mirror of
https://sourceware.org/git/glibc.git
synced 2024-11-27 15:30:07 +00:00
235 lines
5.4 KiB
C
235 lines
5.4 KiB
C
/* Copyright (C) 1996-2014 Free Software Foundation, Inc.
|
|
This file is part of the GNU C Library.
|
|
Contributed by Thorsten Kukuk <kukuk@suse.de>, 1996.
|
|
|
|
The GNU C Library is free software; you can redistribute it and/or
|
|
modify it under the terms of the GNU Lesser General Public
|
|
License as published by the Free Software Foundation; either
|
|
version 2.1 of the License, or (at your option) any later version.
|
|
|
|
The GNU C Library is distributed in the hope that it will be useful,
|
|
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
Lesser General Public License for more details.
|
|
|
|
You should have received a copy of the GNU Lesser General Public
|
|
License along with the GNU C Library; if not, see
|
|
<http://www.gnu.org/licenses/>. */
|
|
|
|
#include <nss.h>
|
|
#include <ctype.h>
|
|
#include <errno.h>
|
|
#include <string.h>
|
|
#include <syslog.h>
|
|
#include <rpc/rpc.h>
|
|
#include <rpcsvc/yp.h>
|
|
#include <rpcsvc/ypclnt.h>
|
|
#include <rpc/key_prot.h>
|
|
#include <rpc/des_crypt.h>
|
|
|
|
#include "nss-nis.h"
|
|
|
|
/* If we haven't found the entry, we give a SUCCESS and an empty key back.
|
|
Solaris docu says: sizeof (pkey) == HEXKEYBYTES + 1.
|
|
*/
|
|
enum nss_status
|
|
_nss_nis_getpublickey (const char *netname, char *pkey, int *errnop)
|
|
{
|
|
pkey[0] = 0;
|
|
|
|
if (netname == NULL)
|
|
{
|
|
*errnop = EINVAL;
|
|
return NSS_STATUS_UNAVAIL;
|
|
}
|
|
|
|
char *domain = strchr (netname, '@');
|
|
if (domain == NULL)
|
|
{
|
|
*errnop = EINVAL;
|
|
return NSS_STATUS_UNAVAIL;
|
|
}
|
|
++domain;
|
|
|
|
char *result;
|
|
int len;
|
|
int yperr = yp_match (domain, "publickey.byname", netname, strlen (netname),
|
|
&result, &len);
|
|
|
|
if (__glibc_unlikely (yperr != YPERR_SUCCESS))
|
|
{
|
|
enum nss_status retval = yperr2nss (yperr);
|
|
|
|
if (retval == NSS_STATUS_TRYAGAIN)
|
|
*errnop = errno;
|
|
return retval;
|
|
}
|
|
|
|
if (result != NULL)
|
|
{
|
|
char *p = strchr (result, ':');
|
|
if (p != NULL)
|
|
*p = 0;
|
|
strncpy (pkey, result, HEXKEYBYTES + 1);
|
|
pkey[HEXKEYBYTES] = '\0';
|
|
free (result);
|
|
}
|
|
return NSS_STATUS_SUCCESS;
|
|
}
|
|
|
|
enum nss_status
|
|
_nss_nis_getsecretkey (const char *netname, char *skey, char *passwd,
|
|
int *errnop)
|
|
{
|
|
skey[0] = 0;
|
|
|
|
if (netname == NULL || passwd == NULL)
|
|
{
|
|
*errnop = EINVAL;
|
|
return NSS_STATUS_UNAVAIL;
|
|
}
|
|
|
|
char *domain = strchr (netname, '@');
|
|
if (domain == NULL)
|
|
{
|
|
*errnop = EINVAL;
|
|
return NSS_STATUS_UNAVAIL;
|
|
}
|
|
++domain;
|
|
|
|
char *result;
|
|
int len;
|
|
int yperr = yp_match (domain, "publickey.byname", netname, strlen (netname),
|
|
&result, &len);
|
|
|
|
if (__glibc_unlikely (yperr != YPERR_SUCCESS))
|
|
{
|
|
enum nss_status retval = yperr2nss (yperr);
|
|
|
|
if (retval == NSS_STATUS_TRYAGAIN)
|
|
*errnop = errno;
|
|
return retval;
|
|
}
|
|
|
|
if (result != NULL)
|
|
{
|
|
char *p = strchr (result, ':');
|
|
if (p != NULL)
|
|
{
|
|
char buf[2 * (HEXKEYBYTES + 1)];
|
|
|
|
++p;
|
|
strncpy (buf, p, 2 * (HEXKEYBYTES + 1));
|
|
buf[2 * HEXKEYBYTES + 1] = '\0';
|
|
if (xdecrypt (buf, passwd)
|
|
&& memcmp (buf, &(buf[HEXKEYBYTES]), KEYCHECKSUMSIZE) == 0)
|
|
{
|
|
buf[HEXKEYBYTES] = '\0';
|
|
strcpy (skey, buf);
|
|
}
|
|
}
|
|
|
|
free (result);
|
|
}
|
|
return NSS_STATUS_SUCCESS;
|
|
}
|
|
|
|
/* Parse uid and group information from the passed string.
|
|
The format of the string passed is uid:gid,grp,grp, ... */
|
|
static enum nss_status
|
|
parse_netid_str (const char *s, uid_t *uidp, gid_t *gidp, int *gidlenp,
|
|
gid_t *gidlist)
|
|
{
|
|
char *p, *ep;
|
|
int gidlen;
|
|
|
|
if (!s || !isdigit (*s))
|
|
{
|
|
syslog (LOG_ERR, "netname2user: expecting uid '%s'", s);
|
|
return NSS_STATUS_NOTFOUND; /* XXX need a better error */
|
|
}
|
|
|
|
/* Fetch the uid */
|
|
*uidp = strtoul (s, NULL, 10);
|
|
|
|
if (*uidp == 0)
|
|
{
|
|
syslog (LOG_ERR, "netname2user: should not have uid 0");
|
|
return NSS_STATUS_NOTFOUND;
|
|
}
|
|
|
|
/* Now get the group list */
|
|
p = strchr (s, ':');
|
|
if (!p)
|
|
{
|
|
syslog (LOG_ERR, "netname2user: missing group id list in '%s'", s);
|
|
return NSS_STATUS_NOTFOUND;
|
|
}
|
|
++p; /* skip ':' */
|
|
if (!p || (!isdigit (*p)))
|
|
{
|
|
syslog (LOG_ERR, "netname2user: missing group id list in '%s'.", p);
|
|
return NSS_STATUS_NOTFOUND;
|
|
}
|
|
|
|
*gidp = strtoul (p, &ep, 10);
|
|
|
|
gidlen = 0;
|
|
|
|
/* After strtoul() ep should point to the first invalid character.
|
|
This is the marker "," we search for the next value. */
|
|
while (ep != NULL && *ep == ',')
|
|
{
|
|
ep++;
|
|
p = ep;
|
|
gidlist[gidlen++] = strtoul (p, &ep, 10);
|
|
}
|
|
|
|
*gidlenp = gidlen;
|
|
|
|
return NSS_STATUS_SUCCESS;
|
|
}
|
|
|
|
|
|
enum nss_status
|
|
_nss_nis_netname2user (char netname[MAXNETNAMELEN + 1], uid_t *uidp,
|
|
gid_t *gidp, int *gidlenp, gid_t *gidlist, int *errnop)
|
|
{
|
|
char *domain = strchr (netname, '@');
|
|
if (domain == NULL)
|
|
{
|
|
*errnop = EINVAL;
|
|
return NSS_STATUS_UNAVAIL;
|
|
}
|
|
|
|
/* Point past the '@' character */
|
|
++domain;
|
|
char *lookup = NULL;
|
|
int len;
|
|
int yperr = yp_match (domain, "netid.byname", netname, strlen (netname),
|
|
&lookup, &len);
|
|
switch (yperr)
|
|
{
|
|
case YPERR_SUCCESS:
|
|
break; /* the successful case */
|
|
case YPERR_DOMAIN:
|
|
case YPERR_KEY:
|
|
return NSS_STATUS_NOTFOUND;
|
|
case YPERR_MAP:
|
|
default:
|
|
return NSS_STATUS_UNAVAIL;
|
|
}
|
|
|
|
if (lookup == NULL)
|
|
return NSS_STATUS_NOTFOUND;
|
|
|
|
|
|
lookup[len] = '\0';
|
|
|
|
enum nss_status err = parse_netid_str (lookup, uidp, gidp, gidlenp, gidlist);
|
|
|
|
free (lookup);
|
|
|
|
return err;
|
|
}
|