summaryrefslogtreecommitdiff
path: root/source3/nsswitch/idmap_rid.c
diff options
context:
space:
mode:
Diffstat (limited to 'source3/nsswitch/idmap_rid.c')
-rw-r--r--source3/nsswitch/idmap_rid.c267
1 files changed, 0 insertions, 267 deletions
diff --git a/source3/nsswitch/idmap_rid.c b/source3/nsswitch/idmap_rid.c
deleted file mode 100644
index 8e5f1302f7..0000000000
--- a/source3/nsswitch/idmap_rid.c
+++ /dev/null
@@ -1,267 +0,0 @@
-/*
- * idmap_rid: static map between Active Directory/NT RIDs and RFC 2307 accounts
- * Copyright (C) Guenther Deschner, 2004
- * Copyright (C) Sumit Bose, 2004
- *
- * This program is free software; you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation; either version 3 of the License, or
- * (at your option) any later version.
- *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
- *
- * You should have received a copy of the GNU General Public License
- * along with this program; if not, see <http://www.gnu.org/licenses/>.
- *
- */
-
-#include "includes.h"
-#include "winbindd.h"
-
-#undef DBGC_CLASS
-#define DBGC_CLASS DBGC_IDMAP
-
-struct idmap_rid_context {
- const char *domain_name;
- uint32_t low_id;
- uint32_t high_id;
- uint32_t base_rid;
-};
-
-/******************************************************************************
- compat params can't be used because of the completely different way
- we support multiple domains in the new idmap
- *****************************************************************************/
-
-static NTSTATUS idmap_rid_initialize(struct idmap_domain *dom)
-{
- NTSTATUS ret;
- struct idmap_rid_context *ctx;
- char *config_option = NULL;
- const char *range;
- uid_t low_uid = 0;
- uid_t high_uid = 0;
- gid_t low_gid = 0;
- gid_t high_gid = 0;
-
- if ( (ctx = TALLOC_ZERO_P(dom, struct idmap_rid_context)) == NULL ) {
- DEBUG(0, ("Out of memory!\n"));
- return NT_STATUS_NO_MEMORY;
- }
-
- config_option = talloc_asprintf(ctx, "idmap config %s", dom->name);
- if ( ! config_option) {
- DEBUG(0, ("Out of memory!\n"));
- ret = NT_STATUS_NO_MEMORY;
- goto failed;
- }
-
- range = lp_parm_const_string(-1, config_option, "range", NULL);
- if ( !range ||
- (sscanf(range, "%u - %u", &ctx->low_id, &ctx->high_id) != 2) ||
- (ctx->low_id > ctx->high_id))
- {
- ctx->low_id = 0;
- ctx->high_id = 0;
- }
-
- /* lets see if the range is defined by the old idmap uid/idmap gid */
- if (!ctx->low_id && !ctx->high_id) {
- if (lp_idmap_uid(&low_uid, &high_uid)) {
- ctx->low_id = low_uid;
- ctx->high_id = high_uid;
- }
-
- if (lp_idmap_gid(&low_gid, &high_gid)) {
- if ((ctx->low_id != low_gid) ||
- (ctx->high_id != high_uid)) {
- DEBUG(1, ("ERROR: idmap uid range must match idmap gid range\n"));
- ret = NT_STATUS_UNSUCCESSFUL;
- goto failed;
- }
- }
- }
-
- if (!ctx->low_id || !ctx->high_id) {
- DEBUG(1, ("ERROR: Invalid configuration, ID range missing or invalid\n"));
- ret = NT_STATUS_UNSUCCESSFUL;
- goto failed;
- }
-
- ctx->base_rid = lp_parm_int(-1, config_option, "base_rid", 0);
- ctx->domain_name = talloc_strdup( ctx, dom->name );
-
- dom->private_data = ctx;
- dom->initialized = True;
-
- talloc_free(config_option);
- return NT_STATUS_OK;
-
-failed:
- talloc_free(ctx);
- return ret;
-}
-
-static NTSTATUS idmap_rid_id_to_sid(TALLOC_CTX *memctx, struct idmap_rid_context *ctx, struct id_map *map)
-{
- struct winbindd_domain *domain;
-
- /* apply filters before checking */
- if ((map->xid.id < ctx->low_id) || (map->xid.id > ctx->high_id)) {
- DEBUG(5, ("Requested id (%u) out of range (%u - %u). Filtered!\n",
- map->xid.id, ctx->low_id, ctx->high_id));
- return NT_STATUS_NONE_MAPPED;
- }
-
- if ( (domain = find_domain_from_name_noinit(ctx->domain_name)) == NULL ) {
- return NT_STATUS_NO_SUCH_DOMAIN;
- }
-
- sid_compose(map->sid, &domain->sid, map->xid.id - ctx->low_id + ctx->base_rid);
-
- /* We **really** should have some way of validating
- the SID exists and is the correct type here. But
- that is a deficiency in the idmap_rid design. */
-
- map->status = ID_MAPPED;
-
- return NT_STATUS_OK;
-}
-
-/**********************************
- Single sid to id lookup function.
-**********************************/
-
-static NTSTATUS idmap_rid_sid_to_id(TALLOC_CTX *memctx, struct idmap_rid_context *ctx, struct id_map *map)
-{
- uint32_t rid;
-
- sid_peek_rid(map->sid, &rid);
- map->xid.id = rid - ctx->base_rid + ctx->low_id;
-
- /* apply filters before returning result */
-
- if ((map->xid.id < ctx->low_id) || (map->xid.id > ctx->high_id)) {
- DEBUG(5, ("Requested id (%u) out of range (%u - %u). Filtered!\n",
- map->xid.id, ctx->low_id, ctx->high_id));
- map->status = ID_UNMAPPED;
- return NT_STATUS_NONE_MAPPED;
- }
-
- /* We **really** should have some way of validating
- the SID exists and is the correct type here. But
- that is a deficiency in the idmap_rid design. */
-
- map->status = ID_MAPPED;
-
- return NT_STATUS_OK;
-}
-
-/**********************************
- lookup a set of unix ids.
-**********************************/
-
-static NTSTATUS idmap_rid_unixids_to_sids(struct idmap_domain *dom, struct id_map **ids)
-{
- struct idmap_rid_context *ridctx;
- TALLOC_CTX *ctx;
- NTSTATUS ret;
- int i;
-
- /* Initilization my have been deferred because of an error, retry or fail */
- if ( ! dom->initialized) {
- ret = idmap_rid_initialize(dom);
- if ( ! NT_STATUS_IS_OK(ret)) {
- return ret;
- }
- }
-
- ridctx = talloc_get_type(dom->private_data, struct idmap_rid_context);
-
- ctx = talloc_new(dom);
- if ( ! ctx) {
- DEBUG(0, ("Out of memory!\n"));
- return NT_STATUS_NO_MEMORY;
- }
-
- for (i = 0; ids[i]; i++) {
-
- ret = idmap_rid_id_to_sid(ctx, ridctx, ids[i]);
-
- if (( ! NT_STATUS_IS_OK(ret)) &&
- ( ! NT_STATUS_EQUAL(ret, NT_STATUS_NONE_MAPPED))) {
- /* some fatal error occurred, log it */
- DEBUG(3, ("Unexpected error resolving an ID (%d)\n", ids[i]->xid.id));
- }
- }
-
- talloc_free(ctx);
- return NT_STATUS_OK;
-}
-
-/**********************************
- lookup a set of sids.
-**********************************/
-
-static NTSTATUS idmap_rid_sids_to_unixids(struct idmap_domain *dom, struct id_map **ids)
-{
- struct idmap_rid_context *ridctx;
- TALLOC_CTX *ctx;
- NTSTATUS ret;
- int i;
-
- /* Initilization my have been deferred because of an error, retry or fail */
- if ( ! dom->initialized) {
- ret = idmap_rid_initialize(dom);
- if ( ! NT_STATUS_IS_OK(ret)) {
- return ret;
- }
- }
-
- ridctx = talloc_get_type(dom->private_data, struct idmap_rid_context);
-
- ctx = talloc_new(dom);
- if ( ! ctx) {
- DEBUG(0, ("Out of memory!\n"));
- return NT_STATUS_NO_MEMORY;
- }
-
- for (i = 0; ids[i]; i++) {
-
- ret = idmap_rid_sid_to_id(ctx, ridctx, ids[i]);
-
- if (( ! NT_STATUS_IS_OK(ret)) &&
- ( ! NT_STATUS_EQUAL(ret, NT_STATUS_NONE_MAPPED))) {
- /* some fatal error occurred, log it */
- DEBUG(3, ("Unexpected error resolving a SID (%s)\n",
- sid_string_static(ids[i]->sid)));
- }
- }
-
- talloc_free(ctx);
- return NT_STATUS_OK;
-}
-
-static NTSTATUS idmap_rid_close(struct idmap_domain *dom)
-{
- if (dom->private_data) {
- TALLOC_FREE(dom->private_data);
- }
- return NT_STATUS_OK;
-}
-
-static struct idmap_methods rid_methods = {
- .init = idmap_rid_initialize,
- .unixids_to_sids = idmap_rid_unixids_to_sids,
- .sids_to_unixids = idmap_rid_sids_to_unixids,
- .close_fn = idmap_rid_close
-};
-
-NTSTATUS idmap_rid_init(void)
-{
- return smb_register_idmap(SMB_IDMAP_INTERFACE_VERSION, "rid", &rid_methods);
-}
-
generated by cgit (git 2.34.1) at 2024-08-22 05:22:00 +0000