git.sur5r.net Git - openldap/blob - libraries/libldap/request.c

   1 /* $OpenLDAP$ */
   2 /* This work is part of OpenLDAP Software <http://www.openldap.org/>.
   3  *
   4  * Copyright 1998-2007 The OpenLDAP Foundation.
   5  * All rights reserved.
   6  *
   7  * Redistribution and use in source and binary forms, with or without
   8  * modification, are permitted only as authorized by the OpenLDAP
   9  * Public License.
  10  *
  11  * A copy of this license is available in the file LICENSE in the
  12  * top-level directory of the distribution or, alternatively, at
  13  * <http://www.OpenLDAP.org/license.html>.
  14  */
  15 /* Portions Copyright (c) 1995 Regents of the University of Michigan.
  16  * All rights reserved.
  17  */
  18 /* This notice applies to changes, created by or for Novell, Inc.,
  19  * to preexisting works for which notices appear elsewhere in this file.
  20  *
  21  * Copyright (C) 1999, 2000 Novell, Inc. All Rights Reserved.
  22  *
  23  * THIS WORK IS SUBJECT TO U.S. AND INTERNATIONAL COPYRIGHT LAWS AND TREATIES.
  24  * USE, MODIFICATION, AND REDISTRIBUTION OF THIS WORK IS SUBJECT TO VERSION
  25  * 2.0.1 OF THE OPENLDAP PUBLIC LICENSE, A COPY OF WHICH IS AVAILABLE AT
  26  * HTTP://WWW.OPENLDAP.ORG/LICENSE.HTML OR IN THE FILE "LICENSE" IN THE
  27  * TOP-LEVEL DIRECTORY OF THE DISTRIBUTION. ANY USE OR EXPLOITATION OF THIS
  28  * WORK OTHER THAN AS AUTHORIZED IN VERSION 2.0.1 OF THE OPENLDAP PUBLIC
  29  * LICENSE, OR OTHER PRIOR WRITTEN CONSENT FROM NOVELL, COULD SUBJECT THE
  30  * PERPETRATOR TO CRIMINAL AND CIVIL LIABILITY.
  31  *---
  32  * Modification to OpenLDAP source by Novell, Inc.
  33  * April 2000 sfs  Added code to chase V3 referrals
  34  *  request.c - sending of ldap requests; handling of referrals
  35  *---
  36  * Note: A verbatim copy of version 2.0.1 of the OpenLDAP Public License
  37  * can be found in the file "build/LICENSE-2.0.1" in this distribution
  38  * of OpenLDAP Software.
  39  */
  40
  41 #include "portable.h"
  42
  43 #include <stdio.h>
  44
  45 #include <ac/stdlib.h>
  46
  47 #include <ac/errno.h>
  48 #include <ac/socket.h>
  49 #include <ac/string.h>
  50 #include <ac/time.h>
  51 #include <ac/unistd.h>
  52
  53 #include "ldap-int.h"
  54 #include "lber.h"
  55
  56 static LDAPConn *find_connection LDAP_P(( LDAP *ld, LDAPURLDesc *srv, int any ));
  57 static void use_connection LDAP_P(( LDAP *ld, LDAPConn *lc ));
  58 static void ldap_free_request_int LDAP_P(( LDAP *ld, LDAPRequest *lr ));
  59
  60 static BerElement *
  61 re_encode_request( LDAP *ld,
  62         BerElement *origber,
  63         ber_int_t msgid,
  64         int sref,
  65         LDAPURLDesc *srv,
  66         int *type );
  67
  68 BerElement *
  69 ldap_alloc_ber_with_options( LDAP *ld )
  70 {
  71         BerElement      *ber;
  72
  73         ber = ber_alloc_t( ld->ld_lberoptions );
  74         if ( ber == NULL ) {
  75                 ld->ld_errno = LDAP_NO_MEMORY;
  76         }
  77
  78         return( ber );
  79 }
  80
  81
  82 void
  83 ldap_set_ber_options( LDAP *ld, BerElement *ber )
  84 {
  85         ber->ber_options = ld->ld_lberoptions;
  86 }
  87
  88
  89 ber_int_t
  90 ldap_send_initial_request(
  91         LDAP *ld,
  92         ber_tag_t msgtype,
  93         const char *dn,
  94         BerElement *ber,
  95         ber_int_t msgid)
  96 {
  97         int rc = 1;
  98
  99         Debug( LDAP_DEBUG_TRACE, "ldap_send_initial_request\n", 0, 0, 0 );
 100
 101 #ifdef LDAP_R_COMPILE
 102         ldap_pvt_thread_mutex_lock( &ld->ld_req_mutex );
 103 #endif
 104         if ( ber_sockbuf_ctrl( ld->ld_sb, LBER_SB_OPT_GET_FD, NULL ) == -1 ) {
 105                 /* not connected yet */
 106                 rc = ldap_open_defconn( ld );
 107
 108         }
 109 #ifdef LDAP_R_COMPILE
 110         ldap_pvt_thread_mutex_unlock( &ld->ld_req_mutex );
 111 #endif
 112         if( rc < 0 ) {
 113                 ber_free( ber, 1 );
 114                 return( -1 );
 115         } else if ( rc == 0 ) {
 116                 Debug( LDAP_DEBUG_TRACE,
 117                         "ldap_open_defconn: successful\n",
 118                         0, 0, 0 );
 119         }
 120
 121 #ifdef LDAP_CONNECTIONLESS
 122         if (LDAP_IS_UDP(ld)) {
 123                 if (msgtype == LDAP_REQ_BIND) {
 124                         if (ld->ld_options.ldo_cldapdn)
 125                                 ldap_memfree(ld->ld_options.ldo_cldapdn);
 126                         ld->ld_options.ldo_cldapdn = ldap_strdup(dn);
 127                         return 0;
 128                 }
 129                 if (msgtype != LDAP_REQ_ABANDON && msgtype != LDAP_REQ_SEARCH)
 130                         return LDAP_PARAM_ERROR;
 131         }
 132 #endif
 133 #ifdef LDAP_R_COMPILE
 134         ldap_pvt_thread_mutex_lock( &ld->ld_req_mutex );
 135 #endif
 136         rc = ldap_send_server_request( ld, ber, msgid, NULL,
 137                 NULL, NULL, NULL );
 138 #ifdef LDAP_R_COMPILE
 139         ldap_pvt_thread_mutex_unlock( &ld->ld_req_mutex );
 140 #endif
 141         return(rc);
 142 }
 143
 144
 145 int
 146 ldap_int_flush_request(
 147         LDAP *ld,
 148         LDAPRequest *lr )
 149 {
 150         LDAPConn *lc = lr->lr_conn;
 151
 152         if ( ber_flush2( lc->lconn_sb, lr->lr_ber, LBER_FLUSH_FREE_NEVER ) != 0 ) {
 153                 if ( sock_errno() == EAGAIN ) {
 154                         /* need to continue write later */
 155                         lr->lr_status = LDAP_REQST_WRITING;
 156                         ldap_mark_select_write( ld, lc->lconn_sb );
 157                         ld->ld_errno = LDAP_BUSY;
 158                         return -2;
 159                 } else {
 160                         ld->ld_errno = LDAP_SERVER_DOWN;
 161                         ldap_free_request( ld, lr );
 162                         ldap_free_connection( ld, lc, 0, 0 );
 163                         return( -1 );
 164                 }
 165         } else {
 166                 if ( lr->lr_parent == NULL ) {
 167                         lr->lr_ber->ber_end = lr->lr_ber->ber_ptr;
 168                         lr->lr_ber->ber_ptr = lr->lr_ber->ber_buf;
 169                 }
 170                 lr->lr_status = LDAP_REQST_INPROGRESS;
 171
 172                 /* sent -- waiting for a response */
 173                 ldap_mark_select_read( ld, lc->lconn_sb );
 174         }
 175         return 0;
 176 }
 177
 178 int
 179 ldap_send_server_request(
 180         LDAP *ld,
 181         BerElement *ber,
 182         ber_int_t msgid,
 183         LDAPRequest *parentreq,
 184         LDAPURLDesc **srvlist,
 185         LDAPConn *lc,
 186         LDAPreqinfo *bind )
 187 {
 188         LDAPRequest     *lr;
 189         int             incparent, rc;
 190
 191         Debug( LDAP_DEBUG_TRACE, "ldap_send_server_request\n", 0, 0, 0 );
 192
 193         incparent = 0;
 194         ld->ld_errno = LDAP_SUCCESS;    /* optimistic */
 195
 196         if ( lc == NULL ) {
 197                 if ( srvlist == NULL ) {
 198                         lc = ld->ld_defconn;
 199                 } else {
 200                         lc = find_connection( ld, *srvlist, 1 );
 201                         if ( lc == NULL ) {
 202                                 if ( (bind != NULL) && (parentreq != NULL) ) {
 203                                         /* Remember the bind in the parent */
 204                                         incparent = 1;
 205                                         ++parentreq->lr_outrefcnt;
 206                                 }
 207                                 lc = ldap_new_connection( ld, srvlist, 0, 1, bind );
 208                         }
 209                 }
 210         }
 211
 212         if ( lc == NULL || lc->lconn_status != LDAP_CONNST_CONNECTED ) {
 213                 ber_free( ber, 1 );
 214                 if ( ld->ld_errno == LDAP_SUCCESS ) {
 215                         ld->ld_errno = LDAP_SERVER_DOWN;
 216                 }
 217                 if ( incparent ) {
 218                         /* Forget about the bind */
 219                         --parentreq->lr_outrefcnt;
 220                 }
 221                 return( -1 );
 222         }
 223
 224         use_connection( ld, lc );
 225
 226         /* If we still have an incomplete write, try to finish it before
 227          * dealing with the new request. If we don't finish here, return
 228          * LDAP_BUSY and let the caller retry later. We only allow a single
 229          * request to be in WRITING state.
 230          */
 231         rc = 0;
 232         if ( ld->ld_requests &&
 233                 ld->ld_requests->lr_status == LDAP_REQST_WRITING &&
 234                 ldap_int_flush_request( ld, ld->ld_requests ) < 0 )
 235         {
 236                 rc = -1;
 237         }
 238         if ( rc ) return rc;
 239
 240         lr = (LDAPRequest *)LDAP_CALLOC( 1, sizeof( LDAPRequest ) );
 241         if ( lr == NULL ) {
 242                 ld->ld_errno = LDAP_NO_MEMORY;
 243                 ldap_free_connection( ld, lc, 0, 0 );
 244                 ber_free( ber, 1 );
 245                 if ( incparent ) {
 246                         /* Forget about the bind */
 247                         --parentreq->lr_outrefcnt;
 248                 }
 249                 return( -1 );
 250         }
 251         lr->lr_msgid = msgid;
 252         lr->lr_status = LDAP_REQST_INPROGRESS;
 253         lr->lr_res_errno = LDAP_SUCCESS;        /* optimistic */
 254         lr->lr_ber = ber;
 255         lr->lr_conn = lc;
 256         if ( parentreq != NULL ) {      /* sub-request */
 257                 if ( !incparent ) {
 258                         /* Increment if we didn't do it before the bind */
 259                         ++parentreq->lr_outrefcnt;
 260                 }
 261                 lr->lr_origid = parentreq->lr_origid;
 262                 lr->lr_parentcnt = ++parentreq->lr_parentcnt;
 263                 lr->lr_parent = parentreq;
 264                 lr->lr_refnext = parentreq->lr_child;
 265                 parentreq->lr_child = lr;
 266         } else {                        /* original request */
 267                 lr->lr_origid = lr->lr_msgid;
 268         }
 269
 270         /* Extract requestDN for future reference */
 271         {
 272                 BerElement tmpber = *ber;
 273                 ber_int_t       bint;
 274                 ber_tag_t       tag, rtag;
 275
 276                 ber_reset( &tmpber, 1 );
 277                 rtag = ber_scanf( &tmpber, "{it", /*}*/ &bint, &tag );
 278                 switch ( tag ) {
 279                 case LDAP_REQ_BIND:
 280                         rtag = ber_scanf( &tmpber, "{i" /*}*/, &bint );
 281                         break;
 282                 case LDAP_REQ_DELETE:
 283                         break;
 284                 default:
 285                         rtag = ber_scanf( &tmpber, "{" /*}*/ );
 286                 case LDAP_REQ_ABANDON:
 287                         break;
 288                 }
 289                 if ( tag != LDAP_REQ_ABANDON ) {
 290                         ber_skip_tag( &tmpber, &lr->lr_dn.bv_len );
 291                         lr->lr_dn.bv_val = tmpber.ber_ptr;
 292                 }
 293         }
 294
 295         lr->lr_prev = NULL;
 296         lr->lr_next = ld->ld_requests;
 297         if ( lr->lr_next != NULL ) {
 298                 lr->lr_next->lr_prev = lr;
 299         }
 300         ld->ld_requests = lr;
 301
 302         ld->ld_errno = LDAP_SUCCESS;
 303         if ( ldap_int_flush_request( ld, lr ) == -1 ) {
 304                 msgid = -1;
 305         }
 306
 307         return( msgid );
 308 }
 309
 310 LDAPConn *
 311 ldap_new_connection( LDAP *ld, LDAPURLDesc **srvlist, int use_ldsb,
 312         int connect, LDAPreqinfo *bind )
 313 {
 314         LDAPConn        *lc;
 315
 316         Debug( LDAP_DEBUG_TRACE, "ldap_new_connection %d %d %d\n",
 317                 use_ldsb, connect, (bind != NULL) );
 318         /*
 319          * make a new LDAP server connection
 320          * XXX open connection synchronously for now
 321          */
 322         lc = (LDAPConn *)LDAP_CALLOC( 1, sizeof( LDAPConn ) );
 323         if ( lc == NULL ) {
 324                 ld->ld_errno = LDAP_NO_MEMORY;
 325                 return( NULL );
 326         }
 327
 328         if ( use_ldsb ) {
 329                 assert( ld->ld_sb != NULL );
 330                 lc->lconn_sb = ld->ld_sb;
 331
 332         } else {
 333                 lc->lconn_sb = ber_sockbuf_alloc();
 334                 if ( lc->lconn_sb == NULL ) {
 335                         LDAP_FREE( (char *)lc );
 336                         ld->ld_errno = LDAP_NO_MEMORY;
 337                         return( NULL );
 338                 }
 339         }
 340
 341         if ( connect ) {
 342                 LDAPURLDesc     **srvp, *srv = NULL;
 343
 344                 for ( srvp = srvlist; *srvp != NULL; srvp = &(*srvp)->lud_next ) {
 345                         if ( ldap_int_open_connection( ld, lc, *srvp, 0 ) != -1 )
 346                         {
 347                                 srv = *srvp;
 348
 349                                 if ( ld->ld_urllist_proc ) {
 350                                         ld->ld_urllist_proc( ld, srvlist, srvp, ld->ld_urllist_params );
 351                                 }
 352
 353                                 break;
 354                         }
 355                 }
 356
 357                 if ( srv == NULL ) {
 358                         if ( !use_ldsb ) {
 359                                 ber_sockbuf_free( lc->lconn_sb );
 360                         }
 361                         LDAP_FREE( (char *)lc );
 362                         ld->ld_errno = LDAP_SERVER_DOWN;
 363                         return( NULL );
 364                 }
 365
 366                 lc->lconn_server = ldap_url_dup( srv );
 367         }
 368
 369         lc->lconn_status = LDAP_CONNST_CONNECTED;
 370 #ifdef LDAP_R_COMPILE
 371         ldap_pvt_thread_mutex_lock( &ld->ld_conn_mutex );
 372 #endif
 373         lc->lconn_next = ld->ld_conns;
 374         ld->ld_conns = lc;
 375 #ifdef LDAP_R_COMPILE
 376         ldap_pvt_thread_mutex_unlock( &ld->ld_conn_mutex );
 377 #endif
 378
 379         if ( bind != NULL ) {
 380                 int             err = 0;
 381                 LDAPConn        *savedefconn;
 382
 383                 /* Set flag to prevent additional referrals
 384                  * from being processed on this
 385                  * connection until the bind has completed
 386                  */
 387                 lc->lconn_rebind_inprogress = 1;
 388                 /* V3 rebind function */
 389                 if ( ld->ld_rebind_proc != NULL) {
 390                         LDAPURLDesc     *srvfunc;
 391
 392                         srvfunc = ldap_url_dup( *srvlist );
 393                         if ( srvfunc == NULL ) {
 394                                 ld->ld_errno = LDAP_NO_MEMORY;
 395                                 err = -1;
 396                         } else {
 397                                 savedefconn = ld->ld_defconn;
 398                                 ++lc->lconn_refcnt;     /* avoid premature free */
 399                                 ld->ld_defconn = lc;
 400
 401                                 Debug( LDAP_DEBUG_TRACE, "Call application rebind_proc\n", 0, 0, 0);
 402 #ifdef LDAP_R_COMPILE
 403                                 ldap_pvt_thread_mutex_unlock( &ld->ld_req_mutex );
 404                                 ldap_pvt_thread_mutex_unlock( &ld->ld_res_mutex );
 405 #endif
 406                                 err = (*ld->ld_rebind_proc)( ld,
 407                                         bind->ri_url, bind->ri_request, bind->ri_msgid,
 408                                         ld->ld_rebind_params );
 409 #ifdef LDAP_R_COMPILE
 410                                 ldap_pvt_thread_mutex_lock( &ld->ld_res_mutex );
 411                                 ldap_pvt_thread_mutex_lock( &ld->ld_req_mutex );
 412 #endif
 413
 414                                 ld->ld_defconn = savedefconn;
 415                                 --lc->lconn_refcnt;
 416
 417                                 if ( err != 0 ) {
 418                                         err = -1;
 419                                         ldap_free_connection( ld, lc, 1, 0 );
 420                                         lc = NULL;
 421                                 }
 422                                 ldap_free_urldesc( srvfunc );
 423                         }
 424
 425                 } else {
 426                         int             msgid, rc;
 427                         struct berval   passwd = BER_BVNULL;
 428
 429                         savedefconn = ld->ld_defconn;
 430                         ++lc->lconn_refcnt;     /* avoid premature free */
 431                         ld->ld_defconn = lc;
 432
 433                         Debug( LDAP_DEBUG_TRACE, "anonymous rebind via ldap_bind_s\n", 0, 0, 0);
 434 #ifdef LDAP_R_COMPILE
 435                         ldap_pvt_thread_mutex_unlock( &ld->ld_req_mutex );
 436                         ldap_pvt_thread_mutex_unlock( &ld->ld_res_mutex );
 437 #endif
 438                         rc = ldap_sasl_bind( ld, "", LDAP_SASL_SIMPLE, &passwd,
 439                                 NULL, NULL, &msgid );
 440                         if ( rc != LDAP_SUCCESS ) {
 441                                 err = -1;
 442
 443                         } else {
 444                                 for ( err = 1; err > 0; ) {
 445                                         struct timeval  tv = { 0, 100000 };
 446                                         LDAPMessage     *res = NULL;
 447
 448                                         switch ( ldap_result( ld, msgid, LDAP_MSG_ALL, &tv, &res ) ) {
 449                                         case -1:
 450                                                 err = -1;
 451                                                 break;
 452
 453                                         case 0:
 454 #ifdef LDAP_R_COMPILE
 455                                                 ldap_pvt_thread_yield();
 456 #endif
 457                                                 break;
 458
 459                                         case LDAP_RES_BIND:
 460                                                 rc = ldap_parse_result( ld, res, &err, NULL, NULL, NULL, NULL, 1 );
 461                                                 if ( rc != LDAP_SUCCESS ) {
 462                                                         err = -1;
 463
 464                                                 } else if ( err != LDAP_SUCCESS ) {
 465                                                         err = -1;
 466                                                 }
 467                                                 /* else err == LDAP_SUCCESS == 0 */
 468                                                 break;
 469
 470                                         default:
 471                                                 assert( 0 );
 472                                         }
 473                                 }
 474                         }
 475 #ifdef LDAP_R_COMPILE
 476                         ldap_pvt_thread_mutex_lock( &ld->ld_res_mutex );
 477                         ldap_pvt_thread_mutex_lock( &ld->ld_req_mutex );
 478 #endif
 479                         ld->ld_defconn = savedefconn;
 480                         --lc->lconn_refcnt;
 481
 482                         if ( err != 0 ) {
 483                                 ldap_free_connection( ld, lc, 1, 0 );
 484                                 lc = NULL;
 485                         }
 486                 }
 487                 if ( lc != NULL )
 488                         lc->lconn_rebind_inprogress = 0;
 489         }
 490
 491         return( lc );
 492 }
 493
 494
 495 static LDAPConn *
 496 find_connection( LDAP *ld, LDAPURLDesc *srv, int any )
 497 /*
 498  * return an existing connection (if any) to the server srv
 499  * if "any" is non-zero, check for any server in the "srv" chain
 500  */
 501 {
 502         LDAPConn        *lc;
 503         LDAPURLDesc     *lcu, *lsu;
 504         int lcu_port, lsu_port;
 505         int found = 0;
 506
 507 #ifdef LDAP_R_COMPILE
 508         ldap_pvt_thread_mutex_lock( &ld->ld_conn_mutex );
 509 #endif
 510         for ( lc = ld->ld_conns; lc != NULL; lc = lc->lconn_next ) {
 511                 lcu = lc->lconn_server;
 512                 lcu_port = ldap_pvt_url_scheme_port( lcu->lud_scheme,
 513                         lcu->lud_port );
 514
 515                 for ( lsu = srv; lsu != NULL; lsu = lsu->lud_next ) {
 516                         lsu_port = ldap_pvt_url_scheme_port( lsu->lud_scheme,
 517                                 lsu->lud_port );
 518
 519                         if ( lsu_port == lcu_port
 520                                 && strcmp( lcu->lud_scheme, lsu->lud_scheme ) == 0
 521                                 && lcu->lud_host != NULL && *lcu->lud_host != '\0'
 522                                 && lsu->lud_host != NULL && *lsu->lud_host != '\0'
 523                                 && strcasecmp( lsu->lud_host, lcu->lud_host ) == 0 )
 524                         {
 525                                 found = 1;
 526                                 break;
 527                         }
 528
 529                         if ( !any ) break;
 530                 }
 531                 if ( found )
 532                         break;
 533         }
 534 #ifdef LDAP_R_COMPILE
 535         ldap_pvt_thread_mutex_unlock( &ld->ld_conn_mutex );
 536 #endif
 537         return lc;
 538 }
 539
 540
 541
 542 static void
 543 use_connection( LDAP *ld, LDAPConn *lc )
 544 {
 545         ++lc->lconn_refcnt;
 546         lc->lconn_lastused = time( NULL );
 547 }
 548
 549
 550 void
 551 ldap_free_connection( LDAP *ld, LDAPConn *lc, int force, int unbind )
 552 {
 553         LDAPConn        *tmplc, *prevlc;
 554
 555         Debug( LDAP_DEBUG_TRACE,
 556                 "ldap_free_connection %d %d\n",
 557                 force, unbind, 0 );
 558
 559         if ( force || --lc->lconn_refcnt <= 0 ) {
 560                 /* remove from connections list first */
 561 #ifdef LDAP_R_COMPILE
 562                 ldap_pvt_thread_mutex_lock( &ld->ld_conn_mutex );
 563 #endif
 564
 565                 for ( prevlc = NULL, tmplc = ld->ld_conns;
 566                         tmplc != NULL;
 567                         tmplc = tmplc->lconn_next )
 568                 {
 569                         if ( tmplc == lc ) {
 570                                 if ( prevlc == NULL ) {
 571                                     ld->ld_conns = tmplc->lconn_next;
 572                                 } else {
 573                                     prevlc->lconn_next = tmplc->lconn_next;
 574                                 }
 575                                 break;
 576                         }
 577                         prevlc = tmplc;
 578                 }
 579 #ifdef LDAP_R_COMPILE
 580                 ldap_pvt_thread_mutex_unlock( &ld->ld_conn_mutex );
 581 #endif
 582
 583                 if ( lc->lconn_status == LDAP_CONNST_CONNECTED ) {
 584                         ldap_mark_select_clear( ld, lc->lconn_sb );
 585                         if ( unbind ) {
 586                                 ldap_send_unbind( ld, lc->lconn_sb,
 587                                                 NULL, NULL );
 588                         }
 589                 }
 590
 591                 if ( lc->lconn_ber != NULL ) {
 592                         ber_free( lc->lconn_ber, 1 );
 593                 }
 594
 595                 ldap_int_sasl_close( ld, lc );
 596
 597                 ldap_free_urllist( lc->lconn_server );
 598 #ifdef LDAP_API_FEATURE_X_OPENLDAP_V2_KBIND
 599                 if ( lc->lconn_krbinstance != NULL ) {
 600                         LDAP_FREE( lc->lconn_krbinstance );
 601                 }
 602 #endif
 603
 604                 /* FIXME: is this at all possible?
 605                  * ldap_ld_free() in unbind.c calls ldap_free_connection()
 606                  * with force == 1 __after__ explicitly calling
 607                  * ldap_free_request() on all requests */
 608                 if ( force ) {
 609                         LDAPRequest     *lr;
 610
 611                         for ( lr = ld->ld_requests; lr; ) {
 612                                 LDAPRequest     *lr_next = lr->lr_next;
 613
 614                                 if ( lr->lr_conn == lc ) {
 615                                         ldap_free_request_int( ld, lr );
 616                                 }
 617
 618                                 lr = lr_next;
 619                         }
 620                 }
 621
 622                 if ( lc->lconn_sb != ld->ld_sb ) {
 623                         ber_sockbuf_free( lc->lconn_sb );
 624                 }
 625
 626                 if ( lc->lconn_rebind_queue != NULL) {
 627                         int i;
 628                         for( i = 0; lc->lconn_rebind_queue[i] != NULL; i++ ) {
 629                                 LDAP_VFREE( lc->lconn_rebind_queue[i] );
 630                         }
 631                         LDAP_FREE( lc->lconn_rebind_queue );
 632                 }
 633
 634                 LDAP_FREE( lc );
 635
 636                 Debug( LDAP_DEBUG_TRACE,
 637                         "ldap_free_connection: actually freed\n",
 638                         0, 0, 0 );
 639
 640         } else {
 641                 lc->lconn_lastused = time( NULL );
 642                 Debug( LDAP_DEBUG_TRACE, "ldap_free_connection: refcnt %d\n",
 643                                 lc->lconn_refcnt, 0, 0 );
 644         }
 645 }
 646
 647
 648 #ifdef LDAP_DEBUG
 649 void
 650 ldap_dump_connection( LDAP *ld, LDAPConn *lconns, int all )
 651 {
 652         LDAPConn        *lc;
 653         char            timebuf[32];
 654
 655         Debug( LDAP_DEBUG_TRACE, "** ld %p Connection%s:\n", (void *)ld, all ? "s" : "", 0 );
 656         for ( lc = lconns; lc != NULL; lc = lc->lconn_next ) {
 657                 if ( lc->lconn_server != NULL ) {
 658                         Debug( LDAP_DEBUG_TRACE, "* host: %s  port: %d%s\n",
 659                                 ( lc->lconn_server->lud_host == NULL ) ? "(null)"
 660                                 : lc->lconn_server->lud_host,
 661                                 lc->lconn_server->lud_port, ( lc->lconn_sb ==
 662                                 ld->ld_sb ) ? "  (default)" : "" );
 663                 }
 664                 Debug( LDAP_DEBUG_TRACE, "  refcnt: %d  status: %s\n", lc->lconn_refcnt,
 665                         ( lc->lconn_status == LDAP_CONNST_NEEDSOCKET )
 666                         ?  "NeedSocket" : ( lc->lconn_status == LDAP_CONNST_CONNECTING )
 667                         ? "Connecting" : "Connected", 0 );
 668                 Debug( LDAP_DEBUG_TRACE, "  last used: %s%s\n",
 669                         ldap_pvt_ctime( &lc->lconn_lastused, timebuf ),
 670                         lc->lconn_rebind_inprogress ? "  rebind in progress" : "", 0 );
 671                 if ( lc->lconn_rebind_inprogress ) {
 672                         if ( lc->lconn_rebind_queue != NULL) {
 673                                 int     i;
 674
 675                                 for ( i = 0; lc->lconn_rebind_queue[i] != NULL; i++ ) {
 676                                         int     j;
 677                                         for( j = 0; lc->lconn_rebind_queue[i][j] != 0; j++ ) {
 678                                                 Debug( LDAP_DEBUG_TRACE, "    queue %d entry %d - %s\n",
 679                                                         i, j, lc->lconn_rebind_queue[i][j] );
 680                                         }
 681                                 }
 682                         } else {
 683                                 Debug( LDAP_DEBUG_TRACE, "    queue is empty\n", 0, 0, 0 );
 684                         }
 685                 }
 686                 Debug( LDAP_DEBUG_TRACE, "\n", 0, 0, 0 );
 687                 if ( !all ) {
 688                         break;
 689                 }
 690         }
 691 }
 692
 693
 694 void
 695 ldap_dump_requests_and_responses( LDAP *ld )
 696 {
 697         LDAPRequest     *lr;
 698         LDAPMessage     *lm, *l;
 699         int             i;
 700
 701         Debug( LDAP_DEBUG_TRACE, "** ld %p Outstanding Requests:\n",
 702                 (void *)ld, 0, 0 );
 703         lr = ld->ld_requests;
 704         if ( lr == NULL ) {
 705                 Debug( LDAP_DEBUG_TRACE, "   Empty\n", 0, 0, 0 );
 706         }
 707         for ( i = 0; lr != NULL; lr = lr->lr_next, i++ ) {
 708                 Debug( LDAP_DEBUG_TRACE, " * msgid %d,  origid %d, status %s\n",
 709                         lr->lr_msgid, lr->lr_origid,
 710                         ( lr->lr_status == LDAP_REQST_INPROGRESS ) ? "InProgress" :
 711                         ( lr->lr_status == LDAP_REQST_CHASINGREFS ) ? "ChasingRefs" :
 712                         ( lr->lr_status == LDAP_REQST_NOTCONNECTED ) ? "NotConnected" :
 713                         ( lr->lr_status == LDAP_REQST_WRITING ) ? "Writing" :
 714                         ( lr->lr_status == LDAP_REQST_COMPLETED ) ? "RequestCompleted"
 715                                 : "InvalidStatus" );
 716                 Debug( LDAP_DEBUG_TRACE, "   outstanding referrals %d, parent count %d\n",
 717                         lr->lr_outrefcnt, lr->lr_parentcnt, 0 );
 718         }
 719         Debug( LDAP_DEBUG_TRACE, "  ld %p request count %d (abandoned %lu)\n",
 720                 (void *)ld, i, ld->ld_nabandoned );
 721         Debug( LDAP_DEBUG_TRACE, "** ld %p Response Queue:\n", (void *)ld, 0, 0 );
 722         if ( ( lm = ld->ld_responses ) == NULL ) {
 723                 Debug( LDAP_DEBUG_TRACE, "   Empty\n", 0, 0, 0 );
 724         }
 725         for ( i = 0; lm != NULL; lm = lm->lm_next, i++ ) {
 726                 Debug( LDAP_DEBUG_TRACE, " * msgid %d,  type %lu\n",
 727                     lm->lm_msgid, (unsigned long)lm->lm_msgtype, 0 );
 728                 if ( lm->lm_chain != NULL ) {
 729                         Debug( LDAP_DEBUG_TRACE, "   chained responses:\n", 0, 0, 0 );
 730                         for ( l = lm->lm_chain; l != NULL; l = l->lm_chain ) {
 731                                 Debug( LDAP_DEBUG_TRACE,
 732                                         "  * msgid %d,  type %lu\n",
 733                                         l->lm_msgid,
 734                                         (unsigned long)l->lm_msgtype, 0 );
 735                         }
 736                 }
 737         }
 738         Debug( LDAP_DEBUG_TRACE, "  ld %p response count %d\n", (void *)ld, i, 0 );
 739 }
 740 #endif /* LDAP_DEBUG */
 741
 742 static void
 743 ldap_free_request_int( LDAP *ld, LDAPRequest *lr )
 744 {
 745         /* if lr_refcnt > 0, the request has been looked up
 746          * by ldap_find_request_by_msgid(); if in the meanwhile
 747          * the request is free()'d by someone else, just decrease
 748          * the reference count and extract it from the request
 749          * list; later on, it will be freed. */
 750         if ( lr->lr_prev == NULL ) {
 751                 if ( lr->lr_refcnt == 0 ) {
 752                         /* free'ing the first request? */
 753                         assert( ld->ld_requests == lr );
 754                 }
 755
 756                 if ( ld->ld_requests == lr ) {
 757                         ld->ld_requests = lr->lr_next;
 758                 }
 759
 760         } else {
 761                 lr->lr_prev->lr_next = lr->lr_next;
 762         }
 763
 764         if ( lr->lr_next != NULL ) {
 765                 lr->lr_next->lr_prev = lr->lr_prev;
 766         }
 767
 768         if ( lr->lr_refcnt > 0 ) {
 769                 lr->lr_refcnt = -lr->lr_refcnt;
 770
 771                 lr->lr_prev = NULL;
 772                 lr->lr_next = NULL;
 773
 774                 return;
 775         }
 776
 777         if ( lr->lr_ber != NULL ) {
 778                 ber_free( lr->lr_ber, 1 );
 779                 lr->lr_ber = NULL;
 780         }
 781
 782         if ( lr->lr_res_error != NULL ) {
 783                 LDAP_FREE( lr->lr_res_error );
 784                 lr->lr_res_error = NULL;
 785         }
 786
 787         if ( lr->lr_res_matched != NULL ) {
 788                 LDAP_FREE( lr->lr_res_matched );
 789                 lr->lr_res_matched = NULL;
 790         }
 791
 792         LDAP_FREE( lr );
 793 }
 794
 795 void
 796 ldap_free_request( LDAP *ld, LDAPRequest *lr )
 797 {
 798 #ifdef LDAP_R_COMPILE
 799         LDAP_PVT_THREAD_ASSERT_MUTEX_OWNER( &ld->ld_req_mutex );
 800 #endif
 801
 802         Debug( LDAP_DEBUG_TRACE, "ldap_free_request (origid %d, msgid %d)\n",
 803                 lr->lr_origid, lr->lr_msgid, 0 );
 804
 805         /* free all referrals (child requests) */
 806         while ( lr->lr_child ) {
 807                 ldap_free_request( ld, lr->lr_child );
 808         }
 809
 810         if ( lr->lr_parent != NULL ) {
 811                 LDAPRequest     **lrp;
 812
 813                 --lr->lr_parent->lr_outrefcnt;
 814                 for ( lrp = &lr->lr_parent->lr_child;
 815                         *lrp && *lrp != lr;
 816                         lrp = &(*lrp)->lr_refnext );
 817
 818                 if ( *lrp == lr ) {
 819                         *lrp = lr->lr_refnext;
 820                 }
 821         }
 822         ldap_free_request_int( ld, lr );
 823 }
 824
 825 /*
 826  * call first time with *cntp = -1
 827  * when returns *cntp == -1, no referrals are left
 828  *
 829  * NOTE: may replace *refsp, or shuffle the contents
 830  * of the original array.
 831  */
 832 static int ldap_int_nextref(
 833         LDAP                    *ld,
 834         char                    ***refsp,
 835         int                     *cntp,
 836         void                    *params )
 837 {
 838         assert( refsp != NULL );
 839         assert( *refsp != NULL );
 840         assert( cntp != NULL );
 841
 842         if ( *cntp < -1 ) {
 843                 *cntp = -1;
 844                 return -1;
 845         }
 846
 847         (*cntp)++;
 848
 849         if ( (*refsp)[ *cntp ] == NULL ) {
 850                 *cntp = -1;
 851         }
 852
 853         return 0;
 854 }
 855
 856 /*
 857  * Chase v3 referrals
 858  *
 859  * Parameters:
 860  *  (IN) ld = LDAP connection handle
 861  *  (IN) lr = LDAP Request structure
 862  *  (IN) refs = array of pointers to referral strings that we will chase
 863  *              The array will be free'd by this function when no longer needed
 864  *  (IN) sref != 0 if following search reference
 865  *  (OUT) errstrp = Place to return a string of referrals which could not be followed
 866  *  (OUT) hadrefp = 1 if sucessfully followed referral
 867  *
 868  * Return value - number of referrals followed
 869  */
 870 int
 871 ldap_chase_v3referrals( LDAP *ld, LDAPRequest *lr, char **refs, int sref, char **errstrp, int *hadrefp )
 872 {
 873         char            *unfollowed;
 874         int              unfollowedcnt = 0;
 875         LDAPRequest     *origreq;
 876         LDAPURLDesc     *srv = NULL;
 877         BerElement      *ber;
 878         char            **refarray = NULL;
 879         LDAPConn        *lc;
 880         int                      rc, count, i, j, id;
 881         LDAPreqinfo  rinfo;
 882
 883         ld->ld_errno = LDAP_SUCCESS;    /* optimistic */
 884         *hadrefp = 0;
 885
 886         Debug( LDAP_DEBUG_TRACE, "ldap_chase_v3referrals\n", 0, 0, 0 );
 887
 888         unfollowed = NULL;
 889         rc = count = 0;
 890
 891         /* If no referrals in array, return */
 892         if ( (refs == NULL) || ( (refs)[0] == NULL) ) {
 893                 rc = 0;
 894                 goto done;
 895         }
 896
 897         /* Check for hop limit exceeded */
 898         if ( lr->lr_parentcnt >= ld->ld_refhoplimit ) {
 899                 Debug( LDAP_DEBUG_ANY,
 900                     "more than %d referral hops (dropping)\n", ld->ld_refhoplimit, 0, 0 );
 901                 ld->ld_errno = LDAP_REFERRAL_LIMIT_EXCEEDED;
 902                 rc = -1;
 903                 goto done;
 904         }
 905
 906         /* find original request */
 907         for ( origreq = lr;
 908                 origreq->lr_parent != NULL;
 909                 origreq = origreq->lr_parent )
 910         {
 911                 /* empty */ ;
 912         }
 913
 914         refarray = refs;
 915         refs = NULL;
 916
 917         if ( ld->ld_nextref_proc == NULL ) {
 918                 ld->ld_nextref_proc = ldap_int_nextref;
 919         }
 920
 921         /* parse out & follow referrals */
 922         i = -1;
 923         for ( ld->ld_nextref_proc( ld, &refarray, &i, ld->ld_nextref_params );
 924                         i != -1;
 925                         ld->ld_nextref_proc( ld, &refarray, &i, ld->ld_nextref_params ) )
 926         {
 927
 928                 /* Parse the referral URL */
 929                 rc = ldap_url_parse_ext( refarray[i], &srv, LDAP_PVT_URL_PARSE_NOEMPTY_DN );
 930                 if ( rc != LDAP_URL_SUCCESS ) {
 931                         /* ldap_url_parse_ext() returns LDAP_URL_* errors
 932                          * which do not map on API errors */
 933                         ld->ld_errno = LDAP_PARAM_ERROR;
 934                         rc = -1;
 935                         goto done;
 936                 }
 937
 938                 if( srv->lud_crit_exts ) {
 939                         /* we do not support any extensions */
 940                         ld->ld_errno = LDAP_NOT_SUPPORTED;
 941                         rc = -1;
 942                         goto done;
 943                 }
 944
 945                 /* check connection for re-bind in progress */
 946                 if (( lc = find_connection( ld, srv, 1 )) != NULL ) {
 947                         /* See if we've already requested this DN with this conn */
 948                         LDAPRequest *lp;
 949                         int looped = 0;
 950                         int len = srv->lud_dn ? strlen( srv->lud_dn ) : 0;
 951                         for ( lp = origreq; lp; ) {
 952                                 if ( lp->lr_conn == lc
 953                                         && len == lp->lr_dn.bv_len
 954                                         && len
 955                                         && strncmp( srv->lud_dn, lp->lr_dn.bv_val, len ) == 0 )
 956                                 {
 957                                         looped = 1;
 958                                         break;
 959                                 }
 960                                 if ( lp == origreq ) {
 961                                         lp = lp->lr_child;
 962                                 } else {
 963                                         lp = lr->lr_refnext;
 964                                 }
 965                         }
 966                         if ( looped ) {
 967                                 ldap_free_urllist( srv );
 968                                 srv = NULL;
 969                                 ld->ld_errno = LDAP_CLIENT_LOOP;
 970                                 rc = -1;
 971                                 continue;
 972                         }
 973
 974                         if ( lc->lconn_rebind_inprogress ) {
 975                                 /* We are already chasing a referral or search reference and a
 976                                  * bind on that connection is in progress.  We must queue
 977                                  * referrals on that connection, so we don't get a request
 978                                  * going out before the bind operation completes. This happens
 979                                  * if two search references come in one behind the other
 980                                  * for the same server with different contexts.
 981                                  */
 982                                 Debug( LDAP_DEBUG_TRACE,
 983                                         "ldap_chase_v3referrals: queue referral \"%s\"\n",
 984                                         refarray[i], 0, 0);
 985                                 if( lc->lconn_rebind_queue == NULL ) {
 986                                         /* Create a referral list */
 987                                         lc->lconn_rebind_queue =
 988                                                 (char ***) LDAP_MALLOC( sizeof(void *) * 2);
 989
 990                                         if( lc->lconn_rebind_queue == NULL) {
 991                                                 ld->ld_errno = LDAP_NO_MEMORY;
 992                                                 rc = -1;
 993                                                 goto done;
 994                                         }
 995
 996                                         lc->lconn_rebind_queue[0] = refarray;
 997                                         lc->lconn_rebind_queue[1] = NULL;
 998                                         refarray = NULL;
 999
1000                                 } else {
1001                                         /* Count how many referral arrays we already have */
1002                                         for( j = 0; lc->lconn_rebind_queue[j] != NULL; j++) {
1003                                                 /* empty */;
1004                                         }
1005
1006                                         /* Add the new referral to the list */
1007                                         lc->lconn_rebind_queue = (char ***) LDAP_REALLOC(
1008                                                 lc->lconn_rebind_queue, sizeof(void *) * (j + 2));
1009
1010                                         if( lc->lconn_rebind_queue == NULL ) {
1011                                                 ld->ld_errno = LDAP_NO_MEMORY;
1012                                                 rc = -1;
1013                                                 goto done;
1014                                         }
1015                                         lc->lconn_rebind_queue[j] = refarray;
1016                                         lc->lconn_rebind_queue[j+1] = NULL;
1017                                         refarray = NULL;
1018                                 }
1019
1020                                 /* We have queued the referral/reference, now just return */
1021                                 rc = 0;
1022                                 *hadrefp = 1;
1023                                 count = 1; /* Pretend we already followed referral */
1024                                 goto done;
1025                         }
1026                 }
1027                 /* Re-encode the request with the new starting point of the search.
1028                  * Note: In the future we also need to replace the filter if one
1029                  * was provided with the search reference
1030                  */
1031
1032                 /* For references we don't want old dn if new dn empty */
1033                 if ( sref && srv->lud_dn == NULL ) {
1034                         srv->lud_dn = LDAP_STRDUP( "" );
1035                 }
1036
1037                 LDAP_NEXT_MSGID( ld, id );
1038                 ber = re_encode_request( ld, origreq->lr_ber, id,
1039                         sref, srv, &rinfo.ri_request );
1040
1041                 if( ber == NULL ) {
1042                         ld->ld_errno = LDAP_ENCODING_ERROR;
1043                         rc = -1;
1044                         goto done;
1045                 }
1046
1047                 Debug( LDAP_DEBUG_TRACE,
1048                         "ldap_chase_v3referral: msgid %d, url \"%s\"\n",
1049                         lr->lr_msgid, refarray[i], 0);
1050
1051                 /* Send the new request to the server - may require a bind */
1052                 rinfo.ri_msgid = origreq->lr_origid;
1053                 rinfo.ri_url = refarray[i];
1054 #ifdef LDAP_R_COMPILE
1055                 ldap_pvt_thread_mutex_lock( &ld->ld_req_mutex );
1056 #endif
1057                 rc = ldap_send_server_request( ld, ber, id,
1058                         origreq, &srv, NULL, &rinfo );
1059 #ifdef LDAP_R_COMPILE
1060                 ldap_pvt_thread_mutex_unlock( &ld->ld_req_mutex );
1061 #endif
1062                 if ( rc < 0 ) {
1063                         /* Failure, try next referral in the list */
1064                         Debug( LDAP_DEBUG_ANY, "Unable to chase referral \"%s\" (%d: %s)\n",
1065                                 refarray[i], ld->ld_errno, ldap_err2string( ld->ld_errno ) );
1066                         unfollowedcnt += ldap_append_referral( ld, &unfollowed, refarray[i] );
1067                         ldap_free_urllist( srv );
1068                         srv = NULL;
1069                         ld->ld_errno = LDAP_REFERRAL;
1070                 } else {
1071                         /* Success, no need to try this referral list further */
1072                         rc = 0;
1073                         ++count;
1074                         *hadrefp = 1;
1075
1076                         /* check if there is a queue of referrals that came in during bind */
1077                         if ( lc == NULL) {
1078                                 lc = find_connection( ld, srv, 1 );
1079                                 if ( lc == NULL ) {
1080                                         ld->ld_errno = LDAP_OPERATIONS_ERROR;
1081                                         rc = -1;
1082                                         goto done;
1083                                 }
1084                         }
1085
1086                         if ( lc->lconn_rebind_queue != NULL ) {
1087                                 /* Release resources of previous list */
1088                                 LDAP_VFREE( refarray );
1089                                 refarray = NULL;
1090                                 ldap_free_urllist( srv );
1091                                 srv = NULL;
1092
1093                                 /* Pull entries off end of queue so list always null terminated */
1094                                 for( j = 0; lc->lconn_rebind_queue[j] != NULL; j++ )
1095                                         ;
1096                                 refarray = lc->lconn_rebind_queue[j - 1];
1097                                 lc->lconn_rebind_queue[j-1] = NULL;
1098                                 /* we pulled off last entry from queue, free queue */
1099                                 if ( j == 1 ) {
1100                                         LDAP_FREE( lc->lconn_rebind_queue );
1101                                         lc->lconn_rebind_queue = NULL;
1102                                 }
1103                                 /* restart the loop the with new referral list */
1104                                 i = -1;
1105                                 continue;
1106                         }
1107                         break; /* referral followed, break out of for loop */
1108                 }
1109         } /* end for loop */
1110 done:
1111         LDAP_VFREE( refarray );
1112         ldap_free_urllist( srv );
1113         LDAP_FREE( *errstrp );
1114
1115         if( rc == 0 ) {
1116                 *errstrp = NULL;
1117                 LDAP_FREE( unfollowed );
1118                 return count;
1119         } else {
1120                 *errstrp = unfollowed;
1121                 return rc;
1122         }
1123 }
1124
1125 /*
1126  * XXX merging of errors in this routine needs to be improved
1127  */
1128 int
1129 ldap_chase_referrals( LDAP *ld,
1130         LDAPRequest *lr,
1131         char **errstrp,
1132         int sref,
1133         int *hadrefp )
1134 {
1135         int             rc, count, id;
1136         unsigned        len;
1137         char            *p, *ref, *unfollowed;
1138         LDAPRequest     *origreq;
1139         LDAPURLDesc     *srv;
1140         BerElement      *ber;
1141         LDAPreqinfo  rinfo;
1142         LDAPConn        *lc;
1143
1144         Debug( LDAP_DEBUG_TRACE, "ldap_chase_referrals\n", 0, 0, 0 );
1145
1146         ld->ld_errno = LDAP_SUCCESS;    /* optimistic */
1147         *hadrefp = 0;
1148
1149         if ( *errstrp == NULL ) {
1150                 return( 0 );
1151         }
1152
1153         len = strlen( *errstrp );
1154         for ( p = *errstrp; len >= LDAP_REF_STR_LEN; ++p, --len ) {
1155                 if ( strncasecmp( p, LDAP_REF_STR, LDAP_REF_STR_LEN ) == 0 ) {
1156                         *p = '\0';
1157                         p += LDAP_REF_STR_LEN;
1158                         break;
1159                 }
1160         }
1161
1162         if ( len < LDAP_REF_STR_LEN ) {
1163                 return( 0 );
1164         }
1165
1166         if ( lr->lr_parentcnt >= ld->ld_refhoplimit ) {
1167                 Debug( LDAP_DEBUG_ANY,
1168                     "more than %d referral hops (dropping)\n",
1169                     ld->ld_refhoplimit, 0, 0 );
1170                     /* XXX report as error in ld->ld_errno? */
1171                     return( 0 );
1172         }
1173
1174         /* find original request */
1175         for ( origreq = lr; origreq->lr_parent != NULL;
1176              origreq = origreq->lr_parent ) {
1177                 /* empty */;
1178         }
1179
1180         unfollowed = NULL;
1181         rc = count = 0;
1182
1183         /* parse out & follow referrals */
1184         for ( ref = p; rc == 0 && ref != NULL; ref = p ) {
1185                 p = strchr( ref, '\n' );
1186                 if ( p != NULL ) {
1187                         *p++ = '\0';
1188                 }
1189
1190                 rc = ldap_url_parse_ext( ref, &srv, LDAP_PVT_URL_PARSE_NOEMPTY_DN );
1191                 if ( rc != LDAP_URL_SUCCESS ) {
1192                         Debug( LDAP_DEBUG_TRACE,
1193                                 "ignoring %s referral <%s>\n",
1194                                 ref, rc == LDAP_URL_ERR_BADSCHEME ? "unknown" : "incorrect", 0 );
1195                         rc = ldap_append_referral( ld, &unfollowed, ref );
1196                         *hadrefp = 1;
1197                         continue;
1198                 }
1199
1200                 Debug( LDAP_DEBUG_TRACE,
1201                     "chasing LDAP referral: <%s>\n", ref, 0, 0 );
1202
1203                 *hadrefp = 1;
1204
1205                 /* See if we've already been here */
1206                 if (( lc = find_connection( ld, srv, 1 )) != NULL ) {
1207                         LDAPRequest *lp;
1208                         int looped = 0;
1209                         int len = srv->lud_dn ? strlen( srv->lud_dn ) : 0;
1210                         for ( lp = lr; lp; lp = lp->lr_parent ) {
1211                                 if ( lp->lr_conn == lc
1212                                         && len == lp->lr_dn.bv_len )
1213                                 {
1214                                         if ( len && strncmp( srv->lud_dn, lp->lr_dn.bv_val, len ) )
1215                                                         continue;
1216                                         looped = 1;
1217                                         break;
1218                                 }
1219                         }
1220                         if ( looped ) {
1221                                 ldap_free_urllist( srv );
1222                                 ld->ld_errno = LDAP_CLIENT_LOOP;
1223                                 rc = -1;
1224                                 continue;
1225                         }
1226                 }
1227
1228                 LDAP_NEXT_MSGID( ld, id );
1229                 ber = re_encode_request( ld, origreq->lr_ber,
1230                     id, sref, srv, &rinfo.ri_request );
1231
1232                 if ( ber == NULL ) {
1233                         return -1 ;
1234                 }
1235
1236                 /* copy the complete referral for rebind process */
1237                 rinfo.ri_url = LDAP_STRDUP( ref );
1238
1239                 rinfo.ri_msgid = origreq->lr_origid;
1240
1241 #ifdef LDAP_R_COMPILE
1242                 ldap_pvt_thread_mutex_lock( &ld->ld_req_mutex );
1243 #endif
1244                 rc = ldap_send_server_request( ld, ber, id,
1245                         lr, &srv, NULL, &rinfo );
1246 #ifdef LDAP_R_COMPILE
1247                 ldap_pvt_thread_mutex_unlock( &ld->ld_req_mutex );
1248 #endif
1249
1250                 LDAP_FREE( rinfo.ri_url );
1251
1252                 if( rc >= 0 ) {
1253                         ++count;
1254                 } else {
1255                         Debug( LDAP_DEBUG_ANY,
1256                                 "Unable to chase referral \"%s\" (%d: %s)\n",
1257                                 ref, ld->ld_errno, ldap_err2string( ld->ld_errno ) );
1258                         rc = ldap_append_referral( ld, &unfollowed, ref );
1259                 }
1260
1261                 ldap_free_urllist(srv);
1262         }
1263
1264         LDAP_FREE( *errstrp );
1265         *errstrp = unfollowed;
1266
1267         return(( rc == 0 ) ? count : rc );
1268 }
1269
1270
1271 int
1272 ldap_append_referral( LDAP *ld, char **referralsp, char *s )
1273 {
1274         int     first;
1275
1276         if ( *referralsp == NULL ) {
1277                 first = 1;
1278                 *referralsp = (char *)LDAP_MALLOC( strlen( s ) + LDAP_REF_STR_LEN
1279                     + 1 );
1280         } else {
1281                 first = 0;
1282                 *referralsp = (char *)LDAP_REALLOC( *referralsp,
1283                     strlen( *referralsp ) + strlen( s ) + 2 );
1284         }
1285
1286         if ( *referralsp == NULL ) {
1287                 ld->ld_errno = LDAP_NO_MEMORY;
1288                 return( -1 );
1289         }
1290
1291         if ( first ) {
1292                 strcpy( *referralsp, LDAP_REF_STR );
1293         } else {
1294                 strcat( *referralsp, "\n" );
1295         }
1296         strcat( *referralsp, s );
1297
1298         return( 0 );
1299 }
1300
1301
1302
1303 static BerElement *
1304 re_encode_request( LDAP *ld,
1305         BerElement *origber,
1306         ber_int_t msgid,
1307         int sref,
1308         LDAPURLDesc *srv,
1309         int *type )
1310 {
1311         /*
1312          * XXX this routine knows way too much about how the lber library works!
1313          */
1314         ber_int_t       along;
1315         ber_tag_t       tag;
1316         ber_tag_t       rtag;
1317         ber_int_t       ver;
1318         ber_int_t       scope;
1319         int             rc;
1320         BerElement      tmpber, *ber;
1321         struct berval           dn;
1322
1323         Debug( LDAP_DEBUG_TRACE,
1324             "re_encode_request: new msgid %ld, new dn <%s>\n",
1325             (long) msgid,
1326                 ( srv == NULL || srv->lud_dn == NULL) ? "NONE" : srv->lud_dn, 0 );
1327
1328         tmpber = *origber;
1329
1330         /*
1331          * all LDAP requests are sequences that start with a message id.
1332          * For all except delete, this is followed by a sequence that is
1333          * tagged with the operation code.  For delete, the provided DN
1334          * is not wrapped by a sequence.
1335          */
1336         rtag = ber_scanf( &tmpber, "{it", /*}*/ &along, &tag );
1337
1338         if ( rtag == LBER_ERROR ) {
1339                 ld->ld_errno = LDAP_DECODING_ERROR;
1340                 return( NULL );
1341         }
1342
1343         assert( tag != 0);
1344         if ( tag == LDAP_REQ_BIND ) {
1345                 /* bind requests have a version number before the DN & other stuff */
1346                 rtag = ber_scanf( &tmpber, "{im" /*}*/, &ver, &dn );
1347
1348         } else if ( tag == LDAP_REQ_DELETE ) {
1349                 /* delete requests don't have a DN wrapping sequence */
1350                 rtag = ber_scanf( &tmpber, "m", &dn );
1351
1352         } else if ( tag == LDAP_REQ_SEARCH ) {
1353                 /* search requests need to be re-scope-ed */
1354                 rtag = ber_scanf( &tmpber, "{me" /*"}"*/, &dn, &scope );
1355
1356                 if( srv->lud_scope != LDAP_SCOPE_DEFAULT ) {
1357                         /* use the scope provided in reference */
1358                         scope = srv->lud_scope;
1359
1360                 } else if ( sref ) {
1361                         /* use scope implied by previous operation
1362                          *   base -> base
1363                          *   one -> base
1364                          *   subtree -> subtree
1365                          *   subordinate -> subtree
1366                          */
1367                         switch( scope ) {
1368                         default:
1369                         case LDAP_SCOPE_BASE:
1370                         case LDAP_SCOPE_ONELEVEL:
1371                                 scope = LDAP_SCOPE_BASE;
1372                                 break;
1373                         case LDAP_SCOPE_SUBTREE:
1374                         case LDAP_SCOPE_SUBORDINATE:
1375                                 scope = LDAP_SCOPE_SUBTREE;
1376                                 break;
1377                         }
1378                 }
1379
1380         } else {
1381                 rtag = ber_scanf( &tmpber, "{m" /*}*/, &dn );
1382         }
1383
1384         if( rtag == LBER_ERROR ) {
1385                 ld->ld_errno = LDAP_DECODING_ERROR;
1386                 return NULL;
1387         }
1388
1389         /* restore character zero'd out by ber_scanf*/
1390         dn.bv_val[dn.bv_len] = tmpber.ber_tag;
1391
1392         if (( ber = ldap_alloc_ber_with_options( ld )) == NULL ) {
1393                 return NULL;
1394         }
1395
1396         if ( srv->lud_dn ) {
1397                 ber_str2bv( srv->lud_dn, 0, 0, &dn );
1398         }
1399
1400         if ( tag == LDAP_REQ_BIND ) {
1401                 rc = ber_printf( ber, "{it{iO" /*}}*/, msgid, tag, ver, &dn );
1402         } else if ( tag == LDAP_REQ_DELETE ) {
1403                 rc = ber_printf( ber, "{itON}", msgid, tag, &dn );
1404         } else if ( tag == LDAP_REQ_SEARCH ) {
1405                 rc = ber_printf( ber, "{it{Oe" /*}}*/, msgid, tag, &dn, scope );
1406         } else {
1407                 rc = ber_printf( ber, "{it{O" /*}}*/, msgid, tag, &dn );
1408         }
1409
1410         if ( rc == -1 ) {
1411                 ld->ld_errno = LDAP_ENCODING_ERROR;
1412                 ber_free( ber, 1 );
1413                 return NULL;
1414         }
1415
1416         if ( tag != LDAP_REQ_DELETE && (
1417                 ber_write(ber, tmpber.ber_ptr, ( tmpber.ber_end - tmpber.ber_ptr ), 0)
1418                 != ( tmpber.ber_end - tmpber.ber_ptr ) ||
1419             ber_printf( ber, /*{{*/ "N}N}" ) == -1 ) )
1420         {
1421                 ld->ld_errno = LDAP_ENCODING_ERROR;
1422                 ber_free( ber, 1 );
1423                 return NULL;
1424         }
1425
1426 #ifdef LDAP_DEBUG
1427         if ( ldap_debug & LDAP_DEBUG_PACKETS ) {
1428                 Debug( LDAP_DEBUG_ANY, "re_encode_request new request is:\n",
1429                     0, 0, 0 );
1430                 ber_log_dump( LDAP_DEBUG_BER, ldap_debug, ber, 0 );
1431         }
1432 #endif /* LDAP_DEBUG */
1433
1434         *type = tag;    /* return request type */
1435         return ber;
1436 }
1437
1438
1439 LDAPRequest *
1440 ldap_find_request_by_msgid( LDAP *ld, ber_int_t msgid )
1441 {
1442         LDAPRequest     *lr;
1443
1444 #ifdef LDAP_R_COMPILE
1445         ldap_pvt_thread_mutex_lock( &ld->ld_req_mutex );
1446 #endif
1447         for ( lr = ld->ld_requests; lr != NULL; lr = lr->lr_next ) {
1448                 if ( lr->lr_status == LDAP_REQST_COMPLETED ) {
1449                         continue;       /* Skip completed requests */
1450                 }
1451                 if ( msgid == lr->lr_msgid ) {
1452                         lr->lr_refcnt++;
1453                         break;
1454                 }
1455         }
1456 #ifdef LDAP_R_COMPILE
1457         ldap_pvt_thread_mutex_unlock( &ld->ld_req_mutex );
1458 #endif
1459
1460         return( lr );
1461 }
1462
1463 void
1464 ldap_return_request( LDAP *ld, LDAPRequest *lrx, int freeit )
1465 {
1466         LDAPRequest     *lr;
1467
1468 #ifdef LDAP_R_COMPILE
1469         ldap_pvt_thread_mutex_lock( &ld->ld_req_mutex );
1470 #endif
1471         for ( lr = ld->ld_requests; lr != NULL; lr = lr->lr_next ) {
1472                 if ( lr == lrx ) {
1473                         if ( lr->lr_refcnt > 0 ) {
1474                                 lr->lr_refcnt--;
1475
1476                         } else if ( lr->lr_refcnt < 0 ) {
1477                                 lr->lr_refcnt++;
1478                                 if ( lr->lr_refcnt == 0 ) {
1479                                         lr = NULL;
1480                                 }
1481                         }
1482                         break;
1483                 }
1484         }
1485         if ( lr == NULL ) {
1486                 ldap_free_request_int( ld, lrx );
1487
1488         } else if ( freeit ) {
1489                 ldap_free_request( ld, lrx );
1490         }
1491 #ifdef LDAP_R_COMPILE
1492         ldap_pvt_thread_mutex_unlock( &ld->ld_req_mutex );
1493 #endif
1494 }