1 /*
2 * CDDL HEADER START
3 *
4 * The contents of this file are subject to the terms of the
5 * Common Development and Distribution License (the "License").
6 * You may not use this file except in compliance with the License.
7 *
8 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
9 * or http://www.opensolaris.org/os/licensing.
10 * See the License for the specific language governing permissions
11 * and limitations under the License.
12 *
13 * When distributing Covered Code, include this CDDL HEADER in each
14 * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
15 * If applicable, add the following below this CDDL HEADER, with the
16 * fields enclosed by brackets "[]" replaced with your own identifying
17 * information: Portions Copyright [yyyy] [name of copyright owner]
18 *
19 * CDDL HEADER END
20 */
21
22 /*
23 * Copyright 2007 Sun Microsystems, Inc. All rights reserved.
24 * Use is subject to license terms.
25 */
26
27 #pragma ident "%Z%%M% %I% %E% SMI"
28
29 #include <stdlib.h>
30 #include <libintl.h>
31 #include <stdio.h>
32 #include <errno.h>
33 #include <strings.h>
34 #include "ns_sldap.h"
35 #include "ns_internal.h"
36
37 /*
38 * getldaplaliasbyname() retrieves the aliases information from the LDAP server.
39 * This is requires that the LDAP naming information (ie. LDAP_CLIENT_CACHE
40 * file) is configured properly on the client machine.
41 *
42 * Return value:
43 * 0 = success;
44 * 1 = alias not found;
45 * -1 = other failure. Contents in answer are undefined.
46 */
47
48 #define ALIAS_FILTER "(&(objectclass=mailgroup)(|(cn=%s)(mail=%s)))"
49 #define ALIAS_FILTER_SSD "(&(%%s)(|(cn=%s)(mail=%s)))"
50 #define MAIL_CN "cn"
51 #define MAIL_ATTRIBUTE "mail"
52 #define MAIL_MEMBER "mgrpRFC822MailMember"
53
54 /*
55 * This is a generic filter call back function for
56 * merging the filter from service search descriptor with
57 * an existing search filter. This routine expects userdata
58 * contain a format string with a single %s in it, and will
59 * use the format string with sprintf() to insert the SSD filter.
60 *
61 * This routine is passed to the __ns_ldap_list() API as the
62 * filter call back together with filter and userdata. For example,
63 * "(&(objectclass=mailgroup)(|(cn=abc)(mail=abc)))" as filter
64 * and "(&(%s)(|(cn=abc)(mail=abc)))" as userdata.
65 * This routine will then be called by __ns_ldap_list() to output
66 * "(&(dept=sds)(|(cn=abc)(mail=abc)))" as the real search
67 * filter, if the input SSD contains a filter "dpet=sds".
68 */
69 int
70 __s_api_merge_SSD_filter(const ns_ldap_search_desc_t *desc,
71 char **realfilter,
72 const void *userdata)
73 {
74 int len;
75
76 /* sanity check */
77 if (realfilter == NULL)
78 return (NS_LDAP_INVALID_PARAM);
79 *realfilter = NULL;
80
81 if (desc == NULL || desc->filter == NULL ||
82 userdata == NULL)
83 return (NS_LDAP_INVALID_PARAM);
84
85 len = strlen(userdata) + strlen(desc->filter) + 1;
86
87 *realfilter = (char *)malloc(len);
88 if (*realfilter == NULL)
89 return (NS_LDAP_MEMORY);
90
91 (void) sprintf(*realfilter, (char *)userdata,
92 desc->filter);
93
94 return (NS_LDAP_SUCCESS);
95 }
96 char *
97 __getldapaliasbyname(char *alias, int *retval)
98 {
99 char *service = "aliases";
100 char filter[BUFSIZE];
101 char userdata[BUFSIZE];
102 char *attribute[2];
103 ns_ldap_result_t *result = NULL;
104 ns_ldap_error_t *errorp = NULL;
105 int rc, i, j, len, comma;
106 ns_ldap_entry_t *entry = NULL;
107 char **attr_value = NULL;
108 char *answer, *new_answer;
109 size_t ans_size = BUFSIZE;
110
111 if (!alias || !*alias) {
112 errno = EINVAL;
113 *retval = -1;
114 return (NULL);
115 }
116
117 answer = malloc(ans_size);
118 if (answer == NULL) {
119 errno = ENOMEM;
120 *retval = -1;
121 return (NULL);
122 }
123 answer[0] = '\0';
124
125 /* get the aliases */
126 if (snprintf(filter, sizeof (filter), ALIAS_FILTER, alias, alias) < 0) {
127 errno = EINVAL;
128 *retval = -1;
129 return (NULL);
130 }
131
132 /* get the userdata for __ns_ldap_list filter call back */
133 if (snprintf(userdata, sizeof (userdata), ALIAS_FILTER_SSD,
134 alias, alias) < 0) {
135 errno = EINVAL;
136 *retval = -1;
137 return (NULL);
138 }
139
140 attribute[0] = MAIL_MEMBER;
141 attribute[1] = NULL;
142
143 /* should we do hardlookup */
144 rc = __ns_ldap_list(service, (const char *)filter,
145 __s_api_merge_SSD_filter,
146 (const char **)attribute, NULL, 0, &result,
147 &errorp, NULL, userdata);
148
149 if (rc == NS_LDAP_NOTFOUND) {
150 errno = ENOENT;
151 *retval = 1;
152 return (NULL);
153 } else if (rc != NS_LDAP_SUCCESS) {
154 #ifdef DEBUG
155 char *p;
156 (void) __ns_ldap_err2str(rc, &p);
157 if (errorp) {
158 if (errorp->message)
159 (void) fprintf(stderr, "%s (%s)\n", p,
160 errorp->message);
161 } else
162 (void) fprintf(stderr, "%s\n", p);
163 #endif /* DEBUG */
164 (void) __ns_ldap_freeError(&errorp);
165 *retval = -1;
166 return (NULL);
167 }
168
169 /* build the return value */
170 answer[0] = '\0';
171 len = 0;
172 comma = 0;
173 entry = result->entry;
174 for (i = 0; i < result->entries_count; i++) {
175 attr_value = __ns_ldap_getAttr(entry, MAIL_MEMBER);
176 if (attr_value == NULL) {
177 errno = ENOENT;
178 *retval = -1;
179 return (NULL);
180 }
181 for (j = 0; attr_value[j]; j++) {
182 char *tmp, *newhead;
183
184 tmp = attr_value[j];
185 while (*tmp == ' ' || *tmp == '\t' && *tmp != '\0')
186 tmp++;
187 newhead = tmp;
188 while (*tmp != '\0') tmp++;
189 while (*tmp == ' ' || *tmp == '\t' || *tmp == '\0' &&
190 tmp != newhead) {
191 *tmp-- = '\0';
192 }
193 len = len + comma + strlen(newhead);
194 if ((len + 1) > ans_size) {
195 ans_size += BUFSIZE;
196 new_answer = realloc(answer, ans_size);
197 if (new_answer == NULL) {
198 (void) __ns_ldap_freeResult(&result);
199 errno = ENOMEM;
200 *retval = -1;
201 free(answer);
202 return (NULL);
203 }
204 answer = new_answer;
205 }
206 if (comma)
207 (void) strcat(answer, ",");
208 else
209 comma = 1;
210 (void) strcat(answer, newhead);
211 }
212 }
213
214 (void) __ns_ldap_freeResult(&result);
215 errno = 0;
216 *retval = 0;
217 return (answer);
218 }