NAME

       dpns_getidmap - get virtual uid/gid(s) associated with a given dn/role(s)

SYNOPSIS

       #include <sys/types.h>
       #include "dpns_api.h"

       int  dpns_getidmap  (const  char  *username,  int nbgroups, const char **groupnames, uid_t
       *userid, gid_t *gids)

       int dpns_getidmapc (const char *username, const char *user_ca, int  nbgroups,  const  char
       **groupnames, uid_t *userid, gid_t *gids)

DESCRIPTION

       dpns_getidmap  gets  the virtual uid/gid(s) associated with a given dn/role(s).  If the dn
       or any of the roles does not exist yet in the Database an entry is added  to  the  mapping
       table.

       username
              specifies the user name (dn).  It must be at most 255 characters long.

       user_ca
              specifies the CA from the user proxy.  It must be at most 255 characters long.

       nbgroups
              is the number of group names.

       groupnames
              is  the  address  of an array of group names (vo/role).  Each group name must be at
              most 255 characters long.  This pointer can be  NULL.   In  this  case  the  vo  is
              obtained from a static mapping file.

       userid specifies the address of a buffer to receive the Virtual User Id.

       gids   specifies the address of a buffer to receive the Virtual Group Ids.  It must be big
              enough to receive nbgroups group ids, but at least one group id in case nbgroups is
              zero.

RETURN VALUE

       This  routine  returns 0 if the operation was successful or -1 if the operation failed. In
       the latter case, serrno is set appropriately.

ERRORS

       ENOMEM       Memory could not be allocated in the server to receive the group names or  to
                    send back the gids.

       EACCES       One of username, user_ca or the primary (first) group is banned.

       EFAULT       username, userid or gids is a NULL pointer.

       EINVAL       nbgroups  is  negative  or  the  length of username, user_ca or of one of the
                    group names exceeds 255.

       SENOSHOST    Host unknown.

       SENOSSERV    Service unknown.

       SECOMERR     Communication error.

       SENOMAPFND   DISABLEAUTOVIDS is set and username or one of the groups does not exist.

       ENSNACT      Name server is not running or is being shutdown.