|
 |
ecf709 |
From acefbdd65a083b5d9577d9f683ac64e358c2f9c0 Mon Sep 17 00:00:00 2001
|
|
|
ecf709 |
From: Sumit Bose <sbose@redhat.com>
|
|
|
ecf709 |
Date: Thu, 16 Mar 2017 11:38:20 +0100
|
|
|
ecf709 |
Subject: [PATCH 94/96] pam_test_client: add InfoPipe user lookup
|
|
|
ecf709 |
MIME-Version: 1.0
|
|
|
ecf709 |
Content-Type: text/plain; charset=UTF-8
|
|
|
ecf709 |
Content-Transfer-Encoding: 8bit
|
|
|
ecf709 |
|
|
|
ecf709 |
Related to https://pagure.io/SSSD/sssd/issue/3292
|
|
|
ecf709 |
|
|
|
ecf709 |
Reviewed-by: Pavel Březina <pbrezina@redhat.com>
|
|
|
ecf709 |
(cherry picked from commit 9be97c9cc69e5e6e568d7e21f61a46c3ae2dc387)
|
|
|
ecf709 |
---
|
|
|
ecf709 |
Makefile.am | 1 +
|
|
|
ecf709 |
src/sss_client/pam_test_client.c | 71 ++++++++++++++++++++++++++++++++++++++++
|
|
|
ecf709 |
2 files changed, 72 insertions(+)
|
|
|
ecf709 |
|
|
|
ecf709 |
diff --git a/Makefile.am b/Makefile.am
|
|
|
ecf709 |
index b16a71cc9e07f21d02b4ceb3f41a8e9de0591ec9..c4d252357356c2d5452a414fd360fc5370b2c775 100644
|
|
|
ecf709 |
--- a/Makefile.am
|
|
|
ecf709 |
+++ b/Makefile.am
|
|
|
ecf709 |
@@ -3467,6 +3467,7 @@ pam_test_client_LDADD = \
|
|
|
ecf709 |
$(PAM_LIBS) \
|
|
|
ecf709 |
$(PAM_MISC_LIBS) \
|
|
|
ecf709 |
$(LIBADD_DL) \
|
|
|
ecf709 |
+ libsss_simpleifp.la \
|
|
|
ecf709 |
$(NULL)
|
|
|
ecf709 |
|
|
|
ecf709 |
if BUILD_AUTOFS
|
|
|
ecf709 |
diff --git a/src/sss_client/pam_test_client.c b/src/sss_client/pam_test_client.c
|
|
|
ecf709 |
index 69af612270492968b56d1c11de2bf56ebf57471f..40ef3f6d480c0108c985fce7e34e983d145f237e 100644
|
|
|
ecf709 |
--- a/src/sss_client/pam_test_client.c
|
|
|
ecf709 |
+++ b/src/sss_client/pam_test_client.c
|
|
|
ecf709 |
@@ -30,9 +30,12 @@
|
|
|
ecf709 |
#include <pwd.h>
|
|
|
ecf709 |
#include <nss.h>
|
|
|
ecf709 |
#include <errno.h>
|
|
|
ecf709 |
+#include <inttypes.h>
|
|
|
ecf709 |
|
|
|
ecf709 |
#include <security/pam_appl.h>
|
|
|
ecf709 |
|
|
|
ecf709 |
+#include "lib/sifp/sss_sifp.h"
|
|
|
ecf709 |
+
|
|
|
ecf709 |
#ifdef HAVE_SECURITY_PAM_MISC_H
|
|
|
ecf709 |
# include <security/pam_misc.h>
|
|
|
ecf709 |
#elif defined(HAVE_SECURITY_OPENPAM_H)
|
|
|
ecf709 |
@@ -58,6 +61,69 @@ static struct pam_conv conv = {
|
|
|
ecf709 |
|
|
|
ecf709 |
#define DEFAULT_BUFSIZE 4096
|
|
|
ecf709 |
|
|
|
ecf709 |
+static int get_ifp_user(const char *user)
|
|
|
ecf709 |
+{
|
|
|
ecf709 |
+ sss_sifp_ctx *sifp;
|
|
|
ecf709 |
+ sss_sifp_error error;
|
|
|
ecf709 |
+ sss_sifp_object *user_obj;
|
|
|
ecf709 |
+ const char *tmp_str;
|
|
|
ecf709 |
+ uint32_t tmp_uint32;
|
|
|
ecf709 |
+ size_t c;
|
|
|
ecf709 |
+
|
|
|
ecf709 |
+ struct ifp_user_attr {
|
|
|
ecf709 |
+ const char *name;
|
|
|
ecf709 |
+ bool is_string;
|
|
|
ecf709 |
+ } ifp_user_attr[] = {
|
|
|
ecf709 |
+ { "name", true },
|
|
|
ecf709 |
+ { "uidNumber", false },
|
|
|
ecf709 |
+ { "gidNumber", false },
|
|
|
ecf709 |
+ { "gecos", true },
|
|
|
ecf709 |
+ { "homeDirectory", true },
|
|
|
ecf709 |
+ { "loginShell", true },
|
|
|
ecf709 |
+ { NULL, false }
|
|
|
ecf709 |
+ };
|
|
|
ecf709 |
+
|
|
|
ecf709 |
+ error = sss_sifp_init(&sifp);
|
|
|
ecf709 |
+ if (error != SSS_SIFP_OK) {
|
|
|
ecf709 |
+ fprintf(stderr, "Unable to connect to the InfoPipe");
|
|
|
ecf709 |
+ return EFAULT;
|
|
|
ecf709 |
+ }
|
|
|
ecf709 |
+
|
|
|
ecf709 |
+ error = sss_sifp_fetch_user_by_name(sifp, user, &user_obj);
|
|
|
ecf709 |
+ if (error != SSS_SIFP_OK) {
|
|
|
ecf709 |
+ fprintf(stderr, "Unable to get user object");
|
|
|
ecf709 |
+ return EIO;
|
|
|
ecf709 |
+ }
|
|
|
ecf709 |
+
|
|
|
ecf709 |
+ fprintf(stdout, "SSSD InfoPipe user lookup result:\n");
|
|
|
ecf709 |
+ for (c = 0; ifp_user_attr[c].name != NULL; c++) {
|
|
|
ecf709 |
+ if (ifp_user_attr[c].is_string) {
|
|
|
ecf709 |
+ error = sss_sifp_find_attr_as_string(user_obj->attrs,
|
|
|
ecf709 |
+ ifp_user_attr[c].name,
|
|
|
ecf709 |
+ &tmp_str);
|
|
|
ecf709 |
+ } else {
|
|
|
ecf709 |
+ error = sss_sifp_find_attr_as_uint32(user_obj->attrs,
|
|
|
ecf709 |
+ ifp_user_attr[c].name,
|
|
|
ecf709 |
+ &tmp_uint32);
|
|
|
ecf709 |
+ }
|
|
|
ecf709 |
+ if (error != SSS_SIFP_OK) {
|
|
|
ecf709 |
+ fprintf(stderr, "Unable to get user name attr");
|
|
|
ecf709 |
+ return EIO;
|
|
|
ecf709 |
+ }
|
|
|
ecf709 |
+
|
|
|
ecf709 |
+ if (ifp_user_attr[c].is_string) {
|
|
|
ecf709 |
+ fprintf(stdout, " - %s: %s\n", ifp_user_attr[c].name, tmp_str);
|
|
|
ecf709 |
+ } else {
|
|
|
ecf709 |
+ fprintf(stdout, " - %s: %"PRIu32"\n", ifp_user_attr[c].name,
|
|
|
ecf709 |
+ tmp_uint32);
|
|
|
ecf709 |
+ }
|
|
|
ecf709 |
+ }
|
|
|
ecf709 |
+
|
|
|
ecf709 |
+ sss_sifp_free_object(sifp, &user_obj);
|
|
|
ecf709 |
+ sss_sifp_free(&sifp);
|
|
|
ecf709 |
+ return 0;
|
|
|
ecf709 |
+}
|
|
|
ecf709 |
+
|
|
|
ecf709 |
static int sss_getpwnam_check(const char *user)
|
|
|
ecf709 |
{
|
|
|
ecf709 |
void *dl_handle = NULL;
|
|
|
ecf709 |
@@ -159,6 +225,11 @@ int main(int argc, char *argv[]) {
|
|
|
ecf709 |
if (ret != 0) {
|
|
|
ecf709 |
fprintf(stderr, "User name lookup with [%s] failed.\n", user);
|
|
|
ecf709 |
}
|
|
|
ecf709 |
+
|
|
|
ecf709 |
+ ret = get_ifp_user(user);
|
|
|
ecf709 |
+ if (ret != 0) {
|
|
|
ecf709 |
+ fprintf(stderr, "InforPipe User lookup with [%s] failed.\n", user);
|
|
|
ecf709 |
+ }
|
|
|
ecf709 |
}
|
|
|
ecf709 |
|
|
|
ecf709 |
ret = pam_start(service, user, &conv, &pamh);
|
|
|
ecf709 |
--
|
|
|
ecf709 |
2.9.3
|
|
|
ecf709 |
|