]>
Commit | Line | Data |
---|---|---|
1 | /* | |
2 | * nonlocal-shadow.c | |
3 | * shadow database for nss_nonlocal proxy. | |
4 | * | |
5 | * Copyright © 2007–2010 Anders Kaseorg <andersk@mit.edu> | |
6 | * | |
7 | * This file is part of nss_nonlocal. | |
8 | * | |
9 | * nss_nonlocal is free software; you can redistribute it and/or | |
10 | * modify it under the terms of the GNU Lesser General Public License | |
11 | * as published by the Free Software Foundation; either version 2.1 of | |
12 | * the License, or (at your option) any later version. | |
13 | * | |
14 | * nss_nonlocal is distributed in the hope that it will be useful, but | |
15 | * WITHOUT ANY WARRANTY; without even the implied warranty of | |
16 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU | |
17 | * Lesser General Public License for more details. | |
18 | * | |
19 | * You should have received a copy of the GNU Lesser General Public | |
20 | * License along with nss_nonlocal; if not, write to the Free Software | |
21 | * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA | |
22 | * 02110-1301 USA | |
23 | */ | |
24 | ||
25 | #define _GNU_SOURCE | |
26 | ||
27 | #include <sys/types.h> | |
28 | #include <dlfcn.h> | |
29 | #include <errno.h> | |
30 | #include <nss.h> | |
31 | #include <shadow.h> | |
32 | #include <stdbool.h> | |
33 | #include <stddef.h> | |
34 | #include <stdlib.h> | |
35 | #include <string.h> | |
36 | #include <syslog.h> | |
37 | ||
38 | #include "nsswitch-internal.h" | |
39 | #include "nonlocal.h" | |
40 | ||
41 | ||
42 | static service_user *__nss_shadow_nonlocal_database; | |
43 | ||
44 | static int | |
45 | internal_function | |
46 | __nss_shadow_nonlocal_lookup2(service_user **ni, const char *fct_name, | |
47 | const char *fct2_name, void **fctp) | |
48 | { | |
49 | if (__nss_shadow_nonlocal_database == NULL | |
50 | && __nss_database_lookup("shadow_nonlocal", NULL, NULL, | |
51 | &__nss_shadow_nonlocal_database) < 0) | |
52 | return -1; | |
53 | ||
54 | *ni = __nss_shadow_nonlocal_database; | |
55 | ||
56 | *fctp = __nss_lookup_function(*ni, fct_name); | |
57 | if (*fctp == NULL && fct2_name != NULL) | |
58 | *fctp = __nss_lookup_function(*ni, fct2_name); | |
59 | return 0; | |
60 | } | |
61 | ||
62 | ||
63 | static bool spent_initialized = false; | |
64 | static service_user *spent_startp, *spent_nip; | |
65 | static void *spent_fct_start; | |
66 | static union { | |
67 | enum nss_status (*l)(struct spwd *pwd, char *buffer, size_t buflen, | |
68 | int *errnop); | |
69 | void *ptr; | |
70 | } spent_fct; | |
71 | static const char *spent_fct_name = "getspent_r"; | |
72 | ||
73 | enum nss_status | |
74 | _nss_nonlocal_setspent(int stayopen) | |
75 | { | |
76 | enum nss_status status; | |
77 | const struct walk_nss w = { | |
78 | .lookup2 = &__nss_shadow_nonlocal_lookup2, .fct_name = "setspent", | |
79 | .status = &status | |
80 | }; | |
81 | const __typeof__(&_nss_nonlocal_setspent) self = NULL; | |
82 | #define args (stayopen) | |
83 | #include "walk_nss.h" | |
84 | #undef args | |
85 | if (status != NSS_STATUS_SUCCESS) | |
86 | return status; | |
87 | ||
88 | if (!spent_initialized) { | |
89 | __nss_shadow_nonlocal_lookup2(&spent_startp, spent_fct_name, NULL, | |
90 | &spent_fct_start); | |
91 | __sync_synchronize(); | |
92 | spent_initialized = true; | |
93 | } | |
94 | spent_nip = spent_startp; | |
95 | spent_fct.ptr = spent_fct_start; | |
96 | return NSS_STATUS_SUCCESS; | |
97 | } | |
98 | ||
99 | enum nss_status | |
100 | _nss_nonlocal_endspent(void) | |
101 | { | |
102 | enum nss_status status; | |
103 | const struct walk_nss w = { | |
104 | .lookup2 = &__nss_shadow_nonlocal_lookup2, .fct_name = "endspent", | |
105 | .status = &status | |
106 | }; | |
107 | const __typeof__(&_nss_nonlocal_endspent) self = NULL; | |
108 | ||
109 | spent_nip = NULL; | |
110 | ||
111 | #define args () | |
112 | #include "walk_nss.h" | |
113 | #undef args | |
114 | return status; | |
115 | } | |
116 | ||
117 | enum nss_status | |
118 | _nss_nonlocal_getspent_r(struct spwd *pwd, char *buffer, size_t buflen, | |
119 | int *errnop) | |
120 | { | |
121 | enum nss_status status; | |
122 | ||
123 | char *nonlocal_ignore = getenv(NONLOCAL_IGNORE_ENV); | |
124 | if (nonlocal_ignore != NULL && nonlocal_ignore[0] != '\0') | |
125 | return NSS_STATUS_UNAVAIL; | |
126 | ||
127 | if (spent_nip == NULL) { | |
128 | status = _nss_nonlocal_setspent(0); | |
129 | if (status != NSS_STATUS_SUCCESS) | |
130 | return status; | |
131 | } | |
132 | do { | |
133 | if (spent_fct.ptr == NULL) | |
134 | status = NSS_STATUS_UNAVAIL; | |
135 | else | |
136 | status = DL_CALL_FCT(spent_fct.l, (pwd, buffer, buflen, errnop)); | |
137 | if (status == NSS_STATUS_TRYAGAIN && *errnop == ERANGE) | |
138 | return status; | |
139 | ||
140 | if (status == NSS_STATUS_SUCCESS) | |
141 | return NSS_STATUS_SUCCESS; | |
142 | } while (__nss_next2(&spent_nip, spent_fct_name, NULL, &spent_fct.ptr, | |
143 | status, 0) == 0); | |
144 | ||
145 | spent_nip = NULL; | |
146 | return NSS_STATUS_NOTFOUND; | |
147 | } | |
148 | ||
149 | ||
150 | enum nss_status | |
151 | _nss_nonlocal_getspnam_r(const char *name, struct spwd *pwd, | |
152 | char *buffer, size_t buflen, int *errnop) | |
153 | { | |
154 | enum nss_status status; | |
155 | const struct walk_nss w = { | |
156 | .lookup2 = __nss_shadow_nonlocal_lookup2, .fct_name = "getspnam_r", | |
157 | .status = &status, .errnop = errnop | |
158 | }; | |
159 | const __typeof__(&_nss_nonlocal_getspnam_r) self = NULL; | |
160 | #define args (name, pwd, buffer, buflen, errnop) | |
161 | #include "walk_nss.h" | |
162 | #undef args | |
163 | if (status != NSS_STATUS_SUCCESS) | |
164 | return status; | |
165 | ||
166 | if (strcmp(name, pwd->sp_namp) != 0) { | |
167 | syslog(LOG_ERR, "nss_nonlocal: discarding shadow %s from lookup for shadow %s\n", pwd->sp_namp, name); | |
168 | return NSS_STATUS_NOTFOUND; | |
169 | } | |
170 | ||
171 | return NSS_STATUS_SUCCESS; | |
172 | } |