17c478bd9Sstevel@tonic-gate /* 27c478bd9Sstevel@tonic-gate * CDDL HEADER START 37c478bd9Sstevel@tonic-gate * 47c478bd9Sstevel@tonic-gate * The contents of this file are subject to the terms of the 57c478bd9Sstevel@tonic-gate * Common Development and Distribution License, Version 1.0 only 67c478bd9Sstevel@tonic-gate * (the "License"). You may not use this file except in compliance 77c478bd9Sstevel@tonic-gate * with the License. 87c478bd9Sstevel@tonic-gate * 97c478bd9Sstevel@tonic-gate * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 107c478bd9Sstevel@tonic-gate * or http://www.opensolaris.org/os/licensing. 117c478bd9Sstevel@tonic-gate * See the License for the specific language governing permissions 127c478bd9Sstevel@tonic-gate * and limitations under the License. 137c478bd9Sstevel@tonic-gate * 147c478bd9Sstevel@tonic-gate * When distributing Covered Code, include this CDDL HEADER in each 157c478bd9Sstevel@tonic-gate * file and include the License file at usr/src/OPENSOLARIS.LICENSE. 167c478bd9Sstevel@tonic-gate * If applicable, add the following below this CDDL HEADER, with the 177c478bd9Sstevel@tonic-gate * fields enclosed by brackets "[]" replaced with your own identifying 187c478bd9Sstevel@tonic-gate * information: Portions Copyright [yyyy] [name of copyright owner] 197c478bd9Sstevel@tonic-gate * 207c478bd9Sstevel@tonic-gate * CDDL HEADER END 217c478bd9Sstevel@tonic-gate */ 227c478bd9Sstevel@tonic-gate /* 23*e8ac3ceaSsdussud * Copyright 2005 Sun Microsystems, Inc. All rights reserved. 247c478bd9Sstevel@tonic-gate * Use is subject to license terms. 257c478bd9Sstevel@tonic-gate */ 267c478bd9Sstevel@tonic-gate 277c478bd9Sstevel@tonic-gate 287c478bd9Sstevel@tonic-gate #ifndef _NS_INTERNAL_H 297c478bd9Sstevel@tonic-gate #define _NS_INTERNAL_H 307c478bd9Sstevel@tonic-gate 317c478bd9Sstevel@tonic-gate #pragma ident "%Z%%M% %I% %E% SMI" 327c478bd9Sstevel@tonic-gate 337c478bd9Sstevel@tonic-gate #ifdef __cplusplus 347c478bd9Sstevel@tonic-gate extern "C" { 357c478bd9Sstevel@tonic-gate #endif 367c478bd9Sstevel@tonic-gate 377c478bd9Sstevel@tonic-gate #include <stdio.h> 387c478bd9Sstevel@tonic-gate #include <sys/types.h> 397c478bd9Sstevel@tonic-gate #include <sys/time.h> 407c478bd9Sstevel@tonic-gate #include <thread.h> 417c478bd9Sstevel@tonic-gate #include <lber.h> 427c478bd9Sstevel@tonic-gate #include <ldap.h> 437c478bd9Sstevel@tonic-gate #include "ns_sldap.h" 447c478bd9Sstevel@tonic-gate 457c478bd9Sstevel@tonic-gate /* 467c478bd9Sstevel@tonic-gate * INTERNALLY USED CONSTANTS 477c478bd9Sstevel@tonic-gate */ 487c478bd9Sstevel@tonic-gate 497c478bd9Sstevel@tonic-gate #define MAXERROR 2000 507c478bd9Sstevel@tonic-gate #define TRUE 1 517c478bd9Sstevel@tonic-gate #define FALSE 0 527c478bd9Sstevel@tonic-gate #define NSLDAPDIRECTORY "/var/ldap" 537c478bd9Sstevel@tonic-gate #define NSCONFIGFILE "/var/ldap/ldap_client_file" 547c478bd9Sstevel@tonic-gate #define NSCONFIGREFRESH "/var/ldap/ldap_client_file.refresh" 557c478bd9Sstevel@tonic-gate #define NSCREDFILE "/var/ldap/ldap_client_cred" 567c478bd9Sstevel@tonic-gate #define NSCREDREFRESH "/var/ldap/ldap_client_cred.refresh" 577c478bd9Sstevel@tonic-gate #define ROTORSIZE 256 587c478bd9Sstevel@tonic-gate #define MASK 0377 597c478bd9Sstevel@tonic-gate #define LDAPMAXHARDLOOKUPTIME 256 607c478bd9Sstevel@tonic-gate #define DONOTEDIT \ 617c478bd9Sstevel@tonic-gate "Do not edit this file manually; your changes will be lost." \ 627c478bd9Sstevel@tonic-gate "Please use ldapclient (1M) instead." 637c478bd9Sstevel@tonic-gate #define MAXPORTNUMBER 65535 647c478bd9Sstevel@tonic-gate #define MAXPORTNUMBER_STR "65535" 657c478bd9Sstevel@tonic-gate #define CREDFILE 0 667c478bd9Sstevel@tonic-gate #define CONFIGFILE 1 677c478bd9Sstevel@tonic-gate #define UIDNUMFILTER "(&(objectclass=posixAccount)(uidnumber=%s))" 687c478bd9Sstevel@tonic-gate #define UIDNUMFILTER_SSD "(&(%%s)(uidnumber=%s))" 697c478bd9Sstevel@tonic-gate #define UIDFILTER "(&(objectclass=posixAccount)(uid=%s))" 707c478bd9Sstevel@tonic-gate #define UIDFILTER_SSD "(&(%%s)(uid=%s))" 717c478bd9Sstevel@tonic-gate #define HOSTFILTER "(&(objectclass=ipHost)(cn=%s))" 727c478bd9Sstevel@tonic-gate #define HOSTFILTER_SSD "(&(%%s)(cn=%s))" 737c478bd9Sstevel@tonic-gate 747c478bd9Sstevel@tonic-gate #define SIMPLEPAGECTRLFLAG 1 757c478bd9Sstevel@tonic-gate #define VLVCTRLFLAG 2 767c478bd9Sstevel@tonic-gate 777c478bd9Sstevel@tonic-gate #define LISTPAGESIZE 1000 787c478bd9Sstevel@tonic-gate #define ENUMPAGESIZE 100 797c478bd9Sstevel@tonic-gate #define SORTKEYLIST "cn uid" 807c478bd9Sstevel@tonic-gate 817c478bd9Sstevel@tonic-gate #define DEFMAX 8 827c478bd9Sstevel@tonic-gate #define TOKENSEPARATOR '=' 837c478bd9Sstevel@tonic-gate #define QUOTETOK '"' 847c478bd9Sstevel@tonic-gate #define SPACETOK ' ' 857c478bd9Sstevel@tonic-gate #define COMMATOK ',' 867c478bd9Sstevel@tonic-gate #define COLONTOK ':' 877c478bd9Sstevel@tonic-gate #define QUESTTOK '?' 887c478bd9Sstevel@tonic-gate #define SEMITOK ';' 897c478bd9Sstevel@tonic-gate #define TABTOK '\t' 907c478bd9Sstevel@tonic-gate #define OPARATOK '(' 917c478bd9Sstevel@tonic-gate #define CPARATOK ')' 927c478bd9Sstevel@tonic-gate #define BSLTOK '\\' 937c478bd9Sstevel@tonic-gate #define DOORLINESEP "\07" 947c478bd9Sstevel@tonic-gate #define COMMASEP ", " 957c478bd9Sstevel@tonic-gate #define SPACESEP " " 967c478bd9Sstevel@tonic-gate #define SEMISEP ";" 977c478bd9Sstevel@tonic-gate #define COLONSEP ":" 987c478bd9Sstevel@tonic-gate #define COLSPSEP ": " 997c478bd9Sstevel@tonic-gate #define EQUALSEP "=" 1007c478bd9Sstevel@tonic-gate #define EQUSPSEP "= " 1017c478bd9Sstevel@tonic-gate #define LAST_VALUE (int)NS_LDAP_HOST_CERTPATH_P 1027c478bd9Sstevel@tonic-gate #define BUFSIZE 1024 1037c478bd9Sstevel@tonic-gate #define DEFAULTCONFIGNAME "__default_config" 1047c478bd9Sstevel@tonic-gate #define EXP_DEFAULT_TTL "43200" /* 12 hours TTL */ 1057c478bd9Sstevel@tonic-gate #define CRYPTMARK "{NS1}" 1067c478bd9Sstevel@tonic-gate #define DOORBUFFERSIZE 8192 1077c478bd9Sstevel@tonic-gate 1087c478bd9Sstevel@tonic-gate #define LDIF_FMT_STR "%s: %s" 1097c478bd9Sstevel@tonic-gate #define FILE_FMT_STR "%s= %s" 1107c478bd9Sstevel@tonic-gate #define DOOR_FMT_STR "%s=%s" 1117c478bd9Sstevel@tonic-gate 1127c478bd9Sstevel@tonic-gate #define SESSION_CACHE_INC 8 1137c478bd9Sstevel@tonic-gate #define CONID_OFFSET 1024 1147c478bd9Sstevel@tonic-gate #define NS_DEFAULT_BIND_TIMEOUT 30 /* timeout value in seconds */ 1157c478bd9Sstevel@tonic-gate #define NS_DEFAULT_SEARCH_TIMEOUT 30 /* timeout value in seconds */ 1167c478bd9Sstevel@tonic-gate 1177c478bd9Sstevel@tonic-gate /* max rdn length in conversion routines used by __ns_ldap_addTypedEntry() */ 1187c478bd9Sstevel@tonic-gate #define RDNSIZE 256 1197c478bd9Sstevel@tonic-gate 1207c478bd9Sstevel@tonic-gate 1217c478bd9Sstevel@tonic-gate /* Phase 1 profile information */ 1227c478bd9Sstevel@tonic-gate #define _PROFILE1_OBJECTCLASS "SolarisNamingProfile" 1237c478bd9Sstevel@tonic-gate #define _PROFILE_CONTAINER "profile" 1247c478bd9Sstevel@tonic-gate #define _PROFILE_FILTER "(&(|(objectclass=%s)(objectclass=%s))(cn=%s))" 1257c478bd9Sstevel@tonic-gate 1267c478bd9Sstevel@tonic-gate /* Phase 2 profile information */ 1277c478bd9Sstevel@tonic-gate #define _PROFILE2_OBJECTCLASS "DUAConfigProfile" 1287c478bd9Sstevel@tonic-gate 1297c478bd9Sstevel@tonic-gate /* Common to all profiles */ 1307c478bd9Sstevel@tonic-gate #define _P_CN "cn" 1317c478bd9Sstevel@tonic-gate 1327c478bd9Sstevel@tonic-gate /* Native LDAP Phase 1 Specific Profile Attributes */ 1337c478bd9Sstevel@tonic-gate #define _P1_SERVERS "SolarisLDAPServers" 1347c478bd9Sstevel@tonic-gate #define _P1_SEARCHBASEDN "SolarisSearchBaseDN" 1357c478bd9Sstevel@tonic-gate #define _P1_CACHETTL "SolarisCacheTTL" 1367c478bd9Sstevel@tonic-gate #define _P1_BINDDN "SolarisBindDN" 1377c478bd9Sstevel@tonic-gate #define _P1_BINDPASSWORD "SolarisBindPassword" 1387c478bd9Sstevel@tonic-gate #define _P1_AUTHMETHOD "SolarisAuthMethod" 1397c478bd9Sstevel@tonic-gate #define _P1_TRANSPORTSECURITY "SolarisTransportSecurity" 1407c478bd9Sstevel@tonic-gate #define _P1_CERTIFICATEPATH "SolarisCertificatePath" 1417c478bd9Sstevel@tonic-gate #define _P1_CERTIFICATEPASSWORD "SolarisCertificatePassword" 1427c478bd9Sstevel@tonic-gate #define _P1_DATASEARCHDN "SolarisDataSearchDN" 1437c478bd9Sstevel@tonic-gate #define _P1_SEARCHSCOPE "SolarisSearchScope" 1447c478bd9Sstevel@tonic-gate #define _P1_SEARCHTIMELIMIT "SolarisSearchTimeLimit" 1457c478bd9Sstevel@tonic-gate #define _P1_PREFERREDSERVER "SolarisPreferredServer" 1467c478bd9Sstevel@tonic-gate #define _P1_PREFERREDSERVERONLY "SolarisPreferredServerOnly" 1477c478bd9Sstevel@tonic-gate #define _P1_SEARCHREFERRAL "SolarisSearchReferral" 1487c478bd9Sstevel@tonic-gate #define _P1_BINDTIMELIMIT "SolarisBindTimeLimit" 1497c478bd9Sstevel@tonic-gate 1507c478bd9Sstevel@tonic-gate /* Native LDAP Phase 2 Specific Profile Attributes */ 1517c478bd9Sstevel@tonic-gate #define _P2_PREFERREDSERVER "preferredServerList" 1527c478bd9Sstevel@tonic-gate #define _P2_DEFAULTSERVER "defaultServerList" 1537c478bd9Sstevel@tonic-gate #define _P2_SEARCHBASEDN "defaultSearchBase" 1547c478bd9Sstevel@tonic-gate #define _P2_SEARCHSCOPE "defaultSearchScope" 1557c478bd9Sstevel@tonic-gate #define _P2_AUTHMETHOD "authenticationMethod" 1567c478bd9Sstevel@tonic-gate #define _P2_CREDENTIALLEVEL "credentialLevel" 1577c478bd9Sstevel@tonic-gate #define _P2_SERVICESEARCHDESC "serviceSearchDescriptor" 1587c478bd9Sstevel@tonic-gate #define _P2_SEARCHTIMELIMIT "searchTimeLimit" 1597c478bd9Sstevel@tonic-gate #define _P2_BINDTIMELIMIT "bindTimeLimit" 1607c478bd9Sstevel@tonic-gate #define _P2_FOLLOWREFERRALS "followReferrals" 1617c478bd9Sstevel@tonic-gate #define _P2_PROFILETTL "profileTTL" 1627c478bd9Sstevel@tonic-gate #define _P2_ATTRIBUTEMAP "attributeMap" 1637c478bd9Sstevel@tonic-gate #define _P2_OBJECTCLASSMAP "objectClassMap" 1647c478bd9Sstevel@tonic-gate #define _P2_SERVICECREDLEVEL "serviceCredentialLevel" 1657c478bd9Sstevel@tonic-gate #define _P2_SERVICEAUTHMETHOD "serviceAuthenticationMethod" 1667c478bd9Sstevel@tonic-gate 1677c478bd9Sstevel@tonic-gate /* Control & SASL information from RootDSE door call */ 1687c478bd9Sstevel@tonic-gate #define _SASLMECHANISM "supportedSASLmechanisms" 1697c478bd9Sstevel@tonic-gate #define _SASLMECHANISM_LEN 23 1707c478bd9Sstevel@tonic-gate #define _SUPPORTEDCONTROL "supportedControl" 1717c478bd9Sstevel@tonic-gate #define _SUPPORTEDCONTROL_LEN 16 1727c478bd9Sstevel@tonic-gate 1737c478bd9Sstevel@tonic-gate #define NS_HASH_MAX 257 1747c478bd9Sstevel@tonic-gate #define NS_HASH_SCHEMA_MAPPING_EXISTED "=MAPPING EXISTED=" 1757c478bd9Sstevel@tonic-gate #define NS_HASH_RC_SUCCESS 1 1767c478bd9Sstevel@tonic-gate #define NS_HASH_RC_NO_MEMORY -1 1777c478bd9Sstevel@tonic-gate #define NS_HASH_RC_CONFIG_ERROR -2 1787c478bd9Sstevel@tonic-gate #define NS_HASH_RC_EXISTED -3 1797c478bd9Sstevel@tonic-gate #define NS_HASH_RC_SYNTAX_ERROR -4 1807c478bd9Sstevel@tonic-gate 1817c478bd9Sstevel@tonic-gate /* Password management related error message from iDS ldap server */ 1827c478bd9Sstevel@tonic-gate #define NS_PWDERR_MAXTRIES \ 1837c478bd9Sstevel@tonic-gate "Exceed password retry limit." 1847c478bd9Sstevel@tonic-gate #define NS_PWDERR_EXPIRED \ 1857c478bd9Sstevel@tonic-gate "password expired!" 1867c478bd9Sstevel@tonic-gate #define NS_PWDERR_ACCT_INACTIVATED \ 1877c478bd9Sstevel@tonic-gate "Account inactivated. Contact system administrator." 1887c478bd9Sstevel@tonic-gate #define NS_PWDERR_CHANGE_NOT_ALLOW \ 1897c478bd9Sstevel@tonic-gate "user is not allowed to change password" 1907c478bd9Sstevel@tonic-gate #define NS_PWDERR_INVALID_SYNTAX \ 1917c478bd9Sstevel@tonic-gate "invalid password syntax" 1927c478bd9Sstevel@tonic-gate #define NS_PWDERR_TRIVIAL_PASSWD \ 1937c478bd9Sstevel@tonic-gate "Password failed triviality check" 1947c478bd9Sstevel@tonic-gate #define NS_PWDERR_IN_HISTORY \ 1957c478bd9Sstevel@tonic-gate "password in history" 1967c478bd9Sstevel@tonic-gate #define NS_PWDERR_WITHIN_MIN_AGE \ 1977c478bd9Sstevel@tonic-gate "within password minimum age" 1987c478bd9Sstevel@tonic-gate 1997c478bd9Sstevel@tonic-gate /* 2007c478bd9Sstevel@tonic-gate * INTERNALLY USED MACROS 2017c478bd9Sstevel@tonic-gate */ 2027c478bd9Sstevel@tonic-gate 2037c478bd9Sstevel@tonic-gate void __s_api_debug_pause(int priority, int st, const char *mesg); 2047c478bd9Sstevel@tonic-gate 2057c478bd9Sstevel@tonic-gate #define NULL_OR_STR(str) (!(str) || *(str) == '\0' ? "<NULL>" : (str)) 2067c478bd9Sstevel@tonic-gate 2077c478bd9Sstevel@tonic-gate /* 2087c478bd9Sstevel@tonic-gate * MKERROR: builds the error structure and fills in the status and 2097c478bd9Sstevel@tonic-gate * the message. The message must be a freeable (non-static) string. 2107c478bd9Sstevel@tonic-gate * If it fails to allocate memory for the error structure, 2117c478bd9Sstevel@tonic-gate * it will return the retErr. 2127c478bd9Sstevel@tonic-gate */ 2137c478bd9Sstevel@tonic-gate #define MKERROR(priority, err, st, mesg, retErr) \ 2147c478bd9Sstevel@tonic-gate if (((err) = calloc(1, sizeof (struct ns_ldap_error))) == NULL) \ 2157c478bd9Sstevel@tonic-gate return (retErr); \ 2167c478bd9Sstevel@tonic-gate (err)->message = mesg; \ 2177c478bd9Sstevel@tonic-gate (err)->status = (st); \ 2187c478bd9Sstevel@tonic-gate __s_api_debug_pause(priority, st, (err)->message); 2197c478bd9Sstevel@tonic-gate 2207c478bd9Sstevel@tonic-gate /* 2217c478bd9Sstevel@tonic-gate * MKERROR_PWD_MGMT is almost the same as MKERROR 2227c478bd9Sstevel@tonic-gate * except that it takes two more inputs to fill in the 2237c478bd9Sstevel@tonic-gate * password management information part of the 2247c478bd9Sstevel@tonic-gate * ns_ldap_error structure pointed to by err, 2257c478bd9Sstevel@tonic-gate * and it does not log a syslog message. 2267c478bd9Sstevel@tonic-gate */ 2277c478bd9Sstevel@tonic-gate #define MKERROR_PWD_MGMT(err, st, mesg, pwd_status, sec_until_exp, retErr) \ 2287c478bd9Sstevel@tonic-gate if (((err) = calloc(1, sizeof (struct ns_ldap_error))) == NULL) \ 2297c478bd9Sstevel@tonic-gate return (retErr); \ 2307c478bd9Sstevel@tonic-gate (err)->message = mesg; \ 2317c478bd9Sstevel@tonic-gate (err)->status = (st); \ 2327c478bd9Sstevel@tonic-gate (err)->pwd_mgmt.status = (pwd_status); \ 2337c478bd9Sstevel@tonic-gate (err)->pwd_mgmt.sec_until_expired = (sec_until_exp); 2347c478bd9Sstevel@tonic-gate 2357c478bd9Sstevel@tonic-gate #ifdef DEBUG 2367c478bd9Sstevel@tonic-gate #define NSLDAPTRACE(variable, setequal, message) \ 2377c478bd9Sstevel@tonic-gate if (variable > 0 || ((setequal != 0) && (variable == setequal))) { \ 2387c478bd9Sstevel@tonic-gate char buf[BUFSIZ]; \ 2397c478bd9Sstevel@tonic-gate (void) snprintf(buf, BUFSIZ, message); \ 2407c478bd9Sstevel@tonic-gate (void) write(__ldap_debug_file, buf); \ 2417c478bd9Sstevel@tonic-gate } 2427c478bd9Sstevel@tonic-gate #endif 2437c478bd9Sstevel@tonic-gate 2447c478bd9Sstevel@tonic-gate /* 2457c478bd9Sstevel@tonic-gate * INTERNAL DATA STRUCTURES 2467c478bd9Sstevel@tonic-gate */ 2477c478bd9Sstevel@tonic-gate 2487c478bd9Sstevel@tonic-gate /* 2497c478bd9Sstevel@tonic-gate * configuration entry type 2507c478bd9Sstevel@tonic-gate */ 2517c478bd9Sstevel@tonic-gate 2527c478bd9Sstevel@tonic-gate typedef enum { 2537c478bd9Sstevel@tonic-gate SERVERCONFIG = 1, 2547c478bd9Sstevel@tonic-gate CLIENTCONFIG = 2, 2557c478bd9Sstevel@tonic-gate CREDCONFIG = 3 2567c478bd9Sstevel@tonic-gate } ns_conftype_t; 2577c478bd9Sstevel@tonic-gate 2587c478bd9Sstevel@tonic-gate /* 2597c478bd9Sstevel@tonic-gate * datatype of a config entry 2607c478bd9Sstevel@tonic-gate */ 2617c478bd9Sstevel@tonic-gate 2627c478bd9Sstevel@tonic-gate typedef enum { 2637c478bd9Sstevel@tonic-gate NS_UNKNOWN = 0, 2647c478bd9Sstevel@tonic-gate CHARPTR = 1, /* Single character pointer */ 2657c478bd9Sstevel@tonic-gate ARRAYCP = 2, /* comma sep array of char pointers */ 2667c478bd9Sstevel@tonic-gate ARRAYAUTH = 3, /* Array of auths */ 2677c478bd9Sstevel@tonic-gate TIMET = 4, /* time relative value (TTL) */ 2687c478bd9Sstevel@tonic-gate INT = 5, /* single integer */ 2697c478bd9Sstevel@tonic-gate SSDLIST = 6, /* service search descriptor */ 2707c478bd9Sstevel@tonic-gate ATTRMAP = 7, /* attribute mapping */ 2717c478bd9Sstevel@tonic-gate OBJMAP = 8, /* objectclass mapping */ 2727c478bd9Sstevel@tonic-gate SERVLIST = 9, /* serverlist (SP sep array) */ 2737c478bd9Sstevel@tonic-gate ARRAYCRED = 10, /* Array of credentialLevels */ 2747c478bd9Sstevel@tonic-gate SAMLIST = 11, /* serviceAuthenticationMethod */ 2757c478bd9Sstevel@tonic-gate SCLLIST = 12 /* serviceCredentialLevel */ 2767c478bd9Sstevel@tonic-gate } ns_datatype_t; 2777c478bd9Sstevel@tonic-gate 2787c478bd9Sstevel@tonic-gate typedef enum { 2797c478bd9Sstevel@tonic-gate NS_SUCCESS, 2807c478bd9Sstevel@tonic-gate NS_NOTFOUND, 2817c478bd9Sstevel@tonic-gate NS_PARSE_ERR 2827c478bd9Sstevel@tonic-gate } ns_parse_status; 2837c478bd9Sstevel@tonic-gate 2847c478bd9Sstevel@tonic-gate typedef enum { 2857c478bd9Sstevel@tonic-gate NS_DOOR_FMT = 1, 2867c478bd9Sstevel@tonic-gate NS_LDIF_FMT = 2, 2877c478bd9Sstevel@tonic-gate NS_FILE_FMT = 3 2887c478bd9Sstevel@tonic-gate } ns_strfmt_t; 2897c478bd9Sstevel@tonic-gate 2907c478bd9Sstevel@tonic-gate /* 2917c478bd9Sstevel@tonic-gate * This enum reduces the number of version string compares 2927c478bd9Sstevel@tonic-gate * against NS_LDAP_VERSION_1 and NS_LDAP_VERSION_2 2937c478bd9Sstevel@tonic-gate */ 2947c478bd9Sstevel@tonic-gate 2957c478bd9Sstevel@tonic-gate typedef enum { 2967c478bd9Sstevel@tonic-gate NS_LDAP_V1 = 1000, 2977c478bd9Sstevel@tonic-gate NS_LDAP_V2 = 2000 2987c478bd9Sstevel@tonic-gate } ns_version_t; 2997c478bd9Sstevel@tonic-gate 3007c478bd9Sstevel@tonic-gate /* 3017c478bd9Sstevel@tonic-gate * enum<->string mapping construct 3027c478bd9Sstevel@tonic-gate */ 3037c478bd9Sstevel@tonic-gate 3047c478bd9Sstevel@tonic-gate typedef struct ns_enum_map { 3057c478bd9Sstevel@tonic-gate int value; 3067c478bd9Sstevel@tonic-gate char *name; 3077c478bd9Sstevel@tonic-gate } ns_enum_map; 3087c478bd9Sstevel@tonic-gate 3097c478bd9Sstevel@tonic-gate #define ENUM2INT(x) ((int)(x)) 3107c478bd9Sstevel@tonic-gate 3117c478bd9Sstevel@tonic-gate #define INT2PARAMINDEXENUM(x) ((ParamIndexType)(x)) 3127c478bd9Sstevel@tonic-gate #define INT2SEARCHREFENUM(x) ((SearchRef_t)(x)) 3137c478bd9Sstevel@tonic-gate #define INT2SCOPEENUM(x) ((ScopeType_t)(x)) 3147c478bd9Sstevel@tonic-gate #define INT2AUTHENUM(x) ((AuthType_t)(x)) 3157c478bd9Sstevel@tonic-gate #define INT2SECENUM(x) ((TlsType_t)(x)) 3167c478bd9Sstevel@tonic-gate #define INT2PREFONLYENUM(x) ((PrefOnly_t)(x)) 3177c478bd9Sstevel@tonic-gate #define INT2CREDLEVELENUM(x) ((CredLevel_t)(x)) 3187c478bd9Sstevel@tonic-gate 3197c478bd9Sstevel@tonic-gate #define INT2LDAPRETURN(x) ((ns_ldap_return_code)(x)) 3207c478bd9Sstevel@tonic-gate #define INT2CONFIGRETURN(x) ((ns_ldap_config_return_code)(x)) 3217c478bd9Sstevel@tonic-gate #define INT2PARTIALRETURN(x) ((ns_ldap_partial_return_code)(x)) 3227c478bd9Sstevel@tonic-gate 3237c478bd9Sstevel@tonic-gate /* 3247c478bd9Sstevel@tonic-gate * This structure maps service name to rdn components 3257c478bd9Sstevel@tonic-gate * for use in __ns_getDNs. It also defines the SSD-to-use 3267c478bd9Sstevel@tonic-gate * service for use in __s_api_get_SSDtoUse_service. 3277c478bd9Sstevel@tonic-gate * The idea of an SSD-to-use service is to reduce the configuration 3287c478bd9Sstevel@tonic-gate * complexity. For a service, which does not have its own entries in 3297c478bd9Sstevel@tonic-gate * the LDAP directory, SSD for it is useless, and should not be set. 3307c478bd9Sstevel@tonic-gate * But since this service must share the container with at least 3317c478bd9Sstevel@tonic-gate * one other service which does have it own entries, the SSD for 3327c478bd9Sstevel@tonic-gate * this other service will be shared by this service. 3337c478bd9Sstevel@tonic-gate * This other service is called the SSD-to-use service. 3347c478bd9Sstevel@tonic-gate * 3357c478bd9Sstevel@tonic-gate */ 3367c478bd9Sstevel@tonic-gate 3377c478bd9Sstevel@tonic-gate typedef struct ns_service_map { 3387c478bd9Sstevel@tonic-gate char *service; 3397c478bd9Sstevel@tonic-gate char *rdn; 3407c478bd9Sstevel@tonic-gate char *SSDtoUse_service; 3417c478bd9Sstevel@tonic-gate } ns_service_map; 3427c478bd9Sstevel@tonic-gate 3437c478bd9Sstevel@tonic-gate /* 3447c478bd9Sstevel@tonic-gate * This structure contains a single mapping from: 3457c478bd9Sstevel@tonic-gate * service:orig -> list of mapped 3467c478bd9Sstevel@tonic-gate */ 3477c478bd9Sstevel@tonic-gate 3487c478bd9Sstevel@tonic-gate typedef enum { 3497c478bd9Sstevel@tonic-gate NS_ATTR_MAP, 3507c478bd9Sstevel@tonic-gate NS_OBJ_MAP 3517c478bd9Sstevel@tonic-gate } ns_maptype_t; 3527c478bd9Sstevel@tonic-gate 3537c478bd9Sstevel@tonic-gate typedef struct ns_mapping { 3547c478bd9Sstevel@tonic-gate ns_maptype_t type; 3557c478bd9Sstevel@tonic-gate char *service; 3567c478bd9Sstevel@tonic-gate char *orig; 3577c478bd9Sstevel@tonic-gate char **map; 3587c478bd9Sstevel@tonic-gate } ns_mapping_t; 3597c478bd9Sstevel@tonic-gate 3607c478bd9Sstevel@tonic-gate /* 3617c478bd9Sstevel@tonic-gate * The following is the list of internal libsldap configuration data 3627c478bd9Sstevel@tonic-gate * structures. The configuration is populated normally once per 3637c478bd9Sstevel@tonic-gate * application. The assumption is that in applications can be 3647c478bd9Sstevel@tonic-gate * relatively short lived (IE ls via nsswitch) so it is important to 3657c478bd9Sstevel@tonic-gate * keep configuration to a minimum, but keep lookups fast. 3667c478bd9Sstevel@tonic-gate * 3677c478bd9Sstevel@tonic-gate * Assumptions: 3687c478bd9Sstevel@tonic-gate * 1 configuration entry per domain, and almost always 1 domain 3697c478bd9Sstevel@tonic-gate * per app. Hooks exist for multiple domains per app. 3707c478bd9Sstevel@tonic-gate * 3717c478bd9Sstevel@tonic-gate * Configurations are read in from client file cache or from LDAP. 3727c478bd9Sstevel@tonic-gate * Attribute/objectclass mappings are hashed to improve lookup 3737c478bd9Sstevel@tonic-gate * speed. 3747c478bd9Sstevel@tonic-gate */ 3757c478bd9Sstevel@tonic-gate 3767c478bd9Sstevel@tonic-gate /* 3777c478bd9Sstevel@tonic-gate * Hash entry types 3787c478bd9Sstevel@tonic-gate */ 3797c478bd9Sstevel@tonic-gate typedef enum _ns_hashtype_t { 3807c478bd9Sstevel@tonic-gate NS_HASH_AMAP = 1, /* attr map */ 3817c478bd9Sstevel@tonic-gate NS_HASH_RAMAP = 2, /* reverse attr map */ 3827c478bd9Sstevel@tonic-gate NS_HASH_OMAP = 3, /* oc map */ 3837c478bd9Sstevel@tonic-gate NS_HASH_ROMAP = 4, /* reverse oc map */ 3847c478bd9Sstevel@tonic-gate NS_HASH_VOID = 5 3857c478bd9Sstevel@tonic-gate } ns_hashtype_t; 3867c478bd9Sstevel@tonic-gate 3877c478bd9Sstevel@tonic-gate typedef struct ns_hash { 3887c478bd9Sstevel@tonic-gate ns_hashtype_t h_type; 3897c478bd9Sstevel@tonic-gate ns_mapping_t *h_map; 3907c478bd9Sstevel@tonic-gate struct ns_hash *h_next; 3917c478bd9Sstevel@tonic-gate struct ns_hash *h_llnext; 3927c478bd9Sstevel@tonic-gate } ns_hash_t; 3937c478bd9Sstevel@tonic-gate 3947c478bd9Sstevel@tonic-gate /* 3957c478bd9Sstevel@tonic-gate * This structure defines the format of an internal configuration 3967c478bd9Sstevel@tonic-gate * parameter for ns_ldap client. 3977c478bd9Sstevel@tonic-gate */ 3987c478bd9Sstevel@tonic-gate 3997c478bd9Sstevel@tonic-gate typedef struct ns_param { 4007c478bd9Sstevel@tonic-gate ns_datatype_t ns_ptype; 4017c478bd9Sstevel@tonic-gate int ns_acnt; 4027c478bd9Sstevel@tonic-gate union { 4037c478bd9Sstevel@tonic-gate char **ppc; 4047c478bd9Sstevel@tonic-gate int *pi; 4057c478bd9Sstevel@tonic-gate char *pc; 4067c478bd9Sstevel@tonic-gate int i; 4077c478bd9Sstevel@tonic-gate time_t tm; 4087c478bd9Sstevel@tonic-gate } ns_pu; 4097c478bd9Sstevel@tonic-gate } ns_param_t; 4107c478bd9Sstevel@tonic-gate 4117c478bd9Sstevel@tonic-gate #define ns_ppc ns_pu.ppc 4127c478bd9Sstevel@tonic-gate #define ns_pi ns_pu.pi 4137c478bd9Sstevel@tonic-gate #define ns_pc ns_pu.pc 4147c478bd9Sstevel@tonic-gate #define ns_i ns_pu.i 4157c478bd9Sstevel@tonic-gate #define ns_tm ns_pu.tm 4167c478bd9Sstevel@tonic-gate 4177c478bd9Sstevel@tonic-gate /* 4187c478bd9Sstevel@tonic-gate * This structure defines an instance of a configuration structure. 4197c478bd9Sstevel@tonic-gate * paramList contains the current ns_ldap parameter configuration 4207c478bd9Sstevel@tonic-gate * and hashTbl contain the current attribute/objectclass mappings. 4217c478bd9Sstevel@tonic-gate * Parameters are indexed by using the value assigned to the parameter 4227c478bd9Sstevel@tonic-gate * in ParamIndexType. 4237c478bd9Sstevel@tonic-gate */ 4247c478bd9Sstevel@tonic-gate 4257c478bd9Sstevel@tonic-gate typedef struct ns_config { 4267c478bd9Sstevel@tonic-gate char *domainName; 4277c478bd9Sstevel@tonic-gate ns_version_t version; 4287c478bd9Sstevel@tonic-gate ns_param_t paramList[NS_LDAP_MAX_PIT_P]; 4297c478bd9Sstevel@tonic-gate ns_hash_t *hashTbl[NS_HASH_MAX]; 4307c478bd9Sstevel@tonic-gate ns_hash_t *llHead; 4317c478bd9Sstevel@tonic-gate ns_ldap_entry_t *RootDSE; 4327c478bd9Sstevel@tonic-gate boolean_t delete; 4337c478bd9Sstevel@tonic-gate mutex_t config_mutex; 4347c478bd9Sstevel@tonic-gate int nUse; 4357c478bd9Sstevel@tonic-gate } ns_config_t; 4367c478bd9Sstevel@tonic-gate 4377c478bd9Sstevel@tonic-gate /* 4387c478bd9Sstevel@tonic-gate * This structure defines the mapping of the NSCONFIGFILE file 4397c478bd9Sstevel@tonic-gate * statements into their corresponding SolarisNamingProfile, 4407c478bd9Sstevel@tonic-gate * Posix Mapping LDAP attributes, and to their corresponding 4417c478bd9Sstevel@tonic-gate * ParamIndexType enum mapping. THe ParamIndexType enum 4427c478bd9Sstevel@tonic-gate * definitions can be found in ns_ldap.h. This structure also 4437c478bd9Sstevel@tonic-gate * defines the default values that are used when a value either 4447c478bd9Sstevel@tonic-gate * does not exist or is undefined. 4457c478bd9Sstevel@tonic-gate */ 4467c478bd9Sstevel@tonic-gate 4477c478bd9Sstevel@tonic-gate typedef struct ns_default_config { 4487c478bd9Sstevel@tonic-gate const char *name; /* config file parameter name */ 4497c478bd9Sstevel@tonic-gate ParamIndexType index; /* config file enum index */ 4507c478bd9Sstevel@tonic-gate ns_conftype_t config_type; /* CLIENT/SERVER/CREDCONFIG */ 4517c478bd9Sstevel@tonic-gate ns_datatype_t data_type; /* ppc,pi,pc,int etc... */ 4527c478bd9Sstevel@tonic-gate int single_valued; /* TRUE OR FALSE */ 4537c478bd9Sstevel@tonic-gate ns_version_t version; /* Version # for attribute */ 4547c478bd9Sstevel@tonic-gate const char *profile_name; /* profile schema attribute name */ 4557c478bd9Sstevel@tonic-gate ns_param_t defval; /* config file parameter default */ 4567c478bd9Sstevel@tonic-gate int (*ns_verify)(ParamIndexType i, 4577c478bd9Sstevel@tonic-gate struct ns_default_config *def, 4587c478bd9Sstevel@tonic-gate ns_param_t *param, 4597c478bd9Sstevel@tonic-gate char *errbuf); 4607c478bd9Sstevel@tonic-gate ns_enum_map *allowed; /* allowed values */ 4617c478bd9Sstevel@tonic-gate } ns_default_config; 4627c478bd9Sstevel@tonic-gate 4637c478bd9Sstevel@tonic-gate 4647c478bd9Sstevel@tonic-gate /* 4657c478bd9Sstevel@tonic-gate * This typedef enumerates all the supported authentication 4667c478bd9Sstevel@tonic-gate * mechanisms currently supported in this library 4677c478bd9Sstevel@tonic-gate */ 4687c478bd9Sstevel@tonic-gate 4697c478bd9Sstevel@tonic-gate typedef enum EnumAuthType { 4707c478bd9Sstevel@tonic-gate NS_LDAP_EA_NONE = 0, 4717c478bd9Sstevel@tonic-gate NS_LDAP_EA_SIMPLE = 1, 4727c478bd9Sstevel@tonic-gate NS_LDAP_EA_SASL_NONE = 2, 4737c478bd9Sstevel@tonic-gate NS_LDAP_EA_SASL_CRAM_MD5 = 3, 4747c478bd9Sstevel@tonic-gate NS_LDAP_EA_SASL_DIGEST_MD5 = 4, 4757c478bd9Sstevel@tonic-gate NS_LDAP_EA_SASL_DIGEST_MD5_INT = 5, 4767c478bd9Sstevel@tonic-gate NS_LDAP_EA_SASL_DIGEST_MD5_CONF = 6, 4777c478bd9Sstevel@tonic-gate NS_LDAP_EA_SASL_EXTERNAL = 7, 4787c478bd9Sstevel@tonic-gate NS_LDAP_EA_SASL_GSSAPI = 8, /* unsupported */ 4797c478bd9Sstevel@tonic-gate NS_LDAP_EA_SASL_SPNEGO = 9, /* unsupported */ 4807c478bd9Sstevel@tonic-gate NS_LDAP_EA_TLS_NONE = 10, 4817c478bd9Sstevel@tonic-gate NS_LDAP_EA_TLS_SIMPLE = 11, 4827c478bd9Sstevel@tonic-gate NS_LDAP_EA_TLS_SASL_NONE = 12, 4837c478bd9Sstevel@tonic-gate NS_LDAP_EA_TLS_SASL_CRAM_MD5 = 13, 4847c478bd9Sstevel@tonic-gate NS_LDAP_EA_TLS_SASL_DIGEST_MD5 = 14, 4857c478bd9Sstevel@tonic-gate NS_LDAP_EA_TLS_SASL_DIGEST_MD5_INT = 15, 4867c478bd9Sstevel@tonic-gate NS_LDAP_EA_TLS_SASL_DIGEST_MD5_CONF = 16, 4877c478bd9Sstevel@tonic-gate NS_LDAP_EA_TLS_SASL_EXTERNAL = 17, 4887c478bd9Sstevel@tonic-gate NS_LDAP_EA_TLS_SASL_GSSAPI = 18, /* unsupported */ 4897c478bd9Sstevel@tonic-gate NS_LDAP_EA_TLS_SASL_SPNEGO = 19 /* unsupported */ 4907c478bd9Sstevel@tonic-gate } EnumAuthType_t; 4917c478bd9Sstevel@tonic-gate 4927c478bd9Sstevel@tonic-gate 4937c478bd9Sstevel@tonic-gate /* 4947c478bd9Sstevel@tonic-gate * this enum lists the various states of the search state machine 4957c478bd9Sstevel@tonic-gate */ 4967c478bd9Sstevel@tonic-gate 4977c478bd9Sstevel@tonic-gate typedef enum { 4987c478bd9Sstevel@tonic-gate INIT = 1, 4997c478bd9Sstevel@tonic-gate EXIT = 2, 5007c478bd9Sstevel@tonic-gate NEXT_SEARCH_DESCRIPTOR = 3, 5017c478bd9Sstevel@tonic-gate GET_SESSION = 4, 5027c478bd9Sstevel@tonic-gate NEXT_SESSION = 5, 5037c478bd9Sstevel@tonic-gate RESTART_SESSION = 6, 5047c478bd9Sstevel@tonic-gate NEXT_SEARCH = 7, 5057c478bd9Sstevel@tonic-gate NEXT_VLV = 8, 5067c478bd9Sstevel@tonic-gate NEXT_PAGE = 9, 5077c478bd9Sstevel@tonic-gate ONE_SEARCH = 10, 5087c478bd9Sstevel@tonic-gate DO_SEARCH = 11, 5097c478bd9Sstevel@tonic-gate NEXT_RESULT = 12, 5107c478bd9Sstevel@tonic-gate MULTI_RESULT = 13, 5117c478bd9Sstevel@tonic-gate PROCESS_RESULT = 14, 5127c478bd9Sstevel@tonic-gate END_PROCESS_RESULT = 15, 5137c478bd9Sstevel@tonic-gate END_RESULT = 16, 5147c478bd9Sstevel@tonic-gate NEXT_REFERRAL = 17, 5157c478bd9Sstevel@tonic-gate GET_REFERRAL_SESSION = 18, 5167c478bd9Sstevel@tonic-gate ERROR = 19, 5177c478bd9Sstevel@tonic-gate LDAP_ERROR = 20 5187c478bd9Sstevel@tonic-gate } ns_state_t; 5197c478bd9Sstevel@tonic-gate 5207c478bd9Sstevel@tonic-gate /* 5217c478bd9Sstevel@tonic-gate * this enum lists the various states of the write state machine 5227c478bd9Sstevel@tonic-gate */ 5237c478bd9Sstevel@tonic-gate typedef enum { 5247c478bd9Sstevel@tonic-gate W_INIT = 1, 5257c478bd9Sstevel@tonic-gate W_EXIT = 2, 5267c478bd9Sstevel@tonic-gate GET_CONNECTION = 3, 5277c478bd9Sstevel@tonic-gate SELECT_OPERATION_SYNC = 4, 5287c478bd9Sstevel@tonic-gate SELECT_OPERATION_ASYNC = 5, 5297c478bd9Sstevel@tonic-gate DO_ADD_SYNC = 6, 5307c478bd9Sstevel@tonic-gate DO_DELETE_SYNC = 7, 5317c478bd9Sstevel@tonic-gate DO_MODIFY_SYNC = 8, 5327c478bd9Sstevel@tonic-gate DO_ADD_ASYNC = 9, 5337c478bd9Sstevel@tonic-gate DO_DELETE_ASYNC = 10, 5347c478bd9Sstevel@tonic-gate DO_MODIFY_ASYNC = 11, 5357c478bd9Sstevel@tonic-gate GET_RESULT_SYNC = 12, 5367c478bd9Sstevel@tonic-gate GET_RESULT_ASYNC = 13, 5377c478bd9Sstevel@tonic-gate PARSE_RESULT = 14, 5387c478bd9Sstevel@tonic-gate GET_REFERRAL_CONNECTION = 15, 5397c478bd9Sstevel@tonic-gate W_LDAP_ERROR = 16, 5407c478bd9Sstevel@tonic-gate W_ERROR = 17 5417c478bd9Sstevel@tonic-gate } ns_write_state_t; 5427c478bd9Sstevel@tonic-gate 5437c478bd9Sstevel@tonic-gate 5447c478bd9Sstevel@tonic-gate typedef int ConnectionID; 5457c478bd9Sstevel@tonic-gate 5467c478bd9Sstevel@tonic-gate /* 5477c478bd9Sstevel@tonic-gate * This structure is used by ns_connect to create and manage 5487c478bd9Sstevel@tonic-gate * one or more ldap connections within the library. 5497c478bd9Sstevel@tonic-gate */ 5507c478bd9Sstevel@tonic-gate typedef struct connection { 5517c478bd9Sstevel@tonic-gate ConnectionID connectionId; 5527c478bd9Sstevel@tonic-gate boolean_t usedBit; 5537c478bd9Sstevel@tonic-gate char *serverAddr; 5547c478bd9Sstevel@tonic-gate ns_cred_t *auth; 5557c478bd9Sstevel@tonic-gate LDAP *ld; 5567c478bd9Sstevel@tonic-gate thread_t threadID; /* thread ID using it */ 5577c478bd9Sstevel@tonic-gate struct ns_ldap_cookie *cookieInfo; 5587c478bd9Sstevel@tonic-gate char **controls; /* from server_info */ 5597c478bd9Sstevel@tonic-gate char **saslMechanisms; /* from server_info */ 5607c478bd9Sstevel@tonic-gate } Connection; 5617c478bd9Sstevel@tonic-gate 5627c478bd9Sstevel@tonic-gate #define ONE_STEP 1 5637c478bd9Sstevel@tonic-gate 5647c478bd9Sstevel@tonic-gate /* 5657c478bd9Sstevel@tonic-gate * This structure is for referrals processing. 5667c478bd9Sstevel@tonic-gate * The data are from referral URLs returned by 5677c478bd9Sstevel@tonic-gate * LDAP servers 5687c478bd9Sstevel@tonic-gate */ 5697c478bd9Sstevel@tonic-gate typedef struct ns_referral_info { 5707c478bd9Sstevel@tonic-gate struct ns_referral_info *next; 5717c478bd9Sstevel@tonic-gate char *refHost; 5727c478bd9Sstevel@tonic-gate int refScope; 5737c478bd9Sstevel@tonic-gate char *refDN; 5747c478bd9Sstevel@tonic-gate char *refFilter; 5757c478bd9Sstevel@tonic-gate } ns_referral_info_t; 5767c478bd9Sstevel@tonic-gate 5777c478bd9Sstevel@tonic-gate /* 5787c478bd9Sstevel@tonic-gate * This structure used internally in searches 5797c478bd9Sstevel@tonic-gate */ 5807c478bd9Sstevel@tonic-gate 5817c478bd9Sstevel@tonic-gate typedef struct ns_ldap_cookie { 5827c478bd9Sstevel@tonic-gate /* INPUTS */ 5837c478bd9Sstevel@tonic-gate /* server list position */ 5847c478bd9Sstevel@tonic-gate 5857c478bd9Sstevel@tonic-gate /* service search descriptor list & position */ 5867c478bd9Sstevel@tonic-gate ns_ldap_search_desc_t **sdlist; 5877c478bd9Sstevel@tonic-gate ns_ldap_search_desc_t **sdpos; 5887c478bd9Sstevel@tonic-gate 5897c478bd9Sstevel@tonic-gate /* search filter callback */ 5907c478bd9Sstevel@tonic-gate int use_filtercb; 5917c478bd9Sstevel@tonic-gate int (*init_filter_cb)(const ns_ldap_search_desc_t *desc, 5927c478bd9Sstevel@tonic-gate char **realfilter, const void *userdata); 5937c478bd9Sstevel@tonic-gate 5947c478bd9Sstevel@tonic-gate /* user callback */ 5957c478bd9Sstevel@tonic-gate int use_usercb; 5967c478bd9Sstevel@tonic-gate int (*callback)(const ns_ldap_entry_t *entry, 5977c478bd9Sstevel@tonic-gate const void *userdata); 5987c478bd9Sstevel@tonic-gate const void *userdata; 5997c478bd9Sstevel@tonic-gate 6007c478bd9Sstevel@tonic-gate int followRef; 6017c478bd9Sstevel@tonic-gate int use_paging; 6027c478bd9Sstevel@tonic-gate char *service; 6037c478bd9Sstevel@tonic-gate char *i_filter; 6047c478bd9Sstevel@tonic-gate const char * const *i_attr; 6057c478bd9Sstevel@tonic-gate const ns_cred_t *i_auth; 6067c478bd9Sstevel@tonic-gate int i_flags; 6077c478bd9Sstevel@tonic-gate 6087c478bd9Sstevel@tonic-gate /* OUTPUTS */ 6097c478bd9Sstevel@tonic-gate ns_ldap_result_t *result; 6107c478bd9Sstevel@tonic-gate ns_ldap_entry_t *nextEntry; 6117c478bd9Sstevel@tonic-gate /* Error data */ 6127c478bd9Sstevel@tonic-gate int err_rc; 6137c478bd9Sstevel@tonic-gate ns_ldap_error_t *errorp; 6147c478bd9Sstevel@tonic-gate 6157c478bd9Sstevel@tonic-gate /* PRIVATE */ 6167c478bd9Sstevel@tonic-gate ns_state_t state; 6177c478bd9Sstevel@tonic-gate ns_state_t new_state; 6187c478bd9Sstevel@tonic-gate ns_state_t next_state; 6197c478bd9Sstevel@tonic-gate 6207c478bd9Sstevel@tonic-gate Connection *conn; 621*e8ac3ceaSsdussud #define conn_auth_type conn->auth->auth.type 6227c478bd9Sstevel@tonic-gate ConnectionID connectionId; 6237c478bd9Sstevel@tonic-gate 6247c478bd9Sstevel@tonic-gate /* paging VLV/SIMPLEPAGE data */ 6257c478bd9Sstevel@tonic-gate int listType; 6267c478bd9Sstevel@tonic-gate unsigned long index; 6277c478bd9Sstevel@tonic-gate LDAPControl **p_serverctrls; 6287c478bd9Sstevel@tonic-gate 6297c478bd9Sstevel@tonic-gate int scope; 6307c478bd9Sstevel@tonic-gate char *basedn; 6317c478bd9Sstevel@tonic-gate char *filter; 6327c478bd9Sstevel@tonic-gate char **attribute; 6337c478bd9Sstevel@tonic-gate 6347c478bd9Sstevel@tonic-gate /* RESULT PROCESSING */ 6357c478bd9Sstevel@tonic-gate int msgId; 6367c478bd9Sstevel@tonic-gate LDAPMessage *resultMsg; 6377c478bd9Sstevel@tonic-gate 6387c478bd9Sstevel@tonic-gate char **dns; 6397c478bd9Sstevel@tonic-gate char *currentdn; 6407c478bd9Sstevel@tonic-gate int flag; 6417c478bd9Sstevel@tonic-gate struct berval *ctrlCookie; 6427c478bd9Sstevel@tonic-gate 6437c478bd9Sstevel@tonic-gate /* REFERRALS PROCESSING */ 6447c478bd9Sstevel@tonic-gate /* referralinfo list & position */ 6457c478bd9Sstevel@tonic-gate ns_referral_info_t *reflist; 6467c478bd9Sstevel@tonic-gate ns_referral_info_t *refpos; 6477c478bd9Sstevel@tonic-gate /* search timeout value */ 6487c478bd9Sstevel@tonic-gate struct timeval search_timeout; 6497c478bd9Sstevel@tonic-gate } ns_ldap_cookie_t; 6507c478bd9Sstevel@tonic-gate 6517c478bd9Sstevel@tonic-gate /* 6527c478bd9Sstevel@tonic-gate * This structure is part of the return value information for 6537c478bd9Sstevel@tonic-gate * __s_api_requestServer. The routine that requests a new server 6547c478bd9Sstevel@tonic-gate * from the cache manager 6557c478bd9Sstevel@tonic-gate */ 6567c478bd9Sstevel@tonic-gate typedef struct ns_server_info { 6577c478bd9Sstevel@tonic-gate char *server; 6587c478bd9Sstevel@tonic-gate char **controls; 6597c478bd9Sstevel@tonic-gate char **saslMechanisms; 6607c478bd9Sstevel@tonic-gate } ns_server_info_t; 6617c478bd9Sstevel@tonic-gate 6627c478bd9Sstevel@tonic-gate /* 6637c478bd9Sstevel@tonic-gate * INTERNAL GLOBAL DEFINITIONS AND FUNCTION DECLARATIONS 6647c478bd9Sstevel@tonic-gate */ 6657c478bd9Sstevel@tonic-gate 6667c478bd9Sstevel@tonic-gate #ifdef DEBUG 6677c478bd9Sstevel@tonic-gate extern int __ldap_debug_file; 6687c478bd9Sstevel@tonic-gate extern int __ldap_debug_api; 6697c478bd9Sstevel@tonic-gate extern int __ldap_debug_ldap; 6707c478bd9Sstevel@tonic-gate extern int __ldap_debug_servers; 6717c478bd9Sstevel@tonic-gate #endif 6727c478bd9Sstevel@tonic-gate 6737c478bd9Sstevel@tonic-gate /* internal connection APIs */ 6747c478bd9Sstevel@tonic-gate void DropConnection(ConnectionID, int); 6757c478bd9Sstevel@tonic-gate int __s_api_getServers(char *** servers, ns_ldap_error_t ** error); 6767c478bd9Sstevel@tonic-gate 6777c478bd9Sstevel@tonic-gate int __s_get_enum_value(ns_config_t *ptr, char *value, ParamIndexType i); 6787c478bd9Sstevel@tonic-gate char *__s_get_auth_name(ns_config_t *ptr, AuthType_t type); 6797c478bd9Sstevel@tonic-gate char *__s_get_security_name(ns_config_t *ptr, TlsType_t type); 6807c478bd9Sstevel@tonic-gate char *__s_get_scope_name(ns_config_t *ptr, ScopeType_t type); 6817c478bd9Sstevel@tonic-gate char *__s_get_pref_name(PrefOnly_t type); 6827c478bd9Sstevel@tonic-gate char *__s_get_searchref_name(ns_config_t *ptr, SearchRef_t type); 6837c478bd9Sstevel@tonic-gate char *__s_get_hostcertpath(void); 6847c478bd9Sstevel@tonic-gate 6857c478bd9Sstevel@tonic-gate 6867c478bd9Sstevel@tonic-gate /* ************ internal sldap-api functions *********** */ 6877c478bd9Sstevel@tonic-gate void __ns_ldap_freeEntry(ns_ldap_entry_t *ep); 6887c478bd9Sstevel@tonic-gate void __s_api_split_key_value(char *buffer, char **name, char **value); 6897c478bd9Sstevel@tonic-gate int __s_api_printResult(ns_ldap_result_t *); 6907c478bd9Sstevel@tonic-gate int __s_api_getSearchScope(int *, ns_ldap_error_t **); 6917c478bd9Sstevel@tonic-gate int __s_api_getDNs(char ***, const char *, 6927c478bd9Sstevel@tonic-gate ns_ldap_error_t **); 6937c478bd9Sstevel@tonic-gate int __s_api_get_search_DNs_v1(char ***, const char *, 6947c478bd9Sstevel@tonic-gate ns_ldap_error_t **); 6957c478bd9Sstevel@tonic-gate int __s_api_getConnection(const char *, const int, 6967c478bd9Sstevel@tonic-gate const ns_cred_t *, int *, 6977c478bd9Sstevel@tonic-gate Connection **, ns_ldap_error_t **, int); 6987c478bd9Sstevel@tonic-gate char **__s_api_cp2dArray(char **); 6997c478bd9Sstevel@tonic-gate void __s_api_free2dArray(char **); 7007c478bd9Sstevel@tonic-gate 7017c478bd9Sstevel@tonic-gate int __s_api_isCtrlSupported(Connection *, char *); 7027c478bd9Sstevel@tonic-gate ns_config_t *__ns_ldap_make_config(ns_ldap_result_t *result); 7037c478bd9Sstevel@tonic-gate ns_auth_t *__s_api_AuthEnumtoStruct(const EnumAuthType_t i); 7047c478bd9Sstevel@tonic-gate char *dvalue(char *); 7057c478bd9Sstevel@tonic-gate char *evalue(char *); 7067c478bd9Sstevel@tonic-gate 7077c478bd9Sstevel@tonic-gate extern void get_environment(); 7087c478bd9Sstevel@tonic-gate 7097c478bd9Sstevel@tonic-gate /* internal Param APIs */ 7107c478bd9Sstevel@tonic-gate int __ns_ldap_setParamValue(ns_config_t *ptr, 7117c478bd9Sstevel@tonic-gate const ParamIndexType type, 7127c478bd9Sstevel@tonic-gate const void *data, ns_ldap_error_t **error); 7137c478bd9Sstevel@tonic-gate int __s_api_get_type(const char *value, ParamIndexType *type); 7147c478bd9Sstevel@tonic-gate int __s_api_get_versiontype(ns_config_t *ptr, char *value, 7157c478bd9Sstevel@tonic-gate ParamIndexType *type); 7167c478bd9Sstevel@tonic-gate int __s_api_get_profiletype(char *value, ParamIndexType *type); 7177c478bd9Sstevel@tonic-gate void __s_api_init_config(ns_config_t *ptr); 7187c478bd9Sstevel@tonic-gate ns_parse_status __s_api_crosscheck(ns_config_t *domainptr, char *errstr, 7197c478bd9Sstevel@tonic-gate int check_dn); 7207c478bd9Sstevel@tonic-gate ns_config_t *__s_api_create_config(void); 7217c478bd9Sstevel@tonic-gate ns_config_t *__s_api_get_default_config(void); 7227c478bd9Sstevel@tonic-gate ns_config_t *__s_api_loadrefresh_config(); 7237c478bd9Sstevel@tonic-gate void __s_api_destroy_config(ns_config_t *ptr); 7247c478bd9Sstevel@tonic-gate int __s_api_get_configtype(ParamIndexType type); 7257c478bd9Sstevel@tonic-gate const char *__s_api_get_configname(ParamIndexType type); 7267c478bd9Sstevel@tonic-gate char *__s_api_strValue(ns_config_t *ptr, char *str, 7277c478bd9Sstevel@tonic-gate int bufsz, ParamIndexType i, 7287c478bd9Sstevel@tonic-gate ns_strfmt_t fmt); 7297c478bd9Sstevel@tonic-gate void __s_api_release_config(ns_config_t *cfg); 7307c478bd9Sstevel@tonic-gate 7317c478bd9Sstevel@tonic-gate /* internal attribute/objectclass mapping api's */ 7327c478bd9Sstevel@tonic-gate int __s_api_add_map2hash(ns_config_t *config, 7337c478bd9Sstevel@tonic-gate ns_hashtype_t type, ns_mapping_t *map); 7347c478bd9Sstevel@tonic-gate void __s_api_destroy_hash(ns_config_t *config); 7357c478bd9Sstevel@tonic-gate int __s_api_parse_map(char *cp, char **sid, 7367c478bd9Sstevel@tonic-gate char **origA, char ***mapA); 7377c478bd9Sstevel@tonic-gate char **__ns_ldap_mapAttributeList(const char *service, 7387c478bd9Sstevel@tonic-gate const char * const *origAttrList); 7397c478bd9Sstevel@tonic-gate 7407c478bd9Sstevel@tonic-gate /* internal configuration APIs */ 7417c478bd9Sstevel@tonic-gate void __ns_ldap_setServer(int set); 7427c478bd9Sstevel@tonic-gate ns_ldap_error_t *__ns_ldap_LoadConfiguration(); 7437c478bd9Sstevel@tonic-gate ns_ldap_error_t *__ns_ldap_LoadDoorInfo(LineBuf *configinfo, char *domainname); 7447c478bd9Sstevel@tonic-gate ns_ldap_error_t *__ns_ldap_DumpConfiguration(char *filename); 7457c478bd9Sstevel@tonic-gate ns_ldap_error_t *__ns_ldap_DumpLdif(char *filename); 7467c478bd9Sstevel@tonic-gate int __ns_ldap_cache_ping(); 7477c478bd9Sstevel@tonic-gate 7487c478bd9Sstevel@tonic-gate /* internal un-exposed APIs */ 7497c478bd9Sstevel@tonic-gate ns_cred_t *__ns_ldap_dupAuth(const ns_cred_t *authp); 7507c478bd9Sstevel@tonic-gate int __s_api_get_SSD_from_SSDtoUse_service(const char *service, 7517c478bd9Sstevel@tonic-gate ns_ldap_search_desc_t ***SSDlist, 7527c478bd9Sstevel@tonic-gate ns_ldap_error_t **errorp); 7537c478bd9Sstevel@tonic-gate int __s_api_prepend_automountmapname(const char *service, 7547c478bd9Sstevel@tonic-gate ns_ldap_search_desc_t ***SSDlist, 7557c478bd9Sstevel@tonic-gate ns_ldap_error_t ** errorp); 7567c478bd9Sstevel@tonic-gate int __s_api_prepend_automountmapname_to_dn(const char *service, 7577c478bd9Sstevel@tonic-gate char **basedn, 7587c478bd9Sstevel@tonic-gate ns_ldap_error_t ** errorp); 7597c478bd9Sstevel@tonic-gate int __s_api_convert_automountmapname(const char *service, 7607c478bd9Sstevel@tonic-gate char **dn, ns_ldap_error_t ** errorp); 7617c478bd9Sstevel@tonic-gate int __s_api_replace_mapped_attr_in_dn( 7627c478bd9Sstevel@tonic-gate const char *orig_attr, const char *mapped_attr, 7637c478bd9Sstevel@tonic-gate const char *dn, char **new_dn); 7647c478bd9Sstevel@tonic-gate int __s_api_append_default_basedn( 7657c478bd9Sstevel@tonic-gate const char *dn, 7667c478bd9Sstevel@tonic-gate char **new_dn, 7677c478bd9Sstevel@tonic-gate int *allocated, 7687c478bd9Sstevel@tonic-gate ns_ldap_error_t ** errorp); 769*e8ac3ceaSsdussud int __s_api_removeServer(const char *server); 7707c478bd9Sstevel@tonic-gate 7717c478bd9Sstevel@tonic-gate /* internal referrals APIs */ 7727c478bd9Sstevel@tonic-gate int __s_api_toFollowReferrals(const int flags, 7737c478bd9Sstevel@tonic-gate int *toFollow, 7747c478bd9Sstevel@tonic-gate ns_ldap_error_t **errorp); 7757c478bd9Sstevel@tonic-gate int __s_api_addRefInfo(ns_referral_info_t **head, 7767c478bd9Sstevel@tonic-gate char *url, char *baseDN, int *scope, 7777c478bd9Sstevel@tonic-gate char *filter, LDAP *ld); 7787c478bd9Sstevel@tonic-gate void __s_api_deleteRefInfo(ns_referral_info_t *head); 7797c478bd9Sstevel@tonic-gate 7807c478bd9Sstevel@tonic-gate /* callback routine for SSD filters */ 7817c478bd9Sstevel@tonic-gate int __s_api_merge_SSD_filter(const ns_ldap_search_desc_t *desc, 7827c478bd9Sstevel@tonic-gate char **realfilter, 7837c478bd9Sstevel@tonic-gate const void *userdata); 7847c478bd9Sstevel@tonic-gate 7857c478bd9Sstevel@tonic-gate /* network address verification api */ 7867c478bd9Sstevel@tonic-gate int __s_api_isipv4(char *addr); 7877c478bd9Sstevel@tonic-gate int __s_api_isipv6(char *addr); 7887c478bd9Sstevel@tonic-gate int __s_api_ishost(char *addr); 7897c478bd9Sstevel@tonic-gate 7907c478bd9Sstevel@tonic-gate /* password management routine */ 7917c478bd9Sstevel@tonic-gate ns_ldap_passwd_status_t 7927c478bd9Sstevel@tonic-gate __s_api_set_passwd_status(int errnum, char *errmsg); 7937c478bd9Sstevel@tonic-gate int __s_api_contain_passwd_control_oid(char **oids); 7947c478bd9Sstevel@tonic-gate 7957c478bd9Sstevel@tonic-gate /* RFC 2307 section 5.6. Get a canonical name from entry */ 7967c478bd9Sstevel@tonic-gate char *__s_api_get_canonical_name(ns_ldap_entry_t *entry, 7977c478bd9Sstevel@tonic-gate ns_ldap_attr_t *attrptr, int case_ignore); 7987c478bd9Sstevel@tonic-gate 7997c478bd9Sstevel@tonic-gate #ifdef __cplusplus 8007c478bd9Sstevel@tonic-gate } 8017c478bd9Sstevel@tonic-gate #endif 8027c478bd9Sstevel@tonic-gate 8037c478bd9Sstevel@tonic-gate #endif /* _NS_INTERNAL_H */ 804