xref: /titanic_50/usr/src/lib/passwdutil/__set_authtoken_attr.c (revision c77a61a72b5ecdc507d6cf104142edd371a16c84)
1 /*
2  * CDDL HEADER START
3  *
4  * The contents of this file are subject to the terms of the
5  * Common Development and Distribution License, Version 1.0 only
6  * (the "License").  You may not use this file except in compliance
7  * with the License.
8  *
9  * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
10  * or http://www.opensolaris.org/os/licensing.
11  * See the License for the specific language governing permissions
12  * and limitations under the License.
13  *
14  * When distributing Covered Code, include this CDDL HEADER in each
15  * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
16  * If applicable, add the following below this CDDL HEADER, with the
17  * fields enclosed by brackets "[]" replaced with your own identifying
18  * information: Portions Copyright [yyyy] [name of copyright owner]
19  *
20  * CDDL HEADER END
21  */
22 /*
23  * Copyright 2006 Sun Microsystems, Inc.  All rights reserved.
24  * Use is subject to license terms.
25  */
26 
27 #pragma ident	"%Z%%M%	%I%	%E% SMI"
28 
29 #include <errno.h>
30 #include <sys/types.h>
31 #include <sys/types.h>
32 #include <nsswitch.h>
33 #include <stdlib.h>
34 #include <stdio.h>
35 #include <string.h>
36 #include <syslog.h>
37 
38 #include "passwdutil.h"
39 
40 int
41 __set_authtoken_attr(char *name, char *oldpw, char *oldrpcpw,
42 	pwu_repository_t *rep, attrlist *items, int *updated_reps)
43 {
44 	attrlist *p;
45 	int repositories;
46 	int i;
47 	void *buf;		/* workspace for repository specific funcs */
48 	int err = PWU_NOT_FOUND;
49 	int rep_success = REP_NOREP;	/* first successfull update */
50 	int updated = REP_NOREP;	/* (bitmask) all updates */
51 
52 	/* Can't set name uid or flag */
53 	for (p = items; p != NULL; p = p->next) {
54 		switch (p->type) {
55 		case ATTR_NAME:
56 		case ATTR_UID:
57 		case ATTR_FLAG:
58 			return (EINVAL);
59 		}
60 	}
61 
62 	repositories = get_ns(rep, PWU_WRITE);
63 
64 	if (repositories == 0)
65 		return (PWU_SYSTEM_ERROR);
66 
67 	/*
68 	 * updating requires that either
69 	 *  - PAM_REPOSITORY is set: we know what to update
70 	 *  - PAM_REPOSITORY is not set, but we recognize the nsswitch.conf
71 	 *    passwd: entry
72 	 */
73 	if (repositories == REP_ERANGE || repositories == REP_NSS)
74 		return (PWU_REPOSITORY_ERROR);
75 
76 	/*
77 	 * Loop over selected repositories to update
78 	 * We should update the remote repositories first, FILES last.
79 	 */
80 	for (i = REP_LAST; i; i >>= 1) {
81 		if (repositories & i) {
82 			buf = NULL;
83 
84 			if (rops[i]->lock && (err = rops[i]->lock()))  {
85 				return (err);
86 			}
87 
88 			if (rops[i]->getpwnam) {
89 				err = rops[i]->getpwnam(name, items, rep, &buf);
90 			}
91 
92 			if ((err == PWU_SUCCESS) && rops[i]->update)
93 				err = rops[i]->update(items, rep, buf);
94 
95 			if ((err == PWU_SUCCESS) && rops[i]->putpwnam)
96 				err = rops[i]->putpwnam(name, oldpw, oldrpcpw,
97 					rep, buf);
98 
99 			if (rops[i]->unlock)
100 				(void) rops[i]->unlock();
101 
102 			if (buf) {
103 				(void) free(buf);
104 				buf = NULL;
105 			}
106 			if (err == PWU_SUCCESS) {
107 				rep_success = i;	/* this rep succeeded */
108 				updated |= i;
109 			} else if (err != PWU_SUCCESS && err != PWU_NOT_FOUND) {
110 				break;
111 			}
112 		}
113 	}
114 
115 	if (buf)
116 		free(buf);
117 
118 	if (updated_reps)
119 		*updated_reps = (updated != REP_NOREP) ? updated : i;
120 
121 	/*
122 	 * err contains either
123 	 *  PWU_SUCCESS		: everyting went OK
124 	 *  PWU_NOT_FOUND	: none of the repositories contained the user
125 	 *  error-code		: the specific error that occurred
126 	 */
127 	if (rep_success != REP_NOREP) {
128 		return (PWU_SUCCESS);
129 	} else {
130 		return (err);
131 	}
132 }
133