1/* Copyright (c) 1997-2017 Free Software Foundation, Inc.
2 This file is part of the GNU C Library.
3 Contributed by Thorsten Kukuk <kukuk@suse.de>, 1997.
4
5 The GNU C Library is free software; you can redistribute it and/or
6 modify it under the terms of the GNU Lesser General Public
7 License as published by the Free Software Foundation; either
8 version 2.1 of the License, or (at your option) any later version.
9
10 The GNU C Library is distributed in the hope that it will be useful,
11 but WITHOUT ANY WARRANTY; without even the implied warranty of
12 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
13 Lesser General Public License for more details.
14
15 You should have received a copy of the GNU Lesser General Public
16 License along with the GNU C Library; if not, see
17 <http://www.gnu.org/licenses/>. */
18
19#include <string.h>
20#include <rpcsvc/nis.h>
21#include <shlib-compat.h>
22
23/* internal_nis_ismember ()
24 return codes: -1 principal is in -group
25 0 principal isn't in any group
26 1 pirncipal is in group */
27static int
28internal_ismember (const_nis_name principal, const_nis_name group)
29{
30 size_t grouplen = strlen (group);
31 char buf[grouplen + 50];
32 char leafbuf[grouplen + 2];
33 char domainbuf[grouplen + 2];
34 nis_result *res;
35 char *cp, *cp2;
36 u_int i;
37
38 cp = stpcpy (buf, nis_leaf_of_r (group, leafbuf, sizeof (leafbuf) - 1));
39 cp = stpcpy (cp, ".groups_dir");
40 cp2 = nis_domain_of_r (group, domainbuf, sizeof (domainbuf) - 1);
41 if (cp2 != NULL && cp2[0] != '\0')
42 {
43 *cp++ = '.';
44 strcpy (cp, cp2);
45 }
46
47 res = nis_lookup (buf, EXPAND_NAME|FOLLOW_LINKS);
48 if (res == NULL || NIS_RES_STATUS (res) != NIS_SUCCESS)
49 {
50 nis_freeresult (res);
51 return 0;
52 }
53
54 if ((NIS_RES_NUMOBJ (res) != 1) ||
55 (__type_of (NIS_RES_OBJECT (res)) != NIS_GROUP_OBJ))
56 {
57 nis_freeresult (res);
58 return 0;
59 }
60
61 /* We search twice in the list, at first, if we have the name
62 with a "-", then if without. "-member" has priority */
63 for (i = 0; i < NIS_RES_OBJECT(res)->GR_data.gr_members.gr_members_len; ++i)
64 {
65 cp = NIS_RES_OBJECT (res)->GR_data.gr_members.gr_members_val[i];
66 if (cp[0] == '-')
67 {
68 if (strcmp (&cp[1], principal) == 0)
69 {
70 nis_freeresult (res);
71 return -1;
72 }
73 if (cp[1] == '@')
74 switch (internal_ismember (principal, &cp[2]))
75 {
76 case -1:
77 nis_freeresult (res);
78 return -1;
79 case 1:
80 nis_freeresult (res);
81 return 1;
82 default:
83 break;
84 }
85 else
86 if (cp[1] == '*')
87 {
88 char buf1[strlen (principal) + 2];
89 char buf2[strlen (cp) + 2];
90
91 if (strcmp (nis_domain_of_r (principal, buf1, sizeof buf1),
92 nis_domain_of_r (cp, buf2, sizeof buf2)) == 0)
93 {
94 nis_freeresult (res);
95 return -1;
96 }
97 }
98 }
99 }
100
101 for (i = 0; i < NIS_RES_OBJECT (res)->GR_data.gr_members.gr_members_len; ++i)
102 {
103 cp = NIS_RES_OBJECT (res)->GR_data.gr_members.gr_members_val[i];
104 if (cp[0] != '-')
105 {
106 if (strcmp (cp, principal) == 0)
107 {
108 nis_freeresult (res);
109 return 1;
110 }
111 if (cp[0] == '@')
112 switch (internal_ismember (principal, &cp[1]))
113 {
114 case -1:
115 nis_freeresult (res);
116 return -1;
117 case 1:
118 nis_freeresult (res);
119 return 1;
120 default:
121 break;
122 }
123 else
124 if (cp[0] == '*')
125 {
126 char buf1[strlen (principal) + 2];
127 char buf2[strlen (cp) + 2];
128
129 if (strcmp (nis_domain_of_r (principal, buf1, sizeof buf1),
130 nis_domain_of_r (cp, buf2, sizeof buf2)) == 0)
131 {
132 nis_freeresult (res);
133 return 1;
134 }
135 }
136 }
137 }
138 nis_freeresult (res);
139 return 0;
140}
141
142bool_t
143nis_ismember (const_nis_name principal, const_nis_name group)
144{
145 if (group != NULL && group[0] != '\0' && principal != NULL)
146 return internal_ismember (principal, group) == 1 ? TRUE : FALSE;
147 else
148 return FALSE;
149}
150libnsl_hidden_nolink_def (nis_ismember, GLIBC_2_1)
151