s3:idmap: parse ranges and "read only" in idmap_init_domain().

1 files changed, 78 insertions, 0 deletions

diff --git a/source3/winbindd/idmap.c b/source3/winbindd/idmap.c
index c547262d81..c4d26d8646 100644
--- a/source3/winbindd/idmap.c
+++ b/source3/winbindd/idmap.c
@@ -229,6 +229,84 @@ static struct idmap_domain *idmap_init_domain(TALLOC_CTX *mem_ctx,
 		goto fail;
 	}
 
+	/*
+	 * load ranges and read only information from the config
+	 */
+	if (strequal(result->name, "*")) {
+		/*
+		 * The default domain "*" is configured differently
+		 * from named domains.
+		 */
+		uid_t low_uid = 0;
+		uid_t high_uid = 0;
+		gid_t low_gid = 0;
+		gid_t high_gid = 0;
+
+		result->low_id = 0;
+		result->high_id = 0;
+
+		if (!lp_idmap_uid(&low_uid, &high_uid)) {
+			DEBUG(1, ("Error: 'idmap uid' not set!\n"));
+			goto fail;
+		}
+
+		result->low_id = low_uid;
+		result->high_id = high_uid;
+
+		if (!lp_idmap_gid(&low_gid, &high_gid)) {
+			DEBUG(1, ("Error: 'idmap gid' not set!\n"));
+			goto fail;
+		}
+
+		if ((low_gid != low_uid) || (high_gid != high_uid)) {
+			DEBUG(1, ("Warning: 'idmap uid' and 'idmap gid'"
+			      " ranges do not agree -- building "
+			      "intersection\n"));
+			result->low_id = MAX(result->low_id, low_gid);
+			result->high_id = MIN(result->high_id, high_gid);
+		}
+
+		result->read_only = lp_idmap_read_only();
+	} else {
+		char *config_option = NULL;
+		const char *range;
+
+		config_option = talloc_asprintf(result, "idmap config %s",
+						result->name);
+		if (config_option == NULL) {
+			DEBUG(0, ("Out of memory!\n"));
+			goto fail;
+		}
+
+		range = lp_parm_const_string(-1, config_option, "range", NULL);
+		if (range == NULL) {
+			DEBUG(1, ("Error: idmap range not specified for "
+				  "domain %s\n", result ->name));
+			goto fail;
+		}
+
+		if (sscanf(range, "%u - %u", &result->low_id, &result->high_id)
+		    != 2)
+		{
+			DEBUG(1, ("Error: invalid range '%s' specified for "
+				  "domain %s\n", range, result->name));
+			goto fail;
+		}
+
+		result->read_only = lp_parm_bool(-1, config_option, "read only",
+						 false);
+
+		talloc_free(config_option);
+	}
+
+	if (result->low_id > result->high_id) {
+		DEBUG(1, ("Error: invalid idmap range detected: "
+			  "%lu - %lu\n",
+			  (unsigned long)result->low_id,
+			  (unsigned long)result->high_id));
+		goto fail;
+	}
+
 	result->methods = get_methods(modulename);
 	if (result->methods == NULL) {
 		DEBUG(3, ("idmap backend %s not found\n", modulename));