source3/passdb/pdb_ldap_schema.c

   1 /*
   2    Unix SMB/CIFS implementation.
   3    LDAP protocol helper functions for SAMBA
   4    Copyright (C) Jean François Micouleau       1998
   5    Copyright (C) Gerald Carter                  2001-2003
   6    Copyright (C) Shahms King                    2001
   7    Copyright (C) Andrew Bartlett                2002-2003
   8    Copyright (C) Stefan (metze) Metzmacher      2002-2003
   9
  10    This program is free software; you can redistribute it and/or modify
  11    it under the terms of the GNU General Public License as published by
  12    the Free Software Foundation; either version 3 of the License, or
  13    (at your option) any later version.
  14
  15    This program is distributed in the hope that it will be useful,
  16    but WITHOUT ANY WARRANTY; without even the implied warranty of
  17    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  18    GNU General Public License for more details.
  19
  20    You should have received a copy of the GNU General Public License
  21    along with this program.  If not, see <http://www.gnu.org/licenses/>.
  22
  23 */
  24
  25 #include "includes.h"
  26 #include "passdb/pdb_ldap_schema.h"
  27
  28 /* attributes used by Samba 2.2 */
  29
  30 ATTRIB_MAP_ENTRY attrib_map_v22[] = {
  31         { LDAP_ATTR_UID,                "uid"           },
  32         { LDAP_ATTR_UIDNUMBER,          LDAP_ATTRIBUTE_UIDNUMBER},
  33         { LDAP_ATTR_GIDNUMBER,          LDAP_ATTRIBUTE_GIDNUMBER},
  34         { LDAP_ATTR_UNIX_HOME,          "homeDirectory" },
  35         { LDAP_ATTR_PWD_LAST_SET,       "pwdLastSet"    },
  36         { LDAP_ATTR_PWD_CAN_CHANGE,     "pwdCanChange"  },
  37         { LDAP_ATTR_PWD_MUST_CHANGE,    "pwdMustChange" },
  38         { LDAP_ATTR_LOGON_TIME,         "logonTime"     },
  39         { LDAP_ATTR_LOGOFF_TIME,        "logoffTime"    },
  40         { LDAP_ATTR_KICKOFF_TIME,       "kickoffTime"   },
  41         { LDAP_ATTR_CN,                 "cn"            },
  42         { LDAP_ATTR_SN,                 "sn"            },
  43         { LDAP_ATTR_DISPLAY_NAME,       "displayName"   },
  44         { LDAP_ATTR_HOME_PATH,          "smbHome"       },
  45         { LDAP_ATTR_HOME_DRIVE,         "homeDrive"     },
  46         { LDAP_ATTR_LOGON_SCRIPT,       "scriptPath"    },
  47         { LDAP_ATTR_PROFILE_PATH,       "profilePath"   },
  48         { LDAP_ATTR_DESC,               "description"   },
  49         { LDAP_ATTR_USER_WKS,           "userWorkstations"},
  50         { LDAP_ATTR_USER_RID,           "rid"           },
  51         { LDAP_ATTR_PRIMARY_GROUP_RID,  "primaryGroupID"},
  52         { LDAP_ATTR_LMPW,               "lmPassword"    },
  53         { LDAP_ATTR_NTPW,               "ntPassword"    },
  54         { LDAP_ATTR_DOMAIN,             "domain"        },
  55         { LDAP_ATTR_OBJCLASS,           "objectClass"   },
  56         { LDAP_ATTR_ACB_INFO,           "acctFlags"     },
  57         { LDAP_ATTR_MOD_TIMESTAMP,      "modifyTimestamp"       },
  58         { LDAP_ATTR_LIST_END,           NULL            }
  59 };
  60
  61 ATTRIB_MAP_ENTRY attrib_map_to_delete_v22[] = {
  62         { LDAP_ATTR_PWD_LAST_SET,       "pwdLastSet"    },
  63         { LDAP_ATTR_PWD_CAN_CHANGE,     "pwdCanChange"  },
  64         { LDAP_ATTR_PWD_MUST_CHANGE,    "pwdMustChange" },
  65         { LDAP_ATTR_LOGON_TIME,         "logonTime"     },
  66         { LDAP_ATTR_LOGOFF_TIME,        "logoffTime"    },
  67         { LDAP_ATTR_KICKOFF_TIME,       "kickoffTime"   },
  68         { LDAP_ATTR_DISPLAY_NAME,       "displayName"   },
  69         { LDAP_ATTR_HOME_PATH,          "smbHome"       },
  70         { LDAP_ATTR_HOME_DRIVE,         "homeDrives"    },
  71         { LDAP_ATTR_LOGON_SCRIPT,       "scriptPath"    },
  72         { LDAP_ATTR_PROFILE_PATH,       "profilePath"   },
  73         { LDAP_ATTR_USER_WKS,           "userWorkstations"},
  74         { LDAP_ATTR_USER_RID,           "rid"           },
  75         { LDAP_ATTR_PRIMARY_GROUP_RID,  "primaryGroupID"},
  76         { LDAP_ATTR_LMPW,               "lmPassword"    },
  77         { LDAP_ATTR_NTPW,               "ntPassword"    },
  78         { LDAP_ATTR_DOMAIN,             "domain"        },
  79         { LDAP_ATTR_ACB_INFO,           "acctFlags"     },
  80         { LDAP_ATTR_LIST_END,           NULL            }
  81 };
  82
  83 /* attributes used by Samba 3.0's sambaSamAccount */
  84
  85 ATTRIB_MAP_ENTRY attrib_map_v30[] = {
  86         { LDAP_ATTR_UID,                "uid"                   },
  87         { LDAP_ATTR_UIDNUMBER,          LDAP_ATTRIBUTE_UIDNUMBER},
  88         { LDAP_ATTR_GIDNUMBER,          LDAP_ATTRIBUTE_GIDNUMBER},
  89         { LDAP_ATTR_UNIX_HOME,          "homeDirectory"         },
  90         { LDAP_ATTR_PWD_LAST_SET,       "sambaPwdLastSet"       },
  91         { LDAP_ATTR_PWD_CAN_CHANGE,     "sambaPwdCanChange"     },
  92         { LDAP_ATTR_PWD_MUST_CHANGE,    "sambaPwdMustChange"    },
  93         { LDAP_ATTR_LOGON_TIME,         "sambaLogonTime"        },
  94         { LDAP_ATTR_LOGOFF_TIME,        "sambaLogoffTime"       },
  95         { LDAP_ATTR_KICKOFF_TIME,       "sambaKickoffTime"      },
  96         { LDAP_ATTR_CN,                 "cn"                    },
  97         { LDAP_ATTR_SN,                 "sn"                    },
  98         { LDAP_ATTR_DISPLAY_NAME,       "displayName"           },
  99         { LDAP_ATTR_HOME_DRIVE,         "sambaHomeDrive"        },
 100         { LDAP_ATTR_HOME_PATH,          "sambaHomePath"         },
 101         { LDAP_ATTR_LOGON_SCRIPT,       "sambaLogonScript"      },
 102         { LDAP_ATTR_PROFILE_PATH,       "sambaProfilePath"      },
 103         { LDAP_ATTR_DESC,               "description"           },
 104         { LDAP_ATTR_USER_WKS,           "sambaUserWorkstations" },
 105         { LDAP_ATTR_USER_SID,           LDAP_ATTRIBUTE_SID      },
 106         { LDAP_ATTR_PRIMARY_GROUP_SID,  "sambaPrimaryGroupSID"  },
 107         { LDAP_ATTR_LMPW,               "sambaLMPassword"       },
 108         { LDAP_ATTR_NTPW,               "sambaNTPassword"       },
 109         { LDAP_ATTR_DOMAIN,             "sambaDomainName"       },
 110         { LDAP_ATTR_OBJCLASS,           "objectClass"           },
 111         { LDAP_ATTR_ACB_INFO,           "sambaAcctFlags"        },
 112         { LDAP_ATTR_MUNGED_DIAL,        "sambaMungedDial"       },
 113         { LDAP_ATTR_BAD_PASSWORD_COUNT, "sambaBadPasswordCount" },
 114         { LDAP_ATTR_BAD_PASSWORD_TIME,  "sambaBadPasswordTime"  },
 115         { LDAP_ATTR_PWD_HISTORY,        "sambaPasswordHistory"  },
 116         { LDAP_ATTR_MOD_TIMESTAMP,      "modifyTimestamp"       },
 117         { LDAP_ATTR_LOGON_HOURS,        "sambaLogonHours"       },
 118         { LDAP_ATTR_LIST_END,           NULL                    }
 119 };
 120
 121 ATTRIB_MAP_ENTRY attrib_map_to_delete_v30[] = {
 122         { LDAP_ATTR_PWD_LAST_SET,       "sambaPwdLastSet"       },
 123         { LDAP_ATTR_PWD_CAN_CHANGE,     "sambaPwdCanChange"     },
 124         { LDAP_ATTR_PWD_MUST_CHANGE,    "sambaPwdMustChange"    },
 125         { LDAP_ATTR_LOGON_TIME,         "sambaLogonTime"        },
 126         { LDAP_ATTR_LOGOFF_TIME,        "sambaLogoffTime"       },
 127         { LDAP_ATTR_KICKOFF_TIME,       "sambaKickoffTime"      },
 128         { LDAP_ATTR_DISPLAY_NAME,       "displayName"           },
 129         { LDAP_ATTR_HOME_DRIVE,         "sambaHomeDrive"        },
 130         { LDAP_ATTR_HOME_PATH,          "sambaHomePath"         },
 131         { LDAP_ATTR_LOGON_SCRIPT,       "sambaLogonScript"      },
 132         { LDAP_ATTR_PROFILE_PATH,       "sambaProfilePath"      },
 133         { LDAP_ATTR_USER_WKS,           "sambaUserWorkstations" },
 134         { LDAP_ATTR_USER_SID,           LDAP_ATTRIBUTE_SID      },
 135         { LDAP_ATTR_PRIMARY_GROUP_SID,  "sambaPrimaryGroupSID"  },
 136         { LDAP_ATTR_LMPW,               "sambaLMPassword"       },
 137         { LDAP_ATTR_NTPW,               "sambaNTPassword"       },
 138         { LDAP_ATTR_DOMAIN,             "sambaDomainName"       },
 139         { LDAP_ATTR_ACB_INFO,           "sambaAcctFlags"        },
 140         { LDAP_ATTR_MUNGED_DIAL,        "sambaMungedDial"       },
 141         { LDAP_ATTR_BAD_PASSWORD_COUNT, "sambaBadPasswordCount" },
 142         { LDAP_ATTR_BAD_PASSWORD_TIME,  "sambaBadPasswordTime"  },
 143         { LDAP_ATTR_PWD_HISTORY,        "sambaPasswordHistory"  },
 144         { LDAP_ATTR_LOGON_HOURS,        "sambaLogonHours"       },
 145         { LDAP_ATTR_LIST_END,           NULL                    }
 146 };
 147
 148 /* attributes used for allocating RIDs */
 149
 150 ATTRIB_MAP_ENTRY dominfo_attr_list[] = {
 151         { LDAP_ATTR_DOMAIN,             "sambaDomainName"       },
 152         { LDAP_ATTR_NEXT_RID,           "sambaNextRid"          },
 153         { LDAP_ATTR_NEXT_USERRID,       "sambaNextUserRid"      },
 154         { LDAP_ATTR_NEXT_GROUPRID,      "sambaNextGroupRid"     },
 155         { LDAP_ATTR_DOM_SID,            LDAP_ATTRIBUTE_SID      },
 156         { LDAP_ATTR_ALGORITHMIC_RID_BASE,"sambaAlgorithmicRidBase"},
 157         { LDAP_ATTR_OBJCLASS,           "objectClass"           },
 158         { LDAP_ATTR_LIST_END,           NULL                    },
 159 };
 160
 161 /* Samba 3.0 group mapping attributes */
 162
 163 ATTRIB_MAP_ENTRY groupmap_attr_list[] = {
 164         { LDAP_ATTR_GIDNUMBER,          LDAP_ATTRIBUTE_GIDNUMBER},
 165         { LDAP_ATTR_GROUP_SID,          LDAP_ATTRIBUTE_SID      },
 166         { LDAP_ATTR_GROUP_TYPE,         "sambaGroupType"        },
 167         { LDAP_ATTR_SID_LIST,           "sambaSIDList"          },
 168         { LDAP_ATTR_DESC,               "description"           },
 169         { LDAP_ATTR_DISPLAY_NAME,       "displayName"           },
 170         { LDAP_ATTR_CN,                 "cn"                    },
 171         { LDAP_ATTR_OBJCLASS,           "objectClass"           },
 172         { LDAP_ATTR_LIST_END,           NULL                    }
 173 };
 174
 175 ATTRIB_MAP_ENTRY groupmap_attr_list_to_delete[] = {
 176         { LDAP_ATTR_GROUP_SID,          LDAP_ATTRIBUTE_SID      },
 177         { LDAP_ATTR_GROUP_TYPE,         "sambaGroupType"        },
 178         { LDAP_ATTR_DESC,               "description"           },
 179         { LDAP_ATTR_DISPLAY_NAME,       "displayName"           },
 180         { LDAP_ATTR_SID_LIST,           "sambaSIDList"          },
 181         { LDAP_ATTR_LIST_END,           NULL                    }
 182 };
 183
 184 /* idmap_ldap sambaUnixIdPool */
 185
 186 ATTRIB_MAP_ENTRY idpool_attr_list[] = {
 187         { LDAP_ATTR_UIDNUMBER,          LDAP_ATTRIBUTE_UIDNUMBER},
 188         { LDAP_ATTR_GIDNUMBER,          LDAP_ATTRIBUTE_GIDNUMBER},
 189         { LDAP_ATTR_OBJCLASS,           "objectClass"           },
 190         { LDAP_ATTR_LIST_END,           NULL                    }
 191 };
 192
 193 ATTRIB_MAP_ENTRY sidmap_attr_list[] = {
 194         { LDAP_ATTR_SID,                LDAP_ATTRIBUTE_SID      },
 195         { LDAP_ATTR_UIDNUMBER,          LDAP_ATTRIBUTE_UIDNUMBER},
 196         { LDAP_ATTR_GIDNUMBER,          LDAP_ATTRIBUTE_GIDNUMBER},
 197         { LDAP_ATTR_OBJCLASS,           "objectClass"           },
 198         { LDAP_ATTR_LIST_END,           NULL                    }
 199 };
 200
 201 /**********************************************************************
 202  perform a simple table lookup and return the attribute name
 203  **********************************************************************/
 204
 205  const char* get_attr_key2string( ATTRIB_MAP_ENTRY table[], int key )
 206 {
 207         int i = 0;
 208
 209         while ( table[i].attrib != LDAP_ATTR_LIST_END ) {
 210                 if ( table[i].attrib == key )
 211                         return table[i].name;
 212                 i++;
 213         }
 214
 215         return NULL;
 216 }
 217
 218
 219 /**********************************************************************
 220  Return the list of attribute names from a mapping table
 221  **********************************************************************/
 222
 223  const char** get_attr_list( TALLOC_CTX *mem_ctx, ATTRIB_MAP_ENTRY table[] )
 224 {
 225         const char **names;
 226         int i = 0;
 227
 228         while ( table[i].attrib != LDAP_ATTR_LIST_END )
 229                 i++;
 230         i++;
 231
 232         names = talloc_array( mem_ctx, const char*, i );
 233         if ( !names ) {
 234                 DEBUG(0,("get_attr_list: out of memory\n"));
 235                 return NULL;
 236         }
 237
 238         i = 0;
 239         while ( table[i].attrib != LDAP_ATTR_LIST_END ) {
 240                 names[i] = talloc_strdup( names, table[i].name );
 241                 i++;
 242         }
 243         names[i] = NULL;
 244
 245         return names;
 246 }