2 * Unix SMB/CIFS implementation.
3 * secrets.tdb file format info
4 * Copyright (C) Andrew Tridgell 2000
6 * This program is free software; you can redistribute it and/or modify it
7 * under the terms of the GNU General Public License as published by the
8 * Free Software Foundation; either version 3 of the License, or (at your
9 * option) any later version.
11 * This program is distributed in the hope that it will be useful, but WITHOUT
12 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
13 * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
16 * You should have received a copy of the GNU General Public License along with
17 * this program; if not, see <http://www.gnu.org/licenses/>.
23 /* structure for storing machine account password
24 (ie. when samba server is member of a domain */
25 struct machine_acct_pass
{
30 #define SECRETS_PRIMARY_DOMAIN_DN "cn=Primary Domains"
31 #define SECRETS_PRINCIPALS_DN "cn=Principals"
32 #define SECRETS_PRIMARY_DOMAIN_FILTER "(&(flatname=%s)(objectclass=primaryDomain))"
33 #define SECRETS_PRIMARY_REALM_FILTER "(&(realm=%s)(objectclass=primaryDomain))"
34 #define SECRETS_KRBTGT_SEARCH "(&((|(realm=%s)(flatname=%s))(samAccountName=krbtgt)))"
35 #define SECRETS_PRINCIPAL_SEARCH "(&(|(realm=%s)(flatname=%s))(servicePrincipalName=%s))"
36 #define SECRETS_LDAP_FILTER "(objectclass=ldapSecret)"
39 * Use a TDB to store an incrementing random seed.
41 * Initialised to the current pid, the very first time Samba starts,
42 * and incremented by one each time it is needed.
44 * @note Not called by systems with a working /dev/urandom.
46 struct loadparm_context
;
48 struct tdb_wrap
*secrets_init(TALLOC_CTX
*mem_ctx
, struct loadparm_context
*lp_ctx
);
49 struct ldb_context
*secrets_db_connect(TALLOC_CTX
*mem_ctx
, struct event_context
*ev_ctx
, struct loadparm_context
*lp_ctx
);
50 struct dom_sid
*secrets_get_domain_sid(TALLOC_CTX
*mem_ctx
, struct event_context
*ev_ctx
, struct loadparm_context
*lp_ctx
, const char *domain
);
53 #endif /* _SECRETS_H */