git.sur5r.net Git - openldap/blob - libraries/libldap/request.c

   1 /* $OpenLDAP$ */
   2 /* This work is part of OpenLDAP Software <http://www.openldap.org/>.
   3  *
   4  * Copyright 1998-2007 The OpenLDAP Foundation.
   5  * All rights reserved.
   6  *
   7  * Redistribution and use in source and binary forms, with or without
   8  * modification, are permitted only as authorized by the OpenLDAP
   9  * Public License.
  10  *
  11  * A copy of this license is available in the file LICENSE in the
  12  * top-level directory of the distribution or, alternatively, at
  13  * <http://www.OpenLDAP.org/license.html>.
  14  */
  15 /* Portions Copyright (c) 1995 Regents of the University of Michigan.
  16  * All rights reserved.
  17  */
  18 /* This notice applies to changes, created by or for Novell, Inc.,
  19  * to preexisting works for which notices appear elsewhere in this file.
  20  *
  21  * Copyright (C) 1999, 2000 Novell, Inc. All Rights Reserved.
  22  *
  23  * THIS WORK IS SUBJECT TO U.S. AND INTERNATIONAL COPYRIGHT LAWS AND TREATIES.
  24  * USE, MODIFICATION, AND REDISTRIBUTION OF THIS WORK IS SUBJECT TO VERSION
  25  * 2.0.1 OF THE OPENLDAP PUBLIC LICENSE, A COPY OF WHICH IS AVAILABLE AT
  26  * HTTP://WWW.OPENLDAP.ORG/LICENSE.HTML OR IN THE FILE "LICENSE" IN THE
  27  * TOP-LEVEL DIRECTORY OF THE DISTRIBUTION. ANY USE OR EXPLOITATION OF THIS
  28  * WORK OTHER THAN AS AUTHORIZED IN VERSION 2.0.1 OF THE OPENLDAP PUBLIC
  29  * LICENSE, OR OTHER PRIOR WRITTEN CONSENT FROM NOVELL, COULD SUBJECT THE
  30  * PERPETRATOR TO CRIMINAL AND CIVIL LIABILITY.
  31  *---
  32  * Modification to OpenLDAP source by Novell, Inc.
  33  * April 2000 sfs  Added code to chase V3 referrals
  34  *  request.c - sending of ldap requests; handling of referrals
  35  *---
  36  * Note: A verbatim copy of version 2.0.1 of the OpenLDAP Public License
  37  * can be found in the file "build/LICENSE-2.0.1" in this distribution
  38  * of OpenLDAP Software.
  39  */
  40
  41 #include "portable.h"
  42
  43 #include <stdio.h>
  44
  45 #include <ac/stdlib.h>
  46
  47 #include <ac/errno.h>
  48 #include <ac/socket.h>
  49 #include <ac/string.h>
  50 #include <ac/time.h>
  51 #include <ac/unistd.h>
  52
  53 #include "ldap-int.h"
  54 #include "lber.h"
  55
  56 static LDAPConn *find_connection LDAP_P(( LDAP *ld, LDAPURLDesc *srv, int any ));
  57 static void use_connection LDAP_P(( LDAP *ld, LDAPConn *lc ));
  58 static void ldap_free_request_int LDAP_P(( LDAP *ld, LDAPRequest *lr ));
  59
  60 static BerElement *
  61 re_encode_request( LDAP *ld,
  62         BerElement *origber,
  63         ber_int_t msgid,
  64         int sref,
  65         LDAPURLDesc *srv,
  66         int *type );
  67
  68 BerElement *
  69 ldap_alloc_ber_with_options( LDAP *ld )
  70 {
  71         BerElement      *ber;
  72
  73         ber = ber_alloc_t( ld->ld_lberoptions );
  74         if ( ber == NULL ) {
  75                 ld->ld_errno = LDAP_NO_MEMORY;
  76         }
  77
  78         return( ber );
  79 }
  80
  81
  82 void
  83 ldap_set_ber_options( LDAP *ld, BerElement *ber )
  84 {
  85         ber->ber_options = ld->ld_lberoptions;
  86 }
  87
  88
  89 ber_int_t
  90 ldap_send_initial_request(
  91         LDAP *ld,
  92         ber_tag_t msgtype,
  93         const char *dn,
  94         BerElement *ber,
  95         ber_int_t msgid)
  96 {
  97         int rc = 1;
  98
  99         Debug( LDAP_DEBUG_TRACE, "ldap_send_initial_request\n", 0, 0, 0 );
 100
 101 #ifdef LDAP_R_COMPILE
 102         ldap_pvt_thread_mutex_lock( &ld->ld_req_mutex );
 103 #endif
 104         if ( ber_sockbuf_ctrl( ld->ld_sb, LBER_SB_OPT_GET_FD, NULL ) == -1 ) {
 105                 /* not connected yet */
 106                 rc = ldap_open_defconn( ld );
 107
 108         }
 109 #ifdef LDAP_R_COMPILE
 110         ldap_pvt_thread_mutex_unlock( &ld->ld_req_mutex );
 111 #endif
 112         if( rc < 0 ) {
 113                 ber_free( ber, 1 );
 114                 return( -1 );
 115         } else if ( rc == 0 ) {
 116                 Debug( LDAP_DEBUG_TRACE,
 117                         "ldap_open_defconn: successful\n",
 118                         0, 0, 0 );
 119         }
 120
 121 #ifdef LDAP_CONNECTIONLESS
 122         if (LDAP_IS_UDP(ld)) {
 123                 if (msgtype == LDAP_REQ_BIND) {
 124                         if (ld->ld_options.ldo_cldapdn)
 125                                 ldap_memfree(ld->ld_options.ldo_cldapdn);
 126                         ld->ld_options.ldo_cldapdn = ldap_strdup(dn);
 127                         return 0;
 128                 }
 129                 if (msgtype != LDAP_REQ_ABANDON && msgtype != LDAP_REQ_SEARCH)
 130                         return LDAP_PARAM_ERROR;
 131         }
 132 #endif
 133 #ifdef LDAP_R_COMPILE
 134         ldap_pvt_thread_mutex_lock( &ld->ld_req_mutex );
 135 #endif
 136         rc = ldap_send_server_request( ld, ber, msgid, NULL,
 137                 NULL, NULL, NULL );
 138 #ifdef LDAP_R_COMPILE
 139         ldap_pvt_thread_mutex_unlock( &ld->ld_req_mutex );
 140 #endif
 141         return(rc);
 142 }
 143
 144
 145 int
 146 ldap_int_flush_request(
 147         LDAP *ld,
 148         LDAPRequest *lr )
 149 {
 150         LDAPConn *lc = lr->lr_conn;
 151
 152         if ( ber_flush2( lc->lconn_sb, lr->lr_ber, LBER_FLUSH_FREE_NEVER ) != 0 ) {
 153                 if ( sock_errno() == EAGAIN ) {
 154                         /* need to continue write later */
 155                         lr->lr_status = LDAP_REQST_WRITING;
 156                         ldap_mark_select_write( ld, lc->lconn_sb );
 157                         ld->ld_errno = LDAP_BUSY;
 158                         return -2;
 159                 } else {
 160                         ld->ld_errno = LDAP_SERVER_DOWN;
 161                         ldap_free_request( ld, lr );
 162                         ldap_free_connection( ld, lc, 0, 0 );
 163                         return( -1 );
 164                 }
 165         } else {
 166                 if ( lr->lr_parent == NULL ) {
 167                         lr->lr_ber->ber_end = lr->lr_ber->ber_ptr;
 168                         lr->lr_ber->ber_ptr = lr->lr_ber->ber_buf;
 169                 }
 170                 lr->lr_status = LDAP_REQST_INPROGRESS;
 171
 172                 /* sent -- waiting for a response */
 173                 ldap_mark_select_read( ld, lc->lconn_sb );
 174         }
 175         return 0;
 176 }
 177
 178 int
 179 ldap_send_server_request(
 180         LDAP *ld,
 181         BerElement *ber,
 182         ber_int_t msgid,
 183         LDAPRequest *parentreq,
 184         LDAPURLDesc **srvlist,
 185         LDAPConn *lc,
 186         LDAPreqinfo *bind )
 187 {
 188         LDAPRequest     *lr;
 189         int             incparent, rc;
 190
 191         Debug( LDAP_DEBUG_TRACE, "ldap_send_server_request\n", 0, 0, 0 );
 192
 193         incparent = 0;
 194         ld->ld_errno = LDAP_SUCCESS;    /* optimistic */
 195
 196         if ( lc == NULL ) {
 197                 if ( srvlist == NULL ) {
 198                         lc = ld->ld_defconn;
 199                 } else {
 200                         lc = find_connection( ld, *srvlist, 1 );
 201                         if ( lc == NULL ) {
 202                                 if ( (bind != NULL) && (parentreq != NULL) ) {
 203                                         /* Remember the bind in the parent */
 204                                         incparent = 1;
 205                                         ++parentreq->lr_outrefcnt;
 206                                 }
 207                                 lc = ldap_new_connection( ld, srvlist, 0, 1, bind );
 208                         }
 209                 }
 210         }
 211
 212         /* async connect... */
 213         if ( lc != NULL && lc->lconn_status == LDAP_CONNST_CONNECTING ) {
 214                 ber_socket_t    sd = AC_SOCKET_ERROR;
 215                 struct timeval  tv = { 0 };
 216
 217                 ber_sockbuf_ctrl( lc->lconn_sb, LBER_SB_OPT_GET_FD, &sd );
 218
 219                 /* poll ... */
 220                 switch ( ldap_int_poll( ld, sd, &tv ) ) {
 221                 case 0:
 222                         /* go on! */
 223                         lc->lconn_status = LDAP_CONNST_CONNECTED;
 224                         break;
 225
 226                 case -2:
 227                         /* async only occurs if a network timeout is set */
 228
 229                         /* honor network timeout */
 230                         if ( time( NULL ) - lc->lconn_created <= ld->ld_options.ldo_tm_net.tv_sec )
 231                         {
 232                                 /* caller will have to call again */
 233                                 ld->ld_errno = LDAP_X_CONNECTING;
 234                         }
 235                         /* fallthru */
 236
 237                 default:
 238                         /* error */
 239                         break;
 240                 }
 241         }
 242
 243         if ( lc == NULL || lc->lconn_status != LDAP_CONNST_CONNECTED ) {
 244                 if ( ld->ld_errno == LDAP_SUCCESS ) {
 245                         ld->ld_errno = LDAP_SERVER_DOWN;
 246                 }
 247
 248                 ber_free( ber, 1 );
 249                 if ( incparent ) {
 250                         /* Forget about the bind */
 251                         --parentreq->lr_outrefcnt;
 252                 }
 253                 return( -1 );
 254         }
 255
 256         use_connection( ld, lc );
 257
 258         /* If we still have an incomplete write, try to finish it before
 259          * dealing with the new request. If we don't finish here, return
 260          * LDAP_BUSY and let the caller retry later. We only allow a single
 261          * request to be in WRITING state.
 262          */
 263         rc = 0;
 264         if ( ld->ld_requests &&
 265                 ld->ld_requests->lr_status == LDAP_REQST_WRITING &&
 266                 ldap_int_flush_request( ld, ld->ld_requests ) < 0 )
 267         {
 268                 rc = -1;
 269         }
 270         if ( rc ) return rc;
 271
 272         lr = (LDAPRequest *)LDAP_CALLOC( 1, sizeof( LDAPRequest ) );
 273         if ( lr == NULL ) {
 274                 ld->ld_errno = LDAP_NO_MEMORY;
 275                 ldap_free_connection( ld, lc, 0, 0 );
 276                 ber_free( ber, 1 );
 277                 if ( incparent ) {
 278                         /* Forget about the bind */
 279                         --parentreq->lr_outrefcnt;
 280                 }
 281                 return( -1 );
 282         }
 283         lr->lr_msgid = msgid;
 284         lr->lr_status = LDAP_REQST_INPROGRESS;
 285         lr->lr_res_errno = LDAP_SUCCESS;        /* optimistic */
 286         lr->lr_ber = ber;
 287         lr->lr_conn = lc;
 288         if ( parentreq != NULL ) {      /* sub-request */
 289                 if ( !incparent ) {
 290                         /* Increment if we didn't do it before the bind */
 291                         ++parentreq->lr_outrefcnt;
 292                 }
 293                 lr->lr_origid = parentreq->lr_origid;
 294                 lr->lr_parentcnt = ++parentreq->lr_parentcnt;
 295                 lr->lr_parent = parentreq;
 296                 lr->lr_refnext = parentreq->lr_child;
 297                 parentreq->lr_child = lr;
 298         } else {                        /* original request */
 299                 lr->lr_origid = lr->lr_msgid;
 300         }
 301
 302         /* Extract requestDN for future reference */
 303         {
 304                 BerElement tmpber = *ber;
 305                 ber_int_t       bint;
 306                 ber_tag_t       tag, rtag;
 307
 308                 ber_reset( &tmpber, 1 );
 309                 rtag = ber_scanf( &tmpber, "{it", /*}*/ &bint, &tag );
 310                 switch ( tag ) {
 311                 case LDAP_REQ_BIND:
 312                         rtag = ber_scanf( &tmpber, "{i" /*}*/, &bint );
 313                         break;
 314                 case LDAP_REQ_DELETE:
 315                         break;
 316                 default:
 317                         rtag = ber_scanf( &tmpber, "{" /*}*/ );
 318                 case LDAP_REQ_ABANDON:
 319                         break;
 320                 }
 321                 if ( tag != LDAP_REQ_ABANDON ) {
 322                         ber_skip_tag( &tmpber, &lr->lr_dn.bv_len );
 323                         lr->lr_dn.bv_val = tmpber.ber_ptr;
 324                 }
 325         }
 326
 327         lr->lr_prev = NULL;
 328         lr->lr_next = ld->ld_requests;
 329         if ( lr->lr_next != NULL ) {
 330                 lr->lr_next->lr_prev = lr;
 331         }
 332         ld->ld_requests = lr;
 333
 334         ld->ld_errno = LDAP_SUCCESS;
 335         if ( ldap_int_flush_request( ld, lr ) == -1 ) {
 336                 msgid = -1;
 337         }
 338
 339         return( msgid );
 340 }
 341
 342 LDAPConn *
 343 ldap_new_connection( LDAP *ld, LDAPURLDesc **srvlist, int use_ldsb,
 344         int connect, LDAPreqinfo *bind )
 345 {
 346         LDAPConn        *lc;
 347         int             async = 0;
 348
 349         Debug( LDAP_DEBUG_TRACE, "ldap_new_connection %d %d %d\n",
 350                 use_ldsb, connect, (bind != NULL) );
 351         /*
 352          * make a new LDAP server connection
 353          * XXX open connection synchronously for now
 354          */
 355         lc = (LDAPConn *)LDAP_CALLOC( 1, sizeof( LDAPConn ) );
 356         if ( lc == NULL ) {
 357                 ld->ld_errno = LDAP_NO_MEMORY;
 358                 return( NULL );
 359         }
 360
 361         if ( use_ldsb ) {
 362                 assert( ld->ld_sb != NULL );
 363                 lc->lconn_sb = ld->ld_sb;
 364
 365         } else {
 366                 lc->lconn_sb = ber_sockbuf_alloc();
 367                 if ( lc->lconn_sb == NULL ) {
 368                         LDAP_FREE( (char *)lc );
 369                         ld->ld_errno = LDAP_NO_MEMORY;
 370                         return( NULL );
 371                 }
 372         }
 373
 374         if ( connect ) {
 375                 LDAPURLDesc     **srvp, *srv = NULL;
 376
 377                 async = LDAP_BOOL_GET( &ld->ld_options, LDAP_BOOL_CONNECT_ASYNC );
 378
 379                 for ( srvp = srvlist; *srvp != NULL; srvp = &(*srvp)->lud_next ) {
 380                         int             rc;
 381
 382                         rc = ldap_int_open_connection( ld, lc, *srvp, async );
 383                         if ( rc != -1 ) {
 384                                 srv = *srvp;
 385
 386                                 if ( ld->ld_urllist_proc && ( !async || rc != -2 ) ) {
 387                                         ld->ld_urllist_proc( ld, srvlist, srvp, ld->ld_urllist_params );
 388                                 }
 389
 390                                 break;
 391                         }
 392                 }
 393
 394                 if ( srv == NULL ) {
 395                         if ( !use_ldsb ) {
 396                                 ber_sockbuf_free( lc->lconn_sb );
 397                         }
 398                         LDAP_FREE( (char *)lc );
 399                         ld->ld_errno = LDAP_SERVER_DOWN;
 400                         return( NULL );
 401                 }
 402
 403                 lc->lconn_server = ldap_url_dup( srv );
 404         }
 405
 406         lc->lconn_status = async ? LDAP_CONNST_CONNECTING : LDAP_CONNST_CONNECTED;
 407 #ifdef LDAP_R_COMPILE
 408         ldap_pvt_thread_mutex_lock( &ld->ld_conn_mutex );
 409 #endif
 410         lc->lconn_next = ld->ld_conns;
 411         ld->ld_conns = lc;
 412 #ifdef LDAP_R_COMPILE
 413         ldap_pvt_thread_mutex_unlock( &ld->ld_conn_mutex );
 414 #endif
 415
 416         if ( bind != NULL ) {
 417                 int             err = 0;
 418                 LDAPConn        *savedefconn;
 419
 420                 /* Set flag to prevent additional referrals
 421                  * from being processed on this
 422                  * connection until the bind has completed
 423                  */
 424                 lc->lconn_rebind_inprogress = 1;
 425                 /* V3 rebind function */
 426                 if ( ld->ld_rebind_proc != NULL) {
 427                         LDAPURLDesc     *srvfunc;
 428
 429                         srvfunc = ldap_url_dup( *srvlist );
 430                         if ( srvfunc == NULL ) {
 431                                 ld->ld_errno = LDAP_NO_MEMORY;
 432                                 err = -1;
 433                         } else {
 434                                 savedefconn = ld->ld_defconn;
 435                                 ++lc->lconn_refcnt;     /* avoid premature free */
 436                                 ld->ld_defconn = lc;
 437
 438                                 Debug( LDAP_DEBUG_TRACE, "Call application rebind_proc\n", 0, 0, 0);
 439 #ifdef LDAP_R_COMPILE
 440                                 ldap_pvt_thread_mutex_unlock( &ld->ld_req_mutex );
 441                                 ldap_pvt_thread_mutex_unlock( &ld->ld_res_mutex );
 442 #endif
 443                                 err = (*ld->ld_rebind_proc)( ld,
 444                                         bind->ri_url, bind->ri_request, bind->ri_msgid,
 445                                         ld->ld_rebind_params );
 446 #ifdef LDAP_R_COMPILE
 447                                 ldap_pvt_thread_mutex_lock( &ld->ld_res_mutex );
 448                                 ldap_pvt_thread_mutex_lock( &ld->ld_req_mutex );
 449 #endif
 450
 451                                 ld->ld_defconn = savedefconn;
 452                                 --lc->lconn_refcnt;
 453
 454                                 if ( err != 0 ) {
 455                                         err = -1;
 456                                         ldap_free_connection( ld, lc, 1, 0 );
 457                                         lc = NULL;
 458                                 }
 459                                 ldap_free_urldesc( srvfunc );
 460                         }
 461
 462                 } else {
 463                         int             msgid, rc;
 464                         struct berval   passwd = BER_BVNULL;
 465
 466                         savedefconn = ld->ld_defconn;
 467                         ++lc->lconn_refcnt;     /* avoid premature free */
 468                         ld->ld_defconn = lc;
 469
 470                         Debug( LDAP_DEBUG_TRACE, "anonymous rebind via ldap_bind_s\n", 0, 0, 0);
 471 #ifdef LDAP_R_COMPILE
 472                         ldap_pvt_thread_mutex_unlock( &ld->ld_req_mutex );
 473                         ldap_pvt_thread_mutex_unlock( &ld->ld_res_mutex );
 474 #endif
 475                         rc = ldap_sasl_bind( ld, "", LDAP_SASL_SIMPLE, &passwd,
 476                                 NULL, NULL, &msgid );
 477                         if ( rc != LDAP_SUCCESS ) {
 478                                 err = -1;
 479
 480                         } else {
 481                                 for ( err = 1; err > 0; ) {
 482                                         struct timeval  tv = { 0, 100000 };
 483                                         LDAPMessage     *res = NULL;
 484
 485                                         switch ( ldap_result( ld, msgid, LDAP_MSG_ALL, &tv, &res ) ) {
 486                                         case -1:
 487                                                 err = -1;
 488                                                 break;
 489
 490                                         case 0:
 491 #ifdef LDAP_R_COMPILE
 492                                                 ldap_pvt_thread_yield();
 493 #endif
 494                                                 break;
 495
 496                                         case LDAP_RES_BIND:
 497                                                 rc = ldap_parse_result( ld, res, &err, NULL, NULL, NULL, NULL, 1 );
 498                                                 if ( rc != LDAP_SUCCESS ) {
 499                                                         err = -1;
 500
 501                                                 } else if ( err != LDAP_SUCCESS ) {
 502                                                         err = -1;
 503                                                 }
 504                                                 /* else err == LDAP_SUCCESS == 0 */
 505                                                 break;
 506
 507                                         default:
 508                                                 assert( 0 );
 509                                         }
 510                                 }
 511                         }
 512 #ifdef LDAP_R_COMPILE
 513                         ldap_pvt_thread_mutex_lock( &ld->ld_res_mutex );
 514                         ldap_pvt_thread_mutex_lock( &ld->ld_req_mutex );
 515 #endif
 516                         ld->ld_defconn = savedefconn;
 517                         --lc->lconn_refcnt;
 518
 519                         if ( err != 0 ) {
 520                                 ldap_free_connection( ld, lc, 1, 0 );
 521                                 lc = NULL;
 522                         }
 523                 }
 524                 if ( lc != NULL )
 525                         lc->lconn_rebind_inprogress = 0;
 526         }
 527
 528         return( lc );
 529 }
 530
 531
 532 static LDAPConn *
 533 find_connection( LDAP *ld, LDAPURLDesc *srv, int any )
 534 /*
 535  * return an existing connection (if any) to the server srv
 536  * if "any" is non-zero, check for any server in the "srv" chain
 537  */
 538 {
 539         LDAPConn        *lc;
 540         LDAPURLDesc     *lcu, *lsu;
 541         int lcu_port, lsu_port;
 542         int found = 0;
 543
 544 #ifdef LDAP_R_COMPILE
 545         ldap_pvt_thread_mutex_lock( &ld->ld_conn_mutex );
 546 #endif
 547         for ( lc = ld->ld_conns; lc != NULL; lc = lc->lconn_next ) {
 548                 lcu = lc->lconn_server;
 549                 lcu_port = ldap_pvt_url_scheme_port( lcu->lud_scheme,
 550                         lcu->lud_port );
 551
 552                 for ( lsu = srv; lsu != NULL; lsu = lsu->lud_next ) {
 553                         lsu_port = ldap_pvt_url_scheme_port( lsu->lud_scheme,
 554                                 lsu->lud_port );
 555
 556                         if ( lsu_port == lcu_port
 557                                 && strcmp( lcu->lud_scheme, lsu->lud_scheme ) == 0
 558                                 && lcu->lud_host != NULL && *lcu->lud_host != '\0'
 559                                 && lsu->lud_host != NULL && *lsu->lud_host != '\0'
 560                                 && strcasecmp( lsu->lud_host, lcu->lud_host ) == 0 )
 561                         {
 562                                 found = 1;
 563                                 break;
 564                         }
 565
 566                         if ( !any ) break;
 567                 }
 568                 if ( found )
 569                         break;
 570         }
 571 #ifdef LDAP_R_COMPILE
 572         ldap_pvt_thread_mutex_unlock( &ld->ld_conn_mutex );
 573 #endif
 574         return lc;
 575 }
 576
 577
 578
 579 static void
 580 use_connection( LDAP *ld, LDAPConn *lc )
 581 {
 582         ++lc->lconn_refcnt;
 583         lc->lconn_lastused = time( NULL );
 584 }
 585
 586
 587 void
 588 ldap_free_connection( LDAP *ld, LDAPConn *lc, int force, int unbind )
 589 {
 590         LDAPConn        *tmplc, *prevlc;
 591
 592         Debug( LDAP_DEBUG_TRACE,
 593                 "ldap_free_connection %d %d\n",
 594                 force, unbind, 0 );
 595
 596         if ( force || --lc->lconn_refcnt <= 0 ) {
 597                 /* remove from connections list first */
 598 #ifdef LDAP_R_COMPILE
 599                 ldap_pvt_thread_mutex_lock( &ld->ld_conn_mutex );
 600 #endif
 601
 602                 for ( prevlc = NULL, tmplc = ld->ld_conns;
 603                         tmplc != NULL;
 604                         tmplc = tmplc->lconn_next )
 605                 {
 606                         if ( tmplc == lc ) {
 607                                 if ( prevlc == NULL ) {
 608                                     ld->ld_conns = tmplc->lconn_next;
 609                                 } else {
 610                                     prevlc->lconn_next = tmplc->lconn_next;
 611                                 }
 612                                 break;
 613                         }
 614                         prevlc = tmplc;
 615                 }
 616 #ifdef LDAP_R_COMPILE
 617                 ldap_pvt_thread_mutex_unlock( &ld->ld_conn_mutex );
 618 #endif
 619
 620                 if ( lc->lconn_status == LDAP_CONNST_CONNECTED ) {
 621                         ldap_mark_select_clear( ld, lc->lconn_sb );
 622                         if ( unbind ) {
 623                                 ldap_send_unbind( ld, lc->lconn_sb,
 624                                                 NULL, NULL );
 625                         }
 626                 }
 627
 628                 if ( lc->lconn_ber != NULL ) {
 629                         ber_free( lc->lconn_ber, 1 );
 630                 }
 631
 632                 ldap_int_sasl_close( ld, lc );
 633
 634                 ldap_free_urllist( lc->lconn_server );
 635
 636                 /* FIXME: is this at all possible?
 637                  * ldap_ld_free() in unbind.c calls ldap_free_connection()
 638                  * with force == 1 __after__ explicitly calling
 639                  * ldap_free_request() on all requests */
 640                 if ( force ) {
 641                         LDAPRequest     *lr;
 642
 643                         for ( lr = ld->ld_requests; lr; ) {
 644                                 LDAPRequest     *lr_next = lr->lr_next;
 645
 646                                 if ( lr->lr_conn == lc ) {
 647                                         ldap_free_request_int( ld, lr );
 648                                 }
 649
 650                                 lr = lr_next;
 651                         }
 652                 }
 653
 654                 if ( lc->lconn_sb != ld->ld_sb ) {
 655                         ber_sockbuf_free( lc->lconn_sb );
 656                 }
 657
 658                 if ( lc->lconn_rebind_queue != NULL) {
 659                         int i;
 660                         for( i = 0; lc->lconn_rebind_queue[i] != NULL; i++ ) {
 661                                 LDAP_VFREE( lc->lconn_rebind_queue[i] );
 662                         }
 663                         LDAP_FREE( lc->lconn_rebind_queue );
 664                 }
 665
 666                 LDAP_FREE( lc );
 667
 668                 Debug( LDAP_DEBUG_TRACE,
 669                         "ldap_free_connection: actually freed\n",
 670                         0, 0, 0 );
 671
 672         } else {
 673                 lc->lconn_lastused = time( NULL );
 674                 Debug( LDAP_DEBUG_TRACE, "ldap_free_connection: refcnt %d\n",
 675                                 lc->lconn_refcnt, 0, 0 );
 676         }
 677 }
 678
 679
 680 #ifdef LDAP_DEBUG
 681 void
 682 ldap_dump_connection( LDAP *ld, LDAPConn *lconns, int all )
 683 {
 684         LDAPConn        *lc;
 685         char            timebuf[32];
 686
 687         Debug( LDAP_DEBUG_TRACE, "** ld %p Connection%s:\n", (void *)ld, all ? "s" : "", 0 );
 688         for ( lc = lconns; lc != NULL; lc = lc->lconn_next ) {
 689                 if ( lc->lconn_server != NULL ) {
 690                         Debug( LDAP_DEBUG_TRACE, "* host: %s  port: %d%s\n",
 691                                 ( lc->lconn_server->lud_host == NULL ) ? "(null)"
 692                                 : lc->lconn_server->lud_host,
 693                                 lc->lconn_server->lud_port, ( lc->lconn_sb ==
 694                                 ld->ld_sb ) ? "  (default)" : "" );
 695                 }
 696                 Debug( LDAP_DEBUG_TRACE, "  refcnt: %d  status: %s\n", lc->lconn_refcnt,
 697                         ( lc->lconn_status == LDAP_CONNST_NEEDSOCKET )
 698                                 ? "NeedSocket" :
 699                                 ( lc->lconn_status == LDAP_CONNST_CONNECTING )
 700                                         ? "Connecting" : "Connected", 0 );
 701                 Debug( LDAP_DEBUG_TRACE, "  last used: %s%s\n",
 702                         ldap_pvt_ctime( &lc->lconn_lastused, timebuf ),
 703                         lc->lconn_rebind_inprogress ? "  rebind in progress" : "", 0 );
 704                 if ( lc->lconn_rebind_inprogress ) {
 705                         if ( lc->lconn_rebind_queue != NULL) {
 706                                 int     i;
 707
 708                                 for ( i = 0; lc->lconn_rebind_queue[i] != NULL; i++ ) {
 709                                         int     j;
 710                                         for( j = 0; lc->lconn_rebind_queue[i][j] != 0; j++ ) {
 711                                                 Debug( LDAP_DEBUG_TRACE, "    queue %d entry %d - %s\n",
 712                                                         i, j, lc->lconn_rebind_queue[i][j] );
 713                                         }
 714                                 }
 715                         } else {
 716                                 Debug( LDAP_DEBUG_TRACE, "    queue is empty\n", 0, 0, 0 );
 717                         }
 718                 }
 719                 Debug( LDAP_DEBUG_TRACE, "\n", 0, 0, 0 );
 720                 if ( !all ) {
 721                         break;
 722                 }
 723         }
 724 }
 725
 726
 727 void
 728 ldap_dump_requests_and_responses( LDAP *ld )
 729 {
 730         LDAPRequest     *lr;
 731         LDAPMessage     *lm, *l;
 732         int             i;
 733
 734         Debug( LDAP_DEBUG_TRACE, "** ld %p Outstanding Requests:\n",
 735                 (void *)ld, 0, 0 );
 736         lr = ld->ld_requests;
 737         if ( lr == NULL ) {
 738                 Debug( LDAP_DEBUG_TRACE, "   Empty\n", 0, 0, 0 );
 739         }
 740         for ( i = 0; lr != NULL; lr = lr->lr_next, i++ ) {
 741                 Debug( LDAP_DEBUG_TRACE, " * msgid %d,  origid %d, status %s\n",
 742                         lr->lr_msgid, lr->lr_origid,
 743                         ( lr->lr_status == LDAP_REQST_INPROGRESS ) ? "InProgress" :
 744                         ( lr->lr_status == LDAP_REQST_CHASINGREFS ) ? "ChasingRefs" :
 745                         ( lr->lr_status == LDAP_REQST_NOTCONNECTED ) ? "NotConnected" :
 746                         ( lr->lr_status == LDAP_REQST_WRITING ) ? "Writing" :
 747                         ( lr->lr_status == LDAP_REQST_COMPLETED ) ? "RequestCompleted"
 748                                 : "InvalidStatus" );
 749                 Debug( LDAP_DEBUG_TRACE, "   outstanding referrals %d, parent count %d\n",
 750                         lr->lr_outrefcnt, lr->lr_parentcnt, 0 );
 751         }
 752         Debug( LDAP_DEBUG_TRACE, "  ld %p request count %d (abandoned %lu)\n",
 753                 (void *)ld, i, ld->ld_nabandoned );
 754         Debug( LDAP_DEBUG_TRACE, "** ld %p Response Queue:\n", (void *)ld, 0, 0 );
 755         if ( ( lm = ld->ld_responses ) == NULL ) {
 756                 Debug( LDAP_DEBUG_TRACE, "   Empty\n", 0, 0, 0 );
 757         }
 758         for ( i = 0; lm != NULL; lm = lm->lm_next, i++ ) {
 759                 Debug( LDAP_DEBUG_TRACE, " * msgid %d,  type %lu\n",
 760                     lm->lm_msgid, (unsigned long)lm->lm_msgtype, 0 );
 761                 if ( lm->lm_chain != NULL ) {
 762                         Debug( LDAP_DEBUG_TRACE, "   chained responses:\n", 0, 0, 0 );
 763                         for ( l = lm->lm_chain; l != NULL; l = l->lm_chain ) {
 764                                 Debug( LDAP_DEBUG_TRACE,
 765                                         "  * msgid %d,  type %lu\n",
 766                                         l->lm_msgid,
 767                                         (unsigned long)l->lm_msgtype, 0 );
 768                         }
 769                 }
 770         }
 771         Debug( LDAP_DEBUG_TRACE, "  ld %p response count %d\n", (void *)ld, i, 0 );
 772 }
 773 #endif /* LDAP_DEBUG */
 774
 775 static void
 776 ldap_free_request_int( LDAP *ld, LDAPRequest *lr )
 777 {
 778         /* if lr_refcnt > 0, the request has been looked up
 779          * by ldap_find_request_by_msgid(); if in the meanwhile
 780          * the request is free()'d by someone else, just decrease
 781          * the reference count and extract it from the request
 782          * list; later on, it will be freed. */
 783         if ( lr->lr_prev == NULL ) {
 784                 if ( lr->lr_refcnt == 0 ) {
 785                         /* free'ing the first request? */
 786                         assert( ld->ld_requests == lr );
 787                 }
 788
 789                 if ( ld->ld_requests == lr ) {
 790                         ld->ld_requests = lr->lr_next;
 791                 }
 792
 793         } else {
 794                 lr->lr_prev->lr_next = lr->lr_next;
 795         }
 796
 797         if ( lr->lr_next != NULL ) {
 798                 lr->lr_next->lr_prev = lr->lr_prev;
 799         }
 800
 801         if ( lr->lr_refcnt > 0 ) {
 802                 lr->lr_refcnt = -lr->lr_refcnt;
 803
 804                 lr->lr_prev = NULL;
 805                 lr->lr_next = NULL;
 806
 807                 return;
 808         }
 809
 810         if ( lr->lr_ber != NULL ) {
 811                 ber_free( lr->lr_ber, 1 );
 812                 lr->lr_ber = NULL;
 813         }
 814
 815         if ( lr->lr_res_error != NULL ) {
 816                 LDAP_FREE( lr->lr_res_error );
 817                 lr->lr_res_error = NULL;
 818         }
 819
 820         if ( lr->lr_res_matched != NULL ) {
 821                 LDAP_FREE( lr->lr_res_matched );
 822                 lr->lr_res_matched = NULL;
 823         }
 824
 825         LDAP_FREE( lr );
 826 }
 827
 828 void
 829 ldap_free_request( LDAP *ld, LDAPRequest *lr )
 830 {
 831 #ifdef LDAP_R_COMPILE
 832         LDAP_PVT_THREAD_ASSERT_MUTEX_OWNER( &ld->ld_req_mutex );
 833 #endif
 834
 835         Debug( LDAP_DEBUG_TRACE, "ldap_free_request (origid %d, msgid %d)\n",
 836                 lr->lr_origid, lr->lr_msgid, 0 );
 837
 838         /* free all referrals (child requests) */
 839         while ( lr->lr_child ) {
 840                 ldap_free_request( ld, lr->lr_child );
 841         }
 842
 843         if ( lr->lr_parent != NULL ) {
 844                 LDAPRequest     **lrp;
 845
 846                 --lr->lr_parent->lr_outrefcnt;
 847                 for ( lrp = &lr->lr_parent->lr_child;
 848                         *lrp && *lrp != lr;
 849                         lrp = &(*lrp)->lr_refnext );
 850
 851                 if ( *lrp == lr ) {
 852                         *lrp = lr->lr_refnext;
 853                 }
 854         }
 855         ldap_free_request_int( ld, lr );
 856 }
 857
 858 /*
 859  * call first time with *cntp = -1
 860  * when returns *cntp == -1, no referrals are left
 861  *
 862  * NOTE: may replace *refsp, or shuffle the contents
 863  * of the original array.
 864  */
 865 static int ldap_int_nextref(
 866         LDAP                    *ld,
 867         char                    ***refsp,
 868         int                     *cntp,
 869         void                    *params )
 870 {
 871         assert( refsp != NULL );
 872         assert( *refsp != NULL );
 873         assert( cntp != NULL );
 874
 875         if ( *cntp < -1 ) {
 876                 *cntp = -1;
 877                 return -1;
 878         }
 879
 880         (*cntp)++;
 881
 882         if ( (*refsp)[ *cntp ] == NULL ) {
 883                 *cntp = -1;
 884         }
 885
 886         return 0;
 887 }
 888
 889 /*
 890  * Chase v3 referrals
 891  *
 892  * Parameters:
 893  *  (IN) ld = LDAP connection handle
 894  *  (IN) lr = LDAP Request structure
 895  *  (IN) refs = array of pointers to referral strings that we will chase
 896  *              The array will be free'd by this function when no longer needed
 897  *  (IN) sref != 0 if following search reference
 898  *  (OUT) errstrp = Place to return a string of referrals which could not be followed
 899  *  (OUT) hadrefp = 1 if sucessfully followed referral
 900  *
 901  * Return value - number of referrals followed
 902  */
 903 int
 904 ldap_chase_v3referrals( LDAP *ld, LDAPRequest *lr, char **refs, int sref, char **errstrp, int *hadrefp )
 905 {
 906         char            *unfollowed;
 907         int              unfollowedcnt = 0;
 908         LDAPRequest     *origreq;
 909         LDAPURLDesc     *srv = NULL;
 910         BerElement      *ber;
 911         char            **refarray = NULL;
 912         LDAPConn        *lc;
 913         int                      rc, count, i, j, id;
 914         LDAPreqinfo  rinfo;
 915
 916         ld->ld_errno = LDAP_SUCCESS;    /* optimistic */
 917         *hadrefp = 0;
 918
 919         Debug( LDAP_DEBUG_TRACE, "ldap_chase_v3referrals\n", 0, 0, 0 );
 920
 921         unfollowed = NULL;
 922         rc = count = 0;
 923
 924         /* If no referrals in array, return */
 925         if ( (refs == NULL) || ( (refs)[0] == NULL) ) {
 926                 rc = 0;
 927                 goto done;
 928         }
 929
 930         /* Check for hop limit exceeded */
 931         if ( lr->lr_parentcnt >= ld->ld_refhoplimit ) {
 932                 Debug( LDAP_DEBUG_ANY,
 933                     "more than %d referral hops (dropping)\n", ld->ld_refhoplimit, 0, 0 );
 934                 ld->ld_errno = LDAP_REFERRAL_LIMIT_EXCEEDED;
 935                 rc = -1;
 936                 goto done;
 937         }
 938
 939         /* find original request */
 940         for ( origreq = lr;
 941                 origreq->lr_parent != NULL;
 942                 origreq = origreq->lr_parent )
 943         {
 944                 /* empty */ ;
 945         }
 946
 947         refarray = refs;
 948         refs = NULL;
 949
 950         if ( ld->ld_nextref_proc == NULL ) {
 951                 ld->ld_nextref_proc = ldap_int_nextref;
 952         }
 953
 954         /* parse out & follow referrals */
 955         i = -1;
 956         for ( ld->ld_nextref_proc( ld, &refarray, &i, ld->ld_nextref_params );
 957                         i != -1;
 958                         ld->ld_nextref_proc( ld, &refarray, &i, ld->ld_nextref_params ) )
 959         {
 960
 961                 /* Parse the referral URL */
 962                 rc = ldap_url_parse_ext( refarray[i], &srv, LDAP_PVT_URL_PARSE_NOEMPTY_DN );
 963                 if ( rc != LDAP_URL_SUCCESS ) {
 964                         /* ldap_url_parse_ext() returns LDAP_URL_* errors
 965                          * which do not map on API errors */
 966                         ld->ld_errno = LDAP_PARAM_ERROR;
 967                         rc = -1;
 968                         goto done;
 969                 }
 970
 971                 if( srv->lud_crit_exts ) {
 972                         /* we do not support any extensions */
 973                         ld->ld_errno = LDAP_NOT_SUPPORTED;
 974                         rc = -1;
 975                         goto done;
 976                 }
 977
 978                 /* check connection for re-bind in progress */
 979                 if (( lc = find_connection( ld, srv, 1 )) != NULL ) {
 980                         /* See if we've already requested this DN with this conn */
 981                         LDAPRequest *lp;
 982                         int looped = 0;
 983                         int len = srv->lud_dn ? strlen( srv->lud_dn ) : 0;
 984                         for ( lp = origreq; lp; ) {
 985                                 if ( lp->lr_conn == lc
 986                                         && len == lp->lr_dn.bv_len
 987                                         && len
 988                                         && strncmp( srv->lud_dn, lp->lr_dn.bv_val, len ) == 0 )
 989                                 {
 990                                         looped = 1;
 991                                         break;
 992                                 }
 993                                 if ( lp == origreq ) {
 994                                         lp = lp->lr_child;
 995                                 } else {
 996                                         lp = lr->lr_refnext;
 997                                 }
 998                         }
 999                         if ( looped ) {
1000                                 ldap_free_urllist( srv );
1001                                 srv = NULL;
1002                                 ld->ld_errno = LDAP_CLIENT_LOOP;
1003                                 rc = -1;
1004                                 continue;
1005                         }
1006
1007                         if ( lc->lconn_rebind_inprogress ) {
1008                                 /* We are already chasing a referral or search reference and a
1009                                  * bind on that connection is in progress.  We must queue
1010                                  * referrals on that connection, so we don't get a request
1011                                  * going out before the bind operation completes. This happens
1012                                  * if two search references come in one behind the other
1013                                  * for the same server with different contexts.
1014                                  */
1015                                 Debug( LDAP_DEBUG_TRACE,
1016                                         "ldap_chase_v3referrals: queue referral \"%s\"\n",
1017                                         refarray[i], 0, 0);
1018                                 if( lc->lconn_rebind_queue == NULL ) {
1019                                         /* Create a referral list */
1020                                         lc->lconn_rebind_queue =
1021                                                 (char ***) LDAP_MALLOC( sizeof(void *) * 2);
1022
1023                                         if( lc->lconn_rebind_queue == NULL) {
1024                                                 ld->ld_errno = LDAP_NO_MEMORY;
1025                                                 rc = -1;
1026                                                 goto done;
1027                                         }
1028
1029                                         lc->lconn_rebind_queue[0] = refarray;
1030                                         lc->lconn_rebind_queue[1] = NULL;
1031                                         refarray = NULL;
1032
1033                                 } else {
1034                                         /* Count how many referral arrays we already have */
1035                                         for( j = 0; lc->lconn_rebind_queue[j] != NULL; j++) {
1036                                                 /* empty */;
1037                                         }
1038
1039                                         /* Add the new referral to the list */
1040                                         lc->lconn_rebind_queue = (char ***) LDAP_REALLOC(
1041                                                 lc->lconn_rebind_queue, sizeof(void *) * (j + 2));
1042
1043                                         if( lc->lconn_rebind_queue == NULL ) {
1044                                                 ld->ld_errno = LDAP_NO_MEMORY;
1045                                                 rc = -1;
1046                                                 goto done;
1047                                         }
1048                                         lc->lconn_rebind_queue[j] = refarray;
1049                                         lc->lconn_rebind_queue[j+1] = NULL;
1050                                         refarray = NULL;
1051                                 }
1052
1053                                 /* We have queued the referral/reference, now just return */
1054                                 rc = 0;
1055                                 *hadrefp = 1;
1056                                 count = 1; /* Pretend we already followed referral */
1057                                 goto done;
1058                         }
1059                 }
1060                 /* Re-encode the request with the new starting point of the search.
1061                  * Note: In the future we also need to replace the filter if one
1062                  * was provided with the search reference
1063                  */
1064
1065                 /* For references we don't want old dn if new dn empty */
1066                 if ( sref && srv->lud_dn == NULL ) {
1067                         srv->lud_dn = LDAP_STRDUP( "" );
1068                 }
1069
1070                 LDAP_NEXT_MSGID( ld, id );
1071                 ber = re_encode_request( ld, origreq->lr_ber, id,
1072                         sref, srv, &rinfo.ri_request );
1073
1074                 if( ber == NULL ) {
1075                         ld->ld_errno = LDAP_ENCODING_ERROR;
1076                         rc = -1;
1077                         goto done;
1078                 }
1079
1080                 Debug( LDAP_DEBUG_TRACE,
1081                         "ldap_chase_v3referral: msgid %d, url \"%s\"\n",
1082                         lr->lr_msgid, refarray[i], 0);
1083
1084                 /* Send the new request to the server - may require a bind */
1085                 rinfo.ri_msgid = origreq->lr_origid;
1086                 rinfo.ri_url = refarray[i];
1087 #ifdef LDAP_R_COMPILE
1088                 ldap_pvt_thread_mutex_lock( &ld->ld_req_mutex );
1089 #endif
1090                 rc = ldap_send_server_request( ld, ber, id,
1091                         origreq, &srv, NULL, &rinfo );
1092 #ifdef LDAP_R_COMPILE
1093                 ldap_pvt_thread_mutex_unlock( &ld->ld_req_mutex );
1094 #endif
1095                 if ( rc < 0 ) {
1096                         /* Failure, try next referral in the list */
1097                         Debug( LDAP_DEBUG_ANY, "Unable to chase referral \"%s\" (%d: %s)\n",
1098                                 refarray[i], ld->ld_errno, ldap_err2string( ld->ld_errno ) );
1099                         unfollowedcnt += ldap_append_referral( ld, &unfollowed, refarray[i] );
1100                         ldap_free_urllist( srv );
1101                         srv = NULL;
1102                         ld->ld_errno = LDAP_REFERRAL;
1103                 } else {
1104                         /* Success, no need to try this referral list further */
1105                         rc = 0;
1106                         ++count;
1107                         *hadrefp = 1;
1108
1109                         /* check if there is a queue of referrals that came in during bind */
1110                         if ( lc == NULL) {
1111                                 lc = find_connection( ld, srv, 1 );
1112                                 if ( lc == NULL ) {
1113                                         ld->ld_errno = LDAP_OPERATIONS_ERROR;
1114                                         rc = -1;
1115                                         goto done;
1116                                 }
1117                         }
1118
1119                         if ( lc->lconn_rebind_queue != NULL ) {
1120                                 /* Release resources of previous list */
1121                                 LDAP_VFREE( refarray );
1122                                 refarray = NULL;
1123                                 ldap_free_urllist( srv );
1124                                 srv = NULL;
1125
1126                                 /* Pull entries off end of queue so list always null terminated */
1127                                 for( j = 0; lc->lconn_rebind_queue[j] != NULL; j++ )
1128                                         ;
1129                                 refarray = lc->lconn_rebind_queue[j - 1];
1130                                 lc->lconn_rebind_queue[j-1] = NULL;
1131                                 /* we pulled off last entry from queue, free queue */
1132                                 if ( j == 1 ) {
1133                                         LDAP_FREE( lc->lconn_rebind_queue );
1134                                         lc->lconn_rebind_queue = NULL;
1135                                 }
1136                                 /* restart the loop the with new referral list */
1137                                 i = -1;
1138                                 continue;
1139                         }
1140                         break; /* referral followed, break out of for loop */
1141                 }
1142         } /* end for loop */
1143 done:
1144         LDAP_VFREE( refarray );
1145         ldap_free_urllist( srv );
1146         LDAP_FREE( *errstrp );
1147
1148         if( rc == 0 ) {
1149                 *errstrp = NULL;
1150                 LDAP_FREE( unfollowed );
1151                 return count;
1152         } else {
1153                 *errstrp = unfollowed;
1154                 return rc;
1155         }
1156 }
1157
1158 /*
1159  * XXX merging of errors in this routine needs to be improved
1160  */
1161 int
1162 ldap_chase_referrals( LDAP *ld,
1163         LDAPRequest *lr,
1164         char **errstrp,
1165         int sref,
1166         int *hadrefp )
1167 {
1168         int             rc, count, id;
1169         unsigned        len;
1170         char            *p, *ref, *unfollowed;
1171         LDAPRequest     *origreq;
1172         LDAPURLDesc     *srv;
1173         BerElement      *ber;
1174         LDAPreqinfo  rinfo;
1175         LDAPConn        *lc;
1176
1177         Debug( LDAP_DEBUG_TRACE, "ldap_chase_referrals\n", 0, 0, 0 );
1178
1179         ld->ld_errno = LDAP_SUCCESS;    /* optimistic */
1180         *hadrefp = 0;
1181
1182         if ( *errstrp == NULL ) {
1183                 return( 0 );
1184         }
1185
1186         len = strlen( *errstrp );
1187         for ( p = *errstrp; len >= LDAP_REF_STR_LEN; ++p, --len ) {
1188                 if ( strncasecmp( p, LDAP_REF_STR, LDAP_REF_STR_LEN ) == 0 ) {
1189                         *p = '\0';
1190                         p += LDAP_REF_STR_LEN;
1191                         break;
1192                 }
1193         }
1194
1195         if ( len < LDAP_REF_STR_LEN ) {
1196                 return( 0 );
1197         }
1198
1199         if ( lr->lr_parentcnt >= ld->ld_refhoplimit ) {
1200                 Debug( LDAP_DEBUG_ANY,
1201                     "more than %d referral hops (dropping)\n",
1202                     ld->ld_refhoplimit, 0, 0 );
1203                     /* XXX report as error in ld->ld_errno? */
1204                     return( 0 );
1205         }
1206
1207         /* find original request */
1208         for ( origreq = lr; origreq->lr_parent != NULL;
1209              origreq = origreq->lr_parent ) {
1210                 /* empty */;
1211         }
1212
1213         unfollowed = NULL;
1214         rc = count = 0;
1215
1216         /* parse out & follow referrals */
1217         for ( ref = p; rc == 0 && ref != NULL; ref = p ) {
1218                 p = strchr( ref, '\n' );
1219                 if ( p != NULL ) {
1220                         *p++ = '\0';
1221                 }
1222
1223                 rc = ldap_url_parse_ext( ref, &srv, LDAP_PVT_URL_PARSE_NOEMPTY_DN );
1224                 if ( rc != LDAP_URL_SUCCESS ) {
1225                         Debug( LDAP_DEBUG_TRACE,
1226                                 "ignoring %s referral <%s>\n",
1227                                 ref, rc == LDAP_URL_ERR_BADSCHEME ? "unknown" : "incorrect", 0 );
1228                         rc = ldap_append_referral( ld, &unfollowed, ref );
1229                         *hadrefp = 1;
1230                         continue;
1231                 }
1232
1233                 Debug( LDAP_DEBUG_TRACE,
1234                     "chasing LDAP referral: <%s>\n", ref, 0, 0 );
1235
1236                 *hadrefp = 1;
1237
1238                 /* See if we've already been here */
1239                 if (( lc = find_connection( ld, srv, 1 )) != NULL ) {
1240                         LDAPRequest *lp;
1241                         int looped = 0;
1242                         int len = srv->lud_dn ? strlen( srv->lud_dn ) : 0;
1243                         for ( lp = lr; lp; lp = lp->lr_parent ) {
1244                                 if ( lp->lr_conn == lc
1245                                         && len == lp->lr_dn.bv_len )
1246                                 {
1247                                         if ( len && strncmp( srv->lud_dn, lp->lr_dn.bv_val, len ) )
1248                                                         continue;
1249                                         looped = 1;
1250                                         break;
1251                                 }
1252                         }
1253                         if ( looped ) {
1254                                 ldap_free_urllist( srv );
1255                                 ld->ld_errno = LDAP_CLIENT_LOOP;
1256                                 rc = -1;
1257                                 continue;
1258                         }
1259                 }
1260
1261                 LDAP_NEXT_MSGID( ld, id );
1262                 ber = re_encode_request( ld, origreq->lr_ber,
1263                     id, sref, srv, &rinfo.ri_request );
1264
1265                 if ( ber == NULL ) {
1266                         return -1 ;
1267                 }
1268
1269                 /* copy the complete referral for rebind process */
1270                 rinfo.ri_url = LDAP_STRDUP( ref );
1271
1272                 rinfo.ri_msgid = origreq->lr_origid;
1273
1274 #ifdef LDAP_R_COMPILE
1275                 ldap_pvt_thread_mutex_lock( &ld->ld_req_mutex );
1276 #endif
1277                 rc = ldap_send_server_request( ld, ber, id,
1278                         lr, &srv, NULL, &rinfo );
1279 #ifdef LDAP_R_COMPILE
1280                 ldap_pvt_thread_mutex_unlock( &ld->ld_req_mutex );
1281 #endif
1282
1283                 LDAP_FREE( rinfo.ri_url );
1284
1285                 if( rc >= 0 ) {
1286                         ++count;
1287                 } else {
1288                         Debug( LDAP_DEBUG_ANY,
1289                                 "Unable to chase referral \"%s\" (%d: %s)\n",
1290                                 ref, ld->ld_errno, ldap_err2string( ld->ld_errno ) );
1291                         rc = ldap_append_referral( ld, &unfollowed, ref );
1292                 }
1293
1294                 ldap_free_urllist(srv);
1295         }
1296
1297         LDAP_FREE( *errstrp );
1298         *errstrp = unfollowed;
1299
1300         return(( rc == 0 ) ? count : rc );
1301 }
1302
1303
1304 int
1305 ldap_append_referral( LDAP *ld, char **referralsp, char *s )
1306 {
1307         int     first;
1308
1309         if ( *referralsp == NULL ) {
1310                 first = 1;
1311                 *referralsp = (char *)LDAP_MALLOC( strlen( s ) + LDAP_REF_STR_LEN
1312                     + 1 );
1313         } else {
1314                 first = 0;
1315                 *referralsp = (char *)LDAP_REALLOC( *referralsp,
1316                     strlen( *referralsp ) + strlen( s ) + 2 );
1317         }
1318
1319         if ( *referralsp == NULL ) {
1320                 ld->ld_errno = LDAP_NO_MEMORY;
1321                 return( -1 );
1322         }
1323
1324         if ( first ) {
1325                 strcpy( *referralsp, LDAP_REF_STR );
1326         } else {
1327                 strcat( *referralsp, "\n" );
1328         }
1329         strcat( *referralsp, s );
1330
1331         return( 0 );
1332 }
1333
1334
1335
1336 static BerElement *
1337 re_encode_request( LDAP *ld,
1338         BerElement *origber,
1339         ber_int_t msgid,
1340         int sref,
1341         LDAPURLDesc *srv,
1342         int *type )
1343 {
1344         /*
1345          * XXX this routine knows way too much about how the lber library works!
1346          */
1347         ber_int_t       along;
1348         ber_tag_t       tag;
1349         ber_tag_t       rtag;
1350         ber_int_t       ver;
1351         ber_int_t       scope;
1352         int             rc;
1353         BerElement      tmpber, *ber;
1354         struct berval           dn;
1355
1356         Debug( LDAP_DEBUG_TRACE,
1357             "re_encode_request: new msgid %ld, new dn <%s>\n",
1358             (long) msgid,
1359                 ( srv == NULL || srv->lud_dn == NULL) ? "NONE" : srv->lud_dn, 0 );
1360
1361         tmpber = *origber;
1362
1363         /*
1364          * all LDAP requests are sequences that start with a message id.
1365          * For all except delete, this is followed by a sequence that is
1366          * tagged with the operation code.  For delete, the provided DN
1367          * is not wrapped by a sequence.
1368          */
1369         rtag = ber_scanf( &tmpber, "{it", /*}*/ &along, &tag );
1370
1371         if ( rtag == LBER_ERROR ) {
1372                 ld->ld_errno = LDAP_DECODING_ERROR;
1373                 return( NULL );
1374         }
1375
1376         assert( tag != 0);
1377         if ( tag == LDAP_REQ_BIND ) {
1378                 /* bind requests have a version number before the DN & other stuff */
1379                 rtag = ber_scanf( &tmpber, "{im" /*}*/, &ver, &dn );
1380
1381         } else if ( tag == LDAP_REQ_DELETE ) {
1382                 /* delete requests don't have a DN wrapping sequence */
1383                 rtag = ber_scanf( &tmpber, "m", &dn );
1384
1385         } else if ( tag == LDAP_REQ_SEARCH ) {
1386                 /* search requests need to be re-scope-ed */
1387                 rtag = ber_scanf( &tmpber, "{me" /*"}"*/, &dn, &scope );
1388
1389                 if( srv->lud_scope != LDAP_SCOPE_DEFAULT ) {
1390                         /* use the scope provided in reference */
1391                         scope = srv->lud_scope;
1392
1393                 } else if ( sref ) {
1394                         /* use scope implied by previous operation
1395                          *   base -> base
1396                          *   one -> base
1397                          *   subtree -> subtree
1398                          *   subordinate -> subtree
1399                          */
1400                         switch( scope ) {
1401                         default:
1402                         case LDAP_SCOPE_BASE:
1403                         case LDAP_SCOPE_ONELEVEL:
1404                                 scope = LDAP_SCOPE_BASE;
1405                                 break;
1406                         case LDAP_SCOPE_SUBTREE:
1407                         case LDAP_SCOPE_SUBORDINATE:
1408                                 scope = LDAP_SCOPE_SUBTREE;
1409                                 break;
1410                         }
1411                 }
1412
1413         } else {
1414                 rtag = ber_scanf( &tmpber, "{m" /*}*/, &dn );
1415         }
1416
1417         if( rtag == LBER_ERROR ) {
1418                 ld->ld_errno = LDAP_DECODING_ERROR;
1419                 return NULL;
1420         }
1421
1422         /* restore character zero'd out by ber_scanf*/
1423         dn.bv_val[dn.bv_len] = tmpber.ber_tag;
1424
1425         if (( ber = ldap_alloc_ber_with_options( ld )) == NULL ) {
1426                 return NULL;
1427         }
1428
1429         if ( srv->lud_dn ) {
1430                 ber_str2bv( srv->lud_dn, 0, 0, &dn );
1431         }
1432
1433         if ( tag == LDAP_REQ_BIND ) {
1434                 rc = ber_printf( ber, "{it{iO" /*}}*/, msgid, tag, ver, &dn );
1435         } else if ( tag == LDAP_REQ_DELETE ) {
1436                 rc = ber_printf( ber, "{itON}", msgid, tag, &dn );
1437         } else if ( tag == LDAP_REQ_SEARCH ) {
1438                 rc = ber_printf( ber, "{it{Oe" /*}}*/, msgid, tag, &dn, scope );
1439         } else {
1440                 rc = ber_printf( ber, "{it{O" /*}}*/, msgid, tag, &dn );
1441         }
1442
1443         if ( rc == -1 ) {
1444                 ld->ld_errno = LDAP_ENCODING_ERROR;
1445                 ber_free( ber, 1 );
1446                 return NULL;
1447         }
1448
1449         if ( tag != LDAP_REQ_DELETE && (
1450                 ber_write(ber, tmpber.ber_ptr, ( tmpber.ber_end - tmpber.ber_ptr ), 0)
1451                 != ( tmpber.ber_end - tmpber.ber_ptr ) ||
1452             ber_printf( ber, /*{{*/ "N}N}" ) == -1 ) )
1453         {
1454                 ld->ld_errno = LDAP_ENCODING_ERROR;
1455                 ber_free( ber, 1 );
1456                 return NULL;
1457         }
1458
1459 #ifdef LDAP_DEBUG
1460         if ( ldap_debug & LDAP_DEBUG_PACKETS ) {
1461                 Debug( LDAP_DEBUG_ANY, "re_encode_request new request is:\n",
1462                     0, 0, 0 );
1463                 ber_log_dump( LDAP_DEBUG_BER, ldap_debug, ber, 0 );
1464         }
1465 #endif /* LDAP_DEBUG */
1466
1467         *type = tag;    /* return request type */
1468         return ber;
1469 }
1470
1471
1472 LDAPRequest *
1473 ldap_find_request_by_msgid( LDAP *ld, ber_int_t msgid )
1474 {
1475         LDAPRequest     *lr;
1476
1477 #ifdef LDAP_R_COMPILE
1478         ldap_pvt_thread_mutex_lock( &ld->ld_req_mutex );
1479 #endif
1480         for ( lr = ld->ld_requests; lr != NULL; lr = lr->lr_next ) {
1481                 if ( lr->lr_status == LDAP_REQST_COMPLETED ) {
1482                         continue;       /* Skip completed requests */
1483                 }
1484                 if ( msgid == lr->lr_msgid ) {
1485                         lr->lr_refcnt++;
1486                         break;
1487                 }
1488         }
1489 #ifdef LDAP_R_COMPILE
1490         ldap_pvt_thread_mutex_unlock( &ld->ld_req_mutex );
1491 #endif
1492
1493         return( lr );
1494 }
1495
1496 void
1497 ldap_return_request( LDAP *ld, LDAPRequest *lrx, int freeit )
1498 {
1499         LDAPRequest     *lr;
1500
1501 #ifdef LDAP_R_COMPILE
1502         ldap_pvt_thread_mutex_lock( &ld->ld_req_mutex );
1503 #endif
1504         for ( lr = ld->ld_requests; lr != NULL; lr = lr->lr_next ) {
1505                 if ( lr == lrx ) {
1506                         if ( lr->lr_refcnt > 0 ) {
1507                                 lr->lr_refcnt--;
1508
1509                         } else if ( lr->lr_refcnt < 0 ) {
1510                                 lr->lr_refcnt++;
1511                                 if ( lr->lr_refcnt == 0 ) {
1512                                         lr = NULL;
1513                                 }
1514                         }
1515                         break;
1516                 }
1517         }
1518         if ( lr == NULL ) {
1519                 ldap_free_request_int( ld, lrx );
1520
1521         } else if ( freeit ) {
1522                 ldap_free_request( ld, lrx );
1523         }
1524 #ifdef LDAP_R_COMPILE
1525         ldap_pvt_thread_mutex_unlock( &ld->ld_req_mutex );
1526 #endif
1527 }