]> git.sur5r.net Git - openldap/blob - libraries/libldap/request.c
e317ae864edd1a03392fe403db8093cba571b5c2
[openldap] / libraries / libldap / request.c
1 /* $OpenLDAP$ */
2 /* This work is part of OpenLDAP Software <http://www.openldap.org/>.
3  *
4  * Copyright 1998-2005 The OpenLDAP Foundation.
5  * All rights reserved.
6  *
7  * Redistribution and use in source and binary forms, with or without
8  * modification, are permitted only as authorized by the OpenLDAP
9  * Public License.
10  *
11  * A copy of this license is available in the file LICENSE in the
12  * top-level directory of the distribution or, alternatively, at
13  * <http://www.OpenLDAP.org/license.html>.
14  */
15 /* Portions Copyright (c) 1995 Regents of the University of Michigan.
16  * All rights reserved.
17  */
18 /* This notice applies to changes, created by or for Novell, Inc.,
19  * to preexisting works for which notices appear elsewhere in this file.
20  *
21  * Copyright (C) 1999, 2000 Novell, Inc. All Rights Reserved.
22  *
23  * THIS WORK IS SUBJECT TO U.S. AND INTERNATIONAL COPYRIGHT LAWS AND TREATIES.
24  * USE, MODIFICATION, AND REDISTRIBUTION OF THIS WORK IS SUBJECT TO VERSION
25  * 2.0.1 OF THE OPENLDAP PUBLIC LICENSE, A COPY OF WHICH IS AVAILABLE AT
26  * HTTP://WWW.OPENLDAP.ORG/LICENSE.HTML OR IN THE FILE "LICENSE" IN THE
27  * TOP-LEVEL DIRECTORY OF THE DISTRIBUTION. ANY USE OR EXPLOITATION OF THIS
28  * WORK OTHER THAN AS AUTHORIZED IN VERSION 2.0.1 OF THE OPENLDAP PUBLIC
29  * LICENSE, OR OTHER PRIOR WRITTEN CONSENT FROM NOVELL, COULD SUBJECT THE
30  * PERPETRATOR TO CRIMINAL AND CIVIL LIABILITY. 
31  *---
32  * Modification to OpenLDAP source by Novell, Inc.
33  * April 2000 sfs  Added code to chase V3 referrals
34  *  request.c - sending of ldap requests; handling of referrals
35  *---
36  * Note: A verbatim copy of version 2.0.1 of the OpenLDAP Public License 
37  * can be found in the file "build/LICENSE-2.0.1" in this distribution
38  * of OpenLDAP Software.
39  */
40
41 #include "portable.h"
42
43 #include <stdio.h>
44
45 #include <ac/stdlib.h>
46
47 #include <ac/errno.h>
48 #include <ac/socket.h>
49 #include <ac/string.h>
50 #include <ac/time.h>
51 #include <ac/unistd.h>
52
53 #include "ldap-int.h"
54 #include "lber.h"
55
56 static LDAPConn *find_connection LDAP_P(( LDAP *ld, LDAPURLDesc *srv, int any ));
57 static void use_connection LDAP_P(( LDAP *ld, LDAPConn *lc ));
58 static void ldap_free_request_int LDAP_P(( LDAP *ld, LDAPRequest *lr ));
59
60 static BerElement *
61 re_encode_request( LDAP *ld,
62         BerElement *origber,
63         ber_int_t msgid,
64         int sref,
65         LDAPURLDesc *srv,
66         int *type );
67
68 BerElement *
69 ldap_alloc_ber_with_options( LDAP *ld )
70 {
71         BerElement      *ber;
72
73     if (( ber = ber_alloc_t( ld->ld_lberoptions )) == NULL ) {
74                 ld->ld_errno = LDAP_NO_MEMORY;
75         }
76
77         return( ber );
78 }
79
80
81 void
82 ldap_set_ber_options( LDAP *ld, BerElement *ber )
83 {
84         ber->ber_options = ld->ld_lberoptions;
85 }
86
87
88 ber_int_t
89 ldap_send_initial_request(
90         LDAP *ld,
91         ber_tag_t msgtype,
92         const char *dn,
93         BerElement *ber,
94         ber_int_t msgid)
95 {
96         LDAPURLDesc     *servers;
97         int rc;
98
99         Debug( LDAP_DEBUG_TRACE, "ldap_send_initial_request\n", 0, 0, 0 );
100
101         if ( ber_sockbuf_ctrl( ld->ld_sb, LBER_SB_OPT_GET_FD, NULL ) == -1 ) {
102                 /* not connected yet */
103                 int rc = ldap_open_defconn( ld );
104
105                 if( rc < 0 ) {
106                         ber_free( ber, 1 );
107                         return( -1 );
108                 }
109
110                 Debug( LDAP_DEBUG_TRACE,
111                         "ldap_open_defconn: successful\n",
112                         0, 0, 0 );
113         }
114
115         {
116                 /*
117                  * use of DNS is turned off or this is an X.500 DN...
118                  * use our default connection
119                  */
120                 servers = NULL;
121         }       
122
123 #ifdef LDAP_CONNECTIONLESS
124         if (LDAP_IS_UDP(ld)) {
125                 if (msgtype == LDAP_REQ_BIND) {
126                         if (ld->ld_options.ldo_cldapdn)
127                                 ldap_memfree(ld->ld_options.ldo_cldapdn);
128                         ld->ld_options.ldo_cldapdn = ldap_strdup(dn);
129                         return 0;
130                 }
131                 if (msgtype != LDAP_REQ_ABANDON && msgtype != LDAP_REQ_SEARCH)
132                         return LDAP_PARAM_ERROR;
133         }
134 #endif
135 #ifdef LDAP_R_COMPILE
136         ldap_pvt_thread_mutex_lock( &ld->ld_req_mutex );
137 #endif
138         rc = ldap_send_server_request( ld, ber, msgid, NULL,
139                 servers, NULL, NULL );
140 #ifdef LDAP_R_COMPILE
141         ldap_pvt_thread_mutex_unlock( &ld->ld_req_mutex );
142 #endif
143         if (servers)
144                 ldap_free_urllist(servers);
145         return(rc);
146 }
147
148
149 int
150 ldap_int_flush_request(
151         LDAP *ld,
152         LDAPRequest *lr )
153 {
154         LDAPConn *lc = lr->lr_conn;
155
156         if ( ber_flush( lc->lconn_sb, lr->lr_ber, 0 ) != 0 ) {
157                 if ( errno == EAGAIN ) {
158                         /* need to continue write later */
159                         lr->lr_status = LDAP_REQST_WRITING;
160                         ldap_mark_select_write( ld, lc->lconn_sb );
161                         ld->ld_errno = LDAP_BUSY;
162                         return -2;
163                 } else {
164                         ld->ld_errno = LDAP_SERVER_DOWN;
165                         ldap_free_request( ld, lr );
166                         ldap_free_connection( ld, lc, 0, 0 );
167                         return( -1 );
168                 }
169         } else {
170                 if ( lr->lr_parent == NULL ) {
171                         lr->lr_ber->ber_end = lr->lr_ber->ber_ptr;
172                         lr->lr_ber->ber_ptr = lr->lr_ber->ber_buf;
173                 }
174                 lr->lr_status = LDAP_REQST_INPROGRESS;
175
176                 /* sent -- waiting for a response */
177                 ldap_mark_select_read( ld, lc->lconn_sb );
178         }
179         return 0;
180 }
181
182 int
183 ldap_send_server_request(
184         LDAP *ld,
185         BerElement *ber,
186         ber_int_t msgid,
187         LDAPRequest *parentreq,
188         LDAPURLDesc *srvlist,
189         LDAPConn *lc,
190         LDAPreqinfo *bind )
191 {
192         LDAPRequest     *lr;
193         int incparent, rc;
194
195         Debug( LDAP_DEBUG_TRACE, "ldap_send_server_request\n", 0, 0, 0 );
196
197         incparent = 0;
198         ld->ld_errno = LDAP_SUCCESS;    /* optimistic */
199
200         if ( lc == NULL ) {
201                 if ( srvlist == NULL ) {
202                         lc = ld->ld_defconn;
203                 } else {
204                         lc = find_connection( ld, srvlist, 1 );
205                         if ( lc == NULL ) {
206                                 if ( (bind != NULL) && (parentreq != NULL) ) {
207                                         /* Remember the bind in the parent */
208                                         incparent = 1;
209                                         ++parentreq->lr_outrefcnt;
210                                 }
211                                 lc = ldap_new_connection( ld, srvlist, 0, 1, bind );
212                         }
213                 }
214         }
215
216         if ( lc == NULL || lc->lconn_status != LDAP_CONNST_CONNECTED ) {
217                 ber_free( ber, 1 );
218                 if ( ld->ld_errno == LDAP_SUCCESS ) {
219                         ld->ld_errno = LDAP_SERVER_DOWN;
220                 }
221                 if ( incparent ) {
222                         /* Forget about the bind */
223                         --parentreq->lr_outrefcnt; 
224                 }
225                 return( -1 );
226         }
227
228         use_connection( ld, lc );
229
230         /* If we still have an incomplete write, try to finish it before
231          * dealing with the new request. If we don't finish here, return
232          * LDAP_BUSY and let the caller retry later. We only allow a single
233          * request to be in WRITING state.
234          */
235         rc = 0;
236         if ( ld->ld_requests &&
237                 ld->ld_requests->lr_status == LDAP_REQST_WRITING &&
238                 ldap_int_flush_request( ld, ld->ld_requests ) < 0 )
239         {
240                 rc = -1;
241         }
242         if ( rc ) return rc;
243
244         lr = (LDAPRequest *)LDAP_CALLOC( 1, sizeof( LDAPRequest ));
245         if ( lr == NULL ) {
246                 ld->ld_errno = LDAP_NO_MEMORY;
247                 ldap_free_connection( ld, lc, 0, 0 );
248                 ber_free( ber, 1 );
249                 if ( incparent ) {
250                         /* Forget about the bind */
251                         --parentreq->lr_outrefcnt; 
252                 }
253                 return( -1 );
254         } 
255         lr->lr_msgid = msgid;
256         lr->lr_status = LDAP_REQST_INPROGRESS;
257         lr->lr_res_errno = LDAP_SUCCESS;        /* optimistic */
258         lr->lr_ber = ber;
259         lr->lr_conn = lc;
260         if ( parentreq != NULL ) {      /* sub-request */
261                 if ( !incparent ) { 
262                         /* Increment if we didn't do it before the bind */
263                         ++parentreq->lr_outrefcnt;
264                 }
265                 lr->lr_origid = parentreq->lr_origid;
266                 lr->lr_parentcnt = ++parentreq->lr_parentcnt;
267                 lr->lr_parent = parentreq;
268                 lr->lr_refnext = parentreq->lr_child;
269                 parentreq->lr_child = lr;
270         } else {                        /* original request */
271                 lr->lr_origid = lr->lr_msgid;
272         }
273
274         /* Extract requestDN for future reference */
275         {
276                 BerElement tmpber = *ber;
277                 ber_int_t       bint;
278                 ber_tag_t       tag, rtag;
279
280                 ber_reset( &tmpber, 1 );
281                 rtag = ber_scanf( &tmpber, "{it", /*}*/ &bint, &tag );
282                 switch ( tag ) {
283                 case LDAP_REQ_BIND:
284                         rtag = ber_scanf( &tmpber, "{i" /*}*/, &bint );
285                         break;
286                 case LDAP_REQ_DELETE:
287                         break;
288                 default:
289                         rtag = ber_scanf( &tmpber, "{" /*}*/ );
290                 case LDAP_REQ_ABANDON:
291                         break;
292                 }
293                 if ( tag != LDAP_REQ_ABANDON ) {
294                         ber_skip_tag( &tmpber, &lr->lr_dn.bv_len );
295                         lr->lr_dn.bv_val = tmpber.ber_ptr;
296                 }
297         }
298
299         lr->lr_prev = NULL;
300         if (( lr->lr_next = ld->ld_requests ) != NULL ) {
301                 lr->lr_next->lr_prev = lr;
302         }
303         ld->ld_requests = lr;
304
305         ld->ld_errno = LDAP_SUCCESS;
306         if ( ldap_int_flush_request( ld, lr ) == -1 ) {
307                 msgid = -1;
308         }
309
310         return( msgid );
311 }
312
313 LDAPConn *
314 ldap_new_connection( LDAP *ld, LDAPURLDesc *srvlist, int use_ldsb,
315         int connect, LDAPreqinfo *bind )
316 {
317         LDAPConn        *lc;
318         LDAPURLDesc     *srv;
319
320         Debug( LDAP_DEBUG_TRACE, "ldap_new_connection %d %d %d\n",
321                 use_ldsb, connect, (bind != NULL) );
322         /*
323          * make a new LDAP server connection
324          * XXX open connection synchronously for now
325          */
326         lc = (LDAPConn *)LDAP_CALLOC( 1, sizeof( LDAPConn ) );
327         if ( lc == NULL ) {
328                 ld->ld_errno = LDAP_NO_MEMORY;
329                 return( NULL );
330         }
331         
332         if ( use_ldsb ) {
333                 assert( ld->ld_sb != NULL );
334                 lc->lconn_sb = ld->ld_sb;
335
336         } else {
337                 lc->lconn_sb = ber_sockbuf_alloc();
338                 if ( lc->lconn_sb == NULL ) {
339                         LDAP_FREE( (char *)lc );
340                         ld->ld_errno = LDAP_NO_MEMORY;
341                         return( NULL );
342                 }
343         }
344
345         if ( connect ) {
346                 for ( srv = srvlist; srv != NULL; srv = srv->lud_next ) {
347                         if ( ldap_int_open_connection( ld, lc, srv, 0 ) != -1 )
348                         {
349                                 break;
350                         }
351                 }
352
353                 if ( srv == NULL ) {
354                         if ( !use_ldsb ) {
355                                 ber_sockbuf_free( lc->lconn_sb );
356                         }
357                         LDAP_FREE( (char *)lc );
358                         ld->ld_errno = LDAP_SERVER_DOWN;
359                         return( NULL );
360                 }
361
362                 lc->lconn_server = ldap_url_dup( srv );
363         }
364
365         lc->lconn_status = LDAP_CONNST_CONNECTED;
366 #ifdef LDAP_R_COMPILE
367         ldap_pvt_thread_mutex_lock( &ld->ld_conn_mutex );
368 #endif
369         lc->lconn_next = ld->ld_conns;
370         ld->ld_conns = lc;
371 #ifdef LDAP_R_COMPILE
372         ldap_pvt_thread_mutex_unlock( &ld->ld_conn_mutex );
373 #endif
374
375         /*
376          * XXX for now, we always do a synchronous bind.  This will have
377          * to change in the long run...
378          */
379         if ( bind != NULL) {
380                 int             err = 0;
381                 LDAPConn        *savedefconn;
382
383                 /* Set flag to prevent additional referrals
384                  * from being processed on this
385                  * connection until the bind has completed
386                  */
387                 lc->lconn_rebind_inprogress = 1;
388                 /* V3 rebind function */
389                 if ( ld->ld_rebind_proc != NULL) {
390                         LDAPURLDesc     *srvfunc;
391
392                         srvfunc = ldap_url_dup( srvlist );
393                         if ( srvfunc == NULL ) {
394                                 ld->ld_errno = LDAP_NO_MEMORY;
395                                 err = -1;
396                         } else {
397                                 savedefconn = ld->ld_defconn;
398                                 ++lc->lconn_refcnt;     /* avoid premature free */
399                                 ld->ld_defconn = lc;
400
401                                 Debug( LDAP_DEBUG_TRACE, "Call application rebind_proc\n", 0, 0, 0);
402 #ifdef LDAP_R_COMPILE
403                                 ldap_pvt_thread_mutex_unlock( &ld->ld_req_mutex );
404                                 ldap_pvt_thread_mutex_unlock( &ld->ld_res_mutex );
405 #endif
406                                 err = (*ld->ld_rebind_proc)( ld,
407                                         bind->ri_url, bind->ri_request, bind->ri_msgid,
408                                         ld->ld_rebind_params );
409 #ifdef LDAP_R_COMPILE
410                                 ldap_pvt_thread_mutex_lock( &ld->ld_res_mutex );
411                                 ldap_pvt_thread_mutex_lock( &ld->ld_req_mutex );
412 #endif
413
414                                 ld->ld_defconn = savedefconn;
415                                 --lc->lconn_refcnt;
416
417                                 if ( err != 0 ) {
418                                         err = -1;
419                                         ldap_free_connection( ld, lc, 1, 0 );
420                                         lc = NULL;
421                                 }
422                                 ldap_free_urldesc( srvfunc );
423                         }
424                 } else {
425                         savedefconn = ld->ld_defconn;
426                         ++lc->lconn_refcnt;     /* avoid premature free */
427                         ld->ld_defconn = lc;
428
429                         Debug( LDAP_DEBUG_TRACE, "anonymous rebind via ldap_bind_s\n", 0, 0, 0);
430 #ifdef LDAP_R_COMPILE
431                         ldap_pvt_thread_mutex_unlock( &ld->ld_req_mutex );
432                         ldap_pvt_thread_mutex_unlock( &ld->ld_res_mutex );
433 #endif
434                         if ( ldap_bind_s( ld, "", "", LDAP_AUTH_SIMPLE ) != LDAP_SUCCESS ) {
435                                 err = -1;
436                         }
437 #ifdef LDAP_R_COMPILE
438                         ldap_pvt_thread_mutex_lock( &ld->ld_res_mutex );
439                         ldap_pvt_thread_mutex_lock( &ld->ld_req_mutex );
440 #endif
441                         ld->ld_defconn = savedefconn;
442                         --lc->lconn_refcnt;
443
444                         if ( err != 0 ) {
445                                 ldap_free_connection( ld, lc, 1, 0 );
446                                 lc = NULL;
447                         }
448                 }
449                 if ( lc != NULL )
450                         lc->lconn_rebind_inprogress = 0;
451         }
452
453         return( lc );
454 }
455
456
457 static LDAPConn *
458 find_connection( LDAP *ld, LDAPURLDesc *srv, int any )
459 /*
460  * return an existing connection (if any) to the server srv
461  * if "any" is non-zero, check for any server in the "srv" chain
462  */
463 {
464         LDAPConn        *lc;
465         LDAPURLDesc     *lcu, *lsu;
466         int lcu_port, lsu_port;
467         int found = 0;
468
469 #ifdef LDAP_R_COMPILE
470         ldap_pvt_thread_mutex_lock( &ld->ld_conn_mutex );
471 #endif
472         for ( lc = ld->ld_conns; lc != NULL; lc = lc->lconn_next ) {
473                 lcu = lc->lconn_server;
474                 lcu_port = ldap_pvt_url_scheme_port( lcu->lud_scheme,
475                         lcu->lud_port );
476
477                 for ( lsu = srv; lsu != NULL; lsu = lsu->lud_next ) {
478                         lsu_port = ldap_pvt_url_scheme_port( lsu->lud_scheme,
479                                 lsu->lud_port );
480
481                         if ( lsu_port == lcu_port
482                                 && strcmp( lcu->lud_scheme, lsu->lud_scheme ) == 0
483                                 && lcu->lud_host != NULL && *lcu->lud_host != '\0'
484                             && lsu->lud_host != NULL && *lsu->lud_host != '\0'
485                                 && strcasecmp( lsu->lud_host, lcu->lud_host ) == 0 )
486                         {
487                                 found = 1;
488                                 break;
489                         }
490
491                         if ( !any ) break;
492                 }
493                 if ( found )
494                         break;
495         }
496 #ifdef LDAP_R_COMPILE
497         ldap_pvt_thread_mutex_unlock( &ld->ld_conn_mutex );
498 #endif
499         return lc;
500 }
501
502
503
504 static void
505 use_connection( LDAP *ld, LDAPConn *lc )
506 {
507         ++lc->lconn_refcnt;
508         lc->lconn_lastused = time( NULL );
509 }
510
511
512 void
513 ldap_free_connection( LDAP *ld, LDAPConn *lc, int force, int unbind )
514 {
515         LDAPConn        *tmplc, *prevlc;
516
517         Debug( LDAP_DEBUG_TRACE,
518                 "ldap_free_connection %d %d\n",
519                 force, unbind, 0 );
520
521         if ( force || --lc->lconn_refcnt <= 0 ) {
522                 if ( lc->lconn_status == LDAP_CONNST_CONNECTED ) {
523                         ldap_mark_select_clear( ld, lc->lconn_sb );
524                         if ( unbind ) {
525                                 ldap_send_unbind( ld, lc->lconn_sb,
526                                                 NULL, NULL );
527                         }
528                 }
529
530                 if ( lc->lconn_ber != NULL ) {
531                         ber_free( lc->lconn_ber, 1 );
532                 }
533
534                 ldap_int_sasl_close( ld, lc );
535
536                 prevlc = NULL;
537 #ifdef LDAP_R_COMPILE
538         ldap_pvt_thread_mutex_lock( &ld->ld_conn_mutex );
539 #endif
540                 for ( tmplc = ld->ld_conns;
541                         tmplc != NULL;
542                         tmplc = tmplc->lconn_next )
543                 {
544                         if ( tmplc == lc ) {
545                                 if ( prevlc == NULL ) {
546                                     ld->ld_conns = tmplc->lconn_next;
547                                 } else {
548                                     prevlc->lconn_next = tmplc->lconn_next;
549                                 }
550                                 break;
551                         }
552                         prevlc = tmplc;
553                 }
554 #ifdef LDAP_R_COMPILE
555         ldap_pvt_thread_mutex_unlock( &ld->ld_conn_mutex );
556 #endif
557                 ldap_free_urllist( lc->lconn_server );
558 #ifdef LDAP_API_FEATURE_X_OPENLDAP_V2_KBIND
559                 if ( lc->lconn_krbinstance != NULL ) {
560                         LDAP_FREE( lc->lconn_krbinstance );
561                 }
562 #endif
563
564                 /* FIXME: is this at all possible? */
565                 if ( force ) {
566                         LDAPRequest     *lr;
567
568                         for ( lr = ld->ld_requests; lr; ) {
569                                 LDAPRequest     *lr_next = lr->lr_next;
570
571                                 if ( lr->lr_conn == lc ) {
572                                         ldap_free_request_int( ld, lr );
573                                 }
574
575                                 lr = lr_next;
576                         }
577                 }
578                 if ( lc->lconn_sb != ld->ld_sb ) {
579                         ber_sockbuf_free( lc->lconn_sb );
580                 }
581                 if ( lc->lconn_rebind_queue != NULL) {
582                         int i;
583                         for( i = 0; lc->lconn_rebind_queue[i] != NULL; i++ ) {
584                                 LDAP_VFREE( lc->lconn_rebind_queue[i] );
585                         }
586                         LDAP_FREE( lc->lconn_rebind_queue );
587                 }
588                 LDAP_FREE( lc );
589                 Debug( LDAP_DEBUG_TRACE,
590                         "ldap_free_connection: actually freed\n",
591                         0, 0, 0 );
592         } else {
593                 lc->lconn_lastused = time( NULL );
594                 Debug( LDAP_DEBUG_TRACE, "ldap_free_connection: refcnt %d\n",
595                                 lc->lconn_refcnt, 0, 0 );
596         }
597 }
598
599
600 #ifdef LDAP_DEBUG
601 void
602 ldap_dump_connection( LDAP *ld, LDAPConn *lconns, int all )
603 {
604         LDAPConn        *lc;
605         char            timebuf[32];
606
607         fprintf( stderr, "** ld %p Connection%s:\n", ld, all ? "s" : "" );
608         for ( lc = lconns; lc != NULL; lc = lc->lconn_next ) {
609                 if ( lc->lconn_server != NULL ) {
610                         fprintf( stderr, "* host: %s  port: %d%s\n",
611                             ( lc->lconn_server->lud_host == NULL ) ? "(null)"
612                             : lc->lconn_server->lud_host,
613                             lc->lconn_server->lud_port, ( lc->lconn_sb ==
614                             ld->ld_sb ) ? "  (default)" : "" );
615                 }
616                 fprintf( stderr, "  refcnt: %d  status: %s\n", lc->lconn_refcnt,
617                     ( lc->lconn_status == LDAP_CONNST_NEEDSOCKET ) ?
618                     "NeedSocket" : ( lc->lconn_status ==
619                     LDAP_CONNST_CONNECTING ) ? "Connecting" : "Connected" );
620                 fprintf( stderr, "  last used: %s",
621                     ldap_pvt_ctime( &lc->lconn_lastused, timebuf ));
622                 if( lc->lconn_rebind_inprogress ) {
623                         fprintf( stderr, "  rebind in progress\n");
624                         if( lc->lconn_rebind_queue != NULL) {
625                                 int i = 0;
626                                 for( ;lc->lconn_rebind_queue[i] != NULL; i++) {
627                                         int j = 0;
628                                         for( ;lc->lconn_rebind_queue[i][j] != 0; j++) {
629                                                 fprintf( stderr, "    queue %d entry %d - %s\n",
630                                                         i, j, lc->lconn_rebind_queue[i][j]);
631                                         }
632                                 }
633                         } else {
634                                 fprintf( stderr, "    queue is empty\n");
635                         }
636                 }
637                 fprintf(stderr, "\n");
638                 if ( !all ) {
639                         break;
640                 }
641         }
642 }
643
644
645 void
646 ldap_dump_requests_and_responses( LDAP *ld )
647 {
648         LDAPRequest     *lr;
649         LDAPMessage     *lm, *l;
650
651 #ifdef LDAP_R_COMPILE
652         ldap_pvt_thread_mutex_lock( &ld->ld_req_mutex );
653 #endif
654         fprintf( stderr, "** ld %p Outstanding Requests:\n", ld );
655         if (( lr = ld->ld_requests ) == NULL ) {
656                 fprintf( stderr, "   Empty\n" );
657         }
658         for ( ; lr != NULL; lr = lr->lr_next ) {
659             fprintf( stderr, " * msgid %d,  origid %d, status %s\n",
660                 lr->lr_msgid, lr->lr_origid,
661                 ( lr->lr_status == LDAP_REQST_INPROGRESS ) ? "InProgress" :
662                 ( lr->lr_status == LDAP_REQST_CHASINGREFS ) ? "ChasingRefs" :
663                 ( lr->lr_status == LDAP_REQST_NOTCONNECTED ) ? "NotConnected" :
664                 ( lr->lr_status == LDAP_REQST_WRITING) ? "Writing" :
665                 ( lr->lr_status == LDAP_REQST_COMPLETED ? "Request Completed" : "Invalid Status"));
666             fprintf( stderr, "   outstanding referrals %d, parent count %d\n",
667                     lr->lr_outrefcnt, lr->lr_parentcnt );
668         }
669 #ifdef LDAP_R_COMPILE
670         ldap_pvt_thread_mutex_unlock( &ld->ld_req_mutex );
671 #endif
672         fprintf( stderr, "** ld %p Response Queue:\n", ld );
673         if (( lm = ld->ld_responses ) == NULL ) {
674                 fprintf( stderr, "   Empty\n" );
675         }
676         for ( ; lm != NULL; lm = lm->lm_next ) {
677                 fprintf( stderr, " * msgid %d,  type %lu\n",
678                     lm->lm_msgid, (unsigned long) lm->lm_msgtype );
679                 if (( l = lm->lm_chain ) != NULL ) {
680                         fprintf( stderr, "   chained responses:\n" );
681                         for ( ; l != NULL; l = l->lm_chain ) {
682                                 fprintf( stderr,
683                                     "  * msgid %d,  type %lu\n",
684                                     l->lm_msgid,
685                                     (unsigned long) l->lm_msgtype );
686                         }
687                 }
688         }
689 }
690 #endif /* LDAP_DEBUG */
691
692 static void
693 ldap_free_request_int( LDAP *ld, LDAPRequest *lr )
694 {
695         if ( lr->lr_prev == NULL ) {
696                 /* free'ing the first request? */
697                 assert( ld->ld_requests == lr );
698                 ld->ld_requests = lr->lr_next;
699
700         } else {
701                 lr->lr_prev->lr_next = lr->lr_next;
702         }
703
704         if ( lr->lr_next != NULL ) {
705                 lr->lr_next->lr_prev = lr->lr_prev;
706         }
707
708         if ( lr->lr_ber != NULL ) {
709                 ber_free( lr->lr_ber, 1 );
710         }
711
712         if ( lr->lr_res_error != NULL ) {
713                 LDAP_FREE( lr->lr_res_error );
714         }
715
716         if ( lr->lr_res_matched != NULL ) {
717                 LDAP_FREE( lr->lr_res_matched );
718         }
719
720         LDAP_FREE( lr );
721 }
722
723 void
724 ldap_free_request( LDAP *ld, LDAPRequest *lr )
725 {
726         LDAPRequest     **ttmplr;
727
728         Debug( LDAP_DEBUG_TRACE, "ldap_free_request (origid %d, msgid %d)\n",
729                 lr->lr_origid, lr->lr_msgid, 0 );
730
731         /* free all referrals (child requests) */
732         while ( lr->lr_child )
733                 ldap_free_request( ld, lr->lr_child );
734
735         if ( lr->lr_parent != NULL ) {
736                 --lr->lr_parent->lr_outrefcnt;
737                 for ( ttmplr = &lr->lr_parent->lr_child; *ttmplr && *ttmplr != lr; ttmplr = &(*ttmplr)->lr_refnext ); 
738                 if ( *ttmplr == lr )  
739                         *ttmplr = lr->lr_refnext;
740         }
741         ldap_free_request_int( ld, lr );
742 }
743
744 /*
745  * call first time with *cntp = -1
746  * when returns *cntp == -1, no referrals are left
747  *
748  * NOTE: may replace *refsp, or shuffle the contents
749  * of the original array.
750  */
751 static int ldap_int_nextref(
752         LDAP                    *ld,
753         char                    ***refsp,
754         int                     *cntp,
755         void                    *params )
756 {
757         assert( refsp != NULL );
758         assert( *refsp != NULL );
759         assert( cntp != NULL );
760
761         if ( *cntp < -1 ) {
762                 *cntp = -1;
763                 return -1;
764         }
765
766         (*cntp)++;
767
768         if ( (*refsp)[ *cntp ] == NULL ) {
769                 *cntp = -1;
770         }
771
772         return 0;
773 }
774
775 /*
776  * Chase v3 referrals
777  *
778  * Parameters:
779  *  (IN) ld = LDAP connection handle
780  *  (IN) lr = LDAP Request structure
781  *  (IN) refs = array of pointers to referral strings that we will chase
782  *              The array will be free'd by this function when no longer needed
783  *  (IN) sref != 0 if following search reference
784  *  (OUT) errstrp = Place to return a string of referrals which could not be followed
785  *  (OUT) hadrefp = 1 if sucessfully followed referral
786  *
787  * Return value - number of referrals followed
788  */
789 int
790 ldap_chase_v3referrals( LDAP *ld, LDAPRequest *lr, char **refs, int sref, char **errstrp, int *hadrefp )
791 {
792         char            *unfollowed;
793         int              unfollowedcnt = 0;
794         LDAPRequest     *origreq;
795         LDAPURLDesc     *srv = NULL;
796         BerElement      *ber;
797         char            **refarray = NULL;
798         LDAPConn        *lc;
799         int                      rc, count, i, j, id;
800         LDAPreqinfo  rinfo;
801
802         ld->ld_errno = LDAP_SUCCESS;    /* optimistic */
803         *hadrefp = 0;
804
805         Debug( LDAP_DEBUG_TRACE, "ldap_chase_v3referrals\n", 0, 0, 0 );
806
807         unfollowed = NULL;
808         rc = count = 0;
809
810         /* If no referrals in array, return */
811         if ( (refs == NULL) || ( (refs)[0] == NULL) ) {
812                 rc = 0;
813                 goto done;
814         }
815
816         /* Check for hop limit exceeded */
817         if ( lr->lr_parentcnt >= ld->ld_refhoplimit ) {
818                 Debug( LDAP_DEBUG_ANY,
819                     "more than %d referral hops (dropping)\n", ld->ld_refhoplimit, 0, 0 );
820                 ld->ld_errno = LDAP_REFERRAL_LIMIT_EXCEEDED;
821             rc = -1;
822                 goto done;
823         }
824
825         /* find original request */
826         for ( origreq = lr;
827                 origreq->lr_parent != NULL;
828                 origreq = origreq->lr_parent )
829         {
830                 /* empty */ ;
831         }
832
833         refarray = refs;
834         refs = NULL;
835
836         if ( ld->ld_nextref_proc == NULL ) {
837                 ld->ld_nextref_proc = ldap_int_nextref;
838         }
839
840         /* parse out & follow referrals */
841         i = -1;
842         for ( ld->ld_nextref_proc( ld, &refarray, &i, ld->ld_nextref_params );
843                         i != -1;
844                         ld->ld_nextref_proc( ld, &refarray, &i, ld->ld_nextref_params ) )
845         {
846
847                 /* Parse the referral URL */
848                 if (( rc = ldap_url_parse_ext( refarray[i], &srv)) != LDAP_SUCCESS) {
849                         ld->ld_errno = rc;
850                         rc = -1;
851                         goto done;
852                 }
853
854                 if( srv->lud_crit_exts ) {
855                         /* we do not support any extensions */
856                         ld->ld_errno = LDAP_NOT_SUPPORTED;
857                         rc = -1;
858                         goto done;
859                 }
860
861                 /* treat ldap://hostpart and ldap://hostpart/ the same */
862                 if ( srv->lud_dn && srv->lud_dn[0] == '\0' ) {
863                         LDAP_FREE( srv->lud_dn );
864                         srv->lud_dn = NULL;
865                 }
866
867                 /* check connection for re-bind in progress */
868                 if (( lc = find_connection( ld, srv, 1 )) != NULL ) {
869                         /* See if we've already requested this DN with this conn */
870                         LDAPRequest *lp;
871                         int looped = 0;
872                         int len = srv->lud_dn ? strlen( srv->lud_dn ) : 0;
873                         for (lp = origreq; lp; ) {
874                                 if ( lp->lr_conn == lc ) {
875                                         if ( len == lp->lr_dn.bv_len ) {
876                                                 if ( len && strncmp( srv->lud_dn, lp->lr_dn.bv_val,
877                                                         len ))
878                                                         continue;
879                                                 looped = 1;
880                                                 break;
881                                         }
882                                 }
883                                 if ( lp == origreq )
884                                         lp = lp->lr_child;
885                                 else
886                                         lp = lr->lr_refnext;
887                         }
888                         if ( looped ) {
889                                 ldap_free_urllist( srv );
890                                 srv = NULL;
891                                 ld->ld_errno = LDAP_CLIENT_LOOP;
892                                 rc = -1;
893                                 continue;
894                         }
895
896                         if( lc->lconn_rebind_inprogress) {
897                                 /* We are already chasing a referral or search reference and a
898                                  * bind on that connection is in progress.  We must queue
899                                  * referrals on that connection, so we don't get a request
900                                  * going out before the bind operation completes. This happens
901                                  * if two search references come in one behind the other
902                                  * for the same server with different contexts.
903                                  */
904                                 Debug( LDAP_DEBUG_TRACE,
905                                         "ldap_chase_v3referrals: queue referral \"%s\"\n",
906                                         refarray[i], 0, 0);
907                                 if( lc->lconn_rebind_queue == NULL ) {
908                                         /* Create a referral list */
909                                         lc->lconn_rebind_queue =
910                                                 (char ***) LDAP_MALLOC( sizeof(void *) * 2);
911
912                                         if( lc->lconn_rebind_queue == NULL) {
913                                                 ld->ld_errno = LDAP_NO_MEMORY;
914                                                 rc = -1;
915                                                 goto done;
916                                         }
917
918                                         lc->lconn_rebind_queue[0] = refarray;
919                                         lc->lconn_rebind_queue[1] = NULL;
920                                         refarray = NULL;
921
922                                 } else {
923                                         /* Count how many referral arrays we already have */
924                                         for( j = 0; lc->lconn_rebind_queue[j] != NULL; j++) {
925                                                 /* empty */;
926                                         }
927
928                                         /* Add the new referral to the list */
929                                         lc->lconn_rebind_queue = (char ***) LDAP_REALLOC(
930                                                 lc->lconn_rebind_queue, sizeof(void *) * (j + 2));
931
932                                         if( lc->lconn_rebind_queue == NULL ) {
933                                                 ld->ld_errno = LDAP_NO_MEMORY;
934                                                 rc = -1;
935                                                 goto done;
936                                         }
937                                         lc->lconn_rebind_queue[j] = refarray;
938                                         lc->lconn_rebind_queue[j+1] = NULL;
939                                         refarray = NULL;
940                                 }
941
942                                 /* We have queued the referral/reference, now just return */
943                                 rc = 0;
944                                 *hadrefp = 1;
945                                 count = 1; /* Pretend we already followed referral */
946                                 goto done;
947                         }
948                 } 
949                 /* Re-encode the request with the new starting point of the search.
950                  * Note: In the future we also need to replace the filter if one
951                  * was provided with the search reference
952                  */
953
954                 /* For references we don't want old dn if new dn empty */
955                 if ( sref && srv->lud_dn == NULL ) {
956                         srv->lud_dn = LDAP_STRDUP( "" );
957                 }
958
959                 LDAP_NEXT_MSGID( ld, id );
960                 ber = re_encode_request( ld, origreq->lr_ber, id,
961                         sref, srv, &rinfo.ri_request );
962
963                 if( ber == NULL ) {
964                         ld->ld_errno = LDAP_ENCODING_ERROR;
965                         rc = -1;
966                         goto done;
967                 }
968
969                 Debug( LDAP_DEBUG_TRACE,
970                         "ldap_chase_v3referral: msgid %d, url \"%s\"\n",
971                         lr->lr_msgid, refarray[i], 0);
972
973                 /* Send the new request to the server - may require a bind */
974                 rinfo.ri_msgid = origreq->lr_origid;
975                 rinfo.ri_url = refarray[i];
976 #ifdef LDAP_R_COMPILE
977                 ldap_pvt_thread_mutex_lock( &ld->ld_req_mutex );
978 #endif
979                 rc = ldap_send_server_request( ld, ber, id,
980                         origreq, srv, NULL, &rinfo );
981 #ifdef LDAP_R_COMPILE
982                 ldap_pvt_thread_mutex_unlock( &ld->ld_req_mutex );
983 #endif
984                 if ( rc < 0 ) {
985                         /* Failure, try next referral in the list */
986                         Debug( LDAP_DEBUG_ANY, "Unable to chase referral \"%s\" (%d: %s)\n", 
987                                 refarray[i], ld->ld_errno, ldap_err2string( ld->ld_errno ) );
988                         unfollowedcnt += ldap_append_referral( ld, &unfollowed, refarray[i] );
989                         ldap_free_urllist( srv );
990                         srv = NULL;
991                         ld->ld_errno = LDAP_REFERRAL;
992                 } else {
993                         /* Success, no need to try this referral list further */
994                         rc = 0;
995                         ++count;
996                         *hadrefp = 1;
997
998                         /* check if there is a queue of referrals that came in during bind */
999                         if ( lc == NULL) {
1000                                 lc = find_connection( ld, srv, 1 );
1001                                 if ( lc == NULL ) {
1002                                         ld->ld_errno = LDAP_OPERATIONS_ERROR;
1003                                         rc = -1;
1004                                         goto done;
1005                                 }
1006                         }
1007
1008                         if ( lc->lconn_rebind_queue != NULL ) {
1009                                 /* Release resources of previous list */
1010                                 LDAP_VFREE( refarray );
1011                                 refarray = NULL;
1012                                 ldap_free_urllist( srv );
1013                                 srv = NULL;
1014
1015                                 /* Pull entries off end of queue so list always null terminated */
1016                                 for( j = 0; lc->lconn_rebind_queue[j] != NULL; j++ )
1017                                         ;
1018                                 refarray = lc->lconn_rebind_queue[j - 1];
1019                                 lc->lconn_rebind_queue[j-1] = NULL;
1020                                 /* we pulled off last entry from queue, free queue */
1021                                 if ( j == 1 ) {
1022                                         LDAP_FREE( lc->lconn_rebind_queue );
1023                                         lc->lconn_rebind_queue = NULL;
1024                                 }
1025                                 /* restart the loop the with new referral list */
1026                                 i = -1;
1027                                 continue;
1028                         }
1029                         break; /* referral followed, break out of for loop */
1030                 }
1031         } /* end for loop */
1032 done:
1033         LDAP_VFREE( refarray );
1034         ldap_free_urllist( srv );
1035         LDAP_FREE( *errstrp );
1036         
1037         if( rc == 0 ) {
1038                 *errstrp = NULL;
1039                 LDAP_FREE( unfollowed );
1040                 return count;
1041         } else {
1042                 *errstrp = unfollowed;
1043                 return rc;
1044         }
1045 }
1046
1047 /*
1048  * XXX merging of errors in this routine needs to be improved
1049  */
1050 int
1051 ldap_chase_referrals( LDAP *ld,
1052         LDAPRequest *lr,
1053         char **errstrp,
1054         int sref,
1055         int *hadrefp )
1056 {
1057         int             rc, count, id;
1058         unsigned        len;
1059         char            *p, *ref, *unfollowed;
1060         LDAPRequest     *origreq;
1061         LDAPURLDesc     *srv;
1062         BerElement      *ber;
1063         LDAPreqinfo  rinfo;
1064         LDAPConn        *lc;
1065
1066         Debug( LDAP_DEBUG_TRACE, "ldap_chase_referrals\n", 0, 0, 0 );
1067
1068         ld->ld_errno = LDAP_SUCCESS;    /* optimistic */
1069         *hadrefp = 0;
1070
1071         if ( *errstrp == NULL ) {
1072                 return( 0 );
1073         }
1074
1075         len = strlen( *errstrp );
1076         for ( p = *errstrp; len >= LDAP_REF_STR_LEN; ++p, --len ) {
1077                 if ( strncasecmp( p, LDAP_REF_STR, LDAP_REF_STR_LEN ) == 0 ) {
1078                         *p = '\0';
1079                         p += LDAP_REF_STR_LEN;
1080                         break;
1081                 }
1082         }
1083
1084         if ( len < LDAP_REF_STR_LEN ) {
1085                 return( 0 );
1086         }
1087
1088         if ( lr->lr_parentcnt >= ld->ld_refhoplimit ) {
1089                 Debug( LDAP_DEBUG_ANY,
1090                     "more than %d referral hops (dropping)\n",
1091                     ld->ld_refhoplimit, 0, 0 );
1092                     /* XXX report as error in ld->ld_errno? */
1093                     return( 0 );
1094         }
1095
1096         /* find original request */
1097         for ( origreq = lr; origreq->lr_parent != NULL;
1098              origreq = origreq->lr_parent ) {
1099                 /* empty */;
1100         }
1101
1102         unfollowed = NULL;
1103         rc = count = 0;
1104
1105         /* parse out & follow referrals */
1106         for ( ref = p; rc == 0 && ref != NULL; ref = p ) {
1107                 p = strchr( ref, '\n' );
1108                 if ( p != NULL ) {
1109                         *p++ = '\0';
1110                 }
1111
1112                 rc = ldap_url_parse_ext( ref, &srv );
1113
1114                 if ( rc != LDAP_URL_SUCCESS ) {
1115                         Debug( LDAP_DEBUG_TRACE,
1116                             "ignoring unknown referral <%s>\n", ref, 0, 0 );
1117                         rc = ldap_append_referral( ld, &unfollowed, ref );
1118                         *hadrefp = 1;
1119                         continue;
1120                 }
1121
1122                 if ( srv->lud_dn != NULL && srv->lud_dn == '\0' ) {
1123                         LDAP_FREE( srv->lud_dn );
1124                         srv->lud_dn = NULL;
1125                 }
1126
1127                 Debug( LDAP_DEBUG_TRACE,
1128                     "chasing LDAP referral: <%s>\n", ref, 0, 0 );
1129
1130                 *hadrefp = 1;
1131
1132                 /* See if we've already been here */
1133                 if (( lc = find_connection( ld, srv, 1 )) != NULL ) {
1134                         LDAPRequest *lp;
1135                         int looped = 0;
1136                         int len = srv->lud_dn ? strlen( srv->lud_dn ) : 0;
1137                         for (lp = lr; lp; lp = lp->lr_parent ) {
1138                                 if ( lp->lr_conn == lc ) {
1139                                         if ( len == lp->lr_dn.bv_len ) {
1140                                                 if ( len && strncmp( srv->lud_dn, lp->lr_dn.bv_val,
1141                                                         len ))
1142                                                         continue;
1143                                                 looped = 1;
1144                                                 break;
1145                                         }
1146                                 }
1147                         }
1148                         if ( looped ) {
1149                                 ldap_free_urllist(srv);
1150                                 ld->ld_errno = LDAP_CLIENT_LOOP;
1151                                 rc = -1;
1152                                 continue;
1153                         }
1154                 }
1155
1156                 LDAP_NEXT_MSGID( ld, id );
1157                 ber = re_encode_request( ld, origreq->lr_ber,
1158                     id, sref, srv, &rinfo.ri_request );
1159
1160                 if ( ber == NULL ) {
1161                         return -1 ;
1162                 }
1163
1164                 /* copy the complete referral for rebind process */
1165                 rinfo.ri_url = LDAP_STRDUP( ref );
1166
1167                 rinfo.ri_msgid = origreq->lr_origid;
1168
1169 #ifdef LDAP_R_COMPILE
1170                 ldap_pvt_thread_mutex_lock( &ld->ld_req_mutex );
1171 #endif
1172                 rc = ldap_send_server_request( ld, ber, id,
1173                         lr, srv, NULL, &rinfo );
1174 #ifdef LDAP_R_COMPILE
1175                 ldap_pvt_thread_mutex_unlock( &ld->ld_req_mutex );
1176 #endif
1177
1178                 LDAP_FREE( rinfo.ri_url );
1179
1180                 if( rc >= 0 ) {
1181                         ++count;
1182                 } else {
1183                         Debug( LDAP_DEBUG_ANY,
1184                                 "Unable to chase referral \"%s\" (%d: %s)\n", 
1185                                 ref, ld->ld_errno, ldap_err2string( ld->ld_errno ) );
1186                         rc = ldap_append_referral( ld, &unfollowed, ref );
1187                 }
1188
1189                 ldap_free_urllist(srv);
1190         }
1191
1192         LDAP_FREE( *errstrp );
1193         *errstrp = unfollowed;
1194
1195         return(( rc == 0 ) ? count : rc );
1196 }
1197
1198
1199 int
1200 ldap_append_referral( LDAP *ld, char **referralsp, char *s )
1201 {
1202         int     first;
1203
1204         if ( *referralsp == NULL ) {
1205                 first = 1;
1206                 *referralsp = (char *)LDAP_MALLOC( strlen( s ) + LDAP_REF_STR_LEN
1207                     + 1 );
1208         } else {
1209                 first = 0;
1210                 *referralsp = (char *)LDAP_REALLOC( *referralsp,
1211                     strlen( *referralsp ) + strlen( s ) + 2 );
1212         }
1213
1214         if ( *referralsp == NULL ) {
1215                 ld->ld_errno = LDAP_NO_MEMORY;
1216                 return( -1 );
1217         }
1218
1219         if ( first ) {
1220                 strcpy( *referralsp, LDAP_REF_STR );
1221         } else {
1222                 strcat( *referralsp, "\n" );
1223         }
1224         strcat( *referralsp, s );
1225
1226         return( 0 );
1227 }
1228
1229
1230
1231 static BerElement *
1232 re_encode_request( LDAP *ld,
1233         BerElement *origber,
1234         ber_int_t msgid,
1235         int sref,
1236         LDAPURLDesc *srv,
1237         int *type )
1238 {
1239         /*
1240          * XXX this routine knows way too much about how the lber library works!
1241          */
1242         ber_int_t       along;
1243         ber_tag_t       tag;
1244         ber_tag_t       rtag;
1245         ber_int_t       ver;
1246         ber_int_t       scope;
1247         int             rc;
1248         BerElement      tmpber, *ber;
1249         struct berval           orig_dn;
1250         char            *dn;
1251
1252         Debug( LDAP_DEBUG_TRACE,
1253             "re_encode_request: new msgid %ld, new dn <%s>\n",
1254             (long) msgid,
1255                 ( srv == NULL || srv->lud_dn == NULL) ? "NONE" : srv->lud_dn, 0 );
1256
1257         tmpber = *origber;
1258
1259         /*
1260          * all LDAP requests are sequences that start with a message id.
1261          * For all except delete, this is followed by a sequence that is
1262          * tagged with the operation code.  For delete, the provided DN
1263          * is not wrapped by a sequence.
1264          */
1265         rtag = ber_scanf( &tmpber, "{it", /*}*/ &along, &tag );
1266
1267         if ( rtag == LBER_ERROR ) {
1268                 ld->ld_errno = LDAP_DECODING_ERROR;
1269                 return( NULL );
1270         }
1271
1272         assert( tag != 0);
1273         if ( tag == LDAP_REQ_BIND ) {
1274                 /* bind requests have a version number before the DN & other stuff */
1275                 rtag = ber_scanf( &tmpber, "{im" /*}*/, &ver, &orig_dn );
1276
1277         } else if ( tag == LDAP_REQ_DELETE ) {
1278                 /* delete requests don't have a DN wrapping sequence */
1279                 rtag = ber_scanf( &tmpber, "m", &orig_dn );
1280
1281         } else if ( tag == LDAP_REQ_SEARCH ) {
1282                 /* search requests need to be re-scope-ed */
1283                 rtag = ber_scanf( &tmpber, "{me" /*"}"*/, &orig_dn, &scope );
1284
1285                 if( srv->lud_scope != LDAP_SCOPE_DEFAULT ) {
1286                         /* use the scope provided in reference */
1287                         scope = srv->lud_scope;
1288
1289                 } else if ( sref ) {
1290                         /* use scope implied by previous operation
1291                          *   base -> base
1292                          *   one -> base
1293                          *   subtree -> subtree
1294                          *   subordinate -> subtree
1295                          */
1296                         switch( scope ) {
1297                         default:
1298                         case LDAP_SCOPE_BASE:
1299                         case LDAP_SCOPE_ONELEVEL:
1300                                 scope = LDAP_SCOPE_BASE;
1301                                 break;
1302                         case LDAP_SCOPE_SUBTREE:
1303 #ifdef LDAP_SCOPE_SUBORDINATE
1304                         case LDAP_SCOPE_SUBORDINATE:
1305 #endif
1306                                 scope = LDAP_SCOPE_SUBTREE;
1307                                 break;
1308                         }
1309                 }
1310
1311         } else {
1312                 rtag = ber_scanf( &tmpber, "{m" /*}*/, &orig_dn );
1313         }
1314
1315         if( rtag == LBER_ERROR ) {
1316                 ld->ld_errno = LDAP_DECODING_ERROR;
1317                 return NULL;
1318         }
1319
1320         if (( ber = ldap_alloc_ber_with_options( ld )) == NULL ) {
1321                 return NULL;
1322         }
1323
1324         if ( srv->lud_dn == NULL ) {
1325                 dn = orig_dn.bv_val;
1326         } else {
1327                 dn = srv->lud_dn;
1328         }
1329
1330         if ( tag == LDAP_REQ_BIND ) {
1331                 rc = ber_printf( ber, "{it{is" /*}}*/, msgid, tag, ver, dn );
1332         } else if ( tag == LDAP_REQ_DELETE ) {
1333                 rc = ber_printf( ber, "{itsN}", msgid, tag, dn );
1334         } else if ( tag == LDAP_REQ_SEARCH ) {
1335                 rc = ber_printf( ber, "{it{se" /*}}*/, msgid, tag, dn, scope );
1336         } else {
1337                 rc = ber_printf( ber, "{it{s" /*}}*/, msgid, tag, dn );
1338         }
1339
1340         if ( rc == -1 ) {
1341                 ld->ld_errno = LDAP_ENCODING_ERROR;
1342                 ber_free( ber, 1 );
1343                 return NULL;
1344         }
1345
1346         if ( tag != LDAP_REQ_DELETE && (
1347                 ber_write(ber, tmpber.ber_ptr, ( tmpber.ber_end - tmpber.ber_ptr ), 0)
1348                 != ( tmpber.ber_end - tmpber.ber_ptr ) ||
1349             ber_printf( ber, /*{{*/ "N}N}" ) == -1 ) )
1350         {
1351                 ld->ld_errno = LDAP_ENCODING_ERROR;
1352                 ber_free( ber, 1 );
1353                 return NULL;
1354         }
1355
1356 #ifdef LDAP_DEBUG
1357         if ( ldap_debug & LDAP_DEBUG_PACKETS ) {
1358                 Debug( LDAP_DEBUG_ANY, "re_encode_request new request is:\n",
1359                     0, 0, 0 );
1360                 ber_log_dump( LDAP_DEBUG_BER, ldap_debug, ber, 0 );
1361         }
1362 #endif /* LDAP_DEBUG */
1363
1364         *type = tag;    /* return request type */
1365         return ber;
1366 }
1367
1368
1369 LDAPRequest *
1370 ldap_find_request_by_msgid( LDAP *ld, ber_int_t msgid )
1371 {
1372         LDAPRequest     *lr;
1373
1374 #ifdef LDAP_R_COMPILE
1375         ldap_pvt_thread_mutex_lock( &ld->ld_req_mutex );
1376 #endif
1377         for ( lr = ld->ld_requests; lr != NULL; lr = lr->lr_next ) {
1378                 if( lr->lr_status == LDAP_REQST_COMPLETED ) {
1379                         continue;       /* Skip completed requests */
1380                 }
1381                 if ( msgid == lr->lr_msgid ) {
1382                         break;
1383                 }
1384         }
1385 #ifdef LDAP_R_COMPILE
1386         ldap_pvt_thread_mutex_unlock( &ld->ld_req_mutex );
1387 #endif
1388
1389         return( lr );
1390 }
1391
1392