sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-22 22:04:08 +03:00
Code
samba-mirror/source3/include/idmap.h

75 lines
2.2 KiB
C
Raw Normal View History

Add include guards around idmap.h, change ID_NOMAP to ID_QUERY_ONLY and ID_CACHE to ID_CACHE_SAVE. Added locking around tdb writes & deletes for multi-process access. Jeremy. (This used to be commit 5b998cdc1d552234236862f6a2bbae703b0c146e)
2003-06-26 23:48:46 +00:00
#ifndef _IDMAP_H_
#define _IDMAP_H_
initial work for the new idmpa interface (This used to be commit 8338e74ac4e5f31150c96f459a67e52090dc6013)
2003-03-07 23:47:59 +00:00
/*
Unix SMB/CIFS implementation.
Idmap headers
Update my copyrights according to my agreement with IBM (This used to be commit c9b209be2b17c2e4677cc30b46b1074f48878f43)
2003-08-01 15:21:20 +00:00
Copyright (C) Jim McDonough <jmcd@us.ibm.com> 2003
initial work for the new idmpa interface (This used to be commit 8338e74ac4e5f31150c96f459a67e52090dc6013)
2003-03-07 23:47:59 +00:00
Copyright (C) Simo Sorce 2003
s3: Fix some nonempty blank lines
2011-03-03 12:51:57 +01:00
initial work for the new idmpa interface (This used to be commit 8338e74ac4e5f31150c96f459a67e52090dc6013)
2003-03-07 23:47:59 +00:00
This library is free software; you can redistribute it and/or
r23800: LGPL is now called GNU Lesser General Public License not GNU Library General Public License (This used to be commit 727a6cf2cba8da6b40610409b264e86e6908eb0c)
2007-07-10 04:04:46 +00:00
modify it under the terms of the GNU Lesser General Public
initial work for the new idmpa interface (This used to be commit 8338e74ac4e5f31150c96f459a67e52090dc6013)
2003-03-07 23:47:59 +00:00
License as published by the Free Software Foundation; either
r23794: convert more code from LGPLv2+ to LGPLv3+ (This used to be commit f3df6cd87e1927f41e95af51d750a71278282e15)
2007-07-10 02:31:50 +00:00
version 3 of the License, or (at your option) any later version.
s3: Fix some nonempty blank lines
2011-03-03 12:51:57 +01:00
initial work for the new idmpa interface (This used to be commit 8338e74ac4e5f31150c96f459a67e52090dc6013)
2003-03-07 23:47:59 +00:00
This library is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
Library General Public License for more details.
s3: Fix some nonempty blank lines
2011-03-03 12:51:57 +01:00
r23800: LGPL is now called GNU Lesser General Public License not GNU Library General Public License (This used to be commit 727a6cf2cba8da6b40610409b264e86e6908eb0c)
2007-07-10 04:04:46 +00:00
You should have received a copy of the GNU Lesser General Public License
r23794: convert more code from LGPLv2+ to LGPLv3+ (This used to be commit f3df6cd87e1927f41e95af51d750a71278282e15)
2007-07-10 02:31:50 +00:00
along with this program. If not, see <http://www.gnu.org/licenses/>.
initial work for the new idmpa interface (This used to be commit 8338e74ac4e5f31150c96f459a67e52090dc6013)
2003-03-07 23:47:59 +00:00
*/
r16945: Sync trunk -> 3.0 for 3.0.24 code. Still need to do the upper layer directories but this is what everyone is waiting for.... Jeremy. (This used to be commit 9dafb7f48ca3e7af956b0a7d1720c2546fc4cfb8)
2006-07-11 18:01:26 +00:00
/* The interface version specifier.
Updated to 3 for enum types by JRA. */
Add smb_register_idmap(). Based on a patch from metze (This used to be commit 7e352f5c62c4889bdf2662dded1e74a354890dc7)
2003-05-29 19:08:40 +00:00
r20116: Start merging in the work done to create the new idmap subsystem. Simo. (This used to be commit 50cd8bffeeed2cac755f75fc3d76fe41c451976b)
2006-12-12 14:52:13 +00:00
/* Updated to 4, completely new interface, SSS */
Add comment to explain version bump
2008-09-19 13:51:40 -04:00
/* Updated to 5, simplified interface by Volker */
lib: modules: Change XXX_init interface from XXX_init(void) to XXX_init(TALLOC_CTX *) Not currently used - no logic changes inside. This will make it possible to pass down a long-lived talloc context from the loading function for modules to use instead of having them internally all use talloc_autofree_context() which is a hidden global. Updated all known module interface numbers, and added a WHATSNEW. Signed-off-by: Jeremy Allison <jra@samba.org> Signed-off-by: Ralph Böhme <slow@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Sat Apr 22 01:17:00 CEST 2017 on sn-devel-144
2017-04-20 12:24:43 -07:00
/* Updated to 6, modules now take TALLOC_CTX * init parameter. */
initial work for the new idmpa interface (This used to be commit 8338e74ac4e5f31150c96f459a67e52090dc6013)
2003-03-07 23:47:59 +00:00
lib: modules: Change XXX_init interface from XXX_init(void) to XXX_init(TALLOC_CTX *) Not currently used - no logic changes inside. This will make it possible to pass down a long-lived talloc context from the loading function for modules to use instead of having them internally all use talloc_autofree_context() which is a hidden global. Updated all known module interface numbers, and added a WHATSNEW. Signed-off-by: Jeremy Allison <jra@samba.org> Signed-off-by: Ralph Böhme <slow@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Sat Apr 22 01:17:00 CEST 2017 on sn-devel-144
2017-04-20 12:24:43 -07:00
#define SMB_IDMAP_INTERFACE_VERSION 6
more on idmap two layers structure with - local tdb cache - remote idmap repository compiles (This used to be commit 8fb4e210bc7564ed491d121c20d598ba0bfbddff)
2003-03-08 17:29:40 +00:00
s3-idmap: only include idmap headers where needed. Guenther
2010-08-18 18:13:42 +02:00
#include "librpc/gen_ndr/idmap.h"
winbind: Add a GetNssInfo parent/child call This call will be done in the idmap child. It is not 100% the right place, but there is no better one available to me. It will become a replacement for the "winbind nss info" parameter: This global parameter is good for just one domain. It might be possible to have idmap backend AD for different domains, and the NSS info like primary gid, homedir and shell might be done with different policies per domain. As we already have a domain-specific idmap configuration, doing the NSS info configuration there also is the closest way to do it. The alternative, if we did not want to put this call into the idmap child would be to establish an equivalent engine like the whole "idmap config *" just for the nss info. But as I believe this is closely related, I'll just keep it in the idmap child. This also extends the wbint_userinfo structure with pretty much all user related fields. The idea is that the GetNssInfo call can do whatever it wants with it. Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: Uri Simchoni <uri@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org>
2016-12-29 09:56:29 +00:00
struct wbint_userinfo;
r20116: Start merging in the work done to create the new idmap subsystem. Simo. (This used to be commit 50cd8bffeeed2cac755f75fc3d76fe41c451976b)
2006-12-12 14:52:13 +00:00
struct idmap_domain {
const char *name;
winbindd: pass domain SID to wbint_UnixIDs2Sids This makes the domain SID available to the idmap child for wbint_UnixIDs2Sids mapping request. It's not used yet anywhere, this comes in the next commit. Bug: https://bugzilla.samba.org/show_bug.cgi?id=13052 Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Volker Lendecke <vl@samba.org>
2017-09-25 15:39:39 +02:00
/*
* dom_sid is currently only initialized in the unixids_to_sids request,
* so don't rely on this being filled out everywhere!
*/
struct dom_sid dom_sid;
winbindd/idmap: apply const to struct idmap_methods pointers BUG: https://bugzilla.samba.org/show_bug.cgi?id=14539 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Gary Lockyer <gary@catalyst.net.nz>
2019-03-21 12:30:37 +01:00
const struct idmap_methods *methods;
winbind: Add a GetNssInfo parent/child call This call will be done in the idmap child. It is not 100% the right place, but there is no better one available to me. It will become a replacement for the "winbind nss info" parameter: This global parameter is good for just one domain. It might be possible to have idmap backend AD for different domains, and the NSS info like primary gid, homedir and shell might be done with different policies per domain. As we already have a domain-specific idmap configuration, doing the NSS info configuration there also is the closest way to do it. The alternative, if we did not want to put this call into the idmap child would be to establish an equivalent engine like the whole "idmap config *" just for the nss info. But as I believe this is closely related, I'll just keep it in the idmap child. This also extends the wbint_userinfo structure with pretty much all user related fields. The idea is that the GetNssInfo call can do whatever it wants with it. Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: Uri Simchoni <uri@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org>
2016-12-29 09:56:29 +00:00
NTSTATUS (*query_user)(struct idmap_domain *domain,
struct wbint_userinfo *info);
s3:idmap: add low_id and high_id to the idmap_domain struct This global data will replace the backend-specific filter_low_id and filter_high_id. The presence of a range is generic to all idmap configs.
2010-06-16 16:05:34 +02:00
uint32_t low_id;
uint32_t high_id;
s3:idmap: add a read_only flag to the idmap_domain struct. This will be used to mark "allocating backends" (tdb, tdb2, ldap) read-only.
2010-07-29 17:51:13 +02:00
bool read_only;
idmap rewrite (This used to be commit 30a180f2fce8cf6a3e5548f6bba453272ba70b33)
2008-07-13 12:07:40 +02:00
void *private_data;
r20116: Start merging in the work done to create the new idmap subsystem. Simo. (This used to be commit 50cd8bffeeed2cac755f75fc3d76fe41c451976b)
2006-12-12 14:52:13 +00:00
};
more on idmap two layers structure with - local tdb cache - remote idmap repository compiles (This used to be commit 8fb4e210bc7564ed491d121c20d598ba0bfbddff)
2003-03-08 17:29:40 +00:00
initial work for the new idmpa interface (This used to be commit 8338e74ac4e5f31150c96f459a67e52090dc6013)
2003-03-07 23:47:59 +00:00
/* Filled out by IDMAP backends */
struct idmap_methods {
/* Called when backend is first loaded */
s3:idmap: remove the params argument from the init function
2011-03-02 23:00:58 +01:00
NTSTATUS (*init)(struct idmap_domain *dom);
r20116: Start merging in the work done to create the new idmap subsystem. Simo. (This used to be commit 50cd8bffeeed2cac755f75fc3d76fe41c451976b)
2006-12-12 14:52:13 +00:00
r22390: Patchset sent to samba-technical to address the winbind loop when allocating a new id for a SID: auth_util.patch Revert create_local_token() to the 3.0.24 codebase idmap_type.patch Have the caller fillin the id_map.xid.type field when resolving a SID so that if we allocate a new id, we know what type to use winbindd_api.patch Remove the WINBINDD_SIDS_TO_XIDS calls from the public winbindd interface for the 3.0.25 release idmap_rid.patch Cleanup the idmap_rid backend to not call back into winbindd to resolve the SID in order to verify it's type. (This used to be commit 3b24dae9e73b244540a68b631b428a4d0f57440b)
2007-04-19 22:26:09 +00:00
/* Map an array of uids/gids to SIDs. The caller specifies
the uid/gid and type. Gets back the SID. */
r20116: Start merging in the work done to create the new idmap subsystem. Simo. (This used to be commit 50cd8bffeeed2cac755f75fc3d76fe41c451976b)
2006-12-12 14:52:13 +00:00
NTSTATUS (*unixids_to_sids)(struct idmap_domain *dom, struct id_map **ids);
r22390: Patchset sent to samba-technical to address the winbind loop when allocating a new id for a SID: auth_util.patch Revert create_local_token() to the 3.0.24 codebase idmap_type.patch Have the caller fillin the id_map.xid.type field when resolving a SID so that if we allocate a new id, we know what type to use winbindd_api.patch Remove the WINBINDD_SIDS_TO_XIDS calls from the public winbindd interface for the 3.0.25 release idmap_rid.patch Cleanup the idmap_rid backend to not call back into winbindd to resolve the SID in order to verify it's type. (This used to be commit 3b24dae9e73b244540a68b631b428a4d0f57440b)
2007-04-19 22:26:09 +00:00
/* Map an arry of SIDs to uids/gids. The caller sets the SID
and type and gets back a uid or gid. */
r20116: Start merging in the work done to create the new idmap subsystem. Simo. (This used to be commit 50cd8bffeeed2cac755f75fc3d76fe41c451976b)
2006-12-12 14:52:13 +00:00
NTSTATUS (*sids_to_unixids)(struct idmap_domain *dom, struct id_map **ids);
r22390: Patchset sent to samba-technical to address the winbind loop when allocating a new id for a SID: auth_util.patch Revert create_local_token() to the 3.0.24 codebase idmap_type.patch Have the caller fillin the id_map.xid.type field when resolving a SID so that if we allocate a new id, we know what type to use winbindd_api.patch Remove the WINBINDD_SIDS_TO_XIDS calls from the public winbindd interface for the 3.0.25 release idmap_rid.patch Cleanup the idmap_rid backend to not call back into winbindd to resolve the SID in order to verify it's type. (This used to be commit 3b24dae9e73b244540a68b631b428a4d0f57440b)
2007-04-19 22:26:09 +00:00
s3:idmap: add an allocate_id method to the idmap_methods struct. The idmap_alloc_methods are being removed, but this single "alloc" method is still needed for the samba-wide Unix-ID allocator, which is used in group-mapping and ldapsam:editposix. This method should ultimately also disappear.
2010-06-22 14:31:24 +02:00
/* Allocate a Unix-ID. */
NTSTATUS (*allocate_id)(struct idmap_domain *dom, struct unixid *id);
r20116: Start merging in the work done to create the new idmap subsystem. Simo. (This used to be commit 50cd8bffeeed2cac755f75fc3d76fe41c451976b)
2006-12-12 14:52:13 +00:00
};
s3-idmap: only include idmap headers where needed. Guenther
2010-08-18 18:13:42 +02:00
#include "winbindd/idmap_proto.h"
Add include guards around idmap.h, change ID_NOMAP to ID_QUERY_ONLY and ID_CACHE to ID_CACHE_SAVE. Added locking around tdb writes & deletes for multi-process access. Jeremy. (This used to be commit 5b998cdc1d552234236862f6a2bbae703b0c146e)
2003-06-26 23:48:46 +00:00
#endif /* _IDMAP_H_ */
Copy Permalink