]> git.sur5r.net Git - openldap/blob - servers/slapd/back-ldap/suffixmassage.c
ITS#3032: retry when GSSAPI creds are not available
[openldap] / servers / slapd / back-ldap / suffixmassage.c
1 /* suffixmassage.c - massages ldap backend dns */
2 /* $OpenLDAP$ */
3 /* This work is part of OpenLDAP Software <http://www.openldap.org/>.
4  *
5  * Copyright 1999-2004 The OpenLDAP Foundation.
6  * Portions Copyright 1999-2003 Howard Chu.
7  * Portions Copyright 2000-2003 Pierangelo Masarati.
8  * All rights reserved.
9  *
10  * Redistribution and use in source and binary forms, with or without
11  * modification, are permitted only as authorized by the OpenLDAP
12  * Public License.
13  *
14  * A copy of this license is available in the file LICENSE in the
15  * top-level directory of the distribution or, alternatively, at
16  * <http://www.OpenLDAP.org/license.html>.
17  */
18 /* ACKNOWLEDGEMENTS:
19  * This work was initially developed by the Howard Chu for inclusion
20  * in OpenLDAP Software and subsequently enhanced by Pierangelo
21  * Masarati.
22  */
23
24
25 #include "portable.h"
26
27 #include <stdio.h>
28
29 #include <ac/string.h>
30 #include <ac/socket.h>
31
32 #include "slap.h"
33 #include "back-ldap.h"
34
35 #ifdef ENABLE_REWRITE
36 int
37 ldap_back_dn_massage(
38         dncookie *dc,
39         struct berval *dn,
40         struct berval *res
41 )
42 {
43         int rc = 0;
44
45         rc = rewrite_session( dc->rwmap->rwm_rw, dc->ctx,
46                         ( dn->bv_len ? dn->bv_val : "" ), dc->conn,
47                         &res->bv_val );
48
49         switch ( rc ) {
50         case REWRITE_REGEXEC_OK:
51                 if ( res->bv_val != NULL ) {
52                         res->bv_len = strlen( res->bv_val );
53                 } else {
54                         *res = *dn;
55                 }
56 #ifdef NEW_LOGGING
57                 LDAP_LOG( BACK_LDAP, DETAIL1, 
58                         "[rw] %s: \"%s\" -> \"%s\"\n",
59                         dc->ctx, dn->bv_val, res->bv_val );             
60 #else /* !NEW_LOGGING */
61                 Debug( LDAP_DEBUG_ARGS,
62                         "[rw] %s: \"%s\" -> \"%s\"\n",
63                         dc->ctx, dn->bv_val, res->bv_val );             
64 #endif /* !NEW_LOGGING */
65                 rc = LDAP_SUCCESS;
66                 break;
67                 
68         case REWRITE_REGEXEC_UNWILLING:
69                 if ( dc->rs ) {
70                         dc->rs->sr_err = LDAP_UNWILLING_TO_PERFORM;
71                         dc->rs->sr_text = "Operation not allowed";
72                 }
73                 rc = LDAP_UNWILLING_TO_PERFORM;
74                 break;
75                 
76         case REWRITE_REGEXEC_ERR:
77                 if ( dc->rs ) {
78                         dc->rs->sr_err = LDAP_OTHER;
79                         dc->rs->sr_text = "Rewrite error";
80                 }
81                 rc = LDAP_OTHER;
82                 break;
83         }
84         return rc;
85 }
86
87 #else
88 /*
89  * ldap_back_dn_massage
90  * 
91  * Aliases the suffix; based on suffix_alias (servers/slapd/suffixalias.c).
92  */
93 int
94 ldap_back_dn_massage(
95         dncookie *dc,
96         struct berval *odn,
97         struct berval *res
98 )
99 {
100         int     i, src, dst;
101         struct berval pretty = {0,NULL}, *dn = odn;
102
103         assert( res );
104
105         res->bv_val = NULL;
106         res->bv_len = 0;
107         if ( dn == NULL ) {
108                 return 0;
109         }
110         if ( dc->rwmap == NULL || dc->rwmap->rwm_suffix_massage == NULL ) {
111                 *res = *dn;
112                 return 0;
113         }
114
115         if ( dc->tofrom ) {
116                 src = 0 + dc->normalized;
117                 dst = 2 + dc->normalized;
118         } else {
119                 src = 2 + dc->normalized;
120                 dst = 0 + dc->normalized;
121                 /* DN from remote server may be in arbitrary form.
122                  * Pretty it so we can parse reliably.
123                  */
124                 dnPretty( NULL, dn, &pretty, NULL );
125                 if (pretty.bv_val) dn = &pretty;
126         }
127
128         for ( i = 0;
129                 dc->rwmap->rwm_suffix_massage[i].bv_val != NULL;
130                 i += 4 ) {
131                 int aliasLength = dc->rwmap->rwm_suffix_massage[i+src].bv_len;
132                 int diff = dn->bv_len - aliasLength;
133
134                 if ( diff < 0 ) {
135                         /* alias is longer than dn */
136                         continue;
137                 } else if ( diff > 0 && ( !DN_SEPARATOR(dn->bv_val[diff-1]))) {
138                         /* boundary is not at a DN separator */
139                         continue;
140                         /* At a DN Separator */
141                 }
142
143                 if ( !strcasecmp( dc->rwmap->rwm_suffix_massage[i+src].bv_val, &dn->bv_val[diff] ) ) {
144                         res->bv_len = diff + dc->rwmap->rwm_suffix_massage[i+dst].bv_len;
145                         res->bv_val = ch_malloc( res->bv_len + 1 );
146                         strncpy( res->bv_val, dn->bv_val, diff );
147                         strcpy( &res->bv_val[diff], dc->rwmap->rwm_suffix_massage[i+dst].bv_val );
148 #ifdef NEW_LOGGING
149                         LDAP_LOG ( BACK_LDAP, ARGS, 
150                                 "ldap_back_dn_massage: converted \"%s\" to \"%s\"\n",
151                                 dn->bv_val, res->bv_val, 0 );
152 #else
153                         Debug( LDAP_DEBUG_ARGS,
154                                 "ldap_back_dn_massage:"
155                                 " converted \"%s\" to \"%s\"\n",
156                                 dn->bv_val, res->bv_val, 0 );
157 #endif
158                         break;
159                 }
160         }
161         if (pretty.bv_val) {
162                 ch_free(pretty.bv_val);
163                 dn = odn;
164         }
165         /* Nothing matched, just return the original DN */
166         if (res->bv_val == NULL) {
167                 *res = *dn;
168         }
169
170         return 0;
171 }
172 #endif /* !ENABLE_REWRITE */