Cross Reference: /sssd-io/src/providers/simple/simple_access

Lines Matching refs:group
29 #define NON_EXIST_GRP_ALLOW "The group %s does not exist. Possible typo in simple_allow_groups.\n"
30 #define NON_EXIST_GRP_DENY  "The group %s does not exist. Possible typo in simple_deny_groups.\n"
33 is_posix(const struct ldb_message *group)
37     val = ldb_msg_find_attr_as_string(group, SYSDB_POSIX, NULL);
135     /* Now process allow and deny group rules
143                   "Checking against allow list group name [%s].\n",
164             /* If any group has matched, we can skip out on the
177     /* Finally, process the deny group rules */
182                   "Checking against deny list group name [%s].\n",
203             /* If any group has matched, we can skip out on the
252     /* First check if the group was updated already. If it was (maybe its
261               "Cannot check if group was already updated [%d]: %s\n",
307     struct ldb_message *group;
313                                     group_attrs, &group);
315         /* The group is missing, we will try to update it. */
319                "Could not look up group by gid [%"SPRIgid"]: [%d][%s]\n",
324     state->name = ldb_msg_find_attr_as_string(group, SYSDB_NAME, NULL);
326         DEBUG(SSSDBG_OP_FAILURE, "No group name\n");
330     if (is_posix(group) == false) {
332               "The group is still non-POSIX\n");
336     DEBUG(SSSDBG_TRACE_LIBS, "Got POSIX group\n");
419                            struct ldb_message *group);
481     /* One extra space for terminator, one extra space for private group */
492          * without resolving the group names. In order for the simple access
562               "Could not resolve name of group with GID %"SPRIgid"\n",
588                            struct ldb_message *group)
596     posix = is_posix(group);
597     name = ldb_msg_find_attr_as_string(group, SYSDB_NAME, NULL);
598     gid = ldb_msg_find_attr_as_uint64(group, SYSDB_GIDNUM, 0);
600     /* With the current sysdb layout, every group has a name */
607             DEBUG(SSSDBG_CRIT_FAILURE, "POSIX group without GID\n");
611         /* Non-POSIX group with a name. Still can be used for access
619         DEBUG(SSSDBG_TRACE_INTERNAL, "Adding group %s\n", name);
624     /* Here are only groups with a name and gid. POSIX group can already
632         DEBUG(SSSDBG_TRACE_INTERNAL, "Adding group %s\n", name);
637     /* Try to get group SID and assign it a domain */
638     group_sid = ldb_msg_find_attr_as_string(group, SYSDB_SID_STR, NULL);
651     /* It is a non-POSIX group with a GID. Needs resolving */
672               "Could not look up primary group [%"SPRIgid"]: [%d][%s]\n",
675          * group may be local to the machine and not available in
681             DEBUG(SSSDBG_OP_FAILURE, "Cannot process primary group\n");
752         /* There are no group restrictions, so just return
755         DEBUG(SSSDBG_TRACE_LIBS, "No group restrictions, end request\n");
760     /* The group names might not be available. Fire a request to
822         DEBUG(SSSDBG_OP_FAILURE, "Could not check group access [%d]: %s\n",