#ifndef _SDAP_H_

#define _SDAP_H_

#include "providers/dp_backend.h"

#include <ldap.h>

#include "util/sss_ldap.h"

struct sdap_msg {

struct sdap_msg *next;

LDAPMessage *msg;

};

struct sdap_op;

typedef void (sdap_op_callback_t)(struct sdap_op *op,

struct sdap_msg *, int, void *);

struct sdap_handle;

struct sdap_op {

struct sdap_op *prev, *next;

struct sdap_handle *sh;

int msgid;

bool done;

sdap_op_callback_t *callback;

void *data;

struct tevent_context *ev;

struct sdap_msg *list;

struct sdap_msg *last;

};

struct fd_event_item {

struct fd_event_item *prev;

struct fd_event_item *next;

int fd;

struct tevent_fd *fde;

};

struct ldap_cb_data {

struct sdap_handle *sh;

struct tevent_context *ev;

struct fd_event_item *fd_list;

};

struct sdap_handle {

LDAP *ldap;

bool connected;

struct sdap_fd_events *sdap_fd_events;

struct sdap_op *ops;

/* during release we need to lock access to the handler

bool destructor_lock;

/* mark when it is safe to finally release the handler memory */

bool release_memory;

};

struct sdap_service {

char *name;

char *uri;

};

struct sdap_ppolicy_data {

int grace;

int expire;

};

#define SYSDB_SHADOWPW_LASTCHANGE "shadowLastChange"

#define SYSDB_SHADOWPW_MIN "shadowMin"

#define SYSDB_SHADOWPW_MAX "shadowMax"

#define SYSDB_SHADOWPW_WARNING "shadowWarning"

#define SYSDB_SHADOWPW_INACTIVE "shadowInactive"

#define SYSDB_SHADOWPW_EXPIRE "shadowExpire"

#define SYSDB_SHADOWPW_FLAG "shadowFlag"

#define SYSDB_KRBPW_LASTCHANGE "krbLastPwdChange"

#define SYSDB_KRBPW_EXPIRATION "krbPasswordExpiration"

#define SYSDB_PWD_ATTRIBUTE "pwdAttribute"

enum sdap_result {

SDAP_SUCCESS,

SDAP_NOT_FOUND,

SDAP_UNAVAIL,

SDAP_RETRY,

SDAP_ERROR,

SDAP_AUTH_SUCCESS,

SDAP_AUTH_FAILED,

SDAP_AUTH_PW_EXPIRED,

SDAP_ACCT_EXPIRED

};

enum sdap_basic_opt {

SDAP_URI = 0,

SDAP_SEARCH_BASE,

SDAP_DEFAULT_BIND_DN,

SDAP_DEFAULT_AUTHTOK_TYPE,

SDAP_DEFAULT_AUTHTOK,

SDAP_SEARCH_TIMEOUT,

SDAP_NETWORK_TIMEOUT,

SDAP_OPT_TIMEOUT,

SDAP_TLS_REQCERT,

SDAP_USER_SEARCH_BASE,

SDAP_USER_SEARCH_SCOPE,

SDAP_USER_SEARCH_FILTER,

SDAP_GROUP_SEARCH_BASE,

SDAP_GROUP_SEARCH_SCOPE,

SDAP_GROUP_SEARCH_FILTER,

SDAP_SCHEMA,

SDAP_OFFLINE_TIMEOUT,

SDAP_FORCE_UPPER_CASE_REALM,

SDAP_ENUM_REFRESH_TIMEOUT,

SDAP_CACHE_PURGE_TIMEOUT,

SDAP_ENTRY_CACHE_TIMEOUT,

SDAP_TLS_CACERT,

SDAP_TLS_CACERTDIR,

SDAP_ID_TLS,

SDAP_SASL_MECH,

SDAP_SASL_AUTHID,

SDAP_KRB5_KEYTAB,

SDAP_KRB5_KINIT,

SDAP_KRB5_REALM,

SDAP_PWD_POLICY,

SDAP_REFERRALS,

SDAP_ACCOUNT_CACHE_EXPIRATION,

SDAP_OPTS_BASIC /* opts counter */

};

enum sdap_gen_attrs {

SDAP_AT_ENTRY_USN = 0,

SDAP_AT_LAST_USN,

SDAP_AT_GENERAL /* attrs counter */

};

enum sdap_user_attrs {

SDAP_OC_USER = 0,

SDAP_AT_USER_NAME,

SDAP_AT_USER_PWD,

SDAP_AT_USER_UID,

SDAP_AT_USER_GID,

SDAP_AT_USER_GECOS,

SDAP_AT_USER_HOME,

SDAP_AT_USER_SHELL,

SDAP_AT_USER_PRINC,

SDAP_AT_USER_FULLNAME,

SDAP_AT_USER_MEMBEROF,

SDAP_AT_USER_UUID,

SDAP_AT_USER_MODSTAMP,

SDAP_AT_SP_LSTCHG,

SDAP_AT_SP_MIN,

SDAP_AT_SP_MAX,

SDAP_AT_SP_WARN,

SDAP_AT_SP_INACT,

SDAP_AT_SP_EXPIRE,

SDAP_AT_SP_FLAG,

SDAP_AT_KP_LASTCHANGE,

SDAP_AT_KP_EXPIRATION,

SDAP_AT_PWD_ATTRIBUTE,

SDAP_OPTS_USER /* attrs counter */

};

#define SDAP_FIRST_EXTRA_USER_AT SDAP_AT_SP_LSTCHG

enum sdap_group_attrs {

SDAP_OC_GROUP = 0,

SDAP_AT_GROUP_NAME,

SDAP_AT_GROUP_PWD,

SDAP_AT_GROUP_GID,

SDAP_AT_GROUP_MEMBER,

SDAP_AT_GROUP_UUID,

SDAP_AT_GROUP_MODSTAMP,

SDAP_OPTS_GROUP /* attrs counter */

};

struct sdap_attr_map {

const char *opt_name;

const char *def_name;

const char *sys_name;

char *name;

};

struct sdap_options {

struct dp_option *basic;

struct sdap_attr_map *gen_map;

struct sdap_attr_map *user_map;

struct sdap_attr_map *group_map;

/* supported schema types */

enum schema_type {

SDAP_SCHEMA_RFC2307 = 1, /* memberUid = uid */

SDAP_SCHEMA_RFC2307BIS = 2, /* member = dn */

SDAP_SCHEMA_IPA_V1 = 3, /* member/memberof */

SDAP_SCHEMA_AD = 4 /* AD's member/memberof */

} schema_type;

struct ldb_dn *users_base;

struct ldb_dn *groups_base;

};

int sdap_get_map(TALLOC_CTX *memctx,

struct confdb_ctx *cdb,

const char *conf_path,

struct sdap_attr_map *def_map,

int num_entries,

struct sdap_attr_map **_map);

int sdap_parse_entry(TALLOC_CTX *memctx,

struct sdap_handle *sh, struct sdap_msg *sm,

struct sdap_attr_map *map, int attrs_num,

struct sysdb_attrs **_attrs, char **_dn);

int sdap_parse_user(TALLOC_CTX *memctx, struct sdap_options *opts,

struct sdap_handle *sh, struct sdap_msg *sm,

struct sysdb_attrs **_attrs, char **_dn);

int sdap_parse_group(TALLOC_CTX *memctx, struct sdap_options *opts,

struct sdap_handle *sh, struct sdap_msg *sm,

struct sysdb_attrs **_attrs, char **_dn);

int sdap_get_msg_dn(TALLOC_CTX *memctx, struct sdap_handle *sh,

struct sdap_msg *sm, char **_dn);

errno_t setup_tls_config(struct dp_option *basic_opts);

bool sdap_rootdse_sasl_mech_is_supported(struct sysdb_attrs *rootdse,

const char *sasl_mech);

int build_attrs_from_map(TALLOC_CTX *memctx,

struct sdap_attr_map *map,

size_t size, const char ***_attrs);

#endif /* _SDAP_H_ */