source4/ldap_server/ldap_server.h

   1 /*
   2    Unix SMB/CIFS implementation.
   3    LDAP server
   4    Copyright (C) Volker Lendecke 2004
   5    Copyright (C) Stefan Metzmacher 2004
   6
   7    This program is free software; you can redistribute it and/or modify
   8    it under the terms of the GNU General Public License as published by
   9    the Free Software Foundation; either version 3 of the License, or
  10    (at your option) any later version.
  11
  12    This program is distributed in the hope that it will be useful,
  13    but WITHOUT ANY WARRANTY; without even the implied warranty of
  14    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  15    GNU General Public License for more details.
  16
  17    You should have received a copy of the GNU General Public License
  18    along with this program.  If not, see <http://www.gnu.org/licenses/>.
  19 */
  20
  21 #include "libcli/ldap/libcli_ldap.h"
  22 #include "lib/socket/socket.h"
  23 #include "lib/stream/packet.h"
  24 #include "system/network.h"
  25 #include "lib/param/loadparm.h"
  26
  27 enum ldap_server_referral_scheme {
  28         LDAP_REFERRAL_SCHEME_LDAP,
  29         LDAP_REFERRAL_SCHEME_LDAPS
  30 };
  31
  32 struct ldapsrv_connection {
  33         struct ldapsrv_connection *next, *prev;
  34         struct loadparm_context *lp_ctx;
  35         struct stream_connection *connection;
  36         struct gensec_security *gensec;
  37         struct auth_session_info *session_info;
  38         struct ldapsrv_service *service;
  39         struct cli_credentials *server_credentials;
  40         struct ldb_context *ldb;
  41
  42         struct {
  43                 struct tevent_queue *send_queue;
  44                 struct tevent_req *read_req;
  45                 struct tstream_context *raw;
  46                 struct tstream_context *tls;
  47                 struct tstream_context *sasl;
  48                 struct tstream_context *active;
  49         } sockets;
  50
  51         bool global_catalog;
  52         bool is_privileged;
  53         enum ldap_server_require_strong_auth require_strong_auth;
  54         bool authz_logged;
  55         enum ldap_server_referral_scheme referral_scheme;
  56
  57         struct {
  58                 int initial_timeout;
  59                 int conn_idle_time;
  60                 int max_page_size;
  61                 int max_notifications;
  62                 int search_timeout;
  63                 struct timeval endtime;
  64                 const char *reason;
  65         } limits;
  66
  67         struct tevent_req *active_call;
  68
  69         struct ldapsrv_call *pending_calls;
  70 };
  71
  72 struct ldapsrv_call {
  73         struct ldapsrv_call *prev, *next;
  74         struct ldapsrv_connection *conn;
  75         struct ldap_message *request;
  76         struct ldapsrv_reply {
  77                 struct ldapsrv_reply *prev, *next;
  78                 struct ldap_message *msg;
  79                 DATA_BLOB blob;
  80         } *replies;
  81         struct iovec *out_iov;
  82         size_t iov_count;
  83         size_t reply_size;
  84
  85         struct tevent_req *(*wait_send)(TALLOC_CTX *mem_ctx,
  86                                         struct tevent_context *ev,
  87                                         void *private_data);
  88         NTSTATUS (*wait_recv)(struct tevent_req *req);
  89         void *wait_private;
  90
  91         struct tevent_req *(*postprocess_send)(TALLOC_CTX *mem_ctx,
  92                                                struct tevent_context *ev,
  93                                                void *private_data);
  94         NTSTATUS (*postprocess_recv)(struct tevent_req *req);
  95         void *postprocess_private;
  96
  97         struct {
  98                 bool busy;
  99                 uint64_t generation;
 100         } notification;
 101 };
 102
 103 /*
 104  * This matches the previous implicit size limit via talloc's maximum
 105  * allocation size
 106  */
 107 #define LDAP_SERVER_MAX_REPLY_SIZE ((size_t)(256 * 1024 * 1024))
 108
 109 /*
 110  * Start writing to the network before we hit this size
 111  */
 112 #define LDAP_SERVER_MAX_CHUNK_SIZE ((size_t)(25 * 1024 * 1024))
 113
 114 struct ldapsrv_service {
 115         struct tstream_tls_params *tls_params;
 116         struct task_server *task;
 117         struct tevent_queue *call_queue;
 118         struct ldapsrv_connection *connections;
 119         struct {
 120                 uint64_t generation;
 121                 struct tevent_req *retry;
 122         } notification;
 123
 124         struct ldb_context *sam_ctx;
 125 };
 126
 127 #include "ldap_server/proto.h"