1 /*
2 * CDDL HEADER START
3 *
4 * The contents of this file are subject to the terms of the
5 * Common Development and Distribution License (the "License").
6 * You may not use this file except in compliance with the License.
7 *
8 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
9 * or http://www.opensolaris.org/os/licensing.
10 * See the License for the specific language governing permissions
11 * and limitations under the License.
12 *
13 * When distributing Covered Code, include this CDDL HEADER in each
14 * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
15 * If applicable, add the following below this CDDL HEADER, with the
16 * fields enclosed by brackets "[]" replaced with your own identifying
17 * information: Portions Copyright [yyyy] [name of copyright owner]
18 *
19 * CDDL HEADER END
20 */
21 /*
22 * Copyright 2006 Sun Microsystems, Inc. All rights reserved.
23 * Use is subject to license terms.
24 */
25
26 #include <netdb.h>
27 #include <netinet/in.h>
28 #include <arpa/inet.h>
29 #include <sys/socket.h>
30 #include "ns_internal.h"
31 #include "ldap_common.h"
32
33 /* networks attributes filters */
34 #define _N_NAME "cn"
35 #define _N_NETWORK "ipnetworknumber"
36 #define _F_GETNETBYNAME "(&(objectClass=ipNetwork)(cn=%s))"
37 #define _F_GETNETBYNAME_SSD "(&(%%s)(cn=%s))"
38 #define _F_GETNETBYADDR "(&(objectClass=ipNetwork)(|(ipNetworkNumber=%s)" \
39 "(ipNetworkNumber=%s)))"
40 #define _F_GETNETBYADDR_SSD "(&(%%s)(|(ipNetworkNumber=%s)" \
41 "(ipNetworkNumber=%s)))"
42
43 static const char *networks_attrs[] = {
44 _N_NAME,
45 _N_NETWORK,
46 (char *)NULL
47 };
48
49 /*
50 * _nss_ldap_networks2str is the data marshaling method for the networks
51 * getXbyY * (e.g., getbyname(), getbyaddr(), getnetent() backend processes.
52 * This method is called after a successful ldap search has been performed.
53 * This method will parse the ldap search values into the file format.
54 * e.g.
55 *
56 * SunRay-ce2 10.34.96.0 SunRay
57 *
58 */
59 static int
_nss_ldap_networks2str(ldap_backend_ptr be,nss_XbyY_args_t * argp)60 _nss_ldap_networks2str(ldap_backend_ptr be, nss_XbyY_args_t *argp)
61 {
62 uint_t i;
63 int nss_result;
64 int buflen = 0, len;
65 char **network, *cname = NULL;
66 char *buffer = NULL;
67 ns_ldap_result_t *result = be->result;
68 ns_ldap_attr_t *names;
69
70 if (result == NULL)
71 return (NSS_STR_PARSE_PARSE);
72 buflen = argp->buf.buflen;
73
74 if (argp->buf.result != NULL) {
75 if ((be->buffer = calloc(1, buflen)) == NULL) {
76 nss_result = NSS_STR_PARSE_PARSE;
77 goto result_net2str;
78 }
79 buffer = be->buffer;
80 } else
81 buffer = argp->buf.buffer;
82
83 nss_result = NSS_STR_PARSE_SUCCESS;
84 (void) memset(argp->buf.buffer, 0, buflen);
85
86 names = __ns_ldap_getAttrStruct(result->entry, _N_NAME);
87 if (names == NULL || names->attrvalue == NULL) {
88 nss_result = NSS_STR_PARSE_PARSE;
89 goto result_net2str;
90 }
91 /* Get the canonical name */
92 cname = __s_api_get_canonical_name(result->entry, names, 1);
93 /*
94 * The definition of the object class "ipNetwork" has a
95 * discrepency between RFC 2307 and 2307bis.
96 * In 2307, "cn" is a MUST attribute. In 2307bis, "cn" is a
97 * MAY attribute.
98 * If "cn" is a MAY attribute, it does not appear in RDN and can't
99 * be derived from RDN as a canonical "cn" name. In that case, use 1st
100 * "cn" value as the official name.
101 */
102 if (cname == NULL)
103 /* 2307bis case */
104 cname = names->attrvalue[0];
105 if (cname == NULL || (len = strlen(cname)) < 1) {
106 nss_result = NSS_STR_PARSE_PARSE;
107 goto result_net2str;
108 }
109 network = __ns_ldap_getAttr(result->entry, _N_NETWORK);
110 if (network == NULL || network[0] == NULL ||
111 (len = strlen(network[0])) < 1) {
112 nss_result = NSS_STR_PARSE_PARSE;
113 goto result_net2str;
114 }
115 len = snprintf(buffer, buflen, "%s %s", cname, network[0]);
116 TEST_AND_ADJUST(len, buffer, buflen, result_net2str);
117 /* Append aliases */
118 for (i = 0; i < names->value_count; i++) {
119 if (names->attrvalue[i] == NULL) {
120 nss_result = NSS_STR_PARSE_PARSE;
121 goto result_net2str;
122 }
123 /* Skip the canonical name */
124 if (strcasecmp(names->attrvalue[i], cname) != 0) {
125 len = snprintf(buffer, buflen, " %s",
126 names->attrvalue[i]);
127 TEST_AND_ADJUST(len, buffer, buflen, result_net2str);
128 }
129 }
130
131 /* The front end marshaller doesn't need to copy trailing nulls */
132 if (argp->buf.result != NULL)
133 be->buflen = strlen(be->buffer);
134
135 result_net2str:
136
137 (void) __ns_ldap_freeResult(&be->result);
138 return (nss_result);
139 }
140
141 /*
142 * Takes an unsigned integer in host order, and returns a printable
143 * string for it as a network number. To allow for the possibility of
144 * naming subnets, only trailing dot-zeros are truncated.
145 * buf2 is untruncated version.
146 */
147
nettoa(int anet,char * buf,char * buf2,int buflen)148 static int nettoa(int anet, char *buf, char *buf2, int buflen)
149 {
150 int addr;
151 char *p;
152 struct in_addr in;
153
154 if (buf == NULL || buf2 == NULL)
155 return ((int)1);
156
157 in = inet_makeaddr(anet, INADDR_ANY);
158 addr = in.s_addr;
159 if (inet_ntop(AF_INET, (const void *)&in, buf2, INET_ADDRSTRLEN)
160 == NULL)
161 return ((int)1);
162 if (strlcpy(buf, buf2, buflen) >= buflen)
163 return ((int)1);
164 if ((IN_CLASSA_HOST & htonl(addr)) == 0) {
165 p = strchr(buf, '.');
166 if (p == NULL)
167 return ((int)1);
168 *p = 0;
169 } else if ((IN_CLASSB_HOST & htonl(addr)) == 0) {
170 p = strchr(buf, '.');
171 if (p == NULL)
172 return ((int)1);
173 p = strchr(p + 1, '.');
174 if (p == NULL)
175 return ((int)1);
176 *p = 0;
177 } else if ((IN_CLASSC_HOST & htonl(addr)) == 0) {
178 p = strrchr(buf, '.');
179 if (p == NULL)
180 return ((int)1);
181 *p = 0;
182 }
183
184 return ((int)0);
185 }
186
187
188 /*
189 * getbyname gets a network entry by name. This function constructs an
190 * ldap search filter using the network name invocation parameter and the
191 * getnetbyname search filter defined. Once the filter is constructed, we
192 * search for a matching entry and marshal the data results into struct
193 * netent for the frontend process. The function _nss_ldap_networks2ent
194 * performs the data marshaling.
195 */
196
197 static nss_status_t
getbyname(ldap_backend_ptr be,void * a)198 getbyname(ldap_backend_ptr be, void *a)
199 {
200 nss_XbyY_args_t *argp = (nss_XbyY_args_t *)a;
201 char searchfilter[SEARCHFILTERLEN];
202 char userdata[SEARCHFILTERLEN];
203 char netname[SEARCHFILTERLEN];
204 int ret;
205
206 if (_ldap_filter_name(netname, argp->key.name, sizeof (netname)) != 0)
207 return ((nss_status_t)NSS_NOTFOUND);
208
209 ret = snprintf(searchfilter, sizeof (searchfilter),
210 _F_GETNETBYNAME, netname);
211 if (ret >= sizeof (searchfilter) || ret < 0)
212 return ((nss_status_t)NSS_NOTFOUND);
213
214 ret = snprintf(userdata, sizeof (userdata),
215 _F_GETNETBYNAME_SSD, netname);
216 if (ret >= sizeof (userdata) || ret < 0)
217 return ((nss_status_t)NSS_NOTFOUND);
218
219 return ((nss_status_t)_nss_ldap_lookup(be, argp,
220 _NETWORKS, searchfilter, NULL,
221 _merge_SSD_filter, userdata));
222 }
223
224
225 /*
226 * getbyaddr gets a network entry by ip address. This function constructs an
227 * ldap search filter using the name invocation parameter and the getnetbyaddr
228 * search filter defined. Once the filter is constructed, we search for a
229 * matching entry and marshal the data results into struct netent for the
230 * frontend process. The function _nss_ldap_networks2ent performs the data
231 * marshaling.
232 */
233
234 static nss_status_t
getbyaddr(ldap_backend_ptr be,void * a)235 getbyaddr(ldap_backend_ptr be, void *a)
236 {
237 nss_XbyY_args_t *argp = (nss_XbyY_args_t *)a;
238 char addrstr[INET_ADDRSTRLEN], addrstr2[INET_ADDRSTRLEN];
239 char searchfilter[SEARCHFILTERLEN];
240 char userdata[SEARCHFILTERLEN];
241 int ret;
242
243 if (nettoa((int)argp->key.netaddr.net, addrstr, addrstr2,
244 INET_ADDRSTRLEN) != 0)
245 return ((nss_status_t)NSS_UNAVAIL);
246
247 ret = snprintf(searchfilter, sizeof (searchfilter),
248 _F_GETNETBYADDR, addrstr, addrstr2);
249 if (ret >= sizeof (searchfilter) || ret < 0)
250 return ((nss_status_t)NSS_NOTFOUND);
251
252 ret = snprintf(userdata, sizeof (userdata),
253 _F_GETNETBYADDR_SSD, addrstr, addrstr2);
254 if (ret >= sizeof (userdata) || ret < 0)
255 return ((nss_status_t)NSS_NOTFOUND);
256
257 return ((nss_status_t)_nss_ldap_lookup(be, argp,
258 _NETWORKS, searchfilter, NULL,
259 _merge_SSD_filter, userdata));
260 }
261
262 static ldap_backend_op_t net_ops[] = {
263 _nss_ldap_destr,
264 _nss_ldap_endent,
265 _nss_ldap_setent,
266 _nss_ldap_getent,
267 getbyname,
268 getbyaddr
269 };
270
271
272 /*
273 * _nss_ldap_networks_constr is where life begins. This function calls the
274 * generic ldap constructor function to define and build the abstract data
275 * types required to support ldap operations.
276 */
277
278 /*ARGSUSED0*/
279 nss_backend_t *
_nss_ldap_networks_constr(const char * dummy1,const char * dummy2,const char * dummy3)280 _nss_ldap_networks_constr(const char *dummy1, const char *dummy2,
281 const char *dummy3)
282 {
283
284 return ((nss_backend_t *)_nss_ldap_constr(net_ops,
285 sizeof (net_ops)/sizeof (net_ops[0]), _NETWORKS,
286 networks_attrs, _nss_ldap_networks2str));
287 }
288