18040SBaban.Kenkre@Sun.COM /*
28040SBaban.Kenkre@Sun.COM  * CDDL HEADER START
38040SBaban.Kenkre@Sun.COM  *
48040SBaban.Kenkre@Sun.COM  * The contents of this file are subject to the terms of the
58040SBaban.Kenkre@Sun.COM  * Common Development and Distribution License (the "License").
68040SBaban.Kenkre@Sun.COM  * You may not use this file except in compliance with the License.
78040SBaban.Kenkre@Sun.COM  *
88040SBaban.Kenkre@Sun.COM  * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
98040SBaban.Kenkre@Sun.COM  * or http://www.opensolaris.org/os/licensing.
108040SBaban.Kenkre@Sun.COM  * See the License for the specific language governing permissions
118040SBaban.Kenkre@Sun.COM  * and limitations under the License.
128040SBaban.Kenkre@Sun.COM  *
138040SBaban.Kenkre@Sun.COM  * When distributing Covered Code, include this CDDL HEADER in each
148040SBaban.Kenkre@Sun.COM  * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
158040SBaban.Kenkre@Sun.COM  * If applicable, add the following below this CDDL HEADER, with the
168040SBaban.Kenkre@Sun.COM  * fields enclosed by brackets "[]" replaced with your own identifying
178040SBaban.Kenkre@Sun.COM  * information: Portions Copyright [yyyy] [name of copyright owner]
188040SBaban.Kenkre@Sun.COM  *
198040SBaban.Kenkre@Sun.COM  * CDDL HEADER END
208040SBaban.Kenkre@Sun.COM  */
218040SBaban.Kenkre@Sun.COM /*
228671SJulian.Pullen@Sun.COM  * Copyright 2009 Sun Microsystems, Inc.  All rights reserved.
238040SBaban.Kenkre@Sun.COM  * Use is subject to license terms.
248040SBaban.Kenkre@Sun.COM  */
258040SBaban.Kenkre@Sun.COM 
268040SBaban.Kenkre@Sun.COM #ifndef	_ADUTILS_IMPL_H
278040SBaban.Kenkre@Sun.COM #define	_ADUTILS_IMPL_H
288040SBaban.Kenkre@Sun.COM 
298040SBaban.Kenkre@Sun.COM #include <stdlib.h>
308040SBaban.Kenkre@Sun.COM #include <stdio.h>
318040SBaban.Kenkre@Sun.COM #include <sys/types.h>
328040SBaban.Kenkre@Sun.COM #include <ldap.h>
338040SBaban.Kenkre@Sun.COM #include <pthread.h>
348040SBaban.Kenkre@Sun.COM #include "addisc.h"
359565SJordan.Brown@Sun.COM #include <rpcsvc/idmap_prot.h>
368040SBaban.Kenkre@Sun.COM #include "libadutils.h"
378040SBaban.Kenkre@Sun.COM 
388040SBaban.Kenkre@Sun.COM #ifdef	__cplusplus
398040SBaban.Kenkre@Sun.COM extern "C" {
408040SBaban.Kenkre@Sun.COM #endif
418040SBaban.Kenkre@Sun.COM 
428040SBaban.Kenkre@Sun.COM #define	ADUTILS_SEARCH_TIMEOUT	3
438040SBaban.Kenkre@Sun.COM #define	ADUTILS_LDAP_OPEN_TIMEOUT	1
448040SBaban.Kenkre@Sun.COM 
458361SJulian.Pullen@Sun.COM 
468040SBaban.Kenkre@Sun.COM typedef struct adutils_sid {
478040SBaban.Kenkre@Sun.COM 	uchar_t		version;
488040SBaban.Kenkre@Sun.COM 	uchar_t		sub_authority_count;
498040SBaban.Kenkre@Sun.COM 	uint64_t	authority;  /* really, 48-bits */
508040SBaban.Kenkre@Sun.COM 	uint32_t	sub_authorities[ADUTILS_SID_MAX_SUB_AUTHORITIES];
518040SBaban.Kenkre@Sun.COM } adutils_sid_t;
528040SBaban.Kenkre@Sun.COM 
538040SBaban.Kenkre@Sun.COM struct adutils_host;
548040SBaban.Kenkre@Sun.COM 
558361SJulian.Pullen@Sun.COM struct known_domain {
568361SJulian.Pullen@Sun.COM 	char		name[MAXDOMAINNAME];
578671SJulian.Pullen@Sun.COM 	char		sid[MAXSTRSID];
588361SJulian.Pullen@Sun.COM };
598361SJulian.Pullen@Sun.COM 
608040SBaban.Kenkre@Sun.COM 
618040SBaban.Kenkre@Sun.COM /* A set of DSs for a given AD partition */
628040SBaban.Kenkre@Sun.COM struct adutils_ad {
638361SJulian.Pullen@Sun.COM 	int			num_known_domains;
648361SJulian.Pullen@Sun.COM 	struct known_domain	*known_domains;
658040SBaban.Kenkre@Sun.COM 	pthread_mutex_t		lock;
668040SBaban.Kenkre@Sun.COM 	uint32_t		ref;
678040SBaban.Kenkre@Sun.COM 	struct adutils_host	*last_adh;
688040SBaban.Kenkre@Sun.COM 	adutils_ad_partition_t	partition;	/* Data or global catalog? */
69*10504SKeyur.Desai@Sun.COM 	/* If this is a reference to DC, this is the base DN for that DC */
70*10504SKeyur.Desai@Sun.COM 	char			*basedn;
718040SBaban.Kenkre@Sun.COM };
728040SBaban.Kenkre@Sun.COM 
738040SBaban.Kenkre@Sun.COM typedef struct adutils_attr {
748040SBaban.Kenkre@Sun.COM 	char	*attr_name;
758040SBaban.Kenkre@Sun.COM 	uint_t	num_values;
768040SBaban.Kenkre@Sun.COM 	char	**attr_values;
778040SBaban.Kenkre@Sun.COM } adutils_attr_t;
788040SBaban.Kenkre@Sun.COM 
798040SBaban.Kenkre@Sun.COM /* typedef in libadutils.h */
808040SBaban.Kenkre@Sun.COM struct adutils_entry {
818040SBaban.Kenkre@Sun.COM 	uint_t			num_nvpairs;
828040SBaban.Kenkre@Sun.COM 	adutils_attr_t		*attr_nvpairs;
838040SBaban.Kenkre@Sun.COM 	struct adutils_entry	*next;
848040SBaban.Kenkre@Sun.COM };
858040SBaban.Kenkre@Sun.COM 
868040SBaban.Kenkre@Sun.COM /* typedef in libadutils.h */
878040SBaban.Kenkre@Sun.COM struct adutils_result {
888040SBaban.Kenkre@Sun.COM 	uint_t		num_entries;
898040SBaban.Kenkre@Sun.COM 	adutils_entry_t	*entries;
908040SBaban.Kenkre@Sun.COM };
918040SBaban.Kenkre@Sun.COM 
928040SBaban.Kenkre@Sun.COM /* A single DS */
938040SBaban.Kenkre@Sun.COM typedef struct adutils_host {
948040SBaban.Kenkre@Sun.COM 	struct adutils_host	*next;
958040SBaban.Kenkre@Sun.COM 	struct adutils_ad	*owner;		/* ad_t to which this belongs */
968040SBaban.Kenkre@Sun.COM 	pthread_mutex_t		lock;
978040SBaban.Kenkre@Sun.COM 	LDAP			*ld;		/* LDAP connection */
988040SBaban.Kenkre@Sun.COM 	uint32_t		ref;		/* ref count */
998040SBaban.Kenkre@Sun.COM 	time_t			idletime;	/* time since last activity */
1008040SBaban.Kenkre@Sun.COM 	int			dead;		/* error on LDAP connection */
1018040SBaban.Kenkre@Sun.COM 	/*
1028040SBaban.Kenkre@Sun.COM 	 * Used to distinguish between different instances of LDAP
1038040SBaban.Kenkre@Sun.COM 	 * connections to this same DS.  We need this so we never mix up
1048040SBaban.Kenkre@Sun.COM 	 * results for a given msgID from one connection with those of
1058040SBaban.Kenkre@Sun.COM 	 * another earlier connection where two batch state structures
1068040SBaban.Kenkre@Sun.COM 	 * share this adutils_host object but used different LDAP connections
1078040SBaban.Kenkre@Sun.COM 	 * to send their LDAP searches.
1088040SBaban.Kenkre@Sun.COM 	 */
1098040SBaban.Kenkre@Sun.COM 	uint64_t		generation;
1108040SBaban.Kenkre@Sun.COM 
1118040SBaban.Kenkre@Sun.COM 	/* LDAP DS info */
1128040SBaban.Kenkre@Sun.COM 	char			*host;
1138040SBaban.Kenkre@Sun.COM 	int			port;
1148040SBaban.Kenkre@Sun.COM 
1158040SBaban.Kenkre@Sun.COM 	/* hardwired to SASL GSSAPI only for now */
1168040SBaban.Kenkre@Sun.COM 	char			*saslmech;
1178040SBaban.Kenkre@Sun.COM 	unsigned		saslflags;
1188040SBaban.Kenkre@Sun.COM 
1198040SBaban.Kenkre@Sun.COM 	/* Number of outstanding search requests */
1208040SBaban.Kenkre@Sun.COM 	uint32_t		max_requests;
1218040SBaban.Kenkre@Sun.COM 	uint32_t		num_requests;
1228040SBaban.Kenkre@Sun.COM } adutils_host_t;
1238040SBaban.Kenkre@Sun.COM 
1248040SBaban.Kenkre@Sun.COM /*  A place to put the results of a batched (async) query */
1258040SBaban.Kenkre@Sun.COM typedef struct adutils_q {
1268040SBaban.Kenkre@Sun.COM 	const char		*edomain;	/* expected domain name */
1278040SBaban.Kenkre@Sun.COM 	struct adutils_result	**result;	/* The LDAP search result */
1288040SBaban.Kenkre@Sun.COM 	adutils_rc		*rc;
1298040SBaban.Kenkre@Sun.COM 	int			msgid;		/* LDAP message ID */
1308040SBaban.Kenkre@Sun.COM } adutils_q_t;
1318040SBaban.Kenkre@Sun.COM 
1328040SBaban.Kenkre@Sun.COM /* Batch context structure */
1338040SBaban.Kenkre@Sun.COM struct adutils_query_state {
1348040SBaban.Kenkre@Sun.COM 	struct adutils_query_state	*next;
1358361SJulian.Pullen@Sun.COM 	int			qsize;		/* Size of queries */
1368040SBaban.Kenkre@Sun.COM 	int			ref_cnt;	/* reference count */
1378040SBaban.Kenkre@Sun.COM 	pthread_cond_t		cv;		/* Condition wait variable */
1388361SJulian.Pullen@Sun.COM 	uint32_t		qcount;		/* Number of items queued */
1398040SBaban.Kenkre@Sun.COM 	uint32_t		qinflight;	/* how many queries in flight */
1408040SBaban.Kenkre@Sun.COM 	uint16_t		qdead;		/* oops, lost LDAP connection */
1418040SBaban.Kenkre@Sun.COM 	adutils_host_t		*qadh;		/* LDAP connection */
1428040SBaban.Kenkre@Sun.COM 	uint64_t		qadh_gen;	/* same as qadh->generation */
1438040SBaban.Kenkre@Sun.COM 	adutils_ldap_res_search_cb ldap_res_search_cb;
1448040SBaban.Kenkre@Sun.COM 	void			*ldap_res_search_argp;
1458040SBaban.Kenkre@Sun.COM 	adutils_q_t		queries[1];	/* array of query results */
1468040SBaban.Kenkre@Sun.COM };
1478040SBaban.Kenkre@Sun.COM 
1488671SJulian.Pullen@Sun.COM /* Private routines */
1498671SJulian.Pullen@Sun.COM 
1508671SJulian.Pullen@Sun.COM char *DN_to_DNS(const char *dn_name);
1518671SJulian.Pullen@Sun.COM 
1528671SJulian.Pullen@Sun.COM int adutils_getsid(BerValue *bval, adutils_sid_t *sidp);
1538671SJulian.Pullen@Sun.COM 
1548671SJulian.Pullen@Sun.COM char *adutils_sid2txt(adutils_sid_t *sidp);
1558671SJulian.Pullen@Sun.COM 
1568671SJulian.Pullen@Sun.COM int saslcallback(LDAP *ld, unsigned flags, void *defaults, void *prompts);
1578671SJulian.Pullen@Sun.COM 
1588671SJulian.Pullen@Sun.COM /* Global logger function */
1598671SJulian.Pullen@Sun.COM 
1608671SJulian.Pullen@Sun.COM extern adutils_logger logger;
1618671SJulian.Pullen@Sun.COM 
1628040SBaban.Kenkre@Sun.COM #ifdef	__cplusplus
1638040SBaban.Kenkre@Sun.COM }
1648040SBaban.Kenkre@Sun.COM #endif
1658040SBaban.Kenkre@Sun.COM 
1668040SBaban.Kenkre@Sun.COM #endif	/* _ADUTILS_IMPL_H */
167