1*54925bf6Swillf /* 2*54925bf6Swillf * lib/kdb/kdb_ldap/ldap_realm.h 3*54925bf6Swillf * 4*54925bf6Swillf * Copyright (c) 2004-2005, Novell, Inc. 5*54925bf6Swillf * All rights reserved. 6*54925bf6Swillf * 7*54925bf6Swillf * Redistribution and use in source and binary forms, with or without 8*54925bf6Swillf * modification, are permitted provided that the following conditions are met: 9*54925bf6Swillf * 10*54925bf6Swillf * * Redistributions of source code must retain the above copyright notice, 11*54925bf6Swillf * this list of conditions and the following disclaimer. 12*54925bf6Swillf * * Redistributions in binary form must reproduce the above copyright 13*54925bf6Swillf * notice, this list of conditions and the following disclaimer in the 14*54925bf6Swillf * documentation and/or other materials provided with the distribution. 15*54925bf6Swillf * * The copyright holder's name is not used to endorse or promote products 16*54925bf6Swillf * derived from this software without specific prior written permission. 17*54925bf6Swillf * 18*54925bf6Swillf * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" 19*54925bf6Swillf * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 20*54925bf6Swillf * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 21*54925bf6Swillf * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE 22*54925bf6Swillf * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR 23*54925bf6Swillf * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF 24*54925bf6Swillf * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS 25*54925bf6Swillf * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN 26*54925bf6Swillf * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) 27*54925bf6Swillf * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE 28*54925bf6Swillf * POSSIBILITY OF SUCH DAMAGE. 29*54925bf6Swillf */ 30*54925bf6Swillf 31*54925bf6Swillf #ifndef _LDAP_REALM_H 32*54925bf6Swillf #define _LDAP_REALM_H 1 33*54925bf6Swillf 34*54925bf6Swillf /* realm specific mask */ 35*54925bf6Swillf #define LDAP_REALM_SUBTREE 0x0001 36*54925bf6Swillf #define LDAP_REALM_SEARCHSCOPE 0x0002 37*54925bf6Swillf #define LDAP_REALM_POLICYREFERENCE 0x0004 38*54925bf6Swillf #define LDAP_REALM_UPENABLED 0x0008 39*54925bf6Swillf #define LDAP_REALM_LDAPSERVERS 0x0010 40*54925bf6Swillf #define LDAP_REALM_KDCSERVERS 0x0020 41*54925bf6Swillf #define LDAP_REALM_ADMINSERVERS 0x0040 42*54925bf6Swillf #define LDAP_REALM_PASSWDSERVERS 0x0080 43*54925bf6Swillf #define LDAP_REALM_MAXTICKETLIFE 0x0100 44*54925bf6Swillf #define LDAP_REALM_MAXRENEWLIFE 0x0200 45*54925bf6Swillf #define LDAP_REALM_KRBTICKETFLAGS 0x0400 46*54925bf6Swillf #define LDAP_REALM_CONTREF 0x0800 47*54925bf6Swillf 48*54925bf6Swillf extern char *policy_attributes[]; 49*54925bf6Swillf 50*54925bf6Swillf extern char *realm_attributes[]; 51*54925bf6Swillf 52*54925bf6Swillf /* realm container structure */ 53*54925bf6Swillf 54*54925bf6Swillf typedef struct _krb5_ldap_realm_params { 55*54925bf6Swillf char *realmdn; 56*54925bf6Swillf char *realm_name; 57*54925bf6Swillf char **subtree; 58*54925bf6Swillf char *containerref; 59*54925bf6Swillf char *policyreference; 60*54925bf6Swillf int search_scope; 61*54925bf6Swillf int upenabled; 62*54925bf6Swillf int subtreecount; 63*54925bf6Swillf krb5_int32 max_life; 64*54925bf6Swillf krb5_int32 max_renewable_life; 65*54925bf6Swillf krb5_int32 tktflags; 66*54925bf6Swillf char **kdcservers; 67*54925bf6Swillf char **adminservers; 68*54925bf6Swillf char **passwdservers; 69*54925bf6Swillf krb5_tl_data *tl_data; 70*54925bf6Swillf krb5_keyblock mkey; 71*54925bf6Swillf long mask; 72*54925bf6Swillf } krb5_ldap_realm_params; 73*54925bf6Swillf 74*54925bf6Swillf 75*54925bf6Swillf krb5_error_code 76*54925bf6Swillf krb5_ldap_list_realm(krb5_context , char ***); 77*54925bf6Swillf 78*54925bf6Swillf krb5_error_code 79*54925bf6Swillf krb5_ldap_delete_realm(krb5_context, char *); 80*54925bf6Swillf 81*54925bf6Swillf krb5_error_code 82*54925bf6Swillf krb5_ldap_modify_realm(krb5_context, krb5_ldap_realm_params *, int); 83*54925bf6Swillf 84*54925bf6Swillf krb5_error_code 85*54925bf6Swillf krb5_ldap_create_realm(krb5_context, krb5_ldap_realm_params *, int); 86*54925bf6Swillf 87*54925bf6Swillf krb5_error_code 88*54925bf6Swillf krb5_ldap_read_realm_params(krb5_context , char *, krb5_ldap_realm_params **, int *); 89*54925bf6Swillf 90*54925bf6Swillf void 91*54925bf6Swillf krb5_ldap_free_realm_params(krb5_ldap_realm_params *); 92*54925bf6Swillf 93*54925bf6Swillf krb5_error_code 94*54925bf6Swillf krb5_ldap_delete_realm_1(krb5_context, char *, char **); 95*54925bf6Swillf 96*54925bf6Swillf char * 97*54925bf6Swillf ldap_filter_correct(char *); 98*54925bf6Swillf 99*54925bf6Swillf #endif 100