nsswitch/winbindd_util.c

Winbind daemon for NT domain authentication nss module. [詳細]

ソースコードを見る。

データ構造
struct	trustdom_state
struct	init_child_state
関数
winbindd_domain *	domain_list (void)
void	free_domain_list (void)
static BOOL	is_internal_domain (const DOM_SID *sid)
static BOOL	is_in_internal_domain (const DOM_SID *sid)
static struct winbindd_domain *	add_trusted_domain (const char *domain_name, const char *alt_name, struct winbindd_methods *methods, const DOM_SID *sid)
static void	trustdom_recv (void *private_data, BOOL success)
static void	add_trusted_domains (struct winbindd_domain *domain)
void	rescan_trusted_domains (void)
static void	init_child_recv (void *private_data, BOOL success)
static void	init_child_getdc_recv (void *private_data, BOOL success)
enum winbindd_result	init_child_connection (struct winbindd_domain *domain, void(*continuation)(void *private_data, BOOL success), void *private_data)
enum winbindd_result	winbindd_dual_init_connection (struct winbindd_domain *domain, struct winbindd_cli_state *state)
BOOL	init_domain_list (void)
winbindd_domain *	find_domain_from_name_noinit (const char *domain_name)
	Given a domain name, return the struct winbindd domain info for it
winbindd_domain *	find_domain_from_name (const char *domain_name)
winbindd_domain *	find_domain_from_sid_noinit (const DOM_SID *sid)
winbindd_domain *	find_domain_from_sid (const DOM_SID *sid)
winbindd_domain *	find_our_domain (void)
winbindd_domain *	find_root_domain (void)
winbindd_domain *	find_builtin_domain (void)
winbindd_domain *	find_lookup_domain_from_sid (const DOM_SID *sid)
winbindd_domain *	find_lookup_domain_from_name (const char *domain_name)
BOOL	winbindd_lookup_sid_by_name (TALLOC_CTX *mem_ctx, struct winbindd_domain *domain, const char *domain_name, const char *name, DOM_SID *sid, enum lsa_SidType *type)
BOOL	winbindd_lookup_name_by_sid (TALLOC_CTX *mem_ctx, DOM_SID *sid, char **dom_name, char **name, enum lsa_SidType *type)
	Lookup a name in a domain from a sid.
void	free_getent_state (struct getent_state *state)
static BOOL	assume_domain (const char *domain)
BOOL	parse_domain_user (const char *domuser, fstring domain, fstring user)
BOOL	parse_domain_user_talloc (TALLOC_CTX *mem_ctx, const char *domuser, char **domain, char **user)
BOOL	canonicalize_username (fstring username_inout, fstring domain, fstring user)
void	fill_domain_username (fstring name, const char *domain, const char *user, BOOL can_assume)
char *	get_winbind_priv_pipe_dir (void)
int	open_winbindd_socket (void)
int	open_winbindd_priv_socket (void)
void	close_winbindd_socket (void)
winbindd_cli_state *	winbindd_client_list (void)
void	winbindd_add_client (struct winbindd_cli_state *cli)
void	winbindd_remove_client (struct winbindd_cli_state *cli)
void	winbindd_kill_all_clients (void)
int	winbindd_num_clients (void)
NTSTATUS	lookup_usergroups_cached (struct winbindd_domain *domain, TALLOC_CTX *mem_ctx, const DOM_SID *user_sid, uint32 *p_num_groups, DOM_SID **user_sids)
void	ws_name_replace (char *name, char replace)
void	ws_name_return (char *name, char replace)
変数
winbindd_methods	cache_methods
winbindd_methods	builtin_passdb_methods
winbindd_methods	sam_passdb_methods
static struct winbindd_domain *	_domain_list
static time_t	last_trustdom_scan
	When was the last scan of trusted domains done?
static int	_winbindd_socket = -1
static int	_winbindd_priv_socket = -1
static struct winbindd_cli_state *	_client_list
static int	_num_clients

---

説明

Winbind daemon for NT domain authentication nss module.

winbindd_util.c で定義されています。

---

関数

struct winbindd_domain* domain_list

(

void

)

winbindd_util.c の 56 行で定義されています。

参照先 _domain_list・init_domain_list()・smb_panic().

参照元 child_msg_offline()・child_msg_online()・close_conns_after_fork()・collect_onlinestatus()・find_domain_from_name_noinit()・find_domain_from_sid_noinit()・find_our_domain()・fork_domain_child()・msg_failed_to_go_online()・msg_try_to_go_online()・wcache_invalidate_cache()・winbind_msg_offline()・winbind_msg_online()・winbindd_list_groups()・winbindd_list_users()・winbindd_setgrent_internal()・winbindd_setpwent_internal()・winbindd_show_sequence().

{
        /* Initialise list */

        if ((!_domain_list) && (!init_domain_list())) {
                smb_panic("Init_domain_list failed\n");
        }

        return _domain_list;
}

void free_domain_list

(

void

)

winbindd_util.c の 69 行で定義されています。

参照先 _domain_list・winbindd_domain::next.

参照元 init_domain_list().

{
        struct winbindd_domain *domain = _domain_list;

        while(domain) {
                struct winbindd_domain *next = domain->next;
                
                DLIST_REMOVE(_domain_list, domain);
                SAFE_FREE(domain);
                domain = next;
        }
}

static BOOL is_internal_domain

(

const DOM_SID *

sid

)

[static]

winbindd_util.c の 82 行で定義されています。

参照先 winbindd_domain::sid・sid_check_is_builtin()・sid_check_is_domain().

参照元 find_lookup_domain_from_sid().

{
        if (sid == NULL)
                return False;

        if ( IS_DC )
                return sid_check_is_builtin(sid);

        return (sid_check_is_domain(sid) || sid_check_is_builtin(sid));
}

static BOOL is_in_internal_domain

(

const DOM_SID *

sid

)

[static]

winbindd_util.c の 93 行で定義されています。

参照先 winbindd_domain::sid・sid_check_is_in_builtin()・sid_check_is_in_our_domain().

参照元 find_lookup_domain_from_sid().

{
        if (sid == NULL)
                return False;

        if ( IS_DC )
                return sid_check_is_in_builtin(sid);

        return (sid_check_is_in_our_domain(sid) || sid_check_is_in_builtin(sid));
}

static struct winbindd_domain* add_trusted_domain	(	const char *	domain_name,
		const char *	alt_name,
		struct winbindd_methods *	methods,
		const DOM_SID *	sid
	)			[static]

winbindd_util.c の 106 行で定義されています。

参照先 _domain_list・winbindd_domain::alt_name・winbindd_domain::name・winbindd_domain::next・SEC_ADS・strequal().

参照元 init_domain_list()・trustdom_recv().

{
        struct winbindd_domain *domain;
        const char *alternative_name = NULL;
        
        /* ignore alt_name if we are not in an AD domain */
        
        if ( (lp_security() == SEC_ADS) && alt_name && *alt_name) {
                alternative_name = alt_name;
        }
        
        /* We can't call domain_list() as this function is called from
           init_domain_list() and we'll get stuck in a loop. */
        for (domain = _domain_list; domain; domain = domain->next) {
                if (strequal(domain_name, domain->name) ||
                    strequal(domain_name, domain->alt_name)) {
                        return domain;
                }
                if (alternative_name && *alternative_name) {
                        if (strequal(alternative_name, domain->name) ||
                            strequal(alternative_name, domain->alt_name)) {
                                return domain;
                        }
                }
                if (sid) {
                        if (is_null_sid(sid)) {
                                
                        } else if (sid_equal(sid, &domain->sid)) {
                                return domain;
                        }
                }
        }
        
        /* Create new domain entry */

        if ((domain = SMB_MALLOC_P(struct winbindd_domain)) == NULL)
                return NULL;

        /* Fill in fields */
        
        ZERO_STRUCTP(domain);

        fstrcpy(domain->name, domain_name);
        if (alternative_name) {
                fstrcpy(domain->alt_name, alternative_name);
        }

        domain->methods = methods;
        domain->backend = NULL;
        domain->internal = is_internal_domain(sid);
        domain->sequence_number = DOM_SEQUENCE_NONE;
        domain->last_seq_check = 0;
        domain->initialized = False;
        domain->online = is_internal_domain(sid);
        domain->check_online_timeout = 0;
        if (sid) {
                sid_copy(&domain->sid, sid);
        }
        
        /* Link to domain list */
        DLIST_ADD(_domain_list, domain);
        
        DEBUG(2,("Added domain %s %s %s\n", 
                 domain->name, domain->alt_name,
                 &domain->sid?sid_string_static(&domain->sid):""));
        
        return domain;
}

static void trustdom_recv	(	void *	private_data,
		BOOL	success
	)			[static]

winbindd_util.c の 222 行で定義されています。

参照先 add_trusted_domain()・winbindd_response::alt_name・cache_methods・winbindd_domain::child・winbindd_response::data・winbindd_response::extra_data・find_domain_from_name_noinit()・global_sid_NULL・trustdom_state::mem_ctx・trustdom_state::response・winbindd_response::result・setup_domain_child()・winbindd_domain::sid・winbindd_response::sid・sid_copy()・strequal()・string_to_sid()・WINBINDD_OK.

参照元 add_trusted_domains().

{
        struct trustdom_state *state =
                talloc_get_type_abort(private_data, struct trustdom_state);
        struct winbindd_response *response = state->response;
        char *p;

        if ((!success) || (response->result != WINBINDD_OK)) {
                DEBUG(1, ("Could not receive trustdoms\n"));
                talloc_destroy(state->mem_ctx);
                return;
        }

        p = (char *)response->extra_data.data;

        while ((p != NULL) && (*p != '\0')) {
                char *q, *sidstr, *alt_name;
                DOM_SID sid;

                alt_name = strchr(p, '\\');
                if (alt_name == NULL) {
                        DEBUG(0, ("Got invalid trustdom response\n"));
                        break;
                }

                *alt_name = '\0';
                alt_name += 1;

                sidstr = strchr(alt_name, '\\');
                if (sidstr == NULL) {
                        DEBUG(0, ("Got invalid trustdom response\n"));
                        break;
                }

                *sidstr = '\0';
                sidstr += 1;

                q = strchr(sidstr, '\n');
                if (q != NULL)
                        *q = '\0';

                if (!string_to_sid(&sid, sidstr)) {
                        /* Allow NULL sid for sibling domains */
                        if ( strcmp(sidstr,"S-0-0") == 0) {
                                sid_copy( &sid, &global_sid_NULL);                              
                        } else {                                
                                DEBUG(0, ("Got invalid trustdom response\n"));
                                break;
                        }                       
                }

                if (find_domain_from_name_noinit(p) == NULL) {
                        struct winbindd_domain *domain;
                        char *alternate_name = NULL;
                        
                        /* use the real alt_name if we have one, else pass in NULL */

                        if ( !strequal( alt_name, "(null)" ) )
                                alternate_name = alt_name;

                        domain = add_trusted_domain(p, alternate_name,
                                                    &cache_methods,
                                                    &sid);
                        setup_domain_child(domain, &domain->child, NULL);
                }
                p=q;
                if (p != NULL)
                        p += 1;
        }

        SAFE_FREE(response->extra_data.data);
        talloc_destroy(state->mem_ctx);
}

static void add_trusted_domains

(

struct winbindd_domain *

domain

)

[static]

winbindd_util.c の 188 行で定義されています。

参照先 async_domain_request()・winbindd_request::cmd・winbindd_request::length・trustdom_state::mem_ctx・trustdom_state::response・talloc_init()・trustdom_recv()・WINBINDD_LIST_TRUSTDOM.

参照元 rescan_trusted_domains().

{
        TALLOC_CTX *mem_ctx;
        struct winbindd_request *request;
        struct winbindd_response *response;

        struct trustdom_state *state;

        mem_ctx = talloc_init("add_trusted_domains");
        if (mem_ctx == NULL) {
                DEBUG(0, ("talloc_init failed\n"));
                return;
        }

        request = TALLOC_ZERO_P(mem_ctx, struct winbindd_request);
        response = TALLOC_P(mem_ctx, struct winbindd_response);
        state = TALLOC_P(mem_ctx, struct trustdom_state);

        if ((request == NULL) || (response == NULL) || (state == NULL)) {
                DEBUG(0, ("talloc failed\n"));
                talloc_destroy(mem_ctx);
                return;
        }

        state->mem_ctx = mem_ctx;
        state->response = response;

        request->length = sizeof(*request);
        request->cmd = WINBINDD_LIST_TRUSTDOM;

        async_domain_request(mem_ctx, domain, request, response,
                             trustdom_recv, state);
}

void rescan_trusted_domains

(

void

)

winbindd_util.c の 300 行で定義されています。

参照先 add_trusted_domains()・find_our_domain()・last_trustdom_scan.

参照元 process_loop().

{
        time_t now = time(NULL);
        
        /* see if the time has come... */
        
        if ((now >= last_trustdom_scan) &&
            ((now-last_trustdom_scan) < WINBINDD_RESCAN_FREQ) )
                return;
                
        /* this will only add new domains we didn't already know about */
        
        add_trusted_domains( find_our_domain() );

        last_trustdom_scan = now;
        
        return; 
}

static void init_child_recv	(	void *	private_data,
		BOOL	success
	)			[static]

winbindd_util.c の 414 行で定義されています。

参照先 winbindd_domain::active_directory・winbindd_domain::alt_name・init_child_state::continuation・winbindd_response::data・init_child_state::domain・winbindd_response::domain_info・init_dc_connection()・init_child_state::mem_ctx・winbindd_domain::name・winbindd_domain::native_mode・init_child_state::private_data・init_child_state::response・winbindd_response::result・winbindd_domain::sequence_number・winbindd_domain::sid・string_to_sid()・WINBINDD_OK.

参照元 init_child_connection()・init_child_getdc_recv().

{
        struct init_child_state *state =
                talloc_get_type_abort(private_data, struct init_child_state);

        DEBUG(5, ("Received child initialization response for domain %s\n",
                  state->domain->name));

        if ((!success) || (state->response->result != WINBINDD_OK)) {
                DEBUG(3, ("Could not init child\n"));
                state->continuation(state->private_data, False);
                talloc_destroy(state->mem_ctx);
                return;
        }

        fstrcpy(state->domain->name,
                state->response->data.domain_info.name);
        fstrcpy(state->domain->alt_name,
                state->response->data.domain_info.alt_name);
        string_to_sid(&state->domain->sid,
                      state->response->data.domain_info.sid);
        state->domain->native_mode =
                state->response->data.domain_info.native_mode;
        state->domain->active_directory =
                state->response->data.domain_info.active_directory;
        state->domain->sequence_number =
                state->response->data.domain_info.sequence_number;

        init_dc_connection(state->domain);

        if (state->continuation != NULL)
                state->continuation(state->private_data, True);
        talloc_destroy(state->mem_ctx);
}

static void init_child_getdc_recv	(	void *	private_data,
		BOOL	success
	)			[static]

winbindd_util.c の 392 行で定義されています。

参照先 async_request()・winbindd_domain::child・winbindd_request::cmd・winbindd_request::data・winbindd_response::data・winbindd_response::dc_name・init_child_state::domain・winbindd_request::domain_name・init_child_recv()・winbindd_request::init_conn・init_child_state::mem_ctx・winbindd_domain::name・init_child_state::request・init_child_state::response・winbindd_response::result・WINBINDD_INIT_CONNECTION・WINBINDD_OK.

参照元 init_child_connection().

{
        struct init_child_state *state =
                talloc_get_type_abort(private_data, struct init_child_state);
        const char *dcname = "";

        DEBUG(10, ("Received getdcname response\n"));

        if (success && (state->response->result == WINBINDD_OK)) {
                dcname = state->response->data.dc_name;
        }

        state->request->cmd = WINBINDD_INIT_CONNECTION;
        fstrcpy(state->request->domain_name, state->domain->name);
        state->request->data.init_conn.is_primary = False;
        fstrcpy(state->request->data.init_conn.dcname, dcname);

        async_request(state->mem_ctx, &state->domain->child,
                      state->request, state->response,
                      init_child_recv, state);
}

enum winbindd_result init_child_connection	(	struct winbindd_domain *	domain,
		void(*)(void *private_data, BOOL success)	continuation,
		void *	private_data
	)

winbindd_util.c の 331 行で定義されています。

参照先 async_domain_request()・async_request()・winbindd_domain::child・winbindd_request::cmd・init_child_state::continuation・winbindd_request::data・init_child_state::domain・winbindd_request::domain_name・find_our_domain()・init_child_getdc_recv()・init_child_recv()・winbindd_request::init_conn・winbindd_request::length・init_child_state::mem_ctx・winbindd_domain::name・winbindd_domain::primary・init_child_state::private_data・init_child_state::request・init_child_state::response・talloc_init()・WINBINDD_ERROR・WINBINDD_GETDCNAME・WINBINDD_INIT_CONNECTION・WINBINDD_PENDING.

参照元 async_domain_request()・winbindd_domain_info().

{
        TALLOC_CTX *mem_ctx;
        struct winbindd_request *request;
        struct winbindd_response *response;
        struct init_child_state *state;
        struct winbindd_domain *request_domain;

        mem_ctx = talloc_init("init_child_connection");
        if (mem_ctx == NULL) {
                DEBUG(0, ("talloc_init failed\n"));
                return WINBINDD_ERROR;
        }

        request = TALLOC_ZERO_P(mem_ctx, struct winbindd_request);
        response = TALLOC_P(mem_ctx, struct winbindd_response);
        state = TALLOC_P(mem_ctx, struct init_child_state);

        if ((request == NULL) || (response == NULL) || (state == NULL)) {
                DEBUG(0, ("talloc failed\n"));
                TALLOC_FREE(mem_ctx);
                continuation(private_data, False);
                return WINBINDD_ERROR;
        }

        request->length = sizeof(*request);

        state->mem_ctx = mem_ctx;
        state->domain = domain;
        state->request = request;
        state->response = response;
        state->continuation = continuation;
        state->private_data = private_data;

        if (IS_DC || domain->primary) {
                /* The primary domain has to find the DC name itself */
                request->cmd = WINBINDD_INIT_CONNECTION;
                fstrcpy(request->domain_name, domain->name);
                request->data.init_conn.is_primary = True;
                fstrcpy(request->data.init_conn.dcname, "");
                async_request(mem_ctx, &domain->child, request, response,
                              init_child_recv, state);
                return WINBINDD_PENDING;
        }

        /* This is *not* the primary domain, let's ask our DC about a DC
         * name */

        request->cmd = WINBINDD_GETDCNAME;
        fstrcpy(request->domain_name, domain->name);

        request_domain = find_our_domain();
        
        async_domain_request(mem_ctx, request_domain, request, response,
                             init_child_getdc_recv, state);
        return WINBINDD_PENDING;
}

enum winbindd_result winbindd_dual_init_connection	(	struct winbindd_domain *	domain,
		struct winbindd_cli_state *	state
	)

winbindd_util.c の 449 行で定義されています。

参照先 winbindd_domain::active_directory・winbindd_domain::alt_name・winbindd_response::data・winbindd_request::data・winbindd_domain::dcname・init_child_state::domain・winbindd_response::domain_info・winbindd_request::domain_name・winbindd_request::init_conn・init_dc_connection()・winbindd_domain::initialized・winbindd_domain::name・winbindd_domain::native_mode・winbindd_domain::online・winbindd_domain::primary・winbindd_cli_state::request・winbindd_cli_state::response・winbindd_domain::sequence_number・winbindd_domain::sid・sid_string_static()・WINBINDD_OK.

{
        /* Ensure null termination */
        state->request.domain_name
                [sizeof(state->request.domain_name)-1]='\0';
        state->request.data.init_conn.dcname
                [sizeof(state->request.data.init_conn.dcname)-1]='\0';

        if (strlen(state->request.data.init_conn.dcname) > 0) {
                fstrcpy(domain->dcname, state->request.data.init_conn.dcname);
        }

        init_dc_connection(domain);

        if (!domain->initialized) {
                /* If we return error here we can't do any cached authentication,
                   but we may be in disconnected mode and can't initialize correctly.
                   Do what the previous code did and just return without initialization,
                   once we go online we'll re-initialize.
                */
                DEBUG(5, ("winbindd_dual_init_connection: %s returning without initialization "
                        "online = %d\n", domain->name, (int)domain->online ));
        }

        fstrcpy(state->response.data.domain_info.name, domain->name);
        fstrcpy(state->response.data.domain_info.alt_name, domain->alt_name);
        fstrcpy(state->response.data.domain_info.sid,
                sid_string_static(&domain->sid));
        
        state->response.data.domain_info.native_mode
                = domain->native_mode;
        state->response.data.domain_info.active_directory
                = domain->active_directory;
        state->response.data.domain_info.primary
                = domain->primary;
        state->response.data.domain_info.sequence_number =
                domain->sequence_number;

        return WINBINDD_OK;
}

BOOL init_domain_list

(

void

)

winbindd_util.c の 492 行で定義されています。

参照先 add_trusted_domain()・builtin_passdb_methods・cache_methods・winbindd_domain::child・free_domain_list()・get_global_sam_name()・get_global_sam_sid()・global_sid_Builtin・lp_workgroup()・winbindd_domain::primary・ROLE_DOMAIN_MEMBER・sam_passdb_methods・secrets_fetch_domain_sid()・set_domain_online_request()・setup_domain_child().

参照元 domain_list()・main().

{
        struct winbindd_domain *domain;
        int role = lp_server_role();

        /* Free existing list */
        free_domain_list();

        /* Add ourselves as the first entry. */

        if ( role == ROLE_DOMAIN_MEMBER ) {
                DOM_SID our_sid;

                if (!secrets_fetch_domain_sid(lp_workgroup(), &our_sid)) {
                        DEBUG(0, ("Could not fetch our SID - did we join?\n"));
                        return False;
                }
        
                domain = add_trusted_domain( lp_workgroup(), lp_realm(),
                                             &cache_methods, &our_sid);
                domain->primary = True;
                setup_domain_child(domain, &domain->child, NULL);
                
                /* Even in the parent winbindd we'll need to
                   talk to the DC, so try and see if we can
                   contact it. Theoretically this isn't neccessary
                   as the init_dc_connection() in init_child_recv()
                   will do this, but we can start detecting the DC
                   early here. */
                set_domain_online_request(domain);
        }

        /* Local SAM */

        domain = add_trusted_domain(get_global_sam_name(), NULL,
                                    &sam_passdb_methods, get_global_sam_sid());
        if ( role != ROLE_DOMAIN_MEMBER ) {
                domain->primary = True;
        }
        setup_domain_child(domain, &domain->child, NULL);

        /* BUILTIN domain */

        domain = add_trusted_domain("BUILTIN", NULL, &builtin_passdb_methods,
                                    &global_sid_Builtin);
        setup_domain_child(domain, &domain->child, NULL);

        return True;
}

struct winbindd_domain* find_domain_from_name_noinit

(

const char *

domain_name

)

Given a domain name, return the struct winbindd domain info for it

覚え書き:

Do *not* pass lp_workgroup() to this function. domain_list may modify it's value, and free that pointer. Instead, our local domain may be found by calling find_our_domain(). directly.

戻り値:

The domain structure for the named domain, if it is working.

winbindd_util.c の 554 行で定義されています。

参照先 winbindd_domain::alt_name・domain_list()・winbindd_domain::name・winbindd_domain::next・strequal().

参照元 find_auth_domain()・find_domain_from_name()・find_lookup_domain_from_name()・idmap_rid_id_to_sid()・trustdom_recv()・winbindd_domain_info()・winbindd_getgroups()・winbindd_show_sequence().

{
        struct winbindd_domain *domain;

        /* Search through list */

        for (domain = domain_list(); domain != NULL; domain = domain->next) {
                if (strequal(domain_name, domain->name) ||
                    (domain->alt_name[0] &&
                     strequal(domain_name, domain->alt_name))) {
                        return domain;
                }
        }

        /* Not found */

        return NULL;
}

struct winbindd_domain* find_domain_from_name

(

const char *

domain_name

)

winbindd_util.c の 573 行で定義されています。

参照先 find_domain_from_name_noinit()・init_dc_connection()・winbindd_domain::initialized.

参照元 convert_fn()・find_root_domain()・get_sam_group_entries()・get_sam_user_entries()・krb5_ticket_gain_handler()・winbindd_dual_pam_auth()・winbindd_dual_pam_auth_crap()・winbindd_dual_pam_auth_kerberos()・winbindd_dual_pam_auth_samlogon()・winbindd_getgrent()・winbindd_getgrnam()・winbindd_getpwnam()・winbindd_gettoken_async()・winbindd_pam_chauthtok()・winbindd_pam_chng_pswd_auth_crap().

{
        struct winbindd_domain *domain;

        domain = find_domain_from_name_noinit(domain_name);

        if (domain == NULL)
                return NULL;

        if (!domain->initialized)
                init_dc_connection(domain);

        return domain;
}

struct winbindd_domain* find_domain_from_sid_noinit

(

const DOM_SID *

sid

)

winbindd_util.c の 590 行で定義されています。

参照先 domain_list()・winbindd_domain::next・winbindd_domain::sid・sid_compare_domain().

参照元 find_domain_from_sid()・find_idmap_domain_from_sid()・getgrgid_got_sid()・winbindd_getpwsid()・winbindd_gettoken_async()・winbindd_getuserdomgroups().

{
        struct winbindd_domain *domain;

        /* Search through list */

        for (domain = domain_list(); domain != NULL; domain = domain->next) {
                if (sid_compare_domain(sid, &domain->sid) == 0)
                        return domain;
        }

        /* Not found */

        return NULL;
}

struct winbindd_domain* find_domain_from_sid

(

const DOM_SID *

sid

)

winbindd_util.c の 608 行で定義されています。

参照先 find_domain_from_sid_noinit()・init_dc_connection()・winbindd_domain::initialized・winbindd_domain::sid.

参照元 add_expanded_sid()・find_builtin_domain()・find_lookup_domain_from_sid().

{
        struct winbindd_domain *domain;

        domain = find_domain_from_sid_noinit(sid);

        if (domain == NULL)
                return NULL;

        if (!domain->initialized)
                init_dc_connection(domain);

        return domain;
}

struct winbindd_domain* find_our_domain

(

void

)

winbindd_util.c の 623 行で定義されています。

参照先 domain_list()・winbindd_domain::next・winbindd_domain::primary・smb_panic().

参照元 ads_cached_connection()・find_auth_domain()・find_lookup_domain_from_name()・find_lookup_domain_from_sid()・find_root_domain()・get_cache()・get_dc_name_via_netlogon()・idmap_can_map()・init_child_connection()・rescan_trusted_domains()・winbindd_check_machine_acct()・winbindd_dual_check_machine_acct()・winbindd_dual_pam_auth_crap()・winbindd_dual_pam_auth_kerberos()・winbindd_dual_pam_auth_samlogon()・winbindd_getdcname()・winbindd_gettoken_async()・winbindd_list_trusted_domains().

{
        struct winbindd_domain *domain;

        /* Search through list */

        for (domain = domain_list(); domain != NULL; domain = domain->next) {
                if (domain->primary)
                        return domain;
        }

        smb_panic("Could not find our domain\n");
        return NULL;
}

struct winbindd_domain* find_root_domain

(

void

)

winbindd_util.c の 638 行で定義されています。

参照先 find_domain_from_name()・find_our_domain()・winbindd_domain::forest_name.

参照元 lookupname_recv().

{
        struct winbindd_domain *ours = find_our_domain();       
        
        if ( !ours )
                return NULL;
        
        if ( strlen(ours->forest_name) == 0 )
                return NULL;
        
        return find_domain_from_name( ours->forest_name );
}

struct winbindd_domain* find_builtin_domain

(

void

)

winbindd_util.c の 651 行で定義されています。

参照先 find_domain_from_sid()・winbindd_domain::sid・smb_panic()・string_to_sid().

参照元 winbindd_gettoken_async().

{
        DOM_SID sid;
        struct winbindd_domain *domain;

        string_to_sid(&sid, "S-1-5-32");
        domain = find_domain_from_sid(&sid);

        if (domain == NULL)
                smb_panic("Could not find BUILTIN domain\n");

        return domain;
}

struct winbindd_domain* find_lookup_domain_from_sid

(

const DOM_SID *

sid

)

winbindd_util.c の 667 行で定義されています。

参照先 find_domain_from_sid()・find_our_domain()・is_in_internal_domain()・is_internal_domain()・winbindd_domain::sid・sid_string_static().

参照元 add_expanded_sid()・lookup_cached_sid()・winbindd_lookup_name_by_sid()・winbindd_lookuprids()・winbindd_lookupsid_async().

{
        /* A DC can't ask the local smbd for remote SIDs, here winbindd is the
         * one to contact the external DC's. On member servers the internal
         * domains are different: These are part of the local SAM. */

        DEBUG(10, ("find_lookup_domain_from_sid(%s)\n",
                   sid_string_static(sid)));

        if (IS_DC || is_internal_domain(sid) || is_in_internal_domain(sid)) {
                DEBUG(10, ("calling find_domain_from_sid\n"));
                return find_domain_from_sid(sid);
        }

        /* On a member server a query for SID or name can always go to our
         * primary DC. */

        DEBUG(10, ("calling find_our_domain\n"));
        return find_our_domain();
}

struct winbindd_domain* find_lookup_domain_from_name

(

const char *

domain_name

)

winbindd_util.c の 688 行で定義されています。

参照先 find_domain_from_name_noinit()・find_our_domain()・get_global_sam_name()・strequal().

参照元 lookup_cached_name()・winbindd_lookupname_async().

{
        if (IS_DC || strequal(domain_name, "BUILTIN") ||
            strequal(domain_name, get_global_sam_name()))
                return find_domain_from_name_noinit(domain_name);

        return find_our_domain();
}

BOOL winbindd_lookup_sid_by_name	(	TALLOC_CTX *	mem_ctx,
		struct winbindd_domain *	domain,
		const char *	domain_name,
		const char *	name,
		DOM_SID *	sid,
		enum lsa_SidType *	type
	)

winbindd_util.c の 699 行で定義されています。

参照先 winbindd_domain::methods・winbindd_methods::name_to_sid・result・winbindd_domain::sid・SID_NAME_UNKNOWN.

参照元 winbindd_dual_lookupname()・winbindd_getgrnam().

{
        NTSTATUS result;

        /* Lookup name */
        result = domain->methods->name_to_sid(domain, mem_ctx, domain_name, name, sid, type);

        /* Return sid and type if lookup successful */
        if (!NT_STATUS_IS_OK(result)) {
                *type = SID_NAME_UNKNOWN;
        }

        return NT_STATUS_IS_OK(result);
}

BOOL winbindd_lookup_name_by_sid	(	TALLOC_CTX *	mem_ctx,
		DOM_SID *	sid,
		char **	dom_name,
		char **	name,
		enum lsa_SidType *	type
	)

Lookup a name in a domain from a sid.

引数:

	sid	Security ID you want to look up.
	name	On success, set to the name corresponding to sid.
	dom_name	On success, set to the 'domain name' corresponding to sid.
	type	On success, contains the type of name: alias, group or user.

戻り値:

True

if the name exists, in which case name and type are set, otherwise False.

winbindd_util.c の 729 行で定義されています。

参照先 find_lookup_domain_from_sid()・winbindd_domain::methods・result・winbindd_domain::sid・SID_NAME_UNKNOWN・winbindd_methods::sid_to_name.

参照元 getgrgid_got_sid()・winbindd_dual_lookupsid().

{
        NTSTATUS result;
        struct winbindd_domain *domain;

        *dom_name = NULL;
        *name = NULL;

        domain = find_lookup_domain_from_sid(sid);

        if (!domain) {
                DEBUG(1,("Can't find domain from sid\n"));
                return False;
        }

        /* Lookup name */

        result = domain->methods->sid_to_name(domain, mem_ctx, sid, dom_name, name, type);

        /* Return name and type if successful */
        
        if (NT_STATUS_IS_OK(result)) {
                return True;
        }

        *type = SID_NAME_UNKNOWN;
        
        return False;
}

void free_getent_state

(

struct getent_state *

state

)

winbindd_util.c の 765 行で定義されています。

参照先 getent_state::next・getent_state::sam_entries.

参照元 remove_client()・winbindd_endgrent()・winbindd_endpwent()・winbindd_setgrent_internal()・winbindd_setpwent_internal().

{
        struct getent_state *temp;

        /* Iterate over state list */

        temp = state;

        while(temp != NULL) {
                struct getent_state *next;

                /* Free sam entries then list entry */

                SAFE_FREE(state->sam_entries);
                DLIST_REMOVE(state, state);
                next = temp->next;

                SAFE_FREE(temp);
                temp = next;
        }
}

static BOOL assume_domain

(

const char *

domain

)

[static]

winbindd_util.c の 789 行で定義されています。

参照先 get_global_sam_name()・lp_workgroup()・ROLE_DOMAIN_MEMBER・ROLE_STANDALONE・strequal().

参照元 fill_domain_username()・parse_domain_user().

{
        /* never assume the domain on a standalone server */

        if ( lp_server_role() == ROLE_STANDALONE )
                return False;

        /* domain member servers may possibly assume for the domain name */

        if ( lp_server_role() == ROLE_DOMAIN_MEMBER ) {
                if ( !strequal(lp_workgroup(), domain) )
                        return False;

                if ( lp_winbind_use_default_domain() || lp_winbind_trusted_domains_only() )
                        return True;
        } 

        /* only left with a domain controller */

        if ( strequal(get_global_sam_name(), domain) )  {
                return True;
        }
        
        return False;
}

BOOL parse_domain_user	(	const char *	domuser,
		fstring	domain,
		fstring	user
	)

winbindd_util.c の 817 行で定義されています。

参照先 assume_domain()・lp_workgroup()・strupper_m().

参照元 canonicalize_username()・parse_domain_user_talloc()・winbindd_dual_ccache_ntlm_auth()・winbindd_dual_pam_auth()・winbindd_dual_pam_auth_cached()・winbindd_dual_pam_auth_kerberos()・winbindd_dual_pam_auth_samlogon()・winbindd_dual_pam_chauthtok()・winbindd_dual_pam_chng_pswd_auth_crap()・winbindd_getgrnam()・winbindd_getpwnam()・winbindd_raw_kerberos_login().

{
        char *p = strchr(domuser,*lp_winbind_separator());

        if ( !p ) {
                fstrcpy(user, domuser);

                if ( assume_domain(lp_workgroup())) {
                        fstrcpy(domain, lp_workgroup());
                } else {
                        return False;
                }
        } else {
                fstrcpy(user, p+1);
                fstrcpy(domain, domuser);
                domain[PTR_DIFF(p, domuser)] = 0;
        }
        
        strupper_m(domain);
        
        return True;
}

BOOL parse_domain_user_talloc	(	TALLOC_CTX *	mem_ctx,
		const char *	domuser,
		char **	domain,
		char **	user
	)

winbindd_util.c の 840 行で定義されています。

参照先 parse_domain_user()・talloc_strdup().

参照元 winbindd_getgroups().

{
        fstring fstr_domain, fstr_user;
        if (!parse_domain_user(domuser, fstr_domain, fstr_user)) {
                return False;
        }
        *domain = talloc_strdup(mem_ctx, fstr_domain);
        *user = talloc_strdup(mem_ctx, fstr_user);
        return ((*domain != NULL) && (*user != NULL));
}

BOOL canonicalize_username	(	fstring	username_inout,
		fstring	domain,
		fstring	user
	)

winbindd_util.c の 861 行で定義されています。

参照先 parse_domain_user().

参照元 winbindd_ccache_ntlm_auth()・winbindd_pam_auth()・winbindd_pam_chauthtok()・winbindd_pam_logoff().

{
        if (!parse_domain_user(username_inout, domain, user)) {
                return False;
        }
        slprintf(username_inout, sizeof(fstring) - 1, "%s%c%s",
                 domain, *lp_winbind_separator(),
                 user);
        return True;
}

void fill_domain_username	(	fstring	name,
		const char *	domain,
		const char *	user,
		BOOL	can_assume
	)

winbindd_util.c の 886 行で定義されています。

参照先 assume_domain()・strlcpy()・strlower_m().

参照元 add_member()・fill_grent()・fill_grent_mem()・getpwsid_sid2gid_recv()・winbindd_dual_pam_auth()・winbindd_dual_pam_auth_crap()・winbindd_fill_pwent()・winbindd_getgrent()・winbindd_list_groups()・winbindd_list_users().

{
        fstring tmp_user;

        fstrcpy(tmp_user, user);
        strlower_m(tmp_user);

        if (can_assume && assume_domain(domain)) {
                strlcpy(name, tmp_user, sizeof(fstring));
        } else {
                slprintf(name, sizeof(fstring) - 1, "%s%c%s",
                         domain, *lp_winbind_separator(),
                         tmp_user);
        }
}

char* get_winbind_priv_pipe_dir

(

void

)

winbindd_util.c の 906 行で定義されています。

参照先 lock_path().

参照元 open_winbindd_priv_socket()・winbindd_pam_auth_crap()・winbindd_priv_pipe_dir().

{
        return lock_path(WINBINDD_PRIV_SOCKET_SUBDIR);
}

int open_winbindd_socket

(

void

)

winbindd_util.c の 916 行で定義されています。

参照先 create_pipe_sock().

参照元 process_loop().

{
        if (_winbindd_socket == -1) {
                _winbindd_socket = create_pipe_sock(
                        WINBINDD_SOCKET_DIR, WINBINDD_SOCKET_NAME, 0755);
                DEBUG(10, ("open_winbindd_socket: opened socket fd %d\n",
                           _winbindd_socket));
        }

        return _winbindd_socket;
}

int open_winbindd_priv_socket

(

void

)

winbindd_util.c の 928 行で定義されています。

参照先 create_pipe_sock()・get_winbind_priv_pipe_dir().

参照元 process_loop().

{
        if (_winbindd_priv_socket == -1) {
                _winbindd_priv_socket = create_pipe_sock(
                        get_winbind_priv_pipe_dir(), WINBINDD_SOCKET_NAME, 0750);
                DEBUG(10, ("open_winbindd_priv_socket: opened socket fd %d\n",
                           _winbindd_priv_socket));
        }

        return _winbindd_priv_socket;
}

void close_winbindd_socket

(

void

)

winbindd_util.c の 942 行で定義されています。

{
        if (_winbindd_socket != -1) {
                DEBUG(10, ("close_winbindd_socket: closing socket fd %d\n",
                           _winbindd_socket));
                close(_winbindd_socket);
                _winbindd_socket = -1;
        }
        if (_winbindd_priv_socket != -1) {
                DEBUG(10, ("close_winbindd_socket: closing socket fd %d\n",
                           _winbindd_priv_socket));
                close(_winbindd_priv_socket);
                _winbindd_priv_socket = -1;
        }
}

struct winbindd_cli_state* winbindd_client_list

(

void

)

winbindd_util.c の 967 行で定義されています。

参照先 _client_list.

参照元 process_loop()・remove_idle_client()・winbindd_kill_all_clients()・winbindd_status().

{
        return _client_list;
}

void winbindd_add_client

(

struct winbindd_cli_state *

cli

)

winbindd_util.c の 974 行で定義されています。

参照先 _client_list・cli.

参照元 new_connection().

{
        DLIST_ADD(_client_list, cli);
        _num_clients++;
}

void winbindd_remove_client

(

struct winbindd_cli_state *

cli

)

winbindd_util.c の 982 行で定義されています。

参照先 _client_list・cli.

参照元 remove_client()・winbindd_kill_all_clients().

{
        DLIST_REMOVE(_client_list, cli);
        _num_clients--;
}

void winbindd_kill_all_clients

(

void

)

winbindd_util.c の 990 行で定義されています。

参照先 winbindd_cli_state::next・winbindd_client_list()・winbindd_remove_client().

{
        struct winbindd_cli_state *cl = winbindd_client_list();

        DEBUG(10, ("winbindd_kill_all_clients: going postal\n"));

        while (cl) {
                struct winbindd_cli_state *next;
                
                next = cl->next;
                winbindd_remove_client(cl);
                cl = next;
        }
}

int winbindd_num_clients

(

void

)

winbindd_util.c の 1007 行で定義されています。

参照元 winbindd_status().

{
        return _num_clients;
}

NTSTATUS lookup_usergroups_cached	(	struct winbindd_domain *	domain,
		TALLOC_CTX *	mem_ctx,
		const DOM_SID *	user_sid,
		uint32 *	p_num_groups,
		DOM_SID **	user_sids
	)

winbindd_util.c の 1012 行で定義されています。

参照先 add_sid_to_array()・net_user_info_3::dom_sid・DOM_GID::g_rid・net_user_info_3::gids・netsamlogon_cache_get()・net_user_info_3::num_groups・DOM_SID2::sid・sid_append_rid()・sid_compose()・sid_copy()・status・net_user_info_3::user_rid.

参照元 lookup_usergroups().

{
        NET_USER_INFO_3 *info3 = NULL;
        NTSTATUS status = NT_STATUS_NO_MEMORY;
        int i;
        size_t num_groups = 0;
        DOM_SID group_sid, primary_group;
        
        DEBUG(3,(": lookup_usergroups_cached\n"));
        
        *user_sids = NULL;
        num_groups = 0;
        *p_num_groups = 0;

        info3 = netsamlogon_cache_get(mem_ctx, user_sid);

        if (info3 == NULL) {
                return NT_STATUS_OBJECT_NAME_NOT_FOUND;
        }

        if (info3->num_groups == 0) {
                TALLOC_FREE(info3);
                return NT_STATUS_UNSUCCESSFUL;
        }
        
        /* always add the primary group to the sid array */
        sid_compose(&primary_group, &info3->dom_sid.sid, info3->user_rid);
        
        if (!add_sid_to_array(mem_ctx, &primary_group, user_sids, &num_groups)) {
                TALLOC_FREE(info3);
                return NT_STATUS_NO_MEMORY;
        }

        for (i=0; i<info3->num_groups; i++) {
                sid_copy(&group_sid, &info3->dom_sid.sid);
                sid_append_rid(&group_sid, info3->gids[i].g_rid);

                if (!add_sid_to_array(mem_ctx, &group_sid, user_sids,
                                 &num_groups)) {
                        TALLOC_FREE(info3);
                        return NT_STATUS_NO_MEMORY;
                }
        }

        TALLOC_FREE(info3);
        *p_num_groups = num_groups;
        status = (user_sids != NULL) ? NT_STATUS_OK : NT_STATUS_NO_MEMORY;
        
        DEBUG(3,(": lookup_usergroups_cached succeeded\n"));

        return status;
}

void ws_name_replace	(	char *	name,
		char	replace
	)

winbindd_util.c の 1072 行で定義されています。

参照先 all_string_sub()・replace_char().

参照元 getpwsid_queryuser_recv()・msrpc_rids_to_names()・msrpc_sid_to_name()・winbindd_getgrnam().

{
        char replace_char[2] = { 0x0, 0x0 };
    
        if ( !lp_winbind_normalize_names() || (replace == '\0') ) 
                return;

        replace_char[0] = replace;      
        all_string_sub( name, " ", replace_char, 0 );

        return; 
}

void ws_name_return	(	char *	name,
		char	replace
	)

winbindd_util.c の 1089 行で定義されています。

参照先 all_string_sub()・replace_char().

参照元 msrpc_name_to_sid()・winbindd_dual_pam_auth()・winbindd_getgroups()・winbindd_getpwnam()・winbindd_pam_auth().

{
        char replace_char[2] = { 0x0, 0x0 };
    
        if ( !lp_winbind_normalize_names() || (replace == '\0') ) 
                return;
        
        replace_char[0] = replace;      
        all_string_sub( name, replace_char, " ", 0 );

        return; 
}

---

変数

struct winbindd_methods cache_methods

winbindd_cache.c の 2721 行で定義されています。

参照元 init_domain_list()・trustdom_recv().

struct winbindd_methods builtin_passdb_methods

winbindd_passdb.c の 668 行で定義されています。

struct winbindd_methods sam_passdb_methods

winbindd_passdb.c の 687 行で定義されています。

参照元 init_domain_list().

struct winbindd_domain* _domain_list [static]

winbindd_util.c の 46 行で定義されています。

参照元 add_trusted_domain()・domain_list()・free_domain_list().

time_t last_trustdom_scan [static]

When was the last scan of trusted domains done?

0 == not ever

winbindd_util.c の 54 行で定義されています。

参照元 rescan_trusted_domains().

int _winbindd_socket = -1 [static]

winbindd_util.c の 913 行で定義されています。

int _winbindd_priv_socket = -1 [static]

winbindd_util.c の 914 行で定義されています。

struct winbindd_cli_state* _client_list [static]

winbindd_util.c の 962 行で定義されています。

参照元 winbindd_add_client()・winbindd_client_list()・winbindd_remove_client().

int _num_clients [static]

winbindd_util.c の 963 行で定義されています。

---