1/*	$NetBSD: getgrent.c,v 1.63 2011/06/09 05:11:17 sjg Exp $	*/
2
3/*-
4 * Copyright (c) 1999-2000, 2004-2005 The NetBSD Foundation, Inc.
5 * All rights reserved.
6 *
7 * This code is derived from software contributed to The NetBSD Foundation
8 * by Luke Mewburn.
9 *
10 * Redistribution and use in source and binary forms, with or without
11 * modification, are permitted provided that the following conditions
12 * are met:
13 * 1. Redistributions of source code must retain the above copyright
14 *    notice, this list of conditions and the following disclaimer.
15 * 2. Redistributions in binary form must reproduce the above copyright
16 *    notice, this list of conditions and the following disclaimer in the
17 *    documentation and/or other materials provided with the distribution.
18 *
19 * THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS
20 * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
21 * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
22 * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS
23 * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
24 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
25 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
26 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
27 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
28 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
29 * POSSIBILITY OF SUCH DAMAGE.
30 */
31
32/*
33 * Copyright (c) 1989, 1993
34 *	The Regents of the University of California.  All rights reserved.
35 *
36 * Redistribution and use in source and binary forms, with or without
37 * modification, are permitted provided that the following conditions
38 * are met:
39 * 1. Redistributions of source code must retain the above copyright
40 *    notice, this list of conditions and the following disclaimer.
41 * 2. Redistributions in binary form must reproduce the above copyright
42 *    notice, this list of conditions and the following disclaimer in the
43 *    documentation and/or other materials provided with the distribution.
44 * 3. Neither the name of the University nor the names of its contributors
45 *    may be used to endorse or promote products derived from this software
46 *    without specific prior written permission.
47 *
48 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
49 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
50 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
51 * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
52 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
53 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
54 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
55 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
56 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
57 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
58 * SUCH DAMAGE.
59 */
60
61/*
62 * Portions Copyright (c) 1994, Jason Downs. All Rights Reserved.
63 *
64 * Redistribution and use in source and binary forms, with or without
65 * modification, are permitted provided that the following conditions
66 * are met:
67 * 1. Redistributions of source code must retain the above copyright
68 *    notice, this list of conditions and the following disclaimer.
69 * 2. Redistributions in binary form must reproduce the above copyright
70 *    notice, this list of conditions and the following disclaimer in the
71 *    documentation and/or other materials provided with the distribution.
72 *
73 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR(S) ``AS IS'' AND ANY EXPRESS
74 * OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
75 * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
76 * DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR(S) BE LIABLE FOR ANY DIRECT,
77 * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
78 * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
79 * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
80 * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
81 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
82 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
83 * SUCH DAMAGE.
84 */
85
86#include <sys/cdefs.h>
87#if defined(LIBC_SCCS) && !defined(lint)
88#if 0
89static char sccsid[] = "@(#)getgrent.c	8.2 (Berkeley) 3/21/94";
90#else
91__RCSID("$NetBSD: getgrent.c,v 1.63 2011/06/09 05:11:17 sjg Exp $");
92#endif
93#endif /* LIBC_SCCS and not lint */
94
95#include "namespace.h"
96#include "reentrant.h"
97
98#include <sys/param.h>
99
100#include <assert.h>
101#include <errno.h>
102#include <grp.h>
103#include <limits.h>
104#include <nsswitch.h>
105#include <stdarg.h>
106#include <stdio.h>
107#include <stdlib.h>
108#include <string.h>
109#include <syslog.h>
110
111#ifdef HESIOD
112#include <hesiod.h>
113#endif
114
115#ifdef YP
116#include <rpc/rpc.h>
117#include <rpcsvc/yp_prot.h>
118#include <rpcsvc/ypclnt.h>
119#endif
120
121#include "gr_private.h"
122
123#ifdef __weak_alias
124__weak_alias(endgrent,_endgrent)
125__weak_alias(getgrent,_getgrent)
126__weak_alias(getgrent_r,_getgrent_r)
127__weak_alias(getgrgid,_getgrgid)
128__weak_alias(getgrgid_r,_getgrgid_r)
129__weak_alias(getgrnam,_getgrnam)
130__weak_alias(getgrnam_r,_getgrnam_r)
131__weak_alias(setgrent,_setgrent)
132__weak_alias(setgroupent,_setgroupent)
133#endif
134
135#ifdef _REENTRANT
136mutex_t	__grmutex = MUTEX_INITIALIZER;
137#endif
138
139/*
140 * _gr_memfrombuf
141 *	Obtain want bytes from buffer (of size buflen) and return a pointer
142 *	to the available memory after adjusting buffer/buflen.
143 *	Returns NULL if there is insufficient space.
144 */
145static char *
146_gr_memfrombuf(size_t want, char **buffer, size_t *buflen)
147{
148	char	*rv;
149
150	if (want > *buflen) {
151		errno = ERANGE;
152		return NULL;
153	}
154	rv = *buffer;
155	*buffer += want;
156	*buflen -= want;
157	return rv;
158}
159
160/*
161 * _gr_parse
162 *	Parses entry as a line per group(5) (without the trailing \n)
163 *	and fills in grp with corresponding values; memory for strings
164 *	and arrays will be allocated from buf (of size buflen).
165 *	Returns 1 if parsed successfully, 0 on parse failure.
166 */
167static int
168_gr_parse(const char *entry, struct group *grp, char *buf, size_t buflen)
169{
170	unsigned long	id;
171	const char	*bp;
172	char		*ep;
173	size_t		count;
174	int		memc;
175
176	_DIAGASSERT(entry != NULL);
177	_DIAGASSERT(grp != NULL);
178	_DIAGASSERT(buf != NULL);
179
180#define COPYTOBUF(to) \
181	do { \
182		(to) = _gr_memfrombuf(count+1, &buf, &buflen); \
183		if ((to) == NULL) \
184			return 0; \
185		memmove((to), entry, count); \
186		to[count] = '\0'; \
187	} while (0)	/* LINTED */
188
189#if 0
190	if (*entry == '+')			/* fail on compat `+' token */
191		return 0;
192#endif
193
194	count = strcspn(entry, ":");		/* parse gr_name */
195	if (entry[count] == '\0')
196		return 0;
197	COPYTOBUF(grp->gr_name);
198	entry += count + 1;
199
200	count = strcspn(entry, ":");		/* parse gr_passwd */
201	if (entry[count] == '\0')
202		return 0;
203	COPYTOBUF(grp->gr_passwd);
204	entry += count + 1;
205
206	count = strcspn(entry, ":");		/* parse gr_gid */
207	if (entry[count] == '\0')
208		return 0;
209	id = strtoul(entry, &ep, 10);
210	if (id > GID_MAX || *ep != ':')
211		return 0;
212	grp->gr_gid = (gid_t)id;
213	entry += count + 1;
214
215	memc = 1;				/* for final NULL */
216	if (*entry != '\0')
217		memc++;				/* for first item */
218	for (bp = entry; *bp != '\0'; bp++) {
219		if (*bp == ',')
220			memc++;
221	}
222				/* grab ALIGNed char **gr_mem from buf */
223	ep = _gr_memfrombuf(memc * sizeof(char *) + ALIGNBYTES, &buf, &buflen);
224	grp->gr_mem = (char **)ALIGN(ep);
225	if (grp->gr_mem == NULL)
226		return 0;
227
228	for (memc = 0; *entry != '\0'; memc++) {
229		count = strcspn(entry, ",");	/* parse member */
230		COPYTOBUF(grp->gr_mem[memc]);
231		entry += count;
232		if (*entry == ',')
233			entry++;
234	}
235
236#undef COPYTOBUF
237
238	grp->gr_mem[memc] = NULL;
239	return 1;
240}
241
242/*
243 * _gr_copy
244 *	Copy the contents of fromgrp to grp; memory for strings
245 *	and arrays will be allocated from buf (of size buflen).
246 *	Returns 1 if copied successfully, 0 on copy failure.
247 *	NOTE: fromgrp must not use buf for its own pointers.
248 */
249static int
250_gr_copy(struct group *fromgrp, struct group *grp, char *buf, size_t buflen)
251{
252	char	*ep;
253	int	memc;
254
255	_DIAGASSERT(fromgrp != NULL);
256	_DIAGASSERT(grp != NULL);
257	_DIAGASSERT(buf != NULL);
258
259#define COPYSTR(to, from) \
260	do { \
261		size_t count = strlen((from)); \
262		(to) = _gr_memfrombuf(count+1, &buf, &buflen); \
263		if ((to) == NULL) \
264			return 0; \
265		memmove((to), (from), count); \
266		to[count] = '\0'; \
267	} while (0)	/* LINTED */
268
269	COPYSTR(grp->gr_name, fromgrp->gr_name);
270	COPYSTR(grp->gr_passwd, fromgrp->gr_passwd);
271	grp->gr_gid = fromgrp->gr_gid;
272
273	if (fromgrp->gr_mem == NULL)
274		return 0;
275
276	for (memc = 0; fromgrp->gr_mem[memc]; memc++)
277		continue;
278	memc++;					/* for final NULL */
279
280				/* grab ALIGNed char **gr_mem from buf */
281	ep = _gr_memfrombuf(memc * sizeof(char *) + ALIGNBYTES, &buf, &buflen);
282	grp->gr_mem = (char **)ALIGN(ep);
283	if (grp->gr_mem == NULL)
284		return 0;
285
286	for (memc = 0; fromgrp->gr_mem[memc]; memc++) {
287		COPYSTR(grp->gr_mem[memc], fromgrp->gr_mem[memc]);
288	}
289
290#undef COPYSTR
291
292	grp->gr_mem[memc] = NULL;
293	return 1;
294}
295
296		/*
297		 *	files methods
298		 */
299
300int
301__grstart_files(struct __grstate_files *state)
302{
303
304	_DIAGASSERT(state != NULL);
305
306	if (state->fp == NULL) {
307		state->fp = fopen(_PATH_GROUP, "re");
308		if (state->fp == NULL)
309			return NS_UNAVAIL;
310	} else {
311		rewind(state->fp);
312	}
313	return NS_SUCCESS;
314}
315
316int
317__grend_files(struct __grstate_files *state)
318{
319
320	_DIAGASSERT(state != NULL);
321
322	if (state->fp) {
323		(void) fclose(state->fp);
324		state->fp = NULL;
325	}
326	return NS_SUCCESS;
327}
328
329/*
330 * __grscan_files
331 *	Scan state->fp for the next desired entry.
332 *	If search is zero, return the next entry.
333 *	If search is non-zero, look for a specific name (if name != NULL),
334 *	or a specific gid (if name == NULL).
335 *	Sets *retval to the errno if the result is not NS_SUCCESS
336 *	or NS_NOTFOUND.
337 */
338int
339__grscan_files(int *retval, struct group *grp, char *buffer, size_t buflen,
340	struct __grstate_files *state, int search, const char *name, gid_t gid)
341{
342	int	rv;
343	char	filebuf[_GETGR_R_SIZE_MAX], *ep;
344
345	_DIAGASSERT(retval != NULL);
346	_DIAGASSERT(grp != NULL);
347	_DIAGASSERT(buffer != NULL);
348	_DIAGASSERT(state != NULL);
349	/* name is NULL to indicate searching for gid */
350
351	*retval = 0;
352
353	if (state->fp == NULL) {	/* only start if file not open yet */
354		rv = __grstart_files(state);
355		if (rv != NS_SUCCESS)
356			goto filesgrscan_out;
357	}
358
359	rv = NS_NOTFOUND;
360
361							/* scan line by line */
362	while (fgets(filebuf, sizeof(filebuf), state->fp) != NULL) {
363		ep = strchr(filebuf, '\n');
364		if (ep == NULL) {	/* skip lines that are too big */
365			int ch;
366
367			while ((ch = getc(state->fp)) != '\n' && ch != EOF)
368				continue;
369			continue;
370		}
371		*ep = '\0';				/* clear trailing \n */
372
373		if (filebuf[0] == '+')			/* skip compat line */
374			continue;
375
376							/* validate line */
377		if (! _gr_parse(filebuf, grp, buffer, buflen)) {
378			continue;			/* skip bad lines */
379		}
380		if (! search) {				/* just want this one */
381			rv = NS_SUCCESS;
382			break;
383		}
384							/* want specific */
385		if ((name && strcmp(name, grp->gr_name) == 0) ||
386		    (!name && gid == grp->gr_gid)) {
387			rv = NS_SUCCESS;
388			break;
389		}
390	}
391
392 filesgrscan_out:
393	if (rv != NS_SUCCESS && rv != NS_NOTFOUND)
394		*retval = errno;
395	return rv;
396}
397
398
399static struct __grstate_files	_files_state;
400					/* storage for non _r functions */
401static struct group		_files_group;
402static char			_files_groupbuf[_GETGR_R_SIZE_MAX];
403
404/*ARGSUSED*/
405static int
406_files_setgrent(void *nsrv, void *nscb, va_list ap)
407{
408
409	_files_state.stayopen = 0;
410	return __grstart_files(&_files_state);
411}
412
413/*ARGSUSED*/
414static int
415_files_setgroupent(void *nsrv, void *nscb, va_list ap)
416{
417	int	*retval		= va_arg(ap, int *);
418	int	 stayopen	= va_arg(ap, int);
419
420	int	rv;
421
422	_files_state.stayopen = stayopen;
423	rv = __grstart_files(&_files_state);
424	*retval = (rv == NS_SUCCESS);
425	return rv;
426}
427
428/*ARGSUSED*/
429static int
430_files_endgrent(void *nsrv, void *nscb, va_list ap)
431{
432
433	_files_state.stayopen = 0;
434	return __grend_files(&_files_state);
435}
436
437/*ARGSUSED*/
438static int
439_files_getgrent(void *nsrv, void *nscb, va_list ap)
440{
441	struct group	**retval = va_arg(ap, struct group **);
442
443	int	rv, rerror;
444
445	_DIAGASSERT(retval != NULL);
446
447	*retval = NULL;
448	rv = __grscan_files(&rerror, &_files_group,
449	    _files_groupbuf, sizeof(_files_groupbuf),
450	    &_files_state, 0, NULL, 0);
451	if (rv == NS_SUCCESS)
452		*retval = &_files_group;
453	return rv;
454}
455
456/*ARGSUSED*/
457static int
458_files_getgrent_r(void *nsrv, void *nscb, va_list ap)
459{
460	int		*retval	= va_arg(ap, int *);
461	struct group	*grp	= va_arg(ap, struct group *);
462	char		*buffer	= va_arg(ap, char *);
463	size_t		 buflen	= va_arg(ap, size_t);
464	struct group   **result	= va_arg(ap, struct group **);
465
466	int	rv;
467
468	_DIAGASSERT(retval != NULL);
469	_DIAGASSERT(grp != NULL);
470	_DIAGASSERT(buffer != NULL);
471	_DIAGASSERT(result != NULL);
472
473	rv = __grscan_files(retval, grp, buffer, buflen,
474	    &_files_state, 0, NULL, 0);
475	if (rv == NS_SUCCESS)
476		*result = grp;
477	else
478		*result = NULL;
479	return rv;
480}
481
482/*ARGSUSED*/
483static int
484_files_getgrgid(void *nsrv, void *nscb, va_list ap)
485{
486	struct group	**retval = va_arg(ap, struct group **);
487	gid_t		 gid	= va_arg(ap, gid_t);
488
489	int	rv, rerror;
490
491	_DIAGASSERT(retval != NULL);
492
493	*retval = NULL;
494	rv = __grstart_files(&_files_state);
495	if (rv != NS_SUCCESS)
496		return rv;
497	rv = __grscan_files(&rerror, &_files_group,
498	    _files_groupbuf, sizeof(_files_groupbuf),
499	    &_files_state, 1, NULL, gid);
500	if (!_files_state.stayopen)
501		__grend_files(&_files_state);
502	if (rv == NS_SUCCESS)
503		*retval = &_files_group;
504	return rv;
505}
506
507/*ARGSUSED*/
508static int
509_files_getgrgid_r(void *nsrv, void *nscb, va_list ap)
510{
511	int		*retval	= va_arg(ap, int *);
512	gid_t		 gid	= va_arg(ap, gid_t);
513	struct group	*grp	= va_arg(ap, struct group *);
514	char		*buffer	= va_arg(ap, char *);
515	size_t		 buflen	= va_arg(ap, size_t);
516	struct group   **result	= va_arg(ap, struct group **);
517
518	struct __grstate_files state;
519	int	rv;
520
521	_DIAGASSERT(retval != NULL);
522	_DIAGASSERT(grp != NULL);
523	_DIAGASSERT(buffer != NULL);
524	_DIAGASSERT(result != NULL);
525
526	*result = NULL;
527	memset(&state, 0, sizeof(state));
528	rv = __grscan_files(retval, grp, buffer, buflen, &state, 1, NULL, gid);
529	__grend_files(&state);
530	if (rv == NS_SUCCESS)
531		*result = grp;
532	return rv;
533}
534
535/*ARGSUSED*/
536static int
537_files_getgrnam(void *nsrv, void *nscb, va_list ap)
538{
539	struct group	**retval = va_arg(ap, struct group **);
540	const char	*name	= va_arg(ap, const char *);
541
542	int	rv, rerror;
543
544	_DIAGASSERT(retval != NULL);
545
546	*retval = NULL;
547	rv = __grstart_files(&_files_state);
548	if (rv != NS_SUCCESS)
549		return rv;
550	rv = __grscan_files(&rerror, &_files_group,
551	    _files_groupbuf, sizeof(_files_groupbuf),
552	    &_files_state, 1, name, 0);
553	if (!_files_state.stayopen)
554		__grend_files(&_files_state);
555	if (rv == NS_SUCCESS)
556		*retval = &_files_group;
557	return rv;
558}
559
560/*ARGSUSED*/
561static int
562_files_getgrnam_r(void *nsrv, void *nscb, va_list ap)
563{
564	int		*retval	= va_arg(ap, int *);
565	const char	*name	= va_arg(ap, const char *);
566	struct group	*grp	= va_arg(ap, struct group *);
567	char		*buffer	= va_arg(ap, char *);
568	size_t		 buflen	= va_arg(ap, size_t);
569	struct group   **result	= va_arg(ap, struct group **);
570
571	struct __grstate_files state;
572	int	rv;
573
574	_DIAGASSERT(retval != NULL);
575	_DIAGASSERT(grp != NULL);
576	_DIAGASSERT(buffer != NULL);
577	_DIAGASSERT(result != NULL);
578
579	*result = NULL;
580	memset(&state, 0, sizeof(state));
581	rv = __grscan_files(retval, grp, buffer, buflen, &state, 1, name, 0);
582	__grend_files(&state);
583	if (rv == NS_SUCCESS)
584		*result = grp;
585	return rv;
586}
587
588
589#ifdef HESIOD
590		/*
591		 *	dns methods
592		 */
593
594int
595__grstart_dns(struct __grstate_dns *state)
596{
597
598	_DIAGASSERT(state != NULL);
599
600	state->num = 0;
601	if (state->context == NULL) {			/* setup Hesiod */
602		if (hesiod_init(&state->context) == -1)
603			return NS_UNAVAIL;
604	}
605
606	return NS_SUCCESS;
607}
608
609int
610__grend_dns(struct __grstate_dns *state)
611{
612
613	_DIAGASSERT(state != NULL);
614
615	state->num = 0;
616	if (state->context) {
617		hesiod_end(state->context);
618		state->context = NULL;
619	}
620	return NS_SUCCESS;
621}
622
623/*
624 * __grscan_dns
625 *	Search Hesiod for the next desired entry.
626 *	If search is zero, return the next entry.
627 *	If search is non-zero, look for a specific name (if name != NULL),
628 *	or a specific gid (if name == NULL).
629 */
630int
631__grscan_dns(int *retval, struct group *grp, char *buffer, size_t buflen,
632	struct __grstate_dns *state, int search, const char *name, gid_t gid)
633{
634	const char	**curzone;
635	char		**hp, *ep;
636	int		rv;
637
638	static const char *zones_gid_group[] = {
639		"gid",
640		"group",
641		NULL
642	};
643
644	static const char *zones_group[] = {
645		"group",
646		NULL
647	};
648
649	_DIAGASSERT(retval != NULL);
650	_DIAGASSERT(grp != NULL);
651	_DIAGASSERT(buffer != NULL);
652	_DIAGASSERT(state != NULL);
653	/* name is NULL to indicate searching for gid */
654
655	*retval = 0;
656
657	if (state->context == NULL) {	/* only start if Hesiod not setup */
658		rv = __grstart_dns(state);
659		if (rv != NS_SUCCESS)
660			return rv;
661	}
662
663 next_dns_entry:
664	hp = NULL;
665	rv = NS_NOTFOUND;
666
667	if (! search) {			/* find next entry */
668		if (state->num == -1)		/* exhausted search */
669			return NS_NOTFOUND;
670						/* find group-NNN */
671		snprintf(buffer, buflen, "group-%u", state->num);
672		state->num++;
673		curzone = zones_group;
674	} else if (name) {		/* find group name */
675		snprintf(buffer, buflen, "%s", name);
676		curzone = zones_group;
677	} else {			/* find gid */
678		snprintf(buffer, buflen, "%u", (unsigned int)gid);
679		curzone = zones_gid_group;
680	}
681
682	for (; *curzone; curzone++) {		/* search zones */
683		hp = hesiod_resolve(state->context, buffer, *curzone);
684		if (hp != NULL)
685			break;
686		if (errno != ENOENT) {
687			rv = NS_UNAVAIL;
688			goto dnsgrscan_out;
689		}
690	}
691	if (*curzone == NULL) {
692		if (! search)
693			state->num = -1;
694		goto dnsgrscan_out;
695	}
696
697	if ((ep = strchr(hp[0], '\n')) != NULL)
698		*ep = '\0';				/* clear trailing \n */
699	if (_gr_parse(hp[0], grp, buffer, buflen)) {	/* validate line */
700		if (! search) {				/* just want this one */
701			rv = NS_SUCCESS;
702		} else if ((name && strcmp(name, grp->gr_name) == 0) ||
703		    (!name && gid == grp->gr_gid)) {	/* want specific */
704			rv = NS_SUCCESS;
705		}
706	} else {					/* dodgy entry */
707		if (!search) {			/* try again if ! searching */
708			hesiod_free_list(state->context, hp);
709			goto next_dns_entry;
710		}
711	}
712
713 dnsgrscan_out:
714	if (rv != NS_SUCCESS && rv != NS_NOTFOUND)
715		*retval = errno;
716	if (hp)
717		hesiod_free_list(state->context, hp);
718	return rv;
719}
720
721static struct __grstate_dns	_dns_state;
722					/* storage for non _r functions */
723static struct group		_dns_group;
724static char			_dns_groupbuf[_GETGR_R_SIZE_MAX];
725
726/*ARGSUSED*/
727static int
728_dns_setgrent(void *nsrv, void *nscb, va_list ap)
729{
730
731	_dns_state.stayopen = 0;
732	return __grstart_dns(&_dns_state);
733}
734
735/*ARGSUSED*/
736static int
737_dns_setgroupent(void *nsrv, void *nscb, va_list ap)
738{
739	int	*retval		= va_arg(ap, int *);
740	int	 stayopen	= va_arg(ap, int);
741
742	int	rv;
743
744	_dns_state.stayopen = stayopen;
745	rv = __grstart_dns(&_dns_state);
746	*retval = (rv == NS_SUCCESS);
747	return rv;
748}
749
750/*ARGSUSED*/
751static int
752_dns_endgrent(void *nsrv, void *nscb, va_list ap)
753{
754
755	_dns_state.stayopen = 0;
756	return __grend_dns(&_dns_state);
757}
758
759/*ARGSUSED*/
760static int
761_dns_getgrent(void *nsrv, void *nscb, va_list ap)
762{
763	struct group	**retval = va_arg(ap, struct group **);
764
765	int	  rv, rerror;
766
767	_DIAGASSERT(retval != NULL);
768
769	*retval = NULL;
770	rv = __grscan_dns(&rerror, &_dns_group,
771	    _dns_groupbuf, sizeof(_dns_groupbuf), &_dns_state, 0, NULL, 0);
772	if (rv == NS_SUCCESS)
773		*retval = &_dns_group;
774	return rv;
775}
776
777/*ARGSUSED*/
778static int
779_dns_getgrent_r(void *nsrv, void *nscb, va_list ap)
780{
781	int		*retval	= va_arg(ap, int *);
782	struct group	*grp	= va_arg(ap, struct group *);
783	char		*buffer	= va_arg(ap, char *);
784	size_t		 buflen	= va_arg(ap, size_t);
785	struct group   **result	= va_arg(ap, struct group **);
786
787	int	rv;
788
789	_DIAGASSERT(retval != NULL);
790	_DIAGASSERT(grp != NULL);
791	_DIAGASSERT(buffer != NULL);
792	_DIAGASSERT(result != NULL);
793
794	rv = __grscan_dns(retval, grp, buffer, buflen,
795	    &_dns_state, 0, NULL, 0);
796	if (rv == NS_SUCCESS)
797		*result = grp;
798	else
799		*result = NULL;
800	return rv;
801}
802/*ARGSUSED*/
803static int
804_dns_getgrgid(void *nsrv, void *nscb, va_list ap)
805{
806	struct group	**retval = va_arg(ap, struct group **);
807	gid_t		 gid	= va_arg(ap, gid_t);
808
809	int	rv, rerror;
810
811	_DIAGASSERT(retval != NULL);
812
813	*retval = NULL;
814	rv = __grstart_dns(&_dns_state);
815	if (rv != NS_SUCCESS)
816		return rv;
817	rv = __grscan_dns(&rerror, &_dns_group,
818	    _dns_groupbuf, sizeof(_dns_groupbuf), &_dns_state, 1, NULL, gid);
819	if (!_dns_state.stayopen)
820		__grend_dns(&_dns_state);
821	if (rv == NS_SUCCESS)
822		*retval = &_dns_group;
823	return rv;
824}
825
826/*ARGSUSED*/
827static int
828_dns_getgrgid_r(void *nsrv, void *nscb, va_list ap)
829{
830	int		*retval	= va_arg(ap, int *);
831	gid_t		 gid	= va_arg(ap, gid_t);
832	struct group	*grp	= va_arg(ap, struct group *);
833	char		*buffer	= va_arg(ap, char *);
834	size_t		 buflen	= va_arg(ap, size_t);
835	struct group   **result	= va_arg(ap, struct group **);
836
837	struct __grstate_dns state;
838	int	rv;
839
840	_DIAGASSERT(retval != NULL);
841	_DIAGASSERT(grp != NULL);
842	_DIAGASSERT(buffer != NULL);
843	_DIAGASSERT(result != NULL);
844
845	*result = NULL;
846	memset(&state, 0, sizeof(state));
847	rv = __grscan_dns(retval, grp, buffer, buflen, &state, 1, NULL, gid);
848	__grend_dns(&state);
849	if (rv == NS_SUCCESS)
850		*result = grp;
851	return rv;
852}
853
854/*ARGSUSED*/
855static int
856_dns_getgrnam(void *nsrv, void *nscb, va_list ap)
857{
858	struct group	**retval = va_arg(ap, struct group **);
859	const char	*name	= va_arg(ap, const char *);
860
861	int	rv, rerror;
862
863	_DIAGASSERT(retval != NULL);
864
865	*retval = NULL;
866	rv = __grstart_dns(&_dns_state);
867	if (rv != NS_SUCCESS)
868		return rv;
869	rv = __grscan_dns(&rerror, &_dns_group,
870	    _dns_groupbuf, sizeof(_dns_groupbuf), &_dns_state, 1, name, 0);
871	if (!_dns_state.stayopen)
872		__grend_dns(&_dns_state);
873	if (rv == NS_SUCCESS)
874		*retval = &_dns_group;
875	return rv;
876}
877
878/*ARGSUSED*/
879static int
880_dns_getgrnam_r(void *nsrv, void *nscb, va_list ap)
881{
882	int		*retval	= va_arg(ap, int *);
883	const char	*name	= va_arg(ap, const char *);
884	struct group	*grp	= va_arg(ap, struct group *);
885	char		*buffer	= va_arg(ap, char *);
886	size_t		 buflen	= va_arg(ap, size_t);
887	struct group   **result	= va_arg(ap, struct group **);
888
889	struct __grstate_dns state;
890	int	rv;
891
892	_DIAGASSERT(retval != NULL);
893	_DIAGASSERT(grp != NULL);
894	_DIAGASSERT(buffer != NULL);
895	_DIAGASSERT(result != NULL);
896
897	*result = NULL;
898	memset(&state, 0, sizeof(state));
899	rv = __grscan_dns(retval, grp, buffer, buflen, &state, 1, name, 0);
900	__grend_dns(&state);
901	if (rv == NS_SUCCESS)
902		*result = grp;
903	return rv;
904}
905
906#endif /* HESIOD */
907
908
909#ifdef YP
910		/*
911		 *	nis methods
912		 */
913
914int
915__grstart_nis(struct __grstate_nis *state)
916{
917
918	_DIAGASSERT(state != NULL);
919
920	state->done = 0;
921	if (state->current) {
922		free(state->current);
923		state->current = NULL;
924	}
925	if (state->domain == NULL) {			/* setup NIS */
926		switch (yp_get_default_domain(&state->domain)) {
927		case 0:
928			break;
929		case YPERR_RESRC:
930			return NS_TRYAGAIN;
931		default:
932			return NS_UNAVAIL;
933		}
934	}
935	return NS_SUCCESS;
936}
937
938int
939__grend_nis(struct __grstate_nis *state)
940{
941
942	_DIAGASSERT(state != NULL);
943
944	if (state->domain) {
945		state->domain = NULL;
946	}
947	state->done = 0;
948	if (state->current) {
949		free(state->current);
950		state->current = NULL;
951	}
952	return NS_SUCCESS;
953}
954
955/*
956 * __grscan_nis
957 *	Search NIS for the next desired entry.
958 *	If search is zero, return the next entry.
959 *	If search is non-zero, look for a specific name (if name != NULL),
960 *	or a specific gid (if name == NULL).
961 */
962int
963__grscan_nis(int *retval, struct group *grp, char *buffer, size_t buflen,
964	struct __grstate_nis *state, int search, const char *name, gid_t gid)
965{
966	const char *map;
967	char	*key, *data;
968	int	nisr, rv, keylen, datalen;
969
970	_DIAGASSERT(retval != NULL);
971	_DIAGASSERT(grp != NULL);
972	_DIAGASSERT(buffer != NULL);
973	_DIAGASSERT(state != NULL);
974	/* name is NULL to indicate searching for gid */
975
976	*retval = 0;
977
978	if (state->domain == NULL) {	/* only start if NIS not setup */
979		rv = __grstart_nis(state);
980		if (rv != NS_SUCCESS)
981			return rv;
982	}
983
984 next_nis_entry:
985	key = NULL;
986	data = NULL;
987	rv = NS_SUCCESS;
988
989	if (! search) 	{			/* find next entry */
990		if (state->done)			/* exhausted search */
991			return NS_NOTFOUND;
992		map = "group.byname";
993		if (state->current) {			/* already searching */
994			nisr = yp_next(state->domain, map,
995			    state->current, state->currentlen,
996			    &key, &keylen, &data, &datalen);
997			free(state->current);
998			state->current = NULL;
999			switch (nisr) {
1000			case 0:
1001				state->current = key;
1002				state->currentlen = keylen;
1003				key = NULL;
1004				break;
1005			case YPERR_NOMORE:
1006				rv = NS_NOTFOUND;
1007				state->done = 1;
1008				break;
1009			default:
1010				rv = NS_UNAVAIL;
1011				break;
1012			}
1013		} else {				/* new search */
1014			if (yp_first(state->domain, map,
1015			    &state->current, &state->currentlen,
1016			    &data, &datalen)) {
1017				rv = NS_UNAVAIL;
1018			}
1019		}
1020	} else {				/* search for specific item */
1021		if (name) {			/* find group name */
1022			snprintf(buffer, buflen, "%s", name);
1023			map = "group.byname";
1024		} else {			/* find gid */
1025			snprintf(buffer, buflen, "%u", (unsigned int)gid);
1026			map = "group.bygid";
1027		}
1028		nisr = yp_match(state->domain, map, buffer, (int)strlen(buffer),
1029		    &data, &datalen);
1030		switch (nisr) {
1031		case 0:
1032			break;
1033		case YPERR_KEY:
1034			rv = NS_NOTFOUND;
1035			break;
1036		default:
1037			rv = NS_UNAVAIL;
1038			break;
1039		}
1040	}
1041	if (rv == NS_SUCCESS) {				/* validate data */
1042		data[datalen] = '\0';			/* clear trailing \n */
1043		if (_gr_parse(data, grp, buffer, buflen)) {
1044			if (! search) {			/* just want this one */
1045				rv = NS_SUCCESS;
1046			} else if ((name && strcmp(name, grp->gr_name) == 0) ||
1047			    (!name && gid == grp->gr_gid)) {
1048							/* want specific */
1049				rv = NS_SUCCESS;
1050			}
1051		} else {				/* dodgy entry */
1052			if (!search) {		/* try again if ! searching */
1053				free(data);
1054				goto next_nis_entry;
1055			}
1056		}
1057	}
1058
1059	if (rv != NS_SUCCESS && rv != NS_NOTFOUND)
1060		*retval = errno;
1061	if (key)
1062		free(key);
1063	if (data)
1064		free(data);
1065	return rv;
1066}
1067
1068static struct __grstate_nis	_nis_state;
1069					/* storage for non _r functions */
1070static struct group		_nis_group;
1071static char			_nis_groupbuf[_GETGR_R_SIZE_MAX];
1072
1073/*ARGSUSED*/
1074static int
1075_nis_setgrent(void *nsrv, void *nscb, va_list ap)
1076{
1077
1078	_nis_state.stayopen = 0;
1079	return __grstart_nis(&_nis_state);
1080}
1081
1082/*ARGSUSED*/
1083static int
1084_nis_setgroupent(void *nsrv, void *nscb, va_list ap)
1085{
1086	int	*retval		= va_arg(ap, int *);
1087	int	 stayopen	= va_arg(ap, int);
1088
1089	int	rv;
1090
1091	_nis_state.stayopen = stayopen;
1092	rv = __grstart_nis(&_nis_state);
1093	*retval = (rv == NS_SUCCESS);
1094	return rv;
1095}
1096
1097/*ARGSUSED*/
1098static int
1099_nis_endgrent(void *nsrv, void *nscb, va_list ap)
1100{
1101
1102	return __grend_nis(&_nis_state);
1103}
1104
1105/*ARGSUSED*/
1106static int
1107_nis_getgrent(void *nsrv, void *nscb, va_list ap)
1108{
1109	struct group	**retval = va_arg(ap, struct group **);
1110
1111	int	rv, rerror;
1112
1113	_DIAGASSERT(retval != NULL);
1114
1115	*retval = NULL;
1116	rv = __grscan_nis(&rerror, &_nis_group,
1117	    _nis_groupbuf, sizeof(_nis_groupbuf), &_nis_state, 0, NULL, 0);
1118	if (rv == NS_SUCCESS)
1119		*retval = &_nis_group;
1120	return rv;
1121}
1122
1123/*ARGSUSED*/
1124static int
1125_nis_getgrent_r(void *nsrv, void *nscb, va_list ap)
1126{
1127	int		*retval	= va_arg(ap, int *);
1128	struct group	*grp	= va_arg(ap, struct group *);
1129	char		*buffer	= va_arg(ap, char *);
1130	size_t		 buflen	= va_arg(ap, size_t);
1131	struct group   **result	= va_arg(ap, struct group **);
1132
1133	int	rv;
1134
1135	_DIAGASSERT(retval != NULL);
1136	_DIAGASSERT(grp != NULL);
1137	_DIAGASSERT(buffer != NULL);
1138	_DIAGASSERT(result != NULL);
1139
1140	rv = __grscan_nis(retval, grp, buffer, buflen,
1141	    &_nis_state, 0, NULL, 0);
1142	if (rv == NS_SUCCESS)
1143		*result = grp;
1144	else
1145		*result = NULL;
1146	return rv;
1147}
1148
1149/*ARGSUSED*/
1150static int
1151_nis_getgrgid(void *nsrv, void *nscb, va_list ap)
1152{
1153	struct group	**retval = va_arg(ap, struct group **);
1154	gid_t		 gid	= va_arg(ap, gid_t);
1155
1156	int	rv, rerror;
1157
1158	_DIAGASSERT(retval != NULL);
1159
1160	*retval = NULL;
1161	rv = __grstart_nis(&_nis_state);
1162	if (rv != NS_SUCCESS)
1163		return rv;
1164	rv = __grscan_nis(&rerror, &_nis_group,
1165	    _nis_groupbuf, sizeof(_nis_groupbuf), &_nis_state, 1, NULL, gid);
1166	if (!_nis_state.stayopen)
1167		__grend_nis(&_nis_state);
1168	if (rv == NS_SUCCESS)
1169		*retval = &_nis_group;
1170	return rv;
1171}
1172
1173/*ARGSUSED*/
1174static int
1175_nis_getgrgid_r(void *nsrv, void *nscb, va_list ap)
1176{
1177	int		*retval	= va_arg(ap, int *);
1178	gid_t		 gid	= va_arg(ap, gid_t);
1179	struct group	*grp	= va_arg(ap, struct group *);
1180	char		*buffer	= va_arg(ap, char *);
1181	size_t		 buflen	= va_arg(ap, size_t);
1182	struct group   **result	= va_arg(ap, struct group **);
1183
1184	struct __grstate_nis state;
1185	int	rv;
1186
1187	_DIAGASSERT(retval != NULL);
1188	_DIAGASSERT(grp != NULL);
1189	_DIAGASSERT(buffer != NULL);
1190	_DIAGASSERT(result != NULL);
1191
1192	*result = NULL;
1193	memset(&state, 0, sizeof(state));
1194	rv = __grscan_nis(retval, grp, buffer, buflen, &state, 1, NULL, gid);
1195	__grend_nis(&state);
1196	if (rv == NS_SUCCESS)
1197		*result = grp;
1198	return rv;
1199}
1200
1201/*ARGSUSED*/
1202static int
1203_nis_getgrnam(void *nsrv, void *nscb, va_list ap)
1204{
1205	struct group	**retval = va_arg(ap, struct group **);
1206	const char	*name	= va_arg(ap, const char *);
1207
1208	int	rv, rerror;
1209
1210	_DIAGASSERT(retval != NULL);
1211
1212	*retval = NULL;
1213	rv = __grstart_nis(&_nis_state);
1214	if (rv != NS_SUCCESS)
1215		return rv;
1216	rv = __grscan_nis(&rerror, &_nis_group,
1217	    _nis_groupbuf, sizeof(_nis_groupbuf), &_nis_state, 1, name, 0);
1218	if (!_nis_state.stayopen)
1219		__grend_nis(&_nis_state);
1220	if (rv == NS_SUCCESS)
1221		*retval = &_nis_group;
1222	return rv;
1223}
1224
1225/*ARGSUSED*/
1226static int
1227_nis_getgrnam_r(void *nsrv, void *nscb, va_list ap)
1228{
1229	int		*retval	= va_arg(ap, int *);
1230	const char	*name	= va_arg(ap, const char *);
1231	struct group	*grp	= va_arg(ap, struct group *);
1232	char		*buffer	= va_arg(ap, char *);
1233	size_t		 buflen	= va_arg(ap, size_t);
1234	struct group   **result	= va_arg(ap, struct group **);
1235
1236	struct __grstate_nis state;
1237	int	rv;
1238
1239	_DIAGASSERT(retval != NULL);
1240	_DIAGASSERT(grp != NULL);
1241	_DIAGASSERT(buffer != NULL);
1242	_DIAGASSERT(result != NULL);
1243
1244	*result = NULL;
1245	memset(&state, 0, sizeof(state));
1246	rv = __grscan_nis(retval, grp, buffer, buflen, &state, 1, name, 0);
1247	__grend_nis(&state);
1248	if (rv == NS_SUCCESS)
1249		*result = grp;
1250	return rv;
1251}
1252
1253#endif /* YP */
1254
1255
1256#ifdef _GROUP_COMPAT
1257		/*
1258		 *	compat methods
1259		 */
1260
1261int
1262__grstart_compat(struct __grstate_compat *state)
1263{
1264
1265	_DIAGASSERT(state != NULL);
1266
1267	if (state->fp == NULL) {
1268		state->fp = fopen(_PATH_GROUP, "re");
1269		if (state->fp == NULL)
1270			return NS_UNAVAIL;
1271	} else {
1272		rewind(state->fp);
1273	}
1274	return NS_SUCCESS;
1275}
1276
1277int
1278__grend_compat(struct __grstate_compat *state)
1279{
1280
1281	_DIAGASSERT(state != NULL);
1282
1283	if (state->name) {
1284		free(state->name);
1285		state->name = NULL;
1286	}
1287	if (state->fp) {
1288		(void) fclose(state->fp);
1289		state->fp = NULL;
1290	}
1291	return NS_SUCCESS;
1292}
1293
1294
1295/*
1296 * __grbad_compat
1297 *	log an error if "files" or "compat" is specified in
1298 *	group_compat database
1299 */
1300/*ARGSUSED*/
1301int
1302__grbad_compat(void *nsrv, void *nscb, va_list ap)
1303{
1304	static int warned;
1305
1306	_DIAGASSERT(nsrv != NULL);
1307	_DIAGASSERT(nscb != NULL);
1308
1309	if (!warned) {
1310		syslog(LOG_ERR,
1311			"nsswitch.conf group_compat database can't use '%s'",
1312			(const char *)nscb);
1313	}
1314	warned = 1;
1315	return NS_UNAVAIL;
1316}
1317
1318/*
1319 * __grscan_compat
1320 *	Scan state->fp for the next desired entry.
1321 *	If search is zero, return the next entry.
1322 *	If search is non-zero, look for a specific name (if name != NULL),
1323 *	or a specific gid (if name == NULL).
1324 *	Sets *retval to the errno if the result is not NS_SUCCESS or
1325 *	NS_NOTFOUND.
1326 *
1327 *	searchfunc is invoked when a compat "+" lookup is required;
1328 *	searchcookie is passed as the first argument to searchfunc,
1329 *	the second argument is the group result.
1330 *	This should return NS_NOTFOUND when "no more groups" from compat src.
1331 *	If searchfunc is NULL then nsdispatch of getgrent is used.
1332 *	This is primarily intended for getgroupmembership(3)'s compat backend.
1333 */
1334int
1335__grscan_compat(int *retval, struct group *grp, char *buffer, size_t buflen,
1336	struct __grstate_compat *state, int search, const char *name, gid_t gid,
1337	int (*searchfunc)(void *, struct group **), void *searchcookie)
1338{
1339	int		rv;
1340	char		filebuf[_GETGR_R_SIZE_MAX], *ep;
1341
1342	static const ns_dtab compatentdtab[] = {
1343		NS_FILES_CB(__grbad_compat, "files")
1344		NS_DNS_CB(_dns_getgrent_r, NULL)
1345		NS_NIS_CB(_nis_getgrent_r, NULL)
1346		NS_COMPAT_CB(__grbad_compat, "compat")
1347		NS_NULL_CB
1348	};
1349	static const ns_dtab compatgiddtab[] = {
1350		NS_FILES_CB(__grbad_compat, "files")
1351		NS_DNS_CB(_dns_getgrgid_r, NULL)
1352		NS_NIS_CB(_nis_getgrgid_r, NULL)
1353		NS_COMPAT_CB(__grbad_compat, "compat")
1354		NS_NULL_CB
1355	};
1356	static const ns_dtab compatnamdtab[] = {
1357		NS_FILES_CB(__grbad_compat, "files")
1358		NS_DNS_CB(_dns_getgrnam_r, NULL)
1359		NS_NIS_CB(_nis_getgrnam_r, NULL)
1360		NS_COMPAT_CB(__grbad_compat, "compat")
1361		NS_NULL_CB
1362	};
1363
1364	_DIAGASSERT(retval != NULL);
1365	_DIAGASSERT(grp != NULL);
1366	_DIAGASSERT(buffer != NULL);
1367	_DIAGASSERT(state != NULL);
1368	/* name is NULL to indicate searching for gid */
1369
1370	*retval = 0;
1371
1372	if (state->fp == NULL) {	/* only start if file not open yet */
1373		rv = __grstart_compat(state);
1374		if (rv != NS_SUCCESS)
1375			goto compatgrscan_out;
1376	}
1377	rv = NS_NOTFOUND;
1378
1379	for (;;) {					/* loop through file */
1380		if (state->name != NULL) {
1381					/* processing compat entry */
1382			int		crv, cretval;
1383			struct group	cgrp, *cgrpres;
1384
1385			if (state->name[0]) {		/* specific +group: */
1386				crv = nsdispatch(NULL, compatnamdtab,
1387				    NSDB_GROUP_COMPAT, "getgrnam_r",
1388				    __nsdefaultnis,
1389				    &cretval, state->name,
1390				    &cgrp, filebuf, sizeof(filebuf), &cgrpres);
1391				free(state->name);	/* (only check 1 grp) */
1392				state->name = NULL;
1393			} else if (!search) {		/* any group */
1394				if (searchfunc) {
1395					crv = searchfunc(searchcookie,
1396					    &cgrpres);
1397				} else {
1398					crv = nsdispatch(NULL, compatentdtab,
1399					    NSDB_GROUP_COMPAT, "getgrent_r",
1400					    __nsdefaultnis,
1401					    &cretval, &cgrp, filebuf,
1402					    sizeof(filebuf), &cgrpres);
1403				}
1404			} else if (name) {		/* specific group */
1405				crv = nsdispatch(NULL, compatnamdtab,
1406				    NSDB_GROUP_COMPAT, "getgrnam_r",
1407				    __nsdefaultnis,
1408				    &cretval, name,
1409				    &cgrp, filebuf, sizeof(filebuf), &cgrpres);
1410			} else {			/* specific gid */
1411				crv = nsdispatch(NULL, compatgiddtab,
1412				    NSDB_GROUP_COMPAT, "getgrgid_r",
1413				    __nsdefaultnis,
1414				    &cretval, gid,
1415				    &cgrp, filebuf, sizeof(filebuf), &cgrpres);
1416			}
1417			if (crv != NS_SUCCESS) {	/* not found */
1418				free(state->name);
1419				state->name = NULL;
1420				continue;		/* try next line */
1421			}
1422			if (!_gr_copy(cgrpres, grp, buffer, buflen)) {
1423				rv = NS_UNAVAIL;
1424				break;
1425			}
1426			goto compatgrscan_cmpgrp;	/* skip to grp test */
1427		}
1428
1429							/* get next file line */
1430		if (fgets(filebuf, sizeof(filebuf), state->fp) == NULL)
1431			break;
1432
1433		ep = strchr(filebuf, '\n');
1434		if (ep == NULL) {	/* skip lines that are too big */
1435			int ch;
1436
1437			while ((ch = getc(state->fp)) != '\n' && ch != EOF)
1438				continue;
1439			continue;
1440		}
1441		*ep = '\0';				/* clear trailing \n */
1442
1443		if (filebuf[0] == '+') {		/* parse compat line */
1444			if (state->name)
1445				free(state->name);
1446			state->name = NULL;
1447			switch(filebuf[1]) {
1448			case ':':
1449			case '\0':
1450				state->name = strdup("");
1451				break;
1452			default:
1453				ep = strchr(filebuf + 1, ':');
1454				if (ep == NULL)
1455					break;
1456				*ep = '\0';
1457				state->name = strdup(filebuf + 1);
1458				break;
1459			}
1460			if (state->name == NULL) {
1461				rv = NS_UNAVAIL;
1462				break;
1463			}
1464			continue;
1465		}
1466
1467							/* validate line */
1468		if (! _gr_parse(filebuf, grp, buffer, buflen)) {
1469			continue;			/* skip bad lines */
1470		}
1471
1472 compatgrscan_cmpgrp:
1473		if (! search) {				/* just want this one */
1474			rv = NS_SUCCESS;
1475			break;
1476		}
1477							/* want specific */
1478		if ((name && strcmp(name, grp->gr_name) == 0) ||
1479		    (!name && gid == grp->gr_gid)) {
1480			rv = NS_SUCCESS;
1481			break;
1482		}
1483
1484	}
1485
1486 compatgrscan_out:
1487	if (rv != NS_SUCCESS && rv != NS_NOTFOUND)
1488		*retval = errno;
1489	return rv;
1490}
1491
1492static struct __grstate_compat	_compat_state;
1493					/* storage for non _r functions */
1494static struct group		_compat_group;
1495static char			_compat_groupbuf[_GETGR_R_SIZE_MAX];
1496
1497/*ARGSUSED*/
1498static int
1499_compat_setgrent(void *nsrv, void *nscb, va_list ap)
1500{
1501	static const ns_dtab dtab[] = {
1502		NS_FILES_CB(__grbad_compat, "files")
1503		NS_DNS_CB(_dns_setgrent, NULL)
1504		NS_NIS_CB(_nis_setgrent, NULL)
1505		NS_COMPAT_CB(__grbad_compat, "compat")
1506		NS_NULL_CB
1507	};
1508
1509					/* force group_compat setgrent() */
1510	(void) nsdispatch(NULL, dtab, NSDB_GROUP_COMPAT, "setgrent",
1511	    __nsdefaultnis_forceall);
1512
1513					/* reset state, keep fp open */
1514	_compat_state.stayopen = 0;
1515	return __grstart_compat(&_compat_state);
1516}
1517
1518/*ARGSUSED*/
1519static int
1520_compat_setgroupent(void *nsrv, void *nscb, va_list ap)
1521{
1522	int	*retval		= va_arg(ap, int *);
1523	int	 stayopen	= va_arg(ap, int);
1524
1525	int	rv;
1526
1527	static const ns_dtab dtab[] = {
1528		NS_FILES_CB(__grbad_compat, "files")
1529		NS_DNS_CB(_dns_setgroupent, NULL)
1530		NS_NIS_CB(_nis_setgroupent, NULL)
1531		NS_COMPAT_CB(__grbad_compat, "compat")
1532		NS_NULL_CB
1533	};
1534
1535					/* force group_compat setgroupent() */
1536	(void) nsdispatch(NULL, dtab, NSDB_GROUP_COMPAT, "setgroupent",
1537	    __nsdefaultnis_forceall, &rv, stayopen);
1538
1539	_compat_state.stayopen = stayopen;
1540	rv = __grstart_compat(&_compat_state);
1541	*retval = (rv == NS_SUCCESS);
1542	return rv;
1543}
1544
1545/*ARGSUSED*/
1546static int
1547_compat_endgrent(void *nsrv, void *nscb, va_list ap)
1548{
1549	static const ns_dtab dtab[] = {
1550		NS_FILES_CB(__grbad_compat, "files")
1551		NS_DNS_CB(_dns_endgrent, NULL)
1552		NS_NIS_CB(_nis_endgrent, NULL)
1553		NS_COMPAT_CB(__grbad_compat, "compat")
1554		NS_NULL_CB
1555	};
1556
1557					/* force group_compat endgrent() */
1558	(void) nsdispatch(NULL, dtab, NSDB_GROUP_COMPAT, "endgrent",
1559	    __nsdefaultnis_forceall);
1560
1561					/* reset state, close fp */
1562	_compat_state.stayopen = 0;
1563	return __grend_compat(&_compat_state);
1564}
1565
1566/*ARGSUSED*/
1567static int
1568_compat_getgrent(void *nsrv, void *nscb, va_list ap)
1569{
1570	struct group	**retval = va_arg(ap, struct group **);
1571
1572	int	rv, rerror;
1573
1574	_DIAGASSERT(retval != NULL);
1575
1576	*retval = NULL;
1577	rv = __grscan_compat(&rerror, &_compat_group,
1578	    _compat_groupbuf, sizeof(_compat_groupbuf),
1579	    &_compat_state, 0, NULL, 0, NULL, NULL);
1580	if (rv == NS_SUCCESS)
1581		*retval = &_compat_group;
1582	return rv;
1583}
1584
1585/*ARGSUSED*/
1586static int
1587_compat_getgrent_r(void *nsrv, void *nscb, va_list ap)
1588{
1589	int		*retval	= va_arg(ap, int *);
1590	struct group	*grp	= va_arg(ap, struct group *);
1591	char		*buffer	= va_arg(ap, char *);
1592	size_t		 buflen	= va_arg(ap, size_t);
1593	struct group   **result	= va_arg(ap, struct group **);
1594
1595	int	rv;
1596
1597	_DIAGASSERT(retval != NULL);
1598	_DIAGASSERT(grp != NULL);
1599	_DIAGASSERT(buffer != NULL);
1600	_DIAGASSERT(result != NULL);
1601
1602	rv = __grscan_compat(retval, grp, buffer, buflen,
1603	    &_compat_state, 0, NULL, 0, NULL, NULL);
1604	if (rv == NS_SUCCESS)
1605		*result = grp;
1606	else
1607		*result = NULL;
1608	return rv;
1609}
1610
1611/*ARGSUSED*/
1612static int
1613_compat_getgrgid(void *nsrv, void *nscb, va_list ap)
1614{
1615	struct group	**retval = va_arg(ap, struct group **);
1616	gid_t		 gid	= va_arg(ap, gid_t);
1617
1618	int	rv, rerror;
1619
1620	_DIAGASSERT(retval != NULL);
1621
1622	*retval = NULL;
1623	rv = __grstart_compat(&_compat_state);
1624	if (rv != NS_SUCCESS)
1625		return rv;
1626	rv = __grscan_compat(&rerror, &_compat_group,
1627	    _compat_groupbuf, sizeof(_compat_groupbuf),
1628	    &_compat_state, 1, NULL, gid, NULL, NULL);
1629	if (!_compat_state.stayopen)
1630		__grend_compat(&_compat_state);
1631	if (rv == NS_SUCCESS)
1632		*retval = &_compat_group;
1633	return rv;
1634}
1635
1636/*ARGSUSED*/
1637static int
1638_compat_getgrgid_r(void *nsrv, void *nscb, va_list ap)
1639{
1640	int		*retval	= va_arg(ap, int *);
1641	gid_t		 gid	= va_arg(ap, gid_t);
1642	struct group	*grp	= va_arg(ap, struct group *);
1643	char		*buffer	= va_arg(ap, char *);
1644	size_t		 buflen	= va_arg(ap, size_t);
1645	struct group   **result	= va_arg(ap, struct group **);
1646
1647	struct __grstate_compat	state;
1648	int		rv;
1649
1650	_DIAGASSERT(retval != NULL);
1651	_DIAGASSERT(grp != NULL);
1652	_DIAGASSERT(buffer != NULL);
1653	_DIAGASSERT(result != NULL);
1654
1655	*result = NULL;
1656	memset(&state, 0, sizeof(state));
1657	rv = __grscan_compat(retval, grp, buffer, buflen, &state,
1658	    1, NULL, gid, NULL, NULL);
1659	__grend_compat(&state);
1660	if (rv == NS_SUCCESS)
1661		*result = grp;
1662	return rv;
1663}
1664
1665/*ARGSUSED*/
1666static int
1667_compat_getgrnam(void *nsrv, void *nscb, va_list ap)
1668{
1669	struct group	**retval = va_arg(ap, struct group **);
1670	const char	*name	= va_arg(ap, const char *);
1671
1672	int	rv, rerror;
1673
1674	_DIAGASSERT(retval != NULL);
1675
1676	*retval = NULL;
1677	rv = __grstart_compat(&_compat_state);
1678	if (rv != NS_SUCCESS)
1679		return rv;
1680	rv = __grscan_compat(&rerror, &_compat_group,
1681	    _compat_groupbuf, sizeof(_compat_groupbuf),
1682	    &_compat_state, 1, name, 0, NULL, NULL);
1683	if (!_compat_state.stayopen)
1684		__grend_compat(&_compat_state);
1685	if (rv == NS_SUCCESS)
1686		*retval = &_compat_group;
1687	return rv;
1688}
1689
1690/*ARGSUSED*/
1691static int
1692_compat_getgrnam_r(void *nsrv, void *nscb, va_list ap)
1693{
1694	int		*retval	= va_arg(ap, int *);
1695	const char	*name	= va_arg(ap, const char *);
1696	struct group	*grp	= va_arg(ap, struct group *);
1697	char		*buffer	= va_arg(ap, char *);
1698	size_t		 buflen	= va_arg(ap, size_t);
1699	struct group   **result	= va_arg(ap, struct group **);
1700
1701	struct __grstate_compat	state;
1702	int		rv;
1703
1704	_DIAGASSERT(retval != NULL);
1705	_DIAGASSERT(grp != NULL);
1706	_DIAGASSERT(buffer != NULL);
1707	_DIAGASSERT(result != NULL);
1708
1709	*result = NULL;
1710	memset(&state, 0, sizeof(state));
1711	rv = __grscan_compat(retval, grp, buffer, buflen, &state,
1712	    1, name, 0, NULL, NULL);
1713	__grend_compat(&state);
1714	if (rv == NS_SUCCESS)
1715		*result = grp;
1716	return rv;
1717}
1718
1719#endif	/* _GROUP_COMPAT */
1720
1721
1722		/*
1723		 *	public functions
1724		 */
1725
1726struct group *
1727getgrent(void)
1728{
1729	int		rv;
1730	struct group	*retval;
1731
1732	static const ns_dtab dtab[] = {
1733		NS_FILES_CB(_files_getgrent, NULL)
1734		NS_DNS_CB(_dns_getgrent, NULL)
1735		NS_NIS_CB(_nis_getgrent, NULL)
1736		NS_COMPAT_CB(_compat_getgrent, NULL)
1737		NS_NULL_CB
1738	};
1739
1740	mutex_lock(&__grmutex);
1741	rv = nsdispatch(NULL, dtab, NSDB_GROUP, "getgrent", __nsdefaultcompat,
1742	    &retval);
1743	mutex_unlock(&__grmutex);
1744	return (rv == NS_SUCCESS) ? retval : NULL;
1745}
1746
1747int
1748getgrent_r(struct group *grp, char *buffer, size_t buflen,
1749    struct group **result)
1750{
1751	int		rv, retval;
1752
1753	static const ns_dtab dtab[] = {
1754		NS_FILES_CB(_files_getgrent_r, NULL)
1755		NS_DNS_CB(_dns_getgrent_r, NULL)
1756		NS_NIS_CB(_nis_getgrent_r, NULL)
1757		NS_COMPAT_CB(_compat_getgrent_r, NULL)
1758		NS_NULL_CB
1759	};
1760
1761	mutex_lock(&__grmutex);
1762	rv = nsdispatch(NULL, dtab, NSDB_GROUP, "getgrent_r", __nsdefaultcompat,
1763	    &retval, grp, buffer, buflen, result);
1764	mutex_unlock(&__grmutex);
1765	switch (rv) {
1766	case NS_SUCCESS:
1767	case NS_NOTFOUND:
1768		return 0;
1769	default:
1770		return retval;
1771	}
1772}
1773
1774
1775struct group *
1776getgrgid(gid_t gid)
1777{
1778	int		rv;
1779	struct group	*retval;
1780
1781	static const ns_dtab dtab[] = {
1782		NS_FILES_CB(_files_getgrgid, NULL)
1783		NS_DNS_CB(_dns_getgrgid, NULL)
1784		NS_NIS_CB(_nis_getgrgid, NULL)
1785		NS_COMPAT_CB(_compat_getgrgid, NULL)
1786		NS_NULL_CB
1787	};
1788
1789	mutex_lock(&__grmutex);
1790	rv = nsdispatch(NULL, dtab, NSDB_GROUP, "getgrgid", __nsdefaultcompat,
1791	    &retval, gid);
1792	mutex_unlock(&__grmutex);
1793	return (rv == NS_SUCCESS) ? retval : NULL;
1794}
1795
1796int
1797getgrgid_r(gid_t gid, struct group *grp, char *buffer, size_t buflen,
1798	struct group **result)
1799{
1800	int	rv, retval;
1801
1802	static const ns_dtab dtab[] = {
1803		NS_FILES_CB(_files_getgrgid_r, NULL)
1804		NS_DNS_CB(_dns_getgrgid_r, NULL)
1805		NS_NIS_CB(_nis_getgrgid_r, NULL)
1806		NS_COMPAT_CB(_compat_getgrgid_r, NULL)
1807		NS_NULL_CB
1808	};
1809
1810	_DIAGASSERT(grp != NULL);
1811	_DIAGASSERT(buffer != NULL);
1812	_DIAGASSERT(result != NULL);
1813
1814	*result = NULL;
1815	retval = 0;
1816	mutex_lock(&__grmutex);
1817	rv = nsdispatch(NULL, dtab, NSDB_GROUP, "getgrgid_r", __nsdefaultcompat,
1818	    &retval, gid, grp, buffer, buflen, result);
1819	mutex_unlock(&__grmutex);
1820	switch (rv) {
1821	case NS_SUCCESS:
1822	case NS_NOTFOUND:
1823		return 0;
1824	default:
1825		return retval;
1826	}
1827}
1828
1829struct group *
1830getgrnam(const char *name)
1831{
1832	int		rv;
1833	struct group	*retval;
1834
1835	static const ns_dtab dtab[] = {
1836		NS_FILES_CB(_files_getgrnam, NULL)
1837		NS_DNS_CB(_dns_getgrnam, NULL)
1838		NS_NIS_CB(_nis_getgrnam, NULL)
1839		NS_COMPAT_CB(_compat_getgrnam, NULL)
1840		NS_NULL_CB
1841	};
1842
1843	mutex_lock(&__grmutex);
1844	rv = nsdispatch(NULL, dtab, NSDB_GROUP, "getgrnam", __nsdefaultcompat,
1845	    &retval, name);
1846	mutex_unlock(&__grmutex);
1847	return (rv == NS_SUCCESS) ? retval : NULL;
1848}
1849
1850int
1851getgrnam_r(const char *name, struct group *grp, char *buffer, size_t buflen,
1852	struct group **result)
1853{
1854	int	rv, retval;
1855
1856	static const ns_dtab dtab[] = {
1857		NS_FILES_CB(_files_getgrnam_r, NULL)
1858		NS_DNS_CB(_dns_getgrnam_r, NULL)
1859		NS_NIS_CB(_nis_getgrnam_r, NULL)
1860		NS_COMPAT_CB(_compat_getgrnam_r, NULL)
1861		NS_NULL_CB
1862	};
1863
1864	_DIAGASSERT(name != NULL);
1865	_DIAGASSERT(grp != NULL);
1866	_DIAGASSERT(buffer != NULL);
1867	_DIAGASSERT(result != NULL);
1868
1869	*result = NULL;
1870	retval = 0;
1871	mutex_lock(&__grmutex);
1872	rv = nsdispatch(NULL, dtab, NSDB_GROUP, "getgrnam_r", __nsdefaultcompat,
1873	    &retval, name, grp, buffer, buflen, result);
1874	mutex_unlock(&__grmutex);
1875	switch (rv) {
1876	case NS_SUCCESS:
1877	case NS_NOTFOUND:
1878		return 0;
1879	default:
1880		return retval;
1881	}
1882}
1883
1884void
1885endgrent(void)
1886{
1887	static const ns_dtab dtab[] = {
1888		NS_FILES_CB(_files_endgrent, NULL)
1889		NS_DNS_CB(_dns_endgrent, NULL)
1890		NS_NIS_CB(_nis_endgrent, NULL)
1891		NS_COMPAT_CB(_compat_endgrent, NULL)
1892		NS_NULL_CB
1893	};
1894
1895	mutex_lock(&__grmutex);
1896					/* force all endgrent() methods */
1897	(void) nsdispatch(NULL, dtab, NSDB_GROUP, "endgrent",
1898	    __nsdefaultcompat_forceall);
1899	mutex_unlock(&__grmutex);
1900}
1901
1902int
1903setgroupent(int stayopen)
1904{
1905	static const ns_dtab dtab[] = {
1906		NS_FILES_CB(_files_setgroupent, NULL)
1907		NS_DNS_CB(_dns_setgroupent, NULL)
1908		NS_NIS_CB(_nis_setgroupent, NULL)
1909		NS_COMPAT_CB(_compat_setgroupent, NULL)
1910		NS_NULL_CB
1911	};
1912	int	rv, retval;
1913
1914	mutex_lock(&__grmutex);
1915					/* force all setgroupent() methods */
1916	rv = nsdispatch(NULL, dtab, NSDB_GROUP, "setgroupent",
1917	    __nsdefaultcompat_forceall, &retval, stayopen);
1918	mutex_unlock(&__grmutex);
1919	return (rv == NS_SUCCESS) ? retval : 0;
1920}
1921
1922void
1923setgrent(void)
1924{
1925	static const ns_dtab dtab[] = {
1926		NS_FILES_CB(_files_setgrent, NULL)
1927		NS_DNS_CB(_dns_setgrent, NULL)
1928		NS_NIS_CB(_nis_setgrent, NULL)
1929		NS_COMPAT_CB(_compat_setgrent, NULL)
1930		NS_NULL_CB
1931	};
1932
1933	mutex_lock(&__grmutex);
1934					/* force all setgrent() methods */
1935	(void) nsdispatch(NULL, dtab, NSDB_GROUP, "setgrent",
1936	    __nsdefaultcompat_forceall);
1937	mutex_unlock(&__grmutex);
1938}
1939