summaryrefslogtreecommitdiff
path: root/src
diff options
context:
space:
mode:
Diffstat (limited to 'src')
-rw-r--r--src/responder/sudo/sudosrv.c19
-rw-r--r--src/responder/sudo/sudosrv_cache.c328
-rw-r--r--src/responder/sudo/sudosrv_private.h28
3 files changed, 0 insertions, 375 deletions
diff --git a/src/responder/sudo/sudosrv.c b/src/responder/sudo/sudosrv.c
index 6e609cda..b4f8f887 100644
--- a/src/responder/sudo/sudosrv.c
+++ b/src/responder/sudo/sudosrv.c
@@ -131,17 +131,6 @@ int sudo_process_init(TALLOC_CTX *mem_ctx,
/* Get responder options */
- /* Get cache_timeout option */
- ret = confdb_get_int(sudo_ctx->rctx->cdb,
- CONFDB_SUDO_CONF_ENTRY, CONFDB_SUDO_CACHE_TIMEOUT,
- CONFDB_DEFAULT_SUDO_CACHE_TIMEOUT,
- &sudo_ctx->cache_timeout);
- if (ret != EOK) {
- DEBUG(SSSDBG_FATAL_FAILURE, ("Error reading from confdb (%d) [%s]\n",
- ret, strerror(ret)));
- return ret;
- }
-
/* Get sudo_timed option */
ret = confdb_get_bool(sudo_ctx->rctx->cdb,
CONFDB_SUDO_CONF_ENTRY, CONFDB_SUDO_TIMED,
@@ -153,14 +142,6 @@ int sudo_process_init(TALLOC_CTX *mem_ctx,
return ret;
}
- /* Initialize in-memory cache */
- ret = sudosrv_cache_init(sudo_ctx, 10, &sudo_ctx->cache);
- if (ret != EOK) {
- DEBUG(SSSDBG_FATAL_FAILURE,
- ("Could not create hash table: [%s]", strerror(ret)));
- return ret;
- }
-
DEBUG(SSSDBG_TRACE_FUNC, ("SUDO Initialization complete\n"));
return EOK;
diff --git a/src/responder/sudo/sudosrv_cache.c b/src/responder/sudo/sudosrv_cache.c
deleted file mode 100644
index 00dcb88c..00000000
--- a/src/responder/sudo/sudosrv_cache.c
+++ /dev/null
@@ -1,328 +0,0 @@
-/*
- Authors:
- Pavel Březina <pbrezina@redhat.com>
-
- Copyright (C) 2011 Red Hat
-
- This program is free software; you can redistribute it and/or modify
- it under the terms of the GNU General Public License as published by
- the Free Software Foundation; either version 3 of the License, or
- (at your option) any later version.
-
- This program is distributed in the hope that it will be useful,
- but WITHOUT ANY WARRANTY; without even the implied warranty of
- MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- GNU General Public License for more details.
-
- You should have received a copy of the GNU General Public License
- along with this program. If not, see <http://www.gnu.org/licenses/>.
-*/
-
-#include <talloc.h>
-#include <dhash.h>
-#include <time.h>
-
-#include "util/util.h"
-#include "confdb/confdb.h"
-#include "db/sysdb.h"
-#include "responder/sudo/sudosrv_private.h"
-
-static void sudosrv_cache_remove(struct tevent_context *ev,
- struct tevent_timer *te,
- struct timeval tv,
- void *pvt);
-
-struct sudo_cache_entry {
- hash_table_t *table;
- hash_key_t *key;
- size_t num_rules;
- struct sysdb_attrs **rules;
-
- struct sudo_ctx *sudo_ctx;
-};
-
-errno_t sudosrv_cache_init(TALLOC_CTX *mem_ctx,
- unsigned long count,
- hash_table_t **table)
-{
- return sss_hash_create(mem_ctx, count, table);
-}
-
-static errno_t
-sudosrv_cache_reinit(struct sudo_ctx *sudo_ctx)
-{
- errno_t ret;
-
- talloc_free(sudo_ctx->cache);
-
- ret = sudosrv_cache_init(sudo_ctx, 10, &sudo_ctx->cache);
- if (ret != EOK) {
- DEBUG(SSSDBG_FATAL_FAILURE,
- ("Could not re-initialize hash table: [%s]", strerror(ret)));
- }
- return ret;
-}
-
-static hash_key_t *sudosrv_cache_create_key(TALLOC_CTX *mem_ctx,
- struct sss_domain_info *domain,
- const char *username)
-{
- hash_key_t *key = talloc_zero(NULL, hash_key_t);
- if (key == NULL) {
- return NULL;
- }
-
- key->type = HASH_KEY_STRING;
- if (username == NULL) {
- key->str = talloc_strdup(key, domain->name);
- } else {
- key->str = talloc_asprintf(key, "%s:%s", domain->name, username);
- }
-
- if (key->str == NULL) {
- talloc_free(key);
- return NULL;
- }
-
- return talloc_steal(mem_ctx, key);
-}
-
-errno_t sudosrv_cache_set_entry(struct tevent_context *ev,
- struct sudo_ctx *sudo_ctx,
- hash_table_t *table,
- struct sss_domain_info *domain,
- const char *username,
- size_t num_rules,
- struct sysdb_attrs **rules,
- time_t timeout)
-{
- struct sudo_cache_entry *cache_entry = NULL;
- hash_key_t *key = NULL;
- hash_value_t value;
- TALLOC_CTX *tmp_ctx = NULL;
- struct tevent_timer *timer = NULL;
- struct timeval tv;
- errno_t ret;
- int hret;
-
- tmp_ctx = talloc_new(NULL);
- if (tmp_ctx == NULL) {
- ret = ENOMEM;
- goto done;
- }
-
- /* create key */
- key = sudosrv_cache_create_key(tmp_ctx, domain, username);
- if (key == NULL) {
- DEBUG(SSSDBG_CRIT_FAILURE, ("Unable to create hash key.\n"));
- ret = ENOMEM;
- goto done;
- }
-
- /* create value */
- cache_entry = talloc_zero(tmp_ctx, struct sudo_cache_entry);
- if (cache_entry == NULL) {
- DEBUG(SSSDBG_CRIT_FAILURE, ("Unable to create hash value.\n"));
- ret = ENOMEM;
- goto done;
- }
- cache_entry->table = table;
- cache_entry->key = key;
- cache_entry->num_rules = num_rules;
- cache_entry->rules = rules;
- cache_entry->sudo_ctx = sudo_ctx;
-
- value.type = HASH_VALUE_PTR;
- value.ptr = cache_entry;
-
- /* insert value */
- hret = hash_enter(table, key, &value);
- if (hret != EOK) {
- DEBUG(SSSDBG_CRIT_FAILURE,
- ("Unable to add [%s] to SUDO cache", key->str));
- DEBUG(SSSDBG_TRACE_LIBS,
- ("Hash error [%d][%s]", hret, hash_error_string(hret)));
- ret = EIO;
- goto done;
- }
-
- /* Create a timer event to remove the entry from the cache */
- tv = tevent_timeval_current_ofs(timeout, 0);
- timer = tevent_add_timer(ev, cache_entry, tv,
- sudosrv_cache_remove,
- cache_entry);
- if (timer == NULL) {
- ret = ENOMEM;
- goto done;
- }
-
- /* everythig is ok, steal the pointers */
- talloc_steal(cache_entry, key);
- talloc_steal(cache_entry, rules);
- talloc_steal(table, cache_entry);
-
- ret = EOK;
-
-done:
- talloc_free(tmp_ctx);
- return ret;
-}
-
-static void free_cache_entry_cb(struct tevent_context *ev,
- struct tevent_immediate *imm,
- void *pvt)
-{
- struct sudo_cache_entry *cache_entry =
- talloc_get_type(pvt, struct sudo_cache_entry);
- talloc_free(cache_entry);
-}
-
-static void sudosrv_cache_remove(struct tevent_context *ev,
- struct tevent_timer *te,
- struct timeval tv,
- void *pvt)
-{
- int hret;
- hash_key_t *key;
- struct sudo_cache_entry *cache_entry;
- struct tevent_immediate *imm;
-
- cache_entry = talloc_get_type(pvt, struct sudo_cache_entry);
- key = cache_entry->key;
-
- hret = hash_delete(cache_entry->table, key);
- if (hret != HASH_SUCCESS && hret != HASH_ERROR_KEY_NOT_FOUND
- && hret != HASH_ERROR_BAD_KEY_TYPE) {
- DEBUG(SSSDBG_MINOR_FAILURE,
- ("Could not clear [%s] from SUDO cache.\n", key->str));
- DEBUG(SSSDBG_TRACE_LIBS,
- ("Hash error [%d][%s]", hret, hash_error_string(hret)));
-
- /* corrupted memory, re-initialize table */
- sudosrv_cache_reinit(cache_entry->sudo_ctx);
- } else {
- DEBUG(SSSDBG_TRACE_INTERNAL,
- ("[%s] removed from SUDO cache\n", key->str));
-
- imm = tevent_create_immediate(ev);
- if (imm == NULL) {
- DEBUG(SSSDBG_CRIT_FAILURE, ("Out of memory\n"));
- return;
- }
- tevent_schedule_immediate(imm, ev, free_cache_entry_cb, cache_entry);
- }
-}
-
-static errno_t sudosrv_cache_lookup_internal(hash_table_t *table,
- struct sss_domain_info *domain,
- const char *username,
- size_t *num_rules,
- struct sysdb_attrs ***rules)
-{
- struct sudo_cache_entry *cache_entry = NULL;
- hash_key_t *key = NULL;
- hash_value_t value;
- TALLOC_CTX *tmp_ctx = NULL;
- errno_t ret;
- int hret;
-
- tmp_ctx = talloc_new(NULL);
- if (tmp_ctx == NULL) {
- ret = ENOMEM;
- goto done;
- }
-
- /* create key */
- key = sudosrv_cache_create_key(tmp_ctx, domain, username);
- if (key == NULL) {
- DEBUG(SSSDBG_CRIT_FAILURE, ("Unable to create hash key.\n"));
- ret = ENOMEM;
- goto done;
- }
-
- hret = hash_lookup(table, key, &value);
- if (hret == HASH_SUCCESS) {
- /* cache hit */
- cache_entry = value.ptr;
- *num_rules = cache_entry->num_rules;
- *rules = cache_entry->rules;
- ret = EOK;
- } else if (hret == HASH_ERROR_KEY_NOT_FOUND) {
- /* cache miss */
- ret = ENOENT;
- } else {
- /* error */
- ret = EIO;
- }
-
-done:
- talloc_free(tmp_ctx);
- return ret;
-}
-
-errno_t sudosrv_cache_lookup(hash_table_t *table,
- struct sudo_dom_ctx *dctx,
- bool check_next,
- const char *username,
- size_t *num_rules,
- struct sysdb_attrs ***rules)
-{
- struct sss_domain_info *domain = dctx->domain;
- char *name = NULL;
- errno_t ret;
-
- if (!check_next) {
- if (username != NULL) {
- name = sss_get_cased_name(NULL, username,
- dctx->domain->case_sensitive);
- if (name == NULL) {
- DEBUG(SSSDBG_CRIT_FAILURE, ("Out of memory\n"));
- ret = ENOMEM;
- goto done;
- }
- }
-
- ret = sudosrv_cache_lookup_internal(table, dctx->domain, name,
- num_rules, rules);
- goto done;
- }
-
- while (domain != NULL) {
- if (domain->fqnames) {
- domain = domain->next;
- continue;
- }
-
- if (username != NULL) {
- talloc_free(name);
- name = sss_get_cased_name(NULL, username,
- dctx->domain->case_sensitive);
- if (name == NULL) {
- DEBUG(SSSDBG_CRIT_FAILURE, ("Out of memory\n"));
- ret = ENOMEM;
- goto done;
- }
- }
-
- ret = sudosrv_cache_lookup_internal(table, domain, name,
- num_rules, rules);
- if (ret == EOK) {
- /* user is in this domain */
- dctx->domain = domain;
- goto done;
- } else if (ret != ENOENT) {
- /* error */
- goto done;
- }
-
- /* user is not in this domain cache, check next */
- domain = domain->next;
- }
-
- /* user is not in cache */
- ret = ENOENT;
-
-done:
- talloc_free(name);
- return ret;
-}
diff --git a/src/responder/sudo/sudosrv_private.h b/src/responder/sudo/sudosrv_private.h
index b806c96e..47850ad6 100644
--- a/src/responder/sudo/sudosrv_private.h
+++ b/src/responder/sudo/sudosrv_private.h
@@ -43,15 +43,7 @@ struct sudo_ctx {
/*
* options
*/
- int cache_timeout;
bool timed;
-
- /*
- * Key: domain for SSS_DP_SUDO_DEFAULTS
- * domain:username for SSS_DP_SUDO_USER
- * Val: struct sudo_cache_entry *
- */
- hash_table_t *cache;
};
struct sudo_cmd_ctx {
@@ -122,24 +114,4 @@ sss_dp_get_sudoers_recv(TALLOC_CTX *mem_ctx,
dbus_uint32_t *err_min,
char **err_msg);
-errno_t sudosrv_cache_init(TALLOC_CTX *mem_ctx,
- unsigned long count,
- hash_table_t **table);
-
-errno_t sudosrv_cache_lookup(hash_table_t *table,
- struct sudo_dom_ctx *dctx,
- bool check_next,
- const char *username,
- size_t *res_count,
- struct sysdb_attrs ***res);
-
-errno_t sudosrv_cache_set_entry(struct tevent_context *ev,
- struct sudo_ctx *sudo_ctx,
- hash_table_t *table,
- struct sss_domain_info *domain,
- const char *username,
- size_t res_count,
- struct sysdb_attrs **res,
- time_t timeout);
-
#endif /* _SUDOSRV_PRIVATE_H_ */
generated by cgit (git 2.34.1) at 2024-11-30 06:02:00 +0000