17c478bd9Sstevel@tonic-gate /* 27c478bd9Sstevel@tonic-gate * CDDL HEADER START 37c478bd9Sstevel@tonic-gate * 47c478bd9Sstevel@tonic-gate * The contents of this file are subject to the terms of the 5*cb5caa98Sdjl * Common Development and Distribution License (the "License"). 6*cb5caa98Sdjl * You may not use this file except in compliance with the License. 77c478bd9Sstevel@tonic-gate * 87c478bd9Sstevel@tonic-gate * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 97c478bd9Sstevel@tonic-gate * or http://www.opensolaris.org/os/licensing. 107c478bd9Sstevel@tonic-gate * See the License for the specific language governing permissions 117c478bd9Sstevel@tonic-gate * and limitations under the License. 127c478bd9Sstevel@tonic-gate * 137c478bd9Sstevel@tonic-gate * When distributing Covered Code, include this CDDL HEADER in each 147c478bd9Sstevel@tonic-gate * file and include the License file at usr/src/OPENSOLARIS.LICENSE. 157c478bd9Sstevel@tonic-gate * If applicable, add the following below this CDDL HEADER, with the 167c478bd9Sstevel@tonic-gate * fields enclosed by brackets "[]" replaced with your own identifying 177c478bd9Sstevel@tonic-gate * information: Portions Copyright [yyyy] [name of copyright owner] 187c478bd9Sstevel@tonic-gate * 197c478bd9Sstevel@tonic-gate * CDDL HEADER END 207c478bd9Sstevel@tonic-gate */ 217c478bd9Sstevel@tonic-gate /* 22*cb5caa98Sdjl * Copyright 2006 Sun Microsystems, Inc. All rights reserved. 237c478bd9Sstevel@tonic-gate * Use is subject to license terms. 247c478bd9Sstevel@tonic-gate */ 257c478bd9Sstevel@tonic-gate 267c478bd9Sstevel@tonic-gate #pragma ident "%Z%%M% %I% %E% SMI" 277c478bd9Sstevel@tonic-gate 287c478bd9Sstevel@tonic-gate #include <secdb.h> 297c478bd9Sstevel@tonic-gate #include <user_attr.h> 307c478bd9Sstevel@tonic-gate #include "ldap_common.h" 317c478bd9Sstevel@tonic-gate 327c478bd9Sstevel@tonic-gate 337c478bd9Sstevel@tonic-gate /* user_attr attributes filters */ 347c478bd9Sstevel@tonic-gate #define _USER_NAME "uid" 357c478bd9Sstevel@tonic-gate #define _USER_QUALIFIER "SolarisUserQualifier" 367c478bd9Sstevel@tonic-gate #define _USER_RES1 "SolarisAttrReserved1" 377c478bd9Sstevel@tonic-gate #define _USER_RES2 "SolarisAttrReserved2" 387c478bd9Sstevel@tonic-gate #define _USER_ATTRS "SolarisAttrKeyValue" 397c478bd9Sstevel@tonic-gate #define _USER_GETUSERNAME \ 407c478bd9Sstevel@tonic-gate "(&(objectClass=SolarisUserAttr)(uid=%s))" 417c478bd9Sstevel@tonic-gate #define _USER_GETUSERNAME_SSD "(&(%%s)(uid=%s))" 427c478bd9Sstevel@tonic-gate 437c478bd9Sstevel@tonic-gate 447c478bd9Sstevel@tonic-gate static const char *user_attrs[] = { 457c478bd9Sstevel@tonic-gate _USER_NAME, 467c478bd9Sstevel@tonic-gate _USER_QUALIFIER, 477c478bd9Sstevel@tonic-gate _USER_RES1, 487c478bd9Sstevel@tonic-gate _USER_RES2, 497c478bd9Sstevel@tonic-gate _USER_ATTRS, 507c478bd9Sstevel@tonic-gate (char *)NULL 517c478bd9Sstevel@tonic-gate }; 52*cb5caa98Sdjl /* 53*cb5caa98Sdjl * _nss_ldap_user2str is the data marshaling method for the user_attr 54*cb5caa98Sdjl * system call getuserattr, getusernam and getuseruid. 55*cb5caa98Sdjl * This method is called after a successful search has been performed. 56*cb5caa98Sdjl * This method will parse the search results into the file format. 57*cb5caa98Sdjl * e.g. 58*cb5caa98Sdjl * 59*cb5caa98Sdjl * adm::::profiles=Log Management 60*cb5caa98Sdjl * 61*cb5caa98Sdjl */ 627c478bd9Sstevel@tonic-gate static int 63*cb5caa98Sdjl _nss_ldap_user2str(ldap_backend_ptr be, nss_XbyY_args_t *argp) 647c478bd9Sstevel@tonic-gate { 65*cb5caa98Sdjl int nss_result; 66*cb5caa98Sdjl int buflen = 0; 677c478bd9Sstevel@tonic-gate unsigned long len = 0L; 68*cb5caa98Sdjl char *buffer = NULL; 697c478bd9Sstevel@tonic-gate ns_ldap_result_t *result = be->result; 70*cb5caa98Sdjl char **name, **res1, **res2, **qu, **attr; 71*cb5caa98Sdjl char *res1_str, *res2_str, *qu_str, *attr_str; 727c478bd9Sstevel@tonic-gate 73*cb5caa98Sdjl if (result == NULL) 74*cb5caa98Sdjl return (NSS_STR_PARSE_PARSE); 75*cb5caa98Sdjl 76*cb5caa98Sdjl buflen = argp->buf.buflen; 77*cb5caa98Sdjl nss_result = NSS_STR_PARSE_SUCCESS; 787c478bd9Sstevel@tonic-gate (void) memset(argp->buf.buffer, 0, buflen); 797c478bd9Sstevel@tonic-gate 80*cb5caa98Sdjl name = __ns_ldap_getAttr(result->entry, _USER_NAME); 81*cb5caa98Sdjl if (name == NULL || name[0] == NULL || 82*cb5caa98Sdjl (strlen(name[0]) < 1)) { 83*cb5caa98Sdjl nss_result = NSS_STR_PARSE_PARSE; 84*cb5caa98Sdjl goto result_user2str; 857c478bd9Sstevel@tonic-gate } 867c478bd9Sstevel@tonic-gate 87*cb5caa98Sdjl qu = __ns_ldap_getAttr(result->entry, _USER_QUALIFIER); 88*cb5caa98Sdjl if (qu == NULL || qu[0] == NULL || (strlen(qu[0]) < 1)) 89*cb5caa98Sdjl qu_str = _NO_VALUE; 90*cb5caa98Sdjl else 91*cb5caa98Sdjl qu_str = qu[0]; 92*cb5caa98Sdjl 93*cb5caa98Sdjl res1 = __ns_ldap_getAttr(result->entry, _USER_RES2); 94*cb5caa98Sdjl if (res1 == NULL || res1[0] == NULL || (strlen(res1[0]) < 1)) 95*cb5caa98Sdjl res1_str = _NO_VALUE; 96*cb5caa98Sdjl else 97*cb5caa98Sdjl res1_str = res1[0]; 98*cb5caa98Sdjl 99*cb5caa98Sdjl res2 = __ns_ldap_getAttr(result->entry, _USER_RES2); 100*cb5caa98Sdjl if (res2 == NULL || res2[0] == NULL || (strlen(res2[0]) < 1)) 101*cb5caa98Sdjl res2_str = _NO_VALUE; 102*cb5caa98Sdjl else 103*cb5caa98Sdjl res2_str = res2[0]; 104*cb5caa98Sdjl 105*cb5caa98Sdjl attr = __ns_ldap_getAttr(result->entry, _USER_ATTRS); 106*cb5caa98Sdjl if (attr == NULL || attr[0] == NULL || (strlen(attr[0]) < 1)) 107*cb5caa98Sdjl attr_str = _NO_VALUE; 108*cb5caa98Sdjl else 109*cb5caa98Sdjl attr_str = attr[0]; 110*cb5caa98Sdjl /* 5 = 4 ':' + 1 '\0' */ 111*cb5caa98Sdjl len = strlen(name[0]) + strlen(res1_str) + strlen(res2_str) + 112*cb5caa98Sdjl strlen(qu_str) + strlen(attr_str) + 5; 113*cb5caa98Sdjl if (len > buflen) { 114*cb5caa98Sdjl nss_result = NSS_STR_PARSE_ERANGE; 115*cb5caa98Sdjl goto result_user2str; 1167c478bd9Sstevel@tonic-gate } 1177c478bd9Sstevel@tonic-gate 118*cb5caa98Sdjl if (argp->buf.result != NULL) { 119*cb5caa98Sdjl if ((be->buffer = calloc(1, len)) == NULL) { 120*cb5caa98Sdjl nss_result = NSS_STR_PARSE_PARSE; 121*cb5caa98Sdjl goto result_user2str; 1227c478bd9Sstevel@tonic-gate } 123*cb5caa98Sdjl buffer = be->buffer; 124*cb5caa98Sdjl } else 125*cb5caa98Sdjl buffer = argp->buf.buffer; 126*cb5caa98Sdjl (void) snprintf(buffer, len, "%s:%s:%s:%s:%s", 127*cb5caa98Sdjl name[0], qu_str, res1_str, res2_str, attr_str); 128*cb5caa98Sdjl /* The front end marshaller doesn't need the trailing null */ 129*cb5caa98Sdjl if (argp->buf.result != NULL) 130*cb5caa98Sdjl be->buflen = strlen(be->buffer); 1317c478bd9Sstevel@tonic-gate 132*cb5caa98Sdjl result_user2str: 1337c478bd9Sstevel@tonic-gate (void) __ns_ldap_freeResult(&be->result); 1347c478bd9Sstevel@tonic-gate return ((int)nss_result); 1357c478bd9Sstevel@tonic-gate } 1367c478bd9Sstevel@tonic-gate 1377c478bd9Sstevel@tonic-gate 1387c478bd9Sstevel@tonic-gate static nss_status_t 1397c478bd9Sstevel@tonic-gate getbyname(ldap_backend_ptr be, void *a) 1407c478bd9Sstevel@tonic-gate { 1417c478bd9Sstevel@tonic-gate nss_XbyY_args_t *argp = (nss_XbyY_args_t *)a; 1427c478bd9Sstevel@tonic-gate char searchfilter[SEARCHFILTERLEN]; 1437c478bd9Sstevel@tonic-gate char userdata[SEARCHFILTERLEN]; 1447c478bd9Sstevel@tonic-gate char name[SEARCHFILTERLEN]; 1457c478bd9Sstevel@tonic-gate int ret; 1467c478bd9Sstevel@tonic-gate 1477c478bd9Sstevel@tonic-gate if (_ldap_filter_name(name, argp->key.name, sizeof (name)) != 0) 1487c478bd9Sstevel@tonic-gate return ((nss_status_t)NSS_NOTFOUND); 1497c478bd9Sstevel@tonic-gate 1507c478bd9Sstevel@tonic-gate ret = snprintf(searchfilter, sizeof (searchfilter), 1517c478bd9Sstevel@tonic-gate _USER_GETUSERNAME, name); 1527c478bd9Sstevel@tonic-gate if (ret >= sizeof (userdata) || ret < 0) 1537c478bd9Sstevel@tonic-gate return ((nss_status_t)NSS_NOTFOUND); 1547c478bd9Sstevel@tonic-gate 1557c478bd9Sstevel@tonic-gate ret = snprintf(userdata, sizeof (userdata), 1567c478bd9Sstevel@tonic-gate _USER_GETUSERNAME_SSD, name); 1577c478bd9Sstevel@tonic-gate if (ret >= sizeof (userdata) || ret < 0) 1587c478bd9Sstevel@tonic-gate return ((nss_status_t)NSS_NOTFOUND); 1597c478bd9Sstevel@tonic-gate 1607c478bd9Sstevel@tonic-gate return ((nss_status_t)_nss_ldap_lookup(be, argp, 1617c478bd9Sstevel@tonic-gate _USERATTR, searchfilter, NULL, _merge_SSD_filter, userdata)); 1627c478bd9Sstevel@tonic-gate } 1637c478bd9Sstevel@tonic-gate 1647c478bd9Sstevel@tonic-gate 1657c478bd9Sstevel@tonic-gate static ldap_backend_op_t userattr_ops[] = { 1667c478bd9Sstevel@tonic-gate _nss_ldap_destr, 1677c478bd9Sstevel@tonic-gate _nss_ldap_endent, 1687c478bd9Sstevel@tonic-gate _nss_ldap_setent, 1697c478bd9Sstevel@tonic-gate _nss_ldap_getent, 1707c478bd9Sstevel@tonic-gate getbyname 1717c478bd9Sstevel@tonic-gate }; 1727c478bd9Sstevel@tonic-gate 1737c478bd9Sstevel@tonic-gate 1747c478bd9Sstevel@tonic-gate /*ARGSUSED0*/ 1757c478bd9Sstevel@tonic-gate nss_backend_t * 1767c478bd9Sstevel@tonic-gate _nss_ldap_user_attr_constr(const char *dummy1, 1777c478bd9Sstevel@tonic-gate const char *dummy2, 1787c478bd9Sstevel@tonic-gate const char *dummy3, 1797c478bd9Sstevel@tonic-gate const char *dummy4, 1807c478bd9Sstevel@tonic-gate const char *dummy5) 1817c478bd9Sstevel@tonic-gate { 1827c478bd9Sstevel@tonic-gate return ((nss_backend_t *)_nss_ldap_constr(userattr_ops, 1837c478bd9Sstevel@tonic-gate sizeof (userattr_ops)/sizeof (userattr_ops[0]), _USERATTR, 184*cb5caa98Sdjl user_attrs, _nss_ldap_user2str)); 1857c478bd9Sstevel@tonic-gate } 186