1 /* ldapmodify.c - generic program to modify or add entries using LDAP */
3 /* This work is part of OpenLDAP Software <http://www.openldap.org/>.
5 * Copyright 1998-2006 The OpenLDAP Foundation.
6 * Portions Copyright 1998-2003 Kurt D. Zeilenga.
7 * Portions Copyright 1998-2001 Net Boolean Incorporated.
8 * Portions Copyright 2001-2003 IBM Corporation.
11 * Redistribution and use in source and binary forms, with or without
12 * modification, are permitted only as authorized by the OpenLDAP
15 * A copy of this license is available in the file LICENSE in the
16 * top-level directory of the distribution or, alternatively, at
17 * <http://www.OpenLDAP.org/license.html>.
19 /* Portions Copyright (c) 1992-1996 Regents of the University of Michigan.
20 * All rights reserved.
22 * Redistribution and use in source and binary forms are permitted
23 * provided that this notice is preserved and that due credit is given
24 * to the University of Michigan at Ann Arbor. The name of the
25 * University may not be used to endorse or promote products derived
26 * from this software without specific prior written permission. This
27 * software is provided ``as is'' without express or implied warranty.
30 * This work was originally developed by the University of Michigan
31 * (as part of U-MICH LDAP). Additional significant contributors
41 #include <ac/stdlib.h>
43 #include <ac/string.h>
44 #include <ac/unistd.h>
47 #ifdef HAVE_SYS_STAT_H
51 #ifdef HAVE_SYS_FILE_H
61 #include "lutil_ldap.h"
63 #include "ldap_defaults.h"
70 static int ldapadd, force = 0;
71 static char *rejfile = NULL;
72 static LDAP *ld = NULL;
74 #define LDAPMOD_MAXLINE 4096
76 /* strings found in replog/LDIF entries (mostly lifted from slurpd/slurp.h) */
77 #define T_VERSION_STR "version"
78 #define T_REPLICA_STR "replica"
80 #define T_CONTROL_STR "control"
81 #define T_CHANGETYPESTR "changetype"
82 #define T_ADDCTSTR "add"
83 #define T_MODIFYCTSTR "modify"
84 #define T_DELETECTSTR "delete"
85 #define T_MODRDNCTSTR "modrdn"
86 #define T_MODDNCTSTR "moddn"
87 #define T_RENAMECTSTR "rename"
88 #define T_MODOPADDSTR "add"
89 #define T_MODOPREPLACESTR "replace"
90 #define T_MODOPDELETESTR "delete"
91 #define T_MODOPINCREMENTSTR "increment"
92 #define T_MODSEPSTR "-"
93 #define T_NEWRDNSTR "newrdn"
94 #define T_DELETEOLDRDNSTR "deleteoldrdn"
95 #define T_NEWSUPSTR "newsuperior"
98 static int process_ldif_rec LDAP_P(( char *rbuf, int count ));
99 static int parse_ldif_control LDAP_P(( char *line, LDAPControl ***pctrls ));
100 static void addmodifyop LDAP_P((
101 LDAPMod ***pmodsp, int modop,
103 struct berval *value ));
104 static int domodify LDAP_P((
107 LDAPControl **pctrls,
109 static int dodelete LDAP_P((
111 LDAPControl **pctrls ));
112 static int dorename LDAP_P((
117 LDAPControl **pctrls ));
118 static int process_response(
123 static char *read_one_record LDAP_P(( FILE *fp ));
127 static int txnabort = 0;
128 struct berval *txn_id = NULL;
134 fprintf( stderr, _("Add or modify entries from an LDAP server\n\n"));
135 fprintf( stderr, _("usage: %s [options]\n"), prog);
136 fprintf( stderr, _(" The list of desired operations are read from stdin"
137 " or from the file\n"));
138 fprintf( stderr, _(" specified by \"-f file\".\n"));
139 fprintf( stderr, _("Add or modify options:\n"));
140 fprintf( stderr, _(" -a add values (%s)\n"),
141 (ldapadd ? _("default") : _("default is to replace")));
142 fprintf( stderr, _(" -E [!]ext=extparam modify extensions"
143 " (! indicate s criticality)\n"));
146 _(" [!]txn=<commit|abort> (transaction)\n"));
148 fprintf( stderr, _(" -F force all changes records to be used\n"));
149 fprintf( stderr, _(" -S file write skipped modifications to `file'\n"));
152 exit( EXIT_FAILURE );
156 const char options[] = "aE:FrS:"
157 "cd:D:e:f:h:H:IkKMnO:p:P:QR:U:vVw:WxX:y:Y:Z";
160 handle_private_option( int i )
162 char *control, *cvalue;
166 case 'E': /* modify extensions */
167 if( protocol == LDAP_VERSION2 ) {
168 fprintf( stderr, _("%s: -E incompatible with LDAPv%d\n"),
170 exit( EXIT_FAILURE );
173 /* should be extended to support comma separated list of
174 * [!]key[=value] parameters, e.g. -E !foo,bar=567
179 if( optarg[0] == '!' ) {
184 control = ber_strdup( optarg );
185 if ( (cvalue = strchr( control, '=' )) != NULL ) {
190 if( strcasecmp( control, "txn" ) == 0 ) {
194 _("txn control previously specified\n"));
195 exit( EXIT_FAILURE );
197 if( cvalue != NULL ) {
198 if( strcasecmp( cvalue, "abort" ) == 0 ) {
200 } else if( strcasecmp( cvalue, "commit" ) != 0 ) {
201 fprintf( stderr, _("Invalid value for txn control, %s\n"),
203 exit( EXIT_FAILURE );
211 fprintf( stderr, _("Invalid modify extension name: %s\n"),
220 case 'F': /* force all changes records to be used */
224 case 'r': /* replace (obsolete) */
227 case 'S': /* skipped modifications to file */
228 if( rejfile != NULL ) {
229 fprintf( stderr, _("%s: -S previously specified\n"), prog );
230 exit( EXIT_FAILURE );
232 rejfile = ber_strdup( optarg );
243 main( int argc, char **argv )
245 char *rbuf, *start, *rejbuf = NULL;
247 char *matched_msg, *error_msg;
253 prog = lutil_progname( "ldapmodify", argc, argv );
255 /* strncmp instead of strcmp since NT binaries carry .exe extension */
256 ldapadd = ( strncasecmp( prog, "ldapadd", sizeof("ldapadd")-1 ) == 0 );
258 tool_init( ldapadd ? TOOL_ADD : TOOL_MODIFY );
260 tool_args( argc, argv );
262 if ( argc != optind ) usage();
264 if ( rejfile != NULL ) {
265 if (( rejfp = fopen( rejfile, "w" )) == NULL ) {
267 return( EXIT_FAILURE );
273 if ( infile != NULL ) {
274 if (( fp = fopen( infile, "r" )) == NULL ) {
276 return( EXIT_FAILURE );
282 if ( debug ) ldif_debug = debug;
284 ld = tool_conn_setup( dont, 0 );
287 if ( pw_file || want_bindpw ) {
289 rc = lutil_get_filed_password( pw_file, &passwd );
290 if( rc ) return EXIT_FAILURE;
292 passwd.bv_val = getpassphrase( _("Enter LDAP Password: ") );
293 passwd.bv_len = passwd.bv_val ? strlen( passwd.bv_val ) : 0;
301 /* start transaction */
302 rc = ldap_txn_start_s( ld, NULL, NULL, &txn_id );
303 if( rc != LDAP_SUCCESS ) {
304 tool_perror( "ldap_txn_start_s", rc, NULL, NULL, NULL, NULL );
305 if( txn > 1 ) return EXIT_FAILURE;
319 c[i].ldctl_oid = LDAP_CONTROL_X_TXN_SPEC;
320 c[i].ldctl_value = *txn_id;
321 c[i].ldctl_iscritical = 1;
327 tool_server_controls( ld, c, i );
332 while (( rc == 0 || contoper ) &&
333 ( rbuf = read_one_record( fp )) != NULL )
340 len = strlen( rbuf );
341 if (( rejbuf = (char *)ber_memalloc( len+1 )) == NULL ) {
343 exit( EXIT_FAILURE );
345 memcpy( rejbuf, rbuf, len+1 );
348 rc = process_ldif_rec( start, count );
350 if ( rc ) retval = rc;
352 fprintf(rejfp, _("# Error: %s (%d)"), ldap_err2string(rc), rc);
355 ldap_get_option(ld, LDAP_OPT_MATCHED_DN, &matched_msg);
356 if ( matched_msg != NULL ) {
357 if ( *matched_msg != '\0' ) {
358 fprintf( rejfp, _(", matched DN: %s"), matched_msg );
360 ldap_memfree( matched_msg );
364 ldap_get_option(ld, LDAP_OPT_ERROR_STRING, &error_msg);
365 if ( error_msg != NULL ) {
366 if ( *error_msg != '\0' ) {
367 fprintf( rejfp, _(", additional info: %s"), error_msg );
369 ldap_memfree( error_msg );
371 fprintf( rejfp, "\n%s\n", rejbuf );
374 if (rejfp) free( rejbuf );
380 rc = ldap_set_option( ld, LDAP_OPT_SERVER_CONTROLS, NULL );
381 if ( rc != LDAP_OPT_SUCCESS ) {
382 fprintf( stderr, "Could not unset controls for ldap_txn_end\n");
385 /* create transaction */
386 rc = ldap_txn_end_s( ld, !txnabort, txn_id, NULL, NULL, NULL );
387 if( rc != LDAP_SUCCESS ) {
388 tool_perror( "ldap_txn_end_s", rc, NULL, NULL, NULL, NULL );
389 if( txn > 1 ) return EXIT_FAILURE;
399 if ( rejfp != NULL ) {
409 process_ldif_rec( char *rbuf, int count )
411 char *line, *dn, *type, *newrdn, *newsup, *p;
412 int rc, linenum, modop, replicaport;
413 int expect_modop, expect_sep, expect_ct, expect_newrdn, expect_newsup;
414 int expect_deleteoldrdn, deleteoldrdn;
415 int saw_replica, use_record, new_entry, delete_entry, got_all;
419 LDAPControl **pctrls;
423 rc = got_all = saw_replica = delete_entry = modop = expect_modop = 0;
424 expect_deleteoldrdn = expect_newrdn = expect_newsup = 0;
425 expect_sep = expect_ct = 0;
432 dn = newrdn = newsup = NULL;
434 while ( rc == 0 && ( line = ldif_getline( &rbuf )) != NULL ) {
437 if ( expect_sep && strcasecmp( line, T_MODSEPSTR ) == 0 ) {
443 if ( ldif_parse_line( line, &type, &val.bv_val, &val.bv_len ) < 0 ) {
444 fprintf( stderr, _("%s: invalid format (line %d) entry: \"%s\"\n"),
445 prog, linenum, dn == NULL ? "" : dn );
446 rc = LDAP_PARAM_ERROR;
451 if ( !use_record && strcasecmp( type, T_REPLICA_STR ) == 0 ) {
453 if (( p = strchr( val.bv_val, ':' )) == NULL ) {
457 if ( lutil_atoi( &replicaport, p ) != 0 ) {
458 fprintf( stderr, _("%s: unable to parse replica port \"%s\" (line %d) entry: \"%s\"\n"),
459 prog, p, linenum, dn == NULL ? "" : dn );
460 rc = LDAP_PARAM_ERROR;
464 if ( ldaphost != NULL &&
465 strcasecmp( val.bv_val, ldaphost ) == 0 &&
466 replicaport == ldapport )
470 } else if ( count == 1 && linenum == 1 &&
471 strcasecmp( type, T_VERSION_STR ) == 0 )
474 if( val.bv_len == 0 || lutil_atoi( &v, val.bv_val) != 0 || v != 1 ) {
476 _("%s: invalid version %s, line %d (ignored)\n"),
477 prog, val.bv_val, linenum );
481 } else if ( strcasecmp( type, T_DN_STR ) == 0 ) {
482 if (( dn = ber_strdup( val.bv_val )) == NULL ) {
484 exit( EXIT_FAILURE );
488 goto end_line; /* skip all lines until we see "dn:" */
492 /* Check for "control" tag after dn and before changetype. */
493 if (strcasecmp(type, T_CONTROL_STR) == 0) {
494 /* Parse and add it to the list of controls */
495 rc = parse_ldif_control( line, &pctrls );
498 _("%s: Error processing %s line, line %d: %s\n"),
499 prog, T_CONTROL_STR, linenum, ldap_err2string(rc) );
505 if ( !use_record && saw_replica ) {
506 printf(_("%s: skipping change record for entry: %s\n"),
508 printf(_("\t(LDAP host/port does not match replica: lines)\n"));
511 ber_memfree( val.bv_val );
515 if ( strcasecmp( type, T_CHANGETYPESTR ) == 0 ) {
516 #ifdef LIBERAL_CHANGETYPE_MODOP
517 /* trim trailing spaces (and log warning ...) */
519 for ( icnt = val.bv_len; --icnt > 0; ) {
520 if ( !isspace( (unsigned char) val.bv_val[icnt] ) ) {
525 if ( ++icnt != val.bv_len ) {
526 fprintf( stderr, _("%s: illegal trailing space after"
527 " \"%s: %s\" trimmed (line %d of entry \"%s\")\n"),
528 prog, T_CHANGETYPESTR, val.bv_val, linenum, dn );
529 val.bv_val[icnt] = '\0';
531 #endif /* LIBERAL_CHANGETYPE_MODOP */
533 if ( strcasecmp( val.bv_val, T_MODIFYCTSTR ) == 0 ) {
536 } else if ( strcasecmp( val.bv_val, T_ADDCTSTR ) == 0 ) {
538 } else if ( strcasecmp( val.bv_val, T_MODRDNCTSTR ) == 0
539 || strcasecmp( val.bv_val, T_MODDNCTSTR ) == 0
540 || strcasecmp( val.bv_val, T_RENAMECTSTR ) == 0)
543 } else if ( strcasecmp( val.bv_val, T_DELETECTSTR ) == 0 ) {
544 got_all = delete_entry = 1;
547 _("%s: unknown %s \"%s\" (line %d of entry \"%s\")\n"),
548 prog, T_CHANGETYPESTR, val.bv_val, linenum, dn );
549 rc = LDAP_PARAM_ERROR;
552 } else if ( ldapadd ) { /* missing changetype => add */
554 modop = LDAP_MOD_ADD;
556 expect_modop = 1; /* missing changetype => modify */
560 if ( expect_modop ) {
561 #ifdef LIBERAL_CHANGETYPE_MODOP
562 /* trim trailing spaces (and log warning ...) */
564 for ( icnt = val.bv_len; --icnt > 0; ) {
565 if ( !isspace( (unsigned char) val.bv_val[icnt] ) ) break;
568 if ( ++icnt != val.bv_len ) {
569 fprintf( stderr, _("%s: illegal trailing space after"
570 " \"%s: %s\" trimmed (line %d of entry \"%s\")\n"),
571 prog, type, val.bv_val, linenum, dn );
572 val.bv_val[icnt] = '\0';
574 #endif /* LIBERAL_CHANGETYPE_MODOP */
578 if ( strcasecmp( type, T_MODOPADDSTR ) == 0 ) {
579 modop = LDAP_MOD_ADD;
581 } else if ( strcasecmp( type, T_MODOPREPLACESTR ) == 0 ) {
582 modop = LDAP_MOD_REPLACE;
583 addmodifyop( &pmods, modop, val.bv_val, NULL );
585 } else if ( strcasecmp( type, T_MODOPDELETESTR ) == 0 ) {
586 modop = LDAP_MOD_DELETE;
587 addmodifyop( &pmods, modop, val.bv_val, NULL );
589 } else if ( strcasecmp( type, T_MODOPINCREMENTSTR ) == 0 ) {
590 modop = LDAP_MOD_INCREMENT;
591 addmodifyop( &pmods, modop, val.bv_val, NULL );
593 } else { /* no modify op: use default */
594 modop = ldapadd ? LDAP_MOD_ADD : LDAP_MOD_REPLACE;
598 if ( expect_newrdn ) {
599 if ( strcasecmp( type, T_NEWRDNSTR ) == 0 ) {
600 if (( newrdn = ber_strdup( val.bv_val )) == NULL ) {
602 exit( EXIT_FAILURE );
604 expect_deleteoldrdn = 1;
607 fprintf( stderr, _("%s: expecting \"%s:\" but saw"
608 " \"%s:\" (line %d of entry \"%s\")\n"),
609 prog, T_NEWRDNSTR, type, linenum, dn );
610 rc = LDAP_PARAM_ERROR;
612 } else if ( expect_deleteoldrdn ) {
613 if ( strcasecmp( type, T_DELETEOLDRDNSTR ) == 0 ) {
614 deleteoldrdn = ( *val.bv_val == '0' ) ? 0 : 1;
615 expect_deleteoldrdn = 0;
619 fprintf( stderr, _("%s: expecting \"%s:\" but saw"
620 " \"%s:\" (line %d of entry \"%s\")\n"),
621 prog, T_DELETEOLDRDNSTR, type, linenum, dn );
622 rc = LDAP_PARAM_ERROR;
624 } else if ( expect_newsup ) {
625 if ( strcasecmp( type, T_NEWSUPSTR ) == 0 ) {
626 if (( newsup = ber_strdup( val.bv_val )) == NULL ) {
628 exit( EXIT_FAILURE );
632 fprintf( stderr, _("%s: expecting \"%s:\" but saw"
633 " \"%s:\" (line %d of entry \"%s\")\n"),
634 prog, T_NEWSUPSTR, type, linenum, dn );
635 rc = LDAP_PARAM_ERROR;
637 } else if ( got_all ) {
639 _("%s: extra lines at end (line %d of entry \"%s\")\n"),
641 rc = LDAP_PARAM_ERROR;
643 if ( new_entry && strcasecmp( type, T_DN_STR ) == 0 ) {
644 fprintf( stderr, _("%s: attributeDescription \"%s\":"
645 " (possible missing newline"
646 " after line %d of entry \"%s\"?)\n"),
647 prog, type, linenum - 1, dn );
649 addmodifyop( &pmods, modop, type, &val );
654 ber_memfree( val.bv_val );
661 if( version && linenum == 1 ) {
665 /* If default controls are set (as with -M option) and controls are
666 specified in the LDIF file, we must add the default controls to
667 the list of controls sent with the ldap operation.
671 LDAPControl **defctrls = NULL; /* Default server controls */
672 LDAPControl **newctrls = NULL;
673 ldap_get_option(ld, LDAP_OPT_SERVER_CONTROLS, &defctrls);
675 int npc=0; /* Num of LDIF controls */
676 int ndefc=0; /* Num of default controls */
677 while (pctrls[npc]) npc++; /* Count LDIF controls */
678 while (defctrls[ndefc]) ndefc++; /* Count default controls */
679 newctrls = ber_memrealloc(pctrls,
680 (npc+ndefc+1)*sizeof(LDAPControl*));
682 if (newctrls == NULL) {
687 for (i=npc; i<npc+ndefc; i++) {
688 pctrls[i] = ldap_control_dup(defctrls[i-npc]);
689 if (pctrls[i] == NULL) {
694 pctrls[npc+ndefc] = NULL;
696 ldap_controls_free(defctrls); /* Must be freed by library */
703 if ( delete_entry ) {
704 rc = dodelete( dn, pctrls );
705 } else if ( newrdn != NULL ) {
706 rc = dorename( dn, newrdn, newsup, deleteoldrdn, pctrls );
708 rc = domodify( dn, pmods, pctrls, new_entry );
711 if ( rc == LDAP_SUCCESS ) {
719 if ( newrdn != NULL ) {
722 if ( newsup != NULL ) {
725 if ( pmods != NULL ) {
726 ldap_mods_free( pmods, 1 );
728 if (pctrls != NULL) {
729 ldap_controls_free( pctrls );
735 /* Parse an LDIF control line of the form
736 control: oid [true/false] [: value] or
737 control: oid [true/false] [:: base64-value] or
738 control: oid [true/false] [:< url]
739 The control is added to the list of controls in *ppctrls.
744 LDAPControl ***ppctrls )
747 int criticality = 0; /* Default is false if not present */
750 ber_len_t value_len = 0;
752 char *s, *oidStart, *pcolon;
753 LDAPControl *newctrl = NULL;
754 LDAPControl **pctrls = NULL;
756 if (ppctrls) pctrls = *ppctrls;
757 s = line + strlen(T_CONTROL_STR); /* Skip over "control" */
758 pcolon = s; /* Save this position for later */
759 if (*s++ != ':') { /* Make sure colon follows */
760 return ( LDAP_PARAM_ERROR );
762 while (*s && isspace((unsigned char)*s)) {
763 s++; /* Skip white space before OID */
766 /* OID should come next. Validate and extract it. */
767 if (*s == 0) return ( LDAP_PARAM_ERROR );
769 while (isdigit((unsigned char)*s) || *s == '.') {
770 s++; /* OID should be digits or . */
773 return ( LDAP_PARAM_ERROR ); /* OID was not present */
775 if (*s) { /* End of OID should be space or NULL */
776 if (!isspace((unsigned char)*s)) {
777 return ( LDAP_PARAM_ERROR ); /* else OID contained invalid chars */
779 *s++ = 0; /* Replace space with null to terminate */
782 oid = ber_strdup(oidStart);
783 if (oid == NULL) return ( LDAP_NO_MEMORY );
785 /* Optional Criticality field is next. */
786 while (*s && isspace((unsigned char)*s)) {
787 s++; /* Skip white space before criticality */
789 if (strncasecmp(s, "true", 4) == 0) {
793 else if (strncasecmp(s, "false", 5) == 0) {
798 /* Optional value field is next */
799 while (*s && isspace((unsigned char)*s)) {
800 s++; /* Skip white space before value */
803 if (*s != ':') { /* If value is present, must start with : */
804 rc = LDAP_PARAM_ERROR;
808 /* Shift value down over OID and criticality so it's in the form
810 control:: base64-value
812 Then we can use ldif_parse_line to extract and decode the value
814 while ( (*pcolon++ = *s++) != 0) { /* Shift value */
817 rc = ldif_parse_line(line, &type, &val, &value_len);
818 if (type) ber_memfree(type); /* Don't need this field*/
820 rc = LDAP_PARAM_ERROR;
825 /* Create a new LDAPControl structure. */
826 newctrl = (LDAPControl *)ber_memalloc(sizeof(LDAPControl));
827 if ( newctrl == NULL ) {
831 newctrl->ldctl_oid = oid;
833 newctrl->ldctl_iscritical = criticality;
834 newctrl->ldctl_value.bv_len = value_len;
835 newctrl->ldctl_value.bv_val = val;
838 /* Add the new control to the passed-in list of controls. */
841 while ( pctrls[i] ) { /* Count the # of controls passed in */
845 /* Allocate 1 more slot for the new control and 1 for the NULL. */
846 pctrls = (LDAPControl **) ber_memrealloc(pctrls,
847 (i+2)*(sizeof(LDAPControl *)));
848 if (pctrls == NULL) {
859 if (newctrl->ldctl_oid) ber_memfree(newctrl->ldctl_oid);
860 if (newctrl->ldctl_value.bv_val) {
861 ber_memfree(newctrl->ldctl_value.bv_val);
863 ber_memfree(newctrl);
865 if (val) ber_memfree(val);
866 if (oid) ber_memfree(oid);
883 modop |= LDAP_MOD_BVALUES;
886 if ( pmods != NULL ) {
887 for ( ; pmods[ i ] != NULL; ++i ) {
888 if ( strcasecmp( pmods[ i ]->mod_type, attr ) == 0 &&
889 pmods[ i ]->mod_op == modop )
896 if ( pmods == NULL || pmods[ i ] == NULL ) {
897 if (( pmods = (LDAPMod **)ber_memrealloc( pmods, (i + 2) *
898 sizeof( LDAPMod * ))) == NULL )
901 exit( EXIT_FAILURE );
905 pmods[ i + 1 ] = NULL;
907 pmods[ i ] = (LDAPMod *)ber_memcalloc( 1, sizeof( LDAPMod ));
908 if ( pmods[ i ] == NULL ) {
910 exit( EXIT_FAILURE );
913 pmods[ i ]->mod_op = modop;
914 pmods[ i ]->mod_type = ber_strdup( attr );
915 if ( pmods[ i ]->mod_type == NULL ) {
917 exit( EXIT_FAILURE );
923 if ( pmods[ i ]->mod_bvalues != NULL ) {
924 for ( ; pmods[ i ]->mod_bvalues[ j ] != NULL; ++j ) {
929 pmods[ i ]->mod_bvalues = (struct berval **) ber_memrealloc(
930 pmods[ i ]->mod_bvalues, (j + 2) * sizeof( struct berval * ));
931 if ( pmods[ i ]->mod_bvalues == NULL ) {
932 perror( "ber_realloc" );
933 exit( EXIT_FAILURE );
936 pmods[ i ]->mod_bvalues[ j + 1 ] = NULL;
937 pmods[ i ]->mod_bvalues[ j ] = ber_bvdup( val );
938 if ( pmods[ i ]->mod_bvalues[ j ] == NULL ) {
939 perror( "ber_bvdup" );
940 exit( EXIT_FAILURE );
950 LDAPControl **pctrls,
953 int rc, i, j, k, notascii, op;
957 fprintf( stderr, _("%s: no DN specified\n"), prog );
958 return( LDAP_PARAM_ERROR );
961 if ( pmods == NULL ) {
962 /* implement "touch" (empty sequence)
963 * modify operation (note that there
964 * is no symmetry with the UNIX command,
965 * since \"touch\" on a non-existent entry
967 printf( "warning: no attributes to %sadd (entry=\"%s\")\n",
968 newentry ? "" : "change or ", dn );
971 for ( i = 0; pmods[ i ] != NULL; ++i ) {
972 op = pmods[ i ]->mod_op & ~LDAP_MOD_BVALUES;
973 if( op == LDAP_MOD_ADD && ( pmods[i]->mod_bvalues == NULL )) {
975 _("%s: attribute \"%s\" has no values (entry=\"%s\")\n"),
976 prog, pmods[i]->mod_type, dn );
977 return LDAP_PARAM_ERROR;
982 for ( i = 0; pmods[ i ] != NULL; ++i ) {
983 op = pmods[ i ]->mod_op & ~LDAP_MOD_BVALUES;
985 op == LDAP_MOD_REPLACE ? _("replace") :
986 op == LDAP_MOD_ADD ? _("add") :
987 op == LDAP_MOD_INCREMENT ? _("increment") :
988 op == LDAP_MOD_DELETE ? _("delete") :
990 pmods[ i ]->mod_type );
992 if ( pmods[ i ]->mod_bvalues != NULL ) {
993 for ( j = 0; pmods[ i ]->mod_bvalues[ j ] != NULL; ++j ) {
994 bvp = pmods[ i ]->mod_bvalues[ j ];
996 for ( k = 0; (unsigned long) k < bvp->bv_len; ++k ) {
997 if ( !isascii( bvp->bv_val[ k ] )) {
1003 printf( _("\tNOT ASCII (%ld bytes)\n"), bvp->bv_len );
1005 printf( "\t%s\n", bvp->bv_val );
1014 printf( "%sadding new entry \"%s\"\n", dont ? "!" : "", dn );
1016 printf( "%smodifying entry \"%s\"\n", dont ? "!" : "", dn );
1022 rc = ldap_add_ext( ld, dn, pmods, pctrls, NULL, &msgid );
1024 rc = ldap_modify_ext( ld, dn, pmods, pctrls, NULL, &msgid );
1027 if ( rc != LDAP_SUCCESS ) {
1028 /* print error message about failed update including DN */
1029 fprintf( stderr, _("%s: update failed: %s\n"), prog, dn );
1030 tool_perror( newentry ? "ldap_add" : "ldap_modify", rc, NULL, NULL, NULL, NULL );
1032 } else if ( verbose ) {
1033 printf( _("modify complete\n") );
1036 rc = process_response( ld, msgid,
1037 newentry ? LDAP_RES_ADD : LDAP_RES_MODIFY, dn );
1052 LDAPControl **pctrls )
1057 printf( _("%sdeleting entry \"%s\"\n"), dont ? "!" : "", dn );
1059 rc = ldap_delete_ext( ld, dn, pctrls, NULL, &msgid );
1060 if ( rc != LDAP_SUCCESS ) {
1061 fprintf( stderr, _("%s: delete failed: %s\n"), prog, dn );
1062 tool_perror( "ldap_delete", rc, NULL, NULL, NULL, NULL );
1064 } else if ( verbose ) {
1065 printf( _("delete complete") );
1068 rc = process_response( ld, msgid, LDAP_RES_DELETE, dn );
1086 LDAPControl **pctrls )
1091 printf( _("%smodifying rdn of entry \"%s\"\n"), dont ? "!" : "", dn );
1093 printf( _("\tnew RDN: \"%s\" (%skeep existing values)\n"),
1094 newrdn, deleteoldrdn ? _("do not ") : "" );
1097 rc = ldap_rename( ld, dn, newrdn, newsup, deleteoldrdn,
1098 pctrls, NULL, &msgid );
1099 if ( rc != LDAP_SUCCESS ) {
1100 fprintf( stderr, _("%s: rename failed: %s\n"), prog, dn );
1101 tool_perror( "ldap_modrdn", rc, NULL, NULL, NULL, NULL );
1104 printf( _("modrdn completed\n") );
1107 rc = process_response( ld, msgid, LDAP_RES_RENAME, dn );
1119 res2str( int res ) {
1123 case LDAP_RES_DELETE:
1124 return "ldap_delete";
1125 case LDAP_RES_MODIFY:
1126 return "ldap_modify";
1127 case LDAP_RES_MODRDN:
1128 return "ldap_modrdn";
1133 return "ldap_unknown";
1136 static int process_response(
1143 int rc = LDAP_OTHER,
1145 struct timeval tv = { 0, 0 };
1149 tv.tv_usec = 100000;
1151 rc = ldap_result( ld, msgid,
1152 #ifdef LDAP_GROUP_TRANSACTION
1153 txn ? LDAP_MSG_ONE : LDAP_MSG_ALL,
1158 if ( tool_check_abandon( ld, msgid ) ) {
1159 return LDAP_CANCELLED;
1163 ldap_get_option( ld, LDAP_OPT_ERROR_NUMBER, &rc );
1172 msgtype = ldap_msgtype( res );
1173 if ( msgtype != LDAP_RES_INTERMEDIATE ) {
1175 char *text = NULL, *matched = NULL, **refs = NULL;
1176 LDAPControl **ctrls = NULL;
1178 rc = ldap_parse_result( ld, res, &err, &matched, &text, &refs, &ctrls, 1 );
1179 if ( rc == LDAP_SUCCESS ) {
1182 if ( rc != LDAP_SUCCESS ) {
1183 tool_perror( res2str( op ), rc, NULL, matched, text, refs );
1184 } else if ( msgtype != op ) {
1185 fprintf( stderr, "%s: msgtype: expected %d got %d\n",
1186 res2str( op ), op, msgtype );
1190 ldap_memfree( text );
1193 ldap_memfree( matched );
1196 ber_memvfree( (void **)refs );
1198 if ( ctrls != NULL ) {
1199 tool_print_ctrls( ld, ctrls );
1200 ldap_controls_free( ctrls );
1205 #ifdef LDAP_GROUP_TRANSACTION
1206 /* assume (successful) transaction intermediate response */
1207 return LDAP_SUCCESS;
1210 /* intermediate response? */
1211 return LDAP_DECODING_ERROR;
1216 read_one_record( FILE *fp )
1218 char *buf, line[ LDAPMOD_MAXLINE ];
1224 while ( fgets( line, sizeof(line), fp ) != NULL ) {
1225 int len = strlen( line );
1227 if( len < 2 || ( len == 2 && *line == '\r' )) {
1235 if ( lcur + len + 1 > lmax ) {
1236 lmax = LDAPMOD_MAXLINE
1237 * (( lcur + len + 1 ) / LDAPMOD_MAXLINE + 1 );
1239 if (( buf = (char *)ber_memrealloc( buf, lmax )) == NULL ) {
1240 perror( "realloc" );
1241 exit( EXIT_FAILURE );
1245 strcpy( buf + lcur, line );