git.sur5r.net Git - openldap/blob - libraries/libldap/request.c

   1 /* $OpenLDAP$ */
   2 /* This work is part of OpenLDAP Software <http://www.openldap.org/>.
   3  *
   4  * Copyright 1998-2007 The OpenLDAP Foundation.
   5  * All rights reserved.
   6  *
   7  * Redistribution and use in source and binary forms, with or without
   8  * modification, are permitted only as authorized by the OpenLDAP
   9  * Public License.
  10  *
  11  * A copy of this license is available in the file LICENSE in the
  12  * top-level directory of the distribution or, alternatively, at
  13  * <http://www.OpenLDAP.org/license.html>.
  14  */
  15 /* Portions Copyright (c) 1995 Regents of the University of Michigan.
  16  * All rights reserved.
  17  */
  18 /* This notice applies to changes, created by or for Novell, Inc.,
  19  * to preexisting works for which notices appear elsewhere in this file.
  20  *
  21  * Copyright (C) 1999, 2000 Novell, Inc. All Rights Reserved.
  22  *
  23  * THIS WORK IS SUBJECT TO U.S. AND INTERNATIONAL COPYRIGHT LAWS AND TREATIES.
  24  * USE, MODIFICATION, AND REDISTRIBUTION OF THIS WORK IS SUBJECT TO VERSION
  25  * 2.0.1 OF THE OPENLDAP PUBLIC LICENSE, A COPY OF WHICH IS AVAILABLE AT
  26  * HTTP://WWW.OPENLDAP.ORG/LICENSE.HTML OR IN THE FILE "LICENSE" IN THE
  27  * TOP-LEVEL DIRECTORY OF THE DISTRIBUTION. ANY USE OR EXPLOITATION OF THIS
  28  * WORK OTHER THAN AS AUTHORIZED IN VERSION 2.0.1 OF THE OPENLDAP PUBLIC
  29  * LICENSE, OR OTHER PRIOR WRITTEN CONSENT FROM NOVELL, COULD SUBJECT THE
  30  * PERPETRATOR TO CRIMINAL AND CIVIL LIABILITY.
  31  *---
  32  * Modification to OpenLDAP source by Novell, Inc.
  33  * April 2000 sfs  Added code to chase V3 referrals
  34  *  request.c - sending of ldap requests; handling of referrals
  35  *---
  36  * Note: A verbatim copy of version 2.0.1 of the OpenLDAP Public License
  37  * can be found in the file "build/LICENSE-2.0.1" in this distribution
  38  * of OpenLDAP Software.
  39  */
  40
  41 #include "portable.h"
  42
  43 #include <stdio.h>
  44
  45 #include <ac/stdlib.h>
  46
  47 #include <ac/errno.h>
  48 #include <ac/socket.h>
  49 #include <ac/string.h>
  50 #include <ac/time.h>
  51 #include <ac/unistd.h>
  52
  53 #include "ldap-int.h"
  54 #include "lber.h"
  55
  56 static LDAPConn *find_connection LDAP_P(( LDAP *ld, LDAPURLDesc *srv, int any ));
  57 static void use_connection LDAP_P(( LDAP *ld, LDAPConn *lc ));
  58 static void ldap_free_request_int LDAP_P(( LDAP *ld, LDAPRequest *lr ));
  59
  60 static BerElement *
  61 re_encode_request( LDAP *ld,
  62         BerElement *origber,
  63         ber_int_t msgid,
  64         int sref,
  65         LDAPURLDesc *srv,
  66         int *type );
  67
  68 BerElement *
  69 ldap_alloc_ber_with_options( LDAP *ld )
  70 {
  71         BerElement      *ber;
  72
  73     if (( ber = ber_alloc_t( ld->ld_lberoptions )) == NULL ) {
  74                 ld->ld_errno = LDAP_NO_MEMORY;
  75         }
  76
  77         return( ber );
  78 }
  79
  80
  81 void
  82 ldap_set_ber_options( LDAP *ld, BerElement *ber )
  83 {
  84         ber->ber_options = ld->ld_lberoptions;
  85 }
  86
  87
  88 ber_int_t
  89 ldap_send_initial_request(
  90         LDAP *ld,
  91         ber_tag_t msgtype,
  92         const char *dn,
  93         BerElement *ber,
  94         ber_int_t msgid)
  95 {
  96         int rc = 1;
  97
  98         Debug( LDAP_DEBUG_TRACE, "ldap_send_initial_request\n", 0, 0, 0 );
  99
 100 #ifdef LDAP_R_COMPILE
 101         ldap_pvt_thread_mutex_lock( &ld->ld_req_mutex );
 102 #endif
 103         if ( ber_sockbuf_ctrl( ld->ld_sb, LBER_SB_OPT_GET_FD, NULL ) == -1 ) {
 104                 /* not connected yet */
 105                 rc = ldap_open_defconn( ld );
 106
 107         }
 108 #ifdef LDAP_R_COMPILE
 109         ldap_pvt_thread_mutex_unlock( &ld->ld_req_mutex );
 110 #endif
 111         if( rc < 0 ) {
 112                 ber_free( ber, 1 );
 113                 return( -1 );
 114         } else if ( rc == 0 ) {
 115                 Debug( LDAP_DEBUG_TRACE,
 116                         "ldap_open_defconn: successful\n",
 117                         0, 0, 0 );
 118         }
 119
 120 #ifdef LDAP_CONNECTIONLESS
 121         if (LDAP_IS_UDP(ld)) {
 122                 if (msgtype == LDAP_REQ_BIND) {
 123                         if (ld->ld_options.ldo_cldapdn)
 124                                 ldap_memfree(ld->ld_options.ldo_cldapdn);
 125                         ld->ld_options.ldo_cldapdn = ldap_strdup(dn);
 126                         return 0;
 127                 }
 128                 if (msgtype != LDAP_REQ_ABANDON && msgtype != LDAP_REQ_SEARCH)
 129                         return LDAP_PARAM_ERROR;
 130         }
 131 #endif
 132 #ifdef LDAP_R_COMPILE
 133         ldap_pvt_thread_mutex_lock( &ld->ld_req_mutex );
 134 #endif
 135         rc = ldap_send_server_request( ld, ber, msgid, NULL,
 136                 NULL, NULL, NULL );
 137 #ifdef LDAP_R_COMPILE
 138         ldap_pvt_thread_mutex_unlock( &ld->ld_req_mutex );
 139 #endif
 140         return(rc);
 141 }
 142
 143
 144 int
 145 ldap_int_flush_request(
 146         LDAP *ld,
 147         LDAPRequest *lr )
 148 {
 149         LDAPConn *lc = lr->lr_conn;
 150
 151         if ( ber_flush( lc->lconn_sb, lr->lr_ber, 0 ) != 0 ) {
 152                 if ( sock_errno() == EAGAIN ) {
 153                         /* need to continue write later */
 154                         lr->lr_status = LDAP_REQST_WRITING;
 155                         ldap_mark_select_write( ld, lc->lconn_sb );
 156                         ld->ld_errno = LDAP_BUSY;
 157                         return -2;
 158                 } else {
 159                         ld->ld_errno = LDAP_SERVER_DOWN;
 160                         ldap_free_request( ld, lr );
 161                         ldap_free_connection( ld, lc, 0, 0 );
 162                         return( -1 );
 163                 }
 164         } else {
 165                 if ( lr->lr_parent == NULL ) {
 166                         lr->lr_ber->ber_end = lr->lr_ber->ber_ptr;
 167                         lr->lr_ber->ber_ptr = lr->lr_ber->ber_buf;
 168                 }
 169                 lr->lr_status = LDAP_REQST_INPROGRESS;
 170
 171                 /* sent -- waiting for a response */
 172                 ldap_mark_select_read( ld, lc->lconn_sb );
 173         }
 174         return 0;
 175 }
 176
 177 int
 178 ldap_send_server_request(
 179         LDAP *ld,
 180         BerElement *ber,
 181         ber_int_t msgid,
 182         LDAPRequest *parentreq,
 183         LDAPURLDesc *srvlist,
 184         LDAPConn *lc,
 185         LDAPreqinfo *bind )
 186 {
 187         LDAPRequest     *lr;
 188         int incparent, rc;
 189
 190         Debug( LDAP_DEBUG_TRACE, "ldap_send_server_request\n", 0, 0, 0 );
 191
 192         incparent = 0;
 193         ld->ld_errno = LDAP_SUCCESS;    /* optimistic */
 194
 195         if ( lc == NULL ) {
 196                 if ( srvlist == NULL ) {
 197                         lc = ld->ld_defconn;
 198                 } else {
 199                         lc = find_connection( ld, srvlist, 1 );
 200                         if ( lc == NULL ) {
 201                                 if ( (bind != NULL) && (parentreq != NULL) ) {
 202                                         /* Remember the bind in the parent */
 203                                         incparent = 1;
 204                                         ++parentreq->lr_outrefcnt;
 205                                 }
 206                                 lc = ldap_new_connection( ld, srvlist, 0, 1, bind );
 207                         }
 208                 }
 209         }
 210
 211         if ( lc == NULL || lc->lconn_status != LDAP_CONNST_CONNECTED ) {
 212                 ber_free( ber, 1 );
 213                 if ( ld->ld_errno == LDAP_SUCCESS ) {
 214                         ld->ld_errno = LDAP_SERVER_DOWN;
 215                 }
 216                 if ( incparent ) {
 217                         /* Forget about the bind */
 218                         --parentreq->lr_outrefcnt;
 219                 }
 220                 return( -1 );
 221         }
 222
 223         use_connection( ld, lc );
 224
 225 #ifdef LDAP_CONNECTIONLESS
 226         if ( LDAP_IS_UDP( ld )) {
 227                 BerElement tmpber = *ber;
 228                 ber_rewind( &tmpber );
 229                 rc = ber_write( &tmpber, ld->ld_options.ldo_peer,
 230                         sizeof( struct sockaddr ), 0 );
 231                 if ( rc == -1 ) {
 232                         ld->ld_errno = LDAP_ENCODING_ERROR;
 233                         return rc;
 234                 }
 235         }
 236 #endif
 237
 238         /* If we still have an incomplete write, try to finish it before
 239          * dealing with the new request. If we don't finish here, return
 240          * LDAP_BUSY and let the caller retry later. We only allow a single
 241          * request to be in WRITING state.
 242          */
 243         rc = 0;
 244         if ( ld->ld_requests &&
 245                 ld->ld_requests->lr_status == LDAP_REQST_WRITING &&
 246                 ldap_int_flush_request( ld, ld->ld_requests ) < 0 )
 247         {
 248                 rc = -1;
 249         }
 250         if ( rc ) return rc;
 251
 252         lr = (LDAPRequest *)LDAP_CALLOC( 1, sizeof( LDAPRequest ));
 253         if ( lr == NULL ) {
 254                 ld->ld_errno = LDAP_NO_MEMORY;
 255                 ldap_free_connection( ld, lc, 0, 0 );
 256                 ber_free( ber, 1 );
 257                 if ( incparent ) {
 258                         /* Forget about the bind */
 259                         --parentreq->lr_outrefcnt;
 260                 }
 261                 return( -1 );
 262         }
 263         lr->lr_msgid = msgid;
 264         lr->lr_status = LDAP_REQST_INPROGRESS;
 265         lr->lr_res_errno = LDAP_SUCCESS;        /* optimistic */
 266         lr->lr_ber = ber;
 267         lr->lr_conn = lc;
 268         if ( parentreq != NULL ) {      /* sub-request */
 269                 if ( !incparent ) {
 270                         /* Increment if we didn't do it before the bind */
 271                         ++parentreq->lr_outrefcnt;
 272                 }
 273                 lr->lr_origid = parentreq->lr_origid;
 274                 lr->lr_parentcnt = ++parentreq->lr_parentcnt;
 275                 lr->lr_parent = parentreq;
 276                 lr->lr_refnext = parentreq->lr_child;
 277                 parentreq->lr_child = lr;
 278         } else {                        /* original request */
 279                 lr->lr_origid = lr->lr_msgid;
 280         }
 281
 282         /* Extract requestDN for future reference */
 283         {
 284                 BerElement tmpber = *ber;
 285                 ber_int_t       bint;
 286                 ber_tag_t       tag, rtag;
 287
 288                 ber_reset( &tmpber, 1 );
 289                 rtag = ber_scanf( &tmpber, "{it", /*}*/ &bint, &tag );
 290                 switch ( tag ) {
 291                 case LDAP_REQ_BIND:
 292                         rtag = ber_scanf( &tmpber, "{i" /*}*/, &bint );
 293                         break;
 294                 case LDAP_REQ_DELETE:
 295                         break;
 296                 default:
 297                         rtag = ber_scanf( &tmpber, "{" /*}*/ );
 298                 case LDAP_REQ_ABANDON:
 299                         break;
 300                 }
 301                 if ( tag != LDAP_REQ_ABANDON ) {
 302                         ber_skip_tag( &tmpber, &lr->lr_dn.bv_len );
 303                         lr->lr_dn.bv_val = tmpber.ber_ptr;
 304                 }
 305         }
 306
 307         lr->lr_prev = NULL;
 308         if (( lr->lr_next = ld->ld_requests ) != NULL ) {
 309                 lr->lr_next->lr_prev = lr;
 310         }
 311         ld->ld_requests = lr;
 312
 313         ld->ld_errno = LDAP_SUCCESS;
 314         if ( ldap_int_flush_request( ld, lr ) == -1 ) {
 315                 msgid = -1;
 316         }
 317
 318         return( msgid );
 319 }
 320
 321 LDAPConn *
 322 ldap_new_connection( LDAP *ld, LDAPURLDesc *srvlist, int use_ldsb,
 323         int connect, LDAPreqinfo *bind )
 324 {
 325         LDAPConn        *lc;
 326         LDAPURLDesc     *srv;
 327
 328         Debug( LDAP_DEBUG_TRACE, "ldap_new_connection %d %d %d\n",
 329                 use_ldsb, connect, (bind != NULL) );
 330         /*
 331          * make a new LDAP server connection
 332          * XXX open connection synchronously for now
 333          */
 334         lc = (LDAPConn *)LDAP_CALLOC( 1, sizeof( LDAPConn ) );
 335         if ( lc == NULL ) {
 336                 ld->ld_errno = LDAP_NO_MEMORY;
 337                 return( NULL );
 338         }
 339
 340         if ( use_ldsb ) {
 341                 assert( ld->ld_sb != NULL );
 342                 lc->lconn_sb = ld->ld_sb;
 343
 344         } else {
 345                 lc->lconn_sb = ber_sockbuf_alloc();
 346                 if ( lc->lconn_sb == NULL ) {
 347                         LDAP_FREE( (char *)lc );
 348                         ld->ld_errno = LDAP_NO_MEMORY;
 349                         return( NULL );
 350                 }
 351         }
 352
 353         if ( connect ) {
 354                 for ( srv = srvlist; srv != NULL; srv = srv->lud_next ) {
 355                         if ( ldap_int_open_connection( ld, lc, srv, 0 ) != -1 )
 356                         {
 357                                 break;
 358                         }
 359                 }
 360
 361                 if ( srv == NULL ) {
 362                         if ( !use_ldsb ) {
 363                                 ber_sockbuf_free( lc->lconn_sb );
 364                         }
 365                         LDAP_FREE( (char *)lc );
 366                         ld->ld_errno = LDAP_SERVER_DOWN;
 367                         return( NULL );
 368                 }
 369
 370                 lc->lconn_server = ldap_url_dup( srv );
 371         }
 372
 373         lc->lconn_status = LDAP_CONNST_CONNECTED;
 374 #ifdef LDAP_R_COMPILE
 375         ldap_pvt_thread_mutex_lock( &ld->ld_conn_mutex );
 376 #endif
 377         lc->lconn_next = ld->ld_conns;
 378         ld->ld_conns = lc;
 379 #ifdef LDAP_R_COMPILE
 380         ldap_pvt_thread_mutex_unlock( &ld->ld_conn_mutex );
 381 #endif
 382
 383         /*
 384          * XXX for now, we always do a synchronous bind.  This will have
 385          * to change in the long run...
 386          */
 387         if ( bind != NULL) {
 388                 int             err = 0;
 389                 LDAPConn        *savedefconn;
 390
 391                 /* Set flag to prevent additional referrals
 392                  * from being processed on this
 393                  * connection until the bind has completed
 394                  */
 395                 lc->lconn_rebind_inprogress = 1;
 396                 /* V3 rebind function */
 397                 if ( ld->ld_rebind_proc != NULL) {
 398                         LDAPURLDesc     *srvfunc;
 399
 400                         srvfunc = ldap_url_dup( srvlist );
 401                         if ( srvfunc == NULL ) {
 402                                 ld->ld_errno = LDAP_NO_MEMORY;
 403                                 err = -1;
 404                         } else {
 405                                 savedefconn = ld->ld_defconn;
 406                                 ++lc->lconn_refcnt;     /* avoid premature free */
 407                                 ld->ld_defconn = lc;
 408
 409                                 Debug( LDAP_DEBUG_TRACE, "Call application rebind_proc\n", 0, 0, 0);
 410 #ifdef LDAP_R_COMPILE
 411                                 ldap_pvt_thread_mutex_unlock( &ld->ld_req_mutex );
 412                                 ldap_pvt_thread_mutex_unlock( &ld->ld_res_mutex );
 413 #endif
 414                                 err = (*ld->ld_rebind_proc)( ld,
 415                                         bind->ri_url, bind->ri_request, bind->ri_msgid,
 416                                         ld->ld_rebind_params );
 417 #ifdef LDAP_R_COMPILE
 418                                 ldap_pvt_thread_mutex_lock( &ld->ld_res_mutex );
 419                                 ldap_pvt_thread_mutex_lock( &ld->ld_req_mutex );
 420 #endif
 421
 422                                 ld->ld_defconn = savedefconn;
 423                                 --lc->lconn_refcnt;
 424
 425                                 if ( err != 0 ) {
 426                                         err = -1;
 427                                         ldap_free_connection( ld, lc, 1, 0 );
 428                                         lc = NULL;
 429                                 }
 430                                 ldap_free_urldesc( srvfunc );
 431                         }
 432                 } else {
 433                         int             msgid, rc;
 434                         struct berval   passwd = BER_BVNULL;
 435
 436                         savedefconn = ld->ld_defconn;
 437                         ++lc->lconn_refcnt;     /* avoid premature free */
 438                         ld->ld_defconn = lc;
 439
 440                         Debug( LDAP_DEBUG_TRACE,
 441                                 "anonymous rebind via ldap_sasl_bind(\"\")\n",
 442                                 0, 0, 0);
 443
 444 #ifdef LDAP_R_COMPILE
 445                         ldap_pvt_thread_mutex_unlock( &ld->ld_req_mutex );
 446                         ldap_pvt_thread_mutex_unlock( &ld->ld_res_mutex );
 447 #endif
 448                         rc = ldap_sasl_bind( ld, "", LDAP_SASL_SIMPLE, &passwd,
 449                                 NULL, NULL, &msgid );
 450                         if ( rc != LDAP_SUCCESS ) {
 451                                 err = -1;
 452
 453                         } else {
 454                                 for ( err = 1; err > 0; ) {
 455                                         struct timeval  tv = { 0, 100000 };
 456                                         LDAPMessage     *res = NULL;
 457
 458                                         switch ( ldap_result( ld, msgid, LDAP_MSG_ALL, &tv, &res ) ) {
 459                                         case -1:
 460                                                 err = -1;
 461                                                 break;
 462
 463                                         case 0:
 464 #ifdef LDAP_R_COMPILE
 465                                                 ldap_pvt_thread_yield();
 466 #endif
 467                                                 break;
 468
 469                                         case LDAP_RES_BIND:
 470                                                 rc = ldap_parse_result( ld, res, &err, NULL, NULL, NULL, NULL, 1 );
 471                                                 if ( rc != LDAP_SUCCESS ) {
 472                                                         err = -1;
 473
 474                                                 } else if ( err != LDAP_SUCCESS ) {
 475                                                         err = -1;
 476                                                 }
 477                                                 /* else err == LDAP_SUCCESS == 0 */
 478                                                 break;
 479
 480                                         default:
 481                                                 Debug( LDAP_DEBUG_TRACE,
 482                                                         "ldap_new_connection %p: "
 483                                                         "unexpected response %d "
 484                                                         "from BIND request id=%d\n",
 485                                                         ld, ldap_msgtype( res ), msgid );
 486                                                 err = -1;
 487                                                 break;
 488                                         }
 489                                 }
 490                         }
 491 #ifdef LDAP_R_COMPILE
 492                         ldap_pvt_thread_mutex_lock( &ld->ld_res_mutex );
 493                         ldap_pvt_thread_mutex_lock( &ld->ld_req_mutex );
 494 #endif
 495                         ld->ld_defconn = savedefconn;
 496                         --lc->lconn_refcnt;
 497
 498                         if ( err != 0 ) {
 499                                 ldap_free_connection( ld, lc, 1, 0 );
 500                                 lc = NULL;
 501                         }
 502                 }
 503                 if ( lc != NULL )
 504                         lc->lconn_rebind_inprogress = 0;
 505         }
 506
 507         return( lc );
 508 }
 509
 510
 511 static LDAPConn *
 512 find_connection( LDAP *ld, LDAPURLDesc *srv, int any )
 513 /*
 514  * return an existing connection (if any) to the server srv
 515  * if "any" is non-zero, check for any server in the "srv" chain
 516  */
 517 {
 518         LDAPConn        *lc;
 519         LDAPURLDesc     *lcu, *lsu;
 520         int lcu_port, lsu_port;
 521         int found = 0;
 522
 523 #ifdef LDAP_R_COMPILE
 524         ldap_pvt_thread_mutex_lock( &ld->ld_conn_mutex );
 525 #endif
 526         for ( lc = ld->ld_conns; lc != NULL; lc = lc->lconn_next ) {
 527                 lcu = lc->lconn_server;
 528                 lcu_port = ldap_pvt_url_scheme_port( lcu->lud_scheme,
 529                         lcu->lud_port );
 530
 531                 for ( lsu = srv; lsu != NULL; lsu = lsu->lud_next ) {
 532                         lsu_port = ldap_pvt_url_scheme_port( lsu->lud_scheme,
 533                                 lsu->lud_port );
 534
 535                         if ( lsu_port == lcu_port
 536                                 && strcmp( lcu->lud_scheme, lsu->lud_scheme ) == 0
 537                                 && lcu->lud_host != NULL && *lcu->lud_host != '\0'
 538                             && lsu->lud_host != NULL && *lsu->lud_host != '\0'
 539                                 && strcasecmp( lsu->lud_host, lcu->lud_host ) == 0 )
 540                         {
 541                                 found = 1;
 542                                 break;
 543                         }
 544
 545                         if ( !any ) break;
 546                 }
 547                 if ( found )
 548                         break;
 549         }
 550 #ifdef LDAP_R_COMPILE
 551         ldap_pvt_thread_mutex_unlock( &ld->ld_conn_mutex );
 552 #endif
 553         return lc;
 554 }
 555
 556
 557
 558 static void
 559 use_connection( LDAP *ld, LDAPConn *lc )
 560 {
 561         ++lc->lconn_refcnt;
 562         lc->lconn_lastused = time( NULL );
 563 }
 564
 565
 566 void
 567 ldap_free_connection( LDAP *ld, LDAPConn *lc, int force, int unbind )
 568 {
 569         LDAPConn        *tmplc, *prevlc;
 570
 571         Debug( LDAP_DEBUG_TRACE,
 572                 "ldap_free_connection %d %d\n",
 573                 force, unbind, 0 );
 574
 575         if ( force || --lc->lconn_refcnt <= 0 ) {
 576                 if ( lc->lconn_status == LDAP_CONNST_CONNECTED ) {
 577                         ldap_mark_select_clear( ld, lc->lconn_sb );
 578                         if ( unbind ) {
 579                                 ldap_send_unbind( ld, lc->lconn_sb,
 580                                                 NULL, NULL );
 581                         }
 582                 }
 583
 584                 if ( lc->lconn_ber != NULL ) {
 585                         ber_free( lc->lconn_ber, 1 );
 586                 }
 587
 588                 ldap_int_sasl_close( ld, lc );
 589
 590                 prevlc = NULL;
 591 #ifdef LDAP_R_COMPILE
 592         ldap_pvt_thread_mutex_lock( &ld->ld_conn_mutex );
 593 #endif
 594                 for ( tmplc = ld->ld_conns;
 595                         tmplc != NULL;
 596                         tmplc = tmplc->lconn_next )
 597                 {
 598                         if ( tmplc == lc ) {
 599                                 if ( prevlc == NULL ) {
 600                                     ld->ld_conns = tmplc->lconn_next;
 601                                 } else {
 602                                     prevlc->lconn_next = tmplc->lconn_next;
 603                                 }
 604                                 break;
 605                         }
 606                         prevlc = tmplc;
 607                 }
 608 #ifdef LDAP_R_COMPILE
 609         ldap_pvt_thread_mutex_unlock( &ld->ld_conn_mutex );
 610 #endif
 611                 ldap_free_urllist( lc->lconn_server );
 612 #ifdef LDAP_API_FEATURE_X_OPENLDAP_V2_KBIND
 613                 if ( lc->lconn_krbinstance != NULL ) {
 614                         LDAP_FREE( lc->lconn_krbinstance );
 615                 }
 616 #endif
 617
 618                 /* FIXME: is this at all possible? */
 619                 if ( force ) {
 620                         LDAPRequest     *lr;
 621
 622                         for ( lr = ld->ld_requests; lr; ) {
 623                                 LDAPRequest     *lr_next = lr->lr_next;
 624
 625                                 if ( lr->lr_conn == lc ) {
 626                                         ldap_free_request_int( ld, lr );
 627                                 }
 628
 629                                 lr = lr_next;
 630                         }
 631                 }
 632                 if ( lc->lconn_sb != ld->ld_sb ) {
 633                         ber_sockbuf_free( lc->lconn_sb );
 634                 }
 635                 if ( lc->lconn_rebind_queue != NULL) {
 636                         int i;
 637                         for( i = 0; lc->lconn_rebind_queue[i] != NULL; i++ ) {
 638                                 LDAP_VFREE( lc->lconn_rebind_queue[i] );
 639                         }
 640                         LDAP_FREE( lc->lconn_rebind_queue );
 641                 }
 642                 LDAP_FREE( lc );
 643                 Debug( LDAP_DEBUG_TRACE,
 644                         "ldap_free_connection: actually freed\n",
 645                         0, 0, 0 );
 646         } else {
 647                 lc->lconn_lastused = time( NULL );
 648                 Debug( LDAP_DEBUG_TRACE, "ldap_free_connection: refcnt %d\n",
 649                                 lc->lconn_refcnt, 0, 0 );
 650         }
 651 }
 652
 653
 654 #ifdef LDAP_DEBUG
 655 void
 656 ldap_dump_connection( LDAP *ld, LDAPConn *lconns, int all )
 657 {
 658         LDAPConn        *lc;
 659         char            timebuf[32];
 660
 661         fprintf( stderr, "** ld %p Connection%s:\n", (void *)ld, all ? "s" : "" );
 662         for ( lc = lconns; lc != NULL; lc = lc->lconn_next ) {
 663                 if ( lc->lconn_server != NULL ) {
 664                         fprintf( stderr, "* host: %s  port: %d%s\n",
 665                             ( lc->lconn_server->lud_host == NULL ) ? "(null)"
 666                             : lc->lconn_server->lud_host,
 667                             lc->lconn_server->lud_port, ( lc->lconn_sb ==
 668                             ld->ld_sb ) ? "  (default)" : "" );
 669                 }
 670                 fprintf( stderr, "  refcnt: %d  status: %s\n", lc->lconn_refcnt,
 671                     ( lc->lconn_status == LDAP_CONNST_NEEDSOCKET ) ?
 672                     "NeedSocket" : ( lc->lconn_status ==
 673                     LDAP_CONNST_CONNECTING ) ? "Connecting" : "Connected" );
 674                 fprintf( stderr, "  last used: %s",
 675                     ldap_pvt_ctime( &lc->lconn_lastused, timebuf ));
 676                 if( lc->lconn_rebind_inprogress ) {
 677                         fprintf( stderr, "  rebind in progress\n");
 678                         if( lc->lconn_rebind_queue != NULL) {
 679                                 int i = 0;
 680                                 for( ;lc->lconn_rebind_queue[i] != NULL; i++) {
 681                                         int j = 0;
 682                                         for( ;lc->lconn_rebind_queue[i][j] != 0; j++) {
 683                                                 fprintf( stderr, "    queue %d entry %d - %s\n",
 684                                                         i, j, lc->lconn_rebind_queue[i][j]);
 685                                         }
 686                                 }
 687                         } else {
 688                                 fprintf( stderr, "    queue is empty\n");
 689                         }
 690                 }
 691                 fprintf(stderr, "\n");
 692                 if ( !all ) {
 693                         break;
 694                 }
 695         }
 696 }
 697
 698
 699 void
 700 ldap_dump_requests_and_responses( LDAP *ld )
 701 {
 702         LDAPRequest     *lr;
 703         LDAPMessage     *lm, *l;
 704
 705 #ifdef LDAP_R_COMPILE
 706         ldap_pvt_thread_mutex_lock( &ld->ld_req_mutex );
 707 #endif
 708         fprintf( stderr, "** ld %p Outstanding Requests:\n", (void *)ld );
 709         if (( lr = ld->ld_requests ) == NULL ) {
 710                 fprintf( stderr, "   Empty\n" );
 711         }
 712         for ( ; lr != NULL; lr = lr->lr_next ) {
 713             fprintf( stderr, " * msgid %d,  origid %d, status %s\n",
 714                 lr->lr_msgid, lr->lr_origid,
 715                 ( lr->lr_status == LDAP_REQST_INPROGRESS ) ? "InProgress" :
 716                 ( lr->lr_status == LDAP_REQST_CHASINGREFS ) ? "ChasingRefs" :
 717                 ( lr->lr_status == LDAP_REQST_NOTCONNECTED ) ? "NotConnected" :
 718                 ( lr->lr_status == LDAP_REQST_WRITING) ? "Writing" :
 719                 ( lr->lr_status == LDAP_REQST_COMPLETED ? "RequestCompleted"
 720                         : "InvalidStatus"));
 721             fprintf( stderr, "   outstanding referrals %d, parent count %d\n",
 722                     lr->lr_outrefcnt, lr->lr_parentcnt );
 723         }
 724 #ifdef LDAP_R_COMPILE
 725         ldap_pvt_thread_mutex_unlock( &ld->ld_req_mutex );
 726 #endif
 727         fprintf( stderr, "** ld %p Response Queue:\n", (void *)ld );
 728         if (( lm = ld->ld_responses ) == NULL ) {
 729                 fprintf( stderr, "   Empty\n" );
 730         }
 731         for ( ; lm != NULL; lm = lm->lm_next ) {
 732                 fprintf( stderr, " * msgid %d,  type %lu\n",
 733                     lm->lm_msgid, (unsigned long) lm->lm_msgtype );
 734                 if (( l = lm->lm_chain ) != NULL ) {
 735                         fprintf( stderr, "   chained responses:\n" );
 736                         for ( ; l != NULL; l = l->lm_chain ) {
 737                                 fprintf( stderr,
 738                                     "  * msgid %d,  type %lu\n",
 739                                     l->lm_msgid,
 740                                     (unsigned long) l->lm_msgtype );
 741                         }
 742                 }
 743         }
 744 }
 745 #endif /* LDAP_DEBUG */
 746
 747 static void
 748 ldap_free_request_int( LDAP *ld, LDAPRequest *lr )
 749 {
 750         if ( lr->lr_prev == NULL ) {
 751                 /* free'ing the first request? */
 752                 assert( ld->ld_requests == lr );
 753                 ld->ld_requests = lr->lr_next;
 754
 755         } else {
 756                 lr->lr_prev->lr_next = lr->lr_next;
 757         }
 758
 759         if ( lr->lr_next != NULL ) {
 760                 lr->lr_next->lr_prev = lr->lr_prev;
 761         }
 762
 763         if ( lr->lr_ber != NULL ) {
 764                 ber_free( lr->lr_ber, 1 );
 765         }
 766
 767         if ( lr->lr_res_error != NULL ) {
 768                 LDAP_FREE( lr->lr_res_error );
 769         }
 770
 771         if ( lr->lr_res_matched != NULL ) {
 772                 LDAP_FREE( lr->lr_res_matched );
 773         }
 774
 775         LDAP_FREE( lr );
 776 }
 777
 778 void
 779 ldap_free_request( LDAP *ld, LDAPRequest *lr )
 780 {
 781         LDAPRequest     **ttmplr;
 782
 783         Debug( LDAP_DEBUG_TRACE, "ldap_free_request (origid %d, msgid %d)\n",
 784                 lr->lr_origid, lr->lr_msgid, 0 );
 785
 786         /* free all referrals (child requests) */
 787         while ( lr->lr_child )
 788                 ldap_free_request( ld, lr->lr_child );
 789
 790         if ( lr->lr_parent != NULL ) {
 791                 --lr->lr_parent->lr_outrefcnt;
 792                 for ( ttmplr = &lr->lr_parent->lr_child; *ttmplr && *ttmplr != lr; ttmplr = &(*ttmplr)->lr_refnext );
 793                 if ( *ttmplr == lr )
 794                         *ttmplr = lr->lr_refnext;
 795         }
 796         ldap_free_request_int( ld, lr );
 797 }
 798
 799 /*
 800  * call first time with *cntp = -1
 801  * when returns *cntp == -1, no referrals are left
 802  *
 803  * NOTE: may replace *refsp, or shuffle the contents
 804  * of the original array.
 805  */
 806 static int ldap_int_nextref(
 807         LDAP                    *ld,
 808         char                    ***refsp,
 809         int                     *cntp,
 810         void                    *params )
 811 {
 812         assert( refsp != NULL );
 813         assert( *refsp != NULL );
 814         assert( cntp != NULL );
 815
 816         if ( *cntp < -1 ) {
 817                 *cntp = -1;
 818                 return -1;
 819         }
 820
 821         (*cntp)++;
 822
 823         if ( (*refsp)[ *cntp ] == NULL ) {
 824                 *cntp = -1;
 825         }
 826
 827         return 0;
 828 }
 829
 830 /*
 831  * Chase v3 referrals
 832  *
 833  * Parameters:
 834  *  (IN) ld = LDAP connection handle
 835  *  (IN) lr = LDAP Request structure
 836  *  (IN) refs = array of pointers to referral strings that we will chase
 837  *              The array will be free'd by this function when no longer needed
 838  *  (IN) sref != 0 if following search reference
 839  *  (OUT) errstrp = Place to return a string of referrals which could not be followed
 840  *  (OUT) hadrefp = 1 if sucessfully followed referral
 841  *
 842  * Return value - number of referrals followed
 843  */
 844 int
 845 ldap_chase_v3referrals( LDAP *ld, LDAPRequest *lr, char **refs, int sref, char **errstrp, int *hadrefp )
 846 {
 847         char            *unfollowed;
 848         int              unfollowedcnt = 0;
 849         LDAPRequest     *origreq;
 850         LDAPURLDesc     *srv = NULL;
 851         BerElement      *ber;
 852         char            **refarray = NULL;
 853         LDAPConn        *lc;
 854         int                      rc, count, i, j, id;
 855         LDAPreqinfo  rinfo;
 856
 857         ld->ld_errno = LDAP_SUCCESS;    /* optimistic */
 858         *hadrefp = 0;
 859
 860         Debug( LDAP_DEBUG_TRACE, "ldap_chase_v3referrals\n", 0, 0, 0 );
 861
 862         unfollowed = NULL;
 863         rc = count = 0;
 864
 865         /* If no referrals in array, return */
 866         if ( (refs == NULL) || ( (refs)[0] == NULL) ) {
 867                 rc = 0;
 868                 goto done;
 869         }
 870
 871         /* Check for hop limit exceeded */
 872         if ( lr->lr_parentcnt >= ld->ld_refhoplimit ) {
 873                 Debug( LDAP_DEBUG_ANY,
 874                     "more than %d referral hops (dropping)\n", ld->ld_refhoplimit, 0, 0 );
 875                 ld->ld_errno = LDAP_REFERRAL_LIMIT_EXCEEDED;
 876             rc = -1;
 877                 goto done;
 878         }
 879
 880         /* find original request */
 881         for ( origreq = lr;
 882                 origreq->lr_parent != NULL;
 883                 origreq = origreq->lr_parent )
 884         {
 885                 /* empty */ ;
 886         }
 887
 888         refarray = refs;
 889         refs = NULL;
 890
 891         if ( ld->ld_nextref_proc == NULL ) {
 892                 ld->ld_nextref_proc = ldap_int_nextref;
 893         }
 894
 895         /* parse out & follow referrals */
 896         i = -1;
 897         for ( ld->ld_nextref_proc( ld, &refarray, &i, ld->ld_nextref_params );
 898                         i != -1;
 899                         ld->ld_nextref_proc( ld, &refarray, &i, ld->ld_nextref_params ) )
 900         {
 901
 902                 /* Parse the referral URL */
 903                 if (( rc = ldap_url_parse_ext( refarray[i], &srv)) != LDAP_SUCCESS) {
 904                         ld->ld_errno = rc;
 905                         rc = -1;
 906                         goto done;
 907                 }
 908
 909                 if( srv->lud_crit_exts ) {
 910                         /* we do not support any extensions */
 911                         ld->ld_errno = LDAP_NOT_SUPPORTED;
 912                         rc = -1;
 913                         goto done;
 914                 }
 915
 916                 /* treat ldap://hostpart and ldap://hostpart/ the same */
 917                 if ( srv->lud_dn && srv->lud_dn[0] == '\0' ) {
 918                         LDAP_FREE( srv->lud_dn );
 919                         srv->lud_dn = NULL;
 920                 }
 921
 922                 /* check connection for re-bind in progress */
 923                 if (( lc = find_connection( ld, srv, 1 )) != NULL ) {
 924                         /* See if we've already requested this DN with this conn */
 925                         LDAPRequest *lp;
 926                         int looped = 0;
 927                         int len = srv->lud_dn ? strlen( srv->lud_dn ) : 0;
 928                         for ( lp = origreq; lp; ) {
 929                                 if ( lp->lr_conn == lc ) {
 930                                         if ( len == lp->lr_dn.bv_len
 931                                                 && len
 932                                                 && strncmp( srv->lud_dn, lp->lr_dn.bv_val, len ) == 0 )
 933                                         {
 934                                                 looped = 1;
 935                                                 break;
 936                                         }
 937                                 }
 938                                 if ( lp == origreq ) {
 939                                         lp = lp->lr_child;
 940                                 } else {
 941                                         lp = lp->lr_refnext;
 942                                 }
 943                         }
 944                         if ( looped ) {
 945                                 ldap_free_urllist( srv );
 946                                 srv = NULL;
 947                                 ld->ld_errno = LDAP_CLIENT_LOOP;
 948                                 rc = -1;
 949                                 continue;
 950                         }
 951
 952                         if ( lc->lconn_rebind_inprogress ) {
 953                                 /* We are already chasing a referral or search reference and a
 954                                  * bind on that connection is in progress.  We must queue
 955                                  * referrals on that connection, so we don't get a request
 956                                  * going out before the bind operation completes. This happens
 957                                  * if two search references come in one behind the other
 958                                  * for the same server with different contexts.
 959                                  */
 960                                 Debug( LDAP_DEBUG_TRACE,
 961                                         "ldap_chase_v3referrals: queue referral \"%s\"\n",
 962                                         refarray[i], 0, 0);
 963                                 if( lc->lconn_rebind_queue == NULL ) {
 964                                         /* Create a referral list */
 965                                         lc->lconn_rebind_queue =
 966                                                 (char ***) LDAP_MALLOC( sizeof(void *) * 2);
 967
 968                                         if( lc->lconn_rebind_queue == NULL) {
 969                                                 ld->ld_errno = LDAP_NO_MEMORY;
 970                                                 rc = -1;
 971                                                 goto done;
 972                                         }
 973
 974                                         lc->lconn_rebind_queue[0] = refarray;
 975                                         lc->lconn_rebind_queue[1] = NULL;
 976                                         refarray = NULL;
 977
 978                                 } else {
 979                                         /* Count how many referral arrays we already have */
 980                                         for( j = 0; lc->lconn_rebind_queue[j] != NULL; j++) {
 981                                                 /* empty */;
 982                                         }
 983
 984                                         /* Add the new referral to the list */
 985                                         lc->lconn_rebind_queue = (char ***) LDAP_REALLOC(
 986                                                 lc->lconn_rebind_queue, sizeof(void *) * (j + 2));
 987
 988                                         if( lc->lconn_rebind_queue == NULL ) {
 989                                                 ld->ld_errno = LDAP_NO_MEMORY;
 990                                                 rc = -1;
 991                                                 goto done;
 992                                         }
 993                                         lc->lconn_rebind_queue[j] = refarray;
 994                                         lc->lconn_rebind_queue[j+1] = NULL;
 995                                         refarray = NULL;
 996                                 }
 997
 998                                 /* We have queued the referral/reference, now just return */
 999                                 rc = 0;
1000                                 *hadrefp = 1;
1001                                 count = 1; /* Pretend we already followed referral */
1002                                 goto done;
1003                         }
1004                 }
1005                 /* Re-encode the request with the new starting point of the search.
1006                  * Note: In the future we also need to replace the filter if one
1007                  * was provided with the search reference
1008                  */
1009
1010                 /* For references we don't want old dn if new dn empty */
1011                 if ( sref && srv->lud_dn == NULL ) {
1012                         srv->lud_dn = LDAP_STRDUP( "" );
1013                 }
1014
1015                 LDAP_NEXT_MSGID( ld, id );
1016                 ber = re_encode_request( ld, origreq->lr_ber, id,
1017                         sref, srv, &rinfo.ri_request );
1018
1019                 if( ber == NULL ) {
1020                         ld->ld_errno = LDAP_ENCODING_ERROR;
1021                         rc = -1;
1022                         goto done;
1023                 }
1024
1025                 Debug( LDAP_DEBUG_TRACE,
1026                         "ldap_chase_v3referral: msgid %d, url \"%s\"\n",
1027                         lr->lr_msgid, refarray[i], 0);
1028
1029                 /* Send the new request to the server - may require a bind */
1030                 rinfo.ri_msgid = origreq->lr_origid;
1031                 rinfo.ri_url = refarray[i];
1032 #ifdef LDAP_R_COMPILE
1033                 ldap_pvt_thread_mutex_lock( &ld->ld_req_mutex );
1034 #endif
1035                 rc = ldap_send_server_request( ld, ber, id,
1036                         origreq, srv, NULL, &rinfo );
1037 #ifdef LDAP_R_COMPILE
1038                 ldap_pvt_thread_mutex_unlock( &ld->ld_req_mutex );
1039 #endif
1040                 if ( rc < 0 ) {
1041                         /* Failure, try next referral in the list */
1042                         Debug( LDAP_DEBUG_ANY, "Unable to chase referral \"%s\" (%d: %s)\n",
1043                                 refarray[i], ld->ld_errno, ldap_err2string( ld->ld_errno ) );
1044                         unfollowedcnt += ldap_append_referral( ld, &unfollowed, refarray[i] );
1045                         ldap_free_urllist( srv );
1046                         srv = NULL;
1047                         ld->ld_errno = LDAP_REFERRAL;
1048                 } else {
1049                         /* Success, no need to try this referral list further */
1050                         rc = 0;
1051                         ++count;
1052                         *hadrefp = 1;
1053
1054                         /* check if there is a queue of referrals that came in during bind */
1055                         if ( lc == NULL) {
1056                                 lc = find_connection( ld, srv, 1 );
1057                                 if ( lc == NULL ) {
1058                                         ld->ld_errno = LDAP_OPERATIONS_ERROR;
1059                                         rc = -1;
1060                                         goto done;
1061                                 }
1062                         }
1063
1064                         if ( lc->lconn_rebind_queue != NULL ) {
1065                                 /* Release resources of previous list */
1066                                 LDAP_VFREE( refarray );
1067                                 refarray = NULL;
1068                                 ldap_free_urllist( srv );
1069                                 srv = NULL;
1070
1071                                 /* Pull entries off end of queue so list always null terminated */
1072                                 for( j = 0; lc->lconn_rebind_queue[j] != NULL; j++ )
1073                                         ;
1074                                 refarray = lc->lconn_rebind_queue[j - 1];
1075                                 lc->lconn_rebind_queue[j-1] = NULL;
1076                                 /* we pulled off last entry from queue, free queue */
1077                                 if ( j == 1 ) {
1078                                         LDAP_FREE( lc->lconn_rebind_queue );
1079                                         lc->lconn_rebind_queue = NULL;
1080                                 }
1081                                 /* restart the loop the with new referral list */
1082                                 i = -1;
1083                                 continue;
1084                         }
1085                         break; /* referral followed, break out of for loop */
1086                 }
1087         } /* end for loop */
1088 done:
1089         LDAP_VFREE( refarray );
1090         ldap_free_urllist( srv );
1091         LDAP_FREE( *errstrp );
1092
1093         if( rc == 0 ) {
1094                 *errstrp = NULL;
1095                 LDAP_FREE( unfollowed );
1096                 return count;
1097         } else {
1098                 *errstrp = unfollowed;
1099                 return rc;
1100         }
1101 }
1102
1103 /*
1104  * XXX merging of errors in this routine needs to be improved
1105  */
1106 int
1107 ldap_chase_referrals( LDAP *ld,
1108         LDAPRequest *lr,
1109         char **errstrp,
1110         int sref,
1111         int *hadrefp )
1112 {
1113         int             rc, count, id;
1114         unsigned        len;
1115         char            *p, *ref, *unfollowed;
1116         LDAPRequest     *origreq;
1117         LDAPURLDesc     *srv;
1118         BerElement      *ber;
1119         LDAPreqinfo  rinfo;
1120         LDAPConn        *lc;
1121
1122         Debug( LDAP_DEBUG_TRACE, "ldap_chase_referrals\n", 0, 0, 0 );
1123
1124         ld->ld_errno = LDAP_SUCCESS;    /* optimistic */
1125         *hadrefp = 0;
1126
1127         if ( *errstrp == NULL ) {
1128                 return( 0 );
1129         }
1130
1131         len = strlen( *errstrp );
1132         for ( p = *errstrp; len >= LDAP_REF_STR_LEN; ++p, --len ) {
1133                 if ( strncasecmp( p, LDAP_REF_STR, LDAP_REF_STR_LEN ) == 0 ) {
1134                         *p = '\0';
1135                         p += LDAP_REF_STR_LEN;
1136                         break;
1137                 }
1138         }
1139
1140         if ( len < LDAP_REF_STR_LEN ) {
1141                 return( 0 );
1142         }
1143
1144         if ( lr->lr_parentcnt >= ld->ld_refhoplimit ) {
1145                 Debug( LDAP_DEBUG_ANY,
1146                     "more than %d referral hops (dropping)\n",
1147                     ld->ld_refhoplimit, 0, 0 );
1148                     /* XXX report as error in ld->ld_errno? */
1149                     return( 0 );
1150         }
1151
1152         /* find original request */
1153         for ( origreq = lr; origreq->lr_parent != NULL;
1154              origreq = origreq->lr_parent ) {
1155                 /* empty */;
1156         }
1157
1158         unfollowed = NULL;
1159         rc = count = 0;
1160
1161         /* parse out & follow referrals */
1162         for ( ref = p; rc == 0 && ref != NULL; ref = p ) {
1163                 p = strchr( ref, '\n' );
1164                 if ( p != NULL ) {
1165                         *p++ = '\0';
1166                 }
1167
1168                 rc = ldap_url_parse_ext( ref, &srv );
1169
1170                 if ( rc != LDAP_URL_SUCCESS ) {
1171                         Debug( LDAP_DEBUG_TRACE,
1172                             "ignoring unknown referral <%s>\n", ref, 0, 0 );
1173                         rc = ldap_append_referral( ld, &unfollowed, ref );
1174                         *hadrefp = 1;
1175                         continue;
1176                 }
1177
1178                 if ( srv->lud_dn != NULL && srv->lud_dn == '\0' ) {
1179                         LDAP_FREE( srv->lud_dn );
1180                         srv->lud_dn = NULL;
1181                 }
1182
1183                 Debug( LDAP_DEBUG_TRACE,
1184                     "chasing LDAP referral: <%s>\n", ref, 0, 0 );
1185
1186                 *hadrefp = 1;
1187
1188                 /* See if we've already been here */
1189                 if (( lc = find_connection( ld, srv, 1 )) != NULL ) {
1190                         LDAPRequest *lp;
1191                         int looped = 0;
1192                         int len = srv->lud_dn ? strlen( srv->lud_dn ) : 0;
1193                         for (lp = lr; lp; lp = lp->lr_parent ) {
1194                                 if ( lp->lr_conn == lc ) {
1195                                         if ( len == lp->lr_dn.bv_len ) {
1196                                                 if ( len && strncmp( srv->lud_dn, lp->lr_dn.bv_val,
1197                                                         len ))
1198                                                         continue;
1199                                                 looped = 1;
1200                                                 break;
1201                                         }
1202                                 }
1203                         }
1204                         if ( looped ) {
1205                                 ldap_free_urllist(srv);
1206                                 ld->ld_errno = LDAP_CLIENT_LOOP;
1207                                 rc = -1;
1208                                 continue;
1209                         }
1210                 }
1211
1212                 LDAP_NEXT_MSGID( ld, id );
1213                 ber = re_encode_request( ld, origreq->lr_ber,
1214                     id, sref, srv, &rinfo.ri_request );
1215
1216                 if ( ber == NULL ) {
1217                         return -1 ;
1218                 }
1219
1220                 /* copy the complete referral for rebind process */
1221                 rinfo.ri_url = LDAP_STRDUP( ref );
1222
1223                 rinfo.ri_msgid = origreq->lr_origid;
1224
1225 #ifdef LDAP_R_COMPILE
1226                 ldap_pvt_thread_mutex_lock( &ld->ld_req_mutex );
1227 #endif
1228                 rc = ldap_send_server_request( ld, ber, id,
1229                         lr, srv, NULL, &rinfo );
1230 #ifdef LDAP_R_COMPILE
1231                 ldap_pvt_thread_mutex_unlock( &ld->ld_req_mutex );
1232 #endif
1233
1234                 LDAP_FREE( rinfo.ri_url );
1235
1236                 if( rc >= 0 ) {
1237                         ++count;
1238                 } else {
1239                         Debug( LDAP_DEBUG_ANY,
1240                                 "Unable to chase referral \"%s\" (%d: %s)\n",
1241                                 ref, ld->ld_errno, ldap_err2string( ld->ld_errno ) );
1242                         rc = ldap_append_referral( ld, &unfollowed, ref );
1243                 }
1244
1245                 ldap_free_urllist(srv);
1246         }
1247
1248         LDAP_FREE( *errstrp );
1249         *errstrp = unfollowed;
1250
1251         return(( rc == 0 ) ? count : rc );
1252 }
1253
1254
1255 int
1256 ldap_append_referral( LDAP *ld, char **referralsp, char *s )
1257 {
1258         int     first;
1259
1260         if ( *referralsp == NULL ) {
1261                 first = 1;
1262                 *referralsp = (char *)LDAP_MALLOC( strlen( s ) + LDAP_REF_STR_LEN
1263                     + 1 );
1264         } else {
1265                 first = 0;
1266                 *referralsp = (char *)LDAP_REALLOC( *referralsp,
1267                     strlen( *referralsp ) + strlen( s ) + 2 );
1268         }
1269
1270         if ( *referralsp == NULL ) {
1271                 ld->ld_errno = LDAP_NO_MEMORY;
1272                 return( -1 );
1273         }
1274
1275         if ( first ) {
1276                 strcpy( *referralsp, LDAP_REF_STR );
1277         } else {
1278                 strcat( *referralsp, "\n" );
1279         }
1280         strcat( *referralsp, s );
1281
1282         return( 0 );
1283 }
1284
1285
1286
1287 static BerElement *
1288 re_encode_request( LDAP *ld,
1289         BerElement *origber,
1290         ber_int_t msgid,
1291         int sref,
1292         LDAPURLDesc *srv,
1293         int *type )
1294 {
1295         /*
1296          * XXX this routine knows way too much about how the lber library works!
1297          */
1298         ber_int_t       along;
1299         ber_tag_t       tag;
1300         ber_tag_t       rtag;
1301         ber_int_t       ver;
1302         ber_int_t       scope;
1303         int             rc;
1304         BerElement      tmpber, *ber;
1305         struct berval           dn;
1306
1307         Debug( LDAP_DEBUG_TRACE,
1308             "re_encode_request: new msgid %ld, new dn <%s>\n",
1309             (long) msgid,
1310                 ( srv == NULL || srv->lud_dn == NULL) ? "NONE" : srv->lud_dn, 0 );
1311
1312         tmpber = *origber;
1313
1314         /*
1315          * all LDAP requests are sequences that start with a message id.
1316          * For all except delete, this is followed by a sequence that is
1317          * tagged with the operation code.  For delete, the provided DN
1318          * is not wrapped by a sequence.
1319          */
1320         rtag = ber_scanf( &tmpber, "{it", /*}*/ &along, &tag );
1321
1322         if ( rtag == LBER_ERROR ) {
1323                 ld->ld_errno = LDAP_DECODING_ERROR;
1324                 return( NULL );
1325         }
1326
1327         assert( tag != 0);
1328         if ( tag == LDAP_REQ_BIND ) {
1329                 /* bind requests have a version number before the DN & other stuff */
1330                 rtag = ber_scanf( &tmpber, "{im" /*}*/, &ver, &dn );
1331
1332         } else if ( tag == LDAP_REQ_DELETE ) {
1333                 /* delete requests don't have a DN wrapping sequence */
1334                 rtag = ber_scanf( &tmpber, "m", &dn );
1335
1336         } else if ( tag == LDAP_REQ_SEARCH ) {
1337                 /* search requests need to be re-scope-ed */
1338                 rtag = ber_scanf( &tmpber, "{me" /*"}"*/, &dn, &scope );
1339
1340                 if( srv->lud_scope != LDAP_SCOPE_DEFAULT ) {
1341                         /* use the scope provided in reference */
1342                         scope = srv->lud_scope;
1343
1344                 } else if ( sref ) {
1345                         /* use scope implied by previous operation
1346                          *   base -> base
1347                          *   one -> base
1348                          *   subtree -> subtree
1349                          *   subordinate -> subtree
1350                          */
1351                         switch( scope ) {
1352                         default:
1353                         case LDAP_SCOPE_BASE:
1354                         case LDAP_SCOPE_ONELEVEL:
1355                                 scope = LDAP_SCOPE_BASE;
1356                                 break;
1357                         case LDAP_SCOPE_SUBTREE:
1358 #ifdef LDAP_SCOPE_SUBORDINATE
1359                         case LDAP_SCOPE_SUBORDINATE:
1360 #endif
1361                                 scope = LDAP_SCOPE_SUBTREE;
1362                                 break;
1363                         }
1364                 }
1365
1366         } else {
1367                 rtag = ber_scanf( &tmpber, "{m" /*}*/, &dn );
1368         }
1369
1370         if( rtag == LBER_ERROR ) {
1371                 ld->ld_errno = LDAP_DECODING_ERROR;
1372                 return NULL;
1373         }
1374
1375         /* restore character zero'd out by ber_scanf*/
1376         dn.bv_val[dn.bv_len] = tmpber.ber_tag;
1377
1378         if (( ber = ldap_alloc_ber_with_options( ld )) == NULL ) {
1379                 return NULL;
1380         }
1381
1382         if ( srv->lud_dn ) {
1383                 ber_str2bv( srv->lud_dn, 0, 0, &dn );
1384         }
1385
1386         if ( tag == LDAP_REQ_BIND ) {
1387                 rc = ber_printf( ber, "{it{iO" /*}}*/, msgid, tag, ver, &dn );
1388         } else if ( tag == LDAP_REQ_DELETE ) {
1389                 rc = ber_printf( ber, "{itON}", msgid, tag, &dn );
1390         } else if ( tag == LDAP_REQ_SEARCH ) {
1391                 rc = ber_printf( ber, "{it{Oe" /*}}*/, msgid, tag, &dn, scope );
1392         } else {
1393                 rc = ber_printf( ber, "{it{O" /*}}*/, msgid, tag, &dn );
1394         }
1395
1396         if ( rc == -1 ) {
1397                 ld->ld_errno = LDAP_ENCODING_ERROR;
1398                 ber_free( ber, 1 );
1399                 return NULL;
1400         }
1401
1402         if ( tag != LDAP_REQ_DELETE && (
1403                 ber_write(ber, tmpber.ber_ptr, ( tmpber.ber_end - tmpber.ber_ptr ), 0)
1404                 != ( tmpber.ber_end - tmpber.ber_ptr ) ||
1405             ber_printf( ber, /*{{*/ "N}N}" ) == -1 ) )
1406         {
1407                 ld->ld_errno = LDAP_ENCODING_ERROR;
1408                 ber_free( ber, 1 );
1409                 return NULL;
1410         }
1411
1412 #ifdef LDAP_DEBUG
1413         if ( ldap_debug & LDAP_DEBUG_PACKETS ) {
1414                 Debug( LDAP_DEBUG_ANY, "re_encode_request new request is:\n",
1415                     0, 0, 0 );
1416                 ber_log_dump( LDAP_DEBUG_BER, ldap_debug, ber, 0 );
1417         }
1418 #endif /* LDAP_DEBUG */
1419
1420         *type = tag;    /* return request type */
1421         return ber;
1422 }
1423
1424
1425 LDAPRequest *
1426 ldap_find_request_by_msgid( LDAP *ld, ber_int_t msgid )
1427 {
1428         LDAPRequest     *lr;
1429
1430 #ifdef LDAP_R_COMPILE
1431         ldap_pvt_thread_mutex_lock( &ld->ld_req_mutex );
1432 #endif
1433         for ( lr = ld->ld_requests; lr != NULL; lr = lr->lr_next ) {
1434                 if( lr->lr_status == LDAP_REQST_COMPLETED ) {
1435                         continue;       /* Skip completed requests */
1436                 }
1437                 if ( msgid == lr->lr_msgid ) {
1438                         break;
1439                 }
1440         }
1441 #ifdef LDAP_R_COMPILE
1442         ldap_pvt_thread_mutex_unlock( &ld->ld_req_mutex );
1443 #endif
1444
1445         return( lr );
1446 }
1447
1448