/* Editor Settings: expandtabs and use 4 spaces for indentation
 * ex: set softtabstop=4 tabstop=8 expandtab shiftwidth=4: *
 * -*- mode: c, c-basic-offset: 4 -*- */

/*
 * Copyright Likewise Software    2004-2008
 * All rights reserved.
 *
 * This library is free software; you can redistribute it and/or modify it
 * under the terms of the GNU Lesser General Public License as published by
 * the Free Software Foundation; either version 2.1 of the license, or (at
 * your option) any later version.
 *
 * This library is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU Lesser
 * General Public License for more details.  You should have received a copy
 * of the GNU Lesser General Public License along with this program.  If
 * not, see <http://www.gnu.org/licenses/>.
 *
 * LIKEWISE SOFTWARE MAKES THIS SOFTWARE AVAILABLE UNDER OTHER LICENSING
 * TERMS AS WELL.  IF YOU HAVE ENTERED INTO A SEPARATE LICENSE AGREEMENT
 * WITH LIKEWISE SOFTWARE, THEN YOU MAY ELECT TO USE THE SOFTWARE UNDER THE
 * TERMS OF THAT SOFTWARE LICENSE AGREEMENT INSTEAD OF THE TERMS OF THE GNU
 * LESSER GENERAL PUBLIC LICENSE, NOTWITHSTANDING THE ABOVE NOTICE.  IF YOU
 * HAVE QUESTIONS, OR WISH TO REQUEST A COPY OF THE ALTERNATE LICENSING
 * TERMS OFFERED BY LIKEWISE SOFTWARE, PLEASE CONTACT LIKEWISE SOFTWARE AT
 * license@likewisesoftware.com
 */

#include "includes.h"
#include "lam-group.h"

void
LsaNssFreeLastGroup(
        VOID
        )
{
    LW_SAFE_FREE_MEMORY(gNssState.pLastGroup);
}

DWORD
LsaNssAllocateGroupFromInfo1(
        PLSA_GROUP_INFO_1 pInfo,
        struct group** ppResult
        )
{
    DWORD dwError = LW_ERROR_SUCCESS;
    // Do not free directly. Free pStartMem instead on error
    struct group* pResult = NULL;
    void *pStartMem = NULL;
    // Do not free
    PBYTE pMem = NULL;
    size_t sRequiredSize = 0;
    size_t sMemberCount = 0;
    size_t sLen = 0;

    sRequiredSize += sizeof(struct group);
    sRequiredSize += strlen(pInfo->pszName) + 1;
    sRequiredSize += strlen(pInfo->pszPasswd) + 1;
    while (pInfo->ppszMembers[sMemberCount] != NULL)
    {
        sRequiredSize += strlen(pInfo->ppszMembers[sMemberCount]) + 1;
        sMemberCount++;
    }
    sRequiredSize += sizeof(char *) * (sMemberCount + 1);

    dwError = LwAllocateMemory(
            sRequiredSize,
            &pStartMem);
    BAIL_ON_LSA_ERROR(dwError);

    pMem = pStartMem;
    pResult = (struct group *)pMem;
    pMem += sizeof(struct group);

    // Get memory for the gr_mem field early so that is boundary aligned
    pResult->gr_mem = (char **)pMem;
    pMem += sizeof(char *) * (sMemberCount + 1);

    sLen = strlen(pInfo->pszName);
    pResult->gr_name = (char *)pMem;
    memcpy(pResult->gr_name, pInfo->pszName, sLen + 1);
    pMem += sLen + 1;

    sLen = strlen(pInfo->pszPasswd);
    pResult->gr_passwd = (char *)pMem;
    memcpy(pResult->gr_passwd, pInfo->pszPasswd, sLen + 1);
    pMem += sLen + 1;

    pResult->gr_gid = pInfo->gid;

    sMemberCount = 0;
    while (pInfo->ppszMembers[sMemberCount] != NULL)
    {
        sLen = strlen(pInfo->ppszMembers[sMemberCount]);
        pResult->gr_mem[sMemberCount] = (char *)pMem;
        memcpy(pResult->gr_mem[sMemberCount], pInfo->ppszMembers[sMemberCount], sLen + 1);
        pMem += sLen + 1;
        sMemberCount++;
    }
    pResult->gr_mem[sMemberCount] = NULL;
    assert(pMem == pStartMem + sRequiredSize);

    *ppResult = pResult;

cleanup:

    return dwError;

error:

    *ppResult = NULL;
    LW_SAFE_FREE_MEMORY(pStartMem);

    goto cleanup;
}

DWORD
LsaNssAllocateGroupFromInfo0(
        PLSA_GROUP_INFO_0 pInfo,
        struct group** ppResult
        )
{
    DWORD dwError = LW_ERROR_SUCCESS;
    // Do not free directly. Free pStartMem instead on error
    struct group* pResult = NULL;
    void *pStartMem = NULL;
    // Do not free
    PBYTE pMem = NULL;
    size_t sRequiredSize = 0;
    size_t sLen = 0;

    sRequiredSize += sizeof(struct group);
    sRequiredSize += strlen(pInfo->pszName) + 1;
    sRequiredSize += 2;

    dwError = LwAllocateMemory(
            sRequiredSize,
            &pStartMem);
    BAIL_ON_LSA_ERROR(dwError);

    pMem = pStartMem;
    pResult = (struct group *)pMem;
    pMem += sizeof(struct group);

    pResult->gr_mem = NULL;

    sLen = strlen(pInfo->pszName);
    pResult->gr_name = (char *)pMem;
    memcpy(pResult->gr_name, pInfo->pszName, sLen + 1);
    pMem += sLen + 1;

    sLen = 1;
    pResult->gr_passwd = (char *)pMem;
    memcpy(pResult->gr_passwd, "*", sLen + 1);
    pMem += sLen + 1;

    pResult->gr_gid = pInfo->gid;

    assert(pMem == pStartMem + sRequiredSize);

    *ppResult = pResult;

cleanup:

    return dwError;

error:

    *ppResult = NULL;
    LW_SAFE_FREE_MEMORY(pStartMem);

    goto cleanup;
}

struct group *LsaNssGetGrGid(gid_t gid)
{
    DWORD dwError = LW_ERROR_SUCCESS;
    PLSA_GROUP_INFO_1 pInfo = NULL;
    const DWORD dwInfoLevel = 1;
    struct group *pResult = NULL;

    if (hLsaConnection == (HANDLE)NULL)
    {
        dwError = LsaOpenServer(&hLsaConnection);
        BAIL_ON_LSA_ERROR(dwError);
    }

    dwError = LsaFindGroupById(
                hLsaConnection,
                gid,
                LSA_FIND_FLAGS_NSS,
                dwInfoLevel,
                (PVOID*)&pInfo);
    BAIL_ON_LSA_ERROR(dwError);

    dwError = LsaNssAllocateGroupFromInfo1(
                pInfo,
                &pResult);
    BAIL_ON_LSA_ERROR(dwError);

    LsaNssFreeLastGroup();
    gNssState.pLastGroup = pResult;

cleanup:

    if (pInfo != NULL)
    {
        LsaFreeGroupInfo(
		dwInfoLevel,
                (PVOID)pInfo);
    }

    if (dwError != LW_ERROR_SUCCESS)
    {
        LsaNssMapErrorCode(dwError, &errno);
    }
    return pResult;

error:
    if (hLsaConnection != (HANDLE)NULL)
    {
        LsaCloseServer(hLsaConnection);
        hLsaConnection = (HANDLE)NULL;
    }

    goto cleanup;
}

struct group *LsaNssGetGrNam(PCSTR pszName)
{
    DWORD dwError = LW_ERROR_SUCCESS;
    PLSA_GROUP_INFO_1 pInfo = NULL;
    const DWORD dwInfoLevel = 1;
    struct group *pResult = NULL;

    if (hLsaConnection == (HANDLE)NULL)
    {
        dwError = LsaOpenServer(&hLsaConnection);
        BAIL_ON_LSA_ERROR(dwError);
    }

    dwError = LsaFindGroupByName(
                hLsaConnection,
                pszName,
                LSA_FIND_FLAGS_NSS,
                dwInfoLevel,
                (PVOID*)&pInfo);
    BAIL_ON_LSA_ERROR(dwError);

    dwError = LsaNssAllocateGroupFromInfo1(
                pInfo,
                &pResult);
    BAIL_ON_LSA_ERROR(dwError);

    LsaNssFreeLastGroup();
    gNssState.pLastGroup = pResult;

cleanup:

    if (pInfo != NULL)
    {
        LsaFreeGroupInfo(
                dwInfoLevel,
                pInfo);
    }

    if (dwError != LW_ERROR_SUCCESS)
    {
        LsaNssMapErrorCode(dwError, &errno);
    }
    return pResult;

error:
    if (hLsaConnection != (HANDLE)NULL)
    {
        LsaCloseServer(hLsaConnection);
        hLsaConnection = (HANDLE)NULL;
    }

    goto cleanup;
}

struct group *
LsaNssGetGrAcct(
        PVOID pId,
        int iType
        )
{
    DWORD dwError = LW_ERROR_SUCCESS;
    PLSA_GROUP_INFO_0 pInfo = NULL;
    const DWORD dwInfoLevel = 0;
    struct group *pResult = NULL;

    if (hLsaConnection == (HANDLE)NULL)
    {
        dwError = LsaOpenServer(&hLsaConnection);
        BAIL_ON_LSA_ERROR(dwError);
    }

    if (iType == 0)
    {
        dwError = LsaFindGroupByName(
                    hLsaConnection,
                    (PSTR)pId,
                    LSA_FIND_FLAGS_NSS,
                    dwInfoLevel,
                    (PVOID*)&pInfo);
        BAIL_ON_LSA_ERROR(dwError);
    }
    else if (iType == 1)
    {
        dwError = LsaFindGroupById(
                    hLsaConnection,
                    *(gid_t *)pId,
                    LSA_FIND_FLAGS_NSS,
                    dwInfoLevel,
                    (PVOID*)&pInfo);
        BAIL_ON_LSA_ERROR(dwError);
    }
    else
    {
        dwError = EINVAL;
        BAIL_ON_LSA_ERROR(dwError);
    }

    dwError = LsaNssAllocateGroupFromInfo0(
                pInfo,
                &pResult);
    BAIL_ON_LSA_ERROR(dwError);

    LsaNssFreeLastGroup();
    gNssState.pLastGroup = pResult;

cleanup:

    if (pInfo != NULL)
    {
        LsaFreeGroupInfo(
                dwInfoLevel,
                pInfo);
    }

    if (dwError != LW_ERROR_SUCCESS)
    {
        LsaNssMapErrorCode(dwError, &errno);
    }
    return pResult;

error:
    if (hLsaConnection != (HANDLE)NULL)
    {
        LsaCloseServer(hLsaConnection);
        hLsaConnection = (HANDLE)NULL;
    }

    goto cleanup;
}

PSTR
LsaNssGetGrSet(
        PSTR pszName
        )
{
    DWORD dwError = LW_ERROR_SUCCESS;
    DWORD dwGroupCount = 0;
    gid_t* pGids = NULL;
    char szGidNumBuf[16];
    size_t sRequiredLen = 0;
    DWORD dwIndex = 0;
    PSTR pszResult = NULL;
    // Do not free
    PSTR pszPos = NULL;

    if (hLsaConnection == (HANDLE)NULL)
    {
        dwError = LsaOpenServer(&hLsaConnection);
        BAIL_ON_LSA_ERROR(dwError);
    }

    dwError = LsaGetGidsForUserByName(
            hLsaConnection,
            pszName,
            &dwGroupCount,
            &pGids);
    BAIL_ON_LSA_ERROR(dwError);

    for (dwIndex = 0; dwIndex < dwGroupCount; dwIndex++)
    {
        // Add space for the gid number in decimal
        sprintf(szGidNumBuf, "%lu", (unsigned long)pGids[dwIndex]);
        sRequiredLen += strlen(szGidNumBuf);
    }
    // Add space for a comma between each gid and a terminating NULL
    sRequiredLen += dwGroupCount;

    dwError = LwAllocateMemory(
            sRequiredLen,
            (PVOID*)&pszResult);
    BAIL_ON_LSA_ERROR(dwError);

    pszPos = pszResult;
    for (dwIndex = 0; dwIndex < dwGroupCount; dwIndex++)
    {
        if (dwIndex > 0)
        {
            *pszPos++ = ',';
        }
        sprintf(pszPos, "%lu", (unsigned long)pGids[dwIndex]);
        pszPos += strlen(pszPos);
    }

cleanup:

    LW_SAFE_FREE_MEMORY(pGids);
    if (dwError != LW_ERROR_SUCCESS)
    {
        LsaNssMapErrorCode(dwError, &errno);
    }
    return pszResult;

error:

    LW_SAFE_FREE_MEMORY(pszResult);
    if (hLsaConnection != (HANDLE)NULL)
    {
        LsaCloseServer(hLsaConnection);
        hLsaConnection = (HANDLE)NULL;
    }

    goto cleanup;
}

DWORD
LsaNssListGroups(
        HANDLE hLsaConnection,
        attrval_t* pResult
        )
{
    DWORD dwError = LW_ERROR_SUCCESS;
    const DWORD dwInfoLevel = 0;
    const DWORD dwEnumLimit = 100000;
    DWORD dwIndex = 0;
    DWORD dwGroupsFound = 0;
    HANDLE hResume = (HANDLE)NULL;
    size_t sRequiredMem = 0;
    PLSA_GROUP_INFO_0* ppGroupList = NULL;
    PSTR pszListStart = NULL;
    // Do not free
    PSTR pszPos = NULL;

    dwError = LsaBeginEnumGroups(
                hLsaConnection,
                dwInfoLevel,
                dwEnumLimit,
                LSA_FIND_FLAGS_NSS,
                &hResume);
    BAIL_ON_LSA_ERROR(dwError);

    dwError = LsaEnumGroups(
                hLsaConnection,
                hResume,
                &dwGroupsFound,
                (PVOID**)&ppGroupList);
    BAIL_ON_LSA_ERROR(dwError);

    if (dwGroupsFound == dwEnumLimit)
    {
        pResult->attr_flag = ENOMEM;
        goto error;
    }

    sRequiredMem = 1;
    for (dwIndex = 0; dwIndex < dwGroupsFound; dwIndex++)
    {
        sRequiredMem += strlen(ppGroupList[dwIndex]->pszName) + 1;
    }
    if (dwIndex == 0)
    {
        sRequiredMem++;
    }

    dwError = LwAllocateMemory(
                sRequiredMem,
                (PVOID*)&pszListStart);
    BAIL_ON_LSA_ERROR(dwError);
    pszPos = pszListStart;

    for (dwIndex = 0; dwIndex < dwGroupsFound; dwIndex++)
    {
        strcpy(pszPos, ppGroupList[dwIndex]->pszName);
        pszPos += strlen(pszPos) + 1;
    }
    if (dwIndex == 0)
    {
        *pszPos++ = 0;
    }
    *pszPos++ = 0;

    assert(pszPos == pszListStart + sRequiredMem);

    pResult->attr_un.au_char = pszListStart;
    pResult->attr_flag = 0;

cleanup:

    if (hResume != (HANDLE)NULL)
    {
        LsaEndEnumGroups(
                hLsaConnection,
                hResume);
    }
    if (ppGroupList != NULL)
    {
        LsaFreeGroupInfoList(
                dwInfoLevel,
                (PVOID*)ppGroupList,
                dwGroupsFound);
    }

    return dwError;

error:

    pResult->attr_un.au_char = NULL;
    LW_SAFE_FREE_MEMORY(pszListStart);
    goto cleanup;
}

DWORD
LsaNssGetGidList(
        HANDLE hLsaConnection,
        PLSA_USER_INFO_2 pInfo,
        PSTR* ppszList
        )
{
    DWORD dwError = LW_ERROR_SUCCESS;
    DWORD dwGroupCount = 0;
    PLSA_GROUP_INFO_0* ppGroupList = NULL;
    const DWORD dwGroupInfoLevel = 0;
    char szGidNumBuf[16];
    size_t sRequiredLen = 0;
    DWORD dwIndex = 0;
    PSTR pszResult = NULL;
    // Do not free
    PSTR pszPos = NULL;

    dwError = LsaGetGroupsForUserById(
        hLsaConnection,
        pInfo->uid,
        LSA_FIND_FLAGS_NSS,
        dwGroupInfoLevel,
        &dwGroupCount,
        (PVOID**)&ppGroupList);
    BAIL_ON_LSA_ERROR(dwError);

    for (dwIndex = 0; dwIndex < dwGroupCount; dwIndex++)
    {
        // Add space for the gid number in decimal, plus NULL
        sprintf(szGidNumBuf, "%lu", (unsigned long)ppGroupList[dwIndex]->gid);
        sRequiredLen += strlen(szGidNumBuf) + 1;
    }
    // Add space for a list terminating NULL
    if (dwIndex == 0)
    {
        sRequiredLen++;
    }
    sRequiredLen++;

    dwError = LwAllocateMemory(
            sRequiredLen,
            (PVOID*)&pszResult);
    BAIL_ON_LSA_ERROR(dwError);

    pszPos = pszResult;
    for (dwIndex = 0; dwIndex < dwGroupCount; dwIndex++)
    {
        sprintf(pszPos, "%lu", (unsigned long)ppGroupList[dwIndex]->gid);
        pszPos += strlen(pszPos) + 1;
    }
    // Add list terminating NULL
    if (dwIndex == 0)
    {
        *pszPos++ = 0;
    }
    *pszPos++ = 0;

    assert(pszPos == pszResult + sRequiredLen);
    *ppszList = pszResult;

cleanup:

    if (ppGroupList != NULL)
    {
        LsaFreeGroupInfoList(
                dwGroupInfoLevel,
                (PVOID*)ppGroupList,
                dwGroupCount);
    }
    return dwError;

error:

    *ppszList = NULL;
    LW_SAFE_FREE_MEMORY(pszResult);
    goto cleanup;
}

DWORD
LsaNssGetGroupList(
        HANDLE hLsaConnection,
        PLSA_USER_INFO_2 pInfo,
        PSTR* ppszList
        )
{
    DWORD dwError = LW_ERROR_SUCCESS;
    DWORD dwGroupCount = 0;
    PLSA_GROUP_INFO_0* ppGroupList = NULL;
    const DWORD dwGroupInfoLevel = 0;
    size_t sRequiredLen = 0;
    DWORD dwIndex = 0;
    PSTR pszResult = NULL;
    // Do not free
    PSTR pszPos = NULL;

    dwError = LsaGetGroupsForUserById(
        hLsaConnection,
        pInfo->uid,
        LSA_FIND_FLAGS_NSS,
        dwGroupInfoLevel,
        &dwGroupCount,
        (PVOID**)&ppGroupList);
    BAIL_ON_LSA_ERROR(dwError);

    for (dwIndex = 0; dwIndex < dwGroupCount; dwIndex++)
    {
        // Add space for the gid number in decimal, plus NULL
        sRequiredLen += strlen(ppGroupList[dwIndex]->pszName) + 1;
    }
    // Add space for a list terminating NULL
    if (dwIndex == 0)
    {
        sRequiredLen++;
    }
    sRequiredLen++;

    dwError = LwAllocateMemory(
            sRequiredLen,
            (PVOID*)&pszResult);
    BAIL_ON_LSA_ERROR(dwError);

    pszPos = pszResult;
    for (dwIndex = 0; dwIndex < dwGroupCount; dwIndex++)
    {
        strcpy(pszPos, ppGroupList[dwIndex]->pszName);
        pszPos += strlen(pszPos) + 1;
    }
    // Add list terminating NULL
    if (dwIndex == 0)
    {
        *pszPos++ = 0;
    }
    *pszPos++ = 0;

    assert(pszPos == pszResult + sRequiredLen);
    *ppszList = pszResult;

cleanup:

    if (ppGroupList != NULL)
    {
        LsaFreeGroupInfoList(
                dwGroupInfoLevel,
                (PVOID*)ppGroupList,
                dwGroupCount);
    }
    return dwError;

error:

    *ppszList = NULL;
    LW_SAFE_FREE_MEMORY(pszResult);
    goto cleanup;
}

DWORD
LsaNssFillMemberList(
        PLSA_GROUP_INFO_1 pInfo,
        PSTR* ppResult
        )
{
    DWORD dwError = LW_ERROR_SUCCESS;
    size_t sIndex = 0;
    size_t sRequiredMem = 0;
    PSTR pszListStart = NULL;
    // Do not free
    PSTR pszPos = NULL;

    sRequiredMem = 1;
    for (sIndex = 0; pInfo->ppszMembers[sIndex]; sIndex++)
    {
        sRequiredMem += strlen(pInfo->ppszMembers[sIndex]) + 1;
    }
    if (sIndex == 0)
    {
        sRequiredMem++;
    }

    dwError = LwAllocateMemory(
                sRequiredMem,
                (PVOID*)&pszListStart);
    BAIL_ON_LSA_ERROR(dwError);
    pszPos = pszListStart;

    for (sIndex = 0; pInfo->ppszMembers[sIndex]; sIndex++)
    {
        strcpy(pszPos, pInfo->ppszMembers[sIndex]);
        pszPos += strlen(pszPos) + 1;
    }
    if (sIndex == 0)
    {
        *pszPos++ = 0;
    }
    *pszPos++ = 0;

    assert(pszPos == pszListStart + sRequiredMem);

    *ppResult = pszListStart;

cleanup:

    return dwError;

error:

    *ppResult = NULL;
    LW_SAFE_FREE_MEMORY(pszListStart);
    goto cleanup;
}

VOID
LsaNssGetGroupAttr(
        HANDLE hLsaConnection,
        PLSA_GROUP_INFO_1 pInfo,
        PSTR pszAttribute,
        attrval_t* pResult
        )
{
    DWORD dwError = LW_ERROR_SUCCESS;

    if (!strcmp(pszAttribute, S_ID))
    {
        pResult->attr_un.au_long = pInfo->gid;
    }
    else if (!strcmp(pszAttribute, S_PWD))
    {
        dwError = LwAllocateString(
                    pInfo->pszPasswd,
                    &pResult->attr_un.au_char);
        BAIL_ON_LSA_ERROR(dwError);
    }
    else if (!strcmp(pszAttribute, S_ADMIN))
    {
        pResult->attr_un.au_int = FALSE;
    }
    else if (!strcmp(pszAttribute, S_ADMS))
    {
        // Allocate an empty list, which is just two '\0's in a row
        dwError = LwAllocateMemory(
                    2,
                    (PVOID*)&pResult->attr_un.au_char);
        BAIL_ON_LSA_ERROR(dwError);
    }
    else if (!strcmp(pszAttribute, S_USERS))
    {
        dwError = LsaNssFillMemberList(
                    pInfo,
                    &pResult->attr_un.au_char);
        BAIL_ON_LSA_ERROR(dwError);
    }
    else if (!strcmp(pszAttribute, "SID"))
    {
        dwError = LwAllocateString(
                    pInfo->pszSid,
                    &pResult->attr_un.au_char);
        BAIL_ON_LSA_ERROR(dwError);
    }
    else
    {
        dwError = EINVAL;
        BAIL_ON_LSA_ERROR(dwError);
    }

cleanup:

    if (dwError != LW_ERROR_SUCCESS)
    {
        LsaNssMapErrorCode(dwError, &pResult->attr_flag);
    }
    else
    {
        pResult->attr_flag = 0;
    }
    return;

error:

    goto cleanup;
}

DWORD
LsaNssGetGroupAttrs(
        HANDLE hLsaConnection,
        PSTR pszKey,
        PSTR* ppszAttributes,
        attrval_t* pResults,
        int iAttrCount
        )
{
    DWORD dwError = LW_ERROR_SUCCESS;
    const DWORD dwInfoLevel = 1;
    PLSA_GROUP_INFO_1 pInfo = NULL;
    int iIndex = 0;

    dwError = LsaFindGroupByName(
                hLsaConnection,
                pszKey,
                LSA_FIND_FLAGS_NSS,
                dwInfoLevel,
                (PVOID*)&pInfo);
    BAIL_ON_LSA_ERROR(dwError);

    for (iIndex = 0; iIndex < iAttrCount; iIndex++)
    {
        // This function stores the error in pResults[iIndex].attr_flag
        LsaNssGetGroupAttr(
            hLsaConnection,
            pInfo,
            ppszAttributes[iIndex],
            &pResults[iIndex]);
    }

cleanup:

    if (pInfo != NULL)
    {
        LsaFreeGroupInfo(
                dwInfoLevel,
                (PVOID)pInfo);
    }
    return dwError;

error:

    goto cleanup;
}