17c478bd9Sstevel@tonic-gate /*
27c478bd9Sstevel@tonic-gate * CDDL HEADER START
37c478bd9Sstevel@tonic-gate *
47c478bd9Sstevel@tonic-gate * The contents of this file are subject to the terms of the
5*cb5caa98Sdjl * Common Development and Distribution License (the "License").
6*cb5caa98Sdjl * You may not use this file except in compliance with the License.
77c478bd9Sstevel@tonic-gate *
87c478bd9Sstevel@tonic-gate * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
97c478bd9Sstevel@tonic-gate * or http://www.opensolaris.org/os/licensing.
107c478bd9Sstevel@tonic-gate * See the License for the specific language governing permissions
117c478bd9Sstevel@tonic-gate * and limitations under the License.
127c478bd9Sstevel@tonic-gate *
137c478bd9Sstevel@tonic-gate * When distributing Covered Code, include this CDDL HEADER in each
147c478bd9Sstevel@tonic-gate * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
157c478bd9Sstevel@tonic-gate * If applicable, add the following below this CDDL HEADER, with the
167c478bd9Sstevel@tonic-gate * fields enclosed by brackets "[]" replaced with your own identifying
177c478bd9Sstevel@tonic-gate * information: Portions Copyright [yyyy] [name of copyright owner]
187c478bd9Sstevel@tonic-gate *
197c478bd9Sstevel@tonic-gate * CDDL HEADER END
207c478bd9Sstevel@tonic-gate */
217c478bd9Sstevel@tonic-gate /*
22*cb5caa98Sdjl * Copyright 2006 Sun Microsystems, Inc. All rights reserved.
237c478bd9Sstevel@tonic-gate * Use is subject to license terms.
247c478bd9Sstevel@tonic-gate */
257c478bd9Sstevel@tonic-gate
267c478bd9Sstevel@tonic-gate #pragma ident "%Z%%M% %I% %E% SMI"
277c478bd9Sstevel@tonic-gate
287c478bd9Sstevel@tonic-gate #include <secdb.h>
297c478bd9Sstevel@tonic-gate #include <user_attr.h>
307c478bd9Sstevel@tonic-gate #include "ldap_common.h"
317c478bd9Sstevel@tonic-gate
327c478bd9Sstevel@tonic-gate
337c478bd9Sstevel@tonic-gate /* user_attr attributes filters */
347c478bd9Sstevel@tonic-gate #define _USER_NAME "uid"
357c478bd9Sstevel@tonic-gate #define _USER_QUALIFIER "SolarisUserQualifier"
367c478bd9Sstevel@tonic-gate #define _USER_RES1 "SolarisAttrReserved1"
377c478bd9Sstevel@tonic-gate #define _USER_RES2 "SolarisAttrReserved2"
387c478bd9Sstevel@tonic-gate #define _USER_ATTRS "SolarisAttrKeyValue"
397c478bd9Sstevel@tonic-gate #define _USER_GETUSERNAME \
407c478bd9Sstevel@tonic-gate "(&(objectClass=SolarisUserAttr)(uid=%s))"
417c478bd9Sstevel@tonic-gate #define _USER_GETUSERNAME_SSD "(&(%%s)(uid=%s))"
427c478bd9Sstevel@tonic-gate
437c478bd9Sstevel@tonic-gate
447c478bd9Sstevel@tonic-gate static const char *user_attrs[] = {
457c478bd9Sstevel@tonic-gate _USER_NAME,
467c478bd9Sstevel@tonic-gate _USER_QUALIFIER,
477c478bd9Sstevel@tonic-gate _USER_RES1,
487c478bd9Sstevel@tonic-gate _USER_RES2,
497c478bd9Sstevel@tonic-gate _USER_ATTRS,
507c478bd9Sstevel@tonic-gate (char *)NULL
517c478bd9Sstevel@tonic-gate };
52*cb5caa98Sdjl /*
53*cb5caa98Sdjl * _nss_ldap_user2str is the data marshaling method for the user_attr
54*cb5caa98Sdjl * system call getuserattr, getusernam and getuseruid.
55*cb5caa98Sdjl * This method is called after a successful search has been performed.
56*cb5caa98Sdjl * This method will parse the search results into the file format.
57*cb5caa98Sdjl * e.g.
58*cb5caa98Sdjl *
59*cb5caa98Sdjl * adm::::profiles=Log Management
60*cb5caa98Sdjl *
61*cb5caa98Sdjl */
627c478bd9Sstevel@tonic-gate static int
_nss_ldap_user2str(ldap_backend_ptr be,nss_XbyY_args_t * argp)63*cb5caa98Sdjl _nss_ldap_user2str(ldap_backend_ptr be, nss_XbyY_args_t *argp)
647c478bd9Sstevel@tonic-gate {
65*cb5caa98Sdjl int nss_result;
66*cb5caa98Sdjl int buflen = 0;
677c478bd9Sstevel@tonic-gate unsigned long len = 0L;
68*cb5caa98Sdjl char *buffer = NULL;
697c478bd9Sstevel@tonic-gate ns_ldap_result_t *result = be->result;
70*cb5caa98Sdjl char **name, **res1, **res2, **qu, **attr;
71*cb5caa98Sdjl char *res1_str, *res2_str, *qu_str, *attr_str;
727c478bd9Sstevel@tonic-gate
73*cb5caa98Sdjl if (result == NULL)
74*cb5caa98Sdjl return (NSS_STR_PARSE_PARSE);
75*cb5caa98Sdjl
76*cb5caa98Sdjl buflen = argp->buf.buflen;
77*cb5caa98Sdjl nss_result = NSS_STR_PARSE_SUCCESS;
787c478bd9Sstevel@tonic-gate (void) memset(argp->buf.buffer, 0, buflen);
797c478bd9Sstevel@tonic-gate
80*cb5caa98Sdjl name = __ns_ldap_getAttr(result->entry, _USER_NAME);
81*cb5caa98Sdjl if (name == NULL || name[0] == NULL ||
82*cb5caa98Sdjl (strlen(name[0]) < 1)) {
83*cb5caa98Sdjl nss_result = NSS_STR_PARSE_PARSE;
84*cb5caa98Sdjl goto result_user2str;
857c478bd9Sstevel@tonic-gate }
867c478bd9Sstevel@tonic-gate
87*cb5caa98Sdjl qu = __ns_ldap_getAttr(result->entry, _USER_QUALIFIER);
88*cb5caa98Sdjl if (qu == NULL || qu[0] == NULL || (strlen(qu[0]) < 1))
89*cb5caa98Sdjl qu_str = _NO_VALUE;
90*cb5caa98Sdjl else
91*cb5caa98Sdjl qu_str = qu[0];
92*cb5caa98Sdjl
93*cb5caa98Sdjl res1 = __ns_ldap_getAttr(result->entry, _USER_RES2);
94*cb5caa98Sdjl if (res1 == NULL || res1[0] == NULL || (strlen(res1[0]) < 1))
95*cb5caa98Sdjl res1_str = _NO_VALUE;
96*cb5caa98Sdjl else
97*cb5caa98Sdjl res1_str = res1[0];
98*cb5caa98Sdjl
99*cb5caa98Sdjl res2 = __ns_ldap_getAttr(result->entry, _USER_RES2);
100*cb5caa98Sdjl if (res2 == NULL || res2[0] == NULL || (strlen(res2[0]) < 1))
101*cb5caa98Sdjl res2_str = _NO_VALUE;
102*cb5caa98Sdjl else
103*cb5caa98Sdjl res2_str = res2[0];
104*cb5caa98Sdjl
105*cb5caa98Sdjl attr = __ns_ldap_getAttr(result->entry, _USER_ATTRS);
106*cb5caa98Sdjl if (attr == NULL || attr[0] == NULL || (strlen(attr[0]) < 1))
107*cb5caa98Sdjl attr_str = _NO_VALUE;
108*cb5caa98Sdjl else
109*cb5caa98Sdjl attr_str = attr[0];
110*cb5caa98Sdjl /* 5 = 4 ':' + 1 '\0' */
111*cb5caa98Sdjl len = strlen(name[0]) + strlen(res1_str) + strlen(res2_str) +
112*cb5caa98Sdjl strlen(qu_str) + strlen(attr_str) + 5;
113*cb5caa98Sdjl if (len > buflen) {
114*cb5caa98Sdjl nss_result = NSS_STR_PARSE_ERANGE;
115*cb5caa98Sdjl goto result_user2str;
1167c478bd9Sstevel@tonic-gate }
1177c478bd9Sstevel@tonic-gate
118*cb5caa98Sdjl if (argp->buf.result != NULL) {
119*cb5caa98Sdjl if ((be->buffer = calloc(1, len)) == NULL) {
120*cb5caa98Sdjl nss_result = NSS_STR_PARSE_PARSE;
121*cb5caa98Sdjl goto result_user2str;
1227c478bd9Sstevel@tonic-gate }
123*cb5caa98Sdjl buffer = be->buffer;
124*cb5caa98Sdjl } else
125*cb5caa98Sdjl buffer = argp->buf.buffer;
126*cb5caa98Sdjl (void) snprintf(buffer, len, "%s:%s:%s:%s:%s",
127*cb5caa98Sdjl name[0], qu_str, res1_str, res2_str, attr_str);
128*cb5caa98Sdjl /* The front end marshaller doesn't need the trailing null */
129*cb5caa98Sdjl if (argp->buf.result != NULL)
130*cb5caa98Sdjl be->buflen = strlen(be->buffer);
1317c478bd9Sstevel@tonic-gate
132*cb5caa98Sdjl result_user2str:
1337c478bd9Sstevel@tonic-gate (void) __ns_ldap_freeResult(&be->result);
1347c478bd9Sstevel@tonic-gate return ((int)nss_result);
1357c478bd9Sstevel@tonic-gate }
1367c478bd9Sstevel@tonic-gate
1377c478bd9Sstevel@tonic-gate
1387c478bd9Sstevel@tonic-gate static nss_status_t
getbyname(ldap_backend_ptr be,void * a)1397c478bd9Sstevel@tonic-gate getbyname(ldap_backend_ptr be, void *a)
1407c478bd9Sstevel@tonic-gate {
1417c478bd9Sstevel@tonic-gate nss_XbyY_args_t *argp = (nss_XbyY_args_t *)a;
1427c478bd9Sstevel@tonic-gate char searchfilter[SEARCHFILTERLEN];
1437c478bd9Sstevel@tonic-gate char userdata[SEARCHFILTERLEN];
1447c478bd9Sstevel@tonic-gate char name[SEARCHFILTERLEN];
1457c478bd9Sstevel@tonic-gate int ret;
1467c478bd9Sstevel@tonic-gate
1477c478bd9Sstevel@tonic-gate if (_ldap_filter_name(name, argp->key.name, sizeof (name)) != 0)
1487c478bd9Sstevel@tonic-gate return ((nss_status_t)NSS_NOTFOUND);
1497c478bd9Sstevel@tonic-gate
1507c478bd9Sstevel@tonic-gate ret = snprintf(searchfilter, sizeof (searchfilter),
1517c478bd9Sstevel@tonic-gate _USER_GETUSERNAME, name);
1527c478bd9Sstevel@tonic-gate if (ret >= sizeof (userdata) || ret < 0)
1537c478bd9Sstevel@tonic-gate return ((nss_status_t)NSS_NOTFOUND);
1547c478bd9Sstevel@tonic-gate
1557c478bd9Sstevel@tonic-gate ret = snprintf(userdata, sizeof (userdata),
1567c478bd9Sstevel@tonic-gate _USER_GETUSERNAME_SSD, name);
1577c478bd9Sstevel@tonic-gate if (ret >= sizeof (userdata) || ret < 0)
1587c478bd9Sstevel@tonic-gate return ((nss_status_t)NSS_NOTFOUND);
1597c478bd9Sstevel@tonic-gate
1607c478bd9Sstevel@tonic-gate return ((nss_status_t)_nss_ldap_lookup(be, argp,
1617c478bd9Sstevel@tonic-gate _USERATTR, searchfilter, NULL, _merge_SSD_filter, userdata));
1627c478bd9Sstevel@tonic-gate }
1637c478bd9Sstevel@tonic-gate
1647c478bd9Sstevel@tonic-gate
1657c478bd9Sstevel@tonic-gate static ldap_backend_op_t userattr_ops[] = {
1667c478bd9Sstevel@tonic-gate _nss_ldap_destr,
1677c478bd9Sstevel@tonic-gate _nss_ldap_endent,
1687c478bd9Sstevel@tonic-gate _nss_ldap_setent,
1697c478bd9Sstevel@tonic-gate _nss_ldap_getent,
1707c478bd9Sstevel@tonic-gate getbyname
1717c478bd9Sstevel@tonic-gate };
1727c478bd9Sstevel@tonic-gate
1737c478bd9Sstevel@tonic-gate
1747c478bd9Sstevel@tonic-gate /*ARGSUSED0*/
1757c478bd9Sstevel@tonic-gate nss_backend_t *
_nss_ldap_user_attr_constr(const char * dummy1,const char * dummy2,const char * dummy3,const char * dummy4,const char * dummy5)1767c478bd9Sstevel@tonic-gate _nss_ldap_user_attr_constr(const char *dummy1,
1777c478bd9Sstevel@tonic-gate const char *dummy2,
1787c478bd9Sstevel@tonic-gate const char *dummy3,
1797c478bd9Sstevel@tonic-gate const char *dummy4,
1807c478bd9Sstevel@tonic-gate const char *dummy5)
1817c478bd9Sstevel@tonic-gate {
1827c478bd9Sstevel@tonic-gate return ((nss_backend_t *)_nss_ldap_constr(userattr_ops,
1837c478bd9Sstevel@tonic-gate sizeof (userattr_ops)/sizeof (userattr_ops[0]), _USERATTR,
184*cb5caa98Sdjl user_attrs, _nss_ldap_user2str));
1857c478bd9Sstevel@tonic-gate }
186