source/nsswitch/winbindd_nss.h

   1 /*
   2    Unix SMB/CIFS implementation.
   3
   4    Winbind daemon for ntdom nss module
   5
   6    Copyright (C) Tim Potter 2000
   7
   8    This library is free software; you can redistribute it and/or
   9    modify it under the terms of the GNU Library General Public
  10    License as published by the Free Software Foundation; either
  11    version 2 of the License, or (at your option) any later version.
  12
  13    This library is distributed in the hope that it will be useful,
  14    but WITHOUT ANY WARRANTY; without even the implied warranty of
  15    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  16    Library General Public License for more details.
  17
  18    You should have received a copy of the GNU Library General Public
  19    License along with this library; if not, write to the
  20    Free Software Foundation, Inc., 59 Temple Place - Suite 330,
  21    Boston, MA  02111-1307, USA.
  22 */
  23
  24 #ifndef SAFE_FREE
  25 #define SAFE_FREE(x) do { if(x) {free(x); x=NULL;} } while(0)
  26 #endif
  27
  28 #ifndef _WINBINDD_NTDOM_H
  29 #define _WINBINDD_NTDOM_H
  30
  31 #define WINBINDD_SOCKET_NAME "pipe"            /* Name of PF_UNIX socket */
  32 #define WINBINDD_SOCKET_DIR  "/tmp/.winbindd"  /* Name of PF_UNIX dir */
  33 #define WINBINDD_PRIV_SOCKET_SUBDIR "winbindd_privileged" /* name of subdirectory of lp_lockdir() to hold the 'privileged' pipe */
  34 #define WINBINDD_DOMAIN_ENV  "WINBINDD_DOMAIN" /* Environment variables */
  35 #define WINBINDD_DONT_ENV    "_NO_WINBINDD"
  36
  37 /* Update this when you change the interface.  */
  38
  39 #define WINBIND_INTERFACE_VERSION 10
  40
  41 /* Socket commands */
  42
  43 enum winbindd_cmd {
  44
  45         WINBINDD_INTERFACE_VERSION,    /* Always a well known value */
  46
  47         /* Get users and groups */
  48
  49         WINBINDD_GETPWNAM,
  50         WINBINDD_GETPWUID,
  51         WINBINDD_GETGRNAM,
  52         WINBINDD_GETGRGID,
  53         WINBINDD_GETGROUPS,
  54
  55         /* Enumerate users and groups */
  56
  57         WINBINDD_SETPWENT,
  58         WINBINDD_ENDPWENT,
  59         WINBINDD_GETPWENT,
  60         WINBINDD_SETGRENT,
  61         WINBINDD_ENDGRENT,
  62         WINBINDD_GETGRENT,
  63
  64         /* PAM authenticate and password change */
  65
  66         WINBINDD_PAM_AUTH,
  67         WINBINDD_PAM_AUTH_CRAP,
  68         WINBINDD_PAM_CHAUTHTOK,
  69
  70         /* List various things */
  71
  72         WINBINDD_LIST_USERS,         /* List w/o rid->id mapping */
  73         WINBINDD_LIST_GROUPS,        /* Ditto */
  74         WINBINDD_LIST_TRUSTDOM,
  75
  76         /* SID conversion */
  77
  78         WINBINDD_LOOKUPSID,
  79         WINBINDD_LOOKUPNAME,
  80
  81         /* Lookup functions */
  82
  83         WINBINDD_SID_TO_UID,
  84         WINBINDD_SID_TO_GID,
  85         WINBINDD_UID_TO_SID,
  86         WINBINDD_GID_TO_SID,
  87         WINBINDD_ALLOCATE_RID,
  88
  89         /* Miscellaneous other stuff */
  90
  91         WINBINDD_CHECK_MACHACC,     /* Check machine account pw works */
  92         WINBINDD_PING,              /* Just tell me winbind is running */
  93         WINBINDD_INFO,              /* Various bit of info.  Currently just tidbits */
  94         WINBINDD_DOMAIN_NAME,       /* The domain this winbind server is a member of (lp_workgroup()) */
  95
  96         WINBINDD_DOMAIN_INFO,   /* Most of what we know from
  97                                    struct winbindd_domain */
  98
  99         WINBINDD_SHOW_SEQUENCE, /* display sequence numbers of domains */
 100
 101         /* WINS commands */
 102
 103         WINBINDD_WINS_BYIP,
 104         WINBINDD_WINS_BYNAME,
 105
 106         /* account management commands */
 107
 108         WINBINDD_CREATE_USER,
 109         WINBINDD_CREATE_GROUP,
 110         WINBINDD_ADD_USER_TO_GROUP,
 111         WINBINDD_REMOVE_USER_FROM_GROUP,
 112         WINBINDD_SET_USER_PRIMARY_GROUP,
 113         WINBINDD_DELETE_USER,
 114         WINBINDD_DELETE_GROUP,
 115
 116         /* this is like GETGRENT but gives an empty group list */
 117         WINBINDD_GETGRLST,
 118
 119         WINBINDD_NETBIOS_NAME,       /* The netbios name of the server */
 120
 121         /* find the location of our privileged pipe */
 122         WINBINDD_PRIV_PIPE_DIR,
 123
 124         /* return a list of group sids for a user sid */
 125         WINBINDD_GETUSERSIDS,
 126
 127         /* Placeholder for end of cmd list */
 128         WINBINDD_NUM_CMDS
 129 };
 130
 131 typedef struct winbindd_pw {
 132         fstring pw_name;
 133         fstring pw_passwd;
 134         uid_t pw_uid;
 135         gid_t pw_gid;
 136         fstring pw_gecos;
 137         fstring pw_dir;
 138         fstring pw_shell;
 139 } WINBINDD_PW;
 140
 141
 142 typedef struct winbindd_gr {
 143         fstring gr_name;
 144         fstring gr_passwd;
 145         gid_t gr_gid;
 146         int num_gr_mem;
 147         int gr_mem_ofs;   /* offset to group membership */
 148         char **gr_mem;
 149 } WINBINDD_GR;
 150
 151
 152 #define WBFLAG_PAM_INFO3_NDR            0x0001
 153 #define WBFLAG_PAM_INFO3_TEXT           0x0002
 154 #define WBFLAG_PAM_USER_SESSION_KEY     0x0004
 155 #define WBFLAG_PAM_LMKEY                0x0008
 156 #define WBFLAG_PAM_CONTACT_TRUSTDOM     0x0010
 157 #define WBFLAG_QUERY_ONLY               0x0020
 158 #define WBFLAG_ALLOCATE_RID             0x0040
 159 #define WBFLAG_PAM_UNIX_NAME            0x0080
 160 #define WBFLAG_PAM_AFS_TOKEN            0x0100
 161 #define WBFLAG_PAM_NT_STATUS_SQUASH     0x0200
 162
 163 /* Winbind request structure */
 164
 165 struct winbindd_request {
 166         uint32 length;
 167         enum winbindd_cmd cmd;   /* Winbindd command to execute */
 168         pid_t pid;               /* pid of calling process */
 169         uint32 flags;            /* flags relavant to a given request */
 170         fstring domain_name;    /* name of domain for which the request applies */
 171
 172         union {
 173                 fstring winsreq;     /* WINS request */
 174                 fstring username;    /* getpwnam */
 175                 fstring groupname;   /* getgrnam */
 176                 uid_t uid;           /* getpwuid, uid_to_sid */
 177                 gid_t gid;           /* getgrgid, gid_to_sid */
 178                 struct {
 179                         /* We deliberatedly don't split into domain/user to
 180                            avoid having the client know what the separator
 181                            character is. */
 182                         fstring user;
 183                         fstring pass;
 184                         fstring required_membership_sid;
 185                 } auth;              /* pam_winbind auth module */
 186                 struct {
 187                         unsigned char chal[8];
 188                         fstring user;
 189                         fstring domain;
 190                         fstring lm_resp;
 191                         uint16 lm_resp_len;
 192                         fstring nt_resp;
 193                         uint16 nt_resp_len;
 194                         fstring workstation;
 195                         fstring required_membership_sid;
 196                 } auth_crap;
 197                 struct {
 198                     fstring user;
 199                     fstring oldpass;
 200                     fstring newpass;
 201                 } chauthtok;         /* pam_winbind passwd module */
 202                 fstring sid;         /* lookupsid, sid_to_[ug]id */
 203                 struct {
 204                         fstring dom_name;       /* lookupname */
 205                         fstring name;
 206                 } name;
 207                 uint32 num_entries;  /* getpwent, getgrent */
 208                 struct {
 209                         fstring username;
 210                         fstring groupname;
 211                 } acct_mgt;
 212         } data;
 213         char null_term;
 214 };
 215
 216 /* Response values */
 217
 218 enum winbindd_result {
 219         WINBINDD_ERROR,
 220         WINBINDD_OK
 221 };
 222
 223 /* Winbind response structure */
 224
 225 struct winbindd_response {
 226
 227         /* Header information */
 228
 229         uint32 length;                        /* Length of response */
 230         enum winbindd_result result;          /* Result code */
 231
 232         /* Fixed length return data */
 233
 234         union {
 235                 int interface_version;  /* Try to ensure this is always in the same spot... */
 236
 237                 fstring winsresp;               /* WINS response */
 238
 239                 /* getpwnam, getpwuid */
 240
 241                 struct winbindd_pw pw;
 242
 243                 /* getgrnam, getgrgid */
 244
 245                 struct winbindd_gr gr;
 246
 247                 uint32 num_entries; /* getpwent, getgrent */
 248                 struct winbindd_sid {
 249                         fstring sid;        /* lookupname, [ug]id_to_sid */
 250                         int type;
 251                 } sid;
 252                 struct winbindd_name {
 253                         fstring dom_name;       /* lookupsid */
 254                         fstring name;
 255                         int type;
 256                 } name;
 257                 uid_t uid;          /* sid_to_uid */
 258                 gid_t gid;          /* sid_to_gid */
 259                 struct winbindd_info {
 260                         char winbind_separator;
 261                         fstring samba_version;
 262                 } info;
 263                 fstring domain_name;
 264                 fstring netbios_name;
 265
 266                 struct auth_reply {
 267                         uint32 nt_status;
 268                         fstring nt_status_string;
 269                         fstring error_string;
 270                         int pam_error;
 271                         char user_session_key[16];
 272                         char first_8_lm_hash[8];
 273                 } auth;
 274                 uint32 rid;     /* create user or group or allocate rid */
 275                 struct {
 276                         fstring name;
 277                         fstring alt_name;
 278                         fstring sid;
 279                         BOOL native_mode;
 280                         BOOL active_directory;
 281                         BOOL primary;
 282                         uint32 sequence_number;
 283                 } domain_info;
 284         } data;
 285
 286         /* Variable length return data */
 287
 288         void *extra_data;               /* getgrnam, getgrgid, getgrent */
 289 };
 290
 291 #endif