| 1 | /*
|
|---|
| 2 | Samba CIFS implementation
|
|---|
| 3 | ADS convenience functions for GPO
|
|---|
| 4 |
|
|---|
| 5 | Copyright (C) 2008 Jelmer Vernooij, jelmer@samba.org
|
|---|
| 6 | Copyright (C) 2008 Wilco Baan Hofman, wilco@baanhofman.nl
|
|---|
| 7 |
|
|---|
| 8 | This program is free software; you can redistribute it and/or modify
|
|---|
| 9 | it under the terms of the GNU General Public License as published by
|
|---|
| 10 | the Free Software Foundation; either version 3 of the License, or
|
|---|
| 11 | (at your option) any later version.
|
|---|
| 12 |
|
|---|
| 13 | This program is distributed in the hope that it will be useful,
|
|---|
| 14 | but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|---|
| 15 | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|---|
| 16 | GNU General Public License for more details.
|
|---|
| 17 |
|
|---|
| 18 | You should have received a copy of the GNU General Public License
|
|---|
| 19 | along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|---|
| 20 | */
|
|---|
| 21 |
|
|---|
| 22 | #ifndef __ADS_CONVENIENCE_H__
|
|---|
| 23 | #define __ADS_CONVENIENCE_H__
|
|---|
| 24 |
|
|---|
| 25 | #include "librpc/gen_ndr/security.h"
|
|---|
| 26 |
|
|---|
| 27 | #define ADS_ERR_OK(status) ((status.error_type == ENUM_ADS_ERROR_NT) ? NT_STATUS_IS_OK(status.err.nt_status):(status.err.rc == 0))
|
|---|
| 28 | #define ADS_ERROR(rc) ads_build_ldap_error(rc)
|
|---|
| 29 | #define ADS_ERROR_NT(rc) ads_build_nt_error(rc)
|
|---|
| 30 | #define ADS_SUCCESS ADS_ERROR(0)
|
|---|
| 31 |
|
|---|
| 32 | #define ADS_ERROR_HAVE_NO_MEMORY(x) do { \
|
|---|
| 33 | if (!(x)) {\
|
|---|
| 34 | return ADS_ERROR_NT(NT_STATUS_NO_MEMORY);\
|
|---|
| 35 | }\
|
|---|
| 36 | } while (0)
|
|---|
| 37 |
|
|---|
| 38 | #define LDAP_SCOPE_BASE LDB_SCOPE_BASE
|
|---|
| 39 | #define LDAP_SCOPE_SUBTREE LDB_SCOPE_SUBTREE
|
|---|
| 40 | #define LDAP_SCOPE_ONELEVEL LDB_SCOPE_ONELEVEL
|
|---|
| 41 |
|
|---|
| 42 |
|
|---|
| 43 |
|
|---|
| 44 |
|
|---|
| 45 | typedef struct {
|
|---|
| 46 | struct libnet_context *netctx;
|
|---|
| 47 | struct ldb_context *ldbctx;
|
|---|
| 48 | char *ldap_server_name;
|
|---|
| 49 |
|
|---|
| 50 | /* State information for the smb connection */
|
|---|
| 51 | struct cli_credentials *credentials;
|
|---|
| 52 | struct smbcli_state *cli;
|
|---|
| 53 | } ADS_STRUCT;
|
|---|
| 54 |
|
|---|
| 55 |
|
|---|
| 56 | typedef struct security_token NT_USER_TOKEN;
|
|---|
| 57 |
|
|---|
| 58 | typedef struct ldb_result LDAPMessage;
|
|---|
| 59 | typedef void ** ADS_MODLIST;
|
|---|
| 60 |
|
|---|
| 61 | /* there are 3 possible types of errors the ads subsystem can produce */
|
|---|
| 62 | enum ads_error_type { ENUM_ADS_ERROR_LDAP, ENUM_ADS_ERROR_SYSTEM, ENUM_ADS_ERROR_NT};
|
|---|
| 63 |
|
|---|
| 64 | typedef struct {
|
|---|
| 65 | enum ads_error_type error_type;
|
|---|
| 66 | union err_state{
|
|---|
| 67 | int rc;
|
|---|
| 68 | NTSTATUS nt_status;
|
|---|
| 69 | } err;
|
|---|
| 70 | int minor_status;
|
|---|
| 71 | } ADS_STATUS;
|
|---|
| 72 |
|
|---|
| 73 |
|
|---|
| 74 | /* Prototypes from ads_convenience.c */
|
|---|
| 75 | ADS_STATUS ads_build_nt_error(NTSTATUS);
|
|---|
| 76 | ADS_STATUS ads_build_ldap_error(int);
|
|---|
| 77 |
|
|---|
| 78 | ADS_STATUS ads_startup (struct libnet_context *netctx, ADS_STRUCT **ads);
|
|---|
| 79 | const char *ads_errstr(ADS_STATUS status);
|
|---|
| 80 | const char * ads_get_dn(ADS_STRUCT *ads, LDAPMessage *res);
|
|---|
| 81 | bool ads_pull_sd(ADS_STRUCT *ads, TALLOC_CTX *ctx, LDAPMessage *res, const char *field, struct security_descriptor **sd);
|
|---|
| 82 | const char * ads_pull_string(ADS_STRUCT *ads, TALLOC_CTX *ctx, LDAPMessage *res, const char *field);
|
|---|
| 83 | bool ads_pull_uint32(ADS_STRUCT *ads, LDAPMessage *res, const char *field, uint32_t *ret);
|
|---|
| 84 | int ads_count_replies(ADS_STRUCT *ads, LDAPMessage *res);
|
|---|
| 85 | ADS_STATUS ads_do_search_all_sd_flags (ADS_STRUCT *ads, const char *dn, int scope,
|
|---|
| 86 | const char *filter, const char **attrs,
|
|---|
| 87 | uint32_t sd_flags, LDAPMessage **res);
|
|---|
| 88 | ADS_STATUS ads_search_dn(ADS_STRUCT *ads, LDAPMessage **res,
|
|---|
| 89 | const char *dn, const char **attrs);
|
|---|
| 90 | ADS_STATUS ads_search_retry_dn_sd_flags(ADS_STRUCT *ads, LDAPMessage **res, uint32_t sd_flags,
|
|---|
| 91 | const char *dn, const char **attrs);
|
|---|
| 92 | ADS_STATUS ads_msgfree(ADS_STRUCT *ads, LDAPMessage *res);
|
|---|
| 93 | NTSTATUS ads_ntstatus(ADS_STATUS status);
|
|---|
| 94 | ADS_STATUS ads_build_ldap_error(int ldb_error);
|
|---|
| 95 | ADS_STATUS ads_build_nt_error(NTSTATUS nt_status);
|
|---|
| 96 | bool nt_token_check_sid( const struct dom_sid *sid, const NT_USER_TOKEN *token);
|
|---|
| 97 | ADS_MODLIST ads_init_mods(TALLOC_CTX *ctx);
|
|---|
| 98 | ADS_STATUS ads_mod_str(TALLOC_CTX *ctx, ADS_MODLIST *mods, const char *name, const char *val);
|
|---|
| 99 | ADS_STATUS ads_gen_mod(ADS_STRUCT *ads, const char *mod_dn, ADS_MODLIST mods);
|
|---|
| 100 | const char *ads_get_ldap_server_name(ADS_STRUCT *ads);
|
|---|
| 101 |
|
|---|
| 102 |
|
|---|
| 103 | #endif
|
|---|