| [16] | 1 | #!/usr/bin/perl | 
|---|
 | 2 | # | 
|---|
 | 3 | # This is a sample implementation of a UID/GID GPFS remapping helper  | 
|---|
 | 4 | # application pair, provided for testing and illustrative purposes.  It uses  | 
|---|
 | 5 | # the Full Name (a.k.a. gecos) field in /etc/passwd as the globally unique user | 
|---|
 | 6 | # name.  No name-based GID remapping is done in this implementation.  When  | 
|---|
 | 7 | # remapping for the purposes of credentials checking (intent is 'credentials'), | 
|---|
 | 8 | # we do remapping for the UID based on the symbolic name, and replace the  | 
|---|
 | 9 | # entire list of GIDs with the GIDs of the user on the home cluster. | 
|---|
 | 10 |  | 
|---|
 | 11 | $debug = 0; | 
|---|
 | 12 |  | 
|---|
 | 13 | if ($#ARGV != 3) | 
|---|
 | 14 | { | 
|---|
 | 15 |   die("Usage: mmname2uid domain intent nUids nGids\n"); | 
|---|
 | 16 | } | 
|---|
 | 17 |  | 
|---|
 | 18 | $domain = $ARGV[0]; | 
|---|
 | 19 | $intent = $ARGV[1]; | 
|---|
 | 20 | $nUids = $ARGV[2]; | 
|---|
 | 21 | $nGids = $ARGV[3]; | 
|---|
 | 22 |  | 
|---|
 | 23 | # Do basic argument sanity checking | 
|---|
 | 24 | if ( ($intent ne "credentials") && ($intent ne "stat") && ($intent ne "acl") ) | 
|---|
 | 25 | { | 
|---|
 | 26 |   die("Invalid intent value: $intent\n"); | 
|---|
 | 27 | } | 
|---|
 | 28 |  | 
|---|
 | 29 | if ( ($intent eq "credentials") && ($nUids == 0) ) | 
|---|
 | 30 | { | 
|---|
 | 31 |   die("The number of UIDs to be remapped cannot be zero\n"); | 
|---|
 | 32 | } | 
|---|
 | 33 |  | 
|---|
 | 34 | if ( ($intent eq "credentials") && ($nUids != 1) ) | 
|---|
 | 35 | { | 
|---|
 | 36 |   die("Only one UID is allowed for credentials remapping\n"); | 
|---|
 | 37 | } | 
|---|
 | 38 |   | 
|---|
 | 39 | # In this sample implementation, we replace the entire list of GIDs | 
|---|
 | 40 | # with a new list when remapping for credentials checking.  The matching  | 
|---|
 | 41 | # mmuid2name never outputs any GIDs, so we should not be expecting any  | 
|---|
 | 42 | # (a different implementation may handle this differently) | 
|---|
 | 43 | if ($intent eq "credentials") | 
|---|
 | 44 | { | 
|---|
 | 45 |   $nGids = 0; | 
|---|
 | 46 | } | 
|---|
 | 47 |  | 
|---|
 | 48 | # Read the list of UIDs and GIDs.  Note that the interface conventions  | 
|---|
 | 49 | # stipulate that when the intent is 'stat', two lines of input will be | 
|---|
 | 50 | # provided for each ID: symbolic name and original numeric ID. | 
|---|
 | 51 | for ($i = 0; $i < $nUids; $i++) | 
|---|
 | 52 | { | 
|---|
 | 53 |   $name = <STDIN>; | 
|---|
 | 54 |   print(STDERR $name) if $debug; | 
|---|
 | 55 |   chop($name); | 
|---|
 | 56 |   $gcoss{$name} = $i; | 
|---|
 | 57 |   $uids[$i] = "UNKNOWN USER"; | 
|---|
 | 58 |   if ($intent eq "stat") | 
|---|
 | 59 |   { | 
|---|
 | 60 |     $id = <STDIN>; | 
|---|
 | 61 |     print(STDERR $id) if $debug; | 
|---|
 | 62 |     chop($id); | 
|---|
 | 63 |     $orig_uids[$i] = $id; | 
|---|
 | 64 |   } | 
|---|
 | 65 | } | 
|---|
 | 66 | for ($i = 0; $i < $nGids; $i++) | 
|---|
 | 67 | { | 
|---|
 | 68 |   $gname = <STDIN>; | 
|---|
 | 69 |   print(STDERR $gname) if $debug; | 
|---|
 | 70 |   chop($gname); | 
|---|
 | 71 |   $gnames{$gname} = $i; | 
|---|
 | 72 |   if ($intent eq "stat") | 
|---|
 | 73 |   { | 
|---|
 | 74 |     $id = <STDIN>; | 
|---|
 | 75 |     print(STDERR $id) if $debug; | 
|---|
 | 76 |     chop($id); | 
|---|
 | 77 |     $orig_gids[$i] = $id; | 
|---|
 | 78 |   } | 
|---|
 | 79 | } | 
|---|
 | 80 |  | 
|---|
 | 81 | # Go though the list of users, as returned by getpwent (normally it's the | 
|---|
 | 82 | # list from /etc/passwd or NIS), and find users who have their Full Name | 
|---|
 | 83 | # matching to one of the input names. | 
|---|
 | 84 | $nFound = 0; | 
|---|
 | 85 | while(true) | 
|---|
 | 86 | { | 
|---|
 | 87 |   @pwent = getpwent(); | 
|---|
 | 88 |   if ($#pwent == -1){ last; } | 
|---|
 | 89 |   $username = $pwent[0]; | 
|---|
 | 90 |   $uid = $pwent[2]; | 
|---|
 | 91 |   $gid = $pwent[3]; | 
|---|
 | 92 |   $gcos = $pwent[6]; | 
|---|
 | 93 |   if (exists $gcoss{$gcos}) | 
|---|
 | 94 |   { | 
|---|
 | 95 |     $uids[$gcoss{$gcos}] = $uid; | 
|---|
 | 96 |     if ($intent eq "credentials") | 
|---|
 | 97 |     { | 
|---|
 | 98 |       $gids[$gcoss{$gcos}] = $gid; | 
|---|
 | 99 |       $usernames[$gcoss{$gcos}] = $username; | 
|---|
 | 100 |     } | 
|---|
 | 101 |     $nFound++; | 
|---|
 | 102 |     last if $nFound >= $nUids; | 
|---|
 | 103 |   } | 
|---|
 | 104 | } | 
|---|
 | 105 | endpwent(); | 
|---|
 | 106 |  | 
|---|
 | 107 | # Get UID/GID of 'nobody'.  In this implementation, we return those when the | 
|---|
 | 108 | # symbolic name is not found in our /etc/passwd. | 
|---|
 | 109 | @a = getpwnam("nobody"); | 
|---|
 | 110 | $nobody_uid = $a[2]; | 
|---|
 | 111 | $nobody_gid = $a[3]; | 
|---|
 | 112 |  | 
|---|
 | 113 | # In this implementation, the convention is to use "UNKNOWN USER" string | 
|---|
 | 114 | # to denote a name that has not been found. | 
|---|
 | 115 | for ($i = 0; $i < $nUids; $i++) | 
|---|
 | 116 | { | 
|---|
 | 117 |   # if the user is not found, print ids of nobody | 
|---|
 | 118 |   if ($uids[$i] eq "UNKNOWN USER") | 
|---|
 | 119 |   { | 
|---|
 | 120 |     printf("%u\n", $nobody_uid); | 
|---|
 | 121 |     printf("%u\n", $nobody_gid) if ($intent eq "credentials"); | 
|---|
 | 122 |     next; | 
|---|
 | 123 |   } | 
|---|
 | 124 |   | 
|---|
 | 125 |   printf("%u\n", $uids[$i]); | 
|---|
 | 126 |   # if we are remapping for credentials checking, get a list of groups | 
|---|
 | 127 |   # that the user belongs to | 
|---|
 | 128 |   if ($intent eq "credentials") | 
|---|
 | 129 |   { | 
|---|
 | 130 |     # primary gid | 
|---|
 | 131 |     printf("%u\n", $gids[$i]); | 
|---|
 | 132 |     # supplementary groups | 
|---|
 | 133 |     while(true) | 
|---|
 | 134 |     { | 
|---|
 | 135 |       ($name, $passwd, $gid, $members) = getgrent(); | 
|---|
 | 136 |       last if $name eq ""; | 
|---|
 | 137 |       # skip group if it's user's primary group | 
|---|
 | 138 |       next if $gid == $gids[$i]; | 
|---|
 | 139 |       @memberlist = split(' ', $members); | 
|---|
 | 140 |       foreach(@memberlist) | 
|---|
 | 141 |       { | 
|---|
 | 142 |         if ($_ eq $usernames[$i]) | 
|---|
 | 143 |         { | 
|---|
 | 144 |           printf("%u\n", $gid); | 
|---|
 | 145 |           last; | 
|---|
 | 146 |         } | 
|---|
 | 147 |       } | 
|---|
 | 148 |     } | 
|---|
 | 149 |   } | 
|---|
 | 150 | } | 
|---|
 | 151 |  | 
|---|
 | 152 | # In this example, we don't do remapping for gids for stat.  We choose not  | 
|---|
 | 153 | # to remap gids at all, i.e. return the same gid that was supplied to us.  An  | 
|---|
 | 154 | # alternative would be to return gid of 'nobody' for all gids, but that is | 
|---|
 | 155 | # hardly useful. | 
|---|
 | 156 | for ($i = 0; $i < $nGids; $i++) | 
|---|
 | 157 | { | 
|---|
 | 158 |   printf("%u\n", $orig_gids[$i]); | 
|---|
 | 159 | } | 
|---|