diff options
Diffstat (limited to 'ldap/servers/plugins/acctpolicy/acct_init.c')
| -rw-r--r-- | ldap/servers/plugins/acctpolicy/acct_init.c | 183 |
1 files changed, 183 insertions, 0 deletions
diff --git a/ldap/servers/plugins/acctpolicy/acct_init.c b/ldap/servers/plugins/acctpolicy/acct_init.c new file mode 100644 index 00000000..6f33434c --- /dev/null +++ b/ldap/servers/plugins/acctpolicy/acct_init.c @@ -0,0 +1,183 @@ +/****************************************************************************** +Copyright (C) 2009 Hewlett-Packard Development Company, L.P. + +This program is free software; you can redistribute it and/or +modify it under the terms of the GNU General Public License +version 2 as published by the Free Software Foundation. + +This program is distributed in the hope that it will be useful, +but WITHOUT ANY WARRANTY; without even the implied warranty of +MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +GNU General Public License for more details. + +You should have received a copy of the GNU General Public License +along with this program; if not, write to the Free Software +Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA. + +Contributors: +Hewlett-Packard Development Company, L.P. +******************************************************************************/ + +/* Example enabling and config entries +dn: cn=Account Policy Plugin,cn=plugins,cn=config +objectClass: top +objectClass: nsSlapdPlugin +objectClass: extensibleObject +cn: Account Policy Plugin +nsslapd-pluginPath: /path/to/libacctpolicy-plugin.sl +nsslapd-pluginInitfunc: acct_policy_init +nsslapd-pluginType: object +nsslapd-pluginEnabled: on +nsslapd-plugin-depends-on-type: database +nsslapd-pluginId: Account Policy Plugin + +dn: cn=config,cn=Account Policy Plugin,cn=plugins,cn=config +objectClass: top +objectClass: extensibleObject +cn: config +alwaysrecordlogin: yes +stateattrname: lastLoginTime +altstateattrname: createTimestamp +specattrname: acctPolicySubentry +limitattrname: accountInactivityLimit +*/ + +#include <stdio.h> +#include <string.h> +#include "slapi-plugin.h" +#include "acctpolicy.h" + +static Slapi_PluginDesc plugin_desc = { PLUGIN_NAME, PLUGIN_VENDOR, + PLUGIN_VERSION, PLUGIN_DESC }; +static Slapi_PluginDesc pre_plugin_desc = { PRE_PLUGIN_NAME, PLUGIN_VENDOR, + PLUGIN_VERSION, PLUGIN_DESC }; +static Slapi_PluginDesc post_plugin_desc = { PRE_PLUGIN_NAME, PLUGIN_VENDOR, + PLUGIN_VERSION, PLUGIN_DESC }; + +/* Local function prototypes */ +int acct_policy_start( Slapi_PBlock *pb ); +int acct_policy_init( Slapi_PBlock *pb ); +int acct_preop_init( Slapi_PBlock *pb ); +int acct_postop_init( Slapi_PBlock *pb ); +int acct_bind_preop( Slapi_PBlock *pb ); +int acct_bind_postop( Slapi_PBlock *pb ); + +/* + Master init function for the account plugin +*/ +int +acct_policy_init( Slapi_PBlock *pb ) +{ + void *plugin_id; + + if ( slapi_pblock_set( pb, SLAPI_PLUGIN_VERSION, + SLAPI_PLUGIN_VERSION_01 ) != 0 || + slapi_pblock_set( pb, SLAPI_PLUGIN_DESCRIPTION, + (void *)&plugin_desc ) != 0 || + slapi_pblock_set( pb, SLAPI_PLUGIN_START_FN, + (void *)acct_policy_start ) != 0 ) { + slapi_log_error( SLAPI_LOG_FATAL, PLUGIN_NAME, + "acct_policy_init registration failed\n" ); + return( CALLBACK_ERR ); + } + + if( slapi_pblock_get( pb, SLAPI_PLUGIN_IDENTITY, &plugin_id ) != 0 ) { + slapi_log_error( SLAPI_LOG_FATAL, PLUGIN_NAME, + "acct_policy_init failed to get plugin identity\n" ); + return( CALLBACK_ERR ); + } + + set_identity( plugin_id ); + + /* Register the pre and postop plugins */ + if( slapi_register_plugin("preoperation", 1, "acct_preop_init", + acct_preop_init, PRE_PLUGIN_DESC, NULL, plugin_id) != 0 || + slapi_register_plugin("postoperation", 1, "acct_postop_init", + acct_postop_init, POST_PLUGIN_DESC, NULL, plugin_id) != 0 ) { + slapi_log_error( SLAPI_LOG_FATAL, PLUGIN_NAME, + "acct_policy_init failed to register callbacks\n" ); + return( CALLBACK_ERR ); + } + + return( CALLBACK_OK ); +} + +/* + Plugin startup function, when this is called any other plugins should + already be initialized, so it's safe to e.g. perform internal searches, + which is needed to retrieve the plugin configuration +*/ +int +acct_policy_start( Slapi_PBlock *pb ) { + acctPluginCfg *cfg; + void *plugin_id = get_identity(); + + /* Load plugin configuration */ + if( acct_policy_load_config_startup( pb, plugin_id ) ) { + slapi_log_error( SLAPI_LOG_FATAL, PLUGIN_NAME, + "acct_policy_start failed to load configuration\n" ); + return( CALLBACK_ERR ); + } + + /* Show the configuration */ + cfg = get_config(); + slapi_log_error( SLAPI_LOG_PLUGIN, PLUGIN_NAME, "acct_policy_start config: " + "stateAttrName=%s altStateAttrName=%s specAttrName=%s limitAttrName=%s " + "alwaysRecordLogin=%d\n", + cfg->state_attr_name, cfg->alt_state_attr_name, cfg->spec_attr_name, + cfg->limit_attr_name, cfg->always_record_login); + return( CALLBACK_OK ); +} + +int +acct_preop_init( Slapi_PBlock *pb ) { + /* Which slapi plugin API we're compatible with. */ + if ( slapi_pblock_set( pb, SLAPI_PLUGIN_VERSION, + SLAPI_PLUGIN_VERSION_01 ) != 0 || + slapi_pblock_set( pb, SLAPI_PLUGIN_DESCRIPTION, + (void *)&pre_plugin_desc ) != 0 ) { + slapi_log_error( SLAPI_LOG_FATAL, PRE_PLUGIN_NAME, + "Failed to set plugin version or description\n" ); + return( CALLBACK_ERR ); + } + + if ( slapi_pblock_set( pb, SLAPI_PLUGIN_PRE_BIND_FN, + (void *) acct_bind_preop ) != 0 ) { + slapi_log_error( SLAPI_LOG_FATAL, PRE_PLUGIN_NAME, + "Failed to set plugin callback function\n" ); + return( CALLBACK_ERR ); + } + + return( CALLBACK_OK ); +} + +int +acct_postop_init( Slapi_PBlock *pb ) +{ + void *plugin_id = get_identity(); + + if ( slapi_pblock_set( pb, SLAPI_PLUGIN_VERSION, + SLAPI_PLUGIN_VERSION_01 ) != 0 || + slapi_pblock_set( pb, SLAPI_PLUGIN_DESCRIPTION, + (void *)&post_plugin_desc ) != 0 ) { + slapi_log_error( SLAPI_LOG_FATAL, POST_PLUGIN_NAME, + "Failed to set plugin version or name\n" ); + return( CALLBACK_ERR ); + } + + if ( slapi_pblock_set( pb, SLAPI_PLUGIN_POST_BIND_FN, + (void *)acct_bind_postop ) != 0 ) { + slapi_log_error( SLAPI_LOG_FATAL, POST_PLUGIN_NAME, + "Failed to set plugin callback function\n" ); + return( CALLBACK_ERR ); + } + + if( slapi_pblock_get( pb, SLAPI_PLUGIN_IDENTITY, &plugin_id ) != 0 ) { + slapi_log_error( SLAPI_LOG_FATAL, POST_PLUGIN_NAME, + "Failed to get plugin identity\n" ); + return( CALLBACK_ERR ); + } + + return( CALLBACK_OK ); +} + |