diff options
Diffstat (limited to 'source3/include/ads.h')
| -rw-r--r-- | source3/include/ads.h | 154 |
1 files changed, 154 insertions, 0 deletions
diff --git a/source3/include/ads.h b/source3/include/ads.h new file mode 100644 index 0000000..8085543 --- /dev/null +++ b/source3/include/ads.h @@ -0,0 +1,154 @@ +#ifndef _INCLUDE_ADS_H_ +#define _INCLUDE_ADS_H_ +/* + header for ads (active directory) library routines + + basically this is a wrapper around ldap +*/ + +#include "libads/ads_status.h" +#include "smb_ldap.h" + +struct ads_saslwrap; + +struct ads_saslwrap_ops { + const char *name; + ADS_STATUS (*wrap)(struct ads_saslwrap *, uint8_t *buf, uint32_t len); + ADS_STATUS (*unwrap)(struct ads_saslwrap *); + void (*disconnect)(struct ads_saslwrap *); +}; + +enum ads_saslwrap_type { + ADS_SASLWRAP_TYPE_PLAIN = 1, + ADS_SASLWRAP_TYPE_SIGN = 2, + ADS_SASLWRAP_TYPE_SEAL = 4 +}; + +struct ads_saslwrap { + /* expected SASL wrapping type */ + enum ads_saslwrap_type wrap_type; + /* SASL wrapping operations */ + const struct ads_saslwrap_ops *wrap_ops; +#ifdef HAVE_LDAP_SASL_WRAPPING + Sockbuf_IO_Desc *sbiod; /* lowlevel state for LDAP wrapping */ +#endif /* HAVE_LDAP_SASL_WRAPPING */ + TALLOC_CTX *mem_ctx; + void *wrap_private_data; + struct { + uint32_t ofs; + uint32_t needed; + uint32_t left; +#define ADS_SASL_WRAPPING_IN_MAX_WRAPPED 0x0FFFFFFF + uint32_t max_wrapped; + uint32_t min_wrapped; + uint32_t size; + uint8_t *buf; + } in; + struct { + uint32_t ofs; + uint32_t left; +#define ADS_SASL_WRAPPING_OUT_MAX_WRAPPED 0x00A00000 + uint32_t max_unwrapped; + uint32_t sig_size; + uint32_t size; + uint8_t *buf; + } out; +}; + +typedef struct ads_struct { + /* info needed to find the server */ + struct { + char *realm; + char *workgroup; + char *ldap_server; + bool gc; /* Is this a global catalog server? */ + bool no_fallback; /* Bail if the ldap_server is not available */ + } server; + + /* info needed to authenticate */ + struct { + char *realm; + char *password; + char *user_name; + char *kdc_server; + unsigned flags; + int time_offset; + char *ccache_name; + time_t tgt_expire; + time_t tgs_expire; + time_t renewable; + } auth; + + /* info derived from the servers config */ + struct { + uint32_t flags; /* cldap flags identifying the services. */ + char *realm; + char *bind_path; + char *ldap_server_name; + char *server_site_name; + char *client_site_name; + time_t current_time; + char *schema_path; + char *config_path; + int ldap_page_size; + } config; + + /* info about the current LDAP connection */ +#ifdef HAVE_LDAP + struct ads_saslwrap ldap_wrap_data; + struct { + LDAP *ld; + struct sockaddr_storage ss; /* the ip of the active connection, if any */ + time_t last_attempt; /* last attempt to reconnect, monotonic clock */ + int port; + } ldap; +#endif /* HAVE_LDAP */ +} ADS_STRUCT; + +#ifdef HAVE_ADS +typedef LDAPMod **ADS_MODLIST; +#else +typedef void **ADS_MODLIST; +#endif + +/* time between reconnect attempts */ +#define ADS_RECONNECT_TIME 5 + +/* ldap control oids */ +#define ADS_PAGE_CTL_OID "1.2.840.113556.1.4.319" +#define ADS_NO_REFERRALS_OID "1.2.840.113556.1.4.1339" +#define ADS_SERVER_SORT_OID "1.2.840.113556.1.4.473" +#define ADS_PERMIT_MODIFY_OID "1.2.840.113556.1.4.1413" +#define ADS_ASQ_OID "1.2.840.113556.1.4.1504" +#define ADS_EXTENDED_DN_OID "1.2.840.113556.1.4.529" +#define ADS_SD_FLAGS_OID "1.2.840.113556.1.4.801" + +/* ldap bitwise searches */ +#define ADS_LDAP_MATCHING_RULE_BIT_AND "1.2.840.113556.1.4.803" +#define ADS_LDAP_MATCHING_RULE_BIT_OR "1.2.840.113556.1.4.804" + +#define ADS_PINGS 0x0000FFFF /* Ping response */ + +enum ads_extended_dn_flags { + ADS_EXTENDED_DN_HEX_STRING = 0, + ADS_EXTENDED_DN_STRING = 1 /* not supported on win2k */ +}; + +/* this is probably not very well suited to pass other controls generically but + * is good enough for the extended dn control where it is only used for atm */ + +typedef struct { + const char *control; + int val; + int critical; +} ads_control; + +#include "libads/ads_proto.h" + +#ifdef HAVE_LDAP +#include "libads/ads_ldap_protos.h" +#endif + +#include "libads/kerberos_proto.h" + +#endif /* _INCLUDE_ADS_H_ */ |