nss_mc_passwd.c revision 287e76479d68db4134274d4a4fca5fe0fbc9a605
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce/*
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce * System Security Services Daemon. NSS client interface
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce *
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce * Copyright (C) Simo Sorce 2011
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce *
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce * This program is free software; you can redistribute it and/or modify
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce * it under the terms of the GNU Lesser General Public License as
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce * published by the Free Software Foundation; either version 2.1 of the
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce * License, or (at your option) any later version.
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce *
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce * This program is distributed in the hope that it will be useful,
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce * but WITHOUT ANY WARRANTY; without even the implied warranty of
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce * GNU Lesser General Public License for more details.
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce *
287e76479d68db4134274d4a4fca5fe0fbc9a605Jan Cholasta * You should have received a copy of the GNU Lesser General Public License
287e76479d68db4134274d4a4fca5fe0fbc9a605Jan Cholasta * along with this program. If not, see <http://www.gnu.org/licenses/>.
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce */
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce/* PASSWD database NSS interface using mmap cache */
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce#include <errno.h>
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce#include <stdio.h>
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce#include <string.h>
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce#include <stdlib.h>
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce#include <sys/mman.h>
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce#include <time.h>
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce#include "nss_mc.h"
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorcestruct sss_cli_mc_ctx pw_mc_ctx = { false, -1, 0, NULL, 0, NULL, 0, NULL, 0 };
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorcestatic errno_t sss_nss_mc_parse_result(struct sss_mc_rec *rec,
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce struct passwd *result,
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce char *buffer, size_t buflen)
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce{
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce struct sss_mc_pwd_data *data;
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce time_t expire;
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce void *cookie;
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce int ret;
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce /* additional checks before filling result*/
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce expire = rec->expire;
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce if (expire < time(NULL)) {
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce /* entry is now invalid */
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce return EINVAL;
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce }
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce data = (struct sss_mc_pwd_data *)rec->data;
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce if (data->strs_len > buflen) {
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce return ERANGE;
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce }
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce /* fill in glibc provided structs */
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce /* copy in buffer */
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce memcpy(buffer, data->strs, data->strs_len);
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce /* fill in passwd */
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce result->pw_uid = data->uid;
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce result->pw_gid = data->gid;
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce cookie = NULL;
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce ret = sss_nss_str_ptr_from_buffer(&result->pw_name, &cookie,
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce buffer, data->strs_len);
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce if (ret) {
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce return ret;
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce }
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce ret = sss_nss_str_ptr_from_buffer(&result->pw_passwd, &cookie,
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce buffer, data->strs_len);
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce if (ret) {
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce return ret;
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce }
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce ret = sss_nss_str_ptr_from_buffer(&result->pw_gecos, &cookie,
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce buffer, data->strs_len);
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce if (ret) {
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce return ret;
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce }
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce ret = sss_nss_str_ptr_from_buffer(&result->pw_dir, &cookie,
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce buffer, data->strs_len);
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce if (ret) {
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce return ret;
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce }
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce ret = sss_nss_str_ptr_from_buffer(&result->pw_shell, &cookie,
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce buffer, data->strs_len);
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce if (ret) {
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce return ret;
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce }
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce if (cookie != NULL) {
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce return EINVAL;
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce }
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce return 0;
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce}
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorceerrno_t sss_nss_mc_getpwnam(const char *name, size_t name_len,
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce struct passwd *result,
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce char *buffer, size_t buflen)
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce{
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce struct sss_mc_rec *rec = NULL;
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce struct sss_mc_pwd_data *data;
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce char *rec_name;
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce uint32_t hash;
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce uint32_t slot;
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce int ret;
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce ret = sss_nss_mc_get_ctx("passwd", &pw_mc_ctx);
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce if (ret) {
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce return ret;
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce }
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce /* hashes are calculated including the NULL terminator */
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce hash = sss_nss_mc_hash(&pw_mc_ctx, name, name_len + 1);
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce slot = pw_mc_ctx.hash_table[hash];
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce if (slot > MC_SIZE_TO_SLOTS(pw_mc_ctx.dt_size)) {
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce return ENOENT;
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce }
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce while (slot != MC_INVALID_VAL) {
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce ret = sss_nss_mc_get_record(&pw_mc_ctx, slot, &rec);
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce if (ret) {
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce goto done;
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce }
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce /* check record matches what we are searching for */
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce if (hash != rec->hash1) {
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce /* if name hash does not match we can skip this immediately */
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce slot = rec->next;
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce continue;
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce }
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce data = (struct sss_mc_pwd_data *)rec->data;
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce rec_name = (char *)data + data->name;
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce if (strcmp(name, rec_name) == 0) {
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce break;
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce }
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce slot = rec->next;
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce }
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce if (slot == MC_INVALID_VAL) {
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce ret = ENOENT;
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce goto done;
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce }
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce ret = sss_nss_mc_parse_result(rec, result, buffer, buflen);
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorcedone:
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce free(rec);
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce return ret;
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce}
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorceerrno_t sss_nss_mc_getpwuid(uid_t uid,
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce struct passwd *result,
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce char *buffer, size_t buflen)
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce{
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce struct sss_mc_rec *rec = NULL;
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce struct sss_mc_pwd_data *data;
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce char uidstr[11];
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce uint32_t hash;
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce uint32_t slot;
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce int len;
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce int ret;
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce ret = sss_nss_mc_get_ctx("passwd", &pw_mc_ctx);
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce if (ret) {
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce return ret;
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce }
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce len = snprintf(uidstr, 11, "%ld", (long)uid);
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce if (len > 10) {
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce return EINVAL;
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce }
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce /* hashes are calculated including the NULL terminator */
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce hash = sss_nss_mc_hash(&pw_mc_ctx, uidstr, len+1);
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce slot = pw_mc_ctx.hash_table[hash];
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce if (slot > MC_SIZE_TO_SLOTS(pw_mc_ctx.dt_size)) {
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce return ENOENT;
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce }
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce while (slot != MC_INVALID_VAL) {
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce ret = sss_nss_mc_get_record(&pw_mc_ctx, slot, &rec);
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce if (ret) {
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce goto done;
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce }
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce /* check record matches what we are searching for */
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce if (hash != rec->hash2) {
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce /* if uid hash does not match we can skip this immediately */
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce slot = rec->next;
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce continue;
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce }
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce data = (struct sss_mc_pwd_data *)rec->data;
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce if (uid == data->uid) {
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce break;
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce }
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce slot = rec->next;
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce }
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce if (slot == MC_INVALID_VAL) {
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce ret = ENOENT;
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce goto done;
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce }
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce ret = sss_nss_mc_parse_result(rec, result, buffer, buflen);
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorcedone:
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce free(rec);
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce return ret;
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce}
1171986bdc3011555c5b62a9d9ee9f7481f48cdcSimo Sorce