/* back-ldap.h - ldap backend header file */
-
-/*
- * Copyright 1999, Howard Chu, All rights reserved. <hyc@highlandsun.com>
- *
- * Permission is granted to anyone to use this software for any purpose
- * on any computer system, and to alter it and redistribute it, subject
- * to the following restrictions:
- *
- * 1. The author is not responsible for the consequences of use of this
- * software, no matter how awful, even if they arise from flaws in it.
- *
- * 2. The origin of this software must not be misrepresented, either by
- * explicit claim or by omission. Since few users ever read sources,
- * credits should appear in the documentation.
- *
- * 3. Altered versions must be plainly marked as such, and must not be
- * misrepresented as being the original software. Since few users
- * ever read sources, credits should appear in the documentation.
- *
- * 4. This notice may not be removed or altered.
+/* $OpenLDAP$ */
+/* This work is part of OpenLDAP Software <http://www.openldap.org/>.
+ *
+ * Copyright 1999-2005 The OpenLDAP Foundation.
+ * Portions Copyright 2000-2003 Pierangelo Masarati.
+ * Portions Copyright 1999-2003 Howard Chu.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted only as authorized by the OpenLDAP
+ * Public License.
+ *
+ * A copy of this license is available in the file LICENSE in the
+ * top-level directory of the distribution or, alternatively, at
+ * <http://www.OpenLDAP.org/license.html>.
+ */
+/* ACKNOWLEDGEMENTS:
+ * This work was initially developed by the Howard Chu for inclusion
+ * in OpenLDAP Software and subsequently enhanced by Pierangelo
+ * Masarati.
*/
#ifndef SLAPD_LDAP_H
#define SLAPD_LDAP_H
-#include "external.h"
-
LDAP_BEGIN_DECL
struct slap_conn;
struct slap_op;
+struct slap_backend_db;
struct ldapconn {
- struct ldapconn *next;
- struct slap_conn *conn;
- LDAP *ld;
- int bound;
+ struct slap_conn *lc_conn;
+ LDAP *lc_ld;
+ struct berval lc_cred;
+ struct berval lc_bound_ndn;
+ struct berval lc_local_ndn;
+ int lc_bound;
+ int lc_ispriv;
+ ldap_pvt_thread_mutex_t lc_mutex;
+ unsigned lc_refcnt;
+};
+
+/*
+ * identity assertion modes
+ */
+enum {
+ LDAP_BACK_IDASSERT_LEGACY = 1,
+ LDAP_BACK_IDASSERT_NOASSERT,
+ LDAP_BACK_IDASSERT_ANONYMOUS,
+ LDAP_BACK_IDASSERT_SELF,
+ LDAP_BACK_IDASSERT_OTHERDN,
+ LDAP_BACK_IDASSERT_OTHERID
};
struct ldapinfo {
- char *host;
- int port;
- char *suffix;
+ char *url;
+ LDAPURLDesc *lud;
+
+ slap_bindconf acl_sb;
+#define acl_authcID acl_sb.sb_authcId
+#define acl_authcDN acl_sb.sb_binddn
+#define acl_passwd acl_sb.sb_cred
+#define acl_authzID acl_sb.sb_authzId
+#define acl_authmethod acl_sb.sb_method
+#define acl_sasl_mech acl_sb.sb_saslmech
+#define acl_sasl_realm acl_sb.sb_realm
+#define acl_secprops acl_sb.sb_secprops
+
+ /* ID assert stuff */
+ int idassert_mode;
+
+ slap_bindconf idassert_sb;
+#define idassert_authcID idassert_sb.sb_authcId
+#define idassert_authcDN idassert_sb.sb_binddn
+#define idassert_passwd idassert_sb.sb_cred
+#define idassert_authzID idassert_sb.sb_authzId
+#define idassert_authmethod idassert_sb.sb_method
+#define idassert_sasl_mech idassert_sb.sb_saslmech
+#define idassert_sasl_realm idassert_sb.sb_realm
+#define idassert_secprops idassert_sb.sb_secprops
+
+ unsigned idassert_flags;
+#define LDAP_BACK_AUTH_NONE 0x00U
+#define LDAP_BACK_AUTH_NATIVE_AUTHZ 0x01U
+#define LDAP_BACK_AUTH_OVERRIDE 0x02U
+#define LDAP_BACK_AUTH_PRESCRIPTIVE 0x04U
+
+ BerVarray idassert_authz;
+ /* end of ID assert stuff */
+
ldap_pvt_thread_mutex_t conn_mutex;
- struct ldapconn *lcs;
+ unsigned flags;
+#define LDAP_BACK_F_NONE 0x00U
+#define LDAP_BACK_F_SAVECRED 0x01U
+#define LDAP_BACK_F_USE_TLS 0x02U
+#define LDAP_BACK_F_PROPAGATE_TLS 0x04U
+#define LDAP_BACK_F_TLS_CRITICAL 0x08U
+#define LDAP_BACK_F_TLS_USE_MASK (LDAP_BACK_F_USE_TLS|LDAP_BACK_F_TLS_CRITICAL)
+#define LDAP_BACK_F_TLS_PROPAGATE_MASK (LDAP_BACK_F_PROPAGATE_TLS|LDAP_BACK_F_TLS_CRITICAL)
+#define LDAP_BACK_F_TLS_MASK (LDAP_BACK_F_TLS_USE_MASK|LDAP_BACK_F_TLS_PROPAGATE_MASK)
+#define LDAP_BACK_F_CHASE_REFERRALS 0x10U
+#define LDAP_BACK_F_PROXY_WHOAMI 0x20U
+
+#define LDAP_BACK_F_SUPPORT_T_F 0x80U
+#define LDAP_BACK_F_SUPPORT_T_F_DISCOVER 0x40U
+#define LDAP_BACK_F_SUPPORT_T_F_MASK (LDAP_BACK_F_SUPPORT_T_F|LDAP_BACK_F_SUPPORT_T_F_DISCOVER)
+
+#define LDAP_BACK_SAVECRED(li) ( (li)->flags & LDAP_BACK_F_SAVECRED )
+#define LDAP_BACK_USE_TLS(li) ( (li)->flags & LDAP_BACK_F_USE_TLS )
+#define LDAP_BACK_PROPAGATE_TLS(li) ( (li)->flags & LDAP_BACK_F_PROPAGATE_TLS )
+#define LDAP_BACK_TLS_CRITICAL(li) ( (li)->flags & LDAP_BACK_F_TLS_CRITICAL )
+#define LDAP_BACK_CHASE_REFERRALS(li) ( (li)->flags & LDAP_BACK_F_CHASE_REFERRALS )
+
+ int version;
+
+ Avlnode *conntree;
+
+ int rwm_started;
};
-struct ldapconn *ldap_back_getconn(struct ldapinfo *li, struct slap_conn *conn,
- struct slap_op *op);
-void ldap_back_dobind(struct ldapconn *lc, Operation *op);
-int ldap_back_op_result(struct ldapconn *lc, Operation *op);
-int back_ldap_LTX_init_module(int argc, char *argv[]);
+typedef enum ldap_back_send_t {
+ LDAP_BACK_DONTSEND = 0x00,
+ LDAP_BACK_SENDOK = 0x01,
+ LDAP_BACK_SENDERR = 0x02,
+ LDAP_BACK_SENDRESULT = (LDAP_BACK_SENDOK|LDAP_BACK_SENDERR)
+} ldap_back_send_t;
+
+/* define to use asynchronous StartTLS */
+#define SLAP_STARTTLS_ASYNCHRONOUS
LDAP_END_DECL
-#endif
+#include "proto-ldap.h"
+
+#endif /* SLAPD_LDAP_H */