ipa_opts.h revision ba4378f49914e65a7d687a872d9b938173841154
7cb128dc4cae2a03a742f63ba7afee23c78e3af0Phil Carmody/*
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen SSSD
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen Authors:
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen Stephen Gallagher <sgallagh@redhat.com>
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen Copyright (C) 2012 Red Hat
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen This program is free software; you can redistribute it and/or modify
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen it under the terms of the GNU General Public License as published by
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen the Free Software Foundation; either version 3 of the License, or
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen (at your option) any later version.
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen This program is distributed in the hope that it will be useful,
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen but WITHOUT ANY WARRANTY; without even the implied warranty of
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
8a2401de6de54250ba271bfc53524a847805e8f4Timo Sirainen GNU General Public License for more details.
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen You should have received a copy of the GNU General Public License
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen along with this program. If not, see <http://www.gnu.org/licenses/>.
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen*/
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen#ifndef IPA_OPTS_H_
46b0fad7bc31f63f6f969b487bef2178beb125faTimo Sirainen#define IPA_OPTS_H_
8a2401de6de54250ba271bfc53524a847805e8f4Timo Sirainen
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen#include "src/providers/data_provider.h"
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen#include "db/sysdb.h"
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen#include "db/sysdb_sudo.h"
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen#include "db/sysdb_autofs.h"
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen#include "db/sysdb_services.h"
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen#include "db/sysdb_selinux.h"
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainenstruct dp_option ipa_basic_opts[] = {
b6c48e71a9413ac90a0414dfeb7d1248c144eeb2Timo Sirainen { "ipa_domain", DP_OPT_STRING, NULL_STRING, NULL_STRING },
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "ipa_server", DP_OPT_STRING, NULL_STRING, NULL_STRING },
8a2401de6de54250ba271bfc53524a847805e8f4Timo Sirainen { "ipa_backup_server", DP_OPT_STRING, NULL_STRING, NULL_STRING },
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "ipa_hostname", DP_OPT_STRING, NULL_STRING, NULL_STRING },
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "ipa_dyndns_update", DP_OPT_BOOL, BOOL_FALSE, BOOL_FALSE },
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "ipa_dyndns_ttl", DP_OPT_NUMBER, { .number = 1200}, NULL_NUMBER},
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "ipa_dyndns_iface", DP_OPT_STRING, NULL_STRING, NULL_STRING},
b6c48e71a9413ac90a0414dfeb7d1248c144eeb2Timo Sirainen { "ipa_hbac_search_base", DP_OPT_STRING, NULL_STRING, NULL_STRING},
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "ipa_host_search_base", DP_OPT_STRING, NULL_STRING, NULL_STRING },
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "ipa_selinux_search_base", DP_OPT_STRING, NULL_STRING, NULL_STRING },
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "ipa_subdomains_search_base", DP_OPT_STRING, NULL_STRING, NULL_STRING },
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "ipa_master_domain_search_base", DP_OPT_STRING, NULL_STRING, NULL_STRING },
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "krb5_realm", DP_OPT_STRING, NULL_STRING, NULL_STRING},
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "ipa_hbac_refresh", DP_OPT_NUMBER, { .number = 5 }, NULL_NUMBER },
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "ipa_selinux_refresh", DP_OPT_NUMBER, { .number = 5 }, NULL_NUMBER },
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "ipa_hbac_treat_deny_as", DP_OPT_STRING, { "DENY_ALL" }, NULL_STRING },
6516e7c2cfb84bbdaff7d748df0a0f1f6f39f75dTimo Sirainen { "ipa_hbac_support_srchost", DP_OPT_BOOL, BOOL_FALSE, BOOL_FALSE },
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "ipa_automount_location", DP_OPT_STRING, { "default" }, NULL_STRING },
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "ipa_ranges_search_base", DP_OPT_STRING, NULL_STRING, NULL_STRING },
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen DP_OPTION_TERMINATOR
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen};
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainenstruct dp_option ipa_def_ldap_opts[] = {
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "ldap_uri", DP_OPT_STRING, NULL_STRING, NULL_STRING },
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "ldap_backup_uri", DP_OPT_STRING, NULL_STRING, NULL_STRING },
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ldap_search_base", DP_OPT_STRING, NULL_STRING, NULL_STRING },
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ldap_default_bind_dn", DP_OPT_STRING, NULL_STRING, NULL_STRING },
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ldap_default_authtok_type", DP_OPT_STRING, NULL_STRING, NULL_STRING},
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ldap_default_authtok", DP_OPT_BLOB, NULL_BLOB, NULL_BLOB },
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ldap_search_timeout", DP_OPT_NUMBER, { .number = 6 }, NULL_NUMBER },
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ldap_network_timeout", DP_OPT_NUMBER, { .number = 6 }, NULL_NUMBER },
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ldap_opt_timeout", DP_OPT_NUMBER, { .number = 6 }, NULL_NUMBER },
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ldap_tls_reqcert", DP_OPT_STRING, { "hard" }, NULL_STRING },
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "ldap_user_search_base", DP_OPT_STRING, NULL_STRING, NULL_STRING },
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "ldap_user_search_scope", DP_OPT_STRING, { "sub" }, NULL_STRING },
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "ldap_user_search_filter", DP_OPT_STRING, NULL_STRING, NULL_STRING },
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "ldap_group_search_base", DP_OPT_STRING, NULL_STRING, NULL_STRING },
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "ldap_group_search_scope", DP_OPT_STRING, { "sub" }, NULL_STRING },
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ldap_group_search_filter", DP_OPT_STRING, NULL_STRING, NULL_STRING },
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ldap_service_search_base", DP_OPT_STRING, NULL_STRING, NULL_STRING },
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ldap_sudo_search_base", DP_OPT_STRING, NULL_STRING, NULL_STRING },
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ldap_sudo_full_refresh_interval", DP_OPT_NUMBER, { .number = 21600 }, NULL_NUMBER },
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ldap_sudo_smart_refresh_interval", DP_OPT_NUMBER, { .number = 900 }, NULL_NUMBER }, /* 15 mins */
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ldap_sudo_use_host_filter", DP_OPT_BOOL, BOOL_TRUE, BOOL_TRUE },
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ldap_sudo_hostnames", DP_OPT_STRING, NULL_STRING, NULL_STRING },
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ldap_sudo_ip", DP_OPT_STRING, NULL_STRING, NULL_STRING },
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ldap_sudo_include_netgroups", DP_OPT_BOOL, BOOL_TRUE, BOOL_TRUE },
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "ldap_sudo_include_regexp", DP_OPT_BOOL, BOOL_TRUE, BOOL_TRUE },
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "ldap_autofs_search_base", DP_OPT_STRING, NULL_STRING, NULL_STRING },
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ldap_schema", DP_OPT_STRING, { "ipa_v1" }, NULL_STRING },
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "ldap_offline_timeout", DP_OPT_NUMBER, { .number = 60 }, NULL_NUMBER },
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ldap_force_upper_case_realm", DP_OPT_BOOL, BOOL_TRUE, BOOL_TRUE },
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "ldap_enumeration_refresh_timeout", DP_OPT_NUMBER, { .number = 300 }, NULL_NUMBER },
8a2401de6de54250ba271bfc53524a847805e8f4Timo Sirainen { "ldap_purge_cache_timeout", DP_OPT_NUMBER, { .number = 3600 }, NULL_NUMBER },
8a2401de6de54250ba271bfc53524a847805e8f4Timo Sirainen { "ldap_tls_cacert", DP_OPT_STRING, { "/etc/ipa/ca.crt" }, NULL_STRING },
d4c3d55021bcbf2b062f4782b1cde9115d35aefcTimo Sirainen { "ldap_tls_cacertdir", DP_OPT_STRING, NULL_STRING, NULL_STRING },
d4c3d55021bcbf2b062f4782b1cde9115d35aefcTimo Sirainen { "ldap_tls_cert", DP_OPT_STRING, NULL_STRING, NULL_STRING },
d4c3d55021bcbf2b062f4782b1cde9115d35aefcTimo Sirainen { "ldap_tls_key", DP_OPT_STRING, NULL_STRING, NULL_STRING },
d4c3d55021bcbf2b062f4782b1cde9115d35aefcTimo Sirainen { "ldap_tls_cipher_suite", DP_OPT_STRING, NULL_STRING, NULL_STRING },
d4c3d55021bcbf2b062f4782b1cde9115d35aefcTimo Sirainen { "ldap_id_use_start_tls", DP_OPT_BOOL, BOOL_FALSE, BOOL_FALSE },
d4c3d55021bcbf2b062f4782b1cde9115d35aefcTimo Sirainen { "ldap_id_mapping", DP_OPT_BOOL, BOOL_FALSE, BOOL_FALSE },
d4c3d55021bcbf2b062f4782b1cde9115d35aefcTimo Sirainen { "ldap_sasl_mech", DP_OPT_STRING, { "GSSAPI" } , NULL_STRING },
d4c3d55021bcbf2b062f4782b1cde9115d35aefcTimo Sirainen { "ldap_sasl_authid", DP_OPT_STRING, NULL_STRING, NULL_STRING },
d4c3d55021bcbf2b062f4782b1cde9115d35aefcTimo Sirainen { "ldap_sasl_realm", DP_OPT_STRING, NULL_STRING, NULL_STRING },
b6c48e71a9413ac90a0414dfeb7d1248c144eeb2Timo Sirainen { "ldap_sasl_minssf", DP_OPT_NUMBER, { .number = 56 }, NULL_NUMBER },
b6c48e71a9413ac90a0414dfeb7d1248c144eeb2Timo Sirainen { "ldap_krb5_keytab", DP_OPT_STRING, NULL_STRING, NULL_STRING },
b6c48e71a9413ac90a0414dfeb7d1248c144eeb2Timo Sirainen { "ldap_krb5_init_creds", DP_OPT_BOOL, BOOL_TRUE, BOOL_TRUE },
b6c48e71a9413ac90a0414dfeb7d1248c144eeb2Timo Sirainen /* use the same parm name as the krb5 module so we set it only once */
b6c48e71a9413ac90a0414dfeb7d1248c144eeb2Timo Sirainen { "krb5_server", DP_OPT_STRING, NULL_STRING, NULL_STRING },
b6c48e71a9413ac90a0414dfeb7d1248c144eeb2Timo Sirainen { "krb5_backup_server", DP_OPT_STRING, NULL_STRING, NULL_STRING },
b6c48e71a9413ac90a0414dfeb7d1248c144eeb2Timo Sirainen { "krb5_realm", DP_OPT_STRING, NULL_STRING, NULL_STRING },
b6c48e71a9413ac90a0414dfeb7d1248c144eeb2Timo Sirainen { "krb5_canonicalize", DP_OPT_BOOL, BOOL_TRUE, BOOL_TRUE },
d4c3d55021bcbf2b062f4782b1cde9115d35aefcTimo Sirainen { "ldap_pwd_policy", DP_OPT_STRING, { "none" } , NULL_STRING },
d4c3d55021bcbf2b062f4782b1cde9115d35aefcTimo Sirainen { "ldap_referrals", DP_OPT_BOOL, BOOL_TRUE, BOOL_TRUE },
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "account_cache_expiration", DP_OPT_NUMBER, { .number = 0 }, NULL_NUMBER },
d4c3d55021bcbf2b062f4782b1cde9115d35aefcTimo Sirainen { "ldap_dns_service_name", DP_OPT_STRING, { SSS_LDAP_SRV_NAME }, NULL_STRING },
d4c3d55021bcbf2b062f4782b1cde9115d35aefcTimo Sirainen { "ldap_krb5_ticket_lifetime", DP_OPT_NUMBER, { .number = (24 * 60 * 60) }, NULL_NUMBER },
d4c3d55021bcbf2b062f4782b1cde9115d35aefcTimo Sirainen { "ldap_access_filter", DP_OPT_STRING, NULL_STRING, NULL_STRING },
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ldap_netgroup_search_base", DP_OPT_STRING, NULL_STRING, NULL_STRING },
d4c3d55021bcbf2b062f4782b1cde9115d35aefcTimo Sirainen { "ldap_group_nesting_level", DP_OPT_NUMBER, { .number = 2 }, NULL_NUMBER },
8a2401de6de54250ba271bfc53524a847805e8f4Timo Sirainen { "ldap_deref", DP_OPT_STRING, NULL_STRING, NULL_STRING },
d4c3d55021bcbf2b062f4782b1cde9115d35aefcTimo Sirainen { "ldap_account_expire_policy", DP_OPT_STRING, { "ipa" }, NULL_STRING },
8a2401de6de54250ba271bfc53524a847805e8f4Timo Sirainen { "ldap_access_order", DP_OPT_STRING, NULL_STRING, NULL_STRING },
8a2401de6de54250ba271bfc53524a847805e8f4Timo Sirainen { "ldap_chpass_uri", DP_OPT_STRING, NULL_STRING, NULL_STRING },
8a2401de6de54250ba271bfc53524a847805e8f4Timo Sirainen { "ldap_chpass_backup_uri", DP_OPT_STRING, NULL_STRING, NULL_STRING },
8a2401de6de54250ba271bfc53524a847805e8f4Timo Sirainen { "ldap_chpass_dns_service_name", DP_OPT_STRING, NULL_STRING, NULL_STRING },
d4c3d55021bcbf2b062f4782b1cde9115d35aefcTimo Sirainen { "ldap_chpass_update_last_change", DP_OPT_BOOL, BOOL_FALSE, BOOL_FALSE },
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "ldap_enumeration_search_timeout", DP_OPT_NUMBER, { .number = 60 }, NULL_NUMBER },
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen /* Do not include ldap_auth_disable_tls_never_use_in_production in the
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen * manpages or SSSDConfig API
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen */
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "ldap_auth_disable_tls_never_use_in_production", DP_OPT_BOOL, BOOL_FALSE, BOOL_FALSE },
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "ldap_page_size", DP_OPT_NUMBER, { .number = 1000 }, NULL_NUMBER },
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "ldap_deref_threshold", DP_OPT_NUMBER, { .number = 10 }, NULL_NUMBER },
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ldap_sasl_canonicalize", DP_OPT_BOOL, BOOL_FALSE, BOOL_FALSE },
b6c48e71a9413ac90a0414dfeb7d1248c144eeb2Timo Sirainen { "ldap_connection_expire_timeout", DP_OPT_NUMBER, { .number = 900 }, NULL_NUMBER },
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "ldap_disable_paging", DP_OPT_BOOL, BOOL_FALSE, BOOL_FALSE },
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "ldap_idmap_range_min", DP_OPT_NUMBER, { .number = 200000 }, NULL_NUMBER },
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "ldap_idmap_range_max", DP_OPT_NUMBER, { .number = 2000200000LL }, NULL_NUMBER },
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ldap_idmap_range_size", DP_OPT_NUMBER, { .number = 200000 }, NULL_NUMBER },
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ldap_idmap_autorid_compat", DP_OPT_BOOL, BOOL_FALSE, BOOL_FALSE },
1183340bf4fda4040268aa4ba7a816b567659c08Timo Sirainen { "ldap_idmap_default_domain", DP_OPT_STRING, NULL_STRING, NULL_STRING },
1183340bf4fda4040268aa4ba7a816b567659c08Timo Sirainen { "ldap_idmap_default_domain_sid", DP_OPT_STRING, NULL_STRING, NULL_STRING },
1183340bf4fda4040268aa4ba7a816b567659c08Timo Sirainen { "ldap_groups_use_matching_rule_in_chain", DP_OPT_BOOL, BOOL_FALSE, BOOL_FALSE },
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ldap_initgroups_use_matching_rule_in_chain", DP_OPT_BOOL, BOOL_FALSE, BOOL_FALSE },
1183340bf4fda4040268aa4ba7a816b567659c08Timo Sirainen DP_OPTION_TERMINATOR
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen};
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainenstruct sdap_attr_map ipa_attr_map[] = {
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "ldap_entry_usn", "entryUSN", SYSDB_USN, NULL },
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "ldap_rootdse_last_usn", "lastUSN", SYSDB_HIGH_USN, NULL },
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen SDAP_ATTR_MAP_TERMINATOR
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen};
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen
46b0fad7bc31f63f6f969b487bef2178beb125faTimo Sirainenstruct sdap_attr_map ipa_user_map[] = {
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "ldap_user_object_class", "posixAccount", SYSDB_USER_CLASS, NULL },
8a2401de6de54250ba271bfc53524a847805e8f4Timo Sirainen { "ldap_user_name", "uid", SYSDB_NAME, NULL },
46b0fad7bc31f63f6f969b487bef2178beb125faTimo Sirainen { "ldap_user_pwd", "userPassword", SYSDB_PWD, NULL },
46b0fad7bc31f63f6f969b487bef2178beb125faTimo Sirainen { "ldap_user_uid_number", "uidNumber", SYSDB_UIDNUM, NULL },
46b0fad7bc31f63f6f969b487bef2178beb125faTimo Sirainen { "ldap_user_gid_number", "gidNumber", SYSDB_GIDNUM, NULL },
46b0fad7bc31f63f6f969b487bef2178beb125faTimo Sirainen { "ldap_user_gecos", "gecos", SYSDB_GECOS, NULL },
8a2401de6de54250ba271bfc53524a847805e8f4Timo Sirainen { "ldap_user_home_directory", "homeDirectory", SYSDB_HOMEDIR, NULL },
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "ldap_user_shell", "loginShell", SYSDB_SHELL, NULL },
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "ldap_user_principal", "krbPrincipalName", SYSDB_UPN, NULL },
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "ldap_user_fullname", "cn", SYSDB_FULLNAME, NULL },
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "ldap_user_member_of", "memberOf", SYSDB_MEMBEROF, NULL },
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ldap_user_uuid", "nsUniqueId", SYSDB_UUID, NULL },
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ldap_user_objectsid", NULL, SYSDB_SID, NULL },
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ldap_user_primary_group", NULL, SYSDB_PRIMARY_GROUP, NULL },
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ldap_user_modify_timestamp", "modifyTimestamp", SYSDB_ORIG_MODSTAMP, NULL },
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ldap_user_entry_usn", NULL, SYSDB_USN, NULL },
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ldap_user_shadow_last_change", "shadowLastChange", SYSDB_SHADOWPW_LASTCHANGE, NULL },
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ldap_user_shadow_min", "shadowMin", SYSDB_SHADOWPW_MIN, NULL },
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ldap_user_shadow_max", "shadowMax", SYSDB_SHADOWPW_MAX, NULL },
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ldap_user_shadow_warning", "shadowWarning", SYSDB_SHADOWPW_WARNING, NULL },
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ldap_user_shadow_inactive", "shadowInactive", SYSDB_SHADOWPW_INACTIVE, NULL },
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ldap_user_shadow_expire", "shadowExpire", SYSDB_SHADOWPW_EXPIRE, NULL },
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ldap_user_shadow_flag", "shadowFlag", SYSDB_SHADOWPW_FLAG, NULL },
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ldap_user_krb_last_pwd_change", "krbLastPwdChange", SYSDB_KRBPW_LASTCHANGE, NULL },
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ldap_user_krb_password_expiration", "krbPasswordExpiration", SYSDB_KRBPW_EXPIRATION, NULL },
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ldap_pwd_attribute", "pwdAttribute", SYSDB_PWD_ATTRIBUTE, NULL },
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ldap_user_authorized_service", "authorizedService", SYSDB_AUTHORIZED_SERVICE, NULL },
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ldap_user_ad_account_expires", "accountExpires", SYSDB_AD_ACCOUNT_EXPIRES, NULL},
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ldap_user_ad_user_account_control", "userAccountControl", SYSDB_AD_USER_ACCOUNT_CONTROL, NULL},
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ldap_ns_account_lock", "nsAccountLock", SYSDB_NS_ACCOUNT_LOCK, NULL},
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ldap_user_authorized_host", "host", SYSDB_AUTHORIZED_HOST, NULL },
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ldap_user_nds_login_disabled", "loginDisabled", SYSDB_NDS_LOGIN_DISABLED, NULL },
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ldap_user_nds_login_expiration_time", "loginExpirationTime", SYSDB_NDS_LOGIN_EXPIRATION_TIME, NULL },
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ldap_user_nds_login_allowed_time_map", "loginAllowedTimeMap", SYSDB_NDS_LOGIN_ALLOWED_TIME_MAP, NULL },
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ldap_user_ssh_public_key", "ipaSshPubKey", SYSDB_SSH_PUBKEY, NULL },
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen SDAP_ATTR_MAP_TERMINATOR
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen};
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainenstruct sdap_attr_map ipa_group_map[] = {
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "ldap_group_object_class", "posixGroup", SYSDB_GROUP_CLASS, NULL },
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ldap_group_name", "cn", SYSDB_NAME, NULL },
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "ldap_group_pwd", "userPassword", SYSDB_PWD, NULL },
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ldap_group_gid_number", "gidNumber", SYSDB_GIDNUM, NULL },
46b0fad7bc31f63f6f969b487bef2178beb125faTimo Sirainen { "ldap_group_member", "member", SYSDB_MEMBER, NULL },
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "ldap_group_uuid", "nsUniqueId", SYSDB_UUID, NULL },
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "ldap_group_objectsid", NULL, SYSDB_SID, NULL },
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ldap_group_modify_timestamp", "modifyTimestamp", SYSDB_ORIG_MODSTAMP, NULL },
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ldap_group_entry_usn", NULL, SYSDB_USN, NULL },
b6c48e71a9413ac90a0414dfeb7d1248c144eeb2Timo Sirainen SDAP_ATTR_MAP_TERMINATOR
b6c48e71a9413ac90a0414dfeb7d1248c144eeb2Timo Sirainen};
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainenstruct sdap_attr_map ipa_netgroup_map[] = {
8a2401de6de54250ba271bfc53524a847805e8f4Timo Sirainen { "ipa_netgroup_object_class", "ipaNisNetgroup", SYSDB_NETGROUP_CLASS, NULL },
46b0fad7bc31f63f6f969b487bef2178beb125faTimo Sirainen { "ipa_netgroup_name", "cn", SYSDB_NAME, NULL },
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ipa_netgroup_member", "member", SYSDB_ORIG_NETGROUP_MEMBER, NULL },
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ipa_netgroup_member_of", "memberOf", SYSDB_MEMBEROF, NULL },
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "ipa_netgroup_member_user", "memberUser", SYSDB_ORIG_MEMBER_USER, NULL },
8a2401de6de54250ba271bfc53524a847805e8f4Timo Sirainen { "ipa_netgroup_member_host", "memberHost", SYSDB_ORIG_MEMBER_HOST, NULL },
46b0fad7bc31f63f6f969b487bef2178beb125faTimo Sirainen { "ipa_netgroup_member_ext_host", "externalHost", SYSDB_ORIG_NETGROUP_EXTERNAL_HOST, NULL },
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "ipa_netgroup_domain", "nisDomainName", SYSDB_NETGROUP_DOMAIN, NULL },
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "ipa_netgroup_uuid", "ipaUniqueID", SYSDB_UUID, NULL },
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen SDAP_ATTR_MAP_TERMINATOR
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen};
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainenstruct sdap_attr_map ipa_host_map[] = {
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "ipa_host_object_class", "ipaHost", SYSDB_HOST_CLASS, NULL },
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "ipa_host_name", "cn", SYSDB_NAME, NULL },
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "ipa_host_fqdn", "fqdn", SYSDB_FQDN, NULL },
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ipa_host_serverhostname", "serverHostname", SYSDB_SERVERHOSTNAME, NULL },
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "ipa_host_member_of", "memberOf", SYSDB_ORIG_MEMBEROF, NULL },
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ipa_host_ssh_public_key", "ipaSshPubKey", SYSDB_SSH_PUBKEY, NULL },
b6c48e71a9413ac90a0414dfeb7d1248c144eeb2Timo Sirainen { "ipa_host_uuid", "ipaUniqueID", SYSDB_UUID, NULL},
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen SDAP_ATTR_MAP_TERMINATOR
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen};
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainenstruct sdap_attr_map ipa_hostgroup_map[] = {
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ipa_hostgroup_objectclass", "ipaHostgroup", SYSDB_HOSTGROUP_CLASS, NULL},
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ipa_hostgroup_name", "cn", SYSDB_NAME, NULL},
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ipa_hostgroup_member", "member", SYSDB_MEMBER, NULL},
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ipa_hostgroup_memberof", "memberOf", SYSDB_ORIG_MEMBEROF, NULL},
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "ipa_hostgroup_uuid", "ipaUniqueID", SYSDB_UUID, NULL},
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen SDAP_ATTR_MAP_TERMINATOR
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen};
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainenstruct sdap_attr_map ipa_selinux_user_map[] = {
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "ipa_selinux_usermap_object_class", "ipaselinuxusermap", SYSDB_SELINUX_USERMAP_CLASS, NULL},
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ipa_selinux_usermap_name", "cn", SYSDB_NAME, NULL},
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "ipa_selinux_usermap_member_user", "memberUser", SYSDB_ORIG_MEMBER_USER, NULL},
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "ipa_selinux_usermap_member_host", "memberHost", SYSDB_ORIG_MEMBER_HOST, NULL},
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "ipa_selinux_usermap_see_also", "seeAlso", SYSDB_SELINUX_SEEALSO, NULL},
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ipa_selinux_usermap_selinux_user", "ipaSELinuxUser", SYSDB_SELINUX_USER, NULL},
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "ipa_selinux_usermap_enabled", "ipaEnabledFlag", SYSDB_SELINUX_ENABLED, NULL},
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "ipa_selinux_usermap_user_category", "userCategory", SYSDB_USER_CATEGORY, NULL},
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "ipa_selinux_usermap_host_category", "hostCategory", SYSDB_HOST_CATEGORY, NULL},
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ipa_selinux_usermap_uuid", "ipaUniqueID", SYSDB_UUID, NULL},
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen SDAP_ATTR_MAP_TERMINATOR
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen};
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainenstruct dp_option ipa_def_krb5_opts[] = {
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "krb5_server", DP_OPT_STRING, NULL_STRING, NULL_STRING },
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "krb5_backup_server", DP_OPT_STRING, NULL_STRING, NULL_STRING },
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "krb5_realm", DP_OPT_STRING, NULL_STRING, NULL_STRING },
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "krb5_ccachedir", DP_OPT_STRING, { DEFAULT_CCACHE_DIR }, NULL_STRING },
b6c48e71a9413ac90a0414dfeb7d1248c144eeb2Timo Sirainen { "krb5_ccname_template", DP_OPT_STRING, { DEFAULT_CCNAME_TEMPLATE }, NULL_STRING},
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "krb5_auth_timeout", DP_OPT_NUMBER, { .number = 6 }, NULL_NUMBER },
d0f9c91ed9ccffa384ef2eebb1083b372591f02aTimo Sirainen { "krb5_keytab", DP_OPT_STRING, { "/etc/krb5.keytab" }, NULL_STRING },
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "krb5_validate", DP_OPT_BOOL, BOOL_TRUE, BOOL_TRUE },
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "krb5_kpasswd", DP_OPT_STRING, NULL_STRING, NULL_STRING },
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "krb5_backup_kpasswd", DP_OPT_STRING, NULL_STRING, NULL_STRING },
d0f9c91ed9ccffa384ef2eebb1083b372591f02aTimo Sirainen { "krb5_store_password_if_offline", DP_OPT_BOOL, BOOL_FALSE, BOOL_FALSE },
d0f9c91ed9ccffa384ef2eebb1083b372591f02aTimo Sirainen { "krb5_renewable_lifetime", DP_OPT_STRING, NULL_STRING, NULL_STRING },
d0f9c91ed9ccffa384ef2eebb1083b372591f02aTimo Sirainen { "krb5_lifetime", DP_OPT_STRING, NULL_STRING, NULL_STRING },
d0f9c91ed9ccffa384ef2eebb1083b372591f02aTimo Sirainen { "krb5_renew_interval", DP_OPT_NUMBER, NULL_NUMBER, NULL_NUMBER },
d0f9c91ed9ccffa384ef2eebb1083b372591f02aTimo Sirainen { "krb5_use_fast", DP_OPT_STRING, NULL_STRING, NULL_STRING },
d0f9c91ed9ccffa384ef2eebb1083b372591f02aTimo Sirainen { "krb5_fast_principal", DP_OPT_STRING, NULL_STRING, NULL_STRING },
d0f9c91ed9ccffa384ef2eebb1083b372591f02aTimo Sirainen { "krb5_canonicalize", DP_OPT_BOOL, BOOL_TRUE, BOOL_TRUE },
b6c48e71a9413ac90a0414dfeb7d1248c144eeb2Timo Sirainen DP_OPTION_TERMINATOR
b6c48e71a9413ac90a0414dfeb7d1248c144eeb2Timo Sirainen};
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainenstruct sdap_attr_map ipa_service_map[] = {
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ldap_service_object_class", "ipService", SYSDB_SVC_CLASS, NULL },
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ldap_service_name", "cn", SYSDB_NAME, NULL },
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "ldap_service_port", "ipServicePort", SYSDB_SVC_PORT, NULL },
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen { "ldap_service_proto", "ipServiceProtocol", SYSDB_SVC_PROTO, NULL },
0b32a8d139f6a4f2b18a6444fc66d31b4a1b0da6Timo Sirainen { "ldap_service_entry_usn", NULL, SYSDB_USN, NULL },
a78468f42df768399d6e3890381a936b439297b0Timo Sirainen SDAP_ATTR_MAP_TERMINATOR
0b32a8d139f6a4f2b18a6444fc66d31b4a1b0da6Timo Sirainen};
0b32a8d139f6a4f2b18a6444fc66d31b4a1b0da6Timo Sirainen
a78468f42df768399d6e3890381a936b439297b0Timo Sirainenstruct sdap_attr_map ipa_autofs_mobject_map[] = {
a78468f42df768399d6e3890381a936b439297b0Timo Sirainen { "ldap_autofs_map_object_class", "automountMap", SYSDB_AUTOFS_MAP_OC, NULL },
a78468f42df768399d6e3890381a936b439297b0Timo Sirainen { "ldap_autofs_map_name", "automountMapName", SYSDB_AUTOFS_MAP_NAME, NULL },
b6c48e71a9413ac90a0414dfeb7d1248c144eeb2Timo Sirainen SDAP_ATTR_MAP_TERMINATOR
a78468f42df768399d6e3890381a936b439297b0Timo Sirainen};
9ec1ecbc19af5a312877c0f19d6adf5bc38a7111Timo Sirainen
a78468f42df768399d6e3890381a936b439297b0Timo Sirainenstruct sdap_attr_map ipa_autofs_entry_map[] = {
a78468f42df768399d6e3890381a936b439297b0Timo Sirainen { "ldap_autofs_entry_object_class", "automount", SYSDB_AUTOFS_ENTRY_OC, NULL },
a78468f42df768399d6e3890381a936b439297b0Timo Sirainen { "ldap_autofs_entry_key", "automountKey", SYSDB_AUTOFS_ENTRY_KEY, NULL },
c59b9c273b41f7bcf51f6803110b67813879ff05Timo Sirainen { "ldap_autofs_entry_value", "automountInformation", SYSDB_AUTOFS_ENTRY_VALUE, NULL },
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen SDAP_ATTR_MAP_TERMINATOR
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen};
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen#endif /* IPA_OPTS_H_ */
c33d3f93abf8392fdc60e12bea41ffd12cc85a8dTimo Sirainen