/*
* Determines whether the given SID is a member of the group
* specified by gname.
*/
boolean_t
smb_sam_grp_ismember(const char *gname, smb_sid_t *sid)
{
smb_group_t grp;
boolean_t ismember = B_FALSE;
if (smb_lgrp_getbyname((char *)gname, &grp) == SMB_LGRP_SUCCESS) {
ismember = smb_lgrp_is_member(&grp, sid);
smb_lgrp_free(&grp);
}
return (ismember);
}
/*
* Lookup local SMB group account database (/var/smb/smbgroup.db)
* The memory for the returned SID must be freed by the caller.
*/
static uint32_t
smb_sam_lookup_group(char *name, smb_sid_t **sid)
{
smb_group_t grp;
if (smb_lgrp_getbyname(name, &grp) != SMB_LGRP_SUCCESS)
return (NT_STATUS_NO_SUCH_ALIAS);
*sid = smb_sid_dup(grp.sg_id.gs_sid);
smb_lgrp_free(&grp);
return ((*sid == NULL) ? NT_STATUS_NO_MEMORY : NT_STATUS_SUCCESS);
}
/*
* smbadm_group_show
*
*/
static int
smbadm_group_show(int argc, char **argv)
{
char *gname = NULL;
boolean_t show_privs;
boolean_t show_members;
char option;
int status;
smb_group_t grp;
smb_giter_t gi;
show_privs = show_members = B_FALSE;
while ((option = getopt(argc, argv, "mp")) != -1) {
switch (option) {
case 'm':
show_members = B_TRUE;
break;
case 'p':
show_privs = B_TRUE;
break;
default:
smbadm_usage(B_FALSE);
}
}
gname = argv[optind];
if (optind >= argc || gname == NULL || *gname == '\0')
gname = "*";
if (strcmp(gname, "*")) {
status = smb_lgrp_getbyname(gname, &grp);
if (status == SMB_LGRP_SUCCESS) {
smbadm_group_dump(&grp, show_members, show_privs);
smb_lgrp_free(&grp);
} else {
(void) fprintf(stderr,
gettext("failed to find %s (%s)\n"),
gname, smb_lgrp_strerror(status));
}
return (status);
}
if ((status = smb_lgrp_iteropen(&gi)) != SMB_LGRP_SUCCESS) {
(void) fprintf(stderr, gettext("failed to list groups (%s)\n"),
smb_lgrp_strerror(status));
return (status);
}
while ((status = smb_lgrp_iterate(&gi, &grp)) == SMB_LGRP_SUCCESS) {
smbadm_group_dump(&grp, show_members, show_privs);
smb_lgrp_free(&grp);
}
smb_lgrp_iterclose(&gi);
if ((status != SMB_LGRP_NO_MORE) || smb_lgrp_itererror(&gi)) {
if (status != SMB_LGRP_NO_MORE)
syslog(LOG_ERR, "smb_lgrp_iterate: %s",
smb_lgrp_strerror(status));
(void) fprintf(stderr,
gettext("\nAn error occurred while retrieving group data.\n"
"Check the system log for more information.\n"));
return (status);
}
return (0);
}
