10Sstevel@tonic-gate /*
20Sstevel@tonic-gate  * CDDL HEADER START
30Sstevel@tonic-gate  *
40Sstevel@tonic-gate  * The contents of this file are subject to the terms of the
50Sstevel@tonic-gate  * Common Development and Distribution License, Version 1.0 only
60Sstevel@tonic-gate  * (the "License").  You may not use this file except in compliance
70Sstevel@tonic-gate  * with the License.
80Sstevel@tonic-gate  *
90Sstevel@tonic-gate  * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
100Sstevel@tonic-gate  * or http://www.opensolaris.org/os/licensing.
110Sstevel@tonic-gate  * See the License for the specific language governing permissions
120Sstevel@tonic-gate  * and limitations under the License.
130Sstevel@tonic-gate  *
140Sstevel@tonic-gate  * When distributing Covered Code, include this CDDL HEADER in each
150Sstevel@tonic-gate  * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
160Sstevel@tonic-gate  * If applicable, add the following below this CDDL HEADER, with the
170Sstevel@tonic-gate  * fields enclosed by brackets "[]" replaced with your own identifying
180Sstevel@tonic-gate  * information: Portions Copyright [yyyy] [name of copyright owner]
190Sstevel@tonic-gate  *
200Sstevel@tonic-gate  * CDDL HEADER END
210Sstevel@tonic-gate  */
22132Srobinson 
230Sstevel@tonic-gate /*
24*1219Sraf  * Copyright 2006 Sun Microsystems, Inc.  All rights reserved.
25132Srobinson  * Use is subject to license terms.
260Sstevel@tonic-gate  */
270Sstevel@tonic-gate 
280Sstevel@tonic-gate #pragma ident	"%Z%%M%	%I%	%E% SMI"
290Sstevel@tonic-gate 
30*1219Sraf #include "mt.h"
310Sstevel@tonic-gate #include <stdlib.h>
320Sstevel@tonic-gate #include <sys/types.h>
330Sstevel@tonic-gate #include <nss_dbdefs.h>
340Sstevel@tonic-gate #include <string.h>
350Sstevel@tonic-gate #include <auth_attr.h>
360Sstevel@tonic-gate 
370Sstevel@tonic-gate 
380Sstevel@tonic-gate /* externs from parse.c */
390Sstevel@tonic-gate extern char *_strtok_escape(char *, char *, char **);
400Sstevel@tonic-gate 
410Sstevel@tonic-gate static int authattr_stayopen = 0;
420Sstevel@tonic-gate /*
430Sstevel@tonic-gate  * Unsynchronized, but it affects only
440Sstevel@tonic-gate  * efficiency, not correctness
450Sstevel@tonic-gate  */
460Sstevel@tonic-gate 
470Sstevel@tonic-gate static DEFINE_NSS_DB_ROOT(db_root);
480Sstevel@tonic-gate static DEFINE_NSS_GETENT(context);
490Sstevel@tonic-gate 
500Sstevel@tonic-gate void
510Sstevel@tonic-gate _nss_initf_authattr(nss_db_params_t *p)
520Sstevel@tonic-gate {
530Sstevel@tonic-gate 	p->name = NSS_DBNAM_AUTHATTR;
540Sstevel@tonic-gate 	p->default_config = NSS_DEFCONF_AUTHATTR;
550Sstevel@tonic-gate }
560Sstevel@tonic-gate 
570Sstevel@tonic-gate 
580Sstevel@tonic-gate /*
590Sstevel@tonic-gate  * Return values: 0 = success, 1 = parse error, 2 = erange ...
600Sstevel@tonic-gate  * The structure pointer passed in is a structure in the caller's space
610Sstevel@tonic-gate  * wherein the field pointers would be set to areas in the buffer if
620Sstevel@tonic-gate  * need be. instring and buffer should be separate areas.
630Sstevel@tonic-gate  */
640Sstevel@tonic-gate int
650Sstevel@tonic-gate str2authattr(const char *instr, int lenstr, void *ent, char *buffer, int buflen)
660Sstevel@tonic-gate {
67132Srobinson 	char		*last = NULL;
680Sstevel@tonic-gate 	char		*sep = KV_TOKEN_DELIMIT;
690Sstevel@tonic-gate 	authstr_t	*auth = (authstr_t *)ent;
700Sstevel@tonic-gate 
710Sstevel@tonic-gate 	if ((instr >= buffer && (buffer + buflen) > instr) ||
72132Srobinson 	    (buffer >= instr && (instr + lenstr) > buffer))
730Sstevel@tonic-gate 		return (NSS_STR_PARSE_PARSE);
74132Srobinson 	if (lenstr >= buflen)
750Sstevel@tonic-gate 		return (NSS_STR_PARSE_ERANGE);
76132Srobinson 	(void) strncpy(buffer, instr, buflen);
770Sstevel@tonic-gate 	/*
780Sstevel@tonic-gate 	 * Remove newline that nis (yp_match) puts at the
790Sstevel@tonic-gate 	 * end of the entry it retrieves from the map.
800Sstevel@tonic-gate 	 */
81132Srobinson 	if (buffer[lenstr] == '\n')
820Sstevel@tonic-gate 		buffer[lenstr] = '\0';
830Sstevel@tonic-gate 
840Sstevel@tonic-gate 	auth->name = _strtok_escape(buffer, sep, &last);
850Sstevel@tonic-gate 	auth->res1 = _strtok_escape(NULL, sep, &last);
860Sstevel@tonic-gate 	auth->res2 = _strtok_escape(NULL, sep, &last);
870Sstevel@tonic-gate 	auth->short_desc = _strtok_escape(NULL, sep, &last);
880Sstevel@tonic-gate 	auth->long_desc = _strtok_escape(NULL, sep, &last);
890Sstevel@tonic-gate 	auth->attr = _strtok_escape(NULL, sep, &last);
900Sstevel@tonic-gate 
910Sstevel@tonic-gate 	return (0);
920Sstevel@tonic-gate }
930Sstevel@tonic-gate 
940Sstevel@tonic-gate 
950Sstevel@tonic-gate void
960Sstevel@tonic-gate _setauthattr(void)
970Sstevel@tonic-gate {
980Sstevel@tonic-gate 	authattr_stayopen = 0;
990Sstevel@tonic-gate 	nss_setent(&db_root, _nss_initf_authattr, &context);
1000Sstevel@tonic-gate }
1010Sstevel@tonic-gate 
1020Sstevel@tonic-gate 
1030Sstevel@tonic-gate void
1040Sstevel@tonic-gate _endauthattr(void)
1050Sstevel@tonic-gate {
1060Sstevel@tonic-gate 	authattr_stayopen = 0;
1070Sstevel@tonic-gate 	nss_endent(&db_root, _nss_initf_authattr, &context);
1080Sstevel@tonic-gate 	nss_delete(&db_root);
1090Sstevel@tonic-gate }
1100Sstevel@tonic-gate 
1110Sstevel@tonic-gate 
1120Sstevel@tonic-gate authstr_t *
1130Sstevel@tonic-gate _getauthattr(authstr_t *result, char *buffer, int buflen, int *h_errnop)
1140Sstevel@tonic-gate {
1150Sstevel@tonic-gate 	nss_XbyY_args_t arg;
1160Sstevel@tonic-gate 	nss_status_t res;
1170Sstevel@tonic-gate 
1180Sstevel@tonic-gate 	NSS_XbyY_INIT(&arg, result, buffer, buflen, str2authattr);
1190Sstevel@tonic-gate 	res = nss_getent(&db_root, _nss_initf_authattr, &context, &arg);
1200Sstevel@tonic-gate 	arg.status = res;
1210Sstevel@tonic-gate 	*h_errnop = arg.h_errno;
1220Sstevel@tonic-gate 	return ((authstr_t *)NSS_XbyY_FINI(&arg));
1230Sstevel@tonic-gate }
1240Sstevel@tonic-gate 
1250Sstevel@tonic-gate 
1260Sstevel@tonic-gate authstr_t *
1270Sstevel@tonic-gate _getauthnam(const char *name, authstr_t *result, char *buffer, int buflen,
1280Sstevel@tonic-gate     int *errnop)
1290Sstevel@tonic-gate {
1300Sstevel@tonic-gate 	nss_XbyY_args_t arg;
1310Sstevel@tonic-gate 	nss_status_t    res;
1320Sstevel@tonic-gate 
1330Sstevel@tonic-gate 	NSS_XbyY_INIT(&arg, result, buffer, buflen, str2authattr);
1340Sstevel@tonic-gate 	arg.key.name = name;
1350Sstevel@tonic-gate 	arg.stayopen = authattr_stayopen;
1360Sstevel@tonic-gate 	res = nss_search(&db_root, _nss_initf_authattr,
1370Sstevel@tonic-gate 	    NSS_DBOP_AUTHATTR_BYNAME, &arg);
1380Sstevel@tonic-gate 	arg.status = res;
1390Sstevel@tonic-gate 	*errnop = arg.h_errno;
1400Sstevel@tonic-gate 	return ((authstr_t *)NSS_XbyY_FINI(&arg));
1410Sstevel@tonic-gate }
142