/* back-ldap.h - ldap backend header file */
/* $OpenLDAP$ */
-/*
- * Copyright 1998-2003 The OpenLDAP Foundation, All Rights Reserved.
- * COPYING RESTRICTIONS APPLY, see COPYRIGHT file
- */
-/* This is an altered version */
-/*
- * Copyright 1999, Howard Chu, All rights reserved. <hyc@highlandsun.com>
- *
- * Permission is granted to anyone to use this software for any purpose
- * on any computer system, and to alter it and redistribute it, subject
- * to the following restrictions:
- *
- * 1. The author is not responsible for the consequences of use of this
- * software, no matter how awful, even if they arise from flaws in it.
- *
- * 2. The origin of this software must not be misrepresented, either by
- * explicit claim or by omission. Since few users ever read sources,
- * credits should appear in the documentation.
- *
- * 3. Altered versions must be plainly marked as such, and must not be
- * misrepresented as being the original software. Since few users
- * ever read sources, credits should appear in the documentation.
- *
- * 4. This notice may not be removed or altered.
+/* This work is part of OpenLDAP Software <http://www.openldap.org/>.
*
+ * Copyright 1999-2005 The OpenLDAP Foundation.
+ * Portions Copyright 2000-2003 Pierangelo Masarati.
+ * Portions Copyright 1999-2003 Howard Chu.
+ * All rights reserved.
*
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted only as authorized by the OpenLDAP
+ * Public License.
*
- * Copyright 2000, Pierangelo Masarati, All rights reserved. <ando@sys-net.it>
- *
- * This software is being modified by Pierangelo Masarati.
- * The previously reported conditions apply to the modified code as well.
- * Changes in the original code are highlighted where required.
- * Credits for the original code go to the author, Howard Chu.
+ * A copy of this license is available in the file LICENSE in the
+ * top-level directory of the distribution or, alternatively, at
+ * <http://www.OpenLDAP.org/license.html>.
+ */
+/* ACKNOWLEDGEMENTS:
+ * This work was initially developed by the Howard Chu for inclusion
+ * in OpenLDAP Software and subsequently enhanced by Pierangelo
+ * Masarati.
*/
#ifndef SLAPD_LDAP_H
#define SLAPD_LDAP_H
-#include "external.h"
-
-/* String rewrite library */
-#ifdef ENABLE_REWRITE
-#include "rewrite.h"
-#endif /* ENABLE_REWRITE */
-
LDAP_BEGIN_DECL
struct slap_conn;
struct slap_backend_db;
struct ldapconn {
- struct slap_conn *conn;
- LDAP *ld;
- struct berval cred;
- struct berval bound_dn;
- struct berval local_dn;
- int bound;
- ldap_pvt_thread_mutex_t lc_mutex;
-};
-
-struct ldapmap {
- int drop_missing;
-
- Avlnode *map;
- Avlnode *remap;
+ struct slap_conn *lc_conn;
+ LDAP *lc_ld;
+ struct berval lc_cred;
+ struct berval lc_bound_ndn;
+ struct berval lc_local_ndn;
+ int lc_bound;
+ ldap_pvt_thread_mutex_t lc_mutex;
};
-struct ldapmapping {
- struct berval src;
- struct berval dst;
+struct ldapauth {
+ struct berval la_authcID;
+ struct berval la_authcDN;
+ struct berval la_passwd;
+
+ struct berval la_authzID;
+
+ int la_authmethod;
+ int la_sasl_flags;
+ struct berval la_sasl_mech;
+ struct berval la_sasl_realm;
+
+#define LDAP_BACK_AUTH_NONE 0x00U
+#define LDAP_BACK_AUTH_NATIVE_AUTHZ 0x01U
+#define LDAP_BACK_AUTH_OVERRIDE 0x02U
+ unsigned la_flags;
};
struct ldapinfo {
- struct slap_backend_db *be;
- char *url;
- struct berval binddn;
- struct berval bindpw;
+ char *url;
+ LDAPURLDesc *lud;
+ struct ldapauth acl_la;
+#define acl_authcDN acl_la.la_authcDN
+#define acl_passwd acl_la.la_passwd
+
+ /* ID assert stuff */
+ int idassert_mode;
+#define LDAP_BACK_IDASSERT_LEGACY 0
+#define LDAP_BACK_IDASSERT_NOASSERT 1
+#define LDAP_BACK_IDASSERT_ANONYMOUS 2
+#define LDAP_BACK_IDASSERT_SELF 3
+#define LDAP_BACK_IDASSERT_OTHERDN 4
+#define LDAP_BACK_IDASSERT_OTHERID 5
+
+ struct ldapauth idassert_la;
+#define idassert_authcID idassert_la.la_authcID
+#define idassert_authcDN idassert_la.la_authcDN
+#define idassert_passwd idassert_la.la_passwd
+#define idassert_authzID idassert_la.la_authzID
+#define idassert_authmethod idassert_la.la_authmethod
+#define idassert_sasl_flags idassert_la.la_sasl_flags
+#define idassert_sasl_mech idassert_la.la_sasl_mech
+#define idassert_sasl_realm idassert_la.la_sasl_realm
+#define idassert_flags idassert_la.la_flags
+ BerVarray idassert_authz;
+
+ int idassert_ppolicy;
+ /* end of ID assert stuff */
+
ldap_pvt_thread_mutex_t conn_mutex;
- int savecred;
- Avlnode *conntree;
-#ifdef ENABLE_REWRITE
- struct rewrite_info *rwinfo;
-#else /* !ENABLE_REWRITE */
- BerVarray suffix_massage;
-#endif /* !ENABLE_REWRITE */
+ int savecred;
+ Avlnode *conntree;
- struct ldapmap oc_map;
- struct ldapmap at_map;
+ int rwm_started;
};
-struct ldapconn *ldap_back_getconn(struct slap_op *op, struct slap_rep *rs);
-int ldap_back_dobind(struct ldapconn *lc, Operation *op, SlapReply *rs);
-int ldap_back_map_result(int err);
-int ldap_back_op_result(struct ldapinfo *li, struct ldapconn *lc,
- Operation *op, SlapReply *rs, ber_int_t msgid, int rc, int sendok);
-int back_ldap_LTX_init_module(int argc, char *argv[]);
-
-void ldap_back_dn_massage(struct ldapinfo *li, struct berval *dn,
- struct berval *res, int normalized, int tofrom);
-
-extern int ldap_back_conn_cmp( const void *c1, const void *c2);
-extern int ldap_back_conn_dup( void *c1, void *c2 );
-extern void ldap_back_conn_free( void *c );
-
-/* attributeType/objectClass mapping */
-int mapping_cmp (const void *, const void *);
-int mapping_dup (void *, void *);
-
-void ldap_back_map_init ( struct ldapmap *lm, struct ldapmapping ** );
-void ldap_back_map ( struct ldapmap *map, struct berval *s, struct berval *m,
- int remap );
-#define BACKLDAP_MAP 0
-#define BACKLDAP_REMAP 1
-char *
-ldap_back_map_filter(
- struct ldapmap *at_map,
- struct ldapmap *oc_map,
- struct berval *f,
- int remap
-);
-char **
-ldap_back_map_attrs(
- struct ldapmap *at_map,
- AttributeName *a,
- int remap
-);
-
-extern void mapping_free ( void *mapping );
-
-extern int ldap_back_map_config(
- struct ldapmap *oc_map,
- struct ldapmap *at_map,
- const char *fname,
- int lineno,
- int argc,
- char **argv );
-
-extern int
-ldap_back_filter_map_rewrite_(
-#ifdef ENABLE_REWRITE
- struct rewrite_info *info,
- void *cookie,
-#endif /* ENABLE_REWRITE */
- struct ldapmap *at_map,
- struct ldapmap *oc_map,
- Filter *f,
- struct berval *fstr,
- int remap );
-
-/* suffix massaging by means of librewrite */
-#ifdef ENABLE_REWRITE
-extern int suffix_massage_config( struct rewrite_info *info,
- struct berval *pvnc, struct berval *nvnc,
- struct berval *prnc, struct berval *nrnc);
-extern int ldap_dnattr_rewrite( struct rewrite_info *rwinfo, BerVarray a_vals, void *cookie );
-#endif /* ENABLE_REWRITE */
-
-int ldap_build_entry( Operation *op, LDAPMessage *e, Entry *ent,
- struct berval *bdn, int private );
-
LDAP_END_DECL
+#include "proto-ldap.h"
+
#endif /* SLAPD_LDAP_H */
projects / openldap / blobdiff