string_to_sid(&sid, state->request.data.dual_sid2id.sid)) {
561                 DEBUG(1, ("Could not get convert sid %s from string\n",
562                           state->request.data.dual_sid2id.sid));
563                 return WINBINDD_ERROR;
564         }
565
566         /* Find gid for this sid and return it, possibly ask the slow remote idmap */
567
568         result = idmap_sid_to_gid(&sid, &state->response.data.gid);
569         
570         DEBUG(10, ("winbindd_dual_sid2gid: 0x%08x - %s - %u\n", NT_STATUS_V(result), sid_string_static(&sid), state->response.data.gid));
571
572         return NT_STATUS_IS_OK(result) ? WINBINDD_OK : WINBINDD_ERROR;
573 }
574
575 static void gid2name_recv(TALLOC_CTX *mem_ctx, BOOL success,
576                           struct winbindd_response *response,
577                           void *c, void *private_data)
578 {
579         void (*cont)(void *priv, BOOL succ, const char *name) =
580                 (void (*)(void *, BOOL, const char *))c;
581
582         if (!success) {
583                 DEBUG(5, ("Could not trigger gid2name\n"));
584                 cont(private_data, False, NULL);
585                 return;
586         }
587
588         if (response->result != WINBINDD_OK) {
589                 DEBUG(5, ("gid2name returned an error\n"));
590                 cont(private_data, False, NULL);
591                 return;
592         }
593
594         cont(private_data, True, response->data.name.name);
595 }
596
597 void winbindd_gid2name_async(TALLOC_CTX *mem_ctx, gid_t gid,
598                              void (*cont)(void *private_data, BOOL success,
599                                           const char *name),
600                              void *private_data)
601 {
602         struct winbindd_request request;
603         ZERO_STRUCT(request);
604         request.cmd = WINBINDD_DUAL_GID2NAME;
605         request.data.gid = gid;
606         do_async(mem_ctx, idmap_child(), &request, gid2name_recv,
607                  (void *)cont, private_data);
608 }
609
610 enum winbindd_result winbindd_dual_gid2name(struct winbindd_domain *domain,
611                                             struct winbindd_cli_state *state)
612 {
613         struct group *gr;
614
615         DEBUG(3, ("[%5lu]: gid2name %lu\n", (unsigned long)state->pid, 
616                   (unsigned long)state->request.data.gid));
617
618         gr = getgrgid(state->request.data.gid);
619         if (gr == NULL)
620                 return WINBINDD_ERROR;
621
622         fstrcpy(state->response.data.name.name, gr->gr_name);
623         return WINBINDD_OK;
624 }
625
626 #if 0   /* not used */
627 static void name2gid_recv(TALLOC_CTX *mem_ctx, BOOL success,
628                           struct winbindd_response *response,
629                           void *c, void *private_data);
630
631 static void winbindd_name2gid_async(TALLOC_CTX *mem_ctx, const char *name,
632                                     void (*cont)(void *private_data, BOOL success,
633                                                  gid_t gid),
634                                     void *private_data)
635 {
636         struct winbindd_request request;
637         ZERO_STRUCT(request);
638         request.cmd = WINBINDD_DUAL_NAME2GID;
639         fstrcpy(request.data.groupname, name);
640         do_async(mem_ctx, idmap_child(), &request, name2gid_recv,
641                  (void *)cont, private_data);
642 }
643 #endif  /* not used */
644
645 enum winbindd_result winbindd_dual_name2gid(struct winbindd_domain *domain,
646                                             struct winbindd_cli_state *state)
647 {
648         struct group *gr;
649
650         /* Ensure null termination */
651         state->request.data.groupname
652                 [sizeof(state->request.data.groupname)-1] = '\0';
653
654         DEBUG(3, ("[%5lu]: name2gid %s\n", (unsigned long)state->pid, 
655                   state->request.data.groupname));
656
657         gr = getgrnam(state->request.data.groupname);
658         if (gr == NULL) {
659                 return WINBINDD_ERROR;
660         }
661
662         state->response.data.gid = gr->gr_gid;
663         return WINBINDD_OK;
664 }
665
666 #if 0   /* not used */
667 static void name2gid_recv(TALLOC_CTX *mem_ctx, BOOL success,
668                           struct winbindd_response *response,
669                           void *c, void *private_data)
670 {
671         void (*cont)(void *priv, BOOL succ, gid_t gid) =
672                 (void (*)(void *, BOOL, gid_t))c;
673
674         if (!success) {
675                 DEBUG(5, ("Could not trigger name2gid\n"));
676                 cont(private_data, False, 0);
677                 return;
678         }
679
680         if (response->result != WINBINDD_OK) {
681                 DEBUG(5, ("name2gid returned an error\n"));
682                 cont(private_data, False, 0);
683                 return;
684         }
685
686         cont(private_data, True, response->data.gid);
687 }
688 #endif  /* not used */
689
690 struct lookupsid_state {
691         DOM_SID sid;    
692         void *caller_private_data;
693 };
694
695
696 static void lookupsid_recv2(TALLOC_CTX *mem_ctx, BOOL success,
697                            struct winbindd_response *response,
698                            void *c, void *private_data)
699 {
700         void (*cont)(void *priv, BOOL succ, const char *dom_name,
701                      const char *name, enum lsa_SidType type) =
702                 (void (*)(void *, BOOL, const char *, const char *,
703                           enum lsa_SidType))c;
704         struct lookupsid_state *s = talloc_get_type_abort(private_data, 
705                                                           struct lookupsid_state);
706
707         if (!success) {
708                 DEBUG(5, ("Could not trigger lookupsid\n"));
709                 cont(s->caller_private_data, False, NULL, NULL, SID_NAME_UNKNOWN);
710                 return;
711         }
712
713         if (response->result != WINBINDD_OK) {
714                 DEBUG(5, ("lookupsid (forest root) returned an error\n"));              
715                 cont(s->caller_private_data, False, NULL, NULL, SID_NAME_UNKNOWN);
716                 return;
717         }
718
719         cont(s->caller_private_data, True, response->data.name.dom_name,
720              response->data.name.name,
721              (enum lsa_SidType)response->data.name.type);
722 }
723
724 static void lookupsid_recv(TALLOC_CTX *mem_ctx, BOOL success,
725                            struct winbindd_response *response,
726                            void *c, void *private_data)
727 {
728         void (*cont)(void *priv, BOOL succ, const char *dom_name,
729                      const char *name, enum lsa_SidType type) =
730                 (void (*)(void *, BOOL, const char *, const char *,
731                           enum lsa_SidType))c;
732         struct lookupsid_state *s = talloc_get_type_abort(private_data, 
733                                                           struct lookupsid_state);
734
735         if (!success) {
736                 DEBUG(5, ("Could not trigger lookupsid\n"));
737                 cont(s->caller_private_data, False, NULL, NULL, SID_NAME_UNKNOWN);
738                 return;
739         }
740
741         if (response->result != WINBINDD_OK) {
742                 /* Try again using the forest root */
743                 struct winbindd_domain *root_domain = find_root_domain();
744                 struct winbindd_request request;
745                 
746                 if ( !root_domain ) {
747                         DEBUG(5,("lookupsid_recv: unable to determine forest root\n"));
748                         cont(s->caller_private_data, False, NULL, NULL, SID_NAME_UNKNOWN);
749                         return;
750                 }
751
752                 ZERO_STRUCT(request);
753                 request.cmd = WINBINDD_LOOKUPSID;
754                 fstrcpy(request.data.sid, sid_string_static(&s->sid));
755
756                 do_async_domain(mem_ctx, root_domain, &request, lookupsid_recv2,
757                                 (void *)cont, s);
758
759                 return;
760         }
761
762         cont(s->caller_private_data, True, response->data.name.dom_name,
763              response->data.name.name,
764              (enum lsa_SidType)response->data.name.type);
765 }
766
767 void winbindd_lookupsid_async(TALLOC_CTX *mem_ctx, const DOM_SID *sid,
768                               void (*cont)(void *private_data, BOOL success,
769                                            const char *dom_name,
770                                            const char *name,
771                                            enum lsa_SidType type),
772                               void *private_data)
773 {
774         struct winbindd_domain *domain;
775         struct winbindd_request request;
776         struct lookupsid_state *s;      
777
778         domain = find_lookup_domain_from_sid(sid);
779         if (domain == NULL) {
780                 DEBUG(5, ("Could not find domain for sid %s\n",
781                           sid_string_static(sid)));
782                 cont(private_data, False, NULL, NULL, SID_NAME_UNKNOWN);
783                 return;
784         }
785
786         ZERO_STRUCT(request);
787         request.cmd = WINBINDD_LOOKUPSID;
788         fstrcpy(request.data.sid, sid_string_static(sid));
789
790         if ( (s = TALLOC_ZERO_P(mem_ctx, struct lookupsid_state)) == NULL ) {
791                 DEBUG(0, ("winbindd_lookupsid_async: talloc failed\n"));
792                 cont(private_data, False, NULL, NULL, SID_NAME_UNKNOWN);
793                 return;
794         }
795
796         sid_copy( &s->sid, sid );       
797         s->caller_private_data = private_data;  
798
799         do_async_domain(mem_ctx, domain, &request, lookupsid_recv,
800                         (void *)cont, s);
801 }
802
803 enum winbindd_result winbindd_dual_lookupsid(struct winbindd_domain *domain,
804                                              struct winbindd_cli_state *state)
805 {
806         enum lsa_SidType type;
807         DOM_SID sid;
808         char *name;
809         char *dom_name;
810
811         /* Ensure null termination */
812         state->request.data.sid[sizeof(state->request.data.sid)-1]='\0';
813
814         DEBUG(3, ("[%5lu]: lookupsid %s\n", (unsigned long)state->pid, 
815                   state->request.data.sid));
816
817         /* Lookup sid from PDC using lsa_lookup_sids() */
818
819         if (!string_to_sid(&sid, state->request.data.sid)) {
820                 DEBUG(5, ("%s not a SID\n", state->request.data.sid));
821                 return WINBINDD_ERROR;
822         }
823
824         /* Lookup the sid */
825
826         if (!winbindd_lookup_name_by_sid(state->mem_ctx, domain, &sid, 
827                                          &dom_name, &name, &type)) 
828         {
829                 TALLOC_FREE(dom_name);
830                 TALLOC_FREE(name);
831                 return WINBINDD_ERROR;
832         }
833
834         fstrcpy(state->response.data.name.dom_name, dom_name);
835         fstrcpy(state->response.data.name.name, name);
836         state->response.data.name.type = type;
837
838         TALLOC_FREE(dom_name);
839         TALLOC_FREE(name);
840         return WINBINDD_OK;
841 }
842
843 /********************************************************************
844  This is the second callback after contacting the forest root
845 ********************************************************************/
846
847 struct lookupname_state {
848         char *dom_name;
849         char *name;
850         void *caller_private_data;
851 };
852
853
854 static void lookupname_recv2(TALLOC_CTX *mem_ctx, BOOL success,
855                             struct winbindd_response *response,
856                             void *c, void *private_data)
857 {
858         void (*cont)(void *priv, BOOL succ, const DOM_SID *sid,
859                      enum lsa_SidType type) =
860                 (void (*)(void *, BOOL, const DOM_SID *, enum lsa_SidType))c;
861         DOM_SID sid;
862         struct lookupname_state *s = talloc_get_type_abort( private_data, 
863                                                             struct lookupname_state );
864         
865
866         if (!success) {
867                 DEBUG(5, ("Could not trigger lookup_name\n"));
868                 cont(s->caller_private_data, False, NULL, SID_NAME_UNKNOWN);
869                 return;
870         }
871
872         if (response->result != WINBINDD_OK) {
873                 DEBUG(5, ("lookup_name returned an error\n"));
874                 cont(s->caller_private_data, False, NULL, SID_NAME_UNKNOWN);
875                 return;
876         }
877
878         if (!string_to_sid(&sid, response->data.sid.sid)) {
879                 DEBUG(0, ("Could not convert string %s to sid\n",
880                           response->data.sid.sid));
881                 cont(s->caller_private_data, False, NULL, SID_NAME_UNKNOWN);
882                 return;
883         }
884
885         cont(s->caller_private_data, True, &sid,
886              (enum lsa_SidType)response->data.sid.type);
887 }
888
889 /********************************************************************
890  This is the first callback after contacting our own domain 
891 ********************************************************************/
892
893 static void lookupname_recv(TALLOC_CTX *mem_ctx, BOOL success,
894                             struct winbindd_response *response,
895                             void *c, void *private_data)
896 {
897         void (*cont)(void *priv, BOOL succ, const DOM_SID *sid,
898                      enum lsa_SidType type) =
899                 (void (*)(void *, BOOL, const DOM_SID *, enum lsa_SidType))c;
900         DOM_SID sid;
901         struct lookupname_state *s = talloc_get_type_abort( private_data, 
902                                                             struct lookupname_state );  
903
904         if (!success) {
905                 DEBUG(5, ("lookupname_recv: lookup_name() failed!\n"));
906                 cont(s->caller_private_data, False, NULL, SID_NAME_UNKNOWN);
907                 return;
908         }
909
910         if (response->result != WINBINDD_OK) {
911                 /* Try again using the forest root */
912                 struct winbindd_domain *root_domain = find_root_domain();
913                 struct winbindd_request request;                
914                 
915                 if ( !root_domain ) {
916                         DEBUG(5,("lookupname_recv: unable to determine forest root\n"));
917                         cont(s->caller_private_data, False, NULL, SID_NAME_UNKNOWN);
918                         return;
919                 }
920
921                 ZERO_STRUCT(request);
922                 request.cmd = WINBINDD_LOOKUPNAME;
923
924                 fstrcpy( request.data.name.dom_name, s->dom_name );
925                 fstrcpy( request.data.name.name, s->name );             
926
927                 do_async_domain(mem_ctx, root_domain, &request, lookupname_recv2,
928                                 (void *)cont, s);
929
930                 return;
931         }
932
933         if (!string_to_sid(&sid, response->data.sid.sid)) {
934                 DEBUG(0, ("Could not convert string %s to sid\n",
935                           response->data.sid.sid));
936                 cont(s->caller_private_data, False, NULL, SID_NAME_UNKNOWN);
937                 return;
938         }
939
940         cont(s->caller_private_data, True, &sid,
941              (enum lsa_SidType)response->data.sid.type);
942 }
943
944 /********************************************************************
945  The lookup name call first contacts a DC in its own domain
946  and fallbacks to contact a DC in the forest in our domain doesn't
947  know the name.
948 ********************************************************************/
949
950 void winbindd_lookupname_async(TALLOC_CTX *mem_ctx,
951                                const char *dom_name, const char *name,
952                                void (*cont)(void *private_data, BOOL success,
953                                             const DOM_SID *sid,
954                                             enum lsa_SidType type),
955                                enum winbindd_cmd orig_cmd,
956                                void *private_data)
957 {
958         struct winbindd_request request;
959         struct winbindd_domain *domain;
960         struct lookupname_state *s;     
961
962         if ( (domain = find_lookup_domain_from_name(dom_name)) == NULL ) {
963                 DEBUG(5, ("Could not find domain for name %s\n", dom_name));
964                 cont(private_data, False, NULL, SID_NAME_UNKNOWN);
965                 return;
966         }
967
968         ZERO_STRUCT(request);
969         request.cmd = WINBINDD_LOOKUPNAME;
970         request.original_cmd = orig_cmd;
971         fstrcpy(request.data.name.dom_name, dom_name);
972         fstrcpy(request.data.name.name, name);
973
974         if ( (s = TALLOC_ZERO_P(mem_ctx, struct lookupname_state)) == NULL ) {
975                 DEBUG(0, ("winbindd_lookupname_async: talloc failed\n"));
976                 cont(private_data, False, NULL, SID_NAME_UNKNOWN);
977                 return;
978         }
979
980         s->dom_name = talloc_strdup( s, dom_name );
981         s->name     = talloc_strdup( s, name );
982         s->caller_private_data = private_data;
983
984         do_async_domain(mem_ctx, domain, &request, lookupname_recv,
985                         (void *)cont, s);
986 }
987
988 enum winbindd_result winbindd_dual_lookupname(struct winbindd_domain *domain,
989                                               struct winbindd_cli_state *state)
990 {
991         enum lsa_SidType type;
992         char *name_domain, *name_user;
993         DOM_SID sid;
994         char *p;
995
996         /* Ensure null termination */
997         state->request.data.name.dom_name[sizeof(state->request.data.name.dom_name)-1]='\0';
998
999         /* Ensure null termination */
1000         state->request.data.name.name[sizeof(state->request.data.name.name)-1]='\0';
1001
1002         /* cope with the name being a fully qualified name */
1003         p = strstr(state->request.data.name.name, lp_winbind_separator());
1004         if (p) {
1005                 *p = 0;
1006                 name_domain = state->request.data.name.name;
1007                 name_user = p+1;
1008         } else {
1009                 name_domain = state->request.data.name.dom_name;
1010                 name_user = state->request.data.name.name;
1011         }
1012
1013         DEBUG(3, ("[%5lu]: lookupname %s%s%s\n", (unsigned long)state->pid,
1014                   name_domain, lp_winbind_separator(), name_user));
1015
1016         /* Lookup name from DC using lsa_lookup_names() */
1017         if (!winbindd_lookup_sid_by_name(state->mem_ctx, state->request.original_cmd, domain, name_domain,
1018                                          name_user, &sid, &type)) {
1019                 return WINBINDD_ERROR;
1020         }
1021
1022         sid_to_string(state->response.data.sid.sid, &sid);
1023         state->response.data.sid.type = type;
1024
1025         return WINBINDD_OK;
1026 }
1027
1028 BOOL print_sidlist(TALLOC_CTX *mem_ctx, const DOM_SID *sids,
1029                    size_t num_sids, char **result, ssize_t *len)
1030 {
1031         size_t i;
1032         size_t buflen = 0;
1033
1034         *len = 0;
1035         *result = NULL;
1036         for (i=0; i<num_sids; i++) {
1037                 sprintf_append(mem_ctx, result, len, &buflen,
1038                                "%s\n", sid_string_static(&sids[i]));
1039         }
1040
1041         if ((num_sids != 0) && (*result == NULL)) {
1042                 return False;
1043         }
1044
1045         return True;
1046 }
1047
1048 static BOOL parse_sidlist(TALLOC_CTX *mem_ctx, char *sidstr,
1049                           DOM_SID **sids, size_t *num_sids)
1050 {
1051         char *p, *q;
1052
1053         p = sidstr;
1054         if (p == NULL)
1055                 return False;
1056
1057         while (p[0] != '\0') {
1058                 DOM_SID sid;
1059                 q = strchr(p, '\n');
1060                 if (q == NULL) {
1061                         DEBUG(0, ("Got invalid sidstr: %s\n", p));
1062                         return False;
1063                 }
1064                 *q = '\0';
1065                 q += 1;
1066                 if (!string_to_sid(&sid, p)) {
1067                         DEBUG(0, ("Could not parse sid %s\n", p));
1068                         return False;
1069                 }
1070                 if (!add_sid_to_array(mem_ctx, &sid, sids, num_sids)) {
1071                         return False;
1072                 }
1073                 p = q;
1074         }
1075         return True;
1076 }
1077
1078 static BOOL parse_ridlist(TALLOC_CTX *mem_ctx, char *ridstr,
1079                           uint32 **rids, size_t *num_rids)
1080 {
1081         char *p;
1082
1083         p = ridstr;
1084         if (p == NULL)
1085                 return False;
1086
1087         while (p[0] != '\0') {
1088                 uint32 rid;
1089                 char *q;
1090                 rid = strtoul(p, &q, 10);
1091                 if (*q != '\n') {
1092                         DEBUG(0, ("Got invalid ridstr: %s\n", p));
1093                         return False;
1094                 }
1095                 p = q+1;
1096                 ADD_TO_ARRAY(mem_ctx, uint32, rid, rids, num_rids);
1097         }
1098         return True;
1099 }
1100
1101 enum winbindd_result winbindd_dual_lookuprids(struct winbindd_domain *domain,
1102                                               struct winbindd_cli_state *state)
1103 {
1104         uint32 *rids = NULL;
1105         size_t i, buflen, num_rids = 0;
1106         ssize_t len;
1107         DOM_SID domain_sid;
1108         char *domain_name;
1109         char **names;
1110         enum lsa_SidType *types;
1111         NTSTATUS status;
1112         char *result;
1113
1114         DEBUG(10, ("Looking up RIDs for domain %s (%s)\n",
1115                    state->request.domain_name,
1116                    state->request.data.sid));
1117
1118         if (!parse_ridlist(state->mem_ctx, state->request.extra_data.data,
1119                            &rids, &num_rids)) {
1120                 DEBUG(5, ("Could not parse ridlist\n"));
1121                 return WINBINDD_ERROR;
1122         }
1123
1124         if (!string_to_sid(&domain_sid, state->request.data.sid)) {
1125                 DEBUG(5, ("Could not parse domain sid %s\n",
1126                           state->request.data.sid));
1127                 return WINBINDD_ERROR;
1128         }
1129
1130         status = domain->methods->rids_to_names(domain, state->mem_ctx,
1131                                                 &domain_sid, rids, num_rids,
1132                                                 &domain_name,
1133                                                 &names, &types);
1134
1135         if (!NT_STATUS_IS_OK(status) &&
1136             !NT_STATUS_EQUAL(status, STATUS_SOME_UNMAPPED)) {
1137                 return WINBINDD_ERROR;
1138         }
1139
1140         len = 0;
1141         buflen = 0;
1142         result = NULL;
1143
1144         for (i=0; i<num_rids; i++) {
1145                 sprintf_append(state->mem_ctx, &result, &len, &buflen,
1146                                "%d %s\n", types[i], names[i]);
1147         }
1148
1149         fstrcpy(state->response.data.domain_name, domain_name);
1150
1151         if (result != NULL) {
1152                 state->response.extra_data.data = SMB_STRDUP(result);
1153                 if (!state->response.extra_data.data) {
1154                         return WINBINDD_ERROR;
1155                 }
1156                 state->response.length += len+1;
1157         }
1158
1159         return WINBINDD_OK;
1160 }
1161
1162 static void getsidaliases_recv(TALLOC_CTX *mem_ctx, BOOL success,
1163                                struct winbindd_response *response,
1164                                void *c, void *private_data)
1165 {
1166         void (*cont)(void *priv, BOOL succ,
1167                      DOM_SID *aliases, size_t num_aliases) =
1168                 (void (*)(void *, BOOL, DOM_SID *, size_t))c;
1169         char *aliases_str;
1170         DOM_SID *sids = NULL;
1171         size_t num_sids = 0;
1172
1173         if (!success) {
1174                 DEBUG(5, ("Could not trigger getsidaliases\n"));
1175                 cont(private_data, success, NULL, 0);
1176                 return;
1177         }
1178
1179         if (response->result != WINBINDD_OK) {
1180                 DEBUG(5, ("getsidaliases returned an error\n"));
1181                 cont(private_data, False, NULL, 0);
1182                 return;
1183         }
1184
1185         aliases_str = (char *)response->extra_data.data;
1186
1187         if (aliases_str == NULL) {
1188                 DEBUG(10, ("getsidaliases return 0 SIDs\n"));
1189                 cont(private_data, True, NULL, 0);
1190                 return;
1191         }
1192
1193         if (!parse_sidlist(mem_ctx, aliases_str, &sids, &num_sids)) {
1194                 DEBUG(0, ("Could not parse sids\n"));
1195                 cont(private_data, False, NULL, 0);
1196                 return;
1197         }
1198
1199         SAFE_FREE(response->extra_data.data);
1200
1201         cont(private_data, True, sids, num_sids);
1202 }
1203
1204 void winbindd_getsidaliases_async(struct winbindd_domain *domain,
1205                                   TALLOC_CTX *mem_ctx,
1206                                   const DOM_SID *sids, size_t num_sids,
1207                                   void (*cont)(void *private_data,
1208                                                BOOL success,
1209                                                const DOM_SID *aliases,
1210                                                size_t num_aliases),
1211                                   void *private_data)
1212 {
1213         struct winbindd_request request;
1214         char *sidstr = NULL;
1215         ssize_t len;
1216
1217         if (num_sids == 0) {
1218                 cont(private_data, True, NULL, 0);
1219                 return;
1220         }
1221
1222         if (!print_sidlist(mem_ctx, sids, num_sids, &sidstr, &len)) {
1223                 cont(private_data, False, NULL, 0);
1224                 return;
1225         }
1226
1227         ZERO_STRUCT(request);
1228         request.cmd = WINBINDD_DUAL_GETSIDALIASES;
1229         request.extra_len = len;
1230         request.extra_data.data = sidstr;
1231
1232         do_async_domain(mem_ctx, domain, &request, getsidaliases_recv,
1233                         (void *)cont, private_data);
1234 }
1235
1236 enum winbindd_result winbindd_dual_getsidaliases(struct winbindd_domain *domain,
1237                                                  struct winbindd_cli_state *state)
1238 {
1239         DOM_SID *sids = NULL;
1240         size_t num_sids = 0;
1241         char *sidstr = NULL;
1242         ssize_t len;
1243         size_t i;
1244         uint32 num_aliases;
1245         uint32 *alias_rids;
1246         NTSTATUS result;
1247
1248         DEBUG(3, ("[%5lu]: getsidaliases\n", (unsigned long)state->pid));
1249
1250         sidstr = state->request.extra_data.data;
1251         if (sidstr == NULL) {
1252                 sidstr = talloc_strdup(state->mem_ctx, "\n"); /* No SID */
1253                 if (!sidstr) {
1254                         DEBUG(0, ("Out of memory\n"));
1255                         return WINBINDD_ERROR;
1256                 }
1257         }
1258
1259         DEBUG(10, ("Sidlist: %s\n", sidstr));
1260
1261         if (!parse_sidlist(state->mem_ctx, sidstr, &sids, &num_sids)) {
1262                 DEBUG(0, ("Could not parse SID list: %s\n", sidstr));
1263                 return WINBINDD_ERROR;
1264         }
1265
1266         num_aliases = 0;
1267         alias_rids = NULL;
1268
1269         result = domain->methods->lookup_useraliases(domain,
1270                                                      state->mem_ctx,
1271                                                      num_sids, sids,
1272                                                      &num_aliases,
1273                                                      &alias_rids);
1274
1275         if (!NT_STATUS_IS_OK(result)) {
1276                 DEBUG(3, ("Could not lookup_useraliases: %s\n",
1277                           nt_errstr(result)));
1278                 return WINBINDD_ERROR;
1279         }
1280
1281         num_sids = 0;
1282         sids = NULL;
1283         sidstr = NULL;
1284
1285         DEBUG(10, ("Got %d aliases\n", num_aliases));
1286
1287         for (i=0; i<num_aliases; i++) {
1288                 DOM_SID sid;
1289                 DEBUGADD(10, (" rid %d\n", alias_rids[i]));
1290                 sid_copy(&sid, &domain->sid);
1291                 sid_append_rid(&sid, alias_rids[i]);
1292                 if (!add_sid_to_array(state->mem_ctx, &sid, &sids, &num_sids)) {
1293                         return WINBINDD_ERROR;
1294                 }
1295         }
1296
1297
1298         if (!print_sidlist(state->mem_ctx, sids, num_sids, &sidstr, &len)) {
1299                 DEBUG(0, ("Could not print_sidlist\n"));
1300                 state->response.extra_data.data = NULL;
1301                 return WINBINDD_ERROR;
1302         }
1303
1304         state->response.extra_data.data = NULL;
1305
1306         if (sidstr) {
1307                 state->response.extra_data.data = SMB_STRDUP(sidstr);
1308                 if (!state->response.extra_data.data) {
1309                         DEBUG(0, ("Out of memory\n"));
1310                         return WINBINDD_ERROR;
1311                 }
1312                 DEBUG(10, ("aliases_list: %s\n",
1313                            (char *)state->response.extra_data.data));
1314                 state->response.length += len+1;
1315         }
1316         
1317         return WINBINDD_OK;
1318 }
1319
1320 struct gettoken_state {
1321         TALLOC_CTX *mem_ctx;
1322         DOM_SID user_sid;
1323         struct winbindd_domain *alias_domain;
1324         struct winbindd_domain *local_alias_domain;
1325         struct winbindd_domain *builtin_domain;
1326         DOM_SID *sids;
1327         size_t num_sids;
1328         void (*cont)(void *private_data, BOOL success, DOM_SID *sids, size_t num_sids);
1329         void *private_data;
1330 };
1331
1332 static void gettoken_recvdomgroups(TALLOC_CTX *mem_ctx, BOOL success,
1333                                    struct winbindd_response *response,
1334                                    void *c, void *private_data);
1335 static void gettoken_recvaliases(void *private_data, BOOL success,
1336                                  const DOM_SID *aliases,
1337                                  size_t num_aliases);
1338                                  
1339
1340 void winbindd_gettoken_async(TALLOC_CTX *mem_ctx, const DOM_SID *user_sid,
1341                              void (*cont)(void *private_data, BOOL success,
1342                                           DOM_SID *sids, size_t num_sids),
1343                              void *private_data)
1344 {
1345         struct winbindd_domain *domain;
1346         struct winbindd_request request;
1347         struct gettoken_state *state;
1348
1349         state = TALLOC_ZERO_P(mem_ctx, struct gettoken_state);
1350         if (state == NULL) {
1351                 DEBUG(0, ("talloc failed\n"));
1352                 cont(private_data, False, NULL, 0);
1353                 return;
1354         }
1355
1356         state->mem_ctx = mem_ctx;
1357         sid_copy(&state->user_sid, user_sid);
1358         state->alias_domain = find_our_domain();
1359         state->local_alias_domain = find_domain_from_name( get_global_sam_name() );
1360         state->builtin_domain = find_builtin_domain();
1361         state->cont = cont;
1362         state->private_data = private_data;
1363
1364         domain = find_domain_from_sid_noinit(user_sid);
1365         if (domain == NULL) {
1366                 DEBUG(5, ("Could not find domain from SID %s\n",
1367                           sid_string_static(user_sid)));
1368                 cont(private_data, False, NULL, 0);
1369                 return;
1370         }
1371
1372         ZERO_STRUCT(request);
1373         request.cmd = WINBINDD_GETUSERDOMGROUPS;
1374         fstrcpy(request.data.sid, sid_string_static(user_sid));
1375
1376         do_async_domain(mem_ctx, domain, &request, gettoken_recvdomgroups,
1377                         NULL, state);
1378 }
1379
1380 static void gettoken_recvdomgroups(TALLOC_CTX *mem_ctx, BOOL success,
1381                                    struct winbindd_response *response,
1382                                    void *c, void *private_data)
1383 {
1384         struct gettoken_state *state =
1385                 talloc_get_type_abort(private_data, struct gettoken_state);
1386         char *sids_str;
1387         
1388         if (!success) {
1389                 DEBUG(10, ("Could not get domain groups\n"));
1390                 state->cont(state->private_data, False, NULL, 0);
1391                 return;
1392         }
1393
1394         sids_str = (char *)response->extra_data.data;
1395
1396         if (sids_str == NULL) {
1397                 /* This could be normal if we are dealing with a
1398                    local user and local groups */
1399
1400                 if ( !sid_check_is_in_our_domain( &state->user_sid ) ) {
1401                         DEBUG(10, ("Received no domain groups\n"));
1402                         state->cont(state->private_data, True, NULL, 0);
1403                         return;
1404                 }
1405         }
1406
1407         state->sids = NULL;
1408         state->num_sids = 0;
1409
1410         if (!add_sid_to_array(mem_ctx, &state->user_sid, &state->sids,
1411                          &state->num_sids)) {
1412                 DEBUG(0, ("Out of memory\n"));
1413                 state->cont(state->private_data, False, NULL, 0);
1414                 return;
1415         }
1416
1417         if (sids_str && !parse_sidlist(mem_ctx, sids_str, &state->sids,
1418                            &state->num_sids)) {
1419                 DEBUG(0, ("Could not parse sids\n"));
1420                 state->cont(state->private_data, False, NULL, 0);
1421                 return;
1422         }
1423
1424         SAFE_FREE(response->extra_data.data);
1425
1426         if (state->alias_domain == NULL) {
1427                 DEBUG(10, ("Don't expand domain local groups\n"));
1428                 state->cont(state->private_data, True, state->sids,
1429                             state->num_sids);
1430                 return;
1431         }
1432
1433         winbindd_getsidaliases_async(state->alias_domain, mem_ctx,
1434                                      state->sids, state->num_sids,
1435                                      gettoken_recvaliases, state);
1436 }
1437
1438 static void gettoken_recvaliases(void *private_data, BOOL success,
1439                                  const DOM_SID *aliases,
1440                                  size_t num_aliases)
1441 {
1442         struct gettoken_state *state = (struct gettoken_state *)private_data;
1443         size_t i;
1444
1445         if (!success) {
1446                 DEBUG(10, ("Could not receive domain local groups\n"));
1447                 state->cont(state->private_data, False, NULL, 0);
1448                 return;
1449         }
1450
1451         for (i=0; i<num_aliases; i++) {
1452                 if (!add_sid_to_array(state->mem_ctx, &aliases[i],
1453                                  &state->sids, &state->num_sids)) {
1454                         DEBUG(0, ("Out of memory\n"));
1455                         state->cont(state->private_data, False, NULL, 0);
1456                         return;
1457                 }
1458         }
1459
1460         if (state->local_alias_domain != NULL) {
1461                 struct winbindd_domain *local_domain = state->local_alias_domain;
1462                 DEBUG(10, ("Expanding our own local groups\n"));
1463                 state->local_alias_domain = NULL;
1464                 winbindd_getsidaliases_async(local_domain, state->mem_ctx,
1465                                              state->sids, state->num_sids,
1466                                              gettoken_recvaliases, state);
1467                 return;
1468         }
1469
1470         if (state->builtin_domain != NULL) {
1471                 struct winbindd_domain *builtin_domain = state->builtin_domain;
1472                 DEBUG(10, ("Expanding our own BUILTIN groups\n"));
1473                 state->builtin_domain = NULL;
1474                 winbindd_getsidaliases_async(builtin_domain, state->mem_ctx,
1475                                              state->sids, state->num_sids,
1476                                              gettoken_recvaliases, state);
1477                 return;
1478         }
1479
1480         state->cont(state->private_data, True, state->sids, state->num_sids);
1481 }
1482
1483 static void query_user_recv(TALLOC_CTX *mem_ctx, BOOL success,
1484                             struct winbindd_response *response,
1485                             void *c, void *private_data)
1486 {
1487         void (*cont)(void *priv, BOOL succ, const char *acct_name,
1488                      const char *full_name, const char *homedir, 
1489                      const char *shell, uint32 gid, uint32 group_rid) =
1490                 (void (*)(void *, BOOL, const char *, const char *,
1491                           const char *, const char *, uint32, uint32))c;
1492
1493         if (!success) {
1494                 DEBUG(5, ("Could not trigger query_user\n"));
1495                 cont(private_data, False, NULL, NULL, NULL, NULL, -1, -1);
1496                 return;
1497         }
1498
1499         if (response->result != WINBINDD_OK) {
1500                 DEBUG(5, ("query_user returned an error\n"));
1501                 cont(private_data, False, NULL, NULL, NULL, NULL, -1, -1);
1502                 return;
1503         }
1504
1505         cont(private_data, True, response->data.user_info.acct_name,
1506              response->data.user_info.full_name,
1507              response->data.user_info.homedir,
1508              response->data.user_info.shell,
1509              response->data.user_info.primary_gid,
1510              response->data.user_info.group_rid);
1511 }
1512
1513 void query_user_async(TALLOC_CTX *mem_ctx, struct winbindd_domain *domain,
1514                       const DOM_SID *sid,
1515                       void (*cont)(void *private_data, BOOL success,
1516                                    const char *acct_name,
1517                                    const char *full_name,
1518                                    const char *homedir,
1519                                    const char *shell,
1520                                    gid_t gid,
1521                                    uint32 group_rid),
1522                       void *private_data)
1523 {
1524         struct winbindd_request request;
1525         ZERO_STRUCT(request);
1526         request.cmd = WINBINDD_DUAL_USERINFO;
1527         sid_to_string(request.data.sid, sid);
1528         do_async_domain(mem_ctx, domain, &request, query_user_recv,
1529                         (void *)cont, private_data);
1530 }
1531
1532 /* The following uid2sid/gid2sid functions has been contributed by
1533  * Keith Reynolds <Keith.Reynolds@centrify.com> */
1534
1535 static void winbindd_uid2sid_recv(TALLOC_CTX *mem_ctx, BOOL success,
1536                                   struct winbindd_response *response,
1537                                   void *c, void *private_data)
1538 {
1539         void (*cont)(void *priv, BOOL succ, const char *sid) =
1540                 (void (*)(void *, BOOL, const char *))c;
1541
1542         if (!success) {
1543                 DEBUG(5, ("Could not trigger uid2sid\n"));
1544                 cont(private_data, False, NULL);
1545                 return;
1546         }
1547
1548         if (response->result != WINBINDD_OK) {
1549                 DEBUG(5, ("uid2sid returned an error\n"));
1550                 cont(private_data, False, NULL);
1551                 return;
1552         }
1553
1554         cont(private_data, True, response->data.sid.sid);
1555 }
1556
1557 void winbindd_uid2sid_async(TALLOC_CTX *mem_ctx, uid_t uid,
1558                             void (*cont)(void *private_data, BOOL success, const char *sid),
1559                             void *private_data)
1560 {
1561         struct winbindd_request request;
1562
1563         ZERO_STRUCT(request);
1564         request.cmd = WINBINDD_DUAL_UID2SID;
1565         request.data.uid = uid;
1566         do_async(mem_ctx, idmap_child(), &request, winbindd_uid2sid_recv,
1567                  (void *)cont, private_data);
1568 }
1569
1570 enum winbindd_result winbindd_dual_uid2sid(struct winbindd_domain *domain,
1571                                            struct winbindd_cli_state *state)
1572 {
1573         DOM_SID sid;
1574         NTSTATUS result;
1575
1576         DEBUG(3,("[%5lu]: uid to sid %lu\n",
1577                  (unsigned long)state->pid,
1578                  (unsigned long) state->request.data.uid));
1579
1580         /* Find sid for this uid and return it, possibly ask the slow remote idmap */
1581         result = idmap_uid_to_sid(&sid, state->request.data.uid);
1582
1583         if (NT_STATUS_IS_OK(result)) {
1584                 sid_to_string(state->response.data.sid.sid, &sid);
1585                 state->response.data.sid.type = SID_NAME_USER;
1586                 return WINBINDD_OK;
1587         }
1588
1589         return WINBINDD_ERROR;
1590 }
1591
1592 static void winbindd_gid2sid_recv(TALLOC_CTX *mem_ctx, BOOL success,
1593                                   struct winbindd_response *response,
1594                                   void *c, void *private_data)
1595 {
1596         void (*cont)(void *priv, BOOL succ, const char *sid) =
1597                 (void (*)(void *, BOOL, const char *))c;
1598
1599         if (!success) {
1600                 DEBUG(5, ("Could not trigger gid2sid\n"));
1601                 cont(private_data, False, NULL);
1602                 return;
1603         }
1604
1605         if (response->result != WINBINDD_OK) {
1606                 DEBUG(5, ("gid2sid returned an error\n"));
1607                 cont(private_data, False, NULL);
1608                 return;
1609         }
1610
1611         cont(private_data, True, response->data.sid.sid);
1612 }
1613
1614 void winbindd_gid2sid_async(TALLOC_CTX *mem_ctx, gid_t gid,
1615                             void (*cont)(void *private_data, BOOL success, const char *sid),
1616                             void *private_data)
1617 {
1618         struct winbindd_request request;
1619
1620         ZERO_STRUCT(request);
1621         request.cmd = WINBINDD_DUAL_GID2SID;
1622         request.data.gid = gid;
1623         do_async(mem_ctx, idmap_child(), &request, winbindd_gid2sid_recv,
1624                  (void *)cont, private_data);
1625 }
1626
1627 enum winbindd_result winbindd_dual_gid2sid(struct winbindd_domain *domain,
1628                                            struct winbindd_cli_state *state)
1629 {
1630         DOM_SID sid;
1631         NTSTATUS result;
1632
1633         DEBUG(3,("[%5lu]: gid %lu to sid\n",
1634                 (unsigned long)state->pid,
1635                 (unsigned long) state->request.data.gid));
1636
1637         /* Find sid for this gid and return it, possibly ask the slow remote idmap */
1638         result = idmap_gid_to_sid(&sid, state->request.data.gid);
1639
1640         if (NT_STATUS_IS_OK(result)) {
1641                 sid_to_string(state->response.data.sid.sid, &sid);
1642                 DEBUG(10, ("[%5lu]: retrieved sid: %s\n",
1643                            (unsigned long)state->pid,
1644                            state->response.data.sid.sid));
1645                 state->response.data.sid.type = SID_NAME_DOM_GRP;
1646                 return WINBINDD_OK;
1647         }
1648
1649         return WINBINDD_ERROR;
1650 }
1651
1652 static void winbindd_dump_id_maps_recv(TALLOC_CTX *mem_ctx, BOOL success,
1653                                struct winbindd_response *response,
1654                                void *c, void *private_data)
1655 {
1656         void (*cont)(void *priv, BOOL succ) =
1657                 (void (*)(void *, BOOL))c;
1658
1659         if (!success) {
1660                 DEBUG(5, ("Could not trigger a map dump\n"));
1661                 cont(private_data, False);
1662                 return;
1663         }
1664
1665         if (response->result != WINBINDD_OK) {
1666                 DEBUG(5, ("idmap dump maps returned an error\n"));
1667                 cont(private_data, False);
1668                 return;
1669         }
1670
1671         cont(private_data, True);
1672 }
1673                          
1674 void winbindd_dump_maps_async(TALLOC_CTX *mem_ctx, void *data, int size,
1675                          void (*cont)(void *private_data, BOOL success),
1676                          void *private_data)
1677 {
1678         struct winbindd_request request;
1679         ZERO_STRUCT(request);
1680         request.cmd = WINBINDD_DUAL_DUMP_MAPS;
1681         request.extra_data.data = (char *)data;
1682         request.extra_len = size;
1683         do_async(mem_ctx, idmap_child(), &request, winbindd_dump_id_maps_recv,
1684                  (void *)cont, private_data);
1685 }
1686
1687 enum winbindd_result winbindd_dual_dump_maps(struct winbindd_domain *domain,
1688                                            struct winbindd_cli_state *state)
1689 {
1690         DEBUG(3, ("[%5lu]: dual dump maps\n", (unsigned long)state->pid));
1691
1692         idmap_dump_maps((char *)state->request.extra_data.data);
1693
1694         return WINBINDD_OK;
1695 }
1696