/*
Authors:
Pavel Březina <pbrezina@redhat.com>
Copyright (C) 2016 Red Hat
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation; either version 3 of the License, or
(at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program. If not, see <http://www.gnu.org/licenses/>.
*/
#include <talloc.h>
#include <ldb.h>
#include "db/sysdb.h"
#include "util/util.h"
#include "providers/data_provider.h"
#include "responder/common/cache_req/cache_req_plugin.h"
static errno_t
cache_req_initgroups_by_name_prepare_domain_data(struct cache_req *cr,
struct cache_req_data *data,
struct sss_domain_info *domain)
{
TALLOC_CTX *tmp_ctx;
const char *name;
errno_t ret;
if (cr->data->name.name == NULL) {
DEBUG(SSSDBG_CRIT_FAILURE, "Bug: parsed name is NULL?\n");
return ERR_INTERNAL;
}
tmp_ctx = talloc_new(NULL);
if (tmp_ctx == NULL) {
return ENOMEM;
}
name = sss_get_cased_name(tmp_ctx, cr->data->name.name,
domain->case_sensitive);
if (name == NULL) {
ret = ENOMEM;
goto done;
}
name = sss_reverse_replace_space(tmp_ctx, name, cr->rctx->override_space);
if (name == NULL) {
ret = ENOMEM;
goto done;
}
name = sss_create_internal_fqname(tmp_ctx, name, domain->name);
if (name == NULL) {
ret = ENOMEM;
goto done;
}
talloc_zfree(data->name.lookup);
data->name.lookup = talloc_steal(data, name);
ret = EOK;
done:
talloc_free(tmp_ctx);
return ret;
}
static const char *
cache_req_initgroups_by_name_create_debug_name(TALLOC_CTX *mem_ctx,
struct cache_req_data *data,
struct sss_domain_info *domain)
{
return talloc_strdup(mem_ctx, data->name.lookup);
}
static errno_t
cache_req_initgroups_by_name_ncache_check(struct sss_nc_ctx *ncache,
struct sss_domain_info *domain,
struct cache_req_data *data)
{
return sss_ncache_check_user(ncache, domain, data->name.lookup);
}
static errno_t
cache_req_initgroups_by_name_ncache_add(struct sss_nc_ctx *ncache,
struct sss_domain_info *domain,
struct cache_req_data *data)
{
return sss_ncache_set_user(ncache, false, domain, data->name.lookup);
}
static errno_t
cache_req_initgroups_by_name_lookup(TALLOC_CTX *mem_ctx,
struct cache_req *cr,
struct cache_req_data *data,
struct sss_domain_info *domain,
struct ldb_result **_result)
{
return sysdb_initgroups_with_views(mem_ctx, domain, data->name.lookup,
_result);
}
static errno_t
cache_req_initgroups_by_name_dpreq_params(TALLOC_CTX *mem_ctx,
struct cache_req *cr,
struct ldb_result *result,
const char **_string,
uint32_t *_id,
const char **_flag)
{
struct ldb_result *user;
const char *name;
errno_t ret;
*_id = 0;
*_string = cr->data->name.lookup;
*_flag = NULL;
if (!DOM_HAS_VIEWS(cr->domain)) {
return EOK;
}
/* We must search with views. */
if (result == NULL || result->count == 0) {
*_flag = EXTRA_INPUT_MAYBE_WITH_VIEW;
return EOK;
}
/* If domain has views we will try to use original values instead of the
* overridden ones. This is a must for the LOCAL view since we can't look
* it up otherwise. But it is also a shortcut for non-local views where
* we will not fail over to the overridden value. */
ret = sysdb_getpwnam_with_views(NULL, cr->domain,
cr->data->name.lookup, &user);
if (ret != EOK || user == NULL || user->count != 1) {
/* Case where the user is not found has been already handled. If
* this is not OK, it is an error. */
CACHE_REQ_DEBUG(SSSDBG_CRIT_FAILURE, cr,
"Unable to match initgroups user [%d]: %s\n",
ret, sss_strerror(ret));
return ret;
}
name = ldb_msg_find_attr_as_string(user->msgs[0], SYSDB_NAME, NULL);
talloc_free(user);
if (name == NULL) {
DEBUG(SSSDBG_CRIT_FAILURE, "Bug: name cannot be NULL\n");
return ERR_INTERNAL;
}
/* Now we have the original name. We don't have to search with
* views unless some error occurred. */
*_string = talloc_steal(mem_ctx, name);
return EOK;
}
struct cache_req_plugin cache_req_initgroups_by_name = {
.name = "Initgroups by name",
.dp_type = SSS_DP_INITGROUPS,
.attr_expiration = SYSDB_INITGR_EXPIRE,
.parse_name = true,
.bypass_cache = false,
.only_one_result = false,
.allow_missing_fqn = false,
.allow_switch_to_upn = true,
.upn_equivalent = CACHE_REQ_INITGROUPS_BY_UPN,
.get_next_domain_flags = 0,
.prepare_domain_data_fn = cache_req_initgroups_by_name_prepare_domain_data,
.create_debug_name_fn = cache_req_initgroups_by_name_create_debug_name,
.global_ncache_add_fn = NULL,
.ncache_check_fn = cache_req_initgroups_by_name_ncache_check,
.ncache_add_fn = cache_req_initgroups_by_name_ncache_add,
.lookup_fn = cache_req_initgroups_by_name_lookup,
.dpreq_params_fn = cache_req_initgroups_by_name_dpreq_params
};
struct tevent_req *
cache_req_initgr_by_name_send(TALLOC_CTX *mem_ctx,
struct tevent_context *ev,
struct resp_ctx *rctx,
struct sss_nc_ctx *ncache,
int cache_refresh_percent,
const char *domain,
const char *name)
{
struct cache_req_data *data;
data = cache_req_data_name(mem_ctx, CACHE_REQ_INITGROUPS, name);
if (data == NULL) {
return NULL;
}
return cache_req_steal_data_and_send(mem_ctx, ev, rctx, ncache,
cache_refresh_percent, domain, data);
}