1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
|
/*
SSSD
IPA Subdomains Module
Authors:
Sumit Bose <sbose@redhat.com>
Copyright (C) 2011 Red Hat
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation; either version 3 of the License, or
(at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program. If not, see <http://www.gnu.org/licenses/>.
*/
#ifndef _IPA_SUBDOMAINS_H_
#define _IPA_SUBDOMAINS_H_
#include "providers/dp_backend.h"
#include "providers/ipa/ipa_common.h"
#include "config.h"
#ifndef IPA_TRUST_KEYTAB_DIR
#define IPA_TRUST_KEYTAB_DIR SSS_STATEDIR"/keytabs"
#endif /* IPA_TRUST_KEYTAB_DIR */
/* ==Sid2Name Extended Operation============================================= */
#define EXOP_SID2NAME_OID "2.16.840.1.113730.3.8.10.4"
#define EXOP_SID2NAME_V1_OID "2.16.840.1.113730.3.8.10.4.1"
struct be_ctx *ipa_get_subdomains_be_ctx(struct be_ctx *be_ctx);
int ipa_subdom_init(struct be_ctx *be_ctx,
struct ipa_id_ctx *id_ctx,
struct bet_ops **ops,
void **pvt_data);
/* The following are used in server mode only */
struct ipa_ad_server_ctx {
struct sss_domain_info *dom;
struct ad_id_ctx *ad_id_ctx;
struct ipa_ad_server_ctx *next, *prev;
};
/* To be used by ipa_subdomains.c only */
struct tevent_req *
ipa_server_create_trusts_send(TALLOC_CTX *mem_ctx,
struct tevent_context *ev,
struct be_ctx *be_ctx,
struct ipa_id_ctx *id_ctx,
struct sss_domain_info *parent);
errno_t ipa_server_create_trusts_recv(struct tevent_req *req);
void ipa_ad_subdom_remove(struct be_ctx *be_ctx,
struct ipa_id_ctx *id_ctx,
struct sss_domain_info *subdom);
int ipa_ad_subdom_init(struct be_ctx *be_ctx,
struct ipa_id_ctx *id_ctx);
errno_t ipa_server_get_trust_direction(struct sysdb_attrs *sd,
struct ldb_context *ldb_ctx,
uint32_t *_direction);
const char *ipa_trust_dir2str(uint32_t direction);
/* Utilities */
#define IPA_TRUST_DIRECTION "ipaNTTrustDirection"
struct ldb_dn *ipa_subdom_ldb_dn(TALLOC_CTX *mem_ctx,
struct ldb_context *ldb_ctx,
struct sysdb_attrs *attrs);
bool ipa_subdom_is_member_dom(struct ldb_dn *dn);
/* struct for external group memberships, defined in
* ipa_subdomains_ext_groups.c */
struct ipa_ext_groups;
struct ipa_server_mode_ctx {
const char *realm;
const char *hostname;
struct ipa_ad_server_ctx *trusts;
struct ipa_ext_groups *ext_groups;
uid_t kt_owner_uid;
uid_t kt_owner_gid;
};
int ipa_ad_subdom_init(struct be_ctx *be_ctx,
struct ipa_id_ctx *id_ctx);
enum req_input_type {
REQ_INP_NAME,
REQ_INP_ID,
REQ_INP_SECID
};
struct req_input {
enum req_input_type type;
union {
const char *name;
uint32_t id;
const char *secid;
} inp;
};
struct tevent_req *ipa_get_ad_memberships_send(TALLOC_CTX *mem_ctx,
struct tevent_context *ev,
struct be_acct_req *ar,
struct ipa_server_mode_ctx *server_mode,
struct sss_domain_info *user_dom,
struct sdap_id_ctx *sdap_id_ctx,
const char *domain);
errno_t ipa_get_ad_memberships_recv(struct tevent_req *req, int *dp_error_out);
#endif /* _IPA_SUBDOMAINS_H_ */
|
