2 Unix SMB/CIFS implementation.
3 ads (active directory) utility library
4 Copyright (C) Guenther Deschner 2005-2007
5 Copyright (C) Gerald (Jerry) Carter 2006
7 This program is free software; you can redistribute it and/or modify
8 it under the terms of the GNU General Public License as published by
9 the Free Software Foundation; either version 3 of the License, or
10 (at your option) any later version.
12 This program is distributed in the hope that it will be useful,
13 but WITHOUT ANY WARRANTY; without even the implied warranty of
14 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15 GNU General Public License for more details.
17 You should have received a copy of the GNU General Public License
18 along with this program. If not, see <http://www.gnu.org/licenses/>.
23 #include "libads/ldap_schema.h"
24 #include "libads/ldap_schema_oids.h"
25 #include "../libcli/ldap/ldap_ndr.h"
29 static ADS_STATUS
ads_get_attrnames_by_oids(ADS_STRUCT
*ads
,
31 const char *schema_path
,
34 char ***OIDs_out
, char ***names
,
38 LDAPMessage
*res
= NULL
;
41 const char *attrs
[] = { "lDAPDisplayName", "attributeId", NULL
};
44 if (!ads
|| !mem_ctx
|| !names
|| !count
|| !OIDs
|| !OIDs_out
) {
45 return ADS_ERROR(LDAP_PARAM_ERROR
);
48 if (num_OIDs
== 0 || OIDs
[0] == NULL
) {
49 return ADS_ERROR_NT(NT_STATUS_NONE_MAPPED
);
52 if ((expr
= talloc_asprintf(mem_ctx
, "(|")) == NULL
) {
53 return ADS_ERROR(LDAP_NO_MEMORY
);
56 for (i
=0; i
<num_OIDs
; i
++) {
58 if ((expr
= talloc_asprintf_append_buffer(expr
, "(attributeId=%s)",
60 return ADS_ERROR(LDAP_NO_MEMORY
);
64 if ((expr
= talloc_asprintf_append_buffer(expr
, ")")) == NULL
) {
65 return ADS_ERROR(LDAP_NO_MEMORY
);
68 status
= ads_do_search_retry(ads
, schema_path
,
69 LDAP_SCOPE_SUBTREE
, expr
, attrs
, &res
);
70 if (!ADS_ERR_OK(status
)) {
74 *count
= ads_count_replies(ads
, res
);
75 if (*count
== 0 || !res
) {
76 status
= ADS_ERROR_NT(NT_STATUS_NONE_MAPPED
);
80 if (((*names
) = talloc_array(mem_ctx
, char *, *count
)) == NULL
) {
81 status
= ADS_ERROR(LDAP_NO_MEMORY
);
84 if (((*OIDs_out
) = talloc_array(mem_ctx
, char *, *count
)) == NULL
) {
85 status
= ADS_ERROR(LDAP_NO_MEMORY
);
89 for (msg
= ads_first_entry(ads
, res
); msg
!= NULL
;
90 msg
= ads_next_entry(ads
, msg
)) {
92 (*names
)[p
] = ads_pull_string(ads
, mem_ctx
, msg
,
94 (*OIDs_out
)[p
] = ads_pull_string(ads
, mem_ctx
, msg
,
96 if (((*names
)[p
] == NULL
) || ((*OIDs_out
)[p
] == NULL
)) {
97 status
= ADS_ERROR(LDAP_NO_MEMORY
);
104 if (*count
< num_OIDs
) {
105 status
= ADS_ERROR_NT(STATUS_SOME_UNMAPPED
);
109 status
= ADS_ERROR(LDAP_SUCCESS
);
111 ads_msgfree(ads
, res
);
116 const char *ads_get_attrname_by_guid(ADS_STRUCT
*ads
,
117 const char *schema_path
,
119 const struct GUID
*schema_guid
)
122 LDAPMessage
*res
= NULL
;
124 const char *attrs
[] = { "lDAPDisplayName", NULL
};
125 const char *result
= NULL
;
126 char *guid_bin
= NULL
;
128 if (!ads
|| !mem_ctx
|| !schema_guid
) {
132 guid_bin
= ldap_encode_ndr_GUID(mem_ctx
, schema_guid
);
137 expr
= talloc_asprintf(mem_ctx
, "(schemaIDGUID=%s)", guid_bin
);
142 rc
= ads_do_search_retry(ads
, schema_path
, LDAP_SCOPE_SUBTREE
,
144 if (!ADS_ERR_OK(rc
)) {
148 if (ads_count_replies(ads
, res
) != 1) {
152 result
= ads_pull_string(ads
, mem_ctx
, res
, "lDAPDisplayName");
155 TALLOC_FREE(guid_bin
);
156 ads_msgfree(ads
, res
);
161 /*********************************************************************
162 *********************************************************************/
164 ADS_STATUS
ads_schema_path(ADS_STRUCT
*ads
, TALLOC_CTX
*mem_ctx
, char **schema_path
)
169 const char *attrs
[] = { "schemaNamingContext", NULL
};
171 status
= ads_do_search(ads
, "", LDAP_SCOPE_BASE
, "(objectclass=*)", attrs
, &res
);
172 if (!ADS_ERR_OK(status
)) {
176 if ( (schema
= ads_pull_string(ads
, mem_ctx
, res
, "schemaNamingContext")) == NULL
) {
177 ads_msgfree(ads
, res
);
178 return ADS_ERROR(LDAP_NO_RESULTS_RETURNED
);
181 if ( (*schema_path
= talloc_strdup(mem_ctx
, schema
)) == NULL
) {
182 ads_msgfree(ads
, res
);
183 return ADS_ERROR(LDAP_NO_MEMORY
);
186 ads_msgfree(ads
, res
);
192 * Check for "Services for Unix" or rfc2307 Schema and load some attributes into the ADS_STRUCT
193 * @param ads connection to ads server
194 * @param enum mapping type
195 * @return ADS_STATUS status of search (False if one or more attributes couldn't be
196 * found in Active Directory)
198 ADS_STATUS
ads_check_posix_schema_mapping(TALLOC_CTX
*mem_ctx
,
200 enum wb_posix_mapping map_type
,
201 struct posix_schema
**s
)
203 TALLOC_CTX
*ctx
= NULL
;
205 char **oids_out
, **names_out
;
207 char *schema_path
= NULL
;
209 struct posix_schema
*schema
= NULL
;
211 const char *oids_sfu
[] = { ADS_ATTR_SFU_UIDNUMBER_OID
,
212 ADS_ATTR_SFU_GIDNUMBER_OID
,
213 ADS_ATTR_SFU_HOMEDIR_OID
,
214 ADS_ATTR_SFU_SHELL_OID
,
215 ADS_ATTR_SFU_GECOS_OID
,
216 ADS_ATTR_SFU_UID_OID
};
218 const char *oids_sfu20
[] = { ADS_ATTR_SFU20_UIDNUMBER_OID
,
219 ADS_ATTR_SFU20_GIDNUMBER_OID
,
220 ADS_ATTR_SFU20_HOMEDIR_OID
,
221 ADS_ATTR_SFU20_SHELL_OID
,
222 ADS_ATTR_SFU20_GECOS_OID
,
223 ADS_ATTR_SFU20_UID_OID
};
225 const char *oids_rfc2307
[] = { ADS_ATTR_RFC2307_UIDNUMBER_OID
,
226 ADS_ATTR_RFC2307_GIDNUMBER_OID
,
227 ADS_ATTR_RFC2307_HOMEDIR_OID
,
228 ADS_ATTR_RFC2307_SHELL_OID
,
229 ADS_ATTR_RFC2307_GECOS_OID
,
230 ADS_ATTR_RFC2307_UID_OID
};
232 DEBUG(10,("ads_check_posix_schema_mapping for schema mode: %d\n", map_type
));
236 case WB_POSIX_MAP_TEMPLATE
:
237 case WB_POSIX_MAP_UNIXINFO
:
238 DEBUG(10,("ads_check_posix_schema_mapping: nothing to do\n"));
239 return ADS_ERROR(LDAP_SUCCESS
);
241 case WB_POSIX_MAP_SFU
:
242 case WB_POSIX_MAP_SFU20
:
243 case WB_POSIX_MAP_RFC2307
:
247 DEBUG(0,("ads_check_posix_schema_mapping: "
248 "unknown enum %d\n", map_type
));
249 return ADS_ERROR(LDAP_PARAM_ERROR
);
252 if ( (ctx
= talloc_init("ads_check_posix_schema_mapping")) == NULL
) {
253 return ADS_ERROR(LDAP_NO_MEMORY
);
256 if ( (schema
= talloc(mem_ctx
, struct posix_schema
)) == NULL
) {
258 return ADS_ERROR(LDAP_NO_MEMORY
);
261 status
= ads_schema_path(ads
, ctx
, &schema_path
);
262 if (!ADS_ERR_OK(status
)) {
263 DEBUG(3,("ads_check_posix_mapping: Unable to retrieve schema DN!\n"));
268 case WB_POSIX_MAP_SFU
:
269 status
= ads_get_attrnames_by_oids(ads
, ctx
, schema_path
, oids_sfu
,
270 ARRAY_SIZE(oids_sfu
),
271 &oids_out
, &names_out
, &num_names
);
273 case WB_POSIX_MAP_SFU20
:
274 status
= ads_get_attrnames_by_oids(ads
, ctx
, schema_path
, oids_sfu20
,
275 ARRAY_SIZE(oids_sfu20
),
276 &oids_out
, &names_out
, &num_names
);
278 case WB_POSIX_MAP_RFC2307
:
279 status
= ads_get_attrnames_by_oids(ads
, ctx
, schema_path
, oids_rfc2307
,
280 ARRAY_SIZE(oids_rfc2307
),
281 &oids_out
, &names_out
, &num_names
);
284 status
= ADS_ERROR_NT(NT_STATUS_INVALID_PARAMETER
);
288 if (!ADS_ERR_OK(status
)) {
289 DEBUG(3,("ads_check_posix_schema_mapping: failed %s\n",
290 ads_errstr(status
)));
294 for (i
=0; i
<num_names
; i
++) {
296 DEBUGADD(10,("\tOID %s has name: %s\n", oids_out
[i
], names_out
[i
]));
298 if (strequal(ADS_ATTR_RFC2307_UIDNUMBER_OID
, oids_out
[i
]) ||
299 strequal(ADS_ATTR_SFU_UIDNUMBER_OID
, oids_out
[i
]) ||
300 strequal(ADS_ATTR_SFU20_UIDNUMBER_OID
, oids_out
[i
])) {
301 schema
->posix_uidnumber_attr
= talloc_strdup(schema
, names_out
[i
]);
305 if (strequal(ADS_ATTR_RFC2307_GIDNUMBER_OID
, oids_out
[i
]) ||
306 strequal(ADS_ATTR_SFU_GIDNUMBER_OID
, oids_out
[i
]) ||
307 strequal(ADS_ATTR_SFU20_GIDNUMBER_OID
, oids_out
[i
])) {
308 schema
->posix_gidnumber_attr
= talloc_strdup(schema
, names_out
[i
]);
312 if (strequal(ADS_ATTR_RFC2307_HOMEDIR_OID
, oids_out
[i
]) ||
313 strequal(ADS_ATTR_SFU_HOMEDIR_OID
, oids_out
[i
]) ||
314 strequal(ADS_ATTR_SFU20_HOMEDIR_OID
, oids_out
[i
])) {
315 schema
->posix_homedir_attr
= talloc_strdup(schema
, names_out
[i
]);
319 if (strequal(ADS_ATTR_RFC2307_SHELL_OID
, oids_out
[i
]) ||
320 strequal(ADS_ATTR_SFU_SHELL_OID
, oids_out
[i
]) ||
321 strequal(ADS_ATTR_SFU20_SHELL_OID
, oids_out
[i
])) {
322 schema
->posix_shell_attr
= talloc_strdup(schema
, names_out
[i
]);
326 if (strequal(ADS_ATTR_RFC2307_GECOS_OID
, oids_out
[i
]) ||
327 strequal(ADS_ATTR_SFU_GECOS_OID
, oids_out
[i
]) ||
328 strequal(ADS_ATTR_SFU20_GECOS_OID
, oids_out
[i
])) {
329 schema
->posix_gecos_attr
= talloc_strdup(schema
, names_out
[i
]);
332 if (strequal(ADS_ATTR_RFC2307_UID_OID
, oids_out
[i
]) ||
333 strequal(ADS_ATTR_SFU_UID_OID
, oids_out
[i
]) ||
334 strequal(ADS_ATTR_SFU20_UID_OID
, oids_out
[i
])) {
335 schema
->posix_uid_attr
= talloc_strdup(schema
, names_out
[i
]);
339 if (!schema
->posix_uidnumber_attr
||
340 !schema
->posix_gidnumber_attr
||
341 !schema
->posix_homedir_attr
||
342 !schema
->posix_shell_attr
||
343 !schema
->posix_gecos_attr
) {
344 status
= ADS_ERROR(LDAP_NO_MEMORY
);
345 TALLOC_FREE( schema
);
351 status
= ADS_ERROR(LDAP_SUCCESS
);