1c5c4113dSnw /* 2c5c4113dSnw * CDDL HEADER START 3c5c4113dSnw * 4c5c4113dSnw * The contents of this file are subject to the terms of the 5c5c4113dSnw * Common Development and Distribution License (the "License"). 6c5c4113dSnw * You may not use this file except in compliance with the License. 7c5c4113dSnw * 8c5c4113dSnw * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 9c5c4113dSnw * or http://www.opensolaris.org/os/licensing. 10c5c4113dSnw * See the License for the specific language governing permissions 11c5c4113dSnw * and limitations under the License. 12c5c4113dSnw * 13c5c4113dSnw * When distributing Covered Code, include this CDDL HEADER in each 14c5c4113dSnw * file and include the License file at usr/src/OPENSOLARIS.LICENSE. 15c5c4113dSnw * If applicable, add the following below this CDDL HEADER, with the 16c5c4113dSnw * fields enclosed by brackets "[]" replaced with your own identifying 17c5c4113dSnw * information: Portions Copyright [yyyy] [name of copyright owner] 18c5c4113dSnw * 19c5c4113dSnw * CDDL HEADER END 20c5c4113dSnw */ 21c5c4113dSnw /* 22148c5f43SAlan Wright * Copyright (c) 2007, 2010, Oracle and/or its affiliates. All rights reserved. 23b3700b07SGordon Ross * Copyright 2014 Nexenta Systems, Inc. All rights reserved. 24*e3d9e7f3SGordon Ross * Copyright 2022 RackTop Systems, Inc. 25c5c4113dSnw */ 26c5c4113dSnw 27c5c4113dSnw #ifndef _IDMAPD_H 28c5c4113dSnw #define _IDMAPD_H 29c5c4113dSnw 30c5c4113dSnw #include <stdio.h> 31c5c4113dSnw #include <stdlib.h> 32c5c4113dSnw #include <stdarg.h> 33c5c4113dSnw #include <rpc/rpc.h> 34c5c4113dSnw #include <synch.h> 35c5c4113dSnw #include <thread.h> 36c5c4113dSnw #include <libintl.h> 37c5c4113dSnw #include <strings.h> 3891d7f85eSGordon Ross #include <sqlite-sys/sqlite.h> 397a8a68f5SJulian Pullen #include <syslog.h> 40c5c4113dSnw #include <inttypes.h> 419b214d32SJordan Brown #include <rpcsvc/idmap_prot.h> 42c5c4113dSnw #include "adutils.h" 437a8a68f5SJulian Pullen #include "idmap_priv.h" 44c5c4113dSnw #include "idmap_config.h" 452b4a7802SBaban Kenkre #include "libadutils.h" 46c5c4113dSnw 47c5c4113dSnw #ifdef __cplusplus 48c5c4113dSnw extern "C" { 49c5c4113dSnw #endif 50c5c4113dSnw 51479ac375Sdm #define CHECK_NULL(s) (s != NULL ? s : "null") 52c5c4113dSnw 53c5c4113dSnw extern mutex_t _svcstate_lock; /* lock for _rpcsvcstate, _rpcsvccount */ 54c5c4113dSnw 55e8c27ec8Sbaban typedef enum idmap_namemap_mode { 56e8c27ec8Sbaban IDMAP_NM_NONE = 0, 57e8c27ec8Sbaban IDMAP_NM_AD, 58e8c27ec8Sbaban IDMAP_NM_NLDAP, 59e8c27ec8Sbaban IDMAP_NM_MIXED 60e8c27ec8Sbaban } idmap_namemap_mode_t; 61e8c27ec8Sbaban 62148c5f43SAlan Wright /* 63148c5f43SAlan Wright * Debugging output. 64148c5f43SAlan Wright * 65148c5f43SAlan Wright * There are some number of areas - configuration, mapping, discovery, et 66148c5f43SAlan Wright * cetera - and for each area there is a verbosity level controlled through 67148c5f43SAlan Wright * an SMF property. The default is zero, and "debug/all" provides a master 68148c5f43SAlan Wright * control allowing you to turn on all debugging output with one setting. 69148c5f43SAlan Wright * 70148c5f43SAlan Wright * A typical debugging output sequence would look like 71148c5f43SAlan Wright * 729bf5f78fSMatt Barden * if (DBG(CONFIG, 2)) { 73148c5f43SAlan Wright * idmapdlog(LOG_DEBUG, 74148c5f43SAlan Wright * "some message about config at verbosity 2"); 75148c5f43SAlan Wright * } 76148c5f43SAlan Wright */ 77148c5f43SAlan Wright enum idmapd_debug { 78148c5f43SAlan Wright IDMAPD_DEBUG_ALL = 0, 79148c5f43SAlan Wright IDMAPD_DEBUG_CONFIG = 1, 80148c5f43SAlan Wright IDMAPD_DEBUG_MAPPING = 2, 81148c5f43SAlan Wright IDMAPD_DEBUG_DISC = 3, 82148c5f43SAlan Wright IDMAPD_DEBUG_DNS = 4, 83148c5f43SAlan Wright IDMAPD_DEBUG_LDAP = 5, 84148c5f43SAlan Wright IDMAPD_DEBUG_MAX = 5 85148c5f43SAlan Wright }; 86148c5f43SAlan Wright 87148c5f43SAlan Wright #define DBG(type, lev) \ 88148c5f43SAlan Wright (_idmapdstate.debug[IDMAPD_DEBUG_##type] >= (lev) || \ 89148c5f43SAlan Wright _idmapdstate.debug[IDMAPD_DEBUG_ALL] >= (lev)) 90148c5f43SAlan Wright 91c5c4113dSnw /* 92c5c4113dSnw * Global state of idmapd daemon. 93c5c4113dSnw */ 94c5c4113dSnw typedef struct idmapd_state { 95c5c4113dSnw rwlock_t rwlk_cfg; /* config lock */ 96c5c4113dSnw idmap_cfg_t *cfg; /* config */ 9771590c90Snw bool_t daemon_mode; 98c5c4113dSnw char hostname[MAX_NAME_LEN]; /* my hostname */ 99c5c4113dSnw uid_t next_uid; 100c5c4113dSnw gid_t next_gid; 101c5c4113dSnw uid_t limit_uid; 102c5c4113dSnw gid_t limit_gid; 103c5c4113dSnw int new_eph_db; /* was the ephem ID db [re-]created? */ 104e3f2c991SKeyur Desai int num_gcs; 105e3f2c991SKeyur Desai adutils_ad_t **gcs; 106e3f2c991SKeyur Desai int num_dcs; 107e3f2c991SKeyur Desai adutils_ad_t **dcs; 108b3700b07SGordon Ross mutex_t addisc_lk; 109b3700b07SGordon Ross cond_t addisc_cv; 110b3700b07SGordon Ross int addisc_st; 111148c5f43SAlan Wright int debug[IDMAPD_DEBUG_MAX+1]; 112c5c4113dSnw } idmapd_state_t; 113c5c4113dSnw extern idmapd_state_t _idmapdstate; 114c5c4113dSnw 115b3700b07SGordon Ross #define ADDISC_ST_REQUESTED 1 116b3700b07SGordon Ross #define ADDISC_ST_RUNNING 2 117b3700b07SGordon Ross 118c5c4113dSnw #define RDLOCK_CONFIG() \ 119c5c4113dSnw (void) rw_rdlock(&_idmapdstate.rwlk_cfg); 120c5c4113dSnw #define WRLOCK_CONFIG() \ 121c5c4113dSnw (void) rw_wrlock(&_idmapdstate.rwlk_cfg); 122c5c4113dSnw #define UNLOCK_CONFIG() \ 123c5c4113dSnw (void) rw_unlock(&_idmapdstate.rwlk_cfg); 124c5c4113dSnw 12562c60062Sbaban typedef struct hashentry { 12662c60062Sbaban uint_t key; 12762c60062Sbaban uint_t next; 12862c60062Sbaban } hashentry_t; 12962c60062Sbaban 130c5c4113dSnw typedef struct lookup_state { 131c5c4113dSnw bool_t sid2pid_done; 132c5c4113dSnw bool_t pid2sid_done; 133c5c4113dSnw int ad_nqueries; 134e8c27ec8Sbaban int nldap_nqueries; 1354aa0a5e7Snw bool_t eph_map_unres_sids; 136e3f2c991SKeyur Desai int directory_based_mapping; /* enum */ 13748cd229bSGordon Ross uint_t id_cache_timeout; 13848cd229bSGordon Ross uint_t name_cache_timeout; 13962c60062Sbaban uint_t curpos; 14062c60062Sbaban hashentry_t *sid_history; 14162c60062Sbaban uint_t sid_history_size; 14262c60062Sbaban idmap_mapping_batch *batch; 14362c60062Sbaban idmap_ids_res *result; 144e8c27ec8Sbaban idmap_namemap_mode_t nm_siduid; 145e8c27ec8Sbaban idmap_namemap_mode_t nm_sidgid; 146e8c27ec8Sbaban char *ad_unixuser_attr; 147e8c27ec8Sbaban char *ad_unixgroup_attr; 148479ac375Sdm char *nldap_winname_attr; 149479ac375Sdm char *defdom; 150479ac375Sdm sqlite *cache; 151479ac375Sdm sqlite *db; 152c5c4113dSnw } lookup_state_t; 153c5c4113dSnw 154e8c27ec8Sbaban #define NLDAP_OR_MIXED(nm) \ 1551fdeec65Sjoyce mcintosh ((nm) == IDMAP_NM_NLDAP || (nm) == IDMAP_NM_MIXED) 156e8c27ec8Sbaban #define AD_OR_MIXED(nm) \ 1571fdeec65Sjoyce mcintosh ((nm) == IDMAP_NM_AD || (nm) == IDMAP_NM_MIXED) 1581fdeec65Sjoyce mcintosh 1591fdeec65Sjoyce mcintosh #define PID_UID_OR_UNKNOWN(pidtype) \ 1601fdeec65Sjoyce mcintosh ((pidtype) == IDMAP_UID || (pidtype) == IDMAP_POSIXID) 1611fdeec65Sjoyce mcintosh #define PID_GID_OR_UNKNOWN(pidtype) \ 1621fdeec65Sjoyce mcintosh ((pidtype) == IDMAP_GID || (pidtype) == IDMAP_POSIXID) 163e8c27ec8Sbaban 164e8c27ec8Sbaban #define NLDAP_OR_MIXED_MODE(pidtype, ls) \ 1651fdeec65Sjoyce mcintosh (NLDAP_MODE(pidtype, ls) || MIXED_MODE(pidtype, ls)) 166e8c27ec8Sbaban #define AD_OR_MIXED_MODE(pidtype, ls)\ 1671fdeec65Sjoyce mcintosh (AD_MODE(pidtype, ls) || MIXED_MODE(pidtype, ls)) 168e8c27ec8Sbaban #define NLDAP_MODE(pidtype, ls) \ 1691fdeec65Sjoyce mcintosh ((PID_UID_OR_UNKNOWN(pidtype) && (ls)->nm_siduid == IDMAP_NM_NLDAP) || \ 1701fdeec65Sjoyce mcintosh (PID_GID_OR_UNKNOWN(pidtype) && (ls)->nm_sidgid == IDMAP_NM_NLDAP)) 171e8c27ec8Sbaban #define AD_MODE(pidtype, ls) \ 1721fdeec65Sjoyce mcintosh ((PID_UID_OR_UNKNOWN(pidtype) && (ls)->nm_siduid == IDMAP_NM_AD) || \ 1731fdeec65Sjoyce mcintosh (PID_GID_OR_UNKNOWN(pidtype) && (ls)->nm_sidgid == IDMAP_NM_AD)) 174e8c27ec8Sbaban #define MIXED_MODE(pidtype, ls) \ 1751fdeec65Sjoyce mcintosh ((PID_UID_OR_UNKNOWN(pidtype) && (ls)->nm_siduid == IDMAP_NM_MIXED) || \ 1761fdeec65Sjoyce mcintosh (PID_GID_OR_UNKNOWN(pidtype) && (ls)->nm_sidgid == IDMAP_NM_MIXED)) 177e8c27ec8Sbaban 178e8c27ec8Sbaban 179c5c4113dSnw typedef struct list_cb_data { 180c5c4113dSnw void *result; 181c5c4113dSnw uint64_t next; 182c5c4113dSnw uint64_t len; 183c5c4113dSnw uint64_t limit; 18448258c6bSjp int flag; 185c5c4113dSnw } list_cb_data_t; 186c5c4113dSnw 187c5c4113dSnw typedef struct msg_table { 188c5c4113dSnw idmap_retcode retcode; 189c5c4113dSnw const char *msg; 190c5c4113dSnw } msg_table_t; 191c5c4113dSnw 1921fcced4cSJordan Brown /* 1931fcced4cSJordan Brown * Data structure to store well-known SIDs and 1941fcced4cSJordan Brown * associated mappings (if any) 1951fcced4cSJordan Brown */ 1961fcced4cSJordan Brown typedef struct wksids_table { 1971fcced4cSJordan Brown const char *sidprefix; 1981fcced4cSJordan Brown uint32_t rid; 1991fcced4cSJordan Brown const char *domain; 2001fcced4cSJordan Brown const char *winname; 2011fcced4cSJordan Brown int is_wuser; 202e3f2c991SKeyur Desai posix_id_t pid; 2031fcced4cSJordan Brown int is_user; 2041fcced4cSJordan Brown int direction; 2051fcced4cSJordan Brown } wksids_table_t; 2061fcced4cSJordan Brown 2070dcc7149Snw #define IDMAPD_SEARCH_TIMEOUT 3 /* seconds */ 2080dcc7149Snw #define IDMAPD_LDAP_OPEN_TIMEOUT 1 /* secs; initial, w/ exp backoff */ 2090dcc7149Snw 21062c60062Sbaban /* 211e8c27ec8Sbaban * The following flags are used by idmapd while processing a 212e8c27ec8Sbaban * given mapping request. Note that idmapd uses multiple passes to 213e8c27ec8Sbaban * process the request and the flags are used to pass information 214e8c27ec8Sbaban * about the state of the request between these passes. 215e8c27ec8Sbaban */ 216e8c27ec8Sbaban 217e8c27ec8Sbaban /* Initial state. Done. Reset all flags. Remaining passes can be skipped */ 218e8c27ec8Sbaban #define _IDMAP_F_DONE 0x00000000 219e8c27ec8Sbaban /* Set when subsequent passes are required */ 220e8c27ec8Sbaban #define _IDMAP_F_NOTDONE 0x00000001 221e8c27ec8Sbaban /* Don't update name_cache. (e.g. set when winname,SID found in name_cache) */ 222e8c27ec8Sbaban #define _IDMAP_F_DONT_UPDATE_NAMECACHE 0x00000002 223e8c27ec8Sbaban /* Batch this request for AD lookup */ 224e8c27ec8Sbaban #define _IDMAP_F_LOOKUP_AD 0x00000004 225e8c27ec8Sbaban /* Batch this request for nldap directory lookup */ 226e8c27ec8Sbaban #define _IDMAP_F_LOOKUP_NLDAP 0x00000008 227e8c27ec8Sbaban /* 228e8c27ec8Sbaban * Expired ephemeral mapping found in cache when processing sid2uid request. 229e8c27ec8Sbaban * Use it if the given SID cannot be mapped by name 230e8c27ec8Sbaban */ 231e8c27ec8Sbaban #define _IDMAP_F_EXP_EPH_UID 0x00000010 232e8c27ec8Sbaban /* Same as above. Used for sid2gid request */ 233e8c27ec8Sbaban #define _IDMAP_F_EXP_EPH_GID 0x00000020 2344d61c878SJulian Pullen /* This request is not valid for the current forest */ 2354d61c878SJulian Pullen #define _IDMAP_F_LOOKUP_OTHER_AD 0x00000040 2364d61c878SJulian Pullen 237e8c27ec8Sbaban 238e8c27ec8Sbaban /* 239e8c27ec8Sbaban * Check if we are done. If so, subsequent passes can be skipped 240e8c27ec8Sbaban * when processing a given mapping request. 24162c60062Sbaban */ 242e8c27ec8Sbaban #define ARE_WE_DONE(f) ((f & _IDMAP_F_NOTDONE) == 0) 243c5c4113dSnw 244c5c4113dSnw #define SIZE_INCR 5 245c5c4113dSnw #define MAX_TRIES 5 246c5c4113dSnw #define IDMAP_DBDIR "/var/idmap" 247c5c4113dSnw #define IDMAP_CACHEDIR "/var/run/idmap" 248c5c4113dSnw #define IDMAP_DBNAME IDMAP_DBDIR "/idmap.db" 249*e3d9e7f3SGordon Ross #define IDMAP_CACHENAME IDMAP_CACHEDIR "/cache.db" 2508e228215Sdm 251148c5f43SAlan Wright #define IS_ID_NONE(id) \ 252148c5f43SAlan Wright ((id).idtype == IDMAP_NONE) 253cd37da74Snw 254fe1c642dSBill Krier #define IS_ID_SID(id) \ 255fe1c642dSBill Krier ((id).idtype == IDMAP_SID || \ 256fe1c642dSBill Krier (id).idtype == IDMAP_USID || \ 257fe1c642dSBill Krier (id).idtype == IDMAP_GSID) \ 258fe1c642dSBill Krier 259148c5f43SAlan Wright #define IS_ID_UID(id) \ 260148c5f43SAlan Wright ((id).idtype == IDMAP_UID) 261cd37da74Snw 262148c5f43SAlan Wright #define IS_ID_GID(id) \ 263148c5f43SAlan Wright ((id).idtype == IDMAP_GID) 264cd37da74Snw 265148c5f43SAlan Wright #define IS_ID_POSIX(id) \ 266148c5f43SAlan Wright ((id).idtype == IDMAP_UID || \ 267148c5f43SAlan Wright (id).idtype == IDMAP_GID || \ 268148c5f43SAlan Wright (id).idtype == IDMAP_POSIXID) \ 269cd37da74Snw 2701fcced4cSJordan Brown /* 2711fcced4cSJordan Brown * Local RID ranges 2721fcced4cSJordan Brown */ 2731fcced4cSJordan Brown #define LOCALRID_UID_MIN 1000U 2741fcced4cSJordan Brown #define LOCALRID_UID_MAX ((uint32_t)INT32_MAX) 2751fcced4cSJordan Brown #define LOCALRID_GID_MIN (((uint32_t)INT32_MAX) + 1) 2761fcced4cSJordan Brown #define LOCALRID_GID_MAX UINT32_MAX 2771fcced4cSJordan Brown 278148c5f43SAlan Wright /* 279148c5f43SAlan Wright * Tracing. 280148c5f43SAlan Wright * 281148c5f43SAlan Wright * The tracing mechanism is intended to help the administrator understand 282148c5f43SAlan Wright * why their mapping configuration is doing what it is. Each interesting 283148c5f43SAlan Wright * decision point during the mapping process calls TRACE() with the current 284148c5f43SAlan Wright * request and response and a printf-style message. The message, plus 285148c5f43SAlan Wright * data from the request and the response, is logged to the service log 286148c5f43SAlan Wright * (if debug/mapping is greater than zero) or reported to the caller 287148c5f43SAlan Wright * (if IDMAP_REQ_FLG_TRACE was set in the request. The primary consumer 288148c5f43SAlan Wright * is the "-V" option to "idmap show". 289148c5f43SAlan Wright * 290148c5f43SAlan Wright * TRACING(req) says whether tracing is appropriate for the request, and 291148c5f43SAlan Wright * is used to determine and record whether any request in a batch requested 292148c5f43SAlan Wright * tracing, to control whether later code loops over the batch to do tracing 293148c5f43SAlan Wright * for any of the requests. 294148c5f43SAlan Wright * 295148c5f43SAlan Wright * TRACE(req, res, fmt, ...) generates a trace entry if appropriate. 296148c5f43SAlan Wright */ 297148c5f43SAlan Wright #define TRACING(req) \ 298148c5f43SAlan Wright (DBG(MAPPING, 1) || \ 299148c5f43SAlan Wright ((req)->flag & IDMAP_REQ_FLG_TRACE) != 0) 300148c5f43SAlan Wright #define TRACE(req, res, ...) \ 301148c5f43SAlan Wright ((void)(TRACING(req) && trace(req, res, __VA_ARGS__))) 302148c5f43SAlan Wright extern int trace(idmap_mapping *req, idmap_id_res *res, char *fmt, ...); 303148c5f43SAlan Wright 304c5c4113dSnw typedef idmap_retcode (*update_list_res_cb)(void *, const char **, uint64_t); 305c5c4113dSnw typedef int (*list_svc_cb)(void *, int, char **, char **); 306c5c4113dSnw 307c5c4113dSnw extern void idmap_prog_1(struct svc_req *, register SVCXPRT *); 308c5c4113dSnw extern void idmapdlog(int, const char *, ...); 3099bf5f78fSMatt Barden extern int init_mapping_system(void); 3109bf5f78fSMatt Barden extern void fini_mapping_system(void); 3119bf5f78fSMatt Barden extern void print_idmapdstate(void); 312c5c4113dSnw extern int create_directory(const char *, uid_t, gid_t); 3139bf5f78fSMatt Barden extern int load_config(void); 3149bf5f78fSMatt Barden extern void reload_gcs(void); 3159bf5f78fSMatt Barden extern void reload_dcs(void); 316148c5f43SAlan Wright extern void idmap_init_tsd_key(void); 317349d5d8fSnw extern void degrade_svc(int, const char *); 318c8e26105Sjp extern void restore_svc(void); 319b3700b07SGordon Ross extern void notify_dc_changed(void); 320c5c4113dSnw 321c5c4113dSnw 3229bf5f78fSMatt Barden extern int init_dbs(void); 3239bf5f78fSMatt Barden extern void fini_dbs(void); 324c5c4113dSnw extern idmap_retcode get_db_handle(sqlite **); 325c5c4113dSnw extern idmap_retcode get_cache_handle(sqlite **); 326*e3d9e7f3SGordon Ross extern void kill_db_handle(sqlite *); 327*e3d9e7f3SGordon Ross extern void kill_cache_handle(sqlite *); 32871590c90Snw extern idmap_retcode sql_exec_no_cb(sqlite *, const char *, char *); 329c5c4113dSnw extern idmap_retcode add_namerule(sqlite *, idmap_namerule *); 330c5c4113dSnw extern idmap_retcode rm_namerule(sqlite *, idmap_namerule *); 331cd37da74Snw extern idmap_retcode flush_namerules(sqlite *); 332cd37da74Snw 3339bf5f78fSMatt Barden extern char *tolower_u8(const char *); 334c5c4113dSnw 335cd37da74Snw extern idmap_retcode gen_sql_expr_from_rule(idmap_namerule *, char **); 336c5c4113dSnw extern idmap_retcode validate_list_cb_data(list_cb_data_t *, int, 337c5c4113dSnw char **, int, uchar_t **, size_t); 33871590c90Snw extern idmap_retcode process_list_svc_sql(sqlite *, const char *, char *, 33948258c6bSjp uint64_t, int, list_svc_cb, void *); 340479ac375Sdm extern idmap_retcode sid2pid_first_pass(lookup_state_t *, 341479ac375Sdm idmap_mapping *, idmap_id_res *); 342479ac375Sdm extern idmap_retcode sid2pid_second_pass(lookup_state_t *, 343c5c4113dSnw idmap_mapping *, idmap_id_res *); 344479ac375Sdm extern idmap_retcode pid2sid_first_pass(lookup_state_t *, 345fe1c642dSBill Krier idmap_mapping *, idmap_id_res *, int); 346479ac375Sdm extern idmap_retcode pid2sid_second_pass(lookup_state_t *, 347479ac375Sdm idmap_mapping *, idmap_id_res *, int); 348479ac375Sdm extern idmap_retcode update_cache_sid2pid(lookup_state_t *, 349c5c4113dSnw idmap_mapping *, idmap_id_res *); 350479ac375Sdm extern idmap_retcode update_cache_pid2sid(lookup_state_t *, 351c5c4113dSnw idmap_mapping *, idmap_id_res *); 352c5c4113dSnw extern idmap_retcode get_u2w_mapping(sqlite *, sqlite *, idmap_mapping *, 353c5c4113dSnw idmap_mapping *, int); 354c5c4113dSnw extern idmap_retcode get_w2u_mapping(sqlite *, sqlite *, idmap_mapping *, 355c5c4113dSnw idmap_mapping *); 356479ac375Sdm extern idmap_retcode load_cfg_in_state(lookup_state_t *); 357e8c27ec8Sbaban extern void cleanup_lookup_state(lookup_state_t *); 358c5c4113dSnw 359e8c27ec8Sbaban extern idmap_retcode ad_lookup_batch(lookup_state_t *, 360c5c4113dSnw idmap_mapping_batch *, idmap_ids_res *); 361479ac375Sdm extern idmap_retcode lookup_name2sid(sqlite *, const char *, const char *, 362148c5f43SAlan Wright int, char **, char **, char **, 363148c5f43SAlan Wright idmap_rid_t *, idmap_id_type *, 364148c5f43SAlan Wright idmap_mapping *, int); 36508f0d8daSafshin salek ardakani - Sun Microsystems - Irvine United States extern idmap_retcode lookup_wksids_name2sid(const char *, const char *, 36608f0d8daSafshin salek ardakani - Sun Microsystems - Irvine United States char **, char **, char **, idmap_rid_t *, 367148c5f43SAlan Wright idmap_id_type *); 3689fb67ea3Safshin salek ardakani - Sun Microsystems - Irvine United States extern idmap_retcode idmap_cache_flush(idmap_flush_op); 3697a8a68f5SJulian Pullen 370e3f2c991SKeyur Desai extern const wksids_table_t *find_wksid_by_pid(posix_id_t pid, int is_user); 3711fcced4cSJordan Brown extern const wksids_table_t *find_wksid_by_sid(const char *sid, int rid, 372148c5f43SAlan Wright idmap_id_type type); 3731fcced4cSJordan Brown extern const wksids_table_t *find_wksid_by_name(const char *name, 374148c5f43SAlan Wright const char *domain, idmap_id_type type); 3751fcced4cSJordan Brown extern const wksids_table_t *find_wk_by_sid(char *sid); 3761fcced4cSJordan Brown 377c5c4113dSnw #ifdef __cplusplus 378c5c4113dSnw } 379c5c4113dSnw #endif 380c5c4113dSnw 381c5c4113dSnw #endif /* _IDMAPD_H */ 382