xref: /titanic_50/usr/src/lib/nsswitch/ldap/common/getuserattr.c (revision cb5caa98562cf06753163f558cbcfe30b8f4673a)
17c478bd9Sstevel@tonic-gate /*
27c478bd9Sstevel@tonic-gate  * CDDL HEADER START
37c478bd9Sstevel@tonic-gate  *
47c478bd9Sstevel@tonic-gate  * The contents of this file are subject to the terms of the
5*cb5caa98Sdjl  * Common Development and Distribution License (the "License").
6*cb5caa98Sdjl  * You may not use this file except in compliance with the License.
77c478bd9Sstevel@tonic-gate  *
87c478bd9Sstevel@tonic-gate  * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
97c478bd9Sstevel@tonic-gate  * or http://www.opensolaris.org/os/licensing.
107c478bd9Sstevel@tonic-gate  * See the License for the specific language governing permissions
117c478bd9Sstevel@tonic-gate  * and limitations under the License.
127c478bd9Sstevel@tonic-gate  *
137c478bd9Sstevel@tonic-gate  * When distributing Covered Code, include this CDDL HEADER in each
147c478bd9Sstevel@tonic-gate  * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
157c478bd9Sstevel@tonic-gate  * If applicable, add the following below this CDDL HEADER, with the
167c478bd9Sstevel@tonic-gate  * fields enclosed by brackets "[]" replaced with your own identifying
177c478bd9Sstevel@tonic-gate  * information: Portions Copyright [yyyy] [name of copyright owner]
187c478bd9Sstevel@tonic-gate  *
197c478bd9Sstevel@tonic-gate  * CDDL HEADER END
207c478bd9Sstevel@tonic-gate  */
217c478bd9Sstevel@tonic-gate /*
22*cb5caa98Sdjl  * Copyright 2006 Sun Microsystems, Inc.  All rights reserved.
237c478bd9Sstevel@tonic-gate  * Use is subject to license terms.
247c478bd9Sstevel@tonic-gate  */
257c478bd9Sstevel@tonic-gate 
267c478bd9Sstevel@tonic-gate #pragma ident	"%Z%%M%	%I%	%E% SMI"
277c478bd9Sstevel@tonic-gate 
287c478bd9Sstevel@tonic-gate #include <secdb.h>
297c478bd9Sstevel@tonic-gate #include <user_attr.h>
307c478bd9Sstevel@tonic-gate #include "ldap_common.h"
317c478bd9Sstevel@tonic-gate 
327c478bd9Sstevel@tonic-gate 
337c478bd9Sstevel@tonic-gate /* user_attr attributes filters */
347c478bd9Sstevel@tonic-gate #define	_USER_NAME		"uid"
357c478bd9Sstevel@tonic-gate #define	_USER_QUALIFIER		"SolarisUserQualifier"
367c478bd9Sstevel@tonic-gate #define	_USER_RES1		"SolarisAttrReserved1"
377c478bd9Sstevel@tonic-gate #define	_USER_RES2		"SolarisAttrReserved2"
387c478bd9Sstevel@tonic-gate #define	_USER_ATTRS		"SolarisAttrKeyValue"
397c478bd9Sstevel@tonic-gate #define	_USER_GETUSERNAME	\
407c478bd9Sstevel@tonic-gate 	"(&(objectClass=SolarisUserAttr)(uid=%s))"
417c478bd9Sstevel@tonic-gate #define	_USER_GETUSERNAME_SSD	"(&(%%s)(uid=%s))"
427c478bd9Sstevel@tonic-gate 
437c478bd9Sstevel@tonic-gate 
447c478bd9Sstevel@tonic-gate static const char *user_attrs[] = {
457c478bd9Sstevel@tonic-gate 	_USER_NAME,
467c478bd9Sstevel@tonic-gate 	_USER_QUALIFIER,
477c478bd9Sstevel@tonic-gate 	_USER_RES1,
487c478bd9Sstevel@tonic-gate 	_USER_RES2,
497c478bd9Sstevel@tonic-gate 	_USER_ATTRS,
507c478bd9Sstevel@tonic-gate 	(char *)NULL
517c478bd9Sstevel@tonic-gate };
52*cb5caa98Sdjl /*
53*cb5caa98Sdjl  * _nss_ldap_user2str is the data marshaling method for the user_attr
54*cb5caa98Sdjl  * system call getuserattr, getusernam and getuseruid.
55*cb5caa98Sdjl  * This method is called after a successful search has been performed.
56*cb5caa98Sdjl  * This method will parse the search results into the file format.
57*cb5caa98Sdjl  * e.g.
58*cb5caa98Sdjl  *
59*cb5caa98Sdjl  * adm::::profiles=Log Management
60*cb5caa98Sdjl  *
61*cb5caa98Sdjl  */
627c478bd9Sstevel@tonic-gate static int
_nss_ldap_user2str(ldap_backend_ptr be,nss_XbyY_args_t * argp)63*cb5caa98Sdjl _nss_ldap_user2str(ldap_backend_ptr be, nss_XbyY_args_t *argp)
647c478bd9Sstevel@tonic-gate {
65*cb5caa98Sdjl 	int			nss_result;
66*cb5caa98Sdjl 	int			buflen = 0;
677c478bd9Sstevel@tonic-gate 	unsigned long		len = 0L;
68*cb5caa98Sdjl 	char			*buffer = NULL;
697c478bd9Sstevel@tonic-gate 	ns_ldap_result_t	*result = be->result;
70*cb5caa98Sdjl 	char			**name, **res1, **res2, **qu, **attr;
71*cb5caa98Sdjl 	char			*res1_str, *res2_str, *qu_str, *attr_str;
727c478bd9Sstevel@tonic-gate 
73*cb5caa98Sdjl 	if (result == NULL)
74*cb5caa98Sdjl 		return (NSS_STR_PARSE_PARSE);
75*cb5caa98Sdjl 
76*cb5caa98Sdjl 	buflen = argp->buf.buflen;
77*cb5caa98Sdjl 	nss_result = NSS_STR_PARSE_SUCCESS;
787c478bd9Sstevel@tonic-gate 	(void) memset(argp->buf.buffer, 0, buflen);
797c478bd9Sstevel@tonic-gate 
80*cb5caa98Sdjl 	name = __ns_ldap_getAttr(result->entry, _USER_NAME);
81*cb5caa98Sdjl 	if (name == NULL || name[0] == NULL ||
82*cb5caa98Sdjl 			(strlen(name[0]) < 1)) {
83*cb5caa98Sdjl 		nss_result = NSS_STR_PARSE_PARSE;
84*cb5caa98Sdjl 		goto result_user2str;
857c478bd9Sstevel@tonic-gate 	}
867c478bd9Sstevel@tonic-gate 
87*cb5caa98Sdjl 	qu = __ns_ldap_getAttr(result->entry, _USER_QUALIFIER);
88*cb5caa98Sdjl 	if (qu == NULL || qu[0] == NULL || (strlen(qu[0]) < 1))
89*cb5caa98Sdjl 		qu_str = _NO_VALUE;
90*cb5caa98Sdjl 	else
91*cb5caa98Sdjl 		qu_str = qu[0];
92*cb5caa98Sdjl 
93*cb5caa98Sdjl 	res1 = __ns_ldap_getAttr(result->entry, _USER_RES2);
94*cb5caa98Sdjl 	if (res1 == NULL || res1[0] == NULL || (strlen(res1[0]) < 1))
95*cb5caa98Sdjl 		res1_str = _NO_VALUE;
96*cb5caa98Sdjl 	else
97*cb5caa98Sdjl 		res1_str = res1[0];
98*cb5caa98Sdjl 
99*cb5caa98Sdjl 	res2 = __ns_ldap_getAttr(result->entry, _USER_RES2);
100*cb5caa98Sdjl 	if (res2 == NULL || res2[0] == NULL || (strlen(res2[0]) < 1))
101*cb5caa98Sdjl 		res2_str = _NO_VALUE;
102*cb5caa98Sdjl 	else
103*cb5caa98Sdjl 		res2_str = res2[0];
104*cb5caa98Sdjl 
105*cb5caa98Sdjl 	attr = __ns_ldap_getAttr(result->entry, _USER_ATTRS);
106*cb5caa98Sdjl 	if (attr == NULL || attr[0] == NULL || (strlen(attr[0]) < 1))
107*cb5caa98Sdjl 		attr_str = _NO_VALUE;
108*cb5caa98Sdjl 	else
109*cb5caa98Sdjl 		attr_str = attr[0];
110*cb5caa98Sdjl 	/* 5 = 4 ':' + 1 '\0' */
111*cb5caa98Sdjl 	len = strlen(name[0]) + strlen(res1_str) + strlen(res2_str) +
112*cb5caa98Sdjl 		strlen(qu_str) + strlen(attr_str) + 5;
113*cb5caa98Sdjl 	if (len > buflen) {
114*cb5caa98Sdjl 		nss_result = NSS_STR_PARSE_ERANGE;
115*cb5caa98Sdjl 		goto result_user2str;
1167c478bd9Sstevel@tonic-gate 	}
1177c478bd9Sstevel@tonic-gate 
118*cb5caa98Sdjl 	if (argp->buf.result != NULL) {
119*cb5caa98Sdjl 		if ((be->buffer = calloc(1, len)) == NULL) {
120*cb5caa98Sdjl 			nss_result = NSS_STR_PARSE_PARSE;
121*cb5caa98Sdjl 			goto result_user2str;
1227c478bd9Sstevel@tonic-gate 		}
123*cb5caa98Sdjl 		buffer = be->buffer;
124*cb5caa98Sdjl 	} else
125*cb5caa98Sdjl 		buffer = argp->buf.buffer;
126*cb5caa98Sdjl 	(void) snprintf(buffer, len, "%s:%s:%s:%s:%s",
127*cb5caa98Sdjl 			name[0], qu_str, res1_str, res2_str, attr_str);
128*cb5caa98Sdjl 	/* The front end marshaller doesn't need the trailing null */
129*cb5caa98Sdjl 	if (argp->buf.result != NULL)
130*cb5caa98Sdjl 		be->buflen = strlen(be->buffer);
1317c478bd9Sstevel@tonic-gate 
132*cb5caa98Sdjl result_user2str:
1337c478bd9Sstevel@tonic-gate 	(void) __ns_ldap_freeResult(&be->result);
1347c478bd9Sstevel@tonic-gate 	return ((int)nss_result);
1357c478bd9Sstevel@tonic-gate }
1367c478bd9Sstevel@tonic-gate 
1377c478bd9Sstevel@tonic-gate 
1387c478bd9Sstevel@tonic-gate static nss_status_t
getbyname(ldap_backend_ptr be,void * a)1397c478bd9Sstevel@tonic-gate getbyname(ldap_backend_ptr be, void *a)
1407c478bd9Sstevel@tonic-gate {
1417c478bd9Sstevel@tonic-gate 	nss_XbyY_args_t	*argp = (nss_XbyY_args_t *)a;
1427c478bd9Sstevel@tonic-gate 	char		searchfilter[SEARCHFILTERLEN];
1437c478bd9Sstevel@tonic-gate 	char		userdata[SEARCHFILTERLEN];
1447c478bd9Sstevel@tonic-gate 	char		name[SEARCHFILTERLEN];
1457c478bd9Sstevel@tonic-gate 	int		ret;
1467c478bd9Sstevel@tonic-gate 
1477c478bd9Sstevel@tonic-gate 	if (_ldap_filter_name(name, argp->key.name, sizeof (name)) != 0)
1487c478bd9Sstevel@tonic-gate 		return ((nss_status_t)NSS_NOTFOUND);
1497c478bd9Sstevel@tonic-gate 
1507c478bd9Sstevel@tonic-gate 	ret = snprintf(searchfilter, sizeof (searchfilter),
1517c478bd9Sstevel@tonic-gate 	    _USER_GETUSERNAME, name);
1527c478bd9Sstevel@tonic-gate 	if (ret >= sizeof (userdata) || ret < 0)
1537c478bd9Sstevel@tonic-gate 		return ((nss_status_t)NSS_NOTFOUND);
1547c478bd9Sstevel@tonic-gate 
1557c478bd9Sstevel@tonic-gate 	ret = snprintf(userdata, sizeof (userdata),
1567c478bd9Sstevel@tonic-gate 	    _USER_GETUSERNAME_SSD, name);
1577c478bd9Sstevel@tonic-gate 	if (ret >= sizeof (userdata) || ret < 0)
1587c478bd9Sstevel@tonic-gate 		return ((nss_status_t)NSS_NOTFOUND);
1597c478bd9Sstevel@tonic-gate 
1607c478bd9Sstevel@tonic-gate 	return ((nss_status_t)_nss_ldap_lookup(be, argp,
1617c478bd9Sstevel@tonic-gate 	    _USERATTR, searchfilter, NULL, _merge_SSD_filter, userdata));
1627c478bd9Sstevel@tonic-gate }
1637c478bd9Sstevel@tonic-gate 
1647c478bd9Sstevel@tonic-gate 
1657c478bd9Sstevel@tonic-gate static ldap_backend_op_t userattr_ops[] = {
1667c478bd9Sstevel@tonic-gate 	_nss_ldap_destr,
1677c478bd9Sstevel@tonic-gate 	_nss_ldap_endent,
1687c478bd9Sstevel@tonic-gate 	_nss_ldap_setent,
1697c478bd9Sstevel@tonic-gate 	_nss_ldap_getent,
1707c478bd9Sstevel@tonic-gate 	getbyname
1717c478bd9Sstevel@tonic-gate };
1727c478bd9Sstevel@tonic-gate 
1737c478bd9Sstevel@tonic-gate 
1747c478bd9Sstevel@tonic-gate /*ARGSUSED0*/
1757c478bd9Sstevel@tonic-gate nss_backend_t *
_nss_ldap_user_attr_constr(const char * dummy1,const char * dummy2,const char * dummy3,const char * dummy4,const char * dummy5)1767c478bd9Sstevel@tonic-gate _nss_ldap_user_attr_constr(const char *dummy1,
1777c478bd9Sstevel@tonic-gate     const char *dummy2,
1787c478bd9Sstevel@tonic-gate     const char *dummy3,
1797c478bd9Sstevel@tonic-gate     const char *dummy4,
1807c478bd9Sstevel@tonic-gate     const char *dummy5)
1817c478bd9Sstevel@tonic-gate {
1827c478bd9Sstevel@tonic-gate 	return ((nss_backend_t *)_nss_ldap_constr(userattr_ops,
1837c478bd9Sstevel@tonic-gate 		sizeof (userattr_ops)/sizeof (userattr_ops[0]), _USERATTR,
184*cb5caa98Sdjl 		user_attrs, _nss_ldap_user2str));
1857c478bd9Sstevel@tonic-gate }
186