1 /* 2 * Copyright 2011 Nexenta Systems, Inc. All rights reserved. 3 * Copyright 2001-2003 Sun Microsystems, Inc. All rights reserved. 4 * Use is subject to license terms. 5 */ 6 7 /* 8 * The contents of this file are subject to the Netscape Public 9 * License Version 1.1 (the "License"); you may not use this file 10 * except in compliance with the License. You may obtain a copy of 11 * the License at http://www.mozilla.org/NPL/ 12 * 13 * Software distributed under the License is distributed on an "AS 14 * IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or 15 * implied. See the License for the specific language governing 16 * rights and limitations under the License. 17 * 18 * The Original Code is Mozilla Communicator client code, released 19 * March 31, 1998. 20 * 21 * The Initial Developer of the Original Code is Netscape 22 * Communications Corporation. Portions created by Netscape are 23 * Copyright (C) 1998-1999 Netscape Communications Corporation. All 24 * Rights Reserved. 25 * 26 * Contributor(s): 27 */ 28 29 #ifndef _LDAP_H 30 #define _LDAP_H 31 32 #ifdef __cplusplus 33 extern "C" { 34 #endif 35 36 #ifndef _SOLARIS_SDK 37 #define _SOLARIS_SDK 38 #endif 39 40 #ifndef LDAP_TYPE_TIMEVAL_DEFINED 41 #include <sys/time.h> 42 #endif 43 #ifndef LDAP_TYPE_SOCKET_DEFINED /* API extension */ 44 #include <sys/types.h> 45 #include <sys/socket.h> 46 #endif 47 48 #include <lber.h> 49 50 #define LDAP_PORT 389 51 #define LDAPS_PORT 636 52 #define LDAP_PORT_MAX 65535 /* API extension */ 53 #define LDAP_VERSION1 1 /* API extension */ 54 #define LDAP_VERSION2 2 55 #define LDAP_VERSION3 3 56 #define LDAP_VERSION LDAP_VERSION2 /* API extension */ 57 #define LDAP_VERSION_MIN LDAP_VERSION3 58 #define LDAP_VERSION_MAX LDAP_VERSION3 59 60 #define LDAP_VENDOR_VERSION 500 /* version # * 100 */ 61 #define LDAP_VENDOR_NAME "Sun Microsystems Inc." 62 /* 63 * The following will be an RFC number once the LDAP C API Internet Draft 64 * is published as a Proposed Standard RFC. For now we use 2000 + the 65 * draft revision number (currently 5) since we are close to compliance 66 * with revision 5 of the draft. 67 */ 68 #define LDAP_API_VERSION 2005 69 70 /* 71 * C LDAP features we support that are not (yet) part of the LDAP C API 72 * Internet Draft. Use the ldap_get_option() call with an option value of 73 * LDAP_OPT_API_FEATURE_INFO to retrieve information about a feature. 74 * 75 * Note that this list is incomplete; it includes only the most widely 76 * used extensions. Also, the version is 1 for all of these for now. 77 */ 78 #define LDAP_API_FEATURE_SERVER_SIDE_SORT 1 79 #define LDAP_API_FEATURE_VIRTUAL_LIST_VIEW 1 80 #define LDAP_API_FEATURE_PERSISTENT_SEARCH 1 81 #define LDAP_API_FEATURE_PROXY_AUTHORIZATION 1 82 #define LDAP_API_FEATURE_X_LDERRNO 1 83 #define LDAP_API_FEATURE_X_MEMCACHE 1 84 #define LDAP_API_FEATURE_X_IO_FUNCTIONS 1 85 #define LDAP_API_FEATURE_X_EXTIO_FUNCTIONS 1 86 #define LDAP_API_FEATURE_X_DNS_FUNCTIONS 1 87 #define LDAP_API_FEATURE_X_MEMALLOC_FUNCTIONS 1 88 #define LDAP_API_FEATURE_X_THREAD_FUNCTIONS 1 89 #define LDAP_API_FEATURE_X_EXTHREAD_FUNCTIONS 1 90 #define LDAP_API_FEATURE_X_GETLANGVALUES 1 91 #define LDAP_API_FEATURE_X_CLIENT_SIDE_SORT 1 92 #define LDAP_API_FEATURE_X_URL_FUNCTIONS 1 93 #define LDAP_API_FEATURE_X_FILTER_FUNCTIONS 1 94 95 #define LDAP_ROOT_DSE "" /* API extension */ 96 #define LDAP_NO_ATTRS "1.1" 97 #define LDAP_ALL_USER_ATTRS "*" 98 99 /* 100 * Standard options (used with ldap_set_option() and ldap_get_option): 101 */ 102 #define LDAP_OPT_API_INFO 0x00 /* 0 */ 103 #define LDAP_OPT_DESC 0x01 /* 1 */ 104 #define LDAP_OPT_DEREF 0x02 /* 2 */ 105 #define LDAP_OPT_SIZELIMIT 0x03 /* 3 */ 106 #define LDAP_OPT_TIMELIMIT 0x04 /* 4 */ 107 #define LDAP_OPT_REFERRALS 0x08 /* 8 */ 108 #define LDAP_OPT_RESTART 0x09 /* 9 */ 109 #define LDAP_OPT_PROTOCOL_VERSION 0x11 /* 17 */ 110 #define LDAP_OPT_SERVER_CONTROLS 0x12 /* 18 */ 111 #define LDAP_OPT_CLIENT_CONTROLS 0x13 /* 19 */ 112 #define LDAP_OPT_API_FEATURE_INFO 0x15 /* 21 */ 113 #define LDAP_OPT_HOST_NAME 0x30 /* 48 */ 114 #define LDAP_OPT_ERROR_NUMBER 0x31 /* 49 */ 115 #define LDAP_OPT_ERROR_STRING 0x32 /* 50 */ 116 #define LDAP_OPT_MATCHED_DN 0x33 /* 51 */ 117 118 /* 119 * Well-behaved private and experimental extensions will use option values 120 * between 0x4000 (16384) and 0x7FFF (32767) inclusive. 121 */ 122 #define LDAP_OPT_PRIVATE_EXTENSION_BASE 0x4000 /* to 0x7FFF inclusive */ 123 /* 124 * Special timeout values for poll and connect: 125 */ 126 #define LDAP_X_IO_TIMEOUT_NO_WAIT 0 /* return immediately */ 127 #define LDAP_X_IO_TIMEOUT_NO_TIMEOUT (-1) /* block indefinitely */ 128 /* 129 * Timeout value for nonblocking connect call 130 */ 131 #define LDAP_X_OPT_CONNECT_TIMEOUT (LDAP_OPT_PRIVATE_EXTENSION_BASE + 0x0F01) 132 /* 0x4000 + 0x0F01 = 0x4F01 = 20225 - API extension */ 133 134 /* for on/off options */ 135 #define LDAP_OPT_ON ((void *)1) 136 #define LDAP_OPT_OFF ((void *)0) 137 138 typedef struct ldap LDAP; /* opaque connection handle */ 139 typedef struct ldapmsg LDAPMessage; /* opaque result/entry handle */ 140 141 #define NULLMSG ((LDAPMessage *)0) 142 143 /* structure representing an LDAP modification */ 144 typedef struct ldapmod { 145 int mod_op; /* kind of mod + form of values */ 146 #define LDAP_MOD_ADD 0x00 147 #define LDAP_MOD_DELETE 0x01 148 #define LDAP_MOD_REPLACE 0x02 149 #define LDAP_MOD_BVALUES 0x80 150 char *mod_type; /* attribute name to modify */ 151 union mod_vals_u { 152 char **modv_strvals; 153 struct berval **modv_bvals; 154 } mod_vals; /* values to add/delete/replace */ 155 #define mod_values mod_vals.modv_strvals 156 #define mod_bvalues mod_vals.modv_bvals 157 } LDAPMod; 158 159 160 /* 161 * structure for holding ldapv3 controls 162 */ 163 typedef struct ldapcontrol { 164 char *ldctl_oid; 165 struct berval ldctl_value; 166 char ldctl_iscritical; 167 } LDAPControl; 168 169 170 /* 171 * LDAP API information. Can be retrieved by using a sequence like: 172 * 173 * LDAPAPIInfo ldai; 174 * ldai.ldapai_info_version = LDAP_API_INFO_VERSION; 175 * if ( ldap_get_option( NULL, LDAP_OPT_API_INFO, &ldia ) == 0 ) ... 176 */ 177 #define LDAP_API_INFO_VERSION 1 178 typedef struct ldapapiinfo { 179 int ldapai_info_version; /* version of this struct (1) */ 180 int ldapai_api_version; /* revision of API supported */ 181 int ldapai_protocol_version; /* highest LDAP version supported */ 182 char **ldapai_extensions; /* names of API extensions */ 183 char *ldapai_vendor_name; /* name of supplier */ 184 int ldapai_vendor_version; /* supplier-specific version times 100 */ 185 } LDAPAPIInfo; 186 187 188 /* 189 * LDAP API extended features info. Can be retrieved by using a sequence like: 190 * 191 * LDAPAPIFeatureInfo ldfi; 192 * ldfi.ldapaif_info_version = LDAP_FEATURE_INFO_VERSION; 193 * ldfi.ldapaif_name = "VIRTUAL_LIST_VIEW"; 194 * if ( ldap_get_option( NULL, LDAP_OPT_API_FEATURE_INFO, &ldfi ) == 0 ) ... 195 */ 196 #define LDAP_FEATURE_INFO_VERSION 1 197 typedef struct ldap_apifeature_info { 198 int ldapaif_info_version; /* version of this struct (1) */ 199 char *ldapaif_name; /* name of supported feature */ 200 int ldapaif_version; /* revision of supported feature */ 201 } LDAPAPIFeatureInfo; 202 203 204 /* possible result types a server can return */ 205 #define LDAP_RES_BIND 0x61 /* 97 */ 206 #define LDAP_RES_SEARCH_ENTRY 0x64 /* 100 */ 207 #define LDAP_RES_SEARCH_RESULT 0x65 /* 101 */ 208 #define LDAP_RES_MODIFY 0x67 /* 103 */ 209 #define LDAP_RES_ADD 0x69 /* 105 */ 210 #define LDAP_RES_DELETE 0x6b /* 107 */ 211 #define LDAP_RES_MODDN 0x6d /* 109 */ 212 #define LDAP_RES_COMPARE 0x6f /* 111 */ 213 #define LDAP_RES_SEARCH_REFERENCE 0x73 /* 115 */ 214 #define LDAP_RES_EXTENDED 0x78 /* 120 */ 215 216 /* Special values for ldap_result() "msgid" parameter */ 217 #define LDAP_RES_ANY (-1) 218 #define LDAP_RES_UNSOLICITED 0 219 220 /* built-in SASL methods */ 221 #define LDAP_SASL_SIMPLE 0 /* special value used for simple bind */ 222 #define LDAP_SASL_EXTERNAL "EXTERNAL" /* TLS/SSL extension */ 223 224 #ifdef _SOLARIS_SDK 225 #define LDAP_SASL_CRAM_MD5 "CRAM-MD5" 226 #define LDAP_SASL_DIGEST_MD5 "DIGEST-MD5" 227 #define LDAP_SASL_BIND_INPROGRESS 0x0e /* for backward compatibility */ 228 #endif 229 230 /* search scopes */ 231 #define LDAP_SCOPE_BASE 0x00 232 #define LDAP_SCOPE_ONELEVEL 0x01 233 #define LDAP_SCOPE_SUBTREE 0x02 234 235 /* alias dereferencing */ 236 #define LDAP_DEREF_NEVER 0 237 #define LDAP_DEREF_SEARCHING 1 238 #define LDAP_DEREF_FINDING 2 239 #define LDAP_DEREF_ALWAYS 3 240 241 /* predefined size/time limits */ 242 #define LDAP_NO_LIMIT 0 243 244 /* allowed values for "all" ldap_result() parameter */ 245 #define LDAP_MSG_ONE 0 246 #define LDAP_MSG_ALL 1 247 #define LDAP_MSG_RECEIVED 2 248 249 /* possible error codes we can be returned */ 250 #define LDAP_SUCCESS 0x00 /* 0 */ 251 #define LDAP_OPERATIONS_ERROR 0x01 /* 1 */ 252 #define LDAP_PROTOCOL_ERROR 0x02 /* 2 */ 253 #define LDAP_TIMELIMIT_EXCEEDED 0x03 /* 3 */ 254 #define LDAP_SIZELIMIT_EXCEEDED 0x04 /* 4 */ 255 #define LDAP_COMPARE_FALSE 0x05 /* 5 */ 256 #define LDAP_COMPARE_TRUE 0x06 /* 6 */ 257 #define LDAP_STRONG_AUTH_NOT_SUPPORTED 0x07 /* 7 */ 258 #define LDAP_STRONG_AUTH_REQUIRED 0x08 /* 8 */ 259 #define LDAP_PARTIAL_RESULTS 0x09 /* 9 (UMich LDAPv2 extn) */ 260 #define LDAP_REFERRAL 0x0a /* 10 - LDAPv3 */ 261 #define LDAP_ADMINLIMIT_EXCEEDED 0x0b /* 11 - LDAPv3 */ 262 #define LDAP_UNAVAILABLE_CRITICAL_EXTENSION 0x0c /* 12 - LDAPv3 */ 263 #define LDAP_CONFIDENTIALITY_REQUIRED 0x0d /* 13 */ 264 #define LDAP_SASL_BIND_IN_PROGRESS 0x0e /* 14 - LDAPv3 */ 265 266 #define LDAP_NO_SUCH_ATTRIBUTE 0x10 /* 16 */ 267 #define LDAP_UNDEFINED_TYPE 0x11 /* 17 */ 268 #define LDAP_INAPPROPRIATE_MATCHING 0x12 /* 18 */ 269 #define LDAP_CONSTRAINT_VIOLATION 0x13 /* 19 */ 270 #define LDAP_TYPE_OR_VALUE_EXISTS 0x14 /* 20 */ 271 #define LDAP_INVALID_SYNTAX 0x15 /* 21 */ 272 273 #define LDAP_NO_SUCH_OBJECT 0x20 /* 32 */ 274 #define LDAP_ALIAS_PROBLEM 0x21 /* 33 */ 275 #define LDAP_INVALID_DN_SYNTAX 0x22 /* 34 */ 276 #define LDAP_IS_LEAF 0x23 /* 35 (not used in LDAPv3) */ 277 #define LDAP_ALIAS_DEREF_PROBLEM 0x24 /* 36 */ 278 279 #define NAME_ERROR(n) ((n & 0xf0) == 0x20) 280 281 #define LDAP_INAPPROPRIATE_AUTH 0x30 /* 48 */ 282 #define LDAP_INVALID_CREDENTIALS 0x31 /* 49 */ 283 #define LDAP_INSUFFICIENT_ACCESS 0x32 /* 50 */ 284 #define LDAP_BUSY 0x33 /* 51 */ 285 #define LDAP_UNAVAILABLE 0x34 /* 52 */ 286 #define LDAP_UNWILLING_TO_PERFORM 0x35 /* 53 */ 287 #define LDAP_LOOP_DETECT 0x36 /* 54 */ 288 289 #define LDAP_SORT_CONTROL_MISSING 0x3C /* 60 (server side sort extn) */ 290 #define LDAP_INDEX_RANGE_ERROR 0x3D /* 61 (VLV extn) */ 291 292 #define LDAP_NAMING_VIOLATION 0x40 /* 64 */ 293 #define LDAP_OBJECT_CLASS_VIOLATION 0x41 /* 65 */ 294 #define LDAP_NOT_ALLOWED_ON_NONLEAF 0x42 /* 66 */ 295 #define LDAP_NOT_ALLOWED_ON_RDN 0x43 /* 67 */ 296 #define LDAP_ALREADY_EXISTS 0x44 /* 68 */ 297 #define LDAP_NO_OBJECT_CLASS_MODS 0x45 /* 69 */ 298 #define LDAP_RESULTS_TOO_LARGE 0x46 /* 70 - CLDAP */ 299 #define LDAP_AFFECTS_MULTIPLE_DSAS 0x47 /* 71 */ 300 301 #define LDAP_OTHER 0x50 /* 80 */ 302 #define LDAP_SERVER_DOWN 0x51 /* 81 */ 303 #define LDAP_LOCAL_ERROR 0x52 /* 82 */ 304 #define LDAP_ENCODING_ERROR 0x53 /* 83 */ 305 #define LDAP_DECODING_ERROR 0x54 /* 84 */ 306 #define LDAP_TIMEOUT 0x55 /* 85 */ 307 #define LDAP_AUTH_UNKNOWN 0x56 /* 86 */ 308 #define LDAP_FILTER_ERROR 0x57 /* 87 */ 309 #define LDAP_USER_CANCELLED 0x58 /* 88 */ 310 #define LDAP_PARAM_ERROR 0x59 /* 89 */ 311 #define LDAP_NO_MEMORY 0x5a /* 90 */ 312 #define LDAP_CONNECT_ERROR 0x5b /* 91 */ 313 #define LDAP_NOT_SUPPORTED 0x5c /* 92 - LDAPv3 */ 314 #define LDAP_CONTROL_NOT_FOUND 0x5d /* 93 - LDAPv3 */ 315 #define LDAP_NO_RESULTS_RETURNED 0x5e /* 94 - LDAPv3 */ 316 #define LDAP_MORE_RESULTS_TO_RETURN 0x5f /* 95 - LDAPv3 */ 317 #define LDAP_CLIENT_LOOP 0x60 /* 96 - LDAPv3 */ 318 #define LDAP_REFERRAL_LIMIT_EXCEEDED 0x61 /* 97 - LDAPv3 */ 319 320 /* 321 * LDAPv3 unsolicited notification messages we know about 322 */ 323 #define LDAP_NOTICE_OF_DISCONNECTION "1.3.6.1.4.1.1466.20036" 324 325 /* 326 * LDAPv3 server controls we know about 327 */ 328 #define LDAP_CONTROL_MANAGEDSAIT "2.16.840.1.113730.3.4.2" 329 #define LDAP_CONTROL_SORTREQUEST "1.2.840.113556.1.4.473" 330 #define LDAP_CONTROL_SORTRESPONSE "1.2.840.113556.1.4.474" 331 #define LDAP_CONTROL_PERSISTENTSEARCH "2.16.840.1.113730.3.4.3" 332 #define LDAP_CONTROL_ENTRYCHANGE "2.16.840.1.113730.3.4.7" 333 #define LDAP_CONTROL_VLVREQUEST "2.16.840.1.113730.3.4.9" 334 #define LDAP_CONTROL_VLVRESPONSE "2.16.840.1.113730.3.4.10" 335 #define LDAP_CONTROL_PROXYAUTH "2.16.840.1.113730.3.4.12" 336 /* version 1 */ 337 #define LDAP_CONTROL_PROXIEDAUTH "2.16.840.1.113730.3.4.18" 338 /* version 2 */ 339 340 #ifdef _SOLARIS_SDK 341 /* 342 * Simple Page control OID 343 */ 344 #define LDAP_CONTROL_SIMPLE_PAGE "1.2.840.113556.1.4.319" 345 346 /* 347 * Begin LDAP Display Template Definitions 348 */ 349 #define LDAP_TEMPLATE_VERSION 1 350 351 /* 352 * general types of items (confined to most significant byte) 353 */ 354 #define LDAP_SYN_TYPE_TEXT 0x01000000L 355 #define LDAP_SYN_TYPE_IMAGE 0x02000000L 356 #define LDAP_SYN_TYPE_BOOLEAN 0x04000000L 357 #define LDAP_SYN_TYPE_BUTTON 0x08000000L 358 #define LDAP_SYN_TYPE_ACTION 0x10000000L 359 360 /* 361 * syntax options (confined to second most significant byte) 362 */ 363 #define LDAP_SYN_OPT_DEFER 0x00010000L 364 365 /* 366 * display template item syntax ids (defined by common agreement) 367 * these are the valid values for the ti_syntaxid of the tmplitem 368 * struct (defined below). A general type is encoded in the 369 * most-significant 8 bits, and some options are encoded in the next 370 * 8 bits. The lower 16 bits are reserved for the distinct types. 371 */ 372 #define LDAP_SYN_CASEIGNORESTR (1 | LDAP_SYN_TYPE_TEXT) 373 #define LDAP_SYN_MULTILINESTR (2 | LDAP_SYN_TYPE_TEXT) 374 #define LDAP_SYN_DN (3 | LDAP_SYN_TYPE_TEXT) 375 #define LDAP_SYN_BOOLEAN (4 | LDAP_SYN_TYPE_BOOLEAN) 376 #define LDAP_SYN_JPEGIMAGE (5 | LDAP_SYN_TYPE_IMAGE) 377 #define LDAP_SYN_JPEGBUTTON (6 | LDAP_SYN_TYPE_BUTTON | LDAP_SYN_OPT_DEFER) 378 #define LDAP_SYN_FAXIMAGE (7 | LDAP_SYN_TYPE_IMAGE) 379 #define LDAP_SYN_FAXBUTTON (8 | LDAP_SYN_TYPE_BUTTON | LDAP_SYN_OPT_DEFER) 380 #define LDAP_SYN_AUDIOBUTTON (9 | LDAP_SYN_TYPE_BUTTON | LDAP_SYN_OPT_DEFER) 381 #define LDAP_SYN_TIME (10 | LDAP_SYN_TYPE_TEXT) 382 #define LDAP_SYN_DATE (11 | LDAP_SYN_TYPE_TEXT) 383 #define LDAP_SYN_LABELEDURL (12 | LDAP_SYN_TYPE_TEXT) 384 #define LDAP_SYN_SEARCHACTION (13 | LDAP_SYN_TYPE_ACTION) 385 #define LDAP_SYN_LINKACTION (14 | LDAP_SYN_TYPE_ACTION) 386 #define LDAP_SYN_ADDDNACTION (15 | LDAP_SYN_TYPE_ACTION) 387 #define LDAP_SYN_VERIFYDNACTION (16 | LDAP_SYN_TYPE_ACTION) 388 #define LDAP_SYN_RFC822ADDR (17 | LDAP_SYN_TYPE_TEXT) 389 390 /* 391 * handy macros 392 */ 393 #define LDAP_GET_SYN_TYPE(syid) ((syid) & 0xFF000000UL) 394 #define LDAP_GET_SYN_OPTIONS(syid) ((syid) & 0x00FF0000UL) 395 396 397 /* 398 * display options for output routines (used by entry2text and friends) 399 */ 400 /* 401 * use calculated label width (based on length of longest label in 402 * template) instead of contant width 403 */ 404 #define LDAP_DISP_OPT_AUTOLABELWIDTH 0x00000001L 405 #define LDAP_DISP_OPT_HTMLBODYONLY 0x00000002L 406 407 /* 408 * perform search actions (applies to ldap_entry2text_search only) 409 */ 410 #define LDAP_DISP_OPT_DOSEARCHACTIONS 0x00000002L 411 412 /* 413 * include additional info. relevant to "non leaf" entries only 414 * used by ldap_entry2html and ldap_entry2html_search to include "Browse" 415 * and "Move Up" HREFs 416 */ 417 #define LDAP_DISP_OPT_NONLEAF 0x00000004L 418 419 /* 420 * display template item options (may not apply to all types) 421 * if this bit is set in ti_options, it applies. 422 */ 423 #define LDAP_DITEM_OPT_READONLY 0x00000001L 424 #define LDAP_DITEM_OPT_SORTVALUES 0x00000002L 425 #define LDAP_DITEM_OPT_SINGLEVALUED 0x00000004L 426 #define LDAP_DITEM_OPT_HIDEIFEMPTY 0x00000008L 427 #define LDAP_DITEM_OPT_VALUEREQUIRED 0x00000010L 428 #define LDAP_DITEM_OPT_HIDEIFFALSE 0x00000020L /* booleans only */ 429 430 #endif /* _SOLARIS_SDK */ 431 432 /* Authentication request and response controls */ 433 #define LDAP_CONTROL_AUTH_REQUEST "2.16.840.1.113730.3.4.16" 434 #define LDAP_CONTROL_AUTH_RESPONSE "2.16.840.1.113730.3.4.15" 435 436 /* Password information sent back to client */ 437 #define LDAP_CONTROL_PWEXPIRED "2.16.840.1.113730.3.4.4" 438 #define LDAP_CONTROL_PWEXPIRING "2.16.840.1.113730.3.4.5" 439 440 441 /* 442 * Client controls we know about 443 */ 444 #define LDAP_CONTROL_REFERRALS "1.2.840.113556.1.4.616" 445 446 447 /* 448 * LDAP_API macro definition: 449 */ 450 #ifndef LDAP_API 451 #define LDAP_API(rt) rt 452 #endif /* LDAP_API */ 453 454 #ifdef _SOLARIS_SDK 455 /* Simple Page Control functions for Solaris SDK */ 456 int ldap_create_page_control(LDAP *ld, unsigned int pagesize, 457 struct berval *cookie, char isCritical, LDAPControl **output); 458 int ldap_parse_page_control(LDAP *ld, LDAPControl **controls, 459 unsigned int *totalcount, struct berval **cookie); 460 461 /* CRAM-MD5 functions */ 462 int ldap_sasl_cram_md5_bind_s(LDAP *ld, char *dn, 463 struct berval *cred, LDAPControl **serverctrls, 464 LDAPControl **clientctrls); 465 /* DIGEST-MD5 Function */ 466 int ldap_x_sasl_digest_md5_bind_s(LDAP *ld, char *dn, 467 struct berval *cred, LDAPControl **serverctrls, 468 LDAPControl **clientctrls); 469 int ldap_x_sasl_digest_md5_bind(LDAP *ld, char *dn, 470 struct berval *cred, LDAPControl **serverctrls, 471 LDAPControl **clientctrls, struct timeval *timeout, 472 LDAPMessage **result); 473 474 #endif /* _SOLARIS_SDK */ 475 476 LDAP_API(LDAP *) LDAP_CALL ldap_open(const char *host, int port); 477 LDAP_API(LDAP *) LDAP_CALL ldap_init(const char *defhost, int defport); 478 int LDAP_CALL ldap_set_option(LDAP *ld, int option, 479 const void *optdata); 480 int LDAP_CALL ldap_get_option(LDAP *ld, int option, void *optdata); 481 int LDAP_CALL ldap_unbind(LDAP *ld); 482 int LDAP_CALL ldap_unbind_s(LDAP *ld); 483 484 /* 485 * perform ldap operations and obtain results 486 */ 487 int LDAP_CALL ldap_abandon(LDAP *ld, int msgid); 488 int LDAP_CALL ldap_add(LDAP *ld, const char *dn, LDAPMod **attrs); 489 int LDAP_CALL ldap_add_s(LDAP *ld, const char *dn, LDAPMod **attrs); 490 int LDAP_CALL ldap_simple_bind(LDAP *ld, const char *who, 491 const char *passwd); 492 int LDAP_CALL ldap_simple_bind_s(LDAP *ld, const char *who, 493 const char *passwd); 494 int LDAP_CALL ldap_modify(LDAP *ld, const char *dn, LDAPMod **mods); 495 int LDAP_CALL ldap_modify_s(LDAP *ld, const char *dn, 496 LDAPMod **mods); 497 int LDAP_CALL ldap_modrdn(LDAP *ld, const char *dn, 498 const char *newrdn); 499 int LDAP_CALL ldap_modrdn_s(LDAP *ld, const char *dn, 500 const char *newrdn); 501 502 /* The following 2 functions are deprecated */ 503 int LDAP_CALL ldap_modrdn2(LDAP *ld, const char *dn, 504 const char *newrdn, int deleteoldrdn); 505 int LDAP_CALL ldap_modrdn2_s(LDAP *ld, const char *dn, 506 const char *newrdn, int deleteoldrdn); 507 508 int LDAP_CALL ldap_compare(LDAP *ld, const char *dn, 509 const char *attr, const char *value); 510 int LDAP_CALL ldap_compare_s(LDAP *ld, const char *dn, 511 const char *attr, const char *value); 512 int LDAP_CALL ldap_delete(LDAP *ld, const char *dn); 513 int LDAP_CALL ldap_delete_s(LDAP *ld, const char *dn); 514 int LDAP_CALL ldap_search(LDAP *ld, const char *base, int scope, 515 const char *filter, char **attrs, int attrsonly); 516 int LDAP_CALL ldap_search_s(LDAP *ld, const char *base, int scope, 517 const char *filter, char **attrs, int attrsonly, LDAPMessage **res); 518 int LDAP_CALL ldap_search_st(LDAP *ld, const char *base, int scope, 519 const char *filter, char **attrs, int attrsonly, 520 struct timeval *timeout, LDAPMessage **res); 521 int LDAP_CALL ldap_result(LDAP *ld, int msgid, int all, 522 struct timeval *timeout, LDAPMessage **result); 523 int LDAP_CALL ldap_msgfree(LDAPMessage *lm); 524 int LDAP_CALL ldap_msgid(LDAPMessage *lm); 525 int LDAP_CALL ldap_msgtype(LDAPMessage *lm); 526 527 528 /* 529 * Routines to parse/deal with results and errors returned 530 */ 531 int LDAP_CALL ldap_result2error(LDAP *ld, LDAPMessage *r, 532 int freeit); 533 char *LDAP_CALL ldap_err2string(int err); 534 LDAP_API(void) LDAP_CALL ldap_perror(LDAP *ld, const char *s); 535 LDAP_API(LDAPMessage *) LDAP_CALL ldap_first_entry(LDAP *ld, 536 LDAPMessage *chain); 537 LDAP_API(LDAPMessage *) LDAP_CALL ldap_next_entry(LDAP *ld, 538 LDAPMessage *entry); 539 int LDAP_CALL ldap_count_entries(LDAP *ld, LDAPMessage *chain); 540 char *LDAP_CALL ldap_get_dn(LDAP *ld, LDAPMessage *entry); 541 char *LDAP_CALL ldap_dn2ufn(const char *dn); 542 char **LDAP_CALL ldap_explode_dn(const char *dn, 543 const int notypes); 544 char **LDAP_CALL ldap_explode_rdn(const char *rdn, 545 const int notypes); 546 char *LDAP_CALL ldap_first_attribute(LDAP *ld, LDAPMessage *entry, 547 BerElement **ber); 548 char *LDAP_CALL ldap_next_attribute(LDAP *ld, LDAPMessage *entry, 549 BerElement *ber); 550 551 /* The following function is deprecated */ 552 LDAP_API(void) LDAP_CALL ldap_ber_free(BerElement *ber, int freebuf); 553 554 char **LDAP_CALL ldap_get_values(LDAP *ld, LDAPMessage *entry, 555 const char *target); 556 struct berval **LDAP_CALL ldap_get_values_len(LDAP *ld, 557 LDAPMessage *entry, const char *target); 558 int LDAP_CALL ldap_count_values(char **vals); 559 int LDAP_CALL ldap_count_values_len(struct berval **vals); 560 LDAP_API(void) LDAP_CALL ldap_value_free(char **vals); 561 LDAP_API(void) LDAP_CALL ldap_value_free_len(struct berval **vals); 562 LDAP_API(void) LDAP_CALL ldap_memfree(void *p); 563 564 565 /* 566 * LDAPv3 extended operation calls 567 */ 568 /* 569 * Note: all of the new asynchronous calls return an LDAP error code, 570 * not a message id. A message id is returned via the int *msgidp 571 * parameter (usually the last parameter) if appropriate. 572 */ 573 int LDAP_CALL ldap_abandon_ext(LDAP *ld, int msgid, 574 LDAPControl **serverctrls, LDAPControl **clientctrls); 575 int LDAP_CALL ldap_add_ext(LDAP *ld, const char *dn, LDAPMod **attrs, 576 LDAPControl **serverctrls, LDAPControl **clientctrls, int *msgidp); 577 int LDAP_CALL ldap_add_ext_s(LDAP *ld, const char *dn, 578 LDAPMod **attrs, LDAPControl **serverctrls, LDAPControl **clientctrls); 579 int LDAP_CALL ldap_sasl_bind(LDAP *ld, const char *dn, 580 const char *mechanism, const struct berval *cred, 581 LDAPControl **serverctrls, LDAPControl **clientctrls, int *msgidp); 582 int LDAP_CALL ldap_sasl_bind_s(LDAP *ld, const char *dn, 583 const char *mechanism, const struct berval *cred, 584 LDAPControl **serverctrls, LDAPControl **clientctrls, 585 struct berval **servercredp); 586 int LDAP_CALL ldap_modify_ext(LDAP *ld, const char *dn, 587 LDAPMod **mods, LDAPControl **serverctrls, LDAPControl **clientctrls, 588 int *msgidp); 589 int LDAP_CALL ldap_modify_ext_s(LDAP *ld, const char *dn, 590 LDAPMod **mods, LDAPControl **serverctrls, LDAPControl **clientctrls); 591 int LDAP_CALL ldap_rename(LDAP *ld, const char *dn, 592 const char *newrdn, const char *newparent, int deleteoldrdn, 593 LDAPControl **serverctrls, LDAPControl **clientctrls, int *msgidp); 594 int LDAP_CALL ldap_rename_s(LDAP *ld, const char *dn, 595 const char *newrdn, const char *newparent, int deleteoldrdn, 596 LDAPControl **serverctrls, LDAPControl **clientctrls); 597 int LDAP_CALL ldap_compare_ext(LDAP *ld, const char *dn, 598 const char *attr, const struct berval *bvalue, 599 LDAPControl **serverctrls, LDAPControl **clientctrls, int *msgidp); 600 int LDAP_CALL ldap_compare_ext_s(LDAP *ld, const char *dn, 601 const char *attr, const struct berval *bvalue, 602 LDAPControl **serverctrls, LDAPControl **clientctrls); 603 int LDAP_CALL ldap_delete_ext(LDAP *ld, const char *dn, 604 LDAPControl **serverctrls, LDAPControl **clientctrls, int *msgidp); 605 int LDAP_CALL ldap_delete_ext_s(LDAP *ld, const char *dn, 606 LDAPControl **serverctrls, LDAPControl **clientctrls); 607 int LDAP_CALL ldap_search_ext(LDAP *ld, const char *base, 608 int scope, const char *filter, char **attrs, int attrsonly, 609 LDAPControl **serverctrls, LDAPControl **clientctrls, 610 struct timeval *timeoutp, int sizelimit, int *msgidp); 611 int LDAP_CALL ldap_search_ext_s(LDAP *ld, const char *base, 612 int scope, const char *filter, char **attrs, int attrsonly, 613 LDAPControl **serverctrls, LDAPControl **clientctrls, 614 struct timeval *timeoutp, int sizelimit, LDAPMessage **res); 615 int LDAP_CALL ldap_extended_operation(LDAP *ld, 616 const char *requestoid, const struct berval *requestdata, 617 LDAPControl **serverctrls, LDAPControl **clientctrls, int *msgidp); 618 int LDAP_CALL ldap_extended_operation_s(LDAP *ld, 619 const char *requestoid, const struct berval *requestdata, 620 LDAPControl **serverctrls, LDAPControl **clientctrls, 621 char **retoidp, struct berval **retdatap); 622 int LDAP_CALL ldap_unbind_ext(LDAP *ld, LDAPControl **serverctrls, 623 LDAPControl **clientctrls); 624 625 626 /* 627 * LDAPv3 extended parsing / result handling calls 628 */ 629 int LDAP_CALL ldap_parse_sasl_bind_result(LDAP *ld, 630 LDAPMessage *res, struct berval **servercredp, int freeit); 631 int LDAP_CALL ldap_parse_result(LDAP *ld, LDAPMessage *res, 632 int *errcodep, char **matcheddnp, char **errmsgp, char ***referralsp, 633 LDAPControl ***serverctrlsp, int freeit); 634 int LDAP_CALL ldap_parse_extended_result(LDAP *ld, LDAPMessage *res, 635 char **retoidp, struct berval **retdatap, int freeit); 636 LDAP_API(LDAPMessage *) LDAP_CALL ldap_first_message(LDAP *ld, 637 LDAPMessage *res); 638 LDAP_API(LDAPMessage *) LDAP_CALL ldap_next_message(LDAP *ld, 639 LDAPMessage *msg); 640 int LDAP_CALL ldap_count_messages(LDAP *ld, LDAPMessage *res); 641 LDAP_API(LDAPMessage *) LDAP_CALL ldap_first_reference(LDAP *ld, 642 LDAPMessage *res); 643 LDAP_API(LDAPMessage *) LDAP_CALL ldap_next_reference(LDAP *ld, 644 LDAPMessage *ref); 645 int LDAP_CALL ldap_count_references(LDAP *ld, LDAPMessage *res); 646 int LDAP_CALL ldap_parse_reference(LDAP *ld, LDAPMessage *ref, 647 char ***referralsp, LDAPControl ***serverctrlsp, int freeit); 648 int LDAP_CALL ldap_get_entry_controls(LDAP *ld, LDAPMessage *entry, 649 LDAPControl ***serverctrlsp); 650 LDAP_API(void) LDAP_CALL ldap_control_free(LDAPControl *ctrl); 651 LDAP_API(void) LDAP_CALL ldap_controls_free(LDAPControl **ctrls); 652 653 #ifdef _SOLARIS_SDK 654 char ** ldap_get_reference_urls(LDAP *ld, LDAPMessage *res); 655 #endif 656 657 LDAP_API(void) LDAP_CALL ldap_add_result_entry( 658 LDAPMessage **list, LDAPMessage *e); 659 LDAP_API(LDAPMessage *) LDAP_CALL ldap_delete_result_entry( 660 LDAPMessage **list, LDAPMessage *e); 661 662 663 /* End of core standard C LDAP API definitions */ 664 665 /* 666 * Server side sorting of search results (an LDAPv3 extension -- 667 * LDAP_API_FEATURE_SERVER_SIDE_SORT) 668 */ 669 typedef struct LDAPsortkey { /* structure for a sort-key */ 670 char *sk_attrtype; 671 char *sk_matchruleoid; 672 int sk_reverseorder; 673 } LDAPsortkey; 674 675 int LDAP_CALL ldap_create_sort_control(LDAP *ld, 676 LDAPsortkey **sortKeyList, const char ctl_iscritical, 677 LDAPControl **ctrlp); 678 int LDAP_CALL ldap_parse_sort_control(LDAP *ld, 679 LDAPControl **ctrls, unsigned long *result, char **attribute); 680 681 LDAP_API(void) LDAP_CALL ldap_free_sort_keylist(LDAPsortkey **sortKeyList); 682 int LDAP_CALL ldap_create_sort_keylist(LDAPsortkey ***sortKeyList, 683 const char *string_rep); 684 685 686 /* 687 * Virtual list view (an LDAPv3 extension -- LDAP_API_FEATURE_VIRTUAL_LIST_VIEW) 688 */ 689 /* 690 * structure that describes a VirtualListViewRequest control. 691 * note that ldvlist_index and ldvlist_size are only relevant to 692 * ldap_create_virtuallist_control() if ldvlist_attrvalue is NULL. 693 */ 694 typedef struct ldapvirtuallist { 695 unsigned long ldvlist_before_count; /* # entries before target */ 696 unsigned long ldvlist_after_count; /* # entries after target */ 697 char *ldvlist_attrvalue; /* jump to this value */ 698 unsigned long ldvlist_index; /* list offset */ 699 unsigned long ldvlist_size; /* number of items in vlist */ 700 void *ldvlist_extradata; /* for use by application */ 701 } LDAPVirtualList; 702 703 /* 704 * VLV functions: 705 */ 706 int LDAP_CALL ldap_create_virtuallist_control(LDAP *ld, 707 LDAPVirtualList *ldvlistp, LDAPControl **ctrlp); 708 709 int LDAP_CALL ldap_parse_virtuallist_control(LDAP *ld, 710 LDAPControl **ctrls, unsigned long *target_posp, 711 unsigned long *list_sizep, int *errcodep); 712 713 714 /* 715 * Routines for creating persistent search controls and for handling 716 * "entry changed notification" controls (an LDAPv3 extension -- 717 * LDAP_API_FEATURE_PERSISTENT_SEARCH) 718 */ 719 #define LDAP_CHANGETYPE_ADD 1 720 #define LDAP_CHANGETYPE_DELETE 2 721 #define LDAP_CHANGETYPE_MODIFY 4 722 #define LDAP_CHANGETYPE_MODDN 8 723 #define LDAP_CHANGETYPE_ANY (1|2|4|8) 724 int LDAP_CALL ldap_create_persistentsearch_control(LDAP *ld, 725 int changetypes, int changesonly, int return_echg_ctls, 726 char ctl_iscritical, LDAPControl **ctrlp); 727 int LDAP_CALL ldap_parse_entrychange_control(LDAP *ld, 728 LDAPControl **ctrls, int *chgtypep, char **prevdnp, 729 int *chgnumpresentp, ber_int_t *chgnump); 730 731 732 /* 733 * Routines for creating Proxied Authorization controls (an LDAPv3 734 * extension -- LDAP_API_FEATURE_PROXY_AUTHORIZATION) 735 * ldap_create_proxyauth_control() is for the old (version 1) control. 736 * ldap_create_proxiedauth_control() is for the newer (version 2) control. 737 * Version 1 is supported by iPlanet Directory Server 4.1 and later. 738 * Version 2 is supported by iPlanet Directory Server 5.0 and later. 739 */ 740 int LDAP_CALL ldap_create_proxyauth_control(LDAP *ld, 741 const char *dn, const char ctl_iscritical, LDAPControl **ctrlp); 742 int LDAP_CALL ldap_create_proxiedauth_control(LDAP *ld, 743 const char *authzid, LDAPControl **ctrlp); 744 745 746 /* 747 * Functions to get and set LDAP error information (API extension -- 748 * LDAP_API_FEATURE_X_LDERRNO ) 749 */ 750 int LDAP_CALL ldap_get_lderrno(LDAP *ld, char **m, char **s); 751 int LDAP_CALL ldap_set_lderrno(LDAP *ld, int e, char *m, char *s); 752 753 754 /* 755 * LDAP URL functions and definitions (an API extension -- 756 * LDAP_API_FEATURE_X_URL_FUNCTIONS) 757 */ 758 /* 759 * types for ldap URL handling 760 */ 761 typedef struct ldap_url_desc { 762 char *lud_host; 763 int lud_port; 764 char *lud_dn; 765 char **lud_attrs; 766 int lud_scope; 767 char *lud_filter; 768 unsigned long lud_options; 769 #define LDAP_URL_OPT_SECURE 0x01 770 char *lud_string; /* for internal use only */ 771 } LDAPURLDesc; 772 773 #define NULLLDAPURLDESC ((LDAPURLDesc *)NULL) 774 775 /* 776 * possible errors returned by ldap_url_parse() 777 */ 778 #define LDAP_URL_ERR_NOTLDAP 1 /* URL doesn't begin with "ldap://" */ 779 #define LDAP_URL_ERR_NODN 2 /* URL has no DN (required) */ 780 #define LDAP_URL_ERR_BADSCOPE 3 /* URL scope string is invalid */ 781 #define LDAP_URL_ERR_MEM 4 /* can't allocate memory space */ 782 #define LDAP_URL_ERR_PARAM 5 /* bad parameter to an URL function */ 783 #define LDAP_URL_ERR_HOSTPORT 6 /* URL hostcode is invalid */ 784 785 /* 786 * URL functions: 787 */ 788 int LDAP_CALL ldap_is_ldap_url(const char *url); 789 int LDAP_CALL ldap_url_parse(const char *url, LDAPURLDesc **ludpp); 790 int LDAP_CALL ldap_url_parse_nodn(const char *url, LDAPURLDesc **ludpp); 791 LDAP_API(void) LDAP_CALL ldap_free_urldesc(LDAPURLDesc *ludp); 792 int LDAP_CALL ldap_url_search(LDAP *ld, const char *url, 793 int attrsonly); 794 int LDAP_CALL ldap_url_search_s(LDAP *ld, const char *url, 795 int attrsonly, LDAPMessage **res); 796 int LDAP_CALL ldap_url_search_st(LDAP *ld, const char *url, 797 int attrsonly, struct timeval *timeout, LDAPMessage **res); 798 799 #ifdef _SOLARIS_SDK 800 /* 801 * Additional URL functions plus Character set, Search Preference 802 * and Display Template functions moved from internal header files 803 */ 804 805 /* 806 * URL functions 807 */ 808 char *ldap_dns_to_url(LDAP *ld, char *dns_name, char *attrs, 809 char *scope, char *filter); 810 char *ldap_dn_to_url(LDAP *ld, char *dn, int nameparts); 811 812 /* 813 * Character set functions 814 */ 815 #ifdef STR_TRANSLATION 816 void ldap_set_string_translators(LDAP *ld, 817 BERTranslateProc encode_proc, BERTranslateProc decode_proc); 818 int ldap_translate_from_t61(LDAP *ld, char **bufp, 819 unsigned long *lenp, int free_input); 820 int ldap_translate_to_t61(LDAP *ld, char **bufp, 821 unsigned long *lenp, int free_input); 822 void ldap_enable_translation(LDAP *ld, LDAPMessage *entry, 823 int enable); 824 #ifdef LDAP_CHARSET_8859 825 int ldap_t61_to_8859(char **bufp, unsigned long *buflenp, 826 int free_input); 827 int ldap_8859_to_t61(char **bufp, unsigned long *buflenp, 828 int free_input); 829 #endif /* LDAP_CHARSET_8859 */ 830 #endif /* STR_TRANSLATION */ 831 832 /* 833 * Display Temple functions/structures 834 */ 835 /* 836 * display template item structure 837 */ 838 struct ldap_tmplitem { 839 unsigned long ti_syntaxid; 840 unsigned long ti_options; 841 char *ti_attrname; 842 char *ti_label; 843 char **ti_args; 844 struct ldap_tmplitem *ti_next_in_row; 845 struct ldap_tmplitem *ti_next_in_col; 846 void *ti_appdata; 847 }; 848 849 #define NULLTMPLITEM ((struct ldap_tmplitem *)0) 850 851 #define LDAP_SET_TMPLITEM_APPDATA(ti, datap) \ 852 (ti)->ti_appdata = (void *)(datap) 853 854 #define LDAP_GET_TMPLITEM_APPDATA(ti, type) \ 855 (type)((ti)->ti_appdata) 856 857 #define LDAP_IS_TMPLITEM_OPTION_SET(ti, option) \ 858 (((ti)->ti_options & option) != 0) 859 860 /* 861 * object class array structure 862 */ 863 struct ldap_oclist { 864 char **oc_objclasses; 865 struct ldap_oclist *oc_next; 866 }; 867 868 #define NULLOCLIST ((struct ldap_oclist *)0) 869 870 871 /* 872 * add defaults list 873 */ 874 struct ldap_adddeflist { 875 int ad_source; 876 #define LDAP_ADSRC_CONSTANTVALUE 1 877 #define LDAP_ADSRC_ADDERSDN 2 878 char *ad_attrname; 879 char *ad_value; 880 struct ldap_adddeflist *ad_next; 881 }; 882 883 #define NULLADLIST ((struct ldap_adddeflist *)0) 884 885 886 /* 887 * display template global options 888 * if this bit is set in dt_options, it applies. 889 */ 890 /* 891 * users should be allowed to try to add objects of these entries 892 */ 893 #define LDAP_DTMPL_OPT_ADDABLE 0x00000001L 894 895 /* 896 * users should be allowed to do "modify RDN" operation of these entries 897 */ 898 #define LDAP_DTMPL_OPT_ALLOWMODRDN 0x00000002L 899 900 /* 901 * this template is an alternate view, not a primary view 902 */ 903 #define LDAP_DTMPL_OPT_ALTVIEW 0x00000004L 904 905 906 /* 907 * display template structure 908 */ 909 struct ldap_disptmpl { 910 char *dt_name; 911 char *dt_pluralname; 912 char *dt_iconname; 913 unsigned long dt_options; 914 char *dt_authattrname; 915 char *dt_defrdnattrname; 916 char *dt_defaddlocation; 917 struct ldap_oclist *dt_oclist; 918 struct ldap_adddeflist *dt_adddeflist; 919 struct ldap_tmplitem *dt_items; 920 void *dt_appdata; 921 struct ldap_disptmpl *dt_next; 922 }; 923 924 #define NULLDISPTMPL ((struct ldap_disptmpl *)0) 925 926 #define LDAP_SET_DISPTMPL_APPDATA(dt, datap) \ 927 (dt)->dt_appdata = (void *)(datap) 928 929 #define LDAP_GET_DISPTMPL_APPDATA(dt, type) \ 930 (type)((dt)->dt_appdata) 931 932 #define LDAP_IS_DISPTMPL_OPTION_SET(dt, option) \ 933 (((dt)->dt_options & option) != 0) 934 935 #define LDAP_TMPL_ERR_VERSION 1 936 #define LDAP_TMPL_ERR_MEM 2 937 #define LDAP_TMPL_ERR_SYNTAX 3 938 #define LDAP_TMPL_ERR_FILE 4 939 940 /* 941 * buffer size needed for entry2text and vals2text 942 */ 943 #define LDAP_DTMPL_BUFSIZ 8192 944 945 typedef int (*writeptype)(void *writeparm, char *p, int len); 946 947 LDAP_API(int) LDAP_CALL ldap_init_templates(char *file, 948 struct ldap_disptmpl **tmpllistp); 949 950 LDAP_API(int) LDAP_CALL ldap_init_templates_buf(char *buf, long buflen, 951 struct ldap_disptmpl **tmpllistp); 952 953 LDAP_API(void) LDAP_CALL ldap_free_templates(struct ldap_disptmpl *tmpllist); 954 955 LDAP_API(struct ldap_disptmpl *) LDAP_CALL ldap_first_disptmpl( 956 struct ldap_disptmpl *tmpllist); 957 958 LDAP_API(struct ldap_disptmpl *) LDAP_CALL ldap_next_disptmpl( 959 struct ldap_disptmpl *tmpllist, 960 struct ldap_disptmpl *tmpl); 961 962 LDAP_API(struct ldap_disptmpl *) LDAP_CALL ldap_name2template(char *name, 963 struct ldap_disptmpl *tmpllist); 964 965 LDAP_API(struct ldap_disptmpl *) LDAP_CALL ldap_oc2template(char **oclist, 966 struct ldap_disptmpl *tmpllist); 967 968 LDAP_API(char **) LDAP_CALL ldap_tmplattrs(struct ldap_disptmpl *tmpl, 969 char **includeattrs, int exclude, 970 unsigned long syntaxmask); 971 972 LDAP_API(struct ldap_tmplitem *) LDAP_CALL ldap_first_tmplrow( 973 struct ldap_disptmpl *tmpl); 974 975 LDAP_API(struct ldap_tmplitem *) LDAP_CALL ldap_next_tmplrow( 976 struct ldap_disptmpl *tmpl, struct ldap_tmplitem *row); 977 978 LDAP_API(struct ldap_tmplitem *) LDAP_CALL ldap_first_tmplcol( 979 struct ldap_disptmpl *tmpl, struct ldap_tmplitem *row); 980 981 LDAP_API(struct ldap_tmplitem *) LDAP_CALL ldap_next_tmplcol( 982 struct ldap_disptmpl *tmpl, struct ldap_tmplitem *row, 983 struct ldap_tmplitem *col); 984 985 LDAP_API(int) LDAP_CALL ldap_entry2text(LDAP *ld, char *buf, LDAPMessage *entry, 986 struct ldap_disptmpl *tmpl, char **defattrs, char ***defvals, 987 writeptype writeproc, void *writeparm, char *eol, int rdncount, 988 unsigned long opts); 989 990 LDAP_API(int) LDAP_CALL ldap_vals2text(LDAP *ld, char *buf, char **vals, 991 char *label, int labelwidth, 992 unsigned long syntaxid, writeptype writeproc, void *writeparm, 993 char *eol, int rdncount); 994 995 LDAP_API(int) LDAP_CALL ldap_entry2text_search(LDAP *ld, char *dn, char *base, 996 LDAPMessage *entry, 997 struct ldap_disptmpl *tmpllist, char **defattrs, char ***defvals, 998 writeptype writeproc, void *writeparm, char *eol, int rdncount, 999 unsigned long opts); 1000 1001 LDAP_API(int) LDAP_CALL ldap_entry2html(LDAP *ld, char *buf, LDAPMessage *entry, 1002 struct ldap_disptmpl *tmpl, char **defattrs, char ***defvals, 1003 writeptype writeproc, void *writeparm, char *eol, int rdncount, 1004 unsigned long opts, char *urlprefix, char *base); 1005 1006 LDAP_API(int) LDAP_CALL ldap_vals2html(LDAP *ld, char *buf, char **vals, 1007 char *label, int labelwidth, 1008 unsigned long syntaxid, writeptype writeproc, void *writeparm, 1009 char *eol, int rdncount, char *urlprefix); 1010 1011 LDAP_API(int) LDAP_CALL ldap_entry2html_search(LDAP *ld, char *dn, char *base, 1012 LDAPMessage *entry, 1013 struct ldap_disptmpl *tmpllist, char **defattrs, char ***defvals, 1014 writeptype writeproc, void *writeparm, char *eol, int rdncount, 1015 unsigned long opts, char *urlprefix); 1016 1017 /* 1018 * Search Preference Definitions 1019 */ 1020 1021 struct ldap_searchattr { 1022 char *sa_attrlabel; 1023 char *sa_attr; 1024 /* max 32 matchtypes for now */ 1025 unsigned long sa_matchtypebitmap; 1026 char *sa_selectattr; 1027 char *sa_selecttext; 1028 struct ldap_searchattr *sa_next; 1029 }; 1030 1031 struct ldap_searchmatch { 1032 char *sm_matchprompt; 1033 char *sm_filter; 1034 struct ldap_searchmatch *sm_next; 1035 }; 1036 1037 struct ldap_searchobj { 1038 char *so_objtypeprompt; 1039 unsigned long so_options; 1040 char *so_prompt; 1041 short so_defaultscope; 1042 char *so_filterprefix; 1043 char *so_filtertag; 1044 char *so_defaultselectattr; 1045 char *so_defaultselecttext; 1046 struct ldap_searchattr *so_salist; 1047 struct ldap_searchmatch *so_smlist; 1048 struct ldap_searchobj *so_next; 1049 }; 1050 1051 #define NULLSEARCHOBJ ((struct ldap_searchobj *)0) 1052 1053 /* 1054 * global search object options 1055 */ 1056 #define LDAP_SEARCHOBJ_OPT_INTERNAL 0x00000001 1057 1058 #define LDAP_IS_SEARCHOBJ_OPTION_SET(so, option) \ 1059 (((so)->so_options & option) != 0) 1060 1061 #define LDAP_SEARCHPREF_VERSION_ZERO 0 1062 #define LDAP_SEARCHPREF_VERSION 1 1063 1064 #define LDAP_SEARCHPREF_ERR_VERSION 1 1065 #define LDAP_SEARCHPREF_ERR_MEM 2 1066 #define LDAP_SEARCHPREF_ERR_SYNTAX 3 1067 #define LDAP_SEARCHPREF_ERR_FILE 4 1068 1069 LDAP_API(int) LDAP_CALL ldap_init_searchprefs(char *file, 1070 struct ldap_searchobj **solistp); 1071 1072 LDAP_API(int) LDAP_CALL ldap_init_searchprefs_buf(char *buf, long buflen, 1073 struct ldap_searchobj **solistp); 1074 1075 LDAP_API(void) LDAP_CALL ldap_free_searchprefs(struct ldap_searchobj *solist); 1076 1077 LDAP_API(struct ldap_searchobj *) LDAP_CALL ldap_first_searchobj( 1078 struct ldap_searchobj *solist); 1079 1080 LDAP_API(struct ldap_searchobj *) LDAP_CALL ldap_next_searchobj( 1081 struct ldap_searchobj *sollist, struct ldap_searchobj *so); 1082 1083 /* 1084 * specific LDAP instantiations of BER types we know about 1085 */ 1086 1087 /* general stuff */ 1088 #define LDAP_TAG_MESSAGE 0x30 /* tag is 16 + constructed bit */ 1089 #define LDAP_TAG_MSGID 0x02 /* INTEGER */ 1090 #define LDAP_TAG_CONTROLS 0xa0 /* context specific + constructed + 0 */ 1091 #define LDAP_TAG_REFERRAL 0xa3 /* context specific + constructed + 3 */ 1092 #define LDAP_TAG_NEWSUPERIOR 0x80 /* context specific + primitive + 0 */ 1093 #define LDAP_TAG_SASL_RES_CREDS 0x87 /* context specific + primitive + 7 */ 1094 #define LDAP_TAG_VLV_BY_INDEX 0xa0 /* context specific + constructed + 0 */ 1095 #define LDAP_TAG_VLV_BY_VALUE 0x81 /* context specific + primitive + 1 */ 1096 /* tag for sort control */ 1097 #define LDAP_TAG_SK_MATCHRULE 0x80L /* context specific + primitive + 0 */ 1098 #define LDAP_TAG_SK_REVERSE 0x81L /* context specific + primitive + 1 */ 1099 #define LDAP_TAG_SR_ATTRTYPE 0x80L /* context specific + primitive + 0 */ 1100 1101 /* possible operations a client can invoke */ 1102 #define LDAP_REQ_BIND 0x60 /* application + constructed + 0 */ 1103 #define LDAP_REQ_UNBIND 0x42 /* application + primitive + 2 */ 1104 #define LDAP_REQ_SEARCH 0x63 /* application + constructed + 3 */ 1105 #define LDAP_REQ_MODIFY 0x66 /* application + constructed + 6 */ 1106 #define LDAP_REQ_ADD 0x68 /* application + constructed + 8 */ 1107 #define LDAP_REQ_DELETE 0x4a /* application + primitive + 10 */ 1108 #define LDAP_REQ_MODRDN 0x6c /* application + constructed + 12 */ 1109 #define LDAP_REQ_MODDN 0x6c /* application + constructed + 12 */ 1110 #define LDAP_REQ_RENAME 0x6c /* application + constructed + 12 */ 1111 #define LDAP_REQ_COMPARE 0x6e /* application + constructed + 14 */ 1112 #define LDAP_REQ_ABANDON 0x50 /* application + primitive + 16 */ 1113 #define LDAP_REQ_EXTENDED 0x77 /* application + constructed + 23 */ 1114 1115 /* U-M LDAP release 3.0 compatibility stuff */ 1116 #define LDAP_REQ_UNBIND_30 0x62 1117 #define LDAP_REQ_DELETE_30 0x6a 1118 #define LDAP_REQ_ABANDON_30 0x70 1119 1120 /* U-M LDAP 3.0 compatibility auth methods */ 1121 #define LDAP_AUTH_SIMPLE_30 0xa0 /* context specific + constructed */ 1122 #define LDAP_AUTH_KRBV41_30 0xa1 /* context specific + constructed */ 1123 #define LDAP_AUTH_KRBV42_30 0xa2 /* context specific + constructed */ 1124 1125 /* filter types */ 1126 #define LDAP_FILTER_AND 0xa0 /* context specific + constructed + 0 */ 1127 #define LDAP_FILTER_OR 0xa1 /* context specific + constructed + 1 */ 1128 #define LDAP_FILTER_NOT 0xa2 /* context specific + constructed + 2 */ 1129 #define LDAP_FILTER_EQUALITY 0xa3 /* context specific + constructed + 3 */ 1130 #define LDAP_FILTER_SUBSTRINGS 0xa4 /* context specific + constructed + 4 */ 1131 #define LDAP_FILTER_GE 0xa5 /* context specific + constructed + 5 */ 1132 #define LDAP_FILTER_LE 0xa6 /* context specific + constructed + 6 */ 1133 #define LDAP_FILTER_PRESENT 0x87 /* context specific + primitive + 7 */ 1134 #define LDAP_FILTER_APPROX 0xa8 /* context specific + constructed + 8 */ 1135 #define LDAP_FILTER_EXTENDED 0xa9 /* context specific + constructed + 0 */ 1136 1137 /* U-M LDAP 3.0 compatibility filter types */ 1138 #define LDAP_FILTER_PRESENT_30 0xa7 /* context specific + constructed */ 1139 1140 /* substring filter component types */ 1141 #define LDAP_SUBSTRING_INITIAL 0x80 /* context specific + primitive + 0 */ 1142 #define LDAP_SUBSTRING_ANY 0x81 /* context specific + primitive + 1 */ 1143 #define LDAP_SUBSTRING_FINAL 0x82 /* context specific + primitive + 2 */ 1144 1145 /* U-M LDAP 3.0 compatibility substring filter component types */ 1146 #define LDAP_SUBSTRING_INITIAL_30 0xa0 /* context specific */ 1147 #define LDAP_SUBSTRING_ANY_30 0xa1 /* context specific */ 1148 #define LDAP_SUBSTRING_FINAL_30 0xa2 /* context specific */ 1149 1150 #endif /* _SOLARIS_SDK */ 1151 1152 /* 1153 * Function to dispose of an array of LDAPMod structures (an API extension). 1154 * Warning: don't use this unless the mods array was allocated using the 1155 * same memory allocator as is being used by libldap. 1156 */ 1157 LDAP_API(void) LDAP_CALL ldap_mods_free(LDAPMod **mods, int freemods); 1158 1159 /* 1160 * Preferred language and get_lang_values (an API extension -- 1161 * LDAP_API_FEATURE_X_GETLANGVALUES) 1162 * 1163 * The following two APIs are deprecated 1164 */ 1165 1166 char **LDAP_CALL ldap_get_lang_values(LDAP *ld, LDAPMessage *entry, 1167 const char *target, char **type); 1168 struct berval **LDAP_CALL ldap_get_lang_values_len(LDAP *ld, 1169 LDAPMessage *entry, const char *target, char **type); 1170 1171 1172 /* 1173 * Rebind callback function (an API extension) 1174 */ 1175 #define LDAP_OPT_REBIND_FN 0x06 /* 6 - API extension */ 1176 #define LDAP_OPT_REBIND_ARG 0x07 /* 7 - API extension */ 1177 typedef int (LDAP_CALL LDAP_CALLBACK LDAP_REBINDPROC_CALLBACK)(LDAP *ld, 1178 char **dnp, char **passwdp, int *authmethodp, int freeit, void *arg); 1179 LDAP_API(void) LDAP_CALL ldap_set_rebind_proc(LDAP *ld, 1180 LDAP_REBINDPROC_CALLBACK *rebindproc, void *arg); 1181 1182 /* 1183 * Thread function callbacks (an API extension -- 1184 * LDAP_API_FEATURE_X_THREAD_FUNCTIONS). 1185 */ 1186 #define LDAP_OPT_THREAD_FN_PTRS 0x05 /* 5 - API extension */ 1187 1188 /* 1189 * Thread callback functions: 1190 */ 1191 typedef void *(LDAP_C LDAP_CALLBACK LDAP_TF_MUTEX_ALLOC_CALLBACK)(void); 1192 typedef void (LDAP_C LDAP_CALLBACK LDAP_TF_MUTEX_FREE_CALLBACK)(void *m); 1193 typedef int (LDAP_C LDAP_CALLBACK LDAP_TF_MUTEX_LOCK_CALLBACK)(void *m); 1194 typedef int (LDAP_C LDAP_CALLBACK LDAP_TF_MUTEX_UNLOCK_CALLBACK)(void *m); 1195 typedef int (LDAP_C LDAP_CALLBACK LDAP_TF_GET_ERRNO_CALLBACK)(void); 1196 typedef void (LDAP_C LDAP_CALLBACK LDAP_TF_SET_ERRNO_CALLBACK)(int e); 1197 typedef int (LDAP_C LDAP_CALLBACK LDAP_TF_GET_LDERRNO_CALLBACK)( 1198 char **matchedp, char **errmsgp, void *arg); 1199 typedef void (LDAP_C LDAP_CALLBACK LDAP_TF_SET_LDERRNO_CALLBACK)(int err, 1200 char *matched, char *errmsg, void *arg); 1201 1202 /* 1203 * Structure to hold thread function pointers: 1204 */ 1205 struct ldap_thread_fns { 1206 LDAP_TF_MUTEX_ALLOC_CALLBACK *ltf_mutex_alloc; 1207 LDAP_TF_MUTEX_FREE_CALLBACK *ltf_mutex_free; 1208 LDAP_TF_MUTEX_LOCK_CALLBACK *ltf_mutex_lock; 1209 LDAP_TF_MUTEX_UNLOCK_CALLBACK *ltf_mutex_unlock; 1210 LDAP_TF_GET_ERRNO_CALLBACK *ltf_get_errno; 1211 LDAP_TF_SET_ERRNO_CALLBACK *ltf_set_errno; 1212 LDAP_TF_GET_LDERRNO_CALLBACK *ltf_get_lderrno; 1213 LDAP_TF_SET_LDERRNO_CALLBACK *ltf_set_lderrno; 1214 void *ltf_lderrno_arg; 1215 }; 1216 1217 /* 1218 * Client side sorting of entries (an API extension -- 1219 * LDAP_API_FEATURE_X_CLIENT_SIDE_SORT) 1220 */ 1221 /* 1222 * Client side sorting callback functions: 1223 */ 1224 typedef const struct berval *(LDAP_C LDAP_CALLBACK 1225 LDAP_KEYGEN_CALLBACK)(void *arg, LDAP *ld, LDAPMessage *entry); 1226 typedef int (LDAP_C LDAP_CALLBACK 1227 LDAP_KEYCMP_CALLBACK)(void *arg, const struct berval *, 1228 const struct berval *); 1229 typedef void (LDAP_C LDAP_CALLBACK 1230 LDAP_KEYFREE_CALLBACK)(void *arg, const struct berval *); 1231 typedef int (LDAP_C LDAP_CALLBACK 1232 LDAP_CMP_CALLBACK)(const char *val1, const char *val2); 1233 typedef int (LDAP_C LDAP_CALLBACK 1234 LDAP_VALCMP_CALLBACK)(const char **val1p, const char **val2p); 1235 1236 /* 1237 * Client side sorting functions: 1238 */ 1239 int LDAP_CALL ldap_multisort_entries(LDAP *ld, LDAPMessage **chain, 1240 char **attr, LDAP_CMP_CALLBACK *cmp); 1241 int LDAP_CALL ldap_sort_entries(LDAP *ld, LDAPMessage **chain, 1242 char *attr, LDAP_CMP_CALLBACK *cmp); 1243 int LDAP_CALL ldap_sort_values(LDAP *ld, char **vals, 1244 LDAP_VALCMP_CALLBACK *cmp); 1245 int LDAP_C LDAP_CALLBACK ldap_sort_strcasecmp(const char **a, 1246 const char **b); 1247 1248 1249 /* 1250 * Filter functions and definitions (an API extension -- 1251 * LDAP_API_FEATURE_X_FILTER_FUNCTIONS) 1252 */ 1253 /* 1254 * Structures, constants, and types for filter utility routines: 1255 */ 1256 typedef struct ldap_filt_info { 1257 char *lfi_filter; 1258 char *lfi_desc; 1259 int lfi_scope; /* LDAP_SCOPE_BASE, etc */ 1260 int lfi_isexact; /* exact match filter? */ 1261 struct ldap_filt_info *lfi_next; 1262 } LDAPFiltInfo; 1263 1264 #define LDAP_FILT_MAXSIZ 1024 1265 1266 typedef struct ldap_filt_list LDAPFiltList; /* opaque filter list handle */ 1267 typedef struct ldap_filt_desc LDAPFiltDesc; /* opaque filter desc handle */ 1268 1269 /* 1270 * Filter utility functions: 1271 */ 1272 LDAP_API(LDAPFiltDesc *) LDAP_CALL ldap_init_getfilter(char *fname); 1273 LDAP_API(LDAPFiltDesc *) LDAP_CALL ldap_init_getfilter_buf(char *buf, 1274 ssize_t buflen); 1275 LDAP_API(LDAPFiltInfo *) LDAP_CALL ldap_getfirstfilter(LDAPFiltDesc *lfdp, 1276 char *tagpat, char *value); 1277 LDAP_API(LDAPFiltInfo *) LDAP_CALL ldap_getnextfilter(LDAPFiltDesc *lfdp); 1278 int LDAP_CALL ldap_set_filter_additions(LDAPFiltDesc *lfdp, 1279 char *prefix, char *suffix); 1280 int LDAP_CALL ldap_create_filter(char *buf, unsigned long buflen, 1281 char *pattern, char *prefix, char *suffix, char *attr, 1282 char *value, char **valwords); 1283 LDAP_API(void) LDAP_CALL ldap_getfilter_free(LDAPFiltDesc *lfdp); 1284 1285 1286 /* 1287 * Friendly mapping structure and routines (an API extension) 1288 */ 1289 typedef struct friendly { 1290 char *f_unfriendly; 1291 char *f_friendly; 1292 } *FriendlyMap; 1293 char *LDAP_CALL ldap_friendly_name(char *filename, char *name, 1294 FriendlyMap *map); 1295 LDAP_API(void) LDAP_CALL ldap_free_friendlymap(FriendlyMap *map); 1296 1297 1298 /* 1299 * In Memory Cache (an API extension -- LDAP_API_FEATURE_X_MEMCACHE) 1300 */ 1301 typedef struct ldapmemcache LDAPMemCache; /* opaque in-memory cache handle */ 1302 1303 int LDAP_CALL ldap_memcache_init(unsigned long ttl, 1304 unsigned long size, char **baseDNs, struct ldap_thread_fns *thread_fns, 1305 LDAPMemCache **cachep); 1306 int LDAP_CALL ldap_memcache_set(LDAP *ld, LDAPMemCache *cache); 1307 int LDAP_CALL ldap_memcache_get(LDAP *ld, LDAPMemCache **cachep); 1308 LDAP_API(void) LDAP_CALL ldap_memcache_flush(LDAPMemCache *cache, char *dn, 1309 int scope); 1310 LDAP_API(void) LDAP_CALL ldap_memcache_destroy(LDAPMemCache *cache); 1311 LDAP_API(void) LDAP_CALL ldap_memcache_update(LDAPMemCache *cache); 1312 1313 /* 1314 * Server reconnect (an API extension). 1315 */ 1316 #define LDAP_OPT_RECONNECT 0x62 /* 98 - API extension */ 1317 1318 /* 1319 * Asynchronous I/O (an API extension). 1320 */ 1321 /* 1322 * This option enables completely asynchronous IO. It works by using ioctl() 1323 * on the fd, (or tlook()) 1324 */ 1325 #define LDAP_OPT_ASYNC_CONNECT 0x63 /* 99 - API extension */ 1326 1327 /* 1328 * I/O function callbacks option (an API extension -- 1329 * LDAP_API_FEATURE_X_IO_FUNCTIONS). 1330 * Use of the extended I/O functions instead is recommended; see above. 1331 */ 1332 #define LDAP_OPT_IO_FN_PTRS 0x0B /* 11 - API extension */ 1333 1334 /* 1335 * Extended I/O function callbacks option (an API extension -- 1336 * LDAP_API_FEATURE_X_EXTIO_FUNCTIONS). 1337 */ 1338 #define LDAP_X_OPT_EXTIO_FN_PTRS (LDAP_OPT_PRIVATE_EXTENSION_BASE + 0x0F00) 1339 /* 0x4000 + 0x0F00 = 0x4F00 = 20224 - API extension */ 1340 1341 1342 1343 /* 1344 * generalized bind 1345 */ 1346 /* 1347 * Authentication methods: 1348 */ 1349 #define LDAP_AUTH_NONE 0x00 1350 #define LDAP_AUTH_SIMPLE 0x80 1351 #define LDAP_AUTH_SASL 0xa3 1352 int LDAP_CALL ldap_bind(LDAP *ld, const char *who, 1353 const char *passwd, int authmethod); 1354 int LDAP_CALL ldap_bind_s(LDAP *ld, const char *who, 1355 const char *cred, int method); 1356 1357 /* 1358 * experimental DN format support 1359 */ 1360 char **LDAP_CALL ldap_explode_dns(const char *dn); 1361 int LDAP_CALL ldap_is_dns_dn(const char *dn); 1362 1363 #ifdef _SOLARIS_SDK 1364 char *ldap_dns_to_dn(char *dns_name, int *nameparts); 1365 #endif 1366 1367 1368 /* 1369 * user friendly naming/searching routines 1370 */ 1371 typedef int (LDAP_C LDAP_CALLBACK LDAP_CANCELPROC_CALLBACK)(void *cl); 1372 int LDAP_CALL ldap_ufn_search_c(LDAP *ld, char *ufn, 1373 char **attrs, int attrsonly, LDAPMessage **res, 1374 LDAP_CANCELPROC_CALLBACK *cancelproc, void *cancelparm); 1375 int LDAP_CALL ldap_ufn_search_ct(LDAP *ld, char *ufn, 1376 char **attrs, int attrsonly, LDAPMessage **res, 1377 LDAP_CANCELPROC_CALLBACK *cancelproc, void *cancelparm, 1378 char *tag1, char *tag2, char *tag3); 1379 int LDAP_CALL ldap_ufn_search_s(LDAP *ld, char *ufn, 1380 char **attrs, int attrsonly, LDAPMessage **res); 1381 LDAP_API(LDAPFiltDesc *) LDAP_CALL ldap_ufn_setfilter(LDAP *ld, char *fname); 1382 LDAP_API(void) LDAP_CALL ldap_ufn_setprefix(LDAP *ld, char *prefix); 1383 int LDAP_C ldap_ufn_timeout(void *tvparam); 1384 1385 /* 1386 * functions and definitions that have been replaced by new improved ones 1387 */ 1388 /* 1389 * Use ldap_get_option() with LDAP_OPT_API_INFO and an LDAPAPIInfo structure 1390 * instead of ldap_version(). The use of this API is deprecated. 1391 */ 1392 typedef struct _LDAPVersion { 1393 int sdk_version; /* Version of the SDK, * 100 */ 1394 int protocol_version; /* Highest protocol version supported, * 100 */ 1395 int SSL_version; /* SSL version if this SDK supports it, * 100 */ 1396 int security_level; /* highest level available */ 1397 int reserved[4]; 1398 } LDAPVersion; 1399 #define LDAP_SECURITY_NONE 0 1400 int LDAP_CALL ldap_version(LDAPVersion *ver); 1401 1402 /* use ldap_create_filter() instead of ldap_build_filter() */ 1403 LDAP_API(void) LDAP_CALL ldap_build_filter(char *buf, size_t buflen, 1404 char *pattern, char *prefix, char *suffix, char *attr, 1405 char *value, char **valwords); 1406 /* use ldap_set_filter_additions() instead of ldap_setfilteraffixes() */ 1407 LDAP_API(void) LDAP_CALL ldap_setfilteraffixes(LDAPFiltDesc *lfdp, 1408 char *prefix, char *suffix); 1409 1410 /* older result types a server can return -- use LDAP_RES_MODDN instead */ 1411 #define LDAP_RES_MODRDN LDAP_RES_MODDN 1412 #define LDAP_RES_RENAME LDAP_RES_MODDN 1413 1414 /* older error messages */ 1415 #define LDAP_AUTH_METHOD_NOT_SUPPORTED LDAP_STRONG_AUTH_NOT_SUPPORTED 1416 1417 /* end of unsupported functions */ 1418 1419 #ifdef _SOLARIS_SDK 1420 1421 /* SSL Functions */ 1422 1423 /* 1424 * these three defines resolve the SSL strength 1425 * setting auth weak, diables all cert checking 1426 * the CNCHECK tests for the man in the middle hack 1427 */ 1428 #define LDAPSSL_AUTH_WEAK 0 1429 #define LDAPSSL_AUTH_CERT 1 1430 #define LDAPSSL_AUTH_CNCHECK 2 1431 1432 /* 1433 * Initialize LDAP library for SSL 1434 */ 1435 LDAP * LDAP_CALL ldapssl_init(const char *defhost, int defport, 1436 int defsecure); 1437 1438 /* 1439 * Install I/O routines to make SSL over LDAP possible. 1440 * Use this after ldap_init() or just use ldapssl_init() instead. 1441 */ 1442 int LDAP_CALL ldapssl_install_routines(LDAP *ld); 1443 1444 1445 /* 1446 * The next three functions initialize the security code for SSL 1447 * The first one ldapssl_client_init() does initialization for SSL only 1448 * The next one supports ldapssl_clientauth_init() intializes security 1449 * for SSL for client authentication. The third function initializes 1450 * security for doing SSL with client authentication, and PKCS, that is, 1451 * the third function initializes the security module database(secmod.db). 1452 * The parameters are as follows: 1453 * const char *certdbpath - path to the cert file. This can be a shortcut 1454 * to the directory name, if so cert7.db will be postfixed to the string. 1455 * void *certdbhandle - Normally this is NULL. This memory will need 1456 * to be freed. 1457 * int needkeydb - boolean. Must be ! = 0 if client Authentification 1458 * is required 1459 * char *keydbpath - path to the key database. This can be a shortcut 1460 * to the directory name, if so key3.db will be postfixed to the string. 1461 * void *keydbhandle - Normally this is NULL, This memory will need 1462 * to be freed 1463 * int needsecmoddb - boolean. Must be ! = 0 to assure that the correct 1464 * security module is loaded into memory 1465 * char *secmodpath - path to the secmod. This can be a shortcut to the 1466 * directory name, if so secmod.db will be postfixed to the string. 1467 * 1468 * These three functions are mutually exclusive. You can only call 1469 * one. This means that, for a given process, you must call the 1470 * appropriate initialization function for the life of the process. 1471 */ 1472 1473 1474 /* 1475 * Initialize the secure parts (Security and SSL) of the runtime for use 1476 * by a client application. This is only called once. 1477 */ 1478 int LDAP_CALL ldapssl_client_init( 1479 const char *certdbpath, void *certdbhandle); 1480 1481 /* 1482 * Initialize the secure parts (Security and SSL) of the runtime for use 1483 * by a client application that may want to do SSL client authentication. 1484 */ 1485 int LDAP_CALL ldapssl_clientauth_init( 1486 const char *certdbpath, void *certdbhandle, 1487 const int needkeydb, const char *keydbpath, void *keydbhandle); 1488 1489 /* 1490 * Initialize the secure parts (Security and SSL) of the runtime for use 1491 * by a client application that may want to do SSL client authentication. 1492 */ 1493 int LDAP_CALL ldapssl_advclientauth_init( 1494 const char *certdbpath, void *certdbhandle, 1495 const int needkeydb, const char *keydbpath, void *keydbhandle, 1496 const int needsecmoddb, const char *secmoddbpath, 1497 const int sslstrength); 1498 1499 /* 1500 * get a meaningful error string back from the security library 1501 * this function should be called, if ldap_err2string doesn't 1502 * identify the error code. 1503 */ 1504 const char *LDAP_CALL ldapssl_err2string(const int prerrno); 1505 1506 /* 1507 * Enable SSL client authentication on the given ld. 1508 */ 1509 int LDAP_CALL ldapssl_enable_clientauth(LDAP *ld, char *keynickname, 1510 char *keypasswd, char *certnickname); 1511 1512 typedef int (LDAP_C LDAP_CALLBACK LDAP_PKCS_GET_TOKEN_CALLBACK) 1513 (void *context, char **tokenname); 1514 typedef int (LDAP_C LDAP_CALLBACK LDAP_PKCS_GET_PIN_CALLBACK) 1515 (void *context, const char *tokenname, char **tokenpin); 1516 typedef int (LDAP_C LDAP_CALLBACK LDAP_PKCS_GET_CERTPATH_CALLBACK) 1517 (void *context, char **certpath); 1518 typedef int (LDAP_C LDAP_CALLBACK LDAP_PKCS_GET_KEYPATH_CALLBACK) 1519 (void *context, char **keypath); 1520 typedef int (LDAP_C LDAP_CALLBACK LDAP_PKCS_GET_MODPATH_CALLBACK) 1521 (void *context, char **modulepath); 1522 typedef int (LDAP_C LDAP_CALLBACK LDAP_PKCS_GET_CERTNAME_CALLBACK) 1523 (void *context, char **certname); 1524 typedef int (LDAP_C LDAP_CALLBACK LDAP_PKCS_GET_DONGLEFILENAME_CALLBACK) 1525 (void *context, char **filename); 1526 1527 #define PKCS_STRUCTURE_ID 1 1528 struct ldapssl_pkcs_fns { 1529 int local_structure_id; 1530 void *local_data; 1531 LDAP_PKCS_GET_CERTPATH_CALLBACK *pkcs_getcertpath; 1532 LDAP_PKCS_GET_CERTNAME_CALLBACK *pkcs_getcertname; 1533 LDAP_PKCS_GET_KEYPATH_CALLBACK *pkcs_getkeypath; 1534 LDAP_PKCS_GET_MODPATH_CALLBACK *pkcs_getmodpath; 1535 LDAP_PKCS_GET_PIN_CALLBACK *pkcs_getpin; 1536 LDAP_PKCS_GET_TOKEN_CALLBACK *pkcs_gettokenname; 1537 LDAP_PKCS_GET_DONGLEFILENAME_CALLBACK *pkcs_getdonglefilename; 1538 1539 }; 1540 1541 1542 int LDAP_CALL ldapssl_pkcs_init(const struct ldapssl_pkcs_fns *pfns); 1543 1544 /* end of SSL functions */ 1545 #endif /* _SOLARIS_SDK */ 1546 1547 /* SASL options */ 1548 #define LDAP_OPT_X_SASL_MECH 0x6100 1549 #define LDAP_OPT_X_SASL_REALM 0x6101 1550 #define LDAP_OPT_X_SASL_AUTHCID 0x6102 1551 #define LDAP_OPT_X_SASL_AUTHZID 0x6103 1552 #define LDAP_OPT_X_SASL_SSF 0x6104 /* read-only */ 1553 #define LDAP_OPT_X_SASL_SSF_EXTERNAL 0x6105 /* write-only */ 1554 #define LDAP_OPT_X_SASL_SECPROPS 0x6106 /* write-only */ 1555 #define LDAP_OPT_X_SASL_SSF_MIN 0x6107 1556 #define LDAP_OPT_X_SASL_SSF_MAX 0x6108 1557 #define LDAP_OPT_X_SASL_MAXBUFSIZE 0x6109 1558 1559 /* 1560 * ldap_interactive_bind_s Interaction flags 1561 * Interactive: prompt always - REQUIRED 1562 */ 1563 #define LDAP_SASL_INTERACTIVE 1U 1564 1565 /* 1566 * V3 SASL Interaction Function Callback Prototype 1567 * when using SASL, interact is pointer to sasl_interact_t 1568 * should likely passed in a control (and provided controls) 1569 */ 1570 typedef int (LDAP_SASL_INTERACT_PROC) 1571 (LDAP *ld, unsigned flags, void* defaults, void *interact); 1572 1573 int LDAP_CALL ldap_sasl_interactive_bind_s(LDAP *ld, const char *dn, 1574 const char *saslMechanism, LDAPControl **serverControls, 1575 LDAPControl **clientControls, unsigned flags, 1576 LDAP_SASL_INTERACT_PROC *proc, void *defaults); 1577 1578 #ifdef __cplusplus 1579 } 1580 #endif 1581 1582 #endif /* _LDAP_H */ 1583