17c478bd9Sstevel@tonic-gate /* 27c478bd9Sstevel@tonic-gate * CDDL HEADER START 37c478bd9Sstevel@tonic-gate * 47c478bd9Sstevel@tonic-gate * The contents of this file are subject to the terms of the 5689c2bf4Sjanga * Common Development and Distribution License (the "License"). 6689c2bf4Sjanga * You may not use this file except in compliance with the License. 77c478bd9Sstevel@tonic-gate * 87c478bd9Sstevel@tonic-gate * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 97c478bd9Sstevel@tonic-gate * or http://www.opensolaris.org/os/licensing. 107c478bd9Sstevel@tonic-gate * See the License for the specific language governing permissions 117c478bd9Sstevel@tonic-gate * and limitations under the License. 127c478bd9Sstevel@tonic-gate * 137c478bd9Sstevel@tonic-gate * When distributing Covered Code, include this CDDL HEADER in each 147c478bd9Sstevel@tonic-gate * file and include the License file at usr/src/OPENSOLARIS.LICENSE. 157c478bd9Sstevel@tonic-gate * If applicable, add the following below this CDDL HEADER, with the 167c478bd9Sstevel@tonic-gate * fields enclosed by brackets "[]" replaced with your own identifying 177c478bd9Sstevel@tonic-gate * information: Portions Copyright [yyyy] [name of copyright owner] 187c478bd9Sstevel@tonic-gate * 197c478bd9Sstevel@tonic-gate * CDDL HEADER END 207c478bd9Sstevel@tonic-gate */ 217c478bd9Sstevel@tonic-gate /* 22253f5c5dSmj * Copyright 2008 Sun Microsystems, Inc. All rights reserved. 237c478bd9Sstevel@tonic-gate * Use is subject to license terms. 247c478bd9Sstevel@tonic-gate */ 257c478bd9Sstevel@tonic-gate 267c478bd9Sstevel@tonic-gate 277c478bd9Sstevel@tonic-gate #ifndef _NS_INTERNAL_H 287c478bd9Sstevel@tonic-gate #define _NS_INTERNAL_H 297c478bd9Sstevel@tonic-gate 307c478bd9Sstevel@tonic-gate #pragma ident "%Z%%M% %I% %E% SMI" 317c478bd9Sstevel@tonic-gate 327c478bd9Sstevel@tonic-gate #ifdef __cplusplus 337c478bd9Sstevel@tonic-gate extern "C" { 347c478bd9Sstevel@tonic-gate #endif 357c478bd9Sstevel@tonic-gate 367c478bd9Sstevel@tonic-gate #include <stdio.h> 377c478bd9Sstevel@tonic-gate #include <sys/types.h> 387c478bd9Sstevel@tonic-gate #include <sys/time.h> 397c478bd9Sstevel@tonic-gate #include <thread.h> 407c478bd9Sstevel@tonic-gate #include <lber.h> 417c478bd9Sstevel@tonic-gate #include <ldap.h> 427c478bd9Sstevel@tonic-gate #include "ns_sldap.h" 437c478bd9Sstevel@tonic-gate 447c478bd9Sstevel@tonic-gate /* 457c478bd9Sstevel@tonic-gate * INTERNALLY USED CONSTANTS 467c478bd9Sstevel@tonic-gate */ 477c478bd9Sstevel@tonic-gate 487c478bd9Sstevel@tonic-gate #define MAXERROR 2000 497c478bd9Sstevel@tonic-gate #define TRUE 1 507c478bd9Sstevel@tonic-gate #define FALSE 0 517c478bd9Sstevel@tonic-gate #define NSLDAPDIRECTORY "/var/ldap" 527c478bd9Sstevel@tonic-gate #define NSCONFIGFILE "/var/ldap/ldap_client_file" 537c478bd9Sstevel@tonic-gate #define NSCONFIGREFRESH "/var/ldap/ldap_client_file.refresh" 547c478bd9Sstevel@tonic-gate #define NSCREDFILE "/var/ldap/ldap_client_cred" 557c478bd9Sstevel@tonic-gate #define NSCREDREFRESH "/var/ldap/ldap_client_cred.refresh" 567c478bd9Sstevel@tonic-gate #define ROTORSIZE 256 577c478bd9Sstevel@tonic-gate #define MASK 0377 587c478bd9Sstevel@tonic-gate #define LDAPMAXHARDLOOKUPTIME 256 597c478bd9Sstevel@tonic-gate #define DONOTEDIT \ 607c478bd9Sstevel@tonic-gate "Do not edit this file manually; your changes will be lost." \ 617c478bd9Sstevel@tonic-gate "Please use ldapclient (1M) instead." 627c478bd9Sstevel@tonic-gate #define MAXPORTNUMBER 65535 637c478bd9Sstevel@tonic-gate #define MAXPORTNUMBER_STR "65535" 647c478bd9Sstevel@tonic-gate #define CREDFILE 0 657c478bd9Sstevel@tonic-gate #define CONFIGFILE 1 667c478bd9Sstevel@tonic-gate #define UIDNUMFILTER "(&(objectclass=posixAccount)(uidnumber=%s))" 677c478bd9Sstevel@tonic-gate #define UIDNUMFILTER_SSD "(&(%%s)(uidnumber=%s))" 687c478bd9Sstevel@tonic-gate #define UIDFILTER "(&(objectclass=posixAccount)(uid=%s))" 697c478bd9Sstevel@tonic-gate #define UIDFILTER_SSD "(&(%%s)(uid=%s))" 707c478bd9Sstevel@tonic-gate #define HOSTFILTER "(&(objectclass=ipHost)(cn=%s))" 717c478bd9Sstevel@tonic-gate #define HOSTFILTER_SSD "(&(%%s)(cn=%s))" 727c478bd9Sstevel@tonic-gate 737c478bd9Sstevel@tonic-gate #define SIMPLEPAGECTRLFLAG 1 747c478bd9Sstevel@tonic-gate #define VLVCTRLFLAG 2 757c478bd9Sstevel@tonic-gate 767c478bd9Sstevel@tonic-gate #define LISTPAGESIZE 1000 777c478bd9Sstevel@tonic-gate #define ENUMPAGESIZE 100 787c478bd9Sstevel@tonic-gate #define SORTKEYLIST "cn uid" 797c478bd9Sstevel@tonic-gate 807c478bd9Sstevel@tonic-gate #define DEFMAX 8 817c478bd9Sstevel@tonic-gate #define TOKENSEPARATOR '=' 827c478bd9Sstevel@tonic-gate #define QUOTETOK '"' 837c478bd9Sstevel@tonic-gate #define SPACETOK ' ' 847c478bd9Sstevel@tonic-gate #define COMMATOK ',' 857c478bd9Sstevel@tonic-gate #define COLONTOK ':' 867c478bd9Sstevel@tonic-gate #define QUESTTOK '?' 877c478bd9Sstevel@tonic-gate #define SEMITOK ';' 887c478bd9Sstevel@tonic-gate #define TABTOK '\t' 897c478bd9Sstevel@tonic-gate #define OPARATOK '(' 907c478bd9Sstevel@tonic-gate #define CPARATOK ')' 917c478bd9Sstevel@tonic-gate #define BSLTOK '\\' 927c478bd9Sstevel@tonic-gate #define DOORLINESEP "\07" 937c478bd9Sstevel@tonic-gate #define COMMASEP ", " 947c478bd9Sstevel@tonic-gate #define SPACESEP " " 957c478bd9Sstevel@tonic-gate #define SEMISEP ";" 967c478bd9Sstevel@tonic-gate #define COLONSEP ":" 977c478bd9Sstevel@tonic-gate #define COLSPSEP ": " 987c478bd9Sstevel@tonic-gate #define EQUALSEP "=" 997c478bd9Sstevel@tonic-gate #define EQUSPSEP "= " 1007c478bd9Sstevel@tonic-gate #define LAST_VALUE (int)NS_LDAP_HOST_CERTPATH_P 1017c478bd9Sstevel@tonic-gate #define BUFSIZE 1024 1027c478bd9Sstevel@tonic-gate #define DEFAULTCONFIGNAME "__default_config" 1037c478bd9Sstevel@tonic-gate #define EXP_DEFAULT_TTL "43200" /* 12 hours TTL */ 1047c478bd9Sstevel@tonic-gate #define CRYPTMARK "{NS1}" 1057c478bd9Sstevel@tonic-gate #define DOORBUFFERSIZE 8192 1067c478bd9Sstevel@tonic-gate 1077c478bd9Sstevel@tonic-gate #define LDIF_FMT_STR "%s: %s" 1087c478bd9Sstevel@tonic-gate #define FILE_FMT_STR "%s= %s" 1097c478bd9Sstevel@tonic-gate #define DOOR_FMT_STR "%s=%s" 1107c478bd9Sstevel@tonic-gate 1117c478bd9Sstevel@tonic-gate #define SESSION_CACHE_INC 8 1127c478bd9Sstevel@tonic-gate #define CONID_OFFSET 1024 1137c478bd9Sstevel@tonic-gate #define NS_DEFAULT_BIND_TIMEOUT 30 /* timeout value in seconds */ 1147c478bd9Sstevel@tonic-gate #define NS_DEFAULT_SEARCH_TIMEOUT 30 /* timeout value in seconds */ 1157c478bd9Sstevel@tonic-gate 1167c478bd9Sstevel@tonic-gate /* max rdn length in conversion routines used by __ns_ldap_addTypedEntry() */ 1177c478bd9Sstevel@tonic-gate #define RDNSIZE 256 1187c478bd9Sstevel@tonic-gate 1197c478bd9Sstevel@tonic-gate 1207c478bd9Sstevel@tonic-gate /* Phase 1 profile information */ 1217c478bd9Sstevel@tonic-gate #define _PROFILE1_OBJECTCLASS "SolarisNamingProfile" 1227c478bd9Sstevel@tonic-gate #define _PROFILE_CONTAINER "profile" 1237c478bd9Sstevel@tonic-gate #define _PROFILE_FILTER "(&(|(objectclass=%s)(objectclass=%s))(cn=%s))" 1247c478bd9Sstevel@tonic-gate 1257c478bd9Sstevel@tonic-gate /* Phase 2 profile information */ 1267c478bd9Sstevel@tonic-gate #define _PROFILE2_OBJECTCLASS "DUAConfigProfile" 1277c478bd9Sstevel@tonic-gate 1287c478bd9Sstevel@tonic-gate /* Common to all profiles */ 1297c478bd9Sstevel@tonic-gate #define _P_CN "cn" 1307c478bd9Sstevel@tonic-gate 1317c478bd9Sstevel@tonic-gate /* Native LDAP Phase 1 Specific Profile Attributes */ 1327c478bd9Sstevel@tonic-gate #define _P1_SERVERS "SolarisLDAPServers" 1337c478bd9Sstevel@tonic-gate #define _P1_SEARCHBASEDN "SolarisSearchBaseDN" 1347c478bd9Sstevel@tonic-gate #define _P1_CACHETTL "SolarisCacheTTL" 1357c478bd9Sstevel@tonic-gate #define _P1_BINDDN "SolarisBindDN" 1367c478bd9Sstevel@tonic-gate #define _P1_BINDPASSWORD "SolarisBindPassword" 1377c478bd9Sstevel@tonic-gate #define _P1_AUTHMETHOD "SolarisAuthMethod" 1387c478bd9Sstevel@tonic-gate #define _P1_TRANSPORTSECURITY "SolarisTransportSecurity" 1397c478bd9Sstevel@tonic-gate #define _P1_CERTIFICATEPATH "SolarisCertificatePath" 1407c478bd9Sstevel@tonic-gate #define _P1_CERTIFICATEPASSWORD "SolarisCertificatePassword" 1417c478bd9Sstevel@tonic-gate #define _P1_DATASEARCHDN "SolarisDataSearchDN" 1427c478bd9Sstevel@tonic-gate #define _P1_SEARCHSCOPE "SolarisSearchScope" 1437c478bd9Sstevel@tonic-gate #define _P1_SEARCHTIMELIMIT "SolarisSearchTimeLimit" 1447c478bd9Sstevel@tonic-gate #define _P1_PREFERREDSERVER "SolarisPreferredServer" 1457c478bd9Sstevel@tonic-gate #define _P1_PREFERREDSERVERONLY "SolarisPreferredServerOnly" 1467c478bd9Sstevel@tonic-gate #define _P1_SEARCHREFERRAL "SolarisSearchReferral" 1477c478bd9Sstevel@tonic-gate #define _P1_BINDTIMELIMIT "SolarisBindTimeLimit" 1487c478bd9Sstevel@tonic-gate 1497c478bd9Sstevel@tonic-gate /* Native LDAP Phase 2 Specific Profile Attributes */ 1507c478bd9Sstevel@tonic-gate #define _P2_PREFERREDSERVER "preferredServerList" 1517c478bd9Sstevel@tonic-gate #define _P2_DEFAULTSERVER "defaultServerList" 1527c478bd9Sstevel@tonic-gate #define _P2_SEARCHBASEDN "defaultSearchBase" 1537c478bd9Sstevel@tonic-gate #define _P2_SEARCHSCOPE "defaultSearchScope" 1547c478bd9Sstevel@tonic-gate #define _P2_AUTHMETHOD "authenticationMethod" 1557c478bd9Sstevel@tonic-gate #define _P2_CREDENTIALLEVEL "credentialLevel" 1567c478bd9Sstevel@tonic-gate #define _P2_SERVICESEARCHDESC "serviceSearchDescriptor" 1577c478bd9Sstevel@tonic-gate #define _P2_SEARCHTIMELIMIT "searchTimeLimit" 1587c478bd9Sstevel@tonic-gate #define _P2_BINDTIMELIMIT "bindTimeLimit" 1597c478bd9Sstevel@tonic-gate #define _P2_FOLLOWREFERRALS "followReferrals" 1607c478bd9Sstevel@tonic-gate #define _P2_PROFILETTL "profileTTL" 1617c478bd9Sstevel@tonic-gate #define _P2_ATTRIBUTEMAP "attributeMap" 1627c478bd9Sstevel@tonic-gate #define _P2_OBJECTCLASSMAP "objectClassMap" 1637c478bd9Sstevel@tonic-gate #define _P2_SERVICECREDLEVEL "serviceCredentialLevel" 1647c478bd9Sstevel@tonic-gate #define _P2_SERVICEAUTHMETHOD "serviceAuthenticationMethod" 1657c478bd9Sstevel@tonic-gate 1667c478bd9Sstevel@tonic-gate /* Control & SASL information from RootDSE door call */ 1677c478bd9Sstevel@tonic-gate #define _SASLMECHANISM "supportedSASLmechanisms" 1687c478bd9Sstevel@tonic-gate #define _SASLMECHANISM_LEN 23 1697c478bd9Sstevel@tonic-gate #define _SUPPORTEDCONTROL "supportedControl" 1707c478bd9Sstevel@tonic-gate #define _SUPPORTEDCONTROL_LEN 16 1717c478bd9Sstevel@tonic-gate 1727c478bd9Sstevel@tonic-gate #define NS_HASH_MAX 257 1737c478bd9Sstevel@tonic-gate #define NS_HASH_SCHEMA_MAPPING_EXISTED "=MAPPING EXISTED=" 1747c478bd9Sstevel@tonic-gate #define NS_HASH_RC_SUCCESS 1 1757c478bd9Sstevel@tonic-gate #define NS_HASH_RC_NO_MEMORY -1 1767c478bd9Sstevel@tonic-gate #define NS_HASH_RC_CONFIG_ERROR -2 1777c478bd9Sstevel@tonic-gate #define NS_HASH_RC_EXISTED -3 1787c478bd9Sstevel@tonic-gate #define NS_HASH_RC_SYNTAX_ERROR -4 1797c478bd9Sstevel@tonic-gate 1807c478bd9Sstevel@tonic-gate /* Password management related error message from iDS ldap server */ 1817c478bd9Sstevel@tonic-gate #define NS_PWDERR_MAXTRIES \ 1827c478bd9Sstevel@tonic-gate "Exceed password retry limit." 1837c478bd9Sstevel@tonic-gate #define NS_PWDERR_EXPIRED \ 1847c478bd9Sstevel@tonic-gate "password expired!" 1857c478bd9Sstevel@tonic-gate #define NS_PWDERR_ACCT_INACTIVATED \ 1867c478bd9Sstevel@tonic-gate "Account inactivated. Contact system administrator." 1877c478bd9Sstevel@tonic-gate #define NS_PWDERR_CHANGE_NOT_ALLOW \ 1887c478bd9Sstevel@tonic-gate "user is not allowed to change password" 1897c478bd9Sstevel@tonic-gate #define NS_PWDERR_INVALID_SYNTAX \ 1907c478bd9Sstevel@tonic-gate "invalid password syntax" 1917c478bd9Sstevel@tonic-gate #define NS_PWDERR_TRIVIAL_PASSWD \ 1927c478bd9Sstevel@tonic-gate "Password failed triviality check" 1937c478bd9Sstevel@tonic-gate #define NS_PWDERR_IN_HISTORY \ 1947c478bd9Sstevel@tonic-gate "password in history" 1957c478bd9Sstevel@tonic-gate #define NS_PWDERR_WITHIN_MIN_AGE \ 1967c478bd9Sstevel@tonic-gate "within password minimum age" 1977c478bd9Sstevel@tonic-gate 1987c478bd9Sstevel@tonic-gate /* 1997c478bd9Sstevel@tonic-gate * INTERNALLY USED MACROS 2007c478bd9Sstevel@tonic-gate */ 2017c478bd9Sstevel@tonic-gate 2027c478bd9Sstevel@tonic-gate void __s_api_debug_pause(int priority, int st, const char *mesg); 2037c478bd9Sstevel@tonic-gate 2047c478bd9Sstevel@tonic-gate #define NULL_OR_STR(str) (!(str) || *(str) == '\0' ? "<NULL>" : (str)) 2057c478bd9Sstevel@tonic-gate 2067c478bd9Sstevel@tonic-gate /* 2077c478bd9Sstevel@tonic-gate * MKERROR: builds the error structure and fills in the status and 2087c478bd9Sstevel@tonic-gate * the message. The message must be a freeable (non-static) string. 2097c478bd9Sstevel@tonic-gate * If it fails to allocate memory for the error structure, 2107c478bd9Sstevel@tonic-gate * it will return the retErr. 2117c478bd9Sstevel@tonic-gate */ 2127c478bd9Sstevel@tonic-gate #define MKERROR(priority, err, st, mesg, retErr) \ 2137c478bd9Sstevel@tonic-gate if (((err) = calloc(1, sizeof (struct ns_ldap_error))) == NULL) \ 2147c478bd9Sstevel@tonic-gate return (retErr); \ 2157c478bd9Sstevel@tonic-gate (err)->message = mesg; \ 2167c478bd9Sstevel@tonic-gate (err)->status = (st); \ 2177c478bd9Sstevel@tonic-gate __s_api_debug_pause(priority, st, (err)->message); 2187c478bd9Sstevel@tonic-gate 2197c478bd9Sstevel@tonic-gate /* 2207c478bd9Sstevel@tonic-gate * MKERROR_PWD_MGMT is almost the same as MKERROR 2217c478bd9Sstevel@tonic-gate * except that it takes two more inputs to fill in the 2227c478bd9Sstevel@tonic-gate * password management information part of the 2237c478bd9Sstevel@tonic-gate * ns_ldap_error structure pointed to by err, 2247c478bd9Sstevel@tonic-gate * and it does not log a syslog message. 2257c478bd9Sstevel@tonic-gate */ 2267c478bd9Sstevel@tonic-gate #define MKERROR_PWD_MGMT(err, st, mesg, pwd_status, sec_until_exp, retErr) \ 2277c478bd9Sstevel@tonic-gate if (((err) = calloc(1, sizeof (struct ns_ldap_error))) == NULL) \ 2287c478bd9Sstevel@tonic-gate return (retErr); \ 2297c478bd9Sstevel@tonic-gate (err)->message = mesg; \ 2307c478bd9Sstevel@tonic-gate (err)->status = (st); \ 2317c478bd9Sstevel@tonic-gate (err)->pwd_mgmt.status = (pwd_status); \ 2327c478bd9Sstevel@tonic-gate (err)->pwd_mgmt.sec_until_expired = (sec_until_exp); 2337c478bd9Sstevel@tonic-gate 2347c478bd9Sstevel@tonic-gate #ifdef DEBUG 2357c478bd9Sstevel@tonic-gate #define NSLDAPTRACE(variable, setequal, message) \ 2367c478bd9Sstevel@tonic-gate if (variable > 0 || ((setequal != 0) && (variable == setequal))) { \ 2377c478bd9Sstevel@tonic-gate char buf[BUFSIZ]; \ 2387c478bd9Sstevel@tonic-gate (void) snprintf(buf, BUFSIZ, message); \ 2397c478bd9Sstevel@tonic-gate (void) write(__ldap_debug_file, buf); \ 2407c478bd9Sstevel@tonic-gate } 2417c478bd9Sstevel@tonic-gate #endif 2427c478bd9Sstevel@tonic-gate 2437c478bd9Sstevel@tonic-gate /* 2447c478bd9Sstevel@tonic-gate * INTERNAL DATA STRUCTURES 2457c478bd9Sstevel@tonic-gate */ 2467c478bd9Sstevel@tonic-gate 2477c478bd9Sstevel@tonic-gate /* 2487c478bd9Sstevel@tonic-gate * configuration entry type 2497c478bd9Sstevel@tonic-gate */ 2507c478bd9Sstevel@tonic-gate 2517c478bd9Sstevel@tonic-gate typedef enum { 2527c478bd9Sstevel@tonic-gate SERVERCONFIG = 1, 2537c478bd9Sstevel@tonic-gate CLIENTCONFIG = 2, 2547c478bd9Sstevel@tonic-gate CREDCONFIG = 3 2557c478bd9Sstevel@tonic-gate } ns_conftype_t; 2567c478bd9Sstevel@tonic-gate 2577c478bd9Sstevel@tonic-gate /* 2587c478bd9Sstevel@tonic-gate * datatype of a config entry 2597c478bd9Sstevel@tonic-gate */ 2607c478bd9Sstevel@tonic-gate 2617c478bd9Sstevel@tonic-gate typedef enum { 2627c478bd9Sstevel@tonic-gate NS_UNKNOWN = 0, 2637c478bd9Sstevel@tonic-gate CHARPTR = 1, /* Single character pointer */ 2647c478bd9Sstevel@tonic-gate ARRAYCP = 2, /* comma sep array of char pointers */ 2657c478bd9Sstevel@tonic-gate ARRAYAUTH = 3, /* Array of auths */ 2667c478bd9Sstevel@tonic-gate TIMET = 4, /* time relative value (TTL) */ 2677c478bd9Sstevel@tonic-gate INT = 5, /* single integer */ 2687c478bd9Sstevel@tonic-gate SSDLIST = 6, /* service search descriptor */ 2697c478bd9Sstevel@tonic-gate ATTRMAP = 7, /* attribute mapping */ 2707c478bd9Sstevel@tonic-gate OBJMAP = 8, /* objectclass mapping */ 2717c478bd9Sstevel@tonic-gate SERVLIST = 9, /* serverlist (SP sep array) */ 2727c478bd9Sstevel@tonic-gate ARRAYCRED = 10, /* Array of credentialLevels */ 2737c478bd9Sstevel@tonic-gate SAMLIST = 11, /* serviceAuthenticationMethod */ 2747c478bd9Sstevel@tonic-gate SCLLIST = 12 /* serviceCredentialLevel */ 2757c478bd9Sstevel@tonic-gate } ns_datatype_t; 2767c478bd9Sstevel@tonic-gate 2777c478bd9Sstevel@tonic-gate typedef enum { 2787c478bd9Sstevel@tonic-gate NS_SUCCESS, 2797c478bd9Sstevel@tonic-gate NS_NOTFOUND, 2807c478bd9Sstevel@tonic-gate NS_PARSE_ERR 2817c478bd9Sstevel@tonic-gate } ns_parse_status; 2827c478bd9Sstevel@tonic-gate 2837c478bd9Sstevel@tonic-gate typedef enum { 2847c478bd9Sstevel@tonic-gate NS_DOOR_FMT = 1, 2857c478bd9Sstevel@tonic-gate NS_LDIF_FMT = 2, 2867c478bd9Sstevel@tonic-gate NS_FILE_FMT = 3 2877c478bd9Sstevel@tonic-gate } ns_strfmt_t; 2887c478bd9Sstevel@tonic-gate 2897c478bd9Sstevel@tonic-gate /* 2907c478bd9Sstevel@tonic-gate * This enum reduces the number of version string compares 2917c478bd9Sstevel@tonic-gate * against NS_LDAP_VERSION_1 and NS_LDAP_VERSION_2 2927c478bd9Sstevel@tonic-gate */ 2937c478bd9Sstevel@tonic-gate 2947c478bd9Sstevel@tonic-gate typedef enum { 2957c478bd9Sstevel@tonic-gate NS_LDAP_V1 = 1000, 2967c478bd9Sstevel@tonic-gate NS_LDAP_V2 = 2000 2977c478bd9Sstevel@tonic-gate } ns_version_t; 2987c478bd9Sstevel@tonic-gate 2997c478bd9Sstevel@tonic-gate /* 3007c478bd9Sstevel@tonic-gate * enum<->string mapping construct 3017c478bd9Sstevel@tonic-gate */ 3027c478bd9Sstevel@tonic-gate 3037c478bd9Sstevel@tonic-gate typedef struct ns_enum_map { 3047c478bd9Sstevel@tonic-gate int value; 3057c478bd9Sstevel@tonic-gate char *name; 3067c478bd9Sstevel@tonic-gate } ns_enum_map; 3077c478bd9Sstevel@tonic-gate 3087c478bd9Sstevel@tonic-gate #define ENUM2INT(x) ((int)(x)) 3097c478bd9Sstevel@tonic-gate 3107c478bd9Sstevel@tonic-gate #define INT2PARAMINDEXENUM(x) ((ParamIndexType)(x)) 3117c478bd9Sstevel@tonic-gate #define INT2SEARCHREFENUM(x) ((SearchRef_t)(x)) 3127c478bd9Sstevel@tonic-gate #define INT2SCOPEENUM(x) ((ScopeType_t)(x)) 3137c478bd9Sstevel@tonic-gate #define INT2AUTHENUM(x) ((AuthType_t)(x)) 3147c478bd9Sstevel@tonic-gate #define INT2SECENUM(x) ((TlsType_t)(x)) 3157c478bd9Sstevel@tonic-gate #define INT2PREFONLYENUM(x) ((PrefOnly_t)(x)) 3167c478bd9Sstevel@tonic-gate #define INT2CREDLEVELENUM(x) ((CredLevel_t)(x)) 3177c478bd9Sstevel@tonic-gate 3187c478bd9Sstevel@tonic-gate #define INT2LDAPRETURN(x) ((ns_ldap_return_code)(x)) 3197c478bd9Sstevel@tonic-gate #define INT2CONFIGRETURN(x) ((ns_ldap_config_return_code)(x)) 3207c478bd9Sstevel@tonic-gate #define INT2PARTIALRETURN(x) ((ns_ldap_partial_return_code)(x)) 3217c478bd9Sstevel@tonic-gate 3227c478bd9Sstevel@tonic-gate /* 3237c478bd9Sstevel@tonic-gate * This structure maps service name to rdn components 3247c478bd9Sstevel@tonic-gate * for use in __ns_getDNs. It also defines the SSD-to-use 3257c478bd9Sstevel@tonic-gate * service for use in __s_api_get_SSDtoUse_service. 3267c478bd9Sstevel@tonic-gate * The idea of an SSD-to-use service is to reduce the configuration 3277c478bd9Sstevel@tonic-gate * complexity. For a service, which does not have its own entries in 3287c478bd9Sstevel@tonic-gate * the LDAP directory, SSD for it is useless, and should not be set. 3297c478bd9Sstevel@tonic-gate * But since this service must share the container with at least 3307c478bd9Sstevel@tonic-gate * one other service which does have it own entries, the SSD for 3317c478bd9Sstevel@tonic-gate * this other service will be shared by this service. 3327c478bd9Sstevel@tonic-gate * This other service is called the SSD-to-use service. 3337c478bd9Sstevel@tonic-gate * 3347c478bd9Sstevel@tonic-gate */ 3357c478bd9Sstevel@tonic-gate 3367c478bd9Sstevel@tonic-gate typedef struct ns_service_map { 3377c478bd9Sstevel@tonic-gate char *service; 3387c478bd9Sstevel@tonic-gate char *rdn; 3397c478bd9Sstevel@tonic-gate char *SSDtoUse_service; 3407c478bd9Sstevel@tonic-gate } ns_service_map; 3417c478bd9Sstevel@tonic-gate 3427c478bd9Sstevel@tonic-gate /* 3437c478bd9Sstevel@tonic-gate * This structure contains a single mapping from: 3447c478bd9Sstevel@tonic-gate * service:orig -> list of mapped 3457c478bd9Sstevel@tonic-gate */ 3467c478bd9Sstevel@tonic-gate 3477c478bd9Sstevel@tonic-gate typedef enum { 3487c478bd9Sstevel@tonic-gate NS_ATTR_MAP, 3497c478bd9Sstevel@tonic-gate NS_OBJ_MAP 3507c478bd9Sstevel@tonic-gate } ns_maptype_t; 3517c478bd9Sstevel@tonic-gate 3527c478bd9Sstevel@tonic-gate typedef struct ns_mapping { 3537c478bd9Sstevel@tonic-gate ns_maptype_t type; 3547c478bd9Sstevel@tonic-gate char *service; 3557c478bd9Sstevel@tonic-gate char *orig; 3567c478bd9Sstevel@tonic-gate char **map; 3577c478bd9Sstevel@tonic-gate } ns_mapping_t; 3587c478bd9Sstevel@tonic-gate 3597c478bd9Sstevel@tonic-gate /* 3607c478bd9Sstevel@tonic-gate * The following is the list of internal libsldap configuration data 3617c478bd9Sstevel@tonic-gate * structures. The configuration is populated normally once per 3627c478bd9Sstevel@tonic-gate * application. The assumption is that in applications can be 3637c478bd9Sstevel@tonic-gate * relatively short lived (IE ls via nsswitch) so it is important to 3647c478bd9Sstevel@tonic-gate * keep configuration to a minimum, but keep lookups fast. 3657c478bd9Sstevel@tonic-gate * 3667c478bd9Sstevel@tonic-gate * Assumptions: 3677c478bd9Sstevel@tonic-gate * 1 configuration entry per domain, and almost always 1 domain 3687c478bd9Sstevel@tonic-gate * per app. Hooks exist for multiple domains per app. 3697c478bd9Sstevel@tonic-gate * 3707c478bd9Sstevel@tonic-gate * Configurations are read in from client file cache or from LDAP. 3717c478bd9Sstevel@tonic-gate * Attribute/objectclass mappings are hashed to improve lookup 3727c478bd9Sstevel@tonic-gate * speed. 3737c478bd9Sstevel@tonic-gate */ 3747c478bd9Sstevel@tonic-gate 3757c478bd9Sstevel@tonic-gate /* 3767c478bd9Sstevel@tonic-gate * Hash entry types 3777c478bd9Sstevel@tonic-gate */ 3787c478bd9Sstevel@tonic-gate typedef enum _ns_hashtype_t { 3797c478bd9Sstevel@tonic-gate NS_HASH_AMAP = 1, /* attr map */ 3807c478bd9Sstevel@tonic-gate NS_HASH_RAMAP = 2, /* reverse attr map */ 3817c478bd9Sstevel@tonic-gate NS_HASH_OMAP = 3, /* oc map */ 3827c478bd9Sstevel@tonic-gate NS_HASH_ROMAP = 4, /* reverse oc map */ 3837c478bd9Sstevel@tonic-gate NS_HASH_VOID = 5 3847c478bd9Sstevel@tonic-gate } ns_hashtype_t; 3857c478bd9Sstevel@tonic-gate 3867c478bd9Sstevel@tonic-gate typedef struct ns_hash { 3877c478bd9Sstevel@tonic-gate ns_hashtype_t h_type; 3887c478bd9Sstevel@tonic-gate ns_mapping_t *h_map; 3897c478bd9Sstevel@tonic-gate struct ns_hash *h_next; 3907c478bd9Sstevel@tonic-gate struct ns_hash *h_llnext; 3917c478bd9Sstevel@tonic-gate } ns_hash_t; 3927c478bd9Sstevel@tonic-gate 3937c478bd9Sstevel@tonic-gate /* 3947c478bd9Sstevel@tonic-gate * This structure defines the format of an internal configuration 3957c478bd9Sstevel@tonic-gate * parameter for ns_ldap client. 3967c478bd9Sstevel@tonic-gate */ 3977c478bd9Sstevel@tonic-gate 3987c478bd9Sstevel@tonic-gate typedef struct ns_param { 3997c478bd9Sstevel@tonic-gate ns_datatype_t ns_ptype; 4007c478bd9Sstevel@tonic-gate int ns_acnt; 4017c478bd9Sstevel@tonic-gate union { 4027c478bd9Sstevel@tonic-gate char **ppc; 4037c478bd9Sstevel@tonic-gate int *pi; 4047c478bd9Sstevel@tonic-gate char *pc; 4057c478bd9Sstevel@tonic-gate int i; 4067c478bd9Sstevel@tonic-gate time_t tm; 4077c478bd9Sstevel@tonic-gate } ns_pu; 4087c478bd9Sstevel@tonic-gate } ns_param_t; 4097c478bd9Sstevel@tonic-gate 4107c478bd9Sstevel@tonic-gate #define ns_ppc ns_pu.ppc 4117c478bd9Sstevel@tonic-gate #define ns_pi ns_pu.pi 4127c478bd9Sstevel@tonic-gate #define ns_pc ns_pu.pc 4137c478bd9Sstevel@tonic-gate #define ns_i ns_pu.i 4147c478bd9Sstevel@tonic-gate #define ns_tm ns_pu.tm 4157c478bd9Sstevel@tonic-gate 4167c478bd9Sstevel@tonic-gate /* 4177c478bd9Sstevel@tonic-gate * This structure defines an instance of a configuration structure. 4187c478bd9Sstevel@tonic-gate * paramList contains the current ns_ldap parameter configuration 4197c478bd9Sstevel@tonic-gate * and hashTbl contain the current attribute/objectclass mappings. 4207c478bd9Sstevel@tonic-gate * Parameters are indexed by using the value assigned to the parameter 4217c478bd9Sstevel@tonic-gate * in ParamIndexType. 4227c478bd9Sstevel@tonic-gate */ 4237c478bd9Sstevel@tonic-gate 4247c478bd9Sstevel@tonic-gate typedef struct ns_config { 4257c478bd9Sstevel@tonic-gate char *domainName; 4267c478bd9Sstevel@tonic-gate ns_version_t version; 4277c478bd9Sstevel@tonic-gate ns_param_t paramList[NS_LDAP_MAX_PIT_P]; 4287c478bd9Sstevel@tonic-gate ns_hash_t *hashTbl[NS_HASH_MAX]; 4297c478bd9Sstevel@tonic-gate ns_hash_t *llHead; 4307c478bd9Sstevel@tonic-gate ns_ldap_entry_t *RootDSE; 4317c478bd9Sstevel@tonic-gate boolean_t delete; 4327c478bd9Sstevel@tonic-gate mutex_t config_mutex; 4337c478bd9Sstevel@tonic-gate int nUse; 4347c478bd9Sstevel@tonic-gate } ns_config_t; 4357c478bd9Sstevel@tonic-gate 4367c478bd9Sstevel@tonic-gate /* 4377c478bd9Sstevel@tonic-gate * This structure defines the mapping of the NSCONFIGFILE file 4387c478bd9Sstevel@tonic-gate * statements into their corresponding SolarisNamingProfile, 4397c478bd9Sstevel@tonic-gate * Posix Mapping LDAP attributes, and to their corresponding 4407c478bd9Sstevel@tonic-gate * ParamIndexType enum mapping. THe ParamIndexType enum 4417c478bd9Sstevel@tonic-gate * definitions can be found in ns_ldap.h. This structure also 4427c478bd9Sstevel@tonic-gate * defines the default values that are used when a value either 4437c478bd9Sstevel@tonic-gate * does not exist or is undefined. 4447c478bd9Sstevel@tonic-gate */ 4457c478bd9Sstevel@tonic-gate 4467c478bd9Sstevel@tonic-gate typedef struct ns_default_config { 4477c478bd9Sstevel@tonic-gate const char *name; /* config file parameter name */ 4487c478bd9Sstevel@tonic-gate ParamIndexType index; /* config file enum index */ 4497c478bd9Sstevel@tonic-gate ns_conftype_t config_type; /* CLIENT/SERVER/CREDCONFIG */ 4507c478bd9Sstevel@tonic-gate ns_datatype_t data_type; /* ppc,pi,pc,int etc... */ 4517c478bd9Sstevel@tonic-gate int single_valued; /* TRUE OR FALSE */ 4527c478bd9Sstevel@tonic-gate ns_version_t version; /* Version # for attribute */ 4537c478bd9Sstevel@tonic-gate const char *profile_name; /* profile schema attribute name */ 4547c478bd9Sstevel@tonic-gate ns_param_t defval; /* config file parameter default */ 4557c478bd9Sstevel@tonic-gate int (*ns_verify)(ParamIndexType i, 4567c478bd9Sstevel@tonic-gate struct ns_default_config *def, 4577c478bd9Sstevel@tonic-gate ns_param_t *param, 4587c478bd9Sstevel@tonic-gate char *errbuf); 4597c478bd9Sstevel@tonic-gate ns_enum_map *allowed; /* allowed values */ 4607c478bd9Sstevel@tonic-gate } ns_default_config; 4617c478bd9Sstevel@tonic-gate 4627c478bd9Sstevel@tonic-gate 4637c478bd9Sstevel@tonic-gate /* 4647c478bd9Sstevel@tonic-gate * This typedef enumerates all the supported authentication 4657c478bd9Sstevel@tonic-gate * mechanisms currently supported in this library 4667c478bd9Sstevel@tonic-gate */ 4677c478bd9Sstevel@tonic-gate 4687c478bd9Sstevel@tonic-gate typedef enum EnumAuthType { 4697c478bd9Sstevel@tonic-gate NS_LDAP_EA_NONE = 0, 4707c478bd9Sstevel@tonic-gate NS_LDAP_EA_SIMPLE = 1, 4717c478bd9Sstevel@tonic-gate NS_LDAP_EA_SASL_NONE = 2, 4727c478bd9Sstevel@tonic-gate NS_LDAP_EA_SASL_CRAM_MD5 = 3, 4737c478bd9Sstevel@tonic-gate NS_LDAP_EA_SASL_DIGEST_MD5 = 4, 4747c478bd9Sstevel@tonic-gate NS_LDAP_EA_SASL_DIGEST_MD5_INT = 5, 4757c478bd9Sstevel@tonic-gate NS_LDAP_EA_SASL_DIGEST_MD5_CONF = 6, 4767c478bd9Sstevel@tonic-gate NS_LDAP_EA_SASL_EXTERNAL = 7, 477cb5caa98Sdjl NS_LDAP_EA_SASL_GSSAPI = 8, 4787c478bd9Sstevel@tonic-gate NS_LDAP_EA_SASL_SPNEGO = 9, /* unsupported */ 4797c478bd9Sstevel@tonic-gate NS_LDAP_EA_TLS_NONE = 10, 4807c478bd9Sstevel@tonic-gate NS_LDAP_EA_TLS_SIMPLE = 11, 4817c478bd9Sstevel@tonic-gate NS_LDAP_EA_TLS_SASL_NONE = 12, 4827c478bd9Sstevel@tonic-gate NS_LDAP_EA_TLS_SASL_CRAM_MD5 = 13, 4837c478bd9Sstevel@tonic-gate NS_LDAP_EA_TLS_SASL_DIGEST_MD5 = 14, 4847c478bd9Sstevel@tonic-gate NS_LDAP_EA_TLS_SASL_DIGEST_MD5_INT = 15, 4857c478bd9Sstevel@tonic-gate NS_LDAP_EA_TLS_SASL_DIGEST_MD5_CONF = 16, 4867c478bd9Sstevel@tonic-gate NS_LDAP_EA_TLS_SASL_EXTERNAL = 17, 4877c478bd9Sstevel@tonic-gate NS_LDAP_EA_TLS_SASL_GSSAPI = 18, /* unsupported */ 4887c478bd9Sstevel@tonic-gate NS_LDAP_EA_TLS_SASL_SPNEGO = 19 /* unsupported */ 4897c478bd9Sstevel@tonic-gate } EnumAuthType_t; 4907c478bd9Sstevel@tonic-gate 4917c478bd9Sstevel@tonic-gate 4927c478bd9Sstevel@tonic-gate /* 4937c478bd9Sstevel@tonic-gate * this enum lists the various states of the search state machine 4947c478bd9Sstevel@tonic-gate */ 4957c478bd9Sstevel@tonic-gate 4967c478bd9Sstevel@tonic-gate typedef enum { 4977c478bd9Sstevel@tonic-gate INIT = 1, 4987c478bd9Sstevel@tonic-gate EXIT = 2, 4997c478bd9Sstevel@tonic-gate NEXT_SEARCH_DESCRIPTOR = 3, 5007c478bd9Sstevel@tonic-gate GET_SESSION = 4, 5017c478bd9Sstevel@tonic-gate NEXT_SESSION = 5, 5027c478bd9Sstevel@tonic-gate RESTART_SESSION = 6, 5037c478bd9Sstevel@tonic-gate NEXT_SEARCH = 7, 5047c478bd9Sstevel@tonic-gate NEXT_VLV = 8, 5057c478bd9Sstevel@tonic-gate NEXT_PAGE = 9, 5067c478bd9Sstevel@tonic-gate ONE_SEARCH = 10, 5077c478bd9Sstevel@tonic-gate DO_SEARCH = 11, 5087c478bd9Sstevel@tonic-gate NEXT_RESULT = 12, 5097c478bd9Sstevel@tonic-gate MULTI_RESULT = 13, 5107c478bd9Sstevel@tonic-gate PROCESS_RESULT = 14, 5117c478bd9Sstevel@tonic-gate END_PROCESS_RESULT = 15, 5127c478bd9Sstevel@tonic-gate END_RESULT = 16, 5137c478bd9Sstevel@tonic-gate NEXT_REFERRAL = 17, 5147c478bd9Sstevel@tonic-gate GET_REFERRAL_SESSION = 18, 5157c478bd9Sstevel@tonic-gate ERROR = 19, 51647789246Svv LDAP_ERROR = 20, 517699bceb8Smj GET_ACCT_MGMT_INFO = 21, 518699bceb8Smj CLEAR_RESULTS = 22 5197c478bd9Sstevel@tonic-gate } ns_state_t; 5207c478bd9Sstevel@tonic-gate 5217c478bd9Sstevel@tonic-gate /* 5227c478bd9Sstevel@tonic-gate * this enum lists the various states of the write state machine 5237c478bd9Sstevel@tonic-gate */ 5247c478bd9Sstevel@tonic-gate typedef enum { 5257c478bd9Sstevel@tonic-gate W_INIT = 1, 5267c478bd9Sstevel@tonic-gate W_EXIT = 2, 5277c478bd9Sstevel@tonic-gate GET_CONNECTION = 3, 5287c478bd9Sstevel@tonic-gate SELECT_OPERATION_SYNC = 4, 5297c478bd9Sstevel@tonic-gate SELECT_OPERATION_ASYNC = 5, 5307c478bd9Sstevel@tonic-gate DO_ADD_SYNC = 6, 5317c478bd9Sstevel@tonic-gate DO_DELETE_SYNC = 7, 5327c478bd9Sstevel@tonic-gate DO_MODIFY_SYNC = 8, 5337c478bd9Sstevel@tonic-gate DO_ADD_ASYNC = 9, 5347c478bd9Sstevel@tonic-gate DO_DELETE_ASYNC = 10, 5357c478bd9Sstevel@tonic-gate DO_MODIFY_ASYNC = 11, 5367c478bd9Sstevel@tonic-gate GET_RESULT_SYNC = 12, 5377c478bd9Sstevel@tonic-gate GET_RESULT_ASYNC = 13, 5387c478bd9Sstevel@tonic-gate PARSE_RESULT = 14, 5397c478bd9Sstevel@tonic-gate GET_REFERRAL_CONNECTION = 15, 5407c478bd9Sstevel@tonic-gate W_LDAP_ERROR = 16, 5417c478bd9Sstevel@tonic-gate W_ERROR = 17 5427c478bd9Sstevel@tonic-gate } ns_write_state_t; 5437c478bd9Sstevel@tonic-gate 5447c478bd9Sstevel@tonic-gate 5457c478bd9Sstevel@tonic-gate typedef int ConnectionID; 5467c478bd9Sstevel@tonic-gate 5477c478bd9Sstevel@tonic-gate /* 5487c478bd9Sstevel@tonic-gate * This structure is used by ns_connect to create and manage 5497c478bd9Sstevel@tonic-gate * one or more ldap connections within the library. 5507c478bd9Sstevel@tonic-gate */ 5517c478bd9Sstevel@tonic-gate typedef struct connection { 5527c478bd9Sstevel@tonic-gate ConnectionID connectionId; 553cb5caa98Sdjl boolean_t usedBit; /* true if only used by */ 554cb5caa98Sdjl /* one thread and not shared */ 555cb5caa98Sdjl /* by other threads */ 556cb5caa98Sdjl boolean_t notAvail; /* not sharable, delete */ 557cb5caa98Sdjl /* when shared == 0 */ 558cb5caa98Sdjl int shared; /* number of threads */ 559cb5caa98Sdjl /* using this connection */ 5608277a58bSchinlong pid_t pid; /* process id */ 5617c478bd9Sstevel@tonic-gate char *serverAddr; 562cb5caa98Sdjl ns_cred_t *auth; 5637c478bd9Sstevel@tonic-gate LDAP *ld; 5647c478bd9Sstevel@tonic-gate thread_t threadID; /* thread ID using it */ 5657c478bd9Sstevel@tonic-gate struct ns_ldap_cookie *cookieInfo; 5667c478bd9Sstevel@tonic-gate char **controls; /* from server_info */ 5677c478bd9Sstevel@tonic-gate char **saslMechanisms; /* from server_info */ 5687c478bd9Sstevel@tonic-gate } Connection; 5697c478bd9Sstevel@tonic-gate 5707c478bd9Sstevel@tonic-gate #define ONE_STEP 1 5717c478bd9Sstevel@tonic-gate 5727c478bd9Sstevel@tonic-gate /* 5737c478bd9Sstevel@tonic-gate * This structure is for referrals processing. 5747c478bd9Sstevel@tonic-gate * The data are from referral URLs returned by 5757c478bd9Sstevel@tonic-gate * LDAP servers 5767c478bd9Sstevel@tonic-gate */ 5777c478bd9Sstevel@tonic-gate typedef struct ns_referral_info { 5787c478bd9Sstevel@tonic-gate struct ns_referral_info *next; 5797c478bd9Sstevel@tonic-gate char *refHost; 5807c478bd9Sstevel@tonic-gate int refScope; 5817c478bd9Sstevel@tonic-gate char *refDN; 5827c478bd9Sstevel@tonic-gate char *refFilter; 5837c478bd9Sstevel@tonic-gate } ns_referral_info_t; 5847c478bd9Sstevel@tonic-gate 585*479ac375Sdm struct ns_ldap_cookie; 586*479ac375Sdm 587*479ac375Sdm /* 588*479ac375Sdm * Batch used by __ns_ldap_list_batch_xxx API 589*479ac375Sdm */ 590*479ac375Sdm struct ns_ldap_list_batch { 591*479ac375Sdm uint32_t nactive; 592*479ac375Sdm struct ns_ldap_cookie *next_cookie; 593*479ac375Sdm struct ns_ldap_cookie *cookie_list; 594*479ac375Sdm }; 595*479ac375Sdm 5967c478bd9Sstevel@tonic-gate /* 5977c478bd9Sstevel@tonic-gate * This structure used internally in searches 5987c478bd9Sstevel@tonic-gate */ 5997c478bd9Sstevel@tonic-gate 6007c478bd9Sstevel@tonic-gate typedef struct ns_ldap_cookie { 6017c478bd9Sstevel@tonic-gate /* INPUTS */ 6027c478bd9Sstevel@tonic-gate /* server list position */ 6037c478bd9Sstevel@tonic-gate 6047c478bd9Sstevel@tonic-gate /* service search descriptor list & position */ 6057c478bd9Sstevel@tonic-gate ns_ldap_search_desc_t **sdlist; 6067c478bd9Sstevel@tonic-gate ns_ldap_search_desc_t **sdpos; 6077c478bd9Sstevel@tonic-gate 6087c478bd9Sstevel@tonic-gate /* search filter callback */ 6097c478bd9Sstevel@tonic-gate int use_filtercb; 6107c478bd9Sstevel@tonic-gate int (*init_filter_cb)(const ns_ldap_search_desc_t *desc, 6117c478bd9Sstevel@tonic-gate char **realfilter, const void *userdata); 6127c478bd9Sstevel@tonic-gate 6137c478bd9Sstevel@tonic-gate /* user callback */ 6147c478bd9Sstevel@tonic-gate int use_usercb; 6157c478bd9Sstevel@tonic-gate int (*callback)(const ns_ldap_entry_t *entry, 6167c478bd9Sstevel@tonic-gate const void *userdata); 6177c478bd9Sstevel@tonic-gate const void *userdata; 6187c478bd9Sstevel@tonic-gate 6197c478bd9Sstevel@tonic-gate int followRef; 6207c478bd9Sstevel@tonic-gate int use_paging; 6217c478bd9Sstevel@tonic-gate char *service; 6227c478bd9Sstevel@tonic-gate char *i_filter; 6237c478bd9Sstevel@tonic-gate const char * const *i_attr; 6247c478bd9Sstevel@tonic-gate const ns_cred_t *i_auth; 6257c478bd9Sstevel@tonic-gate int i_flags; 6267c478bd9Sstevel@tonic-gate 6277c478bd9Sstevel@tonic-gate /* OUTPUTS */ 6287c478bd9Sstevel@tonic-gate ns_ldap_result_t *result; 6297c478bd9Sstevel@tonic-gate ns_ldap_entry_t *nextEntry; 6307c478bd9Sstevel@tonic-gate /* Error data */ 6317c478bd9Sstevel@tonic-gate int err_rc; 6327c478bd9Sstevel@tonic-gate ns_ldap_error_t *errorp; 6337c478bd9Sstevel@tonic-gate 6347c478bd9Sstevel@tonic-gate /* PRIVATE */ 6357c478bd9Sstevel@tonic-gate ns_state_t state; 6367c478bd9Sstevel@tonic-gate ns_state_t new_state; 6377c478bd9Sstevel@tonic-gate ns_state_t next_state; 6387c478bd9Sstevel@tonic-gate 6397c478bd9Sstevel@tonic-gate Connection *conn; 640e8ac3ceaSsdussud #define conn_auth_type conn->auth->auth.type 6417c478bd9Sstevel@tonic-gate ConnectionID connectionId; 6427c478bd9Sstevel@tonic-gate 6437c478bd9Sstevel@tonic-gate /* paging VLV/SIMPLEPAGE data */ 6447c478bd9Sstevel@tonic-gate int listType; 6457c478bd9Sstevel@tonic-gate unsigned long index; 6467c478bd9Sstevel@tonic-gate LDAPControl **p_serverctrls; 6477c478bd9Sstevel@tonic-gate 6487c478bd9Sstevel@tonic-gate int scope; 6497c478bd9Sstevel@tonic-gate char *basedn; 6507c478bd9Sstevel@tonic-gate char *filter; 6517c478bd9Sstevel@tonic-gate char **attribute; 6527c478bd9Sstevel@tonic-gate 6537c478bd9Sstevel@tonic-gate /* RESULT PROCESSING */ 6547c478bd9Sstevel@tonic-gate int msgId; 6557c478bd9Sstevel@tonic-gate LDAPMessage *resultMsg; 6567c478bd9Sstevel@tonic-gate 6577c478bd9Sstevel@tonic-gate char **dns; 6587c478bd9Sstevel@tonic-gate char *currentdn; 6597c478bd9Sstevel@tonic-gate int flag; 6607c478bd9Sstevel@tonic-gate struct berval *ctrlCookie; 6617c478bd9Sstevel@tonic-gate 6627c478bd9Sstevel@tonic-gate /* REFERRALS PROCESSING */ 6637c478bd9Sstevel@tonic-gate /* referralinfo list & position */ 6647c478bd9Sstevel@tonic-gate ns_referral_info_t *reflist; 6657c478bd9Sstevel@tonic-gate ns_referral_info_t *refpos; 6667c478bd9Sstevel@tonic-gate /* search timeout value */ 6677c478bd9Sstevel@tonic-gate struct timeval search_timeout; 66847789246Svv /* response control to hold account management information */ 66947789246Svv LDAPControl **resultctrl; 67047789246Svv /* Flag to indicate password less account management is required */ 67147789246Svv int nopasswd_acct_mgmt; 6728277a58bSchinlong int err_from_result; 673*479ac375Sdm 674*479ac375Sdm /* BATCH PROCESSING */ 675*479ac375Sdm ns_ldap_list_batch_t *batch; 676*479ac375Sdm boolean_t no_wait; 677*479ac375Sdm ns_ldap_result_t **caller_result; 678*479ac375Sdm ns_ldap_error_t **caller_errorp; 679*479ac375Sdm int *caller_rc; 680*479ac375Sdm struct ns_ldap_cookie *next_cookie_in_batch; 6817c478bd9Sstevel@tonic-gate } ns_ldap_cookie_t; 6827c478bd9Sstevel@tonic-gate 6837c478bd9Sstevel@tonic-gate /* 6847c478bd9Sstevel@tonic-gate * This structure is part of the return value information for 6857c478bd9Sstevel@tonic-gate * __s_api_requestServer. The routine that requests a new server 6867c478bd9Sstevel@tonic-gate * from the cache manager 6877c478bd9Sstevel@tonic-gate */ 6887c478bd9Sstevel@tonic-gate typedef struct ns_server_info { 6897c478bd9Sstevel@tonic-gate char *server; 6904a6b6ac4Schinlong char *serverFQDN; 6917c478bd9Sstevel@tonic-gate char **controls; 6927c478bd9Sstevel@tonic-gate char **saslMechanisms; 6937c478bd9Sstevel@tonic-gate } ns_server_info_t; 6947c478bd9Sstevel@tonic-gate 695cb5caa98Sdjl /* 696cb5caa98Sdjl * sasl callback function parameters 697cb5caa98Sdjl */ 698cb5caa98Sdjl typedef struct ns_sasl_cb_param { 699cb5caa98Sdjl char *mech; 700cb5caa98Sdjl char *authid; 701cb5caa98Sdjl char *authzid; 702cb5caa98Sdjl char *passwd; 703cb5caa98Sdjl char *realm; 704cb5caa98Sdjl } ns_sasl_cb_param_t; 705cb5caa98Sdjl 706cb5caa98Sdjl /* self/sasl/gssapi variable */ 707cb5caa98Sdjl extern int sasl_gssapi_inited; 708cb5caa98Sdjl 709cb5caa98Sdjl /* Multiple threads per connection variable */ 710cb5caa98Sdjl extern int MTperConn; 711cb5caa98Sdjl 7127c478bd9Sstevel@tonic-gate /* 7137c478bd9Sstevel@tonic-gate * INTERNAL GLOBAL DEFINITIONS AND FUNCTION DECLARATIONS 7147c478bd9Sstevel@tonic-gate */ 7157c478bd9Sstevel@tonic-gate 7167c478bd9Sstevel@tonic-gate #ifdef DEBUG 7177c478bd9Sstevel@tonic-gate extern int __ldap_debug_file; 7187c478bd9Sstevel@tonic-gate extern int __ldap_debug_api; 7197c478bd9Sstevel@tonic-gate extern int __ldap_debug_ldap; 7207c478bd9Sstevel@tonic-gate extern int __ldap_debug_servers; 7217c478bd9Sstevel@tonic-gate #endif 7227c478bd9Sstevel@tonic-gate 7237c478bd9Sstevel@tonic-gate /* internal connection APIs */ 7247c478bd9Sstevel@tonic-gate void DropConnection(ConnectionID, int); 7257c478bd9Sstevel@tonic-gate int __s_api_getServers(char *** servers, ns_ldap_error_t ** error); 7267c478bd9Sstevel@tonic-gate 7277c478bd9Sstevel@tonic-gate int __s_get_enum_value(ns_config_t *ptr, char *value, ParamIndexType i); 7287c478bd9Sstevel@tonic-gate char *__s_get_auth_name(ns_config_t *ptr, AuthType_t type); 7297c478bd9Sstevel@tonic-gate char *__s_get_security_name(ns_config_t *ptr, TlsType_t type); 7307c478bd9Sstevel@tonic-gate char *__s_get_scope_name(ns_config_t *ptr, ScopeType_t type); 7317c478bd9Sstevel@tonic-gate char *__s_get_pref_name(PrefOnly_t type); 7327c478bd9Sstevel@tonic-gate char *__s_get_searchref_name(ns_config_t *ptr, SearchRef_t type); 7337c478bd9Sstevel@tonic-gate char *__s_get_hostcertpath(void); 7347c478bd9Sstevel@tonic-gate 7357c478bd9Sstevel@tonic-gate 7367c478bd9Sstevel@tonic-gate /* ************ internal sldap-api functions *********** */ 7377c478bd9Sstevel@tonic-gate void __ns_ldap_freeEntry(ns_ldap_entry_t *ep); 7387c478bd9Sstevel@tonic-gate void __s_api_split_key_value(char *buffer, char **name, char **value); 7397c478bd9Sstevel@tonic-gate int __s_api_printResult(ns_ldap_result_t *); 7407c478bd9Sstevel@tonic-gate int __s_api_getSearchScope(int *, ns_ldap_error_t **); 7417c478bd9Sstevel@tonic-gate int __s_api_getDNs(char ***, const char *, 7427c478bd9Sstevel@tonic-gate ns_ldap_error_t **); 7437c478bd9Sstevel@tonic-gate int __s_api_get_search_DNs_v1(char ***, const char *, 7447c478bd9Sstevel@tonic-gate ns_ldap_error_t **); 7457c478bd9Sstevel@tonic-gate int __s_api_getConnection(const char *, const int, 7467c478bd9Sstevel@tonic-gate const ns_cred_t *, int *, 74747789246Svv Connection **, ns_ldap_error_t **, int, int); 7487c478bd9Sstevel@tonic-gate char **__s_api_cp2dArray(char **); 7497c478bd9Sstevel@tonic-gate void __s_api_free2dArray(char **); 7507c478bd9Sstevel@tonic-gate 7517c478bd9Sstevel@tonic-gate int __s_api_isCtrlSupported(Connection *, char *); 7527c478bd9Sstevel@tonic-gate ns_config_t *__ns_ldap_make_config(ns_ldap_result_t *result); 7537c478bd9Sstevel@tonic-gate ns_auth_t *__s_api_AuthEnumtoStruct(const EnumAuthType_t i); 754253f5c5dSmj int __s_api_peruser_proc(void); 7558142c2b2Schinlong int __s_api_nscd_proc(void); 7567c478bd9Sstevel@tonic-gate char *dvalue(char *); 7577c478bd9Sstevel@tonic-gate char *evalue(char *); 7587c478bd9Sstevel@tonic-gate 7597c478bd9Sstevel@tonic-gate extern void get_environment(); 7607c478bd9Sstevel@tonic-gate 7617c478bd9Sstevel@tonic-gate /* internal Param APIs */ 7627c478bd9Sstevel@tonic-gate int __ns_ldap_setParamValue(ns_config_t *ptr, 7637c478bd9Sstevel@tonic-gate const ParamIndexType type, 7647c478bd9Sstevel@tonic-gate const void *data, ns_ldap_error_t **error); 7657c478bd9Sstevel@tonic-gate int __s_api_get_type(const char *value, ParamIndexType *type); 7667c478bd9Sstevel@tonic-gate int __s_api_get_versiontype(ns_config_t *ptr, char *value, 7677c478bd9Sstevel@tonic-gate ParamIndexType *type); 7687c478bd9Sstevel@tonic-gate int __s_api_get_profiletype(char *value, ParamIndexType *type); 7697c478bd9Sstevel@tonic-gate void __s_api_init_config(ns_config_t *ptr); 7707c478bd9Sstevel@tonic-gate ns_parse_status __s_api_crosscheck(ns_config_t *domainptr, char *errstr, 7717c478bd9Sstevel@tonic-gate int check_dn); 7727c478bd9Sstevel@tonic-gate ns_config_t *__s_api_create_config(void); 7737c478bd9Sstevel@tonic-gate ns_config_t *__s_api_get_default_config(void); 7747c478bd9Sstevel@tonic-gate ns_config_t *__s_api_loadrefresh_config(); 7757c478bd9Sstevel@tonic-gate void __s_api_destroy_config(ns_config_t *ptr); 7767c478bd9Sstevel@tonic-gate int __s_api_get_configtype(ParamIndexType type); 7777c478bd9Sstevel@tonic-gate const char *__s_api_get_configname(ParamIndexType type); 7787c478bd9Sstevel@tonic-gate char *__s_api_strValue(ns_config_t *ptr, char *str, 7797c478bd9Sstevel@tonic-gate int bufsz, ParamIndexType i, 7807c478bd9Sstevel@tonic-gate ns_strfmt_t fmt); 7817c478bd9Sstevel@tonic-gate void __s_api_release_config(ns_config_t *cfg); 7827c478bd9Sstevel@tonic-gate 7837c478bd9Sstevel@tonic-gate /* internal attribute/objectclass mapping api's */ 7847c478bd9Sstevel@tonic-gate int __s_api_add_map2hash(ns_config_t *config, 7857c478bd9Sstevel@tonic-gate ns_hashtype_t type, ns_mapping_t *map); 7867c478bd9Sstevel@tonic-gate void __s_api_destroy_hash(ns_config_t *config); 7877c478bd9Sstevel@tonic-gate int __s_api_parse_map(char *cp, char **sid, 7887c478bd9Sstevel@tonic-gate char **origA, char ***mapA); 7897c478bd9Sstevel@tonic-gate char **__ns_ldap_mapAttributeList(const char *service, 7907c478bd9Sstevel@tonic-gate const char * const *origAttrList); 7917c478bd9Sstevel@tonic-gate 7927c478bd9Sstevel@tonic-gate /* internal configuration APIs */ 7937c478bd9Sstevel@tonic-gate void __ns_ldap_setServer(int set); 7947c478bd9Sstevel@tonic-gate ns_ldap_error_t *__ns_ldap_LoadConfiguration(); 7957c478bd9Sstevel@tonic-gate ns_ldap_error_t *__ns_ldap_LoadDoorInfo(LineBuf *configinfo, char *domainname); 7967c478bd9Sstevel@tonic-gate ns_ldap_error_t *__ns_ldap_DumpConfiguration(char *filename); 7977c478bd9Sstevel@tonic-gate ns_ldap_error_t *__ns_ldap_DumpLdif(char *filename); 7987c478bd9Sstevel@tonic-gate int __ns_ldap_cache_ping(); 799cb5caa98Sdjl ns_ldap_error_t *__ns_ldap_print_config(int); 800cb5caa98Sdjl void __ns_ldap_default_config(); 801cb5caa98Sdjl int __ns_ldap_download(const char *, char *, char *, 802cb5caa98Sdjl ns_ldap_error_t **); 803cb5caa98Sdjl int 804cb5caa98Sdjl __ns_ldap_check_dns_preq(int foreground, 805cb5caa98Sdjl int mode_verbose, 806cb5caa98Sdjl int mode_quiet, 807cb5caa98Sdjl const char *fname, 808cb5caa98Sdjl ns_ldap_self_gssapi_config_t config, 809cb5caa98Sdjl ns_ldap_error_t **errpp); 810cb5caa98Sdjl int 811cb5caa98Sdjl __ns_ldap_check_gssapi_preq(int foreground, 812cb5caa98Sdjl int mode_verbose, 813cb5caa98Sdjl int mode_quiet, 814cb5caa98Sdjl ns_ldap_self_gssapi_config_t config, 815cb5caa98Sdjl ns_ldap_error_t **errpp); 816cb5caa98Sdjl int 817cb5caa98Sdjl __ns_ldap_check_all_preq(int foreground, 818cb5caa98Sdjl int mode_verbose, 819cb5caa98Sdjl int mode_quiet, 820cb5caa98Sdjl ns_ldap_self_gssapi_config_t config, 821cb5caa98Sdjl ns_ldap_error_t **errpp); 8227c478bd9Sstevel@tonic-gate 8237c478bd9Sstevel@tonic-gate /* internal un-exposed APIs */ 8247c478bd9Sstevel@tonic-gate ns_cred_t *__ns_ldap_dupAuth(const ns_cred_t *authp); 8257c478bd9Sstevel@tonic-gate int __s_api_get_SSD_from_SSDtoUse_service(const char *service, 8267c478bd9Sstevel@tonic-gate ns_ldap_search_desc_t ***SSDlist, 8277c478bd9Sstevel@tonic-gate ns_ldap_error_t **errorp); 8287c478bd9Sstevel@tonic-gate int __s_api_prepend_automountmapname(const char *service, 8297c478bd9Sstevel@tonic-gate ns_ldap_search_desc_t ***SSDlist, 8307c478bd9Sstevel@tonic-gate ns_ldap_error_t ** errorp); 8317c478bd9Sstevel@tonic-gate int __s_api_prepend_automountmapname_to_dn(const char *service, 8327c478bd9Sstevel@tonic-gate char **basedn, 8337c478bd9Sstevel@tonic-gate ns_ldap_error_t ** errorp); 8347c478bd9Sstevel@tonic-gate int __s_api_convert_automountmapname(const char *service, 8357c478bd9Sstevel@tonic-gate char **dn, ns_ldap_error_t ** errorp); 8367c478bd9Sstevel@tonic-gate int __s_api_replace_mapped_attr_in_dn( 8377c478bd9Sstevel@tonic-gate const char *orig_attr, const char *mapped_attr, 8387c478bd9Sstevel@tonic-gate const char *dn, char **new_dn); 8397c478bd9Sstevel@tonic-gate int __s_api_append_default_basedn( 8407c478bd9Sstevel@tonic-gate const char *dn, 8417c478bd9Sstevel@tonic-gate char **new_dn, 8427c478bd9Sstevel@tonic-gate int *allocated, 8437c478bd9Sstevel@tonic-gate ns_ldap_error_t ** errorp); 844e8ac3ceaSsdussud int __s_api_removeServer(const char *server); 845689c2bf4Sjanga void __s_api_removeBadServers(char **server); 8464a6b6ac4Schinlong void __s_api_free_server_info(ns_server_info_t *sinfo); 8477c478bd9Sstevel@tonic-gate 8487c478bd9Sstevel@tonic-gate /* internal referrals APIs */ 8497c478bd9Sstevel@tonic-gate int __s_api_toFollowReferrals(const int flags, 8507c478bd9Sstevel@tonic-gate int *toFollow, 8517c478bd9Sstevel@tonic-gate ns_ldap_error_t **errorp); 8527c478bd9Sstevel@tonic-gate int __s_api_addRefInfo(ns_referral_info_t **head, 8537c478bd9Sstevel@tonic-gate char *url, char *baseDN, int *scope, 8547c478bd9Sstevel@tonic-gate char *filter, LDAP *ld); 8557c478bd9Sstevel@tonic-gate void __s_api_deleteRefInfo(ns_referral_info_t *head); 8567c478bd9Sstevel@tonic-gate 8577c478bd9Sstevel@tonic-gate /* callback routine for SSD filters */ 8587c478bd9Sstevel@tonic-gate int __s_api_merge_SSD_filter(const ns_ldap_search_desc_t *desc, 8597c478bd9Sstevel@tonic-gate char **realfilter, 8607c478bd9Sstevel@tonic-gate const void *userdata); 8617c478bd9Sstevel@tonic-gate 8627c478bd9Sstevel@tonic-gate /* network address verification api */ 8637c478bd9Sstevel@tonic-gate int __s_api_isipv4(char *addr); 8647c478bd9Sstevel@tonic-gate int __s_api_isipv6(char *addr); 8657c478bd9Sstevel@tonic-gate int __s_api_ishost(char *addr); 8667c478bd9Sstevel@tonic-gate 8677c478bd9Sstevel@tonic-gate /* password management routine */ 8687c478bd9Sstevel@tonic-gate ns_ldap_passwd_status_t 8697c478bd9Sstevel@tonic-gate __s_api_set_passwd_status(int errnum, char *errmsg); 8707c478bd9Sstevel@tonic-gate int __s_api_contain_passwd_control_oid(char **oids); 8717c478bd9Sstevel@tonic-gate 87247789246Svv /* password less account management routine */ 87347789246Svv int __s_api_contain_account_usable_control_oid(char **oids); 87447789246Svv 8757c478bd9Sstevel@tonic-gate /* RFC 2307 section 5.6. Get a canonical name from entry */ 8767c478bd9Sstevel@tonic-gate char *__s_api_get_canonical_name(ns_ldap_entry_t *entry, 8777c478bd9Sstevel@tonic-gate ns_ldap_attr_t *attrptr, int case_ignore); 8787c478bd9Sstevel@tonic-gate 879cb5caa98Sdjl /* self/sasl/gssapi functions */ 880cb5caa98Sdjl int __s_api_sasl_bind_callback( 881cb5caa98Sdjl LDAP *ld, 882cb5caa98Sdjl unsigned flags, 883cb5caa98Sdjl void *defaults, 884cb5caa98Sdjl void *in); 885cb5caa98Sdjl 886cb5caa98Sdjl int __s_api_self_gssapi_only_get(void); 887cb5caa98Sdjl int __s_api_sasl_gssapi_init(void); 8888277a58bSchinlong int __s_api_check_MTC_tsd(); 889cb5caa98Sdjl 890cb5caa98Sdjl /* Multiple threads per connection functions */ 891cb5caa98Sdjl void ns_tsd_cleanup(void *); 892cb5caa98Sdjl 8937c478bd9Sstevel@tonic-gate #ifdef __cplusplus 8947c478bd9Sstevel@tonic-gate } 8957c478bd9Sstevel@tonic-gate #endif 8967c478bd9Sstevel@tonic-gate 8977c478bd9Sstevel@tonic-gate #endif /* _NS_INTERNAL_H */ 898