2 * Copyright 1998-2001 The OpenLDAP Foundation, All Rights Reserved.
3 * COPYING RESTRICTIONS APPLY, see COPYRIGHT file
5 * Copyright 2001, Pierangelo Masarati, All rights reserved. <ando@sys-net.it>
7 * This work has been developed to fulfill the requirements
8 * of SysNet s.n.c. <http:www.sys-net.it> and it has been donated
9 * to the OpenLDAP Foundation in the hope that it may be useful
10 * to the Open Source community, but WITHOUT ANY WARRANTY.
12 * Permission is granted to anyone to use this software for any purpose
13 * on any computer system, and to alter it and redistribute it, subject
14 * to the following restrictions:
16 * 1. The author and SysNet s.n.c. are not responsible for the consequences
17 * of use of this software, no matter how awful, even if they arise from
20 * 2. The origin of this software must not be misrepresented, either by
21 * explicit claim or by omission. Since few users ever read sources,
22 * credits should appear in the documentation.
24 * 3. Altered versions must be plainly marked as such, and must not be
25 * misrepresented as being the original software. Since few users
26 * ever read sources, credits should appear in the documentation.
27 * SysNet s.n.c. cannot be responsible for the consequences of the
30 * 4. This notice may not be removed or altered.
33 * This software is based on the backend back-ldap, implemented
34 * by Howard Chu <hyc@highlandsun.com>, and modified by Mark Valence
35 * <kurash@sassafras.com>, Pierangelo Masarati <ando@sys-net.it> and other
36 * contributors. The contribution of the original software to the present
37 * implementation is acknowledged in this copyright statement.
39 * A special acknowledgement goes to Howard for the overall architecture
40 * (and for borrowing large pieces of code), and to Mark, who implemented
41 * from scratch the attribute/objectclass mapping.
43 * The original copyright statement follows.
45 * Copyright 1999, Howard Chu, All rights reserved. <hyc@highlandsun.com>
47 * Permission is granted to anyone to use this software for any purpose
48 * on any computer system, and to alter it and redistribute it, subject
49 * to the following restrictions:
51 * 1. The author is not responsible for the consequences of use of this
52 * software, no matter how awful, even if they arise from flaws in it.
54 * 2. The origin of this software must not be misrepresented, either by
55 * explicit claim or by omission. Since few users ever read sources,
56 * credits should appear in the documentation.
58 * 3. Altered versions must be plainly marked as such, and must not be
59 * misrepresented as being the original software. Since few users
60 * ever read sources, credits should appear in the
63 * 4. This notice may not be removed or altered.
71 #include <ac/socket.h>
72 #include <ac/string.h>
77 #include "../back-ldap/back-ldap.h"
78 #include "back-meta.h"
81 * Set PRINT_CONNTREE larger than 0 to dump the connection tree (debug only)
83 #define PRINT_CONNTREE 0
88 * compares two struct metaconn based on the value of the conn pointer;
97 struct metaconn *lc1 = ( struct metaconn * )c1;
98 struct metaconn *lc2 = ( struct metaconn * )c2;
100 return ( ( lc1->conn < lc2->conn ) ? -1 :
101 ( ( lc1->conn > lc2-> conn ) ? 1 : 0 ) );
107 * returns -1 in case a duplicate struct metaconn has been inserted;
116 struct metaconn *lc1 = ( struct metaconn * )c1;
117 struct metaconn *lc2 = ( struct metaconn * )c2;
119 return( ( lc1->conn == lc2->conn ) ? -1 : 0 );
123 * Debug stuff (got it from libavl)
125 #if PRINT_CONNTREE > 0
127 ravl_print( Avlnode *root, int depth )
135 ravl_print( root->avl_right, depth+1 );
137 for ( i = 0; i < depth; i++ ) {
141 printf( "c(%d) %d\n", ( ( struct metaconn * )root->avl_data )->conn->c_connid, root->avl_bf );
143 ravl_print( root->avl_left, depth+1 );
147 myprint( Avlnode *root )
149 printf( "********\n" );
152 printf( "\tNULL\n" );
154 ravl_print( root, 0 );
157 printf( "********\n" );
159 #endif /* PRINT_CONNTREE */
167 * Allocates a connection structure, making room for all the referenced targets
169 static struct metaconn *
170 metaconn_alloc( int ntargets )
175 assert( ntargets > 0 );
177 lc = ch_calloc( sizeof( struct metaconn ), 1 );
183 * make it a null-terminated array ...
185 lc->conns = ch_calloc( sizeof( struct metasingleconn * ), ntargets+1 );
186 if ( lc->conns == NULL ) {
191 for ( i = 0; i < ntargets; i++ ) {
193 ch_calloc( sizeof( struct metasingleconn ), 1 );
194 if ( lc->conns[ i ] == NULL ) {
195 charray_free( ( char ** )lc->conns );
202 lc->bound_target = META_BOUND_NONE;
224 for ( i = 0; lc->conns[ i ] != NULL; ++i ) {
225 free( lc->conns[ i ] );
227 charray_free( ( char ** )lc->conns );
236 * Initializes one connection
242 struct metatarget *lt,
244 struct metasingleconn *lsc
252 if ( lsc->ld != NULL ) {
257 * Attempts to initialize the connection to the target ds
259 err = ldap_initialize( &lsc->ld, lt->uri );
260 if ( err != LDAP_SUCCESS ) {
261 return ldap_back_map_result( err );
265 * Set LDAP version. This will always succeed: If the client
266 * bound with a particular version, then so can we.
268 ldap_set_option( lsc->ld, LDAP_OPT_PROTOCOL_VERSION, &vers );
271 * Sets a cookie for the rewrite session
273 ( void )rewrite_session_init( lt->rwinfo, conn );
276 * If the connection dn is not null, an attempt to rewrite it is made
278 if ( conn->c_cdn != NULL && conn->c_cdn[ 0 ] != '\0' ) {
280 * Rewrite the bind dn if needed
282 lsc->bound_dn = NULL;
283 switch ( rewrite_session( lt->rwinfo, "bindDn",
286 case REWRITE_REGEXEC_OK:
287 if ( lsc->bound_dn == NULL ) {
288 lsc->bound_dn = ch_strdup( conn->c_cdn );
291 LDAP_LOG(( "backend", LDAP_LEVEL_DETAIL1,
292 "[rw] bindDn: \"%s\" -> \"%s\"\n",
293 conn->c_cdn, lsc->bound_dn ));
294 #else /* !NEW_LOGGING */
295 Debug( LDAP_DEBUG_ARGS,
296 "rw> bindDn: \"%s\" -> \"%s\"\n%s",
297 conn->c_cdn, lsc->bound_dn, "" );
298 #endif /* !NEW_LOGGING */
301 case REWRITE_REGEXEC_UNWILLING:
302 send_ldap_result( conn, op,
303 LDAP_UNWILLING_TO_PERFORM,
304 NULL, "Unwilling to perform",
306 return LDAP_UNWILLING_TO_PERFORM;
308 case REWRITE_REGEXEC_ERR:
309 send_ldap_result( conn, op,
310 LDAP_OPERATIONS_ERROR,
311 NULL, "Operations error",
313 return LDAP_OPERATIONS_ERROR;
316 lsc->bound_dn = NULL;
319 lsc->bound = META_UNBOUND;
322 * The candidate is activated
324 lsc->candidate = META_CANDIDATE;
331 * Prepares the connection structure
333 * FIXME: This function needs to receive some info on the type of operation
334 * it is invoked by, so that only the correct pool of candidate targets
335 * is initialized in case no connection was available yet.
337 * At present a flag that says whether the candidate target must be unique
338 * is passed; eventually an operation agent will be used.
350 struct metaconn *lc, lc_curr;
351 int vers, cached = -1, i = -1, err = LDAP_SUCCESS;
354 /* Searches for a metaconn in the avl tree */
356 ldap_pvt_thread_mutex_lock( &li->conn_mutex );
357 lc = (struct metaconn *)avl_find( li->conntree,
358 (caddr_t)&lc_curr, meta_back_conn_cmp );
359 ldap_pvt_thread_mutex_unlock( &li->conn_mutex );
361 /* Looks like we didn't get a bind. Open a new session... */
363 lc = metaconn_alloc( li->ntargets );
368 vers = conn->c_protocol;
371 * looks in cache, if any
373 if ( li->cache.ttl != META_DNCACHE_DISABLED ) {
374 cached = i = meta_dncache_get_target( &li->cache, ndn );
377 if ( op_type == META_OP_REQUIRE_SINGLE ) {
380 * tries to get a unique candidate
381 * (takes care of default target
384 i = meta_back_select_unique_candidate( li, ndn );
388 * if any is found, inits the connection
395 send_ldap_result( conn, op, LDAP_NO_SUCH_OBJECT,
396 NULL, "", NULL, NULL );
402 LDAP_LOG(( "backend", LDAP_LEVEL_INFO,
403 "meta_back_getconn: got target %d"
404 " for ndn=\"%s\" from cache\n", i, ndn ));
405 #else /* !NEW_LOGGING */
406 Debug( LDAP_DEBUG_CACHE,
407 "==>meta_back_getconn: got target %d for ndn=\"%s\" from cache\n%s",
409 #endif /* !NEW_LOGGING */
412 * Clear all other candidates
414 ( void )meta_clear_unused_candidates( li, lc, i, 0 );
417 * The target is activated; if needed, it is
418 * also init'd. In case of error, init_one_conn
419 * sends the appropriate result.
421 err = init_one_conn( conn, op, li->targets[ i ],
422 vers, lc->conns[ i ] );
423 if ( err != LDAP_SUCCESS ) {
426 * FIXME: in case one target cannot
427 * be init'd, should the other ones
430 ( void )meta_clear_one_candidate( lc->conns[ i ], 1 );
442 * require all connections ...
444 } else if (op_type == META_OP_REQUIRE_ALL) {
445 for ( i = 0; i < li->ntargets; i++ ) {
448 * The target is activated; if needed, it is
451 int lerr = init_one_conn( conn, op, li->targets[ i ],
452 vers, lc->conns[ i ] );
453 if ( lerr != LDAP_SUCCESS ) {
456 * FIXME: in case one target cannot
457 * be init'd, should the other ones
460 ( void )meta_clear_one_candidate( lc->conns[ i ], 1 );
467 * if no unique candidate ...
470 int ndnlen = strlen( ndn );
471 for ( i = 0; i < li->ntargets; i++ ) {
473 || meta_back_is_candidate( li->targets[ i ]->suffix,
477 * The target is activated; if needed, it is
480 int lerr = init_one_conn( conn, op,
482 vers, lc->conns[ i ] );
483 if ( lerr != LDAP_SUCCESS ) {
486 * FIXME: in case one target cannot
487 * be init'd, should the other ones
490 ( void )meta_clear_one_candidate( lc->conns[ i ], 1 );
501 * Inserts the newly created metaconn in the avl tree
503 ldap_pvt_thread_mutex_lock( &li->conn_mutex );
504 err = avl_insert( &li->conntree, ( caddr_t )lc,
505 meta_back_conn_cmp, meta_back_conn_dup );
507 #if PRINT_CONNTREE > 0
508 myprint( li->conntree );
509 #endif /* PRINT_CONNTREE */
511 ldap_pvt_thread_mutex_unlock( &li->conn_mutex );
514 LDAP_LOG(( "backend", LDAP_LEVEL_INFO,
515 "meta_back_getconn: conn %ld inserted\n",
516 lc->conn->c_connid ));
517 #else /* !NEW_LOGGING */
518 Debug( LDAP_DEBUG_TRACE,
519 "=>meta_back_getconn: conn %ld inserted\n%s%s",
520 lc->conn->c_connid, "", "" );
521 #endif /* !NEW_LOGGING */
524 * Err could be -1 in case a duplicate metaconn is inserted
527 send_ldap_result( conn, op, LDAP_OPERATIONS_ERROR,
528 NULL, "Internal server error", NULL, NULL );
534 LDAP_LOG(( "backend", LDAP_LEVEL_INFO,
535 "meta_back_getconn: conn %ld fetched\n",
536 lc->conn->c_connid ));
537 #else /* !NEW_LOGGING */
538 Debug( LDAP_DEBUG_TRACE,
539 "=>meta_back_getconn: conn %ld fetched\n%s%s",
540 lc->conn->c_connid, "", "" );
541 #endif /* !NEW_LOGGING */