ldap/ns_ldap/ldapclient.c

4  * The contents of this file are subject to the terms of the
23  * Use is subject to license terms.
54  *		Path to certificates used for secure bind (no former option)
58  *		Default server (no former option) Refer to DUA Config
76  *		Profile name to use for init (ldapclient) or
79  *		Client info TTL.  If set to 0 this information will not be
93  *		Allow Administrator to change shadow data in LDAP
151 /* files to (possibiliy) restore */
182 /* Command to copy files */
189 /* Files that need to be just removed */
192 /* Output defines to supress if quiet mode set */
221 /* Used to turn off profile checking */
241 /* multival_t is used to hold params that can have more than one value */
252  * clientopts_t is used to hold and pass around the param values from
312 static int file_move(const char *from, const char *to);
341 		CLIENT_FPUTS(gettext("Unable to set locale.\n"), stderr);
345 		CLIENT_FPUTS(gettext("Unable to set textdomain.\n"), stderr);
509 		/* Backwards compatibility to support system install */
528 		    "You must be root (SuperUser) to run this command.");
552  * must be set to TRUE.
560 		    "be specified if enableShadowUpdate is not set to TRUE \n"),
680 		    gettext("Restoring machine to previous "
736  * The following macro is used to do a __ns_ldap_setParam().
740  * error return code.  This macro keeps us from having to
741  * repeat this code for every call to setParam as was done
762  * The following macro is used to check if an arg has already been set
764  * This was made into a macro to avoid the duplication of this code many
833 	/* Set version to latest (not version 1) */
836 	/* Set profileTTL to 0 since NO profile on manual */
906 		    gettext("About to modify this machines "
910 	/* get ready to start playing with files */
922 		    gettext("System not in state to enable ldap client.\n"),
1069 			/* Coninue and try to recover what we can */
1119 		    "not allowed.  If you want to use profiles "
1202 		    gettext("About to modify this machines configuration "
1206 	/* get ready to start playing with files */
1218 		    gettext("Unable to backup the ldap client files!\n"),
1280 			    "failed!  Machine needs to be "
1312 			/* Coninue and try to recover what we can */
1344 		CLIENT_FPUTS(gettext("About to generate a profile\n"), stderr);
1371 	/* Set version to latest (not version 1) */
1462 		    gettext("About to configure machine by downloading "
1524 		 * We don't want to force users to always specify authentication
1526 		 * have to specify appropriate -a though.
1745 		    gettext("About to modify this machines configuration "
1749 	/* get ready to start playing with files */
1765 		    gettext("System not in state to enable ldap client.\n"),
1906 			/* Coninue and try to recover what we can */
1958 		    gettext("\nGenerate a profile used to set up clients "
1971  * stop_services is called to stop network services prior to their
1977  * In terms of SMF, this translates to disabling the services. So we
1978  * try to disable them if they are in any other state
1997 			/* Not serious, but tell user what to do */
1999 			    "failed with (%d). You may need to restart "
2000 			    "it manually for changes to take effect.\n"),
2027 			/* Not serious, but tell user what to do */
2029 			    "failed with (%d). You may need to restart "
2030 			    "it manually for changes to take effect.\n"),
2076  * start_services is called to start up network services after config
2081  * with files "recovered" will attempt to be started.
2120 		/* sanity check to make sure sprintf will fit */
2136 	 * we want to start ldap and not start yp.
2191 	 * recovery.  We want to start whatever services were running
2195 	 * which services to start based on the files we recovered
2199 		/* uninit and recover should set flags of what to start */
2260  * credCheck is called to check if credentials are required for this
2281 		    gettext("Error %d while trying to retrieve "
2290 		    gettext("Error %d while trying to retrieve "
2298 		    gettext("Error %d while trying to retrieve proxyDN\n"),
2306 		    gettext("Error %d while trying to retrieve "
2321 	credProxy = 0;	/* flag to indicate if we have a credLevel of proxy */
2391  * adminCredCheck is called to check if the admin credential is required
2393  * to TRUE then credential info is required (adminDN and adminPassword).
2411 	/* If shadow update not enabled, then no need to check */
2416 		    gettext("Error %d while trying to retrieve "
2436 		    gettext("Error %d while trying to retrieve credLevel\n"),
2447 		    gettext("Error %d while trying to retrieve authMethod\n"),
2458 		    gettext("Error %d while trying to retrieve adminDN\n"),
2469 		    gettext("Error %d while trying to retrieve "
2485 	credSelf = 0;	/* flag to indicate if we have a credLevel of self */
2540 			CLIENT_FPUTS(gettext("Unable to get admin password\n"),
2574  * try to restore the previous name space on this machine
2714 		/* "name" would have to be huge for this, but just in case */
2794  * try to save the current state of this machine.
2832 			    gettext("Unable to remove backup "
2842 		    gettext("file_backup: Failed to make %s backup "
2915 		/* moving /var/yp/binding will cause ypbind to core dump */
2948 	/* point to file name, not path delim (/) */
3000  * This function is used to temporily backup the LDAP client files in /var/ldap
3001  * that the "mod" operation needs to update.  If an error occurs then the
3002  * function mod_recover() can be invoke to recover the unmodified files.
3039  * This function is used to recover the temporily backed up files by
3110 		    gettext("Empty value passed to multival_add\n"),
3572  * file_move() - Used to move a config file (backup/restore).
3574  * This function uses a system() call with /bin/mv to handle the
3579 file_move(const char *from, const char *to)
3586 	    mvCommand, from, to);
3589 	 * This function should only be used internally to move
3590 	 * system files to/from the backup directory.  For security
3636 	 * If the service was previously in maintenance then we need to
3639 	 * clear will actually cause it to be enabled/disabled.
3655 		/* Check if we need to wait ? */
3686 	 * failed and guess is restarter failed to apply the timeout as well.
3688 	 * some other mechanism available from smf to handle such situation.
3697 					gettext("offline to disable"));
3706  * Wait for "max" usecs for the service described by "fmri" to change
3707  * to "state". If check_maint is true then return immediately if
3833 			    gettext("failed to retrieve timeout property"),
3844 			    gettext("failed to retrieve timeout value"),