f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny#include "util/util.h"

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny#include "db/sysdb.h"

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny#include "providers/ldap/sdap_async_private.h"

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny#include "providers/ldap/ldap_common.h"

58d02e0d3d6d48c97fccdb2ad7212e065671ad6dStephen Gallagher#include "providers/ldap/sdap_idmap.h"

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

f26c954658dfd7461f290f0b5d924951a6db219aJan Zelenystatic errno_t sdap_add_incomplete_groups(struct sysdb_ctx *sysdb,

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny struct sdap_options *opts,

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny char **groupnames,

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny struct sysdb_attrs **ldap_groups,

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny int ldap_groups_count)

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny{

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny TALLOC_CTX *tmp_ctx;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny struct ldb_message *msg;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny int i, mi, ai;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny const char *name;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny const char *original_dn;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny char **missing;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny gid_t gid;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny int ret;

21d485184df986e1a123f70c689517386e51a5ceMichal Zidek errno_t sret;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny bool in_transaction = false;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny bool posix;

684d1b48b5582a1bf7812b8c3c663592dc6dfed9Pavel Březina time_t now;

58d02e0d3d6d48c97fccdb2ad7212e065671ad6dStephen Gallagher char *sid_str;

58d02e0d3d6d48c97fccdb2ad7212e065671ad6dStephen Gallagher bool use_id_mapping = dp_opt_get_bool(opts->basic, SDAP_ID_MAPPING);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny /* There are no groups in LDAP but we should add user to groups ?? */

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny if (ldap_groups_count == 0) return EOK;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny tmp_ctx = talloc_new(NULL);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny if (!tmp_ctx) return ENOMEM;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny missing = talloc_array(tmp_ctx, char *, ldap_groups_count+1);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny if (!missing) {

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny ret = ENOMEM;

21d485184df986e1a123f70c689517386e51a5ceMichal Zidek goto done;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny }

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny mi = 0;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny for (i=0; groupnames[i]; i++) {

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny ret = sysdb_search_group_by_name(tmp_ctx, sysdb, groupnames[i], NULL, &msg);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny if (ret == EOK) {

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny continue;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny } else if (ret == ENOENT) {

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny DEBUG(7, ("Group #%d [%s] is not cached, need to add a fake entry\n",

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny i, groupnames[i]));

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny missing[mi] = groupnames[i];

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny mi++;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny continue;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny } else if (ret != ENOENT) {

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny DEBUG(1, ("search for group failed [%d]: %s\n",

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny ret, strerror(ret)));

21d485184df986e1a123f70c689517386e51a5ceMichal Zidek goto done;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny }

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny }

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny missing[mi] = NULL;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny /* All groups are cached, nothing to do */

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny if (mi == 0) {

326f4fc3125e155ee2d484fe921aafddd6b5a49dPavel Březina ret = EOK;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny goto done;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny }

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

21d485184df986e1a123f70c689517386e51a5ceMichal Zidek ret = sysdb_transaction_start(sysdb);

21d485184df986e1a123f70c689517386e51a5ceMichal Zidek if (ret != EOK) {

21d485184df986e1a123f70c689517386e51a5ceMichal Zidek DEBUG(SSSDBG_CRIT_FAILURE,

21d485184df986e1a123f70c689517386e51a5ceMichal Zidek ("Cannot start sysdb transaction [%d]: %s\n",

21d485184df986e1a123f70c689517386e51a5ceMichal Zidek ret, strerror(ret)));

21d485184df986e1a123f70c689517386e51a5ceMichal Zidek goto done;

21d485184df986e1a123f70c689517386e51a5ceMichal Zidek }

21d485184df986e1a123f70c689517386e51a5ceMichal Zidek in_transaction = true;

21d485184df986e1a123f70c689517386e51a5ceMichal Zidek

21d485184df986e1a123f70c689517386e51a5ceMichal Zidek

684d1b48b5582a1bf7812b8c3c663592dc6dfed9Pavel Březina now = time(NULL);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny for (i=0; missing[i]; i++) {

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny /* The group is not in sysdb, need to add a fake entry */

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny for (ai=0; ai < ldap_groups_count; ai++) {

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny ret = sysdb_attrs_primary_name(sysdb, ldap_groups[ai],

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny opts->group_map[SDAP_AT_GROUP_NAME].name,

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny &name);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny if (ret != EOK) {

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny DEBUG(1, ("The group has no name attribute\n"));

21d485184df986e1a123f70c689517386e51a5ceMichal Zidek goto done;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny }

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny if (strcmp(name, missing[i]) == 0) {

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny posix = true;

58d02e0d3d6d48c97fccdb2ad7212e065671ad6dStephen Gallagher

58d02e0d3d6d48c97fccdb2ad7212e065671ad6dStephen Gallagher if (use_id_mapping) {

58d02e0d3d6d48c97fccdb2ad7212e065671ad6dStephen Gallagher DEBUG(SSSDBG_TRACE_LIBS,

58d02e0d3d6d48c97fccdb2ad7212e065671ad6dStephen Gallagher ("Mapping group [%s] objectSID to unix ID\n", name));

58d02e0d3d6d48c97fccdb2ad7212e065671ad6dStephen Gallagher

58d02e0d3d6d48c97fccdb2ad7212e065671ad6dStephen Gallagher ret = sdap_attrs_get_sid_str(

58d02e0d3d6d48c97fccdb2ad7212e065671ad6dStephen Gallagher tmp_ctx, opts->idmap_ctx, ldap_groups[ai],

58d02e0d3d6d48c97fccdb2ad7212e065671ad6dStephen Gallagher opts->group_map[SDAP_AT_GROUP_OBJECTSID].sys_name,

58d02e0d3d6d48c97fccdb2ad7212e065671ad6dStephen Gallagher &sid_str);

21d485184df986e1a123f70c689517386e51a5ceMichal Zidek if (ret != EOK) goto done;

58d02e0d3d6d48c97fccdb2ad7212e065671ad6dStephen Gallagher

58d02e0d3d6d48c97fccdb2ad7212e065671ad6dStephen Gallagher DEBUG(SSSDBG_TRACE_INTERNAL,

58d02e0d3d6d48c97fccdb2ad7212e065671ad6dStephen Gallagher ("Group [%s] has objectSID [%s]\n",

58d02e0d3d6d48c97fccdb2ad7212e065671ad6dStephen Gallagher name, sid_str));

58d02e0d3d6d48c97fccdb2ad7212e065671ad6dStephen Gallagher

58d02e0d3d6d48c97fccdb2ad7212e065671ad6dStephen Gallagher /* Convert the SID into a UNIX group ID */

8be5e4497e5008f7807178acdfcbf97365ec4e73Stephen Gallagher ret = sdap_idmap_sid_to_unix(opts->idmap_ctx, sid_str,

8be5e4497e5008f7807178acdfcbf97365ec4e73Stephen Gallagher &gid);

c20a339d54b39120b4051f690ca759e6d079f177Stephen Gallagher if (ret == EOK) {

c20a339d54b39120b4051f690ca759e6d079f177Stephen Gallagher DEBUG(SSSDBG_TRACE_INTERNAL,

c20a339d54b39120b4051f690ca759e6d079f177Stephen Gallagher ("Group [%s] has mapped gid [%lu]\n",

c20a339d54b39120b4051f690ca759e6d079f177Stephen Gallagher name, (unsigned long)gid));

c20a339d54b39120b4051f690ca759e6d079f177Stephen Gallagher } else {

c20a339d54b39120b4051f690ca759e6d079f177Stephen Gallagher posix = false;

c20a339d54b39120b4051f690ca759e6d079f177Stephen Gallagher gid = 0;

c20a339d54b39120b4051f690ca759e6d079f177Stephen Gallagher

c20a339d54b39120b4051f690ca759e6d079f177Stephen Gallagher DEBUG(SSSDBG_TRACE_INTERNAL,

c20a339d54b39120b4051f690ca759e6d079f177Stephen Gallagher ("Group [%s] cannot be mapped. "

c20a339d54b39120b4051f690ca759e6d079f177Stephen Gallagher "Treating as a non-POSIX group\n",

c20a339d54b39120b4051f690ca759e6d079f177Stephen Gallagher name));

58d02e0d3d6d48c97fccdb2ad7212e065671ad6dStephen Gallagher }

58d02e0d3d6d48c97fccdb2ad7212e065671ad6dStephen Gallagher

58d02e0d3d6d48c97fccdb2ad7212e065671ad6dStephen Gallagher } else {

58d02e0d3d6d48c97fccdb2ad7212e065671ad6dStephen Gallagher ret = sysdb_attrs_get_uint32_t(ldap_groups[ai],

58d02e0d3d6d48c97fccdb2ad7212e065671ad6dStephen Gallagher SYSDB_GIDNUM,

58d02e0d3d6d48c97fccdb2ad7212e065671ad6dStephen Gallagher &gid);

58d02e0d3d6d48c97fccdb2ad7212e065671ad6dStephen Gallagher if (ret == ENOENT || (ret == EOK && gid == 0)) {

58d02e0d3d6d48c97fccdb2ad7212e065671ad6dStephen Gallagher DEBUG(9, ("The group %s gid was %s\n",

58d02e0d3d6d48c97fccdb2ad7212e065671ad6dStephen Gallagher name, ret == ENOENT ? "missing" : "zero"));

58d02e0d3d6d48c97fccdb2ad7212e065671ad6dStephen Gallagher DEBUG(8, ("Marking group %s as non-posix and setting GID=0!\n", name));

58d02e0d3d6d48c97fccdb2ad7212e065671ad6dStephen Gallagher gid = 0;

58d02e0d3d6d48c97fccdb2ad7212e065671ad6dStephen Gallagher posix = false;

58d02e0d3d6d48c97fccdb2ad7212e065671ad6dStephen Gallagher } else if (ret) {

58d02e0d3d6d48c97fccdb2ad7212e065671ad6dStephen Gallagher DEBUG(1, ("The GID attribute is malformed\n"));

21d485184df986e1a123f70c689517386e51a5ceMichal Zidek goto done;

58d02e0d3d6d48c97fccdb2ad7212e065671ad6dStephen Gallagher }

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny }

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny ret = sysdb_attrs_get_string(ldap_groups[ai],

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny SYSDB_ORIG_DN,

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny &original_dn);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny if (ret) {

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny DEBUG(5, ("The group has no name original DN\n"));

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny original_dn = NULL;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny }

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny DEBUG(8, ("Adding fake group %s to sysdb\n", name));

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny ret = sysdb_add_incomplete_group(sysdb, name, gid, original_dn,

684d1b48b5582a1bf7812b8c3c663592dc6dfed9Pavel Březina posix, now);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny if (ret != EOK) {

21d485184df986e1a123f70c689517386e51a5ceMichal Zidek goto done;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny }

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny break;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny }

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny }

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny if (ai == ldap_groups_count) {

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny DEBUG(2, ("Group %s not present in LDAP\n", missing[i]));

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny ret = EINVAL;

21d485184df986e1a123f70c689517386e51a5ceMichal Zidek goto done;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny }

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny }

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny ret = sysdb_transaction_commit(sysdb);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny if (ret != EOK) {

21d485184df986e1a123f70c689517386e51a5ceMichal Zidek DEBUG(SSSDBG_CRIT_FAILURE, ("sysdb_transaction_commit failed.\n"));

21d485184df986e1a123f70c689517386e51a5ceMichal Zidek goto done;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny }

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny in_transaction = false;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny ret = EOK;

21d485184df986e1a123f70c689517386e51a5ceMichal Zidek

21d485184df986e1a123f70c689517386e51a5ceMichal Zidekdone:

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny if (in_transaction) {

21d485184df986e1a123f70c689517386e51a5ceMichal Zidek sret = sysdb_transaction_cancel(sysdb);

21d485184df986e1a123f70c689517386e51a5ceMichal Zidek if (sret != EOK) {

21d485184df986e1a123f70c689517386e51a5ceMichal Zidek DEBUG(SSSDBG_CRIT_FAILURE, ("Failed to cancel transaction\n"));

21d485184df986e1a123f70c689517386e51a5ceMichal Zidek }

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny }

e30d02c04efad31f97c35165a92105852c805d34Jakub Hrozek talloc_free(tmp_ctx);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny return ret;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny}

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

6199bd6b41e8b280e65db4b4bb17a1c5c0444aa9Stephen Gallagherint sdap_initgr_common_store(struct sysdb_ctx *sysdb,

6199bd6b41e8b280e65db4b4bb17a1c5c0444aa9Stephen Gallagher struct sdap_options *opts,

6199bd6b41e8b280e65db4b4bb17a1c5c0444aa9Stephen Gallagher const char *name,

6199bd6b41e8b280e65db4b4bb17a1c5c0444aa9Stephen Gallagher enum sysdb_member_type type,

6199bd6b41e8b280e65db4b4bb17a1c5c0444aa9Stephen Gallagher char **sysdb_grouplist,

6199bd6b41e8b280e65db4b4bb17a1c5c0444aa9Stephen Gallagher struct sysdb_attrs **ldap_groups,

6199bd6b41e8b280e65db4b4bb17a1c5c0444aa9Stephen Gallagher int ldap_groups_count)

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny{

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny TALLOC_CTX *tmp_ctx;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny char **ldap_grouplist = NULL;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny char **add_groups;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny char **del_groups;

88ab259f993956b6cd0b1a07d3d88d105e368a8cJakub Hrozek int ret, tret;

88ab259f993956b6cd0b1a07d3d88d105e368a8cJakub Hrozek bool in_transaction = false;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny tmp_ctx = talloc_new(NULL);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny if (!tmp_ctx) return ENOMEM;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny if (ldap_groups_count == 0) {

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny /* No groups for this user in LDAP.

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny ldap_grouplist = NULL;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny } else {

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny ret = sysdb_attrs_primary_name_list(

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny sysdb, tmp_ctx,

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny ldap_groups, ldap_groups_count,

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny opts->group_map[SDAP_AT_GROUP_NAME].name,

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny &ldap_grouplist);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny if (ret != EOK) {

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny DEBUG(1, ("sysdb_attrs_primary_name_list failed [%d]: %s\n",

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny ret, strerror(ret)));

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny goto done;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny }

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny }

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny /* Find the differences between the sysdb and LDAP lists

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny ret = diff_string_lists(tmp_ctx, ldap_grouplist, sysdb_grouplist,

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny &add_groups, &del_groups, NULL);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny if (ret != EOK) goto done;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

88ab259f993956b6cd0b1a07d3d88d105e368a8cJakub Hrozek ret = sysdb_transaction_start(sysdb);

88ab259f993956b6cd0b1a07d3d88d105e368a8cJakub Hrozek if (ret != EOK) {

88ab259f993956b6cd0b1a07d3d88d105e368a8cJakub Hrozek DEBUG(1, ("Failed to start transaction\n"));

88ab259f993956b6cd0b1a07d3d88d105e368a8cJakub Hrozek goto done;

88ab259f993956b6cd0b1a07d3d88d105e368a8cJakub Hrozek }

88ab259f993956b6cd0b1a07d3d88d105e368a8cJakub Hrozek in_transaction = true;

88ab259f993956b6cd0b1a07d3d88d105e368a8cJakub Hrozek

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny /* Add fake entries for any groups the user should be added as

88ab259f993956b6cd0b1a07d3d88d105e368a8cJakub Hrozek if (add_groups && add_groups[0]) {

ac3a1f3da772cf101101c31675c63dc3549b21b5Jakub Hrozek ret = sdap_add_incomplete_groups(sysdb, opts,

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny add_groups, ldap_groups,

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny ldap_groups_count);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny if (ret != EOK) {

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny DEBUG(1, ("Adding incomplete users failed\n"));

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny goto done;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny }

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny }

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny DEBUG(8, ("Updating memberships for %s\n", name));

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny ret = sysdb_update_members(sysdb, name, type,

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny (const char *const *) add_groups,

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny (const char *const *) del_groups);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny if (ret != EOK) {

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny DEBUG(1, ("Membership update failed [%d]: %s\n",

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny ret, strerror(ret)));

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny goto done;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny }

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

88ab259f993956b6cd0b1a07d3d88d105e368a8cJakub Hrozek ret = sysdb_transaction_commit(sysdb);

88ab259f993956b6cd0b1a07d3d88d105e368a8cJakub Hrozek if (ret != EOK) {

88ab259f993956b6cd0b1a07d3d88d105e368a8cJakub Hrozek DEBUG(1, ("Failed to commit transaction\n"));

88ab259f993956b6cd0b1a07d3d88d105e368a8cJakub Hrozek goto done;

88ab259f993956b6cd0b1a07d3d88d105e368a8cJakub Hrozek }

88ab259f993956b6cd0b1a07d3d88d105e368a8cJakub Hrozek in_transaction = false;

88ab259f993956b6cd0b1a07d3d88d105e368a8cJakub Hrozek

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny ret = EOK;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zelenydone:

88ab259f993956b6cd0b1a07d3d88d105e368a8cJakub Hrozek if (in_transaction) {

88ab259f993956b6cd0b1a07d3d88d105e368a8cJakub Hrozek tret = sysdb_transaction_cancel(sysdb);

88ab259f993956b6cd0b1a07d3d88d105e368a8cJakub Hrozek if (tret != EOK) {

88ab259f993956b6cd0b1a07d3d88d105e368a8cJakub Hrozek DEBUG(1, ("Failed to cancel transaction\n"));

88ab259f993956b6cd0b1a07d3d88d105e368a8cJakub Hrozek }

88ab259f993956b6cd0b1a07d3d88d105e368a8cJakub Hrozek }

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny talloc_zfree(tmp_ctx);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny return ret;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny}

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

f26c954658dfd7461f290f0b5d924951a6db219aJan Zelenystruct sdap_initgr_rfc2307_state {

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny struct tevent_context *ev;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny struct sysdb_ctx *sysdb;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny struct sdap_options *opts;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny struct sdap_handle *sh;

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher const char **attrs;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny const char *name;

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher const char *base_filter;

9fcfe80902655f495b7258218fc8114aa5d2c023Stephen Gallagher const char *orig_dn;

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher char *filter;

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher int timeout;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny struct sdap_op *op;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny struct sysdb_attrs **ldap_groups;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny size_t ldap_groups_count;

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher size_t base_iter;

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher struct sdap_search_base **search_bases;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny};

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagherstatic errno_t sdap_initgr_rfc2307_next_base(struct tevent_req *req);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zelenystatic void sdap_initgr_rfc2307_process(struct tevent_req *subreq);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zelenystruct tevent_req *sdap_initgr_rfc2307_send(TALLOC_CTX *memctx,

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny struct tevent_context *ev,

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny struct sdap_options *opts,

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny struct sysdb_ctx *sysdb,

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny struct sdap_handle *sh,

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny const char *name)

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny{

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher struct tevent_req *req;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny struct sdap_initgr_rfc2307_state *state;

6b81b6ada1010e65b447fc74453e236fb8791813Jan Zeleny const char **attr_filter;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny char *clean_name;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny errno_t ret;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny req = tevent_req_create(memctx, &state, struct sdap_initgr_rfc2307_state);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny if (!req) return NULL;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny state->ev = ev;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny state->opts = opts;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny state->sysdb = sysdb;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny state->sh = sh;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny state->op = NULL;

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher state->timeout = dp_opt_get_int(state->opts->basic, SDAP_SEARCH_TIMEOUT);

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher state->ldap_groups = NULL;

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher state->ldap_groups_count = 0;

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher state->base_iter = 0;

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher state->search_bases = opts->group_search_bases;

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher

169fa5bd3edd34aa0db35681832bd7406e423c1bStephen Gallagher if (!state->search_bases) {

169fa5bd3edd34aa0db35681832bd7406e423c1bStephen Gallagher DEBUG(SSSDBG_CRIT_FAILURE,

169fa5bd3edd34aa0db35681832bd7406e423c1bStephen Gallagher ("Initgroups lookup request without a group search base\n"));

169fa5bd3edd34aa0db35681832bd7406e423c1bStephen Gallagher ret = EINVAL;

169fa5bd3edd34aa0db35681832bd7406e423c1bStephen Gallagher goto done;

169fa5bd3edd34aa0db35681832bd7406e423c1bStephen Gallagher }

169fa5bd3edd34aa0db35681832bd7406e423c1bStephen Gallagher

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny state->name = talloc_strdup(state, name);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny if (!state->name) {

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny talloc_zfree(req);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny return NULL;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny }

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

6b81b6ada1010e65b447fc74453e236fb8791813Jan Zeleny attr_filter = talloc_array(state, const char *, 2);

6b81b6ada1010e65b447fc74453e236fb8791813Jan Zeleny if (!attr_filter) {

6b81b6ada1010e65b447fc74453e236fb8791813Jan Zeleny talloc_free(req);

6b81b6ada1010e65b447fc74453e236fb8791813Jan Zeleny return NULL;

6b81b6ada1010e65b447fc74453e236fb8791813Jan Zeleny }

6b81b6ada1010e65b447fc74453e236fb8791813Jan Zeleny

6b81b6ada1010e65b447fc74453e236fb8791813Jan Zeleny attr_filter[0] = opts->group_map[SDAP_AT_GROUP_MEMBER].name;

6b81b6ada1010e65b447fc74453e236fb8791813Jan Zeleny attr_filter[1] = NULL;

6b81b6ada1010e65b447fc74453e236fb8791813Jan Zeleny

64ddff90c7fcc02ccb06824ac93af7d5f361a88fJan Zeleny ret = build_attrs_from_map(state, opts->group_map, SDAP_OPTS_GROUP,

6b81b6ada1010e65b447fc74453e236fb8791813Jan Zeleny attr_filter, &state->attrs, NULL);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny if (ret != EOK) {

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny talloc_free(req);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny return NULL;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny }

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny ret = sss_filter_sanitize(state, name, &clean_name);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny if (ret != EOK) {

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny talloc_free(req);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny return NULL;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny }

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher state->base_filter = talloc_asprintf(state,

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny "(&(%s=%s)(objectclass=%s)(%s=*)(&(%s=*)(!(%s=0))))",

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny opts->group_map[SDAP_AT_GROUP_MEMBER].name,

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny clean_name,

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny opts->group_map[SDAP_OC_GROUP].name,

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny opts->group_map[SDAP_AT_GROUP_NAME].name,

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny opts->group_map[SDAP_AT_GROUP_GID].name,

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny opts->group_map[SDAP_AT_GROUP_GID].name);

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher if (!state->base_filter) {

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny talloc_zfree(req);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny return NULL;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny }

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny talloc_zfree(clean_name);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher ret = sdap_initgr_rfc2307_next_base(req);

169fa5bd3edd34aa0db35681832bd7406e423c1bStephen Gallagher

169fa5bd3edd34aa0db35681832bd7406e423c1bStephen Gallagherdone:

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher if (ret != EOK) {

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher tevent_req_error(req, ret);

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher tevent_req_post(req, ev);

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher }

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher return req;

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher}

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagherstatic errno_t sdap_initgr_rfc2307_next_base(struct tevent_req *req)

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher{

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher struct tevent_req *subreq;

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher struct sdap_initgr_rfc2307_state *state;

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher state = tevent_req_data(req, struct sdap_initgr_rfc2307_state);

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher talloc_zfree(state->filter);

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher state->filter = sdap_get_id_specific_filter(

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher state, state->base_filter,

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher state->search_bases[state->base_iter]->filter);

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher if (!state->filter) {

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher return ENOMEM;

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher }

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher DEBUG(SSSDBG_TRACE_FUNC,

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher ("Searching for groups with base [%s]\n",

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher state->search_bases[state->base_iter]->basedn));

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher subreq = sdap_get_generic_send(

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher state, state->ev, state->opts, state->sh,

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher state->search_bases[state->base_iter]->basedn,

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher state->search_bases[state->base_iter]->scope,

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher state->filter, state->attrs,

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher state->opts->group_map, SDAP_OPTS_GROUP,

2f3ee3f49019f5b60adbe073070f31e6e2d7c7abStephen Gallagher state->timeout,

2f3ee3f49019f5b60adbe073070f31e6e2d7c7abStephen Gallagher true);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny if (!subreq) {

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher return ENOMEM;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny }

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny tevent_req_set_callback(subreq, sdap_initgr_rfc2307_process, req);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher return EOK;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny}

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

f26c954658dfd7461f290f0b5d924951a6db219aJan Zelenystatic void sdap_initgr_rfc2307_process(struct tevent_req *subreq)

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny{

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny struct tevent_req *req;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny struct sdap_initgr_rfc2307_state *state;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny struct sysdb_attrs **ldap_groups;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny char **sysdb_grouplist = NULL;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny size_t count;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny int ret;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny int i;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny req = tevent_req_callback_data(subreq, struct tevent_req);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny state = tevent_req_data(req, struct sdap_initgr_rfc2307_state);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny ret = sdap_get_generic_recv(subreq, state, &count, &ldap_groups);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny talloc_zfree(subreq);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny if (ret) {

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny tevent_req_error(req, ret);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny return;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny }

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher /* Add this batch of groups to the list */

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher if (count > 0) {

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher state->ldap_groups =

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher talloc_realloc(state,

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher state->ldap_groups,

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher struct sysdb_attrs *,

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher state->ldap_groups_count + count + 1);

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher if (!state->ldap_groups) {

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher tevent_req_error(req, ENOMEM);

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher return;

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher }

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher /* Copy the new groups into the list.

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher for (i = 0; i < count; i++) {

3a0522759a7e71b40cc88dba0f5c545b049cf9bfJakub Hrozek state->ldap_groups[state->ldap_groups_count + i] =

3a0522759a7e71b40cc88dba0f5c545b049cf9bfJakub Hrozek talloc_steal(state->ldap_groups, ldap_groups[i]);

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher }

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher state->ldap_groups_count += count;

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher state->ldap_groups[state->ldap_groups_count] = NULL;

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher }

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher state->base_iter++;

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher /* Check for additional search bases, and iterate

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher if (state->search_bases[state->base_iter] != NULL) {

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher ret = sdap_initgr_rfc2307_next_base(req);

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher if (ret != EOK) {

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher tevent_req_error(req, ret);

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher }

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher return;

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher }

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny /* Search for all groups for which this user is a member */

1ed3a0d1d98ae410fcd716ec5c7202de2c082597Stephen Gallagher ret = get_sysdb_grouplist(state, state->sysdb, state->name,

1ed3a0d1d98ae410fcd716ec5c7202de2c082597Stephen Gallagher &sysdb_grouplist);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny if (ret != EOK) {

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny tevent_req_error(req, ret);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny return;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny }

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny /* There are no nested groups here so we can just update the

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny ret = sdap_initgr_common_store(state->sysdb, state->opts,

ac3a1f3da772cf101101c31675c63dc3549b21b5Jakub Hrozek state->name,

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher SYSDB_MEMBER_USER,

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher sysdb_grouplist,

38e1ee5d65ade946f1322efa96f69c05e041c57fStephen Gallagher state->ldap_groups,

88ab259f993956b6cd0b1a07d3d88d105e368a8cJakub Hrozek state->ldap_groups_count);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny if (ret != EOK) {

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny tevent_req_error(req, ret);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny return;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny }

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny tevent_req_done(req);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny}

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

f26c954658dfd7461f290f0b5d924951a6db219aJan Zelenystatic int sdap_initgr_rfc2307_recv(struct tevent_req *req)

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny{

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny TEVENT_REQ_RETURN_ON_ERROR(req);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny return EOK;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny}

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

c88e387d10104774852d54355fc17ad41761776aJakub Hrozekstatic errno_t

c88e387d10104774852d54355fc17ad41761776aJakub Hrozeksdap_nested_groups_store(struct sysdb_ctx *sysdb,

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek struct sdap_options *opts,

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek struct sysdb_attrs **groups,

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek unsigned long count)

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek{

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek errno_t ret, tret;

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek TALLOC_CTX *tmp_ctx;

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek char **groupnamelist = NULL;

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek bool in_transaction = false;

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek tmp_ctx = talloc_new(NULL);

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek if (!tmp_ctx) return ENOMEM;

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek if (count > 0) {

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek ret = sysdb_attrs_primary_name_list(sysdb, tmp_ctx,

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek groups, count,

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek opts->group_map[SDAP_AT_GROUP_NAME].name,

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek &groupnamelist);

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek if (ret != EOK) {

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek DEBUG(3, ("sysdb_attrs_primary_name_list failed [%d]: %s\n",

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek ret, strerror(ret)));

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek goto done;

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek }

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek }

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek ret = sysdb_transaction_start(sysdb);

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek if (ret != EOK) {

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek DEBUG(1, ("Failed to start transaction\n"));

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek goto done;

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek }

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek in_transaction = true;

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek

ac3a1f3da772cf101101c31675c63dc3549b21b5Jakub Hrozek ret = sdap_add_incomplete_groups(sysdb, opts, groupnamelist,

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek groups, count);

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek if (ret != EOK) {

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek DEBUG(6, ("Could not add incomplete groups [%d]: %s\n",

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek ret, strerror(ret)));

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek goto done;

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek }

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek ret = sysdb_transaction_commit(sysdb);

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek if (ret != EOK) {

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek DEBUG(1, ("Failed to commit transaction\n"));

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek goto done;

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek }

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek in_transaction = false;

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek ret = EOK;

c88e387d10104774852d54355fc17ad41761776aJakub Hrozekdone:

f249521d2ebf23ccb03a93e070060f6e9d3db94cJakub Hrozek if (in_transaction) {

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek tret = sysdb_transaction_cancel(sysdb);

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek if (tret != EOK) {

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek DEBUG(1, ("Failed to cancel transaction\n"));

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek }

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek }

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek talloc_free(tmp_ctx);

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek return ret;

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek}

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek

c88e387d10104774852d54355fc17ad41761776aJakub Hrozekstruct membership_diff {

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek struct membership_diff *prev;

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek struct membership_diff *next;

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek const char *name;

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek char **add;

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek char **del;

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek};

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek

c88e387d10104774852d54355fc17ad41761776aJakub Hrozekstatic errno_t

c88e387d10104774852d54355fc17ad41761776aJakub Hrozekbuild_membership_diff(TALLOC_CTX *mem_ctx, const char *name,

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek char **ldap_parent_names, char **sysdb_parent_names,

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek struct membership_diff **_mdiff)

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek{

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek TALLOC_CTX *tmp_ctx;

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek struct membership_diff *mdiff;

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek errno_t ret;

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek char **add_groups;

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek char **del_groups;

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek tmp_ctx = talloc_new(NULL);

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek if (!tmp_ctx) {

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek ret = ENOMEM;

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek goto done;

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek }

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek mdiff = talloc_zero(tmp_ctx, struct membership_diff);

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek if (!mdiff) {

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek ret = ENOMEM;

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek goto done;

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek }

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek mdiff->name = talloc_strdup(mdiff, name);

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek if (!mdiff->name) {

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek ret = ENOMEM;

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek goto done;

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek }

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek /* Find the differences between the sysdb and ldap lists

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek ret = diff_string_lists(tmp_ctx,

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek ldap_parent_names, sysdb_parent_names,

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek &add_groups, &del_groups, NULL);

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek if (ret != EOK) {

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek goto done;

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek }

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek mdiff->add = talloc_steal(mdiff, add_groups);

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek mdiff->del = talloc_steal(mdiff, del_groups);

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek ret = EOK;

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek *_mdiff = talloc_steal(mem_ctx, mdiff);

c88e387d10104774852d54355fc17ad41761776aJakub Hrozekdone:

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek talloc_free(tmp_ctx);

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek return ret;

c88e387d10104774852d54355fc17ad41761776aJakub Hrozek}

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

f26c954658dfd7461f290f0b5d924951a6db219aJan Zelenystruct sdap_initgr_nested_state {

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny struct tevent_context *ev;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny struct sysdb_ctx *sysdb;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny struct sdap_options *opts;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny struct sss_domain_info *dom;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny struct sdap_handle *sh;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny struct sysdb_attrs *user;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny const char *username;

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek const char *orig_dn;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny const char **grp_attrs;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek struct ldb_message_element *memberof;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny char *filter;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny char **group_dns;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny int cur;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny struct sdap_op *op;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny struct sysdb_attrs **groups;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny int groups_cur;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny};

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozekstatic errno_t sdap_initgr_nested_deref_search(struct tevent_req *req);

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozekstatic errno_t sdap_initgr_nested_noderef_search(struct tevent_req *req);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zelenystatic void sdap_initgr_nested_search(struct tevent_req *subreq);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zelenystatic void sdap_initgr_nested_store(struct tevent_req *req);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zelenystatic struct tevent_req *sdap_initgr_nested_send(TALLOC_CTX *memctx,

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny struct tevent_context *ev,

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny struct sdap_options *opts,

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny struct sysdb_ctx *sysdb,

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny struct sss_domain_info *dom,

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny struct sdap_handle *sh,

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny struct sysdb_attrs *user,

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny const char **grp_attrs)

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny{

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek struct tevent_req *req;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny struct sdap_initgr_nested_state *state;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny errno_t ret;

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek int deref_threshold;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny req = tevent_req_create(memctx, &state, struct sdap_initgr_nested_state);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny if (!req) return NULL;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny state->ev = ev;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny state->opts = opts;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny state->sysdb = sysdb;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny state->dom = dom;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny state->sh = sh;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny state->grp_attrs = grp_attrs;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny state->user = user;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny state->op = NULL;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny ret = sysdb_attrs_primary_name(sysdb, user,

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny opts->user_map[SDAP_AT_USER_NAME].name,

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny &state->username);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny if (ret != EOK) {

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny DEBUG(1, ("User entry had no username\n"));

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek goto immediate;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny }

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek ret = sysdb_attrs_get_el(state->user, SYSDB_MEMBEROF, &state->memberof);

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek if (ret || !state->memberof || state->memberof->num_values == 0) {

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny DEBUG(4, ("User entry lacks original memberof ?\n"));

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny /* We can't find any groups for this user, so we'll

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek ret = EOK;

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek goto immediate;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny }

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny state->groups = talloc_zero_array(state, struct sysdb_attrs *,

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek state->memberof->num_values + 1);;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny if (!state->groups) {

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek ret = ENOMEM;

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek goto immediate;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny }

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny state->groups_cur = 0;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek deref_threshold = dp_opt_get_int(state->opts->basic,

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek SDAP_DEREF_THRESHOLD);

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek if (sdap_has_deref_support(state->sh, state->opts) &&

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek deref_threshold < state->memberof->num_values) {

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek ret = sysdb_attrs_get_string(user, SYSDB_ORIG_DN,

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek &state->orig_dn);

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek if (ret != EOK) goto immediate;

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek ret = sdap_initgr_nested_deref_search(req);

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek if (ret != EAGAIN) goto immediate;

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek } else {

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek ret = sdap_initgr_nested_noderef_search(req);

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek if (ret != EAGAIN) goto immediate;

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek }

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek return req;

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozekimmediate:

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek if (ret == EOK) {

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek tevent_req_done(req);

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek } else {

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek tevent_req_error(req, ret);

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek }

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek tevent_req_post(req, ev);

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek return req;

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek}

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozekstatic errno_t sdap_initgr_nested_noderef_search(struct tevent_req *req)

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek{

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek int i;

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek struct tevent_req *subreq;

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek struct sdap_initgr_nested_state *state;

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek state = tevent_req_data(req, struct sdap_initgr_nested_state);

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek state->group_dns = talloc_array(state, char *,

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek state->memberof->num_values + 1);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny if (!state->group_dns) {

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek return ENOMEM;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny }

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek for (i = 0; i < state->memberof->num_values; i++) {

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny state->group_dns[i] = talloc_strdup(state->group_dns,

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek (char *)state->memberof->values[i].data);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny if (!state->group_dns[i]) {

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek return ENOMEM;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny }

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny }

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny state->group_dns[i] = NULL; /* terminate */

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny state->cur = 0;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek state->filter = talloc_asprintf(state, "(&(objectclass=%s)(%s=*))",

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek state->opts->group_map[SDAP_OC_GROUP].name,

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek state->opts->group_map[SDAP_AT_GROUP_NAME].name);

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek if (!state->filter) {

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek return ENOMEM;

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek }

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny subreq = sdap_get_generic_send(state, state->ev, state->opts, state->sh,

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny state->group_dns[state->cur],

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny LDAP_SCOPE_BASE,

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny state->filter, state->grp_attrs,

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny state->opts->group_map, SDAP_OPTS_GROUP,

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny dp_opt_get_int(state->opts->basic,

2f3ee3f49019f5b60adbe073070f31e6e2d7c7abStephen Gallagher SDAP_SEARCH_TIMEOUT),

2f3ee3f49019f5b60adbe073070f31e6e2d7c7abStephen Gallagher false);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny if (!subreq) {

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek return ENOMEM;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny }

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny tevent_req_set_callback(subreq, sdap_initgr_nested_search, req);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek return EAGAIN;

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek}

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozekstatic void sdap_initgr_nested_deref_done(struct tevent_req *subreq);

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozekstatic errno_t sdap_initgr_nested_deref_search(struct tevent_req *req)

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek{

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek struct tevent_req *subreq;

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek struct sdap_attr_map_info *maps;

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek const int num_maps = 1;

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek const char **sdap_attrs;

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek errno_t ret;

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek int timeout;

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek struct sdap_initgr_nested_state *state;

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek state = tevent_req_data(req, struct sdap_initgr_nested_state);

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek maps = talloc_array(state, struct sdap_attr_map_info, num_maps+1);

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek if (!maps) return ENOMEM;

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek maps[0].map = state->opts->group_map;

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek maps[0].num_attrs = SDAP_OPTS_GROUP;

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek maps[1].map = NULL;

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek

64ddff90c7fcc02ccb06824ac93af7d5f361a88fJan Zeleny ret = build_attrs_from_map(state, state->opts->group_map, SDAP_OPTS_GROUP,

64ddff90c7fcc02ccb06824ac93af7d5f361a88fJan Zeleny NULL, &sdap_attrs, NULL);

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek if (ret != EOK) goto fail;

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek

f393e23f264a299868a12bec40a390a7ecd65d10Stephen Gallagher timeout = dp_opt_get_int(state->opts->basic, SDAP_SEARCH_TIMEOUT);

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek subreq = sdap_deref_search_send(state, state->ev, state->opts,

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek state->sh, state->orig_dn,

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek state->opts->user_map[SDAP_AT_USER_MEMBEROF].name,

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek sdap_attrs, num_maps, maps, timeout);

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek if (!subreq) {

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek ret = EIO;

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek goto fail;

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek }

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek talloc_steal(subreq, sdap_attrs);

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek talloc_steal(subreq, maps);

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek tevent_req_set_callback(subreq, sdap_initgr_nested_deref_done, req);

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek return EAGAIN;

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozekfail:

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek talloc_free(sdap_attrs);

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek talloc_free(maps);

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek return ret;

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek}

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozekstatic void sdap_initgr_nested_deref_done(struct tevent_req *subreq)

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek{

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek errno_t ret;

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek struct tevent_req *req;

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek struct sdap_initgr_nested_state *state;

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek size_t num_results;

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek size_t i;

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek struct sdap_deref_attrs **deref_result;

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek req = tevent_req_callback_data(subreq, struct tevent_req);

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek state = tevent_req_data(req, struct sdap_initgr_nested_state);

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek ret = sdap_deref_search_recv(subreq, state,

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek &num_results,

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek &deref_result);

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek talloc_zfree(subreq);

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek if (ret != EOK && ret != ENOENT) {

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek tevent_req_error(req, ret);

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek return;

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek } else if (ret == ENOENT || deref_result == NULL) {

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek /* Nothing could be dereferenced. Done. */

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek tevent_req_done(req);

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek return;

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek }

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek for (i=0; i < num_results; i++) {

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek state->groups[i] = talloc_steal(state->groups,

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek deref_result[i]->attrs);

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek }

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek state->groups_cur = num_results;

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek sdap_initgr_nested_store(req);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny}

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

f26c954658dfd7461f290f0b5d924951a6db219aJan Zelenystatic void sdap_initgr_nested_search(struct tevent_req *subreq)

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny{

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny struct tevent_req *req;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny struct sdap_initgr_nested_state *state;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny struct sysdb_attrs **groups;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny size_t count;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny int ret;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny req = tevent_req_callback_data(subreq, struct tevent_req);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny state = tevent_req_data(req, struct sdap_initgr_nested_state);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny ret = sdap_get_generic_recv(subreq, state, &count, &groups);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny talloc_zfree(subreq);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny if (ret) {

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny tevent_req_error(req, ret);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny return;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny }

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny if (count == 1) {

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek state->groups[state->groups_cur] = talloc_steal(state->groups,

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek groups[0]);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny state->groups_cur++;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny } else {

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny DEBUG(2, ("Search for group %s, returned %d results. Skipping\n",

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny state->group_dns[state->cur], count));

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny }

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny state->cur++;

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek /* note that state->memberof->num_values is the count of original

f46b9fd64ef09aae23220c5adb2fe4d3e4adc553Jakub Hrozek if (state->cur < state->memberof->num_values) {

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny subreq = sdap_get_generic_send(state, state->ev,

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny state->opts, state->sh,

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny state->group_dns[state->cur],

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny LDAP_SCOPE_BASE,

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny state->filter, state->grp_attrs,

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny state->opts->group_map,

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny SDAP_OPTS_GROUP,

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny dp_opt_get_int(state->opts->basic,

2f3ee3f49019f5b60adbe073070f31e6e2d7c7abStephen Gallagher SDAP_SEARCH_TIMEOUT),

2f3ee3f49019f5b60adbe073070f31e6e2d7c7abStephen Gallagher false);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny if (!subreq) {

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny tevent_req_error(req, ENOMEM);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny return;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny }

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny tevent_req_set_callback(subreq, sdap_initgr_nested_search, req);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny } else {

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny sdap_initgr_nested_store(req);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny }

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny}

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozekstatic errno_t

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozeksdap_initgr_store_groups(struct sdap_initgr_nested_state *state);

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozekstatic errno_t

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozeksdap_initgr_store_group_memberships(struct sdap_initgr_nested_state *state);

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozekstatic errno_t

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozeksdap_initgr_store_user_memberships(struct sdap_initgr_nested_state *state);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

f26c954658dfd7461f290f0b5d924951a6db219aJan Zelenystatic void sdap_initgr_nested_store(struct tevent_req *req)

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny{

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek errno_t ret;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny struct sdap_initgr_nested_state *state;

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek bool in_transaction = false;

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek errno_t tret;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek state = tevent_req_data(req, struct sdap_initgr_nested_state);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek ret = sysdb_transaction_start(state->sysdb);

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek if (ret != EOK) {

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek DEBUG(1, ("Failed to start transaction\n"));

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek goto fail;

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek }

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek in_transaction = true;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek /* save the groups if they are not already */

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek ret = sdap_initgr_store_groups(state);

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek if (ret != EOK) {

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek DEBUG(3, ("Could not save groups [%d]: %s\n",

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek ret, strerror(ret)));

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek goto fail;

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek }

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek /* save the group memberships */

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek ret = sdap_initgr_store_group_memberships(state);

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek if (ret != EOK) {

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek DEBUG(3, ("Could not save group memberships [%d]: %s\n",

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek ret, strerror(ret)));

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek goto fail;

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek }

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek /* save the user memberships */

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek ret = sdap_initgr_store_user_memberships(state);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny if (ret != EOK) {

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek DEBUG(3, ("Could not save user memberships [%d]: %s\n",

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek ret, strerror(ret)));

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek goto fail;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny }

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek ret = sysdb_transaction_commit(state->sysdb);

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek if (ret != EOK) {

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek DEBUG(1, ("Failed to commit transaction\n"));

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek goto fail;

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek }

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek in_transaction = false;

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek tevent_req_done(req);

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek return;

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozekfail:

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek if (in_transaction) {

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek tret = sysdb_transaction_cancel(state->sysdb);

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek if (tret != EOK) {

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek DEBUG(1, ("Failed to cancel transaction\n"));

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek }

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny }

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek tevent_req_error(req, ret);

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek return;

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek}

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozekstatic errno_t

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozeksdap_initgr_store_groups(struct sdap_initgr_nested_state *state)

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek{

ac3a1f3da772cf101101c31675c63dc3549b21b5Jakub Hrozek return sdap_nested_groups_store(state->sysdb,

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek state->opts, state->groups,

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek state->groups_cur);

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek}

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozekstatic errno_t

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozeksdap_initgr_nested_get_membership_diff(TALLOC_CTX *mem_ctx,

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek struct sysdb_ctx *sysdb,

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek struct sdap_options *opts,

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek struct sss_domain_info *dom,

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek struct sysdb_attrs *group,

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek struct sysdb_attrs **all_groups,

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek int groups_count,

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek struct membership_diff **mdiff);

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozekstatic int sdap_initgr_nested_get_direct_parents(TALLOC_CTX *mem_ctx,

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek struct sysdb_attrs *attrs,

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek struct sysdb_attrs **groups,

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek int ngroups,

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek struct sysdb_attrs ***_direct_parents,

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek int *_ndirect);

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozekstatic errno_t

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozeksdap_initgr_store_group_memberships(struct sdap_initgr_nested_state *state)

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek{

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek errno_t ret;

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek int i, tret;

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek TALLOC_CTX *tmp_ctx;

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek struct membership_diff *miter;

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek struct membership_diff *memberships = NULL;

f249521d2ebf23ccb03a93e070060f6e9d3db94cJakub Hrozek bool in_transaction = false;

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek tmp_ctx = talloc_new(NULL);

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek if (!tmp_ctx) return ENOMEM;

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek /* Compute the diffs first in order to keep the transaction as small

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek for (i=0; i < state->groups_cur; i++) {

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek ret = sdap_initgr_nested_get_membership_diff(tmp_ctx, state->sysdb,

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek state->opts, state->dom,

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek state->groups[i],

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek state->groups,

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek state->groups_cur,

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek &miter);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny if (ret) {

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek DEBUG(3, ("Could not compute memberships for group %d [%d]: %s\n",

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek i, ret, strerror(ret)));

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny goto done;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny }

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek DLIST_ADD(memberships, miter);

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek }

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek ret = sysdb_transaction_start(state->sysdb);

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek if (ret != EOK) {

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek DEBUG(1, ("Failed to start transaction\n"));

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek goto done;

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek }

f249521d2ebf23ccb03a93e070060f6e9d3db94cJakub Hrozek in_transaction = true;

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek DLIST_FOR_EACH(miter, memberships) {

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek ret = sysdb_update_members(state->sysdb, miter->name,

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek SYSDB_MEMBER_GROUP,

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek (const char *const *) miter->add,

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek (const char *const *) miter->del);

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek if (ret != EOK) {

f249521d2ebf23ccb03a93e070060f6e9d3db94cJakub Hrozek DEBUG(3, ("Failed to update memberships\n"));

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek goto done;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny }

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny }

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek ret = sysdb_transaction_commit(state->sysdb);

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek if (ret != EOK) {

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek DEBUG(1, ("Failed to commit transaction\n"));

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek goto done;

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek }

f249521d2ebf23ccb03a93e070060f6e9d3db94cJakub Hrozek in_transaction = false;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek ret = EOK;

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozekdone:

f249521d2ebf23ccb03a93e070060f6e9d3db94cJakub Hrozek if (in_transaction) {

f249521d2ebf23ccb03a93e070060f6e9d3db94cJakub Hrozek tret = sysdb_transaction_cancel(state->sysdb);

f249521d2ebf23ccb03a93e070060f6e9d3db94cJakub Hrozek if (tret != EOK) {

f249521d2ebf23ccb03a93e070060f6e9d3db94cJakub Hrozek DEBUG(1, ("Failed to cancel transaction\n"));

f249521d2ebf23ccb03a93e070060f6e9d3db94cJakub Hrozek }

f249521d2ebf23ccb03a93e070060f6e9d3db94cJakub Hrozek }

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek talloc_free(tmp_ctx);

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek return ret;

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek}

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozekstatic errno_t

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozeksdap_initgr_store_user_memberships(struct sdap_initgr_nested_state *state)

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek{

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek errno_t ret;

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek int tret;

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek const char *orig_dn;

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek char **sysdb_parent_name_list = NULL;

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek char **ldap_parent_name_list = NULL;

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek int nparents;

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek struct sysdb_attrs **ldap_parentlist;

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek struct ldb_message_element *el;

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek int i, mi;

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek char **add_groups;

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek char **del_groups;

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek TALLOC_CTX *tmp_ctx;

f249521d2ebf23ccb03a93e070060f6e9d3db94cJakub Hrozek bool in_transaction = false;

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek tmp_ctx = talloc_new(NULL);

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek if (!tmp_ctx) {

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny ret = ENOMEM;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny goto done;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny }

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek /* Get direct LDAP parents */

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek ret = sysdb_attrs_get_string(state->user, SYSDB_ORIG_DN, &orig_dn);

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek if (ret != EOK) {

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek DEBUG(2, ("The user has no original DN\n"));

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny goto done;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny }

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek ldap_parentlist = talloc_zero_array(tmp_ctx, struct sysdb_attrs *,

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek state->groups_cur + 1);

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek if (!ldap_parentlist) {

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny ret = ENOMEM;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny goto done;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny }

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek nparents = 0;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek for (i=0; i < state->groups_cur ; i++) {

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek ret = sysdb_attrs_get_el(state->groups[i], SYSDB_MEMBER, &el);

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek if (ret) {

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek DEBUG(3, ("A group with no members during initgroups?\n"));

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny goto done;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny }

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek for (mi = 0; mi < el->num_values; mi++) {

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek if (strcasecmp((const char *) el->values[mi].data, orig_dn) != 0) {

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny continue;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny }

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek ldap_parentlist[nparents] = state->groups[i];

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek nparents++;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny }

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek }

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek DEBUG(7, ("The user %s is a direct member of %d LDAP groups\n",

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek state->username, nparents));

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek if (nparents == 0) {

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek ldap_parent_name_list = NULL;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny } else {

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek ret = sysdb_attrs_primary_name_list(state->sysdb, tmp_ctx,

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek ldap_parentlist,

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek nparents,

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek state->opts->group_map[SDAP_AT_GROUP_NAME].name,

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek &ldap_parent_name_list);

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek if (ret != EOK) {

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek DEBUG(1, ("sysdb_attrs_primary_name_list failed [%d]: %s\n",

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek ret, strerror(ret)));

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek goto done;

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek }

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny }

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek ret = sysdb_get_direct_parents(tmp_ctx, state->sysdb, state->dom,

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny SYSDB_MEMBER_USER,

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek state->username, &sysdb_parent_name_list);

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek if (ret) {

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek DEBUG(1, ("Could not get direct sysdb parents for %s: %d [%s]\n",

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek state->username, ret, strerror(ret)));

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny goto done;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny }

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek ret = diff_string_lists(tmp_ctx,

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek ldap_parent_name_list, sysdb_parent_name_list,

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek &add_groups, &del_groups, NULL);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny if (ret != EOK) {

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny goto done;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny }

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek ret = sysdb_transaction_start(state->sysdb);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny if (ret != EOK) {

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek DEBUG(1, ("Failed to start transaction\n"));

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny goto done;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny }

f249521d2ebf23ccb03a93e070060f6e9d3db94cJakub Hrozek in_transaction = true;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek DEBUG(8, ("Updating memberships for %s\n", state->username));

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek ret = sysdb_update_members(state->sysdb, state->username, SYSDB_MEMBER_USER,

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek (const char *const *) add_groups,

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek (const char *const *) del_groups);

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek if (ret != EOK) {

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek DEBUG(1, ("Could not update sysdb memberships for %s: %d [%s]\n",

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek state->username, ret, strerror(ret)));

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek goto done;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny }

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek ret = sysdb_transaction_commit(state->sysdb);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny if (ret != EOK) {

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek goto done;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny }

f249521d2ebf23ccb03a93e070060f6e9d3db94cJakub Hrozek in_transaction = false;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek ret = EOK;

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozekdone:

f249521d2ebf23ccb03a93e070060f6e9d3db94cJakub Hrozek if (in_transaction) {

f249521d2ebf23ccb03a93e070060f6e9d3db94cJakub Hrozek tret = sysdb_transaction_cancel(state->sysdb);

f249521d2ebf23ccb03a93e070060f6e9d3db94cJakub Hrozek if (tret != EOK) {

f249521d2ebf23ccb03a93e070060f6e9d3db94cJakub Hrozek DEBUG(1, ("Failed to cancel transaction\n"));

f249521d2ebf23ccb03a93e070060f6e9d3db94cJakub Hrozek }

f249521d2ebf23ccb03a93e070060f6e9d3db94cJakub Hrozek }

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek talloc_zfree(tmp_ctx);

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek return ret;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny}

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozekstatic errno_t

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozeksdap_initgr_nested_get_membership_diff(TALLOC_CTX *mem_ctx,

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek struct sysdb_ctx *sysdb,

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek struct sdap_options *opts,

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek struct sss_domain_info *dom,

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek struct sysdb_attrs *group,

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek struct sysdb_attrs **all_groups,

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek int groups_count,

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek struct membership_diff **_mdiff)

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny{

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek errno_t ret;

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek struct membership_diff *mdiff;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny const char *group_name;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek struct sysdb_attrs **ldap_parentlist;

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek int parents_count;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek char **ldap_parent_names_list = NULL;

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek char **sysdb_parents_names_list = NULL;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek TALLOC_CTX *tmp_ctx;

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek tmp_ctx = talloc_new(NULL);

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek if (!tmp_ctx) {

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek ret = ENOMEM;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny goto done;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny }

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek /* Get direct sysdb parents */

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny ret = sysdb_attrs_primary_name(sysdb, group,

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny opts->group_map[SDAP_AT_GROUP_NAME].name,

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny &group_name);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny if (ret != EOK) {

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny goto done;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny }

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek ret = sysdb_get_direct_parents(tmp_ctx, sysdb, dom,

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek SYSDB_MEMBER_GROUP,

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek group_name, &sysdb_parents_names_list);

fd61c807554d5a3ff74f065eb0438fe2524f4ba2Jakub Hrozek if (ret) {

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek DEBUG(1, ("Could not get direct sysdb parents for %s: %d [%s]\n",

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek group_name, ret, strerror(ret)));

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny goto done;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny }

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek /* For each group, filter only parents from full set */

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek ret = sdap_initgr_nested_get_direct_parents(tmp_ctx,

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek group,

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek all_groups,

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek groups_count,

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek &ldap_parentlist,

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek &parents_count);

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny if (ret != EOK) {

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek DEBUG(1, ("Cannot get parent groups for %s [%d]: %s\n",

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek group_name, ret, strerror(ret)));

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny goto done;

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny }

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny DEBUG(7, ("The group %s is a direct member of %d LDAP groups\n",

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek group_name, parents_count));

f26c954658dfd7461f290f0b5d924951a6db219aJan Zeleny

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek if (parents_count > 0) {

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek ret = sysdb_attrs_primary_name_list(sysdb, tmp_ctx,

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek ldap_parentlist,

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek parents_count,

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek opts->group_map[SDAP_AT_GROUP_NAME].name,

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek &ldap_parent_names_list);

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek if (ret != EOK) {

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek DEBUG(1, ("sysdb_attrs_primary_name_list failed [%d]: %s\n",

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek ret, strerror(ret)));

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek goto done;

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek }

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek }

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek ret = build_membership_diff(tmp_ctx, group_name, ldap_parent_names_list,

707ddc7de4d43a96a372880c50cb20b9672c9cdfJakub Hrozek sysdb_parents_names_list, &mdiff);