1 files changed, 60 insertions, 0 deletions
diff --git a/src/nslcd/systemd/disable_nss_module.go b/src/nslcd/systemd/disable_nss_module.go
new file mode 100644
index 0000000..c19ba0c
--- /dev/null
+++ b/src/nslcd/systemd/disable_nss_module.go
@@ -0,0 +1,60 @@
+// Copyright (C) 2015 Luke Shumaker <lukeshu@sbcglobal.net>
+//
+// This library is free software; you can redistribute it and/or
+// modify it under the terms of the GNU Lesser General Public
+// License as published by the Free Software Foundation; either
+// version 2.1 of the License, or (at your option) any later version.
+//
+// This library is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+// Lesser General Public License for more details.
+//
+// You should have received a copy of the GNU Lesser General Public
+// License along with this library; if not, write to the Free Software
+// Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
+// 02110-1301 USA
+
+package nslcd_systemd
+
+import (
+	"dl"
+	"sd_daemon/logger"
+	"unsafe"
+)
+
+//static char *strary(char **ary, unsigned int n) { return ary[n]; }
+import "C"
+
+const (
+	nss_module_soname            = "libnss_ldap.so.2"
+	nss_module_sym_version       = "_nss_ldap_version"
+	nss_module_sym_enablelookups = "_nss_ldap_enablelookups"
+)
+
+func disable_nss_module() {
+	handle, err := dl.Open(nss_module_soname, dl.RTLD_LAZY|dl.RTLD_NODELETE)
+	if err == nil {
+		defer handle.Close()
+	} else {
+		logger.Warning("NSS module %s not loaded: %v", nss_module_soname, err)
+		return
+	}
+
+	c_version_info, err := handle.Sym(nss_module_sym_version)
+	if err == nil {
+		g_version_info := (**C.char)(unsafe.Pointer(c_version_info))
+		logger.Debug("NSS module %s version %s %s", nss_module_soname,
+			C.GoString(C.strary(g_version_info, 0)),
+			C.GoString(C.strary(g_version_info, 1)))
+	} else {
+		logger.Warning("NSS module %s version missing: %v", nss_module_soname, err)
+	}
+	c_enable_flag, err := handle.Sym(nss_module_sym_enablelookups)
+	if err != nil {
+		logger.Warning("Unable to disable NSS ldap module for nslcd process: %v", err)
+		return
+	}
+	g_enable_flag := (*C.int)(unsafe.Pointer(c_enable_flag))
+	*g_enable_flag = 0
+}