Imported Upstream version 4.8.10
This commit is contained in:
@@ -1,21 +1,18 @@
|
||||
NULL =
|
||||
|
||||
PLUGIN_COMMON_DIR=../common
|
||||
PLUGIN_COMMON_DIR = $(srcdir)/../common
|
||||
|
||||
AM_CPPFLAGS = \
|
||||
-I. \
|
||||
-I$(srcdir) \
|
||||
-I$(PLUGIN_COMMON_DIR) \
|
||||
-I$(KRB5_UTIL_DIR) \
|
||||
-I$(COMMON_BER_DIR) \
|
||||
-DPREFIX=\""$(prefix)"\" \
|
||||
-DBINDIR=\""$(bindir)"\" \
|
||||
-DLIBDIR=\""$(libdir)"\" \
|
||||
-DLIBEXECDIR=\""$(libexecdir)"\" \
|
||||
-DDATADIR=\""$(datadir)"\" \
|
||||
$(DIRSRV_CFLAGS) \
|
||||
$(LDAP_CFLAGS) \
|
||||
$(WARN_CFLAGS) \
|
||||
$(SSSIDMAP_CFLAGS) \
|
||||
$(SSSNSSIDMAP_CFLAGS) \
|
||||
$(NULL)
|
||||
|
||||
@@ -25,39 +22,58 @@ plugin_LTLIBRARIES = \
|
||||
$(NULL)
|
||||
|
||||
libipa_extdom_extop_la_SOURCES = \
|
||||
ipa_extdom.h \
|
||||
ipa_extdom_extop.c \
|
||||
ipa_extdom_common.c \
|
||||
back_extdom.h \
|
||||
$(NULL)
|
||||
|
||||
libipa_extdom_extop_la_LDFLAGS = -avoid-version
|
||||
|
||||
libipa_extdom_extop_la_LIBADD = \
|
||||
$(LDAP_LIBS) \
|
||||
$(SSSIDMAP_LIBS) \
|
||||
$(SSSNSSIDMAP_LIBS) \
|
||||
$(SSSNSSIDMAP_LIBS) \
|
||||
$(NULL)
|
||||
|
||||
if HAVE_CHECK
|
||||
TESTS = extdom_tests
|
||||
check_PROGRAMS = extdom_tests
|
||||
# We have two backends for nss operations:
|
||||
# (1) directly loading nss_sss.so.2
|
||||
# (2) using timeout-enabled API from libsss_nss_idmap
|
||||
# We prefer (2) if available
|
||||
if USE_SSS_NSS_TIMEOUT
|
||||
libipa_extdom_extop_la_SOURCES += back_extdom_sss_idmap.c
|
||||
else
|
||||
libipa_extdom_extop_la_SOURCES += back_extdom_nss_sss.c
|
||||
endif
|
||||
|
||||
extdom_tests_SOURCES = \
|
||||
ipa_extdom_tests.c \
|
||||
ipa_extdom_common.c \
|
||||
|
||||
TESTS =
|
||||
check_PROGRAMS =
|
||||
|
||||
if HAVE_CMOCKA
|
||||
if HAVE_UNSHARE
|
||||
TESTS += extdom_cmocka_tests
|
||||
check_PROGRAMS += extdom_cmocka_tests
|
||||
endif
|
||||
endif
|
||||
|
||||
extdom_cmocka_tests_SOURCES = \
|
||||
ipa_extdom_cmocka_tests.c \
|
||||
ipa_extdom_common.c \
|
||||
back_extdom_nss_sss.c \
|
||||
$(NULL)
|
||||
extdom_tests_CFLAGS = $(CHECK_CFLAGS)
|
||||
extdom_tests_LDFLAGS = \
|
||||
extdom_cmocka_tests_CFLAGS = $(CMOCKA_CFLAGS)
|
||||
extdom_cmocka_tests_LDFLAGS = \
|
||||
-rpath $(shell pkg-config --libs-only-L dirsrv | sed -e 's/-L//') \
|
||||
$(NULL)
|
||||
extdom_tests_LDADD = \
|
||||
$(CHECK_LIBS) \
|
||||
extdom_cmocka_tests_LDADD = \
|
||||
$(CMOCKA_LIBS) \
|
||||
$(LDAP_LIBS) \
|
||||
$(DIRSRV_LIBS) \
|
||||
$(SSSIDMAP_LIBS) \
|
||||
$(SSSNSSIDMAP_LIBS) \
|
||||
-ldl \
|
||||
$(NULL)
|
||||
|
||||
|
||||
appdir = $(IPA_DATA_DIR)
|
||||
app_DATA = \
|
||||
ipa-extdom-extop-conf.ldif \
|
||||
@@ -65,9 +81,6 @@ app_DATA = \
|
||||
|
||||
EXTRA_DIST = \
|
||||
README \
|
||||
test_data \
|
||||
$(app_DATA) \
|
||||
$(NULL)
|
||||
|
||||
MAINTAINERCLEANFILES = \
|
||||
*~ \
|
||||
Makefile.in
|
||||
|
||||
@@ -1,7 +1,7 @@
|
||||
# Makefile.in generated by automake 1.14.1 from Makefile.am.
|
||||
# Makefile.in generated by automake 1.16.2 from Makefile.am.
|
||||
# @configure_input@
|
||||
|
||||
# Copyright (C) 1994-2013 Free Software Foundation, Inc.
|
||||
# Copyright (C) 1994-2020 Free Software Foundation, Inc.
|
||||
|
||||
# This Makefile.in is free software; the Free Software Foundation
|
||||
# gives unlimited permission to copy and/or distribute it,
|
||||
@@ -16,7 +16,17 @@
|
||||
|
||||
|
||||
VPATH = @srcdir@
|
||||
am__is_gnu_make = test -n '$(MAKEFILE_LIST)' && test -n '$(MAKELEVEL)'
|
||||
am__is_gnu_make = { \
|
||||
if test -z '$(MAKELEVEL)'; then \
|
||||
false; \
|
||||
elif test -n '$(MAKE_HOST)'; then \
|
||||
true; \
|
||||
elif test -n '$(MAKE_VERSION)' && test -n '$(CURDIR)'; then \
|
||||
true; \
|
||||
else \
|
||||
false; \
|
||||
fi; \
|
||||
}
|
||||
am__make_running_with_option = \
|
||||
case $${target_option-} in \
|
||||
?) ;; \
|
||||
@@ -79,20 +89,36 @@ PRE_UNINSTALL = :
|
||||
POST_UNINSTALL = :
|
||||
build_triplet = @build@
|
||||
host_triplet = @host@
|
||||
@HAVE_CHECK_TRUE@TESTS = extdom_tests$(EXEEXT)
|
||||
@HAVE_CHECK_TRUE@check_PROGRAMS = extdom_tests$(EXEEXT)
|
||||
subdir = ipa-slapi-plugins/ipa-extdom-extop
|
||||
DIST_COMMON = $(srcdir)/Makefile.in $(srcdir)/Makefile.am \
|
||||
$(top_srcdir)/depcomp $(top_srcdir)/test-driver README
|
||||
|
||||
# We have two backends for nss operations:
|
||||
# (1) directly loading nss_sss.so.2
|
||||
# (2) using timeout-enabled API from libsss_nss_idmap
|
||||
# We prefer (2) if available
|
||||
@USE_SSS_NSS_TIMEOUT_TRUE@am__append_1 = back_extdom_sss_idmap.c
|
||||
@USE_SSS_NSS_TIMEOUT_FALSE@am__append_2 = back_extdom_nss_sss.c
|
||||
TESTS = $(am__EXEEXT_1)
|
||||
check_PROGRAMS = $(am__EXEEXT_1)
|
||||
@HAVE_CMOCKA_TRUE@@HAVE_UNSHARE_TRUE@am__append_3 = extdom_cmocka_tests
|
||||
@HAVE_CMOCKA_TRUE@@HAVE_UNSHARE_TRUE@am__append_4 = extdom_cmocka_tests
|
||||
subdir = daemons/ipa-slapi-plugins/ipa-extdom-extop
|
||||
ACLOCAL_M4 = $(top_srcdir)/aclocal.m4
|
||||
am__aclocal_m4_deps = $(top_srcdir)/../version.m4 \
|
||||
$(top_srcdir)/configure.ac
|
||||
am__aclocal_m4_deps = $(top_srcdir)/m4/gettext.m4 \
|
||||
$(top_srcdir)/m4/iconv.m4 $(top_srcdir)/m4/intlmacosx.m4 \
|
||||
$(top_srcdir)/m4/lib-ld.m4 $(top_srcdir)/m4/lib-link.m4 \
|
||||
$(top_srcdir)/m4/lib-prefix.m4 $(top_srcdir)/m4/libtool.m4 \
|
||||
$(top_srcdir)/m4/ltoptions.m4 $(top_srcdir)/m4/ltsugar.m4 \
|
||||
$(top_srcdir)/m4/ltversion.m4 $(top_srcdir)/m4/lt~obsolete.m4 \
|
||||
$(top_srcdir)/m4/nls.m4 $(top_srcdir)/m4/po.m4 \
|
||||
$(top_srcdir)/m4/progtest.m4 $(top_srcdir)/VERSION.m4 \
|
||||
$(top_srcdir)/server.m4 $(top_srcdir)/configure.ac
|
||||
am__configure_deps = $(am__aclocal_m4_deps) $(CONFIGURE_DEPENDENCIES) \
|
||||
$(ACLOCAL_M4)
|
||||
DIST_COMMON = $(srcdir)/Makefile.am $(am__DIST_COMMON)
|
||||
mkinstalldirs = $(install_sh) -d
|
||||
CONFIG_HEADER = $(top_builddir)/config.h
|
||||
CONFIG_CLEAN_FILES =
|
||||
CONFIG_CLEAN_VPATH_FILES =
|
||||
@HAVE_CMOCKA_TRUE@@HAVE_UNSHARE_TRUE@am__EXEEXT_1 = extdom_cmocka_tests$(EXEEXT)
|
||||
am__vpath_adj_setup = srcdirstrip=`echo "$(srcdir)" | sed 's|.|.|g'`;
|
||||
am__vpath_adj = case $$p in \
|
||||
$(srcdir)/*) f=`echo "$$p" | sed "s|^$$srcdirstrip/||"`;; \
|
||||
@@ -124,11 +150,16 @@ am__installdirs = "$(DESTDIR)$(plugindir)" "$(DESTDIR)$(appdir)"
|
||||
LTLIBRARIES = $(plugin_LTLIBRARIES)
|
||||
am__DEPENDENCIES_1 =
|
||||
libipa_extdom_extop_la_DEPENDENCIES = $(am__DEPENDENCIES_1) \
|
||||
$(am__DEPENDENCIES_1) $(am__DEPENDENCIES_1) \
|
||||
$(am__DEPENDENCIES_1)
|
||||
$(am__DEPENDENCIES_1) $(am__DEPENDENCIES_1)
|
||||
am__libipa_extdom_extop_la_SOURCES_DIST = ipa_extdom.h \
|
||||
ipa_extdom_extop.c ipa_extdom_common.c back_extdom.h \
|
||||
back_extdom_sss_idmap.c back_extdom_nss_sss.c
|
||||
am__objects_1 =
|
||||
@USE_SSS_NSS_TIMEOUT_TRUE@am__objects_2 = back_extdom_sss_idmap.lo
|
||||
@USE_SSS_NSS_TIMEOUT_FALSE@am__objects_3 = back_extdom_nss_sss.lo
|
||||
am_libipa_extdom_extop_la_OBJECTS = ipa_extdom_extop.lo \
|
||||
ipa_extdom_common.lo $(am__objects_1)
|
||||
ipa_extdom_common.lo $(am__objects_1) $(am__objects_2) \
|
||||
$(am__objects_3)
|
||||
libipa_extdom_extop_la_OBJECTS = $(am_libipa_extdom_extop_la_OBJECTS)
|
||||
AM_V_lt = $(am__v_lt_@AM_V@)
|
||||
am__v_lt_ = $(am__v_lt_@AM_DEFAULT_V@)
|
||||
@@ -138,16 +169,19 @@ libipa_extdom_extop_la_LINK = $(LIBTOOL) $(AM_V_lt) --tag=CC \
|
||||
$(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=link $(CCLD) \
|
||||
$(AM_CFLAGS) $(CFLAGS) $(libipa_extdom_extop_la_LDFLAGS) \
|
||||
$(LDFLAGS) -o $@
|
||||
am_extdom_tests_OBJECTS = extdom_tests-ipa_extdom_tests.$(OBJEXT) \
|
||||
extdom_tests-ipa_extdom_common.$(OBJEXT) $(am__objects_1)
|
||||
extdom_tests_OBJECTS = $(am_extdom_tests_OBJECTS)
|
||||
extdom_tests_DEPENDENCIES = $(am__DEPENDENCIES_1) \
|
||||
am_extdom_cmocka_tests_OBJECTS = \
|
||||
extdom_cmocka_tests-ipa_extdom_cmocka_tests.$(OBJEXT) \
|
||||
extdom_cmocka_tests-ipa_extdom_common.$(OBJEXT) \
|
||||
extdom_cmocka_tests-back_extdom_nss_sss.$(OBJEXT) \
|
||||
$(am__objects_1)
|
||||
extdom_cmocka_tests_OBJECTS = $(am_extdom_cmocka_tests_OBJECTS)
|
||||
extdom_cmocka_tests_DEPENDENCIES = $(am__DEPENDENCIES_1) \
|
||||
$(am__DEPENDENCIES_1) $(am__DEPENDENCIES_1) \
|
||||
$(am__DEPENDENCIES_1) $(am__DEPENDENCIES_1) \
|
||||
$(am__DEPENDENCIES_1)
|
||||
extdom_tests_LINK = $(LIBTOOL) $(AM_V_lt) --tag=CC $(AM_LIBTOOLFLAGS) \
|
||||
$(LIBTOOLFLAGS) --mode=link $(CCLD) $(extdom_tests_CFLAGS) \
|
||||
$(CFLAGS) $(extdom_tests_LDFLAGS) $(LDFLAGS) -o $@
|
||||
$(am__DEPENDENCIES_1) $(am__DEPENDENCIES_1)
|
||||
extdom_cmocka_tests_LINK = $(LIBTOOL) $(AM_V_lt) --tag=CC \
|
||||
$(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=link $(CCLD) \
|
||||
$(extdom_cmocka_tests_CFLAGS) $(CFLAGS) \
|
||||
$(extdom_cmocka_tests_LDFLAGS) $(LDFLAGS) -o $@
|
||||
AM_V_P = $(am__v_P_@AM_V@)
|
||||
am__v_P_ = $(am__v_P_@AM_DEFAULT_V@)
|
||||
am__v_P_0 = false
|
||||
@@ -162,7 +196,14 @@ am__v_at_0 = @
|
||||
am__v_at_1 =
|
||||
DEFAULT_INCLUDES = -I.@am__isrc@ -I$(top_builddir)
|
||||
depcomp = $(SHELL) $(top_srcdir)/depcomp
|
||||
am__depfiles_maybe = depfiles
|
||||
am__maybe_remake_depfiles = depfiles
|
||||
am__depfiles_remade = ./$(DEPDIR)/back_extdom_nss_sss.Plo \
|
||||
./$(DEPDIR)/back_extdom_sss_idmap.Plo \
|
||||
./$(DEPDIR)/extdom_cmocka_tests-back_extdom_nss_sss.Po \
|
||||
./$(DEPDIR)/extdom_cmocka_tests-ipa_extdom_cmocka_tests.Po \
|
||||
./$(DEPDIR)/extdom_cmocka_tests-ipa_extdom_common.Po \
|
||||
./$(DEPDIR)/ipa_extdom_common.Plo \
|
||||
./$(DEPDIR)/ipa_extdom_extop.Plo
|
||||
am__mv = mv -f
|
||||
COMPILE = $(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) \
|
||||
$(CPPFLAGS) $(AM_CFLAGS) $(CFLAGS)
|
||||
@@ -182,9 +223,10 @@ AM_V_CCLD = $(am__v_CCLD_@AM_V@)
|
||||
am__v_CCLD_ = $(am__v_CCLD_@AM_DEFAULT_V@)
|
||||
am__v_CCLD_0 = @echo " CCLD " $@;
|
||||
am__v_CCLD_1 =
|
||||
SOURCES = $(libipa_extdom_extop_la_SOURCES) $(extdom_tests_SOURCES)
|
||||
DIST_SOURCES = $(libipa_extdom_extop_la_SOURCES) \
|
||||
$(extdom_tests_SOURCES)
|
||||
SOURCES = $(libipa_extdom_extop_la_SOURCES) \
|
||||
$(extdom_cmocka_tests_SOURCES)
|
||||
DIST_SOURCES = $(am__libipa_extdom_extop_la_SOURCES_DIST) \
|
||||
$(extdom_cmocka_tests_SOURCES)
|
||||
am__can_run_installinfo = \
|
||||
case $$AM_UPDATE_INFO_DIR in \
|
||||
n|no|NO) false;; \
|
||||
@@ -387,10 +429,13 @@ TEST_LOGS = $(am__test_logs2:.test.log=.log)
|
||||
TEST_LOG_DRIVER = $(SHELL) $(top_srcdir)/test-driver
|
||||
TEST_LOG_COMPILE = $(TEST_LOG_COMPILER) $(AM_TEST_LOG_FLAGS) \
|
||||
$(TEST_LOG_FLAGS)
|
||||
am__DIST_COMMON = $(srcdir)/Makefile.in $(top_srcdir)/depcomp \
|
||||
$(top_srcdir)/test-driver README
|
||||
DISTFILES = $(DIST_COMMON) $(DIST_SOURCES) $(TEXINFOS) $(EXTRA_DIST)
|
||||
ACLOCAL = @ACLOCAL@
|
||||
AMTAR = @AMTAR@
|
||||
AM_DEFAULT_VERBOSITY = @AM_DEFAULT_VERBOSITY@
|
||||
API_VERSION = @API_VERSION@
|
||||
AR = @AR@
|
||||
AUTOCONF = @AUTOCONF@
|
||||
AUTOHEADER = @AUTOHEADER@
|
||||
@@ -399,13 +444,15 @@ AWK = @AWK@
|
||||
CC = @CC@
|
||||
CCDEPMODE = @CCDEPMODE@
|
||||
CFLAGS = @CFLAGS@
|
||||
CHECK_CFLAGS = @CHECK_CFLAGS@
|
||||
CHECK_LIBS = @CHECK_LIBS@
|
||||
CMOCKA_CFLAGS = @CMOCKA_CFLAGS@
|
||||
CMOCKA_LIBS = @CMOCKA_LIBS@
|
||||
CONFIG_STATUS = @CONFIG_STATUS@
|
||||
CPP = @CPP@
|
||||
CPPFLAGS = @CPPFLAGS@
|
||||
CRYPTO_CFLAGS = @CRYPTO_CFLAGS@
|
||||
CRYPTO_LIBS = @CRYPTO_LIBS@
|
||||
CYGPATH_W = @CYGPATH_W@
|
||||
DATA_VERSION = @DATA_VERSION@
|
||||
DEFS = @DEFS@
|
||||
DEPDIR = @DEPDIR@
|
||||
DIRSRV_CFLAGS = @DIRSRV_CFLAGS@
|
||||
@@ -419,31 +466,63 @@ ECHO_T = @ECHO_T@
|
||||
EGREP = @EGREP@
|
||||
EXEEXT = @EXEEXT@
|
||||
FGREP = @FGREP@
|
||||
GETTEXT_DOMAIN = @GETTEXT_DOMAIN@
|
||||
GETTEXT_MACRO_VERSION = @GETTEXT_MACRO_VERSION@
|
||||
GIT_BRANCH = @GIT_BRANCH@
|
||||
GIT_VERSION = @GIT_VERSION@
|
||||
GMSGFMT = @GMSGFMT@
|
||||
GMSGFMT_015 = @GMSGFMT_015@
|
||||
GREP = @GREP@
|
||||
INI_CFLAGS = @INI_CFLAGS@
|
||||
INI_LIBS = @INI_LIBS@
|
||||
INSTALL = @INSTALL@
|
||||
INSTALL_DATA = @INSTALL_DATA@
|
||||
INSTALL_PROGRAM = @INSTALL_PROGRAM@
|
||||
INSTALL_SCRIPT = @INSTALL_SCRIPT@
|
||||
INSTALL_STRIP_PROGRAM = @INSTALL_STRIP_PROGRAM@
|
||||
INTLLIBS = @INTLLIBS@
|
||||
INTL_MACOSX_LIBS = @INTL_MACOSX_LIBS@
|
||||
IPAPLATFORM = @IPAPLATFORM@
|
||||
IPA_DATA_DIR = @IPA_DATA_DIR@
|
||||
IPA_SYSCONF_DIR = @IPA_SYSCONF_DIR@
|
||||
JSLINT = @JSLINT@
|
||||
KRAD_LIBS = @KRAD_LIBS@
|
||||
KRB5KDC_SERVICE = @KRB5KDC_SERVICE@
|
||||
KRB5_CFLAGS = @KRB5_CFLAGS@
|
||||
KRB5_GSSAPI_CFLAGS = @KRB5_GSSAPI_CFLAGS@
|
||||
KRB5_GSSAPI_LIBS = @KRB5_GSSAPI_LIBS@
|
||||
KRB5_LIBS = @KRB5_LIBS@
|
||||
LD = @LD@
|
||||
LDAP_CFLAGS = @LDAP_CFLAGS@
|
||||
LDAP_LIBS = @LDAP_LIBS@
|
||||
LDFLAGS = @LDFLAGS@
|
||||
LIBICONV = @LIBICONV@
|
||||
LIBINTL = @LIBINTL@
|
||||
LIBINTL_LIBS = @LIBINTL_LIBS@
|
||||
LIBOBJS = @LIBOBJS@
|
||||
LIBPDB_NAME = @LIBPDB_NAME@
|
||||
LIBS = @LIBS@
|
||||
LIBTOOL = @LIBTOOL@
|
||||
LIBVERTO_CFLAGS = @LIBVERTO_CFLAGS@
|
||||
LIBVERTO_LIBS = @LIBVERTO_LIBS@
|
||||
LIPO = @LIPO@
|
||||
LN_S = @LN_S@
|
||||
LTLIBICONV = @LTLIBICONV@
|
||||
LTLIBINTL = @LTLIBINTL@
|
||||
LTLIBOBJS = @LTLIBOBJS@
|
||||
MAINT = @MAINT@
|
||||
LT_SYS_LIBRARY_PATH = @LT_SYS_LIBRARY_PATH@
|
||||
MAKEINFO = @MAKEINFO@
|
||||
MANIFEST_TOOL = @MANIFEST_TOOL@
|
||||
MKDIR_P = @MKDIR_P@
|
||||
MK_ASSIGN = @MK_ASSIGN@
|
||||
MK_ELSE = @MK_ELSE@
|
||||
MK_ENDIF = @MK_ENDIF@
|
||||
MK_IFEQ = @MK_IFEQ@
|
||||
MSGATTRIB = @MSGATTRIB@
|
||||
MSGFMT = @MSGFMT@
|
||||
MSGFMT_015 = @MSGFMT_015@
|
||||
MSGMERGE = @MSGMERGE@
|
||||
NAMED_GROUP = @NAMED_GROUP@
|
||||
NDRNBT_CFLAGS = @NDRNBT_CFLAGS@
|
||||
NDRNBT_LIBS = @NDRNBT_LIBS@
|
||||
NDRPAC_CFLAGS = @NDRPAC_CFLAGS@
|
||||
@@ -454,12 +533,11 @@ NM = @NM@
|
||||
NMEDIT = @NMEDIT@
|
||||
NSPR_CFLAGS = @NSPR_CFLAGS@
|
||||
NSPR_LIBS = @NSPR_LIBS@
|
||||
NSS_CFLAGS = @NSS_CFLAGS@
|
||||
NSS_LIBS = @NSS_LIBS@
|
||||
NUM_VERSION = @NUM_VERSION@
|
||||
OBJDUMP = @OBJDUMP@
|
||||
OBJEXT = @OBJEXT@
|
||||
OPENLDAP_CFLAGS = @OPENLDAP_CFLAGS@
|
||||
OPENLDAP_LIBS = @OPENLDAP_LIBS@
|
||||
ODS_GROUP = @ODS_GROUP@
|
||||
ODS_USER = @ODS_USER@
|
||||
OTOOL = @OTOOL@
|
||||
OTOOL64 = @OTOOL64@
|
||||
PACKAGE = @PACKAGE@
|
||||
@@ -473,8 +551,14 @@ PATH_SEPARATOR = @PATH_SEPARATOR@
|
||||
PKG_CONFIG = @PKG_CONFIG@
|
||||
PKG_CONFIG_LIBDIR = @PKG_CONFIG_LIBDIR@
|
||||
PKG_CONFIG_PATH = @PKG_CONFIG_PATH@
|
||||
PLATFORM_PYTHON = @PLATFORM_PYTHON@
|
||||
POPT_CFLAGS = @POPT_CFLAGS@
|
||||
POPT_LIBS = @POPT_LIBS@
|
||||
POSUB = @POSUB@
|
||||
PYLINT = @PYLINT@
|
||||
PYTHON = @PYTHON@
|
||||
PYTHON_EXEC_PREFIX = @PYTHON_EXEC_PREFIX@
|
||||
PYTHON_INSTALL_EXTRA_OPTIONS = @PYTHON_INSTALL_EXTRA_OPTIONS@
|
||||
PYTHON_PLATFORM = @PYTHON_PLATFORM@
|
||||
PYTHON_PREFIX = @PYTHON_PREFIX@
|
||||
PYTHON_VERSION = @PYTHON_VERSION@
|
||||
@@ -482,10 +566,13 @@ RANLIB = @RANLIB@
|
||||
SAMBA40EXTRA_LIBPATH = @SAMBA40EXTRA_LIBPATH@
|
||||
SAMBAUTIL_CFLAGS = @SAMBAUTIL_CFLAGS@
|
||||
SAMBAUTIL_LIBS = @SAMBAUTIL_LIBS@
|
||||
SASL_CFLAGS = @SASL_CFLAGS@
|
||||
SASL_LIBS = @SASL_LIBS@
|
||||
SED = @SED@
|
||||
SET_MAKE = @SET_MAKE@
|
||||
SHELL = @SHELL@
|
||||
SSL_LIBS = @SSL_LIBS@
|
||||
SSSCERTMAP_CFLAGS = @SSSCERTMAP_CFLAGS@
|
||||
SSSCERTMAP_LIBS = @SSSCERTMAP_LIBS@
|
||||
SSSIDMAP_CFLAGS = @SSSIDMAP_CFLAGS@
|
||||
SSSIDMAP_LIBS = @SSSIDMAP_LIBS@
|
||||
SSSNSSIDMAP_CFLAGS = @SSSNSSIDMAP_CFLAGS@
|
||||
@@ -497,8 +584,16 @@ TEVENT_CFLAGS = @TEVENT_CFLAGS@
|
||||
TEVENT_LIBS = @TEVENT_LIBS@
|
||||
UNISTRING_LIBS = @UNISTRING_LIBS@
|
||||
UNLINK = @UNLINK@
|
||||
USE_NLS = @USE_NLS@
|
||||
UUID_CFLAGS = @UUID_CFLAGS@
|
||||
UUID_LIBS = @UUID_LIBS@
|
||||
VENDOR_SUFFIX = @VENDOR_SUFFIX@
|
||||
VERSION = @VERSION@
|
||||
XGETTEXT = @XGETTEXT@
|
||||
XGETTEXT_015 = @XGETTEXT_015@
|
||||
XGETTEXT_EXTRA_OPTIONS = @XGETTEXT_EXTRA_OPTIONS@
|
||||
XMLRPC_CFLAGS = @XMLRPC_CFLAGS@
|
||||
XMLRPC_LIBS = @XMLRPC_LIBS@
|
||||
abs_builddir = @abs_builddir@
|
||||
abs_srcdir = @abs_srcdir@
|
||||
abs_top_builddir = @abs_top_builddir@
|
||||
@@ -529,6 +624,7 @@ host_cpu = @host_cpu@
|
||||
host_os = @host_os@
|
||||
host_vendor = @host_vendor@
|
||||
htmldir = @htmldir@
|
||||
i18ntests = @i18ntests@
|
||||
includedir = @includedir@
|
||||
infodir = @infodir@
|
||||
install_sh = @install_sh@
|
||||
@@ -548,31 +644,32 @@ program_transform_name = @program_transform_name@
|
||||
psdir = @psdir@
|
||||
pyexecdir = @pyexecdir@
|
||||
pythondir = @pythondir@
|
||||
runstatedir = @runstatedir@
|
||||
sbindir = @sbindir@
|
||||
selinux_makefile = @selinux_makefile@
|
||||
sharedstatedir = @sharedstatedir@
|
||||
srcdir = @srcdir@
|
||||
sysconfdir = @sysconfdir@
|
||||
sysconfenvdir = @sysconfenvdir@
|
||||
systemdsystemunitdir = @systemdsystemunitdir@
|
||||
systemdtmpfilesdir = @systemdtmpfilesdir@
|
||||
target_alias = @target_alias@
|
||||
top_build_prefix = @top_build_prefix@
|
||||
top_builddir = @top_builddir@
|
||||
top_srcdir = @top_srcdir@
|
||||
NULL =
|
||||
PLUGIN_COMMON_DIR = ../common
|
||||
PLUGIN_COMMON_DIR = $(srcdir)/../common
|
||||
AM_CPPFLAGS = \
|
||||
-I. \
|
||||
-I$(srcdir) \
|
||||
-I$(PLUGIN_COMMON_DIR) \
|
||||
-I$(KRB5_UTIL_DIR) \
|
||||
-I$(COMMON_BER_DIR) \
|
||||
-DPREFIX=\""$(prefix)"\" \
|
||||
-DBINDIR=\""$(bindir)"\" \
|
||||
-DLIBDIR=\""$(libdir)"\" \
|
||||
-DLIBEXECDIR=\""$(libexecdir)"\" \
|
||||
-DDATADIR=\""$(datadir)"\" \
|
||||
$(DIRSRV_CFLAGS) \
|
||||
$(LDAP_CFLAGS) \
|
||||
$(WARN_CFLAGS) \
|
||||
$(SSSIDMAP_CFLAGS) \
|
||||
$(SSSNSSIDMAP_CFLAGS) \
|
||||
$(NULL)
|
||||
|
||||
@@ -581,34 +678,32 @@ plugin_LTLIBRARIES = \
|
||||
libipa_extdom_extop.la \
|
||||
$(NULL)
|
||||
|
||||
libipa_extdom_extop_la_SOURCES = \
|
||||
ipa_extdom_extop.c \
|
||||
ipa_extdom_common.c \
|
||||
$(NULL)
|
||||
|
||||
libipa_extdom_extop_la_SOURCES = ipa_extdom.h ipa_extdom_extop.c \
|
||||
ipa_extdom_common.c back_extdom.h $(NULL) $(am__append_1) \
|
||||
$(am__append_2)
|
||||
libipa_extdom_extop_la_LDFLAGS = -avoid-version
|
||||
libipa_extdom_extop_la_LIBADD = \
|
||||
$(LDAP_LIBS) \
|
||||
$(SSSIDMAP_LIBS) \
|
||||
$(SSSNSSIDMAP_LIBS) \
|
||||
$(SSSNSSIDMAP_LIBS) \
|
||||
$(NULL)
|
||||
|
||||
extdom_tests_SOURCES = \
|
||||
ipa_extdom_tests.c \
|
||||
ipa_extdom_common.c \
|
||||
extdom_cmocka_tests_SOURCES = \
|
||||
ipa_extdom_cmocka_tests.c \
|
||||
ipa_extdom_common.c \
|
||||
back_extdom_nss_sss.c \
|
||||
$(NULL)
|
||||
|
||||
extdom_tests_CFLAGS = $(CHECK_CFLAGS)
|
||||
extdom_tests_LDFLAGS = \
|
||||
extdom_cmocka_tests_CFLAGS = $(CMOCKA_CFLAGS)
|
||||
extdom_cmocka_tests_LDFLAGS = \
|
||||
-rpath $(shell pkg-config --libs-only-L dirsrv | sed -e 's/-L//') \
|
||||
$(NULL)
|
||||
|
||||
extdom_tests_LDADD = \
|
||||
$(CHECK_LIBS) \
|
||||
extdom_cmocka_tests_LDADD = \
|
||||
$(CMOCKA_LIBS) \
|
||||
$(LDAP_LIBS) \
|
||||
$(DIRSRV_LIBS) \
|
||||
$(SSSIDMAP_LIBS) \
|
||||
$(SSSNSSIDMAP_LIBS) \
|
||||
-ldl \
|
||||
$(NULL)
|
||||
|
||||
appdir = $(IPA_DATA_DIR)
|
||||
@@ -618,18 +713,15 @@ app_DATA = \
|
||||
|
||||
EXTRA_DIST = \
|
||||
README \
|
||||
test_data \
|
||||
$(app_DATA) \
|
||||
$(NULL)
|
||||
|
||||
MAINTAINERCLEANFILES = \
|
||||
*~ \
|
||||
Makefile.in
|
||||
|
||||
all: all-am
|
||||
|
||||
.SUFFIXES:
|
||||
.SUFFIXES: .c .lo .log .o .obj .test .test$(EXEEXT) .trs
|
||||
$(srcdir)/Makefile.in: @MAINTAINER_MODE_TRUE@ $(srcdir)/Makefile.am $(am__configure_deps)
|
||||
$(srcdir)/Makefile.in: $(srcdir)/Makefile.am $(am__configure_deps)
|
||||
@for dep in $?; do \
|
||||
case '$(am__configure_deps)' in \
|
||||
*$$dep*) \
|
||||
@@ -638,28 +730,36 @@ $(srcdir)/Makefile.in: @MAINTAINER_MODE_TRUE@ $(srcdir)/Makefile.am $(am__confi
|
||||
exit 1;; \
|
||||
esac; \
|
||||
done; \
|
||||
echo ' cd $(top_srcdir) && $(AUTOMAKE) --foreign ipa-slapi-plugins/ipa-extdom-extop/Makefile'; \
|
||||
echo ' cd $(top_srcdir) && $(AUTOMAKE) --foreign daemons/ipa-slapi-plugins/ipa-extdom-extop/Makefile'; \
|
||||
$(am__cd) $(top_srcdir) && \
|
||||
$(AUTOMAKE) --foreign ipa-slapi-plugins/ipa-extdom-extop/Makefile
|
||||
.PRECIOUS: Makefile
|
||||
$(AUTOMAKE) --foreign daemons/ipa-slapi-plugins/ipa-extdom-extop/Makefile
|
||||
Makefile: $(srcdir)/Makefile.in $(top_builddir)/config.status
|
||||
@case '$?' in \
|
||||
*config.status*) \
|
||||
cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh;; \
|
||||
*) \
|
||||
echo ' cd $(top_builddir) && $(SHELL) ./config.status $(subdir)/$@ $(am__depfiles_maybe)'; \
|
||||
cd $(top_builddir) && $(SHELL) ./config.status $(subdir)/$@ $(am__depfiles_maybe);; \
|
||||
echo ' cd $(top_builddir) && $(SHELL) ./config.status $(subdir)/$@ $(am__maybe_remake_depfiles)'; \
|
||||
cd $(top_builddir) && $(SHELL) ./config.status $(subdir)/$@ $(am__maybe_remake_depfiles);; \
|
||||
esac;
|
||||
|
||||
$(top_builddir)/config.status: $(top_srcdir)/configure $(CONFIG_STATUS_DEPENDENCIES)
|
||||
cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh
|
||||
|
||||
$(top_srcdir)/configure: @MAINTAINER_MODE_TRUE@ $(am__configure_deps)
|
||||
$(top_srcdir)/configure: $(am__configure_deps)
|
||||
cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh
|
||||
$(ACLOCAL_M4): @MAINTAINER_MODE_TRUE@ $(am__aclocal_m4_deps)
|
||||
$(ACLOCAL_M4): $(am__aclocal_m4_deps)
|
||||
cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh
|
||||
$(am__aclocal_m4_deps):
|
||||
|
||||
clean-checkPROGRAMS:
|
||||
@list='$(check_PROGRAMS)'; test -n "$$list" || exit 0; \
|
||||
echo " rm -f" $$list; \
|
||||
rm -f $$list || exit $$?; \
|
||||
test -n "$(EXEEXT)" || exit 0; \
|
||||
list=`for p in $$list; do echo "$$p"; done | sed 's/$(EXEEXT)$$//'`; \
|
||||
echo " rm -f" $$list; \
|
||||
rm -f $$list
|
||||
|
||||
install-pluginLTLIBRARIES: $(plugin_LTLIBRARIES)
|
||||
@$(NORMAL_INSTALL)
|
||||
@list='$(plugin_LTLIBRARIES)'; test -n "$(plugindir)" || list=; \
|
||||
@@ -698,18 +798,9 @@ clean-pluginLTLIBRARIES:
|
||||
libipa_extdom_extop.la: $(libipa_extdom_extop_la_OBJECTS) $(libipa_extdom_extop_la_DEPENDENCIES) $(EXTRA_libipa_extdom_extop_la_DEPENDENCIES)
|
||||
$(AM_V_CCLD)$(libipa_extdom_extop_la_LINK) -rpath $(plugindir) $(libipa_extdom_extop_la_OBJECTS) $(libipa_extdom_extop_la_LIBADD) $(LIBS)
|
||||
|
||||
clean-checkPROGRAMS:
|
||||
@list='$(check_PROGRAMS)'; test -n "$$list" || exit 0; \
|
||||
echo " rm -f" $$list; \
|
||||
rm -f $$list || exit $$?; \
|
||||
test -n "$(EXEEXT)" || exit 0; \
|
||||
list=`for p in $$list; do echo "$$p"; done | sed 's/$(EXEEXT)$$//'`; \
|
||||
echo " rm -f" $$list; \
|
||||
rm -f $$list
|
||||
|
||||
extdom_tests$(EXEEXT): $(extdom_tests_OBJECTS) $(extdom_tests_DEPENDENCIES) $(EXTRA_extdom_tests_DEPENDENCIES)
|
||||
@rm -f extdom_tests$(EXEEXT)
|
||||
$(AM_V_CCLD)$(extdom_tests_LINK) $(extdom_tests_OBJECTS) $(extdom_tests_LDADD) $(LIBS)
|
||||
extdom_cmocka_tests$(EXEEXT): $(extdom_cmocka_tests_OBJECTS) $(extdom_cmocka_tests_DEPENDENCIES) $(EXTRA_extdom_cmocka_tests_DEPENDENCIES)
|
||||
@rm -f extdom_cmocka_tests$(EXEEXT)
|
||||
$(AM_V_CCLD)$(extdom_cmocka_tests_LINK) $(extdom_cmocka_tests_OBJECTS) $(extdom_cmocka_tests_LDADD) $(LIBS)
|
||||
|
||||
mostlyclean-compile:
|
||||
-rm -f *.$(OBJEXT)
|
||||
@@ -717,10 +808,19 @@ mostlyclean-compile:
|
||||
distclean-compile:
|
||||
-rm -f *.tab.c
|
||||
|
||||
@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/extdom_tests-ipa_extdom_common.Po@am__quote@
|
||||
@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/extdom_tests-ipa_extdom_tests.Po@am__quote@
|
||||
@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/ipa_extdom_common.Plo@am__quote@
|
||||
@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/ipa_extdom_extop.Plo@am__quote@
|
||||
@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/back_extdom_nss_sss.Plo@am__quote@ # am--include-marker
|
||||
@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/back_extdom_sss_idmap.Plo@am__quote@ # am--include-marker
|
||||
@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/extdom_cmocka_tests-back_extdom_nss_sss.Po@am__quote@ # am--include-marker
|
||||
@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/extdom_cmocka_tests-ipa_extdom_cmocka_tests.Po@am__quote@ # am--include-marker
|
||||
@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/extdom_cmocka_tests-ipa_extdom_common.Po@am__quote@ # am--include-marker
|
||||
@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/ipa_extdom_common.Plo@am__quote@ # am--include-marker
|
||||
@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/ipa_extdom_extop.Plo@am__quote@ # am--include-marker
|
||||
|
||||
$(am__depfiles_remade):
|
||||
@$(MKDIR_P) $(@D)
|
||||
@echo '# dummy' >$@-t && $(am__mv) $@-t $@
|
||||
|
||||
am--depfiles: $(am__depfiles_remade)
|
||||
|
||||
.c.o:
|
||||
@am__fastdepCC_TRUE@ $(AM_V_CC)$(COMPILE) -MT $@ -MD -MP -MF $(DEPDIR)/$*.Tpo -c -o $@ $<
|
||||
@@ -743,33 +843,47 @@ distclean-compile:
|
||||
@AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@
|
||||
@am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(LTCOMPILE) -c -o $@ $<
|
||||
|
||||
extdom_tests-ipa_extdom_tests.o: ipa_extdom_tests.c
|
||||
@am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(extdom_tests_CFLAGS) $(CFLAGS) -MT extdom_tests-ipa_extdom_tests.o -MD -MP -MF $(DEPDIR)/extdom_tests-ipa_extdom_tests.Tpo -c -o extdom_tests-ipa_extdom_tests.o `test -f 'ipa_extdom_tests.c' || echo '$(srcdir)/'`ipa_extdom_tests.c
|
||||
@am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) $(DEPDIR)/extdom_tests-ipa_extdom_tests.Tpo $(DEPDIR)/extdom_tests-ipa_extdom_tests.Po
|
||||
@AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='ipa_extdom_tests.c' object='extdom_tests-ipa_extdom_tests.o' libtool=no @AMDEPBACKSLASH@
|
||||
extdom_cmocka_tests-ipa_extdom_cmocka_tests.o: ipa_extdom_cmocka_tests.c
|
||||
@am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(extdom_cmocka_tests_CFLAGS) $(CFLAGS) -MT extdom_cmocka_tests-ipa_extdom_cmocka_tests.o -MD -MP -MF $(DEPDIR)/extdom_cmocka_tests-ipa_extdom_cmocka_tests.Tpo -c -o extdom_cmocka_tests-ipa_extdom_cmocka_tests.o `test -f 'ipa_extdom_cmocka_tests.c' || echo '$(srcdir)/'`ipa_extdom_cmocka_tests.c
|
||||
@am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) $(DEPDIR)/extdom_cmocka_tests-ipa_extdom_cmocka_tests.Tpo $(DEPDIR)/extdom_cmocka_tests-ipa_extdom_cmocka_tests.Po
|
||||
@AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='ipa_extdom_cmocka_tests.c' object='extdom_cmocka_tests-ipa_extdom_cmocka_tests.o' libtool=no @AMDEPBACKSLASH@
|
||||
@AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@
|
||||
@am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(extdom_tests_CFLAGS) $(CFLAGS) -c -o extdom_tests-ipa_extdom_tests.o `test -f 'ipa_extdom_tests.c' || echo '$(srcdir)/'`ipa_extdom_tests.c
|
||||
@am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(extdom_cmocka_tests_CFLAGS) $(CFLAGS) -c -o extdom_cmocka_tests-ipa_extdom_cmocka_tests.o `test -f 'ipa_extdom_cmocka_tests.c' || echo '$(srcdir)/'`ipa_extdom_cmocka_tests.c
|
||||
|
||||
extdom_tests-ipa_extdom_tests.obj: ipa_extdom_tests.c
|
||||
@am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(extdom_tests_CFLAGS) $(CFLAGS) -MT extdom_tests-ipa_extdom_tests.obj -MD -MP -MF $(DEPDIR)/extdom_tests-ipa_extdom_tests.Tpo -c -o extdom_tests-ipa_extdom_tests.obj `if test -f 'ipa_extdom_tests.c'; then $(CYGPATH_W) 'ipa_extdom_tests.c'; else $(CYGPATH_W) '$(srcdir)/ipa_extdom_tests.c'; fi`
|
||||
@am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) $(DEPDIR)/extdom_tests-ipa_extdom_tests.Tpo $(DEPDIR)/extdom_tests-ipa_extdom_tests.Po
|
||||
@AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='ipa_extdom_tests.c' object='extdom_tests-ipa_extdom_tests.obj' libtool=no @AMDEPBACKSLASH@
|
||||
extdom_cmocka_tests-ipa_extdom_cmocka_tests.obj: ipa_extdom_cmocka_tests.c
|
||||
@am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(extdom_cmocka_tests_CFLAGS) $(CFLAGS) -MT extdom_cmocka_tests-ipa_extdom_cmocka_tests.obj -MD -MP -MF $(DEPDIR)/extdom_cmocka_tests-ipa_extdom_cmocka_tests.Tpo -c -o extdom_cmocka_tests-ipa_extdom_cmocka_tests.obj `if test -f 'ipa_extdom_cmocka_tests.c'; then $(CYGPATH_W) 'ipa_extdom_cmocka_tests.c'; else $(CYGPATH_W) '$(srcdir)/ipa_extdom_cmocka_tests.c'; fi`
|
||||
@am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) $(DEPDIR)/extdom_cmocka_tests-ipa_extdom_cmocka_tests.Tpo $(DEPDIR)/extdom_cmocka_tests-ipa_extdom_cmocka_tests.Po
|
||||
@AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='ipa_extdom_cmocka_tests.c' object='extdom_cmocka_tests-ipa_extdom_cmocka_tests.obj' libtool=no @AMDEPBACKSLASH@
|
||||
@AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@
|
||||
@am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(extdom_tests_CFLAGS) $(CFLAGS) -c -o extdom_tests-ipa_extdom_tests.obj `if test -f 'ipa_extdom_tests.c'; then $(CYGPATH_W) 'ipa_extdom_tests.c'; else $(CYGPATH_W) '$(srcdir)/ipa_extdom_tests.c'; fi`
|
||||
@am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(extdom_cmocka_tests_CFLAGS) $(CFLAGS) -c -o extdom_cmocka_tests-ipa_extdom_cmocka_tests.obj `if test -f 'ipa_extdom_cmocka_tests.c'; then $(CYGPATH_W) 'ipa_extdom_cmocka_tests.c'; else $(CYGPATH_W) '$(srcdir)/ipa_extdom_cmocka_tests.c'; fi`
|
||||
|
||||
extdom_tests-ipa_extdom_common.o: ipa_extdom_common.c
|
||||
@am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(extdom_tests_CFLAGS) $(CFLAGS) -MT extdom_tests-ipa_extdom_common.o -MD -MP -MF $(DEPDIR)/extdom_tests-ipa_extdom_common.Tpo -c -o extdom_tests-ipa_extdom_common.o `test -f 'ipa_extdom_common.c' || echo '$(srcdir)/'`ipa_extdom_common.c
|
||||
@am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) $(DEPDIR)/extdom_tests-ipa_extdom_common.Tpo $(DEPDIR)/extdom_tests-ipa_extdom_common.Po
|
||||
@AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='ipa_extdom_common.c' object='extdom_tests-ipa_extdom_common.o' libtool=no @AMDEPBACKSLASH@
|
||||
extdom_cmocka_tests-ipa_extdom_common.o: ipa_extdom_common.c
|
||||
@am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(extdom_cmocka_tests_CFLAGS) $(CFLAGS) -MT extdom_cmocka_tests-ipa_extdom_common.o -MD -MP -MF $(DEPDIR)/extdom_cmocka_tests-ipa_extdom_common.Tpo -c -o extdom_cmocka_tests-ipa_extdom_common.o `test -f 'ipa_extdom_common.c' || echo '$(srcdir)/'`ipa_extdom_common.c
|
||||
@am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) $(DEPDIR)/extdom_cmocka_tests-ipa_extdom_common.Tpo $(DEPDIR)/extdom_cmocka_tests-ipa_extdom_common.Po
|
||||
@AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='ipa_extdom_common.c' object='extdom_cmocka_tests-ipa_extdom_common.o' libtool=no @AMDEPBACKSLASH@
|
||||
@AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@
|
||||
@am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(extdom_tests_CFLAGS) $(CFLAGS) -c -o extdom_tests-ipa_extdom_common.o `test -f 'ipa_extdom_common.c' || echo '$(srcdir)/'`ipa_extdom_common.c
|
||||
@am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(extdom_cmocka_tests_CFLAGS) $(CFLAGS) -c -o extdom_cmocka_tests-ipa_extdom_common.o `test -f 'ipa_extdom_common.c' || echo '$(srcdir)/'`ipa_extdom_common.c
|
||||
|
||||
extdom_tests-ipa_extdom_common.obj: ipa_extdom_common.c
|
||||
@am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(extdom_tests_CFLAGS) $(CFLAGS) -MT extdom_tests-ipa_extdom_common.obj -MD -MP -MF $(DEPDIR)/extdom_tests-ipa_extdom_common.Tpo -c -o extdom_tests-ipa_extdom_common.obj `if test -f 'ipa_extdom_common.c'; then $(CYGPATH_W) 'ipa_extdom_common.c'; else $(CYGPATH_W) '$(srcdir)/ipa_extdom_common.c'; fi`
|
||||
@am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) $(DEPDIR)/extdom_tests-ipa_extdom_common.Tpo $(DEPDIR)/extdom_tests-ipa_extdom_common.Po
|
||||
@AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='ipa_extdom_common.c' object='extdom_tests-ipa_extdom_common.obj' libtool=no @AMDEPBACKSLASH@
|
||||
extdom_cmocka_tests-ipa_extdom_common.obj: ipa_extdom_common.c
|
||||
@am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(extdom_cmocka_tests_CFLAGS) $(CFLAGS) -MT extdom_cmocka_tests-ipa_extdom_common.obj -MD -MP -MF $(DEPDIR)/extdom_cmocka_tests-ipa_extdom_common.Tpo -c -o extdom_cmocka_tests-ipa_extdom_common.obj `if test -f 'ipa_extdom_common.c'; then $(CYGPATH_W) 'ipa_extdom_common.c'; else $(CYGPATH_W) '$(srcdir)/ipa_extdom_common.c'; fi`
|
||||
@am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) $(DEPDIR)/extdom_cmocka_tests-ipa_extdom_common.Tpo $(DEPDIR)/extdom_cmocka_tests-ipa_extdom_common.Po
|
||||
@AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='ipa_extdom_common.c' object='extdom_cmocka_tests-ipa_extdom_common.obj' libtool=no @AMDEPBACKSLASH@
|
||||
@AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@
|
||||
@am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(extdom_tests_CFLAGS) $(CFLAGS) -c -o extdom_tests-ipa_extdom_common.obj `if test -f 'ipa_extdom_common.c'; then $(CYGPATH_W) 'ipa_extdom_common.c'; else $(CYGPATH_W) '$(srcdir)/ipa_extdom_common.c'; fi`
|
||||
@am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(extdom_cmocka_tests_CFLAGS) $(CFLAGS) -c -o extdom_cmocka_tests-ipa_extdom_common.obj `if test -f 'ipa_extdom_common.c'; then $(CYGPATH_W) 'ipa_extdom_common.c'; else $(CYGPATH_W) '$(srcdir)/ipa_extdom_common.c'; fi`
|
||||
|
||||
extdom_cmocka_tests-back_extdom_nss_sss.o: back_extdom_nss_sss.c
|
||||
@am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(extdom_cmocka_tests_CFLAGS) $(CFLAGS) -MT extdom_cmocka_tests-back_extdom_nss_sss.o -MD -MP -MF $(DEPDIR)/extdom_cmocka_tests-back_extdom_nss_sss.Tpo -c -o extdom_cmocka_tests-back_extdom_nss_sss.o `test -f 'back_extdom_nss_sss.c' || echo '$(srcdir)/'`back_extdom_nss_sss.c
|
||||
@am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) $(DEPDIR)/extdom_cmocka_tests-back_extdom_nss_sss.Tpo $(DEPDIR)/extdom_cmocka_tests-back_extdom_nss_sss.Po
|
||||
@AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='back_extdom_nss_sss.c' object='extdom_cmocka_tests-back_extdom_nss_sss.o' libtool=no @AMDEPBACKSLASH@
|
||||
@AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@
|
||||
@am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(extdom_cmocka_tests_CFLAGS) $(CFLAGS) -c -o extdom_cmocka_tests-back_extdom_nss_sss.o `test -f 'back_extdom_nss_sss.c' || echo '$(srcdir)/'`back_extdom_nss_sss.c
|
||||
|
||||
extdom_cmocka_tests-back_extdom_nss_sss.obj: back_extdom_nss_sss.c
|
||||
@am__fastdepCC_TRUE@ $(AM_V_CC)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(extdom_cmocka_tests_CFLAGS) $(CFLAGS) -MT extdom_cmocka_tests-back_extdom_nss_sss.obj -MD -MP -MF $(DEPDIR)/extdom_cmocka_tests-back_extdom_nss_sss.Tpo -c -o extdom_cmocka_tests-back_extdom_nss_sss.obj `if test -f 'back_extdom_nss_sss.c'; then $(CYGPATH_W) 'back_extdom_nss_sss.c'; else $(CYGPATH_W) '$(srcdir)/back_extdom_nss_sss.c'; fi`
|
||||
@am__fastdepCC_TRUE@ $(AM_V_at)$(am__mv) $(DEPDIR)/extdom_cmocka_tests-back_extdom_nss_sss.Tpo $(DEPDIR)/extdom_cmocka_tests-back_extdom_nss_sss.Po
|
||||
@AMDEP_TRUE@@am__fastdepCC_FALSE@ $(AM_V_CC)source='back_extdom_nss_sss.c' object='extdom_cmocka_tests-back_extdom_nss_sss.obj' libtool=no @AMDEPBACKSLASH@
|
||||
@AMDEP_TRUE@@am__fastdepCC_FALSE@ DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@
|
||||
@am__fastdepCC_FALSE@ $(AM_V_CC@am__nodep@)$(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) $(extdom_cmocka_tests_CFLAGS) $(CFLAGS) -c -o extdom_cmocka_tests-back_extdom_nss_sss.obj `if test -f 'back_extdom_nss_sss.c'; then $(CYGPATH_W) 'back_extdom_nss_sss.c'; else $(CYGPATH_W) '$(srcdir)/back_extdom_nss_sss.c'; fi`
|
||||
|
||||
mostlyclean-libtool:
|
||||
-rm -f *.lo
|
||||
@@ -880,7 +994,7 @@ $(TEST_SUITE_LOG): $(TEST_LOGS)
|
||||
if test -n "$$am__remaking_logs"; then \
|
||||
echo "fatal: making $(TEST_SUITE_LOG): possible infinite" \
|
||||
"recursion detected" >&2; \
|
||||
else \
|
||||
elif test -n "$$redo_logs"; then \
|
||||
am__remaking_logs=yes $(MAKE) $(AM_MAKEFLAGS) $$redo_logs; \
|
||||
fi; \
|
||||
if $(am__make_dryrun); then :; else \
|
||||
@@ -970,7 +1084,7 @@ $(TEST_SUITE_LOG): $(TEST_LOGS)
|
||||
fi; \
|
||||
$$success || exit 1
|
||||
|
||||
check-TESTS:
|
||||
check-TESTS: $(check_PROGRAMS)
|
||||
@list='$(RECHECK_LOGS)'; test -z "$$list" || rm -f $$list
|
||||
@list='$(RECHECK_LOGS:.log=.trs)'; test -z "$$list" || rm -f $$list
|
||||
@test -z "$(TEST_SUITE_LOG)" || rm -f $(TEST_SUITE_LOG)
|
||||
@@ -991,9 +1105,9 @@ recheck: all $(check_PROGRAMS)
|
||||
am__force_recheck=am--force-recheck \
|
||||
TEST_LOGS="$$log_list"; \
|
||||
exit $$?
|
||||
extdom_tests.log: extdom_tests$(EXEEXT)
|
||||
@p='extdom_tests$(EXEEXT)'; \
|
||||
b='extdom_tests'; \
|
||||
extdom_cmocka_tests.log: extdom_cmocka_tests$(EXEEXT)
|
||||
@p='extdom_cmocka_tests$(EXEEXT)'; \
|
||||
b='extdom_cmocka_tests'; \
|
||||
$(am__check_pre) $(LOG_DRIVER) --test-name "$$f" \
|
||||
--log-file $$b.log --trs-file $$b.trs \
|
||||
$(am__common_driver_flags) $(AM_LOG_DRIVER_FLAGS) $(LOG_DRIVER_FLAGS) -- $(LOG_COMPILE) \
|
||||
@@ -1013,7 +1127,10 @@ extdom_tests.log: extdom_tests$(EXEEXT)
|
||||
@am__EXEEXT_TRUE@ $(am__common_driver_flags) $(AM_TEST_LOG_DRIVER_FLAGS) $(TEST_LOG_DRIVER_FLAGS) -- $(TEST_LOG_COMPILE) \
|
||||
@am__EXEEXT_TRUE@ "$$tst" $(AM_TESTS_FD_REDIRECT)
|
||||
|
||||
distdir: $(DISTFILES)
|
||||
distdir: $(BUILT_SOURCES)
|
||||
$(MAKE) $(AM_MAKEFLAGS) distdir-am
|
||||
|
||||
distdir-am: $(DISTFILES)
|
||||
@srcdirstrip=`echo "$(srcdir)" | sed 's/[].[^$$\\*]/\\\\&/g'`; \
|
||||
topsrcdirstrip=`echo "$(top_srcdir)" | sed 's/[].[^$$\\*]/\\\\&/g'`; \
|
||||
list='$(DISTFILES)'; \
|
||||
@@ -1085,14 +1202,19 @@ distclean-generic:
|
||||
maintainer-clean-generic:
|
||||
@echo "This command is intended for maintainers to use"
|
||||
@echo "it deletes files that may require special tools to rebuild."
|
||||
-test -z "$(MAINTAINERCLEANFILES)" || rm -f $(MAINTAINERCLEANFILES)
|
||||
clean: clean-am
|
||||
|
||||
clean-am: clean-checkPROGRAMS clean-generic clean-libtool \
|
||||
clean-pluginLTLIBRARIES mostlyclean-am
|
||||
|
||||
distclean: distclean-am
|
||||
-rm -rf ./$(DEPDIR)
|
||||
-rm -f ./$(DEPDIR)/back_extdom_nss_sss.Plo
|
||||
-rm -f ./$(DEPDIR)/back_extdom_sss_idmap.Plo
|
||||
-rm -f ./$(DEPDIR)/extdom_cmocka_tests-back_extdom_nss_sss.Po
|
||||
-rm -f ./$(DEPDIR)/extdom_cmocka_tests-ipa_extdom_cmocka_tests.Po
|
||||
-rm -f ./$(DEPDIR)/extdom_cmocka_tests-ipa_extdom_common.Po
|
||||
-rm -f ./$(DEPDIR)/ipa_extdom_common.Plo
|
||||
-rm -f ./$(DEPDIR)/ipa_extdom_extop.Plo
|
||||
-rm -f Makefile
|
||||
distclean-am: clean-am distclean-compile distclean-generic \
|
||||
distclean-tags
|
||||
@@ -1138,7 +1260,13 @@ install-ps-am:
|
||||
installcheck-am:
|
||||
|
||||
maintainer-clean: maintainer-clean-am
|
||||
-rm -rf ./$(DEPDIR)
|
||||
-rm -f ./$(DEPDIR)/back_extdom_nss_sss.Plo
|
||||
-rm -f ./$(DEPDIR)/back_extdom_sss_idmap.Plo
|
||||
-rm -f ./$(DEPDIR)/extdom_cmocka_tests-back_extdom_nss_sss.Po
|
||||
-rm -f ./$(DEPDIR)/extdom_cmocka_tests-ipa_extdom_cmocka_tests.Po
|
||||
-rm -f ./$(DEPDIR)/extdom_cmocka_tests-ipa_extdom_common.Po
|
||||
-rm -f ./$(DEPDIR)/ipa_extdom_common.Plo
|
||||
-rm -f ./$(DEPDIR)/ipa_extdom_extop.Plo
|
||||
-rm -f Makefile
|
||||
maintainer-clean-am: distclean-am maintainer-clean-generic
|
||||
|
||||
@@ -1159,8 +1287,8 @@ uninstall-am: uninstall-appDATA uninstall-pluginLTLIBRARIES
|
||||
|
||||
.MAKE: check-am install-am install-strip
|
||||
|
||||
.PHONY: CTAGS GTAGS TAGS all all-am check check-TESTS check-am clean \
|
||||
clean-checkPROGRAMS clean-generic clean-libtool \
|
||||
.PHONY: CTAGS GTAGS TAGS all all-am am--depfiles check check-TESTS \
|
||||
check-am clean clean-checkPROGRAMS clean-generic clean-libtool \
|
||||
clean-pluginLTLIBRARIES cscopelist-am ctags ctags-am distclean \
|
||||
distclean-compile distclean-generic distclean-libtool \
|
||||
distclean-tags distdir dvi dvi-am html html-am info info-am \
|
||||
@@ -1175,6 +1303,8 @@ uninstall-am: uninstall-appDATA uninstall-pluginLTLIBRARIES
|
||||
pdf pdf-am ps ps-am recheck tags tags-am uninstall \
|
||||
uninstall-am uninstall-appDATA uninstall-pluginLTLIBRARIES
|
||||
|
||||
.PRECIOUS: Makefile
|
||||
|
||||
|
||||
# Tell versions [3.59,3.63) of GNU make to not export all variables.
|
||||
# Otherwise a system limit (for SysV at least) may be exceeded.
|
||||
|
||||
83
daemons/ipa-slapi-plugins/ipa-extdom-extop/back_extdom.h
Normal file
83
daemons/ipa-slapi-plugins/ipa-extdom-extop/back_extdom.h
Normal file
@@ -0,0 +1,83 @@
|
||||
/*
|
||||
* Copyright 2017 Red Hat, Inc.
|
||||
*
|
||||
* This Program is free software; you can redistribute it and/or modify
|
||||
* it under the terms of the GNU General Public License as published by
|
||||
* the Free Software Foundation; version 2 of the License.
|
||||
*
|
||||
* This Program is distributed in the hope that it will be useful, but
|
||||
* WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
||||
* General Public License for more details.
|
||||
*
|
||||
* You should have received a copy of the GNU General Public License
|
||||
* along with this Program; if not, write to the
|
||||
*
|
||||
* Free Software Foundation, Inc.
|
||||
* 59 Temple Place, Suite 330
|
||||
* Boston, MA 02111-1307 USA
|
||||
*
|
||||
*/
|
||||
|
||||
#ifndef BACK_EXTDOM_H
|
||||
#define BACK_EXTDOM_H
|
||||
#include <unistd.h>
|
||||
#include <pwd.h>
|
||||
#include <grp.h>
|
||||
|
||||
/* Possible results of lookup using a nss_* function.
|
||||
* Note: don't include nss.h as its path gets overriden by NSS library */
|
||||
enum nss_status {
|
||||
NSS_STATUS_TRYAGAIN = -2,
|
||||
NSS_STATUS_UNAVAIL,
|
||||
NSS_STATUS_NOTFOUND,
|
||||
NSS_STATUS_SUCCESS,
|
||||
NSS_STATUS_RETURN
|
||||
};
|
||||
|
||||
/* default NSS operation timeout 10s (ipaExtdomMaxNssTimeout) */
|
||||
#define DEFAULT_MAX_NSS_TIMEOUT (10*1000)
|
||||
|
||||
/* NSS backend operations implemented using either nss_sss.so.2 or libsss_nss_idmap API */
|
||||
struct nss_ops_ctx;
|
||||
|
||||
int back_extdom_init_context(struct nss_ops_ctx **nss_context);
|
||||
void back_extdom_free_context(struct nss_ops_ctx **nss_context);
|
||||
void back_extdom_set_timeout(struct nss_ops_ctx *nss_context,
|
||||
unsigned int timeout);
|
||||
unsigned int back_extdom_get_timeout(struct nss_ops_ctx *nss_context);
|
||||
void back_extdom_evict_user(struct nss_ops_ctx *nss_context,
|
||||
const char *name);
|
||||
void back_extdom_evict_group(struct nss_ops_ctx *nss_context,
|
||||
const char *name);
|
||||
|
||||
enum nss_status back_extdom_getpwnam(struct nss_ops_ctx *nss_context,
|
||||
const char *name, struct passwd *pwd,
|
||||
char *buffer, size_t buflen,
|
||||
struct passwd **result,
|
||||
int *lerrno);
|
||||
|
||||
enum nss_status back_extdom_getpwuid(struct nss_ops_ctx *nss_context,
|
||||
uid_t uid, struct passwd *pwd,
|
||||
char *buffer, size_t buflen,
|
||||
struct passwd **result,
|
||||
int *lerrno);
|
||||
|
||||
enum nss_status back_extdom_getgrnam(struct nss_ops_ctx *nss_context,
|
||||
const char *name, struct group *grp,
|
||||
char *buffer, size_t buflen,
|
||||
struct group **result,
|
||||
int *lerrno);
|
||||
|
||||
enum nss_status back_extdom_getgrgid(struct nss_ops_ctx *nss_context,
|
||||
gid_t gid, struct group *grp,
|
||||
char *buffer, size_t buflen,
|
||||
struct group **result,
|
||||
int *lerrno);
|
||||
|
||||
enum nss_status back_extdom_getgrouplist(struct nss_ops_ctx *nss_context,
|
||||
const char *name, gid_t group,
|
||||
gid_t *groups, int *ngroups,
|
||||
int *lerrno);
|
||||
|
||||
#endif /* BACK_EXTDOM_H */
|
||||
294
daemons/ipa-slapi-plugins/ipa-extdom-extop/back_extdom_nss_sss.c
Normal file
294
daemons/ipa-slapi-plugins/ipa-extdom-extop/back_extdom_nss_sss.c
Normal file
@@ -0,0 +1,294 @@
|
||||
/** BEGIN COPYRIGHT BLOCK
|
||||
* This program is free software; you can redistribute it and/or modify
|
||||
* it under the terms of the GNU General Public License as published by
|
||||
* the Free Software Foundation, either version 3 of the License, or
|
||||
* (at your option) any later version.
|
||||
*
|
||||
* This program is distributed in the hope that it will be useful,
|
||||
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||
* GNU General Public License for more details.
|
||||
*
|
||||
* You should have received a copy of the GNU General Public License
|
||||
* along with this program. If not, see <http://www.gnu.org/licenses/>.
|
||||
*
|
||||
* Additional permission under GPLv3 section 7:
|
||||
*
|
||||
* In the following paragraph, "GPL" means the GNU General Public
|
||||
* License, version 3 or any later version, and "Non-GPL Code" means
|
||||
* code that is governed neither by the GPL nor a license
|
||||
* compatible with the GPL.
|
||||
*
|
||||
* You may link the code of this Program with Non-GPL Code and convey
|
||||
* linked combinations including the two, provided that such Non-GPL
|
||||
* Code only links to the code of this Program through those well
|
||||
* defined interfaces identified in the file named EXCEPTION found in
|
||||
* the source code files (the "Approved Interfaces"). The files of
|
||||
* Non-GPL Code may instantiate templates or use macros or inline
|
||||
* functions from the Approved Interfaces without causing the resulting
|
||||
* work to be covered by the GPL. Only the copyright holders of this
|
||||
* Program may make changes or additions to the list of Approved
|
||||
* Interfaces.
|
||||
*
|
||||
* Copyright (C) 2013-2017 Red Hat, Inc.
|
||||
* All rights reserved.
|
||||
* END COPYRIGHT BLOCK **/
|
||||
|
||||
#ifdef HAVE_CONFIG_H
|
||||
#include "config.h"
|
||||
#endif
|
||||
|
||||
#include <sys/types.h>
|
||||
#include <stdlib.h>
|
||||
#include <string.h>
|
||||
#include <time.h>
|
||||
#include <unistd.h>
|
||||
#include <dlfcn.h>
|
||||
#include <errno.h>
|
||||
#include <pwd.h>
|
||||
#include <grp.h>
|
||||
#include <sys/param.h>
|
||||
#include "back_extdom.h"
|
||||
|
||||
struct nss_ops_ctx {
|
||||
void *dl_handle;
|
||||
long int initgroups_start;
|
||||
|
||||
enum nss_status (*getpwnam_r)(const char *name, struct passwd *result,
|
||||
char *buffer, size_t buflen, int *errnop);
|
||||
enum nss_status (*getpwuid_r)(uid_t uid, struct passwd *result,
|
||||
char *buffer, size_t buflen, int *errnop);
|
||||
enum nss_status (*getgrnam_r)(const char *name, struct group *result,
|
||||
char *buffer, size_t buflen, int *errnop);
|
||||
enum nss_status (*getgrgid_r)(gid_t gid, struct group *result,
|
||||
char *buffer, size_t buflen, int *errnop);
|
||||
enum nss_status (*initgroups_dyn)(const char *user, gid_t group,
|
||||
long int *start, long int *size,
|
||||
gid_t **groups, long int limit,
|
||||
int *errnop);
|
||||
};
|
||||
|
||||
void back_extdom_free_context(struct nss_ops_ctx **nss_context)
|
||||
{
|
||||
if ((nss_context == NULL) || (*nss_context == NULL)) {
|
||||
return;
|
||||
}
|
||||
|
||||
if ((*nss_context)->dl_handle != NULL) {
|
||||
dlclose((*nss_context)->dl_handle);
|
||||
}
|
||||
|
||||
free((*nss_context));
|
||||
*nss_context = NULL;
|
||||
}
|
||||
|
||||
int back_extdom_init_context(struct nss_ops_ctx **nss_context)
|
||||
{
|
||||
struct nss_ops_ctx *ctx = NULL;
|
||||
|
||||
if (nss_context == NULL) {
|
||||
return EINVAL;
|
||||
}
|
||||
|
||||
ctx = calloc(1, sizeof(struct nss_ops_ctx));
|
||||
if (ctx == NULL) {
|
||||
return ENOMEM;
|
||||
}
|
||||
*nss_context = ctx;
|
||||
|
||||
ctx->dl_handle = dlopen("libnss_sss.so.2", RTLD_NOW);
|
||||
if (ctx->dl_handle == NULL) {
|
||||
goto fail;
|
||||
}
|
||||
|
||||
ctx->getpwnam_r = dlsym(ctx->dl_handle, "_nss_sss_getpwnam_r");
|
||||
if (ctx->getpwnam_r == NULL) {
|
||||
goto fail;
|
||||
}
|
||||
|
||||
ctx->getpwuid_r = dlsym(ctx->dl_handle, "_nss_sss_getpwuid_r");
|
||||
if (ctx->getpwuid_r == NULL) {
|
||||
goto fail;
|
||||
}
|
||||
|
||||
ctx->getgrnam_r = dlsym(ctx->dl_handle, "_nss_sss_getgrnam_r");
|
||||
if (ctx->getgrnam_r == NULL) {
|
||||
goto fail;
|
||||
}
|
||||
|
||||
ctx->getgrgid_r = dlsym(ctx->dl_handle, "_nss_sss_getgrgid_r");
|
||||
if (ctx->getgrgid_r == NULL) {
|
||||
goto fail;
|
||||
}
|
||||
|
||||
ctx->initgroups_dyn = dlsym(ctx->dl_handle, "_nss_sss_initgroups_dyn");
|
||||
if (ctx->initgroups_dyn == NULL) {
|
||||
goto fail;
|
||||
}
|
||||
|
||||
return 0;
|
||||
|
||||
fail:
|
||||
back_extdom_free_context(nss_context);
|
||||
|
||||
return EINVAL;
|
||||
}
|
||||
|
||||
|
||||
/* Following four functions cannot be implemented with nss_sss.so.2
|
||||
* As result, we simply do nothing here */
|
||||
|
||||
void back_extdom_set_timeout(struct nss_ops_ctx *nss_context,
|
||||
unsigned int timeout) {
|
||||
/* no operation */
|
||||
}
|
||||
|
||||
unsigned int back_extdom_get_timeout(struct nss_ops_ctx *nss_context) {
|
||||
return DEFAULT_MAX_NSS_TIMEOUT;
|
||||
}
|
||||
|
||||
void back_extdom_evict_user(struct nss_ops_ctx *nss_context,
|
||||
const char *name) {
|
||||
/* no operation */
|
||||
}
|
||||
|
||||
void back_extdom_evict_group(struct nss_ops_ctx *nss_context,
|
||||
const char *name) {
|
||||
/* no operation */
|
||||
}
|
||||
|
||||
enum nss_status back_extdom_getpwnam(struct nss_ops_ctx *nss_context,
|
||||
const char *name, struct passwd *pwd,
|
||||
char *buffer, size_t buflen,
|
||||
struct passwd **result,
|
||||
int *lerrno) {
|
||||
enum nss_status ret;
|
||||
|
||||
if (nss_context == NULL) {
|
||||
return NSS_STATUS_UNAVAIL;
|
||||
}
|
||||
|
||||
ret = nss_context->getpwnam_r(name, pwd,
|
||||
buffer, buflen,
|
||||
lerrno);
|
||||
|
||||
if ((ret == NSS_STATUS_SUCCESS) && (result != NULL)) {
|
||||
*result = pwd;
|
||||
*lerrno = 0;
|
||||
}
|
||||
|
||||
return ret;
|
||||
}
|
||||
|
||||
enum nss_status back_extdom_getpwuid(struct nss_ops_ctx *nss_context,
|
||||
uid_t uid, struct passwd *pwd,
|
||||
char *buffer, size_t buflen,
|
||||
struct passwd **result,
|
||||
int *lerrno) {
|
||||
enum nss_status ret;
|
||||
|
||||
if (nss_context == NULL) {
|
||||
return NSS_STATUS_UNAVAIL;
|
||||
}
|
||||
|
||||
ret = nss_context->getpwuid_r(uid, pwd,
|
||||
buffer, buflen,
|
||||
lerrno);
|
||||
|
||||
if ((ret == NSS_STATUS_SUCCESS) && (result != NULL)) {
|
||||
*result = pwd;
|
||||
*lerrno = 0;
|
||||
}
|
||||
|
||||
return ret;
|
||||
}
|
||||
|
||||
enum nss_status back_extdom_getgrnam(struct nss_ops_ctx *nss_context,
|
||||
const char *name, struct group *grp,
|
||||
char *buffer, size_t buflen,
|
||||
struct group **result,
|
||||
int *lerrno) {
|
||||
enum nss_status ret;
|
||||
|
||||
if (nss_context == NULL) {
|
||||
return NSS_STATUS_UNAVAIL;
|
||||
}
|
||||
|
||||
ret = nss_context->getgrnam_r(name, grp,
|
||||
buffer, buflen,
|
||||
lerrno);
|
||||
|
||||
if ((ret == NSS_STATUS_SUCCESS) && (result != NULL)) {
|
||||
*result = grp;
|
||||
*lerrno = 0;
|
||||
}
|
||||
|
||||
return ret;
|
||||
}
|
||||
|
||||
enum nss_status back_extdom_getgrgid(struct nss_ops_ctx *nss_context,
|
||||
gid_t gid, struct group *grp,
|
||||
char *buffer, size_t buflen,
|
||||
struct group **result,
|
||||
int *lerrno) {
|
||||
|
||||
enum nss_status ret;
|
||||
|
||||
if (nss_context == NULL) {
|
||||
return NSS_STATUS_UNAVAIL;
|
||||
}
|
||||
|
||||
ret = nss_context->getgrgid_r(gid, grp,
|
||||
buffer, buflen,
|
||||
lerrno);
|
||||
|
||||
if ((ret == NSS_STATUS_SUCCESS) && (result != NULL)) {
|
||||
*result = grp;
|
||||
*lerrno = 0;
|
||||
}
|
||||
|
||||
return ret;
|
||||
}
|
||||
|
||||
enum nss_status back_extdom_getgrouplist(struct nss_ops_ctx *nss_context,
|
||||
const char *name, gid_t group,
|
||||
gid_t *groups, int *ngroups,
|
||||
int *lerrno) {
|
||||
|
||||
enum nss_status ret = NSS_STATUS_UNAVAIL;
|
||||
long int tsize = MAX (1, *ngroups);
|
||||
gid_t *newgroups = NULL;
|
||||
|
||||
if (nss_context == NULL) {
|
||||
return NSS_STATUS_UNAVAIL;
|
||||
}
|
||||
|
||||
newgroups = (gid_t *) calloc (tsize, sizeof (gid_t));
|
||||
if (newgroups == NULL) {
|
||||
*lerrno = ENOMEM;
|
||||
return NSS_STATUS_TRYAGAIN;
|
||||
}
|
||||
|
||||
newgroups[0] = group;
|
||||
nss_context->initgroups_start = 1;
|
||||
|
||||
ret = nss_context->initgroups_dyn(name, group,
|
||||
&nss_context->initgroups_start,
|
||||
&tsize, &newgroups,
|
||||
-1, lerrno);
|
||||
|
||||
(void) memcpy(groups, newgroups,
|
||||
MIN(*ngroups, nss_context->initgroups_start) * sizeof(gid_t));
|
||||
free(newgroups);
|
||||
|
||||
if (*ngroups < nss_context->initgroups_start) {
|
||||
ret = NSS_STATUS_TRYAGAIN;
|
||||
*lerrno = ERANGE;
|
||||
}
|
||||
|
||||
*ngroups = (int) nss_context->initgroups_start;
|
||||
|
||||
nss_context->initgroups_start = 0;
|
||||
|
||||
return ret;
|
||||
}
|
||||
@@ -0,0 +1,282 @@
|
||||
/** BEGIN COPYRIGHT BLOCK
|
||||
* This program is free software; you can redistribute it and/or modify
|
||||
* it under the terms of the GNU General Public License as published by
|
||||
* the Free Software Foundation, either version 3 of the License, or
|
||||
* (at your option) any later version.
|
||||
*
|
||||
* This program is distributed in the hope that it will be useful,
|
||||
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||
* GNU General Public License for more details.
|
||||
*
|
||||
* You should have received a copy of the GNU General Public License
|
||||
* along with this program. If not, see <http://www.gnu.org/licenses/>.
|
||||
*
|
||||
* Additional permission under GPLv3 section 7:
|
||||
*
|
||||
* In the following paragraph, "GPL" means the GNU General Public
|
||||
* License, version 3 or any later version, and "Non-GPL Code" means
|
||||
* code that is governed neither by the GPL nor a license
|
||||
* compatible with the GPL.
|
||||
*
|
||||
* You may link the code of this Program with Non-GPL Code and convey
|
||||
* linked combinations including the two, provided that such Non-GPL
|
||||
* Code only links to the code of this Program through those well
|
||||
* defined interfaces identified in the file named EXCEPTION found in
|
||||
* the source code files (the "Approved Interfaces"). The files of
|
||||
* Non-GPL Code may instantiate templates or use macros or inline
|
||||
* functions from the Approved Interfaces without causing the resulting
|
||||
* work to be covered by the GPL. Only the copyright holders of this
|
||||
* Program may make changes or additions to the list of Approved
|
||||
* Interfaces.
|
||||
*
|
||||
* Copyright (C) 2013-2017 Red Hat, Inc.
|
||||
* All rights reserved.
|
||||
* END COPYRIGHT BLOCK **/
|
||||
|
||||
#ifdef HAVE_CONFIG_H
|
||||
#include "config.h"
|
||||
#endif
|
||||
|
||||
#include <sys/types.h>
|
||||
#include <stdlib.h>
|
||||
#include <string.h>
|
||||
#include <time.h>
|
||||
#include <unistd.h>
|
||||
#include <errno.h>
|
||||
#include <pwd.h>
|
||||
#include <grp.h>
|
||||
#include "back_extdom.h"
|
||||
|
||||
/* SSSD only exposes *_timeout() variants if the following symbol is defined */
|
||||
#define IPA_389DS_PLUGIN_HELPER_CALLS
|
||||
#include <sss_nss_idmap.h>
|
||||
|
||||
struct nss_ops_ctx {
|
||||
unsigned int timeout;
|
||||
};
|
||||
|
||||
static enum nss_status __convert_sss_nss2nss_status(int errcode) {
|
||||
switch(errcode) {
|
||||
case 0:
|
||||
return NSS_STATUS_SUCCESS;
|
||||
case ENOENT:
|
||||
return NSS_STATUS_NOTFOUND;
|
||||
case ERANGE:
|
||||
return NSS_STATUS_TRYAGAIN;
|
||||
case ETIME:
|
||||
/* fall-through */
|
||||
case ETIMEDOUT:
|
||||
/* fall-through */
|
||||
default:
|
||||
return NSS_STATUS_UNAVAIL;
|
||||
}
|
||||
return NSS_STATUS_UNAVAIL;
|
||||
}
|
||||
|
||||
int back_extdom_init_context(struct nss_ops_ctx **nss_context)
|
||||
{
|
||||
struct nss_ops_ctx *ctx = NULL;
|
||||
|
||||
if (nss_context == NULL) {
|
||||
return EINVAL;
|
||||
}
|
||||
|
||||
ctx = calloc(1, sizeof(struct nss_ops_ctx));
|
||||
|
||||
if (ctx == NULL) {
|
||||
return ENOMEM;
|
||||
}
|
||||
*nss_context = ctx;
|
||||
return 0;
|
||||
}
|
||||
|
||||
void back_extdom_free_context(struct nss_ops_ctx **nss_context)
|
||||
{
|
||||
if ((nss_context == NULL) || (*nss_context == NULL)) {
|
||||
return;
|
||||
}
|
||||
|
||||
free((*nss_context));
|
||||
*nss_context = NULL;
|
||||
}
|
||||
|
||||
|
||||
void back_extdom_set_timeout(struct nss_ops_ctx *nss_context,
|
||||
unsigned int timeout) {
|
||||
if (nss_context == NULL) {
|
||||
return;
|
||||
}
|
||||
|
||||
nss_context->timeout = timeout;
|
||||
}
|
||||
|
||||
unsigned int back_extdom_get_timeout(struct nss_ops_ctx *nss_context) {
|
||||
if (nss_context == NULL) {
|
||||
return DEFAULT_MAX_NSS_TIMEOUT;
|
||||
}
|
||||
|
||||
return nss_context->timeout;
|
||||
}
|
||||
|
||||
void back_extdom_evict_user(struct nss_ops_ctx *nss_context,
|
||||
const char *name) {
|
||||
if (nss_context == NULL) {
|
||||
return;
|
||||
}
|
||||
|
||||
(void) sss_nss_getpwnam_timeout(name, NULL,
|
||||
NULL, 0,
|
||||
NULL,
|
||||
SSS_NSS_EX_FLAG_INVALIDATE_CACHE,
|
||||
nss_context->timeout);
|
||||
}
|
||||
|
||||
void back_extdom_evict_group(struct nss_ops_ctx *nss_context,
|
||||
const char *name) {
|
||||
if (nss_context == NULL) {
|
||||
return;
|
||||
}
|
||||
|
||||
(void) sss_nss_getgrnam_timeout(name, NULL,
|
||||
NULL, 0,
|
||||
NULL,
|
||||
SSS_NSS_EX_FLAG_INVALIDATE_CACHE,
|
||||
nss_context->timeout);
|
||||
}
|
||||
|
||||
enum nss_status back_extdom_getpwnam(struct nss_ops_ctx *nss_context,
|
||||
const char *name, struct passwd *pwd,
|
||||
char *buffer, size_t buflen,
|
||||
struct passwd **result,
|
||||
int *lerrno) {
|
||||
int ret = 0;
|
||||
|
||||
if (nss_context == NULL) {
|
||||
return NSS_STATUS_UNAVAIL;
|
||||
}
|
||||
|
||||
ret = sss_nss_getpwnam_timeout(name, pwd,
|
||||
buffer, buflen,
|
||||
result,
|
||||
SSS_NSS_EX_FLAG_NO_FLAGS,
|
||||
nss_context->timeout);
|
||||
|
||||
/* SSSD uses the same infrastructure to handle sss_nss_get* calls
|
||||
* as nss_sss.so.2 module where 'int *errno' is passed to the helper
|
||||
* but writes down errno into return code so we propagate it in case
|
||||
* of error and translate the return code */
|
||||
if (lerrno != NULL) {
|
||||
*lerrno = ret;
|
||||
}
|
||||
return __convert_sss_nss2nss_status(ret);
|
||||
}
|
||||
|
||||
enum nss_status back_extdom_getpwuid(struct nss_ops_ctx *nss_context,
|
||||
uid_t uid, struct passwd *pwd,
|
||||
char *buffer, size_t buflen,
|
||||
struct passwd **result,
|
||||
int *lerrno) {
|
||||
|
||||
int ret = 0;
|
||||
|
||||
if (nss_context == NULL) {
|
||||
return NSS_STATUS_UNAVAIL;
|
||||
}
|
||||
|
||||
ret = sss_nss_getpwuid_timeout(uid, pwd,
|
||||
buffer, buflen,
|
||||
result,
|
||||
SSS_NSS_EX_FLAG_NO_FLAGS,
|
||||
nss_context->timeout);
|
||||
|
||||
/* SSSD uses the same infrastructure to handle sss_nss_get* calls
|
||||
* as nss_sss.so.2 module where 'int *errno' is passed to the helper
|
||||
* but writes down errno into return code so we propagate it in case
|
||||
* of error and translate the return code */
|
||||
if (lerrno != NULL) {
|
||||
*lerrno = ret;
|
||||
}
|
||||
return __convert_sss_nss2nss_status(ret);
|
||||
}
|
||||
|
||||
enum nss_status back_extdom_getgrnam(struct nss_ops_ctx *nss_context,
|
||||
const char *name, struct group *grp,
|
||||
char *buffer, size_t buflen,
|
||||
struct group **result,
|
||||
int *lerrno) {
|
||||
|
||||
int ret = 0;
|
||||
|
||||
if (nss_context == NULL) {
|
||||
return NSS_STATUS_UNAVAIL;
|
||||
}
|
||||
|
||||
ret = sss_nss_getgrnam_timeout(name, grp,
|
||||
buffer, buflen,
|
||||
result,
|
||||
SSS_NSS_EX_FLAG_NO_FLAGS,
|
||||
nss_context->timeout);
|
||||
|
||||
/* SSSD uses the same infrastructure to handle sss_nss_get* calls
|
||||
* as nss_sss.so.2 module where 'int *errno' is passed to the helper
|
||||
* but writes down errno into return code so we propagate it in case
|
||||
* of error and translate the return code */
|
||||
if (lerrno != NULL) {
|
||||
*lerrno = ret;
|
||||
}
|
||||
return __convert_sss_nss2nss_status(ret);
|
||||
}
|
||||
|
||||
enum nss_status back_extdom_getgrgid(struct nss_ops_ctx *nss_context,
|
||||
gid_t gid, struct group *grp,
|
||||
char *buffer, size_t buflen,
|
||||
struct group **result,
|
||||
int *lerrno) {
|
||||
|
||||
int ret = 0;
|
||||
|
||||
if (nss_context == NULL) {
|
||||
return NSS_STATUS_UNAVAIL;
|
||||
}
|
||||
|
||||
ret = sss_nss_getgrgid_timeout(gid, grp,
|
||||
buffer, buflen,
|
||||
result,
|
||||
SSS_NSS_EX_FLAG_NO_FLAGS,
|
||||
nss_context->timeout);
|
||||
|
||||
/* SSSD uses the same infrastructure to handle sss_nss_get* calls
|
||||
* as nss_sss.so.2 module where 'int *errno' is passed to the helper
|
||||
* but writes down errno into return code so we propagate it in case
|
||||
* of error and translate the return code */
|
||||
if (lerrno != NULL) {
|
||||
*lerrno = ret;
|
||||
}
|
||||
return __convert_sss_nss2nss_status(ret);
|
||||
}
|
||||
|
||||
enum nss_status back_extdom_getgrouplist(struct nss_ops_ctx *nss_context,
|
||||
const char *name, gid_t group,
|
||||
gid_t *groups, int *ngroups,
|
||||
int *lerrno) {
|
||||
int ret = 0;
|
||||
|
||||
if (nss_context == NULL) {
|
||||
return NSS_STATUS_UNAVAIL;
|
||||
}
|
||||
|
||||
ret = sss_nss_getgrouplist_timeout(name, group,
|
||||
groups, ngroups,
|
||||
SSS_NSS_EX_FLAG_NO_FLAGS,
|
||||
nss_context->timeout);
|
||||
|
||||
/* SSSD uses the same infrastructure to handle sss_nss_get* calls
|
||||
* as nss_sss.so.2 module where 'int *errno' is passed to the helper
|
||||
* but writes down errno into return code so we propagate it in case
|
||||
* of error and translate the return code */
|
||||
if (lerrno != NULL) {
|
||||
*lerrno = ret;
|
||||
}
|
||||
return __convert_sss_nss2nss_status(ret);
|
||||
}
|
||||
@@ -37,8 +37,7 @@
|
||||
* All rights reserved.
|
||||
* END COPYRIGHT BLOCK **/
|
||||
|
||||
#ifndef _IPA_EXTDOM_H_
|
||||
#define _IPA_EXTDOM_H_
|
||||
#pragma once
|
||||
|
||||
#ifdef HAVE_CONFIG_H
|
||||
# include <config.h>
|
||||
@@ -60,10 +59,12 @@
|
||||
#include <lber.h>
|
||||
#include <time.h>
|
||||
|
||||
#include <sss_idmap.h>
|
||||
#define IPA_389DS_PLUGIN_HELPER_CALLS
|
||||
#include <sss_nss_idmap.h>
|
||||
|
||||
#define EXOP_EXTDOM_OID "2.16.840.1.113730.3.8.10.4"
|
||||
#define EXOP_EXTDOM_V1_OID "2.16.840.1.113730.3.8.10.4.1"
|
||||
#define EXOP_EXTDOM_V2_OID "2.16.840.1.113730.3.8.10.4.2"
|
||||
|
||||
#define IPA_EXTDOM_PLUGIN_NAME "ipa-extdom-extop"
|
||||
#define IPA_EXTDOM_FEATURE_DESC "IPA trusted domain ID mapper"
|
||||
@@ -71,23 +72,36 @@
|
||||
|
||||
#define IPA_PLUGIN_NAME IPA_EXTDOM_PLUGIN_NAME
|
||||
|
||||
enum extdom_version {
|
||||
EXTDOM_V0 = 0,
|
||||
EXTDOM_V1,
|
||||
EXTDOM_V2
|
||||
};
|
||||
|
||||
enum input_types {
|
||||
INP_SID = 1,
|
||||
INP_NAME,
|
||||
INP_POSIX_UID,
|
||||
INP_POSIX_GID
|
||||
INP_POSIX_GID,
|
||||
INP_CERT,
|
||||
INP_USERNAME,
|
||||
INP_GROUPNAME
|
||||
};
|
||||
|
||||
enum request_types {
|
||||
REQ_SIMPLE = 1,
|
||||
REQ_FULL
|
||||
REQ_FULL,
|
||||
REQ_FULL_WITH_GROUPS
|
||||
};
|
||||
|
||||
enum response_types {
|
||||
RESP_SID = 1,
|
||||
RESP_NAME,
|
||||
RESP_USER,
|
||||
RESP_GROUP
|
||||
RESP_GROUP,
|
||||
RESP_USER_GROUPLIST,
|
||||
RESP_GROUP_MEMBERS,
|
||||
RESP_NAME_LIST
|
||||
};
|
||||
|
||||
struct extdom_req {
|
||||
@@ -107,7 +121,9 @@ struct extdom_req {
|
||||
char *domain_name;
|
||||
gid_t gid;
|
||||
} posix_gid;
|
||||
char *cert;
|
||||
} data;
|
||||
char *err_msg;
|
||||
};
|
||||
|
||||
struct extdom_res {
|
||||
@@ -123,25 +139,37 @@ struct extdom_res {
|
||||
char *user_name;
|
||||
uid_t uid;
|
||||
gid_t gid;
|
||||
char *gecos;
|
||||
char *home;
|
||||
char *shell;
|
||||
size_t ngroups;
|
||||
char **groups;
|
||||
} user;
|
||||
struct {
|
||||
char *domain_name;
|
||||
char *group_name;
|
||||
gid_t gid;
|
||||
size_t nmembers;
|
||||
char **members;
|
||||
} group;
|
||||
} data;
|
||||
};
|
||||
|
||||
struct nss_ops_ctx;
|
||||
|
||||
struct ipa_extdom_ctx {
|
||||
Slapi_ComponentId *plugin_id;
|
||||
char *base_dn;
|
||||
size_t max_nss_buf_size;
|
||||
struct nss_ops_ctx *nss_ctx;
|
||||
Slapi_Counter *extdom_instance_counter;
|
||||
size_t extdom_max_instances;
|
||||
};
|
||||
|
||||
struct domain_info {
|
||||
char *flat_name;
|
||||
char *sid;
|
||||
char *guid;
|
||||
struct sss_idmap_ctx *idmap_ctx;
|
||||
};
|
||||
|
||||
struct pwd_grp {
|
||||
@@ -150,15 +178,39 @@ struct pwd_grp {
|
||||
struct passwd pwd;
|
||||
struct group grp;
|
||||
} data;
|
||||
int ngroups;
|
||||
gid_t *groups;
|
||||
};
|
||||
|
||||
int parse_request_data(struct berval *req_val, struct extdom_req **_req);
|
||||
void free_req_data(struct extdom_req *req);
|
||||
int check_request(struct extdom_req *req, enum extdom_version version);
|
||||
int handle_request(struct ipa_extdom_ctx *ctx, struct extdom_req *req,
|
||||
struct extdom_res **res);
|
||||
int create_response(struct extdom_req *req, struct pwd_grp *pg_data,
|
||||
const char *sid_str, enum sss_id_type id_type,
|
||||
const char *domain_name, struct extdom_res **_res);
|
||||
void free_resp_data(struct extdom_res *res);
|
||||
struct berval **berval);
|
||||
int pack_response(struct extdom_res *res, struct berval **ret_val);
|
||||
#endif /* _IPA_EXTDOM_H_ */
|
||||
int get_buffer(size_t *_buf_len, char **_buf);
|
||||
int getpwnam_r_wrapper(struct ipa_extdom_ctx *ctx, const char *name,
|
||||
struct passwd *pwd, char **_buf, size_t *_buf_len);
|
||||
int getpwuid_r_wrapper(struct ipa_extdom_ctx *ctx, uid_t uid,
|
||||
struct passwd *pwd, char **_buf, size_t *_buf_len);
|
||||
int getgrnam_r_wrapper(struct ipa_extdom_ctx *ctx, const char *name,
|
||||
struct group *grp, char **_buf, size_t *_buf_len);
|
||||
int getgrgid_r_wrapper(struct ipa_extdom_ctx *ctx, gid_t gid,
|
||||
struct group *grp, char **_buf, size_t *_buf_len);
|
||||
int get_user_grouplist(struct ipa_extdom_ctx *ctx, const char *name, gid_t gid,
|
||||
size_t *_ngroups, gid_t **_groups);
|
||||
int pack_ber_sid(const char *sid, struct berval **berval);
|
||||
int pack_ber_name(const char *domain_name, const char *name,
|
||||
struct berval **berval);
|
||||
int pack_ber_user(struct ipa_extdom_ctx *ctx,
|
||||
enum response_types response_type,
|
||||
const char *domain_name, const char *user_name,
|
||||
uid_t uid, gid_t gid,
|
||||
const char *gecos, const char *homedir,
|
||||
const char *shell, struct sss_nss_kv *kv_list,
|
||||
struct berval **berval);
|
||||
int pack_ber_group(enum response_types response_type,
|
||||
const char *domain_name, const char *group_name,
|
||||
gid_t gid, char **members, struct sss_nss_kv *kv_list,
|
||||
struct berval **berval);
|
||||
void set_err_msg(struct extdom_req *req, const char *format, ...);
|
||||
|
||||
@@ -0,0 +1,650 @@
|
||||
/*
|
||||
Authors:
|
||||
Sumit Bose <sbose@redhat.com>
|
||||
|
||||
Copyright (C) 2015 Red Hat
|
||||
|
||||
Extdom tests
|
||||
|
||||
This program is free software; you can redistribute it and/or modify
|
||||
it under the terms of the GNU General Public License as published by
|
||||
the Free Software Foundation; either version 3 of the License, or
|
||||
(at your option) any later version.
|
||||
|
||||
This program is distributed in the hope that it will be useful,
|
||||
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||
GNU General Public License for more details.
|
||||
|
||||
You should have received a copy of the GNU General Public License
|
||||
along with this program. If not, see <http://www.gnu.org/licenses/>.
|
||||
*/
|
||||
#define _GNU_SOURCE
|
||||
|
||||
#include <sched.h>
|
||||
#include <errno.h>
|
||||
#include <stdarg.h>
|
||||
#include <stddef.h>
|
||||
#include <setjmp.h>
|
||||
#include <cmocka.h>
|
||||
|
||||
#include <sys/types.h>
|
||||
#include <pwd.h>
|
||||
|
||||
|
||||
#include "ipa_extdom.h"
|
||||
#include "back_extdom.h"
|
||||
#include <stdio.h>
|
||||
#include <dlfcn.h>
|
||||
|
||||
static bool skip_tests = false;
|
||||
|
||||
#define MAX_BUF (1024*1024*1024)
|
||||
struct test_data {
|
||||
struct extdom_req *req;
|
||||
struct ipa_extdom_ctx *ctx;
|
||||
bool skip_test;
|
||||
};
|
||||
|
||||
/*
|
||||
* redefine logging for mocks
|
||||
*/
|
||||
#ifdef __GNUC__
|
||||
__attribute__((format(printf, 3, 4)))
|
||||
#endif
|
||||
int slapi_log_error(int loglevel, char *subsystem, char *fmt, ...)
|
||||
{
|
||||
va_list ap;
|
||||
va_start(ap, fmt);
|
||||
vprint_error(fmt, ap);
|
||||
va_end(ap);
|
||||
return 0;
|
||||
}
|
||||
|
||||
|
||||
/*
|
||||
* We cannot run cmocka tests against SSSD as that would require to set up SSSD
|
||||
* and the rest of environment. Instead, we compile cmocka tests against
|
||||
* back_extdom_nss_sss.c and re-define context initialization to use
|
||||
* nsswrapper with our test data.
|
||||
*
|
||||
* This means we have to keep struct nss_ops_ctx definition in sync with tests!
|
||||
*/
|
||||
|
||||
struct nss_ops_ctx {
|
||||
void *dl_handle;
|
||||
long int initgroups_start;
|
||||
|
||||
enum nss_status (*getpwnam_r)(const char *name, struct passwd *result,
|
||||
char *buffer, size_t buflen, int *errnop);
|
||||
enum nss_status (*getpwuid_r)(uid_t uid, struct passwd *result,
|
||||
char *buffer, size_t buflen, int *errnop);
|
||||
enum nss_status (*getgrnam_r)(const char *name, struct group *result,
|
||||
char *buffer, size_t buflen, int *errnop);
|
||||
enum nss_status (*getgrgid_r)(gid_t gid, struct group *result,
|
||||
char *buffer, size_t buflen, int *errnop);
|
||||
enum nss_status (*initgroups_dyn)(const char *user, gid_t group,
|
||||
long int *start, long int *size,
|
||||
gid_t **groups, long int limit,
|
||||
int *errnop);
|
||||
};
|
||||
|
||||
int cmocka_extdom_init_context(struct nss_ops_ctx **nss_context)
|
||||
{
|
||||
struct nss_ops_ctx *ctx = NULL;
|
||||
|
||||
if (nss_context == NULL) {
|
||||
return -1;
|
||||
}
|
||||
|
||||
ctx = calloc(1, sizeof(struct nss_ops_ctx));
|
||||
|
||||
if (ctx == NULL) {
|
||||
return ENOMEM;
|
||||
}
|
||||
*nss_context = ctx;
|
||||
|
||||
ctx->dl_handle = dlopen("libnss_files.so.2", RTLD_NOW);
|
||||
if (ctx->dl_handle == NULL) {
|
||||
goto fail;
|
||||
}
|
||||
|
||||
ctx->getpwnam_r = dlsym(ctx->dl_handle, "_nss_files_getpwnam_r");
|
||||
if (ctx->getpwnam_r == NULL) {
|
||||
goto fail;
|
||||
}
|
||||
|
||||
ctx->getpwuid_r = dlsym(ctx->dl_handle, "_nss_files_getpwuid_r");
|
||||
if (ctx->getpwuid_r == NULL) {
|
||||
goto fail;
|
||||
}
|
||||
|
||||
ctx->getgrnam_r = dlsym(ctx->dl_handle, "_nss_files_getgrnam_r");
|
||||
if (ctx->getgrnam_r == NULL) {
|
||||
goto fail;
|
||||
}
|
||||
|
||||
ctx->getgrgid_r = dlsym(ctx->dl_handle, "_nss_files_getgrgid_r");
|
||||
if (ctx->getgrgid_r == NULL) {
|
||||
goto fail;
|
||||
}
|
||||
|
||||
ctx->initgroups_dyn = dlsym(ctx->dl_handle, "_nss_files_initgroups_dyn");
|
||||
if (ctx->initgroups_dyn == NULL) {
|
||||
goto fail;
|
||||
}
|
||||
|
||||
return 0;
|
||||
|
||||
fail:
|
||||
back_extdom_free_context(nss_context);
|
||||
|
||||
return -1;
|
||||
}
|
||||
|
||||
void test_getpwnam_r_wrapper(void **state)
|
||||
{
|
||||
int ret;
|
||||
struct passwd pwd;
|
||||
char *buf;
|
||||
size_t buf_len, max_big_buf_len;
|
||||
struct test_data *test_data;
|
||||
|
||||
test_data = (struct test_data *) *state;
|
||||
if (test_data->skip_test) {
|
||||
skip();
|
||||
}
|
||||
|
||||
ret = get_buffer(&buf_len, &buf);
|
||||
assert_int_equal(ret, 0);
|
||||
|
||||
ret = getpwnam_r_wrapper(test_data->ctx,
|
||||
"non_exisiting_user", &pwd,
|
||||
&buf, &buf_len);
|
||||
assert_int_equal(ret, ENOENT);
|
||||
|
||||
ret = getpwnam_r_wrapper(test_data->ctx,
|
||||
"user", &pwd, &buf, &buf_len);
|
||||
assert_int_equal(ret, 0);
|
||||
assert_string_equal(pwd.pw_name, "user");
|
||||
assert_string_equal(pwd.pw_passwd, "x");
|
||||
assert_int_equal(pwd.pw_uid, 12345);
|
||||
assert_int_equal(pwd.pw_gid, 23456);
|
||||
assert_string_equal(pwd.pw_gecos, "gecos");
|
||||
assert_string_equal(pwd.pw_dir, "/home/user");
|
||||
assert_string_equal(pwd.pw_shell, "/bin/shell");
|
||||
free(buf);
|
||||
|
||||
ret = get_buffer(&buf_len, &buf);
|
||||
assert_int_equal(ret, 0);
|
||||
|
||||
ret = getpwnam_r_wrapper(test_data->ctx,
|
||||
"user_big", &pwd, &buf, &buf_len);
|
||||
assert_int_equal(ret, 0);
|
||||
assert_string_equal(pwd.pw_name, "user_big");
|
||||
assert_string_equal(pwd.pw_passwd, "x");
|
||||
assert_int_equal(pwd.pw_uid, 12346);
|
||||
assert_int_equal(pwd.pw_gid, 23457);
|
||||
assert_int_equal(strlen(pwd.pw_gecos), 4000 * strlen("gecos"));
|
||||
assert_string_equal(pwd.pw_dir, "/home/user_big");
|
||||
assert_string_equal(pwd.pw_shell, "/bin/shell");
|
||||
free(buf);
|
||||
|
||||
ret = get_buffer(&buf_len, &buf);
|
||||
assert_int_equal(ret, 0);
|
||||
|
||||
max_big_buf_len = test_data->ctx->max_nss_buf_size;
|
||||
test_data->ctx->max_nss_buf_size = 1024;
|
||||
ret = getpwnam_r_wrapper(test_data->ctx,
|
||||
"user_big", &pwd, &buf, &buf_len);
|
||||
test_data->ctx->max_nss_buf_size = max_big_buf_len;
|
||||
assert_int_equal(ret, ERANGE);
|
||||
free(buf);
|
||||
}
|
||||
|
||||
void test_getpwuid_r_wrapper(void **state)
|
||||
{
|
||||
int ret;
|
||||
struct passwd pwd;
|
||||
char *buf;
|
||||
size_t buf_len, max_big_buf_len;
|
||||
struct test_data *test_data;
|
||||
|
||||
test_data = (struct test_data *) *state;
|
||||
if (test_data->skip_test) {
|
||||
skip();
|
||||
}
|
||||
|
||||
ret = get_buffer(&buf_len, &buf);
|
||||
assert_int_equal(ret, 0);
|
||||
|
||||
ret = getpwuid_r_wrapper(test_data->ctx, 99999, &pwd, &buf, &buf_len);
|
||||
assert_int_equal(ret, ENOENT);
|
||||
|
||||
ret = getpwuid_r_wrapper(test_data->ctx, 12345, &pwd, &buf, &buf_len);
|
||||
assert_int_equal(ret, 0);
|
||||
assert_string_equal(pwd.pw_name, "user");
|
||||
assert_string_equal(pwd.pw_passwd, "x");
|
||||
assert_int_equal(pwd.pw_uid, 12345);
|
||||
assert_int_equal(pwd.pw_gid, 23456);
|
||||
assert_string_equal(pwd.pw_gecos, "gecos");
|
||||
assert_string_equal(pwd.pw_dir, "/home/user");
|
||||
assert_string_equal(pwd.pw_shell, "/bin/shell");
|
||||
free(buf);
|
||||
|
||||
ret = get_buffer(&buf_len, &buf);
|
||||
assert_int_equal(ret, 0);
|
||||
|
||||
ret = getpwuid_r_wrapper(test_data->ctx, 12346, &pwd, &buf, &buf_len);
|
||||
assert_int_equal(ret, 0);
|
||||
assert_string_equal(pwd.pw_name, "user_big");
|
||||
assert_string_equal(pwd.pw_passwd, "x");
|
||||
assert_int_equal(pwd.pw_uid, 12346);
|
||||
assert_int_equal(pwd.pw_gid, 23457);
|
||||
assert_int_equal(strlen(pwd.pw_gecos), 4000 * strlen("gecos"));
|
||||
assert_string_equal(pwd.pw_dir, "/home/user_big");
|
||||
assert_string_equal(pwd.pw_shell, "/bin/shell");
|
||||
free(buf);
|
||||
|
||||
ret = get_buffer(&buf_len, &buf);
|
||||
assert_int_equal(ret, 0);
|
||||
|
||||
max_big_buf_len = test_data->ctx->max_nss_buf_size;
|
||||
test_data->ctx->max_nss_buf_size = 1024;
|
||||
ret = getpwuid_r_wrapper(test_data->ctx, 12346, &pwd, &buf, &buf_len);
|
||||
test_data->ctx->max_nss_buf_size = max_big_buf_len;
|
||||
assert_int_equal(ret, ERANGE);
|
||||
free(buf);
|
||||
}
|
||||
|
||||
void test_getgrnam_r_wrapper(void **state)
|
||||
{
|
||||
int ret;
|
||||
struct group grp;
|
||||
char *buf;
|
||||
size_t buf_len, max_big_buf_len;
|
||||
struct test_data *test_data;
|
||||
|
||||
test_data = (struct test_data *) *state;
|
||||
if (test_data->skip_test) {
|
||||
skip();
|
||||
}
|
||||
|
||||
ret = get_buffer(&buf_len, &buf);
|
||||
assert_int_equal(ret, 0);
|
||||
|
||||
ret = getgrnam_r_wrapper(test_data->ctx,
|
||||
"non_exisiting_group", &grp, &buf, &buf_len);
|
||||
assert_int_equal(ret, ENOENT);
|
||||
|
||||
ret = getgrnam_r_wrapper(test_data->ctx, "group", &grp, &buf, &buf_len);
|
||||
assert_int_equal(ret, 0);
|
||||
assert_string_equal(grp.gr_name, "group");
|
||||
assert_string_equal(grp.gr_passwd, "x");
|
||||
assert_int_equal(grp.gr_gid, 11111);
|
||||
assert_string_equal(grp.gr_mem[0], "member0001");
|
||||
assert_string_equal(grp.gr_mem[1], "member0002");
|
||||
assert_null(grp.gr_mem[2]);
|
||||
free(buf);
|
||||
|
||||
ret = get_buffer(&buf_len, &buf);
|
||||
assert_int_equal(ret, 0);
|
||||
|
||||
ret = getgrnam_r_wrapper(test_data->ctx, "group_big", &grp, &buf, &buf_len);
|
||||
assert_int_equal(ret, 0);
|
||||
assert_string_equal(grp.gr_name, "group_big");
|
||||
assert_string_equal(grp.gr_passwd, "x");
|
||||
assert_int_equal(grp.gr_gid, 22222);
|
||||
assert_string_equal(grp.gr_mem[0], "member0001");
|
||||
assert_string_equal(grp.gr_mem[1], "member0002");
|
||||
free(buf);
|
||||
|
||||
ret = get_buffer(&buf_len, &buf);
|
||||
assert_int_equal(ret, 0);
|
||||
|
||||
max_big_buf_len = test_data->ctx->max_nss_buf_size;
|
||||
test_data->ctx->max_nss_buf_size = 1024;
|
||||
ret = getgrnam_r_wrapper(test_data->ctx, "group_big", &grp, &buf, &buf_len);
|
||||
test_data->ctx->max_nss_buf_size = max_big_buf_len;
|
||||
assert_int_equal(ret, ERANGE);
|
||||
free(buf);
|
||||
}
|
||||
|
||||
void test_getgrgid_r_wrapper(void **state)
|
||||
{
|
||||
int ret;
|
||||
struct group grp;
|
||||
char *buf;
|
||||
size_t buf_len, max_big_buf_len;
|
||||
struct test_data *test_data;
|
||||
|
||||
test_data = (struct test_data *) *state;
|
||||
if (test_data->skip_test) {
|
||||
skip();
|
||||
}
|
||||
|
||||
ret = get_buffer(&buf_len, &buf);
|
||||
assert_int_equal(ret, 0);
|
||||
|
||||
ret = getgrgid_r_wrapper(test_data->ctx, 99999, &grp, &buf, &buf_len);
|
||||
assert_int_equal(ret, ENOENT);
|
||||
|
||||
ret = getgrgid_r_wrapper(test_data->ctx, 11111, &grp, &buf, &buf_len);
|
||||
assert_int_equal(ret, 0);
|
||||
assert_string_equal(grp.gr_name, "group");
|
||||
assert_string_equal(grp.gr_passwd, "x");
|
||||
assert_int_equal(grp.gr_gid, 11111);
|
||||
assert_string_equal(grp.gr_mem[0], "member0001");
|
||||
assert_string_equal(grp.gr_mem[1], "member0002");
|
||||
assert_null(grp.gr_mem[2]);
|
||||
free(buf);
|
||||
|
||||
ret = get_buffer(&buf_len, &buf);
|
||||
assert_int_equal(ret, 0);
|
||||
|
||||
ret = getgrgid_r_wrapper(test_data->ctx, 22222, &grp, &buf, &buf_len);
|
||||
assert_int_equal(ret, 0);
|
||||
assert_string_equal(grp.gr_name, "group_big");
|
||||
assert_string_equal(grp.gr_passwd, "x");
|
||||
assert_int_equal(grp.gr_gid, 22222);
|
||||
assert_string_equal(grp.gr_mem[0], "member0001");
|
||||
assert_string_equal(grp.gr_mem[1], "member0002");
|
||||
free(buf);
|
||||
|
||||
ret = get_buffer(&buf_len, &buf);
|
||||
assert_int_equal(ret, 0);
|
||||
|
||||
max_big_buf_len = test_data->ctx->max_nss_buf_size;
|
||||
test_data->ctx->max_nss_buf_size = 1024;
|
||||
ret = getgrgid_r_wrapper(test_data->ctx, 22222, &grp, &buf, &buf_len);
|
||||
test_data->ctx->max_nss_buf_size = max_big_buf_len;
|
||||
assert_int_equal(ret, ERANGE);
|
||||
free(buf);
|
||||
}
|
||||
|
||||
void test_get_user_grouplist(void **state)
|
||||
{
|
||||
int ret;
|
||||
size_t ngroups;
|
||||
gid_t *groups;
|
||||
size_t c;
|
||||
struct test_data *test_data;
|
||||
|
||||
test_data = (struct test_data *) *state;
|
||||
if (test_data->skip_test) {
|
||||
skip();
|
||||
}
|
||||
|
||||
/* This is a bit odd behaviour of getgrouplist() it does not check if the
|
||||
* user exists, only if memberships of the user can be found. */
|
||||
ret = get_user_grouplist(test_data->ctx,
|
||||
"non_exisiting_user", 23456, &ngroups, &groups);
|
||||
assert_int_equal(ret, LDAP_SUCCESS);
|
||||
assert_int_equal(ngroups, 1);
|
||||
assert_int_equal(groups[0], 23456);
|
||||
free(groups);
|
||||
|
||||
ret = get_user_grouplist(test_data->ctx,
|
||||
"member0001", 23456, &ngroups, &groups);
|
||||
assert_int_equal(ret, LDAP_SUCCESS);
|
||||
assert_int_equal(ngroups, 3);
|
||||
assert_int_equal(groups[0], 23456);
|
||||
assert_int_equal(groups[1], 11111);
|
||||
assert_int_equal(groups[2], 22222);
|
||||
free(groups);
|
||||
|
||||
ret = get_user_grouplist(test_data->ctx,
|
||||
"member0003", 23456, &ngroups, &groups);
|
||||
assert_int_equal(ret, LDAP_SUCCESS);
|
||||
assert_int_equal(ngroups, 2);
|
||||
assert_int_equal(groups[0], 23456);
|
||||
assert_int_equal(groups[1], 22222);
|
||||
free(groups);
|
||||
|
||||
ret = get_user_grouplist(test_data->ctx,
|
||||
"user_big", 23456, &ngroups, &groups);
|
||||
assert_int_equal(ret, LDAP_SUCCESS);
|
||||
assert_int_equal(ngroups, 1001);
|
||||
assert_int_equal(groups[0], 23456);
|
||||
for (c = 1; c < ngroups; c++) {
|
||||
assert_int_equal(groups[c], 29999 + c);
|
||||
}
|
||||
free(groups);
|
||||
}
|
||||
|
||||
static int extdom_req_setup(void **state)
|
||||
{
|
||||
struct test_data *test_data;
|
||||
|
||||
test_data = calloc(sizeof(struct test_data), 1);
|
||||
assert_non_null(test_data);
|
||||
|
||||
test_data->req = calloc(sizeof(struct extdom_req), 1);
|
||||
assert_non_null(test_data->req);
|
||||
|
||||
test_data->ctx = calloc(sizeof(struct ipa_extdom_ctx), 1);
|
||||
assert_non_null(test_data->ctx);
|
||||
|
||||
test_data->ctx->max_nss_buf_size = MAX_BUF;
|
||||
|
||||
assert_int_equal(cmocka_extdom_init_context(&test_data->ctx->nss_ctx), 0);
|
||||
assert_non_null(test_data->ctx->nss_ctx);
|
||||
|
||||
back_extdom_set_timeout(test_data->ctx->nss_ctx, 10000);
|
||||
|
||||
test_data->skip_test = skip_tests;
|
||||
if (chroot("test_data") != 0) {
|
||||
test_data->skip_test = true;
|
||||
}
|
||||
*state = test_data;
|
||||
|
||||
return 0;
|
||||
}
|
||||
|
||||
static int extdom_req_teardown(void **state)
|
||||
{
|
||||
struct test_data *test_data;
|
||||
|
||||
test_data = (struct test_data *) *state;
|
||||
|
||||
free_req_data(test_data->req);
|
||||
back_extdom_free_context(&test_data->ctx->nss_ctx);
|
||||
free(test_data->ctx);
|
||||
free(test_data);
|
||||
|
||||
return 0;
|
||||
}
|
||||
|
||||
void test_set_err_msg(void **state)
|
||||
{
|
||||
struct extdom_req *req;
|
||||
struct test_data *test_data;
|
||||
|
||||
test_data = (struct test_data *) *state;
|
||||
req = test_data->req;
|
||||
|
||||
assert_null(req->err_msg);
|
||||
|
||||
set_err_msg(NULL, NULL);
|
||||
assert_null(req->err_msg);
|
||||
|
||||
set_err_msg(req, NULL);
|
||||
assert_null(req->err_msg);
|
||||
|
||||
set_err_msg(req, "Test [%s][%d].", "ABCD", 1234);
|
||||
assert_non_null(req->err_msg);
|
||||
assert_string_equal(req->err_msg, "Test [ABCD][1234].");
|
||||
|
||||
set_err_msg(req, "2nd Test [%s][%d].", "ABCD", 1234);
|
||||
assert_non_null(req->err_msg);
|
||||
assert_string_equal(req->err_msg, "Test [ABCD][1234].");
|
||||
}
|
||||
|
||||
#define TEST_SID "S-1-2-3-4"
|
||||
#define TEST_DOMAIN_NAME "DOMAIN"
|
||||
|
||||
/* Always time out for test */
|
||||
static
|
||||
enum nss_status getgrgid_r_timeout(gid_t gid, struct group *result,
|
||||
char *buffer, size_t buflen, int *errnop) {
|
||||
return NSS_STATUS_UNAVAIL;
|
||||
}
|
||||
|
||||
void test_pack_ber_user_timeout(void **state)
|
||||
{
|
||||
int ret;
|
||||
struct berval *resp_val = NULL;
|
||||
struct test_data *test_data;
|
||||
enum nss_status (*oldgetgrgid_r)(gid_t gid, struct group *result,
|
||||
char *buffer, size_t buflen, int *errnop);
|
||||
|
||||
test_data = (struct test_data *) *state;
|
||||
|
||||
oldgetgrgid_r = test_data->ctx->nss_ctx->getgrgid_r;
|
||||
test_data->ctx->nss_ctx->getgrgid_r = getgrgid_r_timeout;
|
||||
|
||||
ret = pack_ber_user(test_data->ctx, RESP_USER_GROUPLIST,
|
||||
TEST_DOMAIN_NAME, "member001", 12345, 54321,
|
||||
"gecos", "homedir", "shell", NULL, &resp_val);
|
||||
test_data->ctx->nss_ctx->getgrgid_r = oldgetgrgid_r;
|
||||
assert_int_equal(ret, LDAP_TIMELIMIT_EXCEEDED);
|
||||
ber_bvfree(resp_val);
|
||||
}
|
||||
|
||||
char res_sid[] = {0x30, 0x0e, 0x0a, 0x01, 0x01, 0x04, 0x09, 0x53, 0x2d, 0x31, \
|
||||
0x2d, 0x32, 0x2d, 0x33, 0x2d, 0x34};
|
||||
char res_nam[] = {0x30, 0x13, 0x0a, 0x01, 0x02, 0x30, 0x0e, 0x04, 0x06, 0x44, \
|
||||
0x4f, 0x4d, 0x41, 0x49, 0x4e, 0x04, 0x04, 0x74, 0x65, 0x73, \
|
||||
0x74};
|
||||
char res_uid[] = {0x30, 0x1c, 0x0a, 0x01, 0x03, 0x30, 0x17, 0x04, 0x06, 0x44, \
|
||||
0x4f, 0x4d, 0x41, 0x49, 0x4e, 0x04, 0x04, 0x74, 0x65, 0x73, \
|
||||
0x74, 0x02, 0x02, 0x30, 0x39, 0x02, 0x03, 0x00, 0xd4, 0x31};
|
||||
char res_gid[] = {0x30, 0x1e, 0x0a, 0x01, 0x04, 0x30, 0x19, 0x04, 0x06, 0x44, \
|
||||
0x4f, 0x4d, 0x41, 0x49, 0x4e, 0x04, 0x0a, 0x74, 0x65, 0x73, \
|
||||
0x74, 0x5f, 0x67, 0x72, 0x6f, 0x75, 0x70, 0x02, 0x03, 0x00, \
|
||||
0xd4, 0x31};
|
||||
|
||||
void test_encode(void **state)
|
||||
{
|
||||
int ret;
|
||||
struct berval *resp_val;
|
||||
struct ipa_extdom_ctx *ctx;
|
||||
struct test_data *test_data;
|
||||
|
||||
test_data = (struct test_data *) *state;
|
||||
ctx = test_data->ctx;
|
||||
|
||||
ctx->max_nss_buf_size = (128*1024*1024);
|
||||
|
||||
ret = pack_ber_sid(TEST_SID, &resp_val);
|
||||
assert_int_equal(ret, LDAP_SUCCESS);
|
||||
assert_int_equal(sizeof(res_sid), resp_val->bv_len);
|
||||
assert_memory_equal(res_sid, resp_val->bv_val, resp_val->bv_len);
|
||||
ber_bvfree(resp_val);
|
||||
|
||||
ret = pack_ber_name(TEST_DOMAIN_NAME, "test", &resp_val);
|
||||
assert_int_equal(ret, LDAP_SUCCESS);
|
||||
assert_int_equal(sizeof(res_nam), resp_val->bv_len);
|
||||
assert_memory_equal(res_nam, resp_val->bv_val, resp_val->bv_len);
|
||||
ber_bvfree(resp_val);
|
||||
|
||||
ret = pack_ber_user(ctx, RESP_USER, TEST_DOMAIN_NAME, "test", 12345, 54321,
|
||||
NULL, NULL, NULL, NULL, &resp_val);
|
||||
assert_int_equal(ret, LDAP_SUCCESS);
|
||||
assert_int_equal(sizeof(res_uid), resp_val->bv_len);
|
||||
assert_memory_equal(res_uid, resp_val->bv_val, resp_val->bv_len);
|
||||
ber_bvfree(resp_val);
|
||||
|
||||
ret = pack_ber_group(RESP_GROUP, TEST_DOMAIN_NAME, "test_group", 54321,
|
||||
NULL, NULL, &resp_val);
|
||||
assert_int_equal(ret, LDAP_SUCCESS);
|
||||
assert_int_equal(sizeof(res_gid), resp_val->bv_len);
|
||||
assert_memory_equal(res_gid, resp_val->bv_val, resp_val->bv_len);
|
||||
ber_bvfree(resp_val);
|
||||
}
|
||||
|
||||
char req_sid[] = {0x30, 0x11, 0x0a, 0x01, 0x01, 0x0a, 0x01, 0x01, 0x04, 0x09, \
|
||||
0x53, 0x2d, 0x31, 0x2d, 0x32, 0x2d, 0x33, 0x2d, 0x34};
|
||||
char req_nam[] = {0x30, 0x16, 0x0a, 0x01, 0x02, 0x0a, 0x01, 0x01, 0x30, 0x0e, \
|
||||
0x04, 0x06, 0x44, 0x4f, 0x4d, 0x41, 0x49, 0x4e, 0x04, 0x04, \
|
||||
0x74, 0x65, 0x73, 0x74};
|
||||
char req_uid[] = {0x30, 0x14, 0x0a, 0x01, 0x03, 0x0a, 0x01, 0x01, 0x30, 0x0c, \
|
||||
0x04, 0x06, 0x44, 0x4f, 0x4d, 0x41, 0x49, 0x4e, 0x02, 0x02, \
|
||||
0x30, 0x39};
|
||||
char req_gid[] = {0x30, 0x15, 0x0a, 0x01, 0x04, 0x0a, 0x01, 0x01, 0x30, 0x0d, \
|
||||
0x04, 0x06, 0x44, 0x4f, 0x4d, 0x41, 0x49, 0x4e, 0x02, 0x03, \
|
||||
0x00, 0xd4, 0x31};
|
||||
|
||||
void test_decode(void **state)
|
||||
{
|
||||
struct berval req_val;
|
||||
struct extdom_req *req;
|
||||
int ret;
|
||||
|
||||
req_val.bv_val = req_sid;
|
||||
req_val.bv_len = sizeof(req_sid);
|
||||
|
||||
ret = parse_request_data(&req_val, &req);
|
||||
|
||||
assert_int_equal(ret, LDAP_SUCCESS);
|
||||
assert_int_equal(req->input_type, INP_SID);
|
||||
assert_int_equal(req->request_type, REQ_SIMPLE);
|
||||
assert_string_equal(req->data.sid, "S-1-2-3-4");
|
||||
free_req_data(req);
|
||||
|
||||
req_val.bv_val = req_nam;
|
||||
req_val.bv_len = sizeof(req_nam);
|
||||
|
||||
ret = parse_request_data(&req_val, &req);
|
||||
|
||||
assert_int_equal(ret, LDAP_SUCCESS);
|
||||
assert_int_equal(req->input_type, INP_NAME);
|
||||
assert_int_equal(req->request_type, REQ_SIMPLE);
|
||||
assert_string_equal(req->data.name.domain_name, "DOMAIN");
|
||||
assert_string_equal(req->data.name.object_name, "test");
|
||||
free_req_data(req);
|
||||
|
||||
req_val.bv_val = req_uid;
|
||||
req_val.bv_len = sizeof(req_uid);
|
||||
|
||||
ret = parse_request_data(&req_val, &req);
|
||||
|
||||
assert_int_equal(ret, LDAP_SUCCESS);
|
||||
assert_int_equal(req->input_type, INP_POSIX_UID);
|
||||
assert_int_equal(req->request_type, REQ_SIMPLE);
|
||||
assert_string_equal(req->data.posix_uid.domain_name, "DOMAIN");
|
||||
assert_int_equal(req->data.posix_uid.uid, 12345);
|
||||
free_req_data(req);
|
||||
|
||||
req_val.bv_val = req_gid;
|
||||
req_val.bv_len = sizeof(req_gid);
|
||||
|
||||
ret = parse_request_data(&req_val, &req);
|
||||
|
||||
assert_int_equal(ret, LDAP_SUCCESS);
|
||||
assert_int_equal(req->input_type, INP_POSIX_GID);
|
||||
assert_int_equal(req->request_type, REQ_SIMPLE);
|
||||
assert_string_equal(req->data.posix_gid.domain_name, "DOMAIN");
|
||||
assert_int_equal(req->data.posix_gid.gid, 54321);
|
||||
free_req_data(req);
|
||||
}
|
||||
|
||||
int main(int argc, const char *argv[])
|
||||
{
|
||||
const struct CMUnitTest tests[] = {
|
||||
cmocka_unit_test(test_pack_ber_user_timeout),
|
||||
cmocka_unit_test(test_getpwnam_r_wrapper),
|
||||
cmocka_unit_test(test_getpwuid_r_wrapper),
|
||||
cmocka_unit_test(test_getgrnam_r_wrapper),
|
||||
cmocka_unit_test(test_getgrgid_r_wrapper),
|
||||
cmocka_unit_test(test_get_user_grouplist),
|
||||
cmocka_unit_test_setup_teardown(test_set_err_msg,
|
||||
extdom_req_setup, extdom_req_teardown),
|
||||
cmocka_unit_test_setup_teardown(test_encode,
|
||||
extdom_req_setup, extdom_req_teardown),
|
||||
cmocka_unit_test(test_decode),
|
||||
};
|
||||
|
||||
skip_tests = (unshare(CLONE_NEWUSER) == -1);
|
||||
return cmocka_run_group_tests(tests, extdom_req_setup, extdom_req_teardown);
|
||||
}
|
||||
File diff suppressed because it is too large
Load Diff
@@ -38,8 +38,11 @@
|
||||
* END COPYRIGHT BLOCK **/
|
||||
|
||||
#include "ipa_extdom.h"
|
||||
#include "back_extdom.h"
|
||||
#include "util.h"
|
||||
|
||||
#define DEFAULT_MAX_NSS_BUFFER (128*1024*1024)
|
||||
|
||||
Slapi_PluginDesc ipa_extdom_plugin_desc = {
|
||||
IPA_EXTDOM_FEATURE_DESC,
|
||||
"FreeIPA project",
|
||||
@@ -49,6 +52,8 @@ Slapi_PluginDesc ipa_extdom_plugin_desc = {
|
||||
|
||||
static char *ipa_extdom_oid_list[] = {
|
||||
EXOP_EXTDOM_OID,
|
||||
EXOP_EXTDOM_V1_OID,
|
||||
EXOP_EXTDOM_V2_OID,
|
||||
NULL
|
||||
};
|
||||
|
||||
@@ -57,8 +62,112 @@ static char *ipa_extdom_name_list[] = {
|
||||
NULL
|
||||
};
|
||||
|
||||
#define NSSLAPD_THREADNUMBER "nsslapd-threadnumber"
|
||||
static int ipa_get_threadnumber(Slapi_ComponentId *plugin_id, size_t *threadnumber)
|
||||
{
|
||||
Slapi_PBlock *search_pb = NULL;
|
||||
int search_result;
|
||||
Slapi_Entry **search_entries = NULL;
|
||||
int ret;
|
||||
char *attrs[] = { NSSLAPD_THREADNUMBER, NULL };
|
||||
|
||||
search_pb = slapi_pblock_new();
|
||||
if (search_pb == NULL) {
|
||||
LOG_FATAL("Failed to create new pblock.\n");
|
||||
ret = LDAP_OPERATIONS_ERROR;
|
||||
goto done;
|
||||
}
|
||||
|
||||
slapi_search_internal_set_pb(search_pb, "cn=config",
|
||||
LDAP_SCOPE_BASE, "objectclass=*",
|
||||
attrs, 0, NULL, NULL, plugin_id, 0);
|
||||
|
||||
ret = slapi_search_internal_pb(search_pb);
|
||||
if (ret != 0) {
|
||||
LOG_FATAL("Starting internal search failed.\n");
|
||||
goto done;
|
||||
}
|
||||
|
||||
ret = slapi_pblock_get(search_pb, SLAPI_PLUGIN_INTOP_RESULT,
|
||||
&search_result);
|
||||
if (ret != 0 || search_result != LDAP_SUCCESS) {
|
||||
LOG_FATAL("Internal search failed [%d][%d].\n", ret, search_result);
|
||||
ret = LDAP_OPERATIONS_ERROR;
|
||||
goto done;
|
||||
}
|
||||
|
||||
ret = slapi_pblock_get(search_pb, SLAPI_PLUGIN_INTOP_SEARCH_ENTRIES,
|
||||
&search_entries);
|
||||
if (ret != 0) {
|
||||
LOG_FATAL("Failed to read searched entries.\n");
|
||||
goto done;
|
||||
}
|
||||
|
||||
if (search_entries == NULL || search_entries[0] == NULL) {
|
||||
LOG("No existing entries.\n");
|
||||
ret = LDAP_NO_SUCH_OBJECT;
|
||||
goto done;
|
||||
}
|
||||
|
||||
if (search_entries[1] != NULL) {
|
||||
LOG("Too many results found.\n");
|
||||
ret = LDAP_OPERATIONS_ERROR;
|
||||
goto done;
|
||||
}
|
||||
|
||||
*threadnumber = slapi_entry_attr_get_uint(search_entries[0],
|
||||
NSSLAPD_THREADNUMBER);
|
||||
|
||||
if (*threadnumber <= 0) {
|
||||
LOG_FATAL("No thread number found.\n");
|
||||
ret = LDAP_OPERATIONS_ERROR;
|
||||
goto done;
|
||||
}
|
||||
|
||||
LOG("Found thread number [%zu].\n", *threadnumber);
|
||||
ret = 0;
|
||||
|
||||
done:
|
||||
slapi_free_search_results_internal(search_pb);
|
||||
slapi_pblock_destroy(search_pb);
|
||||
|
||||
return ret;
|
||||
}
|
||||
|
||||
static int ipa_extdom_start(Slapi_PBlock *pb)
|
||||
{
|
||||
int ret;
|
||||
struct ipa_extdom_ctx *ctx;
|
||||
size_t threadnumber;
|
||||
|
||||
ret = slapi_pblock_get(pb, SLAPI_PLUGIN_PRIVATE, &ctx);
|
||||
if (ret != 0) {
|
||||
return LDAP_OPERATIONS_ERROR;
|
||||
}
|
||||
|
||||
ret = ipa_get_threadnumber(ctx->plugin_id, &threadnumber);
|
||||
if (ret != 0) {
|
||||
LOG("Unable to get thread number [%d]!\n", ret);
|
||||
return ret;
|
||||
}
|
||||
|
||||
if (ctx->extdom_max_instances >= threadnumber) {
|
||||
LOG("Option ipaExtdomMaxInstances [%zu] is larger or equal the number "
|
||||
"of worker threads [%zu], using defaults.\n",
|
||||
ctx->extdom_max_instances, threadnumber);
|
||||
ctx->extdom_max_instances = 0;
|
||||
}
|
||||
|
||||
if (ctx->extdom_max_instances == 0) {
|
||||
ctx->extdom_max_instances = (size_t)(threadnumber * 0.8);
|
||||
if (ctx->extdom_max_instances == 0) {
|
||||
ctx->extdom_max_instances = 1;
|
||||
}
|
||||
}
|
||||
|
||||
LOG("Using maximal [%zu] extdom instances for [%zu] threads.\n",
|
||||
ctx->extdom_max_instances, threadnumber);
|
||||
|
||||
return LDAP_SUCCESS;
|
||||
}
|
||||
|
||||
@@ -71,8 +180,9 @@ static int ipa_extdom_extop(Slapi_PBlock *pb)
|
||||
struct berval *req_val = NULL;
|
||||
struct berval *ret_val = NULL;
|
||||
struct extdom_req *req = NULL;
|
||||
struct extdom_res *res = NULL;
|
||||
struct ipa_extdom_ctx *ctx;
|
||||
enum extdom_version version;
|
||||
bool counter_set = false;
|
||||
|
||||
ret = slapi_pblock_get(pb, SLAPI_EXT_OP_REQ_OID, &oid);
|
||||
if (ret != 0) {
|
||||
@@ -82,7 +192,13 @@ static int ipa_extdom_extop(Slapi_PBlock *pb)
|
||||
}
|
||||
LOG("Received extended operation request with OID %s\n", oid);
|
||||
|
||||
if (strcasecmp(oid, EXOP_EXTDOM_OID) != 0) {
|
||||
if (strcasecmp(oid, EXOP_EXTDOM_OID) == 0) {
|
||||
version = EXTDOM_V0;
|
||||
} else if (strcasecmp(oid, EXOP_EXTDOM_V1_OID) == 0) {
|
||||
version = EXTDOM_V1;
|
||||
} else if (strcasecmp(oid, EXOP_EXTDOM_V2_OID) == 0) {
|
||||
version = EXTDOM_V2;
|
||||
} else {
|
||||
return SLAPI_PLUGIN_EXTENDED_NOT_HANDLED;
|
||||
}
|
||||
|
||||
@@ -100,6 +216,16 @@ static int ipa_extdom_extop(Slapi_PBlock *pb)
|
||||
goto done;
|
||||
}
|
||||
|
||||
if (slapi_counter_get_value(ctx->extdom_instance_counter)
|
||||
> ctx->extdom_max_instances) {
|
||||
rc = LDAP_BUSY;
|
||||
err_msg = "Too many extdom instances running.\n";
|
||||
goto done;
|
||||
}
|
||||
|
||||
slapi_counter_increment(ctx->extdom_instance_counter);
|
||||
counter_set = true;
|
||||
|
||||
ret = parse_request_data(req_val, &req);
|
||||
if (ret != LDAP_SUCCESS) {
|
||||
rc = LDAP_UNWILLING_TO_PERFORM;
|
||||
@@ -107,21 +233,27 @@ static int ipa_extdom_extop(Slapi_PBlock *pb)
|
||||
goto done;
|
||||
}
|
||||
|
||||
ret = handle_request(ctx, req, &res);
|
||||
ret = check_request(req, version);
|
||||
if (ret != LDAP_SUCCESS) {
|
||||
rc = LDAP_OPERATIONS_ERROR;
|
||||
err_msg = "Failed to handle the request.\n";
|
||||
rc = LDAP_UNWILLING_TO_PERFORM;
|
||||
err_msg = "Error in request data.\n";
|
||||
goto done;
|
||||
}
|
||||
|
||||
ret = pack_response(res, &ret_val);
|
||||
ret = handle_request(ctx, req, &ret_val);
|
||||
if (ret != LDAP_SUCCESS) {
|
||||
rc = LDAP_OPERATIONS_ERROR;
|
||||
err_msg = "Failed to pack the response.\n";
|
||||
if (ret == LDAP_NO_SUCH_OBJECT) {
|
||||
rc = LDAP_NO_SUCH_OBJECT;
|
||||
} else if (ret == LDAP_TIMELIMIT_EXCEEDED) {
|
||||
rc = LDAP_TIMELIMIT_EXCEEDED;
|
||||
} else {
|
||||
rc = LDAP_OPERATIONS_ERROR;
|
||||
err_msg = "Failed to handle the request.\n";
|
||||
}
|
||||
goto done;
|
||||
}
|
||||
|
||||
ret = slapi_pblock_set(pb, SLAPI_EXT_OP_RET_OID, EXOP_EXTDOM_OID);
|
||||
ret = slapi_pblock_set(pb, SLAPI_EXT_OP_RET_OID, oid);
|
||||
if (ret != 0) {
|
||||
rc = LDAP_OPERATIONS_ERROR;
|
||||
err_msg = "Failed to set the OID for the response.\n";
|
||||
@@ -138,12 +270,23 @@ static int ipa_extdom_extop(Slapi_PBlock *pb)
|
||||
rc = LDAP_SUCCESS;
|
||||
|
||||
done:
|
||||
free_req_data(req);
|
||||
free_resp_data(res);
|
||||
if (counter_set) {
|
||||
if (slapi_counter_get_value(ctx->extdom_instance_counter) == 0) {
|
||||
LOG("Instance counter already 0, this is unexpected.\n");
|
||||
} else {
|
||||
slapi_counter_decrement(ctx->extdom_instance_counter);
|
||||
}
|
||||
}
|
||||
|
||||
if ((req != NULL) && (req->err_msg != NULL)) {
|
||||
err_msg = req->err_msg;
|
||||
}
|
||||
if (err_msg != NULL) {
|
||||
LOG("%s", err_msg);
|
||||
}
|
||||
slapi_send_ldap_result(pb, rc, NULL, err_msg, 0, NULL);
|
||||
ber_bvfree(ret_val);
|
||||
free_req_data(req);
|
||||
return SLAPI_PLUGIN_EXTENDED_SENT_RESULT;
|
||||
}
|
||||
|
||||
@@ -152,6 +295,7 @@ static int ipa_extdom_init_ctx(Slapi_PBlock *pb, struct ipa_extdom_ctx **_ctx)
|
||||
struct ipa_extdom_ctx *ctx;
|
||||
Slapi_Entry *e;
|
||||
int ret;
|
||||
unsigned int timeout;
|
||||
|
||||
ctx = calloc(1, sizeof(struct ipa_extdom_ctx));
|
||||
if (!ctx) {
|
||||
@@ -181,6 +325,38 @@ static int ipa_extdom_init_ctx(Slapi_PBlock *pb, struct ipa_extdom_ctx **_ctx)
|
||||
goto done;
|
||||
}
|
||||
|
||||
ctx->max_nss_buf_size = slapi_entry_attr_get_uint(e,
|
||||
"ipaExtdomMaxNssBufSize");
|
||||
if (ctx->max_nss_buf_size == 0) {
|
||||
ctx->max_nss_buf_size = DEFAULT_MAX_NSS_BUFFER;
|
||||
}
|
||||
LOG("Maximal nss buffer size set to [%zu]!\n", ctx->max_nss_buf_size);
|
||||
|
||||
|
||||
ret = back_extdom_init_context(&ctx->nss_ctx);
|
||||
if (ret != 0) {
|
||||
LOG("Unable to initialize nss interface: returned [%d]!\n", ret);
|
||||
goto done;
|
||||
}
|
||||
|
||||
timeout = slapi_entry_attr_get_uint(e, "ipaExtdomMaxNssTimeout");
|
||||
if (timeout == 0) {
|
||||
timeout = DEFAULT_MAX_NSS_TIMEOUT;
|
||||
}
|
||||
back_extdom_set_timeout(ctx->nss_ctx, timeout);
|
||||
LOG("Maximal nss timeout (in ms) set to [%u]!\n", timeout);
|
||||
|
||||
ctx->extdom_max_instances = slapi_entry_attr_get_uint(e, "ipaExtdomMaxInstances");
|
||||
LOG("Maximal instances from config [%zu]!\n", ctx->extdom_max_instances);
|
||||
|
||||
ctx->extdom_instance_counter = slapi_counter_new();
|
||||
if (ctx->extdom_instance_counter == NULL) {
|
||||
LOG("Unable to initialize instance counter!\n");
|
||||
ret = LDAP_OPERATIONS_ERROR;
|
||||
goto done;
|
||||
}
|
||||
|
||||
ret = 0;
|
||||
|
||||
done:
|
||||
if (ret) {
|
||||
|
||||
@@ -1,203 +0,0 @@
|
||||
/** BEGIN COPYRIGHT BLOCK
|
||||
* This program is free software; you can redistribute it and/or modify
|
||||
* it under the terms of the GNU General Public License as published by
|
||||
* the Free Software Foundation, either version 3 of the License, or
|
||||
* (at your option) any later version.
|
||||
*
|
||||
* This program is distributed in the hope that it will be useful,
|
||||
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||
* GNU General Public License for more details.
|
||||
*
|
||||
* You should have received a copy of the GNU General Public License
|
||||
* along with this program. If not, see <http://www.gnu.org/licenses/>.
|
||||
*
|
||||
* Additional permission under GPLv3 section 7:
|
||||
*
|
||||
* In the following paragraph, "GPL" means the GNU General Public
|
||||
* License, version 3 or any later version, and "Non-GPL Code" means
|
||||
* code that is governed neither by the GPL nor a license
|
||||
* compatible with the GPL.
|
||||
*
|
||||
* You may link the code of this Program with Non-GPL Code and convey
|
||||
* linked combinations including the two, provided that such Non-GPL
|
||||
* Code only links to the code of this Program through those well
|
||||
* defined interfaces identified in the file named EXCEPTION found in
|
||||
* the source code files (the "Approved Interfaces"). The files of
|
||||
* Non-GPL Code may instantiate templates or use macros or inline
|
||||
* functions from the Approved Interfaces without causing the resulting
|
||||
* work to be covered by the GPL. Only the copyright holders of this
|
||||
* Program may make changes or additions to the list of Approved
|
||||
* Interfaces.
|
||||
*
|
||||
* Authors:
|
||||
* Sumit Bose <sbose@redhat.com>
|
||||
*
|
||||
* Copyright (C) 2011 Red Hat, Inc.
|
||||
* All rights reserved.
|
||||
* END COPYRIGHT BLOCK **/
|
||||
|
||||
#include <check.h>
|
||||
|
||||
#include "ipa_extdom.h"
|
||||
#include "util.h"
|
||||
|
||||
char req_sid[] = {0x30, 0x11, 0x0a, 0x01, 0x01, 0x0a, 0x01, 0x01, 0x04, 0x09, \
|
||||
0x53, 0x2d, 0x31, 0x2d, 0x32, 0x2d, 0x33, 0x2d, 0x34};
|
||||
char req_nam[] = {0x30, 0x16, 0x0a, 0x01, 0x02, 0x0a, 0x01, 0x01, 0x30, 0x0e, \
|
||||
0x04, 0x06, 0x44, 0x4f, 0x4d, 0x41, 0x49, 0x4e, 0x04, 0x04, \
|
||||
0x74, 0x65, 0x73, 0x74};
|
||||
char req_uid[] = {0x30, 0x14, 0x0a, 0x01, 0x03, 0x0a, 0x01, 0x01, 0x30, 0x0c, \
|
||||
0x04, 0x06, 0x44, 0x4f, 0x4d, 0x41, 0x49, 0x4e, 0x02, 0x02, \
|
||||
0x30, 0x39};
|
||||
char req_gid[] = {0x30, 0x15, 0x0a, 0x01, 0x04, 0x0a, 0x01, 0x01, 0x30, 0x0d, \
|
||||
0x04, 0x06, 0x44, 0x4f, 0x4d, 0x41, 0x49, 0x4e, 0x02, 0x03, \
|
||||
0x00, 0xd4, 0x31};
|
||||
|
||||
char res_sid[] = {0x30, 0x0e, 0x0a, 0x01, 0x01, 0x04, 0x09, 0x53, 0x2d, 0x31, \
|
||||
0x2d, 0x32, 0x2d, 0x33, 0x2d, 0x34};
|
||||
char res_nam[] = {0x30, 0x13, 0x0a, 0x01, 0x02, 0x30, 0x0e, 0x04, 0x06, 0x44, \
|
||||
0x4f, 0x4d, 0x41, 0x49, 0x4e, 0x04, 0x04, 0x74, 0x65, 0x73, \
|
||||
0x74};
|
||||
char res_uid[] = {0x30, 0x17, 0x0a, 0x01, 0x03, 0x30, 0x12, 0x04, 0x06, 0x44, \
|
||||
0x4f, 0x4d, 0x41, 0x49, 0x4e, 0x04, 0x04, 0x74, 0x65, 0x73, \
|
||||
0x74, 0x02, 0x02, 0x30, 0x39};
|
||||
char res_gid[] = {0x30, 0x1e, 0x0a, 0x01, 0x04, 0x30, 0x19, 0x04, 0x06, 0x44, \
|
||||
0x4f, 0x4d, 0x41, 0x49, 0x4e, 0x04, 0x0a, 0x74, 0x65, 0x73, \
|
||||
0x74, 0x5f, 0x67, 0x72, 0x6f, 0x75, 0x70, 0x02, 0x03, 0x00, \
|
||||
0xd4, 0x31};
|
||||
|
||||
#define TEST_SID "S-1-2-3-4"
|
||||
#define TEST_DOMAIN_NAME "DOMAIN"
|
||||
|
||||
START_TEST(test_encode)
|
||||
{
|
||||
int ret;
|
||||
struct extdom_res res;
|
||||
struct berval *resp_val;
|
||||
|
||||
res.response_type = RESP_SID;
|
||||
res.data.sid = TEST_SID;
|
||||
|
||||
ret = pack_response(&res, &resp_val);
|
||||
|
||||
fail_unless(ret == LDAP_SUCCESS, "pack_response() failed.");
|
||||
fail_unless(sizeof(res_sid) == resp_val->bv_len &&
|
||||
memcmp(res_sid, resp_val->bv_val, resp_val->bv_len) == 0,
|
||||
"Unexpected BER blob.");
|
||||
ber_bvfree(resp_val);
|
||||
|
||||
res.response_type = RESP_NAME;
|
||||
res.data.name.domain_name = TEST_DOMAIN_NAME;
|
||||
res.data.name.object_name = "test";
|
||||
|
||||
ret = pack_response(&res, &resp_val);
|
||||
|
||||
fail_unless(ret == LDAP_SUCCESS, "pack_response() failed.");
|
||||
fail_unless(sizeof(res_nam) == resp_val->bv_len &&
|
||||
memcmp(res_nam, resp_val->bv_val, resp_val->bv_len) == 0,
|
||||
"Unexpected BER blob.");
|
||||
ber_bvfree(resp_val);
|
||||
}
|
||||
END_TEST
|
||||
|
||||
START_TEST(test_decode)
|
||||
{
|
||||
struct berval req_val;
|
||||
struct extdom_req *req;
|
||||
int ret;
|
||||
|
||||
req_val.bv_val = req_sid;
|
||||
req_val.bv_len = sizeof(req_sid);
|
||||
|
||||
ret = parse_request_data(&req_val, &req);
|
||||
|
||||
fail_unless(ret == LDAP_SUCCESS, "parse_request_data() failed.");
|
||||
fail_unless(req->input_type == INP_SID,
|
||||
"parse_request_data() returned unexpected input type");
|
||||
fail_unless(req->request_type == REQ_SIMPLE,
|
||||
"parse_request_data() returned unexpected request type");
|
||||
fail_unless(strcmp(req->data.sid, "S-1-2-3-4") == 0,
|
||||
"parse_request_data() returned unexpected sid");
|
||||
free_req_data(req);
|
||||
|
||||
req_val.bv_val = req_nam;
|
||||
req_val.bv_len = sizeof(req_nam);
|
||||
|
||||
ret = parse_request_data(&req_val, &req);
|
||||
|
||||
fail_unless(ret == LDAP_SUCCESS,
|
||||
"parse_request_data() failed.");
|
||||
fail_unless(req->input_type == INP_NAME,
|
||||
"parse_request_data() returned unexpected input type");
|
||||
fail_unless(req->request_type == REQ_SIMPLE,
|
||||
"parse_request_data() returned unexpected request type");
|
||||
fail_unless(strcmp(req->data.name.domain_name, "DOMAIN") == 0,
|
||||
"parse_request_data() returned unexpected domain name");
|
||||
fail_unless(strcmp(req->data.name.object_name, "test") == 0,
|
||||
"parse_request_data() returned unexpected object name");
|
||||
free_req_data(req);
|
||||
|
||||
req_val.bv_val = req_uid;
|
||||
req_val.bv_len = sizeof(req_uid);
|
||||
|
||||
ret = parse_request_data(&req_val, &req);
|
||||
|
||||
fail_unless(ret == LDAP_SUCCESS,
|
||||
"parse_request_data() failed.");
|
||||
fail_unless(req->input_type == INP_POSIX_UID,
|
||||
"parse_request_data() returned unexpected input type");
|
||||
fail_unless(req->request_type == REQ_SIMPLE,
|
||||
"parse_request_data() returned unexpected request type");
|
||||
fail_unless(strcmp(req->data.posix_uid.domain_name, "DOMAIN") == 0,
|
||||
"parse_request_data() returned unexpected domain name");
|
||||
fail_unless(req->data.posix_uid.uid == 12345,
|
||||
"parse_request_data() returned unexpected uid [%d]",
|
||||
req->data.posix_uid.uid);
|
||||
free_req_data(req);
|
||||
|
||||
req_val.bv_val = req_gid;
|
||||
req_val.bv_len = sizeof(req_gid);
|
||||
|
||||
ret = parse_request_data(&req_val, &req);
|
||||
|
||||
fail_unless(ret == LDAP_SUCCESS,
|
||||
"parse_request_data() failed.");
|
||||
fail_unless(req->input_type == INP_POSIX_GID,
|
||||
"parse_request_data() returned unexpected input type");
|
||||
fail_unless(req->request_type == REQ_SIMPLE,
|
||||
"parse_request_data() returned unexpected request type");
|
||||
fail_unless(strcmp(req->data.posix_gid.domain_name, "DOMAIN") == 0,
|
||||
"parse_request_data() returned unexpected domain name");
|
||||
fail_unless(req->data.posix_gid.gid == 54321,
|
||||
"parse_request_data() returned unexpected gid [%d]",
|
||||
req->data.posix_gid.gid);
|
||||
free_req_data(req);
|
||||
}
|
||||
END_TEST
|
||||
|
||||
Suite * ipa_extdom_suite(void)
|
||||
{
|
||||
Suite *s = suite_create("IPA extdom");
|
||||
|
||||
TCase *tc_core = tcase_create("Core");
|
||||
tcase_add_test(tc_core, test_decode);
|
||||
tcase_add_test(tc_core, test_encode);
|
||||
/* TODO: add test for create_response() */
|
||||
suite_add_tcase(s, tc_core);
|
||||
|
||||
return s;
|
||||
}
|
||||
|
||||
int main(void)
|
||||
{
|
||||
int number_failed;
|
||||
|
||||
Suite *s = ipa_extdom_suite ();
|
||||
SRunner *sr = srunner_create (s);
|
||||
srunner_run_all (sr, CK_VERBOSE);
|
||||
number_failed = srunner_ntests_failed (sr);
|
||||
srunner_free (sr);
|
||||
|
||||
return (number_failed == 0) ? EXIT_SUCCESS : EXIT_FAILURE;
|
||||
}
|
||||
1002
daemons/ipa-slapi-plugins/ipa-extdom-extop/test_data/etc/group
Normal file
1002
daemons/ipa-slapi-plugins/ipa-extdom-extop/test_data/etc/group
Normal file
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
Reference in New Issue
Block a user