Add netgroups infrastructure to proxy provider

3 files changed, 42 insertions, 0 deletions

diff --git a/src/providers/proxy/proxy.h b/src/providers/proxy/proxy.h
index eefcce580..e35e91ce3 100644
--- a/src/providers/proxy/proxy.h
+++ b/src/providers/proxy/proxy.h
@@ -40,6 +40,7 @@
 #include "providers/dp_backend.h"
 #include "db/sysdb.h"
 #include "proxy.h"
+#include "sss_client/nss_compat.h"
 #include <dhash.h>
 
 struct proxy_nss_ops {
@@ -64,6 +65,11 @@ struct proxy_nss_ops {
                                       long int *start, long int *size,
                                       gid_t **groups, long int limit,
                                       int *errnop);
+    enum nss_status (*setnetgrent)(const char *netgroup,
+                                   struct __netgrent *result);
+    enum nss_status (*getnetgrent_r)(struct __netgrent *result, char *buffer,
+                                     size_t buflen, int *errnop);
+    enum nss_status (*endnetgrent)(struct __netgrent *result);
 };
 
 struct authtok_conv {
diff --git a/src/providers/proxy/proxy_id.c b/src/providers/proxy/proxy_id.c
index 3fe58f3a5..ead6ce080 100644
--- a/src/providers/proxy/proxy_id.c
+++ b/src/providers/proxy/proxy_id.c
@@ -1138,6 +1138,20 @@ void proxy_get_account_info(struct be_req *breq)
         ret = get_initgr(breq, ctx, sysdb, domain, ar->filter_value);
         break;
 
+    case BE_REQ_NETGROUP:
+        if (ar->filter_type != BE_FILTER_NAME) {
+            return proxy_reply(breq, DP_ERR_FATAL,
+                               EINVAL, "Invalid filter type");
+        }
+        if (ctx->ops.setnetgrent == NULL || ctx->ops.getnetgrent_r == NULL ||
+            ctx->ops.endnetgrent == NULL) {
+            return proxy_reply(breq, DP_ERR_FATAL,
+                               ENODEV, "Netgroups are not supported");
+        }
+
+        return proxy_reply(breq, DP_ERR_FATAL,
+                           ENOSYS, "Netgroups not implemented");
+
     default: /*fail*/
         return proxy_reply(breq, DP_ERR_FATAL,
                            EINVAL, "Invalid request type");
diff --git a/src/providers/proxy/proxy_init.c b/src/providers/proxy/proxy_init.c
index 47c9e8111..de1904c79 100644
--- a/src/providers/proxy/proxy_init.c
+++ b/src/providers/proxy/proxy_init.c
@@ -207,6 +207,28 @@ int sssm_proxy_id_init(struct be_ctx *bectx,
                   "full groups enumeration!\n", libname));
     }
 
+    ctx->ops.setnetgrent = proxy_dlsym(handle, "_nss_%s_setnetgrent", libname);
+    if (!ctx->ops.setnetgrent) {
+        DEBUG(0, ("Failed to load _nss_%s_setnetgrent, error: %s. "
+                  "The library does not support netgroups.\n", libname,
+                                                               dlerror()));
+    }
+
+    ctx->ops.getnetgrent_r = proxy_dlsym(handle, "_nss_%s_getnetgrent_r",
+                                         libname);
+    if (!ctx->ops.getgrent_r) {
+        DEBUG(0, ("Failed to load _nss_%s_getnetgrent_r, error: %s. "
+                  "The library does not support netgroups.\n", libname,
+                                                               dlerror()));
+    }
+
+    ctx->ops.endnetgrent = proxy_dlsym(handle, "_nss_%s_endnetgrent", libname);
+    if (!ctx->ops.endnetgrent) {
+        DEBUG(0, ("Failed to load _nss_%s_endnetgrent, error: %s. "
+                  "The library does not support netgroups.\n", libname,
+                                                               dlerror()));
+    }
+
     *ops = &proxy_id_ops;
     *pvt_data = ctx;
     ret = EOK;