#ifndef _SDAP_ASYNC_H_

#define _SDAP_ASYNC_H_

#include <sys/types.h>

#include <sys/socket.h>

#include <talloc.h>

#include <tevent.h>

#include "providers/backend.h"

#include "providers/ldap/sdap.h"

#include "providers/ldap/sdap_id_op.h"

#include "providers/fail_over.h"

#define AD_TOKENGROUPS_ATTR "tokenGroups"

struct tevent_req *sdap_connect_send(TALLOC_CTX *memctx,

struct tevent_context *ev,

struct sdap_options *opts,

const char *uri,

struct sockaddr_storage *sockaddr,

bool use_start_tls);

int sdap_connect_recv(struct tevent_req *req,

TALLOC_CTX *memctx,

struct sdap_handle **sh);

struct tevent_req *sdap_connect_host_send(TALLOC_CTX *mem_ctx,

struct tevent_context *ev,

struct sdap_options *opts,

struct resolv_ctx *resolv_ctx,

enum restrict_family family_order,

enum host_database *host_db,

const char *protocol,

const char *host,

int port,

bool use_start_tls);

errno_t sdap_connect_host_recv(TALLOC_CTX *mem_ctx,

struct tevent_req *req,

struct sdap_handle **_sh);

enum sdap_entry_lookup_type {

SDAP_LOOKUP_SINGLE, /* Direct single-user/group lookup */

SDAP_LOOKUP_WILDCARD, /* Multiple entries with a limit */

SDAP_LOOKUP_ENUMERATE, /* Fetch all entries from the server */

};

struct tevent_req *sdap_search_user_send(TALLOC_CTX *memctx,

struct tevent_context *ev,

struct sss_domain_info *dom,

struct sdap_options *opts,

struct sdap_search_base **search_bases,

struct sdap_handle *sh,

const char **attrs,

const char *filter,

int timeout,

enum sdap_entry_lookup_type lookup_type);

int sdap_search_user_recv(TALLOC_CTX *memctx, struct tevent_req *req,

char **higher_usn, struct sysdb_attrs ***users,

size_t *count);

struct tevent_req *sdap_get_users_send(TALLOC_CTX *memctx,

struct tevent_context *ev,

struct sss_domain_info *dom,

struct sysdb_ctx *sysdb,

struct sdap_options *opts,

struct sdap_search_base **search_bases,

struct sdap_handle *sh,

const char **attrs,

const char *filter,

int timeout,

enum sdap_entry_lookup_type lookup_type,

struct sysdb_attrs *mapped_attrs);

int sdap_get_users_recv(struct tevent_req *req,

TALLOC_CTX *mem_ctx, char **timestamp);

struct tevent_req *sdap_get_groups_send(TALLOC_CTX *memctx,

struct tevent_context *ev,

struct sdap_domain *sdom,

struct sdap_options *opts,

struct sdap_handle *sh,

const char **attrs,

const char *filter,

int timeout,

enum sdap_entry_lookup_type lookup_type,

bool no_members);

int sdap_get_groups_recv(struct tevent_req *req,

TALLOC_CTX *mem_ctx, char **timestamp);

struct tevent_req *sdap_get_netgroups_send(TALLOC_CTX *memctx,

struct tevent_context *ev,

struct sss_domain_info *dom,

struct sysdb_ctx *sysdb,

struct sdap_options *opts,

struct sdap_search_base **search_bases,

struct sdap_handle *sh,

const char **attrs,

const char *filter,

int timeout);

int sdap_get_netgroups_recv(struct tevent_req *req,

TALLOC_CTX *mem_ctx, char **timestamp,

size_t *reply_count,

struct sysdb_attrs ***reply);

struct tevent_req *

sdap_host_info_send(TALLOC_CTX *mem_ctx,

struct tevent_context *ev,

struct sdap_handle *sh,

struct sdap_options *opts,

const char *hostname,

struct sdap_attr_map *host_map,

struct sdap_search_base **search_bases);

sdap_host_info_recv(struct tevent_req *req,

TALLOC_CTX *mem_ctx,

size_t *host_count,

struct sysdb_attrs ***hosts);

struct tevent_req *sdap_auth_send(TALLOC_CTX *memctx,

struct tevent_context *ev,

struct sdap_handle *sh,

const char *sasl_mech,

const char *sasl_user,

const char *user_dn,

struct sss_auth_token *authtok,

int simple_bind_timeout);

errno_t sdap_auth_recv(struct tevent_req *req,

TALLOC_CTX *memctx,

struct sdap_ppolicy_data **ppolicy);

struct tevent_req *sdap_get_initgr_send(TALLOC_CTX *memctx,

struct tevent_context *ev,

struct sdap_domain *sdom,

struct sdap_handle *sh,

struct sdap_id_ctx *id_ctx,

struct sdap_id_conn_ctx *conn,

const char *name,

int filter_type,

const char *extra_value,

const char **grp_attrs);

int sdap_get_initgr_recv(struct tevent_req *req);

struct tevent_req *sdap_exop_modify_passwd_send(TALLOC_CTX *memctx,

struct tevent_context *ev,

struct sdap_handle *sh,

char *user_dn,

const char *password,

const char *new_password,

int timeout);

errno_t sdap_exop_modify_passwd_recv(struct tevent_req *req,

TALLOC_CTX *mem_ctx,

char **user_error_msg);

struct tevent_req *

sdap_modify_shadow_lastchange_send(TALLOC_CTX *mem_ctx,

struct tevent_context *ev,

struct sdap_handle *sh,

const char *dn,

char *lastchanged_name);

errno_t sdap_modify_shadow_lastchange_recv(struct tevent_req *req);

enum connect_tls {

CON_TLS_DFL,

CON_TLS_ON,

CON_TLS_OFF

};

struct tevent_req *sdap_cli_connect_send(TALLOC_CTX *memctx,

struct tevent_context *ev,

struct sdap_options *opts,

struct be_ctx *be,

struct sdap_service *service,

bool skip_rootdse,

enum connect_tls force_tls,

bool skip_auth);

int sdap_cli_connect_recv(struct tevent_req *req,

TALLOC_CTX *memctx,

bool *can_retry,

struct sdap_handle **gsh,

struct sdap_server_opts **srv_opts);

struct tevent_req *sdap_get_and_parse_generic_send(TALLOC_CTX *memctx,

struct tevent_context *ev,

struct sdap_options *opts,

struct sdap_handle *sh,

const char *search_base,

int scope,

const char *filter,

const char **attrs,

struct sdap_attr_map *map,

int map_num_attrs,

int attrsonly,

LDAPControl **serverctrls,

LDAPControl **clientctrls,

int sizelimit,

int timeout,

bool allow_paging);

int sdap_get_and_parse_generic_recv(struct tevent_req *req,

TALLOC_CTX *mem_ctx,

size_t *reply_count,

struct sysdb_attrs ***reply);

struct tevent_req *sdap_get_generic_send(TALLOC_CTX *memctx,

struct tevent_context *ev,

struct sdap_options *opts,

struct sdap_handle *sh,

const char *search_base,

int scope,

const char *filter,

const char **attrs,

struct sdap_attr_map *map,

int map_num_attrs,

int timeout,

bool allow_paging);

int sdap_get_generic_recv(struct tevent_req *req,

TALLOC_CTX *mem_ctx, size_t *reply_count,

struct sysdb_attrs ***reply_list);

bool sdap_has_deref_support(struct sdap_handle *sh, struct sdap_options *opts);

enum sdap_deref_flags {

SDAP_DEREF_FLG_SILENT = 1 << 0, /* Do not warn if dereference fails */

};

struct tevent_req *

sdap_deref_search_with_filter_send(TALLOC_CTX *memctx,

struct tevent_context *ev,

struct sdap_options *opts,

struct sdap_handle *sh,

const char *search_base,

const char *filter,

const char *deref_attr,

const char **attrs,

int num_maps,

struct sdap_attr_map_info *maps,

int timeout,

unsigned flags);

int sdap_deref_search_with_filter_recv(struct tevent_req *req,

TALLOC_CTX *mem_ctx,

size_t *reply_count,

struct sdap_deref_attrs ***reply);

struct tevent_req *

sdap_deref_search_send(TALLOC_CTX *memctx,

struct tevent_context *ev,

struct sdap_options *opts,

struct sdap_handle *sh,

const char *base_dn,

const char *deref_attr,

const char **attrs,

int num_maps,

struct sdap_attr_map_info *maps,

int timeout);

int sdap_deref_search_recv(struct tevent_req *req,

TALLOC_CTX *mem_ctx,

size_t *reply_count,

struct sdap_deref_attrs ***reply);

struct tevent_req *

sdap_gc_posix_check_send(TALLOC_CTX *memctx, struct tevent_context *ev,

struct sdap_options *opts, struct sdap_handle *sh,

int timeout);

int sdap_gc_posix_check_recv(struct tevent_req *req,

bool *_has_posix);

struct tevent_req *

sdap_sd_search_send(TALLOC_CTX *memctx,

struct tevent_context *ev,

struct sdap_options *opts,

struct sdap_handle *sh,

const char *base_dn,

int sd_flags,

const char **attrs,

int timeout);

int sdap_sd_search_recv(struct tevent_req *req,

TALLOC_CTX *mem_ctx,

size_t *_reply_count,

struct sysdb_attrs ***_reply,

size_t *_ref_count,

char ***_refs);

sdap_attrs_add_ldap_attr(struct sysdb_attrs *ldap_attrs,

const char *attr_name,

const char *attr_desc,

bool multivalued,

const char *name,

struct sysdb_attrs *attrs);

#define sdap_attrs_add_string(ldap_attrs, attr_name, attr_desc, name, attrs) \

sdap_attrs_add_ldap_attr(ldap_attrs, attr_name, attr_desc, \

false, name, attrs)

#define sdap_attrs_add_list(ldap_attrs, attr_name, attr_desc, name, attrs) \

sdap_attrs_add_ldap_attr(ldap_attrs, attr_name, attr_desc, \

true, name, attrs)

sdap_save_all_names(const char *name,

struct sysdb_attrs *ldap_attrs,

struct sss_domain_info *dom,

enum sysdb_member_type entry_type,

struct sysdb_attrs *attrs);

struct tevent_req *

sdap_get_services_send(TALLOC_CTX *memctx,

struct tevent_context *ev,

struct sss_domain_info *dom,

struct sysdb_ctx *sysdb,

struct sdap_options *opts,

struct sdap_search_base **search_bases,

struct sdap_handle *sh,

const char **attrs,

const char *filter,

int timeout,

bool enumeration);

sdap_get_services_recv(TALLOC_CTX *mem_ctx,

struct tevent_req *req,

char **usn_value);

struct tevent_req *

enum_services_send(TALLOC_CTX *memctx,

struct tevent_context *ev,

struct sdap_id_ctx *id_ctx,

struct sdap_id_op *op,

bool purge);

enum_services_recv(struct tevent_req *req);

#define SDAP_MATCHING_RULE_IN_CHAIN "1.2.840.113556.1.4.1941"

struct tevent_req *

sdap_get_ad_match_rule_members_send(TALLOC_CTX *mem_ctx,

struct tevent_context *ev,

struct sdap_options *opts,

struct sdap_handle *sh,

struct sysdb_attrs *group,

int timeout);

sdap_get_ad_match_rule_members_recv(struct tevent_req *req,

TALLOC_CTX *mem_ctx,

size_t *num_users,

struct sysdb_attrs ***users);

struct tevent_req *

sdap_get_ad_match_rule_initgroups_send(TALLOC_CTX *mem_ctx,

struct tevent_context *ev,

struct sdap_options *opts,

struct sysdb_ctx *sysdb,

struct sss_domain_info *domain,

struct sdap_handle *sh,

const char *name,

const char *orig_dn,

int timeout);

sdap_get_ad_match_rule_initgroups_recv(struct tevent_req *req);

struct tevent_req *

sdap_ad_tokengroups_initgroups_send(TALLOC_CTX *mem_ctx,

struct tevent_context *ev,

struct sdap_id_ctx *id_ctx,

struct sdap_id_conn_ctx *conn,

struct sdap_options *opts,

struct sysdb_ctx *sysdb,

struct sss_domain_info *domain,

struct sdap_handle *sh,

const char *name,

const char *orig_dn,

int timeout,

bool use_id_mapping);

sdap_ad_tokengroups_initgroups_recv(struct tevent_req *req);

sdap_handle_id_collision_for_incomplete_groups(struct data_provider *dp,

struct sss_domain_info *domain,

const char *name,

gid_t gid,

const char *original_dn,

const char *sid_str,

const char *uuid,

bool posix,

time_t now);

#endif /* _SDAP_ASYNC_H_ */