November 2006 - Darwin-kernel

Re: Administrator password (Getting list of admins)
by Jerry Krinock 14 Nov '06

14 Nov '06

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Thread-index: AccH4ROHUi/Nj3PUEduSGAAWy6NyrA== Thread-topic: Administrator password (Getting list of admins) User-agent: Microsoft-Entourage/11.2.5.060620 on 06/11/14 1:55, Joseph Oreste Bruni at jbruni(a)mac.com wrote: > Check out nigrep, niutil, nicl, etc. And while you are reading those > man pages, try "man -k netinfo". How about: "Jerry, don't wish too hard for what you want, you might get it." Indeed, I GOT IT, Joe! If I ever get to retire, it looks like I could use all those to write my own NetInfo Manager. Fun stuff. For now, though, I'll use Terry's tip with getgrnam(). This seems to work: #include <grp.h> NSArray* MacSystemAdminShortNames() { // Returns the short names of all members of the group "admin" struct group* groupInfo ; groupInfo = getgrnam("admin") ; char* member ; int iMember = 0 ; NSMutableArray* admins = [[NSMutableArray alloc] init] ; while ((member = groupInfo->gr_mem[iMember++])) { [admins addObject:[NSString stringWithCString:member]] ; } NSArray* adminsOut = [NSArray arrayWithArray:admins] ; [admins release] ; return adminsOut ; } on 06/11/14 3:32, Terry Lambert at tlambert(a)apple.com wrote: > Be aware that some directory services do not permit enumeration of > group members, The only directory service I care about is whatever is used in "grps.c" by Mac OS X, right? And "whatever that is" seems to work. > or support the concept of a group being a member of a > group; if that is the case, then it may not be possible to get a > complete answer when you ask the question "who are the admin users?". I understand this to mean that if someone somehow created a group of admins within the group admin, I'd have to call my function recursively to get all of them. Is that even possible, to have a group of admins? Thanks for the help! Jerry _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Administrator password
by Quinn 14 Nov '06

14 Nov '06

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com To validate a password programmatically, use the code from CryptNoMore. <http://developer.apple.com/samplecode/CryptNoMore/index.html> $ id -G quinn 2000 81 79 80 $ id -G mrgumby 502 If the output includes group 80, they're an admin user. S+E -- Quinn "The Eskimo!" <http://www.apple.com/developer/> Apple Developer Relations, Developer Technical Support, Core OS/Hardware _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… I've avoided wading into this topic so far because it's hardly kernel related, but the following needs to be addressed... At 23:55 -0700 13/11/06, Joseph Oreste Bruni wrote: Check out nigrep, niutil, nicl, etc. And while you are reading those man pages, try "man -k netinfo". Please do not use NetInfo for this sort of stuff. The fact that NetInfo is used as a the local directory store on Mac OS X is, and has long been, an implementation detail. It's an implementation detail that's going to change soon. Any new development should be done using Directory Services. This will work on current systems (where NetInfo is the local directory store) and on future systems (where NetInfo is completely removed). If you continue to use tools like <x-man-page://1/nicl>, you will be in for a shock. For command line access to Directory Services, start with the <x-man-page://1/dscl> tool. This will work for arbitrary directory systems. This sample also shows how to use PAM for authentication, although there are things that make PAM less than convenient on Mac OS X (specifically, the requirement to install a file in "/etc/pam.d"). To check whether a user is a member of a group from a script, just use <x-man-page://1/id>. To do this programmatically, just use <x-man-page://3/getgrgid> (or <x-man-page://3/getgrnam>). This email sent to site_archiver(a)lists.apple.com

1 0

Re: Administrator password
by Terry Lambert 14 Nov '06

14 Nov '06

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com On Nov 13, 2006, at 9:08 PM, Jerry Krinock wrote: on 06/11/10 20:05, Dan Shoop at shoop(a)iwiring.net wrote: First you might check to verify that they gave you a admin user by checking to see if it's a member of the admin group. Next you can check that the password they gave you is correct with `chkpasswd`; see it's man page. There are a couple of ways to do this. >From the command line, you can also use: nidump group . | grep \^admin: There's also some good documentation on proper use of the PAM API at: -- Terry _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… The second part (chkpasswd) is easy. Although, as Terry pointed out, chkpasswd asks for the password interactively, in a program I can pipe the password to std in, and it works perfectly: It returns 0 if the password is correct, 1 otherwise. But the first part, getting a list of system admins, has me stumped. I can can see what I want by launching NetInfo Manager. A window named "local@localhost" opens and shows me a database browser. If I browse to groups > admin > users, I see exactly what I want: A list of all the admin users on my Mac!! But how can I get this list on the command line? Hint: NetInfo Manager is probably a GUI for some command-line program or it reads a database file, right? Maybe something to do with netinfod and /etc/netinfo, but where is the door to get in there? The most correct method to enumerate group membership is to call getgrnam() to enumerate the group "admin". However, I recommend against using the command line approach; if you call getgrnam(), then you are guaranteed to work whether or not you are using netinfo or Apple Directory, NIS, NIS+, Active Directory, or some other directory services. Be aware that some directory services do not permit enumeration of group members, or support the concept of a group being a member of a group; if that is the case, then it may not be possible to get a complete answer when you ask the question "who are the admin users?". In general, you won't need an enumeration of groups anyway, since you should specifically be using pam_start(3) with a pointer to your conversation function, followed by pam_authenticate(3) to do the authentication. You really ought to be looking at login.c from the project system_cmds. This is downloadable from the Darwin sources, which can be accessed via <http://opensource.apple.com> using your registered developer login. <http://www.kernel.org/pub/linux/libs/pam/Linux-PAM-html/Linux-PAM_ADG.html > This email sent to site_archiver(a)lists.apple.com

1 0

Re: Administrator password
by Joseph Oreste Bruni 14 Nov '06

14 Nov '06

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com -joe On Nov 13, 2006, at 10:08 PM, Jerry Krinock wrote: _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com Check out nigrep, niutil, nicl, etc. And while you are reading those man pages, try "man -k netinfo". But how can I get this list on the command line? Hint: NetInfo Manager is probably a GUI for some command-line program or it reads a database file, right? Maybe something to do with netinfod and /etc/netinfo, but where is the door to get in there? smime.p7s

1 0

Re: Administrator password
by Jerry Krinock 14 Nov '06

14 Nov '06

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Thread-index: AccHqvFyL7yQ+HOeEduSGAAWy6NyrA== Thread-topic: Administrator password User-agent: Microsoft-Entourage/11.2.5.060620 on 06/11/10 20:05, Dan Shoop at shoop(a)iwiring.net wrote: > First you might check to verify that they gave you a admin user by > checking to see if it's a member of the admin group. > Next you can check that the password they gave you is correct with > `chkpasswd`; see it's man page. The second part (chkpasswd) is easy. Although, as Terry pointed out, chkpasswd asks for the password interactively, in a program I can pipe the password to std in, and it works perfectly: It returns 0 if the password is correct, 1 otherwise. But the first part, getting a list of system admins, has me stumped. I can can see what I want by launching NetInfo Manager. A window named "local@localhost" opens and shows me a database browser. If I browse to groups > admin > users, I see exactly what I want: A list of all the admin users on my Mac!! But how can I get this list on the command line? Hint: NetInfo Manager is probably a GUI for some command-line program or it reads a database file, right? Maybe something to do with netinfod and /etc/netinfo, but where is the door to get in there? Thanks for any tips. Jerry Krinock _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: IOAudioDevice Subclass KEXT not calling initHardware
by Jason Williams 14 Nov '06

14 Nov '06

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:sender:to:subject:in-reply-to:mime-version:content-type:references:x-google-sender-auth; b=GOdRFBqarHWrNAYg2ky5RlHp3h6j5heijcZo7y1QuY3dxLOvvj6fJg8ZkY5tjpiIxmQI8dOn9csHOHfSaWFGamJO3PeAcdogJsqDWyf5DViCeT08K0l2lVep0TrS7qW4tBs8dgU1p1z9iqGfyR1GII9sXUPVZs4B2mMcTb6aHdo= _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: IOAudioDevice Subclass KEXT not calling initHardware
by Jeff Moore 14 Nov '06

14 Nov '06

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com On Nov 13, 2006, at 6:28 PM, Jason Williams wrote: -- Jeff Moore Core Audio Apple _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… First off, the PhantomAudioDriver sample code was obsoleted a while back with the introduction of the AudioReflectorDriver in the CoreAudio SDK. You can find it on an OS X system in /Developer/ Examples/CoreAudio/HAL/AudioReflectorDriver. Also, if you have audio specific questions, as opposed to general kernel development questions, you should check out the CoreAudio-API mailing list on lists.apple.com. All that said, your current problem sounds to me like your driver isn't matching anything and so none of your kext's classes are being instantiated. Your matching information should be in the "IOKitPersonalities" dictionary of your kext's info.plist. Chances are that you lost that info in the shuffle from the original project to your freshly built project. As such, you should check over all the data in the info.plist file just to be sure it got transferred over correctly. Now I posted earlier this month about building the example project for a dummy IOAudioDevice. I got it to build, so I've gone on to the next step which is to build my own modified version. I basically copied most of the code from PhantomAudioDriver, which is what builds and loads, and put in some simple stuff for an example AudioEngine, and built it. I've gotten it as far as building perfectly, so it seems, and loading it into the kernel with kextload. Ran kextload with -t and all looks well. kextstat even shows the driver loaded. Problem is, I put some debug log lines in initHardware in the IOAudioDevice subclass, and nothing is coming out. Nor does my device show up in the audio output pane in system prefs. The difference is that I started with a clean Xcode Kernel EXT project for the new version so I could understand the settings that went into building a KEXT. According to the docs, when the kext is loaded, the start() function on the super class calls initHardware on the subclass. But it seems to not be doing so. Any thoughts/ Ideas/Suggestions on where to look? I'm guessing it's a setting or a something I am just missing, but I made sure I had everything set right like it is on the PhantomAudioDriver, but to no avail. This email sent to site_archiver(a)lists.apple.com

1 0

IOAudioDevice Subclass KEXT not calling initHardware
by Jason Williams 14 Nov '06

14 Nov '06

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:sender:to:subject:mime-version:content-type:x-google-sender-auth; b=gCAX9hAjVY7O/RtNvLrP4uilKI3E1eCAMwuO0i5+Y64VEFX4m0N+3VrI+T+N2VDCFoxwnU7JB20zdVgpwKPZ09ihou4B5HClUiCzz/CRYNeR0TNKHGeWOKWrgUOE0r4Etd3TfIkOYTATlfj0ofpagosplkg8rkTEJMT6Ue6MueU= _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: fpathconf kernel panic
by Terry Lambert 13 Nov '06

13 Nov '06

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com On Nov 11, 2006, at 6:03 PM, Joseph Oreste Bruni wrote: Hi All, Has this bug been filed in radar yet? If not, I'll file it. FWIW, the FreeBSD fix is technically wrong. -- Terry _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… http://projects.info-pull.com/mokb/MOKB-09-11-2006.html EOPNOTSUPP is "operation not supported on socket"; the correct error return value for this case, according to POSIX, is EINVAL. <http://www.opengroup.org/onlinepubs/009695399/functions/ fpathconf.html> It's also much easier to keep doing the right thing if you compile - Werror -Wall, and use an enum value for DTYPE with no "default" case, since then it becomes a compiler error when you define a new one and forget to put it in the switch statement(s). Can't ignore a compiler error... I've been very tempted several times to enum the errno values, too, given all the code I've seen that makes assumptions about what errno values can be returned by what system call; doing that would tend to break all such switch statements that did not have a "default:" clause because there weren't expecting some error that got returned anyway (e.g. such as from a filesystem KEXT, etc.). Yes, I lay awake at night thinking these sorts of things up... 8-). This email sent to site_archiver(a)lists.apple.com

1 0

Re: fpathconf kernel panic
by Quinn 13 Nov '06

13 Nov '06

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Has this bug been filed in radar yet? If not, I'll file it. OK, once more with feeling... Just to be 100% clear, if a bug is affecting you, file it in BugReporter. <http://developer.apple.com/bugreporter/> S+E -- Quinn "The Eskimo!" <http://www.apple.com/developer/> Apple Developer Relations, Developer Technical Support, Core OS/Hardware _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… At 19:03 -0700 11/11/06, Joseph Oreste Bruni wrote: http://projects.info-pull.com/mokb/MOKB-09-11-2006.html At 9:33 +0100 25/9/06, Quinn wrote: Even if you think that it's been previously filed, file it again. Closing duplicates is easy (and the number of duplicates against a bug is, unofficially and to a limited extent, factored into its priority), but fixing bugs we don't know about is hard. This is especially true if you haven't seen a bug number for the bug. If you have a bug number, it's trivial for Apple folks to look up the status of the bug. If you don't have a bug number, it's hard for us to look up the bug and there may not /actually/ be a bug. This email sent to site_archiver(a)lists.apple.com

1 0