git.sur5r.net Git - openldap/blob - servers/slapd/back-ldbm/compare.c

   1 /* compare.c - ldbm backend compare routine */
   2 /* $OpenLDAP$ */
   3 /* This work is part of OpenLDAP Software <http://www.openldap.org/>.
   4  *
   5  * Copyright 1998-2006 The OpenLDAP Foundation.
   6  * All rights reserved.
   7  *
   8  * Redistribution and use in source and binary forms, with or without
   9  * modification, are permitted only as authorized by the OpenLDAP
  10  * Public License.
  11  *
  12  * A copy of this license is available in the file LICENSE in the
  13  * top-level directory of the distribution or, alternatively, at
  14  * <http://www.OpenLDAP.org/license.html>.
  15  */
  16
  17 #include "portable.h"
  18
  19 #include <stdio.h>
  20
  21 #include <ac/socket.h>
  22 #include <ac/string.h>
  23
  24 #include "slap.h"
  25 #include "back-ldbm.h"
  26 #include "proto-back-ldbm.h"
  27
  28 int
  29 ldbm_back_compare(
  30         Operation       *op,
  31         SlapReply       *rs )
  32 {
  33         struct ldbminfo *li = (struct ldbminfo *) op->o_bd->be_private;
  34         Entry           *matched;
  35         Entry           *e;
  36         Attribute       *a;
  37         int             manageDSAit = get_manageDSAit( op );
  38
  39         /* grab giant lock for reading */
  40         ldap_pvt_thread_rdwr_rlock(&li->li_giant_rwlock);
  41
  42         /* get entry with reader lock */
  43         if ( (e = dn2entry_r( op->o_bd, &op->o_req_ndn, &matched )) == NULL ) {
  44                 if ( matched != NULL ) {
  45                         rs->sr_matched = ch_strdup( matched->e_dn );
  46                         rs->sr_ref = is_entry_referral( matched )
  47                                 ? get_entry_referrals( op, matched )
  48                                 : NULL;
  49                         cache_return_entry_r( &li->li_cache, matched );
  50                 } else {
  51                         rs->sr_ref = referral_rewrite( default_referral,
  52                                 NULL, &op->o_req_dn, LDAP_SCOPE_DEFAULT );
  53                 }
  54
  55                 ldap_pvt_thread_rdwr_runlock(&li->li_giant_rwlock);
  56
  57                 rs->sr_err = LDAP_REFERRAL;
  58                 send_ldap_result( op, rs );
  59
  60                 if ( rs->sr_ref ) ber_bvarray_free( rs->sr_ref );
  61                 free( (char *)rs->sr_matched );
  62                 rs->sr_ref = NULL;
  63                 rs->sr_matched = NULL;
  64                 return rs->sr_err;
  65         }
  66
  67         if (!manageDSAit && is_entry_referral( e ) ) {
  68                 /* entry is a referral, don't allow add */
  69                 rs->sr_ref = get_entry_referrals( op, e );
  70
  71                 Debug( LDAP_DEBUG_TRACE, "entry is referral\n", 0,
  72                     0, 0 );
  73
  74
  75                 rs->sr_err = LDAP_REFERRAL;
  76                 rs->sr_matched = e->e_name.bv_val;
  77                 send_ldap_result( op, rs );
  78
  79                 if ( rs->sr_ref ) ber_bvarray_free( rs->sr_ref );
  80                 rs->sr_ref = NULL;
  81                 rs->sr_matched = NULL;
  82                 goto return_results;
  83         }
  84
  85         if ( ! access_allowed( op, e,
  86                 op->oq_compare.rs_ava->aa_desc, &op->oq_compare.rs_ava->aa_value, ACL_COMPARE, NULL ) )
  87         {
  88                 send_ldap_error( op, rs, LDAP_INSUFFICIENT_ACCESS,
  89                         NULL );
  90                 goto return_results;
  91         }
  92
  93         rs->sr_err = LDAP_NO_SUCH_ATTRIBUTE;
  94
  95         for(a = attrs_find( e->e_attrs, op->oq_compare.rs_ava->aa_desc );
  96                 a != NULL;
  97                 a = attrs_find( a->a_next, op->oq_compare.rs_ava->aa_desc ))
  98         {
  99                 rs->sr_err = LDAP_COMPARE_FALSE;
 100
 101                 if ( value_find_ex( op->oq_compare.rs_ava->aa_desc,
 102                         SLAP_MR_ATTRIBUTE_VALUE_NORMALIZED_MATCH |
 103                                 SLAP_MR_ASSERTED_VALUE_NORMALIZED_MATCH,
 104                         a->a_nvals, &op->oq_compare.rs_ava->aa_value,
 105                         op->o_tmpmemctx ) == 0 )
 106                 {
 107                         rs->sr_err = LDAP_COMPARE_TRUE;
 108                         break;
 109                 }
 110         }
 111
 112 return_results:;
 113         cache_return_entry_r( &li->li_cache, e );
 114         ldap_pvt_thread_rdwr_runlock(&li->li_giant_rwlock);
 115
 116         switch ( rs->sr_err ) {
 117         case LDAP_NO_SUCH_ATTRIBUTE:
 118         case LDAP_COMPARE_FALSE:
 119         case LDAP_COMPARE_TRUE:
 120                 send_ldap_result( op, rs );
 121                 if ( rs->sr_err != LDAP_NO_SUCH_ATTRIBUTE ) {
 122                         rs->sr_err = LDAP_SUCCESS;
 123                 }
 124                 break;
 125         }
 126
 127         return rs->sr_err;
 128 }