-
Notifications
You must be signed in to change notification settings - Fork 7
/
util.h
243 lines (211 loc) · 8.08 KB
/
util.h
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
/* Copyright (C) 1997-2005 Luke Howard.
This file is part of the nss_ldap library.
Contributed by Luke Howard, <[email protected]>, 1997.
(The author maintains a non-exclusive licence to distribute this file
under their own conditions.)
The nss_ldap library is free software; you can redistribute it and/or
modify it under the terms of the GNU Library General Public License as
published by the Free Software Foundation; either version 2 of the
License, or (at your option) any later version.
The nss_ldap library is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
Library General Public License for more details.
You should have received a copy of the GNU Library General Public
License along with the nss_ldap library; see the file COPYING.LIB. If not,
write to the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
Boston, MA 02111-1307, USA.
*/
#ifndef _LDAP_NSS_LDAP_UTIL_H
#define _LDAP_NSS_LDAP_UTIL_H
/* utility routines. */
#define CN_ATTR "CN"
#define DC_ATTR "DC"
#define DC_ATTR_AVA DC_ATTR"="
#define DC_ATTR_AVA_LEN (sizeof(DC_ATTR_AVA) - 1)
/*
* get the RDN's value: eg. if the RDN was cn=lukeh, getrdnvalue(entry)
* would return lukeh.
*/
NSS_STATUS _nss_ldap_getrdnvalue (LDAPMessage * entry,
const char *rdntype,
char **rval, char **buf, size_t * len);
/*
* map a distinguished name to a login name, or group entry
*/
NSS_STATUS _nss_ldap_dn2uid (const char *dn,
char **uid, char **buf, size_t * len,
int *pIsNestedGroup, LDAPMessage ** pRes);
#define NSS_LDAP_KEY_MAP_ATTRIBUTE "nss_map_attribute"
#define NSS_LDAP_KEY_MAP_OBJECTCLASS "nss_map_objectclass"
#define NSS_LDAP_KEY_SET_OVERRIDE "nss_override_attribute_value"
#define NSS_LDAP_KEY_SET_DEFAULT "nss_default_attribute_value"
#define NSS_LDAP_KEY_MATCHING_RULE "nss_matching_rule"
#define NSS_LDAP_CONFIG_BUFSIZ 4096
#define NSS_LDAP_KEY_HOST "host"
#define NSS_LDAP_KEY_SCOPE "scope"
#define NSS_LDAP_KEY_BASE "base"
#define NSS_LDAP_KEY_PORT "port"
#define NSS_LDAP_KEY_BINDDN "binddn"
#define NSS_LDAP_KEY_BINDPW "bindpw"
#define NSS_LDAP_KEY_USESASL "use_sasl"
#define NSS_LDAP_KEY_SASLID "sasl_auth_id"
#define NSS_LDAP_KEY_DEREF "deref"
#define NSS_LDAP_KEY_ROOTBINDDN "rootbinddn"
#define NSS_LDAP_KEY_ROOTUSESASL "rootuse_sasl"
#define NSS_LDAP_KEY_ROOTSASLID "rootsasl_auth_id"
#define NSS_LDAP_KEY_LDAP_VERSION "ldap_version"
#define NSS_LDAP_KEY_TIMELIMIT "timelimit"
#define NSS_LDAP_KEY_BIND_TIMELIMIT "bind_timelimit"
#define NSS_LDAP_KEY_SSL "ssl"
#define NSS_LDAP_KEY_SSLPATH "sslpath"
#define NSS_LDAP_KEY_REFERRALS "referrals"
#define NSS_LDAP_KEY_RESTART "restart"
#define NSS_LDAP_KEY_URI "uri"
#define NSS_LDAP_KEY_IDLE_TIMELIMIT "idle_timelimit"
#define NSS_LDAP_KEY_RECONNECT_POLICY "bind_policy"
#define NSS_LDAP_KEY_SASL_SECPROPS "sasl_secprops"
#if defined(CONFIGURE_KRB5_CCNAME) || defined(CONFIGURE_KRB5_KEYTAB)
#define NSS_LDAP_KEY_KRB5_CCNAME "krb5_ccname"
#define NSS_LDAP_KEY_KRB5_ROOTCCNAME "krb5_rootccname"
#define NSS_LDAP_KEY_KRB5_AUTORENEW "krb5_autorenew"
#define NSS_LDAP_KEY_KRB5_ROOTAUTORENEW "krb5_rootautorenew"
#endif /* CONFIGURE_KRB5_CCNAME */
#ifdef CONFIGURE_KRB5_KEYTAB
#define NSS_LDAP_KEY_KRB5_KEYTAB "krb5_keytabname"
#define NSS_LDAP_KEY_KRB5_ROOTKEYTAB "krb5_rootkeytabname"
#define NSS_LDAP_KEY_KRB5_USEKEYTAB "krb5_usekeytab"
#define NSS_LDAP_KEY_KRB5_ROOTUSEKEYTAB "krb5_rootusekeytab"
#endif /* CONFIGURE_KRB5_KEYTAB */
#define NSS_LDAP_KEY_LOGDIR "logdir"
#define NSS_LDAP_KEY_DEBUG "debug"
#define NSS_LDAP_KEY_PAGESIZE "pagesize"
#define NSS_LDAP_KEY_INITGROUPS "nss_initgroups"
#define NSS_LDAP_KEY_ENTRYDN "nss_entrydn"
#define NSS_LDAP_KEY_INITGROUPS_IGNOREUSERS "nss_initgroups_ignoreusers"
#define NSS_LDAP_KEY_GETGRENT_SKIPMEMBERS "nss_getgrent_skipmembers"
/* more reconnect policy fine-tuning */
#define NSS_LDAP_KEY_RECONNECT_TRIES "nss_reconnect_tries"
#define NSS_LDAP_KEY_RECONNECT_SLEEPTIME "nss_reconnect_sleeptime"
#define NSS_LDAP_KEY_RECONNECT_MAXSLEEPTIME "nss_reconnect_maxsleeptime"
#define NSS_LDAP_KEY_RECONNECT_MAXCONNTRIES "nss_reconnect_maxconntries"
#define NSS_LDAP_KEY_PAGED_RESULTS "nss_paged_results"
#define NSS_LDAP_KEY_SCHEMA "nss_schema"
#define NSS_LDAP_KEY_SRV_DOMAIN "nss_srv_domain"
#define NSS_LDAP_KEY_SRV_SITE "nss_srv_site"
#define NSS_LDAP_KEY_CONNECT_POLICY "nss_connect_policy"
/*
* support separate naming contexts for each map
* eventually this will support the syntax defined in
* the DUAConfigProfile searchDescriptor attribute
*/
#define NSS_LDAP_KEY_NSS_BASE_PREFIX "nss_base_"
#define NSS_LDAP_KEY_NSS_BASE_PREFIX_LEN ( sizeof(NSS_LDAP_KEY_NSS_BASE_PREFIX) - 1 )
/*
* Flags that are exposed via _nss_ldap_test_config_flag()
*/
#define NSS_LDAP_FLAGS_INITGROUPS_BACKLINK 0x0001
#define NSS_LDAP_FLAGS_PAGED_RESULTS 0x0002
#define NSS_LDAP_FLAGS_RFC2307BIS 0x0004
#define NSS_LDAP_FLAGS_CONNECT_POLICY_ONESHOT 0x0008
#define NSS_LDAP_FLAGS_GETGRENT_SKIPMEMBERS 0x0010
/*
* There are a number of means of obtaining configuration information.
*
* (a) DHCP (Cf draft-hedstrom-dhc-ldap-00.txt)
* (b) a configuration file (/etc/ldap.conf) **
* (c) a coldstart file & subsequent referrals from the LDAP server
* (d) a custom LDAP bind protocol
* (e) DNS **
*
* This should be opaque to the rest of the library.
* ** implemented
*/
NSS_STATUS _nss_ldap_init_config (ldap_config_t *);
NSS_STATUS _nss_ldap_destroy_config (ldap_config_t **);
NSS_STATUS _nss_ldap_readconfig (ldap_config_t ** result, char **buffer, size_t *buflen);
NSS_STATUS _nss_ldap_validateconfig (ldap_config_t *config);
/*
* Escape '*' in a string for use as a filter
*/
NSS_STATUS _nss_ldap_escape_string (const char *str,
char *buf, size_t buflen);
#define MAP_H_ERRNO(nss_status, herr) do { \
switch ((nss_status)) { \
case NSS_SUCCESS: \
(herr) = 0; \
break; \
case NSS_TRYAGAIN: \
(herr) = NETDB_INTERNAL;\
break; \
case NSS_NOTFOUND: \
(herr) = HOST_NOT_FOUND;\
break; \
case NSS_UNAVAIL: \
default: \
(herr) = NO_RECOVERY; \
break; \
} \
} while (0)
#ifdef HAVE_IRS_H
#define MAP_ERRNO(nss_status, err) do { \
switch ((nss_status)) { \
case NSS_SUCCESS: \
(err) = 0; \
break; \
case NSS_TRYAGAIN: \
(err) = ERANGE; \
break; \
case NSS_NOTFOUND: \
(err) = ENOENT; \
break; \
case NSS_UNAVAIL: \
default: \
(err) = EPERM; \
break; \
} \
} while (0)
#endif /* HAVE_IRS_H */
struct ldap_datum
{
void *data;
size_t size;
};
typedef struct ldap_datum ldap_datum_t;
#define NSS_LDAP_DATUM_ZERO(d) do { \
(d)->data = NULL; \
(d)->size = 0; \
} while (0)
#define NSS_LDAP_DB_NORMALIZE_CASE 0x1
void *_nss_ldap_db_open (void);
void _nss_ldap_db_close (void **db);
NSS_STATUS _nss_ldap_db_put (void *db,
unsigned flags,
const ldap_datum_t * key,
const ldap_datum_t * value);
NSS_STATUS _nss_ldap_db_get (void *db,
unsigned flags,
const ldap_datum_t * key,
ldap_datum_t * value);
/* Routines for managing namelists */
NSS_STATUS _nss_ldap_namelist_push (struct name_list **head, const char *name);
void _nss_ldap_namelist_pop (struct name_list **head);
int _nss_ldap_namelist_find (struct name_list *head, const char *netgroup);
void _nss_ldap_namelist_destroy (struct name_list **head);
NSS_STATUS
_nss_ldap_add_uri (ldap_config_t *result, const char *uri,
char **buffer, size_t *buflen);
ldap_map_selector_t
_nss_ldap_str2selector (const char *key);
NSS_STATUS
_nss_ldap_parse_long (const char *text, long default_value, long *value);
NSS_STATUS
_nss_ldap_parse_ulong (const char *text, unsigned long default_value,
unsigned long *value);
NSS_STATUS
_nss_ldap_parse_int (const char *text, int default_value, int *value);
NSS_STATUS
_nss_ldap_parse_uid_t (const char *text, uid_t default_value, uid_t *value);
NSS_STATUS
_nss_ldap_parse_gid_t (const char *text, gid_t default_value, gid_t *value);
#endif /* _LDAP_NSS_LDAP_UTIL_H */