sssd  2.2.2
data_provider.h
1 /*
2  SSSD
3 
4  Data Provider, private header file
5 
6  Copyright (C) Simo Sorce <ssorce@redhat.com> 2008
7 
8  This program is free software; you can redistribute it and/or modify
9  it under the terms of the GNU General Public License as published by
10  the Free Software Foundation; either version 3 of the License, or
11  (at your option) any later version.
12 
13  This program is distributed in the hope that it will be useful,
14  but WITHOUT ANY WARRANTY; without even the implied warranty of
15  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16  GNU General Public License for more details.
17 
18  You should have received a copy of the GNU General Public License
19  along with this program. If not, see <http://www.gnu.org/licenses/>.
20 */
21 
22 #ifndef __DATA_PROVIDER_H__
23 #define __DATA_PROVIDER_H__
24 
25 #include "config.h"
26 
27 #include <stdint.h>
28 #include <sys/un.h>
29 #include <errno.h>
30 #include <stdbool.h>
31 #ifdef USE_KEYRING
32 #include <sys/types.h>
33 #include <keyutils.h>
34 #endif
35 #include <talloc.h>
36 #include <tevent.h>
37 #include <ldb.h>
38 #include <dbus/dbus.h>
39 
40 #include "util/util.h"
41 #include "confdb/confdb.h"
42 #include "sss_client/sss_cli.h"
43 #include "util/authtok.h"
44 #include "util/sss_pam_data.h"
45 #include "providers/data_provider_req.h"
46 
47 #define DATA_PROVIDER_VERSION 0x0001
48 #define DATA_PROVIDER_PIPE "private/sbus-dp"
49 
50 #define DP_PATH "/org/freedesktop/sssd/dataprovider"
51  /* end of group pamHandler */
115 
116 #define DP_ERR_DECIDE -1
117 #define DP_ERR_OK 0
118 #define DP_ERR_OFFLINE 1
119 #define DP_ERR_TIMEOUT 2
120 #define DP_ERR_FATAL 3
121 
122 #define BE_FILTER_NAME 1
123 #define BE_FILTER_IDNUM 2
124 #define BE_FILTER_ENUM 3
125 #define BE_FILTER_SECID 4
126 #define BE_FILTER_UUID 5
127 #define BE_FILTER_CERT 6
128 #define BE_FILTER_WILDCARD 7
129 
130 #define DP_SEC_ID "secid"
131 #define DP_CERT "cert"
132 /* sizeof() counts the trailing \0 so we must subtract 1 for the string
133  * length */
134 #define DP_SEC_ID_LEN (sizeof(DP_SEC_ID) - 1)
135 #define DP_CERT_LEN (sizeof(DP_CERT) - 1)
136 
137 #define DP_WILDCARD "wildcard"
138 #define DP_WILDCARD_LEN (sizeof(DP_WILDCARD) - 1)
139 
140 #define EXTRA_NAME_IS_UPN "U"
141 #define EXTRA_INPUT_MAYBE_WITH_VIEW "V"
142 
143 /* from dp_auth_util.c */
144 #define SSS_SERVER_INFO 0x80000000
145 
146 #define SSS_KRB5_INFO 0x40000000
147 #define SSS_LDAP_INFO 0x20000000
148 #define SSS_PROXY_INFO 0x10000000
149 
150 #define SSS_KRB5_INFO_TGT_LIFETIME (SSS_SERVER_INFO|SSS_KRB5_INFO|0x01)
151 #define SSS_KRB5_INFO_UPN (SSS_SERVER_INFO|SSS_KRB5_INFO|0x02)
152 
153 bool dp_pack_pam_request(DBusMessage *msg, struct pam_data *pd);
154 bool dp_unpack_pam_request(DBusMessage *msg, TALLOC_CTX *mem_ctx,
155  struct pam_data **new_pd, DBusError *dbus_error);
156 
157 bool dp_pack_pam_response(DBusMessage *msg, struct pam_data *pd);
158 bool dp_unpack_pam_response(DBusMessage *msg, struct pam_data *pd,
159  DBusError *dbus_error);
160 
161 void dp_id_callback(DBusPendingCall *pending, void *ptr);
162 
163 /* from dp_sbus.c */
164 int dp_get_sbus_address(TALLOC_CTX *mem_ctx,
165  char **address, const char *domain_name);
166 
167 
168 /* Reserved filter name for request which waits until the files provider finishes mirroring
169  * the file content
170  */
171 #define DP_REQ_OPT_FILES_INITGR "files_initgr_request"
172 
173 /* Helpers */
174 
175 #define NULL_STRING { .string = NULL }
176 #define NULL_BLOB { .blob = { NULL, 0 } }
177 #define NULL_NUMBER { .number = 0 }
178 #define BOOL_FALSE { .boolean = false }
179 #define BOOL_TRUE { .boolean = true }
180 
181 enum dp_opt_type {
182  DP_OPT_STRING,
183  DP_OPT_BLOB,
184  DP_OPT_NUMBER,
185  DP_OPT_BOOL
186 };
187 
188 struct dp_opt_blob {
189  uint8_t *data;
190  size_t length;
191 };
192 
193 union dp_opt_value {
194  const char *cstring;
195  char *string;
196  struct dp_opt_blob blob;
197  int number;
198  bool boolean;
199 };
200 
201 struct dp_option {
202  const char *opt_name;
203  enum dp_opt_type type;
204  union dp_opt_value def_val;
205  union dp_opt_value val;
206 };
207 
208 #define DP_OPTION_TERMINATOR { NULL, 0, NULL_STRING, NULL_STRING }
209 
210 void dp_option_inherit(char **inherit_opt_list,
211  int option,
212  struct dp_option *parent_opts,
213  struct dp_option *subdom_opts);
214 
215 int dp_get_options(TALLOC_CTX *memctx,
216  struct confdb_ctx *cdb,
217  const char *conf_path,
218  struct dp_option *def_opts,
219  int num_opts,
220  struct dp_option **_opts);
221 
222 int dp_copy_options(TALLOC_CTX *memctx,
223  struct dp_option *src_opts,
224  int num_opts,
225  struct dp_option **_opts);
226 
227 int dp_copy_defaults(TALLOC_CTX *memctx,
228  struct dp_option *src_opts,
229  int num_opts,
230  struct dp_option **_opts);
231 
232 const char *_dp_opt_get_cstring(struct dp_option *opts,
233  int id, const char *location);
234 char *_dp_opt_get_string(struct dp_option *opts,
235  int id, const char *location);
236 struct dp_opt_blob _dp_opt_get_blob(struct dp_option *opts,
237  int id, const char *location);
238 int _dp_opt_get_int(struct dp_option *opts,
239  int id, const char *location);
240 bool _dp_opt_get_bool(struct dp_option *opts,
241  int id, const char *location);
242 #define dp_opt_get_cstring(o, i) _dp_opt_get_cstring(o, i, __FUNCTION__)
243 #define dp_opt_get_string(o, i) _dp_opt_get_string(o, i, __FUNCTION__)
244 #define dp_opt_get_blob(o, i) _dp_opt_get_blob(o, i, __FUNCTION__)
245 #define dp_opt_get_int(o, i) _dp_opt_get_int(o, i, __FUNCTION__)
246 #define dp_opt_get_bool(o, i) _dp_opt_get_bool(o, i, __FUNCTION__)
247 
248 int _dp_opt_set_string(struct dp_option *opts, int id,
249  const char *s, const char *location);
250 int _dp_opt_set_blob(struct dp_option *opts, int id,
251  struct dp_opt_blob b, const char *location);
252 int _dp_opt_set_int(struct dp_option *opts, int id,
253  int i, const char *location);
254 int _dp_opt_set_bool(struct dp_option *opts, int id,
255  bool b, const char *location);
256 #define dp_opt_set_string(o, i, v) _dp_opt_set_string(o, i, v, __FUNCTION__)
257 #define dp_opt_set_blob(o, i, v) _dp_opt_set_blob(o, i, v, __FUNCTION__)
258 #define dp_opt_set_int(o, i, v) _dp_opt_set_int(o, i, v, __FUNCTION__)
259 #define dp_opt_set_bool(o, i, v) _dp_opt_set_bool(o, i, v, __FUNCTION__)
260 
261 /* Generic Data Provider options */
262 
263 /* Resolver DP options */
264 enum dp_res_opts {
265  DP_RES_OPT_FAMILY_ORDER,
266  DP_RES_OPT_RESOLVER_TIMEOUT,
267  DP_RES_OPT_RESOLVER_OP_TIMEOUT,
268  DP_RES_OPT_RESOLVER_SERVER_TIMEOUT,
269  DP_RES_OPT_DNS_DOMAIN,
270 
271  DP_RES_OPTS /* attrs counter */
272 };
273 
274 #endif /* __DATA_PROVIDER_ */