summaryrefslogtreecommitdiffstats
path: root/src/lib/winbind_idmap_sss/winbind_idmap_sss.h
blob: 0f27c8561a540b63fb365edb79867eb4eb8d6e21 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
/*
    SSSD

    ID-mapping plugin for winbind

    Authors:
        Sumit Bose <sbose@redhat.com>

    Copyright (C) 2016 Red Hat

    This program is free software; you can redistribute it and/or modify
    it under the terms of the GNU General Public License as published by
    the Free Software Foundation; either version 3 of the License, or
    (at your option) any later version.

    This program is distributed in the hope that it will be useful,
    but WITHOUT ANY WARRANTY; without even the implied warranty of
    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
    GNU General Public License for more details.

    You should have received a copy of the GNU General Public License
    along with this program.  If not, see <http://www.gnu.org/licenses/>.
*/

#ifndef _WINBIND_SSS_IDMAP_H_
#define _WINBIND_SSS_IDMAP_H_

#include <stdint.h>
#include <stdbool.h>

#include <core/ntstatus.h>
#include <ndr.h>
#include <gen_ndr/security.h>

/* The following definitions are taken from the Samba header files
 * - winbindd/idmap_proto.h
 * - idmap.d
 * - gen_ndr/idmap.h
 *  and can be removed if the related Samba header files become public headers
 *  or if this plugin is build inside the Samba source tree. */

enum id_type {
    ID_TYPE_NOT_SPECIFIED,
    ID_TYPE_UID,
    ID_TYPE_GID,
    ID_TYPE_BOTH
};

struct unixid {
    uint32_t id;
    enum id_type type;
};

enum id_mapping {
    ID_UNKNOWN,
    ID_MAPPED,
    ID_UNMAPPED,
    ID_EXPIRED
};

struct id_map {
    struct dom_sid *sid;
    struct unixid xid;
    enum id_mapping status;
};

#define SMB_IDMAP_INTERFACE_VERSION 5

struct idmap_domain {
    const char *name;
    struct idmap_methods *methods;
    uint32_t low_id;
    uint32_t high_id;
    bool read_only;
    void *private_data;
};

/* Filled out by IDMAP backends */
struct idmap_methods {

    /* Called when backend is first loaded */
    NTSTATUS (*init)(struct idmap_domain *dom);

    /* Map an array of uids/gids to SIDs.  The caller specifies
       the uid/gid and type. Gets back the SID. */
    NTSTATUS (*unixids_to_sids)(struct idmap_domain *dom, struct id_map **ids);

    /* Map an arry of SIDs to uids/gids.  The caller sets the SID
       and type and gets back a uid or gid. */
    NTSTATUS (*sids_to_unixids)(struct idmap_domain *dom, struct id_map **ids);

    /* Allocate a Unix-ID. */
    NTSTATUS (*allocate_id)(struct idmap_domain *dom, struct unixid *id);
};

NTSTATUS smb_register_idmap(int version, const char *name,
                            struct idmap_methods *methods);
#endif /* _WINBIND_SSS_IDMAP_H_ */