#ifndef _LDAP_COMMON_H_

#define _LDAP_COMMON_H_

#include "providers/dp_backend.h"

#include "providers/ldap/sdap.h"

#include "providers/ldap/sdap_id_op.h"

#include "providers/fail_over.h"

#include "providers/krb5/krb5_common.h"

#include "lib/idmap/sss_idmap.h"

#define PWD_POL_OPT_NONE "none"

#define PWD_POL_OPT_SHADOW "shadow"

#define PWD_POL_OPT_MIT "mit_kerberos"

#define SSS_LDAP_SRV_NAME "ldap"

#define LDAP_STANDARD_URI "ldap://"

#define LDAP_SSL_URI "ldaps://"

#define LDAP_LDAPI_URI "ldapi://"

extern int ldap_child_debug_fd;

struct sdap_id_ctx;

struct sdap_id_conn_ctx {

struct sdap_id_ctx *id_ctx;

struct sdap_service *service;

/* LDAP connection cache */

struct sdap_id_conn_cache *conn_cache;

/* dlinklist pointers */

struct sdap_id_conn_ctx *prev, *next;

};

struct sdap_id_ctx {

struct be_ctx *be;

struct sdap_options *opts;

/* If using GSSAPI */

struct krb5_service *krb5_service;

/* connection to a server */

struct sdap_id_conn_ctx *conn;

struct sdap_server_opts *srv_opts;

};

struct sdap_auth_ctx {

struct be_ctx *be;

struct sdap_options *opts;

struct sdap_service *service;

struct sdap_service *chpass_service;

};

int sssm_ldap_id_init(struct be_ctx *bectx,

struct bet_ops **ops,

void **pvt_data);

void sdap_check_online(struct be_req *breq);

void sdap_do_online_check(struct be_req *be_req, struct sdap_id_ctx *ctx);

struct tevent_req* sdap_reinit_cleanup_send(TALLOC_CTX *mem_ctx,

struct be_ctx *be_ctx,

struct sdap_id_ctx *id_ctx);

errno_t sdap_reinit_cleanup_recv(struct tevent_req *req);

void sdap_account_info_handler(struct be_req *breq);

void sdap_handle_account_info(struct be_req *breq, struct sdap_id_ctx *ctx,

struct sdap_id_conn_ctx *conn);

int ldap_id_setup_tasks(struct sdap_id_ctx *ctx);

int sdap_id_setup_tasks(struct sdap_id_ctx *ctx,

struct sdap_id_conn_ctx *conn,

struct sdap_domain *sdom);

struct tevent_req *

sdap_handle_acct_req_send(TALLOC_CTX *mem_ctx,

struct be_req *breq,

struct be_acct_req *ar,

struct sdap_id_ctx *id_ctx,

struct sdap_domain *sdom,

struct sdap_id_conn_ctx *conn,

bool noexist_delete);

sdap_handle_acct_req_recv(struct tevent_req *req,

int *_dp_error, const char **_err,

int *sdap_ret);

void sdap_pam_auth_handler(struct be_req *breq);

void sdap_pam_chpass_handler(struct be_req *breq);

void sdap_pam_access_handler(struct be_req *breq);

void sdap_autofs_handler(struct be_req *breq);

void sdap_handler_done(struct be_req *req, int dp_err,

int error, const char *errstr);

int sdap_service_init(TALLOC_CTX *memctx, struct be_ctx *ctx,

const char *service_name, const char *dns_service_name,

const char *urls, const char *backup_urls,

struct sdap_service **_service);

int sdap_gssapi_init(TALLOC_CTX *mem_ctx,

struct dp_option *opts,

struct be_ctx *bectx,

struct sdap_service *sdap_service,

struct krb5_service **krb5_service);

errno_t sdap_install_offline_callback(TALLOC_CTX *mem_ctx,

struct be_ctx *be_ctx,

const char *realm,

const char *service_name);

errno_t sdap_install_sigterm_handler(TALLOC_CTX *mem_ctx,

struct tevent_context *ev,

const char *realm);

void sdap_remove_kdcinfo_files_callback(void *pvt);

int ldap_get_options(TALLOC_CTX *memctx,

struct sss_domain_info *dom,

struct confdb_ctx *cdb,

const char *conf_path,

struct sdap_options **_opts);

int ldap_get_sudo_options(TALLOC_CTX *memctx,

struct confdb_ctx *cdb,

const char *conf_path,

struct sdap_options *opts,

bool *use_host_filter,

bool *include_regexp,

bool *include_netgroups);

int ldap_get_autofs_options(TALLOC_CTX *memctx,

struct confdb_ctx *cdb,

const char *conf_path,

struct sdap_options *opts);

errno_t ldap_setup_enumeration(struct sdap_id_ctx *ctx,

struct sdap_id_conn_ctx *conn,

struct sdap_domain *sdom);

errno_t ldap_id_cleanup(struct sdap_options *opts,

struct sss_domain_info *dom);

int ldap_id_cleanup_create_timer(struct sdap_id_ctx *ctx,

struct sdap_domain *sdom,

struct timeval tv);

void sdap_mark_offline(struct sdap_id_ctx *ctx);

struct tevent_req *groups_get_send(TALLOC_CTX *memctx,

struct tevent_context *ev,

struct sdap_id_ctx *ctx,

struct sdap_domain *sdom,

struct sdap_id_conn_ctx *conn,

const char *name,

int filter_type,

int attrs_type,

bool noexist_delete);

int groups_get_recv(struct tevent_req *req, int *dp_error_out, int *sdap_ret);

struct tevent_req *ldap_netgroup_get_send(TALLOC_CTX *memctx,

struct tevent_context *ev,

struct sdap_id_ctx *ctx,

struct sdap_domain *sdom,

struct sdap_id_conn_ctx *conn,

const char *name,

bool noexist_delete);

int ldap_netgroup_get_recv(struct tevent_req *req, int *dp_error_out, int *sdap_ret);

struct tevent_req *

services_get_send(TALLOC_CTX *mem_ctx,

struct tevent_context *ev,

struct sdap_id_ctx *id_ctx,

struct sdap_domain *sdom,

struct sdap_id_conn_ctx *conn,

const char *name,

const char *protocol,

int filter_type,

bool noexist_delete);

services_get_recv(struct tevent_req *req, int *dp_error_out, int *sdap_ret);

int sdap_setup_child(void);

errno_t string_to_shadowpw_days(const char *s, long *d);

errno_t get_sysdb_attr_name(TALLOC_CTX *mem_ctx,

struct sdap_attr_map *map,

size_t map_size,

const char *ldap_name,

char **sysdb_name);

errno_t list_missing_attrs(TALLOC_CTX *mem_ctx,

struct sdap_attr_map *map,

size_t map_size,

struct sysdb_attrs *recvd_attrs,

char ***missing_attrs);

bool sdap_is_secure_uri(const char *uri);

char *sdap_get_id_specific_filter(TALLOC_CTX *mem_ctx,

const char *base_filter,

const char *extra_filter);

errno_t msgs2attrs_array(TALLOC_CTX *mem_ctx, size_t count,

struct ldb_message **msgs,

struct sysdb_attrs ***attrs);

errno_t sdap_domain_add(struct sdap_options *opts,

struct sss_domain_info *dom,

struct sdap_domain **_sdom);

sdap_domain_subdom_add(struct sdap_id_ctx *sdap_id_ctx,

struct sdap_domain *sdom_list,

struct sss_domain_info *parent);

sdap_domain_remove(struct sdap_options *opts,

struct sss_domain_info *dom);

struct sdap_domain *sdap_domain_get(struct sdap_options *opts,

struct sss_domain_info *dom);

sdap_create_search_base(TALLOC_CTX *mem_ctx,

const char *unparsed_base,

int scope,

const char *filter,

struct sdap_search_base **_base);

errno_t sdap_parse_search_base(TALLOC_CTX *mem_ctx,

struct dp_option *opts, int class,

struct sdap_search_base ***_search_bases);

errno_t common_parse_search_base(TALLOC_CTX *mem_ctx,

const char *unparsed_base,

const char *class_name,

const char *old_filter,

struct sdap_search_base ***_search_bases);

sdap_attrs_get_sid_str(TALLOC_CTX *mem_ctx,

struct sdap_idmap_ctx *idmap_ctx,

struct sysdb_attrs *sysdb_attrs,

const char *sid_attr,

char **_sid_str);

sdap_set_sasl_options(struct sdap_options *id_opts,

char *default_primary,

char *default_realm,

const char *keytab_path);

struct sdap_id_conn_ctx *

sdap_id_ctx_conn_add(struct sdap_id_ctx *id_ctx,

struct sdap_service *sdap_service);

struct sdap_id_ctx *

sdap_id_ctx_new(TALLOC_CTX *mem_ctx, struct be_ctx *bectx,

struct sdap_service *sdap_service);

struct tevent_req *sdap_refresh_netgroups_send(TALLOC_CTX *mem_ctx,

struct tevent_context *ev,

struct be_ctx *be_ctx,

char **names,

void *pvt);

errno_t sdap_refresh_netgroups_recv(struct tevent_req *req);

#endif /* _LDAP_COMMON_H_ */