summaryrefslogtreecommitdiffstats
path: root/src/responder/ifp/ifp_cache.c
diff options
context:
space:
mode:
Diffstat (limited to 'src/responder/ifp/ifp_cache.c')
-rw-r--r--src/responder/ifp/ifp_cache.c306
1 files changed, 306 insertions, 0 deletions
diff --git a/src/responder/ifp/ifp_cache.c b/src/responder/ifp/ifp_cache.c
new file mode 100644
index 000000000..35d51ab2c
--- /dev/null
+++ b/src/responder/ifp/ifp_cache.c
@@ -0,0 +1,306 @@
+/*
+ Authors:
+ Pavel Březina <pbrezina@redhat.com>
+
+ Copyright (C) 2015 Red Hat
+
+ This program is free software; you can redistribute it and/or modify
+ it under the terms of the GNU General Public License as published by
+ the Free Software Foundation; either version 3 of the License, or
+ (at your option) any later version.
+
+ This program is distributed in the hope that it will be useful,
+ but WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ GNU General Public License for more details.
+
+ You should have received a copy of the GNU General Public License
+ along with this program. If not, see <http://www.gnu.org/licenses/>.
+*/
+
+#include <talloc.h>
+#include <tevent.h>
+
+#include "db/sysdb.h"
+#include "util/util.h"
+#include "responder/common/responder.h"
+#include "responder/ifp/ifp_cache.h"
+#include "responder/ifp/ifp_users.h"
+#include "responder/ifp/ifp_groups.h"
+#include "responder/ifp/ifp_iface_generated.h"
+
+static struct ldb_dn *
+ifp_cache_build_base_dn(TALLOC_CTX *mem_ctx,
+ enum ifp_cache_type type,
+ struct sss_domain_info *domain)
+{
+ struct ldb_dn *base_dn;
+
+ switch (type) {
+ case IFP_CACHE_USER:
+ base_dn = sysdb_user_base_dn(mem_ctx, domain);
+ break;
+ case IFP_CACHE_GROUP:
+ base_dn = sysdb_group_base_dn(mem_ctx, domain);
+ break;
+ }
+
+ return base_dn;
+}
+
+static char *
+ifp_cache_build_path(TALLOC_CTX *mem_ctx,
+ enum ifp_cache_type type,
+ struct sss_domain_info *domain,
+ struct ldb_message *msg)
+{
+ char *path;
+
+ switch (type) {
+ case IFP_CACHE_USER:
+ path = ifp_users_build_path_from_msg(mem_ctx, domain, msg);
+ break;
+ case IFP_CACHE_GROUP:
+ path = ifp_groups_build_path_from_msg(mem_ctx, domain, msg);
+ break;
+ }
+
+ return path;
+}
+
+static const char *
+ifp_cache_object_class(enum ifp_cache_type type)
+{
+ const char *class = NULL;
+
+ switch (type) {
+ case IFP_CACHE_USER:
+ class = SYSDB_USER_CLASS;
+ break;
+ case IFP_CACHE_GROUP:
+ class = SYSDB_GROUP_CLASS;
+ break;
+ }
+
+ return class;
+}
+
+static errno_t
+ifp_cache_get_cached_objects(TALLOC_CTX *mem_ctx,
+ enum ifp_cache_type type,
+ struct sss_domain_info *domain,
+ const char ***_paths,
+ int *_num_paths)
+{
+ TALLOC_CTX *tmp_ctx;
+ struct ldb_dn *base_dn;
+ struct ldb_result *result;
+ const char *class = ifp_cache_object_class(type);
+ const char **paths;
+ errno_t ret;
+ int ldb_ret;
+ int i;
+ const char *attrs[] = {SYSDB_OBJECTCLASS, SYSDB_UIDNUM,
+ SYSDB_GIDNUM, NULL};
+
+ tmp_ctx = talloc_new(NULL);
+ if (tmp_ctx == NULL) {
+ return ENOMEM;
+ }
+
+ base_dn = ifp_cache_build_base_dn(tmp_ctx, type, domain);
+ if (base_dn == NULL) {
+ DEBUG(SSSDBG_CRIT_FAILURE, "Unable to create base dn\n");
+ ret = ENOMEM;
+ goto done;
+ }
+
+ ldb_ret = ldb_search(sysdb_ctx_get_ldb(domain->sysdb), tmp_ctx, &result,
+ base_dn, LDB_SCOPE_SUBTREE, attrs,
+ "(&(objectClass=%s)(%s=TRUE))", class,
+ SYSDB_IFP_CACHED);
+ if (ldb_ret != LDB_SUCCESS) {
+ DEBUG(SSSDBG_CRIT_FAILURE, "Unable to search the cache\n");
+ ret = sysdb_error_to_errno(ldb_ret);
+ goto done;
+ }
+
+ paths = talloc_zero_array(tmp_ctx, const char *, result->count + 1);
+ if (paths == NULL) {
+ ret = ENOMEM;
+ goto done;
+ }
+
+ for (i = 0; i < result->count; i++) {
+ paths[i] = ifp_cache_build_path(paths, type, domain, result->msgs[i]);
+ if (paths[i] == NULL) {
+ ret = ENOMEM;
+ goto done;
+ }
+ }
+
+ *_paths = talloc_steal(mem_ctx, paths);
+ *_num_paths = result->count;
+
+ ret = EOK;
+
+done:
+ talloc_free(tmp_ctx);
+ return ret;
+}
+
+int ifp_cache_list(struct sbus_request *sbus_req,
+ void *data,
+ enum ifp_cache_type type)
+{
+ DBusError *error;
+ struct sss_domain_info *domain;
+ struct ifp_ctx *ifp_ctx;
+ const char **tmp_paths;
+ int num_tmp_paths;
+ const char **paths;
+ int num_paths;
+ errno_t ret;
+
+ ifp_ctx = talloc_get_type(data, struct ifp_ctx);
+ if (ifp_ctx == NULL) {
+ DEBUG(SSSDBG_CRIT_FAILURE, "Invalid pointer!\n");
+ return ERR_INTERNAL;
+ }
+
+ domain = ifp_ctx->rctx->domains;
+ num_paths = 0;
+ paths = NULL;
+ while (domain != NULL) {
+ ret = ifp_cache_get_cached_objects(sbus_req, type, domain,
+ &tmp_paths, &num_tmp_paths);
+ if (ret != EOK) {
+ error = sbus_error_new(sbus_req, DBUS_ERROR_FAILED,
+ "Unable to build object list [%d]: %s\n",
+ ret, sss_strerror(ret));
+ return sbus_request_fail_and_finish(sbus_req, error);
+ }
+
+ ret = add_strings_lists(sbus_req, paths, tmp_paths, false,
+ discard_const(&paths));
+ if (ret != EOK) {
+ error = sbus_error_new(sbus_req, DBUS_ERROR_FAILED,
+ "Unable to build object list [%d]: %s\n",
+ ret, sss_strerror(ret));
+ return sbus_request_fail_and_finish(sbus_req, error);
+ }
+
+ num_paths += num_tmp_paths;
+
+ domain = get_next_domain(domain, true);
+ }
+
+ iface_ifp_cache_List_finish(sbus_req, paths, num_paths);
+
+ return EOK;
+}
+
+int ifp_cache_list_by_domain(struct sbus_request *sbus_req,
+ void *data,
+ const char *domainname,
+ enum ifp_cache_type type)
+{
+ DBusError *error;
+ struct sss_domain_info *domain;
+ struct ifp_ctx *ifp_ctx;
+ const char **paths;
+ int num_paths;
+ errno_t ret;
+
+ ifp_ctx = talloc_get_type(data, struct ifp_ctx);
+ if (ifp_ctx == NULL) {
+ DEBUG(SSSDBG_CRIT_FAILURE, "Invalid pointer!\n");
+ return ERR_INTERNAL;
+ }
+
+ domain = find_domain_by_name(ifp_ctx->rctx->domains, domainname, true);
+ if (domain == NULL) {
+ error = sbus_error_new(sbus_req, DBUS_ERROR_FAILED, "Unknown domain");
+ return sbus_request_fail_and_finish(sbus_req, error);
+ }
+
+ ret = ifp_cache_get_cached_objects(sbus_req, type, domain,
+ &paths, &num_paths);
+ if (ret != EOK) {
+ error = sbus_error_new(sbus_req, DBUS_ERROR_FAILED, "Unable to build "
+ "object list [%d]: %s\n", ret, sss_strerror(ret));
+ return sbus_request_fail_and_finish(sbus_req, error);
+ }
+
+ iface_ifp_cache_ListByDomain_finish(sbus_req, paths, num_paths);
+
+ return EOK;
+}
+
+static errno_t ifp_cache_object_set(struct sss_domain_info *domain,
+ struct ldb_dn *dn,
+ bool value)
+{
+ struct sysdb_attrs *attrs;
+ errno_t ret;
+
+ attrs = sysdb_new_attrs(NULL);
+ if (attrs == NULL) {
+ return ENOMEM;
+ }
+
+ ret = sysdb_attrs_add_bool(attrs, SYSDB_IFP_CACHED, value);
+ if (ret != EOK) {
+ DEBUG(SSSDBG_CRIT_FAILURE, "Unable to add attribute [%d]: %s\n",
+ ret, sss_strerror(ret));
+ goto done;
+ }
+
+ ret = sysdb_set_entry_attr(domain->sysdb, dn, attrs, SYSDB_MOD_REP);
+ if (ret != EOK) {
+ DEBUG(SSSDBG_CRIT_FAILURE, "Unable to modify entry [%d]: %s\n",
+ ret, sss_strerror(ret));
+ goto done;
+ }
+
+ ret = EOK;
+
+done:
+ talloc_free(attrs);
+
+ return ret;
+}
+
+int ifp_cache_object_store(struct sbus_request *sbus_req,
+ struct sss_domain_info *domain,
+ struct ldb_dn *dn)
+{
+ errno_t ret;
+
+ ret = ifp_cache_object_set(domain, dn, true);
+
+ if (ret == EOK) {
+ iface_ifp_cache_object_Store_finish(sbus_req, true);
+ } else {
+ iface_ifp_cache_object_Store_finish(sbus_req, false);
+ }
+
+ return EOK;
+}
+
+int ifp_cache_object_remove(struct sbus_request *sbus_req,
+ struct sss_domain_info *domain,
+ struct ldb_dn *dn)
+{
+ errno_t ret;
+
+ ret = ifp_cache_object_set(domain, dn, false);
+
+ if (ret == EOK) {
+ iface_ifp_cache_object_Remove_finish(sbus_req, true);
+ } else {
+ iface_ifp_cache_object_Remove_finish(sbus_req, false);
+ }
+
+ return EOK;
+}
generated by cgit (git 2.34.1) at 2024-06-10 14:03:12 +0000