Blame SOURCES/0051-ipa-implement-method-to-refresh-HBAC-rules.patch

9f2ebf
From 42f16ffa434de2efcdb9010df39dfe7cc619dfb0 Mon Sep 17 00:00:00 2001
9f2ebf
From: =?UTF-8?q?Pavel=20B=C5=99ezina?= <pbrezina@redhat.com>
9f2ebf
Date: Thu, 2 Nov 2017 14:59:19 +0100
9f2ebf
Subject: [PATCH 51/57] ipa: implement method to refresh HBAC rules
9f2ebf
MIME-Version: 1.0
9f2ebf
Content-Type: text/plain; charset=UTF-8
9f2ebf
Content-Transfer-Encoding: 8bit
9f2ebf
9f2ebf
Related:
9f2ebf
https://pagure.io/SSSD/sssd/issue/2840
9f2ebf
9f2ebf
Reviewed-by: Fabiano FidĂȘncio <fidencio@redhat.com>
9f2ebf
Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>
9f2ebf
(cherry picked from commit 2754a8dcfa937d45b024a2e57419248bfd4c4919)
9f2ebf
---
9f2ebf
 src/providers/ipa/ipa_access.c | 68 ++++++++++++++++++++++++++++++++++++++++--
9f2ebf
 src/providers/ipa/ipa_access.h | 10 +++++++
9f2ebf
 src/providers/ipa/ipa_init.c   |  4 +++
9f2ebf
 3 files changed, 80 insertions(+), 2 deletions(-)
9f2ebf
9f2ebf
diff --git a/src/providers/ipa/ipa_access.c b/src/providers/ipa/ipa_access.c
9f2ebf
index 32ccf541c9436b633e7724b2c44ee545810a7fb8..de9f68170b6e9c38fd8b6d23f1d565250bbf78d2 100644
9f2ebf
--- a/src/providers/ipa/ipa_access.c
9f2ebf
+++ b/src/providers/ipa/ipa_access.c
9f2ebf
@@ -682,8 +682,8 @@ done:
9f2ebf
 
9f2ebf
 errno_t
9f2ebf
 ipa_pam_access_handler_recv(TALLOC_CTX *mem_ctx,
9f2ebf
-                             struct tevent_req *req,
9f2ebf
-                             struct pam_data **_data)
9f2ebf
+                            struct tevent_req *req,
9f2ebf
+                            struct pam_data **_data)
9f2ebf
 {
9f2ebf
     struct ipa_pam_access_handler_state *state = NULL;
9f2ebf
 
9f2ebf
@@ -695,3 +695,67 @@ ipa_pam_access_handler_recv(TALLOC_CTX *mem_ctx,
9f2ebf
 
9f2ebf
     return EOK;
9f2ebf
 }
9f2ebf
+
9f2ebf
+struct ipa_refresh_access_rules_state {
9f2ebf
+    int dummy;
9f2ebf
+};
9f2ebf
+
9f2ebf
+static void ipa_refresh_access_rules_done(struct tevent_req *subreq);
9f2ebf
+
9f2ebf
+struct tevent_req *
9f2ebf
+ipa_refresh_access_rules_send(TALLOC_CTX *mem_ctx,
9f2ebf
+                              struct ipa_access_ctx *access_ctx,
9f2ebf
+                              void *no_input_data,
9f2ebf
+                              struct dp_req_params *params)
9f2ebf
+{
9f2ebf
+    struct ipa_refresh_access_rules_state *state;
9f2ebf
+    struct tevent_req *subreq;
9f2ebf
+    struct tevent_req *req;
9f2ebf
+
9f2ebf
+    DEBUG(SSSDBG_TRACE_FUNC, "Refreshing HBAC rules\n");
9f2ebf
+
9f2ebf
+    req = tevent_req_create(mem_ctx, &state,
9f2ebf
+                            struct ipa_refresh_access_rules_state);
9f2ebf
+    if (req == NULL) {
9f2ebf
+        DEBUG(SSSDBG_CRIT_FAILURE, "Unable to create tevent request!\n");
9f2ebf
+        return NULL;
9f2ebf
+    }
9f2ebf
+
9f2ebf
+    subreq = ipa_fetch_hbac_send(state, params->ev, params->be_ctx, access_ctx);
9f2ebf
+    if (subreq == NULL) {
9f2ebf
+        tevent_req_error(req, ENOMEM);
9f2ebf
+        tevent_req_post(req, params->ev);
9f2ebf
+        return req;
9f2ebf
+    }
9f2ebf
+
9f2ebf
+    tevent_req_set_callback(subreq, ipa_refresh_access_rules_done, req);
9f2ebf
+
9f2ebf
+    return req;
9f2ebf
+}
9f2ebf
+
9f2ebf
+static void ipa_refresh_access_rules_done(struct tevent_req *subreq)
9f2ebf
+{
9f2ebf
+    struct tevent_req *req;
9f2ebf
+    errno_t ret;
9f2ebf
+
9f2ebf
+    req = tevent_req_callback_data(subreq, struct tevent_req);
9f2ebf
+
9f2ebf
+    ret = ipa_fetch_hbac_recv(subreq);
9f2ebf
+    talloc_zfree(subreq);
9f2ebf
+    if (ret != EOK) {
9f2ebf
+        tevent_req_error(req, ret);
9f2ebf
+        return;
9f2ebf
+    }
9f2ebf
+
9f2ebf
+    tevent_req_done(req);
9f2ebf
+    return;
9f2ebf
+}
9f2ebf
+
9f2ebf
+errno_t ipa_refresh_access_rules_recv(TALLOC_CTX *mem_ctx,
9f2ebf
+                                      struct tevent_req *req,
9f2ebf
+                                      void **_no_output_data)
9f2ebf
+{
9f2ebf
+    TEVENT_REQ_RETURN_ON_ERROR(req);
9f2ebf
+
9f2ebf
+    return EOK;
9f2ebf
+}
9f2ebf
diff --git a/src/providers/ipa/ipa_access.h b/src/providers/ipa/ipa_access.h
9f2ebf
index de690350218bd47165a2b48c10059b8de96b718a..9cec0d1063fd39380a77093526e3240523752075 100644
9f2ebf
--- a/src/providers/ipa/ipa_access.h
9f2ebf
+++ b/src/providers/ipa/ipa_access.h
9f2ebf
@@ -63,4 +63,14 @@ ipa_pam_access_handler_recv(TALLOC_CTX *mem_ctx,
9f2ebf
                              struct tevent_req *req,
9f2ebf
                              struct pam_data **_data);
9f2ebf
 
9f2ebf
+struct tevent_req *
9f2ebf
+ipa_refresh_access_rules_send(TALLOC_CTX *mem_ctx,
9f2ebf
+                              struct ipa_access_ctx *access_ctx,
9f2ebf
+                              void *no_input_data,
9f2ebf
+                              struct dp_req_params *params);
9f2ebf
+
9f2ebf
+errno_t ipa_refresh_access_rules_recv(TALLOC_CTX *mem_ctx,
9f2ebf
+                                      struct tevent_req *req,
9f2ebf
+                                      void **_no_output_data);
9f2ebf
+
9f2ebf
 #endif /* _IPA_ACCESS_H_ */
9f2ebf
diff --git a/src/providers/ipa/ipa_init.c b/src/providers/ipa/ipa_init.c
9f2ebf
index 5b7c8e1348f561901782c872078a0e7391d4ff75..f335d51fd65959d256c54a5d92c594a24e895b7c 100644
9f2ebf
--- a/src/providers/ipa/ipa_init.c
9f2ebf
+++ b/src/providers/ipa/ipa_init.c
9f2ebf
@@ -831,6 +831,10 @@ errno_t sssm_ipa_access_init(TALLOC_CTX *mem_ctx,
9f2ebf
                   ipa_pam_access_handler_send, ipa_pam_access_handler_recv, access_ctx,
9f2ebf
                   struct ipa_access_ctx, struct pam_data, struct pam_data *);
9f2ebf
 
9f2ebf
+    dp_set_method(dp_methods, DPM_REFRESH_ACCESS_RULES,
9f2ebf
+                      ipa_refresh_access_rules_send, ipa_refresh_access_rules_recv, access_ctx,
9f2ebf
+                      struct ipa_access_ctx, void, void *);
9f2ebf
+
9f2ebf
     ret = EOK;
9f2ebf
 
9f2ebf
 done:
9f2ebf
-- 
9f2ebf
2.14.3
9f2ebf