/* Unix SMB/CIFS implementation. Winbind Utility functions Copyright (C) Gerald (Jerry) Carter 2007 This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program. If not, see . */ #include "includes.h" #include "../libcli/security/security.h" #include "../lib/util/util_pw.h" #include "nsswitch/libwbclient/wbclient.h" #include "lib/winbind_util.h" #if defined(WITH_WINBIND) struct passwd * winbind_getpwnam(const char * name) { wbcErr result; struct passwd * tmp_pwd = NULL; struct passwd * pwd = NULL; result = wbcGetpwnam(name, &tmp_pwd); if (result != WBC_ERR_SUCCESS) return pwd; pwd = tcopy_passwd(talloc_tos(), tmp_pwd); wbcFreeMemory(tmp_pwd); return pwd; } struct passwd * winbind_getpwsid(const struct dom_sid *sid) { wbcErr result; struct passwd * tmp_pwd = NULL; struct passwd * pwd = NULL; struct wbcDomainSid dom_sid; memcpy(&dom_sid, sid, sizeof(dom_sid)); result = wbcGetpwsid(&dom_sid, &tmp_pwd); if (result != WBC_ERR_SUCCESS) return pwd; pwd = tcopy_passwd(talloc_tos(), tmp_pwd); wbcFreeMemory(tmp_pwd); return pwd; } /* Call winbindd to convert a name to a sid */ bool winbind_lookup_name(const char *dom_name, const char *name, struct dom_sid *sid, enum lsa_SidType *name_type) { struct wbcDomainSid dom_sid; wbcErr result; enum wbcSidType type; result = wbcLookupName(dom_name, name, &dom_sid, &type); if (result != WBC_ERR_SUCCESS) return false; memcpy(sid, &dom_sid, sizeof(struct dom_sid)); *name_type = (enum lsa_SidType)type; return true; } /* Call winbindd to convert sid to name */ bool winbind_lookup_sid(TALLOC_CTX *mem_ctx, const struct dom_sid *sid, const char **domain, const char **name, enum lsa_SidType *name_type) { struct wbcDomainSid dom_sid; wbcErr result; enum wbcSidType type; char *domain_name = NULL; char *account_name = NULL; memcpy(&dom_sid, sid, sizeof(dom_sid)); result = wbcLookupSid(&dom_sid, &domain_name, &account_name, &type); if (result != WBC_ERR_SUCCESS) return false; /* Copy out result */ if (domain) { *domain = talloc_strdup(mem_ctx, domain_name); } if (name) { *name = talloc_strdup(mem_ctx, account_name); } *name_type = (enum lsa_SidType)type; DEBUG(10, ("winbind_lookup_sid: SUCCESS: SID %s -> %s %s\n", sid_string_dbg(sid), domain_name, account_name)); wbcFreeMemory(domain_name); wbcFreeMemory(account_name); if ((domain && !*domain) || (name && !*name)) { DEBUG(0,("winbind_lookup_sid: talloc() failed!\n")); return false; } return true; } /* Ping winbindd to see it is alive */ bool winbind_ping(void) { wbcErr result = wbcPing(); return (result == WBC_ERR_SUCCESS); } /* Call winbindd to convert SID to uid */ bool winbind_sid_to_uid(uid_t *puid, const struct dom_sid *sid) { struct wbcDomainSid dom_sid; wbcErr result; memcpy(&dom_sid, sid, sizeof(dom_sid)); result = wbcSidToUid(&dom_sid, puid); return (result == WBC_ERR_SUCCESS); } /* Call winbindd to convert uid to sid */ bool winbind_uid_to_sid(struct dom_sid *sid, uid_t uid) { struct wbcDomainSid dom_sid; wbcErr result; result = wbcUidToSid(uid, &dom_sid); if (result == WBC_ERR_SUCCESS) { memcpy(sid, &dom_sid, sizeof(struct dom_sid)); } else { sid_copy(sid, &global_sid_NULL); } return (result == WBC_ERR_SUCCESS); } /* Call winbindd to convert SID to gid */ bool winbind_sid_to_gid(gid_t *pgid, const struct dom_sid *sid) { struct wbcDomainSid dom_sid; wbcErr result; memcpy(&dom_sid, sid, sizeof(dom_sid)); result = wbcSidToGid(&dom_sid, pgid); return (result == WBC_ERR_SUCCESS); } /* Call winbindd to convert gid to sid */ bool winbind_gid_to_sid(struct dom_sid *sid, gid_t gid) { struct wbcDomainSid dom_sid; wbcErr result; result = wbcGidToSid(gid, &dom_sid); if (result == WBC_ERR_SUCCESS) { memcpy(sid, &dom_sid, sizeof(struct dom_sid)); } else { sid_copy(sid, &global_sid_NULL); } return (result == WBC_ERR_SUCCESS); } bool winbind_xid_to_sid(struct dom_sid *sid, const struct unixid *xid) { struct wbcUnixId wbc_xid; struct wbcDomainSid dom_sid; wbcErr result; switch (xid->type) { case ID_TYPE_UID: wbc_xid = (struct wbcUnixId) { .type = WBC_ID_TYPE_UID, .id.uid = xid->id }; break; case ID_TYPE_GID: wbc_xid = (struct wbcUnixId) { .type = WBC_ID_TYPE_GID, .id.gid = xid->id }; break; default: return false; } result = wbcUnixIdsToSids(&wbc_xid, 1, &dom_sid); if (result != WBC_ERR_SUCCESS) { return false; } memcpy(sid, &dom_sid, sizeof(struct dom_sid)); return true; } /* Check for a trusted domain */ wbcErr wb_is_trusted_domain(const char *domain) { wbcErr result; struct wbcDomainInfo *info = NULL; result = wbcDomainInfo(domain, &info); if (WBC_ERROR_IS_OK(result)) { wbcFreeMemory(info); } return result; } /* Lookup a set of rids in a given domain */ bool winbind_lookup_rids(TALLOC_CTX *mem_ctx, const struct dom_sid *domain_sid, int num_rids, uint32_t *rids, const char **domain_name, const char ***names, enum lsa_SidType **types) { const char *dom_name = NULL; const char **namelist = NULL; enum wbcSidType *name_types = NULL; struct wbcDomainSid dom_sid; wbcErr ret; int i; memcpy(&dom_sid, domain_sid, sizeof(struct wbcDomainSid)); ret = wbcLookupRids(&dom_sid, num_rids, rids, &dom_name, &namelist, &name_types); if (ret != WBC_ERR_SUCCESS) { return false; } *domain_name = talloc_strdup(mem_ctx, dom_name); *names = talloc_array(mem_ctx, const char*, num_rids); *types = talloc_array(mem_ctx, enum lsa_SidType, num_rids); for(i=0; i