10Sstevel@tonic-gate /*
20Sstevel@tonic-gate  * CDDL HEADER START
30Sstevel@tonic-gate  *
40Sstevel@tonic-gate  * The contents of this file are subject to the terms of the
50Sstevel@tonic-gate  * Common Development and Distribution License, Version 1.0 only
60Sstevel@tonic-gate  * (the "License").  You may not use this file except in compliance
70Sstevel@tonic-gate  * with the License.
80Sstevel@tonic-gate  *
90Sstevel@tonic-gate  * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
100Sstevel@tonic-gate  * or http://www.opensolaris.org/os/licensing.
110Sstevel@tonic-gate  * See the License for the specific language governing permissions
120Sstevel@tonic-gate  * and limitations under the License.
130Sstevel@tonic-gate  *
140Sstevel@tonic-gate  * When distributing Covered Code, include this CDDL HEADER in each
150Sstevel@tonic-gate  * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
160Sstevel@tonic-gate  * If applicable, add the following below this CDDL HEADER, with the
170Sstevel@tonic-gate  * fields enclosed by brackets "[]" replaced with your own identifying
180Sstevel@tonic-gate  * information: Portions Copyright [yyyy] [name of copyright owner]
190Sstevel@tonic-gate  *
200Sstevel@tonic-gate  * CDDL HEADER END
210Sstevel@tonic-gate  */
22*132Srobinson 
230Sstevel@tonic-gate /*
24*132Srobinson  * Copyright 2005 Sun Microsystems, Inc.  All rights reserved.
25*132Srobinson  * Use is subject to license terms.
260Sstevel@tonic-gate  */
270Sstevel@tonic-gate 
280Sstevel@tonic-gate #pragma ident	"%Z%%M%	%I%	%E% SMI"
290Sstevel@tonic-gate 
300Sstevel@tonic-gate #include <stdlib.h>
310Sstevel@tonic-gate #include <sys/types.h>
320Sstevel@tonic-gate #include <nss_dbdefs.h>
330Sstevel@tonic-gate #include <string.h>
340Sstevel@tonic-gate #include <auth_attr.h>
350Sstevel@tonic-gate 
360Sstevel@tonic-gate 
370Sstevel@tonic-gate /* externs from parse.c */
380Sstevel@tonic-gate extern char *_strtok_escape(char *, char *, char **);
390Sstevel@tonic-gate 
400Sstevel@tonic-gate static int authattr_stayopen = 0;
410Sstevel@tonic-gate /*
420Sstevel@tonic-gate  * Unsynchronized, but it affects only
430Sstevel@tonic-gate  * efficiency, not correctness
440Sstevel@tonic-gate  */
450Sstevel@tonic-gate 
460Sstevel@tonic-gate static DEFINE_NSS_DB_ROOT(db_root);
470Sstevel@tonic-gate static DEFINE_NSS_GETENT(context);
480Sstevel@tonic-gate 
490Sstevel@tonic-gate void
500Sstevel@tonic-gate _nss_initf_authattr(nss_db_params_t *p)
510Sstevel@tonic-gate {
520Sstevel@tonic-gate 	p->name = NSS_DBNAM_AUTHATTR;
530Sstevel@tonic-gate 	p->default_config = NSS_DEFCONF_AUTHATTR;
540Sstevel@tonic-gate }
550Sstevel@tonic-gate 
560Sstevel@tonic-gate 
570Sstevel@tonic-gate /*
580Sstevel@tonic-gate  * Return values: 0 = success, 1 = parse error, 2 = erange ...
590Sstevel@tonic-gate  * The structure pointer passed in is a structure in the caller's space
600Sstevel@tonic-gate  * wherein the field pointers would be set to areas in the buffer if
610Sstevel@tonic-gate  * need be. instring and buffer should be separate areas.
620Sstevel@tonic-gate  */
630Sstevel@tonic-gate int
640Sstevel@tonic-gate str2authattr(const char *instr, int lenstr, void *ent, char *buffer, int buflen)
650Sstevel@tonic-gate {
66*132Srobinson 	char		*last = NULL;
670Sstevel@tonic-gate 	char		*sep = KV_TOKEN_DELIMIT;
680Sstevel@tonic-gate 	authstr_t	*auth = (authstr_t *)ent;
690Sstevel@tonic-gate 
700Sstevel@tonic-gate 	if ((instr >= buffer && (buffer + buflen) > instr) ||
71*132Srobinson 	    (buffer >= instr && (instr + lenstr) > buffer))
720Sstevel@tonic-gate 		return (NSS_STR_PARSE_PARSE);
73*132Srobinson 	if (lenstr >= buflen)
740Sstevel@tonic-gate 		return (NSS_STR_PARSE_ERANGE);
75*132Srobinson 	(void) strncpy(buffer, instr, buflen);
760Sstevel@tonic-gate 	/*
770Sstevel@tonic-gate 	 * Remove newline that nis (yp_match) puts at the
780Sstevel@tonic-gate 	 * end of the entry it retrieves from the map.
790Sstevel@tonic-gate 	 */
80*132Srobinson 	if (buffer[lenstr] == '\n')
810Sstevel@tonic-gate 		buffer[lenstr] = '\0';
820Sstevel@tonic-gate 
830Sstevel@tonic-gate 	auth->name = _strtok_escape(buffer, sep, &last);
840Sstevel@tonic-gate 	auth->res1 = _strtok_escape(NULL, sep, &last);
850Sstevel@tonic-gate 	auth->res2 = _strtok_escape(NULL, sep, &last);
860Sstevel@tonic-gate 	auth->short_desc = _strtok_escape(NULL, sep, &last);
870Sstevel@tonic-gate 	auth->long_desc = _strtok_escape(NULL, sep, &last);
880Sstevel@tonic-gate 	auth->attr = _strtok_escape(NULL, sep, &last);
890Sstevel@tonic-gate 
900Sstevel@tonic-gate 	return (0);
910Sstevel@tonic-gate }
920Sstevel@tonic-gate 
930Sstevel@tonic-gate 
940Sstevel@tonic-gate void
950Sstevel@tonic-gate _setauthattr(void)
960Sstevel@tonic-gate {
970Sstevel@tonic-gate 	authattr_stayopen = 0;
980Sstevel@tonic-gate 	nss_setent(&db_root, _nss_initf_authattr, &context);
990Sstevel@tonic-gate }
1000Sstevel@tonic-gate 
1010Sstevel@tonic-gate 
1020Sstevel@tonic-gate void
1030Sstevel@tonic-gate _endauthattr(void)
1040Sstevel@tonic-gate {
1050Sstevel@tonic-gate 	authattr_stayopen = 0;
1060Sstevel@tonic-gate 	nss_endent(&db_root, _nss_initf_authattr, &context);
1070Sstevel@tonic-gate 	nss_delete(&db_root);
1080Sstevel@tonic-gate }
1090Sstevel@tonic-gate 
1100Sstevel@tonic-gate 
1110Sstevel@tonic-gate authstr_t *
1120Sstevel@tonic-gate _getauthattr(authstr_t *result, char *buffer, int buflen, int *h_errnop)
1130Sstevel@tonic-gate {
1140Sstevel@tonic-gate 	nss_XbyY_args_t arg;
1150Sstevel@tonic-gate 	nss_status_t res;
1160Sstevel@tonic-gate 
1170Sstevel@tonic-gate 	NSS_XbyY_INIT(&arg, result, buffer, buflen, str2authattr);
1180Sstevel@tonic-gate 	res = nss_getent(&db_root, _nss_initf_authattr, &context, &arg);
1190Sstevel@tonic-gate 	arg.status = res;
1200Sstevel@tonic-gate 	*h_errnop = arg.h_errno;
1210Sstevel@tonic-gate 	return ((authstr_t *)NSS_XbyY_FINI(&arg));
1220Sstevel@tonic-gate }
1230Sstevel@tonic-gate 
1240Sstevel@tonic-gate 
1250Sstevel@tonic-gate authstr_t *
1260Sstevel@tonic-gate _getauthnam(const char *name, authstr_t *result, char *buffer, int buflen,
1270Sstevel@tonic-gate     int *errnop)
1280Sstevel@tonic-gate {
1290Sstevel@tonic-gate 	nss_XbyY_args_t arg;
1300Sstevel@tonic-gate 	nss_status_t    res;
1310Sstevel@tonic-gate 
1320Sstevel@tonic-gate 	NSS_XbyY_INIT(&arg, result, buffer, buflen, str2authattr);
1330Sstevel@tonic-gate 	arg.key.name = name;
1340Sstevel@tonic-gate 	arg.stayopen = authattr_stayopen;
1350Sstevel@tonic-gate 	res = nss_search(&db_root, _nss_initf_authattr,
1360Sstevel@tonic-gate 	    NSS_DBOP_AUTHATTR_BYNAME, &arg);
1370Sstevel@tonic-gate 	arg.status = res;
1380Sstevel@tonic-gate 	*errnop = arg.h_errno;
1390Sstevel@tonic-gate 	return ((authstr_t *)NSS_XbyY_FINI(&arg));
1400Sstevel@tonic-gate }
141