Version 2.2

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Switch from __nss_next API to __nss_next2 API

__nss_passwd_lookup2, __nss_group_lookup2, and __nss_next2 were added
in glibc 2.8.

__nss_passwd_lookup, __nss_group_lookup, and __nss_next were removed
in glibc 2.27.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Update internal glibc functions ABI for glibc 2.27

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Version 2.1

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

end{pw,gr}ent, initgroups_dyn: Call all functions from the nonlocal chain

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

initgroups_dyn: Succeed even if groups_nonlocal chain returned not found

We’ve already added the magic groups at this point, so we need to
return success.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Guard one-time initialization with memory barriers

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Organize #includes

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Makefile.am: Fix ‘make uninstall’

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Makefile.am: Add walk_nss.h

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

configure: Use AM_PROG_AR if available (needed by Automake 1.12)

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

configure: Remove redundant AC_PROG_INSTALL

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

getspent: Pay attention to NSS_NONLOCAL_IGNORE

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Version 2.0

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Allow nonlocal users in local groups containing MAGIC_NONLOCAL_USERNAME

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Add the primary nonlocal gid to local users in MAGIC_NONLOCAL_GROUPNAME

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Add supplementary nonlocal gids to local users in MAGIC_NONLOCAL_GROUPNAME

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Document nss-nonlocal-users and nss-local-users

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

initgroups_dyn: Always look up MAGIC_NONLOCAL_GROUPNAME

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

initgroups_dyn: Rename is_local to !is_nonlocal

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Only look up MAGIC_LOCAL_GROUPNAME for local users

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Remove redundant test for MAGIC_LOCAL_GROUPNAME membership

check_nonlocal_gid already stops users from getting into
MAGIC_LOCAL_GROUPNAME from nonlocal reasons.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

initgroups_dyn: Refactor adding a group into an add_group function

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Define bool

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Move the repetitive NSS walking logic into an include file

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Fix errno saving and restoring

Previously, the errno from malloc and check_nonlocal_{uid,gid} was
getting lost when errnop == &errno.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Add copyright notice to nonlocal.h

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Catch undefined symbols at link time

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Version 1.11.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Change syslog priority when removing local groups from non-local users

Signed-off-by: Jonathan Reed <jdreed@mit.edu>

Update licensing to LGPLv2.1+.

Since nss_nonlocal uses glibc internal functions, it probably could
not be distributed outside the terms of the LGPL anyway.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>
Signed-off-by: Tim Abbott <tabbott@mit.edu>

Check that a nonlocal lookup by id returns the right id.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Version 1.10.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Disallow numeric nonlocal user/group names that look like local uid/gids.

This prevents nonlocal users and groups from disturbing a command like
‘chown 0:0 file’.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Add check_nonlocal_passwd and check_nonlocal_group helper functions.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Check that a nonlocal lookup by name returns the right name.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Use automake’s silent-rules mode if available, for quieter build output.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Change type of buflen to size_t.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Move declarations before code.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Version 1.9.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Simplify get_local_group to return the allocated buffer instead of copying.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Enlarge buffer sizes beyond _SC_GET{PW,GR}_R_SIZE_MAX if necessary.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Pass the right buffer size to _nss_nonlocal_getgrnam_r in get_local_group.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Version 1.8.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Correct the buffer size passed to realloc.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Unindent a bunch of code in get_local_group.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Skip the nonlocal handler, so we can expunge the magic buflen hack.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Replace recursive nss calls with explicit iteration over the nss chain.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

glibc uses regparms for internal functions on i386.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Automakefiscate and libtoolfiscate.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Autoheaderfiscate.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Autoconfiscate.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Fix some memory leaks.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Assume that errors other than NSS_STATUS_TRYAGAIN mean “not found”.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Tidy nsswitch-internal.h; remove unused __nss_configure_lookup.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Don’t reset errno to 0.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Use $(CC) for linktest.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Use a version script to hide internal symbols.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

If NSS_NONLOCAL_IGNORE is set, pretend that nonlocal information doesn't exist.

Signed-off-by: Tim Abbott <tabbott@mit.edu>

Bug fixes and cleanups.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

* Have initgroups() only add nonlocal groups to nonlocal users.
* If a group called nss-local-users exists, add local users to it.
* If a group called nss-nonlocal-users exists, add nonlocal users to it.

Signed-off-by: Tim Abbott <tabbott@mit.edu>

Don't link with pthread.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Use a magic buflen instead of thread-local variables, to avoid strange
problems on sarge.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Link with pthread to be safe.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>

Initial release.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>