Home GnuPG
Diffusion GnuPG ac8ece92662d

dirmngr: Support the new Active Directory schema

Description

dirmngr: Support the new Active Directory schema

* dirmngr/ks-engine-ldap.c (SERVERINFO_): New constants.
(my_ldap_connect): Relace args pgpkeyattrp and real_ldapp by a new
serverinfo arg.  Set the new info flags.
(ks_ldap_get): Adjust for change.
(ks_ldap_search): Ditto.
(ks_ldap_put): Ditto.  Replace xmalloc by xtrymalloc.  Change the DN
for use with NTDS (aka Active Directory).

This is a first take on better Active Directory support. The main
change for NTDS in the code is that the an top-RDN of CN is used
instead of the old pgpCertID. More changes to come; for example using
and storing the fingerprint.

This is a backport from 2.3 without the new schema samples - they can
be found in the repo.

  • Signed-off-by: Werner Koch <wk@gnupg.org>

Details

Provenance
wernerAuthored on Dec 14 2020, 7:28 PM
Parents
rG0e88c73bc94f: dirmngr: Do not store the useless pgpSignerID in the LDAP.
Branches
Unknown
Tags
Unknown