mirror of
https://github.com/samba-team/samba.git
synced 2024-12-22 13:34:15 +03:00
1958cd8a7f
Ensure that the referrals returned in a search request use the same scheme as the request, i.e. referrals recieved via ldap are prefixed with "ldap://" and those over ldaps are prefixed with "ldaps://" BUG: https://bugzilla.samba.org/show_bug.cgi?id=12478 Signed-off-by: Gary Lockyer <gary@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Fri May 24 05:12:14 UTC 2019 on sn-devel-184
128 lines
3.3 KiB
C
128 lines
3.3 KiB
C
/*
|
|
Unix SMB/CIFS implementation.
|
|
LDAP server
|
|
Copyright (C) Volker Lendecke 2004
|
|
Copyright (C) Stefan Metzmacher 2004
|
|
|
|
This program is free software; you can redistribute it and/or modify
|
|
it under the terms of the GNU General Public License as published by
|
|
the Free Software Foundation; either version 3 of the License, or
|
|
(at your option) any later version.
|
|
|
|
This program is distributed in the hope that it will be useful,
|
|
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
GNU General Public License for more details.
|
|
|
|
You should have received a copy of the GNU General Public License
|
|
along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
#include "libcli/ldap/libcli_ldap.h"
|
|
#include "lib/socket/socket.h"
|
|
#include "lib/stream/packet.h"
|
|
#include "system/network.h"
|
|
#include "lib/param/loadparm.h"
|
|
|
|
enum ldap_server_referral_scheme {
|
|
LDAP_REFERRAL_SCHEME_LDAP,
|
|
LDAP_REFERRAL_SCHEME_LDAPS
|
|
};
|
|
|
|
struct ldapsrv_connection {
|
|
struct ldapsrv_connection *next, *prev;
|
|
struct loadparm_context *lp_ctx;
|
|
struct stream_connection *connection;
|
|
struct gensec_security *gensec;
|
|
struct auth_session_info *session_info;
|
|
struct ldapsrv_service *service;
|
|
struct cli_credentials *server_credentials;
|
|
struct ldb_context *ldb;
|
|
|
|
struct {
|
|
struct tevent_queue *send_queue;
|
|
struct tevent_req *read_req;
|
|
struct tstream_context *raw;
|
|
struct tstream_context *tls;
|
|
struct tstream_context *sasl;
|
|
struct tstream_context *active;
|
|
} sockets;
|
|
|
|
bool global_catalog;
|
|
bool is_privileged;
|
|
enum ldap_server_require_strong_auth require_strong_auth;
|
|
bool authz_logged;
|
|
enum ldap_server_referral_scheme referral_scheme;
|
|
|
|
struct {
|
|
int initial_timeout;
|
|
int conn_idle_time;
|
|
int max_page_size;
|
|
int max_notifications;
|
|
int search_timeout;
|
|
struct timeval endtime;
|
|
const char *reason;
|
|
} limits;
|
|
|
|
struct tevent_req *active_call;
|
|
|
|
struct ldapsrv_call *pending_calls;
|
|
};
|
|
|
|
struct ldapsrv_call {
|
|
struct ldapsrv_call *prev, *next;
|
|
struct ldapsrv_connection *conn;
|
|
struct ldap_message *request;
|
|
struct ldapsrv_reply {
|
|
struct ldapsrv_reply *prev, *next;
|
|
struct ldap_message *msg;
|
|
DATA_BLOB blob;
|
|
} *replies;
|
|
struct iovec *out_iov;
|
|
size_t iov_count;
|
|
size_t reply_size;
|
|
|
|
struct tevent_req *(*wait_send)(TALLOC_CTX *mem_ctx,
|
|
struct tevent_context *ev,
|
|
void *private_data);
|
|
NTSTATUS (*wait_recv)(struct tevent_req *req);
|
|
void *wait_private;
|
|
|
|
struct tevent_req *(*postprocess_send)(TALLOC_CTX *mem_ctx,
|
|
struct tevent_context *ev,
|
|
void *private_data);
|
|
NTSTATUS (*postprocess_recv)(struct tevent_req *req);
|
|
void *postprocess_private;
|
|
|
|
struct {
|
|
bool busy;
|
|
uint64_t generation;
|
|
} notification;
|
|
};
|
|
|
|
/*
|
|
* This matches the previous implicit size limit via talloc's maximum
|
|
* allocation size
|
|
*/
|
|
#define LDAP_SERVER_MAX_REPLY_SIZE ((size_t)(256 * 1024 * 1024))
|
|
|
|
/*
|
|
* Start writing to the network before we hit this size
|
|
*/
|
|
#define LDAP_SERVER_MAX_CHUNK_SIZE ((size_t)(25 * 1024 * 1024))
|
|
|
|
struct ldapsrv_service {
|
|
struct tstream_tls_params *tls_params;
|
|
struct task_server *task;
|
|
struct tevent_queue *call_queue;
|
|
struct ldapsrv_connection *connections;
|
|
struct {
|
|
uint64_t generation;
|
|
struct tevent_req *retry;
|
|
} notification;
|
|
|
|
struct ldb_context *sam_ctx;
|
|
};
|
|
|
|
#include "ldap_server/proto.h"
|