Cross Reference: /sssd/src/providers/simple/simple_access

Lines Matching refs:group
29 #define NON_EXIST_GRP_ALLOW "The group %s does not exist. Possible typo in simple_allow_groups.\n"
30 #define NON_EXIST_GRP_DENY  "The group %s does not exist. Possible typo in simple_deny_groups.\n"
33 is_posix(const struct ldb_message *group)
37     val = ldb_msg_find_attr_as_string(group, SYSDB_POSIX, NULL);
129     /* Now process allow and deny group rules
155             /* If any group has matched, we can skip out on the
168     /* Finally, process the deny group rules */
191             /* If any group has matched, we can skip out on the
240     /* First check if the group was updated already. If it was (maybe its
249               "Cannot check if group was already updated [%d]: %s\n",
296     struct ldb_message *group;
302                                     group_attrs, &group);
304         /* The group is missing, we will try to update it. */
308                "Could not look up group by gid [%"SPRIgid"]: [%d][%s]\n",
313     state->name = ldb_msg_find_attr_as_string(group, SYSDB_NAME, NULL);
315         DEBUG(SSSDBG_OP_FAILURE, "No group name\n");
319     if (is_posix(group) == false) {
321               "The group is still non-POSIX\n");
325     DEBUG(SSSDBG_TRACE_LIBS, "Got POSIX group\n");
408                            struct ldb_message *group);
470     /* One extra space for terminator, one extra space for private group */
481          * without resolving the group names. In order for the simple access
551               "Could not resolve name of group with GID %"SPRIgid"\n",
577                            struct ldb_message *group)
585     posix = is_posix(group);
586     name = ldb_msg_find_attr_as_string(group, SYSDB_NAME, NULL);
587     gid = ldb_msg_find_attr_as_uint64(group, SYSDB_GIDNUM, 0);
589     /* With the current sysdb layout, every group has a name */
596             DEBUG(SSSDBG_CRIT_FAILURE, "POSIX group without GID\n");
600         /* Non-posix group with a name. Still can be used for access
608         DEBUG(SSSDBG_TRACE_INTERNAL, "Adding group %s\n", name);
613     /* Here are only groups with a name and gid. POSIX group can already
621         DEBUG(SSSDBG_TRACE_INTERNAL, "Adding group %s\n", name);
626     /* Try to get group SID and assign it a domain */
627     group_sid = ldb_msg_find_attr_as_string(group, SYSDB_SID_STR, NULL);
640     /* It is a non-posix group with a GID. Needs resolving */
661               "Could not look up primary group [%"SPRIgid"]: [%d][%s]\n",
664          * group may be local to the machine and not available in
670             DEBUG(SSSDBG_OP_FAILURE, "Cannot process primary group\n");
741         /* There are no group restrictions, so just return
744         DEBUG(SSSDBG_TRACE_LIBS, "No group restrictions, end request\n");
749     /* The group names might not be available. Fire a request to
811         DEBUG(SSSDBG_OP_FAILURE, "Could not check group access [%d]: %s\n",