include/smbldap.h

ソースコードを見る。

データ構造
struct	_attrib_map_entry
struct	smbldap_state
	Struct to keep the state for all the ldap stuff [詳細]
struct	ldapsam_privates
型定義
typedef _attrib_map_entry	ATTRIB_MAP_ENTRY
関数
NTSTATUS	smbldap_init (TALLOC_CTX *mem_ctx, const char *location, struct smbldap_state **smbldap_state)
const char *	get_attr_key2string (ATTRIB_MAP_ENTRY table[], int key)
const char **	get_attr_list (TALLOC_CTX *mem_ctx, ATTRIB_MAP_ENTRY table[])
void	smbldap_set_mod (LDAPMod ***modlist, int modop, const char *attribute, const char *value)
void	smbldap_make_mod (LDAP *ldap_struct, LDAPMessage *existing, LDAPMod ***mods, const char *attribute, const char *newval)
BOOL	smbldap_get_single_attribute (LDAP *ldap_struct, LDAPMessage *entry, const char *attribute, char *value, int max_len)
BOOL	smbldap_get_single_pstring (LDAP *ldap_struct, LDAPMessage *entry, const char *attribute, pstring value)
char *	smbldap_get_dn (LDAP *ld, LDAPMessage *entry)
int	smbldap_modify (struct smbldap_state *ldap_state, const char *dn, LDAPMod *attrs[])
NTSTATUS	pdb_init_ldapsam_compat (struct pdb_methods **pdb_method, const char *location)
void	private_data_free_fn (void **result)
int	ldapsam_search_suffix_by_name (struct ldapsam_privates *ldap_state, const char *user, LDAPMessage **result, const char **attr)
NTSTATUS	pdb_init_ldapsam (struct pdb_methods **pdb_method, const char *location)
const char **	get_userattr_list (TALLOC_CTX *mem_ctx, int schema_ver)
char *	smbldap_talloc_single_attribute (LDAP *ldap_struct, LDAPMessage *entry, const char *attribute, TALLOC_CTX *mem_ctx)
void	talloc_autofree_ldapmsg (TALLOC_CTX *mem_ctx, LDAPMessage *result)
void	talloc_autofree_ldapmod (TALLOC_CTX *mem_ctx, LDAPMod **mod)
const char *	smbldap_talloc_dn (TALLOC_CTX *mem_ctx, LDAP *ld, LDAPMessage *entry)
変数
ATTRIB_MAP_ENTRY	attrib_map_v22 []
ATTRIB_MAP_ENTRY	attrib_map_to_delete_v22 []
ATTRIB_MAP_ENTRY	attrib_map_v30 []
ATTRIB_MAP_ENTRY	attrib_map_to_delete_v30 []
ATTRIB_MAP_ENTRY	dominfo_attr_list []
ATTRIB_MAP_ENTRY	groupmap_attr_list []
ATTRIB_MAP_ENTRY	groupmap_attr_list_to_delete []
ATTRIB_MAP_ENTRY	idpool_attr_list []
ATTRIB_MAP_ENTRY	sidmap_attr_list []
ATTRIB_MAP_ENTRY	trustpw_attr_list []

---

型定義

typedef struct _attrib_map_entry ATTRIB_MAP_ENTRY

---

関数

NTSTATUS smbldap_init	(	TALLOC_CTX *	mem_ctx,
		const char *	location,
		struct smbldap_state **	smbldap_state
	)

smbldap.c の 1594 行で定義されています。

参照先 smb_register_idle_event()・smbldap_idle_fn()・talloc_strdup().

参照元 idmap_ldap_alloc_init()・idmap_ldap_db_init()・net_sam_provision()・pdb_init_ldapsam_common().

{
        *smbldap_state = TALLOC_ZERO_P(mem_ctx, struct smbldap_state);
        if (!*smbldap_state) {
                DEBUG(0, ("talloc() failed for ldapsam private_data!\n"));
                return NT_STATUS_NO_MEMORY;
        }

        if (location) {
                (*smbldap_state)->uri = talloc_strdup(mem_ctx, location);
        } else {
                (*smbldap_state)->uri = "ldap://localhost";
        }

        (*smbldap_state)->event_id =
                smb_register_idle_event(smbldap_idle_fn, (void *)(*smbldap_state),
                                        SMBLDAP_IDLE_TIME);

        if ((*smbldap_state)->event_id == SMB_EVENT_ID_INVALID) {
                DEBUG(0,("Failed to register LDAP idle event!\n"));
                return NT_STATUS_INVALID_HANDLE;
        }

        return NT_STATUS_OK;
}

const char* get_attr_key2string	(	ATTRIB_MAP_ENTRY	table[],
		int	key
	)

smbldap.c の 218 行で定義されています。

参照先 _attrib_map_entry::name.

参照元 add_new_domain_account_policies()・add_new_domain_info()・get_userattr_key2string()・idmap_ldap_allocate_id()・idmap_ldap_get_hwm()・idmap_ldap_set_hwm()・idmap_ldap_set_mapping()・idmap_ldap_sids_to_unixids()・idmap_ldap_unixids_to_sids()・init_group_from_ldap()・ldapsam_enum_aliasmem()・ldapsam_getgrgid()・ldapsam_getgrnam()・ldapsam_getgrsid()・ldapsam_modify_aliasmem()・pdb_init_ldapsam()・smbldap_search_domain_info()・verify_idpool().

{
        int i = 0;
        
        while ( table[i].attrib != LDAP_ATTR_LIST_END ) {
                if ( table[i].attrib == key )
                        return table[i].name;
                i++;
        }
        
        return NULL;
}

const char** get_attr_list	(	TALLOC_CTX *	mem_ctx,
		ATTRIB_MAP_ENTRY	table[]
	)

smbldap.c の 236 行で定義されています。

参照先 name・talloc_strdup().

参照元 add_new_domain_info()・get_userattr_delete_list()・get_userattr_list()・idmap_ldap_allocate_id()・idmap_ldap_get_hwm()・idmap_ldap_set_hwm()・idmap_ldap_sids_to_unixids()・idmap_ldap_unixids_to_sids()・ldapsam_delete_group_mapping_entry()・ldapsam_map_posixgroup()・ldapsam_search_one_group()・ldapsam_setsamgrent()・ldapsam_update_group_mapping_entry()・smbldap_search_domain_info()・verify_idpool().

{
        const char **names;
        int i = 0;
        
        while ( table[i].attrib != LDAP_ATTR_LIST_END )
                i++;
        i++;

        names = TALLOC_ARRAY( mem_ctx, const char*, i );
        if ( !names ) {
                DEBUG(0,("get_attr_list: out of memory\n"));
                return NULL;
        }

        i = 0;
        while ( table[i].attrib != LDAP_ATTR_LIST_END ) {
                names[i] = talloc_strdup( names, table[i].name );
                i++;
        }
        names[i] = NULL;
        
        return names;
}

void smbldap_set_mod	(	LDAPMod ***	modlist,
		int	modop,
		const char *	attribute,
		const char *	value
	)

smbldap.c の 389 行で定義されています。

参照先 push_utf8_allocate()・smb_panic()・strequal().

参照元 add_new_domain_account_policies()・add_new_domain_info()・idmap_ldap_allocate_id()・idmap_ldap_set_hwm()・idmap_ldap_set_mapping()・ldapsam_add_sam_account()・ldapsam_change_groupmem()・ldapsam_create_dom_group()・ldapsam_create_user()・ldapsam_delete_entry()・ldapsam_map_posixgroup()・ldapsam_modify_aliasmem()・ldapsam_modify_entry()・ldapsam_set_account_policy_in_ldap()・net_sam_provision()・pdb_nds_set_password()・smbldap_make_mod()・verify_idpool().

{
        LDAPMod **mods;
        int i;
        int j;

        mods = *modlist;

        /* sanity checks on the mod values */

        if (attribute == NULL || *attribute == '\0') {
                return; 
        }

#if 0   /* commented out after discussion with abartlet.  Do not reenable.
           left here so other do not re-add similar code   --jerry */
        if (value == NULL || *value == '\0')
                return;
#endif

        if (mods == NULL) {
                mods = SMB_MALLOC_P(LDAPMod *);
                if (mods == NULL) {
                        smb_panic("smbldap_set_mod: out of memory!\n");
                        /* notreached. */
                        abort();
                }
                mods[0] = NULL;
        }

        for (i = 0; mods[i] != NULL; ++i) {
                if (mods[i]->mod_op == modop && strequal(mods[i]->mod_type, attribute))
                        break;
        }

        if (mods[i] == NULL) {
                mods = SMB_REALLOC_ARRAY (mods, LDAPMod *, i + 2);
                if (mods == NULL) {
                        smb_panic("smbldap_set_mod: out of memory!\n");
                        /* notreached. */
                        abort();
                }
                mods[i] = SMB_MALLOC_P(LDAPMod);
                if (mods[i] == NULL) {
                        smb_panic("smbldap_set_mod: out of memory!\n");
                        /* notreached. */
                        abort();
                }
                mods[i]->mod_op = modop;
                mods[i]->mod_values = NULL;
                mods[i]->mod_type = SMB_STRDUP(attribute);
                mods[i + 1] = NULL;
        }

        if (value != NULL) {
                char *utf8_value = NULL;

                j = 0;
                if (mods[i]->mod_values != NULL) {
                        for (; mods[i]->mod_values[j] != NULL; j++);
                }
                mods[i]->mod_values = SMB_REALLOC_ARRAY(mods[i]->mod_values, char *, j + 2);
                                               
                if (mods[i]->mod_values == NULL) {
                        smb_panic("smbldap_set_mod: out of memory!\n");
                        /* notreached. */
                        abort();
                }

                if (push_utf8_allocate(&utf8_value, value) == (size_t)-1) {
                        smb_panic("smbldap_set_mod: String conversion failure!\n");
                        /* notreached. */
                        abort();
                }

                mods[i]->mod_values[j] = utf8_value;

                mods[i]->mod_values[j + 1] = NULL;
        }
        *modlist = mods;
}

void smbldap_make_mod	(	LDAP *	ldap_struct,
		LDAPMessage *	existing,
		LDAPMod ***	mods,
		const char *	attribute,
		const char *	newval
	)

smbldap.c の 476 行で定義されています。

参照先 smbldap_get_single_attribute()・smbldap_set_mod()・StrCaseCmp().

参照元 idmap_ldap_set_mapping()・init_ldap_from_sam()・ldapsam_get_new_rid()・ldapsam_map_posixgroup()・ldapsam_set_primary_group()・ldapsam_update_group_mapping_entry().

{
        char oldval[2048]; /* current largest allowed value is mungeddial */
        BOOL existed;

        if (attribute == NULL) {
                /* This can actually happen for ldapsam_compat where we for
                 * example don't have a password history */
                return;
        }

        if (existing != NULL) {
                existed = smbldap_get_single_attribute(ldap_struct, existing, attribute, oldval, sizeof(oldval));
        } else {
                existed = False;
                *oldval = '\0';
        }

        /* all of our string attributes are case insensitive */
        
        if (existed && newval && (StrCaseCmp(oldval, newval) == 0)) {
                
                /* Believe it or not, but LDAP will deny a delete and
                   an add at the same time if the values are the
                   same... */
                DEBUG(10,("smbldap_make_mod: attribute |%s| not changed.\n", attribute));
                return;
        }

        if (existed) {
                /* There has been no value before, so don't delete it.
                 * Here's a possible race: We might end up with
                 * duplicate attributes */
                /* By deleting exactly the value we found in the entry this
                 * should be race-free in the sense that the LDAP-Server will
                 * deny the complete operation if somebody changed the
                 * attribute behind our back. */
                /* This will also allow modifying single valued attributes 
                 * in Novell NDS. In NDS you have to first remove attribute and then
                 * you could add new value */
                
                DEBUG(10,("smbldap_make_mod: deleting attribute |%s| values |%s|\n", attribute, oldval));
                smbldap_set_mod(mods, LDAP_MOD_DELETE, attribute, oldval);
        }

        /* Regardless of the real operation (add or modify)
           we add the new value here. We rely on deleting
           the old value, should it exist. */

        if ((newval != NULL) && (strlen(newval) > 0)) {
                DEBUG(10,("smbldap_make_mod: adding attribute |%s| value |%s|\n", attribute, newval));
                smbldap_set_mod(mods, LDAP_MOD_ADD, attribute, newval);
        }
}

BOOL smbldap_get_single_attribute	(	LDAP *	ldap_struct,
		LDAPMessage *	entry,
		const char *	attribute,
		char *	value,
		int	max_len
	)

smbldap.c の 265 行で定義されています。

参照先 CH_UNIX・CH_UTF8・convert_string()・values.

参照元 init_sam_from_ldap()・ldapsam_extract_rid_from_entry()・smbldap_get_single_pstring()・smbldap_make_mod().

{
        char **values;
        
        if ( !attribute )
                return False;
                
        value[0] = '\0';

        if ((values = ldap_get_values (ldap_struct, entry, attribute)) == NULL) {
                DEBUG (10, ("smbldap_get_single_attribute: [%s] = [<does not exist>]\n", attribute));
                
                return False;
        }
        
        if (convert_string(CH_UTF8, CH_UNIX,values[0], -1, value, max_len, False) == (size_t)-1) {
                DEBUG(1, ("smbldap_get_single_attribute: string conversion of [%s] = [%s] failed!\n", 
                          attribute, values[0]));
                ldap_value_free(values);
                return False;
        }
        
        ldap_value_free(values);
#ifdef DEBUG_PASSWORDS
        DEBUG (100, ("smbldap_get_single_attribute: [%s] = [%s]\n", attribute, value));
#endif  
        return True;
}

BOOL smbldap_get_single_pstring	(	LDAP *	ldap_struct,
		LDAPMessage *	entry,
		const char *	attribute,
		pstring	value
	)

smbldap.c の 296 行で定義されています。

参照先 smbldap_get_single_attribute().

参照元 init_group_from_ldap()・init_sam_from_ldap()・ldapsam_get_entry_timestamp()・pdb_init_ldapsam().

{
        return smbldap_get_single_attribute(ldap_struct, entry,
                                            attribute, value, 
                                            sizeof(pstring));
}

char* smbldap_get_dn	(	LDAP *	ld,
		LDAPMessage *	entry
	)

smbldap.c の 1623 行で定義されています。

参照先 pull_utf8_allocate().

参照元 init_sam_from_ldap()・ldapsam_add_sam_account()・ldapsam_modify_aliasmem()・ldapsam_update_sam_account()・pdb_init_ldapsam()・pdb_nds_update_login_attempts().

{
        char *utf8_dn, *unix_dn;

        utf8_dn = ldap_get_dn(ld, entry);
        if (!utf8_dn) {
                DEBUG (5, ("smbldap_get_dn: ldap_get_dn failed\n"));
                return NULL;
        }
        if (pull_utf8_allocate(&unix_dn, utf8_dn) == (size_t)-1) {
                DEBUG (0, ("smbldap_get_dn: String conversion failure utf8 [%s]\n", utf8_dn));
                return NULL;
        }
        ldap_memfree(utf8_dn);
        return unix_dn;
}

int smbldap_modify	(	struct smbldap_state *	ldap_state,
		const char *	dn,
		LDAPMod *	attrs[]
	)

smbldap.c の 1368 行で定義されています。

参照先 another_ldap_try()・smbldap_state::ldap_struct・LDAP_SUCCESS・push_utf8_allocate().

参照元 add_new_domain_account_policies()・idmap_ldap_allocate_id()・idmap_ldap_set_hwm()・ldapsam_change_groupmem()・ldapsam_create_dom_group()・ldapsam_create_user()・ldapsam_delete_entry()・ldapsam_get_new_rid()・ldapsam_map_posixgroup()・ldapsam_modify_aliasmem()・ldapsam_modify_entry()・ldapsam_set_account_policy_in_ldap()・ldapsam_set_primary_group()・ldapsam_update_group_mapping_entry()・pdb_nds_set_password()・verify_idpool().

{
        int             rc = LDAP_SERVER_DOWN;
        int             attempts = 0;
        char           *utf8_dn;
        time_t          endtime = time(NULL)+lp_ldap_timeout();

        SMB_ASSERT(ldap_state);

        DEBUG(5,("smbldap_modify: dn => [%s]\n", dn ));

        if (push_utf8_allocate(&utf8_dn, dn) == (size_t)-1) {
                return LDAP_NO_MEMORY;
        }

        while (another_ldap_try(ldap_state, &rc, &attempts, endtime)) {
                rc = ldap_modify_s(ldap_state->ldap_struct, utf8_dn, attrs);
                if (rc != LDAP_SUCCESS) {
                        char *ld_error = NULL;
                        int ld_errno;

                        ldap_get_option(ldap_state->ldap_struct,
                                        LDAP_OPT_ERROR_NUMBER, &ld_errno);

                        ldap_get_option(ldap_state->ldap_struct,
                                        LDAP_OPT_ERROR_STRING, &ld_error);
                        DEBUG(10, ("Failed to modify dn: %s, error: %d (%s) "
                                   "(%s)\n", dn, ld_errno,
                                   ldap_err2string(rc),
                                   ld_error ? ld_error : "unknown"));
                        SAFE_FREE(ld_error);

                        if (ld_errno == LDAP_SERVER_DOWN) {
                                ldap_unbind(ldap_state->ldap_struct);
                                ldap_state->ldap_struct = NULL;
                        }
                }
        }
                
        SAFE_FREE(utf8_dn);
        return rc;
}

NTSTATUS pdb_init_ldapsam_compat	(	struct pdb_methods **	pdb_method,
		const char *	location
	)

pdb_ldap.c の 5576 行で定義されています。

参照先 ldapsam_privates::domain_sid・get_global_sam_sid()・pdb_init_ldapsam_common()・ldapsam_privates::schema_ver・sid_copy()・talloc_strdup()・trim_char().

参照元 pdb_init_NDS_ldapsam_compat()・pdb_ldap_init().

{
        NTSTATUS nt_status;
        struct ldapsam_privates *ldap_state;
        char *uri = talloc_strdup( NULL, location );

        trim_char( uri, '\"', '\"' );
        nt_status = pdb_init_ldapsam_common( pdb_method, uri );
        if ( uri )
                TALLOC_FREE( uri );

        if ( !NT_STATUS_IS_OK(nt_status) ) {
                return nt_status;
        }

        (*pdb_method)->name = "ldapsam_compat";

        ldap_state = (struct ldapsam_privates *)((*pdb_method)->private_data);
        ldap_state->schema_ver = SCHEMAVER_SAMBAACCOUNT;

        sid_copy(&ldap_state->domain_sid, get_global_sam_sid());

        return NT_STATUS_OK;
}

void private_data_free_fn

(

void **

result

)

int ldapsam_search_suffix_by_name	(	struct ldapsam_privates *	ldap_state,
		const char *	user,
		LDAPMessage **	result,
		const char **	attr
	)

pdb_ldap.c の 320 行で定義されています。

参照先 all_string_sub()・escape_ldap_string_alloc()・get_objclass_filter()・pstr_sprintf()・ldapsam_privates::schema_ver・smbldap_search_suffix()・ldapsam_privates::smbldap_state.

参照元 ldapsam_add_sam_account()・ldapsam_delete_sam_account()・ldapsam_getsampwnam()・ldapsam_update_sam_account()・pdb_nds_update_login_attempts().

{
        pstring filter;
        char *escape_user = escape_ldap_string_alloc(user);

        if (!escape_user) {
                return LDAP_NO_MEMORY;
        }

        /*
         * in the filter expression, replace %u with the real name
         * so in ldap filter, %u MUST exist :-)
         */
        pstr_sprintf(filter, "(&%s%s)", "(uid=%u)", 
                get_objclass_filter(ldap_state->schema_ver));

        /* 
         * have to use this here because $ is filtered out
           * in pstring_sub
         */
        

        all_string_sub(filter, "%u", escape_user, sizeof(pstring));
        SAFE_FREE(escape_user);

        return smbldap_search_suffix(ldap_state->smbldap_state, filter, attr, result);
}

NTSTATUS pdb_init_ldapsam	(	struct pdb_methods **	pdb_method,
		const char *	location
	)

pdb_ldap.c の 5605 行で定義されています。

参照先 algorithmic_rid_base()・ldapsam_privates::domain_dn・ldapsam_privates::domain_name・ldapsam_privates::domain_sid・dominfo_attr_list・get_attr_key2string()・get_global_sam_sid()・get_userattr_key2string()・smbldap_state::ldap_struct・ldapsam_add_aliasmem()・ldapsam_add_groupmem()・ldapsam_alias_memberships()・ldapsam_create_dom_group()・ldapsam_create_user()・ldapsam_del_aliasmem()・ldapsam_del_groupmem()・ldapsam_delete_dom_group()・ldapsam_delete_user()・ldapsam_enum_aliasmem()・ldapsam_enum_group_members()・ldapsam_enum_group_memberships()・ldapsam_lookup_rids()・ldapsam_search_aliases()・ldapsam_search_groups()・ldapsam_search_users()・ldapsam_set_primary_group()・ldapsam_sid_to_id()・lp_parm_bool()・pdb_init_ldapsam_common()・ldapsam_privates::schema_ver・secrets_fetch_domain_sid()・secrets_store_domain_sid()・sid_copy()・sid_equal()・sid_to_string()・smb_xstrdup()・smbldap_get_dn()・smbldap_get_single_pstring()・smbldap_search_domain_info()・ldapsam_privates::smbldap_state・string_to_sid()・talloc_strdup()・trim_char().

参照元 pdb_init_NDS_ldapsam()・pdb_ldap_init().

{
        NTSTATUS nt_status;
        struct ldapsam_privates *ldap_state;
        uint32 alg_rid_base;
        pstring alg_rid_base_string;
        LDAPMessage *result = NULL;
        LDAPMessage *entry = NULL;
        DOM_SID ldap_domain_sid;
        DOM_SID secrets_domain_sid;
        pstring domain_sid_string;
        char *dn;
        char *uri = talloc_strdup( NULL, location );

        trim_char( uri, '\"', '\"' );
        nt_status = pdb_init_ldapsam_common(pdb_method, uri);
        if ( uri )
                TALLOC_FREE( uri );

        if (!NT_STATUS_IS_OK(nt_status)) {
                return nt_status;
        }

        (*pdb_method)->name = "ldapsam";

        (*pdb_method)->add_aliasmem = ldapsam_add_aliasmem;
        (*pdb_method)->del_aliasmem = ldapsam_del_aliasmem;
        (*pdb_method)->enum_aliasmem = ldapsam_enum_aliasmem;
        (*pdb_method)->enum_alias_memberships = ldapsam_alias_memberships;
        (*pdb_method)->search_users = ldapsam_search_users;
        (*pdb_method)->search_groups = ldapsam_search_groups;
        (*pdb_method)->search_aliases = ldapsam_search_aliases;

        if (lp_parm_bool(-1, "ldapsam", "trusted", False)) {
                (*pdb_method)->enum_group_members = ldapsam_enum_group_members;
                (*pdb_method)->enum_group_memberships =
                        ldapsam_enum_group_memberships;
                (*pdb_method)->lookup_rids = ldapsam_lookup_rids;
                (*pdb_method)->sid_to_id = ldapsam_sid_to_id;
                
                if (lp_parm_bool(-1, "ldapsam", "editposix", False)) {
                        (*pdb_method)->create_user = ldapsam_create_user;
                        (*pdb_method)->delete_user = ldapsam_delete_user;
                        (*pdb_method)->create_dom_group = ldapsam_create_dom_group;
                        (*pdb_method)->delete_dom_group = ldapsam_delete_dom_group;
                        (*pdb_method)->add_groupmem = ldapsam_add_groupmem;
                        (*pdb_method)->del_groupmem = ldapsam_del_groupmem;
                        (*pdb_method)->set_unix_primary_group = ldapsam_set_primary_group;
                }
        }

        ldap_state = (struct ldapsam_privates *)((*pdb_method)->private_data);
        ldap_state->schema_ver = SCHEMAVER_SAMBASAMACCOUNT;

        /* Try to setup the Domain Name, Domain SID, algorithmic rid base */
        
        nt_status = smbldap_search_domain_info(ldap_state->smbldap_state,
                                               &result, 
                                               ldap_state->domain_name, True);
        
        if ( !NT_STATUS_IS_OK(nt_status) ) {
                DEBUG(2, ("pdb_init_ldapsam: WARNING: Could not get domain "
                          "info, nor add one to the domain\n"));
                DEBUGADD(2, ("pdb_init_ldapsam: Continuing on regardless, "
                             "will be unable to allocate new users/groups, "
                             "and will risk BDCs having inconsistant SIDs\n"));
                sid_copy(&ldap_state->domain_sid, get_global_sam_sid());
                return NT_STATUS_OK;
        }

        /* Given that the above might fail, everything below this must be
         * optional */
        
        entry = ldap_first_entry(ldap_state->smbldap_state->ldap_struct,
                                 result);
        if (!entry) {
                DEBUG(0, ("pdb_init_ldapsam: Could not get domain info "
                          "entry\n"));
                ldap_msgfree(result);
                return NT_STATUS_UNSUCCESSFUL;
        }

        dn = smbldap_get_dn(ldap_state->smbldap_state->ldap_struct, entry);
        if (!dn) {
                ldap_msgfree(result);
                return NT_STATUS_UNSUCCESSFUL;
        }

        ldap_state->domain_dn = smb_xstrdup(dn);
        ldap_memfree(dn);

        if (smbldap_get_single_pstring(
                    ldap_state->smbldap_state->ldap_struct,
                    entry, 
                    get_userattr_key2string(ldap_state->schema_ver,
                                            LDAP_ATTR_USER_SID), 
                    domain_sid_string)) {
                BOOL found_sid;
                if (!string_to_sid(&ldap_domain_sid, domain_sid_string)) {
                        DEBUG(1, ("pdb_init_ldapsam: SID [%s] could not be "
                                  "read as a valid SID\n", domain_sid_string));
                        ldap_msgfree(result);
                        return NT_STATUS_INVALID_PARAMETER;
                }
                found_sid = secrets_fetch_domain_sid(ldap_state->domain_name,
                                                     &secrets_domain_sid);
                if (!found_sid || !sid_equal(&secrets_domain_sid,
                                             &ldap_domain_sid)) {
                        fstring new_sid_str, old_sid_str;
                        DEBUG(1, ("pdb_init_ldapsam: Resetting SID for domain "
                                  "%s based on pdb_ldap results %s -> %s\n",
                                  ldap_state->domain_name,
                                  sid_to_string(old_sid_str,
                                                &secrets_domain_sid),
                                  sid_to_string(new_sid_str,
                                                &ldap_domain_sid)));
                        
                        /* reset secrets.tdb sid */
                        secrets_store_domain_sid(ldap_state->domain_name,
                                                 &ldap_domain_sid);
                        DEBUG(1, ("New global sam SID: %s\n",
                                  sid_to_string(new_sid_str,
                                                get_global_sam_sid())));
                }
                sid_copy(&ldap_state->domain_sid, &ldap_domain_sid);
        }

        if (smbldap_get_single_pstring(
                    ldap_state->smbldap_state->ldap_struct,
                    entry, 
                    get_attr_key2string( dominfo_attr_list,
                                         LDAP_ATTR_ALGORITHMIC_RID_BASE ),
                    alg_rid_base_string)) {
                alg_rid_base = (uint32)atol(alg_rid_base_string);
                if (alg_rid_base != algorithmic_rid_base()) {
                        DEBUG(0, ("The value of 'algorithmic RID base' has "
                                  "changed since the LDAP\n"
                                  "database was initialised.  Aborting. \n"));
                        ldap_msgfree(result);
                        return NT_STATUS_UNSUCCESSFUL;
                }
        }
        ldap_msgfree(result);

        return NT_STATUS_OK;
}

const char** get_userattr_list	(	TALLOC_CTX *	mem_ctx,
		int	schema_ver
	)

pdb_ldap.c の 116 行で定義されています。

参照先 attrib_map_v22・attrib_map_v30・get_attr_list().

参照元 ldapsam_add_sam_account()・ldapsam_get_ldap_user_by_sid()・ldapsam_getsampwnam()・ldapsam_setsampwent()・ldapsam_update_sam_account()・pdb_nds_update_login_attempts().

{
        switch ( schema_ver ) {
                case SCHEMAVER_SAMBAACCOUNT:
                        return get_attr_list( mem_ctx, attrib_map_v22 );
                        
                case SCHEMAVER_SAMBASAMACCOUNT:
                        return get_attr_list( mem_ctx, attrib_map_v30 );
                default:
                        DEBUG(0,("get_userattr_list: unknown schema version specified!\n"));
                        break;
        }
        
        return NULL;
}

char* smbldap_talloc_single_attribute	(	LDAP *	ldap_struct,
		LDAPMessage *	entry,
		const char *	attribute,
		TALLOC_CTX *	mem_ctx
	)

smbldap.c の 304 行で定義されています。

参照先 pull_utf8_talloc()・result・values.

参照元 idmap_ldap_allocate_id()・idmap_ldap_get_hwm()・idmap_ldap_sids_to_unixids()・idmap_ldap_unixids_to_sids()・ldapsam_change_groupmem()・ldapsam_create_dom_group()・ldapsam_create_user()・ldapsam_delete_dom_group()・ldapsam_get_new_rid()・ldapsam_lookup_rids().

{
        char **values;
        char *result;

        if (attribute == NULL) {
                return NULL;
        }

        values = ldap_get_values(ldap_struct, entry, attribute);

        if (values == NULL) {
                DEBUG(10, ("attribute %s does not exist\n", attribute));
                return NULL;
        }

        if (ldap_count_values(values) != 1) {
                DEBUG(10, ("attribute %s has %d values, expected only one\n",
                           attribute, ldap_count_values(values)));
                ldap_value_free(values);
                return NULL;
        }

        if (pull_utf8_talloc(mem_ctx, &result, values[0]) == (size_t)-1) {
                DEBUG(10, ("pull_utf8_talloc failed\n"));
                ldap_value_free(values);
                return NULL;
        }

        ldap_value_free(values);

#ifdef DEBUG_PASSWORDS
        DEBUG (100, ("smbldap_get_single_attribute: [%s] = [%s]\n",
                     attribute, result));
#endif  
        return result;
}

void talloc_autofree_ldapmsg	(	TALLOC_CTX *	mem_ctx,
		LDAPMessage *	result
	)

smbldap.c の 349 行で定義されています。

参照先 handle・ldapmsg_destructor().

参照元 idmap_ldap_allocate_id()・idmap_ldap_get_hwm()・idmap_ldap_set_hwm()・ldapsam_change_groupmem()・ldapsam_create_dom_group()・ldapsam_create_user()・ldapsam_delete_dom_group()・ldapsam_delete_group_mapping_entry()・ldapsam_delete_user()・ldapsam_get_new_rid()・ldapsam_getsampwnam()・ldapsam_getsampwsid()・ldapsam_lookup_rids()・ldapsam_map_posixgroup()・ldapsam_set_primary_group()・ldapsam_update_group_mapping_entry()・ldapsam_update_sam_account()・pdb_nds_update_login_attempts().

{
        LDAPMessage **handle;

        if (result == NULL) {
                return;
        }

        handle = TALLOC_P(mem_ctx, LDAPMessage *);
        SMB_ASSERT(handle != NULL);

        *handle = result;
        talloc_set_destructor(handle, ldapmsg_destructor);
}

void talloc_autofree_ldapmod	(	TALLOC_CTX *	mem_ctx,
		LDAPMod **	mod
	)

smbldap.c の 369 行で定義されています。

参照先 handle・ldapmod_destructor().

参照元 ldapsam_change_groupmem()・ldapsam_create_dom_group()・ldapsam_create_user()・ldapsam_delete_entry()・ldapsam_get_new_rid()・ldapsam_map_posixgroup()・ldapsam_update_group_mapping_entry()・net_sam_provision().

{
        LDAPMod ***handle;

        if (mod == NULL) {
                return;
        }

        handle = TALLOC_P(mem_ctx, LDAPMod **);
        SMB_ASSERT(handle != NULL);

        *handle = mod;
        talloc_set_destructor(handle, ldapmod_destructor);
}

const char* smbldap_talloc_dn	(	TALLOC_CTX *	mem_ctx,
		LDAP *	ld,
		LDAPMessage *	entry
	)

smbldap.c の 1640 行で定義されています。

参照先 pull_utf8_talloc().

参照元 idmap_ldap_allocate_id()・idmap_ldap_set_hwm()・ldapsam_change_groupmem()・ldapsam_create_dom_group()・ldapsam_create_user()・ldapsam_delete_dom_group()・ldapsam_delete_entry()・ldapsam_delete_user()・ldapsam_get_new_rid()・ldapsam_lookup_rids()・ldapsam_map_posixgroup()・ldapsam_set_primary_group()・ldapsam_update_group_mapping_entry().

{
        char *utf8_dn, *unix_dn;

        utf8_dn = ldap_get_dn(ld, entry);
        if (!utf8_dn) {
                DEBUG (5, ("smbldap_get_dn: ldap_get_dn failed\n"));
                return NULL;
        }
        if (pull_utf8_talloc(mem_ctx, &unix_dn, utf8_dn) == (size_t)-1) {
                DEBUG (0, ("smbldap_get_dn: String conversion failure utf8 "
                           "[%s]\n", utf8_dn));
                return NULL;
        }
        ldap_memfree(utf8_dn);
        return unix_dn;
}

---

変数

ATTRIB_MAP_ENTRY attrib_map_v22[]

smbldap.c の 43 行で定義されています。

参照元 get_userattr_key2string()・get_userattr_list().

ATTRIB_MAP_ENTRY attrib_map_to_delete_v22[]

smbldap.c の 74 行で定義されています。

参照元 get_userattr_delete_list().

ATTRIB_MAP_ENTRY attrib_map_v30[]

smbldap.c の 98 行で定義されています。

参照元 get_userattr_key2string()・get_userattr_list().

ATTRIB_MAP_ENTRY attrib_map_to_delete_v30[]

smbldap.c の 134 行で定義されています。

参照元 get_userattr_delete_list().

ATTRIB_MAP_ENTRY dominfo_attr_list[]

smbldap.c の 163 行で定義されています。

参照元 add_new_domain_account_policies()・add_new_domain_info()・pdb_init_ldapsam()・smbldap_search_domain_info().

ATTRIB_MAP_ENTRY groupmap_attr_list[]

smbldap.c の 176 行で定義されています。

参照元 init_group_from_ldap()・ldapsam_delete_group_mapping_entry()・ldapsam_enum_aliasmem()・ldapsam_getgrgid()・ldapsam_getgrnam()・ldapsam_getgrsid()・ldapsam_map_posixgroup()・ldapsam_modify_aliasmem()・ldapsam_search_one_group()・ldapsam_setsamgrent()・ldapsam_update_group_mapping_entry().

ATTRIB_MAP_ENTRY groupmap_attr_list_to_delete[]

smbldap.c の 188 行で定義されています。

参照元 ldapsam_delete_group_mapping_entry().

ATTRIB_MAP_ENTRY idpool_attr_list[]

smbldap.c の 199 行で定義されています。

参照元 idmap_ldap_allocate_id()・idmap_ldap_get_hwm()・idmap_ldap_set_hwm()・idmap_ldap_sids_to_unixids()・idmap_ldap_unixids_to_sids()・verify_idpool().

ATTRIB_MAP_ENTRY sidmap_attr_list[]

smbldap.c の 206 行で定義されています。

参照元 idmap_ldap_set_mapping()・idmap_ldap_sids_to_unixids()・idmap_ldap_unixids_to_sids().

ATTRIB_MAP_ENTRY trustpw_attr_list[]

---