1 /* $OpenBSD: ypldap.c,v 1.16 2015/11/02 10:06:06 jmatthew Exp $ */
5 * Copyright (c) 2008 Pierre-Yves Ritschard <pyr@openbsd.org>
7 * Permission to use, copy, modify, and distribute this software for any
8 * purpose with or without fee is hereby granted, provided that the above
9 * copyright notice and this permission notice appear in all copies.
11 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
12 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
13 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
14 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
15 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
16 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
17 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
20 #include <sys/types.h>
21 #include <sys/param.h>
22 #include <sys/queue.h>
23 #include <sys/socket.h>
24 #include <sys/signal.h>
28 #include <netinet/in.h>
29 #include <arpa/inet.h>
43 __dead2 void usage(void);
44 int check_child(pid_t, const char *);
45 void main_sig_handler(int, short, void *);
46 void main_shutdown(void);
47 void main_dispatch_client(int, short, void *);
48 void main_configure_client(struct env *);
49 void main_init_timer(int, short, void *);
50 void main_start_update(struct env *);
51 void main_trash_update(struct env *);
52 void main_end_update(struct env *);
53 int main_create_user_groups(struct env *);
54 void purge_config(struct env *);
55 void reconfigure(struct env *);
57 int pipe_main2client[2];
60 char *conffile = YPLDAP_CONF_FILE;
66 extern const char *__progname;
68 fprintf(stderr, "usage: %s [-dnv] [-D macro=value] [-f file]\n",
74 check_child(pid_t pid, const char *pname)
78 if (waitpid(pid, &status, WNOHANG) > 0) {
79 if (WIFEXITED(status)) {
80 log_warnx("check_child: lost child %s exited", pname);
83 if (WIFSIGNALED(status)) {
84 log_warnx("check_child: lost child %s terminated; "
85 "signal %d", pname, WTERMSIG(status));
94 main_sig_handler(int sig, short event, void *p)
104 if (check_child(client_pid, "ldap client")) {
115 fatalx("unexpected signal");
126 main_start_update(struct env *env)
128 env->update_trashed = 0;
130 log_debug("starting directory update");
131 env->sc_user_line_len = 0;
132 env->sc_group_line_len = 0;
133 if ((env->sc_user_names_t = calloc(1,
134 sizeof(*env->sc_user_names_t))) == NULL ||
135 (env->sc_group_names_t = calloc(1,
136 sizeof(*env->sc_group_names_t))) == NULL)
138 RB_INIT(env->sc_user_names_t);
139 RB_INIT(env->sc_group_names_t);
143 * XXX: Currently this function should only be called when updating is
144 * finished. A notification should be send to ldapclient that it should stop
145 * sending new pwd/grp entries before it can be called from different places.
148 main_trash_update(struct env *env)
153 env->update_trashed = 1;
155 while ((ue = RB_ROOT(env->sc_user_names_t)) != NULL) {
156 RB_REMOVE(user_name_tree,
157 env->sc_user_names_t, ue);
159 free(ue->ue_netid_line);
162 free(env->sc_user_names_t);
163 env->sc_user_names_t = NULL;
164 while ((ge = RB_ROOT(env->sc_group_names_t))
166 RB_REMOVE(group_name_tree,
167 env->sc_group_names_t, ge);
171 free(env->sc_group_names_t);
172 env->sc_group_names_t = NULL;
176 main_create_user_groups(struct env *env)
184 const char *errstr = NULL;
187 RB_FOREACH(ue, user_name_tree, env->sc_user_names_t) {
188 bp = cp = ue->ue_line;
191 bp += strlen(bp) + 1;
194 bp += strcspn(bp, ":") + 1;
197 bp += strcspn(bp, ":") + 1;
200 bp[strcspn(bp, ":")] = '\0';
202 pw_gid = (gid_t)strtonum(bp, 0, GID_MAX, &errstr);
204 log_warnx("main: failed to parse gid for uid: %d\n", ue->ue_uid);
208 /* bring gid column back to its proper state */
209 bp[strlen(bp)] = ':';
211 if ((ue->ue_netid_line = calloc(1, LINE_WIDTH)) == NULL) {
215 if (snprintf(ue->ue_netid_line, LINE_WIDTH-1, "%d:%d", ue->ue_uid, pw_gid) >= LINE_WIDTH) {
223 RB_FOREACH(ge, group_name_tree, env->sc_group_names_t) {
224 bp = cp = ge->ge_line;
227 bp += strlen(bp) + 1;
230 bp += strcspn(bp, ":") + 1;
233 bp += strcspn(bp, ":") + 1;
240 if (!(cp = strsep(&bp, ",")))
243 if ((ue = RB_FIND(user_name_tree, env->sc_user_names_t,
246 log_warnx("main: unknown user %s in group %s\n",
247 ukey.ue_line, ge->ge_line);
255 /* Make sure the new group doesn't equal to the main gid */
256 if (ge->ge_gid == ue->ue_gid)
259 len = strlen(ue->ue_netid_line);
260 p = ue->ue_netid_line + len;
262 if ((snprintf(p, LINE_WIDTH-len-1, ",%d",
263 ge->ge_gid)) >= (int)(LINE_WIDTH-len)) {
273 main_end_update(struct env *env)
278 if (env->update_trashed)
281 log_debug("updates are over, cleaning up trees now");
283 if (main_create_user_groups(env) == -1) {
284 main_trash_update(env);
288 if (env->sc_user_names == NULL) {
289 env->sc_user_names = env->sc_user_names_t;
290 env->sc_user_lines = NULL;
291 env->sc_user_names_t = NULL;
293 env->sc_group_names = env->sc_group_names_t;
294 env->sc_group_lines = NULL;
295 env->sc_group_names_t = NULL;
297 flatten_entries(env);
302 * clean previous tree.
304 while ((ue = RB_ROOT(env->sc_user_names)) != NULL) {
305 RB_REMOVE(user_name_tree, env->sc_user_names,
307 free(ue->ue_netid_line);
310 free(env->sc_user_names);
311 free(env->sc_user_lines);
313 env->sc_user_names = env->sc_user_names_t;
314 env->sc_user_lines = NULL;
315 env->sc_user_names_t = NULL;
317 while ((ge = RB_ROOT(env->sc_group_names)) != NULL) {
318 RB_REMOVE(group_name_tree,
319 env->sc_group_names, ge);
322 free(env->sc_group_names);
323 free(env->sc_group_lines);
325 env->sc_group_names = env->sc_group_names_t;
326 env->sc_group_lines = NULL;
327 env->sc_group_names_t = NULL;
330 flatten_entries(env);
333 * trees are flat now. build up uid, gid and netid trees.
337 RB_INIT(&env->sc_user_uids);
338 RB_INIT(&env->sc_group_gids);
339 RB_FOREACH(ue, user_name_tree, env->sc_user_names)
340 RB_INSERT(user_uid_tree,
341 &env->sc_user_uids, ue);
342 RB_FOREACH(ge, group_name_tree, env->sc_group_names)
343 RB_INSERT(group_gid_tree,
344 &env->sc_group_gids, ge);
349 main_dispatch_client(int fd, short events, void *p)
354 struct imsgev *iev = env->sc_iev;
355 struct imsgbuf *ibuf = &iev->ibuf;
359 if ((events & (EV_READ | EV_WRITE)) == 0)
360 fatalx("unknown event");
362 if (events & EV_READ) {
363 if ((n = imsg_read(ibuf)) == -1 && errno != EAGAIN)
364 fatal("imsg_read error");
368 if (events & EV_WRITE) {
369 if ((n = msgbuf_write(&ibuf->w)) == -1 && errno != EAGAIN)
370 fatal("msgbuf_write");
377 if ((n = imsg_get(ibuf, &imsg)) == -1)
378 fatal("main_dispatch_client: imsg_get error");
382 switch (imsg.hdr.type) {
383 case IMSG_START_UPDATE:
384 main_start_update(env);
386 case IMSG_PW_ENTRY: {
390 if (env->update_trashed)
393 (void)memcpy(&ir, imsg.data, sizeof(ir));
394 if ((ue = calloc(1, sizeof(*ue))) == NULL ||
395 (ue->ue_line = strdup(ir.ir_line)) == NULL) {
397 * should cancel tree update instead.
399 fatal("out of memory");
401 ue->ue_uid = ir.ir_key.ik_uid;
402 len = strlen(ue->ue_line) + 1;
403 ue->ue_line[strcspn(ue->ue_line, ":")] = '\0';
404 if (RB_INSERT(user_name_tree, env->sc_user_names_t,
405 ue) != NULL) { /* dup */
409 env->sc_user_line_len += len;
412 case IMSG_GRP_ENTRY: {
416 if (env->update_trashed)
419 (void)memcpy(&ir, imsg.data, sizeof(ir));
420 if ((ge = calloc(1, sizeof(*ge))) == NULL ||
421 (ge->ge_line = strdup(ir.ir_line)) == NULL) {
423 * should cancel tree update instead.
425 fatal("out of memory");
427 ge->ge_gid = ir.ir_key.ik_gid;
428 len = strlen(ge->ge_line) + 1;
429 ge->ge_line[strcspn(ge->ge_line, ":")] = '\0';
430 if (RB_INSERT(group_name_tree, env->sc_group_names_t,
431 ge) != NULL) { /* dup */
435 env->sc_group_line_len += len;
438 case IMSG_TRASH_UPDATE:
439 main_trash_update(env);
441 case IMSG_END_UPDATE: {
442 main_end_update(env);
446 log_debug("main_dispatch_client: unexpected imsg %d",
457 log_debug("king bula sez: ran into dead pipe");
459 event_loopexit(NULL);
464 main_configure_client(struct env *env)
467 struct imsgev *iev = env->sc_iev;
469 imsg_compose_event(iev, IMSG_CONF_START, 0, 0, -1, env, sizeof(*env));
470 TAILQ_FOREACH(idm, &env->sc_idms, idm_entry) {
471 imsg_compose_event(iev, IMSG_CONF_IDM, 0, 0, -1,
474 imsg_compose_event(iev, IMSG_CONF_END, 0, 0, -1, NULL, 0);
478 main_init_timer(int fd, short event, void *p)
482 main_configure_client(env);
486 purge_config(struct env *env)
490 while ((idm = TAILQ_FIRST(&env->sc_idms)) != NULL) {
491 TAILQ_REMOVE(&env->sc_idms, idm, idm_entry);
497 main(int argc, char *argv[])
503 struct event ev_sigint;
504 struct event ev_sigterm;
505 struct event ev_sigchld;
506 struct event ev_sighup;
507 struct event ev_timer;
511 ypldap_process = PROC_MAIN;
515 while ((c = getopt(argc, argv, "dD:nf:v")) != -1) {
521 if (cmdline_symset(optarg) < 0)
522 log_warnx("could not parse macro definition %s",
527 opts |= YPLDAP_OPT_NOACTION;
533 opts |= YPLDAP_OPT_VERBOSE;
546 RB_INIT(&env.sc_user_uids);
547 RB_INIT(&env.sc_group_gids);
549 if (parse_config(&env, conffile, opts))
551 if (opts & YPLDAP_OPT_NOACTION) {
552 fprintf(stderr, "configuration OK\n");
557 errx(1, "need root privileges");
562 if (daemon(1, 0) == -1)
563 err(1, "failed to daemonize");
566 log_info("startup%s", (debug > 1)?" [debug mode]":"");
568 if (socketpair(AF_UNIX, SOCK_STREAM | SOCK_NONBLOCK, PF_UNSPEC,
569 pipe_main2client) == -1)
572 client_pid = ldapclient(pipe_main2client);
574 setproctitle("parent");
577 signal_set(&ev_sigint, SIGINT, main_sig_handler, &env);
578 signal_set(&ev_sigterm, SIGTERM, main_sig_handler, &env);
579 signal_set(&ev_sighup, SIGHUP, main_sig_handler, &env);
580 signal_set(&ev_sigchld, SIGCHLD, main_sig_handler, &env);
581 signal_add(&ev_sigint, NULL);
582 signal_add(&ev_sigterm, NULL);
583 signal_add(&ev_sighup, NULL);
584 signal_add(&ev_sigchld, NULL);
586 close(pipe_main2client[1]);
587 if ((env.sc_iev = calloc(1, sizeof(*env.sc_iev))) == NULL)
589 imsg_init(&env.sc_iev->ibuf, pipe_main2client[0]);
590 env.sc_iev->handler = main_dispatch_client;
592 env.sc_iev->events = EV_READ;
593 env.sc_iev->data = &env;
594 event_set(&env.sc_iev->ev, env.sc_iev->ibuf.fd, env.sc_iev->events,
595 env.sc_iev->handler, &env);
596 event_add(&env.sc_iev->ev, NULL);
600 if ((pw = getpwnam(YPLDAP_USER)) == NULL)
604 if (setgroups(1, &pw->pw_gid) ||
605 setresgid(pw->pw_gid, pw->pw_gid, pw->pw_gid) ||
606 setresuid(pw->pw_uid, pw->pw_uid, pw->pw_uid))
607 fatal("cannot drop privileges");
609 #warning disabling privilege revocation in debug mode
612 memset(&tv, 0, sizeof(tv));
613 evtimer_set(&ev_timer, main_init_timer, &env);
614 evtimer_add(&ev_timer, &tv);
624 imsg_event_add(struct imsgev *iev)
626 if (iev->handler == NULL) {
627 imsg_flush(&iev->ibuf);
631 iev->events = EV_READ;
632 if (iev->ibuf.w.queued)
633 iev->events |= EV_WRITE;
636 event_set(&iev->ev, iev->ibuf.fd, iev->events, iev->handler, iev->data);
637 event_add(&iev->ev, NULL);
641 imsg_compose_event(struct imsgev *iev, u_int16_t type, u_int32_t peerid,
642 pid_t pid, int fd, void *data, u_int16_t datalen)
646 if ((ret = imsg_compose(&iev->ibuf, type, peerid,
647 pid, fd, data, datalen)) != -1)