Line data    Source code

       1             : /*
       2             :    Unix SMB/CIFS implementation.
       3             : 
       4             :    Async helpers for blocking functions
       5             : 
       6             :    Copyright (C) Volker Lendecke 2005
       7             :    Copyright (C) Gerald Carter 2006
       8             :    Copyright (C) Simo Sorce 2007
       9             : 
      10             :    This program is free software; you can redistribute it and/or modify
      11             :    it under the terms of the GNU General Public License as published by
      12             :    the Free Software Foundation; either version 3 of the License, or
      13             :    (at your option) any later version.
      14             : 
      15             :    This program is distributed in the hope that it will be useful,
      16             :    but WITHOUT ANY WARRANTY; without even the implied warranty of
      17             :    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
      18             :    GNU General Public License for more details.
      19             : 
      20             :    You should have received a copy of the GNU General Public License
      21             :    along with this program.  If not, see <http://www.gnu.org/licenses/>.
      22             : */
      23             : 
      24             : #include "includes.h"
      25             : #include "winbindd.h"
      26             : #include "../libcli/security/security.h"
      27             : #include "passdb/lookup_sid.h"
      28             : #include "lib/global_contexts.h"
      29             : 
      30             : #undef DBGC_CLASS
      31             : #define DBGC_CLASS DBGC_WINBIND
      32             : 
      33             : static struct winbindd_child *static_idmap_child = NULL;
      34             : 
      35             : /*
      36             :  * Map idmap ranges to domain names, taken from smb.conf. This is
      37             :  * stored in the parent winbind and used to assemble xids2sids/sids2xids calls
      38             :  * into per-idmap-domain chunks.
      39             :  */
      40             : static struct wb_parent_idmap_config static_parent_idmap_config;
      41             : 
      42         113 : struct winbindd_child *idmap_child(void)
      43             : {
      44         113 :         return static_idmap_child;
      45             : }
      46             : 
      47           0 : bool is_idmap_child(const struct winbindd_child *child)
      48             : {
      49           0 :         if (child == static_idmap_child) {
      50           0 :                 return true;
      51             :         }
      52             : 
      53           0 :         return false;
      54             : }
      55             : 
      56           2 : pid_t idmap_child_pid(void)
      57             : {
      58           2 :         return static_idmap_child->pid;
      59             : }
      60             : 
      61      101036 : struct dcerpc_binding_handle *idmap_child_handle(void)
      62             : {
      63             :         /*
      64             :          * The caller needs to use wb_parent_idmap_setup_send/recv
      65             :          * before talking to the idmap child!
      66             :          */
      67      101036 :         SMB_ASSERT(static_parent_idmap_config.num_doms > 0);
      68      101036 :         return static_idmap_child->binding_handle;
      69             : }
      70             : 
      71             : static void init_idmap_child_done(struct tevent_req *subreq);
      72             : 
      73          41 : NTSTATUS init_idmap_child(TALLOC_CTX *mem_ctx)
      74             : {
      75          41 :         struct tevent_req *subreq = NULL;
      76             : 
      77          41 :         if (static_idmap_child != NULL) {
      78           0 :                 DBG_ERR("idmap child already allocated\n");
      79           0 :                 return NT_STATUS_INTERNAL_ERROR;
      80             :         }
      81             : 
      82          41 :         static_idmap_child = talloc_zero(mem_ctx, struct winbindd_child);
      83          41 :         if (static_idmap_child == NULL) {
      84           0 :                 return NT_STATUS_NO_MEMORY;
      85             :         }
      86             : 
      87          41 :         subreq = wb_parent_idmap_setup_send(static_idmap_child,
      88             :                                             global_event_context());
      89          41 :         if (subreq == NULL) {
      90             :                 /*
      91             :                  * This is only an optimization, so we're free to
      92             :                  * to ignore errors
      93             :                  */
      94           0 :                 DBG_ERR("wb_parent_idmap_setup_send() failed\n");
      95           0 :                 return NT_STATUS_NO_MEMORY;
      96             :         }
      97          41 :         tevent_req_set_callback(subreq, init_idmap_child_done, NULL);
      98          41 :         DBG_DEBUG("wb_parent_idmap_setup_send() started\n");
      99          41 :         return NT_STATUS_OK;
     100             : }
     101             : 
     102          41 : static void init_idmap_child_done(struct tevent_req *subreq)
     103             : {
     104          41 :         const struct wb_parent_idmap_config *cfg = NULL;
     105           0 :         NTSTATUS status;
     106             : 
     107          41 :         status = wb_parent_idmap_setup_recv(subreq, &cfg);
     108          41 :         TALLOC_FREE(subreq);
     109          41 :         if (!NT_STATUS_IS_OK(status)) {
     110             :                 /*
     111             :                  * This is only an optimization, so we're free to
     112             :                  * to ignore errors
     113             :                  */
     114           0 :                 DBG_ERR("wb_parent_idmap_setup_recv() failed %s\n",
     115             :                         nt_errstr(status));
     116           0 :                 return;
     117             :         }
     118             : 
     119          41 :         DBG_DEBUG("wb_parent_idmap_setup_recv() finished\n");
     120             : }
     121             : 
     122             : struct wb_parent_idmap_setup_state {
     123             :         struct tevent_context *ev;
     124             :         struct wb_parent_idmap_config *cfg;
     125             :         size_t dom_idx;
     126             : };
     127             : 
     128          82 : static void wb_parent_idmap_setup_cleanup(struct tevent_req *req,
     129             :                                           enum tevent_req_state req_state)
     130             : {
     131           0 :         struct wb_parent_idmap_setup_state *state =
     132          82 :                 tevent_req_data(req,
     133             :                 struct wb_parent_idmap_setup_state);
     134             : 
     135          82 :         if (req_state == TEVENT_REQ_DONE) {
     136          41 :                 state->cfg = NULL;
     137          41 :                 return;
     138             :         }
     139             : 
     140          41 :         if (state->cfg == NULL) {
     141          41 :                 return;
     142             :         }
     143             : 
     144           0 :         state->cfg->num_doms = 0;
     145           0 :         state->cfg->initialized = false;
     146           0 :         TALLOC_FREE(state->cfg->doms);
     147           0 :         state->cfg = NULL;
     148             : }
     149             : 
     150             : static void wb_parent_idmap_setup_queue_wait_done(struct tevent_req *subreq);
     151             : static bool wb_parent_idmap_setup_scan_config(const char *domname,
     152             :                                               void *private_data);
     153             : static void wb_parent_idmap_setup_lookupname_next(struct tevent_req *req);
     154             : static void wb_parent_idmap_setup_lookupname_done(struct tevent_req *subreq);
     155             : 
     156      107319 : struct tevent_req *wb_parent_idmap_setup_send(TALLOC_CTX *mem_ctx,
     157             :                                               struct tevent_context *ev)
     158             : {
     159      107319 :         struct tevent_req *req = NULL;
     160      107319 :         struct wb_parent_idmap_setup_state *state = NULL;
     161      107319 :         struct tevent_req *subreq = NULL;
     162             : 
     163      107319 :         req = tevent_req_create(mem_ctx, &state,
     164             :                                 struct wb_parent_idmap_setup_state);
     165      107319 :         if (req == NULL) {
     166           0 :                 return NULL;
     167             :         }
     168      107319 :         *state = (struct wb_parent_idmap_setup_state) {
     169             :                 .ev = ev,
     170             :                 .cfg = &static_parent_idmap_config,
     171             :                 .dom_idx = 0,
     172             :         };
     173             : 
     174      107319 :         if (state->cfg->initialized) {
     175      107260 :                 tevent_req_done(req);
     176      107260 :                 return tevent_req_post(req, ev);
     177             :         }
     178             : 
     179          59 :         if (state->cfg->queue == NULL) {
     180          41 :                 state->cfg->queue = tevent_queue_create(NULL,
     181             :                                                 "wb_parent_idmap_config_queue");
     182          41 :                 if (tevent_req_nomem(state->cfg->queue, req)) {
     183           0 :                         return tevent_req_post(req, ev);
     184             :                 }
     185             :         }
     186             : 
     187          59 :         subreq = tevent_queue_wait_send(state, state->ev, state->cfg->queue);
     188          59 :         if (tevent_req_nomem(subreq, req)) {
     189           0 :                 return tevent_req_post(req, ev);
     190             :         }
     191          59 :         tevent_req_set_callback(subreq,
     192             :                                 wb_parent_idmap_setup_queue_wait_done,
     193             :                                 req);
     194             : 
     195          59 :         return req;
     196             : }
     197             : 
     198          59 : static void wb_parent_idmap_setup_queue_wait_done(struct tevent_req *subreq)
     199             : {
     200           0 :         struct tevent_req *req =
     201          59 :                 tevent_req_callback_data(subreq,
     202             :                 struct tevent_req);
     203           0 :         struct wb_parent_idmap_setup_state *state =
     204          59 :                 tevent_req_data(req,
     205             :                 struct wb_parent_idmap_setup_state);
     206           0 :         bool ok;
     207             : 
     208             :         /*
     209             :          * Note we don't call TALLOC_FREE(subreq) here in order to block the
     210             :          * queue until tevent_req_received() in wb_parent_idmap_setup_recv()
     211             :          * will destroy it implicitly.
     212             :          */
     213          59 :         ok = tevent_queue_wait_recv(subreq);
     214          59 :         if (!ok) {
     215           0 :                 DBG_ERR("tevent_queue_wait_recv() failed\n");
     216           0 :                 tevent_req_nterror(req, NT_STATUS_INTERNAL_ERROR);
     217           0 :                 return;
     218             :         }
     219             : 
     220          59 :         if (state->cfg->num_doms != 0) {
     221             :                 /*
     222             :                  * If we're not the first one we're done.
     223             :                  */
     224          18 :                 tevent_req_done(req);
     225          18 :                 return;
     226             :         }
     227             : 
     228             :         /*
     229             :          * From this point we start changing state->cfg,
     230             :          * which is &static_parent_idmap_config,
     231             :          * so we better setup a cleanup function
     232             :          * to undo the changes on failure.
     233             :          */
     234          41 :         tevent_req_set_cleanup_fn(req, wb_parent_idmap_setup_cleanup);
     235             : 
     236             :         /*
     237             :          * Put the passdb idmap domain first. We always need to try
     238             :          * there first.
     239             :          */
     240          41 :         state->cfg->doms = talloc_zero_array(NULL,
     241             :                                              struct wb_parent_idmap_config_dom,
     242             :                                              1);
     243          41 :         if (tevent_req_nomem(state->cfg->doms, req)) {
     244           0 :                 return;
     245             :         }
     246          41 :         state->cfg->doms[0].low_id = 0;
     247          41 :         state->cfg->doms[0].high_id = UINT_MAX;
     248          41 :         state->cfg->doms[0].name = talloc_strdup(state->cfg->doms,
     249             :                                                  get_global_sam_name());
     250          41 :         if (tevent_req_nomem(state->cfg->doms[0].name, req)) {
     251           0 :                 return;
     252             :         }
     253          41 :         state->cfg->num_doms += 1;
     254             : 
     255          41 :         lp_scan_idmap_domains(wb_parent_idmap_setup_scan_config, req);
     256          41 :         if (!tevent_req_is_in_progress(req)) {
     257           0 :                 return;
     258             :         }
     259             : 
     260          41 :         wb_parent_idmap_setup_lookupname_next(req);
     261             : }
     262             : 
     263          51 : static bool wb_parent_idmap_setup_scan_config(const char *domname,
     264             :                                               void *private_data)
     265             : {
     266           0 :         struct tevent_req *req =
     267          51 :                 talloc_get_type_abort(private_data,
     268             :                 struct tevent_req);
     269           0 :         struct wb_parent_idmap_setup_state *state =
     270          51 :                 tevent_req_data(req,
     271             :                 struct wb_parent_idmap_setup_state);
     272          51 :         struct wb_parent_idmap_config_dom *map = NULL;
     273           0 :         size_t i;
     274           0 :         const char *range;
     275           0 :         unsigned low_id, high_id;
     276           0 :         int ret;
     277             : 
     278          51 :         range = idmap_config_const_string(domname, "range", NULL);
     279          51 :         if (range == NULL) {
     280           0 :                 DBG_DEBUG("No range for domain %s found\n", domname);
     281           0 :                 return false;
     282             :         }
     283             : 
     284          51 :         ret = sscanf(range, "%u - %u", &low_id, &high_id);
     285          51 :         if (ret != 2) {
     286           0 :                 DBG_DEBUG("Invalid range spec \"%s\" for domain %s\n",
     287             :                           range, domname);
     288           0 :                 return false;
     289             :         }
     290             : 
     291          51 :         if (low_id > high_id) {
     292           0 :                 DBG_DEBUG("Invalid range %u - %u for domain %s\n",
     293             :                           low_id, high_id, domname);
     294           0 :                 return false;
     295             :         }
     296             : 
     297         114 :         for (i=0; i<state->cfg->num_doms; i++) {
     298          63 :                 if (strequal(domname, state->cfg->doms[i].name)) {
     299           0 :                         map = &state->cfg->doms[i];
     300           0 :                         break;
     301             :                 }
     302             :         }
     303             : 
     304          51 :         if (map == NULL) {
     305           0 :                 struct wb_parent_idmap_config_dom *tmp;
     306           0 :                 char *name;
     307             : 
     308          51 :                 name = talloc_strdup(state, domname);
     309          51 :                 if (name == NULL) {
     310           0 :                         DBG_ERR("talloc failed\n");
     311           0 :                         return false;
     312             :                 }
     313             : 
     314          51 :                 tmp = talloc_realloc(
     315             :                         NULL, state->cfg->doms, struct wb_parent_idmap_config_dom,
     316             :                         state->cfg->num_doms+1);
     317          51 :                 if (tmp == NULL) {
     318           0 :                         DBG_ERR("talloc failed\n");
     319           0 :                         return false;
     320             :                 }
     321          51 :                 state->cfg->doms = tmp;
     322             : 
     323          51 :                 map = &state->cfg->doms[state->cfg->num_doms];
     324          51 :                 state->cfg->num_doms += 1;
     325          51 :                 ZERO_STRUCTP(map);
     326          51 :                 map->name = talloc_move(state->cfg->doms, &name);
     327             :         }
     328             : 
     329          51 :         map->low_id = low_id;
     330          51 :         map->high_id = high_id;
     331             : 
     332          51 :         return false;
     333             : }
     334             : 
     335          92 : static void wb_parent_idmap_setup_lookupname_next(struct tevent_req *req)
     336             : {
     337           0 :         struct wb_parent_idmap_setup_state *state =
     338          92 :                 tevent_req_data(req,
     339             :                 struct wb_parent_idmap_setup_state);
     340          92 :         struct wb_parent_idmap_config_dom *dom =
     341          92 :                 &state->cfg->doms[state->dom_idx];
     342          92 :         struct tevent_req *subreq = NULL;
     343             : 
     344         133 :  next_domain:
     345         133 :         if (state->dom_idx == state->cfg->num_doms) {
     346             :                 /*
     347             :                  * We're done, so start the idmap child
     348             :                  */
     349          41 :                 setup_child(NULL, static_idmap_child, "log.winbindd", "idmap");
     350          41 :                 static_parent_idmap_config.initialized = true;
     351          41 :                 tevent_req_done(req);
     352          41 :                 return;
     353             :         }
     354             : 
     355          92 :         if (strequal(dom->name, "*")) {
     356          41 :                 state->dom_idx++;
     357          41 :                 goto next_domain;
     358             :         }
     359             : 
     360          51 :         subreq = wb_lookupname_send(state,
     361             :                                     state->ev,
     362             :                                     dom->name,
     363             :                                     dom->name,
     364             :                                     "",
     365             :                                     LOOKUP_NAME_NO_NSS);
     366          51 :         if (tevent_req_nomem(subreq, req)) {
     367           0 :                 return;
     368             :         }
     369          51 :         tevent_req_set_callback(subreq,
     370             :                                 wb_parent_idmap_setup_lookupname_done,
     371             :                                 req);
     372             : }
     373             : 
     374          51 : static void wb_parent_idmap_setup_lookupname_done(struct tevent_req *subreq)
     375             : {
     376           0 :         struct tevent_req *req =
     377          51 :                 tevent_req_callback_data(subreq,
     378             :                 struct tevent_req);
     379           0 :         struct wb_parent_idmap_setup_state *state =
     380          51 :                 tevent_req_data(req,
     381             :                 struct wb_parent_idmap_setup_state);
     382          51 :         struct wb_parent_idmap_config_dom *dom =
     383          51 :                 &state->cfg->doms[state->dom_idx];
     384           0 :         enum lsa_SidType type;
     385           0 :         NTSTATUS status;
     386             : 
     387          51 :         status = wb_lookupname_recv(subreq, &dom->sid, &type);
     388          51 :         TALLOC_FREE(subreq);
     389          51 :         if (!NT_STATUS_IS_OK(status)) {
     390           0 :                 DBG_ERR("Lookup domain name '%s' failed '%s'\n",
     391             :                         dom->name,
     392             :                         nt_errstr(status));
     393             : 
     394           0 :                 state->dom_idx++;
     395           0 :                 wb_parent_idmap_setup_lookupname_next(req);
     396           0 :                 return;
     397             :         }
     398             : 
     399          51 :         if (type != SID_NAME_DOMAIN) {
     400           0 :                 struct dom_sid_buf buf;
     401             : 
     402           0 :                 DBG_ERR("SID %s for idmap domain name '%s' "
     403             :                         "not a domain SID\n",
     404             :                         dom_sid_str_buf(&dom->sid, &buf),
     405             :                         dom->name);
     406             : 
     407           0 :                 ZERO_STRUCT(dom->sid);
     408             :         }
     409             : 
     410          51 :         state->dom_idx++;
     411          51 :         wb_parent_idmap_setup_lookupname_next(req);
     412             : 
     413          51 :         return;
     414             : }
     415             : 
     416      107319 : NTSTATUS wb_parent_idmap_setup_recv(struct tevent_req *req,
     417             :                                     const struct wb_parent_idmap_config **_cfg)
     418             : {
     419      107319 :         const struct wb_parent_idmap_config *cfg = &static_parent_idmap_config;
     420           0 :         NTSTATUS status;
     421             : 
     422      107319 :         *_cfg = NULL;
     423             : 
     424      107319 :         if (tevent_req_is_nterror(req, &status)) {
     425           0 :                 tevent_req_received(req);
     426           0 :                 return status;
     427             :         }
     428             : 
     429             :         /*
     430             :          * Note state->cfg is already set to NULL by
     431             :          * wb_parent_idmap_setup_cleanup()
     432             :          */
     433      107319 :         *_cfg = cfg;
     434      107319 :         tevent_req_received(req);
     435      107319 :         return NT_STATUS_OK;
     436             : }