Changeset 2475

Timestamp:

06/17/21 13:33:50 (3 years ago)

Author:

nanardon

Message:

start samba support: manage sambaSID

Location:

trunk/LATMOS-Accounts/lib/LATMOS/Accounts/Bases

Files:

• Ldap.pm (modified) (1 diff)
• Ldap/Group.pm (modified) (4 diffs)
• Ldap/User.pm (modified) (2 diffs)
• Sql.pm (modified) (2 diffs)
• Sql/Group.pm (modified) (1 diff)
• Sql/User.pm (modified) (3 diffs)

trunk/LATMOS-Accounts/lib/LATMOS/Accounts/Bases/Ldap.pm

@@ -102 +102 @@
     my ($self, $id) = @_;
 
-    my $ssid = $self->config('sambaSID') || 'S-2016-01-07';
+    my $ssid = $self->config('sambaSID') || 'S-1-5-21-2016-01-07';
     if (defined($id)) {
         $ssid .= '-' . $id;

trunk/LATMOS-Accounts/lib/LATMOS/Accounts/Bases/Ldap/Group.pm

@@ -40 +40 @@
 sub _key_attr { 'cn' } 
 
-sub _my_ldap_classes { qw(top posixGroup) }
+sub _my_ldap_classes { qw(top posixGroup sambaGroupMapping) }
 
 sub _get_attr_schema {
@@ -56 +56 @@
         dn => { ro => 1 },
         objectClass => { ro => 1 },
+        sambaSID => { },
     }
+    );
+}
+
+sub _update_class {
+    my ($self) = @_;
+
+    $self->SUPER::_update_class(
+        sambaSID => $self->base->sambaSID(
+            _computeSSID($self->_get_attributes('gidNumber'))
+        )
     );
 }
@@ -64 +75 @@
 
     my $entry = Net::LDAP::Entry->new();
+
+    $data{sambaSID} ||= $base->sambaSID(_computeSSID($data{gidNumber}));
 
     $entry->dn(join(',',
@@ -87 +100 @@
     my $res = $base->get_object('group', $id)->set_fields(%delayed);
     return defined($res) ? 1 : 0;
+}
+
+sub _computeSSID {
+    my ($value) = @_;
+    $value * 2 + 1000
 }
 

trunk/LATMOS-Accounts/lib/LATMOS/Accounts/Bases/Ldap/User.pm

@@ -136 +136 @@
         sambaLMPassword => { readable => 0, },
         sambaNTPassword => { readable => 0, },
-        sambaSID => { ro => 1 },
+        sambaSID => { },
     }
     );
@@ -168 +168 @@
     $data{sn} ||= $id; # sn is mandatory
     $data{uid} ||= $id; # uid is mandatory
-    $data{sambaSID} = $base->sambaSID(_computeSSID($data{uidNumber}));
+    $data{sambaSID} ||= $base->sambaSID(_computeSSID($data{uidNumber}));
     $data{homeDirectory} ||= '/dev/null'; # homeDirectory is mandatory
     $data{$class->_key_attribute($base)} = $id;

trunk/LATMOS-Accounts/lib/LATMOS/Accounts/Bases/Sql.pm

@@ -94 +94 @@
         $self->{_db}->do(q{set DATESTYLE to 'DMY'});
         $self->log(LA_DEBUG, 'New connection to DB');
+
+        $self->get_global_value('sambaSID') or do {
+            $self->_setSambaSID;
+            $self->commit;
+        };
 
         return $self->{_db};
@@ -776 +781 @@
 }
 
+=head2 sambaSID($id)
+
+Return the base samba SID set in the config or a default one if none is set.
+
+If C<$id> is given return the full SID suitable for an object.
+
+=cut
+
+sub sambaSID {
+    my ($self, $id) = @_;
+
+    my $ssid = $self->get_global_value('sambaSID');
+    if (defined($id)) {
+        $ssid .= '-' . $id;
+    }
+    return $ssid;
+}
+
+sub _setSambaSID {
+    my ( $self ) = @_;
+
+    my $sid = sprintf(
+        'S-1-5-21-%d-%d',
+        int(rand 1000000000),
+        int(rand 1000000000),
+    );
+
+    $self->set_global_value( 'sambaSID', $sid );
+    return $sid;
+}
+
+
+
 =head2 find_expired_users ($expire)
 

trunk/LATMOS-Accounts/lib/LATMOS/Accounts/Bases/Sql/Group.pm

@@ -194 +194 @@
                 label => l('Member count'),
             },
+
+            # Samba:
+
+            sambaSID => {
+                ro => 1,
+                auto => 1,
+            },
+            _sambaSID => {
+                ro => 1,
+                hide => 1,
+                managed => 1,
+                get => sub {
+                    my ($self) = @_;
+                    my $obj = $self->object;
+                    my $uid = $obj->get_field('gidnumber');
+                    return $obj->base->sambaSID( $uid * 2 + 1001 );
+                }
+            },
+
         }
     )

trunk/LATMOS-Accounts/lib/LATMOS/Accounts/Bases/Sql/User.pm

@@ -1012 +1012 @@
                 }
             },
+
+            # Shadow:
+
             shadowExpire => {
                 ro => 1,
@@ -1041 +1044 @@
                 }
             },
+            shadowWarning => { },
+            shadowMin => { },
+            shadowMax => { },
+            shadowLastChange => {
+                ro => 1,
+                auto => 1,
+            },
+            _shadowLastChange => {
+                ro => 1,
+                hide => 1,
+                managed => 1,
+                get => sub {
+                    my ($self) = @_;
+                    my $obj = $self->object;
+                    my $ts = $obj->get_field('passwordLastSet');
+                    $ts or return;
+
+                    my $Dt = DateTime::Format::Pg->parse_datetime( $ts );
+                    return int( $Dt->epoch / 86400);
+                }
+            },
+            shadowInactive => { },
+            shadowFlag => { },
+
+            # Samba:
+
+            sambaSID => {
+                ro => 1,
+                auto => 1,
+            },
+            _sambaSID => {
+                ro => 1,
+                hide => 1,
+                managed => 1,
+                get => sub {
+                    my ($self) = @_;
+                    my $obj = $self->object;
+                    my $uid = $obj->get_field('uidnumber');
+                    return $obj->base->sambaSID( $uid * 2 + 1000 );
+                }
+            },
+
             directReports => {
                 auto => 1,
@@ -1321 +1366 @@
                 label => l('Name'),
             },
-            shadowWarning => { },
-            shadowMin => { },
-            shadowMax => { },
-            shadowLastChange => {
-                ro => 1,
-                auto => 1,
-            },
-            _shadowLastChange => {
-                ro => 1,
-                hide => 1,
-                managed => 1,
-                get => sub {
-                    my ($self) = @_;
-                    my $obj = $self->object;
-                    my $ts = $obj->get_field('passwordLastSet');
-                    $ts or return;
-
-                    my $Dt = DateTime::Format::Pg->parse_datetime( $ts );
-                    return int( $Dt->epoch / 86400);
-                }
-            },
-            shadowInactive => { },
-            shadowFlag => { },
             otherTelephone => { },
             nickname => {