|
Packit |
6c4009 |
/* Copyright (C) 1996-2018 Free Software Foundation, Inc.
|
|
Packit |
6c4009 |
This file is part of the GNU C Library.
|
|
Packit |
6c4009 |
Contributed by Thorsten Kukuk <kukuk@suse.de>, 1996.
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
The GNU C Library is free software; you can redistribute it and/or
|
|
Packit |
6c4009 |
modify it under the terms of the GNU Lesser General Public
|
|
Packit |
6c4009 |
License as published by the Free Software Foundation; either
|
|
Packit |
6c4009 |
version 2.1 of the License, or (at your option) any later version.
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
The GNU C Library is distributed in the hope that it will be useful,
|
|
Packit |
6c4009 |
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
Packit |
6c4009 |
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
Packit |
6c4009 |
Lesser General Public License for more details.
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
You should have received a copy of the GNU Lesser General Public
|
|
Packit |
6c4009 |
License along with the GNU C Library; if not, see
|
|
Packit |
6c4009 |
<http://www.gnu.org/licenses/>. */
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
#include <nss.h>
|
|
Packit |
6c4009 |
#include <ctype.h>
|
|
Packit |
6c4009 |
#include <errno.h>
|
|
Packit |
6c4009 |
#include <string.h>
|
|
Packit |
6c4009 |
#include <syslog.h>
|
|
Packit |
6c4009 |
#include <rpc/rpc.h>
|
|
Packit |
6c4009 |
#include <rpcsvc/yp.h>
|
|
Packit |
6c4009 |
#include <rpcsvc/ypclnt.h>
|
|
Packit |
6c4009 |
#include <rpc/key_prot.h>
|
|
Packit |
6c4009 |
#include <rpc/des_crypt.h>
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
#include "nss-nis.h"
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
/* If we haven't found the entry, we give a SUCCESS and an empty key back.
|
|
Packit |
6c4009 |
Solaris docu says: sizeof (pkey) == HEXKEYBYTES + 1.
|
|
Packit |
6c4009 |
*/
|
|
Packit |
6c4009 |
enum nss_status
|
|
Packit |
6c4009 |
_nss_nis_getpublickey (const char *netname, char *pkey, int *errnop)
|
|
Packit |
6c4009 |
{
|
|
Packit |
6c4009 |
pkey[0] = 0;
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
if (netname == NULL)
|
|
Packit |
6c4009 |
{
|
|
Packit |
6c4009 |
*errnop = EINVAL;
|
|
Packit |
6c4009 |
return NSS_STATUS_UNAVAIL;
|
|
Packit |
6c4009 |
}
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
char *domain = strchr (netname, '@');
|
|
Packit |
6c4009 |
if (domain == NULL)
|
|
Packit |
6c4009 |
{
|
|
Packit |
6c4009 |
*errnop = EINVAL;
|
|
Packit |
6c4009 |
return NSS_STATUS_UNAVAIL;
|
|
Packit |
6c4009 |
}
|
|
Packit |
6c4009 |
++domain;
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
char *result;
|
|
Packit |
6c4009 |
int len;
|
|
Packit |
6c4009 |
int yperr = yp_match (domain, "publickey.byname", netname, strlen (netname),
|
|
Packit |
6c4009 |
&result, &len;;
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
if (__glibc_unlikely (yperr != YPERR_SUCCESS))
|
|
Packit |
6c4009 |
{
|
|
Packit |
6c4009 |
enum nss_status retval = yperr2nss (yperr);
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
if (retval == NSS_STATUS_TRYAGAIN)
|
|
Packit |
6c4009 |
*errnop = errno;
|
|
Packit |
6c4009 |
return retval;
|
|
Packit |
6c4009 |
}
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
if (result != NULL)
|
|
Packit |
6c4009 |
{
|
|
Packit |
6c4009 |
char *p = strchr (result, ':');
|
|
Packit |
6c4009 |
if (p != NULL)
|
|
Packit |
6c4009 |
*p = 0;
|
|
Packit |
6c4009 |
strncpy (pkey, result, HEXKEYBYTES + 1);
|
|
Packit |
6c4009 |
pkey[HEXKEYBYTES] = '\0';
|
|
Packit |
6c4009 |
free (result);
|
|
Packit |
6c4009 |
}
|
|
Packit |
6c4009 |
return NSS_STATUS_SUCCESS;
|
|
Packit |
6c4009 |
}
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
enum nss_status
|
|
Packit |
6c4009 |
_nss_nis_getsecretkey (const char *netname, char *skey, char *passwd,
|
|
Packit |
6c4009 |
int *errnop)
|
|
Packit |
6c4009 |
{
|
|
Packit |
6c4009 |
skey[0] = 0;
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
if (netname == NULL || passwd == NULL)
|
|
Packit |
6c4009 |
{
|
|
Packit |
6c4009 |
*errnop = EINVAL;
|
|
Packit |
6c4009 |
return NSS_STATUS_UNAVAIL;
|
|
Packit |
6c4009 |
}
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
char *domain = strchr (netname, '@');
|
|
Packit |
6c4009 |
if (domain == NULL)
|
|
Packit |
6c4009 |
{
|
|
Packit |
6c4009 |
*errnop = EINVAL;
|
|
Packit |
6c4009 |
return NSS_STATUS_UNAVAIL;
|
|
Packit |
6c4009 |
}
|
|
Packit |
6c4009 |
++domain;
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
char *result;
|
|
Packit |
6c4009 |
int len;
|
|
Packit |
6c4009 |
int yperr = yp_match (domain, "publickey.byname", netname, strlen (netname),
|
|
Packit |
6c4009 |
&result, &len;;
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
if (__glibc_unlikely (yperr != YPERR_SUCCESS))
|
|
Packit |
6c4009 |
{
|
|
Packit |
6c4009 |
enum nss_status retval = yperr2nss (yperr);
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
if (retval == NSS_STATUS_TRYAGAIN)
|
|
Packit |
6c4009 |
*errnop = errno;
|
|
Packit |
6c4009 |
return retval;
|
|
Packit |
6c4009 |
}
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
if (result != NULL)
|
|
Packit |
6c4009 |
{
|
|
Packit |
6c4009 |
char *p = strchr (result, ':');
|
|
Packit |
6c4009 |
if (p != NULL)
|
|
Packit |
6c4009 |
{
|
|
Packit |
6c4009 |
char buf[2 * (HEXKEYBYTES + 1)];
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
++p;
|
|
Packit |
6c4009 |
strncpy (buf, p, 2 * (HEXKEYBYTES + 1));
|
|
Packit |
6c4009 |
buf[2 * HEXKEYBYTES + 1] = '\0';
|
|
Packit |
6c4009 |
if (xdecrypt (buf, passwd)
|
|
Packit |
6c4009 |
&& memcmp (buf, &(buf[HEXKEYBYTES]), KEYCHECKSUMSIZE) == 0)
|
|
Packit |
6c4009 |
{
|
|
Packit |
6c4009 |
buf[HEXKEYBYTES] = '\0';
|
|
Packit |
6c4009 |
strcpy (skey, buf);
|
|
Packit |
6c4009 |
}
|
|
Packit |
6c4009 |
}
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
free (result);
|
|
Packit |
6c4009 |
}
|
|
Packit |
6c4009 |
return NSS_STATUS_SUCCESS;
|
|
Packit |
6c4009 |
}
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
/* Parse uid and group information from the passed string.
|
|
Packit |
6c4009 |
The format of the string passed is uid:gid,grp,grp, ... */
|
|
Packit |
6c4009 |
static enum nss_status
|
|
Packit |
6c4009 |
parse_netid_str (const char *s, uid_t *uidp, gid_t *gidp, int *gidlenp,
|
|
Packit |
6c4009 |
gid_t *gidlist)
|
|
Packit |
6c4009 |
{
|
|
Packit |
6c4009 |
char *p, *ep;
|
|
Packit |
6c4009 |
int gidlen;
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
if (!s || !isdigit (*s))
|
|
Packit |
6c4009 |
{
|
|
Packit |
6c4009 |
syslog (LOG_ERR, "netname2user: expecting uid '%s'", s);
|
|
Packit |
6c4009 |
return NSS_STATUS_NOTFOUND; /* XXX need a better error */
|
|
Packit |
6c4009 |
}
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
/* Fetch the uid */
|
|
Packit |
6c4009 |
*uidp = strtoul (s, NULL, 10);
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
if (*uidp == 0)
|
|
Packit |
6c4009 |
{
|
|
Packit |
6c4009 |
syslog (LOG_ERR, "netname2user: should not have uid 0");
|
|
Packit |
6c4009 |
return NSS_STATUS_NOTFOUND;
|
|
Packit |
6c4009 |
}
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
/* Now get the group list */
|
|
Packit |
6c4009 |
p = strchr (s, ':');
|
|
Packit |
6c4009 |
if (!p)
|
|
Packit |
6c4009 |
{
|
|
Packit |
6c4009 |
syslog (LOG_ERR, "netname2user: missing group id list in '%s'", s);
|
|
Packit |
6c4009 |
return NSS_STATUS_NOTFOUND;
|
|
Packit |
6c4009 |
}
|
|
Packit |
6c4009 |
++p; /* skip ':' */
|
|
Packit |
6c4009 |
if (!p || (!isdigit (*p)))
|
|
Packit |
6c4009 |
{
|
|
Packit |
6c4009 |
syslog (LOG_ERR, "netname2user: missing group id list in '%s'.", p);
|
|
Packit |
6c4009 |
return NSS_STATUS_NOTFOUND;
|
|
Packit |
6c4009 |
}
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
*gidp = strtoul (p, &ep, 10);
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
gidlen = 0;
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
/* After strtoul() ep should point to the first invalid character.
|
|
Packit |
6c4009 |
This is the marker "," we search for the next value. */
|
|
Packit |
6c4009 |
while (ep != NULL && *ep == ',')
|
|
Packit |
6c4009 |
{
|
|
Packit |
6c4009 |
ep++;
|
|
Packit |
6c4009 |
p = ep;
|
|
Packit |
6c4009 |
gidlist[gidlen++] = strtoul (p, &ep, 10);
|
|
Packit |
6c4009 |
}
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
*gidlenp = gidlen;
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
return NSS_STATUS_SUCCESS;
|
|
Packit |
6c4009 |
}
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
enum nss_status
|
|
Packit |
6c4009 |
_nss_nis_netname2user (char netname[MAXNETNAMELEN + 1], uid_t *uidp,
|
|
Packit |
6c4009 |
gid_t *gidp, int *gidlenp, gid_t *gidlist, int *errnop)
|
|
Packit |
6c4009 |
{
|
|
Packit |
6c4009 |
char *domain = strchr (netname, '@');
|
|
Packit |
6c4009 |
if (domain == NULL)
|
|
Packit |
6c4009 |
{
|
|
Packit |
6c4009 |
*errnop = EINVAL;
|
|
Packit |
6c4009 |
return NSS_STATUS_UNAVAIL;
|
|
Packit |
6c4009 |
}
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
/* Point past the '@' character */
|
|
Packit |
6c4009 |
++domain;
|
|
Packit |
6c4009 |
char *lookup = NULL;
|
|
Packit |
6c4009 |
int len;
|
|
Packit |
6c4009 |
int yperr = yp_match (domain, "netid.byname", netname, strlen (netname),
|
|
Packit |
6c4009 |
&lookup, &len;;
|
|
Packit |
6c4009 |
switch (yperr)
|
|
Packit |
6c4009 |
{
|
|
Packit |
6c4009 |
case YPERR_SUCCESS:
|
|
Packit |
6c4009 |
break; /* the successful case */
|
|
Packit |
6c4009 |
case YPERR_DOMAIN:
|
|
Packit |
6c4009 |
case YPERR_KEY:
|
|
Packit |
6c4009 |
return NSS_STATUS_NOTFOUND;
|
|
Packit |
6c4009 |
case YPERR_MAP:
|
|
Packit |
6c4009 |
default:
|
|
Packit |
6c4009 |
return NSS_STATUS_UNAVAIL;
|
|
Packit |
6c4009 |
}
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
if (lookup == NULL)
|
|
Packit |
6c4009 |
return NSS_STATUS_NOTFOUND;
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
lookup[len] = '\0';
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
enum nss_status err = parse_netid_str (lookup, uidp, gidp, gidlenp, gidlist);
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
free (lookup);
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
return err;
|
|
Packit |
6c4009 |
}
|