]> git.sur5r.net Git - openldap/blob - servers/slapd/connection.c
dedadbc33803d166759a39d8edda2b4cdf24ed48
[openldap] / servers / slapd / connection.c
1 #include "portable.h"
2
3 #include <stdio.h>
4
5 #include <ac/socket.h>
6 #include <ac/errno.h>
7 #include <ac/signal.h>
8 #include <ac/string.h>
9 #include <ac/time.h>
10
11 #include "slap.h"
12
13 /* we need LBER internals */
14 #include "../../libraries/liblber/lber-int.h"
15
16 /* protected by connections_mutex */
17 static ldap_pvt_thread_mutex_t connections_mutex;
18 static Connection *connections = NULL;
19 static unsigned long conn_nextid = 0;
20
21 /* structure state (protected by connections_mutex) */
22 #define SLAP_C_UNINITIALIZED    0x00    /* MUST BE ZERO (0) */
23 #define SLAP_C_UNUSED                   0x01
24 #define SLAP_C_USED                             0x02
25
26 /* connection state (protected by c_mutex ) */
27 #define SLAP_C_INVALID                  0x00    /* MUST BE ZERO (0) */
28 #define SLAP_C_INACTIVE                 0x01    /* zero threads */
29 #define SLAP_C_ACTIVE                   0x02    /* one or more threads */
30 #define SLAP_C_BINDING                  0x03    /* binding */
31 #define SLAP_C_CLOSING                  0x04    /* closing */
32
33 char* connection_state2str( int state ) {
34         switch( state ) {
35         case SLAP_C_INVALID:    return "!";             
36         case SLAP_C_INACTIVE:   return "|";             
37         case SLAP_C_ACTIVE:             return "";                      
38         case SLAP_C_BINDING:    return "B";
39         case SLAP_C_CLOSING:    return "C";                     
40         }
41
42         return "?";
43 }
44
45 static Connection* connection_get( ber_socket_t s );
46
47 static int connection_input( Connection *c );
48 static void connection_close( Connection *c );
49
50 static int connection_op_activate( Connection *conn, Operation *op );
51 static int connection_resched( Connection *conn );
52 static void connection_abandon( Connection *conn );
53 static void connection_destroy( Connection *c );
54
55 struct co_arg {
56         Connection      *co_conn;
57         Operation       *co_op;
58 };
59
60 /*
61  * Initialize connection management infrastructure.
62  */
63 int connections_init(void)
64 {
65         assert( connections == NULL );
66
67         if( connections != NULL) {
68                 Debug( LDAP_DEBUG_ANY, "connections_init: already initialized.\n",
69                         0, 0, 0 );
70                 return -1;
71         }
72
73         /* should check return of every call */
74         ldap_pvt_thread_mutex_init( &connections_mutex );
75
76         connections = (Connection *) calloc( dtblsize, sizeof(Connection) );
77
78         if( connections == NULL ) {
79                 Debug( LDAP_DEBUG_ANY,
80                         "connections_init: allocation (%d*%ld) of connection array failed.\n",
81                         dtblsize, (long) sizeof(Connection), 0 );
82                 return -1;
83         }
84
85     assert( connections[0].c_struct_state == SLAP_C_UNINITIALIZED );
86     assert( connections[dtblsize-1].c_struct_state == SLAP_C_UNINITIALIZED );
87
88         /*
89          * per entry initialization of the Connection array initialization
90          * will be done by connection_init()
91          */ 
92
93         return 0;
94 }
95
96 /*
97  * Destroy connection management infrastructure.
98  */
99 int connections_destroy(void)
100 {
101         ber_socket_t i;
102
103         /* should check return of every call */
104
105         if( connections == NULL) {
106                 Debug( LDAP_DEBUG_ANY, "connections_destroy: nothing to destroy.\n",
107                         0, 0, 0 );
108                 return -1;
109         }
110
111         for ( i = 0; i < dtblsize; i++ ) {
112                 if( connections[i].c_struct_state != SLAP_C_UNINITIALIZED ) {
113                         ldap_pvt_thread_mutex_destroy( &connections[i].c_mutex );
114                         ldap_pvt_thread_mutex_destroy( &connections[i].c_write_mutex );
115                         ldap_pvt_thread_cond_destroy( &connections[i].c_write_cv );
116                 }
117         }
118
119         free( connections );
120         connections = NULL;
121
122         ldap_pvt_thread_mutex_destroy( &connections_mutex );
123         return 0;
124 }
125
126 /*
127  * shutdown all connections
128  */
129 int connections_shutdown(void)
130 {
131         ber_socket_t i;
132
133         ldap_pvt_thread_mutex_lock( &connections_mutex );
134
135         for ( i = 0; i < dtblsize; i++ ) {
136                 if( connections[i].c_struct_state != SLAP_C_USED ) {
137                         continue;
138                 }
139
140                 ldap_pvt_thread_mutex_lock( &connections[i].c_mutex );
141
142                 /* connections_mutex and c_mutex are locked */
143                 connection_closing( &connections[i] );
144                 connection_close( &connections[i] );
145
146                 ldap_pvt_thread_mutex_unlock( &connections[i].c_mutex );
147         }
148
149         ldap_pvt_thread_mutex_unlock( &connections_mutex );
150
151         return 0;
152 }
153
154 /*
155  * Timeout idle connections.
156  */
157 int connections_timeout_idle(time_t now)
158 {
159         int i = 0;
160         int connindex;
161         Connection* c;
162
163         ldap_pvt_thread_mutex_lock( &connections_mutex );
164
165         for( c = connection_first( &connindex );
166                 c != NULL;
167                 c = connection_next( c, &connindex ) )
168         {
169                 if( difftime( c->c_activitytime+global_idletimeout, now) < 0 ) {
170                         /* close it */
171                         connection_closing( c );
172                         connection_close( c );
173                         i++;
174                 }
175         }
176         connection_done( c );
177
178         ldap_pvt_thread_mutex_unlock( &connections_mutex );
179
180         return i;
181 }
182
183 static Connection* connection_get( ber_socket_t s )
184 {
185         /* connections_mutex should be locked by caller */
186
187         Connection *c;
188
189         Debug( LDAP_DEBUG_ARGS,
190                 "connection_get(%ld)\n",
191                 (long) s, 0, 0 );
192
193         assert( connections != NULL );
194
195         if(s == AC_SOCKET_INVALID) {
196                 return NULL;
197         }
198
199 #ifndef HAVE_WINSOCK
200         c = &connections[s];
201
202         assert( c->c_struct_state != SLAP_C_UNINITIALIZED );
203
204 #else
205         c = NULL;
206         {
207                 ber_socket_t i;
208
209                 for(i=0; i<dtblsize; i++) {
210                         if( connections[i].c_struct_state == SLAP_C_UNINITIALIZED ) {
211                                 assert( connections[i].c_conn_state == SLAP_C_INVALID );
212                                 assert( connections[i].c_sb == 0 );
213                                 break;
214                         }
215
216                         if( connections[i].c_struct_state == SLAP_C_UNUSED ) {
217                                 assert( connections[i].c_conn_state == SLAP_C_INVALID );
218                                 assert( !ber_pvt_sb_in_use( connections[i].c_sb ) );
219                                 continue;
220                         }
221
222                         /* state can actually change from used -> unused by resched,
223                          * so don't assert details here.
224                          */
225
226                         if( ber_pvt_sb_get_desc( connections[i].c_sb ) == s ) {
227                                 c = &connections[i];
228                                 break;
229                         }
230                 }
231         }
232 #endif
233
234         if( c != NULL ) {
235                 ldap_pvt_thread_mutex_lock( &c->c_mutex );
236
237                 if( c->c_struct_state != SLAP_C_USED ) {
238                         /* connection must have been closed due to resched */
239
240                         assert( c->c_conn_state == SLAP_C_INVALID );
241                         assert( !ber_pvt_sb_in_use( c->c_sb ) );
242
243                         Debug( LDAP_DEBUG_TRACE,
244                                 "connection_get(%d): connection not used.\n",
245                                 s, c->c_connid, 0 );
246
247                         ldap_pvt_thread_mutex_unlock( &c->c_mutex );
248                         return NULL;
249                 }
250
251                 Debug( LDAP_DEBUG_TRACE,
252                         "connection_get(%d): got connid=%ld\n",
253                         s, c->c_connid, 0 );
254
255                 c->c_n_get++;
256
257                 assert( c->c_struct_state == SLAP_C_USED );
258                 assert( c->c_conn_state != SLAP_C_INVALID );
259                 assert( ber_pvt_sb_in_use( c->c_sb ) );
260
261         c->c_activitytime = slap_get_time();
262         }
263
264         return c;
265 }
266
267 static void connection_return( Connection *c )
268 {
269         ldap_pvt_thread_mutex_unlock( &c->c_mutex );
270 }
271
272 long connection_init(
273         ber_socket_t s,
274         const char* name,
275         const char* addr,
276         int use_tls)
277 {
278         unsigned long id;
279         Connection *c;
280         assert( connections != NULL );
281
282         if( s == AC_SOCKET_INVALID ) {
283         Debug( LDAP_DEBUG_ANY,
284                         "connection_init(%ld): invalid.\n",
285                         (long) s, 0, 0 );
286                 return -1;
287         }
288
289         assert( s >= 0 );
290 #ifndef HAVE_WINSOCK
291         assert( s < dtblsize );
292 #endif
293
294         ldap_pvt_thread_mutex_lock( &connections_mutex );
295
296 #ifndef HAVE_WINSOCK
297         c = &connections[s];
298
299 #else
300         {
301                 unsigned int i;
302
303                 c = NULL;
304
305         for( i=0; i < dtblsize; i++) {
306             if( connections[i].c_struct_state == SLAP_C_UNINITIALIZED ) {
307                 assert( connections[i].c_sb == 0 );
308                 c = &connections[i];
309                 break;
310             }
311
312             if( connections[i].c_struct_state == SLAP_C_UNUSED ) {
313                 assert( !ber_pvt_sb_in_use( connections[i].c_sb ));
314                 c = &connections[i];
315                 break;
316             }
317
318             assert( connections[i].c_struct_state == SLAP_C_USED );
319             assert( connections[i].c_conn_state != SLAP_C_INVALID );
320             assert( ber_pvt_sb_in_use( connections[i].c_sb ));
321         }
322
323         if( c == NULL ) {
324                 Debug( LDAP_DEBUG_ANY,
325                                 "connection_init(%d): connection table full (%d/%d).\n",
326                                 s, i, dtblsize);
327             ldap_pvt_thread_mutex_unlock( &connections_mutex );
328             return -1;
329         }
330     }
331 #endif
332
333     assert( c != NULL );
334     assert( c->c_struct_state != SLAP_C_USED );
335     assert( c->c_conn_state == SLAP_C_INVALID );
336
337     if( c->c_struct_state == SLAP_C_UNINITIALIZED ) {
338         c->c_dn = NULL;
339         c->c_cdn = NULL;
340         c->c_client_name = NULL;
341         c->c_client_addr = NULL;
342         c->c_ops = NULL;
343         c->c_pending_ops = NULL;
344                 c->c_authmech = NULL;
345                 c->c_authstate = NULL;
346
347         c->c_sb = ber_sockbuf_alloc( );
348
349         /* should check status of thread calls */
350         ldap_pvt_thread_mutex_init( &c->c_mutex );
351         ldap_pvt_thread_mutex_init( &c->c_write_mutex );
352         ldap_pvt_thread_cond_init( &c->c_write_cv );
353
354         c->c_struct_state = SLAP_C_UNUSED;
355     }
356
357     ldap_pvt_thread_mutex_lock( &c->c_mutex );
358
359     assert( c->c_struct_state == SLAP_C_UNUSED );
360     assert(     c->c_dn == NULL );
361     assert(     c->c_cdn == NULL );
362     assert( c->c_client_name == NULL );
363     assert( c->c_client_addr == NULL );
364     assert( c->c_ops == NULL );
365     assert( c->c_pending_ops == NULL );
366         assert( c->c_authmech == NULL );
367         assert( c->c_authstate == NULL );
368
369     c->c_client_name = ch_strdup( name == NULL ? "" : name );
370     c->c_client_addr = ch_strdup( addr );
371
372     c->c_n_ops_received = 0;
373     c->c_n_ops_executing = 0;
374     c->c_n_ops_pending = 0;
375     c->c_n_ops_completed = 0;
376
377         c->c_n_get = 0;
378         c->c_n_read = 0;
379         c->c_n_write = 0;
380
381     c->c_activitytime = c->c_starttime = slap_get_time();
382
383     ber_pvt_sb_set_desc( c->c_sb, s );
384     ber_pvt_sb_set_io( c->c_sb, &ber_pvt_sb_io_tcp, NULL );
385
386     if( ber_pvt_sb_set_nonblock( c->c_sb, 1 ) < 0 ) {
387         Debug( LDAP_DEBUG_ANY,
388             "connection_init(%d, %s, %s): set nonblocking failed\n",
389             s, c->c_client_name, c->c_client_addr);
390     }
391
392     id = c->c_connid = conn_nextid++;
393
394     c->c_conn_state = SLAP_C_INACTIVE;
395     c->c_struct_state = SLAP_C_USED;
396
397     if ( use_tls ) {
398             c->c_is_tls = 1;
399             c->c_needs_tls_accept = 1;
400     }
401
402     ldap_pvt_thread_mutex_unlock( &c->c_mutex );
403     ldap_pvt_thread_mutex_unlock( &connections_mutex );
404
405     backend_connection_init(c);
406
407     return id;
408 }
409
410 static void
411 connection_destroy( Connection *c )
412 {
413         /* note: connections_mutex should be locked by caller */
414
415     assert( connections != NULL );
416     assert( c != NULL );
417     assert( c->c_struct_state != SLAP_C_UNUSED );
418     assert( c->c_conn_state != SLAP_C_INVALID );
419     assert( c->c_ops == NULL );
420
421     backend_connection_destroy(c);
422
423     c->c_protocol = 0;
424
425     c->c_activitytime = c->c_starttime = 0;
426
427     if(c->c_dn != NULL) {
428         free(c->c_dn);
429         c->c_dn = NULL;
430     }
431         if(c->c_cdn != NULL) {
432                 free(c->c_cdn);
433                 c->c_cdn = NULL;
434         }
435         if(c->c_client_name != NULL) {
436                 free(c->c_client_name);
437                 c->c_client_name = NULL;
438         }
439         if(c->c_client_addr != NULL) {
440                 free(c->c_client_addr);
441                 c->c_client_addr = NULL;
442         }
443         if(c->c_authmech != NULL ) {
444                 free(c->c_authmech);
445                 c->c_authmech = NULL;
446         }
447         if(c->c_authstate != NULL ) {
448                 free(c->c_authstate);
449                 c->c_authstate = NULL;
450         }
451
452         if ( ber_pvt_sb_in_use(c->c_sb) ) {
453                 int sd = ber_pvt_sb_get_desc(c->c_sb);
454
455                 slapd_remove( sd, 0 );
456                 ber_pvt_sb_close( c->c_sb );
457
458                 Statslog( LDAP_DEBUG_STATS,
459                     "conn=%d fd=%d closed.\n",
460                         c->c_connid, sd, 0, 0, 0 );
461         }
462
463         ber_pvt_sb_destroy( c->c_sb );
464
465     c->c_conn_state = SLAP_C_INVALID;
466     c->c_struct_state = SLAP_C_UNUSED;
467 }
468
469 int connection_state_closing( Connection *c )
470 {
471         /* c_mutex must be locked by caller */
472
473         int state;
474         assert( c != NULL );
475         assert( c->c_struct_state == SLAP_C_USED );
476
477         state = c->c_conn_state;
478
479         assert( state != SLAP_C_INVALID );
480
481         return state == SLAP_C_CLOSING;
482 }
483
484 static void connection_abandon( Connection *c )
485 {
486         /* c_mutex must be locked by caller */
487
488         Operation *o;
489
490         for( o = c->c_ops; o != NULL; o = o->o_next ) {
491                 ldap_pvt_thread_mutex_lock( &o->o_abandonmutex );
492                 o->o_abandon = 1;
493                 ldap_pvt_thread_mutex_unlock( &o->o_abandonmutex );
494         }
495
496         /* remove pending operations */
497         for( o = slap_op_pop( &c->c_pending_ops );
498                 o != NULL;
499                 o = slap_op_pop( &c->c_pending_ops ) )
500         {
501                 slap_op_free( o );
502         }
503 }
504
505 void connection_closing( Connection *c )
506 {
507         assert( connections != NULL );
508         assert( c != NULL );
509         assert( c->c_struct_state == SLAP_C_USED );
510         assert( c->c_conn_state != SLAP_C_INVALID );
511
512         /* c_mutex must be locked by caller */
513
514         if( c->c_conn_state != SLAP_C_CLOSING ) {
515
516                 Debug( LDAP_DEBUG_TRACE,
517                         "connection_closing: readying conn=%ld sd=%d for close.\n",
518                         c->c_connid, ber_pvt_sb_get_desc( c->c_sb ), 0 );
519
520                 /* update state to closing */
521                 c->c_conn_state = SLAP_C_CLOSING;
522
523                 /* don't listen on this port anymore */
524                 slapd_clr_read( ber_pvt_sb_get_desc( c->c_sb ), 1 );
525
526                 /* shutdown I/O -- not yet implemented */
527
528                 /* abandon active operations */
529                 connection_abandon( c );
530
531                 /* wake write blocked operations */
532                 slapd_clr_write( ber_pvt_sb_get_desc(c->c_sb), 1 );
533                 ldap_pvt_thread_cond_signal( &c->c_write_cv );
534         }
535 }
536
537 static void connection_close( Connection *c )
538 {
539         assert( connections != NULL );
540         assert( c != NULL );
541         assert( c->c_struct_state == SLAP_C_USED );
542         assert( c->c_conn_state == SLAP_C_CLOSING );
543
544         /* note: connections_mutex and c_mutex should be locked by caller */
545
546         if( c->c_ops != NULL ) {
547                 Debug( LDAP_DEBUG_TRACE,
548                         "connection_close: deferring conn=%ld sd=%d.\n",
549                         c->c_connid, ber_pvt_sb_get_desc( c->c_sb ), 0 );
550
551                 return;
552         }
553
554         Debug( LDAP_DEBUG_TRACE, "connection_close: conn=%ld sd=%d.\n",
555                 c->c_connid, ber_pvt_sb_get_desc( c->c_sb ), 0 );
556
557         connection_destroy( c );
558 }
559
560 unsigned long connections_nextid(void)
561 {
562         unsigned long id;
563         assert( connections != NULL );
564
565         ldap_pvt_thread_mutex_lock( &connections_mutex );
566
567         id = conn_nextid;
568
569         ldap_pvt_thread_mutex_unlock( &connections_mutex );
570
571         return id;
572 }
573
574 Connection* connection_first( ber_socket_t *index )
575 {
576         assert( connections != NULL );
577         assert( index != NULL );
578
579         ldap_pvt_thread_mutex_lock( &connections_mutex );
580
581         *index = 0;
582
583         return connection_next(NULL, index);
584 }
585
586 Connection* connection_next( Connection *c, ber_socket_t *index )
587 {
588         assert( connections != NULL );
589         assert( index != NULL );
590         assert( *index <= dtblsize );
591
592         if( c != NULL ) {
593                 ldap_pvt_thread_mutex_unlock( &c->c_mutex );
594         }
595
596         c = NULL;
597
598         for(; *index < dtblsize; (*index)++) {
599                 if( connections[*index].c_struct_state == SLAP_C_UNINITIALIZED ) {
600                         assert( connections[*index].c_conn_state == SLAP_C_INVALID );
601 #ifndef HAVE_WINSOCK
602                         continue;
603 #else
604                         break;
605 #endif
606                 }
607
608                 if( connections[*index].c_struct_state == SLAP_C_USED ) {
609                         assert( connections[*index].c_conn_state != SLAP_C_INVALID );
610                         c = &connections[(*index)++];
611                         break;
612                 }
613
614                 assert( connections[*index].c_struct_state == SLAP_C_UNUSED );
615                 assert( connections[*index].c_conn_state == SLAP_C_INVALID );
616         }
617
618         if( c != NULL ) {
619                 ldap_pvt_thread_mutex_lock( &c->c_mutex );
620         }
621
622         return c;
623 }
624
625 void connection_done( Connection *c )
626 {
627         assert( connections != NULL );
628
629         if( c != NULL ) {
630                 ldap_pvt_thread_mutex_unlock( &c->c_mutex );
631         }
632
633         ldap_pvt_thread_mutex_unlock( &connections_mutex );
634 }
635
636 /*
637  * connection_activity - handle the request operation op on connection
638  * conn.  This routine figures out what kind of operation it is and
639  * calls the appropriate stub to handle it.
640  */
641
642 static void *
643 connection_operation( void *arg_v )
644 {
645         int rc;
646         struct co_arg   *arg = arg_v;
647         ber_tag_t tag = arg->co_op->o_tag;
648         Connection *conn = arg->co_conn;
649
650         ldap_pvt_thread_mutex_lock( &num_ops_mutex );
651         num_ops_initiated++;
652         ldap_pvt_thread_mutex_unlock( &num_ops_mutex );
653
654         switch ( tag ) {
655         case LDAP_REQ_BIND:
656                 rc = do_bind( conn, arg->co_op );
657                 break;
658
659         case LDAP_REQ_UNBIND:
660                 rc = do_unbind( conn, arg->co_op );
661                 break;
662
663         case LDAP_REQ_ADD:
664                 rc = do_add( conn, arg->co_op );
665                 break;
666
667         case LDAP_REQ_DELETE:
668                 rc = do_delete( conn, arg->co_op );
669                 break;
670
671         case LDAP_REQ_MODRDN:
672                 rc = do_modrdn( conn, arg->co_op );
673                 break;
674
675         case LDAP_REQ_MODIFY:
676                 rc = do_modify( conn, arg->co_op );
677                 break;
678
679         case LDAP_REQ_COMPARE:
680                 rc = do_compare( conn, arg->co_op );
681                 break;
682
683         case LDAP_REQ_SEARCH:
684                 rc = do_search( conn, arg->co_op );
685                 break;
686
687         case LDAP_REQ_ABANDON:
688                 rc = do_abandon( conn, arg->co_op );
689                 break;
690
691         case LDAP_REQ_EXTENDED:
692                 rc = do_extended( conn, arg->co_op );
693                 break;
694
695         default:
696                 Debug( LDAP_DEBUG_ANY, "unknown LDAP request 0x%lx\n",
697                     tag, 0, 0 );
698                 arg->co_op->o_tag = LBER_ERROR;
699                 send_ldap_disconnect( conn, arg->co_op,
700                         LDAP_PROTOCOL_ERROR, "unknown LDAP request" );
701                 rc = -1;
702                 break;
703         }
704
705         if( rc == -1 ) tag = LBER_ERROR;
706
707         ldap_pvt_thread_mutex_lock( &num_ops_mutex );
708         num_ops_completed++;
709         ldap_pvt_thread_mutex_unlock( &num_ops_mutex );
710
711         ldap_pvt_thread_mutex_lock( &conn->c_mutex );
712
713         conn->c_n_ops_executing--;
714         conn->c_n_ops_completed++;
715
716         slap_op_remove( &conn->c_ops, arg->co_op );
717         slap_op_free( arg->co_op );
718         arg->co_op = NULL;
719         arg->co_conn = NULL;
720         free( (char *) arg );
721         arg = NULL;
722
723         switch( tag ) {
724         case LBER_ERROR:
725         case LDAP_REQ_UNBIND:
726                 /* c_mutex is locked */
727                 connection_closing( conn );
728                 break;
729
730         case LDAP_REQ_BIND:
731                 if( conn->c_conn_state == SLAP_C_BINDING) {
732                         conn->c_conn_state = SLAP_C_ACTIVE;
733                 }
734                 conn->c_bind_in_progress = ( rc == LDAP_SASL_BIND_IN_PROGRESS );
735         }
736
737         ldap_pvt_thread_mutex_lock( &active_threads_mutex );
738         active_threads--;
739         if( active_threads < 1 ) {
740                 ldap_pvt_thread_cond_signal(&active_threads_cond);
741         }
742         ldap_pvt_thread_mutex_unlock( &active_threads_mutex );
743
744         connection_resched( conn );
745
746         ldap_pvt_thread_mutex_unlock( &conn->c_mutex );
747
748         return NULL;
749 }
750
751 int connection_read(ber_socket_t s)
752 {
753         int rc = 0;
754         Connection *c;
755         assert( connections != NULL );
756
757         ldap_pvt_thread_mutex_lock( &connections_mutex );
758
759         /* get (locked) connection */
760         c = connection_get( s );
761
762         if( c == NULL ) {
763                 Debug( LDAP_DEBUG_ANY,
764                         "connection_read(%ld): no connection!\n",
765                         (long) s, 0, 0 );
766
767                 slapd_remove(s, 0);
768
769                 ldap_pvt_thread_mutex_unlock( &connections_mutex );
770                 return -1;
771         }
772
773         c->c_n_read++;
774
775         if( c->c_conn_state == SLAP_C_CLOSING ) {
776                 Debug( LDAP_DEBUG_TRACE,
777                         "connection_read(%d): closing, ignoring input for id=%ld\n",
778                         s, c->c_connid, 0 );
779
780                 connection_return( c );
781                 ldap_pvt_thread_mutex_unlock( &connections_mutex );
782                 return 0;
783         }
784
785         Debug( LDAP_DEBUG_TRACE,
786                 "connection_read(%d): checking for input on id=%ld\n",
787                 s, c->c_connid, 0 );
788
789 #ifdef HAVE_TLS
790         if ( c->c_is_tls && c->c_needs_tls_accept ) {
791                 rc = ldap_pvt_tls_accept( c->c_sb, NULL );
792                 if ( rc < 0 ) {
793                         Debug( LDAP_DEBUG_TRACE,
794                                "connection_read(%d): TLS accept error error=%d id=%ld, closing.\n",
795                                s, rc, c->c_connid );
796
797                         /* connections_mutex and c_mutex are locked */
798                         connection_closing( c );
799                         connection_close( c );
800                 } else if ( rc == 0 ) {
801                         c->c_needs_tls_accept = 0;
802                 }
803                 connection_return( c );
804                 ldap_pvt_thread_mutex_unlock( &connections_mutex );
805                 return 0;
806         }
807 #endif
808
809 #define CONNECTION_INPUT_LOOP 1
810
811 #ifdef DATA_READY_LOOP
812         while(!rc && ber_pvt_sb_data_ready(&c->c_sb))
813 #elif CONNECTION_INPUT_LOOP
814         while(!rc)
815 #endif
816         {
817                 rc = connection_input( c );
818         }
819
820         if( rc < 0 ) {
821                 Debug( LDAP_DEBUG_TRACE,
822                         "connection_read(%d): input error=%d id=%ld, closing.\n",
823                         s, rc, c->c_connid );
824
825                 /* connections_mutex and c_mutex are locked */
826                 connection_closing( c );
827                 connection_close( c );
828         }
829
830         connection_return( c );
831         ldap_pvt_thread_mutex_unlock( &connections_mutex );
832         return 0;
833 }
834
835 static int
836 connection_input(
837     Connection *conn
838 )
839 {
840         Operation *op;
841         ber_tag_t       tag;
842         ber_len_t       len;
843         ber_int_t       msgid;
844         BerElement      *ber;
845
846         if ( conn->c_currentber == NULL && (conn->c_currentber = ber_alloc())
847             == NULL ) {
848                 Debug( LDAP_DEBUG_ANY, "ber_alloc failed\n", 0, 0, 0 );
849                 return -1;
850         }
851
852         errno = 0;
853         if ( (tag = ber_get_next( conn->c_sb, &len, conn->c_currentber ))
854             != LDAP_TAG_MESSAGE )
855         {
856                 int err = errno;
857
858                 Debug( LDAP_DEBUG_TRACE,
859                         "ber_get_next on fd %d failed errno %d (%s)\n",
860                         ber_pvt_sb_get_desc( conn->c_sb ), err,
861                         err > -1 && err < sys_nerr ?  sys_errlist[err] : "unknown" );
862                 Debug( LDAP_DEBUG_TRACE,
863                         "\t*** got %ld of %lu so far\n",
864                         (long)(conn->c_currentber->ber_rwptr - conn->c_currentber->ber_buf),
865                         conn->c_currentber->ber_len, 0 );
866
867                 if ( err != EWOULDBLOCK && err != EAGAIN ) {
868                         /* log, close and send error */
869                         ber_free( conn->c_currentber, 1 );
870                         conn->c_currentber = NULL;
871
872                         return -2;
873                 }
874                 return 1;
875         }
876
877         ber = conn->c_currentber;
878         conn->c_currentber = NULL;
879
880         if ( (tag = ber_get_int( ber, &msgid )) != LDAP_TAG_MSGID ) {
881                 /* log, close and send error */
882                 Debug( LDAP_DEBUG_ANY, "ber_get_int returns 0x%lx\n", tag, 0,
883                     0 );
884                 ber_free( ber, 1 );
885                 return -1;
886         }
887
888         if ( (tag = ber_peek_tag( ber, &len )) == LBER_ERROR ) {
889                 /* log, close and send error */
890                 Debug( LDAP_DEBUG_ANY, "ber_peek_tag returns 0x%lx\n", tag, 0,
891                     0 );
892                 ber_free( ber, 1 );
893
894                 return -1;
895         }
896
897         if(tag == LDAP_REQ_BIND) {
898                 /* immediately abandon all exiting operations upon BIND */
899                 connection_abandon( conn );
900         }
901
902         op = slap_op_alloc( ber, msgid, tag, conn->c_n_ops_received++ );
903
904         if ( conn->c_conn_state == SLAP_C_BINDING
905                 || conn->c_conn_state == SLAP_C_CLOSING )
906         {
907                 Debug( LDAP_DEBUG_ANY, "deferring operation\n", 0, 0, 0 );
908                 conn->c_n_ops_pending++;
909                 slap_op_add( &conn->c_pending_ops, op );
910
911         } else {
912                 conn->c_n_ops_executing++;
913                 connection_op_activate( conn, op );
914         }
915
916 #ifdef NO_THREADS
917         if ( conn->c_struct_state != SLAP_C_USED ) {
918                 /* connection must have got closed underneath us */
919                 return 1;
920         }
921 #endif
922         assert( conn->c_struct_state == SLAP_C_USED );
923
924         return 0;
925 }
926
927 static int
928 connection_resched( Connection *conn )
929 {
930         Operation *op;
931
932         if( conn->c_conn_state == SLAP_C_CLOSING ) {
933                 Debug( LDAP_DEBUG_TRACE,
934                         "connection_resched: attempting closing conn=%ld sd=%d.\n",
935                         conn->c_connid, ber_pvt_sb_get_desc( conn->c_sb ), 0 );
936
937                 connection_close( conn );
938                 return 0;
939         }
940
941         if( conn->c_conn_state != SLAP_C_ACTIVE ) {
942                 /* other states need different handling */
943                 return 0;
944         }
945
946         for( op = slap_op_pop( &conn->c_pending_ops );
947                 op != NULL;
948                 op = slap_op_pop( &conn->c_pending_ops ) )
949         {
950                 /* pending operations should not be marked for abandonment */
951                 assert(!op->o_abandon);
952
953                 conn->c_n_ops_pending--;
954                 conn->c_n_ops_executing++;
955
956                 connection_op_activate( conn, op );
957
958                 if ( conn->c_conn_state == SLAP_C_BINDING ) {
959                         break;
960                 }
961         }
962         return 0;
963 }
964
965 static int connection_op_activate( Connection *conn, Operation *op )
966 {
967         struct co_arg *arg;
968         char *tmpdn;
969         int status;
970         ber_tag_t tag = op->o_tag;
971
972         if(tag == LDAP_REQ_BIND) {
973                 conn->c_conn_state = SLAP_C_BINDING;
974         }
975
976         if ( conn->c_dn != NULL ) {
977                 tmpdn = ch_strdup( conn->c_dn );
978         } else {
979                 tmpdn = NULL;
980         }
981
982         arg = (struct co_arg *) ch_malloc( sizeof(struct co_arg) );
983         arg->co_conn = conn;
984         arg->co_op = op;
985
986         arg->co_op->o_bind_in_progress = conn->c_bind_in_progress;
987
988         arg->co_op->o_dn = ch_strdup( tmpdn != NULL ? tmpdn : "" );
989         arg->co_op->o_ndn = dn_normalize_case( ch_strdup( arg->co_op->o_dn ) );
990
991         arg->co_op->o_protocol = conn->c_protocol;
992
993         arg->co_op->o_authtype = conn->c_authtype;
994         arg->co_op->o_authmech = conn->c_authmech != NULL
995                 ?  ch_strdup( conn->c_authmech ) : NULL;
996         
997         slap_op_add( &conn->c_ops, arg->co_op );
998
999         if( tmpdn != NULL ) {
1000                 free( tmpdn );
1001         }
1002
1003         ldap_pvt_thread_mutex_lock( &active_threads_mutex );
1004         active_threads++;
1005         ldap_pvt_thread_mutex_unlock( &active_threads_mutex );
1006
1007         status = ldap_pvt_thread_create( &arg->co_op->o_tid, 1,
1008                                          connection_operation, (void *) arg );
1009
1010         if ( status != 0 ) {
1011                 Debug( LDAP_DEBUG_ANY,
1012                 "ldap_pvt_thread_create failed (%d)\n", status, 0, 0 );
1013
1014                 /* should move op to pending list */
1015         }
1016
1017         return status;
1018 }
1019
1020 int connection_write(ber_socket_t s)
1021 {
1022         Connection *c;
1023         assert( connections != NULL );
1024
1025         ldap_pvt_thread_mutex_lock( &connections_mutex );
1026
1027         c = connection_get( s );
1028
1029         slapd_clr_write( s, 0);
1030
1031         if( c == NULL ) {
1032                 Debug( LDAP_DEBUG_ANY,
1033                         "connection_write(%ld): no connection!\n",
1034                         (long) s, 0, 0 );
1035                 slapd_remove(s, 0);
1036                 ldap_pvt_thread_mutex_unlock( &connections_mutex );
1037                 return -1;
1038         }
1039
1040         c->c_n_write++;
1041
1042         Debug( LDAP_DEBUG_TRACE,
1043                 "connection_write(%d): waking output for id=%ld\n",
1044                 s, c->c_connid, 0 );
1045
1046         ldap_pvt_thread_cond_signal( &c->c_write_cv );
1047
1048         connection_return( c );
1049         ldap_pvt_thread_mutex_unlock( &connections_mutex );
1050         return 0;
1051 }