blob: a56aa8f8c4a15821413db4dacf9d65a4f46caff6 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
|
/*
Unix SMB/CIFS implementation.
LDAP server
Copyright (C) Volker Lendecke 2004
Copyright (C) Stefan Metzmacher 2004
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation; either version 3 of the License, or
(at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program. If not, see <http://www.gnu.org/licenses/>.
*/
#include "libcli/ldap/libcli_ldap.h"
#include "lib/socket/socket.h"
#include "lib/stream/packet.h"
#include "system/network.h"
#include "lib/param/loadparm.h"
enum ldap_server_referral_scheme {
LDAP_REFERRAL_SCHEME_LDAP,
LDAP_REFERRAL_SCHEME_LDAPS
};
struct ldapsrv_connection {
struct ldapsrv_connection *next, *prev;
struct loadparm_context *lp_ctx;
struct stream_connection *connection;
struct gensec_security *gensec;
struct auth_session_info *session_info;
struct ldapsrv_service *service;
struct cli_credentials *server_credentials;
struct ldb_context *ldb;
struct {
struct tevent_queue *send_queue;
struct tevent_req *read_req;
struct tstream_context *raw;
struct tstream_context *tls;
struct tstream_context *sasl;
struct tstream_context *active;
} sockets;
bool global_catalog;
bool is_privileged;
enum ldap_server_require_strong_auth require_strong_auth;
bool authz_logged;
enum ldap_server_referral_scheme referral_scheme;
struct {
int initial_timeout;
int conn_idle_time;
int max_page_size;
int max_notifications;
int search_timeout;
struct timeval endtime;
struct timeval expire_time; /* Krb5 ticket expiry */
const char *reason;
} limits;
struct tevent_req *active_call;
struct tevent_req *deferred_expire_disconnect;
struct ldapsrv_call *pending_calls;
};
struct ldapsrv_call {
struct ldapsrv_call *prev, *next;
struct ldapsrv_connection *conn;
struct ldap_message *request;
struct ldapsrv_reply {
struct ldapsrv_reply *prev, *next;
struct ldap_message *msg;
DATA_BLOB blob;
} *replies;
struct iovec *out_iov;
size_t iov_count;
size_t reply_size;
struct tevent_req *(*wait_send)(TALLOC_CTX *mem_ctx,
struct tevent_context *ev,
void *private_data);
NTSTATUS (*wait_recv)(struct tevent_req *req);
void *wait_private;
struct tevent_req *(*postprocess_send)(TALLOC_CTX *mem_ctx,
struct tevent_context *ev,
void *private_data);
NTSTATUS (*postprocess_recv)(struct tevent_req *req);
void *postprocess_private;
struct {
bool busy;
uint64_t generation;
} notification;
};
/*
* This matches the previous implicit size limit via talloc's maximum
* allocation size
*/
#define LDAP_SERVER_MAX_REPLY_SIZE ((size_t)(256 * 1024 * 1024))
/*
* Start writing to the network before we hit this size
*/
#define LDAP_SERVER_MAX_CHUNK_SIZE ((size_t)(25 * 1024 * 1024))
struct ldapsrv_service {
const char *dns_host_name;
pid_t parent_pid;
struct tstream_tls_params *tls_params;
struct tevent_queue *call_queue;
struct ldapsrv_connection *connections;
struct {
uint64_t generation;
struct tevent_req *retry;
} notification;
struct loadparm_context *lp_ctx;
struct tevent_context *current_ev;
struct imessaging_context *current_msg;
struct ldb_context *sam_ctx;
};
#include "ldap_server/proto.h"
|
