xref: /illumos-gate/usr/src/lib/libnsl/nss/getauuser.c (revision e8031f0a8ed0e45c6d8847c5e09424e66fd34a4b)
17c478bd9Sstevel@tonic-gate /*
27c478bd9Sstevel@tonic-gate  * CDDL HEADER START
37c478bd9Sstevel@tonic-gate  *
47c478bd9Sstevel@tonic-gate  * The contents of this file are subject to the terms of the
57c478bd9Sstevel@tonic-gate  * Common Development and Distribution License, Version 1.0 only
67c478bd9Sstevel@tonic-gate  * (the "License").  You may not use this file except in compliance
77c478bd9Sstevel@tonic-gate  * with the License.
87c478bd9Sstevel@tonic-gate  *
97c478bd9Sstevel@tonic-gate  * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
107c478bd9Sstevel@tonic-gate  * or http://www.opensolaris.org/os/licensing.
117c478bd9Sstevel@tonic-gate  * See the License for the specific language governing permissions
127c478bd9Sstevel@tonic-gate  * and limitations under the License.
137c478bd9Sstevel@tonic-gate  *
147c478bd9Sstevel@tonic-gate  * When distributing Covered Code, include this CDDL HEADER in each
157c478bd9Sstevel@tonic-gate  * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
167c478bd9Sstevel@tonic-gate  * If applicable, add the following below this CDDL HEADER, with the
177c478bd9Sstevel@tonic-gate  * fields enclosed by brackets "[]" replaced with your own identifying
187c478bd9Sstevel@tonic-gate  * information: Portions Copyright [yyyy] [name of copyright owner]
197c478bd9Sstevel@tonic-gate  *
207c478bd9Sstevel@tonic-gate  * CDDL HEADER END
217c478bd9Sstevel@tonic-gate  */
2261961e0fSrobinson 
237c478bd9Sstevel@tonic-gate /*
24*e8031f0aSraf  * Copyright 2006 Sun Microsystems, Inc.  All rights reserved.
257c478bd9Sstevel@tonic-gate  * Use is subject to license terms.
267c478bd9Sstevel@tonic-gate  */
277c478bd9Sstevel@tonic-gate 
287c478bd9Sstevel@tonic-gate #pragma ident	"%Z%%M%	%I%	%E% SMI"
297c478bd9Sstevel@tonic-gate 
30*e8031f0aSraf #include "mt.h"
317c478bd9Sstevel@tonic-gate #include <stdlib.h>
327c478bd9Sstevel@tonic-gate #include <sys/types.h>
337c478bd9Sstevel@tonic-gate #include <nss_dbdefs.h>
347c478bd9Sstevel@tonic-gate #include <string.h>
357c478bd9Sstevel@tonic-gate #include <bsm/libbsm.h>
367c478bd9Sstevel@tonic-gate #include <secdb.h>
377c478bd9Sstevel@tonic-gate 
387c478bd9Sstevel@tonic-gate 
397c478bd9Sstevel@tonic-gate /* externs from parse.c */
407c478bd9Sstevel@tonic-gate extern char *_strtok_escape(char *, char *, char **);
417c478bd9Sstevel@tonic-gate 
427c478bd9Sstevel@tonic-gate static int auuser_stayopen;
437c478bd9Sstevel@tonic-gate 
447c478bd9Sstevel@tonic-gate /*
457c478bd9Sstevel@tonic-gate  * Unsynchronized, but it affects only
467c478bd9Sstevel@tonic-gate  * efficiency, not correctness
477c478bd9Sstevel@tonic-gate  */
487c478bd9Sstevel@tonic-gate 
497c478bd9Sstevel@tonic-gate static DEFINE_NSS_DB_ROOT(db_root);
507c478bd9Sstevel@tonic-gate static DEFINE_NSS_GETENT(context);
517c478bd9Sstevel@tonic-gate 
527c478bd9Sstevel@tonic-gate 
537c478bd9Sstevel@tonic-gate void
547c478bd9Sstevel@tonic-gate _nss_initf_auuser(nss_db_params_t *p)
557c478bd9Sstevel@tonic-gate {
567c478bd9Sstevel@tonic-gate 	p->name	= NSS_DBNAM_AUDITUSER;
577c478bd9Sstevel@tonic-gate 	p->config_name    = NSS_DBNAM_PASSWD;  /* use config for "passwd" */
587c478bd9Sstevel@tonic-gate 	p->default_config = NSS_DEFCONF_AUDITUSER;
597c478bd9Sstevel@tonic-gate }
607c478bd9Sstevel@tonic-gate 
617c478bd9Sstevel@tonic-gate 
627c478bd9Sstevel@tonic-gate /*
637c478bd9Sstevel@tonic-gate  * Return values: 0 = success, 1 = parse error, 2 = erange ...
647c478bd9Sstevel@tonic-gate  * The structure pointer passed in is a structure in the caller's space
657c478bd9Sstevel@tonic-gate  * wherein the field pointers would be set to areas in the buffer if
667c478bd9Sstevel@tonic-gate  * need be. instring and buffer should be separate areas.
677c478bd9Sstevel@tonic-gate  */
687c478bd9Sstevel@tonic-gate int
697c478bd9Sstevel@tonic-gate str2auuser(const char *instr, int lenstr, void *ent, char *buffer, int buflen)
707c478bd9Sstevel@tonic-gate {
7161961e0fSrobinson 	char		*last = NULL;
727c478bd9Sstevel@tonic-gate 	char		*sep = KV_TOKEN_DELIMIT;
737c478bd9Sstevel@tonic-gate 	au_user_str_t	*au_user = (au_user_str_t *)ent;
747c478bd9Sstevel@tonic-gate 
757c478bd9Sstevel@tonic-gate 	if ((instr >= buffer && (buffer + buflen) > instr) ||
7661961e0fSrobinson 	    (buffer >= instr && (instr + lenstr) > buffer))
777c478bd9Sstevel@tonic-gate 		return (NSS_STR_PARSE_PARSE);
7861961e0fSrobinson 	if (lenstr >= buflen)
797c478bd9Sstevel@tonic-gate 		return (NSS_STR_PARSE_ERANGE);
8061961e0fSrobinson 	(void) strncpy(buffer, instr, buflen);
817c478bd9Sstevel@tonic-gate 	/*
827c478bd9Sstevel@tonic-gate 	 * Remove newline that nis (yp_match) puts at the
837c478bd9Sstevel@tonic-gate 	 * end of the entry it retrieves from the map.
847c478bd9Sstevel@tonic-gate 	 */
857c478bd9Sstevel@tonic-gate 	if (buffer[lenstr] == '\n') {
867c478bd9Sstevel@tonic-gate 		buffer[lenstr] = '\0';
877c478bd9Sstevel@tonic-gate 	}
887c478bd9Sstevel@tonic-gate 
897c478bd9Sstevel@tonic-gate 	au_user->au_name = _strtok_escape(buffer, sep, &last);
907c478bd9Sstevel@tonic-gate 	au_user->au_always = _strtok_escape(NULL, sep, &last);
917c478bd9Sstevel@tonic-gate 	au_user->au_never = _strtok_escape(NULL, sep, &last);
927c478bd9Sstevel@tonic-gate 
937c478bd9Sstevel@tonic-gate 	return (0);
947c478bd9Sstevel@tonic-gate }
957c478bd9Sstevel@tonic-gate 
967c478bd9Sstevel@tonic-gate 
977c478bd9Sstevel@tonic-gate void
987c478bd9Sstevel@tonic-gate _setauuser(void)
997c478bd9Sstevel@tonic-gate {
1007c478bd9Sstevel@tonic-gate 	auuser_stayopen = 0;
1017c478bd9Sstevel@tonic-gate 	nss_setent(&db_root, _nss_initf_auuser, &context);
1027c478bd9Sstevel@tonic-gate }
1037c478bd9Sstevel@tonic-gate 
1047c478bd9Sstevel@tonic-gate 
1057c478bd9Sstevel@tonic-gate int
1067c478bd9Sstevel@tonic-gate _endauuser(void)
1077c478bd9Sstevel@tonic-gate {
1087c478bd9Sstevel@tonic-gate 	auuser_stayopen = 0;
1097c478bd9Sstevel@tonic-gate 	nss_endent(&db_root, _nss_initf_auuser, &context);
1107c478bd9Sstevel@tonic-gate 	nss_delete(&db_root);
1117c478bd9Sstevel@tonic-gate 	return (0);
1127c478bd9Sstevel@tonic-gate }
1137c478bd9Sstevel@tonic-gate 
1147c478bd9Sstevel@tonic-gate 
1157c478bd9Sstevel@tonic-gate au_user_str_t *
1167c478bd9Sstevel@tonic-gate _getauuserent(au_user_str_t *result, char *buffer, int buflen, int *h_errnop)
1177c478bd9Sstevel@tonic-gate {
1187c478bd9Sstevel@tonic-gate 	nss_XbyY_args_t arg;
1197c478bd9Sstevel@tonic-gate 	nss_status_t    res;
1207c478bd9Sstevel@tonic-gate 
1217c478bd9Sstevel@tonic-gate 	NSS_XbyY_INIT(&arg, result, buffer, buflen, str2auuser);
1227c478bd9Sstevel@tonic-gate 	res = nss_getent(&db_root, _nss_initf_auuser, &context, &arg);
1237c478bd9Sstevel@tonic-gate 	arg.status = res;
1247c478bd9Sstevel@tonic-gate 	*h_errnop = arg.h_errno;
1257c478bd9Sstevel@tonic-gate 	return ((au_user_str_t *)NSS_XbyY_FINI(&arg));
1267c478bd9Sstevel@tonic-gate }
1277c478bd9Sstevel@tonic-gate 
1287c478bd9Sstevel@tonic-gate 
1297c478bd9Sstevel@tonic-gate au_user_str_t *
1307c478bd9Sstevel@tonic-gate _getauusernam(const char *name, au_user_str_t *result, char *buffer,
1317c478bd9Sstevel@tonic-gate     int buflen, int *errnop)
1327c478bd9Sstevel@tonic-gate {
1337c478bd9Sstevel@tonic-gate 	nss_XbyY_args_t arg;
1347c478bd9Sstevel@tonic-gate 	nss_status_t    res;
1357c478bd9Sstevel@tonic-gate 
1367c478bd9Sstevel@tonic-gate 	if (result == NULL) {
1377c478bd9Sstevel@tonic-gate 		*errnop = AUDITUSER_PARSE_ERANGE;
1387c478bd9Sstevel@tonic-gate 		return (NULL);
1397c478bd9Sstevel@tonic-gate 	}
1407c478bd9Sstevel@tonic-gate 	NSS_XbyY_INIT(&arg, result, buffer, buflen, str2auuser);
1417c478bd9Sstevel@tonic-gate 	arg.key.name = name;
1427c478bd9Sstevel@tonic-gate 	arg.stayopen = auuser_stayopen;
1437c478bd9Sstevel@tonic-gate 	arg.h_errno = AUDITUSER_NOT_FOUND;
1447c478bd9Sstevel@tonic-gate 	res = nss_search(&db_root, _nss_initf_auuser,
1457c478bd9Sstevel@tonic-gate 	    NSS_DBOP_AUDITUSER_BYNAME, &arg);
1467c478bd9Sstevel@tonic-gate 	arg.status = res;
1477c478bd9Sstevel@tonic-gate 	*errnop = arg.h_errno;
1487c478bd9Sstevel@tonic-gate 	return ((au_user_str_t *)NSS_XbyY_FINI(&arg));
1497c478bd9Sstevel@tonic-gate }
150