source/nsswitch/winbindd_async.c

   1 /*
   2    Unix SMB/CIFS implementation.
   3
   4    Async helpers for blocking functions
   5
   6    Copyright (C) Volker Lendecke 2005
   7    Copyright (C) Gerald Carter 2006
   8
   9    The helpers always consist of three functions:
  10
  11    * A request setup function that takes the necessary parameters together
  12      with a continuation function that is to be called upon completion
  13
  14    * A private continuation function that is internal only. This is to be
  15      called by the lower-level functions in do_async(). Its only task is to
  16      properly call the continuation function named above.
  17
  18    * A worker function that is called inside the appropriate child process.
  19
  20    This program is free software; you can redistribute it and/or modify
  21    it under the terms of the GNU General Public License as published by
  22    the Free Software Foundation; either version 2 of the License, or
  23    (at your option) any later version.
  24
  25    This program is distributed in the hope that it will be useful,
  26    but WITHOUT ANY WARRANTY; without even the implied warranty of
  27    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  28    GNU General Public License for more details.
  29
  30    You should have received a copy of the GNU General Public License
  31    along with this program; if not, write to the Free Software
  32    Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
  33 */
  34
  35 #include "includes.h"
  36 #include "winbindd.h"
  37
  38 #undef DBGC_CLASS
  39 #define DBGC_CLASS DBGC_WINBIND
  40
  41 struct do_async_state {
  42         TALLOC_CTX *mem_ctx;
  43         struct winbindd_request request;
  44         struct winbindd_response response;
  45         void (*cont)(TALLOC_CTX *mem_ctx,
  46                      BOOL success,
  47                      struct winbindd_response *response,
  48                      void *c, void *private_data);
  49         void *c, *private_data;
  50 };
  51
  52 static void do_async_recv(void *private_data, BOOL success)
  53 {
  54         struct do_async_state *state =
  55                 talloc_get_type_abort(private_data, struct do_async_state);
  56
  57         state->cont(state->mem_ctx, success, &state->response,
  58                     state->c, state->private_data);
  59 }
  60
  61 static void do_async(TALLOC_CTX *mem_ctx, struct winbindd_child *child,
  62                      const struct winbindd_request *request,
  63                      void (*cont)(TALLOC_CTX *mem_ctx, BOOL success,
  64                                   struct winbindd_response *response,
  65                                   void *c, void *private_data),
  66                      void *c, void *private_data)
  67 {
  68         struct do_async_state *state;
  69
  70         state = TALLOC_ZERO_P(mem_ctx, struct do_async_state);
  71         if (state == NULL) {
  72                 DEBUG(0, ("talloc failed\n"));
  73                 cont(mem_ctx, False, NULL, c, private_data);
  74                 return;
  75         }
  76
  77         state->mem_ctx = mem_ctx;
  78         state->request = *request;
  79         state->request.length = sizeof(state->request);
  80         state->cont = cont;
  81         state->c = c;
  82         state->private_data = private_data;
  83
  84         async_request(mem_ctx, child, &state->request,
  85                       &state->response, do_async_recv, state);
  86 }
  87
  88 void do_async_domain(TALLOC_CTX *mem_ctx, struct winbindd_domain *domain,
  89                      const struct winbindd_request *request,
  90                      void (*cont)(TALLOC_CTX *mem_ctx, BOOL success,
  91                                   struct winbindd_response *response,
  92                                   void *c, void *private_data),
  93                      void *c, void *private_data)
  94 {
  95         struct do_async_state *state;
  96
  97         state = TALLOC_ZERO_P(mem_ctx, struct do_async_state);
  98         if (state == NULL) {
  99                 DEBUG(0, ("talloc failed\n"));
 100                 cont(mem_ctx, False, NULL, c, private_data);
 101                 return;
 102         }
 103
 104         state->mem_ctx = mem_ctx;
 105         state->request = *request;
 106         state->request.length = sizeof(state->request);
 107         state->cont = cont;
 108         state->c = c;
 109         state->private_data = private_data;
 110
 111         async_domain_request(mem_ctx, domain, &state->request,
 112                              &state->response, do_async_recv, state);
 113 }
 114
 115 static void winbindd_set_mapping_recv(TALLOC_CTX *mem_ctx, BOOL success,
 116                                    struct winbindd_response *response,
 117                                    void *c, void *private_data)
 118 {
 119         void (*cont)(void *priv, BOOL succ) = (void (*)(void *, BOOL))c;
 120
 121         if (!success) {
 122                 DEBUG(5, ("Could not trigger idmap_set_mapping\n"));
 123                 cont(private_data, False);
 124                 return;
 125         }
 126
 127         if (response->result != WINBINDD_OK) {
 128                 DEBUG(5, ("idmap_set_mapping returned an error\n"));
 129                 cont(private_data, False);
 130                 return;
 131         }
 132
 133         cont(private_data, True);
 134 }
 135
 136 void winbindd_set_mapping_async(TALLOC_CTX *mem_ctx, const struct id_map *map,
 137                              void (*cont)(void *private_data, BOOL success),
 138                              void *private_data)
 139 {
 140         struct winbindd_request request;
 141         ZERO_STRUCT(request);
 142         request.cmd = WINBINDD_DUAL_SET_MAPPING;
 143         request.data.dual_idmapset.id = map->xid.id;
 144         request.data.dual_idmapset.type = map->xid.type;
 145         sid_to_string(request.data.dual_idmapset.sid, map->sid);
 146
 147         do_async(mem_ctx, idmap_child(), &request, winbindd_set_mapping_recv,
 148                  (void *)cont, private_data);
 149 }
 150
 151 enum winbindd_result winbindd_dual_set_mapping(struct winbindd_domain *domain,
 152                                             struct winbindd_cli_state *state)
 153 {
 154         struct id_map map;
 155         DOM_SID sid;
 156         NTSTATUS result;
 157
 158         DEBUG(3, ("[%5lu]: dual_idmapset\n", (unsigned long)state->pid));
 159
 160         if (!string_to_sid(&sid, state->request.data.dual_idmapset.sid))
 161                 return WINBINDD_ERROR;
 162
 163         map.sid = &sid;
 164         map.xid.id = state->request.data.dual_idmapset.id;
 165         map.xid.type = state->request.data.dual_idmapset.type;
 166         map.status = ID_MAPPED;
 167
 168         result = idmap_set_mapping(&map);
 169         return NT_STATUS_IS_OK(result) ? WINBINDD_OK : WINBINDD_ERROR;
 170 }
 171
 172 static void winbindd_set_hwm_recv(TALLOC_CTX *mem_ctx, BOOL success,
 173                                    struct winbindd_response *response,
 174                                    void *c, void *private_data)
 175 {
 176         void (*cont)(void *priv, BOOL succ) = (void (*)(void *, BOOL))c;
 177
 178         if (!success) {
 179                 DEBUG(5, ("Could not trigger idmap_set_hwm\n"));
 180                 cont(private_data, False);
 181                 return;
 182         }
 183
 184         if (response->result != WINBINDD_OK) {
 185                 DEBUG(5, ("idmap_set_hwm returned an error\n"));
 186                 cont(private_data, False);
 187                 return;
 188         }
 189
 190         cont(private_data, True);
 191 }
 192
 193 void winbindd_set_hwm_async(TALLOC_CTX *mem_ctx, const struct unixid *xid,
 194                              void (*cont)(void *private_data, BOOL success),
 195                              void *private_data)
 196 {
 197         struct winbindd_request request;
 198         ZERO_STRUCT(request);
 199         request.cmd = WINBINDD_DUAL_SET_HWM;
 200         request.data.dual_idmapset.id = xid->id;
 201         request.data.dual_idmapset.type = xid->type;
 202
 203         do_async(mem_ctx, idmap_child(), &request, winbindd_set_hwm_recv,
 204                  (void *)cont, private_data);
 205 }
 206
 207 enum winbindd_result winbindd_dual_set_hwm(struct winbindd_domain *domain,
 208                                             struct winbindd_cli_state *state)
 209 {
 210         struct unixid xid;
 211         NTSTATUS result;
 212
 213         DEBUG(3, ("[%5lu]: dual_set_hwm\n", (unsigned long)state->pid));
 214
 215         xid.id = state->request.data.dual_idmapset.id;
 216         xid.type = state->request.data.dual_idmapset.type;
 217
 218         switch (xid.type) {
 219         case ID_TYPE_UID:
 220                 result = idmap_set_uid_hwm(&xid);
 221                 break;
 222         case ID_TYPE_GID:
 223                 result = idmap_set_gid_hwm(&xid);
 224                 break;
 225         default:
 226                 return WINBINDD_ERROR;
 227         }
 228         return NT_STATUS_IS_OK(result) ? WINBINDD_OK : WINBINDD_ERROR;
 229 }
 230
 231 static void winbindd_sids2xids_recv(TALLOC_CTX *mem_ctx, BOOL success,
 232                                struct winbindd_response *response,
 233                                void *c, void *private_data)
 234 {
 235         void (*cont)(void *priv, BOOL succ, void *, int) =
 236                 (void (*)(void *, BOOL, void *, int))c;
 237
 238         if (!success) {
 239                 DEBUG(5, ("Could not trigger sids2xids\n"));
 240                 cont(private_data, False, NULL, 0);
 241                 return;
 242         }
 243
 244         if (response->result != WINBINDD_OK) {
 245                 DEBUG(5, ("sids2xids returned an error\n"));
 246                 cont(private_data, False, NULL, 0);
 247                 return;
 248         }
 249
 250         cont(private_data, True, response->extra_data.data, response->length - sizeof(response));
 251 }
 252
 253 void winbindd_sids2xids_async(TALLOC_CTX *mem_ctx, void *sids, int size,
 254                          void (*cont)(void *private_data, BOOL success, void *data, int len),
 255                          void *private_data)
 256 {
 257         struct winbindd_request request;
 258         ZERO_STRUCT(request);
 259         request.cmd = WINBINDD_DUAL_SIDS2XIDS;
 260         request.extra_data.data = (char *)sids;
 261         request.extra_len = size;
 262         do_async(mem_ctx, idmap_child(), &request, winbindd_sids2xids_recv,
 263                  (void *)cont, private_data);
 264 }
 265
 266 enum winbindd_result winbindd_dual_sids2xids(struct winbindd_domain *domain,
 267                                            struct winbindd_cli_state *state)
 268 {
 269         DOM_SID *sids;
 270         struct unixid *xids;
 271         struct id_map **ids;
 272         NTSTATUS result;
 273         int num, i;
 274
 275         DEBUG(3, ("[%5lu]: sids to unix ids\n", (unsigned long)state->pid));
 276
 277         if (state->request.extra_len == 0) {
 278                 DEBUG(0, ("Invalid buffer size!\n"));
 279                 return WINBINDD_ERROR;
 280         }
 281
 282         sids = (DOM_SID *)state->request.extra_data.data;
 283         num = state->request.extra_len / sizeof(DOM_SID);
 284
 285         ids = TALLOC_ZERO_ARRAY(state->mem_ctx, struct id_map *, num + 1);
 286         if ( ! ids) {
 287                 DEBUG(0, ("Out of memory!\n"));
 288                 return WINBINDD_ERROR;
 289         }
 290         for (i = 0; i < num; i++) {
 291                 ids[i] = TALLOC_P(ids, struct id_map);
 292                 if ( ! ids[i]) {
 293                         DEBUG(0, ("Out of memory!\n"));
 294                         talloc_free(ids);
 295                         return WINBINDD_ERROR;
 296                 }
 297                 ids[i]->sid = &sids[i];
 298         }
 299
 300         result = idmap_sids_to_unixids(ids);
 301
 302         if (NT_STATUS_IS_OK(result)) {
 303
 304                 xids = SMB_MALLOC_ARRAY(struct unixid, num);
 305                 if ( ! xids) {
 306                         DEBUG(0, ("Out of memory!\n"));
 307                         talloc_free(ids);
 308                         return WINBINDD_ERROR;
 309                 }
 310
 311                 for (i = 0; i < num; i++) {
 312                         if (ids[i]->status == ID_MAPPED) {
 313                                 xids[i].type = ids[i]->xid.type;
 314                                 xids[i].id = ids[i]->xid.id;
 315                         } else {
 316                                 xids[i].type = -1;
 317                         }
 318                 }
 319
 320                 state->response.length = sizeof(state->response) + (sizeof(struct unixid) * num);
 321                 state->response.extra_data.data = xids;
 322
 323         } else {
 324                 DEBUG (2, ("idmap_sids_to_unixids returned an error: 0x%08x\n", NT_STATUS_V(result)));
 325                 talloc_free(ids);
 326                 return WINBINDD_ERROR;
 327         }
 328
 329         talloc_free(ids);
 330         return WINBINDD_OK;
 331 }
 332
 333 static void winbindd_sid2uid_recv(TALLOC_CTX *mem_ctx, BOOL success,
 334                                struct winbindd_response *response,
 335                                void *c, void *private_data)
 336 {
 337         void (*cont)(void *priv, BOOL succ, uid_t uid) =
 338                 (void (*)(void *, BOOL, uid_t))c;
 339
 340         if (!success) {
 341                 DEBUG(5, ("Could not trigger sid2uid\n"));
 342                 cont(private_data, False, 0);
 343                 return;
 344         }
 345
 346         if (response->result != WINBINDD_OK) {
 347                 DEBUG(5, ("sid2uid returned an error\n"));
 348                 cont(private_data, False, 0);
 349                 return;
 350         }
 351
 352         cont(private_data, True, response->data.uid);
 353 }
 354
 355 void winbindd_sid2uid_async(TALLOC_CTX *mem_ctx, const DOM_SID *sid,
 356                          void (*cont)(void *private_data, BOOL success, uid_t uid),
 357                          void *private_data)
 358 {
 359         struct winbindd_request request;
 360         ZERO_STRUCT(request);
 361         request.cmd = WINBINDD_DUAL_SID2UID;
 362         sid_to_string(request.data.dual_sid2id.sid, sid);
 363         do_async(mem_ctx, idmap_child(), &request, winbindd_sid2uid_recv,
 364                  (void *)cont, private_data);
 365 }
 366
 367 enum winbindd_result winbindd_dual_sid2uid(struct winbindd_domain *domain,
 368                                            struct winbindd_cli_state *state)
 369 {
 370         DOM_SID sid;
 371         NTSTATUS result;
 372
 373         DEBUG(3, ("[%5lu]: sid to uid %s\n", (unsigned long)state->pid,
 374                   state->request.data.dual_sid2id.sid));
 375
 376         if (!string_to_sid(&sid, state->request.data.dual_sid2id.sid)) {
 377                 DEBUG(1, ("Could not get convert sid %s from string\n",
 378                           state->request.data.dual_sid2id.sid));
 379                 return WINBINDD_ERROR;
 380         }
 381
 382         /* Find uid for this sid and return it, possibly ask the slow remote idmap */
 383
 384         result = idmap_sid_to_uid(&sid, &(state->response.data.uid));
 385
 386         return NT_STATUS_IS_OK(result) ? WINBINDD_OK : WINBINDD_ERROR;
 387 }
 388
 389 #if 0   /* not used */
 390 static void uid2name_recv(TALLOC_CTX *mem_ctx, BOOL success,
 391                           struct winbindd_response *response,
 392                           void *c, void *private_data);
 393
 394 void winbindd_uid2name_async(TALLOC_CTX *mem_ctx, uid_t uid,
 395                              void (*cont)(void *private_data, BOOL success,
 396                                           const char *name),
 397                              void *private_data)
 398 {
 399         struct winbindd_request request;
 400         ZERO_STRUCT(request);
 401         request.cmd = WINBINDD_DUAL_UID2NAME;
 402         request.data.uid = uid;
 403         do_async(mem_ctx, idmap_child(), &request, uid2name_recv,
 404                  (void *)cont, private_data);
 405 }
 406 #endif  /* not used */
 407
 408 enum winbindd_result winbindd_dual_uid2name(struct winbindd_domain *domain,
 409                                             struct winbindd_cli_state *state)
 410 {
 411         struct passwd *pw;
 412
 413         DEBUG(3, ("[%5lu]: uid2name %lu\n", (unsigned long)state->pid,
 414                   (unsigned long)state->request.data.uid));
 415
 416         pw = getpwuid(state->request.data.uid);
 417         if (pw == NULL) {
 418                 DEBUG(5, ("User %lu not found\n",
 419                           (unsigned long)state->request.data.uid));
 420                 return WINBINDD_ERROR;
 421         }
 422
 423         fstrcpy(state->response.data.name.name, pw->pw_name);
 424         return WINBINDD_OK;
 425 }
 426
 427 #if 0   /* not used */
 428 static void uid2name_recv(TALLOC_CTX *mem_ctx, BOOL success,
 429                           struct winbindd_response *response,
 430                           void *c, void *private_data)
 431 {
 432         void (*cont)(void *priv, BOOL succ, const char *name) =
 433                 (void (*)(void *, BOOL, const char *))c;
 434
 435         if (!success) {
 436                 DEBUG(5, ("Could not trigger uid2name\n"));
 437                 cont(private_data, False, NULL);
 438                 return;
 439         }
 440
 441         if (response->result != WINBINDD_OK) {
 442                 DEBUG(5, ("uid2name returned an error\n"));
 443                 cont(private_data, False, NULL);
 444                 return;
 445         }
 446
 447         cont(private_data, True, response->data.name.name);
 448 }
 449
 450 static void name2uid_recv(TALLOC_CTX *mem_ctx, BOOL success,
 451                           struct winbindd_response *response,
 452                           void *c, void *private_data);
 453
 454 static void winbindd_name2uid_async(TALLOC_CTX *mem_ctx, const char *name,
 455                                     void (*cont)(void *private_data, BOOL success,
 456                                                  uid_t uid),
 457                                     void *private_data)
 458 {
 459         struct winbindd_request request;
 460         ZERO_STRUCT(request);
 461         request.cmd = WINBINDD_DUAL_NAME2UID;
 462         fstrcpy(request.data.username, name);
 463         do_async(mem_ctx, idmap_child(), &request, name2uid_recv,
 464                  (void *)cont, private_data);
 465 }
 466 #endif  /* not used */
 467
 468 enum winbindd_result winbindd_dual_name2uid(struct winbindd_domain *domain,
 469                                             struct winbindd_cli_state *state)
 470 {
 471         struct passwd *pw;
 472
 473         /* Ensure null termination */
 474         state->request.data.username
 475                 [sizeof(state->request.data.username)-1] = '\0';
 476
 477         DEBUG(3, ("[%5lu]: name2uid %s\n", (unsigned long)state->pid,
 478                   state->request.data.username));
 479
 480         pw = getpwnam(state->request.data.username);
 481         if (pw == NULL) {
 482                 return WINBINDD_ERROR;
 483         }
 484
 485         state->response.data.uid = pw->pw_uid;
 486         return WINBINDD_OK;
 487 }
 488
 489 #if 0   /* not used */
 490 static void name2uid_recv(TALLOC_CTX *mem_ctx, BOOL success,
 491                           struct winbindd_response *response,
 492                           void *c, void *private_data)
 493 {
 494         void (*cont)(void *priv, BOOL succ, uid_t uid) =
 495                 (void (*)(void *, BOOL, uid_t))c;
 496
 497         if (!success) {
 498                 DEBUG(5, ("Could not trigger name2uid\n"));
 499                 cont(private_data, False, 0);
 500                 return;
 501         }
 502
 503         if (response->result != WINBINDD_OK) {
 504                 DEBUG(5, ("name2uid returned an error\n"));
 505                 cont(private_data, False, 0);
 506                 return;
 507         }
 508
 509         cont(private_data, True, response->data.uid);
 510 }
 511 #endif  /* not used */
 512
 513 static void winbindd_sid2gid_recv(TALLOC_CTX *mem_ctx, BOOL success,
 514                                struct winbindd_response *response,
 515                                void *c, void *private_data)
 516 {
 517         void (*cont)(void *priv, BOOL succ, gid_t gid) =
 518                 (void (*)(void *, BOOL, gid_t))c;
 519
 520         if (!success) {
 521                 DEBUG(5, ("Could not trigger sid2gid\n"));
 522                 cont(private_data, False, 0);
 523                 return;
 524         }
 525
 526         if (response->result != WINBINDD_OK) {
 527                 DEBUG(5, ("sid2gid returned an error\n"));
 528                 cont(private_data, False, 0);
 529                 return;
 530         }
 531
 532         cont(private_data, True, response->data.gid);
 533 }
 534
 535 void winbindd_sid2gid_async(TALLOC_CTX *mem_ctx, const DOM_SID *sid,
 536                          void (*cont)(void *private_data, BOOL success, gid_t gid),
 537                          void *private_data)
 538 {
 539         struct winbindd_request request;
 540         ZERO_STRUCT(request);
 541         request.cmd = WINBINDD_DUAL_SID2GID;
 542         sid_to_string(request.data.dual_sid2id.sid, sid);
 543
 544         DEBUG(7,("winbindd_sid2gid_async: Resolving %s to a gid\n",
 545                 request.data.dual_sid2id.sid));
 546
 547         do_async(mem_ctx, idmap_child(), &request, winbindd_sid2gid_recv,
 548                  (void *)cont, private_data);
 549 }
 550
 551 enum winbindd_result winbindd_dual_sid2gid(struct winbindd_domain *domain,
 552                                            struct winbindd_cli_state *state)
 553 {
 554         DOM_SID sid;
 555         NTSTATUS result;
 556
 557         DEBUG(3, ("[%5lu]: sid to gid %s\n", (unsigned long)state->pid,
 558                   state->request.data.dual_sid2id.sid));
 559
 560         if (!string_to_sid(&sid, state->request.data.dual_sid2id.sid)) {
 561                 DEBUG(1, ("Could not get convert sid %s from string\n",
 562                           state->request.data.dual_sid2id.sid));
 563                 return WINBINDD_ERROR;
 564         }
 565
 566         /* Find gid for this sid and return it, possibly ask the slow remote idmap */
 567
 568         result = idmap_sid_to_gid(&sid, &state->response.data.gid);
 569
 570         DEBUG(10, ("winbindd_dual_sid2gid: 0x%08x - %s - %u\n", NT_STATUS_V(result), sid_string_static(&sid), state->response.data.gid));
 571
 572         return NT_STATUS_IS_OK(result) ? WINBINDD_OK : WINBINDD_ERROR;
 573 }
 574
 575 static void gid2name_recv(TALLOC_CTX *mem_ctx, BOOL success,
 576                           struct winbindd_response *response,
 577                           void *c, void *private_data)
 578 {
 579         void (*cont)(void *priv, BOOL succ, const char *name) =
 580                 (void (*)(void *, BOOL, const char *))c;
 581
 582         if (!success) {
 583                 DEBUG(5, ("Could not trigger gid2name\n"));
 584                 cont(private_data, False, NULL);
 585                 return;
 586         }
 587
 588         if (response->result != WINBINDD_OK) {
 589                 DEBUG(5, ("gid2name returned an error\n"));
 590                 cont(private_data, False, NULL);
 591                 return;
 592         }
 593
 594         cont(private_data, True, response->data.name.name);
 595 }
 596
 597 void winbindd_gid2name_async(TALLOC_CTX *mem_ctx, gid_t gid,
 598                              void (*cont)(void *private_data, BOOL success,
 599                                           const char *name),
 600                              void *private_data)
 601 {
 602         struct winbindd_request request;
 603         ZERO_STRUCT(request);
 604         request.cmd = WINBINDD_DUAL_GID2NAME;
 605         request.data.gid = gid;
 606         do_async(mem_ctx, idmap_child(), &request, gid2name_recv,
 607                  (void *)cont, private_data);
 608 }
 609
 610 enum winbindd_result winbindd_dual_gid2name(struct winbindd_domain *domain,
 611                                             struct winbindd_cli_state *state)
 612 {
 613         struct group *gr;
 614
 615         DEBUG(3, ("[%5lu]: gid2name %lu\n", (unsigned long)state->pid,
 616                   (unsigned long)state->request.data.gid));
 617
 618         gr = getgrgid(state->request.data.gid);
 619         if (gr == NULL)
 620                 return WINBINDD_ERROR;
 621
 622         fstrcpy(state->response.data.name.name, gr->gr_name);
 623         return WINBINDD_OK;
 624 }
 625
 626 #if 0   /* not used */
 627 static void name2gid_recv(TALLOC_CTX *mem_ctx, BOOL success,
 628                           struct winbindd_response *response,
 629                           void *c, void *private_data);
 630
 631 static void winbindd_name2gid_async(TALLOC_CTX *mem_ctx, const char *name,
 632                                     void (*cont)(void *private_data, BOOL success,
 633                                                  gid_t gid),
 634                                     void *private_data)
 635 {
 636         struct winbindd_request request;
 637         ZERO_STRUCT(request);
 638         request.cmd = WINBINDD_DUAL_NAME2GID;
 639         fstrcpy(request.data.groupname, name);
 640         do_async(mem_ctx, idmap_child(), &request, name2gid_recv,
 641                  (void *)cont, private_data);
 642 }
 643 #endif  /* not used */
 644
 645 enum winbindd_result winbindd_dual_name2gid(struct winbindd_domain *domain,
 646                                             struct winbindd_cli_state *state)
 647 {
 648         struct group *gr;
 649
 650         /* Ensure null termination */
 651         state->request.data.groupname
 652                 [sizeof(state->request.data.groupname)-1] = '\0';
 653
 654         DEBUG(3, ("[%5lu]: name2gid %s\n", (unsigned long)state->pid,
 655                   state->request.data.groupname));
 656
 657         gr = getgrnam(state->request.data.groupname);
 658         if (gr == NULL) {
 659                 return WINBINDD_ERROR;
 660         }
 661
 662         state->response.data.gid = gr->gr_gid;
 663         return WINBINDD_OK;
 664 }
 665
 666 #if 0   /* not used */
 667 static void name2gid_recv(TALLOC_CTX *mem_ctx, BOOL success,
 668                           struct winbindd_response *response,
 669                           void *c, void *private_data)
 670 {
 671         void (*cont)(void *priv, BOOL succ, gid_t gid) =
 672                 (void (*)(void *, BOOL, gid_t))c;
 673
 674         if (!success) {
 675                 DEBUG(5, ("Could not trigger name2gid\n"));
 676                 cont(private_data, False, 0);
 677                 return;
 678         }
 679
 680         if (response->result != WINBINDD_OK) {
 681                 DEBUG(5, ("name2gid returned an error\n"));
 682                 cont(private_data, False, 0);
 683                 return;
 684         }
 685
 686         cont(private_data, True, response->data.gid);
 687 }
 688 #endif  /* not used */
 689
 690 struct lookupsid_state {
 691         DOM_SID sid;
 692         void *caller_private_data;
 693 };
 694
 695
 696 static void lookupsid_recv2(TALLOC_CTX *mem_ctx, BOOL success,
 697                            struct winbindd_response *response,
 698                            void *c, void *private_data)
 699 {
 700         void (*cont)(void *priv, BOOL succ, const char *dom_name,
 701                      const char *name, enum lsa_SidType type) =
 702                 (void (*)(void *, BOOL, const char *, const char *,
 703                           enum lsa_SidType))c;
 704         struct lookupsid_state *s = talloc_get_type_abort(private_data,
 705                                                           struct lookupsid_state);
 706
 707         if (!success) {
 708                 DEBUG(5, ("Could not trigger lookupsid\n"));
 709                 cont(s->caller_private_data, False, NULL, NULL, SID_NAME_UNKNOWN);
 710                 return;
 711         }
 712
 713         if (response->result != WINBINDD_OK) {
 714                 DEBUG(5, ("lookupsid (forest root) returned an error\n"));
 715                 cont(s->caller_private_data, False, NULL, NULL, SID_NAME_UNKNOWN);
 716                 return;
 717         }
 718
 719         cont(s->caller_private_data, True, response->data.name.dom_name,
 720              response->data.name.name,
 721              (enum lsa_SidType)response->data.name.type);
 722 }
 723
 724 static void lookupsid_recv(TALLOC_CTX *mem_ctx, BOOL success,
 725                            struct winbindd_response *response,
 726                            void *c, void *private_data)
 727 {
 728         void (*cont)(void *priv, BOOL succ, const char *dom_name,
 729                      const char *name, enum lsa_SidType type) =
 730                 (void (*)(void *, BOOL, const char *, const char *,
 731                           enum lsa_SidType))c;
 732         struct lookupsid_state *s = talloc_get_type_abort(private_data,
 733                                                           struct lookupsid_state);
 734
 735         if (!success) {
 736                 DEBUG(5, ("Could not trigger lookupsid\n"));
 737                 cont(s->caller_private_data, False, NULL, NULL, SID_NAME_UNKNOWN);
 738                 return;
 739         }
 740
 741         if (response->result != WINBINDD_OK) {
 742                 /* Try again using the forest root */
 743                 struct winbindd_domain *root_domain = find_root_domain();
 744                 struct winbindd_request request;
 745
 746                 if ( !root_domain ) {
 747                         DEBUG(5,("lookupsid_recv: unable to determine forest root\n"));
 748                         cont(s->caller_private_data, False, NULL, NULL, SID_NAME_UNKNOWN);
 749                         return;
 750                 }
 751
 752                 ZERO_STRUCT(request);
 753                 request.cmd = WINBINDD_LOOKUPSID;
 754                 fstrcpy(request.data.sid, sid_string_static(&s->sid));
 755
 756                 do_async_domain(mem_ctx, root_domain, &request, lookupsid_recv2,
 757                                 (void *)cont, s);
 758
 759                 return;
 760         }
 761
 762         cont(s->caller_private_data, True, response->data.name.dom_name,
 763              response->data.name.name,
 764              (enum lsa_SidType)response->data.name.type);
 765 }
 766
 767 void winbindd_lookupsid_async(TALLOC_CTX *mem_ctx, const DOM_SID *sid,
 768                               void (*cont)(void *private_data, BOOL success,
 769                                            const char *dom_name,
 770                                            const char *name,
 771                                            enum lsa_SidType type),
 772                               void *private_data)
 773 {
 774         struct winbindd_domain *domain;
 775         struct winbindd_request request;
 776         struct lookupsid_state *s;
 777
 778         domain = find_lookup_domain_from_sid(sid);
 779         if (domain == NULL) {
 780                 DEBUG(5, ("Could not find domain for sid %s\n",
 781                           sid_string_static(sid)));
 782                 cont(private_data, False, NULL, NULL, SID_NAME_UNKNOWN);
 783                 return;
 784         }
 785
 786         ZERO_STRUCT(request);
 787         request.cmd = WINBINDD_LOOKUPSID;
 788         fstrcpy(request.data.sid, sid_string_static(sid));
 789
 790         if ( (s = TALLOC_ZERO_P(mem_ctx, struct lookupsid_state)) == NULL ) {
 791                 DEBUG(0, ("winbindd_lookupsid_async: talloc failed\n"));
 792                 cont(private_data, False, NULL, NULL, SID_NAME_UNKNOWN);
 793                 return;
 794         }
 795
 796         sid_copy( &s->sid, sid );
 797         s->caller_private_data = private_data;
 798
 799         do_async_domain(mem_ctx, domain, &request, lookupsid_recv,
 800                         (void *)cont, private_data);
 801 }
 802
 803 enum winbindd_result winbindd_dual_lookupsid(struct winbindd_domain *domain,
 804                                              struct winbindd_cli_state *state)
 805 {
 806         enum lsa_SidType type;
 807         DOM_SID sid;
 808         char *name;
 809         char *dom_name;
 810
 811         /* Ensure null termination */
 812         state->request.data.sid[sizeof(state->request.data.sid)-1]='\0';
 813
 814         DEBUG(3, ("[%5lu]: lookupsid %s\n", (unsigned long)state->pid,
 815                   state->request.data.sid));
 816
 817         /* Lookup sid from PDC using lsa_lookup_sids() */
 818
 819         if (!string_to_sid(&sid, state->request.data.sid)) {
 820                 DEBUG(5, ("%s not a SID\n", state->request.data.sid));
 821                 return WINBINDD_ERROR;
 822         }
 823
 824         /* Lookup the sid */
 825
 826         if (!winbindd_lookup_name_by_sid(state->mem_ctx, domain, &sid,
 827                                          &dom_name, &name, &type))
 828         {
 829                 TALLOC_FREE(dom_name);
 830                 TALLOC_FREE(name);
 831                 return WINBINDD_ERROR;
 832         }
 833
 834         fstrcpy(state->response.data.name.dom_name, dom_name);
 835         fstrcpy(state->response.data.name.name, name);
 836         state->response.data.name.type = type;
 837
 838         TALLOC_FREE(dom_name);
 839         TALLOC_FREE(name);
 840         return WINBINDD_OK;
 841 }
 842
 843 /********************************************************************
 844  This is the second callback after contacting the forest root
 845 ********************************************************************/
 846
 847 struct lookupname_state {
 848         char *dom_name;
 849         char *name;
 850         void *caller_private_data;
 851 };
 852
 853
 854 static void lookupname_recv2(TALLOC_CTX *mem_ctx, BOOL success,
 855                             struct winbindd_response *response,
 856                             void *c, void *private_data)
 857 {
 858         void (*cont)(void *priv, BOOL succ, const DOM_SID *sid,
 859                      enum lsa_SidType type) =
 860                 (void (*)(void *, BOOL, const DOM_SID *, enum lsa_SidType))c;
 861         DOM_SID sid;
 862         struct lookupname_state *s = talloc_get_type_abort( private_data,
 863                                                             struct lookupname_state );
 864
 865
 866         if (!success) {
 867                 DEBUG(5, ("Could not trigger lookup_name\n"));
 868                 cont(s->caller_private_data, False, NULL, SID_NAME_UNKNOWN);
 869                 return;
 870         }
 871
 872         if (response->result != WINBINDD_OK) {
 873                 DEBUG(5, ("lookup_name returned an error\n"));
 874                 cont(s->caller_private_data, False, NULL, SID_NAME_UNKNOWN);
 875                 return;
 876         }
 877
 878         if (!string_to_sid(&sid, response->data.sid.sid)) {
 879                 DEBUG(0, ("Could not convert string %s to sid\n",
 880                           response->data.sid.sid));
 881                 cont(s->caller_private_data, False, NULL, SID_NAME_UNKNOWN);
 882                 return;
 883         }
 884
 885         cont(s->caller_private_data, True, &sid,
 886              (enum lsa_SidType)response->data.sid.type);
 887 }
 888
 889 /********************************************************************
 890  This is the first callback after contacting our own domain
 891 ********************************************************************/
 892
 893 static void lookupname_recv(TALLOC_CTX *mem_ctx, BOOL success,
 894                             struct winbindd_response *response,
 895                             void *c, void *private_data)
 896 {
 897         void (*cont)(void *priv, BOOL succ, const DOM_SID *sid,
 898                      enum lsa_SidType type) =
 899                 (void (*)(void *, BOOL, const DOM_SID *, enum lsa_SidType))c;
 900         DOM_SID sid;
 901         struct lookupname_state *s = talloc_get_type_abort( private_data,
 902                                                             struct lookupname_state );
 903
 904         if (!success) {
 905                 DEBUG(5, ("lookupname_recv: lookup_name() failed!\n"));
 906                 cont(s->caller_private_data, False, NULL, SID_NAME_UNKNOWN);
 907                 return;
 908         }
 909
 910         if (response->result != WINBINDD_OK) {
 911                 /* Try again using the forest root */
 912                 struct winbindd_domain *root_domain = find_root_domain();
 913                 struct winbindd_request request;
 914
 915                 if ( !root_domain ) {
 916                         DEBUG(5,("lookupname_recv: unable to determine forest root\n"));
 917                         cont(s->caller_private_data, False, NULL, SID_NAME_UNKNOWN);
 918                         return;
 919                 }
 920
 921                 ZERO_STRUCT(request);
 922                 request.cmd = WINBINDD_LOOKUPNAME;
 923
 924                 fstrcpy( request.data.name.dom_name, s->dom_name );
 925                 fstrcpy( request.data.name.name, s->name );
 926
 927                 do_async_domain(mem_ctx, root_domain, &request, lookupname_recv2,
 928                                 (void *)cont, s);
 929
 930                 return;
 931         }
 932
 933         if (!string_to_sid(&sid, response->data.sid.sid)) {
 934                 DEBUG(0, ("Could not convert string %s to sid\n",
 935                           response->data.sid.sid));
 936                 cont(s->caller_private_data, False, NULL, SID_NAME_UNKNOWN);
 937                 return;
 938         }
 939
 940         cont(s->caller_private_data, True, &sid,
 941              (enum lsa_SidType)response->data.sid.type);
 942 }
 943
 944 /********************************************************************
 945  The lookup name call first contacts a DC in its own domain
 946  and fallbacks to contact a DC in the forest in our domain doesn't
 947  know the name.
 948 ********************************************************************/
 949
 950 void winbindd_lookupname_async(TALLOC_CTX *mem_ctx,
 951                                const char *dom_name, const char *name,
 952                                void (*cont)(void *private_data, BOOL success,
 953                                             const DOM_SID *sid,
 954                                             enum lsa_SidType type),
 955                                void *private_data)
 956 {
 957         struct winbindd_request request;
 958         struct winbindd_domain *domain;
 959         struct lookupname_state *s;
 960
 961         if ( (domain = find_lookup_domain_from_name(dom_name)) == NULL ) {
 962                 DEBUG(5, ("Could not find domain for name %s\n", dom_name));
 963                 cont(private_data, False, NULL, SID_NAME_UNKNOWN);
 964                 return;
 965         }
 966
 967         ZERO_STRUCT(request);
 968         request.cmd = WINBINDD_LOOKUPNAME;
 969         fstrcpy(request.data.name.dom_name, dom_name);
 970         fstrcpy(request.data.name.name, name);
 971
 972         if ( (s = TALLOC_ZERO_P(mem_ctx, struct lookupname_state)) == NULL ) {
 973                 DEBUG(0, ("winbindd_lookupname_async: talloc failed\n"));
 974                 cont(private_data, False, NULL, SID_NAME_UNKNOWN);
 975                 return;
 976         }
 977
 978         s->dom_name = talloc_strdup( s, dom_name );
 979         s->name     = talloc_strdup( s, name );
 980         s->caller_private_data = private_data;
 981
 982         do_async_domain(mem_ctx, domain, &request, lookupname_recv,
 983                         (void *)cont, s);
 984 }
 985
 986 enum winbindd_result winbindd_dual_lookupname(struct winbindd_domain *domain,
 987                                               struct winbindd_cli_state *state)
 988 {
 989         enum lsa_SidType type;
 990         char *name_domain, *name_user;
 991         DOM_SID sid;
 992         char *p;
 993
 994         /* Ensure null termination */
 995         state->request.data.name.dom_name[sizeof(state->request.data.name.dom_name)-1]='\0';
 996
 997         /* Ensure null termination */
 998         state->request.data.name.name[sizeof(state->request.data.name.name)-1]='\0';
 999
1000         /* cope with the name being a fully qualified name */
1001         p = strstr(state->request.data.name.name, lp_winbind_separator());
1002         if (p) {
1003                 *p = 0;
1004                 name_domain = state->request.data.name.name;
1005                 name_user = p+1;
1006         } else {
1007                 name_domain = state->request.data.name.dom_name;
1008                 name_user = state->request.data.name.name;
1009         }
1010
1011         DEBUG(3, ("[%5lu]: lookupname %s%s%s\n", (unsigned long)state->pid,
1012                   name_domain, lp_winbind_separator(), name_user));
1013
1014         /* Lookup name from DC using lsa_lookup_names() */
1015         if (!winbindd_lookup_sid_by_name(state->mem_ctx, domain, name_domain,
1016                                          name_user, &sid, &type)) {
1017                 return WINBINDD_ERROR;
1018         }
1019
1020         sid_to_string(state->response.data.sid.sid, &sid);
1021         state->response.data.sid.type = type;
1022
1023         return WINBINDD_OK;
1024 }
1025
1026 BOOL print_sidlist(TALLOC_CTX *mem_ctx, const DOM_SID *sids,
1027                    size_t num_sids, char **result, ssize_t *len)
1028 {
1029         size_t i;
1030         size_t buflen = 0;
1031
1032         *len = 0;
1033         *result = NULL;
1034         for (i=0; i<num_sids; i++) {
1035                 sprintf_append(mem_ctx, result, len, &buflen,
1036                                "%s\n", sid_string_static(&sids[i]));
1037         }
1038
1039         if ((num_sids != 0) && (*result == NULL)) {
1040                 return False;
1041         }
1042
1043         return True;
1044 }
1045
1046 static BOOL parse_sidlist(TALLOC_CTX *mem_ctx, char *sidstr,
1047                           DOM_SID **sids, size_t *num_sids)
1048 {
1049         char *p, *q;
1050
1051         p = sidstr;
1052         if (p == NULL)
1053                 return False;
1054
1055         while (p[0] != '\0') {
1056                 DOM_SID sid;
1057                 q = strchr(p, '\n');
1058                 if (q == NULL) {
1059                         DEBUG(0, ("Got invalid sidstr: %s\n", p));
1060                         return False;
1061                 }
1062                 *q = '\0';
1063                 q += 1;
1064                 if (!string_to_sid(&sid, p)) {
1065                         DEBUG(0, ("Could not parse sid %s\n", p));
1066                         return False;
1067                 }
1068                 if (!add_sid_to_array(mem_ctx, &sid, sids, num_sids)) {
1069                         return False;
1070                 }
1071                 p = q;
1072         }
1073         return True;
1074 }
1075
1076 static BOOL parse_ridlist(TALLOC_CTX *mem_ctx, char *ridstr,
1077                           uint32 **rids, size_t *num_rids)
1078 {
1079         char *p;
1080
1081         p = ridstr;
1082         if (p == NULL)
1083                 return False;
1084
1085         while (p[0] != '\0') {
1086                 uint32 rid;
1087                 char *q;
1088                 rid = strtoul(p, &q, 10);
1089                 if (*q != '\n') {
1090                         DEBUG(0, ("Got invalid ridstr: %s\n", p));
1091                         return False;
1092                 }
1093                 p = q+1;
1094                 ADD_TO_ARRAY(mem_ctx, uint32, rid, rids, num_rids);
1095         }
1096         return True;
1097 }
1098
1099 enum winbindd_result winbindd_dual_lookuprids(struct winbindd_domain *domain,
1100                                               struct winbindd_cli_state *state)
1101 {
1102         uint32 *rids = NULL;
1103         size_t i, buflen, num_rids = 0;
1104         ssize_t len;
1105         DOM_SID domain_sid;
1106         char *domain_name;
1107         char **names;
1108         enum lsa_SidType *types;
1109         NTSTATUS status;
1110         char *result;
1111
1112         DEBUG(10, ("Looking up RIDs for domain %s (%s)\n",
1113                    state->request.domain_name,
1114                    state->request.data.sid));
1115
1116         if (!parse_ridlist(state->mem_ctx, state->request.extra_data.data,
1117                            &rids, &num_rids)) {
1118                 DEBUG(5, ("Could not parse ridlist\n"));
1119                 return WINBINDD_ERROR;
1120         }
1121
1122         if (!string_to_sid(&domain_sid, state->request.data.sid)) {
1123                 DEBUG(5, ("Could not parse domain sid %s\n",
1124                           state->request.data.sid));
1125                 return WINBINDD_ERROR;
1126         }
1127
1128         status = domain->methods->rids_to_names(domain, state->mem_ctx,
1129                                                 &domain_sid, rids, num_rids,
1130                                                 &domain_name,
1131                                                 &names, &types);
1132
1133         if (!NT_STATUS_IS_OK(status) &&
1134             !NT_STATUS_EQUAL(status, STATUS_SOME_UNMAPPED)) {
1135                 return WINBINDD_ERROR;
1136         }
1137
1138         len = 0;
1139         buflen = 0;
1140         result = NULL;
1141
1142         for (i=0; i<num_rids; i++) {
1143                 sprintf_append(state->mem_ctx, &result, &len, &buflen,
1144                                "%d %s\n", types[i], names[i]);
1145         }
1146
1147         fstrcpy(state->response.data.domain_name, domain_name);
1148
1149         if (result != NULL) {
1150                 state->response.extra_data.data = SMB_STRDUP(result);
1151                 if (!state->response.extra_data.data) {
1152                         return WINBINDD_ERROR;
1153                 }
1154                 state->response.length += len+1;
1155         }
1156
1157         return WINBINDD_OK;
1158 }
1159
1160 static void getsidaliases_recv(TALLOC_CTX *mem_ctx, BOOL success,
1161                                struct winbindd_response *response,
1162                                void *c, void *private_data)
1163 {
1164         void (*cont)(void *priv, BOOL succ,
1165                      DOM_SID *aliases, size_t num_aliases) =
1166                 (void (*)(void *, BOOL, DOM_SID *, size_t))c;
1167         char *aliases_str;
1168         DOM_SID *sids = NULL;
1169         size_t num_sids = 0;
1170
1171         if (!success) {
1172                 DEBUG(5, ("Could not trigger getsidaliases\n"));
1173                 cont(private_data, success, NULL, 0);
1174                 return;
1175         }
1176
1177         if (response->result != WINBINDD_OK) {
1178                 DEBUG(5, ("getsidaliases returned an error\n"));
1179                 cont(private_data, False, NULL, 0);
1180                 return;
1181         }
1182
1183         aliases_str = (char *)response->extra_data.data;
1184
1185         if (aliases_str == NULL) {
1186                 DEBUG(10, ("getsidaliases return 0 SIDs\n"));
1187                 cont(private_data, True, NULL, 0);
1188                 return;
1189         }
1190
1191         if (!parse_sidlist(mem_ctx, aliases_str, &sids, &num_sids)) {
1192                 DEBUG(0, ("Could not parse sids\n"));
1193                 cont(private_data, False, NULL, 0);
1194                 return;
1195         }
1196
1197         SAFE_FREE(response->extra_data.data);
1198
1199         cont(private_data, True, sids, num_sids);
1200 }
1201
1202 void winbindd_getsidaliases_async(struct winbindd_domain *domain,
1203                                   TALLOC_CTX *mem_ctx,
1204                                   const DOM_SID *sids, size_t num_sids,
1205                                   void (*cont)(void *private_data,
1206                                                BOOL success,
1207                                                const DOM_SID *aliases,
1208                                                size_t num_aliases),
1209                                   void *private_data)
1210 {
1211         struct winbindd_request request;
1212         char *sidstr = NULL;
1213         ssize_t len;
1214
1215         if (num_sids == 0) {
1216                 cont(private_data, True, NULL, 0);
1217                 return;
1218         }
1219
1220         if (!print_sidlist(mem_ctx, sids, num_sids, &sidstr, &len)) {
1221                 cont(private_data, False, NULL, 0);
1222                 return;
1223         }
1224
1225         ZERO_STRUCT(request);
1226         request.cmd = WINBINDD_DUAL_GETSIDALIASES;
1227         request.extra_len = len;
1228         request.extra_data.data = sidstr;
1229
1230         do_async_domain(mem_ctx, domain, &request, getsidaliases_recv,
1231                         (void *)cont, private_data);
1232 }
1233
1234 enum winbindd_result winbindd_dual_getsidaliases(struct winbindd_domain *domain,
1235                                                  struct winbindd_cli_state *state)
1236 {
1237         DOM_SID *sids = NULL;
1238         size_t num_sids = 0;
1239         char *sidstr = NULL;
1240         ssize_t len;
1241         size_t i;
1242         uint32 num_aliases;
1243         uint32 *alias_rids;
1244         NTSTATUS result;
1245
1246         DEBUG(3, ("[%5lu]: getsidaliases\n", (unsigned long)state->pid));
1247
1248         sidstr = state->request.extra_data.data;
1249         if (sidstr == NULL) {
1250                 sidstr = talloc_strdup(state->mem_ctx, "\n"); /* No SID */
1251                 if (!sidstr) {
1252                         DEBUG(0, ("Out of memory\n"));
1253                         return WINBINDD_ERROR;
1254                 }
1255         }
1256
1257         DEBUG(10, ("Sidlist: %s\n", sidstr));
1258
1259         if (!parse_sidlist(state->mem_ctx, sidstr, &sids, &num_sids)) {
1260                 DEBUG(0, ("Could not parse SID list: %s\n", sidstr));
1261                 return WINBINDD_ERROR;
1262         }
1263
1264         num_aliases = 0;
1265         alias_rids = NULL;
1266
1267         result = domain->methods->lookup_useraliases(domain,
1268                                                      state->mem_ctx,
1269                                                      num_sids, sids,
1270                                                      &num_aliases,
1271                                                      &alias_rids);
1272
1273         if (!NT_STATUS_IS_OK(result)) {
1274                 DEBUG(3, ("Could not lookup_useraliases: %s\n",
1275                           nt_errstr(result)));
1276                 return WINBINDD_ERROR;
1277         }
1278
1279         num_sids = 0;
1280         sids = NULL;
1281         sidstr = NULL;
1282
1283         DEBUG(10, ("Got %d aliases\n", num_aliases));
1284
1285         for (i=0; i<num_aliases; i++) {
1286                 DOM_SID sid;
1287                 DEBUGADD(10, (" rid %d\n", alias_rids[i]));
1288                 sid_copy(&sid, &domain->sid);
1289                 sid_append_rid(&sid, alias_rids[i]);
1290                 if (!add_sid_to_array(state->mem_ctx, &sid, &sids, &num_sids)) {
1291                         return WINBINDD_ERROR;
1292                 }
1293         }
1294
1295
1296         if (!print_sidlist(state->mem_ctx, sids, num_sids, &sidstr, &len)) {
1297                 DEBUG(0, ("Could not print_sidlist\n"));
1298                 state->response.extra_data.data = NULL;
1299                 return WINBINDD_ERROR;
1300         }
1301
1302         state->response.extra_data.data = NULL;
1303
1304         if (sidstr) {
1305                 state->response.extra_data.data = SMB_STRDUP(sidstr);
1306                 if (!state->response.extra_data.data) {
1307                         DEBUG(0, ("Out of memory\n"));
1308                         return WINBINDD_ERROR;
1309                 }
1310                 DEBUG(10, ("aliases_list: %s\n",
1311                            (char *)state->response.extra_data.data));
1312                 state->response.length += len+1;
1313         }
1314
1315         return WINBINDD_OK;
1316 }
1317
1318 struct gettoken_state {
1319         TALLOC_CTX *mem_ctx;
1320         DOM_SID user_sid;
1321         struct winbindd_domain *alias_domain;
1322         struct winbindd_domain *local_alias_domain;
1323         struct winbindd_domain *builtin_domain;
1324         DOM_SID *sids;
1325         size_t num_sids;
1326         void (*cont)(void *private_data, BOOL success, DOM_SID *sids, size_t num_sids);
1327         void *private_data;
1328 };
1329
1330 static void gettoken_recvdomgroups(TALLOC_CTX *mem_ctx, BOOL success,
1331                                    struct winbindd_response *response,
1332                                    void *c, void *private_data);
1333 static void gettoken_recvaliases(void *private_data, BOOL success,
1334                                  const DOM_SID *aliases,
1335                                  size_t num_aliases);
1336
1337
1338 void winbindd_gettoken_async(TALLOC_CTX *mem_ctx, const DOM_SID *user_sid,
1339                              void (*cont)(void *private_data, BOOL success,
1340                                           DOM_SID *sids, size_t num_sids),
1341                              void *private_data)
1342 {
1343         struct winbindd_domain *domain;
1344         struct winbindd_request request;
1345         struct gettoken_state *state;
1346
1347         state = TALLOC_ZERO_P(mem_ctx, struct gettoken_state);
1348         if (state == NULL) {
1349                 DEBUG(0, ("talloc failed\n"));
1350                 cont(private_data, False, NULL, 0);
1351                 return;
1352         }
1353
1354         state->mem_ctx = mem_ctx;
1355         sid_copy(&state->user_sid, user_sid);
1356         state->alias_domain = find_our_domain();
1357         state->local_alias_domain = find_domain_from_name( get_global_sam_name() );
1358         state->builtin_domain = find_builtin_domain();
1359         state->cont = cont;
1360         state->private_data = private_data;
1361
1362         domain = find_domain_from_sid_noinit(user_sid);
1363         if (domain == NULL) {
1364                 DEBUG(5, ("Could not find domain from SID %s\n",
1365                           sid_string_static(user_sid)));
1366                 cont(private_data, False, NULL, 0);
1367                 return;
1368         }
1369
1370         ZERO_STRUCT(request);
1371         request.cmd = WINBINDD_GETUSERDOMGROUPS;
1372         fstrcpy(request.data.sid, sid_string_static(user_sid));
1373
1374         do_async_domain(mem_ctx, domain, &request, gettoken_recvdomgroups,
1375                         NULL, state);
1376 }
1377
1378 static void gettoken_recvdomgroups(TALLOC_CTX *mem_ctx, BOOL success,
1379                                    struct winbindd_response *response,
1380                                    void *c, void *private_data)
1381 {
1382         struct gettoken_state *state =
1383                 talloc_get_type_abort(private_data, struct gettoken_state);
1384         char *sids_str;
1385
1386         if (!success) {
1387                 DEBUG(10, ("Could not get domain groups\n"));
1388                 state->cont(state->private_data, False, NULL, 0);
1389                 return;
1390         }
1391
1392         sids_str = (char *)response->extra_data.data;
1393
1394         if (sids_str == NULL) {
1395                 /* This could be normal if we are dealing with a
1396                    local user and local groups */
1397
1398                 if ( !sid_check_is_in_our_domain( &state->user_sid ) ) {
1399                         DEBUG(10, ("Received no domain groups\n"));
1400                         state->cont(state->private_data, True, NULL, 0);
1401                         return;
1402                 }
1403         }
1404
1405         state->sids = NULL;
1406         state->num_sids = 0;
1407
1408         if (!add_sid_to_array(mem_ctx, &state->user_sid, &state->sids,
1409                          &state->num_sids)) {
1410                 DEBUG(0, ("Out of memory\n"));
1411                 state->cont(state->private_data, False, NULL, 0);
1412                 return;
1413         }
1414
1415         if (sids_str && !parse_sidlist(mem_ctx, sids_str, &state->sids,
1416                            &state->num_sids)) {
1417                 DEBUG(0, ("Could not parse sids\n"));
1418                 state->cont(state->private_data, False, NULL, 0);
1419                 return;
1420         }
1421
1422         SAFE_FREE(response->extra_data.data);
1423
1424         if (state->alias_domain == NULL) {
1425                 DEBUG(10, ("Don't expand domain local groups\n"));
1426                 state->cont(state->private_data, True, state->sids,
1427                             state->num_sids);
1428                 return;
1429         }
1430
1431         winbindd_getsidaliases_async(state->alias_domain, mem_ctx,
1432                                      state->sids, state->num_sids,
1433                                      gettoken_recvaliases, state);
1434 }
1435
1436 static void gettoken_recvaliases(void *private_data, BOOL success,
1437                                  const DOM_SID *aliases,
1438                                  size_t num_aliases)
1439 {
1440         struct gettoken_state *state = (struct gettoken_state *)private_data;
1441         size_t i;
1442
1443         if (!success) {
1444                 DEBUG(10, ("Could not receive domain local groups\n"));
1445                 state->cont(state->private_data, False, NULL, 0);
1446                 return;
1447         }
1448
1449         for (i=0; i<num_aliases; i++) {
1450                 if (!add_sid_to_array(state->mem_ctx, &aliases[i],
1451                                  &state->sids, &state->num_sids)) {
1452                         DEBUG(0, ("Out of memory\n"));
1453                         state->cont(state->private_data, False, NULL, 0);
1454                         return;
1455                 }
1456         }
1457
1458         if (state->local_alias_domain != NULL) {
1459                 struct winbindd_domain *local_domain = state->local_alias_domain;
1460                 DEBUG(10, ("Expanding our own local groups\n"));
1461                 state->local_alias_domain = NULL;
1462                 winbindd_getsidaliases_async(local_domain, state->mem_ctx,
1463                                              state->sids, state->num_sids,
1464                                              gettoken_recvaliases, state);
1465                 return;
1466         }
1467
1468         if (state->builtin_domain != NULL) {
1469                 struct winbindd_domain *builtin_domain = state->builtin_domain;
1470                 DEBUG(10, ("Expanding our own BUILTIN groups\n"));
1471                 state->builtin_domain = NULL;
1472                 winbindd_getsidaliases_async(builtin_domain, state->mem_ctx,
1473                                              state->sids, state->num_sids,
1474                                              gettoken_recvaliases, state);
1475                 return;
1476         }
1477
1478         state->cont(state->private_data, True, state->sids, state->num_sids);
1479 }
1480
1481 static void query_user_recv(TALLOC_CTX *mem_ctx, BOOL success,
1482                             struct winbindd_response *response,
1483                             void *c, void *private_data)
1484 {
1485         void (*cont)(void *priv, BOOL succ, const char *acct_name,
1486                      const char *full_name, const char *homedir,
1487                      const char *shell, uint32 gid, uint32 group_rid) =
1488                 (void (*)(void *, BOOL, const char *, const char *,
1489                           const char *, const char *, uint32, uint32))c;
1490
1491         if (!success) {
1492                 DEBUG(5, ("Could not trigger query_user\n"));
1493                 cont(private_data, False, NULL, NULL, NULL, NULL, -1, -1);
1494                 return;
1495         }
1496
1497         cont(private_data, True, response->data.user_info.acct_name,
1498              response->data.user_info.full_name,
1499              response->data.user_info.homedir,
1500              response->data.user_info.shell,
1501              response->data.user_info.primary_gid,
1502              response->data.user_info.group_rid);
1503 }
1504
1505 void query_user_async(TALLOC_CTX *mem_ctx, struct winbindd_domain *domain,
1506                       const DOM_SID *sid,
1507                       void (*cont)(void *private_data, BOOL success,
1508                                    const char *acct_name,
1509                                    const char *full_name,
1510                                    const char *homedir,
1511                                    const char *shell,
1512                                    gid_t gid,
1513                                    uint32 group_rid),
1514                       void *private_data)
1515 {
1516         struct winbindd_request request;
1517         ZERO_STRUCT(request);
1518         request.cmd = WINBINDD_DUAL_USERINFO;
1519         sid_to_string(request.data.sid, sid);
1520         do_async_domain(mem_ctx, domain, &request, query_user_recv,
1521                         (void *)cont, private_data);
1522 }
1523
1524 /* The following uid2sid/gid2sid functions has been contributed by
1525  * Keith Reynolds <Keith.Reynolds@centrify.com> */
1526
1527 static void winbindd_uid2sid_recv(TALLOC_CTX *mem_ctx, BOOL success,
1528                                   struct winbindd_response *response,
1529                                   void *c, void *private_data)
1530 {
1531         void (*cont)(void *priv, BOOL succ, const char *sid) =
1532                 (void (*)(void *, BOOL, const char *))c;
1533
1534         if (!success) {
1535                 DEBUG(5, ("Could not trigger uid2sid\n"));
1536                 cont(private_data, False, NULL);
1537                 return;
1538         }
1539
1540         if (response->result != WINBINDD_OK) {
1541                 DEBUG(5, ("uid2sid returned an error\n"));
1542                 cont(private_data, False, NULL);
1543                 return;
1544         }
1545
1546         cont(private_data, True, response->data.sid.sid);
1547 }
1548
1549 void winbindd_uid2sid_async(TALLOC_CTX *mem_ctx, uid_t uid,
1550                             void (*cont)(void *private_data, BOOL success, const char *sid),
1551                             void *private_data)
1552 {
1553         struct winbindd_request request;
1554
1555         ZERO_STRUCT(request);
1556         request.cmd = WINBINDD_DUAL_UID2SID;
1557         request.data.uid = uid;
1558         do_async(mem_ctx, idmap_child(), &request, winbindd_uid2sid_recv,
1559                  (void *)cont, private_data);
1560 }
1561
1562 enum winbindd_result winbindd_dual_uid2sid(struct winbindd_domain *domain,
1563                                            struct winbindd_cli_state *state)
1564 {
1565         DOM_SID sid;
1566         NTSTATUS result;
1567
1568         DEBUG(3,("[%5lu]: uid to sid %lu\n",
1569                  (unsigned long)state->pid,
1570                  (unsigned long) state->request.data.uid));
1571
1572         /* Find sid for this uid and return it, possibly ask the slow remote idmap */
1573         result = idmap_uid_to_sid(&sid, state->request.data.uid);
1574
1575         if (NT_STATUS_IS_OK(result)) {
1576                 sid_to_string(state->response.data.sid.sid, &sid);
1577                 state->response.data.sid.type = SID_NAME_USER;
1578                 return WINBINDD_OK;
1579         }
1580
1581         return WINBINDD_ERROR;
1582 }
1583
1584 static void winbindd_gid2sid_recv(TALLOC_CTX *mem_ctx, BOOL success,
1585                                   struct winbindd_response *response,
1586                                   void *c, void *private_data)
1587 {
1588         void (*cont)(void *priv, BOOL succ, const char *sid) =
1589                 (void (*)(void *, BOOL, const char *))c;
1590
1591         if (!success) {
1592                 DEBUG(5, ("Could not trigger gid2sid\n"));
1593                 cont(private_data, False, NULL);
1594                 return;
1595         }
1596
1597         if (response->result != WINBINDD_OK) {
1598                 DEBUG(5, ("gid2sid returned an error\n"));
1599                 cont(private_data, False, NULL);
1600                 return;
1601         }
1602
1603         cont(private_data, True, response->data.sid.sid);
1604 }
1605
1606 void winbindd_gid2sid_async(TALLOC_CTX *mem_ctx, gid_t gid,
1607                             void (*cont)(void *private_data, BOOL success, const char *sid),
1608                             void *private_data)
1609 {
1610         struct winbindd_request request;
1611
1612         ZERO_STRUCT(request);
1613         request.cmd = WINBINDD_DUAL_GID2SID;
1614         request.data.gid = gid;
1615         do_async(mem_ctx, idmap_child(), &request, winbindd_gid2sid_recv,
1616                  (void *)cont, private_data);
1617 }
1618
1619 enum winbindd_result winbindd_dual_gid2sid(struct winbindd_domain *domain,
1620                                            struct winbindd_cli_state *state)
1621 {
1622         DOM_SID sid;
1623         NTSTATUS result;
1624
1625         DEBUG(3,("[%5lu]: gid %lu to sid\n",
1626                 (unsigned long)state->pid,
1627                 (unsigned long) state->request.data.gid));
1628
1629         /* Find sid for this gid and return it, possibly ask the slow remote idmap */
1630         result = idmap_gid_to_sid(&sid, state->request.data.gid);
1631
1632         if (NT_STATUS_IS_OK(result)) {
1633                 sid_to_string(state->response.data.sid.sid, &sid);
1634                 DEBUG(10, ("[%5lu]: retrieved sid: %s\n",
1635                            (unsigned long)state->pid,
1636                            state->response.data.sid.sid));
1637                 state->response.data.sid.type = SID_NAME_DOM_GRP;
1638                 return WINBINDD_OK;
1639         }
1640
1641         return WINBINDD_ERROR;
1642 }
1643
1644 static void winbindd_dump_id_maps_recv(TALLOC_CTX *mem_ctx, BOOL success,
1645                                struct winbindd_response *response,
1646                                void *c, void *private_data)
1647 {
1648         void (*cont)(void *priv, BOOL succ) =
1649                 (void (*)(void *, BOOL))c;
1650
1651         if (!success) {
1652                 DEBUG(5, ("Could not trigger a map dump\n"));
1653                 cont(private_data, False);
1654                 return;
1655         }
1656
1657         if (response->result != WINBINDD_OK) {
1658                 DEBUG(5, ("idmap dump maps returned an error\n"));
1659                 cont(private_data, False);
1660                 return;
1661         }
1662
1663         cont(private_data, True);
1664 }
1665
1666 void winbindd_dump_maps_async(TALLOC_CTX *mem_ctx, void *data, int size,
1667                          void (*cont)(void *private_data, BOOL success),
1668                          void *private_data)
1669 {
1670         struct winbindd_request request;
1671         ZERO_STRUCT(request);
1672         request.cmd = WINBINDD_DUAL_DUMP_MAPS;
1673         request.extra_data.data = (char *)data;
1674         request.extra_len = size;
1675         do_async(mem_ctx, idmap_child(), &request, winbindd_dump_id_maps_recv,
1676                  (void *)cont, private_data);
1677 }
1678
1679 enum winbindd_result winbindd_dual_dump_maps(struct winbindd_domain *domain,
1680                                            struct winbindd_cli_state *state)
1681 {
1682         DEBUG(3, ("[%5lu]: dual dump maps\n", (unsigned long)state->pid));
1683
1684         idmap_dump_maps((char *)state->request.extra_data.data);
1685
1686         return WINBINDD_OK;
1687 }
1688