LFC_GETIDMAP(3) 					       LFC Library Functions						   LFC_GETIDMAP(3)

NAME

       lfc_getidmap - get virtual uid/gid(s) associated with a given dn/role(s)

SYNOPSIS

       #include <sys/types.h>
       #include "lfc_api.h"

       int lfc_getidmap (const char *username, int nbgroups, const char **groupnames, uid_t *userid, gid_t *gids)

       int lfc_getidmapc (const char *username, const char *user_ca, int nbgroups, const char **groupnames, uid_t *userid, gid_t *gids)

DESCRIPTION

       lfc_getidmap gets the virtual uid/gid(s) associated with a given dn/role(s).  If the dn or any of the roles does not exist yet in the Data-
       base an entry is added to the mapping table.

       username
	      specifies the user name (dn).  It must be at most 255 characters long.

       user_ca
	      specifies the CA from the user proxy.  It must be at most 255 characters long.

       nbgroups
	      is the number of group names.

       groupnames
	      is the address of an array of group names (vo/role).  Each group name must be at most 255 characters  long.   This  pointer  can	be
	      NULL.  In this case the vo is obtained from a static mapping file.

       userid specifies the address of a buffer to receive the Virtual User Id.

       gids   specifies  the  address  of  a buffer to receive the Virtual Group Ids.  It must be big enough to receive nbgroups group ids, but at
	      least one group id in case nbgroups is zero.

RETURN VALUE

       This routine returns 0 if the operation was successful or -1 if the operation failed. In the latter case, serrno is set appropriately.

ERRORS

       ENOMEM	    Memory could not be allocated in the server to receive the group names or to send back the gids.

       EACCES	    One of username, user_ca or the primary (first) group is banned.

       EFAULT	    username, userid or gids is a NULL pointer.

       EINVAL	    nbgroups is negative or the length of username, user_ca or of one of the group names exceeds 255.

       SENOSHOST    Host unknown.

       SENOSSERV    Service unknown.

       SECOMERR     Communication error.

       SENOMAPFND   DISABLEAUTOVIDS is set and username or one of the groups does not exist.

       ENSNACT	    Name server is not running or is being shutdown.

LFC
					       $Date: 2010-08-04 09:58:47 +0200 (Wed, 04 Aug 2010) $				   LFC_GETIDMAP(3)