| [16] | 1 | #!/usr/bin/perl | 
|---|
|  | 2 | # | 
|---|
|  | 3 | # This is a sample implementation of a UID/GID GPFS remapping helper | 
|---|
|  | 4 | # application pair, provided for testing and illustrative purposes.  It uses | 
|---|
|  | 5 | # the Full Name (a.k.a. gecos) field in /etc/passwd as the globally unique user | 
|---|
|  | 6 | # name.  No name-based GID remapping is done in this implementation.  When | 
|---|
|  | 7 | # remapping for the purposes of credentials checking (intent is 'credentials'), | 
|---|
|  | 8 | # we do remapping for the UID based on the symbolic name, and replace the | 
|---|
|  | 9 | # entire list of GIDs with the GIDs of the user on the home cluster. | 
|---|
|  | 10 |  | 
|---|
|  | 11 | $debug = 0; | 
|---|
|  | 12 |  | 
|---|
|  | 13 | if ($#ARGV != 3) | 
|---|
|  | 14 | { | 
|---|
|  | 15 | die("Usage: mmname2uid domain intent nUids nGids\n"); | 
|---|
|  | 16 | } | 
|---|
|  | 17 |  | 
|---|
|  | 18 | $domain = $ARGV[0]; | 
|---|
|  | 19 | $intent = $ARGV[1]; | 
|---|
|  | 20 | $nUids = $ARGV[2]; | 
|---|
|  | 21 | $nGids = $ARGV[3]; | 
|---|
|  | 22 |  | 
|---|
|  | 23 | # Do basic argument sanity checking | 
|---|
|  | 24 | if ( ($intent ne "credentials") && ($intent ne "stat") && ($intent ne "acl") ) | 
|---|
|  | 25 | { | 
|---|
|  | 26 | die("Invalid intent value: $intent\n"); | 
|---|
|  | 27 | } | 
|---|
|  | 28 |  | 
|---|
|  | 29 | if ( ($intent eq "credentials") && ($nUids == 0) ) | 
|---|
|  | 30 | { | 
|---|
|  | 31 | die("The number of UIDs to be remapped cannot be zero\n"); | 
|---|
|  | 32 | } | 
|---|
|  | 33 |  | 
|---|
|  | 34 | if ( ($intent eq "credentials") && ($nUids != 1) ) | 
|---|
|  | 35 | { | 
|---|
|  | 36 | die("Only one UID is allowed for credentials remapping\n"); | 
|---|
|  | 37 | } | 
|---|
|  | 38 |  | 
|---|
|  | 39 | # In this sample implementation, we replace the entire list of GIDs | 
|---|
|  | 40 | # with a new list when remapping for credentials checking.  The matching | 
|---|
|  | 41 | # mmuid2name never outputs any GIDs, so we should not be expecting any | 
|---|
|  | 42 | # (a different implementation may handle this differently) | 
|---|
|  | 43 | if ($intent eq "credentials") | 
|---|
|  | 44 | { | 
|---|
|  | 45 | $nGids = 0; | 
|---|
|  | 46 | } | 
|---|
|  | 47 |  | 
|---|
|  | 48 | # Read the list of UIDs and GIDs.  Note that the interface conventions | 
|---|
|  | 49 | # stipulate that when the intent is 'stat', two lines of input will be | 
|---|
|  | 50 | # provided for each ID: symbolic name and original numeric ID. | 
|---|
|  | 51 | for ($i = 0; $i < $nUids; $i++) | 
|---|
|  | 52 | { | 
|---|
|  | 53 | $name = <STDIN>; | 
|---|
|  | 54 | print(STDERR $name) if $debug; | 
|---|
|  | 55 | chop($name); | 
|---|
|  | 56 | $gcoss{$name} = $i; | 
|---|
|  | 57 | $uids[$i] = "UNKNOWN USER"; | 
|---|
|  | 58 | if ($intent eq "stat") | 
|---|
|  | 59 | { | 
|---|
|  | 60 | $id = <STDIN>; | 
|---|
|  | 61 | print(STDERR $id) if $debug; | 
|---|
|  | 62 | chop($id); | 
|---|
|  | 63 | $orig_uids[$i] = $id; | 
|---|
|  | 64 | } | 
|---|
|  | 65 | } | 
|---|
|  | 66 | for ($i = 0; $i < $nGids; $i++) | 
|---|
|  | 67 | { | 
|---|
|  | 68 | $gname = <STDIN>; | 
|---|
|  | 69 | print(STDERR $gname) if $debug; | 
|---|
|  | 70 | chop($gname); | 
|---|
|  | 71 | $gnames{$gname} = $i; | 
|---|
|  | 72 | if ($intent eq "stat") | 
|---|
|  | 73 | { | 
|---|
|  | 74 | $id = <STDIN>; | 
|---|
|  | 75 | print(STDERR $id) if $debug; | 
|---|
|  | 76 | chop($id); | 
|---|
|  | 77 | $orig_gids[$i] = $id; | 
|---|
|  | 78 | } | 
|---|
|  | 79 | } | 
|---|
|  | 80 |  | 
|---|
|  | 81 | # Go though the list of users, as returned by getpwent (normally it's the | 
|---|
|  | 82 | # list from /etc/passwd or NIS), and find users who have their Full Name | 
|---|
|  | 83 | # matching to one of the input names. | 
|---|
|  | 84 | $nFound = 0; | 
|---|
|  | 85 | while(true) | 
|---|
|  | 86 | { | 
|---|
|  | 87 | @pwent = getpwent(); | 
|---|
|  | 88 | if ($#pwent == -1){ last; } | 
|---|
|  | 89 | $username = $pwent[0]; | 
|---|
|  | 90 | $uid = $pwent[2]; | 
|---|
|  | 91 | $gid = $pwent[3]; | 
|---|
|  | 92 | $gcos = $pwent[6]; | 
|---|
|  | 93 | if (exists $gcoss{$gcos}) | 
|---|
|  | 94 | { | 
|---|
|  | 95 | $uids[$gcoss{$gcos}] = $uid; | 
|---|
|  | 96 | if ($intent eq "credentials") | 
|---|
|  | 97 | { | 
|---|
|  | 98 | $gids[$gcoss{$gcos}] = $gid; | 
|---|
|  | 99 | $usernames[$gcoss{$gcos}] = $username; | 
|---|
|  | 100 | } | 
|---|
|  | 101 | $nFound++; | 
|---|
|  | 102 | last if $nFound >= $nUids; | 
|---|
|  | 103 | } | 
|---|
|  | 104 | } | 
|---|
|  | 105 | endpwent(); | 
|---|
|  | 106 |  | 
|---|
|  | 107 | # Get UID/GID of 'nobody'.  In this implementation, we return those when the | 
|---|
|  | 108 | # symbolic name is not found in our /etc/passwd. | 
|---|
|  | 109 | @a = getpwnam("nobody"); | 
|---|
|  | 110 | $nobody_uid = $a[2]; | 
|---|
|  | 111 | $nobody_gid = $a[3]; | 
|---|
|  | 112 |  | 
|---|
|  | 113 | # In this implementation, the convention is to use "UNKNOWN USER" string | 
|---|
|  | 114 | # to denote a name that has not been found. | 
|---|
|  | 115 | for ($i = 0; $i < $nUids; $i++) | 
|---|
|  | 116 | { | 
|---|
|  | 117 | # if the user is not found, print ids of nobody | 
|---|
|  | 118 | if ($uids[$i] eq "UNKNOWN USER") | 
|---|
|  | 119 | { | 
|---|
|  | 120 | printf("%u\n", $nobody_uid); | 
|---|
|  | 121 | printf("%u\n", $nobody_gid) if ($intent eq "credentials"); | 
|---|
|  | 122 | next; | 
|---|
|  | 123 | } | 
|---|
|  | 124 |  | 
|---|
|  | 125 | printf("%u\n", $uids[$i]); | 
|---|
|  | 126 | # if we are remapping for credentials checking, get a list of groups | 
|---|
|  | 127 | # that the user belongs to | 
|---|
|  | 128 | if ($intent eq "credentials") | 
|---|
|  | 129 | { | 
|---|
|  | 130 | # primary gid | 
|---|
|  | 131 | printf("%u\n", $gids[$i]); | 
|---|
|  | 132 | # supplementary groups | 
|---|
|  | 133 | while(true) | 
|---|
|  | 134 | { | 
|---|
|  | 135 | ($name, $passwd, $gid, $members) = getgrent(); | 
|---|
|  | 136 | last if $name eq ""; | 
|---|
|  | 137 | # skip group if it's user's primary group | 
|---|
|  | 138 | next if $gid == $gids[$i]; | 
|---|
|  | 139 | @memberlist = split(' ', $members); | 
|---|
|  | 140 | foreach(@memberlist) | 
|---|
|  | 141 | { | 
|---|
|  | 142 | if ($_ eq $usernames[$i]) | 
|---|
|  | 143 | { | 
|---|
|  | 144 | printf("%u\n", $gid); | 
|---|
|  | 145 | last; | 
|---|
|  | 146 | } | 
|---|
|  | 147 | } | 
|---|
|  | 148 | } | 
|---|
|  | 149 | } | 
|---|
|  | 150 | } | 
|---|
|  | 151 |  | 
|---|
|  | 152 | # In this example, we don't do remapping for gids for stat.  We choose not | 
|---|
|  | 153 | # to remap gids at all, i.e. return the same gid that was supplied to us.  An | 
|---|
|  | 154 | # alternative would be to return gid of 'nobody' for all gids, but that is | 
|---|
|  | 155 | # hardly useful. | 
|---|
|  | 156 | for ($i = 0; $i < $nGids; $i++) | 
|---|
|  | 157 | { | 
|---|
|  | 158 | printf("%u\n", $orig_gids[$i]); | 
|---|
|  | 159 | } | 
|---|