2 Unix SMB/CIFS implementation.
6 Copyright (C) Andrew Tridgell 2005
7 Copyright (C) Simo Sorce 2005
9 This program is free software; you can redistribute it and/or modify
10 it under the terms of the GNU General Public License as published by
11 the Free Software Foundation; either version 2 of the License, or
12 (at your option) any later version.
14 This program is distributed in the hope that it will be useful,
15 but WITHOUT ANY WARRANTY; without even the implied warranty of
16 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17 GNU General Public License for more details.
19 You should have received a copy of the GNU General Public License
20 along with this program; if not, write to the Free Software
21 Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
25 #include "lib/ldb/include/ldb.h"
26 #include "lib/ldb/include/ldb_errors.h"
27 #include "lib/ldb/include/ldb_private.h"
28 #include "auth/gensec/gensec.h"
29 #include "system/time.h"
37 return 1 if a specific attribute has been requested
39 static int do_attribute(const char * const *attrs, const char *name)
41 return attrs == NULL ||
42 ldb_attr_in_list(attrs, name) ||
43 ldb_attr_in_list(attrs, "*");
48 add dynamically generated attributes to rootDSE result
50 static int rootdse_add_dynamic(struct ldb_module *module, struct ldb_message *msg, const char * const *attrs)
52 struct private_data *priv = talloc_get_type(module->private_data, struct private_data);
53 struct cli_credentials *server_creds;
55 msg->dn = ldb_dn_explode(msg, "");
57 /* don't return the distinduishedName attribute if any */
58 ldb_msg_remove_attr(msg, "distinguishedName");
60 if (do_attribute(attrs, "currentTime")) {
61 if (ldb_msg_add_steal_string(msg, "currentTime",
62 ldb_timestring(msg, time(NULL))) != 0) {
67 if (do_attribute(attrs, "supportedControl")) {
69 for (i = 0; i < priv->num_controls; i++) {
70 char *control = talloc_strdup(msg, priv->controls[i]);
74 if (ldb_msg_add_steal_string(msg, "supportedControl",
81 server_creds = talloc_get_type(ldb_get_opaque(module->ldb, "server_credentials"),
82 struct cli_credentials);
83 if (server_creds && do_attribute(attrs, "supportedSASLMechanisms")) {
84 struct gensec_security_ops **backends = gensec_security_all();
85 enum credentials_use_kerberos use_kerberos
86 = cli_credentials_get_kerberos_state(server_creds);
87 struct gensec_security_ops **ops
88 = gensec_use_kerberos_mechs(msg, backends, use_kerberos);
90 for (i = 0; ops && ops[i]; i++) {
91 if (ops[i]->sasl_name) {
92 char *sasl_name = talloc_strdup(msg, ops[i]->sasl_name);
96 if (ldb_msg_add_steal_string(msg, "supportedSASLMechanisms",
104 if (do_attribute(attrs, "highestCommittedUSN")) {
105 if (module->ldb->sequence_number != NULL &&
106 ldb_msg_add_fmt(msg, "highestCommittedUSN",
107 "%llu", module->ldb->sequence_number(module->ldb)) != 0) {
112 /* TODO: lots more dynamic attributes should be added here */
117 return LDB_ERR_OPERATIONS_ERROR;
121 handle search requests
124 struct rootdse_async_context {
125 struct ldb_module *module;
127 int (*up_callback)(struct ldb_context *, void *, struct ldb_async_result *);
129 const char * const * attrs;
132 static int rootdse_async_callback(struct ldb_context *ldb, void *context, struct ldb_async_result *ares)
134 struct rootdse_async_context *ac;
136 if (!context || !ares) {
137 ldb_set_errstring(ldb, talloc_asprintf(ldb, "NULL Context or Result in callback"));
141 ac = talloc_get_type(context, struct rootdse_async_context);
143 if (ares->type == LDB_REPLY_ENTRY) {
144 /* for each record returned post-process to add any dynamic
145 attributes that have been asked for */
146 if (rootdse_add_dynamic(ac->module, ares->message, ac->attrs) != LDB_SUCCESS) {
151 return ac->up_callback(ldb, ac->up_context, ares);
155 return LDB_ERR_OPERATIONS_ERROR;
158 static int rootdse_search(struct ldb_module *module, struct ldb_request *req)
160 struct rootdse_async_context *ac;
161 struct ldb_request *down_req;
164 /* see if its for the rootDSE */
165 if (req->op.search.scope != LDB_SCOPE_BASE ||
166 (req->op.search.base && req->op.search.base->comp_num != 0)) {
167 return ldb_next_request(module, req);
170 ac = talloc(req, struct rootdse_async_context);
172 return LDB_ERR_OPERATIONS_ERROR;
176 ac->up_context = req->async.context;
177 ac->up_callback = req->async.callback;
178 ac->attrs = req->op.search.attrs;
180 down_req = talloc_zero(req, struct ldb_request);
181 if (down_req == NULL) {
182 return LDB_ERR_OPERATIONS_ERROR;
185 down_req->operation = req->operation;
186 /* in our db we store the rootDSE with a DN of cn=rootDSE */
187 down_req->op.search.base = ldb_dn_explode(down_req, "cn=rootDSE");
188 down_req->op.search.scope = LDB_SCOPE_BASE;
189 down_req->op.search.tree = ldb_parse_tree(down_req, "dn=*");
190 if (down_req->op.search.base == NULL || down_req->op.search.tree == NULL) {
191 ldb_oom(module->ldb);
192 talloc_free(down_req);
193 return LDB_ERR_OPERATIONS_ERROR;
195 down_req->op.search.attrs = req->op.search.attrs;
196 down_req->controls = req->controls;
198 down_req->async.context = ac;
199 down_req->async.callback = rootdse_async_callback;
200 ldb_set_timeout_from_prev_req(module->ldb, req, down_req);
202 /* perform the search */
203 ret = ldb_next_request(module, down_req);
205 /* do not free down_req as the call results may be linked to it,
206 * it will be freed when the upper level request get freed */
207 if (ret == LDB_SUCCESS) {
208 req->async.handle = down_req->async.handle;
214 static int rootdse_register_control(struct ldb_module *module, struct ldb_request *req)
216 struct private_data *priv = talloc_get_type(module->private_data, struct private_data);
219 list = talloc_realloc(priv, priv->controls, char *, priv->num_controls + 1);
221 return LDB_ERR_OPERATIONS_ERROR;
224 list[priv->num_controls] = talloc_strdup(list, req->op.reg.oid);
225 if (!list[priv->num_controls]) {
226 return LDB_ERR_OPERATIONS_ERROR;
229 priv->num_controls += 1;
230 priv->controls = list;
236 static int rootdse_request(struct ldb_module *module, struct ldb_request *req)
238 switch (req->operation) {
240 case LDB_REQ_REGISTER:
241 return rootdse_register_control(module, req);
246 return ldb_next_request(module, req);
249 static int rootdse_init(struct ldb_module *module)
251 struct private_data *data;
253 data = talloc(module, struct private_data);
258 data->num_controls = 0;
259 data->controls = NULL;
260 module->private_data = data;
262 return ldb_next_init(module);
265 static const struct ldb_module_ops rootdse_ops = {
267 .init_context = rootdse_init,
268 .search = rootdse_search,
269 .request = rootdse_request
272 int rootdse_module_init(void)
274 return ldb_register_module(&rootdse_ops);