593 lines
18 KiB
C
593 lines
18 KiB
C
|
/*
|
||
|
|
* Copyright (c) 1990 Regents of the University of Michigan.
|
||
|
|
* All rights reserved.
|
||
|
|
*
|
||
|
|
* Redistribution and use in source and binary forms are permitted
|
||
|
|
* provided that this notice is preserved and that due credit is given
|
||
|
|
* to the University of Michigan at Ann Arbor. The name of the University
|
||
|
|
* may not be used to endorse or promote products derived from this
|
||
|
|
* software without specific prior written permission. This software
|
||
|
|
* is provided ``as is'' without express or implied warranty.
|
||
|
|
*/
|
||
|
|
|
||
|
|
#ifndef _LDAP_H
|
||
|
|
#define _LDAP_H
|
||
|
|
|
||
|
|
#ifdef __cplusplus
|
||
|
|
extern "C" {
|
||
|
|
#endif
|
||
|
|
|
||
|
|
|
||
|
|
#ifdef WINSOCK
|
||
|
|
#include "msdos.h"
|
||
|
|
#include <winsock.h>
|
||
|
|
#endif
|
||
|
|
|
||
|
|
#if !defined( NEEDPROTOS ) && defined(__STDC__)
|
||
|
|
#define NEEDPROTOS 1
|
||
|
|
#endif
|
||
|
|
|
||
|
|
#define LDAP_PORT 389
|
||
|
|
#define LDAP_VERSION1 1
|
||
|
|
#define LDAP_VERSION2 2
|
||
|
|
#define LDAP_VERSION LDAP_VERSION2
|
||
|
|
|
||
|
|
#define COMPAT20
|
||
|
|
#define COMPAT30
|
||
|
|
#if defined(COMPAT20) || defined(COMPAT30)
|
||
|
|
#define COMPAT
|
||
|
|
#endif
|
||
|
|
|
||
|
|
#define LDAP_MAX_ATTR_LEN 100
|
||
|
|
|
||
|
|
/* debugging stuff */
|
||
|
|
#ifdef LDAP_DEBUG
|
||
|
|
extern int ldap_debug;
|
||
|
|
#ifdef LDAP_SYSLOG
|
||
|
|
extern int ldap_syslog;
|
||
|
|
extern int ldap_syslog_level;
|
||
|
|
#endif
|
||
|
|
#define LDAP_DEBUG_TRACE 0x001
|
||
|
|
#define LDAP_DEBUG_PACKETS 0x002
|
||
|
|
#define LDAP_DEBUG_ARGS 0x004
|
||
|
|
#define LDAP_DEBUG_CONNS 0x008
|
||
|
|
#define LDAP_DEBUG_BER 0x010
|
||
|
|
#define LDAP_DEBUG_FILTER 0x020
|
||
|
|
#define LDAP_DEBUG_CONFIG 0x040
|
||
|
|
#define LDAP_DEBUG_ACL 0x080
|
||
|
|
#define LDAP_DEBUG_STATS 0x100
|
||
|
|
#define LDAP_DEBUG_STATS2 0x200
|
||
|
|
#define LDAP_DEBUG_SHELL 0x400
|
||
|
|
#define LDAP_DEBUG_PARSE 0x800
|
||
|
|
#define LDAP_DEBUG_ANY 0xffff
|
||
|
|
|
||
|
|
#ifdef LDAP_SYSLOG
|
||
|
|
#define Debug( level, fmt, arg1, arg2, arg3 ) \
|
||
|
|
{ \
|
||
|
|
if ( ldap_debug & level ) \
|
||
|
|
fprintf( stderr, fmt, arg1, arg2, arg3 ); \
|
||
|
|
if ( ldap_syslog & level ) \
|
||
|
|
syslog( ldap_syslog_level, fmt, arg1, arg2, arg3 ); \
|
||
|
|
}
|
||
|
|
#else /* LDAP_SYSLOG */
|
||
|
|
#ifndef WINSOCK
|
||
|
|
#define Debug( level, fmt, arg1, arg2, arg3 ) \
|
||
|
|
if ( ldap_debug & level ) \
|
||
|
|
fprintf( stderr, fmt, arg1, arg2, arg3 );
|
||
|
|
#else /* !WINSOCK */
|
||
|
|
extern void Debug( int level, char* fmt, ... );
|
||
|
|
#endif /* !WINSOCK */
|
||
|
|
#endif /* LDAP_SYSLOG */
|
||
|
|
#else /* LDAP_DEBUG */
|
||
|
|
#define Debug( level, fmt, arg1, arg2, arg3 )
|
||
|
|
#endif /* LDAP_DEBUG */
|
||
|
|
|
||
|
|
/*
|
||
|
|
* specific LDAP instantiations of BER types we know about
|
||
|
|
*/
|
||
|
|
|
||
|
|
/* general stuff */
|
||
|
|
#define LDAP_TAG_MESSAGE 0x30L /* tag is 16 + constructed bit */
|
||
|
|
#define OLD_LDAP_TAG_MESSAGE 0x10L /* forgot the constructed bit */
|
||
|
|
#define LDAP_TAG_MSGID 0x02L
|
||
|
|
|
||
|
|
/* possible operations a client can invoke */
|
||
|
|
#define LDAP_REQ_BIND 0x60L /* application + constructed */
|
||
|
|
#define LDAP_REQ_UNBIND 0x42L /* application + primitive */
|
||
|
|
#define LDAP_REQ_SEARCH 0x63L /* application + constructed */
|
||
|
|
#define LDAP_REQ_MODIFY 0x66L /* application + constructed */
|
||
|
|
#define LDAP_REQ_ADD 0x68L /* application + constructed */
|
||
|
|
#define LDAP_REQ_DELETE 0x4aL /* application + primitive */
|
||
|
|
#define LDAP_REQ_MODRDN 0x6cL /* application + constructed */
|
||
|
|
#define LDAP_REQ_COMPARE 0x6eL /* application + constructed */
|
||
|
|
#define LDAP_REQ_ABANDON 0x50L /* application + primitive */
|
||
|
|
|
||
|
|
/* version 3.0 compatibility stuff */
|
||
|
|
#define LDAP_REQ_UNBIND_30 0x62L
|
||
|
|
#define LDAP_REQ_DELETE_30 0x6aL
|
||
|
|
#define LDAP_REQ_ABANDON_30 0x70L
|
||
|
|
|
||
|
|
/*
|
||
|
|
* old broken stuff for backwards compatibility - forgot application tag
|
||
|
|
* and constructed/primitive bit
|
||
|
|
*/
|
||
|
|
#define OLD_LDAP_REQ_BIND 0x00L
|
||
|
|
#define OLD_LDAP_REQ_UNBIND 0x02L
|
||
|
|
#define OLD_LDAP_REQ_SEARCH 0x03L
|
||
|
|
#define OLD_LDAP_REQ_MODIFY 0x06L
|
||
|
|
#define OLD_LDAP_REQ_ADD 0x08L
|
||
|
|
#define OLD_LDAP_REQ_DELETE 0x0aL
|
||
|
|
#define OLD_LDAP_REQ_MODRDN 0x0cL
|
||
|
|
#define OLD_LDAP_REQ_COMPARE 0x0eL
|
||
|
|
#define OLD_LDAP_REQ_ABANDON 0x10L
|
||
|
|
|
||
|
|
/* possible result types a server can return */
|
||
|
|
#define LDAP_RES_BIND 0x61L /* application + constructed */
|
||
|
|
#define LDAP_RES_SEARCH_ENTRY 0x64L /* application + constructed */
|
||
|
|
#define LDAP_RES_SEARCH_RESULT 0x65L /* application + constructed */
|
||
|
|
#define LDAP_RES_MODIFY 0x67L /* application + constructed */
|
||
|
|
#define LDAP_RES_ADD 0x69L /* application + constructed */
|
||
|
|
#define LDAP_RES_DELETE 0x6bL /* application + constructed */
|
||
|
|
#define LDAP_RES_MODRDN 0x6dL /* application + constructed */
|
||
|
|
#define LDAP_RES_COMPARE 0x6fL /* application + constructed */
|
||
|
|
#define LDAP_RES_ANY (-1L)
|
||
|
|
|
||
|
|
/* old broken stuff for backwards compatibility */
|
||
|
|
#define OLD_LDAP_RES_BIND 0x01L
|
||
|
|
#define OLD_LDAP_RES_SEARCH_ENTRY 0x04L
|
||
|
|
#define OLD_LDAP_RES_SEARCH_RESULT 0x05L
|
||
|
|
#define OLD_LDAP_RES_MODIFY 0x07L
|
||
|
|
#define OLD_LDAP_RES_ADD 0x09L
|
||
|
|
#define OLD_LDAP_RES_DELETE 0x0bL
|
||
|
|
#define OLD_LDAP_RES_MODRDN 0x0dL
|
||
|
|
#define OLD_LDAP_RES_COMPARE 0x0fL
|
||
|
|
|
||
|
|
/* authentication methods available */
|
||
|
|
#define LDAP_AUTH_NONE 0x00L /* no authentication */
|
||
|
|
#define LDAP_AUTH_SIMPLE 0x80L /* context specific + primitive */
|
||
|
|
#define LDAP_AUTH_KRBV4 0xffL /* means do both of the following */
|
||
|
|
#define LDAP_AUTH_KRBV41 0x81L /* context specific + primitive */
|
||
|
|
#define LDAP_AUTH_KRBV42 0x82L /* context specific + primitive */
|
||
|
|
|
||
|
|
/* 3.0 compatibility auth methods */
|
||
|
|
#define LDAP_AUTH_SIMPLE_30 0xa0L /* context specific + constructed */
|
||
|
|
#define LDAP_AUTH_KRBV41_30 0xa1L /* context specific + constructed */
|
||
|
|
#define LDAP_AUTH_KRBV42_30 0xa2L /* context specific + constructed */
|
||
|
|
|
||
|
|
/* old broken stuff */
|
||
|
|
#define OLD_LDAP_AUTH_SIMPLE 0x00L
|
||
|
|
#define OLD_LDAP_AUTH_KRBV4 0x01L
|
||
|
|
#define OLD_LDAP_AUTH_KRBV42 0x02L
|
||
|
|
|
||
|
|
/* filter types */
|
||
|
|
#define LDAP_FILTER_AND 0xa0L /* context specific + constructed */
|
||
|
|
#define LDAP_FILTER_OR 0xa1L /* context specific + constructed */
|
||
|
|
#define LDAP_FILTER_NOT 0xa2L /* context specific + constructed */
|
||
|
|
#define LDAP_FILTER_EQUALITY 0xa3L /* context specific + constructed */
|
||
|
|
#define LDAP_FILTER_SUBSTRINGS 0xa4L /* context specific + constructed */
|
||
|
|
#define LDAP_FILTER_GE 0xa5L /* context specific + constructed */
|
||
|
|
#define LDAP_FILTER_LE 0xa6L /* context specific + constructed */
|
||
|
|
#define LDAP_FILTER_PRESENT 0x87L /* context specific + primitive */
|
||
|
|
#define LDAP_FILTER_APPROX 0xa8L /* context specific + constructed */
|
||
|
|
|
||
|
|
/* 3.0 compatibility filter types */
|
||
|
|
#define LDAP_FILTER_PRESENT_30 0xa7L /* context specific + constructed */
|
||
|
|
|
||
|
|
/* old broken stuff */
|
||
|
|
#define OLD_LDAP_FILTER_AND 0x00L
|
||
|
|
#define OLD_LDAP_FILTER_OR 0x01L
|
||
|
|
#define OLD_LDAP_FILTER_NOT 0x02L
|
||
|
|
#define OLD_LDAP_FILTER_EQUALITY 0x03L
|
||
|
|
#define OLD_LDAP_FILTER_SUBSTRINGS 0x04L
|
||
|
|
#define OLD_LDAP_FILTER_GE 0x05L
|
||
|
|
#define OLD_LDAP_FILTER_LE 0x06L
|
||
|
|
#define OLD_LDAP_FILTER_PRESENT 0x07L
|
||
|
|
#define OLD_LDAP_FILTER_APPROX 0x08L
|
||
|
|
|
||
|
|
/* substring filter component types */
|
||
|
|
#define LDAP_SUBSTRING_INITIAL 0x80L /* context specific */
|
||
|
|
#define LDAP_SUBSTRING_ANY 0x81L /* context specific */
|
||
|
|
#define LDAP_SUBSTRING_FINAL 0x82L /* context specific */
|
||
|
|
|
||
|
|
/* 3.0 compatibility substring filter component types */
|
||
|
|
#define LDAP_SUBSTRING_INITIAL_30 0xa0L /* context specific */
|
||
|
|
#define LDAP_SUBSTRING_ANY_30 0xa1L /* context specific */
|
||
|
|
#define LDAP_SUBSTRING_FINAL_30 0xa2L /* context specific */
|
||
|
|
|
||
|
|
/* old broken stuff */
|
||
|
|
#define OLD_LDAP_SUBSTRING_INITIAL 0x00L
|
||
|
|
#define OLD_LDAP_SUBSTRING_ANY 0x01L
|
||
|
|
#define OLD_LDAP_SUBSTRING_FINAL 0x02L
|
||
|
|
|
||
|
|
/* search scopes */
|
||
|
|
#define LDAP_SCOPE_BASE 0x00
|
||
|
|
#define LDAP_SCOPE_ONELEVEL 0x01
|
||
|
|
#define LDAP_SCOPE_SUBTREE 0x02
|
||
|
|
|
||
|
|
/* for modifications */
|
||
|
|
typedef struct ldapmod {
|
||
|
|
int mod_op;
|
||
|
|
#define LDAP_MOD_ADD 0x00
|
||
|
|
#define LDAP_MOD_DELETE 0x01
|
||
|
|
#define LDAP_MOD_REPLACE 0x02
|
||
|
|
#define LDAP_MOD_BVALUES 0x80
|
||
|
|
char *mod_type;
|
||
|
|
union {
|
||
|
|
char **modv_strvals;
|
||
|
|
struct berval **modv_bvals;
|
||
|
|
} mod_vals;
|
||
|
|
#define mod_values mod_vals.modv_strvals
|
||
|
|
#define mod_bvalues mod_vals.modv_bvals
|
||
|
|
struct ldapmod *mod_next;
|
||
|
|
} LDAPMod;
|
||
|
|
|
||
|
|
/*
|
||
|
|
* possible error codes we can return
|
||
|
|
*/
|
||
|
|
|
||
|
|
#define LDAP_SUCCESS 0x00
|
||
|
|
#define LDAP_OPERATIONS_ERROR 0x01
|
||
|
|
#define LDAP_PROTOCOL_ERROR 0x02
|
||
|
|
#define LDAP_TIMELIMIT_EXCEEDED 0x03
|
||
|
|
#define LDAP_SIZELIMIT_EXCEEDED 0x04
|
||
|
|
#define LDAP_COMPARE_FALSE 0x05
|
||
|
|
#define LDAP_COMPARE_TRUE 0x06
|
||
|
|
#define LDAP_STRONG_AUTH_NOT_SUPPORTED 0x07
|
||
|
|
#define LDAP_STRONG_AUTH_REQUIRED 0x08
|
||
|
|
#define LDAP_PARTIAL_RESULTS 0x09
|
||
|
|
|
||
|
|
#define LDAP_NO_SUCH_ATTRIBUTE 0x10
|
||
|
|
#define LDAP_UNDEFINED_TYPE 0x11
|
||
|
|
#define LDAP_INAPPROPRIATE_MATCHING 0x12
|
||
|
|
#define LDAP_CONSTRAINT_VIOLATION 0x13
|
||
|
|
#define LDAP_TYPE_OR_VALUE_EXISTS 0x14
|
||
|
|
#define LDAP_INVALID_SYNTAX 0x15
|
||
|
|
|
||
|
|
#define LDAP_NO_SUCH_OBJECT 0x20
|
||
|
|
#define LDAP_ALIAS_PROBLEM 0x21
|
||
|
|
#define LDAP_INVALID_DN_SYNTAX 0x22
|
||
|
|
#define LDAP_IS_LEAF 0x23
|
||
|
|
#define LDAP_ALIAS_DEREF_PROBLEM 0x24
|
||
|
|
|
||
|
|
#define NAME_ERROR(n) ((n & 0xf0) == 0x20)
|
||
|
|
|
||
|
|
#define LDAP_INAPPROPRIATE_AUTH 0x30
|
||
|
|
#define LDAP_INVALID_CREDENTIALS 0x31
|
||
|
|
#define LDAP_INSUFFICIENT_ACCESS 0x32
|
||
|
|
#define LDAP_BUSY 0x33
|
||
|
|
#define LDAP_UNAVAILABLE 0x34
|
||
|
|
#define LDAP_UNWILLING_TO_PERFORM 0x35
|
||
|
|
#define LDAP_LOOP_DETECT 0x36
|
||
|
|
|
||
|
|
#define LDAP_NAMING_VIOLATION 0x40
|
||
|
|
#define LDAP_OBJECT_CLASS_VIOLATION 0x41
|
||
|
|
#define LDAP_NOT_ALLOWED_ON_NONLEAF 0x42
|
||
|
|
#define LDAP_NOT_ALLOWED_ON_RDN 0x43
|
||
|
|
#define LDAP_ALREADY_EXISTS 0x44
|
||
|
|
#define LDAP_NO_OBJECT_CLASS_MODS 0x45
|
||
|
|
#define LDAP_RESULTS_TOO_LARGE 0x46
|
||
|
|
|
||
|
|
#define LDAP_OTHER 0x50
|
||
|
|
#define LDAP_SERVER_DOWN 0x51
|
||
|
|
#define LDAP_LOCAL_ERROR 0x52
|
||
|
|
#define LDAP_ENCODING_ERROR 0x53
|
||
|
|
#define LDAP_DECODING_ERROR 0x54
|
||
|
|
#define LDAP_TIMEOUT 0x55
|
||
|
|
#define LDAP_AUTH_UNKNOWN 0x56
|
||
|
|
#define LDAP_FILTER_ERROR 0x57
|
||
|
|
#define LDAP_USER_CANCELLED 0x58
|
||
|
|
#define LDAP_PARAM_ERROR 0x59
|
||
|
|
#define LDAP_NO_MEMORY 0x5a
|
||
|
|
|
||
|
|
|
||
|
|
/* default limit on nesting of referrals */
|
||
|
|
#define LDAP_DEFAULT_REFHOPLIMIT 5
|
||
|
|
|
||
|
|
/*
|
||
|
|
* This structure represents both ldap messages and ldap responses.
|
||
|
|
* These are really the same, except in the case of search responses,
|
||
|
|
* where a response has multiple messages.
|
||
|
|
*/
|
||
|
|
|
||
|
|
typedef struct ldapmsg {
|
||
|
|
int lm_msgid; /* the message id */
|
||
|
|
int lm_msgtype; /* the message type */
|
||
|
|
BerElement *lm_ber; /* the ber encoded message contents */
|
||
|
|
struct ldapmsg *lm_chain; /* for search - next msg in the resp */
|
||
|
|
struct ldapmsg *lm_next; /* next response */
|
||
|
|
unsigned long lm_time; /* used to maintain cache */
|
||
|
|
} LDAPMessage;
|
||
|
|
#define NULLMSG ((LDAPMessage *) NULL)
|
||
|
|
|
||
|
|
|
||
|
|
#ifdef LDAP_REFERRALS
|
||
|
|
/*
|
||
|
|
* structure for tracking LDAP server host, ports, DNs, etc.
|
||
|
|
*/
|
||
|
|
typedef struct ldap_server {
|
||
|
|
char *lsrv_host;
|
||
|
|
char *lsrv_dn; /* if NULL, use default */
|
||
|
|
int lsrv_port;
|
||
|
|
struct ldap_server *lsrv_next;
|
||
|
|
} LDAPServer;
|
||
|
|
|
||
|
|
|
||
|
|
/*
|
||
|
|
* structure for representing an LDAP server connection
|
||
|
|
*/
|
||
|
|
typedef struct ldap_conn {
|
||
|
|
Sockbuf *lconn_sb;
|
||
|
|
int lconn_refcnt;
|
||
|
|
unsigned long lconn_lastused; /* time */
|
||
|
|
int lconn_status;
|
||
|
|
#define LDAP_CONNST_NEEDSOCKET 1
|
||
|
|
#define LDAP_CONNST_CONNECTING 2
|
||
|
|
#define LDAP_CONNST_CONNECTED 3
|
||
|
|
LDAPServer *lconn_server;
|
||
|
|
char *lconn_krbinstance;
|
||
|
|
struct ldap_conn *lconn_next;
|
||
|
|
} LDAPConn;
|
||
|
|
|
||
|
|
|
||
|
|
/*
|
||
|
|
* structure used to track outstanding requests
|
||
|
|
*/
|
||
|
|
typedef struct ldapreq {
|
||
|
|
int lr_msgid; /* the message id */
|
||
|
|
int lr_status; /* status of request */
|
||
|
|
#define LDAP_REQST_INPROGRESS 1
|
||
|
|
#define LDAP_REQST_CHASINGREFS 2
|
||
|
|
#define LDAP_REQST_NOTCONNECTED 3
|
||
|
|
#define LDAP_REQST_WRITING 4
|
||
|
|
int lr_outrefcnt; /* count of outstanding referrals */
|
||
|
|
int lr_origid; /* original request's message id */
|
||
|
|
int lr_parentcnt; /* count of parent requests */
|
||
|
|
int lr_res_msgtype; /* result message type */
|
||
|
|
int lr_res_errno; /* result LDAP errno */
|
||
|
|
char *lr_res_error; /* result error string */
|
||
|
|
char *lr_res_matched;/* result matched DN string */
|
||
|
|
BerElement *lr_ber; /* ber encoded request contents */
|
||
|
|
LDAPConn *lr_conn; /* connection used to send request */
|
||
|
|
struct ldapreq *lr_parent; /* request that spawned this referral */
|
||
|
|
struct ldapreq *lr_refnext; /* next referral spawned */
|
||
|
|
struct ldapreq *lr_prev; /* previous request */
|
||
|
|
struct ldapreq *lr_next; /* next request */
|
||
|
|
} LDAPRequest;
|
||
|
|
#endif /* LDAP_REFERRALS */
|
||
|
|
|
||
|
|
|
||
|
|
/*
|
||
|
|
* structure for client cache
|
||
|
|
*/
|
||
|
|
#define LDAP_CACHE_BUCKETS 31 /* cache hash table size */
|
||
|
|
typedef struct ldapcache {
|
||
|
|
LDAPMessage *lc_buckets[LDAP_CACHE_BUCKETS];/* hash table */
|
||
|
|
LDAPMessage *lc_requests; /* unfulfilled reqs */
|
||
|
|
long lc_timeout; /* request timeout */
|
||
|
|
long lc_maxmem; /* memory to use */
|
||
|
|
long lc_memused; /* memory in use */
|
||
|
|
int lc_enabled; /* enabled? */
|
||
|
|
unsigned long lc_options; /* options */
|
||
|
|
#define LDAP_CACHE_OPT_CACHENOERRS 0x00000001
|
||
|
|
#define LDAP_CACHE_OPT_CACHEALLERRS 0x00000002
|
||
|
|
} LDAPCache;
|
||
|
|
#define NULLLDCACHE ((LDAPCache *)NULL)
|
||
|
|
|
||
|
|
/*
|
||
|
|
* structures for ldap getfilter routines
|
||
|
|
*/
|
||
|
|
|
||
|
|
typedef struct ldap_filt_info {
|
||
|
|
char *lfi_filter;
|
||
|
|
char *lfi_desc;
|
||
|
|
int lfi_scope; /* LDAP_SCOPE_BASE, etc */
|
||
|
|
int lfi_isexact; /* exact match filter? */
|
||
|
|
struct ldap_filt_info *lfi_next;
|
||
|
|
} LDAPFiltInfo;
|
||
|
|
|
||
|
|
typedef struct ldap_filt_list {
|
||
|
|
char *lfl_tag;
|
||
|
|
char *lfl_pattern;
|
||
|
|
char *lfl_delims;
|
||
|
|
LDAPFiltInfo *lfl_ilist;
|
||
|
|
struct ldap_filt_list *lfl_next;
|
||
|
|
} LDAPFiltList;
|
||
|
|
|
||
|
|
|
||
|
|
#define LDAP_FILT_MAXSIZ 1024
|
||
|
|
|
||
|
|
typedef struct ldap_filt_desc {
|
||
|
|
LDAPFiltList *lfd_filtlist;
|
||
|
|
LDAPFiltInfo *lfd_curfip;
|
||
|
|
LDAPFiltInfo lfd_retfi;
|
||
|
|
char lfd_filter[ LDAP_FILT_MAXSIZ ];
|
||
|
|
char *lfd_curval;
|
||
|
|
char *lfd_curvalcopy;
|
||
|
|
char **lfd_curvalwords;
|
||
|
|
char *lfd_filtprefix;
|
||
|
|
char *lfd_filtsuffix;
|
||
|
|
} LDAPFiltDesc;
|
||
|
|
|
||
|
|
|
||
|
|
/*
|
||
|
|
* structure representing an ldap connection
|
||
|
|
*/
|
||
|
|
|
||
|
|
typedef struct ldap {
|
||
|
|
Sockbuf ld_sb; /* socket descriptor & buffer */
|
||
|
|
char *ld_host;
|
||
|
|
int ld_version;
|
||
|
|
char ld_lberoptions;
|
||
|
|
int ld_deref;
|
||
|
|
#define LDAP_DEREF_NEVER 0
|
||
|
|
#define LDAP_DEREF_SEARCHING 1
|
||
|
|
#define LDAP_DEREF_FINDING 2
|
||
|
|
#define LDAP_DEREF_ALWAYS 3
|
||
|
|
|
||
|
|
int ld_timelimit;
|
||
|
|
int ld_sizelimit;
|
||
|
|
#define LDAP_NO_LIMIT 0
|
||
|
|
|
||
|
|
LDAPFiltDesc *ld_filtd; /* from getfilter for ufn searches */
|
||
|
|
char *ld_ufnprefix; /* for incomplete ufn's */
|
||
|
|
|
||
|
|
int ld_errno;
|
||
|
|
char *ld_error;
|
||
|
|
char *ld_matched;
|
||
|
|
int ld_msgid;
|
||
|
|
|
||
|
|
/* do not mess with these */
|
||
|
|
#ifdef LDAP_REFERRALS
|
||
|
|
LDAPRequest *ld_requests; /* list of outstanding requests */
|
||
|
|
#else /* LDAP_REFERRALS */
|
||
|
|
LDAPMessage *ld_requests; /* list of outstanding requests */
|
||
|
|
#endif /* LDAP_REFERRALS */
|
||
|
|
LDAPMessage *ld_responses; /* list of outstanding responses */
|
||
|
|
int *ld_abandoned; /* array of abandoned requests */
|
||
|
|
char ld_attrbuffer[LDAP_MAX_ATTR_LEN];
|
||
|
|
LDAPCache *ld_cache; /* non-null if cache is initialized */
|
||
|
|
char *ld_cldapdn; /* DN used in connectionless search */
|
||
|
|
|
||
|
|
/* it is OK to change these next four values directly */
|
||
|
|
int ld_cldaptries; /* connectionless search retry count */
|
||
|
|
int ld_cldaptimeout;/* time between retries */
|
||
|
|
int ld_refhoplimit; /* limit on referral nesting */
|
||
|
|
unsigned long ld_options; /* boolean options */
|
||
|
|
#ifdef LDAP_DNS
|
||
|
|
#define LDAP_OPT_DNS 0x00000001 /* use DN & DNS */
|
||
|
|
#endif /* LDAP_DNS */
|
||
|
|
#ifdef LDAP_REFERRALS
|
||
|
|
#define LDAP_OPT_REFERRALS 0x00000002 /* chase referrals */
|
||
|
|
#endif /* LDAP_REFERRALS */
|
||
|
|
#define LDAP_OPT_RESTART 0x00000004 /* restart if EINTR occurs */
|
||
|
|
|
||
|
|
/* do not mess with the rest though */
|
||
|
|
char *ld_defhost; /* full name of default server */
|
||
|
|
int ld_defport; /* port of default server */
|
||
|
|
BERTranslateProc ld_lber_encode_translate_proc;
|
||
|
|
BERTranslateProc ld_lber_decode_translate_proc;
|
||
|
|
#ifdef LDAP_REFERRALS
|
||
|
|
LDAPConn *ld_defconn; /* default connection */
|
||
|
|
LDAPConn *ld_conns; /* list of server connections */
|
||
|
|
void *ld_selectinfo; /* platform specifics for select */
|
||
|
|
int (*ld_rebindproc)( struct ldap *ld, char **dnp,
|
||
|
|
char **passwdp, int *authmethodp, int freeit );
|
||
|
|
/* routine to get info needed for re-bind */
|
||
|
|
#endif /* LDAP_REFERRALS */
|
||
|
|
} LDAP;
|
||
|
|
|
||
|
|
|
||
|
|
/*
|
||
|
|
* structure for ldap friendly mapping routines
|
||
|
|
*/
|
||
|
|
|
||
|
|
typedef struct friendly {
|
||
|
|
char *f_unfriendly;
|
||
|
|
char *f_friendly;
|
||
|
|
} FriendlyMap;
|
||
|
|
|
||
|
|
|
||
|
|
/*
|
||
|
|
* handy macro to check whether LDAP struct is set up for CLDAP or not
|
||
|
|
*/
|
||
|
|
#define LDAP_IS_CLDAP( ld ) ( ld->ld_sb.sb_naddr > 0 )
|
||
|
|
|
||
|
|
|
||
|
|
/*
|
||
|
|
* types for ldap URL handling
|
||
|
|
*/
|
||
|
|
typedef struct ldap_url_desc {
|
||
|
|
char *lud_host;
|
||
|
|
int lud_port;
|
||
|
|
char *lud_dn;
|
||
|
|
char **lud_attrs;
|
||
|
|
int lud_scope;
|
||
|
|
char *lud_filter;
|
||
|
|
char *lud_string; /* for internal use only */
|
||
|
|
} LDAPURLDesc;
|
||
|
|
#define NULLLDAPURLDESC ((LDAPURLDesc *)NULL)
|
||
|
|
|
||
|
|
#define LDAP_URL_ERR_NOTLDAP 1 /* URL doesn't begin with "ldap://" */
|
||
|
|
#define LDAP_URL_ERR_NODN 2 /* URL has no DN (required) */
|
||
|
|
#define LDAP_URL_ERR_BADSCOPE 3 /* URL scope string is invalid */
|
||
|
|
#define LDAP_URL_ERR_MEM 4 /* can't allocate memory space */
|
||
|
|
|
||
|
|
|
||
|
|
#ifndef NEEDPROTOS
|
||
|
|
extern LDAP * ldap_open();
|
||
|
|
extern LDAP *ldap_init();
|
||
|
|
#ifdef STR_TRANSLATION
|
||
|
|
extern void ldap_set_string_translators();
|
||
|
|
#ifdef LDAP_CHARSET_8859
|
||
|
|
extern int ldap_t61_to_8859();
|
||
|
|
extern int ldap_8859_to_t61();
|
||
|
|
#endif /* LDAP_CHARSET_8859 */
|
||
|
|
#endif /* STR_TRANSLATION */
|
||
|
|
extern LDAPMessage *ldap_first_entry();
|
||
|
|
extern LDAPMessage *ldap_next_entry();
|
||
|
|
extern char *ldap_get_dn();
|
||
|
|
extern char *ldap_dn2ufn();
|
||
|
|
extern char **ldap_explode_dn();
|
||
|
|
extern char *ldap_first_attribute();
|
||
|
|
extern char *ldap_next_attribute();
|
||
|
|
extern char **ldap_get_values();
|
||
|
|
extern struct berval **ldap_get_values_len();
|
||
|
|
extern void ldap_value_free();
|
||
|
|
extern void ldap_value_free_len();
|
||
|
|
extern int ldap_count_values();
|
||
|
|
extern int ldap_count_values_len();
|
||
|
|
extern char *ldap_err2string();
|
||
|
|
extern void ldap_getfilter_free();
|
||
|
|
extern LDAPFiltDesc *ldap_init_getfilter();
|
||
|
|
extern LDAPFiltDesc *ldap_init_getfilter_buf();
|
||
|
|
extern LDAPFiltInfo *ldap_getfirstfilter();
|
||
|
|
extern LDAPFiltInfo *ldap_getnextfilter();
|
||
|
|
extern void ldap_setfilteraffixes();
|
||
|
|
extern void ldap_build_filter();
|
||
|
|
extern void ldap_flush_cache();
|
||
|
|
extern void ldap_set_cache_options();
|
||
|
|
extern void ldap_uncache_entry();
|
||
|
|
extern void ldap_uncache_request();
|
||
|
|
extern char *ldap_friendly_name();
|
||
|
|
extern void ldap_free_friendlymap();
|
||
|
|
extern LDAP *cldap_open();
|
||
|
|
extern void cldap_setretryinfo();
|
||
|
|
extern void cldap_close();
|
||
|
|
extern LDAPFiltDesc *ldap_ufn_setfilter();
|
||
|
|
extern int ldap_ufn_timeout();
|
||
|
|
extern int ldap_sort_entries();
|
||
|
|
extern int ldap_sort_values();
|
||
|
|
extern int ldap_sort_strcasecmp();
|
||
|
|
void ldap_free_urldesc();
|
||
|
|
void ldap_set_rebind_proc();
|
||
|
|
void ldap_enable_translation();
|
||
|
|
|
||
|
|
|
||
|
|
#if defined(ultrix) || defined(VMS) || defined( nextstep )
|
||
|
|
extern char *strdup();
|
||
|
|
#endif
|
||
|
|
|
||
|
|
#else /* NEEDPROTOS */
|
||
|
|
#if !defined(MACOS) && !defined(DOS) && !defined(_WIN32) && !defined(WINSOCK)
|
||
|
|
#include <sys/time.h>
|
||
|
|
#endif
|
||
|
|
#if defined(WINSOCK)
|
||
|
|
#include "proto-ld.h"
|
||
|
|
#else
|
||
|
|
#include "proto-ldap.h"
|
||
|
|
#endif
|
||
|
|
|
||
|
|
#ifdef VMS
|
||
|
|
extern char *strdup( const char *s );
|
||
|
|
#endif
|
||
|
|
#if defined(ultrix) || defined( nextstep )
|
||
|
|
extern char *strdup();
|
||
|
|
#endif
|
||
|
|
|
||
|
|
#endif /* NEEDPROTOS */
|
||
|
|
|
||
|
|
#ifdef __cplusplus
|
||
|
|
}
|
||
|
|
#endif
|
||
|
|
#endif /* _LDAP_H */
|