utils/net_idmap.c

ソースコードを見る。

関数
static int	net_idmap_dump_one_entry (TDB_CONTEXT *tdb, TDB_DATA key, TDB_DATA data, void *unused)
static int	net_idmap_dump (int argc, const char **argv)
static int	net_idmap_restore (int argc, const char **argv)
static int	net_idmap_delete (int argc, const char **argv)
static int	net_idmap_set (int argc, const char **argv)
BOOL	idmap_store_secret (const char *backend, bool alloc, const char *domain, const char *identity, const char *secret)
static int	net_idmap_secret (int argc, const char **argv)
int	net_help_idmap (int argc, const char **argv)
int	net_idmap (int argc, const char **argv)

---

関数

static int net_idmap_dump_one_entry	(	TDB_CONTEXT *	tdb,
		TDB_DATA	key,
		TDB_DATA	data,
		void *	unused
	)			[static]

net_idmap.c の 33 行で定義されています。

参照先 TDB_DATA::dptr・printf().

参照元 net_idmap_dump().

{
        if (strcmp(key.dptr, "USER HWM") == 0) {
                printf("USER HWM %d\n", IVAL(data.dptr,0));
                return 0;
        }

        if (strcmp(key.dptr, "GROUP HWM") == 0) {
                printf("GROUP HWM %d\n", IVAL(data.dptr,0));
                return 0;
        }

        if (strncmp(key.dptr, "S-", 2) != 0)
                return 0;

        printf("%s %s\n", data.dptr, key.dptr);
        return 0;
}

static int net_idmap_dump	(	int	argc,
		const char **	argv
	)			[static]

net_idmap.c の 58 行で定義されています。

参照先 d_fprintf()・net_help_idmap()・net_idmap_dump_one_entry()・tdb_close()・tdb_open_log()・tdb_traverse().

参照元 net_idmap().

{
        TDB_CONTEXT *idmap_tdb;

        if ( argc != 1 )
                return net_help_idmap( argc, argv );

        idmap_tdb = tdb_open_log(argv[0], 0, TDB_DEFAULT, O_RDONLY, 0);

        if (idmap_tdb == NULL) {
                d_fprintf(stderr, "Could not open idmap: %s\n", argv[0]);
                return -1;
        }

        tdb_traverse(idmap_tdb, net_idmap_dump_one_entry, NULL);

        tdb_close(idmap_tdb);

        return 0;
}

static int net_idmap_restore	(	int	argc,
		const char **	argv
	)			[static]

net_idmap.c の 83 行で定義されています。

参照先 ctx・d_fprintf()・unixid::id・ID_TYPE_GID・ID_TYPE_UID・len・line・id_map::sid・sid_string_static()・string_to_sid()・talloc_free()・unixid::type・winbind_ping()・winbind_set_gid_hwm()・winbind_set_mapping()・winbind_set_uid_hwm()・id_map::xid.

参照元 net_idmap().

{
        TALLOC_CTX *ctx;
        FILE *input;

        if (! winbind_ping()) {
                d_fprintf(stderr, "To use net idmap Winbindd must be running.\n");
                return -1;
        }

        ctx = talloc_new(NULL);
        ALLOC_CHECK(ctx);

        if (argc == 1) {
                input = fopen(argv[0], "r");
        } else {
                input = stdin;
        }

        while (!feof(input)) {
                char line[128], sid_string[128];
                int len;
                DOM_SID sid;
                struct id_map map;
                unsigned long idval;

                if (fgets(line, 127, input) == NULL)
                        break;

                len = strlen(line);

                if ( (len > 0) && (line[len-1] == '\n') )
                        line[len-1] = '\0';

                if (sscanf(line, "GID %lu %128s", &idval, sid_string) == 2) {
                        map.xid.type = ID_TYPE_GID;
                        map.xid.id = idval;
                } else if (sscanf(line, "UID %lu %128s", &idval, sid_string) == 2) {
                        map.xid.type = ID_TYPE_UID;
                        map.xid.id = idval;
                } else if (sscanf(line, "USER HWM %lu", &idval) == 1) {
                        /* set uid hwm */
                        if (! winbind_set_uid_hwm(idval)) {
                                d_fprintf(stderr, "Could not set USER HWM\n");
                        }
                        continue;
                } else if (sscanf(line, "GROUP HWM %lu", &idval) == 1) {
                        /* set gid hwm */
                        if (! winbind_set_gid_hwm(idval)) {
                                d_fprintf(stderr, "Could not set GROUP HWM\n");
                        }
                        continue;
                } else {
                        d_fprintf(stderr, "ignoring invalid line [%s]\n", line);
                        continue;
                }

                if (!string_to_sid(&sid, sid_string)) {
                        d_fprintf(stderr, "ignoring invalid sid [%s]\n", sid_string);
                        continue;
                }
                map.sid = &sid;

                if (!winbind_set_mapping(&map)) {
                        d_fprintf(stderr, "Could not set mapping of %s %lu to sid %s\n",
                                 (map.xid.type == ID_TYPE_GID) ? "GID" : "UID",
                                 (unsigned long)map.xid.id, sid_string_static(map.sid));
                        continue;
                }
                         
        }

        if (input != stdin) {
                fclose(input);
        }

        talloc_free(ctx);
        return 0;
}

static int net_idmap_delete	(	int	argc,
		const char **	argv
	)			[static]

net_idmap.c の 166 行で定義されています。

参照先 d_printf().

参照元 net_idmap().

{
        d_printf("Not Implemented yet\n");
        return -1;
}

static int net_idmap_set	(	int	argc,
		const char **	argv
	)			[static]

net_idmap.c の 172 行で定義されています。

参照先 d_printf().

参照元 net_idmap().

{
        d_printf("Not Implemented yet\n");
        return -1;
}

BOOL idmap_store_secret	(	const char *	backend,
		bool	alloc,
		const char *	domain,
		const char *	identity,
		const char *	secret
	)

net_idmap.c の 177 行で定義されています。

参照先 asprintf()・secrets_store_generic()・strupper_m().

参照元 net_idmap_secret().

{
        char *tmp;
        int r;
        BOOL ret;

        if (alloc) {
                r = asprintf(&tmp, "IDMAP_ALLOC_%s", backend);
        } else {
                r = asprintf(&tmp, "IDMAP_%s_%s", backend, domain);
        }

        if (r < 0) return false;

        strupper_m(tmp); /* make sure the key is case insensitive */
        ret = secrets_store_generic(tmp, identity, secret);

        free(tmp);
        return ret;
}

static int net_idmap_secret	(	int	argc,
		const char **	argv
	)			[static]

net_idmap.c の 201 行で定義されています。

参照先 ctx・d_fprintf()・d_printf()・idmap_store_secret()・lp_parm_const_string()・net_help_idmap()・strequal()・talloc_asprintf()・talloc_free()・talloc_strdup().

参照元 net_idmap().

{
        TALLOC_CTX *ctx;
        const char *secret;
        const char *dn;
        char *domain;
        char *backend;
        char *opt = NULL;
        BOOL ret;

        if (argc != 2) {
                return net_help_idmap(argc, argv);
        }

        secret = argv[1];

        ctx = talloc_new(NULL);
        ALLOC_CHECK(ctx);

        if (strcmp(argv[0], "alloc") == 0) {
                domain = NULL;
                backend = lp_idmap_alloc_backend();
        } else {
                domain = talloc_strdup(ctx, argv[0]);
                ALLOC_CHECK(domain);

                opt = talloc_asprintf(ctx, "idmap config %s", domain);
                ALLOC_CHECK(opt);

                backend = talloc_strdup(ctx, lp_parm_const_string(-1, opt, "backend", "tdb"));
                ALLOC_CHECK(backend);
        }

        if ( ( ! backend) || ( ! strequal(backend, "ldap"))) {
                d_fprintf(stderr, "The only currently supported backend is LDAP\n");
                talloc_free(ctx);
                return -1;
        }

        if (domain) {

                dn = lp_parm_const_string(-1, opt, "ldap_user_dn", NULL);
                if ( ! dn) {
                        d_fprintf(stderr, "Missing ldap_user_dn option for domain %s\n", domain);
                        talloc_free(ctx);
                        return -1;
                }

                ret = idmap_store_secret("ldap", false, domain, dn, secret);
        } else {
                dn = lp_parm_const_string(-1, "idmap alloc config", "ldap_user_dn", NULL);
                if ( ! dn) {
                        d_fprintf(stderr, "Missing ldap_user_dn option for alloc backend\n");
                        talloc_free(ctx);
                        return -1;
                }

                ret = idmap_store_secret("ldap", true, NULL, dn, secret);
        }

        if ( ! ret) {
                d_fprintf(stderr, "Failed to store secret\n");
                talloc_free(ctx);
                return -1;
        }

        d_printf("Secret stored\n");
        return 0;
}

int net_help_idmap	(	int	argc,
		const char **	argv
	)

net_idmap.c の 271 行で定義されています。

参照先 d_printf().

参照元 net_idmap()・net_idmap_dump()・net_idmap_secret().

{
        d_printf("net idmap dump <inputfile>\n"\
                 "    Dump current id mapping\n");

        d_printf("net idmap restore\n"\
                 "    Restore entries from stdin\n");

        /* Deliberately *not* document net idmap delete */

        d_printf("net idmap secret <DOMAIN>|alloc <secret>\n"\
                 "    Set the secret for the specified DOMAIN (or the alloc module)\n");

        return -1;
}

int net_idmap	(	int	argc,
		const char **	argv
	)

net_idmap.c の 290 行で定義されています。

参照先 net_help_idmap()・net_idmap_delete()・net_idmap_dump()・net_idmap_restore()・net_idmap_secret()・net_idmap_set()・net_run_function().

{
        struct functable func[] = {
                {"dump", net_idmap_dump},
                {"restore", net_idmap_restore},
                {"setmap", net_idmap_set },
                {"delete", net_idmap_delete},
                {"secret", net_idmap_secret},
                {"help", net_help_idmap},
                {NULL, NULL}
        };

        return net_run_function(argc, argv, func, net_help_idmap);
}

---