mirror of
https://github.com/samba-team/samba.git
synced 2024-12-23 17:34:34 +03:00
0c7cfb7a11
Reload certificates with the command 'smbcontrol ldap_server reload-certs'. The message is send to the master process, who forwards it to the workers processes. The master process reload and, if necessary, create the certificates first, then the workers processes reload them. Pair-Programmed-With: Stefan Metzmacher <metze@samba.org> Signed-off-by: Jule Anger <janger@samba.org> Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
134 lines
3.5 KiB
C
134 lines
3.5 KiB
C
/*
|
|
Unix SMB/CIFS implementation.
|
|
LDAP server
|
|
Copyright (C) Volker Lendecke 2004
|
|
Copyright (C) Stefan Metzmacher 2004
|
|
|
|
This program is free software; you can redistribute it and/or modify
|
|
it under the terms of the GNU General Public License as published by
|
|
the Free Software Foundation; either version 3 of the License, or
|
|
(at your option) any later version.
|
|
|
|
This program is distributed in the hope that it will be useful,
|
|
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
GNU General Public License for more details.
|
|
|
|
You should have received a copy of the GNU General Public License
|
|
along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
#include "libcli/ldap/libcli_ldap.h"
|
|
#include "lib/socket/socket.h"
|
|
#include "lib/stream/packet.h"
|
|
#include "system/network.h"
|
|
#include "lib/param/loadparm.h"
|
|
|
|
enum ldap_server_referral_scheme {
|
|
LDAP_REFERRAL_SCHEME_LDAP,
|
|
LDAP_REFERRAL_SCHEME_LDAPS
|
|
};
|
|
|
|
struct ldapsrv_connection {
|
|
struct ldapsrv_connection *next, *prev;
|
|
struct loadparm_context *lp_ctx;
|
|
struct stream_connection *connection;
|
|
struct gensec_security *gensec;
|
|
struct auth_session_info *session_info;
|
|
struct ldapsrv_service *service;
|
|
struct cli_credentials *server_credentials;
|
|
struct ldb_context *ldb;
|
|
|
|
struct {
|
|
struct tevent_queue *send_queue;
|
|
struct tevent_req *read_req;
|
|
struct tstream_context *raw;
|
|
struct tstream_context *tls;
|
|
struct tstream_context *sasl;
|
|
struct tstream_context *active;
|
|
} sockets;
|
|
|
|
bool global_catalog;
|
|
bool is_privileged;
|
|
enum ldap_server_require_strong_auth require_strong_auth;
|
|
bool authz_logged;
|
|
enum ldap_server_referral_scheme referral_scheme;
|
|
|
|
struct {
|
|
int initial_timeout;
|
|
int conn_idle_time;
|
|
int max_page_size;
|
|
int max_notifications;
|
|
int search_timeout;
|
|
struct timeval endtime;
|
|
struct timeval expire_time; /* Krb5 ticket expiry */
|
|
const char *reason;
|
|
} limits;
|
|
|
|
struct tevent_req *active_call;
|
|
struct tevent_req *deferred_expire_disconnect;
|
|
|
|
struct ldapsrv_call *pending_calls;
|
|
};
|
|
|
|
struct ldapsrv_call {
|
|
struct ldapsrv_call *prev, *next;
|
|
struct ldapsrv_connection *conn;
|
|
struct ldap_message *request;
|
|
struct ldapsrv_reply {
|
|
struct ldapsrv_reply *prev, *next;
|
|
struct ldap_message *msg;
|
|
DATA_BLOB blob;
|
|
} *replies;
|
|
struct iovec *out_iov;
|
|
size_t iov_count;
|
|
size_t reply_size;
|
|
|
|
struct tevent_req *(*wait_send)(TALLOC_CTX *mem_ctx,
|
|
struct tevent_context *ev,
|
|
void *private_data);
|
|
NTSTATUS (*wait_recv)(struct tevent_req *req);
|
|
void *wait_private;
|
|
|
|
struct tevent_req *(*postprocess_send)(TALLOC_CTX *mem_ctx,
|
|
struct tevent_context *ev,
|
|
void *private_data);
|
|
NTSTATUS (*postprocess_recv)(struct tevent_req *req);
|
|
void *postprocess_private;
|
|
|
|
struct {
|
|
bool busy;
|
|
uint64_t generation;
|
|
} notification;
|
|
};
|
|
|
|
/*
|
|
* This matches the previous implicit size limit via talloc's maximum
|
|
* allocation size
|
|
*/
|
|
#define LDAP_SERVER_MAX_REPLY_SIZE ((size_t)(256 * 1024 * 1024))
|
|
|
|
/*
|
|
* Start writing to the network before we hit this size
|
|
*/
|
|
#define LDAP_SERVER_MAX_CHUNK_SIZE ((size_t)(25 * 1024 * 1024))
|
|
|
|
struct ldapsrv_service {
|
|
const char *dns_host_name;
|
|
pid_t parent_pid;
|
|
struct tstream_tls_params *tls_params;
|
|
struct tevent_queue *call_queue;
|
|
struct ldapsrv_connection *connections;
|
|
struct {
|
|
uint64_t generation;
|
|
struct tevent_req *retry;
|
|
} notification;
|
|
|
|
struct loadparm_context *lp_ctx;
|
|
struct tevent_context *current_ev;
|
|
struct imessaging_context *current_msg;
|
|
struct ldb_context *sam_ctx;
|
|
};
|
|
|
|
#include "ldap_server/proto.h"
|