From b47156c92867daaa2c30a7f4ad884a27273e54ff Mon Sep 17 00:00:00 2001
From: Lukas Slebodnik <lslebodn@redhat.com>
Date: Wed, 29 Jul 2015 14:35:52 +0200
Subject: [PATCH 42/47] intg_test: Add module for simulation of utility id
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Reviewed-by: Michal Židek <mzidek@redhat.com>
(cherry picked from commit 38b07019861240cf5107f5d51fc0027519e21619)
---
 src/tests/intg/Makefile.am |   1 +
 src/tests/intg/sssd_id.py  | 119 +++++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 120 insertions(+)
 create mode 100644 src/tests/intg/sssd_id.py

diff --git a/src/tests/intg/Makefile.am b/src/tests/intg/Makefile.am
index 9383e112002baa7b0d200a3dc205aa2856089c97..7488022ed59dd894ba7b6808c5573706412098c7 100644
--- a/src/tests/intg/Makefile.am
+++ b/src/tests/intg/Makefile.am
@@ -1,5 +1,6 @@
 dist_noinst_DATA = \
     config.py.m4 \
+    sssd_id.py \
     ds.py \
     ds_openldap.py \
     ent.py \
diff --git a/src/tests/intg/sssd_id.py b/src/tests/intg/sssd_id.py
new file mode 100644
index 0000000000000000000000000000000000000000..45f2822b5b33d99b6a7cbbbba0450c774e05ff11
--- /dev/null
+++ b/src/tests/intg/sssd_id.py
@@ -0,0 +1,119 @@
+#
+# Module for simulation of utility "id" from coreutils
+#
+# Copyright (c) 2015 Red Hat, Inc.
+# Author: Lukas Slebodnik <lslebodn@redhat.com>
+#
+# This is free software; you can redistribute it and/or modify it
+# under the terms of the GNU General Public License as published by
+# the Free Software Foundation; version 2 only
+#
+# This program is distributed in the hope that it will be useful, but
+# WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+# General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+#
+import config
+import pwd
+import grp
+from ctypes import (cdll, c_int, c_char, c_uint32, c_long, c_char_p,
+                    POINTER, pointer)
+
+
+class NssReturnCode(object):
+    """ 'enum' class for name service switch retrn code """
+    TRYAGAIN = -2,
+    UNAVAIL = -1
+    NOTFOUND = 0
+    SUCCESS = 1
+    RETURN = 2
+
+
+def call_sssd_initgroups(user, gid):
+    """
+    Function will initialize the supplementary group access list
+    for given user. It will gather groups only provided by sssd.
+
+    Arguments are the same as for C function initgroups
+    @param string user name of user
+    @param int gid the additional gid will be also added to the list.
+
+    @return (int, int, List[int]) (err, errno, gids)
+        gids shoudl contain user group IDs if err is NssReturnCode.SUCCESS
+        otherwise errno will contain non-zero vlaue.
+    """
+    libnss_sss_path = config.PREFIX + "/lib/libnss_sss.so.2"
+    libnss_sss = cdll.LoadLibrary(libnss_sss_path)
+
+    func = libnss_sss._nss_sss_initgroups_dyn
+    func.restype = c_int
+    func.argtypes = [POINTER(c_char), c_uint32, POINTER(c_long),
+                     POINTER(c_long), POINTER(POINTER(c_uint32)), c_long,
+                     POINTER(c_int)]
+
+    start = POINTER(c_long)(c_long(0))
+    size = POINTER(c_long)(c_long(0))
+    groups = POINTER(c_uint32)()
+    p_groups = pointer(groups)
+    limit = c_long(-1)
+    errno = POINTER(c_int)(c_int(0))
+
+    res = func(c_char_p(user), c_uint32(gid), start, size, p_groups, limit,
+               errno)
+
+    gids = []
+    if res == NssReturnCode.SUCCESS:
+        gids_count = size[0]
+        assert gids_count > 0, "_nss_sss_initgroups_dyn shoulld return " \
+                               "one gid"
+
+        for i in range(0, gids_count):
+            gids.append(int(p_groups.contents[i]))
+
+    return (int(res), errno[0], gids)
+
+
+def get_user_gids(user):
+    """
+    Function will initialize the supplementary group access list
+    for given user. It will gather groups only provided by sssd.
+
+    Arguments are the same as for C function initgroups
+    @param string user name of user
+
+    @return (int, int, List[int]) (err, errno, gids)
+        gids shoudl contain user group IDs if err is NssReturnCode.SUCCESS
+        otherwise errno will contain non-zero vlaue.
+    """
+    pwd_user = pwd.getpwnam(user)
+    uid = pwd_user.pw_uid
+    gid = pwd_user.pw_gid
+
+    user = pwd.getpwuid(uid).pw_name
+
+    return call_sssd_initgroups(user, gid)
+
+
+def get_user_groups(user):
+    """
+    Function will initialize the supplementary group access list
+    for given user. It will gather groups only provided by sssd.
+
+    Arguments are the same as for C function initgroups
+    @param string user name of user
+
+    @return (int, int, List[string]) (err, errno, groups)
+        roups shoudl contain names of user groups
+        if err is NssReturnCode.SUCCESS
+        otherwise errno will contain non-zero vlaue.
+    """
+    (res, errno, gids) = get_user_gids(user)
+    groups = []
+
+    if res == NssReturnCode.SUCCESS:
+        groups = [grp.getgrgid(gid).gr_name for gid in gids]
+
+    return (res, errno, groups)
-- 
2.4.3