Add certificte and sudo handling routines

1 files changed, 25 insertions, 0 deletions

diff --git a/src/libtdeldap.h b/src/libtdeldap.h
index bf0106a..b6d899e 100644
--- a/src/libtdeldap.h
+++ b/src/libtdeldap.h
@@ -31,6 +31,11 @@
 
 #include <ksimpleconfig.h>
 
+#define TDE_CERTIFICATE_DIR "/etc/trinity/ldap/tde-ca/"
+#define KERBEROS_PKI_ANCHORDIR "/etc/trinity/ldap/tde-ca/anchors/"
+#define KERBEROS_PKI_PRIVATEDIR "/etc/trinity/ldap/tde-ca/private/"
+#define KERBEROS_PKI_PUBLICDIR "/etc/trinity/ldap/tde-ca/public/"
+
 #define DEFAULT_IGNORED_USERS_LIST "avahi,avahi-autoipd,backup,bin,colord,daemon,games,gnats,haldaemon,hplip,irc,klog,landscape,libuuid,list,lp,mail,man,messagebus,news,ntp,polkituser,postfix,proxy,pulse,root,rtkit,saned,sshd,statd,sync,sys,syslog,timidity,usbmux,uucp,www-data"
 
 // Values from hdb.asn1
@@ -210,6 +215,20 @@ class LDAPMachineInfo
 		LDAPKRB5Flags status;
 };
 
+class LDAPTDEBuiltinsInfo
+{
+	public:
+		LDAPTDEBuiltinsInfo();
+		~LDAPTDEBuiltinsInfo();
+
+	public:
+		bool informationValid;
+		TQString builtinRealmAdminAccount;
+		TQString builtinRealmAdminGroup;
+		TQString builtinMachineAdminGroup;
+		TQString builtinStandardUserGroup;
+};
+
 typedef TQValueList<LDAPUserInfo> LDAPUserInfoList;
 typedef TQValueList<LDAPGroupInfo> LDAPGroupInfoList;
 typedef TQValueList<LDAPMachineInfo> LDAPMachineInfoList;
@@ -244,6 +263,11 @@ class LDAPManager : public TQObject {
 		int moveKerberosEntries(TQString newSuffix, TQString* errstr=0);
 		int writeCertificateFileIntoDirectory(TQByteArray cert, TQString attr, TQString* errstr=0);
 
+		LDAPTDEBuiltinsInfo getTDEBuiltinMappings(TQString *errstr=0);
+		int writeSudoersConfFile(TQString *errstr=0);
+		int getTDECertificate(TQString certificateName, TQString fileName, TQString *errstr=0);
+
+		static void writeCronFiles();
 		static TQString getMachineFQDN();
 		static void writeLDAPConfFile(LDAPRealmConfig realmcfg);
 		static void writeTDERealmList(LDAPRealmConfigList realms, KSimpleConfig* config);
@@ -252,6 +276,7 @@ class LDAPManager : public TQObject {
 		LDAPUserInfo parseLDAPUserRecord(LDAPMessage* entry);
 		LDAPGroupInfo parseLDAPGroupRecord(LDAPMessage* entry);
 		LDAPMachineInfo parseLDAPMachineRecord(LDAPMessage* entry);
+		LDAPTDEBuiltinsInfo parseLDAPTDEBuiltinsRecord(LDAPMessage* entry);
 
 	private:
 		TQString m_realm;