Untitled diff

Created Diff never expires
523 removals
Lines
Total
Removed
Words
Total
Removed
To continue using this feature, upgrade to
Diffchecker logo
Diffchecker Pro
606 lines
529 additions
Lines
Total
Added
Words
Total
Added
To continue using this feature, upgrade to
Diffchecker logo
Diffchecker Pro
610 lines
/* $OpenLDAP$ */
/*
/* This work is part of OpenLDAP Software <http://www.openldap.org/>.
* Copyright (c) 2001, 2003, Oracle and/or its affiliates. All rights reserved.
*
*/
* Copyright 1998-2015 The OpenLDAP Foundation.

* All rights reserved.
/*
* The contents of this file are subject to the Netscape Public
* License Version 1.1 (the "License"); you may not use this file
* except in compliance with the License. You may obtain a copy of
* the License at http://www.mozilla.org/NPL/
*
*
* Redistribution and use in source and binary forms, with or without
* Software distributed under the License is distributed on an "AS
* modification, are permitted only as authorized by the OpenLDAP
* IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
* Public License.
* implied. See the License for the specific language governing
* rights and limitations under the License.
*
*
* A copy of this license is available in file LICENSE in the
* The Original Code is Mozilla Communicator client code, released
* top-level directory of the distribution or, alternatively, at
* March 31, 1998.
* <http://www.OpenLDAP.org/license.html>.
*/
/* Portions Copyright (c) 1990 Regents of the University of Michigan.
* All rights reserved.
*
*
* Redistribution and use in source and binary forms are permitted
* The Initial Developer of the Original Code is Netscape
* provided that this notice is preserved and that due credit is given
* Communications Corporation. Portions created by Netscape are
* to the University of Michigan at Ann Arbor. The name of the University
* Copyright (C) 1998-1999 Netscape Communications Corporation. All
* may not be used to endorse or promote products derived from this
* Rights Reserved.
* software without specific prior written permission. This software
*
* is provided ``as is'' without express or implied warranty.
* Contributor(s):
*/
*/


#ifndef _LDAP_H
#ifndef _LDAP_H
#define _LDAP_H
#define _LDAP_H


/* pull in lber */
#ifdef __cplusplus
#include <lber.h>
extern "C" {

#endif
/* include version and API feature defines */
#include <ldap_features.h>

LDAP_BEGIN_DECL

#define LDAP_VERSION1 1
#define LDAP_VERSION2 2
#define LDAP_VERSION3 3

#define LDAP_VERSION_MIN LDAP_VERSION2
#define LDAP_VERSION LDAP_VERSION2
#define LDAP_VERSION_MAX LDAP_VERSION3

/*
* We use 3000+n here because it is above 1823 (for RFC 1823),
* above 2000+rev of IETF LDAPEXT draft (now quite dated),
* yet below allocations for new RFCs (just in case there is
* someday an RFC produced).
*/
#define LDAP_API_VERSION 3001
#define LDAP_VENDOR_NAME "OpenLDAP"


/* OpenLDAP API Features */
#ifndef _SOLARIS_SDK
#define LDAP_API_FEATURE_X_OPENLDAP LDAP_VENDOR_VERSION
#define _SOLARIS_SDK
#endif


#if defined( LDAP_API_FEATURE_X_OPENLDAP_REENTRANT ) || \
#ifndef LDAP_TYPE_TIMEVAL_DEFINED
( defined( LDAP_THREAD_SAFE ) && \
#include <sys/time.h>
defined( LDAP_API_FEATURE_X_OPENLDAP_THREAD_SAFE ) )
/* -lldap may or may not be thread safe */
/* -lldap_r, if available, is always thread safe */
# define LDAP_API_FEATURE_THREAD_SAFE 1
# define LDAP_API_FEATURE_SESSION_THREAD_SAFE 1
# define LDAP_API_FEATURE_OPERATION_THREAD_SAFE 1
#endif
#endif
#if defined( LDAP_THREAD_SAFE ) && \
#ifndef LDAP_TYPE_SOCKET_DEFINED /* API extension */
defined( LDAP_API_FEATURE_X_OPENLDAP_THREAD_SAFE )
#include <sys/types.h>
/* #define LDAP_API_FEATURE_SESSION_SAFE 1 */
#include <sys/socket.h>
/* #define LDAP_API_OPERATION_SESSION_SAFE 1 */
#endif
#endif



#include <lber.h>
#define LDAP_PORT 389 /* ldap:/// default LDAP port */
#define LDAPS_PORT 636 /* ldaps:/// default LDAP over TLS port */


#define LDAP_ROOT_DSE ""
#define LDAP_PORT 389
#define LDAP_NO_ATTRS "1.1"
#define LDAPS_PORT 636
#define LDAP_ALL_USER_ATTRIBUTES "*"
#define LDAP_PORT_MAX 65535 /* API extension */
#define LDAP_ALL_OPERATIONAL_ATTRIBUTES "+" /* RFC 3673 */
#define LDAP_VERSION1 1 /* API extension */
#define LDAP_VERSION2 2
#define LDAP_VERSION3 3
#define LDAP_VERSION LDAP_VERSION2 /* API extension */
#define LDAP_VERSION_MIN LDAP_VERSION3
#define LDAP_VERSION_MAX LDAP_VERSION3


/* RFC 4511: maxInt INTEGER ::= 2147483647 -- (2^^31 - 1) -- */
#define LDAP_VENDOR_VERSION 500 /* version # * 100 */
#define LDAP_MAXINT (2147483647)
#define LDAP_VENDOR_NAME "Sun Microsystems Inc."
/*
* The following will be an RFC number once the LDAP C API Internet Draft
* is published as a Proposed Standard RFC. For now we use 2000 + the
* draft revision number (currently 5) since we are close to compliance
* with revision 5 of the draft.
*/
#define LDAP_API_VERSION 2005


/*
/*
* LDAP_OPTions
* C LDAP features we support that are not (yet) part of the LDAP C API
* 0x0000 - 0x0fff reserved for api options
* Internet Draft. Use the ldap_get_option() call with an option value of
* 0x1000 - 0x3fff reserved for api extended options
* LDAP_OPT_API_FEATURE_INFO to retrieve information about a feature.
* 0x4000 - 0x7fff reserved for private and experimental options
*
* Note that this list is incomplete; it includes only the most widely
* used extensions. Also, the version is 1 for all of these for now.
*/
*/

#define LDAP_API_FEATURE_SERVER_SIDE_SORT 1
#define LDAP_OPT_API_INFO 0x0000
#define LDAP_API_FEATURE_VIRTUAL_LIST_VIEW 1
#define LDAP_OPT_DESC 0x0001 /* historic */
#define LDAP_API_FEATURE_PERSISTENT_SEARCH 1
#define LDAP_OPT_DEREF 0x0002
#define LDAP_API_FEATURE_PROXY_AUTHORIZATION 1
#define LDAP_OPT_SIZELIMIT 0x0003
#define LDAP_API_FEATURE_X_LDERRNO 1
#define LDAP_OPT_TIMELIMIT 0x0004
#define LDAP_API_FEATURE_X_MEMCACHE 1
/* 0x05 - 0x07 not defined */
#define LDAP_API_FEATURE_X_IO_FUNCTIONS 1
#define LDAP_OPT_REFERRALS 0x0008
#define LDAP_API_FEATURE_X_EXTIO_FUNCTIONS 1
#define LDAP_OPT_RESTART 0x0009
#define LDAP_API_FEATURE_X_DNS_FUNCTIONS 1
/* 0x0a - 0x10 not defined */
#define LDAP_API_FEATURE_X_MEMALLOC_FUNCTIONS 1
#define LDAP_OPT_PROTOCOL_VERSION 0x0011
#define LDAP_API_FEATURE_X_THREAD_FUNCTIONS 1
#define LDAP_OPT_SERVER_CONTROLS 0x0012
#define LDAP_API_FEATURE_X_EXTHREAD_FUNCTIONS 1
#define LDAP_OPT_CLIENT_CONTROLS 0x0013
#define LDAP_API_FEATURE_X_GETLANGVALUES 1
/* 0x14 not defined */
#define LDAP_API_FEATURE_X_CLIENT_SIDE_SORT 1
#define LDAP_OPT_API_FEATURE_INFO 0x0015
#define LDAP_API_FEATURE_X_URL_FUNCTIONS 1
/* 0x16 - 0x2f not defined */
#define LDAP_API_FEATURE_X_FILTER_FUNCTIONS 1
#define LDAP_OPT_HOST_NAME 0x0030
#define LDAP_OPT_RESULT_CODE 0x0031
#define LDAP_OPT_ERROR_NUMBER LDAP_OPT_RESULT_CODE
#define LDAP_OPT_DIAGNOSTIC_MESSAGE 0x0032
#define LDAP_OPT_ERROR_STRING LDAP_OPT_DIAGNOSTIC_MESSAGE
#define LDAP_OPT_MATCHED_DN 0x0033
/* 0x0034 - 0x3fff not defined */
/* 0x0091 used by Microsoft for LDAP_OPT_AUTO_RECONNECT */
#define LDAP_OPT_SSPI_FLAGS 0x0092
/* 0x0093 used by Microsoft for LDAP_OPT_SSL_INFO */
/* 0x0094 used by Microsoft for LDAP_OPT_REF_DEREF_CONN_PER_MSG */
#define LDAP_OPT_SIGN 0x0095
#define LDAP_OPT_ENCRYPT 0x0096
#define LDAP_OPT_SASL_METHOD 0x0097
/* 0x0098 used by Microsoft for LDAP_OPT_AREC_EXCLUSIVE */
#define LDAP_OPT_SECURITY_CONTEXT 0x0099
/* 0x009A used by Microsoft for LDAP_OPT_ROOTDSE_CACHE */
/* 0x009B - 0x3fff not defined */


/* API Extensions */
#define LDAP_ROOT_DSE "" /* API extension */
#define LDAP_OPT_API_EXTENSION_BASE 0x4000 /* API extensions */
#define LDAP_NO_ATTRS "1.1"
#define LDAP_ALL_USER_ATTRS "*"


/* private and experimental options */
/*
/* OpenLDAP specific options */
* Standard options (used with ldap_set_option() and ldap_get_option):
#define LDAP_OPT_DEBUG_LEVEL 0x5001 /* debug level */
*/
#define LDAP_OPT_TIMEOUT 0x5002 /* default timeout */
#define LDAP_OPT_API_INFO 0x00 /* 0 */
#define LDAP_OPT_REFHOPLIMIT 0x5003 /* ref hop limit */
#define LDAP_OPT_DESC 0x01 /* 1 */
#define LDAP_OPT_NETWORK_TIMEOUT 0x5005 /* socket level timeout */
#define LDAP_OPT_DEREF 0x02 /* 2 */
#define LDAP_OPT_URI 0x5006
#define LDAP_OPT_SIZELIMIT 0x03 /* 3 */
#define LDAP_OPT_REFERRAL_URLS 0x5007 /* Referral URLs */
#define LDAP_OPT_TIMELIMIT 0x04 /* 4 */
#define LDAP_OPT_SOCKBUF 0x5008 /* sockbuf */
#define LDAP_OPT_REFERRALS 0x08 /* 8 */
#define LDAP_OPT_DEFBASE 0x5009 /* searchbase */
#define LDAP_OPT_RESTART 0x09 /* 9 */
#define LDAP_OPT_CONNECT_ASYNC 0x5010 /* create connections asynchronously */
#define LDAP_OPT_PROTOCOL_VERSION 0x11 /* 17 */
#define LDAP_OPT_CONNECT_CB 0x5011 /* connection callbacks */
#define LDAP_OPT_SERVER_CONTROLS 0x12 /* 18 */
#define LDAP_OPT_SESSION_REFCNT 0x5012 /* session reference count */
#define LDAP_OPT_CLIENT_CONTROLS 0x13 /* 19 */
#define LDAP_OPT_API_FEATURE_INFO 0x15 /* 21 */
#define LDAP_OPT_HOST_NAME 0x30 /* 48 */
#define LDAP_OPT_ERROR_NUMBER 0x31 /* 49 */
#define LDAP_OPT_ERROR_STRING 0x32 /* 50 */
#define LDAP_OPT_MATCHED_DN 0x33 /* 51 */


/* OpenLDAP TLS options */
/*
#define LDAP_OPT_X_TLS 0x6000
* Well-behaved private and experimental extensions will use option values
#define LDAP_OPT_X_TLS_CTX 0x6001 /* OpenSSL CTX* */
* between 0x4000 (16384) and 0x7FFF (32767) inclusive.
#define LDAP_OPT_X_TLS_CACERTFILE 0x6002
*/
#define LDAP_OPT_X_TLS_CACERTDIR 0x6003
#define LDAP_OPT_PRIVATE_EXTENSION_BASE 0x4000 /* to 0x7FFF inclusive */
#define LDAP_OPT_X_TLS_CERTFILE 0x6004
/*
#define LDAP_OPT_X_TLS_KEYFILE 0x6005
* Special timeout values for poll and connect:
#define LDAP_OPT_X_TLS_REQUIRE_CERT 0x6006
*/
#define LDAP_OPT_X_TLS_PROTOCOL_MIN 0x6007
#define LDAP_X_IO_TIMEOUT_NO_WAIT 0 /* return immediately */
#define LDAP_OPT_X_TLS_CIPHER_SUITE 0x6008
#define LDAP_X_IO_TIMEOUT_NO_TIMEOUT (-1) /* block indefinitely */
#define LDAP_OPT_X_TLS_RANDOM_FILE 0x6009
/*
#define LDAP_OPT_X_TLS_SSL_CTX 0x600a /* OpenSSL SSL* */
* Timeout value for nonblocking connect call
#define LDAP_OPT_X_TLS_CRLCHECK 0x600b
*/
#define LDAP_OPT_X_TLS_CONNECT_CB 0x600c
#define LDAP_X_OPT_CONNECT_TIMEOUT (LDAP_OPT_PRIVATE_EXTENSION_BASE + 0x0F01)
#define LDAP_OPT_X_TLS_CONNECT_ARG 0x600d
/* 0x4000 + 0x0F01 = 0x4F01 = 20225 - API extension */
#define LDAP_OPT_X_TLS_DHFILE 0x600e
#define LDAP_OPT_X_TLS_NEWCTX 0x600f
#define LDAP_OPT_X_TLS_CRLFILE 0x6010 /* GNUtls only */
#define LDAP_OPT_X_TLS_PACKAGE 0x6011


#define LDAP_OPT_X_TLS_NEVER 0
/* for on/off options */
#define LDAP_OPT_X_TLS_HARD 1
#define LDAP_OPT_ON ((void *)1)
#define LDAP_OPT_X_TLS_DEMAND 2
#define LDAP_OPT_OFF ((void *)0)
#define LDAP_OPT_X_TLS_ALLOW 3
#define LDAP_OPT_X_TLS_TRY 4


#define LDAP_OPT_X_TLS_CRL_NONE 0
typedef struct ldap LDAP; /* opaque connection handle */
#define LDAP_OPT_X_TLS_CRL_PEER 1
typedef struct ldapmsg LDAPMessage; /* opaque result/entry handle */
#define LDAP_OPT_X_TLS_CRL_ALL 2


/* for LDAP_OPT_X_TLS_PROTOCOL_MIN */
#define NULLMSG ((LDAPMessage *)0)
#define LDAP_OPT_X_TLS_PROTOCOL(maj,min) (((maj) << 8) + (min))
#define LDAP_OPT_X_TLS_PROTOCOL_SSL2 (2 << 8)
#define LDAP_OPT_X_TLS_PROTOCOL_SSL3 (3 << 8)
#define LDAP_OPT_X_TLS_PROTOCOL_TLS1_0 ((3 << 8) + 1)
#define LDAP_OPT_X_TLS_PROTOCOL_TLS1_1 ((3 << 8) + 2)
#define LDAP_OPT_X_TLS_PROTOCOL_TLS1_2 ((3 << 8) + 3)


/* OpenLDAP SASL options */
/* structure representing an LDAP modification */
#define LDAP_OPT_X_SASL_MECH 0x6100
typedef struct ldapmod {
#define LDAP_OPT_X_SASL_REALM 0x6101
int mod_op; /* kind of mod + form of values */
#define LDAP_OPT_X_SASL_AUTHCID 0x6102
#define LDAP_MOD_ADD 0x00
#define LDAP_OPT_X_SASL_AUTHZID 0x6103
#define LDAP_MOD_DELETE 0x01
#define LDAP_OPT_X_SASL_SSF 0x6104 /* read-only */
#define LDAP_MOD_REPLACE 0x02
#define LDAP_OPT_X_SASL_SSF_EXTERNAL 0x6105 /* write-only */
#define LDAP_MOD_BVALUES 0x80
#define LDAP_OPT_X_SASL_SECPROPS 0x6106 /* write-only */
char *mod_type; /* attribute name to modify */
#define LDAP_OPT_X_SASL_SSF_MIN 0x6107
union mod_vals_u {
#define LDAP_OPT_X_SASL_SSF_MAX 0x6108
char **modv_strvals;
#define LDAP_OPT_X_SASL_MAXBUFSIZE 0x6109
struct berval **modv_bvals;
#define LDAP_OPT_X_SASL_MECHLIST 0x610a /* read-only */
} mod_vals; /* values to add/delete/replace */
#define LDAP_OPT_X_SASL_NOCANON 0x610b
#define mod_values mod_vals.modv_strvals
#define LDAP_OPT_X_SASL_USERNAME 0x610c /* read-only */
#define mod_bvalues mod_vals.modv_bvals
#define LDAP_OPT_X_SASL_GSS_CREDS 0x610d
} LDAPMod;


/* OpenLDAP GSSAPI options */
#define LDAP_OPT_X_GSSAPI_DO_NOT_FREE_CONTEXT 0x6200
#define LDAP_OPT_X_GSSAPI_ALLOW_REMOTE_PRINCIPAL 0x6201


/*
/*
* OpenLDAP per connection tcp-keepalive settings
* structure for holding ldapv3 controls
* (Linux only, ignored where unsupported)
*/
*/
#define LDAP_OPT_X_KEEPALIVE_IDLE 0x6300
typedef struct ldapcontrol {
#define LDAP_OPT_X_KEEPALIVE_PROBES 0x6301
char *ldctl_oid;
#define LDAP_OPT_X_KEEPALIVE_INTERVAL 0x6302
struct berval ldctl_value;
char ldctl_iscritical;
} LDAPControl;


/* Private API Extensions -- reserved for application use */
#define LDAP_OPT_PRIVATE_EXTENSION_BASE 0x7000 /* Private API inclusive */


/*
/*
* ldap_get_option() and ldap_set_option() return values.
* LDAP API information. Can be retrieved by using a sequence like:
* As later versions may return other values indicating
*
* failure, current applications should only compare returned
* LDAPAPIInfo ldai;
* value against LDAP_OPT_SUCCESS.
* ldai.ldapai_info_version = LDAP_API_INFO_VERSION;
* if ( ldap_get_option( NULL, LDAP_OPT_API_INFO, &ldia ) == 0 ) ...
*/
*/
#define LDAP_OPT_SUCCESS 0
#define LDAP_API_INFO_VERSION 1
#define LDAP_OPT_ERROR (-1)

/* option on/off values */
#define LDAP_OPT_ON ((void *) &ber_pvt_opt_on)
#define LDAP_OPT_OFF ((void *) 0)

typedef struct ldapapiinfo {
typedef struct ldapapiinfo {
int ldapai_info_version; /* version of LDAPAPIInfo */
int ldapai_info_version; /* version of this struct (1) */
#define LDAP_API_INFO_VERSION (1)
int ldapai_api_version; /* revision of API supported */
int ldapai_api_version; /* revision of API supported */
int ldapai_protocol_version; /* highest LDAP version supported */
int ldapai_protocol_version; /* highest LDAP version supported */
char **ldapai_extensions; /* names of API extensions */
char **ldapai_extensions; /* names of API extensions */
char *ldapai_vendor_name; /* name of supplier */
char *ldapai_vendor_name; /* name of supplier */
int ldapai_vendor_version; /* supplier-specific version times 100 */
int ldapai_vendor_version; /* supplier-specific version * 100 */
} LDAPAPIInfo;
} LDAPAPIInfo;



/*
* LDAP API extended features info. Can be retrieved by using a sequence like:
*
* LDAPAPIFeatureInfo ldfi;
* ldfi.ldapaif_info_version = LDAP_FEATURE_INFO_VERSION;
* ldfi.ldapaif_name = "VIRTUAL_LIST_VIEW";
* if ( ldap_get_option( NULL, LDAP_OPT_API_FEATURE_INFO, &ldfi ) == 0 ) ...
*/
#define LDAP_FEATURE_INFO_VERSION 1
typedef struct ldap_apifeature_info {
typedef struct ldap_apifeature_info {
int ldapaif_info_version; /* version of LDAPAPIFeatureInfo */
int ldapaif_info_version; /* version of this struct (1) */
#define LDAP_FEATURE_INFO_VERSION (1) /* apifeature_info struct version */
char *ldapaif_name; /* name of supported feature */
char* ldapaif_name; /* LDAP_API_FEATURE_* (less prefix) */
int ldapaif_version; /* revision of supported feature */
int ldapaif_version; /* value of LDAP_API_FEATURE_... */
} LDAPAPIFeatureInfo;
} LDAPAPIFeatureInfo;


/*
* LDAP Control structure
*/
typedef struct ldapcontrol {
char * ldctl_oid; /* numericoid of control */
struct berval ldctl_value; /* encoded value of control */
char ldctl_iscritical; /* criticality */
} LDAPControl;

/* LDAP Controls */
/* standard track controls */
#define LDAP_CONTROL_MANAGEDSAIT "2.16.840.1.113730.3.4.2" /* RFC 3296 */
#define LDAP_CONTROL_PROXY_AUTHZ "2.16.840.1.113730.3.4.18" /* RFC 4370 */
#define LDAP_CONTROL_SUBENTRIES "1.3.6.1.4.1.4203.1.10.1" /* RFC 3672 */

#define LDAP_CONTROL_VALUESRETURNFILTER "1.2.826.0.1.3344810.2.3"/* RFC 3876 */

#define LDAP_CONTROL_ASSERT "1.3.6.1.1.12" /* RFC 4528 */
#define LDAP_CONTROL_PRE_READ "1.3.6.1.1.13.1" /* RFC 4527 */
#define LDAP_CONTROL_POST_READ "1.3.6.1.1.13.2" /* RFC 4527 */

#define LDAP_CONTROL_SORTREQUEST "1.2.840.113556.1.4.473" /* RFC 2891 */
#define LDAP_CONTROL_SORTRESPONSE "1.2.840.113556.1.4.474" /* RFC 2891 */

/* non-standard track controls */
#define LDAP_CONTROL_PAGEDRESULTS "1.2.840.113556.1.4.319" /* RFC 2696 */

/* LDAP Content Synchronization Operation -- RFC 4533 */
#define LDAP_SYNC_OID "1.3.6.1.4.1.4203.1.9.1"
#define LDAP_CONTROL_SYNC LDAP_SYNC_OID ".1"
#define LDAP_CONTROL_SYNC_STATE LDAP_SYNC_OID ".2"
#define LDAP_CONTROL_SYNC_DONE LDAP_SYNC_OID ".3"
#define LDAP_SYNC_INFO LDAP_SYNC_OID ".4"

#define LDAP_SYNC_NONE 0x00
#define LDAP_SYNC_REFRESH_ONLY 0x01
#define LDAP_SYNC_RESERVED 0x02
#define LDAP_SYNC_REFRESH_AND_PERSIST 0x03

#define LDAP_SYNC_REFRESH_PRESENTS 0
#define LDAP_SYNC_REFRESH_DELETES 1

#define LDAP_TAG_SYNC_NEW_COOKIE ((ber_tag_t) 0x80U)
#define LDAP_TAG_SYNC_REFRESH_DELETE ((ber_tag_t) 0xa1U)
#define LDAP_TAG_SYNC_REFRESH_PRESENT ((ber_tag_t) 0xa2U)
#define LDAP_TAG_SYNC_ID_SET ((ber_tag_t) 0xa3U)

#define LDAP_TAG_SYNC_COOKIE ((ber_tag_t) 0x04U)
#define LDAP_TAG_REFRESHDELETES ((ber_tag_t) 0x01U)
#define LDAP_TAG_REFRESHDONE ((ber_tag_t) 0x01U)
#define LDAP_TAG_RELOAD_HINT ((ber_tag_t) 0x01U)

#define LDAP_SYNC_PRESENT 0
#define LDAP_SYNC_ADD 1
#define LDAP_SYNC_MODIFY 2
#define LDAP_SYNC_DELETE 3
#define LDAP_SYNC_NEW_COOKIE 4

/* LDAP Don't Use Copy Control (RFC 6171) */
#define LDAP_CONTROL_DONTUSECOPY "1.3.6.1.1.22"

/* Password policy Controls *//* work in progress */
/* ITS#3458: released; disabled by default */
#define LDAP_CONTROL_PASSWORDPOLICYREQUEST "1.3.6.1.4.1.42.2.27.8.5.1"
#define LDAP_CONTROL_PASSWORDPOLICYRESPONSE "1.3.6.1.4.1.42.2.27.8.5.1"


/* various works in progress */
/* possible result types a server can return */
#define LDAP_CONTROL_NOOP "1.3.6.1.4.1.4203.666.5.2"
#define LDAP_RES_BIND 0x61 /* 97 */
#define LDAP_CONTROL_NO_SUBORDINATES "1.3.6.1.4.1.4203.666.5.11"
#define LDAP_RES_SEARCH_ENTRY 0x64 /* 100 */
#define LDAP_CONTROL_RELAX "1.3.6.1.4.1.4203.666.5.12"
#define LDAP_RES_SEARCH_RESULT 0x65 /* 101 */
#define LDAP_CONTROL_MANAGEDIT LDAP_CONTROL_RELAX
#define LDAP_RES_MODIFY 0x67 /* 103 */
#define LDAP_CONTROL_SLURP "1.3.6.1.4.1.4203.666.5.13"
#define LDAP_RES_ADD 0x69 /* 105 */
#define LDAP_CONTROL_VALSORT "1.3.6.1.4.1.4203.666.5.14"
#define LDAP_RES_DELETE 0x6b /* 107 */
#define LDAP_CONTROL_X_DEREF "1.3.6.1.4.1.4203.666.5.16"
#define LDAP_RES_MODDN 0x6d /* 109 */
#define LDAP_CONTROL_X_WHATFAILED "1.3.6.1.4.1.4203.666.5.17"
#define LDAP_RES_COMPARE 0x6f /* 111 */
#define LDAP_RES_SEARCH_REFERENCE 0x73 /* 115 */
#define LDAP_RES_EXTENDED 0x78 /* 120 */


/* LDAP Chaining Behavior Control *//* work in progress */
/* Special values for ldap_result() "msgid" parameter */
/* <draft-sermersheim-ldap-chaining>;
#define LDAP_RES_ANY (-1)
* see also LDAP_NO_REFERRALS_FOUND, LDAP_CANNOT_CHAIN */
#define LDAP_RES_UNSOLICITED 0
#define LDAP_CONTROL_X_CHAINING_BEHAVIOR "1.3.6.1.4.1.4203.666.11.3"


#define LDAP_CHAINING_PREFERRED 0
/* built-in SASL methods */
#define LDAP_CHAINING_REQUIRED 1
#define LDAP_SASL_SIMPLE 0 /* special value used for simple bind */
#define LDAP_REFERRALS_PREFERRED 2
#define LDAP_SASL_EXTERNAL "EXTERNAL" /* TLS/SSL extension */
#define LDAP_REFERRALS_REQUIRED 3


/* MS Active Directory controls (for compatibility) */
#ifdef _SOLARIS_SDK
#define LDAP_CONTROL_X_INCREMENTAL_VALUES "1.2.840.113556.1.4.802"
#define LDAP_SASL_CRAM_MD5 "CRAM-MD5"
#define LDAP_CONTROL_X_DOMAIN_SCOPE "1.2.840.113556.1.4.1339"
#define LDAP_SASL_DIGEST_MD5 "DIGEST-MD5"
#define LDAP_CONTROL_X_PERMISSIVE_MODIFY "1.2.840.113556.1.4.1413"
#define LDAP_SASL_BIND_INPROGRESS 0x0e /* for backward compatibility */
#define LDAP_CONTROL_X_SEARCH_OPTIONS "1.2.840.113556.1.4.1340"
#endif
#define LDAP_SEARCH_FLAG_DOMAIN_SCOPE 1 /* do not generate referrals */
#define LDAP_SEARCH_FLAG_PHANTOM_ROOT 2 /* search all subordinate NCs */
#define LDAP_CONTROL_X_TREE_DELETE "1.2.840.113556.1.4.805"


/* MS Active Directory controls - not implemented in slapd(8) */
/* search scopes */
#define LDAP_CONTROL_X_EXTENDED_DN "1.2.840.113556.1.4.529"
#define LDAP_SCOPE_BASE 0x00
#define LDAP_SCOPE_ONELEVEL 0x01
#define LDAP_SCOPE_SUBTREE 0x02


/* <draft-wahl-ldap-session> */
/* alias dereferencing */
#define LDAP_CONTROL_X_SESSION_TRACKING "1.3.6.1.4.1.21008.108.63.1"
#define LDAP_DEREF_NEVER 0
#define LDAP_CONTROL_X_SESSION_TRACKING_RADIUS_ACCT_SESSION_ID \
#define LDAP_DEREF_SEARCHING 1
LDAP_CONTROL_X_SESSION_TRACKING ".1"
#define LDAP_DEREF_FINDING 2
#define LDAP_CONTROL_X_SESSION_TRACKING_RADIUS_ACCT_MULTI_SESSION_ID \
#define LDAP_DEREF_ALWAYS 3
LDAP_CONTROL_X_SESSION_TRACKING ".2"
#define LDAP_CONTROL_X_SESSION_TRACKING_USERNAME \
LDAP_CONTROL_X_SESSION_TRACKING ".3"
/* various expired works */


/* LDAP Duplicated Entry Control Extension *//* not implemented in slapd(8) */
/* predefined size/time limits */
#define LDAP_CONTROL_DUPENT_REQUEST "2.16.840.1.113719.1.27.101.1"
#define LDAP_NO_LIMIT 0
#define LDAP_CONTROL_DUPENT_RESPONSE "2.16.840.1.113719.1.27.101.2"
#define LDAP_CONTROL_DUPENT_ENTRY "2.16.840.1.113719.1.27.101.3"
#define LDAP_CONTROL_DUPENT LDAP_CONTROL_DUPENT_REQUEST


/* LDAP Persistent Search Control *//* not implemented in slapd(8) */
/* allowed values for "all" ldap_result() parameter */
#define LDAP_CONTROL_PERSIST_REQUEST "2.16.840.1.113730.3.4.3"
#define LDAP_MSG_ONE 0
#define LDAP_CONTROL_PERSIST_ENTRY_CHANGE_NOTICE "2.16.840.1.113730.3.4.7"
#define LDAP_MSG_ALL 1
#define LDAP_CONTROL_PERSIST_ENTRY_CHANGE_ADD 0x1
#define LDAP_MSG_RECEIVED 2
#define LDAP_CONTROL_PERSIST_ENTRY_CHANGE_DELETE 0x2
#define LDAP_CONTROL_PERSIST_ENTRY_CHANGE_MODIFY 0x4
#define LDAP_CONTROL_PERSIST_ENTRY_CHANGE_RENAME 0x8


/* LDAP VLV */
/* possible error codes we can be returned */
#define LDAP_CONTROL_VLVREQUEST "2.16.840.1.113730.3.4.9"
#define LDAP_SUCCESS 0x00 /* 0 */
#define LDAP_CONTROL_VLVRESPONSE "2.16.840.1.113730.3.4.10"
#define LDAP_OPERATIONS_ERROR 0x01 /* 1 */
#define LDAP_PROTOCOL_ERROR 0x02 /* 2 */
#define LDAP_TIMELIMIT_EXCEEDED 0x03 /* 3 */
#define LDAP_SIZELIMIT_EXCEEDED 0x04 /* 4 */
#define LDAP_COMPARE_FALSE 0x05 /* 5 */
#define LDAP_COMPARE_TRUE 0x06 /* 6 */
#define LDAP_STRONG_AUTH_NOT_SUPPORTED 0x07 /* 7 */
#define LDAP_STRONG_AUTH_REQUIRED 0x08 /* 8 */
#define LDAP_PARTIAL_RESULTS 0x09 /* 9 (UMich LDAPv2 extn) */
#define LDAP_REFERRAL 0x0a /* 10 - LDAPv3 */
#define LDAP_ADMINLIMIT_EXCEEDED 0x0b /* 11 - LDAPv3 */
#define LDAP_UNAVAILABLE_CRITICAL_EXTENSION 0x0c /* 12 - LDAPv3 */
#define LDAP_CONFIDENTIALITY_REQUIRED 0x0d /* 13 */
#define LDAP_SASL_BIND_IN_PROGRESS 0x0e /* 14 - LDAPv3 */


/* LDAP Unsolicited Notifications */
#define LDAP_NO_SUCH_ATTRIBUTE 0x10 /* 16 */
#define LDAP_NOTICE_OF_DISCONNECTION "1.3.6.1.4.1.1466.20036" /* RFC 4511 */
#define LDAP_UNDEFINED_TYPE 0x11 /* 17 */
#define LDAP_NOTICE_DISCONNECT LDAP_NOTICE_OF_DISCONNECTION
#define LDAP_INAPPROPRIATE_MATCHING 0x12 /* 18 */
#define LDAP_CONSTRAINT_VIOLATION 0x13 /* 19 */
#define LDAP_TYPE_OR_VALUE_EXISTS 0x14 /* 20 */
#define LDAP_INVALID_SYNTAX 0x15 /* 21 */


/* LDAP Extended Operations */
#define LDAP_NO_SUCH_OBJECT 0x20 /* 32 */
#define LDAP_EXOP_START_TLS "1.3.6.1.4.1.1466.20037" /* RFC 4511 */
#define LDAP_ALIAS_PROBLEM 0x21 /* 33 */
#define LDAP_INVALID_DN_SYNTAX 0x22 /* 34 */
#define LDAP_IS_LEAF 0x23 /* 35 (not used in LDAPv3) */
#define LDAP_ALIAS_DEREF_PROBLEM 0x24 /* 36 */


#define LDAP_EXOP_MODIFY_PASSWD "1.3.6.1.4.1.4203.1.11.1" /* RFC 3062 */
#define NAME_ERROR(n) ((n & 0xf0) == 0x20)
#define LDAP_TAG_EXOP_MODIFY_PASSWD_ID ((ber_tag_t) 0x80U)
#define LDAP_TAG_EXOP_MODIFY_PASSWD_OLD ((ber_tag_t) 0x81U)
#define LDAP_TAG_EXOP_MODIFY_PASSWD_NEW ((ber_tag_t) 0x82U)
#define LDAP_TAG_EXOP_MODIFY_PASSWD_GEN ((ber_tag_t) 0x80U)


#define LDAP_EXOP_CANCEL "1.3.6.1.1.8" /* RFC 3909 */
#define LDAP_INAPPROPRIATE_AUTH 0x30 /* 48 */
#define LDAP_EXOP_X_CANCEL LDAP_EXOP_CANCEL
#define LDAP_INVALID_CREDENTIALS 0x31 /* 49 */
#define LDAP_INSUFFICIENT_ACCESS 0x32 /* 50 */
#define LDAP_BUSY 0x33 /* 51 */
#define LDAP_UNAVAILABLE 0x34 /* 52 */
#define LDAP_UNWILLING_TO_PERFORM 0x35 /* 53 */
#define LDAP_LOOP_DETECT 0x36 /* 54 */


#define LDAP_EXOP_REFRESH "1.3.6.1.4.1.1466.101.119.1" /* RFC 2589 */
#define LDAP_SORT_CONTROL_MISSING 0x3C /* 60 (server side sort extn) */
#define LDAP_TAG_EXOP_REFRESH_REQ_DN ((ber_tag_t) 0x80U)
#define LDAP_INDEX_RANGE_ERROR 0x3D /* 61 (VLV extn) */
#define LDAP_TAG_EXOP_REFRESH_REQ_TTL ((ber_tag_t) 0x81U)
#define LDAP_TAG_EXOP_REFRESH_RES_TTL ((ber_tag_t) 0x81U)


#define LDAP_EXOP_WHO_AM_I "1.3.6.1.4.1.4203.1.11.3" /* RFC 4532 */
#define LDAP_NAMING_VIOLATION 0x40 /* 64 */
#define LDAP_EXOP_X_WHO_AM_I LDAP_EXOP_WHO_AM_I
#define LDAP_OBJECT_CLASS_VIOLATION 0x41 /* 65 */
#define LDAP_NOT_ALLOWED_ON_NONLEAF 0x42 /* 66 */
#define LDAP_NOT_ALLOWED_ON_RDN 0x43 /* 67 */
#define LDAP_ALREADY_EXISTS 0x44 /* 68 */
#define LDAP_NO_OBJECT_CLASS_MODS 0x45 /* 69 */
#define LDAP_RESULTS_TOO_LARGE 0x46 /* 70 - CLDAP */
#define LDAP_AFFECTS_MULTIPLE_DSAS 0x47 /* 71 */


/* various works in progress */
#define LDAP_OTHER 0x50 /* 80 */
#define LDAP_EXOP_TURN "1.3.6.1.1.19" /* RFC 4531 */
#define LDAP_SERVER_DOWN 0x51 /* 81 */
#define LDAP_EXOP_X_TURN LDAP_EXOP_TURN
#define LDAP_LOCAL_ERROR 0x52 /* 82 */
#define LDAP_ENCODING_ERROR 0x53 /* 83 */
#define LDAP_DECODING_ERROR 0x54 /* 84 */
#define LDAP_TIMEOUT 0x55 /* 85 */
#define LDAP_AUTH_UNKNOWN 0x56 /* 86 */
#define LDAP_FILTER_ERROR 0x57 /* 87 */
#define LDAP_USER_CANCELLED 0x58 /* 88 */
#define LDAP_PARAM_ERROR 0x59 /* 89 */
#define LDAP_NO_MEMORY 0x5a /* 90 */
#define LDAP_CONNECT_ERROR 0x5b /* 91 */
#define LDAP_NOT_SUPPORTED 0x5c /* 92 - LDAPv3 */
#define LDAP_CONTROL_NOT_FOUND 0x5d /* 93 - LDAPv3 */
#define LDAP_NO_RESULTS_RETURNED 0x5e /* 94 - LDAPv3 */
#define LDAP_MORE_RESULTS_TO_RETURN 0x5f /* 95 - LDAPv3 */
#define LDAP_CLIENT_LOOP 0x60 /* 96 - LDAPv3 */
#define LDAP_REFERRAL_LIMIT_EXCEEDED 0x61 /* 97 - LDAPv3 */


/* LDAP Distributed Procedures <draft-sermersheim-ldap-distproc> */
/*
/* a work in progress */
* LDAPv3 unsolicited notification messages we know about
#define LDAP_X_DISTPROC_BASE "1.3.6.1.4.1.4203.666.11.6"
*/
#define LDAP_EXOP_X_CHAINEDREQUEST LDAP_X_DISTPROC_BASE ".1"
#define LDAP_NOTICE_OF_DISCONNECTION "1.3.6.1.4.1.1466.20036"
#define LDAP_FEATURE_X_CANCHAINOPS LDAP_X_DISTPROC_BASE ".2"
#define LDAP_CONTROL_X_RETURNCONTREF LDAP_X_DISTPROC_BASE ".3"
#define LDAP_URLEXT_X_LOCALREFOID LDAP_X_DISTPROC_BASE ".4"
#define LDAP_URLEXT_X_REFTYPEOID LDAP_X_DISTPROC_BASE ".5"
#define LDAP_URLEXT_X_SEARCHEDSUBTREEOID \
LDAP_X_DISTPROC_BASE ".6"
#define LDAP_URLEXT_X_FAILEDNAMEOID LDAP_X_DISTPROC_BASE ".7"
#define LDAP_URLEXT_X_LOCALREF "x-localReference"
#define LDAP_URLEXT_X_REFTYPE "x-referenceType"
#define LDAP_URLEXT_X_SEARCHEDSUBTREE "x-searchedSubtree"
#define LDAP_URLEXT_X_FAILEDNAME "x-failedName"


#ifdef LDAP_DEVEL
/*
#define LDAP_X_TXN "1.3.6.1.4.1.4203.666.11.7" /* tmp */
* LDAPv3 server controls we know about
#define LDAP_EXOP_X_TXN_START LDAP_X_TXN ".1"
*/
#define LDAP_CONTROL_X_TXN_SPEC LDAP_X_TXN ".2"
#define LDAP_CONTROL_MANAGEDSAIT "2.16.840.1.113730.3.4.2"
#define LDAP_EXOP_X_TXN_END LDAP_X_TXN ".3"
#define LDAP_CONTROL_SORTREQUEST "1.2.840.113556.1.4.473"
#define LDAP_EXOP_X_TXN_ABORTED_NOTICE LDAP_X_TXN ".4"
#define LDAP_CONTROL_SORTRESPONSE "1.2.840.113556.1.4.474"
#endif
#define LDAP_CONTROL_PERSISTENTSEARCH "2.16.840.1.113730.3.4.3"
#define LDAP_CONTROL_ENTRYCHANGE "2.16.840.1.113730.3.4.7"
#define LDAP_CONTROL_VLVREQUEST "2.16.840.1.113730.3.4.9"
#define LDAP_CONTROL_VLVRESPONSE "2.16.840.1.113730.3.4.10"
#define LDAP_CONTROL_PROXYAUTH "2.16.840.1.113730.3.4.12"
/* version 1 */
#define LDAP_CONTROL_PROXIEDAUTH "2.16.840.1.113730.3.4.18"
/* version 2 */


/* LDAP Features */
#ifdef _SOLARIS_SDK
#define LDAP_FEATURE_ALL_OP_ATTRS "1.3.6.1.4.1.4203.1.5.1" /* RFC 3673 */
/*
#define LDAP_FEATURE_OBJECTCLASS_ATTRS \
* Simple Page control OID
"1.3.6.1.4.1.4203.1.5.2" /* @objectClass - new number to be assigned */
*/
#define LDAP_FEATURE_ABSOLUTE_FILTERS "1.3.6.1.4.1.4203.1.5.3" /* (&) (|) */
#define LDAP_CONTROL_SIMPLE_PAGE "1.2.840.113556.1.4.319"
#define LDAP_FEATURE_LANGUAGE_TAG_OPTIONS "1.3.6.1.4.1.4203.1.5.4"
#define LDAP_FEATURE_LANGUAGE_RANGE_OPTIONS "1.3.6.1.4.1.4203.1.5.5"
#define LDAP_FEATURE_MODIFY_INCREMENT "1.3.6.1.1.14"


/* LDAP Experimental (works in progress) Features */
/*
#define LDAP_FEATURE_SUBORDINATE_SCOPE \
* Begin LDAP Display Template Definitions
"1.3.6.1.4.1.4203.666.8.1" /* "children" */
*/
#define LDAP_FEATURE_CHILDREN_SCOPE LDAP_FEATURE_SUBORDINATE_SCOPE
#define LDAP_TEMPLATE_VERSION 1


/*
/*
* specific LDAP instantiations of BER types we know about
* general types of items (confined to most significant byte)
*/
*/
#define LDAP_SYN_TYPE_TEXT 0x01000000L
#define LDAP_SYN_TYPE_IMAGE 0x02000000L
#define LDAP_SYN_TYPE_BOOLEAN 0x04000000L
#define LDAP_SYN_TYPE_BUTTON 0x08000000L
#define LDAP_SYN_TYPE_ACTION 0x10000000L


/* Overview of LBER tag construction
/*
*
* syntax options (confined to second most significant byte)
* Bits
* ______
* 8 7 | CLASS
* 0 0 = UNIVERSAL
* 0 1 = APPLICATION
* 1 0 = CONTEXT-SPECIFIC
* 1 1 = PRIVATE
* _____
* | 6 | DATA-TYPE
* 0 = PRIMITIVE
* 1 = CONSTRUCTED
* ___________
* | 5 ... 1 | TAG-NUMBER
*/
*/
#define LDAP_SYN_OPT_DEFER 0x00010000L


/* general stuff */
/*
#define LDAP_TAG_MESSAGE ((ber_tag_t) 0x30U) /* constructed + 16 */
* display template item syntax ids (defined by common agreement)
#define LDAP_TAG_MSGID ((ber_tag_t) 0x02U) /* integer */
* these are the valid values for the ti_syntaxid of the tmplitem
* struct (defined below). A general type is encoded in the
* most-significant 8 bits, and some options are encoded in the next
* 8 bits. The lower 16 bits are reserved for the distinct types.
*/
#define LDAP_SYN_CASEIGNORESTR (1 | LDAP_SYN_TYPE_TEXT)
#define LDAP_SYN_MULTILINESTR (2 | LDAP_SYN_TYPE_TEXT)
#define LDAP_SYN_DN (3 | LDAP_SYN_TYPE_TEXT)
#define LDAP_SYN_BOOLEAN (4 | LDAP_SYN_TYPE_BOOLEAN)
#define LDAP_SYN_JPEGIMAGE (5 | LDAP_SYN_TYPE_IMAGE)
#define LDAP_SYN_JPEGBUTTON (6 | LDAP_SYN_TYPE_BUTTON | LDAP_SYN_OPT_DEFER)
#define LDAP_SYN_FAXIMAGE (7 | LDAP_SYN_TYPE_IMAGE)
#define LDAP_SYN_FAXBUTTON (8 | LDAP_SYN_TYPE_BUTTON | LDAP_SYN_OPT_DEFER)
#define LDAP_SYN_AUDIOBUTTON (9 | LDAP_SYN_TYPE_BUTTON | LDAP_SYN_OPT_DEFER)
#define LDAP_SYN_TIME (10 | LDAP_SYN_TYPE_TEXT)
#define LDAP_SYN_DATE (11 | LDAP_SYN_TYPE_TEXT)
#define LDAP_SYN_LABELEDURL (12 | LDAP_SYN_TYPE_TEXT)
#define LDAP_SYN_SEARCHACTION (13 | LDAP_SYN_TYPE_ACTION)
#define LDAP_SYN_LINKACTION (14 | LDAP_SYN_TYPE_ACTION)
#define LDAP_SYN_ADDDNACTION (15 | LDAP_SYN_TYPE_ACTION)
#define LDAP_SYN_VERIFYDNACTION (16 | LDAP_SYN_TYPE_ACTION)
#define LDAP_SYN_RFC822ADDR (17 | LDAP_SYN_TYPE_TEXT)


#define LDAP_TAG_LDAPDN ((ber_tag_t) 0x04U) /* octet string */
/*
#define LDAP_TAG_LDAPCRED ((ber_tag_t) 0x04U) /* octet string */
* handy macros
*/
#define LDAP_GET_SYN_TYPE(syid) ((syid) & 0xFF000000UL)
#define LDAP_GET_SYN_OPTIONS(syid) ((syid) & 0x00FF0000UL)


#define LDAP_TAG_CONTROLS ((ber_tag_t) 0xa0U) /* context specific + constructed + 0 */
#define LDAP_TAG_REFERRAL ((ber_tag_t) 0xa3U) /* context specific + constructed + 3 */


#define LDAP_TAG_NEWSUPERIOR ((ber_tag_t) 0x80U) /* context-specific + primitive + 0 */
/*
* display options for output routines (used by entry2text and friends)
*/
/*
* use calculated label width (based on length of longest label in
* template) instead of contant width
*/
#define LDAP_DISP_OPT_AUTOLABELWIDTH 0x00000001L
#define LDAP_DISP_OPT_HTMLBODYONLY 0x00000002L


#define LDAP_TAG_EXOP_REQ_OID ((ber_tag_t) 0x80U) /* context specific + primitive */
/*
#define LDAP_TAG_EXOP_REQ_VALUE ((ber_tag_t) 0x81U) /* context specific + primitive */
* perform search actions (applies to ldap_entry2text_search only)
#define LDAP_TAG_EXOP_RES_OID ((ber_tag_t) 0x8aU) /* context specific + primitive */
*/
#define LDAP_TAG_EXOP_RES_VALUE ((ber_tag_t) 0x8bU) /* context specific + primitive */
#define LDAP_DISP_OPT_DOSEARCHACTIONS 0x00000002L


#define LDAP_TAG_IM_RES_OID ((ber_tag_t) 0x80U) /* context specific + primitive */
/*
#define LDAP_TAG_IM_RES_VALUE ((ber_tag_t) 0x81U) /* context specific + primitive */
* include additional info. relevant to "non leaf" entries only
* used by ldap_entry2html and ldap_entry2html_search to include "Browse"
* and "Move Up" HREFs
*/
#define LDAP_DISP_OPT_NONLEAF 0x00000004L


#define LDAP_TAG_SASL_RES_CREDS ((ber_tag_t) 0x87U) /* context specific + primitive */
/*
* display template item options (may not apply to all types)
* if this bit is set in ti_options, it applies.
*/
#define LDAP_DITEM_OPT_READONLY 0x00000001L
#define LDAP_DITEM_OPT_SORTVALUES 0x00000002L
#define LDAP_DITEM_OPT_SINGLEVALUED 0x00000004L
#define LDAP_DITEM_OPT_HIDEIFEMPTY 0x00000008L
#define LDAP_DITEM_OPT_VALUEREQUIRED 0x00000010L
#define LDAP_DITEM_OPT_HIDEIFFALSE 0x00000020L /* booleans only */


/* LDAP Request Messages */
#endif /* _SOLARIS_SDK */
#define LDAP_REQ_BIND ((ber_tag_t) 0x60U) /* application + constructed */
#define LDAP_REQ_UNBIND ((ber_tag_t) 0x42U) /* application + primitive */
#define LDAP_REQ_SEARCH ((ber_tag_t) 0x63U) /* application + constructed */
#define LDAP_REQ_MODIFY ((ber_tag_t) 0x66U) /* application + constructed */
#define LDAP_REQ_ADD ((ber_tag_t) 0x68U) /* application + constructed */
#define LDAP_REQ_DELETE ((ber_tag_t) 0x4aU) /* application + primitive */
#define LDAP_REQ_MODDN ((ber_tag_t) 0x6cU) /* application + constructed */
#define LDAP_REQ_MODRDN LDAP_REQ_MODDN
#define LDAP_REQ_RENAME LDAP_REQ_MODDN
#define LDAP_REQ_COMPARE ((ber_tag_t) 0x6eU) /* application + constructed */
#define LDAP_REQ_ABANDON ((ber_tag_t) 0x50U) /* application + primitive */
#define LDAP_REQ_EXTENDED ((ber_tag_t) 0x77U) /* application + constructed */


/* LDAP Response Messages */
/* Authentication request and response controls */
#define LDAP_RES_BIND ((ber_tag_t) 0x61U) /* application + constructed */
#define LDAP_CONTROL_AUTH_REQUEST "2.16.840.1.113730.3.4.16"
#define LDAP_RES_SEARCH_ENTRY ((ber_tag_t) 0x64U) /* application + constructed */
#define LDAP_CONTROL_AUTH_RESPONSE "2.16.840.1.113730.3.4.15"
#define LDAP_RES_SEARCH_REFERENCE ((ber_tag_t) 0x73U) /* V3: application + constructed */
#define LDAP_RES_SEARCH_RESULT ((ber_tag_t) 0x65U) /* application + constructed */
#define LDAP_RES_MODIFY ((ber_tag_t) 0x67U) /* application + constructed */
#define LDAP_RES_ADD ((ber_tag_t) 0x69U) /* application + constructed */
#define LDAP_RES_DELETE ((ber_tag_t) 0x6bU) /* application + constructed */
#define LDAP_RES_MODDN ((ber_tag_t) 0x6dU) /* application + constructed */
#define LDAP_RES_MODRDN LDAP_RES_MODDN /* application + constructed */
#define LDAP_RES_RENAME LDAP_RES_MODDN /* application + constructed */
#define LDAP_RES_COMPARE ((ber_tag_t) 0x6fU) /* application + constructed */
#define LDAP_RES_EXTENDED ((ber_tag_t) 0x78U) /* V3: application + constructed */
#define LDAP_RES_INTERMEDIATE ((ber_tag_t) 0x79U) /* V3+: application + constructed */


#define LDAP_RES_ANY (-1)
/* Password information sent back to client */
#define LDAP_RES_UNSOLICITED (0)
#define LDAP_CONTROL_PWEXPIRED "2.16.840.1.113730.3.4.4"
#define LDAP_CONTROL_PWEXPIRING "2.16.840.1.113730.3.4.5"




/* sasl methods */
/*
#define LDAP_SASL_SIMPLE ((char*)0)
* Client controls we know about
#define LDAP_SASL_NULL ("")
*/
#define LDAP_CONTROL_REFERRALS "1.2.840.113556.1.4.616"




/* authentication methods available */
/*
#define LDAP_AUTH_NONE ((ber_tag_t) 0x00U) /* no authentication */
* LDAP_API macro definition:
#define LDAP_AUTH_SIMPLE ((ber_tag_t) 0x80U) /* context specific + primitive */
*/
#define LDAP_AUTH_SASL ((ber_tag_t) 0xa3U) /* context specific + constructed */
#ifndef LDAP_API
#define LDAP_AUTH_KRBV4 ((ber_tag_t) 0xffU) /* means do both of the following */
#define LDAP_API(rt) rt
#define LDAP_AUTH_KRBV41 ((ber_tag_t) 0x81U) /* context specific + primitive */
#endif /* LDAP_API */
#define LDAP_AUTH_KRBV42 ((ber_tag_t) 0x82U) /* context specific + primitive */

/* used by the Windows API but not used on the wire */
#define LDAP_AUTH_NEGOTIATE ((ber_tag_t) 0x04FFU)

/* filter types */
#define LDAP_FILTER_AND ((ber_tag_t) 0xa0U) /* context specific + constructed */
#define LDAP_FILTER_OR ((ber_tag_t) 0xa1U) /* context specific + constructed */
#define LDAP_FILTER_NOT ((ber_tag_t) 0xa2U) /* context specific + constructed */
#define LDAP_FILTER_EQUALITY ((ber_tag_t) 0xa3U) /* context specific + constructed */
#define LDAP_FILTER_SUBSTRINGS ((ber_tag_t) 0xa4U) /* context specific + constructed */
#define LDAP_FILTER_GE ((ber_tag_t) 0xa5U) /* context specific + constructed */
#define LDAP_FILTER_LE ((ber_tag_t) 0xa6U) /* context specific + constructed */
#define LDAP_FILTER_PRESENT ((ber_tag_t) 0x87U) /* context specific + primitive */
#define LDAP_FILTER_APPROX ((ber_tag_t) 0xa8U) /* context specific + constructed */
#define LDAP_FILTER_EXT ((ber_tag_t) 0xa9U) /* context specific + constructed */


/* extended filter component types */
#ifdef _SOLARIS_SDK
#define LDAP_FILTER_EXT_OID ((ber_tag_t) 0x81U) /* context specific */
/* Simple Page Control functions for Solaris SDK */
#define LDAP_FILTER_EXT_TYPE ((ber_tag_t) 0x82U) /* context specific */
int ldap_create_page_control(LDAP *ld, unsigned int pagesize,
#define LDAP_FILTER_EXT_VALUE ((ber_tag_t) 0x83U) /* context specific */
struct berval *cookie, char isCritical, LDAPControl **output);
#define LDAP_FILTER_EXT_DNATTRS ((ber_tag_t) 0x84U) /* context specific */
int ldap_parse_page_control(LDAP *ld, LDAPControl **controls,
unsigned int *totalcount, struct berval **cookie);


/* substring filter component types */
/* CRAM-MD5 functions */
#define LDAP_SUBSTRING_INITIAL ((ber_tag_t) 0x80U) /* context specific */
int ldap_sasl_cram_md5_bind_s(LDAP *ld, char *dn,
#define LDAP_SUBSTRING_ANY ((ber_tag_t) 0x81U) /* context specific */
struct berval *cred, LDAPControl **serverctrls,
#define LDAP_SUBSTRING_FINAL ((ber_tag_t) 0x82U) /* context specific */
LDAPControl **clientctrls);
/* DIGEST-MD5 Function */
int ldap_x_sasl_digest_md5_bind_s(LDAP *ld, char *dn,
struct berval *cred, LDAPControl **serverctrls,
LDAPControl **clientctrls);
int ldap_x_sasl_digest_md5_bind(LDAP *ld, char *dn,
struct berval *cred, LDAPControl **serverctrls,
LDAPControl **clientctrls, struct timeval *timeout,
LDAPMessage **result);


/* search scopes */
#endif /* _SOLARIS_SDK */
#define LDAP_SCOPE_BASE ((ber_int_t) 0x0000)
#define LDAP_SCOPE_BASEOBJECT LDAP_SCOPE_BASE
#define LDAP_SCOPE_ONELEVEL ((ber_int_t) 0x0001)
#define LDAP_SCOPE_ONE LDAP_SCOPE_ONELEVEL
#define LDAP_SCOPE_SUBTREE ((ber_int_t) 0x0002)
#define LDAP_SCOPE_SUB LDAP_SCOPE_SUBTREE
#define LDAP_SCOPE_SUBORDINATE ((ber_int_t) 0x0003) /* OpenLDAP extension */
#define LDAP_SCOPE_CHILDREN LDAP_SCOPE_SUBORDINATE
#define LDAP_SCOPE_DEFAULT ((ber_int_t) -1) /* OpenLDAP extension */


/* substring filter component types */
LDAP_API(LDAP *) LDAP_CALL ldap_open(const char *host, int port);
#define LDAP_SUBSTRING_INITIAL ((ber_tag_t) 0x80U) /* context specific */
LDAP_API(LDAP *) LDAP_CALL ldap_init(const char *defhost, int defport);
#define LDAP_SUBSTRING_ANY ((ber_tag_t) 0x81U) /* context specific */
int LDAP_CALL ldap_set_option(LDAP *ld, int option,
#define LDAP_SUBSTRING_FINAL ((ber_tag_t) 0x82U) /* context specific */
const void *optdata);
int LDAP_CALL ldap_get_option(LDAP *ld, int option, void *optdata);
int LDAP_CALL ldap_unbind(LDAP *ld);
int LDAP_CALL ldap_unbind_s(LDAP *ld);


/*
/*
* LDAP Result Codes
* perform ldap operations and obtain results
*/
*/
#define LDAP_SUCCESS 0x00
int LDAP_CALL ldap_abandon(LDAP *ld, int msgid);
int LDAP_CALL ldap_add(LDAP *ld, const char *dn, LDAPMod **attrs);
int LDAP_CALL ldap_add_s(LDAP *ld, const char *dn, LDAPMod **attrs);
int LDAP_CALL ldap_simple_bind(LDAP *ld, const char *who,
const char *passwd);
int LDAP_CALL ldap_simple_bind_s(LDAP *ld, const char *who,
const char *passwd);
int LDAP_CALL ldap_modify(LDAP *ld, const char *dn, LDAPMod **mods);
int LDAP_CALL ldap_modify_s(LDAP *ld, const char *dn,
LDAPMod **mods);
int LDAP_CALL ldap_modrdn(LDAP *ld, const char *dn,
const char *newrdn);
int LDAP_CALL ldap_modrdn_s(LDAP *ld, const char *dn,
const char *newrdn);


#define LDAP_RANGE(n,x,y) (((x) <= (n)) && ((n) <= (y)))
/* The following 2 functions are deprecated */
int LDAP_CALL ldap_modrdn2(LDAP *ld, const char *dn,
const char *newrdn, int deleteoldrdn);
int LDAP_CALL ldap_modrdn2_s(LDAP *ld, const char *dn,
const char *newrdn, int deleteoldrdn);


#define LDAP_OPERATIONS_ERROR 0x01
int LDAP_CALL ldap_compare(LDAP *ld, const char *dn,
#define LDAP_PROTOCOL_ERROR 0x02
const char *attr, const char *value);
#define LDAP_TIMELIMIT_EXCEEDED 0x03
int LDAP_CALL ldap_compare_s(LDAP *ld, const char *dn,
#define LDAP_SIZELIMIT_EXCEEDED 0x04
const char *attr, const char *value);
#define LDAP_COMPARE_FALSE 0x05
int LDAP_CALL ldap_delete(LDAP *ld, const char *dn);
#define LDAP_COMPARE_TRUE 0x06
int LDAP_CALL ldap_delete_s(LDAP *ld, const char *dn);
#define LDAP_AUTH_METHOD_NOT_SUPPORTED 0x07
int LDAP_CALL ldap_search(LDAP *ld, const char *base, int scope,
#define LDAP_STRONG_AUTH_NOT_SUPPORTED LDAP_AUTH_METHOD_NOT_SUPPORTED
const char *filter, char **attrs, int attrsonly);
#define LDAP_STRONG_AUTH_REQUIRED 0x08
int LDAP_CALL ldap_search_s(LDAP *ld, const char *base, int scope,
#define LDAP_STRONGER_AUTH_REQUIRED LDAP_STRONG_AUTH_REQUIRED
const char *filter, char **attrs, int attrsonly, LDAPMessage **res);
#define LDAP_PARTIAL_RESULTS 0x09 /* LDAPv2+ (not LDAPv3) */
int LDAP_CALL ldap_search_st(LDAP *ld, const char *base, int scope,
const char *filter, char **attrs, int attrsonly,
struct timeval *timeout, LDAPMessage **res);
int LDAP_CALL ldap_result(LDAP *ld, int msgid, int all,
struct timeval *timeout, LDAPMessage **result);
int LDAP_CALL ldap_msgfree(LDAPMessage *lm);
int LDAP_CALL ldap_msgid(LDAPMessage *lm);
int LDAP_CALL ldap_msgtype(LDAPMessage *lm);


#define LDAP_REFERRAL 0x0a /* LDAPv3 */
#define LDAP_ADMINLIMIT_EXCEEDED 0x0b /* LDAPv3 */
#define LDAP_UNAVAILABLE_CRITICAL_EXTENSION 0x0c /* LDAPv3 */
#define LDAP_CONFIDENTIALITY_REQUIRED 0x0d /* LDAPv3 */
#define LDAP_SASL_BIND_IN_PROGRESS 0x0e /* LDAPv3 */


#define LDAP_ATTR_ERROR(n) LDAP_RANGE((n),0x10,0x15) /* 16-21 */
/*
* Routines to parse/deal with results and errors returned
*/
int LDAP_CALL ldap_result2error(LDAP *ld, LDAPMessage *r,
int freeit);
char *LDAP_CALL ldap_err2string(int err);
LDAP_API(void) LDAP_CALL ldap_perror(LDAP *ld, const char *s);
LDAP_API(LDAPMessage *) LDAP_CALL ldap_first_entry(LDAP *ld,
LDAPMessage *chain);
LDAP_API(LDAPMessage *) LDAP_CALL ldap_next_entry(LDAP *ld,
LDAPMessage *entry);
int LDAP_CALL ldap_count_entries(LDAP *ld, LDAPMessage *chain);
char *LDAP_CALL ldap_get_dn(LDAP *ld, LDAPMessage *entry);
char *LDAP_CALL ldap_dn2ufn(const char *dn);
char **LDAP_CALL ldap_explode_dn(const char *dn,
const int notypes);
char **LDAP_CALL ldap_explode_rdn(const char *rdn,
const int notypes);
char *LDAP_CALL ldap_first_attribute(LDAP *ld, LDAPMessage *entry,
BerElement **ber);
char *LDAP_CALL ldap_next_attribute(LDAP *ld, LDAPMessage *entry,
BerElement *ber);


#define LDAP_NO_SUCH_ATTRIBUTE 0x10
/* The following function is deprecated */
#define LDAP_UNDEFINED_TYPE 0x11
LDAP_API(void) LDAP_CALL ldap_ber_free(BerElement *ber, int freebuf);
#define LDAP_INAPPROPRIATE_MATCHING 0x12
#define LDAP_CONSTRAINT_VIOLATION 0x13
#define LDAP_TYPE_OR_VALUE_EXISTS 0x14
#define LDAP_INVALID_SYNTAX 0x15


#define LDAP_NAME_ERROR(n) LDAP_RANGE((n),0x20,0x24) /* 32-34,36 */
char **LDAP_CALL ldap_get_values(LDAP *ld, LDAPMessage *entry,
const char *target);
struct berval **LDAP_CALL ldap_get_values_len(LDAP *ld,
LDAPMessage *entry, const char *target);
int LDAP_CALL ldap_count_values(char **vals);
int LDAP_CALL ldap_count_values_len(struct berval **vals);
LDAP_API(void) LDAP_CALL ldap_value_free(char **vals);
LDAP_API(void) LDAP_CALL ldap_value_free_len(struct berval **vals);
LDAP_API(void) LDAP_CALL ldap_memfree(void *p);


#define LDAP_NO_SUCH_OBJECT 0x20
#define LDAP_ALIAS_PROBLEM 0x21
#define LDAP_INVALID_DN_SYNTAX 0x22
#define LDAP_IS_LEAF 0x23 /* not LDAPv3 */
#define LDAP_ALIAS_DEREF_PROBLEM 0x24


#define LDAP_SECURITY_ERROR(n) LDAP_RANGE((n),
/*
* LDAPv3 extended operation calls
*/
/*
* Note: all of the new asynchronous calls return an LDAP error code,
* not a message id. A message id is returned via the int *msgidp
* parameter (usually the last parameter) if appropriate.
*/
int LDAP_CALL ldap_abandon_ext(LDAP *ld, int msgid,
LDAPControl **serverctrls, LDAPControl **clientctrls);
int LDAP_CALL ldap_add_ext(LDAP *ld, const char *dn, LDAPMod **attrs,
LDAPControl **serverctrls, LDAPControl **clientctrls, int *msgidp);
int LDAP_CALL ldap_add_ext_s(LDAP *ld, const char *dn,
LDAPMod **attrs, LDAPControl **serverctrls, LDAPControl **clientctrls);
int LDAP_CALL ldap_sasl_bind(LDAP *ld, const char *dn,
const char *mechanism, const struct berval *cred,
LDAPControl **serverctrls, LDAPControl **clientctrls, int *msgidp);
int LDAP_CALL ldap_sasl_bind_s(LDAP *ld, const char *dn,
const char *mechanism, const struct berval *cred,
LDAPControl **serverctrls, LDAPControl **clientctrls,
struct berval **servercredp);
int LDAP_CALL ldap_modify_ext(LDAP *ld, const char *dn,
LDAPMod **mods, LDAPControl **serverctrls, LDAPControl **clientctrls,
int *msgidp);
int LDAP_CALL ldap_modify_ext_s(LDAP *ld, const char *dn,
LDAPMod **mods, LDAPControl **serverctrls, LDAPControl **clientctrls);
int LDAP_CALL ldap_rename(LDAP *ld, const char *dn,
const char *newrdn, const char *newparent, int deleteoldrdn,
LDAPControl **serverctrls, LDAPControl **clientctrls, int *msgidp);
int LDAP_CALL ldap_rename_s(LDAP *ld, const char *dn,
const char *newrdn, const char *newparent, int deleteoldrdn,
LDAPControl **serverctrls, LDAPControl **clientctrls);
int LDAP_CALL ldap_compare_ext(LDAP *ld, const char *dn,
const char *attr, const struct berval *bvalue,
LDAPControl **serverctrls, LDAPControl **clientctrls, int *msgidp);
int LDAP_CALL ldap_compare_ext_s(LDAP *ld, const char *dn,
const char *attr, const struct berval *bvalue,
LDAPControl **serverctrls, LDAPControl **clientctrls);
int LDAP_CALL ldap_delete_ext(LDAP *ld, const char *dn,
LDAPControl **serverctrls, LDAPControl **clientctrls, int *msgidp);
int LDAP_CALL ldap_delete_ext_s(LDAP *ld, const char *dn,
LDAPControl **serverctrls, LDAPControl **clientctrls);
int LDAP_CALL ldap_search_ext(LDAP *ld, const char *base,
int scope, const char *filter, char **attrs, int attrsonly,
LDAPControl **serverctrls, LDAPControl **clientctrls,
struct timeval *timeoutp, int sizelimit, int *msgidp);
int LDAP_CALL ldap_search_ext_s(LDAP *ld, const char *base,
int scope, const