builtin alias password API

(This used to be commit 58c0f0a77c396a6021596c84d4a30b1c9a4b1419)

1 files changed, 268 insertions, 0 deletions

diff --git a/source3/groupdb/builtinunix.c b/source3/groupdb/builtinunix.c
new file mode 100644
index 0000000000..dc70ffb3dc
--- /dev/null
+++ b/source3/groupdb/builtinunix.c
@@ -0,0 +1,268 @@
+/*
+ * Unix SMB/Netbios implementation. Version 1.9. SMB parameters and setup
+ * Copyright (C) Andrew Tridgell 1992-1998 Modified by Jeremy Allison 1995.
+ * 
+ * This program is free software; you can redistribute it and/or modify it under
+ * the terms of the GNU General Public License as published by the Free
+ * Software Foundation; either version 2 of the License, or (at your option)
+ * any later version.
+ * 
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
+ * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for
+ * more details.
+ * 
+ * You should have received a copy of the GNU General Public License along with
+ * this program; if not, write to the Free Software Foundation, Inc., 675
+ * Mass Ave, Cambridge, MA 02139, USA.
+ */
+
+#include "includes.h"
+
+#ifdef USE_SMBUNIX_DB
+
+extern int DEBUGLEVEL;
+
+
+extern DOM_SID global_sid_S_1_5_20;
+extern DOM_SID global_sam_sid;
+extern fstring global_sam_name;
+
+/***************************************************************
+ Start to enumerate the bltpasswd list. Returns a void pointer
+ to ensure no modification outside this module.
+****************************************************************/
+
+static void *startbltunixpwent(BOOL update)
+{
+	setgrent();
+	return (void*)(-1);
+}
+
+/***************************************************************
+ End enumeration of the bltpasswd list.
+****************************************************************/
+
+static void endbltunixpwent(void *vp)
+{
+	endgrent();
+}
+
+/*************************************************************************
+ Return the current position in the bltpasswd list as an SMB_BIG_UINT.
+ This must be treated as an opaque token.
+*************************************************************************/
+static SMB_BIG_UINT getbltunixpwpos(void *vp)
+{
+	return (SMB_BIG_UINT)0;
+}
+
+/*************************************************************************
+ Set the current position in the bltpasswd list from an SMB_BIG_UINT.
+ This must be treated as an opaque token.
+*************************************************************************/
+static BOOL setbltunixpwpos(void *vp, SMB_BIG_UINT tok)
+{
+	return False;
+}
+
+/*************************************************************************
+ Routine to return the next entry in the smbdomainbuiltin list.
+ *************************************************************************/
+BOOL get_unixbuiltin_members(struct group *grp,
+				int *num_mem, LOCAL_GRP_MEMBER **members)
+{
+	int i;
+	char *unix_name;
+
+	if (num_mem == NULL || members == NULL)
+	{
+		return False;
+	}
+
+	(*num_mem) = 0;
+	(*members) = NULL;
+
+	for (i = 0; (unix_name = grp->gr_mem[i]) != NULL; i++)
+	{
+		fstring name;
+		DOM_NAME_MAP gmep;
+		LOCAL_GRP_MEMBER *mem;
+
+		fstrcpy(name, unix_name);
+
+		if (!lookupsmbgrpnam(name, &gmep) &&
+		    !lookupsmbpwnam (name, &gmep))
+		{
+			continue;
+		}
+
+		if (!sid_front_equal(&global_sam_sid, &gmep.sid))
+		{
+			DEBUG(0,("builtin database: could not resolve name %s (wrong Domain SID)\n",
+			          name));
+			continue;
+		}
+
+		(*num_mem)++;
+		(*members) = Realloc((*members), (*num_mem) * sizeof(LOCAL_GRP_MEMBER));
+		if ((*members) == NULL)
+		{
+			DEBUG(0,("get_unixbuiltin_members: could not realloc LOCAL_GRP_MEMBERs\n"));
+			return False;
+		}
+
+		mem = &(*members)[(*num_mem)-1];
+		slprintf(mem->name, sizeof(mem->name)-1, "%s\\%s",
+		         gmep.nt_domain, gmep.nt_name);
+		sid_copy(&mem->sid, &gmep.sid);
+		mem->sid_use = gmep.type;
+
+		DEBUG(10,("get_unixbuiltin_members: adding to builtin alias %s\n",
+		           mem->name));
+	}
+	return True;
+}
+
+/*************************************************************************
+ Routine to return the next entry in the domain builtin list.
+
+ when we are a PDC or BDC, then unix groups that are explicitly NOT mapped
+ to builtin aliases are treated as DOMAIN groups (see groupunix.c).
+
+ when we are a member of a domain (not a PDC or BDC) then unix groups
+ that are explicitly NOT mapped to builtin aliases are treated
+ as LOCAL groups.
+
+ the reasoning behind this is to make it as simple as possible (not an easy
+ task) for people to set up a domain-aware samba server, in each role that
+ the server can take.
+
+ *************************************************************************/
+static LOCAL_GRP *getbltunixpwent(void *vp, LOCAL_GRP_MEMBER **mem, int *num_mem)
+{
+	/* Static buffers we will return. */
+	static LOCAL_GRP gp_buf;
+	struct group *unix_grp;
+
+	if (lp_server_role() == ROLE_DOMAIN_NONE)
+	{
+		/*
+		 * no domain role, no domain builtin aliases (or domain groups,
+		 * but that's dealt with by groupdb...).
+		 */
+
+		return NULL;
+	}
+
+	bidb_init_blt(&gp_buf);
+
+	/* cycle through unix groups */
+	while ((unix_grp = getgrent()) != NULL)
+	{
+		DOM_NAME_MAP gmep;
+		fstring sid_str;
+		DEBUG(10,("getbltunixpwent: enum unix group entry %s\n",
+		           unix_grp->gr_name));
+			
+		if (!lookupsmbgrpgid(unix_grp->gr_gid, &gmep))
+		{
+			continue;
+		}
+
+		sid_to_string(sid_str, &gmep.sid);
+		DEBUG(10,("group %s found, sid %s type %d\n",
+			gmep.nt_name, sid_str, gmep.type));
+
+		if (gmep.type != SID_NAME_ALIAS)
+		{
+			continue;
+		}
+
+		sid_split_rid(&gmep.sid, &gp_buf.rid);
+		if (!sid_equal(&global_sid_S_1_5_20, &gmep.sid))
+		{
+			continue;
+		}
+
+		fstrcpy(gp_buf.name, gmep.nt_name);
+		break;
+	}
+
+	if (unix_grp == NULL)
+	{
+		return NULL;
+	}
+
+	/* get the user's domain builtin aliases.  there are a maximum of 32 */
+
+	if (mem != NULL && num_mem != NULL)
+	{
+		(*mem) = NULL;
+		(*num_mem) = 0;
+
+		get_unixbuiltin_members(unix_grp, num_mem, mem);
+	}
+
+	{
+		pstring linebuf;
+		make_builtin_line(linebuf, sizeof(linebuf), &gp_buf, mem, num_mem);
+		DEBUG(10,("line: '%s'\n", linebuf));
+	}
+
+	return &gp_buf;
+}
+
+/************************************************************************
+ Routine to add an entry to the bltpasswd file.
+*************************************************************************/
+
+static BOOL add_bltunixgrp_entry(LOCAL_GRP *newblt)
+{
+	DEBUG(0, ("add_bltunixgrp_entry: NOT IMPLEMENTED\n"));
+	return False;
+}
+
+/************************************************************************
+ Routine to search the bltpasswd file for an entry matching the builtinname.
+ and then modify its builtin entry. We can't use the startbltpwent()/
+ getbltpwent()/endbltpwent() interfaces here as we depend on looking
+ in the actual file to decide how much room we have to write data.
+ override = False, normal
+ override = True, override XXXXXXXX'd out builtin or NO PASS
+************************************************************************/
+
+static BOOL mod_bltunixgrp_entry(LOCAL_GRP* blt)
+{
+	DEBUG(0, ("mod_bltunixgrp_entry: NOT IMPLEMENTED\n"));
+	return False;
+}
+
+
+static struct aliasdb_ops unix_ops =
+{
+	startbltunixpwent,
+	endbltunixpwent,
+	getbltunixpwpos,
+	setbltunixpwpos,
+
+	iterate_getbuiltinntnam,          /* In builtindb.c */
+	iterate_getbuiltingid,          /* In builtindb.c */
+	iterate_getbuiltinrid,          /* In builtindb.c */
+	getbltunixpwent,
+
+	add_bltunixgrp_entry,
+	mod_bltunixgrp_entry,
+
+	iterate_getuserbuiltinntnam      /* in builtindb.c */
+};
+
+struct aliasdb_ops *unix_initialise_builtin_db(void)
+{    
+	return &unix_ops;
+}
+
+#else
+ /* Do *NOT* make this function static. It breaks the compile on gcc. JRA */
+ void unix_bltpass_dummy_function(void) { } /* stop some compilers complaining */
+#endif /* USE_SMBPASS_DB */