1 #ifndef _INCLUDE_ADS_H_
2 #define _INCLUDE_ADS_H_
4 header for ads (active directory) library routines
6 basically this is a wrapper around ldap
13 struct ads_saslwrap_ops
{
15 ADS_STATUS (*wrap
)(struct ads_struct
*, uint8
*buf
, uint32 len
);
16 ADS_STATUS (*unwrap
)(struct ads_struct
*);
17 void (*disconnect
)(struct ads_struct
*);
20 enum ads_saslwrap_type
{
21 ADS_SASLWRAP_TYPE_PLAIN
= 1,
22 ADS_SASLWRAP_TYPE_SIGN
= 2,
23 ADS_SASLWRAP_TYPE_SEAL
= 4
26 typedef struct ads_struct
{
27 int is_mine
; /* do I own this structure's memory? */
29 /* info needed to find the server */
34 int foreign
; /* set to 1 if connecting to a foreign
36 bool gc
; /* Is this a global catalog server? */
39 /* info needed to authenticate */
52 /* info derived from the servers config */
54 uint32 flags
; /* cldap flags identifying the services. */
57 char *ldap_server_name
;
58 char *server_site_name
;
59 char *client_site_name
;
65 /* info about the current LDAP connection */
69 struct sockaddr_storage ss
; /* the ip of the active connection, if any */
70 time_t last_attempt
; /* last attempt to reconnect, monotonic clock */
73 enum ads_saslwrap_type wrap_type
;
75 #ifdef HAVE_LDAP_SASL_WRAPPING
76 Sockbuf_IO_Desc
*sbiod
; /* lowlevel state for LDAP wrapping */
77 #endif /* HAVE_LDAP_SASL_WRAPPING */
79 const struct ads_saslwrap_ops
*wrap_ops
;
80 void *wrap_private_data
;
85 #define ADS_SASL_WRAPPING_IN_MAX_WRAPPED 0x0FFFFFFF
94 #define ADS_SASL_WRAPPING_OUT_MAX_WRAPPED 0x00A00000
101 #endif /* HAVE_LDAP */
105 typedef LDAPMod
**ADS_MODLIST
;
107 typedef void **ADS_MODLIST
;
110 /* time between reconnect attempts */
111 #define ADS_RECONNECT_TIME 5
113 /* ldap control oids */
114 #define ADS_PAGE_CTL_OID "1.2.840.113556.1.4.319"
115 #define ADS_NO_REFERRALS_OID "1.2.840.113556.1.4.1339"
116 #define ADS_SERVER_SORT_OID "1.2.840.113556.1.4.473"
117 #define ADS_PERMIT_MODIFY_OID "1.2.840.113556.1.4.1413"
118 #define ADS_ASQ_OID "1.2.840.113556.1.4.1504"
119 #define ADS_EXTENDED_DN_OID "1.2.840.113556.1.4.529"
120 #define ADS_SD_FLAGS_OID "1.2.840.113556.1.4.801"
122 /* ldap bitwise searches */
123 #define ADS_LDAP_MATCHING_RULE_BIT_AND "1.2.840.113556.1.4.803"
124 #define ADS_LDAP_MATCHING_RULE_BIT_OR "1.2.840.113556.1.4.804"
126 #define ADS_PINGS 0x0000FFFF /* Ping response */
128 /* ads auth control flags */
129 #define ADS_AUTH_DISABLE_KERBEROS 0x0001
130 #define ADS_AUTH_NO_BIND 0x0002
131 #define ADS_AUTH_ANON_BIND 0x0004
132 #define ADS_AUTH_SIMPLE_BIND 0x0008
133 #define ADS_AUTH_ALLOW_NTLMSSP 0x0010
134 #define ADS_AUTH_SASL_SIGN 0x0020
135 #define ADS_AUTH_SASL_SEAL 0x0040
136 #define ADS_AUTH_SASL_FORCE 0x0080
137 #define ADS_AUTH_USER_CREDS 0x0100
139 enum ads_extended_dn_flags
{
140 ADS_EXTENDED_DN_HEX_STRING
= 0,
141 ADS_EXTENDED_DN_STRING
= 1 /* not supported on win2k */
144 /* this is probably not very well suited to pass other controls generically but
145 * is good enough for the extended dn control where it is only used for atm */
153 #include "libads/ads_proto.h"
156 #include "libads/ads_ldap_protos.h"
159 #include "libads/kerberos_proto.h"
161 #endif /* _INCLUDE_ADS_H_ */