summaryrefslogtreecommitdiff
path: root/server/providers/ldap/sdap.h
diff options
context:
space:
mode:
authorSumit Bose <sbose@redhat.com>2009-10-09 13:34:35 +0200
committerSimo Sorce <ssorce@redhat.com>2009-10-15 18:18:31 -0400
commit66e96fc32e09b24ade6594c1f82e309c728ba7f4 (patch)
treeb854265e9e6e5217ad2e6d8a61b4145b9ee5ffef /server/providers/ldap/sdap.h
parentc0dfe79ba578d62a991b0a829d7e0f670a445109 (diff)
downloadsssd-66e96fc32e09b24ade6594c1f82e309c728ba7f4.tar.gz
sssd-66e96fc32e09b24ade6594c1f82e309c728ba7f4.tar.bz2
sssd-66e96fc32e09b24ade6594c1f82e309c728ba7f4.zip
Check for expired passwords in LDAP provider
Diffstat (limited to 'server/providers/ldap/sdap.h')
-rw-r--r--server/providers/ldap/sdap.h28
1 files changed, 27 insertions, 1 deletions
diff --git a/server/providers/ldap/sdap.h b/server/providers/ldap/sdap.h
index 540e4c78..31c72895 100644
--- a/server/providers/ldap/sdap.h
+++ b/server/providers/ldap/sdap.h
@@ -62,6 +62,19 @@ struct sdap_handle {
struct sdap_op *ops;
};
+#define SYSDB_SHADOWPW_LASTCHANGE "shadowLastChange"
+#define SYSDB_SHADOWPW_MIN "shadowMin"
+#define SYSDB_SHADOWPW_MAX "shadowMax"
+#define SYSDB_SHADOWPW_WARNING "shadowWarning"
+#define SYSDB_SHADOWPW_INACTIVE "shadowInactive"
+#define SYSDB_SHADOWPW_EXPIRE "shadowExpire"
+#define SYSDB_SHADOWPW_FLAG "shadowFlag"
+
+#define SYSDB_KRBPW_LASTCHANGE "krbLastPwdChange"
+#define SYSDB_KRBPW_EXPIRATION "krbPasswordExpiration"
+
+#define SYSDB_PWD_ATTRIBUTE "pwdAttribute"
+
enum sdap_result {
SDAP_SUCCESS,
SDAP_NOT_FOUND,
@@ -70,7 +83,8 @@ enum sdap_result {
SDAP_ERROR,
SDAP_AUTH_SUCCESS,
SDAP_AUTH_FAILED,
- SDAP_AUTH_PW_EXPIRED
+ SDAP_AUTH_PW_EXPIRED,
+ SDAP_ACCT_EXPIRED
};
enum sdap_basic_opt {
@@ -121,10 +135,22 @@ enum sdap_user_opt {
SDAP_AT_USER_MEMBEROF,
SDAP_AT_USER_UUID,
SDAP_AT_USER_MODSTAMP,
+ SDAP_AT_SP_LSTCHG,
+ SDAP_AT_SP_MIN,
+ SDAP_AT_SP_MAX,
+ SDAP_AT_SP_WARN,
+ SDAP_AT_SP_INACT,
+ SDAP_AT_SP_EXPIRE,
+ SDAP_AT_SP_FLAG,
+ SDAP_AT_KP_LASTCHANGE,
+ SDAP_AT_KP_EXPIRATION,
+ SDAP_AT_PWD_ATTRIBUTE,
SDAP_OPTS_USER /* attrs counter */
};
+#define SDAP_FIRST_EXTRA_USER_AT SDAP_AT_SP_LSTCHG
+
/* the objectclass must be the first attribute.
* Functions depend on this */
enum sdap_group_opt {