02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina#include <errno.h>

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina#include <string.h>

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina#include <tevent.h>

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina#include <talloc.h>

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina#include <ldb.h>

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina#include <dhash.h>

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina#include <stdint.h>

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina#include <time.h>

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina#include "util/util.h"

630f3ff08c1d17c7900b9bde814922f775ca2703Jakub Hrozek#include "util/probes.h"

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina#include "db/sysdb.h"

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina#include "providers/ldap/ldap_common.h"

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina#include "providers/ldap/sdap_async.h"

5cd4414fce1e0eb4133dfc6fc828bf25c8a959f9Lukas Slebodnik#include "providers/ldap/sdap_async_private.h"

8a8618717c99b7331125fa736b45d9155da797d3Jakub Hrozek#include "providers/ldap/sdap_idmap.h"

a6dd4a6c55773e81490dcafd61d4b9782705e9bfPavel Březina#include "providers/ipa/ipa_dn.h"

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

4c508463be960682cf94b4e5a39be2f8f49067c8Fabiano Fidêncio#define sdap_nested_group_sysdb_search_users(domain, dn) \

4c508463be960682cf94b4e5a39be2f8f49067c8Fabiano Fidêncio sdap_nested_group_sysdb_search((domain), (dn), true)

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

4c508463be960682cf94b4e5a39be2f8f49067c8Fabiano Fidêncio#define sdap_nested_group_sysdb_search_groups(domain, dn) \

4c508463be960682cf94b4e5a39be2f8f49067c8Fabiano Fidêncio sdap_nested_group_sysdb_search((domain), (dn), false)

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březinaenum sdap_nested_group_dn_type {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina SDAP_NESTED_GROUP_DN_USER,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina SDAP_NESTED_GROUP_DN_GROUP,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina SDAP_NESTED_GROUP_DN_UNKNOWN

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina};

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březinastruct sdap_nested_group_member {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina enum sdap_nested_group_dn_type type;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina const char *dn;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina const char *user_filter;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina const char *group_filter;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina};

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

c6bda70d6131b5e8cd760ad690fae001d1765547Jakub Hrozek#ifndef EXTERNAL_MEMBERS_CHUNK

c6bda70d6131b5e8cd760ad690fae001d1765547Jakub Hrozek#define EXTERNAL_MEMBERS_CHUNK 16

c6bda70d6131b5e8cd760ad690fae001d1765547Jakub Hrozek#endif /* EXTERNAL_MEMBERS_CHUNK */

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozekstruct sdap_external_missing_member {

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek const char **parent_group_dns;

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek size_t parent_dn_idx;

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek};

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březinastruct sdap_nested_group_ctx {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct sss_domain_info *domain;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct sdap_options *opts;

749cfb5d3270b5daf389d51a0dbd3fd2aec6e05dJakub Hrozek struct sdap_search_base **user_search_bases;

749cfb5d3270b5daf389d51a0dbd3fd2aec6e05dJakub Hrozek struct sdap_search_base **group_search_bases;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct sdap_handle *sh;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina hash_table_t *users;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina hash_table_t *groups;

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek hash_table_t *missing_external;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina bool try_deref;

4a9c1047354dbe5a4ed41e5951ae623e3772e113René Genz int deref_threshold;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina int max_nesting_level;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina};

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březinastatic struct tevent_req *

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březinasdap_nested_group_process_send(TALLOC_CTX *mem_ctx,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct tevent_context *ev,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct sdap_nested_group_ctx *group_ctx,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina int nesting_level,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct sysdb_attrs *group);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březinastatic errno_t sdap_nested_group_process_recv(struct tevent_req *req);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březinastatic struct tevent_req *

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březinasdap_nested_group_single_send(TALLOC_CTX *mem_ctx,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct tevent_context *ev,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct sdap_nested_group_ctx *group_ctx,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct sdap_nested_group_member *members,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina int num_members,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina int num_groups_max,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina int nesting_level);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březinastatic errno_t sdap_nested_group_single_recv(struct tevent_req *req);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březinastatic struct tevent_req *

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březinasdap_nested_group_lookup_user_send(TALLOC_CTX *mem_ctx,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct tevent_context *ev,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct sdap_nested_group_ctx *group_ctx,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct sdap_nested_group_member *member);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březinastatic errno_t sdap_nested_group_lookup_user_recv(TALLOC_CTX *mem_ctx,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct tevent_req *req,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct sysdb_attrs **_user);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březinastatic struct tevent_req *

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březinasdap_nested_group_lookup_group_send(TALLOC_CTX *mem_ctx,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct tevent_context *ev,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct sdap_nested_group_ctx *group_ctx,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct sdap_nested_group_member *member);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březinastatic errno_t sdap_nested_group_lookup_group_recv(TALLOC_CTX *mem_ctx,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct tevent_req *req,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct sysdb_attrs **_group);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březinastatic struct tevent_req *

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březinasdap_nested_group_lookup_unknown_send(TALLOC_CTX *mem_ctx,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct tevent_context *ev,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct sdap_nested_group_ctx *group_ctx,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct sdap_nested_group_member *member);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březinastatic errno_t

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březinasdap_nested_group_lookup_unknown_recv(TALLOC_CTX *mem_ctx,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct tevent_req *req,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct sysdb_attrs **_entry,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina enum sdap_nested_group_dn_type *_type);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březinastatic struct tevent_req *

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březinasdap_nested_group_deref_send(TALLOC_CTX *mem_ctx,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct tevent_context *ev,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct sdap_nested_group_ctx *group_ctx,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct ldb_message_element *members,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina const char *group_dn,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina int nesting_level);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březinastatic errno_t sdap_nested_group_deref_recv(struct tevent_req *req);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březinastatic errno_t

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březinasdap_nested_group_extract_hash_table(TALLOC_CTX *mem_ctx,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina hash_table_t *table,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina unsigned long *_num_entries,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct sysdb_attrs ***_entries)

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina{

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct sysdb_attrs **entries = NULL;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct sysdb_attrs *entry = NULL;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina hash_value_t *values;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina unsigned long num_entries;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina unsigned int i;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina bool hret;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina errno_t ret;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina hret = hash_values(table, &num_entries, &values);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina if (hret != HASH_SUCCESS) {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina ret = EIO;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina goto done;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina if (num_entries > 0) {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina entries = talloc_array(mem_ctx, struct sysdb_attrs *, num_entries);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina if (entries == NULL) {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina ret = ENOMEM;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina goto done;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina for (i = 0; i < num_entries; i++) {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina entry = talloc_get_type(values[i].ptr, struct sysdb_attrs);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina entries[i] = talloc_steal(entries, entry);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina if (_num_entries != NULL) {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina *_num_entries = num_entries;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina if (_entries != NULL) {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina *_entries = entries;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina ret = EOK;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březinadone:

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina talloc_free(values);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina if (ret != EOK) {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina talloc_free(entries);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina return ret;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina}

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozekstatic errno_t sdap_nested_group_hash_insert(hash_table_t *table,

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek const char *entry_key,

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek void *entry_value,

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek bool overwrite,

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek const char *table_name)

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina{

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina hash_key_t key;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina hash_value_t value;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina int hret;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov DEBUG(SSSDBG_TRACE_ALL, "Inserting [%s] into hash table [%s]\n",

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek entry_key, table_name);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina key.type = HASH_KEY_STRING;

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek key.str = talloc_strdup(NULL, entry_key);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina if (key.str == NULL) {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina return ENOMEM;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek if (overwrite == false && hash_has_key(table, &key)) {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina talloc_free(key.str);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina return EEXIST;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina value.type = HASH_VALUE_PTR;

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek value.ptr = entry_value;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina hret = hash_enter(table, &key, &value);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina if (hret != HASH_SUCCESS) {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina talloc_free(key.str);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina return EIO;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina talloc_steal(table, key.str);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina talloc_steal(table, value.ptr);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina return EOK;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina}

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozekstatic errno_t sdap_nested_group_hash_entry(hash_table_t *table,

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek struct sysdb_attrs *entry,

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek const char *table_name)

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek{

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek const char *name = NULL;

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek errno_t ret;

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek ret = sysdb_attrs_get_string(entry, SYSDB_ORIG_DN, &name);

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek if (ret != EOK) {

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek return ret;

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek }

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek return sdap_nested_group_hash_insert(table, name, entry, false, table_name);

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek}

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březinastatic errno_t

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březinasdap_nested_group_hash_user(struct sdap_nested_group_ctx *group_ctx,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct sysdb_attrs *user)

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina{

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina return sdap_nested_group_hash_entry(group_ctx->users, user, "users");

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina}

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březinastatic errno_t

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březinasdap_nested_group_hash_group(struct sdap_nested_group_ctx *group_ctx,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct sysdb_attrs *group)

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina{

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct sdap_attr_map *map = group_ctx->opts->group_map;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina gid_t gid;

bad2fc8133d941e5a6c8d8016c9689e039265c61Lukas Slebodnik errno_t ret;

8280c5213094a72fcaa499dda2f8647246185d45Sumit Bose bool posix_group = true;

8a8618717c99b7331125fa736b45d9155da797d3Jakub Hrozek bool use_id_mapping;

72db1f3ce67b0634f2843088f1198b3b350b72abLukas Slebodnik bool can_find_gid;

bad2fc8133d941e5a6c8d8016c9689e039265c61Lukas Slebodnik bool need_filter;

8280c5213094a72fcaa499dda2f8647246185d45Sumit Bose

bad2fc8133d941e5a6c8d8016c9689e039265c61Lukas Slebodnik ret = sdap_check_ad_group_type(group_ctx->domain, group_ctx->opts,

bad2fc8133d941e5a6c8d8016c9689e039265c61Lukas Slebodnik group, "", &need_filter);

bad2fc8133d941e5a6c8d8016c9689e039265c61Lukas Slebodnik if (ret != EOK) {

bad2fc8133d941e5a6c8d8016c9689e039265c61Lukas Slebodnik return ret;

bad2fc8133d941e5a6c8d8016c9689e039265c61Lukas Slebodnik }

8280c5213094a72fcaa499dda2f8647246185d45Sumit Bose

bad2fc8133d941e5a6c8d8016c9689e039265c61Lukas Slebodnik if (need_filter) {

bad2fc8133d941e5a6c8d8016c9689e039265c61Lukas Slebodnik posix_group = false;

bad2fc8133d941e5a6c8d8016c9689e039265c61Lukas Slebodnik gid = 0;

8280c5213094a72fcaa499dda2f8647246185d45Sumit Bose }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

8a8618717c99b7331125fa736b45d9155da797d3Jakub Hrozek use_id_mapping = sdap_idmap_domain_has_algorithmic_mapping(

8a8618717c99b7331125fa736b45d9155da797d3Jakub Hrozek group_ctx->opts->idmap_ctx,

8a8618717c99b7331125fa736b45d9155da797d3Jakub Hrozek group_ctx->domain->name,

8a8618717c99b7331125fa736b45d9155da797d3Jakub Hrozek group_ctx->domain->domain_id);

8a8618717c99b7331125fa736b45d9155da797d3Jakub Hrozek

72db1f3ce67b0634f2843088f1198b3b350b72abLukas Slebodnik can_find_gid = posix_group && !use_id_mapping;

72db1f3ce67b0634f2843088f1198b3b350b72abLukas Slebodnik if (can_find_gid) {

e3c994b7b779e6d6d6d125ee28d30bd139590f49Jakub Hrozek ret = sysdb_attrs_get_uint32_t(group, map[SDAP_AT_GROUP_GID].sys_name,

e3c994b7b779e6d6d6d125ee28d30bd139590f49Jakub Hrozek &gid);

e3c994b7b779e6d6d6d125ee28d30bd139590f49Jakub Hrozek }

72db1f3ce67b0634f2843088f1198b3b350b72abLukas Slebodnik if (!can_find_gid || ret == ENOENT || (ret == EOK && gid == 0)) {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina DEBUG(SSSDBG_TRACE_ALL,

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov "The group's gid was %s\n", ret == ENOENT ? "missing" : "zero");

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina DEBUG(SSSDBG_TRACE_INTERNAL,

4a9c1047354dbe5a4ed41e5951ae623e3772e113René Genz "Marking group as non-POSIX and setting GID=0!\n");

72db1f3ce67b0634f2843088f1198b3b350b72abLukas Slebodnik

8280c5213094a72fcaa499dda2f8647246185d45Sumit Bose if (ret == ENOENT || !posix_group) {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina ret = sysdb_attrs_add_uint32(group,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina map[SDAP_AT_GROUP_GID].sys_name, 0);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina if (ret != EOK) {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina DEBUG(SSSDBG_CRIT_FAILURE,

4a9c1047354dbe5a4ed41e5951ae623e3772e113René Genz "Failed to add a GID to non-POSIX group!\n");

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina return ret;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina ret = sysdb_attrs_add_bool(group, SYSDB_POSIX, false);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina if (ret != EOK) {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina DEBUG(SSSDBG_OP_FAILURE,

4a9c1047354dbe5a4ed41e5951ae623e3772e113René Genz "Error: Failed to mark group as non-POSIX!\n");

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina return ret;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina } else if (ret != EOK) {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina return ret;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina return sdap_nested_group_hash_entry(group_ctx->groups, group, "groups");

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina}

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozekstatic errno_t sdap_nested_group_external_add(hash_table_t *table,

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek const char *ext_member,

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek const char *parent_group_dn)

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek{

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek hash_key_t key;

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek hash_value_t value;

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek int hret;

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek int ret;

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek struct sdap_external_missing_member *ext_mem;

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek key.type = HASH_KEY_STRING;

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek key.str = discard_const(ext_member);

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek DEBUG(SSSDBG_TRACE_ALL,

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek "Inserting external member [%s] into external members hash table\n",

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek ext_member);

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek hret = hash_lookup(table, &key, &value);

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek switch (hret) {

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek case HASH_ERROR_KEY_NOT_FOUND:

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek ext_mem = talloc_zero(table, struct sdap_external_missing_member);

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek if (ext_mem == NULL) {

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek return ENOMEM;

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek }

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek ext_mem->parent_group_dns = talloc_zero_array(ext_mem,

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek const char *,

c6bda70d6131b5e8cd760ad690fae001d1765547Jakub Hrozek EXTERNAL_MEMBERS_CHUNK);

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek if (ext_mem->parent_group_dns == NULL) {

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek talloc_free(ext_mem);

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek return ENOMEM;

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek }

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek ret = sdap_nested_group_hash_insert(table, ext_member, ext_mem,

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek true, "missing external users");

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek if (ret != EOK) {

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek return ret;

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek }

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek break;

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek case HASH_SUCCESS:

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek ext_mem = talloc_get_type(value.ptr,

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek struct sdap_external_missing_member);

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek if (ext_mem->parent_dn_idx == \

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek talloc_array_length(ext_mem->parent_group_dns)) {

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek ext_mem->parent_group_dns = talloc_realloc(ext_mem,

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek ext_mem->parent_group_dns,

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek const char *,

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek ext_mem->parent_dn_idx + \

c6bda70d6131b5e8cd760ad690fae001d1765547Jakub Hrozek EXTERNAL_MEMBERS_CHUNK);

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek if (ext_mem->parent_group_dns == NULL) {

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek talloc_free(ext_mem);

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek return ENOMEM;

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek }

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek }

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek break;

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek default:

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek return EIO;

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek }

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek ext_mem->parent_group_dns[ext_mem->parent_dn_idx] = \

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek talloc_strdup(ext_mem->parent_group_dns,

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek parent_group_dn);

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek if (ext_mem->parent_group_dns[ext_mem->parent_dn_idx] == NULL) {

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek return ENOMEM;

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek }

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek ext_mem->parent_dn_idx++;

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek return EOK;

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek}

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březinastatic errno_t sdap_nested_group_sysdb_search(struct sss_domain_info *domain,

4c508463be960682cf94b4e5a39be2f8f49067c8Fabiano Fidêncio const char *dn,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina bool user)

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina{

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina static const char *attrs[] = {SYSDB_CACHE_EXPIRE,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina SYSDB_UIDNUM,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina NULL};

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct ldb_message **msgs = NULL;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina size_t count;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina time_t now = time(NULL);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina uint64_t expire;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina uid_t uid;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina errno_t ret;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina if (user) {

4c508463be960682cf94b4e5a39be2f8f49067c8Fabiano Fidêncio ret = sysdb_search_users_by_orig_dn(NULL, domain, dn, attrs,

4c508463be960682cf94b4e5a39be2f8f49067c8Fabiano Fidêncio &count, &msgs);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina } else {

4c508463be960682cf94b4e5a39be2f8f49067c8Fabiano Fidêncio ret = sysdb_search_groups_by_orig_dn(NULL, domain, dn, attrs,

4c508463be960682cf94b4e5a39be2f8f49067c8Fabiano Fidêncio &count, &msgs);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina if (ret != EOK) {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina goto done;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina if (count != 1) {

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov DEBUG(SSSDBG_OP_FAILURE, "More than one entry found?\n");

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina ret = EFAULT;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina goto done;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina /* we found an object with this origDN in the sysdb,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina if (user) {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina uid = ldb_msg_find_attr_as_uint64(msgs[0], SYSDB_UIDNUM, 0);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina if (uid == 0) {

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov DEBUG(SSSDBG_OP_FAILURE, "User with no UID?\n");

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina ret = EINVAL;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina goto done;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina expire = ldb_msg_find_attr_as_uint64(msgs[0], SYSDB_CACHE_EXPIRE, 0);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina if (expire != 0 && expire <= now) {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina /* needs refresh */

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina ret = EAGAIN;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina goto done;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina /* valid object */

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina ret = EOK;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březinadone:

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina talloc_zfree(msgs);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina return ret;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina}

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březinastatic errno_t

05f6866b89f790e25510b7eeca88ded617294011Pavel Březinasdap_nested_group_check_cache(struct sdap_options *opts,

05f6866b89f790e25510b7eeca88ded617294011Pavel Březina struct sss_domain_info *domain,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina const char *member_dn,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina enum sdap_nested_group_dn_type *_type)

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina{

05f6866b89f790e25510b7eeca88ded617294011Pavel Březina struct sdap_domain *sdap_domain = NULL;

05f6866b89f790e25510b7eeca88ded617294011Pavel Březina struct sss_domain_info *member_domain = NULL;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina errno_t ret;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

05f6866b89f790e25510b7eeca88ded617294011Pavel Březina /* determine correct domain of this member */

05f6866b89f790e25510b7eeca88ded617294011Pavel Březina sdap_domain = sdap_domain_get_by_dn(opts, member_dn);

05f6866b89f790e25510b7eeca88ded617294011Pavel Březina member_domain = sdap_domain == NULL ? domain : sdap_domain->dom;

05f6866b89f790e25510b7eeca88ded617294011Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina /* search in users */

630f3ff08c1d17c7900b9bde814922f775ca2703Jakub Hrozek PROBE(SDAP_NESTED_GROUP_SYSDB_SEARCH_USERS_PRE);

4c508463be960682cf94b4e5a39be2f8f49067c8Fabiano Fidêncio ret = sdap_nested_group_sysdb_search_users(member_domain, member_dn);

630f3ff08c1d17c7900b9bde814922f775ca2703Jakub Hrozek PROBE(SDAP_NESTED_GROUP_SYSDB_SEARCH_USERS_POST);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina if (ret == EOK || ret == EAGAIN) {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina /* user found */

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina *_type = SDAP_NESTED_GROUP_DN_USER;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina goto done;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina } else if (ret != ENOENT) {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina /* error */

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina goto done;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina /* search in groups */

630f3ff08c1d17c7900b9bde814922f775ca2703Jakub Hrozek PROBE(SDAP_NESTED_GROUP_SYSDB_SEARCH_GROUPS_PRE);

4c508463be960682cf94b4e5a39be2f8f49067c8Fabiano Fidêncio ret = sdap_nested_group_sysdb_search_groups(member_domain, member_dn);

630f3ff08c1d17c7900b9bde814922f775ca2703Jakub Hrozek PROBE(SDAP_NESTED_GROUP_SYSDB_SEARCH_GROUPS_POST);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina if (ret == EOK || ret == EAGAIN) {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina /* group found */

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina *_type = SDAP_NESTED_GROUP_DN_GROUP;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina goto done;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina } else if (ret != ENOENT) {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina /* error */

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina goto done;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina /* not found in the sysdb */

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina ret = ENOENT;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březinadone:

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina return ret;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina}

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

55206e06bcfa0322cd817d34457e330545d6b877Jakub Hrozekstatic bool

55206e06bcfa0322cd817d34457e330545d6b877Jakub Hrozeksdap_nested_member_is_ent(struct sdap_nested_group_ctx *group_ctx,

55206e06bcfa0322cd817d34457e330545d6b877Jakub Hrozek const char *dn, char **filter, bool is_user)

55206e06bcfa0322cd817d34457e330545d6b877Jakub Hrozek{

55206e06bcfa0322cd817d34457e330545d6b877Jakub Hrozek struct sdap_domain *sditer = NULL;

55206e06bcfa0322cd817d34457e330545d6b877Jakub Hrozek bool ret = false;

55206e06bcfa0322cd817d34457e330545d6b877Jakub Hrozek struct sdap_search_base **search_bases;

55206e06bcfa0322cd817d34457e330545d6b877Jakub Hrozek

55206e06bcfa0322cd817d34457e330545d6b877Jakub Hrozek DLIST_FOR_EACH(sditer, group_ctx->opts->sdom) {

55206e06bcfa0322cd817d34457e330545d6b877Jakub Hrozek search_bases = is_user ? sditer->user_search_bases : \

55206e06bcfa0322cd817d34457e330545d6b877Jakub Hrozek sditer->group_search_bases;

55206e06bcfa0322cd817d34457e330545d6b877Jakub Hrozek

55206e06bcfa0322cd817d34457e330545d6b877Jakub Hrozek ret = sss_ldap_dn_in_search_bases(group_ctx, dn, search_bases,

55206e06bcfa0322cd817d34457e330545d6b877Jakub Hrozek filter);

55206e06bcfa0322cd817d34457e330545d6b877Jakub Hrozek if (ret == true) {

55206e06bcfa0322cd817d34457e330545d6b877Jakub Hrozek break;

55206e06bcfa0322cd817d34457e330545d6b877Jakub Hrozek }

55206e06bcfa0322cd817d34457e330545d6b877Jakub Hrozek }

55206e06bcfa0322cd817d34457e330545d6b877Jakub Hrozek

55206e06bcfa0322cd817d34457e330545d6b877Jakub Hrozek return ret;

55206e06bcfa0322cd817d34457e330545d6b877Jakub Hrozek}

55206e06bcfa0322cd817d34457e330545d6b877Jakub Hrozek

55206e06bcfa0322cd817d34457e330545d6b877Jakub Hrozekstatic inline bool

55206e06bcfa0322cd817d34457e330545d6b877Jakub Hrozeksdap_nested_member_is_user(struct sdap_nested_group_ctx *group_ctx,

55206e06bcfa0322cd817d34457e330545d6b877Jakub Hrozek const char *dn, char **filter)

55206e06bcfa0322cd817d34457e330545d6b877Jakub Hrozek{

55206e06bcfa0322cd817d34457e330545d6b877Jakub Hrozek return sdap_nested_member_is_ent(group_ctx, dn, filter, true);

55206e06bcfa0322cd817d34457e330545d6b877Jakub Hrozek}

55206e06bcfa0322cd817d34457e330545d6b877Jakub Hrozek

55206e06bcfa0322cd817d34457e330545d6b877Jakub Hrozekstatic inline bool

55206e06bcfa0322cd817d34457e330545d6b877Jakub Hrozeksdap_nested_member_is_group(struct sdap_nested_group_ctx *group_ctx,

55206e06bcfa0322cd817d34457e330545d6b877Jakub Hrozek const char *dn, char **filter)

55206e06bcfa0322cd817d34457e330545d6b877Jakub Hrozek{

55206e06bcfa0322cd817d34457e330545d6b877Jakub Hrozek return sdap_nested_member_is_ent(group_ctx, dn, filter, false);

55206e06bcfa0322cd817d34457e330545d6b877Jakub Hrozek}

55206e06bcfa0322cd817d34457e330545d6b877Jakub Hrozek

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březinastatic errno_t

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březinasdap_nested_group_split_members(TALLOC_CTX *mem_ctx,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct sdap_nested_group_ctx *group_ctx,

beec1ee5799570f34a51ea57674c7291c15f7022Jakub Hrozek int threshold,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina int nesting_level,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct ldb_message_element *members,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct sdap_nested_group_member **_missing,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina int *_num_missing,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina int *_num_groups)

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina{

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina TALLOC_CTX *tmp_ctx = NULL;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct sdap_nested_group_member *missing = NULL;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina enum sdap_nested_group_dn_type type;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina char *dn = NULL;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina char *user_filter = NULL;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina char *group_filter = NULL;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina int num_missing = 0;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina int num_groups = 0;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina hash_key_t key;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina bool bret;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina bool is_user;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina bool is_group;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina errno_t ret;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina int i;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek if (members == NULL) {

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek *_missing = NULL;

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek *_num_missing = 0;

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek *_num_groups = 0;

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek return EOK;

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek }

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina tmp_ctx = talloc_new(NULL);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina if (tmp_ctx == NULL) {

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov DEBUG(SSSDBG_CRIT_FAILURE, "talloc_new() failed\n");

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina return ENOMEM;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina missing = talloc_zero_array(tmp_ctx, struct sdap_nested_group_member,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina members->num_values);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina if (missing == NULL) {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina ret = ENOMEM;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina goto done;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina /* create list of missing members

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina for (i = 0; i < members->num_values; i++) {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina dn = (char*)members->values[i].data;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina type = SDAP_NESTED_GROUP_DN_UNKNOWN;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina /* check hash tables */

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina key.type = HASH_KEY_STRING;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina key.str = dn;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina bret = hash_has_key(group_ctx->users, &key);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina if (bret) {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina continue;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina bret = hash_has_key(group_ctx->groups, &key);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina if (bret) {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina continue;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina /* check sysdb */

630f3ff08c1d17c7900b9bde814922f775ca2703Jakub Hrozek PROBE(SDAP_NESTED_GROUP_CHECK_CACHE_PRE);

05f6866b89f790e25510b7eeca88ded617294011Pavel Březina ret = sdap_nested_group_check_cache(group_ctx->opts, group_ctx->domain,

05f6866b89f790e25510b7eeca88ded617294011Pavel Březina dn, &type);

630f3ff08c1d17c7900b9bde814922f775ca2703Jakub Hrozek PROBE(SDAP_NESTED_GROUP_CHECK_CACHE_POST);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina if (ret == EOK) {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina /* found and valid */

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov DEBUG(SSSDBG_TRACE_ALL, "[%s] found in cache, skipping\n", dn);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina continue;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina } else if (ret != EAGAIN && ret != ENOENT) {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina /* error */

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina goto done;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina /* try to determine type by dn */

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina if (type == SDAP_NESTED_GROUP_DN_UNKNOWN) {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina /* user */

55206e06bcfa0322cd817d34457e330545d6b877Jakub Hrozek is_user = sdap_nested_member_is_user(group_ctx, dn,

55206e06bcfa0322cd817d34457e330545d6b877Jakub Hrozek &user_filter);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

55206e06bcfa0322cd817d34457e330545d6b877Jakub Hrozek is_group = sdap_nested_member_is_group(group_ctx, dn,

55206e06bcfa0322cd817d34457e330545d6b877Jakub Hrozek &group_filter);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina if (is_user && is_group) {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina /* search bases overlap */

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov DEBUG(SSSDBG_TRACE_ALL, "[%s] is unknown object\n", dn);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina type = SDAP_NESTED_GROUP_DN_UNKNOWN;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina } else if (is_user) {

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov DEBUG(SSSDBG_TRACE_ALL, "[%s] is a user\n", dn);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina type = SDAP_NESTED_GROUP_DN_USER;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina } else if (is_group) {

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov DEBUG(SSSDBG_TRACE_ALL, "[%s] is a group\n", dn);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina type = SDAP_NESTED_GROUP_DN_GROUP;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina } else {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina /* dn is outside search bases */

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov DEBUG(SSSDBG_TRACE_ALL, "[%s] is out of scope of configured "

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov "search bases, skipping\n", dn);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina continue;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina /* check nesting level */

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina if (type == SDAP_NESTED_GROUP_DN_GROUP) {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina if (nesting_level >= group_ctx->max_nesting_level) {

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov DEBUG(SSSDBG_TRACE_ALL, "[%s] is outside nesting limit "

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov "(level %d), skipping\n", dn, nesting_level);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina talloc_zfree(user_filter);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina talloc_zfree(group_filter);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina continue;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina missing[num_missing].dn = talloc_strdup(missing, dn);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina if (missing[num_missing].dn == NULL) {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina ret = ENOMEM;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina goto done;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina missing[num_missing].type = type;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina missing[num_missing].user_filter = talloc_steal(missing, user_filter);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina missing[num_missing].group_filter = talloc_steal(missing, group_filter);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina num_missing++;

beec1ee5799570f34a51ea57674c7291c15f7022Jakub Hrozek if (threshold > 0 && num_missing > threshold) {

beec1ee5799570f34a51ea57674c7291c15f7022Jakub Hrozek if (_num_missing) {

beec1ee5799570f34a51ea57674c7291c15f7022Jakub Hrozek *_num_missing = num_missing;

beec1ee5799570f34a51ea57674c7291c15f7022Jakub Hrozek }

beec1ee5799570f34a51ea57674c7291c15f7022Jakub Hrozek

beec1ee5799570f34a51ea57674c7291c15f7022Jakub Hrozek ret = ERR_DEREF_THRESHOLD;

beec1ee5799570f34a51ea57674c7291c15f7022Jakub Hrozek goto done;

beec1ee5799570f34a51ea57674c7291c15f7022Jakub Hrozek }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina if (type != SDAP_NESTED_GROUP_DN_USER) {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina num_groups++;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina missing = talloc_realloc(mem_ctx, missing,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct sdap_nested_group_member, num_missing);

759fd29a597533a3f5489246c0d2b658d8bee417Pavel Reichl /* talloc_realloc behaves as talloc_free if 3rd parameter (count) is 0,

759fd29a597533a3f5489246c0d2b658d8bee417Pavel Reichl if (missing == NULL && num_missing > 0) {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina ret = ENOMEM;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina goto done;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina if (_missing) {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina *_missing = talloc_steal(mem_ctx, missing);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina if (_num_missing) {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina *_num_missing = num_missing;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina if (_num_groups) {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina *_num_groups = num_groups;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina ret = EOK;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březinadone:

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina talloc_free(tmp_ctx);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina return ret;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina}

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozekstatic errno_t

b5137d2fe9223f71740c2a9be35d7762f136c41aLukas Slebodniksdap_nested_group_add_ext_members(struct sdap_nested_group_ctx *group_ctx,

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek struct sysdb_attrs *group,

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek struct ldb_message_element *ext_members)

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek{

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek errno_t ret;

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek const char *ext_member_attr;

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek const char *orig_dn;

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek if (ext_members == NULL) {

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek return EOK;

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek }

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek ret = sysdb_attrs_get_string(group, SYSDB_ORIG_DN, &orig_dn);

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek if (ret != EOK) {

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek DEBUG(SSSDBG_CRIT_FAILURE, "A group with no originalDN!?!\n");

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek return ret;

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek }

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek for (size_t i = 0; i < ext_members->num_values; i++) {

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek ext_member_attr = (const char *) ext_members->values[i].data;

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek ret = sdap_nested_group_external_add(group_ctx->missing_external,

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek ext_member_attr,

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek orig_dn);

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek if (ret != EOK) {

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek DEBUG(SSSDBG_CRIT_FAILURE,

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek "Cannot add %s into external members [%d]: %s\n",

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek ext_member_attr, ret, sss_strerror(ret));

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek return ret;

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek }

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek }

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek return EOK;

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek}

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozekstatic struct ldb_message_element *

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozeksdap_nested_group_ext_members(struct sdap_options *opts,

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek struct sysdb_attrs *group)

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek{

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek errno_t ret;

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek struct ldb_message_element *ext_members = NULL;

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek if (opts->ext_ctx == NULL) {

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek return NULL;

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek }

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek ret = sysdb_attrs_get_el_ext(group,

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek opts->group_map[SDAP_AT_GROUP_EXT_MEMBER].sys_name,

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek false, &ext_members);

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek if (ret != EOK && ret != ENOENT) {

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek DEBUG(SSSDBG_CRIT_FAILURE, "Unable to retrieve external member list "

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek "[%d]: %s\n", ret, sss_strerror(ret));

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek }

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek return ext_members;

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek}

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březinastruct sdap_nested_group_state {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct sdap_nested_group_ctx *group_ctx;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina};

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březinastatic void sdap_nested_group_done(struct tevent_req *subreq);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

749cfb5d3270b5daf389d51a0dbd3fd2aec6e05dJakub Hrozekstruct tevent_req *

749cfb5d3270b5daf389d51a0dbd3fd2aec6e05dJakub Hrozeksdap_nested_group_send(TALLOC_CTX *mem_ctx,

749cfb5d3270b5daf389d51a0dbd3fd2aec6e05dJakub Hrozek struct tevent_context *ev,

749cfb5d3270b5daf389d51a0dbd3fd2aec6e05dJakub Hrozek struct sdap_domain *sdom,

749cfb5d3270b5daf389d51a0dbd3fd2aec6e05dJakub Hrozek struct sdap_options *opts,

749cfb5d3270b5daf389d51a0dbd3fd2aec6e05dJakub Hrozek struct sdap_handle *sh,

749cfb5d3270b5daf389d51a0dbd3fd2aec6e05dJakub Hrozek struct sysdb_attrs *group)

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina{

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct sdap_nested_group_state *state = NULL;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct tevent_req *req = NULL;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct tevent_req *subreq = NULL;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina errno_t ret;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina int i;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

630f3ff08c1d17c7900b9bde814922f775ca2703Jakub Hrozek PROBE(SDAP_NESTED_GROUP_SEND);

630f3ff08c1d17c7900b9bde814922f775ca2703Jakub Hrozek

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina req = tevent_req_create(mem_ctx, &state, struct sdap_nested_group_state);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina if (req == NULL) {

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov DEBUG(SSSDBG_CRIT_FAILURE, "tevent_req_create() failed\n");

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina return NULL;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina /* create main nested group context */

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina state->group_ctx = talloc_zero(state, struct sdap_nested_group_ctx);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina if (state->group_ctx == NULL) {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina ret = ENOMEM;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina goto immediately;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina ret = sss_hash_create(state->group_ctx, 32, &state->group_ctx->users);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina if (ret != EOK) {

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov DEBUG(SSSDBG_CRIT_FAILURE, "Unable to create hash table [%d]: %s\n",

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov ret, strerror(ret));

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina goto immediately;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina ret = sss_hash_create(state->group_ctx, 32, &state->group_ctx->groups);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina if (ret != EOK) {

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov DEBUG(SSSDBG_CRIT_FAILURE, "Unable to create hash table [%d]: %s\n",

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov ret, strerror(ret));

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina goto immediately;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek ret = sss_hash_create(state->group_ctx, 32,

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek &state->group_ctx->missing_external);

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek if (ret != EOK) {

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek DEBUG(SSSDBG_CRIT_FAILURE, "Unable to create hash table [%d]: %s\n",

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek ret, strerror(ret));

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek goto immediately;

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek }

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina state->group_ctx->try_deref = true;

4a9c1047354dbe5a4ed41e5951ae623e3772e113René Genz state->group_ctx->deref_threshold = dp_opt_get_int(opts->basic,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina SDAP_DEREF_THRESHOLD);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina state->group_ctx->max_nesting_level = dp_opt_get_int(opts->basic,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina SDAP_NESTING_LEVEL);

749cfb5d3270b5daf389d51a0dbd3fd2aec6e05dJakub Hrozek state->group_ctx->domain = sdom->dom;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina state->group_ctx->opts = opts;

749cfb5d3270b5daf389d51a0dbd3fd2aec6e05dJakub Hrozek state->group_ctx->user_search_bases = sdom->user_search_bases;

749cfb5d3270b5daf389d51a0dbd3fd2aec6e05dJakub Hrozek state->group_ctx->group_search_bases = sdom->group_search_bases;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina state->group_ctx->sh = sh;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina state->group_ctx->try_deref = sdap_has_deref_support(sh, opts);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina /* disable deref if threshold <= 0 */

4a9c1047354dbe5a4ed41e5951ae623e3772e113René Genz if (state->group_ctx->deref_threshold <= 0) {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina state->group_ctx->try_deref = false;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina /* if any search base contains filter, disable dereference. */

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina if (state->group_ctx->try_deref) {

749cfb5d3270b5daf389d51a0dbd3fd2aec6e05dJakub Hrozek for (i = 0; opts->sdom->user_search_bases[i] != NULL; i++) {

749cfb5d3270b5daf389d51a0dbd3fd2aec6e05dJakub Hrozek if (opts->sdom->user_search_bases[i]->filter != NULL) {

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov DEBUG(SSSDBG_TRACE_FUNC, "User search base contains filter, "

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov "dereference will be disabled\n");

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina state->group_ctx->try_deref = false;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina break;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina if (state->group_ctx->try_deref) {

749cfb5d3270b5daf389d51a0dbd3fd2aec6e05dJakub Hrozek for (i = 0; opts->sdom->group_search_bases[i] != NULL; i++) {

749cfb5d3270b5daf389d51a0dbd3fd2aec6e05dJakub Hrozek if (opts->sdom->group_search_bases[i]->filter != NULL) {

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov DEBUG(SSSDBG_TRACE_FUNC, "Group search base contains filter, "

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov "dereference will be disabled\n");

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina state->group_ctx->try_deref = false;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina break;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina /* insert initial group into hash table */

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina ret = sdap_nested_group_hash_group(state->group_ctx, group);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina if (ret != EOK) {

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov DEBUG(SSSDBG_CRIT_FAILURE, "Unable to insert group into hash table "

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov "[%d]: %s\n", ret, strerror(ret));

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina goto immediately;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina /* resolve group */

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina subreq = sdap_nested_group_process_send(state, ev, state->group_ctx,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina 0, group);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina if (subreq == NULL) {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina ret = ENOMEM;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina goto immediately;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina tevent_req_set_callback(subreq, sdap_nested_group_done, req);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina return req;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březinaimmediately:

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina if (ret == EOK) {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina tevent_req_done(req);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina } else {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina tevent_req_error(req, ret);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina tevent_req_post(req, ev);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina return req;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina}

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březinastatic void sdap_nested_group_done(struct tevent_req *subreq)

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina{

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct tevent_req *req = NULL;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina errno_t ret;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina req = tevent_req_callback_data(subreq, struct tevent_req);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina ret = sdap_nested_group_process_recv(subreq);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina talloc_zfree(subreq);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina if (ret != EOK) {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina tevent_req_error(req, ret);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina return;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina tevent_req_done(req);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina}

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březinaerrno_t sdap_nested_group_recv(TALLOC_CTX *mem_ctx,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct tevent_req *req,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina unsigned long *_num_users,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct sysdb_attrs ***_users,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina unsigned long *_num_groups,

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek struct sysdb_attrs ***_groups,

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek hash_table_t **_missing_external)

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina{

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct sdap_nested_group_state *state = NULL;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct sysdb_attrs **users = NULL;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct sysdb_attrs **groups = NULL;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina unsigned long num_users;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina unsigned long num_groups;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina errno_t ret;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina state = tevent_req_data(req, struct sdap_nested_group_state);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

630f3ff08c1d17c7900b9bde814922f775ca2703Jakub Hrozek PROBE(SDAP_NESTED_GROUP_RECV);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina TEVENT_REQ_RETURN_ON_ERROR(req);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina ret = sdap_nested_group_extract_hash_table(state, state->group_ctx->users,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina &num_users, &users);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina if (ret != EOK) {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina return ret;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov DEBUG(SSSDBG_TRACE_FUNC, "%lu users found in the hash table\n",

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov num_users);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina ret = sdap_nested_group_extract_hash_table(state, state->group_ctx->groups,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina &num_groups, &groups);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina if (ret != EOK) {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina return ret;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov DEBUG(SSSDBG_TRACE_FUNC, "%lu groups found in the hash table\n",

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov num_groups);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina if (_num_users != NULL) {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina *_num_users = num_users;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina if (_users != NULL) {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina *_users = talloc_steal(mem_ctx, users);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina if (_num_groups!= NULL) {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina *_num_groups = num_groups;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina if (_groups != NULL) {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina *_groups = talloc_steal(mem_ctx, groups);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek if (_missing_external) {

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek *_missing_external = talloc_steal(mem_ctx,

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek state->group_ctx->missing_external);

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek }

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina return EOK;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina}

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březinastruct sdap_nested_group_process_state {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct tevent_context *ev;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct sdap_nested_group_ctx *group_ctx;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct sdap_nested_group_member *missing;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina int num_missing_total;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina int num_missing_groups;

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek struct ldb_message_element *ext_members;

beec1ee5799570f34a51ea57674c7291c15f7022Jakub Hrozek struct ldb_message_element *members;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina int nesting_level;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina char *group_dn;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina bool deref;

beec1ee5799570f34a51ea57674c7291c15f7022Jakub Hrozek bool deref_shortcut;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina};

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březinastatic void sdap_nested_group_process_done(struct tevent_req *subreq);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březinastatic struct tevent_req *

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březinasdap_nested_group_process_send(TALLOC_CTX *mem_ctx,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct tevent_context *ev,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct sdap_nested_group_ctx *group_ctx,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina int nesting_level,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct sysdb_attrs *group)

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina{

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct sdap_nested_group_process_state *state = NULL;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct sdap_attr_map *group_map = NULL;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct tevent_req *req = NULL;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct tevent_req *subreq = NULL;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina const char *orig_dn = NULL;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina errno_t ret;

beec1ee5799570f34a51ea57674c7291c15f7022Jakub Hrozek int split_threshold;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina req = tevent_req_create(mem_ctx, &state,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct sdap_nested_group_process_state);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina if (req == NULL) {

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov DEBUG(SSSDBG_CRIT_FAILURE, "tevent_req_create() failed\n");

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina return NULL;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina state->ev = ev;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina state->group_ctx = group_ctx;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina state->nesting_level = nesting_level;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina group_map = state->group_ctx->opts->group_map;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina /* get original dn */

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina ret = sysdb_attrs_get_string(group, SYSDB_ORIG_DN, &orig_dn);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina if (ret != EOK) {

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov DEBUG(SSSDBG_CRIT_FAILURE, "Unable to retrieve original dn "

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov "[%d]: %s\n", ret, strerror(ret));

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina goto immediately;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina state->group_dn = talloc_strdup(state, orig_dn);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina if (state->group_dn == NULL) {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina ret = ENOMEM;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina goto immediately;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov DEBUG(SSSDBG_TRACE_INTERNAL, "About to process group [%s]\n", orig_dn);

630f3ff08c1d17c7900b9bde814922f775ca2703Jakub Hrozek PROBE(SDAP_NESTED_GROUP_PROCESS_SEND, state->group_dn);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek /* get member list, both direct and external */

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek state->ext_members = sdap_nested_group_ext_members(state->group_ctx->opts,

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek group);

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek

2efc26d6e54b68a079e8f11fa24d04867d432476Jakub Hrozek ret = sysdb_attrs_get_el_ext(group, group_map[SDAP_AT_GROUP_MEMBER].sys_name,

beec1ee5799570f34a51ea57674c7291c15f7022Jakub Hrozek false, &state->members);

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek if (ret == ENOENT && state->ext_members == NULL) {

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek ret = EOK; /* no members, direct or external */

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina goto immediately;

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek } else if (ret != EOK && ret != ENOENT) {

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov DEBUG(SSSDBG_CRIT_FAILURE, "Unable to retrieve member list "

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov "[%d]: %s\n", ret, strerror(ret));

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina goto immediately;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

beec1ee5799570f34a51ea57674c7291c15f7022Jakub Hrozek split_threshold = state->group_ctx->try_deref ? \

4a9c1047354dbe5a4ed41e5951ae623e3772e113René Genz state->group_ctx->deref_threshold : \

beec1ee5799570f34a51ea57674c7291c15f7022Jakub Hrozek -1;

beec1ee5799570f34a51ea57674c7291c15f7022Jakub Hrozek

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina /* get members that need to be refreshed */

630f3ff08c1d17c7900b9bde814922f775ca2703Jakub Hrozek PROBE(SDAP_NESTED_GROUP_PROCESS_SPLIT_PRE);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina ret = sdap_nested_group_split_members(state, state->group_ctx,

beec1ee5799570f34a51ea57674c7291c15f7022Jakub Hrozek split_threshold,

beec1ee5799570f34a51ea57674c7291c15f7022Jakub Hrozek state->nesting_level,

beec1ee5799570f34a51ea57674c7291c15f7022Jakub Hrozek state->members,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina &state->missing,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina &state->num_missing_total,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina &state->num_missing_groups);

630f3ff08c1d17c7900b9bde814922f775ca2703Jakub Hrozek PROBE(SDAP_NESTED_GROUP_PROCESS_SPLIT_POST);

beec1ee5799570f34a51ea57674c7291c15f7022Jakub Hrozek if (ret == ERR_DEREF_THRESHOLD) {

beec1ee5799570f34a51ea57674c7291c15f7022Jakub Hrozek DEBUG(SSSDBG_TRACE_FUNC,

beec1ee5799570f34a51ea57674c7291c15f7022Jakub Hrozek "More members were missing than the deref threshold\n");

beec1ee5799570f34a51ea57674c7291c15f7022Jakub Hrozek state->deref_shortcut = true;

beec1ee5799570f34a51ea57674c7291c15f7022Jakub Hrozek } else if (ret != EOK) {

2efc26d6e54b68a079e8f11fa24d04867d432476Jakub Hrozek DEBUG(SSSDBG_CRIT_FAILURE, "Unable to split member list "

2efc26d6e54b68a079e8f11fa24d04867d432476Jakub Hrozek "[%d]: %s\n", ret, sss_strerror(ret));

2efc26d6e54b68a079e8f11fa24d04867d432476Jakub Hrozek goto immediately;

2efc26d6e54b68a079e8f11fa24d04867d432476Jakub Hrozek }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

b5137d2fe9223f71740c2a9be35d7762f136c41aLukas Slebodnik ret = sdap_nested_group_add_ext_members(state->group_ctx,

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek group,

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek state->ext_members);

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek if (ret != EOK) {

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek DEBUG(SSSDBG_CRIT_FAILURE, "Unable to split external member list "

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek "[%d]: %s\n", ret, sss_strerror(ret));

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek goto immediately;

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek if (state->num_missing_total == 0

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek && hash_count(state->group_ctx->missing_external) == 0) {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina ret = EOK; /* we're done */

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina goto immediately;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek /* If there are only indirect members of the group, it's still safe to

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek

beec1ee5799570f34a51ea57674c7291c15f7022Jakub Hrozek DEBUG(SSSDBG_TRACE_INTERNAL,

beec1ee5799570f34a51ea57674c7291c15f7022Jakub Hrozek "Looking up %d/%d members of group [%s]\n",

beec1ee5799570f34a51ea57674c7291c15f7022Jakub Hrozek state->num_missing_total,

beec1ee5799570f34a51ea57674c7291c15f7022Jakub Hrozek state->members ? state->members->num_values : 0,

beec1ee5799570f34a51ea57674c7291c15f7022Jakub Hrozek orig_dn);

c32266e79f9d4bebd0c31eaa8d6fa26050e7fb3eJakub Hrozek

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina /* process members */

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina if (group_ctx->try_deref

4a9c1047354dbe5a4ed41e5951ae623e3772e113René Genz && state->num_missing_total > group_ctx->deref_threshold) {

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov DEBUG(SSSDBG_TRACE_INTERNAL, "Dereferencing members of group [%s]\n",

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov orig_dn);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina state->deref = true;

beec1ee5799570f34a51ea57674c7291c15f7022Jakub Hrozek subreq = sdap_nested_group_deref_send(state, ev, group_ctx,

beec1ee5799570f34a51ea57674c7291c15f7022Jakub Hrozek state->members, orig_dn,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina state->nesting_level);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina } else {

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov DEBUG(SSSDBG_TRACE_INTERNAL, "Members of group [%s] will be "

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov "processed individually\n", orig_dn);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina state->deref = false;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina subreq = sdap_nested_group_single_send(state, ev, group_ctx,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina state->missing,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina state->num_missing_total,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina state->num_missing_groups,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina state->nesting_level);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina if (subreq == NULL) {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina ret = ENOMEM;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina goto immediately;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina tevent_req_set_callback(subreq, sdap_nested_group_process_done, req);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina return req;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březinaimmediately:

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina if (ret == EOK) {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina tevent_req_done(req);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina } else {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina tevent_req_error(req, ret);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina tevent_req_post(req, ev);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina return req;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina}

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březinastatic void sdap_nested_group_process_done(struct tevent_req *subreq)

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina{

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct sdap_nested_group_process_state *state = NULL;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct tevent_req *req = NULL;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina errno_t ret;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina req = tevent_req_callback_data(subreq, struct tevent_req);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina state = tevent_req_data(req, struct sdap_nested_group_process_state);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina if (state->deref) {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina ret = sdap_nested_group_deref_recv(subreq);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina talloc_zfree(subreq);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina if (ret == ENOTSUP) {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina /* dereference is not supported, try again without dereference */

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina state->group_ctx->try_deref = false;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina state->deref = false;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov DEBUG(SSSDBG_TRACE_INTERNAL, "Members of group [%s] will be "

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov "processed individually\n", state->group_dn);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

beec1ee5799570f34a51ea57674c7291c15f7022Jakub Hrozek if (state->deref_shortcut == true) {

beec1ee5799570f34a51ea57674c7291c15f7022Jakub Hrozek /* If we previously short-cut dereference, we need to split the

beec1ee5799570f34a51ea57674c7291c15f7022Jakub Hrozek PROBE(SDAP_NESTED_GROUP_PROCESS_SPLIT_PRE);

beec1ee5799570f34a51ea57674c7291c15f7022Jakub Hrozek ret = sdap_nested_group_split_members(state, state->group_ctx,

beec1ee5799570f34a51ea57674c7291c15f7022Jakub Hrozek -1,

beec1ee5799570f34a51ea57674c7291c15f7022Jakub Hrozek state->nesting_level,

beec1ee5799570f34a51ea57674c7291c15f7022Jakub Hrozek state->members,

beec1ee5799570f34a51ea57674c7291c15f7022Jakub Hrozek &state->missing,

beec1ee5799570f34a51ea57674c7291c15f7022Jakub Hrozek &state->num_missing_total,

beec1ee5799570f34a51ea57674c7291c15f7022Jakub Hrozek &state->num_missing_groups);

beec1ee5799570f34a51ea57674c7291c15f7022Jakub Hrozek PROBE(SDAP_NESTED_GROUP_PROCESS_SPLIT_POST);

beec1ee5799570f34a51ea57674c7291c15f7022Jakub Hrozek if (ret != EOK) {

beec1ee5799570f34a51ea57674c7291c15f7022Jakub Hrozek DEBUG(SSSDBG_CRIT_FAILURE, "Unable to split member list "

beec1ee5799570f34a51ea57674c7291c15f7022Jakub Hrozek "[%d]: %s\n",

beec1ee5799570f34a51ea57674c7291c15f7022Jakub Hrozek ret, sss_strerror(ret));

beec1ee5799570f34a51ea57674c7291c15f7022Jakub Hrozek goto done;

beec1ee5799570f34a51ea57674c7291c15f7022Jakub Hrozek }

beec1ee5799570f34a51ea57674c7291c15f7022Jakub Hrozek }

beec1ee5799570f34a51ea57674c7291c15f7022Jakub Hrozek

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina subreq = sdap_nested_group_single_send(state,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina state->ev,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina state->group_ctx,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina state->missing,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina state->num_missing_total,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina state->num_missing_groups,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina state->nesting_level);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina if (subreq == NULL) {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina ret = ENOMEM;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina goto done;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina tevent_req_set_callback(subreq, sdap_nested_group_process_done,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina req);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina ret = EAGAIN;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina } else {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina ret = sdap_nested_group_single_recv(subreq);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina talloc_zfree(subreq);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březinadone:

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina if (ret == EOK) {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina tevent_req_done(req);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina } else if (ret != EAGAIN) {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina tevent_req_error(req, ret);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina}

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březinastatic errno_t sdap_nested_group_process_recv(struct tevent_req *req)

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina{

630f3ff08c1d17c7900b9bde814922f775ca2703Jakub Hrozek#ifdef HAVE_SYSTEMTAP

630f3ff08c1d17c7900b9bde814922f775ca2703Jakub Hrozek struct sdap_nested_group_process_state *state = NULL;

630f3ff08c1d17c7900b9bde814922f775ca2703Jakub Hrozek state = tevent_req_data(req, struct sdap_nested_group_process_state);

630f3ff08c1d17c7900b9bde814922f775ca2703Jakub Hrozek

630f3ff08c1d17c7900b9bde814922f775ca2703Jakub Hrozek PROBE(SDAP_NESTED_GROUP_PROCESS_RECV, state->group_dn);

630f3ff08c1d17c7900b9bde814922f775ca2703Jakub Hrozek#endif

630f3ff08c1d17c7900b9bde814922f775ca2703Jakub Hrozek

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina TEVENT_REQ_RETURN_ON_ERROR(req);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina return EOK;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina}

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březinastruct sdap_nested_group_recurse_state {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct tevent_context *ev;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct sdap_nested_group_ctx *group_ctx;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct sysdb_attrs **groups;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina int num_groups;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina int index;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina int nesting_level;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina};

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březinastatic errno_t sdap_nested_group_recurse_step(struct tevent_req *req);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březinastatic void sdap_nested_group_recurse_done(struct tevent_req *subreq);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březinastatic struct tevent_req *

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březinasdap_nested_group_recurse_send(TALLOC_CTX *mem_ctx,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct tevent_context *ev,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct sdap_nested_group_ctx *group_ctx,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct sysdb_attrs **nested_groups,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina int num_groups,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina int nesting_level)

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina{

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct sdap_nested_group_recurse_state *state = NULL;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct tevent_req *req = NULL;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina errno_t ret;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina req = tevent_req_create(mem_ctx, &state,

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct sdap_nested_group_recurse_state);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina if (req == NULL) {

a3c8390d19593b1e5277d95bfb4ab206d4785150Nikolai Kondrashov DEBUG(SSSDBG_CRIT_FAILURE, "tevent_req_create() failed\n");

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina return NULL;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina state->ev = ev;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina state->group_ctx = group_ctx;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina state->groups = nested_groups;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina state->num_groups = num_groups;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina state->index = 0;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina state->nesting_level = nesting_level;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina /* process each group individually */

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina ret = sdap_nested_group_recurse_step(req);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina if (ret != EAGAIN) {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina goto immediately;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina return req;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březinaimmediately:

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina if (ret == EOK) {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina tevent_req_done(req);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina } else {

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina tevent_req_error(req, ret);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina }

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina tevent_req_post(req, ev);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina return req;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina}

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březinastatic errno_t sdap_nested_group_recurse_step(struct tevent_req *req)

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina{

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct sdap_nested_group_recurse_state *state = NULL;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina struct tevent_req *subreq = NULL;

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina state = tevent_req_data(req, struct sdap_nested_group_recurse_state);

02b2c042d0c2ace289583c8e5e4ead1eff481376Pavel Březina