1 /*
2  * CDDL HEADER START
3  *
4  * The contents of this file are subject to the terms of the
5  * Common Development and Distribution License (the "License").
6  * You may not use this file except in compliance with the License.
7  *
8  * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
9  * or http://www.opensolaris.org/os/licensing.
10  * See the License for the specific language governing permissions
11  * and limitations under the License.
12  *
13  * When distributing Covered Code, include this CDDL HEADER in each
14  * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
15  * If applicable, add the following below this CDDL HEADER, with the
16  * fields enclosed by brackets "[]" replaced with your own identifying
17  * information: Portions Copyright [yyyy] [name of copyright owner]
18  *
19  * CDDL HEADER END
20  */
21 /*
22  * Copyright 2006 Sun Microsystems, Inc.  All rights reserved.
23  * Use is subject to license terms.
24  */
25 
26 #pragma ident	"%Z%%M%	%I%	%E% SMI"
27 
28 #include <ctype.h>
29 #include <netdb.h>
30 #include "ns_internal.h"
31 #include "ldap_common.h"
32 
33 /* protocols attributes filters */
34 #define	_P_NAME			"cn"
35 #define	_P_PROTO		"ipprotocolnumber"
36 #define	_F_GETPROTOBYNAME	"(&(objectClass=ipProtocol)(cn=%s))"
37 #define	_F_GETPROTOBYNAME_SSD	"(&(%%s)(cn=%s))"
38 #define	_F_GETPROTOBYNUMBER	\
39 	"(&(objectClass=ipProtocol)(ipProtocolNumber=%d))"
40 #define	_F_GETPROTOBYNUMBER_SSD	\
41 	"(&(%%s)(ipProtocolNumber=%d))"
42 
43 static const char *protocols_attrs[] = {
44 	_P_NAME,
45 	_P_PROTO,
46 	(char *)NULL
47 };
48 
49 typedef struct protocol_alias {
50 	char	*protocol;
51 	char	*alias;
52 } protocol_alias_t;
53 
54 static const protocol_alias_t ip_aliases[10] = {
55 	{ "ip", "IP" },
56 	{ "ipip", "IP-IP" },
57 	{ "ipcomp", "IPComp" },
58 	{ "ipv6", "IPv6" },
59 	{ "ipv6-route", "IPv6-Route" },
60 	{ "ipv6-frag", "IPv6-Frag" },
61 	{ "ipv6-icmp", "IPv6-ICMP" },
62 	{ "ipv6-nonxt", "IPv6-NoNxt" },
63 	{ "ipv6-opts", "IPv6-Opts" },
64 	{ NULL, NULL }
65 };
66 
67 /*
68  * When the data is imported by ldapaddent, it does not save the aliase in the
69  * "cn" that is same as the canonical name but only different in case.
70  * e.g.
71  * icmp		1	ICMP
72  *
73  * is saved as
74  *
75  * dn: cn=icmp, ...
76  * ...
77  * cn: icmp
78  * ...
79  *
80  * So it needs to replicate the canonical name as an alias of upper case.
81  * But some protocol does have different aliases.
82  *
83  * e.g.
84  * dn: cn=ospf, ...
85  * ...
86  * cn: ospf
87  * cn: OSPFIGP
88  * ...
89  *
90  * For many ip* protocols, the aliases are mixed cased. Maybe it's case
91  * insensitive. But this fucntion tries to restore the aliases to the original
92  * form as much as possible. If the alias can't be found in the aliases table,
93  * it assumes the alias is all upper case.
94  *
95  */
96 static char *
get_alias(char * protocol)97 get_alias(char *protocol) {
98 	int	i;
99 	char	*cp;
100 
101 	if (strncmp(protocol, "ip", 2) == 0) {
102 		for (i = 0; ip_aliases[i].protocol != NULL; i++) {
103 			if (strcmp(protocol, ip_aliases[i].protocol) == 0)
104 				return (ip_aliases[i].alias);
105 		}
106 		/*
107 		 * No aliase in the table. Return an all upper case aliase
108 		 */
109 		for (cp = protocol; *cp; cp++)
110 			*cp = toupper(*cp);
111 
112 		return (protocol);
113 	} else {
114 		/* Return an all upper case aliase */
115 		for (cp = protocol; *cp; cp++)
116 			*cp = toupper(*cp);
117 
118 		return (protocol);
119 	}
120 
121 }
122 /*
123  * _nss_ldap_protocols2str is the data marshaling method for the protocols
124  * getXbyY * (e.g., getbyname(), getbynumber(), getent()) backend processes.
125  * This method is called after a successful ldap search has been performed.
126  * This method will parse the ldap search values into a file format.
127  * e.g.
128  * idrp 45 IDRP
129  * or
130  * ospf 89 OSPFIGP
131  */
132 
133 static int
_nss_ldap_protocols2str(ldap_backend_ptr be,nss_XbyY_args_t * argp)134 _nss_ldap_protocols2str(ldap_backend_ptr be, nss_XbyY_args_t *argp)
135 {
136 	uint_t		i;
137 	int		nss_result;
138 	int		buflen = 0, len;
139 	char		*cname = NULL;
140 	char		*buffer = NULL, **number, *alias;
141 	ns_ldap_result_t	*result = be->result;
142 	ns_ldap_attr_t	*names;
143 
144 	if (result == NULL)
145 		return (NSS_STR_PARSE_PARSE);
146 
147 	buflen = argp->buf.buflen;
148 	if (argp->buf.result != NULL) {
149 		if ((be->buffer = calloc(1, buflen)) == NULL) {
150 			nss_result = NSS_STR_PARSE_PARSE;
151 			goto result_pls2str;
152 		}
153 		buffer = be->buffer;
154 	} else
155 		buffer = argp->buf.buffer;
156 
157 	nss_result = NSS_STR_PARSE_SUCCESS;
158 	(void) memset(argp->buf.buffer, 0, buflen);
159 
160 	names = __ns_ldap_getAttrStruct(result->entry, _P_NAME);
161 	if (names == NULL || names->attrvalue == NULL) {
162 		nss_result = NSS_STR_PARSE_PARSE;
163 		goto result_pls2str;
164 	}
165 	/* Get the canonical name */
166 	cname = __s_api_get_canonical_name(result->entry, names, 1);
167 	if (cname == NULL || (len = strlen(cname)) < 1) {
168 		nss_result = NSS_STR_PARSE_PARSE;
169 		goto result_pls2str;
170 	}
171 	number = __ns_ldap_getAttr(result->entry, _P_PROTO);
172 	if (number == NULL || number[0] == NULL ||
173 			(len = strlen(number[0])) < 1) {
174 		nss_result = NSS_STR_PARSE_PARSE;
175 		goto result_pls2str;
176 	}
177 	len = snprintf(buffer, buflen,  "%s %s", cname, number[0]);
178 	TEST_AND_ADJUST(len, buffer, buflen, result_pls2str);
179 	/* Append aliases */
180 	if (names->value_count == 1) {
181 		/* create an aliase from protocol name */
182 		alias = get_alias(cname);
183 		len = snprintf(buffer, buflen,  " %s", alias);
184 		TEST_AND_ADJUST(len, buffer, buflen, result_pls2str);
185 
186 	} else {
187 		for (i = 0; i < names->value_count; i++) {
188 			if (names->attrvalue[i] == NULL) {
189 				nss_result = NSS_STR_PARSE_PARSE;
190 				goto result_pls2str;
191 			}
192 			/* Skip the canonical name */
193 			if (strcasecmp(names->attrvalue[i], cname) != 0) {
194 				len = snprintf(buffer, buflen,  " %s",
195 						names->attrvalue[i]);
196 				TEST_AND_ADJUST(len, buffer, buflen,
197 						result_pls2str);
198 			}
199 		}
200 	}
201 
202 	/* The front end marshaller doesn't need to copy trailing nulls */
203 	if (argp->buf.result != NULL)
204 		be->buflen = strlen(be->buffer);
205 
206 result_pls2str:
207 
208 	(void) __ns_ldap_freeResult(&be->result);
209 	return ((int)nss_result);
210 }
211 
212 
213 /*
214  * getbyname gets struct protoent values by protocol name. This
215  * function constructs an ldap search filter using the protocol
216  * name invocation parameter and the getprotobyname search filter
217  * defined. Once the filter is constructed, we search for a matching
218  * entry and marshal the data results into *proto = (struct *
219  * protoent *)argp->buf.result. The function _nss_ldap_protocols2ent
220  * performs the data marshaling.
221  */
222 
223 static nss_status_t
getbyname(ldap_backend_ptr be,void * a)224 getbyname(ldap_backend_ptr be, void *a)
225 {
226 	nss_XbyY_args_t	*argp = (nss_XbyY_args_t *)a;
227 	char		searchfilter[SEARCHFILTERLEN];
228 	char		userdata[SEARCHFILTERLEN];
229 	char		name[SEARCHFILTERLEN];
230 	int		ret;
231 
232 	if (_ldap_filter_name(name, argp->key.name, sizeof (name)) != 0)
233 		return ((nss_status_t)NSS_NOTFOUND);
234 
235 	ret = snprintf(searchfilter, sizeof (searchfilter),
236 	    _F_GETPROTOBYNAME, name);
237 	if (ret >= sizeof (searchfilter) || ret < 0)
238 		return ((nss_status_t)NSS_NOTFOUND);
239 
240 	ret = snprintf(userdata, sizeof (userdata),
241 	    _F_GETPROTOBYNAME_SSD, name);
242 	if (ret >= sizeof (userdata) || ret < 0)
243 		return ((nss_status_t)NSS_NOTFOUND);
244 
245 	return ((nss_status_t)_nss_ldap_lookup(be, argp,
246 		_PROTOCOLS, searchfilter, NULL,
247 		_merge_SSD_filter, userdata));
248 }
249 
250 
251 /*
252  * getbynumber gets struct protoent values by protocol number. This
253  * function constructs an ldap search filter using the protocol
254  * name invocation parameter and the getprotobynumber search filter
255  * defined. Once the filter is constructed, we search for a matching
256  * entry and marshal the data results into *proto = (struct *
257  * protoent *)argp->buf.result. The function _nss_ldap_protocols2ent
258  * performs the data marshaling.
259  */
260 
261 static nss_status_t
getbynumber(ldap_backend_ptr be,void * a)262 getbynumber(ldap_backend_ptr be, void *a)
263 {
264 	nss_XbyY_args_t	*argp = (nss_XbyY_args_t *)a;
265 	char		searchfilter[SEARCHFILTERLEN];
266 	char		userdata[SEARCHFILTERLEN];
267 	int		ret;
268 
269 	ret = snprintf(searchfilter, sizeof (searchfilter),
270 	    _F_GETPROTOBYNUMBER, argp->key.number);
271 	if (ret >= sizeof (searchfilter) || ret < 0)
272 		return ((nss_status_t)NSS_NOTFOUND);
273 
274 	ret = snprintf(userdata, sizeof (userdata),
275 	    _F_GETPROTOBYNUMBER_SSD, argp->key.number);
276 	if (ret >= sizeof (userdata) || ret < 0)
277 		return ((nss_status_t)NSS_NOTFOUND);
278 
279 	return ((nss_status_t)_nss_ldap_lookup(be, argp,
280 		_PROTOCOLS, searchfilter, NULL,
281 		_merge_SSD_filter, userdata));
282 }
283 
284 static ldap_backend_op_t proto_ops[] = {
285 	_nss_ldap_destr,
286 	_nss_ldap_endent,
287 	_nss_ldap_setent,
288 	_nss_ldap_getent,
289 	getbyname,
290 	getbynumber
291 };
292 
293 
294 /*
295  * _nss_ldap_protocols_constr is where life begins. This function calls
296  * the generic ldap constructor function to define and build the abstract
297  * data types required to support ldap operations.
298  */
299 
300 /*ARGSUSED0*/
301 nss_backend_t *
_nss_ldap_protocols_constr(const char * dummy1,const char * dummy2,const char * dummy3)302 _nss_ldap_protocols_constr(const char *dummy1, const char *dummy2,
303 			const char *dummy3)
304 {
305 
306 	return ((nss_backend_t *)_nss_ldap_constr(proto_ops,
307 		sizeof (proto_ops)/sizeof (proto_ops[0]), _PROTOCOLS,
308 		protocols_attrs, _nss_ldap_protocols2str));
309 }
310