source: branches/samba-3.3.x/source/include/smbldap.h

Last change on this file was 370, checked in by Herwig Bauernfeind, 16 years ago

Update Samba 3.3 to 3.3.10 (source)
File size: 7.4 KB
RevLine 
[274]1/*
2 Unix SMB/CIFS mplementation.
3 LDAP protocol helper functions for SAMBA
4 Copyright (C) Gerald Carter 2001-2003
5
6 This program is free software; you can redistribute it and/or modify
7 it under the terms of the GNU General Public License as published by
8 the Free Software Foundation; either version 3 of the License, or
9 (at your option) any later version.
10
11 This program is distributed in the hope that it will be useful,
12 but WITHOUT ANY WARRANTY; without even the implied warranty of
13 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 GNU General Public License for more details.
15
16 You should have received a copy of the GNU General Public License
17 along with this program. If not, see <http://www.gnu.org/licenses/>.
18
19*/
20
21#ifndef _SMBLDAP_H
22#define _SMBLDAP_H
23
24struct smbldap_state;
25
26#ifdef HAVE_LDAP
27
28/* specify schema versions between 2.2. and 3.0 */
29
30#define SCHEMAVER_SAMBAACCOUNT 1
31#define SCHEMAVER_SAMBASAMACCOUNT 2
32
33/* objectclass names */
34
35#define LDAP_OBJ_SAMBASAMACCOUNT "sambaSamAccount"
36#define LDAP_OBJ_SAMBAACCOUNT "sambaAccount"
37#define LDAP_OBJ_GROUPMAP "sambaGroupMapping"
38#define LDAP_OBJ_DOMINFO "sambaDomain"
39#define LDAP_OBJ_IDPOOL "sambaUnixIdPool"
40#define LDAP_OBJ_IDMAP_ENTRY "sambaIdmapEntry"
41#define LDAP_OBJ_SID_ENTRY "sambaSidEntry"
42#define LDAP_OBJ_TRUST_PASSWORD "sambaTrustPassword"
43#define LDAP_OBJ_TRUSTDOM_PASSWORD "sambaTrustedDomainPassword"
44
45#define LDAP_OBJ_ACCOUNT "account"
46#define LDAP_OBJ_POSIXACCOUNT "posixAccount"
47#define LDAP_OBJ_POSIXGROUP "posixGroup"
48#define LDAP_OBJ_OU "organizationalUnit"
49
50/* some generic attributes that get reused a lot */
51
52#define LDAP_ATTRIBUTE_SID "sambaSID"
53#define LDAP_ATTRIBUTE_UIDNUMBER "uidNumber"
54#define LDAP_ATTRIBUTE_GIDNUMBER "gidNumber"
55#define LDAP_ATTRIBUTE_SID_LIST "sambaSIDList"
56
57/* attribute map table indexes */
58
59#define LDAP_ATTR_LIST_END 0
60#define LDAP_ATTR_UID 1
61#define LDAP_ATTR_UIDNUMBER 2
62#define LDAP_ATTR_GIDNUMBER 3
63#define LDAP_ATTR_UNIX_HOME 4
64#define LDAP_ATTR_PWD_LAST_SET 5
65#define LDAP_ATTR_PWD_CAN_CHANGE 6
66#define LDAP_ATTR_PWD_MUST_CHANGE 7
67#define LDAP_ATTR_LOGON_TIME 8
68#define LDAP_ATTR_LOGOFF_TIME 9
69#define LDAP_ATTR_KICKOFF_TIME 10
70#define LDAP_ATTR_CN 11
71#define LDAP_ATTR_DISPLAY_NAME 12
72#define LDAP_ATTR_HOME_PATH 13
73#define LDAP_ATTR_LOGON_SCRIPT 14
74#define LDAP_ATTR_PROFILE_PATH 15
75#define LDAP_ATTR_DESC 16
76#define LDAP_ATTR_USER_WKS 17
77#define LDAP_ATTR_USER_SID 18
78#define LDAP_ATTR_USER_RID 18
79#define LDAP_ATTR_PRIMARY_GROUP_SID 19
80#define LDAP_ATTR_PRIMARY_GROUP_RID 20
81#define LDAP_ATTR_LMPW 21
82#define LDAP_ATTR_NTPW 22
83#define LDAP_ATTR_DOMAIN 23
84#define LDAP_ATTR_OBJCLASS 24
85#define LDAP_ATTR_ACB_INFO 25
86#define LDAP_ATTR_NEXT_USERRID 26
87#define LDAP_ATTR_NEXT_GROUPRID 27
88#define LDAP_ATTR_DOM_SID 28
89#define LDAP_ATTR_HOME_DRIVE 29
90#define LDAP_ATTR_GROUP_SID 30
91#define LDAP_ATTR_GROUP_TYPE 31
92#define LDAP_ATTR_SID 32
93#define LDAP_ATTR_ALGORITHMIC_RID_BASE 33
94#define LDAP_ATTR_NEXT_RID 34
95#define LDAP_ATTR_BAD_PASSWORD_COUNT 35
96#define LDAP_ATTR_LOGON_COUNT 36
97#define LDAP_ATTR_MUNGED_DIAL 37
98#define LDAP_ATTR_BAD_PASSWORD_TIME 38
99#define LDAP_ATTR_PWD_HISTORY 39
100#define LDAP_ATTR_SID_LIST 40
101#define LDAP_ATTR_MOD_TIMESTAMP 41
102#define LDAP_ATTR_LOGON_HOURS 42
103#define LDAP_ATTR_TRUST_PASSWD_FLAGS 43
104#define LDAP_ATTR_SN 44
105
106
107typedef struct _attrib_map_entry {
108 int attrib;
109 const char *name;
110} ATTRIB_MAP_ENTRY;
111
112
113/* structures */
114
115extern ATTRIB_MAP_ENTRY attrib_map_v22[];
116extern ATTRIB_MAP_ENTRY attrib_map_to_delete_v22[];
117extern ATTRIB_MAP_ENTRY attrib_map_v30[];
118extern ATTRIB_MAP_ENTRY attrib_map_to_delete_v30[];
119extern ATTRIB_MAP_ENTRY dominfo_attr_list[];
120extern ATTRIB_MAP_ENTRY groupmap_attr_list[];
121extern ATTRIB_MAP_ENTRY groupmap_attr_list_to_delete[];
122extern ATTRIB_MAP_ENTRY idpool_attr_list[];
123extern ATTRIB_MAP_ENTRY sidmap_attr_list[];
124extern ATTRIB_MAP_ENTRY trustpw_attr_list[];
125
126
127/* Function declarations -- not included in proto.h so we don't
128 have to worry about LDAP structure types */
129
130NTSTATUS smbldap_init(TALLOC_CTX *mem_ctx,
131 struct event_context *event_ctx,
132 const char *location,
133 struct smbldap_state **smbldap_state);
134
135const char* get_attr_key2string( ATTRIB_MAP_ENTRY table[], int key );
136const char** get_attr_list( TALLOC_CTX *mem_ctx, ATTRIB_MAP_ENTRY table[] );
137void smbldap_set_mod (LDAPMod *** modlist, int modop, const char *attribute, const char *value);
138void smbldap_make_mod(LDAP *ldap_struct, LDAPMessage *existing,
139 LDAPMod ***mods,
140 const char *attribute, const char *newval);
141bool smbldap_get_single_attribute (LDAP * ldap_struct, LDAPMessage * entry,
142 const char *attribute, char *value,
143 int max_len);
144char *smbldap_get_dn(LDAP *ld, LDAPMessage *entry);
145int smbldap_modify(struct smbldap_state *ldap_state,
146 const char *dn,
147 LDAPMod *attrs[]);
148
149/**
150 * Struct to keep the state for all the ldap stuff
151 *
152 */
153
154struct smbldap_state {
155 LDAP *ldap_struct;
156 pid_t pid;
157 time_t last_ping;
158 /* retrive-once info */
159 const char *uri;
160
161 /* credentials */
162 bool anonymous;
163 char *bind_dn;
164 char *bind_secret;
165
166 bool paged_results;
167
168 unsigned int num_failures;
169
170 time_t last_use;
171 struct event_context *event_context;
172 struct timed_event *idle_event;
173
174 struct timeval last_rebind;
175};
176
177/* struct used by both pdb_ldap.c and pdb_nds.c */
178
179struct ldapsam_privates {
180 struct smbldap_state *smbldap_state;
181
182 /* Former statics */
183 LDAPMessage *result;
184 LDAPMessage *entry;
185 int index;
186
187 const char *domain_name;
188 DOM_SID domain_sid;
189
190 /* configuration items */
191 int schema_ver;
192
193 char *domain_dn;
194
195 /* Is this NDS ldap? */
196 int is_nds_ldap;
197
198 /* ldap server location parameter */
199 char *location;
200};
201
202/* Functions shared between pdb_ldap.c and pdb_nds.c. */
203NTSTATUS pdb_init_ldapsam_compat( struct pdb_methods **pdb_method, const char *location);
204void private_data_free_fn(void **result);
205int ldapsam_search_suffix_by_name(struct ldapsam_privates *ldap_state,
206 const char *user,
207 LDAPMessage ** result,
208 const char **attr);
209NTSTATUS pdb_init_ldapsam( struct pdb_methods **pdb_method, const char *location);
210const char** get_userattr_list( TALLOC_CTX *mem_ctx, int schema_ver );
211
212char * smbldap_talloc_single_attribute(LDAP *ldap_struct, LDAPMessage *entry,
213 const char *attribute,
214 TALLOC_CTX *mem_ctx);
[370]215char * smbldap_talloc_first_attribute(LDAP *ldap_struct, LDAPMessage *entry,
216 const char *attribute,
217 TALLOC_CTX *mem_ctx);
[274]218char * smbldap_talloc_smallest_attribute(LDAP *ldap_struct, LDAPMessage *entry,
219 const char *attribute,
220 TALLOC_CTX *mem_ctx);
221void talloc_autofree_ldapmsg(TALLOC_CTX *mem_ctx, LDAPMessage *result);
222void talloc_autofree_ldapmod(TALLOC_CTX *mem_ctx, LDAPMod **mod);
223const char *smbldap_talloc_dn(TALLOC_CTX *mem_ctx, LDAP *ld,
224 LDAPMessage *entry);
225
226
227#else
228#define LDAP void
229#define LDAPMod void
230#define LDAP_CONST const
231#define LDAPControl void
232struct berval;
233struct ldapsam_privates;
234#endif /* HAVE_LDAP */
235
236#define LDAP_DEFAULT_TIMEOUT 15
237#define LDAP_CONNECTION_DEFAULT_TIMEOUT 2
238#define LDAP_PAGE_SIZE 1024
239
240#endif /* _SMBLDAP_H */
Note: See TracBrowser for help on using the repository browser.