summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--server/Makefile.in2
-rw-r--r--server/server.mk6
-rw-r--r--server/tools/sss_groupmod.c281
3 files changed, 288 insertions, 1 deletions
diff --git a/server/Makefile.in b/server/Makefile.in
index 342bbcc04..f12873e94 100644
--- a/server/Makefile.in
+++ b/server/Makefile.in
@@ -118,7 +118,7 @@ endif
ifneq (x$(HAVE_POLICYKIT), x)
LIBEXECBINS += sbin/sssd_pk
endif
-TOOLSBINS = sbin/sss_useradd sbin/sss_userdel sbin/sss_groupadd sbin/sss_groupdel sbin/sss_usermod
+TOOLSBINS = sbin/sss_useradd sbin/sss_userdel sbin/sss_groupadd sbin/sss_groupdel sbin/sss_usermod sbin/sss_groupmod
BINS = sbin/sssd $(LIBEXECBINS) $(TOOLSBINS)
ifneq (x$(HAVE_TESTS), x)
diff --git a/server/server.mk b/server/server.mk
index b09312db2..ecd60afb6 100644
--- a/server/server.mk
+++ b/server/server.mk
@@ -93,6 +93,9 @@ GROUPDEL_OBJ = \
USERMOD_OBJ = \
tools/sss_usermod.o
+GROUPMOD_OBJ = \
+ tools/sss_groupmod.o
+
sbin/sssd: $(SERVER_OBJ) $(UTIL_OBJ)
$(CC) -o sbin/sssd $(SERVER_OBJ) $(UTIL_OBJ) $(LDFLAGS) $(LIBS)
@@ -149,3 +152,6 @@ sbin/sss_groupdel: $(GROUPDEL_OBJ) $(TOOLS_OBJ) $(UTIL_OBJ)
sbin/sss_usermod: $(USERMOD_OBJ) $(TOOLS_OBJ) $(UTIL_OBJ)
$(CC) -o sbin/sss_usermod $(USERMOD_OBJ) $(TOOLS_OBJ) $(UTIL_OBJ) $(LDFLAGS) $(LIBS)
+sbin/sss_groupmod: $(GROUPMOD_OBJ) $(TOOLS_OBJ) $(UTIL_OBJ)
+ $(CC) -o sbin/sss_groupmod $(GROUPMOD_OBJ) $(TOOLS_OBJ) $(UTIL_OBJ) $(LDFLAGS) $(LIBS)
+
diff --git a/server/tools/sss_groupmod.c b/server/tools/sss_groupmod.c
new file mode 100644
index 000000000..020a1f2e2
--- /dev/null
+++ b/server/tools/sss_groupmod.c
@@ -0,0 +1,281 @@
+/*
+ SSSD
+
+ sss_groupmod
+
+ Copyright (C) Jakub Hrozek <jhrozek@redhat.com> 2009
+
+ This program is free software; you can redistribute it and/or modify
+ it under the terms of the GNU General Public License as published by
+ the Free Software Foundation; either version 3 of the License, or
+ (at your option) any later version.
+
+ This program is distributed in the hope that it will be useful,
+ but WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ GNU General Public License for more details.
+
+ You should have received a copy of the GNU General Public License
+ along with this program. If not, see <http://www.gnu.org/licenses/>.
+*/
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <talloc.h>
+#include <popt.h>
+#include <errno.h>
+#include <sys/types.h>
+
+#include "util/util.h"
+#include "db/sysdb.h"
+#include "tools/tools_util.h"
+
+struct group_mod_ctx {
+ struct sysdb_req *sysreq;
+ struct sss_domain_info *domain;
+
+ struct tools_ctx *ctx;
+
+ gid_t gid;
+ const char *groupname;
+
+ char **addgroups;
+ char **rmgroups;
+ int cur;
+
+ int error;
+ bool done;
+};
+
+/* sysdb callback */
+static void mod_group_done(void *pvt, int error, struct ldb_result *ignore)
+{
+ struct group_mod_ctx *data = talloc_get_type(pvt, struct group_mod_ctx);
+
+ data->done = true;
+
+ sysdb_transaction_done(data->sysreq, error);
+
+ if (error)
+ data->error = error;
+}
+
+static void add_to_groups(void *, int, struct ldb_result *);
+
+/* sysdb_req_fn_t */
+static void mod_group(struct sysdb_req *req, void *pvt)
+{
+ struct group_mod_ctx *group_ctx;
+ int ret;
+
+ group_ctx = talloc_get_type(pvt, struct group_mod_ctx);
+ group_ctx->sysreq = req;
+
+ if(group_ctx->gid == 0) {
+ add_to_groups(group_ctx, EOK, NULL);
+ } else {
+ ret = sysdb_set_group_gid(req,
+ group_ctx->domain,
+ group_ctx->groupname,
+ group_ctx->gid,
+ mod_group_done,
+ group_ctx);
+ if (ret != EOK) {
+ mod_group_done(group_ctx, ret, NULL);
+ }
+ }
+}
+
+static void remove_from_groups(void *pvt, int error, struct ldb_result *ignore)
+{
+ struct group_mod_ctx *group_ctx = talloc_get_type(pvt, struct group_mod_ctx);
+ struct ldb_dn *group_dn;
+ struct ldb_dn *parent_group_dn;
+ int ret;
+
+ if (error) {
+ mod_group_done(pvt, error, NULL);
+ return;
+ }
+
+ /* check if we removed all of them */
+ if (group_ctx->rmgroups == NULL ||
+ group_ctx->rmgroups[group_ctx->cur] == NULL) {
+ mod_group_done(group_ctx, EOK, NULL);
+ return;
+ }
+
+ group_dn = sysdb_group_dn(group_ctx->ctx->sysdb, group_ctx,
+ group_ctx->domain->name, group_ctx->groupname);
+ if (!group_dn) {
+ mod_group_done(pvt, ENOMEM, NULL);
+ return;
+ }
+
+ parent_group_dn = sysdb_group_dn(group_ctx->ctx->sysdb, group_ctx,
+ group_ctx->domain->name,
+ group_ctx->rmgroups[group_ctx->cur]);
+ if (!parent_group_dn) {
+ mod_group_done(pvt, ENOMEM, NULL);
+ return;
+ }
+
+ ret = sysdb_remove_group_member(group_ctx->sysreq,
+ group_dn, parent_group_dn,
+ remove_from_groups, group_ctx);
+ if (ret != EOK)
+ mod_group_done(group_ctx, ret, NULL);
+
+ /* go on to next group */
+ group_ctx->cur++;
+}
+
+static void add_to_groups(void *pvt, int error, struct ldb_result *ignore)
+{
+ struct group_mod_ctx *group_ctx = talloc_get_type(pvt, struct group_mod_ctx);
+ struct ldb_dn *group_dn;
+ struct ldb_dn *parent_group_dn;
+ int ret;
+
+ if (error) {
+ mod_group_done(pvt, error, NULL);
+ return;
+ }
+
+ /* check if we added all of them */
+ if (group_ctx->addgroups == NULL ||
+ group_ctx->addgroups[group_ctx->cur] == NULL) {
+ group_ctx->cur = 0;
+ remove_from_groups(group_ctx, EOK, NULL);
+ return;
+ }
+
+ group_dn = sysdb_group_dn(group_ctx->ctx->sysdb, group_ctx,
+ group_ctx->domain->name, group_ctx->groupname);
+ if (!group_dn) {
+ mod_group_done(pvt, ENOMEM, NULL);
+ return;
+ }
+
+ parent_group_dn = sysdb_group_dn(group_ctx->ctx->sysdb, group_ctx,
+ group_ctx->domain->name,
+ group_ctx->addgroups[group_ctx->cur]);
+ if (!parent_group_dn) {
+ mod_group_done(pvt, ENOMEM, NULL);
+ return;
+ }
+
+ ret = sysdb_add_group_member(group_ctx->sysreq,
+ group_dn, parent_group_dn,
+ add_to_groups, group_ctx);
+ if (ret != EOK)
+ mod_group_done(group_ctx, ret, NULL);
+
+ /* go on to next group */
+ group_ctx->cur++;
+}
+
+int main(int argc, const char **argv)
+{
+ gid_t pc_gid = 0;
+ struct poptOption long_options[] = {
+ POPT_AUTOHELP
+ { "append-group", 'a', POPT_ARG_STRING, NULL, 'a', "Groups to add this group to", NULL },
+ { "remove-group", 'r', POPT_ARG_STRING, NULL, 'r', "Groups to remove this group from", NULL },
+ { "gid", 'g', POPT_ARG_INT, &pc_gid, 0, "The GID of the group", NULL },
+ POPT_TABLEEND
+ };
+ poptContext pc = NULL;
+ struct group_mod_ctx *group_ctx = NULL;
+ struct tools_ctx *ctx = NULL;
+ char *groups;
+ int ret;
+
+ debug_prg_name = argv[0];
+
+ ret = setup_db(&ctx);
+ if (ret != EOK) {
+ DEBUG(0, ("Could not set up database\n"));
+ ret = EXIT_FAILURE;
+ goto fini;
+ }
+
+ group_ctx = talloc_zero(ctx, struct group_mod_ctx);
+ if (group_ctx == NULL) {
+ DEBUG(0, ("Could not allocate memory for group_ctx context\n"));
+ return ENOMEM;
+ }
+ group_ctx->ctx = ctx;
+
+ /* parse group_ctx */
+ pc = poptGetContext(NULL, argc, argv, long_options, 0);
+ poptSetOtherOptionHelp(pc, "USERNAME");
+ while ((ret = poptGetNextOpt(pc)) > 0) {
+ if (ret == 'a' || ret == 'r') {
+ groups = poptGetOptArg(pc);
+ if (!groups) {
+ ret = -1;
+ break;
+ }
+
+ ret = parse_groups(ctx,
+ groups,
+ (ret == 'a') ? (&group_ctx->addgroups) : (&group_ctx->rmgroups));
+
+ free(groups);
+ if (ret != EOK) {
+ break;
+ }
+ }
+ }
+
+ if(ret != -1) {
+ usage(pc, poptStrerror(ret));
+ ret = EXIT_FAILURE;
+ goto fini;
+ }
+
+ /* groupname is an argument without --option */
+ group_ctx->groupname = poptGetArg(pc);
+ if (group_ctx->groupname == NULL) {
+ usage(pc, "Specify group to modify\n");
+ ret = EXIT_FAILURE;
+ goto fini;
+ }
+
+ group_ctx->gid = pc_gid;
+
+ /* arguments processed, go on to actual work */
+ group_ctx->domain = btreemap_get_value(ctx->domains, "LOCAL");
+ if (group_ctx->domain == NULL) {
+ DEBUG(0, ("Could not get the domain\n"));
+ ret = EXIT_FAILURE;
+ goto fini;
+ }
+
+ ret = sysdb_transaction(ctx, ctx->sysdb, mod_group, group_ctx);
+ if (ret != EOK) {
+ DEBUG(0, ("Could not start transaction (%d)[%s]\n",
+ ret, strerror(ret)));
+ ret = EXIT_FAILURE;
+ goto fini;
+ }
+
+ while (!group_ctx->done) {
+ tevent_loop_once(ctx->ev);
+ }
+
+ if (group_ctx->error) {
+ ret = group_ctx->error;
+ DEBUG(0, ("Operation failed (%d)[%s]\n", ret, strerror(ret)));
+ ret = EXIT_FAILURE;
+ goto fini;
+ }
+
+ ret = EXIT_SUCCESS;
+
+fini:
+ poptFreeContext(pc);
+ talloc_free(ctx);
+ exit(ret);
+}