22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnik

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnik#ifndef __SSS_RESPONDER_H__

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnik#define __SSS_RESPONDER_H__

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnik

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnik#include "config.h"

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnik

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnik#include <stdint.h>

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnik#include <sys/un.h>

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnik#include <pcre.h>

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnik#include <sys/resource.h>

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnik#include <talloc.h>

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnik#include <tevent.h>

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnik#include <ldb.h>

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnik#include <dhash.h>

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnik

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnik#include "sbus/sssd_dbus.h"

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnik#include "sss_client/sss_cli.h"

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnik

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnikextern hash_table_t *dp_requests;

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnik

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnik#define NEED_CHECK_PROVIDER(provider) \

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnik (provider != NULL && strcmp(provider, "local") != 0)

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnik

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnikstruct cli_request {

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnik

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnik /* original request from the wire */

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnik struct sss_packet *in;

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnik

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnik /* reply data */

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnik struct sss_packet *out;

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnik};

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnik

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnikstruct cli_protocol_version {

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnik uint32_t version;

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnik const char *date;

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnik const char *description;

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnik};

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnik

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnikstruct resp_ctx;

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnik

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnikstruct be_conn {

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnik struct be_conn *next;

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnik struct be_conn *prev;

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnik

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnik struct resp_ctx *rctx;

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnik

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnik const char *cli_name;

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnik struct sss_domain_info *domain;

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnik

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnik char *sbus_address;

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnik struct sbus_interface *intf;

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnik struct sbus_connection *conn;

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnik};

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnik

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnikstruct resp_ctx {

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnik struct tevent_context *ev;

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnik struct tevent_fd *lfde;

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnik int lfd;

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnik struct tevent_fd *priv_lfde;

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnik int priv_lfd;

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnik struct confdb_ctx *cdb;

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnik const char *sock_name;

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnik const char *priv_sock_name;

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnik

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnik struct sbus_connection *mon_conn;

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnik struct be_conn *be_conns;

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnik

22d381367c27910fe82f476a76b9f4ede555e35aLukas Slebodnik struct sss_domain_info *domains;

int domains_timeout;

int client_idle_timeout;

struct sss_cmd_table *sss_cmds;

const char *sss_pipe_name;

const char *confdb_service_path;

hash_table_t *dp_request_table;

struct timeval get_domains_last_call;

size_t allowed_uids_count;

uid_t *allowed_uids;

char *default_domain;

void *pvt_ctx;

bool shutting_down;

};

struct cli_ctx {

struct tevent_context *ev;

struct resp_ctx *rctx;

int cfd;

struct tevent_fd *cfde;

struct sockaddr_un addr;

struct cli_request *creq;

struct cli_protocol_version *cli_protocol_version;

int priv;

int32_t client_euid;

int32_t client_egid;

int32_t client_pid;

int pwent_dom_idx;

int pwent_cur;

int grent_dom_idx;

int grent_cur;

int svc_dom_idx;

int svcent_cur;

char *netgr_name;

int netgrent_cur;

char *automntmap_name;

struct tevent_timer *idle;

};

struct sss_cmd_table {

enum sss_cli_command cmd;

int (*fn)(struct cli_ctx *cctx);

};

int sss_process_init(TALLOC_CTX *mem_ctx,

struct tevent_context *ev,

struct confdb_ctx *cdb,

struct sss_cmd_table sss_cmds[],

const char *sss_pipe_name,

const char *sss_priv_pipe_name,

const char *confdb_service_path,

const char *svc_name,

uint16_t svc_version,

struct sbus_interface *monitor_intf,

const char *cli_name,

struct sbus_interface *dp_intf,

struct resp_ctx **responder_ctx);

int sss_parse_name_for_domains(TALLOC_CTX *memctx,

struct sss_domain_info *domains,

const char *default_domain,

const char *orig, char **domain, char **name);

int sss_dp_get_domain_conn(struct resp_ctx *rctx, const char *domain,

struct be_conn **_conn);

struct sss_domain_info *

responder_get_domain(struct resp_ctx *rctx, const char *domain);

errno_t responder_get_domain_by_id(struct resp_ctx *rctx, const char *id,

struct sss_domain_info **_ret_dom);

int sss_cmd_empty_packet(struct sss_packet *packet);

int sss_cmd_send_empty(struct cli_ctx *cctx, TALLOC_CTX *freectx);

int sss_cmd_send_error(struct cli_ctx *cctx, int err);

void sss_cmd_done(struct cli_ctx *cctx, void *freectx);

int sss_cmd_get_version(struct cli_ctx *cctx);

int sss_cmd_execute(struct cli_ctx *cctx,

enum sss_cli_command cmd,

struct sss_cmd_table *sss_cmds);

struct cli_protocol_version *register_cli_protocol_version(void);

struct setent_req_list;

struct tevent_req *setent_get_req(struct setent_req_list *sl);

errno_t setent_add_ref(TALLOC_CTX *memctx,

void *pvt,

struct setent_req_list **list,

struct tevent_req *req);

void setent_notify(struct setent_req_list **list, errno_t err);

void setent_notify_done(struct setent_req_list **list);

sss_cmd_check_cache(struct ldb_message *msg,

int cache_refresh_percent,

uint64_t cache_expire);

typedef void (*sss_dp_callback_t)(uint16_t err_maj, uint32_t err_min,

const char *err_msg, void *ptr);

struct dp_callback_ctx {

sss_dp_callback_t callback;

void *ptr;

void *mem_ctx;

struct cli_ctx *cctx;

};

void handle_requests_after_reconnect(struct resp_ctx *rctx);

int responder_logrotate(DBusMessage *message,

struct sbus_connection *conn);

typedef DBusMessage * (dbus_msg_constructor)(void *);

sss_dp_issue_request(TALLOC_CTX *mem_ctx, struct resp_ctx *rctx,

const char *strkey, struct sss_domain_info *dom,

dbus_msg_constructor msg_create, void *pvt,

struct tevent_req *nreq);

struct sss_dp_req_state {

dbus_uint16_t dp_err;

dbus_uint32_t dp_ret;

char *err_msg;

};

sss_dp_req_recv(TALLOC_CTX *mem_ctx,

struct tevent_req *sidereq,

dbus_uint16_t *dp_err,

dbus_uint32_t *dp_ret,

char **err_msg);

enum sss_dp_acct_type {

SSS_DP_USER = 1,

SSS_DP_GROUP,

SSS_DP_INITGROUPS,

SSS_DP_NETGR,

SSS_DP_SERVICES,

SSS_DP_SECID,

SSS_DP_USER_AND_GROUP

};

struct tevent_req *

sss_dp_get_account_send(TALLOC_CTX *mem_ctx,

struct resp_ctx *rctx,

struct sss_domain_info *dom,

bool fast_reply,

enum sss_dp_acct_type type,

const char *opt_name,

uint32_t opt_id,

const char *extra);

sss_dp_get_account_recv(TALLOC_CTX *mem_ctx,

struct tevent_req *req,

dbus_uint16_t *err_maj,

dbus_uint32_t *err_min,

char **err_msg);

bool sss_utf8_check(const uint8_t *s, size_t n);

void responder_set_fd_limit(rlim_t fd_limit);

#define GET_DOMAINS_DEFAULT_TIMEOUT 60

struct tevent_req *sss_dp_get_domains_send(TALLOC_CTX *mem_ctx,

struct resp_ctx *rctx,

bool force,

const char *hint);

errno_t sss_dp_get_domains_recv(struct tevent_req *req);

errno_t schedule_get_domains_task(TALLOC_CTX *mem_ctx,

struct tevent_context *ev,

struct resp_ctx *rctx);

errno_t csv_string_to_uid_array(TALLOC_CTX *mem_ctx, const char *cvs_string,

bool allow_sss_loop,

size_t *_uid_count, uid_t **_uids);

errno_t check_allowed_uids(uid_t uid, size_t allowed_uids_count,

uid_t *allowed_uids);

#endif /* __SSS_RESPONDER_H__ */