3 * Utility functions for outputting ACLs
5 * Copyright (C) 1999 by the Massachusetts Institute of Technology.
6 * For copying and distribution information, please see the file
10 #include <mit-copyright.h>
12 #include <moira_site.h>
22 EXEC SQL INCLUDE sqlca;
26 static char defaultrealm[REALM_SZ];
28 static struct hash *users, *strings;
30 static void save_imember(struct save_queue *sq, char *type, int id, char *tag);
31 static struct imember *imember(char type, char *name, char *tag);
32 static struct save_queue *merge_imembers(struct save_queue *sq,
33 char *(merge_func)(char *, char *));
37 users = create_hash(2000);
38 strings = create_hash(2000);
39 krb_get_lrealm(defaultrealm, 1);
42 void dump_krb_acl(FILE *out, char *type, int id, int vers)
44 struct save_queue *sq;
46 char kbuf[MAX_K_NAME_SZ];
48 sq = get_acl(type, id, NULL);
49 while (sq_remove_data(sq, &m))
53 fprintf(stderr, "Found string_id with no associated string. Exiting.\n");
58 canon_krb(m, vers, kbuf, sizeof(kbuf));
59 fprintf(out, "%s\n", kbuf);
66 void canon_krb(struct imember *m, int vers, char *buf, int len)
69 char kbuf[MAX_K_NAME_SZ];
74 snprintf(buf, len, "%s@%s", m->name, defaultrealm);
78 /* We assume we have a krb4-style namespace. If we want a krb5 acl, we need to
79 * krb5_425_conv_principal() on it. For krb4, do nothing special.
81 at = strchr(m->name, '@');
83 at = strchr(m->name, '\0');
84 snprintf(kbuf, len, "%s", m->name);
88 int plen = strlen(kbuf);
89 snprintf(kbuf + plen, len - plen, "@%s", defaultrealm);
94 char name[ANAME_SZ] = "\0", inst[INST_SZ] = "\0", realm[REALM_SZ] = "\0";
96 krb5_context context = NULL;
97 krb5_principal client = NULL;
100 if (kname_parse(name, inst, realm, kbuf) != KSUCCESS)
103 status = krb5_init_context(&context);
107 status = krb5_425_conv_principal(context, name, inst, realm, &client);
111 status = krb5_unparse_name(context, client, &kuser);
115 strncpy(buf, kuser, MAX_K_NAME_SZ);
116 buf[MAX_K_NAME_SZ - 1] = '\0';
120 krb5_free_unparsed_name(context, kuser);
122 krb5_free_principal(context, client);
124 krb5_free_context(context);
128 /* v4 output, and we should already have added a realm. */
129 snprintf(buf, len, "%s", kbuf);
135 void dump_user_list(FILE *out, char *type, int id)
137 struct save_queue *sq;
140 sq = get_acl(type, id, NULL);
141 while (sq_remove_data(sq, &m))
143 if (m->type == 'U' || (m->type == 'S' && !strchr(m->name, '@')))
144 fprintf(out, "%s\n", m->name);
150 struct save_queue *get_acl(char *type, int id,
151 char *(merge_func)(char *, char *))
153 struct save_queue *sq;
156 save_imember(sq, type, id, NULL);
157 return merge_imembers(sq, merge_func);
160 static void save_imember(struct save_queue *sq, char *type, int id, char *tag)
162 EXEC SQL BEGIN DECLARE SECTION;
163 int lid = id, mid, mid2, tagid, status;
164 char mtype[IMEMBERS_MEMBER_TYPE_SIZE];
165 EXEC SQL END DECLARE SECTION;
171 EXEC SQL SELECT status INTO :status FROM users WHERE users_id = :id;
173 sq_save_data(sq, imember('U', user_lookup(id), tag));
178 sq_save_data(sq, imember(*type, string_lookup(id), tag));
182 EXEC SQL DECLARE csr_acl_mem CURSOR FOR
183 SELECT member_type, member_id, tag FROM imembers
184 WHERE list_id = :lid AND direct = 1;
185 EXEC SQL OPEN csr_acl_mem;
188 EXEC SQL FETCH csr_acl_mem INTO :mtype, :mid, :tagid;
195 mtag = string_lookup(tagid);
198 EXEC SQL DECLARE csr_list CURSOR FOR
199 SELECT member_type, member_id FROM imembers
200 WHERE list_id = :mid AND member_type != 'LIST';
201 EXEC SQL OPEN csr_list;
204 EXEC SQL FETCH csr_list INTO :mtype, :mid;
208 save_imember(sq, mtype, mid, mtag);
210 EXEC SQL CLOSE csr_list;
213 save_imember(sq, mtype, mid, mtag);
218 static struct save_queue *merge_imembers(struct save_queue *sq,
219 char *(merge_func)(char *, char *))
222 struct imember *m1, *m2;
223 struct save_queue *out;
227 while (sq_remove_data(sq, &m1))
229 while (sq_get_data(sq, &m2))
231 if (m1->type == m2->type && !strcmp(m1->name, m2->name))
233 sq_remove_last_data(sq);
237 m1->tag = merge_func(m1->tag, m2->tag);
243 sq_save_data(out, m1);
249 static struct imember *imember(char type, char *name, char *tag)
252 m = malloc(sizeof(struct imember));
255 m->tag = strdup(tag ? tag : "");
259 void freeimember(struct imember *m)
265 char *user_lookup(int users_id)
269 u = hash_lookup(users, users_id);
274 EXEC SQL BEGIN DECLARE SECTION;
275 char login[USERS_LOGIN_SIZE];
276 EXEC SQL END DECLARE SECTION;
278 EXEC SQL SELECT login INTO :login FROM users
279 WHERE users_id = :users_id;
283 u = strdup(strtrim(login));
284 hash_store(users, users_id, u);
289 char *string_lookup(int string_id)
293 s = hash_lookup(strings, string_id);
298 EXEC SQL BEGIN DECLARE SECTION;
299 char string[STRINGS_STRING_SIZE];
300 EXEC SQL END DECLARE SECTION;
302 EXEC SQL SELECT string INTO :string FROM strings
303 WHERE string_id = :string_id;
307 s = strdup(strtrim(string));
308 hash_store(strings, string_id, s);