2 Unix SMB/CIFS implementation.
3 LDAP protocol helper functions for SAMBA
4 Copyright (C) Jean François Micouleau 1998
5 Copyright (C) Gerald Carter 2001-2003
6 Copyright (C) Shahms King 2001
7 Copyright (C) Andrew Bartlett 2002-2003
8 Copyright (C) Stefan (metze) Metzmacher 2002-2003
10 This program is free software; you can redistribute it and/or modify
11 it under the terms of the GNU General Public License as published by
12 the Free Software Foundation; either version 3 of the License, or
13 (at your option) any later version.
15 This program is distributed in the hope that it will be useful,
16 but WITHOUT ANY WARRANTY; without even the implied warranty of
17 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
18 GNU General Public License for more details.
20 You should have received a copy of the GNU General Public License
21 along with this program. If not, see <http://www.gnu.org/licenses/>.
26 #include "passdb/pdb_ldap_schema.h"
28 /* attributes used by Samba 2.2 */
30 ATTRIB_MAP_ENTRY attrib_map_v22
[] = {
31 { LDAP_ATTR_UID
, "uid" },
32 { LDAP_ATTR_UIDNUMBER
, LDAP_ATTRIBUTE_UIDNUMBER
},
33 { LDAP_ATTR_GIDNUMBER
, LDAP_ATTRIBUTE_GIDNUMBER
},
34 { LDAP_ATTR_UNIX_HOME
, "homeDirectory" },
35 { LDAP_ATTR_PWD_LAST_SET
, "pwdLastSet" },
36 { LDAP_ATTR_PWD_CAN_CHANGE
, "pwdCanChange" },
37 { LDAP_ATTR_PWD_MUST_CHANGE
, "pwdMustChange" },
38 { LDAP_ATTR_LOGON_TIME
, "logonTime" },
39 { LDAP_ATTR_LOGOFF_TIME
, "logoffTime" },
40 { LDAP_ATTR_KICKOFF_TIME
, "kickoffTime" },
41 { LDAP_ATTR_CN
, "cn" },
42 { LDAP_ATTR_SN
, "sn" },
43 { LDAP_ATTR_DISPLAY_NAME
, "displayName" },
44 { LDAP_ATTR_HOME_PATH
, "smbHome" },
45 { LDAP_ATTR_HOME_DRIVE
, "homeDrive" },
46 { LDAP_ATTR_LOGON_SCRIPT
, "scriptPath" },
47 { LDAP_ATTR_PROFILE_PATH
, "profilePath" },
48 { LDAP_ATTR_DESC
, "description" },
49 { LDAP_ATTR_USER_WKS
, "userWorkstations"},
50 { LDAP_ATTR_USER_RID
, "rid" },
51 { LDAP_ATTR_PRIMARY_GROUP_RID
, "primaryGroupID"},
52 { LDAP_ATTR_LMPW
, "lmPassword" },
53 { LDAP_ATTR_NTPW
, "ntPassword" },
54 { LDAP_ATTR_DOMAIN
, "domain" },
55 { LDAP_ATTR_OBJCLASS
, "objectClass" },
56 { LDAP_ATTR_ACB_INFO
, "acctFlags" },
57 { LDAP_ATTR_MOD_TIMESTAMP
, "modifyTimestamp" },
58 { LDAP_ATTR_LIST_END
, NULL
}
61 ATTRIB_MAP_ENTRY attrib_map_to_delete_v22
[] = {
62 { LDAP_ATTR_PWD_LAST_SET
, "pwdLastSet" },
63 { LDAP_ATTR_PWD_CAN_CHANGE
, "pwdCanChange" },
64 { LDAP_ATTR_PWD_MUST_CHANGE
, "pwdMustChange" },
65 { LDAP_ATTR_LOGON_TIME
, "logonTime" },
66 { LDAP_ATTR_LOGOFF_TIME
, "logoffTime" },
67 { LDAP_ATTR_KICKOFF_TIME
, "kickoffTime" },
68 { LDAP_ATTR_DISPLAY_NAME
, "displayName" },
69 { LDAP_ATTR_HOME_PATH
, "smbHome" },
70 { LDAP_ATTR_HOME_DRIVE
, "homeDrives" },
71 { LDAP_ATTR_LOGON_SCRIPT
, "scriptPath" },
72 { LDAP_ATTR_PROFILE_PATH
, "profilePath" },
73 { LDAP_ATTR_USER_WKS
, "userWorkstations"},
74 { LDAP_ATTR_USER_RID
, "rid" },
75 { LDAP_ATTR_PRIMARY_GROUP_RID
, "primaryGroupID"},
76 { LDAP_ATTR_LMPW
, "lmPassword" },
77 { LDAP_ATTR_NTPW
, "ntPassword" },
78 { LDAP_ATTR_DOMAIN
, "domain" },
79 { LDAP_ATTR_ACB_INFO
, "acctFlags" },
80 { LDAP_ATTR_LIST_END
, NULL
}
83 /* attributes used by Samba 3.0's sambaSamAccount */
85 ATTRIB_MAP_ENTRY attrib_map_v30
[] = {
86 { LDAP_ATTR_UID
, "uid" },
87 { LDAP_ATTR_UIDNUMBER
, LDAP_ATTRIBUTE_UIDNUMBER
},
88 { LDAP_ATTR_GIDNUMBER
, LDAP_ATTRIBUTE_GIDNUMBER
},
89 { LDAP_ATTR_UNIX_HOME
, "homeDirectory" },
90 { LDAP_ATTR_PWD_LAST_SET
, "sambaPwdLastSet" },
91 { LDAP_ATTR_PWD_CAN_CHANGE
, "sambaPwdCanChange" },
92 { LDAP_ATTR_PWD_MUST_CHANGE
, "sambaPwdMustChange" },
93 { LDAP_ATTR_LOGON_TIME
, "sambaLogonTime" },
94 { LDAP_ATTR_LOGOFF_TIME
, "sambaLogoffTime" },
95 { LDAP_ATTR_KICKOFF_TIME
, "sambaKickoffTime" },
96 { LDAP_ATTR_CN
, "cn" },
97 { LDAP_ATTR_SN
, "sn" },
98 { LDAP_ATTR_DISPLAY_NAME
, "displayName" },
99 { LDAP_ATTR_HOME_DRIVE
, "sambaHomeDrive" },
100 { LDAP_ATTR_HOME_PATH
, "sambaHomePath" },
101 { LDAP_ATTR_LOGON_SCRIPT
, "sambaLogonScript" },
102 { LDAP_ATTR_PROFILE_PATH
, "sambaProfilePath" },
103 { LDAP_ATTR_DESC
, "description" },
104 { LDAP_ATTR_USER_WKS
, "sambaUserWorkstations" },
105 { LDAP_ATTR_USER_SID
, LDAP_ATTRIBUTE_SID
},
106 { LDAP_ATTR_PRIMARY_GROUP_SID
, "sambaPrimaryGroupSID" },
107 { LDAP_ATTR_LMPW
, "sambaLMPassword" },
108 { LDAP_ATTR_NTPW
, "sambaNTPassword" },
109 { LDAP_ATTR_DOMAIN
, "sambaDomainName" },
110 { LDAP_ATTR_OBJCLASS
, "objectClass" },
111 { LDAP_ATTR_ACB_INFO
, "sambaAcctFlags" },
112 { LDAP_ATTR_MUNGED_DIAL
, "sambaMungedDial" },
113 { LDAP_ATTR_BAD_PASSWORD_COUNT
, "sambaBadPasswordCount" },
114 { LDAP_ATTR_BAD_PASSWORD_TIME
, "sambaBadPasswordTime" },
115 { LDAP_ATTR_PWD_HISTORY
, "sambaPasswordHistory" },
116 { LDAP_ATTR_MOD_TIMESTAMP
, "modifyTimestamp" },
117 { LDAP_ATTR_LOGON_HOURS
, "sambaLogonHours" },
118 { LDAP_ATTR_LIST_END
, NULL
}
121 ATTRIB_MAP_ENTRY attrib_map_to_delete_v30
[] = {
122 { LDAP_ATTR_PWD_LAST_SET
, "sambaPwdLastSet" },
123 { LDAP_ATTR_PWD_CAN_CHANGE
, "sambaPwdCanChange" },
124 { LDAP_ATTR_PWD_MUST_CHANGE
, "sambaPwdMustChange" },
125 { LDAP_ATTR_LOGON_TIME
, "sambaLogonTime" },
126 { LDAP_ATTR_LOGOFF_TIME
, "sambaLogoffTime" },
127 { LDAP_ATTR_KICKOFF_TIME
, "sambaKickoffTime" },
128 { LDAP_ATTR_DISPLAY_NAME
, "displayName" },
129 { LDAP_ATTR_HOME_DRIVE
, "sambaHomeDrive" },
130 { LDAP_ATTR_HOME_PATH
, "sambaHomePath" },
131 { LDAP_ATTR_LOGON_SCRIPT
, "sambaLogonScript" },
132 { LDAP_ATTR_PROFILE_PATH
, "sambaProfilePath" },
133 { LDAP_ATTR_USER_WKS
, "sambaUserWorkstations" },
134 { LDAP_ATTR_USER_SID
, LDAP_ATTRIBUTE_SID
},
135 { LDAP_ATTR_PRIMARY_GROUP_SID
, "sambaPrimaryGroupSID" },
136 { LDAP_ATTR_LMPW
, "sambaLMPassword" },
137 { LDAP_ATTR_NTPW
, "sambaNTPassword" },
138 { LDAP_ATTR_DOMAIN
, "sambaDomainName" },
139 { LDAP_ATTR_ACB_INFO
, "sambaAcctFlags" },
140 { LDAP_ATTR_MUNGED_DIAL
, "sambaMungedDial" },
141 { LDAP_ATTR_BAD_PASSWORD_COUNT
, "sambaBadPasswordCount" },
142 { LDAP_ATTR_BAD_PASSWORD_TIME
, "sambaBadPasswordTime" },
143 { LDAP_ATTR_PWD_HISTORY
, "sambaPasswordHistory" },
144 { LDAP_ATTR_LOGON_HOURS
, "sambaLogonHours" },
145 { LDAP_ATTR_LIST_END
, NULL
}
148 /* attributes used for allocating RIDs */
150 ATTRIB_MAP_ENTRY dominfo_attr_list
[] = {
151 { LDAP_ATTR_DOMAIN
, "sambaDomainName" },
152 { LDAP_ATTR_NEXT_RID
, "sambaNextRid" },
153 { LDAP_ATTR_NEXT_USERRID
, "sambaNextUserRid" },
154 { LDAP_ATTR_NEXT_GROUPRID
, "sambaNextGroupRid" },
155 { LDAP_ATTR_DOM_SID
, LDAP_ATTRIBUTE_SID
},
156 { LDAP_ATTR_ALGORITHMIC_RID_BASE
,"sambaAlgorithmicRidBase"},
157 { LDAP_ATTR_OBJCLASS
, "objectClass" },
158 { LDAP_ATTR_LIST_END
, NULL
},
161 /* Samba 3.0 group mapping attributes */
163 ATTRIB_MAP_ENTRY groupmap_attr_list
[] = {
164 { LDAP_ATTR_GIDNUMBER
, LDAP_ATTRIBUTE_GIDNUMBER
},
165 { LDAP_ATTR_GROUP_SID
, LDAP_ATTRIBUTE_SID
},
166 { LDAP_ATTR_GROUP_TYPE
, "sambaGroupType" },
167 { LDAP_ATTR_SID_LIST
, "sambaSIDList" },
168 { LDAP_ATTR_DESC
, "description" },
169 { LDAP_ATTR_DISPLAY_NAME
, "displayName" },
170 { LDAP_ATTR_CN
, "cn" },
171 { LDAP_ATTR_OBJCLASS
, "objectClass" },
172 { LDAP_ATTR_LIST_END
, NULL
}
175 ATTRIB_MAP_ENTRY groupmap_attr_list_to_delete
[] = {
176 { LDAP_ATTR_GROUP_SID
, LDAP_ATTRIBUTE_SID
},
177 { LDAP_ATTR_GROUP_TYPE
, "sambaGroupType" },
178 { LDAP_ATTR_DESC
, "description" },
179 { LDAP_ATTR_DISPLAY_NAME
, "displayName" },
180 { LDAP_ATTR_SID_LIST
, "sambaSIDList" },
181 { LDAP_ATTR_LIST_END
, NULL
}
184 /* idmap_ldap sambaUnixIdPool */
186 ATTRIB_MAP_ENTRY idpool_attr_list
[] = {
187 { LDAP_ATTR_UIDNUMBER
, LDAP_ATTRIBUTE_UIDNUMBER
},
188 { LDAP_ATTR_GIDNUMBER
, LDAP_ATTRIBUTE_GIDNUMBER
},
189 { LDAP_ATTR_OBJCLASS
, "objectClass" },
190 { LDAP_ATTR_LIST_END
, NULL
}
193 ATTRIB_MAP_ENTRY sidmap_attr_list
[] = {
194 { LDAP_ATTR_SID
, LDAP_ATTRIBUTE_SID
},
195 { LDAP_ATTR_UIDNUMBER
, LDAP_ATTRIBUTE_UIDNUMBER
},
196 { LDAP_ATTR_GIDNUMBER
, LDAP_ATTRIBUTE_GIDNUMBER
},
197 { LDAP_ATTR_OBJCLASS
, "objectClass" },
198 { LDAP_ATTR_LIST_END
, NULL
}
201 /**********************************************************************
202 perform a simple table lookup and return the attribute name
203 **********************************************************************/
205 const char* get_attr_key2string( ATTRIB_MAP_ENTRY table
[], int key
)
209 while ( table
[i
].attrib
!= LDAP_ATTR_LIST_END
) {
210 if ( table
[i
].attrib
== key
)
211 return table
[i
].name
;
219 /**********************************************************************
220 Return the list of attribute names from a mapping table
221 **********************************************************************/
223 const char** get_attr_list( TALLOC_CTX
*mem_ctx
, ATTRIB_MAP_ENTRY table
[] )
228 while ( table
[i
].attrib
!= LDAP_ATTR_LIST_END
)
232 names
= talloc_array( mem_ctx
, const char*, i
);
234 DEBUG(0,("get_attr_list: out of memory\n"));
239 while ( table
[i
].attrib
!= LDAP_ATTR_LIST_END
) {
240 names
[i
] = talloc_strdup( names
, table
[i
].name
);