|
Packit |
fd8b60 |
/* -*- mode: c; c-basic-offset: 4; indent-tabs-mode: nil -*- */
|
|
Packit |
fd8b60 |
/* plugins/kdb/ldap/libkdb_ldap/ldap_create.c */
|
|
Packit |
fd8b60 |
/*
|
|
Packit |
fd8b60 |
* Copyright (c) 2004-2005, Novell, Inc.
|
|
Packit |
fd8b60 |
* All rights reserved.
|
|
Packit |
fd8b60 |
*
|
|
Packit |
fd8b60 |
* Redistribution and use in source and binary forms, with or without
|
|
Packit |
fd8b60 |
* modification, are permitted provided that the following conditions are met:
|
|
Packit |
fd8b60 |
*
|
|
Packit |
fd8b60 |
* * Redistributions of source code must retain the above copyright notice,
|
|
Packit |
fd8b60 |
* this list of conditions and the following disclaimer.
|
|
Packit |
fd8b60 |
* * Redistributions in binary form must reproduce the above copyright
|
|
Packit |
fd8b60 |
* notice, this list of conditions and the following disclaimer in the
|
|
Packit |
fd8b60 |
* documentation and/or other materials provided with the distribution.
|
|
Packit |
fd8b60 |
* * The copyright holder's name is not used to endorse or promote products
|
|
Packit |
fd8b60 |
* derived from this software without specific prior written permission.
|
|
Packit |
fd8b60 |
*
|
|
Packit |
fd8b60 |
* THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
|
|
Packit |
fd8b60 |
* AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
|
Packit |
fd8b60 |
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
|
Packit |
fd8b60 |
* ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE
|
|
Packit |
fd8b60 |
* LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
|
Packit |
fd8b60 |
* CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
|
Packit |
fd8b60 |
* SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
|
|
Packit |
fd8b60 |
* INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
|
|
Packit |
fd8b60 |
* CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
|
|
Packit |
fd8b60 |
* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
|
|
Packit |
fd8b60 |
* POSSIBILITY OF SUCH DAMAGE.
|
|
Packit |
fd8b60 |
*/
|
|
Packit |
fd8b60 |
|
|
Packit |
fd8b60 |
/*
|
|
Packit |
fd8b60 |
* Copyright 2006 Sun Microsystems, Inc. All rights reserved.
|
|
Packit |
fd8b60 |
* Use is subject to license terms.
|
|
Packit |
fd8b60 |
*/
|
|
Packit |
fd8b60 |
|
|
Packit |
fd8b60 |
#include "ldap_main.h"
|
|
Packit |
fd8b60 |
#include "ldap_realm.h"
|
|
Packit |
fd8b60 |
#include "ldap_principal.h"
|
|
Packit |
fd8b60 |
#include "ldap_krbcontainer.h"
|
|
Packit |
fd8b60 |
#include "ldap_err.h"
|
|
Packit |
fd8b60 |
|
|
Packit |
fd8b60 |
/*
|
|
Packit |
fd8b60 |
* ******************************************************************************
|
|
Packit |
fd8b60 |
* DAL functions
|
|
Packit |
fd8b60 |
* ******************************************************************************
|
|
Packit |
fd8b60 |
*/
|
|
Packit |
fd8b60 |
|
|
Packit |
fd8b60 |
/*
|
|
Packit |
fd8b60 |
* This function will create a krbcontainer and realm on the LDAP Server, with
|
|
Packit |
fd8b60 |
* the specified attributes.
|
|
Packit |
fd8b60 |
*/
|
|
Packit |
fd8b60 |
krb5_error_code
|
|
Packit |
fd8b60 |
krb5_ldap_create(krb5_context context, char *conf_section, char **db_args)
|
|
Packit |
fd8b60 |
{
|
|
Packit |
fd8b60 |
krb5_error_code status = 0;
|
|
Packit |
fd8b60 |
krb5_ldap_realm_params *rparams = NULL;
|
|
Packit |
fd8b60 |
krb5_ldap_context *ldap_context=NULL;
|
|
Packit |
fd8b60 |
krb5_boolean realm_obj_created = FALSE;
|
|
Packit |
fd8b60 |
int mask = 0;
|
|
Packit |
fd8b60 |
|
|
Packit |
fd8b60 |
/* Clear the global error string */
|
|
Packit |
fd8b60 |
krb5_clear_error_message(context);
|
|
Packit |
fd8b60 |
|
|
Packit |
fd8b60 |
ldap_context = k5alloc(sizeof(krb5_ldap_context), &status);
|
|
Packit |
fd8b60 |
if (ldap_context == NULL)
|
|
Packit |
fd8b60 |
goto cleanup;
|
|
Packit |
fd8b60 |
context->dal_handle->db_context = ldap_context;
|
|
Packit |
fd8b60 |
ldap_context->kcontext = context;
|
|
Packit |
fd8b60 |
|
|
Packit |
fd8b60 |
status = krb5_ldap_parse_db_params(context, db_args);
|
|
Packit |
fd8b60 |
if (status) {
|
|
Packit |
fd8b60 |
k5_prependmsg(context, status, _("Error processing LDAP DB params"));
|
|
Packit |
fd8b60 |
goto cleanup;
|
|
Packit |
fd8b60 |
}
|
|
Packit |
fd8b60 |
|
|
Packit |
fd8b60 |
status = krb5_ldap_read_server_params(context, conf_section, KRB5_KDB_SRV_TYPE_ADMIN);
|
|
Packit |
fd8b60 |
if (status) {
|
|
Packit |
fd8b60 |
k5_prependmsg(context, status, _("Error reading LDAP server params"));
|
|
Packit |
fd8b60 |
goto cleanup;
|
|
Packit |
fd8b60 |
}
|
|
Packit |
fd8b60 |
status = krb5_ldap_db_init(context, ldap_context);
|
|
Packit |
fd8b60 |
if (status) {
|
|
Packit |
fd8b60 |
goto cleanup;
|
|
Packit |
fd8b60 |
}
|
|
Packit |
fd8b60 |
|
|
Packit |
fd8b60 |
/* read the kerberos container */
|
|
Packit |
fd8b60 |
status = krb5_ldap_read_krbcontainer_dn(context,
|
|
Packit |
fd8b60 |
&ldap_context->container_dn);
|
|
Packit |
fd8b60 |
if (status)
|
|
Packit |
fd8b60 |
goto cleanup;
|
|
Packit |
fd8b60 |
|
|
Packit |
fd8b60 |
status = krb5_ldap_create_krbcontainer(context,
|
|
Packit |
fd8b60 |
ldap_context->container_dn);
|
|
Packit |
fd8b60 |
if (status)
|
|
Packit |
fd8b60 |
goto cleanup;
|
|
Packit |
fd8b60 |
|
|
Packit |
fd8b60 |
rparams = (krb5_ldap_realm_params *) malloc(sizeof(krb5_ldap_realm_params));
|
|
Packit |
fd8b60 |
if (rparams == NULL) {
|
|
Packit |
fd8b60 |
status = ENOMEM;
|
|
Packit |
fd8b60 |
goto cleanup;
|
|
Packit |
fd8b60 |
}
|
|
Packit |
fd8b60 |
memset(rparams, 0, sizeof(*rparams));
|
|
Packit |
fd8b60 |
rparams->realm_name = strdup(context->default_realm);
|
|
Packit |
fd8b60 |
if (rparams->realm_name == NULL) {
|
|
Packit |
fd8b60 |
status = ENOMEM;
|
|
Packit |
fd8b60 |
goto cleanup;
|
|
Packit |
fd8b60 |
}
|
|
Packit |
fd8b60 |
|
|
Packit |
fd8b60 |
if ((status = krb5_ldap_create_realm(context, rparams, mask)))
|
|
Packit |
fd8b60 |
goto cleanup;
|
|
Packit |
fd8b60 |
|
|
Packit |
fd8b60 |
/* We just created the Realm container. Here starts our transaction tracking */
|
|
Packit |
fd8b60 |
realm_obj_created = TRUE;
|
|
Packit |
fd8b60 |
|
|
Packit |
fd8b60 |
/* verify realm object */
|
|
Packit |
fd8b60 |
if ((status = krb5_ldap_read_realm_params(context,
|
|
Packit |
fd8b60 |
rparams->realm_name,
|
|
Packit |
fd8b60 |
&(ldap_context->lrparams),
|
|
Packit |
fd8b60 |
&mask)))
|
|
Packit |
fd8b60 |
goto cleanup;
|
|
Packit |
fd8b60 |
|
|
Packit |
fd8b60 |
cleanup:
|
|
Packit |
fd8b60 |
if (rparams)
|
|
Packit |
fd8b60 |
krb5_ldap_free_realm_params(rparams);
|
|
Packit |
fd8b60 |
|
|
Packit |
fd8b60 |
if (status)
|
|
Packit |
fd8b60 |
krb5_ldap_close(context);
|
|
Packit |
fd8b60 |
return(status);
|
|
Packit |
fd8b60 |
}
|