X-Git-Url: http://andersk.mit.edu/gitweb/nss_nonlocal.git/blobdiff_plain/d905b3694128b82d2f9e7dfa5155ee281ac07be2..cf3383162f443111e02d16e95846c82ad360b5df:/nonlocal-passwd.c diff --git a/nonlocal-passwd.c b/nonlocal-passwd.c index a5570df..ffd5375 100644 --- a/nonlocal-passwd.c +++ b/nonlocal-passwd.c @@ -79,7 +79,7 @@ check_nonlocal_uid(const char *user, uid_t uid, int *errnop) struct passwd pwbuf; int old_errno = errno; - int buflen = sysconf(_SC_GETPW_R_SIZE_MAX); + size_t buflen = sysconf(_SC_GETPW_R_SIZE_MAX); char *buf = malloc(buflen); if (buf == NULL) { *errnop = ENOMEM; @@ -124,6 +124,12 @@ check_nonlocal_uid(const char *user, uid_t uid, int *errnop) return status; } +enum nss_status +check_nonlocal_passwd(const char *user, struct passwd *pwd, int *errnop) +{ + return check_nonlocal_uid(user, pwd->pw_uid, errnop); +} + enum nss_status check_nonlocal_user(const char *user, int *errnop) { @@ -140,7 +146,7 @@ check_nonlocal_user(const char *user, int *errnop) struct passwd pwbuf; int old_errno = errno; - int buflen = sysconf(_SC_GETPW_R_SIZE_MAX); + size_t buflen = sysconf(_SC_GETPW_R_SIZE_MAX); char *buf = malloc(buflen); if (buf == NULL) { *errnop = ENOMEM; @@ -279,7 +285,7 @@ _nss_nonlocal_getpwent_r(struct passwd *pwd, char *buffer, size_t buflen, do status = DL_CALL_FCT(pwent_fct.l, (pwd, buffer, buflen, errnop)); while (status == NSS_STATUS_SUCCESS && - check_nonlocal_uid(pwd->pw_name, pwd->pw_uid, &nonlocal_errno) != NSS_STATUS_SUCCESS); + check_nonlocal_passwd(pwd->pw_name, pwd, &nonlocal_errno) != NSS_STATUS_SUCCESS); } if (status == NSS_STATUS_TRYAGAIN && *errnop == ERANGE) return status; @@ -329,7 +335,12 @@ _nss_nonlocal_getpwnam_r(const char *name, struct passwd *pwd, if (status != NSS_STATUS_SUCCESS) return status; - status = check_nonlocal_uid(name, pwd->pw_uid, errnop); + if (strcmp(name, pwd->pw_name) != 0) { + syslog(LOG_ERR, "nss_nonlocal: discarding user %s from lookup for user %s\n", pwd->pw_name, name); + return NSS_STATUS_NOTFOUND; + } + + status = check_nonlocal_passwd(name, pwd, errnop); if (status != NSS_STATUS_SUCCESS) return status; @@ -375,7 +386,7 @@ _nss_nonlocal_getpwuid_r(uid_t uid, struct passwd *pwd, if (status != NSS_STATUS_SUCCESS) return status; - status = check_nonlocal_uid(pwd->pw_name, pwd->pw_uid, errnop); + status = check_nonlocal_passwd(pwd->pw_name, pwd, errnop); if (status != NSS_STATUS_SUCCESS) return status;