]> git.sur5r.net Git - openldap/blob - servers/slapd/back-ldbm/referral.c
fix ACL value checking for bind (ITS#3446)
[openldap] / servers / slapd / back-ldbm / referral.c
1 /* referral.c - LDBM backend referral handler */
2 /* $OpenLDAP$ */
3 /* This work is part of OpenLDAP Software <http://www.openldap.org/>.
4  *
5  * Copyright 1998-2005 The OpenLDAP Foundation.
6  * All rights reserved.
7  *
8  * Redistribution and use in source and binary forms, with or without
9  * modification, are permitted only as authorized by the OpenLDAP
10  * Public License.
11  *
12  * A copy of this license is available in the file LICENSE in the
13  * top-level directory of the distribution or, alternatively, at
14  * <http://www.OpenLDAP.org/license.html>.
15  */
16
17 #include "portable.h"
18
19 #include <stdio.h>
20
21 #include <ac/string.h>
22 #include <ac/socket.h>
23
24 #include "slap.h"
25 #include "back-ldbm.h"
26
27 int
28 ldbm_back_referrals(
29     Operation   *op,
30     SlapReply   *rs )
31 {
32         struct ldbminfo *li = (struct ldbminfo *) op->o_bd->be_private;
33         Entry *e, *matched;
34
35         if( op->o_tag == LDAP_REQ_SEARCH ) {
36                 /* let search take care of itself */
37                 return LDAP_SUCCESS;
38         }
39
40         if( get_manageDSAit( op ) ) {
41                 /* let op take care of DSA management */
42                 return LDAP_SUCCESS;
43         } 
44
45         /* grab giant lock for reading */
46         ldap_pvt_thread_rdwr_rlock(&li->li_giant_rwlock);
47
48         /* get entry with reader lock */
49         e = dn2entry_r( op->o_bd, &op->o_req_ndn, &matched );
50         if ( e == NULL ) {
51                 if ( matched != NULL ) {
52                         rs->sr_matched = ch_strdup( matched->e_dn );
53
54                         Debug( LDAP_DEBUG_TRACE,
55                                 "ldbm_referrals: op=%ld target=\"%s\" matched=\"%s\"\n",
56                                 op->o_tag, op->o_req_dn.bv_val, rs->sr_matched );
57
58                         if( is_entry_referral( matched ) ) {
59                                 rs->sr_err = LDAP_OTHER;
60                                 rs->sr_ref = get_entry_referrals( op, matched );
61                         }
62
63                         cache_return_entry_r( &li->li_cache, matched );
64
65                 } else if ( default_referral != NULL ) {
66                         rs->sr_err = LDAP_OTHER;
67                         rs->sr_ref = referral_rewrite( default_referral,
68                                 NULL, &op->o_req_dn, LDAP_SCOPE_DEFAULT );
69                 }
70
71                 ldap_pvt_thread_rdwr_runlock(&li->li_giant_rwlock);
72
73                 if( rs->sr_ref != NULL ) {
74                         /* send referrals */
75                         rs->sr_err = LDAP_REFERRAL;
76                         send_ldap_result( op, rs );
77                         ber_bvarray_free( rs->sr_ref );
78
79                 } else if ( rs->sr_err != LDAP_SUCCESS ) {
80                         rs->sr_text = rs->sr_matched ? "bad referral object" : "bad default referral";
81                         send_ldap_result( op, rs );
82                 }
83
84                 if ( rs->sr_matched ) free( (char *)rs->sr_matched );
85                 rs->sr_ref = NULL;
86                 rs->sr_matched = NULL;
87                 return rs->sr_err;
88         }
89
90         if ( is_entry_referral( e ) ) {
91                 /* entry is a referral */
92                 BerVarray refs = get_entry_referrals( op, e );
93                 rs->sr_ref = referral_rewrite(
94                         refs, &e->e_name, &op->o_req_dn, LDAP_SCOPE_DEFAULT );
95
96                 Debug( LDAP_DEBUG_TRACE,
97                         "ldbm_referrals: op=%ld target=\"%s\" matched=\"%s\"\n",
98                         op->o_tag, op->o_req_dn.bv_val, e->e_dn );
99
100                 rs->sr_matched = e->e_name.bv_val;
101                 if( rs->sr_ref != NULL ) {
102                         rs->sr_err = LDAP_REFERRAL;
103                         send_ldap_result( op, rs );
104
105                         ber_bvarray_free( rs->sr_ref );
106
107                 } else {
108                         send_ldap_error( op, rs, LDAP_OTHER,
109                                 "bad referral object" );
110                 }
111
112                 if( refs != NULL ) ber_bvarray_free( refs );
113                 rs->sr_ref = NULL;
114                 rs->sr_matched = NULL;
115         }
116
117         cache_return_entry_r( &li->li_cache, e );
118         ldap_pvt_thread_rdwr_runlock(&li->li_giant_rwlock);
119
120         return rs->sr_err;
121 }