cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek#include "config.h"

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek#include <stdio.h>

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek#include <talloc.h>

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek#include <jansson.h>

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek#include "util/util.h"

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek#include "util/crypto/sss_crypto.h"

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek#include "util/tev_curl.h"

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek#include "responder/kcm/kcmsrv_ccache_pvt.h"

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek#include "responder/kcm/kcmsrv_ccache_be.h"

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek#ifndef SSSD_SECRETS_SOCKET

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek#define SSSD_SECRETS_SOCKET VARDIR"/run/secrets.socket"

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek#endif /* SSSD_SECRETS_SOCKET */

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek#ifndef SEC_TIMEOUT

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek#define SEC_TIMEOUT 5

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek#endif /* SEC_TIMEOUT */

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek#define MAX_CC_NUM 99999

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek#ifndef json_array_foreach

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek#define json_array_foreach(array, idx, value) \

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek for(idx = 0; \

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek idx < json_array_size(array) && (value = json_array_get(array, idx)); \

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek idx++)

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek#endif

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekstatic const char *find_by_name(const char **sec_key_list,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek const char *name)

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek{

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek const char *sec_name = NULL;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (sec_key_list == NULL) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return NULL;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek for (int i = 0; sec_key_list[i]; i++) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (sec_key_match_name(sec_key_list[i], name)) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek sec_name = sec_key_list[i];

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek break;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return sec_name;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek}

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekstatic const char *find_by_uuid(const char **sec_key_list,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek uuid_t uuid)

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek{

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek const char *sec_name = NULL;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (sec_key_list == NULL) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return NULL;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek for (int i = 0; sec_key_list[i]; i++) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (sec_key_match_uuid(sec_key_list[i], uuid)) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek sec_name = sec_key_list[i];

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek break;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return sec_name;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek}

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekstatic const char *sec_headers[] = {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek "Content-type: application/octet-stream",

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek NULL,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek};

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekstruct ccdb_sec {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct tcurl_ctx *tctx;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek};

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekstatic errno_t http2errno(int http_code)

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek{

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (http_code != 200) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek DEBUG(SSSDBG_OP_FAILURE, "HTTP request returned %d\n", http_code);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek switch (http_code) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek case 200:

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return EOK;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek case 404:

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return ERR_NO_CREDS;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek case 400:

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return ERR_INPUT_PARSE;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek case 403:

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return EACCES;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek case 409:

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return EEXIST;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek case 413:

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return E2BIG;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek case 507:

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return ENOSPC;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return EIO;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek}

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekstruct sec_list_state {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek const char **sec_key_list;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek size_t sec_key_list_len;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek};

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekstatic void sec_list_done(struct tevent_req *subreq);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekstatic errno_t sec_list_parse(struct sss_iobuf *outbuf,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek TALLOC_CTX *mem_ctx,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek const char ***_list,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek size_t *_list_len);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekstatic struct tevent_req *sec_list_send(TALLOC_CTX *mem_ctx,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct tevent_context *ev,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct ccdb_sec *secdb,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct cli_creds *client)

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek{

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct tevent_req *req = NULL;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct tevent_req *subreq = NULL;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct sec_list_state *state = NULL;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek errno_t ret;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek const char *container_url;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek req = tevent_req_create(mem_ctx, &state, struct sec_list_state);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (req == NULL) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return NULL;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek DEBUG(SSSDBG_TRACE_INTERNAL, "Listing all ccaches in the secrets store\n");

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek container_url = sec_container_url_create(state, client);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (container_url == NULL) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek ret = ENOMEM;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek goto immediate;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek subreq = tcurl_http_send(state, ev, secdb->tctx,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek TCURL_HTTP_GET,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek SSSD_SECRETS_SOCKET,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek container_url,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek sec_headers,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek NULL,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek SEC_TIMEOUT);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (subreq == NULL) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek ret = ENOMEM;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek goto immediate;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_set_callback(subreq, sec_list_done, req);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return req;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekimmediate:

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_error(req, ret);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_post(req, ev);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return req;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek}

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekstatic void sec_list_done(struct tevent_req *subreq)

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek{

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek errno_t ret;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct tevent_req *req = tevent_req_callback_data(subreq, struct tevent_req);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct sec_list_state *state = tevent_req_data(req,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct sec_list_state);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct sss_iobuf *outbuf;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek int http_code;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek ret = tcurl_http_recv(state, subreq, &http_code, &outbuf);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek talloc_zfree(subreq);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (ret != EOK) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek DEBUG(SSSDBG_OP_FAILURE,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek "list HTTP request failed [%d]: %s\n", ret, sss_strerror(ret));

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_error(req, ret);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (http_code == 404) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek DEBUG(SSSDBG_TRACE_INTERNAL, "Nothing to list\n");

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek /* If no ccaches are found, return an empty list */

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek state->sec_key_list = talloc_zero_array(state, const char *, 1);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (state->sec_key_list == NULL) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_error(req, ENOMEM);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek } else if (http_code == 200) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek ret = sec_list_parse(outbuf, state,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek &state->sec_key_list,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek &state->sec_key_list_len);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (ret != EOK) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_error(req, ret);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

e588e24c900e3f587f52533db12b87451b789a33Fabiano Fidêncio DEBUG(SSSDBG_TRACE_INTERNAL, "Found %zu items\n", state->sec_key_list_len);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek } else {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_error(req, http2errno(http_code));

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek DEBUG(SSSDBG_TRACE_INTERNAL, "list done\n");

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_done(req);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek}

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekstatic errno_t sec_list_parse(struct sss_iobuf *outbuf,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek TALLOC_CTX *mem_ctx,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek const char ***_list,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek size_t *_list_len)

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek{

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek json_t *root;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek uint8_t *sec_http_list;

a40c6b4280f319efb935a9c9d3b83486a0f4d2d3Fabiano Fidêncio size_t sec_http_list_len;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek json_error_t error;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek json_t *element;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek errno_t ret;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek int ok;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek size_t idx;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek const char **list = NULL;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek size_t list_len;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek sec_http_list = sss_iobuf_get_data(outbuf);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (sec_http_list == NULL) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek DEBUG(SSSDBG_CRIT_FAILURE, "No data in output buffer?\n");

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return EINVAL;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

a40c6b4280f319efb935a9c9d3b83486a0f4d2d3Fabiano Fidêncio sec_http_list_len = sss_iobuf_get_len(outbuf);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

a40c6b4280f319efb935a9c9d3b83486a0f4d2d3Fabiano Fidêncio root = json_loadb((const char *) sec_http_list,

a40c6b4280f319efb935a9c9d3b83486a0f4d2d3Fabiano Fidêncio sec_http_list_len, 0, &error);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (root == NULL) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek DEBUG(SSSDBG_CRIT_FAILURE,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek "Failed to parse JSON payload on line %d: %s\n",

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek error.line, error.text);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return ERR_JSON_DECODING;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek ok = json_is_array(root);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (!ok) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek DEBUG(SSSDBG_CRIT_FAILURE, "list reply is not an object.\n");

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek ret = ERR_JSON_DECODING;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek goto done;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek list_len = json_array_size(root);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek list = talloc_zero_array(mem_ctx, const char *, list_len + 1);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (list == NULL) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek ret = ENOMEM;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek goto done;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek json_array_foreach(root, idx, element) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek list[idx] = talloc_strdup(list, json_string_value(element));

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (list[idx] == NULL) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek ret = ENOMEM;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek goto done;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek ret = EOK;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek *_list = list;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek *_list_len = list_len;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekdone:

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (ret != EOK) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek talloc_free(list);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek json_decref(root);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return ret;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek}

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekstatic errno_t sec_list_recv(struct tevent_req *req,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek TALLOC_CTX *mem_ctx,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek const char ***_sec_key_list,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek size_t *_sec_key_list_len)

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek{

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct sec_list_state *state = tevent_req_data(req,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct sec_list_state);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek TEVENT_REQ_RETURN_ON_ERROR(req);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (_sec_key_list != NULL) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek *_sec_key_list = talloc_steal(mem_ctx, state->sec_key_list);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (_sec_key_list_len != NULL) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek *_sec_key_list_len = state->sec_key_list_len;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return EOK;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek}

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekstruct sec_get_state {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek const char *sec_key;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct cli_creds *client;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct kcm_ccache *cc;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek};

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekstatic void sec_get_done(struct tevent_req *subreq);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekstatic struct tevent_req *sec_get_send(TALLOC_CTX *mem_ctx,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct tevent_context *ev,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct ccdb_sec *secdb,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct cli_creds *client,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek const char *sec_key)

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek{

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct tevent_req *req = NULL;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct tevent_req *subreq = NULL;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct sec_get_state *state = NULL;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek errno_t ret;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek const char *cc_url;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek req = tevent_req_create(mem_ctx, &state, struct sec_get_state);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (req == NULL) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return NULL;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek state->sec_key = sec_key;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek state->client = client;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek DEBUG(SSSDBG_TRACE_INTERNAL, "Retrieving ccache %s\n", sec_key);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek cc_url = sec_cc_url_create(state, state->client, state->sec_key);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (cc_url == NULL) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek ret = ENOMEM;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek goto immediate;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek subreq = tcurl_http_send(state,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek ev,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek secdb->tctx,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek TCURL_HTTP_GET,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek SSSD_SECRETS_SOCKET,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek cc_url,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek sec_headers,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek NULL,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek SEC_TIMEOUT);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (subreq == NULL) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek ret = ENOMEM;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek goto immediate;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_set_callback(subreq, sec_get_done, req);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return req;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekimmediate:

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_error(req, ret);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_post(req, ev);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return req;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek}

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekstatic void sec_get_done(struct tevent_req *subreq)

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek{

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek errno_t ret;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct tevent_req *req = tevent_req_callback_data(subreq, struct tevent_req);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct sec_get_state *state = tevent_req_data(req,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct sec_get_state);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct sss_iobuf *outbuf;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek const char *sec_value;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek int http_code;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek ret = tcurl_http_recv(state, subreq, &http_code, &outbuf);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek talloc_zfree(subreq);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (ret != EOK) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek DEBUG(SSSDBG_OP_FAILURE,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek "GET HTTP request failed [%d]: %s\n", ret, sss_strerror(ret));

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_error(req, ret);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (http_code != 200) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek DEBUG(SSSDBG_OP_FAILURE,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek "GET operation returned HTTP error %d\n", http_code);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek ret = http2errno(http_code);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_error(req, ret);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek sec_value = (const char *) sss_iobuf_get_data(outbuf);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (sec_value == NULL) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek DEBUG(SSSDBG_CRIT_FAILURE, "No data in output buffer\n");

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_error(req, EINVAL);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek ret = sec_kv_to_ccache(state,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek state->sec_key,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek sec_value,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek state->client,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek &state->cc);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (ret != EOK) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek DEBUG(SSSDBG_OP_FAILURE,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek "Cannot convert JSON keyval to ccache blob [%d]: %s\n",

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek ret, sss_strerror(ret));

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_error(req, ret);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek DEBUG(SSSDBG_TRACE_INTERNAL, "GET done\n");

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_done(req);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek}

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekstatic errno_t sec_get_recv(struct tevent_req *req,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek TALLOC_CTX *mem_ctx,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct kcm_ccache **_cc)

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek{

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct sec_get_state *state = tevent_req_data(req, struct sec_get_state);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek TEVENT_REQ_RETURN_ON_ERROR(req);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek *_cc = talloc_steal(mem_ctx, state->cc);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return EOK;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek}

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekstruct sec_get_ccache_state {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct tevent_context *ev;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct ccdb_sec *secdb;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct cli_creds *client;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek const char *name;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek uuid_t uuid;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek const char *sec_key;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct kcm_ccache *cc;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek};

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekstatic void sec_get_ccache_list_done(struct tevent_req *subreq);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekstatic void sec_get_ccache_done(struct tevent_req *subreq);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekstatic struct tevent_req *sec_get_ccache_send(TALLOC_CTX *mem_ctx,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct tevent_context *ev,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct ccdb_sec *secdb,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct cli_creds *client,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek const char *name,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek uuid_t uuid)

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek{

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct tevent_req *req = NULL;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct tevent_req *subreq = NULL;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct sec_get_ccache_state *state = NULL;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek errno_t ret;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek req = tevent_req_create(mem_ctx, &state, struct sec_get_ccache_state);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (req == NULL) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return NULL;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek state->ev = ev;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek state->secdb = secdb;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek state->client = client;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek state->name = name;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek uuid_copy(state->uuid, uuid);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if ((name == NULL && uuid_is_null(uuid))

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek || (name != NULL && !uuid_is_null(uuid))) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek DEBUG(SSSDBG_OP_FAILURE, "Expected one of name, uuid to be set\n");

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek ret = EINVAL;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek goto immediate;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek subreq = sec_list_send(state, ev, secdb, client);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (subreq == NULL) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek ret = ENOMEM;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek goto immediate;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_set_callback(subreq, sec_get_ccache_list_done, req);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return req;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekimmediate:

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_error(req, ret);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_post(req, ev);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return req;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek}

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekstatic void sec_get_ccache_list_done(struct tevent_req *subreq)

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek{

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek errno_t ret;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct tevent_req *req = tevent_req_callback_data(subreq, struct tevent_req);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct sec_get_ccache_state *state = tevent_req_data(req,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct sec_get_ccache_state);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek const char **sec_key_list;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek ret = sec_list_recv(subreq, state, &sec_key_list, NULL);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek talloc_zfree(subreq);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (ret != EOK) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek DEBUG(SSSDBG_OP_FAILURE,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek "Cannot list keys [%d]: %s\n",

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek ret, sss_strerror(ret));

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_error(req, ret);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (state->name != NULL) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek state->sec_key = find_by_name(sec_key_list, state->name);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek } else {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek state->sec_key = find_by_uuid(sec_key_list, state->uuid);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (state->sec_key == NULL) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek DEBUG(SSSDBG_MINOR_FAILURE,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek "Cannot find item in the ccache list\n");

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek /* Don't error out, just return an empty list */

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_done(req);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek subreq = sec_get_send(state,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek state->ev,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek state->secdb,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek state->client,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek state->sec_key);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (subreq == NULL) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_error(req, ENOMEM);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_set_callback(subreq, sec_get_ccache_done, req);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek}

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekstatic void sec_get_ccache_done(struct tevent_req *subreq)

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek{

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek errno_t ret;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct tevent_req *req = tevent_req_callback_data(subreq,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct tevent_req);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct sec_get_ccache_state *state = tevent_req_data(req,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct sec_get_ccache_state);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek ret = sec_get_recv(subreq, state, &state->cc);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek talloc_zfree(subreq);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (ret != EOK) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek DEBUG(SSSDBG_OP_FAILURE,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek "Cannot resolve key to ccache [%d]: %s\n",

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek ret, sss_strerror(ret));

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_error(req, ret);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_done(req);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek}

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekstatic errno_t sec_get_ccache_recv(struct tevent_req *req,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek TALLOC_CTX *mem_ctx,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct kcm_ccache **_cc)

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek{

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct sec_get_ccache_state *state = tevent_req_data(req,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct sec_get_ccache_state);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek TEVENT_REQ_RETURN_ON_ERROR(req);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek *_cc = talloc_steal(mem_ctx, state->cc);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return EOK;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek}

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekstatic errno_t ccdb_sec_init(struct kcm_ccdb *db)

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek{

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct ccdb_sec *secdb = NULL;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek secdb = talloc_zero(db, struct ccdb_sec);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (secdb == NULL) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return ENOMEM;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek secdb->tctx = tcurl_init(secdb, db->ev);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (secdb->tctx == NULL) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek DEBUG(SSSDBG_FATAL_FAILURE, "Cannot initialize tcurl\n");

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek talloc_zfree(secdb);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return ENOMEM;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek /* We just need the random numbers to generate pseudo-random ccache names

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek srand(time(NULL));

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek db->db_handle = secdb;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return EOK;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek}

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekstruct sec_patch_state {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct tevent_context *ev;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct ccdb_sec *secdb;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct cli_creds *client;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek const char *sec_key_url;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct sss_iobuf *sec_value;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek};

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekstatic void sec_patch_del_done(struct tevent_req *subreq);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekstatic void sec_patch_put_done(struct tevent_req *subreq);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekstatic struct tevent_req *sec_patch_send(TALLOC_CTX *mem_ctx,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct tevent_context *ev,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct ccdb_sec *secdb,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct cli_creds *client,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek const char *sec_key_url,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct sss_iobuf *sec_value)

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek{

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct tevent_req *req = NULL;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct tevent_req *subreq = NULL;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct sec_patch_state *state = NULL;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek errno_t ret;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek req = tevent_req_create(mem_ctx, &state, struct sec_patch_state);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (req == NULL) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return NULL;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek state->ev = ev;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek state->secdb = secdb;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek state->client = client;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek state->sec_key_url = sec_key_url;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek state->sec_value = sec_value;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek subreq = tcurl_http_send(state, state->ev,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek state->secdb->tctx,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek TCURL_HTTP_DELETE,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek SSSD_SECRETS_SOCKET,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek state->sec_key_url,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek sec_headers,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek NULL,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek SEC_TIMEOUT);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (subreq == NULL) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek ret = ENOMEM;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek goto immediate;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_set_callback(subreq, sec_patch_del_done, req);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return req;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekimmediate:

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_error(req, ret);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_post(req, ev);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return req;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek}

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekstatic void sec_patch_del_done(struct tevent_req *subreq)

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek{

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek errno_t ret;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct tevent_req *req = tevent_req_callback_data(subreq,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct tevent_req);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct sec_patch_state *state = tevent_req_data(req,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct sec_patch_state);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek int http_code;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek ret = tcurl_http_recv(state, subreq, &http_code, NULL);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek talloc_zfree(subreq);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (ret != EOK) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek DEBUG(SSSDBG_OP_FAILURE,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek "Cannot delete key [%d]: %s\n", ret, sss_strerror(ret));

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_error(req, ret);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (http_code == 404) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek DEBUG(SSSDBG_TRACE_LIBS,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek "Key %s does not exist, moving on\n", state->sec_key_url);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek } else if (http_code != 200) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek ret = http2errno(http_code);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_error(req, ret);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek DEBUG(SSSDBG_TRACE_INTERNAL, "Adding new payload\n");

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek subreq = tcurl_http_send(state,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek state->ev,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek state->secdb->tctx,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek TCURL_HTTP_PUT,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek SSSD_SECRETS_SOCKET,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek state->sec_key_url,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek sec_headers,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek state->sec_value,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek SEC_TIMEOUT);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (subreq == NULL) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_error(req, ENOMEM);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_set_callback(subreq, sec_patch_put_done, req);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek}

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekstatic void sec_patch_put_done(struct tevent_req *subreq)

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek{

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek errno_t ret;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct tevent_req *req = tevent_req_callback_data(subreq,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct tevent_req);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct sec_patch_state *state = tevent_req_data(req,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct sec_patch_state);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek int http_code;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek ret = tcurl_http_recv(state, subreq, &http_code, NULL);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek talloc_zfree(subreq);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (ret != EOK) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek DEBUG(SSSDBG_OP_FAILURE,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek "Cannot put new value [%d]: %s\n", ret, sss_strerror(ret));

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_error(req, ret);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (http_code != 200) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek DEBUG(SSSDBG_OP_FAILURE, "Failed to add the payload\n");

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek ret = http2errno(http_code);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_error(req, ret);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek DEBUG(SSSDBG_TRACE_INTERNAL, "payload created\n");

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_done(req);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek}

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekstatic errno_t sec_patch_recv(struct tevent_req *req)

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek{

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek TEVENT_REQ_RETURN_ON_ERROR(req);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return EOK;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek}

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekstruct ccdb_sec_nextid_state {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct tevent_context *ev;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct ccdb_sec *secdb;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct cli_creds *client;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek unsigned int nextid;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek char *nextid_name;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek int maxtries;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek int numtry;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek};

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekstatic errno_t ccdb_sec_nextid_generate(struct tevent_req *req);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekstatic void ccdb_sec_nextid_list_done(struct tevent_req *subreq);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekstatic struct tevent_req *ccdb_sec_nextid_send(TALLOC_CTX *mem_ctx,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct tevent_context *ev,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct kcm_ccdb *db,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct cli_creds *client)

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek{

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct tevent_req *req = NULL;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct ccdb_sec_nextid_state *state = NULL;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct ccdb_sec *secdb = talloc_get_type(db->db_handle, struct ccdb_sec);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek errno_t ret;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek req = tevent_req_create(mem_ctx, &state, struct ccdb_sec_nextid_state);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (req == NULL) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return NULL;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek state->ev = ev;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek state->secdb = secdb;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek state->client = client;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek state->maxtries = 3;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek state->numtry = 0;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek ret = ccdb_sec_nextid_generate(req);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (ret != EOK) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek goto immediate;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return req;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekimmediate:

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_error(req, ret);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_post(req, ev);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return req;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek}

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekstatic errno_t ccdb_sec_nextid_generate(struct tevent_req *req)

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek{

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct tevent_req *subreq = NULL;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct ccdb_sec_nextid_state *state = tevent_req_data(req,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct ccdb_sec_nextid_state);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (state->numtry >= state->maxtries) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek DEBUG(SSSDBG_CRIT_FAILURE,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek "Failed to find a random ccache in %d tries\n", state->numtry);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return EBUSY;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek state->nextid = rand() % MAX_CC_NUM;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek state->nextid_name = talloc_asprintf(state, "%"SPRIuid":%u",

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek cli_creds_get_uid(state->client),

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek state->nextid);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (state->nextid_name == NULL) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return ENOMEM;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek subreq = sec_list_send(state, state->ev, state->secdb, state->client);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (subreq == NULL) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return ENOMEM;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_set_callback(subreq, ccdb_sec_nextid_list_done, req);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek state->numtry++;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return EOK;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek}

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekstatic void ccdb_sec_nextid_list_done(struct tevent_req *subreq)

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek{

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek errno_t ret;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct tevent_req *req = tevent_req_callback_data(subreq,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct tevent_req);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct ccdb_sec_nextid_state *state = tevent_req_data(req,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct ccdb_sec_nextid_state);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek const char **sec_key_list;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek size_t sec_key_list_len;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek size_t i;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek ret = sec_list_recv(subreq, state, &sec_key_list, &sec_key_list_len);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek talloc_zfree(subreq);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (ret != EOK) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek DEBUG(SSSDBG_OP_FAILURE,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek "Cannot list keys [%d]: %s\n",

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek ret, sss_strerror(ret));

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_error(req, ret);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek for (i = 0; i < sec_key_list_len; i++) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (sec_key_match_name(sec_key_list[i], state->nextid_name) == true) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek break;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek DEBUG(SSSDBG_MINOR_FAILURE,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek "Failed to find a random key, trying again..\n");

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (i < sec_key_list_len) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek /* Try again */

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek ret = ccdb_sec_nextid_generate(req);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (ret != EOK) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_error(req, ret);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek DEBUG(SSSDBG_TRACE_INTERNAL,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek "Generated new ccache name %u\n", state->nextid);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_done(req);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek}

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekstatic errno_t ccdb_sec_nextid_recv(struct tevent_req *req,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek unsigned int *_nextid)

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek{

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct ccdb_sec_nextid_state *state = tevent_req_data(req,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct ccdb_sec_nextid_state);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek TEVENT_REQ_RETURN_ON_ERROR(req);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek *_nextid = state->nextid;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return EOK;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek}

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekstruct ccdb_sec_set_default_state {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek};

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekstatic void ccdb_sec_set_default_done(struct tevent_req *subreq);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekstatic struct tevent_req *ccdb_sec_set_default_send(TALLOC_CTX *mem_ctx,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct tevent_context *ev,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct kcm_ccdb *db,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct cli_creds *client,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek uuid_t uuid)

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek{

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct tevent_req *req = NULL;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct tevent_req *subreq = NULL;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct ccdb_sec_set_default_state *state = NULL;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct ccdb_sec *secdb = talloc_get_type(db->db_handle, struct ccdb_sec);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct sss_iobuf *uuid_iobuf;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek errno_t ret;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek const char *url;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek char uuid_str[UUID_STR_SIZE];

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek req = tevent_req_create(mem_ctx, &state, struct ccdb_sec_set_default_state);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (req == NULL) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return NULL;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek uuid_unparse(uuid, uuid_str);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek DEBUG(SSSDBG_TRACE_INTERNAL,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek "Setting the default ccache to %s\n", uuid_str);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek url = sec_dfl_url_create(state, client);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (url == NULL) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek ret = ENOMEM;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek goto immediate;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek uuid_iobuf = sss_iobuf_init_readonly(state,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek (uint8_t *) uuid_str,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek UUID_STR_SIZE);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (uuid_iobuf == NULL) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek ret = ENOMEM;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek goto immediate;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek subreq = sec_patch_send(state, ev, secdb, client, url, uuid_iobuf);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (subreq == NULL) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek ret = ENOMEM;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek goto immediate;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_set_callback(subreq, ccdb_sec_set_default_done, req);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return req;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekimmediate:

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_error(req, ret);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_post(req, ev);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return req;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek}

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekstatic void ccdb_sec_set_default_done(struct tevent_req *subreq)

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek{

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek errno_t ret;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct tevent_req *req = tevent_req_callback_data(subreq, struct tevent_req);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek ret = sec_patch_recv(subreq);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek talloc_zfree(subreq);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (ret != EOK) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek DEBUG(SSSDBG_OP_FAILURE,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek "sec_patch request failed [%d]: %s\n",

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek ret, sss_strerror(ret));

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_error(req, ret);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek DEBUG(SSSDBG_TRACE_INTERNAL, "Set the default ccache\n");

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_done(req);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek}

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekstatic errno_t ccdb_sec_set_default_recv(struct tevent_req *req)

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek{

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek TEVENT_REQ_RETURN_ON_ERROR(req);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return EOK;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek}

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekstruct ccdb_sec_get_default_state {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek uuid_t uuid;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek};

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekstatic void ccdb_sec_get_default_done(struct tevent_req *subreq);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekstatic struct tevent_req *ccdb_sec_get_default_send(TALLOC_CTX *mem_ctx,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct tevent_context *ev,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct kcm_ccdb *db,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct cli_creds *client)

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek{

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct tevent_req *req = NULL;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct tevent_req *subreq = NULL;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct ccdb_sec_get_default_state *state = NULL;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct ccdb_sec *secdb = talloc_get_type(db->db_handle, struct ccdb_sec);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek const char *url;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek errno_t ret;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek req = tevent_req_create(mem_ctx, &state, struct ccdb_sec_get_default_state);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (req == NULL) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return NULL;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek DEBUG(SSSDBG_TRACE_INTERNAL, "Getting the default ccache\n");

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek url = sec_dfl_url_create(state, client);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (url == NULL) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek ret = ENOMEM;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek goto immediate;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek subreq = tcurl_http_send(state, ev, secdb->tctx,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek TCURL_HTTP_GET,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek SSSD_SECRETS_SOCKET,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek url,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek sec_headers,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek NULL,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek SEC_TIMEOUT);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (subreq == NULL) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek ret = ENOMEM;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek goto immediate;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_set_callback(subreq, ccdb_sec_get_default_done, req);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return req;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekimmediate:

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_error(req, ret);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_post(req, ev);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return req;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek}

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekstatic void ccdb_sec_get_default_done(struct tevent_req *subreq)

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek{

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek errno_t ret;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek int http_code;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct tevent_req *req = tevent_req_callback_data(subreq, struct tevent_req);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct ccdb_sec_get_default_state *state = tevent_req_data(req,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct ccdb_sec_get_default_state);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct sss_iobuf *outbuf;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek size_t uuid_size;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek ret = tcurl_http_recv(state, subreq, &http_code, &outbuf);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek talloc_zfree(subreq);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (ret != EOK) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek DEBUG(SSSDBG_OP_FAILURE,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek "Communication with the secrets responder failed [%d]: %s\n",

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek ret, sss_strerror(ret));

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_error(req, ret);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (http_code == 404) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek /* Return a NULL uuid */

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek uuid_clear(state->uuid);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_done(req);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek } else if (http_code != 200) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek ret = http2errno(http_code);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_error(req, ret);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek uuid_size = sss_iobuf_get_len(outbuf);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (uuid_size != UUID_STR_SIZE) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek DEBUG(SSSDBG_OP_FAILURE, "Unexpected UUID size %zu\n", uuid_size);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_error(req, EIO);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek uuid_parse((const char *) sss_iobuf_get_data(outbuf), state->uuid);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek DEBUG(SSSDBG_TRACE_INTERNAL, "Got the default ccache\n");

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_done(req);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek}

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekstatic errno_t ccdb_sec_get_default_recv(struct tevent_req *req,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek uuid_t uuid)

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek{

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct ccdb_sec_get_default_state *state = tevent_req_data(req,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct ccdb_sec_get_default_state);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek TEVENT_REQ_RETURN_ON_ERROR(req);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek uuid_copy(uuid, state->uuid);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return EOK;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek}

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekstruct ccdb_sec_list_state {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek uuid_t *uuid_list;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek};

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekstatic void ccdb_sec_list_done(struct tevent_req *subreq);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekstatic struct tevent_req *ccdb_sec_list_send(TALLOC_CTX *mem_ctx,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct tevent_context *ev,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct kcm_ccdb *db,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct cli_creds *client)

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek{

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct tevent_req *req = NULL;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct tevent_req *subreq = NULL;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct ccdb_sec_list_state *state = NULL;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct ccdb_sec *secdb = talloc_get_type(db->db_handle, struct ccdb_sec);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek errno_t ret;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek req = tevent_req_create(mem_ctx, &state, struct ccdb_sec_list_state);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (req == NULL) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return NULL;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek DEBUG(SSSDBG_TRACE_INTERNAL, "Listing all ccaches\n");

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek subreq = sec_list_send(state, ev, secdb, client);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (subreq == NULL) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek ret = ENOMEM;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek goto immediate;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_set_callback(subreq, ccdb_sec_list_done, req);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return req;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekimmediate:

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_error(req, ret);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_post(req, ev);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return req;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek}

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekstatic void ccdb_sec_list_done(struct tevent_req *subreq)

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek{

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek errno_t ret;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct tevent_req *req = tevent_req_callback_data(subreq,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct tevent_req);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct ccdb_sec_list_state *state = tevent_req_data(req,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct ccdb_sec_list_state);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek const char **sec_key_list;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek size_t sec_key_list_len;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek ret = sec_list_recv(subreq, state, &sec_key_list, &sec_key_list_len);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek talloc_zfree(subreq);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (ret != EOK) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek DEBUG(SSSDBG_OP_FAILURE,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek "Communication with the secrets responder failed [%d]: %s\n",

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek ret, sss_strerror(ret));

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_error(req, ret);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek DEBUG(SSSDBG_TRACE_INTERNAL, "Found %zu ccaches\n", sec_key_list_len);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek state->uuid_list = talloc_array(state, uuid_t, sec_key_list_len + 1);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (state->uuid_list == NULL) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_error(req, ENOMEM);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek for (size_t i = 0; i < sec_key_list_len; i++) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek ret = sec_key_get_uuid(sec_key_list[i],

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek state->uuid_list[i]);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (ret != EOK) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_error(req, ret);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek /* Sentinel */

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek uuid_clear(state->uuid_list[sec_key_list_len]);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek DEBUG(SSSDBG_TRACE_INTERNAL, "Listing all caches done\n");

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_done(req);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek}

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekstatic errno_t ccdb_sec_list_recv(struct tevent_req *req,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek TALLOC_CTX *mem_ctx,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek uuid_t **_uuid_list)

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek{

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct ccdb_sec_list_state *state = tevent_req_data(req,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct ccdb_sec_list_state);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek TEVENT_REQ_RETURN_ON_ERROR(req);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek *_uuid_list = talloc_steal(mem_ctx, state->uuid_list);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return EOK;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek}

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekstruct ccdb_sec_getbyuuid_state {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct kcm_ccache *cc;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek};

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekstatic void ccdb_sec_getbyuuid_done(struct tevent_req *subreq);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekstatic struct tevent_req *ccdb_sec_getbyuuid_send(TALLOC_CTX *mem_ctx,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct tevent_context *ev,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct kcm_ccdb *db,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct cli_creds *client,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek uuid_t uuid)

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek{

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek errno_t ret;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct tevent_req *req = NULL;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct tevent_req *subreq = NULL;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct ccdb_sec_getbyuuid_state *state = NULL;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct ccdb_sec *secdb = talloc_get_type(db->db_handle, struct ccdb_sec);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek req = tevent_req_create(mem_ctx, &state, struct ccdb_sec_getbyuuid_state);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (req == NULL) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return NULL;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek DEBUG(SSSDBG_TRACE_INTERNAL, "Getting ccache by UUID\n");

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek subreq = sec_get_ccache_send(state, ev, secdb, client, NULL, uuid);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (subreq == NULL) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek ret = ENOMEM;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek goto immediate;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_set_callback(subreq, ccdb_sec_getbyuuid_done, req);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return req;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekimmediate:

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_error(req, ret);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_post(req, ev);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return req;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek}

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekstatic void ccdb_sec_getbyuuid_done(struct tevent_req *subreq)

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek{

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek errno_t ret;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct tevent_req *req = tevent_req_callback_data(subreq,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct tevent_req);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct ccdb_sec_getbyuuid_state *state = tevent_req_data(req,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct ccdb_sec_getbyuuid_state);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek ret = sec_get_ccache_recv(subreq, state, &state->cc);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek talloc_zfree(subreq);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek if (ret != EOK) {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek DEBUG(SSSDBG_OP_FAILURE,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek "Cannot retrieve the ccache [%d]: %s\n", ret, sss_strerror(ret));

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_error(req, ret);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek }

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek DEBUG(SSSDBG_TRACE_INTERNAL, "Got ccache by UUID\n");

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek tevent_req_done(req);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek}

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekstatic errno_t ccdb_sec_getbyuuid_recv(struct tevent_req *req,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek TALLOC_CTX *mem_ctx,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct kcm_ccache **_cc)

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek{

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct ccdb_sec_getbyuuid_state *state = tevent_req_data(req,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct ccdb_sec_getbyuuid_state);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek TEVENT_REQ_RETURN_ON_ERROR(req);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek *_cc = talloc_steal(mem_ctx, state->cc);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek return EOK;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek}

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekstruct ccdb_sec_getbyname_state {

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct kcm_ccache *cc;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek};

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekstatic void ccdb_sec_getbyname_done(struct tevent_req *subreq);

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozekstatic struct tevent_req *ccdb_sec_getbyname_send(TALLOC_CTX *mem_ctx,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct tevent_context *ev,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct kcm_ccdb *db,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct cli_creds *client,

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek const char *name)

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek{

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek errno_t ret;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct tevent_req *req = NULL;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct tevent_req *subreq = NULL;

cac0db2f8004ae88b9263dc3888a11a2d3d3d114Jakub Hrozek struct ccdb_sec_getbyname_state *state = NULL;