135 lines
2.5 KiB
C
135 lines
2.5 KiB
C
/*-------------------------------------------------------------------------
|
|
*
|
|
* hba.h
|
|
* Interface to hba.c
|
|
*
|
|
*
|
|
* src/include/libpq/hba.h
|
|
*
|
|
*-------------------------------------------------------------------------
|
|
*/
|
|
#ifndef HBA_H
|
|
#define HBA_H
|
|
|
|
#include "libpq/pqcomm.h" /* pgrminclude ignore */ /* needed for NetBSD */
|
|
#include "nodes/pg_list.h"
|
|
#include "regex/regex.h"
|
|
|
|
|
|
/*
|
|
* The following enum represents the authentication methods that
|
|
* are supported by PostgreSQL.
|
|
*
|
|
* Note: keep this in sync with the UserAuthName array in hba.c.
|
|
*/
|
|
typedef enum UserAuth
|
|
{
|
|
uaReject,
|
|
uaImplicitReject, /* Not a user-visible option */
|
|
uaTrust,
|
|
uaIdent,
|
|
uaPassword,
|
|
uaMD5,
|
|
uaSCRAM,
|
|
uaGSS,
|
|
uaSSPI,
|
|
uaPAM,
|
|
uaBSD,
|
|
uaLDAP,
|
|
uaCert,
|
|
uaRADIUS,
|
|
uaPeer
|
|
#define USER_AUTH_LAST uaPeer /* Must be last value of this enum */
|
|
} UserAuth;
|
|
|
|
typedef enum IPCompareMethod
|
|
{
|
|
ipCmpMask,
|
|
ipCmpSameHost,
|
|
ipCmpSameNet,
|
|
ipCmpAll
|
|
} IPCompareMethod;
|
|
|
|
typedef enum ConnType
|
|
{
|
|
ctLocal,
|
|
ctHost,
|
|
ctHostSSL,
|
|
ctHostNoSSL,
|
|
ctHostGSS,
|
|
ctHostNoGSS,
|
|
} ConnType;
|
|
|
|
typedef enum ClientCertMode
|
|
{
|
|
clientCertOff,
|
|
clientCertCA,
|
|
clientCertFull
|
|
} ClientCertMode;
|
|
|
|
typedef struct HbaLine
|
|
{
|
|
int linenumber;
|
|
char *rawline;
|
|
ConnType conntype;
|
|
List *databases;
|
|
List *roles;
|
|
struct sockaddr_storage addr;
|
|
struct sockaddr_storage mask;
|
|
IPCompareMethod ip_cmp_method;
|
|
char *hostname;
|
|
UserAuth auth_method;
|
|
|
|
char *usermap;
|
|
char *pamservice;
|
|
bool pam_use_hostname;
|
|
bool ldaptls;
|
|
char *ldapscheme;
|
|
char *ldapserver;
|
|
int ldapport;
|
|
char *ldapbinddn;
|
|
char *ldapbindpasswd;
|
|
char *ldapsearchattribute;
|
|
char *ldapsearchfilter;
|
|
char *ldapbasedn;
|
|
int ldapscope;
|
|
char *ldapprefix;
|
|
char *ldapsuffix;
|
|
ClientCertMode clientcert;
|
|
char *krb_realm;
|
|
bool include_realm;
|
|
bool compat_realm;
|
|
bool upn_username;
|
|
List *radiusservers;
|
|
char *radiusservers_s;
|
|
List *radiussecrets;
|
|
char *radiussecrets_s;
|
|
List *radiusidentifiers;
|
|
char *radiusidentifiers_s;
|
|
List *radiusports;
|
|
char *radiusports_s;
|
|
} HbaLine;
|
|
|
|
typedef struct IdentLine
|
|
{
|
|
int linenumber;
|
|
|
|
char *usermap;
|
|
char *ident_user;
|
|
char *pg_role;
|
|
regex_t re;
|
|
} IdentLine;
|
|
|
|
/* kluge to avoid including libpq/libpq-be.h here */
|
|
typedef struct Port hbaPort;
|
|
|
|
extern bool load_hba(void);
|
|
extern bool load_ident(void);
|
|
extern void hba_getauthmethod(hbaPort *port);
|
|
extern int check_usermap(const char *usermap_name,
|
|
const char *pg_role, const char *auth_user,
|
|
bool case_sensitive);
|
|
extern bool pg_isblank(const char c);
|
|
|
|
#endif /* HBA_H */
|