/*
* CDDL HEADER START
*
* The contents of this file are subject to the terms of the
* Common Development and Distribution License (the "License").
* You may not use this file except in compliance with the License.
*
* You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
* or http://www.opensolaris.org/os/licensing.
* See the License for the specific language governing permissions
* and limitations under the License.
*
* When distributing Covered Code, include this CDDL HEADER in each
* file and include the License file at usr/src/OPENSOLARIS.LICENSE.
* If applicable, add the following below this CDDL HEADER, with the
* fields enclosed by brackets "[]" replaced with your own identifying
* information: Portions Copyright [yyyy] [name of copyright owner]
*
* CDDL HEADER END
*/
/*
* Copyright (c) 1991, 2012, Oracle and/or its affiliates. All rights reserved.
*
* nis/getspent.c -- "nis" backend for nsswitch "shadow" database
*/
#include <shadow.h>
#include <string.h>
#include "nis_common.h"
/*
* Most of the information in a struct spwd simply isn't available from the
* YP maps, we dummy out all the numeric fields and just get sp_namp and
* sp_pwdp (name and password) from the YP passwd map. Thus we don't
* use the str2ent() routine that's passed to us, but instead have our
* own dummy routine:
*
* Return values: 0 = success, 1 = parse error, 2 = erange ...
* The structure pointer passed in is a structure in the caller's space
* wherein the field pointers would be set to areas in the buffer if
* need be. instring and buffer should be separate areas. Let's not
* fight over crumbs.
*/
static int
nis_str2spent(const char *instr, int lenstr, void *ent, char *buffer,
int buflen)
{
struct spwd *spwd = (struct spwd *)ent;
char *p, *q, *r;
/*
* We know that instr != 0 because we're in 'nis', not 'files'
*/
if ((p = memchr(instr, ':', lenstr)) == 0) {
return (NSS_STR_PARSE_PARSE);
}
if ((q = memchr(p + 1, ':', lenstr - (p + 1 - instr))) == 0) {
return (NSS_STR_PARSE_PARSE);
}
/* Don't bother checking the rest of the YP passwd entry... */
if (q + 1 - instr > buflen) {
return (NSS_STR_PARSE_ERANGE);
}
/*
* "name:password" is copied
*/
(void) memcpy(buffer, instr, q - instr);
if (spwd) {
buffer[p - instr] = '\0';
buffer[q - instr] = '\0';
spwd->sp_namp = buffer;
spwd->sp_pwdp = buffer + (p + 1 - instr);
spwd->sp_lstchg = -1;
spwd->sp_min = -1;
spwd->sp_max = -1;
spwd->sp_warn = -1;
spwd->sp_inact = -1;
spwd->sp_expire = -1;
spwd->sp_flag = 0;
} else {
/*
* NSS2: nscd is running. Return files format.
*
* name:password:::::::
*/
r = buffer + (q - instr);
*r = '\0';
if (strlcat(buffer, ":::::::", buflen) >= buflen)
return (NSS_STR_PARSE_ERANGE);
}
return (NSS_STR_PARSE_SUCCESS);
}
typedef int (*cstr2ent_t)(const char *, int, void *, char *, int);
static nss_status_t
getbyname(nis_backend_ptr_t be, void *a)
{
nss_XbyY_args_t *argp = (nss_XbyY_args_t *)a;
cstr2ent_t save_c2e;
nss_status_t res;
struct spwd *spwd;
char *p;
save_c2e = argp->str2ent;
argp->str2ent = nis_str2spent;
res = _nss_nis_lookup(be, argp, 0, "passwd.byname", argp->key.name, 0);
spwd = (struct spwd *)argp->buf.result;
/*
* check for the C2 security flag "##" in the passwd field.
* If the first 2 chars in the passwd field is "##", get
* the user's passwd from passwd.adjunct.byname map.
* The lookup to this passwd.adjunct.byname map will only
* succeed if the caller's uid is 0 because only root user
* can use privilege port.
*/
if (res == NSS_SUCCESS) {
if (spwd) {
if ((spwd->sp_pwdp) && (*(spwd->sp_pwdp) == '#') &&
(*(spwd->sp_pwdp + 1) == '#')) {
/*
* Clear "##" entry from return result
* before query. In the event nothing is
* found, NULL value will be passed to
* getspnam_r().
*/
if (argp->returnval != NULL) {
argp->returnval = NULL;
argp->returnlen = 0;
}
/* get password from passwd.adjunct.byname */
res = _nss_nis_lookup_rsvdport(be, argp, 0,
"passwd.adjunct.byname",
argp->key.name, 0);
}
} else {
/*
* getent request from nscd
*/
if ((p = memchr(argp->buf.buffer, ':',
argp->buf.buflen)) == NULL)
return (NSS_STR_PARSE_PARSE);
if (strncmp(p + 1, "##", 2) == 0)
/* get password from passwd.adjunct.byname */
res = _nss_nis_lookup_rsvdport(be, argp, 0,
"passwd.adjunct.byname",
argp->key.name, 0);
if (res == NSS_SUCCESS) {
argp->returnval = argp->buf.buffer;
argp->returnlen = strlen(argp->buf.buffer);
}
}
}
argp->str2ent = save_c2e;
return (res);
}
#define NIS_SP_GETENT
#ifdef NIS_SP_GETENT
static nss_status_t
getent(nis_backend_ptr_t be, void *a)
{
nss_XbyY_args_t *argp = (nss_XbyY_args_t *)a;
cstr2ent_t save_c2e;
nss_status_t res;
struct spwd *spwd;
char *p;
save_c2e = argp->str2ent;
argp->str2ent = nis_str2spent;
res = _nss_nis_getent_rigid(be, argp);
spwd = (struct spwd *)argp->buf.result;
/*
* check for the C2 security flag "##" in the passwd field.
* If the first 2 chars in the passwd field is "##", get
* the user's passwd from passwd.adjunct.byname map.
* The lookup to this passwd.adjunct.byname map will only
* succeed if the caller's uid is 0 because only root user
* can use privilege port.
*/
if (res == NSS_SUCCESS) {
if (spwd) {
if ((spwd->sp_pwdp) && (*(spwd->sp_pwdp) == '#') &&
(*(spwd->sp_pwdp + 1) == '#')) {
/*
* Clear "##" entry from return result
* before query. In the event nothing is
* found, NULL value will be passed to
* getspent_r().
*/
if (argp->returnval != NULL) {
argp->returnval = NULL;
argp->returnlen = 0;
}
/* get password from passwd.adjunct.byname */
res = _nss_nis_lookup_rsvdport(be, argp, 0,
"passwd.adjunct.byname",
spwd->sp_namp, 0);
}
} else {
/*
* getent request from nscd
*/
if ((p = memchr(argp->buf.buffer, ':',
argp->buf.buflen)) == NULL)
return (NSS_STR_PARSE_PARSE);
if (strncmp(p + 1, "##", 2) == 0) {
/* need the name for the next search */
*p = '\0';
/* get password from passwd.adjunct.byname */
res = _nss_nis_lookup_rsvdport(be, argp, 0,
"passwd.adjunct.byname", p, 0);
}
if (res == NSS_SUCCESS) {
argp->returnval = argp->buf.buffer;
argp->returnlen = strlen(argp->buf.buffer);
}
}
}
argp->str2ent = save_c2e;
return (res);
}
#endif /* NIS_SP_GETENT */
static nis_backend_op_t shadow_ops[] = {
_nss_nis_destr,
_nss_nis_endent,
_nss_nis_setent,
#ifdef NIS_SP_GETENT
getent,
#else
0,
#endif /* NIS_SP_GETENT */
getbyname
};
/*ARGSUSED*/
nss_backend_t *
_nss_nis_shadow_constr(const char *dummy1, const char *dummy2,
const char *dummy3)
{
return (_nss_nis_constr(shadow_ops,
sizeof (shadow_ops) / sizeof (shadow_ops[0]), "passwd.byname"));
}