2 Unix SMB/CIFS mplementation.
3 LDAP protocol helper functions for SAMBA
4 Copyright (C) Gerald Carter 2001-2003
6 This program is free software; you can redistribute it and/or modify
7 it under the terms of the GNU General Public License as published by
8 the Free Software Foundation; either version 2 of the License, or
9 (at your option) any later version.
11 This program is distributed in the hope that it will be useful,
12 but WITHOUT ANY WARRANTY; without even the implied warranty of
13 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 GNU General Public License for more details.
16 You should have received a copy of the GNU General Public License
17 along with this program; if not, write to the Free Software
18 Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
27 /* specify schema versions between 2.2. and 3.0 */
29 #define SCHEMAVER_SAMBAACCOUNT 1
30 #define SCHEMAVER_SAMBASAMACCOUNT 2
32 /* objectclass names */
34 #define LDAP_OBJ_SAMBASAMACCOUNT "sambaSamAccount"
35 #define LDAP_OBJ_SAMBAACCOUNT "sambaAccount"
36 #define LDAP_OBJ_GROUPMAP "sambaGroupMapping"
37 #define LDAP_OBJ_DOMINFO "sambaDomain"
38 #define LDAP_OBJ_IDPOOL "sambaUnixIdPool"
39 #define LDAP_OBJ_IDMAP_ENTRY "sambaIdmapEntry"
40 #define LDAP_OBJ_SID_ENTRY "sambaSidEntry"
42 #define LDAP_OBJ_ACCOUNT "account"
43 #define LDAP_OBJ_POSIXACCOUNT "posixAccount"
44 #define LDAP_OBJ_POSIXGROUP "posixGroup"
45 #define LDAP_OBJ_OU "organizationalUnit"
47 /* some generic attributes that get reused a lot */
49 #define LDAP_ATTRIBUTE_SID "sambaSID"
50 #define LDAP_ATTRIBUTE_UIDNUMBER "uidNumber"
51 #define LDAP_ATTRIBUTE_GIDNUMBER "gidNumber"
52 #define LDAP_ATTRIBUTE_SID_LIST "sambaSIDList"
54 /* attribute map table indexes */
56 #define LDAP_ATTR_LIST_END 0
57 #define LDAP_ATTR_UID 1
58 #define LDAP_ATTR_UIDNUMBER 2
59 #define LDAP_ATTR_GIDNUMBER 3
60 #define LDAP_ATTR_UNIX_HOME 4
61 #define LDAP_ATTR_PWD_LAST_SET 5
62 #define LDAP_ATTR_PWD_CAN_CHANGE 6
63 #define LDAP_ATTR_PWD_MUST_CHANGE 7
64 #define LDAP_ATTR_LOGON_TIME 8
65 #define LDAP_ATTR_LOGOFF_TIME 9
66 #define LDAP_ATTR_KICKOFF_TIME 10
67 #define LDAP_ATTR_CN 11
68 #define LDAP_ATTR_DISPLAY_NAME 12
69 #define LDAP_ATTR_HOME_PATH 13
70 #define LDAP_ATTR_LOGON_SCRIPT 14
71 #define LDAP_ATTR_PROFILE_PATH 15
72 #define LDAP_ATTR_DESC 16
73 #define LDAP_ATTR_USER_WKS 17
74 #define LDAP_ATTR_USER_SID 18
75 #define LDAP_ATTR_USER_RID 18
76 #define LDAP_ATTR_PRIMARY_GROUP_SID 19
77 #define LDAP_ATTR_PRIMARY_GROUP_RID 20
78 #define LDAP_ATTR_LMPW 21
79 #define LDAP_ATTR_NTPW 22
80 #define LDAP_ATTR_DOMAIN 23
81 #define LDAP_ATTR_OBJCLASS 24
82 #define LDAP_ATTR_ACB_INFO 25
83 #define LDAP_ATTR_NEXT_USERRID 26
84 #define LDAP_ATTR_NEXT_GROUPRID 27
85 #define LDAP_ATTR_DOM_SID 28
86 #define LDAP_ATTR_HOME_DRIVE 29
87 #define LDAP_ATTR_GROUP_SID 30
88 #define LDAP_ATTR_GROUP_TYPE 31
89 #define LDAP_ATTR_SID 32
90 #define LDAP_ATTR_ALGORITHMIC_RID_BASE 33
91 #define LDAP_ATTR_NEXT_RID 34
92 #define LDAP_ATTR_BAD_PASSWORD_COUNT 35
93 #define LDAP_ATTR_LOGON_COUNT 36
94 #define LDAP_ATTR_MUNGED_DIAL 37
95 #define LDAP_ATTR_BAD_PASSWORD_TIME 38
96 #define LDAP_ATTR_PWD_HISTORY 39
97 #define LDAP_ATTR_SID_LIST 40
98 #define LDAP_ATTR_MOD_TIMESTAMP 41
100 typedef struct _attrib_map_entry
{
108 extern ATTRIB_MAP_ENTRY attrib_map_v22
[];
109 extern ATTRIB_MAP_ENTRY attrib_map_v30
[];
110 extern ATTRIB_MAP_ENTRY dominfo_attr_list
[];
111 extern ATTRIB_MAP_ENTRY groupmap_attr_list
[];
112 extern ATTRIB_MAP_ENTRY groupmap_attr_list_to_delete
[];
113 extern ATTRIB_MAP_ENTRY idpool_attr_list
[];
114 extern ATTRIB_MAP_ENTRY sidmap_attr_list
[];
116 /* Function declarations -- not included in proto.h so we don't
117 have to worry about LDAP structure types */
119 const char* get_attr_key2string( ATTRIB_MAP_ENTRY table
[], int key
);
120 char** get_attr_list( ATTRIB_MAP_ENTRY table
[] );
121 void free_attr_list( char **list
);
122 void smbldap_set_mod (LDAPMod
*** modlist
, int modop
, const char *attribute
, const char *value
);
123 void smbldap_make_mod(LDAP
*ldap_struct
, LDAPMessage
*existing
,
125 const char *attribute
, const char *newval
);
126 BOOL
smbldap_get_single_attribute (LDAP
* ldap_struct
, LDAPMessage
* entry
,
127 const char *attribute
, char *value
,
129 BOOL
smbldap_get_single_pstring (LDAP
* ldap_struct
, LDAPMessage
* entry
,
130 const char *attribute
, pstring value
);
133 * Struct to keep the state for all the ldap stuff
137 struct smbldap_state
{
140 /* retrive-once info */
145 unsigned int num_failures
;
148 smb_event_id_t event_id
;
150 struct timeval last_rebind
;
153 #endif /* HAVE_LDAP */
155 struct smbldap_state
;
157 #define LDAP_CONNECT_DEFAULT_TIMEOUT 15
159 #endif /* _SMBLDAP_H */