17c478bd9Sstevel@tonic-gate /* 27c478bd9Sstevel@tonic-gate * CDDL HEADER START 37c478bd9Sstevel@tonic-gate * 47c478bd9Sstevel@tonic-gate * The contents of this file are subject to the terms of the 5*cb5caa98Sdjl * Common Development and Distribution License (the "License"). 6*cb5caa98Sdjl * You may not use this file except in compliance with the License. 77c478bd9Sstevel@tonic-gate * 87c478bd9Sstevel@tonic-gate * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 97c478bd9Sstevel@tonic-gate * or http://www.opensolaris.org/os/licensing. 107c478bd9Sstevel@tonic-gate * See the License for the specific language governing permissions 117c478bd9Sstevel@tonic-gate * and limitations under the License. 127c478bd9Sstevel@tonic-gate * 137c478bd9Sstevel@tonic-gate * When distributing Covered Code, include this CDDL HEADER in each 147c478bd9Sstevel@tonic-gate * file and include the License file at usr/src/OPENSOLARIS.LICENSE. 157c478bd9Sstevel@tonic-gate * If applicable, add the following below this CDDL HEADER, with the 167c478bd9Sstevel@tonic-gate * fields enclosed by brackets "[]" replaced with your own identifying 177c478bd9Sstevel@tonic-gate * information: Portions Copyright [yyyy] [name of copyright owner] 187c478bd9Sstevel@tonic-gate * 197c478bd9Sstevel@tonic-gate * CDDL HEADER END 207c478bd9Sstevel@tonic-gate */ 217c478bd9Sstevel@tonic-gate /* 22*cb5caa98Sdjl * Copyright 2006 Sun Microsystems, Inc. All rights reserved. 237c478bd9Sstevel@tonic-gate * Use is subject to license terms. 247c478bd9Sstevel@tonic-gate */ 257c478bd9Sstevel@tonic-gate 267c478bd9Sstevel@tonic-gate #pragma ident "%Z%%M% %I% %E% SMI" 277c478bd9Sstevel@tonic-gate 287c478bd9Sstevel@tonic-gate #include "ldap_common.h" 297c478bd9Sstevel@tonic-gate 307c478bd9Sstevel@tonic-gate /* bootparams attributes filters */ 317c478bd9Sstevel@tonic-gate #define _B_HOSTNAME "cn" 327c478bd9Sstevel@tonic-gate #define _B_PARAMETER "bootparameter" 337c478bd9Sstevel@tonic-gate #define _F_GETBOOTPARAMBYNAME "(&(objectClass=bootableDevice)(cn=%s))" 347c478bd9Sstevel@tonic-gate #define _F_GETBOOTPARAMBYNAME_SSD "(&(%%s)(cn=%s))" 357c478bd9Sstevel@tonic-gate 367c478bd9Sstevel@tonic-gate static const char *bootparams_attrs[] = { 377c478bd9Sstevel@tonic-gate _B_HOSTNAME, 387c478bd9Sstevel@tonic-gate _B_PARAMETER, 397c478bd9Sstevel@tonic-gate (char *)NULL 407c478bd9Sstevel@tonic-gate }; 417c478bd9Sstevel@tonic-gate 427c478bd9Sstevel@tonic-gate /* 43*cb5caa98Sdjl * _nss_ldap_bootparams2str is the data marshaling method for the 44*cb5caa98Sdjl * bootparams bootparams_getbyname backend processes. 45*cb5caa98Sdjl * This method is called after a successful ldap search has been performed. 46*cb5caa98Sdjl * This method will parse the ldap search values into the file format. 477c478bd9Sstevel@tonic-gate * 487c478bd9Sstevel@tonic-gate * A host's bootparameters are returned on one line separated by white 49*cb5caa98Sdjl * space. The LDAP server stores each boot parameter as a separate entry. 50*cb5caa98Sdjl * If more than one bootparameter is available, a white space separated buffer 517c478bd9Sstevel@tonic-gate * must be constructed and returned. 52*cb5caa98Sdjl * 537c478bd9Sstevel@tonic-gate */ 547c478bd9Sstevel@tonic-gate 557c478bd9Sstevel@tonic-gate static int 56*cb5caa98Sdjl _nss_ldap_bootparams2str(ldap_backend_ptr be, nss_XbyY_args_t *argp) 577c478bd9Sstevel@tonic-gate { 58*cb5caa98Sdjl uint_t i; 59*cb5caa98Sdjl int buflen = 0, len = 0; 60*cb5caa98Sdjl int nss_result, firsttime; 61*cb5caa98Sdjl ns_ldap_attr_t *bparams; 62*cb5caa98Sdjl char *buffer, **names; 637c478bd9Sstevel@tonic-gate ns_ldap_result_t *result = be->result; 647c478bd9Sstevel@tonic-gate 65*cb5caa98Sdjl if (result == NULL) 66*cb5caa98Sdjl return (NSS_STR_PARSE_PARSE); 67*cb5caa98Sdjl buflen = argp->buf.buflen; 68*cb5caa98Sdjl if (argp->buf.result != NULL) { 69*cb5caa98Sdjl if ((be->buffer = calloc(1, buflen)) == NULL) { 70*cb5caa98Sdjl nss_result = NSS_STR_PARSE_PARSE; 71*cb5caa98Sdjl goto result_bp2str; 72*cb5caa98Sdjl } 73*cb5caa98Sdjl buffer = be->buffer; 74*cb5caa98Sdjl } else 757c478bd9Sstevel@tonic-gate buffer = argp->buf.buffer; 767c478bd9Sstevel@tonic-gate 77*cb5caa98Sdjl nss_result = NSS_STR_PARSE_SUCCESS; 78*cb5caa98Sdjl (void) memset(argp->buf.buffer, 0, buflen); 797c478bd9Sstevel@tonic-gate 80*cb5caa98Sdjl names = __ns_ldap_getAttr(result->entry, _B_HOSTNAME); 81*cb5caa98Sdjl if (names == NULL || names[0] == NULL || 82*cb5caa98Sdjl (strlen(names[0]) < 1)) { 83*cb5caa98Sdjl nss_result = NSS_STR_PARSE_PARSE; 84*cb5caa98Sdjl goto result_bp2str; 857c478bd9Sstevel@tonic-gate } 86*cb5caa98Sdjl bparams = __ns_ldap_getAttrStruct(result->entry, _B_PARAMETER); 87*cb5caa98Sdjl if (bparams == NULL || bparams->attrvalue == NULL) { 88*cb5caa98Sdjl nss_result = NSS_STR_PARSE_PARSE; 89*cb5caa98Sdjl goto result_bp2str; 90*cb5caa98Sdjl } 91*cb5caa98Sdjl firsttime = 1; 92*cb5caa98Sdjl for (i = 0; i < bparams->value_count; i++) { 93*cb5caa98Sdjl if (bparams->attrvalue[i] == NULL) { 94*cb5caa98Sdjl nss_result = NSS_STR_PARSE_PARSE; 95*cb5caa98Sdjl goto result_bp2str; 96*cb5caa98Sdjl } 97*cb5caa98Sdjl /* 98*cb5caa98Sdjl * Skip client host name. The early version of ldapaddent 99*cb5caa98Sdjl * adds hostname as a boot param and it should be filtered. 100*cb5caa98Sdjl */ 101*cb5caa98Sdjl if (strcasecmp(names[0], bparams->attrvalue[i]) != 0) { 102*cb5caa98Sdjl if (firsttime) { 103*cb5caa98Sdjl firsttime = 0; 104*cb5caa98Sdjl len = snprintf(buffer, buflen, "%s", 105*cb5caa98Sdjl bparams->attrvalue[i]); 106*cb5caa98Sdjl } else 107*cb5caa98Sdjl len = snprintf(buffer, buflen, " %s", 108*cb5caa98Sdjl bparams->attrvalue[i]); 109*cb5caa98Sdjl TEST_AND_ADJUST(len, buffer, buflen, result_bp2str); 110*cb5caa98Sdjl } 111*cb5caa98Sdjl } 112*cb5caa98Sdjl /* The front end marshaller doesn't need to copy trailing nulls */ 113*cb5caa98Sdjl if (argp->buf.result != NULL) 114*cb5caa98Sdjl be->buflen = strlen(be->buffer); 1157c478bd9Sstevel@tonic-gate 116*cb5caa98Sdjl result_bp2str: 1177c478bd9Sstevel@tonic-gate 1187c478bd9Sstevel@tonic-gate (void) __ns_ldap_freeResult(&be->result); 119*cb5caa98Sdjl return (nss_result); 1207c478bd9Sstevel@tonic-gate } 1217c478bd9Sstevel@tonic-gate 1227c478bd9Sstevel@tonic-gate /* 1237c478bd9Sstevel@tonic-gate * getbyname gets bootparameters by host name. This function constructs an 1247c478bd9Sstevel@tonic-gate * ldap search filter using the host name invocation parameter and the 1257c478bd9Sstevel@tonic-gate * getbootparambyname search filter defined. Once the filter is 1267c478bd9Sstevel@tonic-gate * constructed, we search for matching entries and marshal the data 1277c478bd9Sstevel@tonic-gate * results into argp->buf.buffer for the frontend process. The function 1287c478bd9Sstevel@tonic-gate * _nss_ldap_bootparams2ent performs the data marshaling. 1297c478bd9Sstevel@tonic-gate * 1307c478bd9Sstevel@tonic-gate * RFC 2307, An Approach for Using LDAP as a Network Information Service, 1317c478bd9Sstevel@tonic-gate * indicates that dn's be fully qualified. Host name searches will be on 1327c478bd9Sstevel@tonic-gate * fully qualified host names (e.g., foo.bar.sun.com). 1337c478bd9Sstevel@tonic-gate */ 1347c478bd9Sstevel@tonic-gate 1357c478bd9Sstevel@tonic-gate static nss_status_t 1367c478bd9Sstevel@tonic-gate getbyname(ldap_backend_ptr be, void *a) 1377c478bd9Sstevel@tonic-gate { 1387c478bd9Sstevel@tonic-gate char hostname[3 * MAXHOSTNAMELEN]; 1397c478bd9Sstevel@tonic-gate nss_XbyY_args_t *argp = (nss_XbyY_args_t *)a; 1407c478bd9Sstevel@tonic-gate char searchfilter[SEARCHFILTERLEN]; 1417c478bd9Sstevel@tonic-gate char userdata[SEARCHFILTERLEN]; 1427c478bd9Sstevel@tonic-gate int ret; 1437c478bd9Sstevel@tonic-gate 1447c478bd9Sstevel@tonic-gate if (_ldap_filter_name(hostname, argp->key.name, sizeof (hostname)) != 0) 1457c478bd9Sstevel@tonic-gate return ((nss_status_t)NSS_NOTFOUND); 1467c478bd9Sstevel@tonic-gate 1477c478bd9Sstevel@tonic-gate ret = snprintf(searchfilter, sizeof (searchfilter), 1487c478bd9Sstevel@tonic-gate _F_GETBOOTPARAMBYNAME, hostname); 1497c478bd9Sstevel@tonic-gate if (ret >= sizeof (searchfilter) || ret < 0) 1507c478bd9Sstevel@tonic-gate return ((nss_status_t)NSS_NOTFOUND); 1517c478bd9Sstevel@tonic-gate 1527c478bd9Sstevel@tonic-gate ret = snprintf(userdata, sizeof (userdata), 1537c478bd9Sstevel@tonic-gate _F_GETBOOTPARAMBYNAME_SSD, hostname); 1547c478bd9Sstevel@tonic-gate if (ret >= sizeof (userdata) || ret < 0) 1557c478bd9Sstevel@tonic-gate return ((nss_status_t)NSS_NOTFOUND); 1567c478bd9Sstevel@tonic-gate return ((nss_status_t)_nss_ldap_lookup(be, argp, 1577c478bd9Sstevel@tonic-gate _BOOTPARAMS, searchfilter, NULL, 1587c478bd9Sstevel@tonic-gate _merge_SSD_filter, userdata)); 1597c478bd9Sstevel@tonic-gate } 1607c478bd9Sstevel@tonic-gate 1617c478bd9Sstevel@tonic-gate 1627c478bd9Sstevel@tonic-gate static ldap_backend_op_t bootparams_ops[] = { 1637c478bd9Sstevel@tonic-gate _nss_ldap_destr, 1647c478bd9Sstevel@tonic-gate getbyname 1657c478bd9Sstevel@tonic-gate }; 1667c478bd9Sstevel@tonic-gate 1677c478bd9Sstevel@tonic-gate 1687c478bd9Sstevel@tonic-gate /* 1697c478bd9Sstevel@tonic-gate * _nss_ldap_bootparams_constr is where life begins. This function calls 1707c478bd9Sstevel@tonic-gate * the generic ldap constructor function to define and build the abstract 1717c478bd9Sstevel@tonic-gate * data types required to support ldap operations. 1727c478bd9Sstevel@tonic-gate */ 1737c478bd9Sstevel@tonic-gate 1747c478bd9Sstevel@tonic-gate /*ARGSUSED0*/ 1757c478bd9Sstevel@tonic-gate nss_backend_t * 1767c478bd9Sstevel@tonic-gate _nss_ldap_bootparams_constr(const char *dummy1, const char *dummy2, 1777c478bd9Sstevel@tonic-gate const char *dummy3) 1787c478bd9Sstevel@tonic-gate { 1797c478bd9Sstevel@tonic-gate 1807c478bd9Sstevel@tonic-gate return ((nss_backend_t *)_nss_ldap_constr(bootparams_ops, 1817c478bd9Sstevel@tonic-gate sizeof (bootparams_ops)/sizeof (bootparams_ops[0]), 182*cb5caa98Sdjl _BOOTPARAMS, bootparams_attrs, _nss_ldap_bootparams2str)); 1837c478bd9Sstevel@tonic-gate } 184