From ae5716d87c7b126ab01b0d4fcacd4f519585e5fb Mon Sep 17 00:00:00 2001 From: Stephen Gallagher Date: Wed, 16 Jun 2010 14:59:49 -0400 Subject: Refactor the negative cache Rename functions from nss_ncache_* to sss_ncache_* Move negative cache to responder/common and rename as negcache.c/h --- src/responder/common/negcache.h | 51 +++++++++++++++++++++++++++++++++++++++++ 1 file changed, 51 insertions(+) create mode 100644 src/responder/common/negcache.h (limited to 'src/responder/common/negcache.h') diff --git a/src/responder/common/negcache.h b/src/responder/common/negcache.h new file mode 100644 index 000000000..d310c9e3d --- /dev/null +++ b/src/responder/common/negcache.h @@ -0,0 +1,51 @@ +/* + SSSD + + NSS Responder + + Copyright (C) Simo Sorce 2008 + + This program is free software; you can redistribute it and/or modify + it under the terms of the GNU General Public License as published by + the Free Software Foundation; either version 3 of the License, or + (at your option) any later version. + + This program is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + GNU General Public License for more details. + + You should have received a copy of the GNU General Public License + along with this program. If not, see . +*/ + +#ifndef _NSS_NEG_CACHE_H_ +#define _NSS_NEG_CACHE_H_ + +struct sss_nc_ctx; + +/* init the in memory negative cache */ +int sss_ncache_init(TALLOC_CTX *memctx, struct sss_nc_ctx **_ctx); + +/* check if the user is expired according to the passed in time to live */ +int sss_ncache_check_user(struct sss_nc_ctx *ctx, int ttl, + const char *domain, const char *name); +int sss_ncache_check_group(struct sss_nc_ctx *ctx, int ttl, + const char *domain, const char *name); +int sss_ncache_check_uid(struct sss_nc_ctx *ctx, int ttl, uid_t uid); +int sss_ncache_check_gid(struct sss_nc_ctx *ctx, int ttl, gid_t gid); + +/* add a new neg-cache entry setting the timestamp to "now" unless + * "permanent" is set to true, in which case the timestamps is set to 0 + * and the negative cache never expires (used to permanently filter out + * users and groups) */ +int sss_ncache_set_user(struct sss_nc_ctx *ctx, bool permanent, + const char *domain, const char *name); +int sss_ncache_set_group(struct sss_nc_ctx *ctx, bool permanent, + const char *domain, const char *name); +int sss_ncache_set_uid(struct sss_nc_ctx *ctx, bool permanent, uid_t uid); +int sss_ncache_set_gid(struct sss_nc_ctx *ctx, bool permanent, gid_t gid); + +int sss_ncache_reset_permament(struct sss_nc_ctx *ctx); + +#endif /* _NSS_NEG_CACHE_H_ */ -- cgit