ad_opts.h revision b1559c6498e791aa870f6e01948d1ad0f1af32e7
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher/*
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher SSSD
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher Authors:
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher Stephen Gallagher <sgallagh@redhat.com>
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher Copyright (C) 2012 Red Hat
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher This program is free software; you can redistribute it and/or modify
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher it under the terms of the GNU General Public License as published by
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher the Free Software Foundation; either version 3 of the License, or
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher (at your option) any later version.
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher This program is distributed in the hope that it will be useful,
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher but WITHOUT ANY WARRANTY; without even the implied warranty of
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher GNU General Public License for more details.
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher You should have received a copy of the GNU General Public License
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher along with this program. If not, see <http://www.gnu.org/licenses/>.
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher*/
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher#ifndef AD_OPTS_H_
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher#define AD_OPTS_H_
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher#include "src/providers/data_provider.h"
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher#include "db/sysdb_services.h"
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher#include "db/sysdb_autofs.h"
b1559c6498e791aa870f6e01948d1ad0f1af32e7Jakub Hrozek#include "providers/ldap/ldap_common.h"
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagherstruct dp_option ad_basic_opts[] = {
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ad_domain", DP_OPT_STRING, NULL_STRING, NULL_STRING },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ad_server", DP_OPT_STRING, NULL_STRING, NULL_STRING },
294e9a5521d327c5cdc49beeb9cb9e703b3134f1Jan Zeleny { "ad_backup_server", DP_OPT_STRING, NULL_STRING, NULL_STRING },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ad_hostname", DP_OPT_STRING, NULL_STRING, NULL_STRING },
4e2d9fe30bf8b692972a9654c60d2d90ed355815Stephen Gallagher { "krb5_keytab", DP_OPT_STRING, NULL_STRING, NULL_STRING },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "krb5_realm", DP_OPT_STRING, NULL_STRING, NULL_STRING},
a679f0167b646cffdae86546ed77e105576991b0Pavel Březina { "ad_enable_dns_sites", DP_OPT_BOOL, BOOL_TRUE, BOOL_TRUE },
8a05fd320a44636d120a18eb7e9956c7b35b3138Jakub Hrozek { "ad_access_filter", DP_OPT_STRING, NULL_STRING, NULL_STRING},
ba4a81e933deebb416603369b447ead6ebaa040dJakub Hrozek { "ad_enable_gc", DP_OPT_BOOL, BOOL_TRUE, BOOL_TRUE },
60cab26b12df9a2153823972cde0c38ca86e01b9Yassir Elley { "ad_gpo_access_control", DP_OPT_STRING, { "permissive" }, NULL_STRING },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher DP_OPTION_TERMINATOR
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher};
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagherstruct dp_option ad_def_ldap_opts[] = {
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_uri", DP_OPT_STRING, NULL_STRING, NULL_STRING },
f6cd1236c27817b97db002094b76648d92b55f82Jan Zeleny { "ldap_backup_uri", DP_OPT_STRING, NULL_STRING, NULL_STRING },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_search_base", DP_OPT_STRING, NULL_STRING, NULL_STRING },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_default_bind_dn", DP_OPT_STRING, NULL_STRING, NULL_STRING },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_default_authtok_type", DP_OPT_STRING, { "password" }, NULL_STRING},
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_default_authtok", DP_OPT_BLOB, NULL_BLOB, NULL_BLOB },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_search_timeout", DP_OPT_NUMBER, { .number = 6 }, NULL_NUMBER },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_network_timeout", DP_OPT_NUMBER, { .number = 6 }, NULL_NUMBER },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_opt_timeout", DP_OPT_NUMBER, { .number = 6 }, NULL_NUMBER },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_tls_reqcert", DP_OPT_STRING, { "hard" }, NULL_STRING },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_user_search_base", DP_OPT_STRING, NULL_STRING, NULL_STRING },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_user_search_scope", DP_OPT_STRING, { "sub" }, NULL_STRING },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_user_search_filter", DP_OPT_STRING, NULL_STRING, NULL_STRING },
4dd38025efda88f123eac672f87d3cda12f050c8Jakub Hrozek { "ldap_user_extra_attrs", DP_OPT_STRING, NULL_STRING, NULL_STRING },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_group_search_base", DP_OPT_STRING, NULL_STRING, NULL_STRING },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_group_search_scope", DP_OPT_STRING, { "sub" }, NULL_STRING },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_group_search_filter", DP_OPT_STRING, NULL_STRING, NULL_STRING },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_service_search_base", DP_OPT_STRING, NULL_STRING, NULL_STRING },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_sudo_search_base", DP_OPT_STRING, NULL_STRING, NULL_STRING },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_sudo_full_refresh_interval", DP_OPT_NUMBER, { .number = 21600 }, NULL_NUMBER }, /* 360 mins */
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_sudo_smart_refresh_interval", DP_OPT_NUMBER, { .number = 900 }, NULL_NUMBER }, /* 15 mins */
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_sudo_use_host_filter", DP_OPT_BOOL, BOOL_TRUE, BOOL_TRUE },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_sudo_hostnames", DP_OPT_STRING, NULL_STRING, NULL_STRING },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_sudo_ip", DP_OPT_STRING, NULL_STRING, NULL_STRING },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_sudo_include_netgroups", DP_OPT_BOOL, BOOL_TRUE, BOOL_TRUE },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_sudo_include_regexp", DP_OPT_BOOL, BOOL_TRUE, BOOL_TRUE },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_autofs_search_base", DP_OPT_STRING, NULL_STRING, NULL_STRING },
407123c67114bf010cdad4418f291f9fb3762f4aCove Schneider { "ldap_autofs_map_master_name", DP_OPT_STRING, { "auto.master" }, NULL_STRING },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_schema", DP_OPT_STRING, { "ad" }, NULL_STRING },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_offline_timeout", DP_OPT_NUMBER, { .number = 60 }, NULL_NUMBER },
35872dc24058c5e8028cb4082fd405a27835dcd1Jakub Hrozek { "ldap_force_upper_case_realm", DP_OPT_BOOL, BOOL_TRUE, BOOL_TRUE },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_enumeration_refresh_timeout", DP_OPT_NUMBER, { .number = 300 }, NULL_NUMBER },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_purge_cache_timeout", DP_OPT_NUMBER, { .number = 10800 }, NULL_NUMBER },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_tls_cacert", DP_OPT_STRING, NULL_STRING, NULL_STRING },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_tls_cacertdir", DP_OPT_STRING, NULL_STRING, NULL_STRING },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_tls_cert", DP_OPT_STRING, NULL_STRING, NULL_STRING },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_tls_key", DP_OPT_STRING, NULL_STRING, NULL_STRING },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_tls_cipher_suite", DP_OPT_STRING, NULL_STRING, NULL_STRING },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_id_use_start_tls", DP_OPT_BOOL, BOOL_FALSE, BOOL_FALSE },
35872dc24058c5e8028cb4082fd405a27835dcd1Jakub Hrozek { "ldap_id_mapping", DP_OPT_BOOL, BOOL_TRUE, BOOL_TRUE },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_sasl_mech", DP_OPT_STRING, { "gssapi" }, NULL_STRING },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_sasl_authid", DP_OPT_STRING, NULL_STRING, NULL_STRING },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_sasl_realm", DP_OPT_STRING, NULL_STRING, NULL_STRING },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_sasl_minssf", DP_OPT_NUMBER, { .number = -1 }, NULL_NUMBER },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_krb5_keytab", DP_OPT_STRING, NULL_STRING, NULL_STRING },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_krb5_init_creds", DP_OPT_BOOL, BOOL_TRUE, BOOL_TRUE },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher /* use the same parm name as the krb5 module so we set it only once */
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "krb5_server", DP_OPT_STRING, NULL_STRING, NULL_STRING },
07b7b76d7cd494cbd26263503ba2732c21819941Jan Zeleny { "krb5_backup_server", DP_OPT_STRING, NULL_STRING, NULL_STRING },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "krb5_realm", DP_OPT_STRING, NULL_STRING, NULL_STRING },
e82832a64fd456d1541ce0ea3902bcfb05e69642Stephen Gallagher { "krb5_canonicalize", DP_OPT_BOOL, BOOL_FALSE, BOOL_FALSE },
14452cd066b51e32ca0ebad6c45ae909a1debe57Jakub Hrozek { "krb5_use_kdcinfo", DP_OPT_BOOL, BOOL_TRUE, BOOL_TRUE },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_pwd_policy", DP_OPT_STRING, { "none" }, NULL_STRING },
35872dc24058c5e8028cb4082fd405a27835dcd1Jakub Hrozek { "ldap_referrals", DP_OPT_BOOL, BOOL_FALSE, BOOL_FALSE },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "account_cache_expiration", DP_OPT_NUMBER, { .number = 0 }, NULL_NUMBER },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_dns_service_name", DP_OPT_STRING, { SSS_LDAP_SRV_NAME }, NULL_STRING },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_krb5_ticket_lifetime", DP_OPT_NUMBER, { .number = (24 * 60 * 60) }, NULL_NUMBER },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_access_filter", DP_OPT_STRING, NULL_STRING, NULL_STRING },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_netgroup_search_base", DP_OPT_STRING, NULL_STRING, NULL_STRING },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_group_nesting_level", DP_OPT_NUMBER, { .number = 2 }, NULL_NUMBER },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_deref", DP_OPT_STRING, NULL_STRING, NULL_STRING },
a4cce2c98eedecb5d3b47da62104634cae268434Stephen Gallagher { "ldap_account_expire_policy", DP_OPT_STRING, { "ad" }, NULL_STRING },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_access_order", DP_OPT_STRING, { "filter" }, NULL_STRING },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_chpass_uri", DP_OPT_STRING, NULL_STRING, NULL_STRING },
f6cd1236c27817b97db002094b76648d92b55f82Jan Zeleny { "ldap_chpass_backup_uri", DP_OPT_STRING, NULL_STRING, NULL_STRING },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_chpass_dns_service_name", DP_OPT_STRING, NULL_STRING, NULL_STRING },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_chpass_update_last_change", DP_OPT_BOOL, BOOL_FALSE, BOOL_FALSE },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_enumeration_search_timeout", DP_OPT_NUMBER, { .number = 60 }, NULL_NUMBER },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher /* Do not include ldap_auth_disable_tls_never_use_in_production in the
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher * manpages or SSSDConfig API
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher */
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_auth_disable_tls_never_use_in_production", DP_OPT_BOOL, BOOL_FALSE, BOOL_FALSE },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_page_size", DP_OPT_NUMBER, { .number = 1000 }, NULL_NUMBER },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_deref_threshold", DP_OPT_NUMBER, { .number = 10 }, NULL_NUMBER },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_sasl_canonicalize", DP_OPT_BOOL, BOOL_FALSE, BOOL_FALSE },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_connection_expire_timeout", DP_OPT_NUMBER, { .number = 900 }, NULL_NUMBER },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_disable_paging", DP_OPT_BOOL, BOOL_FALSE, BOOL_FALSE },
ceb40cb8846ff755f841466908954087f927eae7Jakub Hrozek { "ldap_idmap_range_min", DP_OPT_NUMBER, { .number = 200000 }, NULL_NUMBER },
67ca9e7c006d8619f446c018eabf29eab1368ba5Ondrej Kos { "ldap_idmap_range_max", DP_OPT_NUMBER, { .number = 2000200000LL }, NULL_NUMBER },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_idmap_range_size", DP_OPT_NUMBER, { .number = 200000 }, NULL_NUMBER },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_idmap_autorid_compat", DP_OPT_BOOL, BOOL_FALSE, BOOL_FALSE },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_idmap_default_domain", DP_OPT_STRING, NULL_STRING, NULL_STRING },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_idmap_default_domain_sid", DP_OPT_STRING, NULL_STRING, NULL_STRING },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_groups_use_matching_rule_in_chain", DP_OPT_BOOL, BOOL_FALSE, BOOL_FALSE },
ae5381b3a81ed4dee51e3ac56ddabd0bf7641c86Jakub Hrozek { "ldap_initgroups_use_matching_rule_in_chain", DP_OPT_BOOL, BOOL_FALSE, BOOL_FALSE },
69994add9cd4e57d40b3b7a0b1783ef2d0aa974cPavel Reichl { "ldap_use_tokengroups", DP_OPT_BOOL, BOOL_TRUE, BOOL_TRUE},
fae99bfe4bfc8b4a12e9c2a0ad01b3684c22f934Simo Sorce { "ldap_rfc2307_fallback_to_local_users", DP_OPT_BOOL, BOOL_FALSE, BOOL_FALSE },
6263578b03a52b3ec3a2e33e097554241780fc20Lukas Slebodnik { "ldap_disable_range_retrieval", DP_OPT_BOOL, BOOL_FALSE, BOOL_FALSE },
eceefd520802efe356d413a13247c5f68d8e27c8Sumit Bose { "ldap_min_id", DP_OPT_NUMBER, NULL_NUMBER, NULL_NUMBER},
eceefd520802efe356d413a13247c5f68d8e27c8Sumit Bose { "ldap_max_id", DP_OPT_NUMBER, NULL_NUMBER, NULL_NUMBER},
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher DP_OPTION_TERMINATOR
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher};
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagherstruct dp_option ad_def_krb5_opts[] = {
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "krb5_server", DP_OPT_STRING, NULL_STRING, NULL_STRING },
07b7b76d7cd494cbd26263503ba2732c21819941Jan Zeleny { "krb5_backup_server", DP_OPT_STRING, NULL_STRING, NULL_STRING },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "krb5_realm", DP_OPT_STRING, NULL_STRING, NULL_STRING },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "krb5_ccachedir", DP_OPT_STRING, { DEFAULT_CCACHE_DIR }, NULL_STRING },
dcc6877aa2e2dd63a9dc9c411a9c58feaeb36b9aStephen Gallagher { "krb5_ccname_template", DP_OPT_STRING, NULL_STRING, NULL_STRING},
4f2e932acd5266e9d4e3f55966baafbdbd2ae210Ondrej Kos { "krb5_auth_timeout", DP_OPT_NUMBER, { .number = 6 }, NULL_NUMBER },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "krb5_keytab", DP_OPT_STRING, { "/etc/krb5.keytab" }, NULL_STRING },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "krb5_validate", DP_OPT_BOOL, BOOL_TRUE, BOOL_TRUE },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "krb5_kpasswd", DP_OPT_STRING, NULL_STRING, NULL_STRING },
07b7b76d7cd494cbd26263503ba2732c21819941Jan Zeleny { "krb5_backup_kpasswd", DP_OPT_STRING, NULL_STRING, NULL_STRING },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "krb5_store_password_if_offline", DP_OPT_BOOL, BOOL_FALSE, BOOL_FALSE },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "krb5_renewable_lifetime", DP_OPT_STRING, NULL_STRING, NULL_STRING },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "krb5_lifetime", DP_OPT_STRING, NULL_STRING, NULL_STRING },
1b171c456ff901ab622e44bcfd213f7de86fd787Ariel Barria { "krb5_renew_interval", DP_OPT_STRING, NULL_STRING, NULL_STRING },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "krb5_use_fast", DP_OPT_STRING, NULL_STRING, NULL_STRING },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "krb5_fast_principal", DP_OPT_STRING, NULL_STRING, NULL_STRING },
e82832a64fd456d1541ce0ea3902bcfb05e69642Stephen Gallagher { "krb5_canonicalize", DP_OPT_BOOL, BOOL_FALSE, BOOL_FALSE },
edaa983d094c239c3e1ba667bcd20ed3934be3b8Sumit Bose { "krb5_use_enterprise_principal", DP_OPT_BOOL, BOOL_TRUE, BOOL_TRUE },
14452cd066b51e32ca0ebad6c45ae909a1debe57Jakub Hrozek { "krb5_use_kdcinfo", DP_OPT_BOOL, BOOL_TRUE, BOOL_TRUE },
2c29d0fdc26e0b217ed96248852779cafb2367c9Stephen Gallagher DP_OPTION_TERMINATOR
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher};
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagherstruct sdap_attr_map ad_2008r2_attr_map[] = {
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_entry_usn", SDAP_AD_USN, SYSDB_USN, NULL },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_rootdse_last_usn", SDAP_AD_LAST_USN, SYSDB_HIGH_USN, NULL },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher SDAP_ATTR_MAP_TERMINATOR
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher};
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagherstruct sdap_attr_map ad_2008r2_user_map[] = {
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_user_object_class", "user", SYSDB_USER_CLASS, NULL },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_user_name", "sAMAccountName", SYSDB_NAME, NULL },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_user_pwd", "unixUserPassword", SYSDB_PWD, NULL },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_user_uid_number", "uidNumber", SYSDB_UIDNUM, NULL },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_user_gid_number", "gidNumber", SYSDB_GIDNUM, NULL },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_user_gecos", "gecos", SYSDB_GECOS, NULL },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_user_home_directory", "unixHomeDirectory", SYSDB_HOMEDIR, NULL },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_user_shell", "loginShell", SYSDB_SHELL, NULL },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_user_principal", "userPrincipalName", SYSDB_UPN, NULL },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_user_fullname", "name", SYSDB_FULLNAME, NULL },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_user_member_of", "memberOf", SYSDB_MEMBEROF, NULL },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_user_uuid", "objectGUID", SYSDB_UUID, NULL },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_user_objectsid", "objectSID", SYSDB_SID, NULL },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_user_primary_group", "primaryGroupID", SYSDB_PRIMARY_GROUP, NULL },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_user_modify_timestamp", "whenChanged", SYSDB_ORIG_MODSTAMP, NULL },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_user_entry_usn", SDAP_AD_USN, SYSDB_USN, NULL },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_user_shadow_last_change", NULL, SYSDB_SHADOWPW_LASTCHANGE, NULL },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_user_shadow_min", NULL, SYSDB_SHADOWPW_MIN, NULL },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_user_shadow_max", NULL, SYSDB_SHADOWPW_MAX, NULL },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_user_shadow_warning", NULL, SYSDB_SHADOWPW_WARNING, NULL },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_user_shadow_inactive", NULL, SYSDB_SHADOWPW_INACTIVE, NULL },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_user_shadow_expire", NULL, SYSDB_SHADOWPW_EXPIRE, NULL },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_user_shadow_flag", NULL, SYSDB_SHADOWPW_FLAG, NULL },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_user_krb_last_pwd_change", NULL, SYSDB_KRBPW_LASTCHANGE, NULL },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_user_krb_password_expiration", NULL, SYSDB_KRBPW_EXPIRATION, NULL },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_pwd_attribute", NULL, SYSDB_PWD_ATTRIBUTE, NULL },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_user_authorized_service", NULL, SYSDB_AUTHORIZED_SERVICE, NULL },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_user_ad_account_expires", "accountExpires", SYSDB_AD_ACCOUNT_EXPIRES, NULL},
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_user_ad_user_account_control", "userAccountControl", SYSDB_AD_USER_ACCOUNT_CONTROL, NULL},
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_ns_account_lock", NULL, SYSDB_NS_ACCOUNT_LOCK, NULL},
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_user_authorized_host", NULL, SYSDB_AUTHORIZED_HOST, NULL },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_user_nds_login_disabled", NULL, SYSDB_NDS_LOGIN_DISABLED, NULL },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_user_nds_login_expiration_time", NULL, SYSDB_NDS_LOGIN_EXPIRATION_TIME, NULL },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_user_nds_login_allowed_time_map", NULL, SYSDB_NDS_LOGIN_ALLOWED_TIME_MAP, NULL },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_user_ssh_public_key", NULL, SYSDB_SSH_PUBKEY, NULL },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher SDAP_ATTR_MAP_TERMINATOR
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher};
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagherstruct sdap_attr_map ad_2008r2_group_map[] = {
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_group_object_class", "group", SYSDB_GROUP_CLASS, NULL },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_group_name", "name", SYSDB_NAME, NULL },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_group_pwd", NULL, SYSDB_PWD, NULL },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_group_gid_number", "gidNumber", SYSDB_GIDNUM, NULL },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_group_member", "member", SYSDB_MEMBER, NULL },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_group_uuid", "objectGUID", SYSDB_UUID, NULL },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_group_objectsid", "objectSID", SYSDB_SID, NULL },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_group_modify_timestamp", "whenChanged", SYSDB_ORIG_MODSTAMP, NULL },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_group_entry_usn", SDAP_AD_USN, SYSDB_USN, NULL },
022456e93c9b175ce3774afe524e3926f41ba80fSumit Bose { "ldap_group_type", "groupType", SYSDB_GROUP_TYPE, NULL },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher SDAP_ATTR_MAP_TERMINATOR
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher};
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagherstruct sdap_attr_map ad_netgroup_map[] = {
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_netgroup_object_class", "nisNetgroup", SYSDB_NETGROUP_CLASS, NULL },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_netgroup_name", "cn", SYSDB_NAME, NULL },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_netgroup_member", "memberNisNetgroup", SYSDB_ORIG_NETGROUP_MEMBER, NULL },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_netgroup_triple", "nisNetgroupTriple", SYSDB_NETGROUP_TRIPLE, NULL },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher /* FIXME: this is 389ds specific */
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_netgroup_uuid", "nsUniqueId", SYSDB_UUID, NULL },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_netgroup_modify_timestamp", "modifyTimestamp", SYSDB_ORIG_MODSTAMP, NULL },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher SDAP_ATTR_MAP_TERMINATOR
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher};
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagherstruct sdap_attr_map ad_service_map[] = {
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_service_object_class", "ipService", SYSDB_SVC_CLASS, NULL },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_service_name", "cn", SYSDB_NAME, NULL },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_service_port", "ipServicePort", SYSDB_SVC_PORT, NULL },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_service_proto", "ipServiceProtocol", SYSDB_SVC_PROTO, NULL },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_service_entry_usn", NULL, SYSDB_USN, NULL },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher SDAP_ATTR_MAP_TERMINATOR
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher};
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagherstruct sdap_attr_map ad_autofs_mobject_map[] = {
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_autofs_map_object_class", "nisMap", SYSDB_AUTOFS_MAP_OC, NULL },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_autofs_map_name", "nisMapName", SYSDB_AUTOFS_MAP_NAME, NULL },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher SDAP_ATTR_MAP_TERMINATOR
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher};
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagherstruct sdap_attr_map ad_autofs_entry_map[] = {
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_autofs_entry_object_class", "nisObject", SYSDB_AUTOFS_ENTRY_OC, NULL },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_autofs_entry_key", "cn", SYSDB_AUTOFS_ENTRY_KEY, NULL },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher { "ldap_autofs_entry_value", "nisMapEntry", SYSDB_AUTOFS_ENTRY_VALUE, NULL },
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher SDAP_ATTR_MAP_TERMINATOR
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher};
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher
74e95cfd9d3939dfe9417d79d2f6fc79b361405fJakub Hrozekstruct dp_option ad_dyndns_opts[] = {
ad1be6fd04234f61f108773ff39aa7485abda47cJakub Hrozek { "dyndns_update", DP_OPT_BOOL, BOOL_TRUE, BOOL_FALSE },
74e95cfd9d3939dfe9417d79d2f6fc79b361405fJakub Hrozek { "dyndns_refresh_interval", DP_OPT_NUMBER, { .number = 86400 }, NULL_NUMBER },
74e95cfd9d3939dfe9417d79d2f6fc79b361405fJakub Hrozek { "dyndns_iface", DP_OPT_STRING, NULL_STRING, NULL_STRING },
74e95cfd9d3939dfe9417d79d2f6fc79b361405fJakub Hrozek { "dyndns_ttl", DP_OPT_NUMBER, { .number = 3600 }, NULL_NUMBER },
35872dc24058c5e8028cb4082fd405a27835dcd1Jakub Hrozek { "dyndns_update_ptr", DP_OPT_BOOL, BOOL_TRUE, BOOL_TRUE },
74e95cfd9d3939dfe9417d79d2f6fc79b361405fJakub Hrozek { "dyndns_force_tcp", DP_OPT_BOOL, BOOL_FALSE, BOOL_FALSE },
74e95cfd9d3939dfe9417d79d2f6fc79b361405fJakub Hrozek { "dyndns_auth", DP_OPT_STRING, { "gss-tsig" }, NULL_STRING },
74e95cfd9d3939dfe9417d79d2f6fc79b361405fJakub Hrozek DP_OPTION_TERMINATOR
74e95cfd9d3939dfe9417d79d2f6fc79b361405fJakub Hrozek};
74e95cfd9d3939dfe9417d79d2f6fc79b361405fJakub Hrozek
effcbdb12c7ef892f1fd92a745cb33a08ca4ba30Stephen Gallagher#endif /* AD_OPTS_H_ */