1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek#include "config.h"

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek#include <krb5/krb5.h>

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek#include "util/sss_iobuf.h"

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek#include "util/sss_krb5.h"

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek#include "util/util_creds.h"

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek#include "responder/kcm/kcm.h"

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek#include "responder/kcm/kcmsrv_pvt.h"

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek#include "responder/kcm/kcmsrv_ops.h"

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek#include "responder/kcm/kcmsrv_ccache.h"

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

b09cd3072153663bfcce902633b5e6f9134e72e0Fabiano Fidêncio#define KCM_REPLY_MAX 10*1024*1024

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekstruct kcm_op_ctx {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_resp_ctx *kcm_data;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct cli_creds *client;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct sss_iobuf *input;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct sss_iobuf *reply;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek};

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozektypedef struct tevent_req*

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek(*kcm_srv_send_method)(TALLOC_CTX *mem_ctx,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct tevent_context *ev,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_op_ctx *op_ctx);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozektypedef errno_t

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek(*kcm_srv_recv_method)(struct tevent_req *req,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek uint32_t *_op_ret);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekstruct kcm_op {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek const char *name;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek kcm_srv_send_method fn_send;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek kcm_srv_recv_method fn_recv;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek};

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekstruct kcm_cmd_state {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_op *op;

2b5518eeaacc6245cfa77ee4a7086f16208060fcJakub Hrozek struct tevent_context *ev;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

2b5518eeaacc6245cfa77ee4a7086f16208060fcJakub Hrozek struct kcm_ops_queue_entry *queue_entry;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_op_ctx *op_ctx;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct sss_iobuf *reply;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek uint32_t op_ret;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek};

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

2b5518eeaacc6245cfa77ee4a7086f16208060fcJakub Hrozekstatic void kcm_cmd_queue_done(struct tevent_req *subreq);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekstatic void kcm_cmd_done(struct tevent_req *subreq);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekstruct tevent_req *kcm_cmd_send(TALLOC_CTX *mem_ctx,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct tevent_context *ev,

2b5518eeaacc6245cfa77ee4a7086f16208060fcJakub Hrozek struct kcm_ops_queue_ctx *qctx,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_resp_ctx *kcm_data,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct cli_creds *client,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_data *input,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_op *op)

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek{

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct tevent_req *req = NULL;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct tevent_req *subreq = NULL;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_cmd_state *state = NULL;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek errno_t ret;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek req = tevent_req_create(mem_ctx, &state, struct kcm_cmd_state);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (req == NULL) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return NULL;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state->op = op;

2b5518eeaacc6245cfa77ee4a7086f16208060fcJakub Hrozek state->ev = ev;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (op == NULL) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret = EINVAL;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek goto immediate;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek DEBUG(SSSDBG_TRACE_FUNC, "KCM operation %s\n", op->name);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek DEBUG(SSSDBG_TRACE_LIBS, "%zu bytes on KCM input\n", input->length);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state->reply = sss_iobuf_init_empty(state,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek KCM_REPLY_MAX,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek KCM_REPLY_MAX);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (state->reply == NULL) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret = ENOMEM;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek goto immediate;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (op->fn_send == NULL) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek DEBUG(SSSDBG_CRIT_FAILURE,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek "KCM op %s has no handler\n", kcm_opt_name(op));

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret = ERR_KCM_OP_NOT_IMPLEMENTED;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek goto immediate;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek /* Allocating op_ctx on the heap makes it possible for operations to use

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state->op_ctx = talloc_zero(state, struct kcm_op_ctx);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (state->op_ctx == NULL) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret = ENOMEM;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek goto immediate;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state->op_ctx->kcm_data = kcm_data;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state->op_ctx->client = client;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state->op_ctx->input = sss_iobuf_init_readonly(state->op_ctx,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek input->data,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek input->length);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (state->op_ctx->input == NULL) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret = ENOMEM;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek goto immediate;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek /*

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state->op_ctx->reply = sss_iobuf_init_empty(

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek KCM_REPLY_MAX - 2*sizeof(uint32_t),

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek KCM_REPLY_MAX - 2*sizeof(uint32_t));

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (state->reply == NULL) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret = ENOMEM;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek goto immediate;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

2b5518eeaacc6245cfa77ee4a7086f16208060fcJakub Hrozek subreq = kcm_op_queue_send(state, ev, qctx, client);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (subreq == NULL) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret = ENOMEM;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek goto immediate;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

2b5518eeaacc6245cfa77ee4a7086f16208060fcJakub Hrozek tevent_req_set_callback(subreq, kcm_cmd_queue_done, req);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return req;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekimmediate:

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_error(req, ret);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_post(req, ev);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return req;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek}

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

2b5518eeaacc6245cfa77ee4a7086f16208060fcJakub Hrozekstatic void kcm_cmd_queue_done(struct tevent_req *subreq)

2b5518eeaacc6245cfa77ee4a7086f16208060fcJakub Hrozek{

2b5518eeaacc6245cfa77ee4a7086f16208060fcJakub Hrozek struct tevent_req *req = tevent_req_callback_data(subreq, struct tevent_req);

2b5518eeaacc6245cfa77ee4a7086f16208060fcJakub Hrozek struct kcm_cmd_state *state = tevent_req_data(req, struct kcm_cmd_state);

2b5518eeaacc6245cfa77ee4a7086f16208060fcJakub Hrozek errno_t ret;

2b5518eeaacc6245cfa77ee4a7086f16208060fcJakub Hrozek

2b5518eeaacc6245cfa77ee4a7086f16208060fcJakub Hrozek /* When this request finishes, it frees the queue_entry which unblocks

2b5518eeaacc6245cfa77ee4a7086f16208060fcJakub Hrozek ret = kcm_op_queue_recv(subreq, state, &state->queue_entry);

2b5518eeaacc6245cfa77ee4a7086f16208060fcJakub Hrozek talloc_zfree(subreq);

2b5518eeaacc6245cfa77ee4a7086f16208060fcJakub Hrozek if (ret != EOK) {

2b5518eeaacc6245cfa77ee4a7086f16208060fcJakub Hrozek DEBUG(SSSDBG_CRIT_FAILURE, "Cannot acquire queue slot\n");

2b5518eeaacc6245cfa77ee4a7086f16208060fcJakub Hrozek tevent_req_error(req, ret);

2b5518eeaacc6245cfa77ee4a7086f16208060fcJakub Hrozek return;

2b5518eeaacc6245cfa77ee4a7086f16208060fcJakub Hrozek }

2b5518eeaacc6245cfa77ee4a7086f16208060fcJakub Hrozek

2b5518eeaacc6245cfa77ee4a7086f16208060fcJakub Hrozek subreq = state->op->fn_send(state, state->ev, state->op_ctx);

2b5518eeaacc6245cfa77ee4a7086f16208060fcJakub Hrozek if (subreq == NULL) {

2b5518eeaacc6245cfa77ee4a7086f16208060fcJakub Hrozek tevent_req_error(req, ENOMEM);

2b5518eeaacc6245cfa77ee4a7086f16208060fcJakub Hrozek return;

2b5518eeaacc6245cfa77ee4a7086f16208060fcJakub Hrozek }

2b5518eeaacc6245cfa77ee4a7086f16208060fcJakub Hrozek tevent_req_set_callback(subreq, kcm_cmd_done, req);

2b5518eeaacc6245cfa77ee4a7086f16208060fcJakub Hrozek}

2b5518eeaacc6245cfa77ee4a7086f16208060fcJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekstatic void kcm_cmd_done(struct tevent_req *subreq)

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek{

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct tevent_req *req = tevent_req_callback_data(subreq, struct tevent_req);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_cmd_state *state = tevent_req_data(req, struct kcm_cmd_state);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek errno_t ret;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek krb5_error_code kerr;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret = state->op->fn_recv(subreq, &state->op_ret);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek talloc_free(subreq);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (ret != EOK) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek DEBUG(SSSDBG_OP_FAILURE,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek "op receive function failed [%d]: %s\n",

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret, sss_strerror(ret));

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_error(req, ret);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek DEBUG(SSSDBG_TRACE_FUNC,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek "KCM operation %s returned [%d]: %s\n",

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek kcm_opt_name(state->op), state->op_ret, sss_strerror(state->op_ret));

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek kerr = sss2krb5_error(state->op_ret);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek /* The first four bytes of the reply is the operation status code */

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret = sss_iobuf_write_uint32(state->reply, htobe32(kerr));

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (ret != EOK) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_error(req, ret);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret = sss_iobuf_write_len(state->reply,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek sss_iobuf_get_data(state->op_ctx->reply),

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek sss_iobuf_get_len(state->op_ctx->reply));

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (ret != EOK) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_error(req, ret);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_done(req);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek}

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekerrno_t kcm_cmd_recv(TALLOC_CTX *mem_ctx,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct tevent_req *req,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct sss_iobuf **_reply)

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek{

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_cmd_state *state = NULL;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek TEVENT_REQ_RETURN_ON_ERROR(req);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state = tevent_req_data(req, struct kcm_cmd_state);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek *_reply = talloc_steal(mem_ctx, state->reply);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return EOK;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek}

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek#define KCM_OP_RET_FROM_TYPE(req, state_type, _op_ret_out) do { \

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state_type *state = NULL; \

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state = tevent_req_data(req, state_type); \

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek TEVENT_REQ_RETURN_ON_ERROR(req); \

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek *_op_ret_out = state->op_ret; \

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return EOK; \

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek} while(0);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekstruct kcm_op_common_state {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek uint32_t op_ret;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_op_ctx *op_ctx;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct tevent_context *ev;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek};

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekstatic errno_t kcm_op_common_recv(struct tevent_req *req,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek uint32_t *_op_ret)

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek{

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_op_common_state *state = tevent_req_data(req,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_op_common_state);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek TEVENT_REQ_RETURN_ON_ERROR(req);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek *_op_ret = state->op_ret;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return EOK;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek}

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekstatic void kcm_op_gen_new_done(struct tevent_req *subreq);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekstatic struct tevent_req *kcm_op_gen_new_send(TALLOC_CTX *mem_ctx,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct tevent_context *ev,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_op_ctx *op_ctx)

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek{

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct tevent_req *req = NULL;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct tevent_req *subreq = NULL;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_op_common_state *state = NULL;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek errno_t ret;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek req = tevent_req_create(mem_ctx, &state, struct kcm_op_common_state);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (req == NULL) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return NULL;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state->op_ctx = op_ctx;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek subreq = kcm_ccdb_nextid_send(state, ev,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek op_ctx->kcm_data->db,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek op_ctx->client);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (subreq == NULL) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret = ENOMEM;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek goto immediate;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_set_callback(subreq, kcm_op_gen_new_done, req);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return req;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekimmediate:

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_error(req, ret);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_post(req, ev);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return req;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek}

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekstatic void kcm_op_gen_new_done(struct tevent_req *subreq)

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek{

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek errno_t ret;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek char *newid;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct tevent_req *req = tevent_req_callback_data(subreq,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct tevent_req);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_op_common_state *state = tevent_req_data(req,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_op_common_state);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret = kcm_ccdb_nextid_recv(subreq, state, &newid);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek talloc_zfree(subreq);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (ret != EOK) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek DEBUG(SSSDBG_OP_FAILURE,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek "Cannot generate a new ID [%d]: %s\n",

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret, sss_strerror(ret));

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_error(req, ret);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek DEBUG(SSSDBG_TRACE_LIBS, "Generated a new ID %s\n", newid);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret = sss_iobuf_write_stringz(state->op_ctx->reply, newid);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (ret != EOK) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek DEBUG(SSSDBG_OP_FAILURE,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek "Cannot write generated ID %d: %s\n",

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret, sss_strerror(ret));

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_error(req, ret);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state->op_ret = EOK;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_done(req);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek}

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekstruct kcm_op_initialize_state {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek uint32_t op_ret;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_op_ctx *op_ctx;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct tevent_context *ev;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_ccache *new_cc;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek const char *name;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek krb5_principal princ;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek};

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekstatic void kcm_op_initialize_got_byname(struct tevent_req *subreq);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekstatic void kcm_op_initialize_cc_create_done(struct tevent_req *subreq);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekstatic void kcm_op_initialize_cc_delete_done(struct tevent_req *subreq);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekstatic void kcm_op_initialize_create_step(struct tevent_req *req);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekstatic void kcm_op_initialize_got_default(struct tevent_req *subreq);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekstatic void kcm_op_initialize_set_default_done(struct tevent_req *subreq);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekstatic struct tevent_req *kcm_op_initialize_send(TALLOC_CTX *mem_ctx,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct tevent_context *ev,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_op_ctx *op_ctx)

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek{

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct tevent_req *req = NULL;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct tevent_req *subreq = NULL;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_op_initialize_state *state = NULL;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek errno_t ret;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek req = tevent_req_create(mem_ctx, &state, struct kcm_op_initialize_state);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (req == NULL) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return NULL;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state->op_ctx = op_ctx;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state->ev = ev;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret = sss_iobuf_read_stringz(op_ctx->input, &state->name);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (ret != EOK) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek DEBUG(SSSDBG_CRIT_FAILURE,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek "Cannot read input name [%d]: %s\n",

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret, sss_strerror(ret));

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek goto immediate;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek DEBUG(SSSDBG_TRACE_LIBS, "Initializing ccache %s\n", state->name);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret = kcm_check_name(state->name, op_ctx->client);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (ret != EOK) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek DEBUG(SSSDBG_CRIT_FAILURE,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek "Name %s is malformed [%d]: %s\n",

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state->name, ret, sss_strerror(ret));

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek goto immediate;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret = sss_krb5_unmarshal_princ(op_ctx, op_ctx->input, &state->princ);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (ret != EOK) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek DEBUG(SSSDBG_CRIT_FAILURE,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek "Cannot unmarshal principal [%d]: %s\n",

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret, sss_strerror(ret));

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek goto immediate;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek subreq = kcm_ccdb_getbyname_send(state, ev,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek op_ctx->kcm_data->db,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek op_ctx->client,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state->name);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (subreq == NULL) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret = ENOMEM;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek goto immediate;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_set_callback(subreq, kcm_op_initialize_got_byname, req);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return req;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekimmediate:

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_error(req, ret);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_post(req, ev);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return req;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek}

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekstatic void kcm_op_initialize_got_byname(struct tevent_req *subreq)

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek{

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek errno_t ret;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct tevent_req *req = tevent_req_callback_data(subreq,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct tevent_req);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_op_initialize_state *state = tevent_req_data(req,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_op_initialize_state);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek bool ok;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek uuid_t uuid;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret = kcm_ccdb_getbyname_recv(subreq, state, &state->new_cc);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek talloc_zfree(subreq);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (ret != EOK) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek DEBUG(SSSDBG_OP_FAILURE,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek "Cannot get ccache by name [%d]: %s\n",

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret, sss_strerror(ret));

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_error(req, ret);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (state->new_cc != NULL) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ok = kcm_cc_access(state->new_cc, state->op_ctx->client);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (!ok) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state->op_ret = EACCES;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_done(req);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret = kcm_cc_get_uuid(state->new_cc, uuid);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (ret != EOK) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek DEBUG(SSSDBG_OP_FAILURE,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek "Cannot get new ccache UUID [%d]: %s\n",

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret, sss_strerror(ret));

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek /* Nuke any previous cache and its contents during initialization */

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek subreq = kcm_ccdb_delete_cc_send(state,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state->ev,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state->op_ctx->kcm_data->db,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state->op_ctx->client,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek uuid);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (subreq == NULL) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_error(req, ret);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_set_callback(subreq, kcm_op_initialize_cc_delete_done, req);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek kcm_op_initialize_create_step(req);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek}

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekstatic void kcm_op_initialize_cc_delete_done(struct tevent_req *subreq)

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek{

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct tevent_req *req = tevent_req_callback_data(subreq,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct tevent_req);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek errno_t ret;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret = kcm_ccdb_delete_cc_recv(subreq);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek talloc_zfree(subreq);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (ret != EOK) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek DEBUG(SSSDBG_OP_FAILURE,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek "Cannot delete ccache from the db %d: %s\n",

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret, sss_strerror(ret));

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_error(req, ret);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek kcm_op_initialize_create_step(req);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek}

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekstatic void kcm_op_initialize_create_step(struct tevent_req *req)

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek{

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct tevent_req *subreq;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_op_initialize_state *state = tevent_req_data(req,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_op_initialize_state);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek errno_t ret;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret = kcm_cc_new(state->op_ctx,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state->op_ctx->kcm_data->k5c,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state->op_ctx->client,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state->name,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state->princ,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek &state->new_cc);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (ret != EOK) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek DEBUG(SSSDBG_OP_FAILURE,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek "Cannot create new ccache %d: %s\n", ret, sss_strerror(ret));

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_error(req, ret);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek subreq = kcm_ccdb_create_cc_send(state,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state->ev,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state->op_ctx->kcm_data->db,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state->op_ctx->client,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state->new_cc);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (subreq == NULL) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_error(req, ret);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_set_callback(subreq, kcm_op_initialize_cc_create_done, req);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek}

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekstatic void kcm_op_initialize_cc_create_done(struct tevent_req *subreq)

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek{

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct tevent_req *req = tevent_req_callback_data(subreq,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct tevent_req);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_op_initialize_state *state = tevent_req_data(req,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_op_initialize_state);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek errno_t ret;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret = kcm_ccdb_create_cc_recv(subreq);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek talloc_zfree(subreq);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (ret != EOK) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek DEBUG(SSSDBG_OP_FAILURE,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek "Cannot add ccache to db %d: %s\n", ret, sss_strerror(ret));

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_error(req, ret);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek /* If there was no previous default ccache, set this one as default */

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek subreq = kcm_ccdb_get_default_send(state, state->ev,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state->op_ctx->kcm_data->db,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state->op_ctx->client);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (subreq == NULL) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_error(req, ret);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_set_callback(subreq, kcm_op_initialize_got_default, req);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek}

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekstatic void kcm_op_initialize_got_default(struct tevent_req *subreq)

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek{

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct tevent_req *req = tevent_req_callback_data(subreq,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct tevent_req);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_op_initialize_state *state = tevent_req_data(req,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_op_initialize_state);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek errno_t ret;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek uuid_t dfl_uuid;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek uuid_t old_dfl_uuid;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret = kcm_ccdb_get_default_recv(subreq, &old_dfl_uuid);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek talloc_zfree(subreq);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (ret != EOK) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek DEBUG(SSSDBG_OP_FAILURE,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek "Cannot get default ccache [%d]: %s\n",

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret, sss_strerror(ret));

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_error(req, ret);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (uuid_is_null(old_dfl_uuid) == false) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek /* If there was a previous default ccache, switch to the initialized

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret = kcm_cc_get_uuid(state->new_cc, dfl_uuid);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (ret != EOK) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek DEBUG(SSSDBG_OP_FAILURE,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek "Cannot get new ccache UUID [%d]: %s\n",

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret, sss_strerror(ret));

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek subreq = kcm_ccdb_set_default_send(state,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state->ev,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state->op_ctx->kcm_data->db,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state->op_ctx->client,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek dfl_uuid);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (subreq == NULL) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_error(req, ENOMEM);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_set_callback(subreq, kcm_op_initialize_set_default_done, req);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek /* ENOENT, done */

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state->op_ret = EOK;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_done(req);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek}

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekstatic void kcm_op_initialize_set_default_done(struct tevent_req *subreq)

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek{

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct tevent_req *req = tevent_req_callback_data(subreq,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct tevent_req);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_op_initialize_state *state = tevent_req_data(req,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_op_initialize_state);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek errno_t ret;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret = kcm_ccdb_set_default_recv(subreq);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek talloc_zfree(subreq);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (ret != EOK) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek DEBUG(SSSDBG_OP_FAILURE,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek "Cannot set default ccache %d: %s\n", ret, sss_strerror(ret));

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_error(req, ret);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state->op_ret = EOK;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_done(req);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek}

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekstatic errno_t kcm_op_initialize_recv(struct tevent_req *req,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek uint32_t *_op_ret)

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek{

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek KCM_OP_RET_FROM_TYPE(req, struct kcm_op_initialize_state, _op_ret);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek}

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekstatic void kcm_op_destroy_getbyname_done(struct tevent_req *subreq);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekstatic void kcm_op_destroy_delete_done(struct tevent_req *subreq);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekstatic struct tevent_req *kcm_op_destroy_send(TALLOC_CTX *mem_ctx,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct tevent_context *ev,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_op_ctx *op_ctx)

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek{

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct tevent_req *req = NULL;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct tevent_req *subreq = NULL;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_op_common_state *state = NULL;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek errno_t ret;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek const char *name;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek req = tevent_req_create(mem_ctx, &state, struct kcm_op_common_state);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (req == NULL) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return NULL;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state->op_ctx = op_ctx;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state->ev = ev;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret = sss_iobuf_read_stringz(op_ctx->input, &name);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (ret != EOK) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek DEBUG(SSSDBG_OP_FAILURE,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek "Cannot unmarshall input name [%d]: %s\n",

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret, sss_strerror(ret));

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek goto immediate;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek DEBUG(SSSDBG_TRACE_LIBS, "Destroying credentials of %s\n", name);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek subreq = kcm_ccdb_uuid_by_name_send(state, ev,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek op_ctx->kcm_data->db,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek op_ctx->client,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek name);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (subreq == NULL) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret = ENOMEM;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek goto immediate;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_set_callback(subreq, kcm_op_destroy_getbyname_done, req);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return req;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekimmediate:

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_error(req, ret);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_post(req, ev);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return req;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek}

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekstatic void kcm_op_destroy_getbyname_done(struct tevent_req *subreq)

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek{

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek errno_t ret;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct tevent_req *req = tevent_req_callback_data(subreq,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct tevent_req);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_op_common_state *state = tevent_req_data(req,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_op_common_state);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek uuid_t uuid;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret = kcm_ccdb_uuid_by_name_recv(subreq, state, uuid);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek talloc_zfree(subreq);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (ret != EOK) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek DEBUG(SSSDBG_OP_FAILURE,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek "Cannot get matching ccache [%d]: %s\n",

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret, sss_strerror(ret));

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_error(req, ret);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek subreq = kcm_ccdb_delete_cc_send(state,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state->ev,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state->op_ctx->kcm_data->db,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state->op_ctx->client,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek uuid);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (subreq == NULL) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_error(req, ret);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_set_callback(subreq, kcm_op_destroy_delete_done, req);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek}

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekstatic void kcm_op_destroy_delete_done(struct tevent_req *subreq)

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek{

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek errno_t ret;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct tevent_req *req = tevent_req_callback_data(subreq,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct tevent_req);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_op_common_state *state = tevent_req_data(req,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_op_common_state);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret = kcm_ccdb_delete_cc_recv(subreq);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek talloc_zfree(subreq);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (ret != EOK) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek DEBUG(SSSDBG_OP_FAILURE,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek "Cannot delete ccache from the db [%d]: %s\n",

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret, sss_strerror(ret));

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_error(req, ret);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state->op_ret = EOK;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_done(req);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek}

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekstruct kcm_op_store_state {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek uint32_t op_ret;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_op_ctx *op_ctx;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct tevent_context *ev;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct sss_iobuf *cred_blob;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek};

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekstatic void kcm_op_store_getbyname_done(struct tevent_req *subreq);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekstatic void kcm_op_store_done(struct tevent_req *subreq);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekstatic struct tevent_req *kcm_op_store_send(TALLOC_CTX *mem_ctx,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct tevent_context *ev,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_op_ctx *op_ctx)

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek{

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct tevent_req *req = NULL;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct tevent_req *subreq = NULL;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_op_store_state *state = NULL;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek errno_t ret;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek const char *name;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek size_t creds_len;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek req = tevent_req_create(mem_ctx, &state, struct kcm_op_store_state);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (req == NULL) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return NULL;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state->op_ctx = op_ctx;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state->ev = ev;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret = sss_iobuf_read_stringz(op_ctx->input, &name);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (ret != EOK) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek DEBUG(SSSDBG_OP_FAILURE,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek "Cannot unmarshall input name [%d]: %s\n",

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret, sss_strerror(ret));

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek goto immediate;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek DEBUG(SSSDBG_TRACE_LIBS, "Storing credentials for %s\n", name);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek creds_len = sss_iobuf_get_size(op_ctx->input) - strlen(name) -1;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (creds_len > KCM_REPLY_MAX) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek /* Protects against underflows and in general adds sanity */

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret = E2BIG;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek goto immediate;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state->cred_blob = sss_iobuf_init_empty(state,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek creds_len,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek creds_len);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (state->cred_blob == NULL) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret = ENOMEM;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek goto immediate;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret = sss_iobuf_read(op_ctx->input,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek creds_len,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek sss_iobuf_get_data(state->cred_blob),

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek NULL);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (ret != EOK) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek DEBUG(SSSDBG_OP_FAILURE,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek "Cannot unmarshall input cred blob [%d]: %s\n",

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret, sss_strerror(ret));

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek goto immediate;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek subreq = kcm_ccdb_uuid_by_name_send(state, ev,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek op_ctx->kcm_data->db,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek op_ctx->client,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek name);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (subreq == NULL) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret = ENOMEM;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek goto immediate;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_set_callback(subreq, kcm_op_store_getbyname_done, req);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return req;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekimmediate:

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_error(req, ret);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_post(req, ev);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return req;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek}

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekstatic void kcm_op_store_getbyname_done(struct tevent_req *subreq)

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek{

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek errno_t ret;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct tevent_req *req = tevent_req_callback_data(subreq,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct tevent_req);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_op_store_state *state = tevent_req_data(req,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_op_store_state);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek uuid_t uuid;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret = kcm_ccdb_uuid_by_name_recv(subreq, state, uuid);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek talloc_zfree(subreq);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (ret != EOK) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek DEBUG(SSSDBG_OP_FAILURE,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek "Cannot get ccache by name [%d]: %s\n",

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret, sss_strerror(ret));

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_error(req, ret);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek subreq = kcm_ccdb_store_cred_blob_send(state, state->ev,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state->op_ctx->kcm_data->db,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state->op_ctx->client,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek uuid,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state->cred_blob);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (subreq == NULL) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_error(req, ENOMEM);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_set_callback(subreq, kcm_op_store_done, req);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek}

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekstatic void kcm_op_store_done(struct tevent_req *subreq)

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek{

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek errno_t ret;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct tevent_req *req = tevent_req_callback_data(subreq,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct tevent_req);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_op_store_state *state = tevent_req_data(req,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_op_store_state);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret = kcm_ccdb_store_cred_blob_recv(subreq);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek talloc_zfree(subreq);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (ret != EOK) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek DEBUG(SSSDBG_OP_FAILURE,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek "Cannot store credentials [%d]: %s\n",

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret, sss_strerror(ret));

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_error(req, ret);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state->op_ret = EOK;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_done(req);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek}

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekstatic errno_t kcm_op_store_recv(struct tevent_req *req,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek uint32_t *_op_ret)

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek{

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek KCM_OP_RET_FROM_TYPE(req, struct kcm_op_store_state, _op_ret);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek}

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekstatic void kcm_op_get_principal_getbyname_done(struct tevent_req *subreq);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekstatic struct tevent_req *kcm_op_get_principal_send(TALLOC_CTX *mem_ctx,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct tevent_context *ev,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_op_ctx *op_ctx)

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek{

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct tevent_req *req = NULL;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct tevent_req *subreq = NULL;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_op_common_state *state = NULL;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek errno_t ret;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek const char *name;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek req = tevent_req_create(mem_ctx, &state, struct kcm_op_common_state);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (req == NULL) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return NULL;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state->op_ctx = op_ctx;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret = sss_iobuf_read_stringz(op_ctx->input, &name);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (ret != EOK) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek goto immediate;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek DEBUG(SSSDBG_TRACE_LIBS, "Requested principal %s\n", name);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek subreq = kcm_ccdb_getbyname_send(state, ev,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek op_ctx->kcm_data->db,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek op_ctx->client,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek name);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (subreq == NULL) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret = ENOMEM;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek goto immediate;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_set_callback(subreq, kcm_op_get_principal_getbyname_done, req);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return req;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekimmediate:

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_error(req, ret);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_post(req, ev);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return req;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek}

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekstatic void kcm_op_get_principal_getbyname_done(struct tevent_req *subreq)

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek{

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek errno_t ret;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_ccache *cc;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek krb5_principal princ;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct tevent_req *req = tevent_req_callback_data(subreq,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct tevent_req);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_op_common_state *state = tevent_req_data(req,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_op_common_state);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret = kcm_ccdb_getbyname_recv(subreq, state, &cc);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek talloc_zfree(subreq);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (ret != EOK) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek DEBUG(SSSDBG_OP_FAILURE,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek "Cannot get ccache by name [%d]: %s\n",

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret, sss_strerror(ret));

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_error(req, ret);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (cc == NULL) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek DEBUG(SSSDBG_MINOR_FAILURE, "No credentials by that name\n");

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state->op_ret = ERR_NO_MATCHING_CREDS;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_done(req);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek /* Marshall the principal to the reply */

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek princ = kcm_cc_get_client_principal(cc);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (princ == NULL) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek DEBUG(SSSDBG_OP_FAILURE,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek "Credentials with no principal?\n");

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_error(req, EIO);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret = sss_krb5_marshal_princ(princ, state->op_ctx->reply);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (ret != EOK) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek DEBUG(SSSDBG_OP_FAILURE,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek "Cannot marshall principal [%d]: %s\n",

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret, sss_strerror(ret));

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_error(req, ret);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state->op_ret = EOK;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_done(req);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek}

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekstatic void kcm_op_get_cred_uuid_getbyname_done(struct tevent_req *subreq);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekstatic struct tevent_req *

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekkcm_op_get_cred_uuid_list_send(TALLOC_CTX *mem_ctx,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct tevent_context *ev,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_op_ctx *op_ctx)

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek{

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct tevent_req *req = NULL;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct tevent_req *subreq = NULL;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_op_common_state *state = NULL;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek errno_t ret;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek const char *name;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek req = tevent_req_create(mem_ctx, &state, struct kcm_op_common_state);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (req == NULL) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return NULL;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state->op_ctx = op_ctx;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret = sss_iobuf_read_stringz(op_ctx->input, &name);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (ret != EOK) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek goto immediate;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek DEBUG(SSSDBG_TRACE_LIBS, "Returning UUID list for %s\n", name);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek subreq = kcm_ccdb_getbyname_send(state, ev,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek op_ctx->kcm_data->db,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek op_ctx->client,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek name);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (subreq == NULL) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret = ENOMEM;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek goto immediate;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_set_callback(subreq, kcm_op_get_cred_uuid_getbyname_done, req);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return req;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekimmediate:

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_error(req, ret);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_post(req, ev);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return req;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek}

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekstatic void kcm_op_get_cred_uuid_getbyname_done(struct tevent_req *subreq)

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek{

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek errno_t ret;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_ccache *cc;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_cred *crd;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek uuid_t uuid;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct tevent_req *req = tevent_req_callback_data(subreq,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct tevent_req);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_op_common_state *state = tevent_req_data(req,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_op_common_state);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret = kcm_ccdb_getbyname_recv(subreq, state, &cc);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek talloc_zfree(subreq);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (ret != EOK) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek DEBUG(SSSDBG_OP_FAILURE,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek "Cannot get ccache by name [%d]: %s\n",

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret, sss_strerror(ret));

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_error(req, ret);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (cc == NULL) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek DEBUG(SSSDBG_MINOR_FAILURE, "No credentials by that UUID\n");

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state->op_ret = ERR_NO_CREDS;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_done(req);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek for (crd = kcm_cc_get_cred(cc);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek crd != NULL;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek crd = kcm_cc_next_cred(crd)) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret = kcm_cred_get_uuid(crd, uuid);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (ret != EOK) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek DEBUG(SSSDBG_MINOR_FAILURE, "Credential has no UUID, skipping\n");

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek continue;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek kcm_debug_uuid(uuid);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret = sss_iobuf_write_len(state->op_ctx->reply,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek uuid, UUID_BYTES);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (ret != EOK) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek char uuid_errbuf[UUID_STR_SIZE];

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek uuid_parse(uuid_errbuf, uuid);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek DEBUG(SSSDBG_MINOR_FAILURE,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek "Cannot marshall UUID %s [%d]: %s\n",

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek uuid_errbuf, ret, sss_strerror(ret));

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek continue;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state->op_ret = EOK;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_done(req);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek}

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekstatic void kcm_op_get_cred_by_uuid_getbyname_done(struct tevent_req *subreq);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekstatic struct tevent_req *

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekkcm_op_get_cred_by_uuid_send(TALLOC_CTX *mem_ctx,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct tevent_context *ev,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_op_ctx *op_ctx)

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek{

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct tevent_req *req = NULL;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct tevent_req *subreq = NULL;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_op_common_state *state = NULL;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek errno_t ret;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek const char *name;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek req = tevent_req_create(mem_ctx, &state, struct kcm_op_common_state);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (req == NULL) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return NULL;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state->op_ctx = op_ctx;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret = sss_iobuf_read_stringz(op_ctx->input, &name);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (ret != EOK) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek goto immediate;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek DEBUG(SSSDBG_TRACE_LIBS, "Returning creds by UUID for %s\n", name);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek subreq = kcm_ccdb_getbyname_send(state, ev,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek op_ctx->kcm_data->db,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek op_ctx->client,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek name);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (subreq == NULL) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret = ENOMEM;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek goto immediate;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_set_callback(subreq, kcm_op_get_cred_by_uuid_getbyname_done, req);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return req;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekimmediate:

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_error(req, ret);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_post(req, ev);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return req;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek}

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekstatic void kcm_op_get_cred_by_uuid_getbyname_done(struct tevent_req *subreq)

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek{

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct tevent_req *req = tevent_req_callback_data(subreq,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct tevent_req);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_op_common_state *state = tevent_req_data(req,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_op_common_state);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek errno_t ret;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_ccache *cc;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_cred *crd;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek uuid_t uuid_in;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek uuid_t uuid;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct sss_iobuf *cred_blob;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret = kcm_ccdb_getbyname_recv(subreq, state, &cc);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek talloc_zfree(subreq);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (ret != EOK) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek DEBUG(SSSDBG_OP_FAILURE,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek "Cannot get ccache by name [%d]: %s\n",

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret, sss_strerror(ret));

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_error(req, ret);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (cc == NULL) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek DEBUG(SSSDBG_MINOR_FAILURE, "No credentials by that name\n");

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state->op_ret = ERR_NO_MATCHING_CREDS;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_done(req);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret = sss_iobuf_read_len(state->op_ctx->input,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek UUID_BYTES, uuid_in);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (ret != EOK) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek DEBUG(SSSDBG_OP_FAILURE,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek "Cannot read input UUID [%d]: %s\n",

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret, sss_strerror(ret));

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_error(req, ret);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek for (crd = kcm_cc_get_cred(cc);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek crd != NULL;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek crd = kcm_cc_next_cred(crd)) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret = kcm_cred_get_uuid(crd, uuid);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (ret != EOK) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek DEBUG(SSSDBG_MINOR_FAILURE,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek "Cannot get UUID from creds, skipping\n");

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek continue;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (uuid_compare(uuid, uuid_in) == 0) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek break;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek kcm_debug_uuid(uuid);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (crd == NULL) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state->op_ret = ERR_KCM_CC_END;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek DEBUG(SSSDBG_MINOR_FAILURE, "No credentials by that UUID\n");

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_done(req);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek cred_blob = kcm_cred_get_creds(crd);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (cred_blob == NULL) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek DEBUG(SSSDBG_CRIT_FAILURE, "Credentials lack the creds blob\n");

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state->op_ret = ERR_NO_CREDS;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_done(req);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret = sss_iobuf_write_len(state->op_ctx->reply,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek sss_iobuf_get_data(cred_blob),

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek sss_iobuf_get_size(cred_blob));

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (ret != EOK) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek DEBUG(SSSDBG_OP_FAILURE,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek "Cannot write ccache blob [%d]: %s\n",

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret, sss_strerror(ret));

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_error(req, ret);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state->op_ret = EOK;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_done(req);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek}

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekstatic struct tevent_req *

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekkcm_op_remove_cred_send(TALLOC_CTX *mem_ctx,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct tevent_context *ev,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_op_ctx *op_ctx)

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek{

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct tevent_req *req = NULL;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_op_common_state *state = NULL;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek req = tevent_req_create(mem_ctx, &state, struct kcm_op_common_state);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (req == NULL) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return NULL;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state->op_ctx = op_ctx;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state->op_ret = ERR_KCM_OP_NOT_IMPLEMENTED;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_post(req, ev);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_done(req);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return req;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek}

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekstatic void kcm_op_get_cache_uuid_list_done(struct tevent_req *subreq);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekstatic struct tevent_req *

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekkcm_op_get_cache_uuid_list_send(TALLOC_CTX *mem_ctx,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct tevent_context *ev,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_op_ctx *op_ctx)

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek{

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct tevent_req *req = NULL;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct tevent_req *subreq = NULL;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek struct kcm_op_common_state *state = NULL;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek errno_t ret;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek req = tevent_req_create(mem_ctx, &state, struct kcm_op_common_state);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (req == NULL) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return NULL;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek state->op_ctx = op_ctx;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek DEBUG(SSSDBG_TRACE_LIBS, "Returning full UUID list\n");

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek subreq = kcm_ccdb_list_send(state, ev,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek op_ctx->kcm_data->db,

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek op_ctx->client);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek if (subreq == NULL) {

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek ret = ENOMEM;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek goto immediate;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek }

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_set_callback(subreq, kcm_op_get_cache_uuid_list_done, req);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return req;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekimmediate:

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_error(req, ret);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek tevent_req_post(req, ev);

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek return req;

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek}

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozek

1ec4198f38d34a1f82a2db55d8c9782a434fb55fJakub Hrozekstatic void kcm_op_get_cache_uuid_list_done(struct tevent_req *subreq)