git.sur5r.net Git - openldap/blob - servers/slapd/overlays/retcode.c

   1 /* retcode.c - customizable response for client testing purposes */
   2 /* $OpenLDAP$ */
   3 /* This work is part of OpenLDAP Software <http://www.openldap.org/>.
   4  *
   5  * Copyright 2005 The OpenLDAP Foundation.
   6  * Portions Copyright 2005 Pierangelo Masarati <ando@sys-net.it>
   7  * All rights reserved.
   8  *
   9  * Redistribution and use in source and binary forms, with or without
  10  * modification, are permitted only as authorized by the OpenLDAP
  11  * Public License.
  12  *
  13  * A copy of this license is available in the file LICENSE in the
  14  * top-level directory of the distribution or, alternatively, at
  15  * <http://www.OpenLDAP.org/license.html>.
  16  */
  17 /* ACKNOWLEDGEMENTS:
  18  * This work was initially developed by Pierangelo Masarati for inclusion
  19  * in OpenLDAP Software.
  20  */
  21
  22 #include "portable.h"
  23
  24 #ifdef SLAPD_OVER_RETCODE
  25
  26 #include <stdio.h>
  27
  28 #include <ac/unistd.h>
  29 #include <ac/string.h>
  30 #include <ac/ctype.h>
  31 #include <ac/socket.h>
  32
  33 #include "slap.h"
  34 #include "lutil.h"
  35
  36 static slap_overinst            retcode;
  37
  38 static AttributeDescription     *ad_errCode;
  39 static AttributeDescription     *ad_errText;
  40 static AttributeDescription     *ad_errOp;
  41 static AttributeDescription     *ad_errSleepTime;
  42 static AttributeDescription     *ad_errMatchedDN;
  43 static ObjectClass              *oc_errAbsObject;
  44 static ObjectClass              *oc_errObject;
  45 static ObjectClass              *oc_errAuxObject;
  46
  47 typedef enum retcode_op_e {
  48         SN_DG_OP_NONE           = 0x0000,
  49         SN_DG_OP_ADD            = 0x0001,
  50         SN_DG_OP_BIND           = 0x0002,
  51         SN_DG_OP_COMPARE        = 0x0004,
  52         SN_DG_OP_DELETE         = 0x0008,
  53         SN_DG_OP_MODIFY         = 0x0010,
  54         SN_DG_OP_RENAME         = 0x0020,
  55         SN_DG_OP_SEARCH         = 0x0040,
  56         SN_DG_EXTENDED          = 0x0080,
  57         SN_DG_OP_AUTH           = SN_DG_OP_BIND,
  58         SN_DG_OP_READ           = (SN_DG_OP_COMPARE|SN_DG_OP_SEARCH),
  59         SN_DG_OP_WRITE          = (SN_DG_OP_ADD|SN_DG_OP_DELETE|SN_DG_OP_MODIFY|SN_DG_OP_RENAME),
  60         SN_DG_OP_ALL            = (SN_DG_OP_AUTH|SN_DG_OP_READ|SN_DG_OP_WRITE|SN_DG_EXTENDED)
  61 } retcode_op_e;
  62
  63 typedef struct retcode_item_t {
  64         struct berval           rdi_dn;
  65         struct berval           rdi_ndn;
  66         struct berval           rdi_text;
  67         struct berval           rdi_matched;
  68         int                     rdi_err;
  69         BerVarray               rdi_ref;
  70         int                     rdi_sleeptime;
  71         Entry                   rdi_e;
  72         slap_mask_t             rdi_mask;
  73         struct retcode_item_t   *rdi_next;
  74 } retcode_item_t;
  75
  76 typedef struct retcode_t {
  77         struct berval           rd_pdn;
  78         struct berval           rd_npdn;
  79
  80         retcode_item_t          *rd_item;
  81
  82         unsigned                rd_flags;
  83 #define RETCODE_FNONE           0x00
  84 #define RETCODE_FINDIR          0x01
  85 #define RETCODE_INDIR( rd )     ( (rd)->rd_flags & RETCODE_FINDIR )
  86 } retcode_t;
  87
  88 static int
  89 retcode_entry_response( Operation *op, SlapReply *rs, BackendInfo *bi, Entry *e );
  90
  91 static int
  92 retcode_cleanup_cb( Operation *op, SlapReply *rs )
  93 {
  94         rs->sr_matched = NULL;
  95         rs->sr_text = NULL;
  96
  97         if ( rs->sr_ref != NULL ) {
  98                 ber_bvarray_free( rs->sr_ref );
  99                 rs->sr_ref = NULL;
 100         }
 101
 102         ch_free( op->o_callback );
 103         op->o_callback = NULL;
 104
 105         return SLAP_CB_CONTINUE;
 106 }
 107
 108 static int
 109 retcode_send_onelevel( Operation *op, SlapReply *rs )
 110 {
 111         slap_overinst   *on = (slap_overinst *)op->o_bd->bd_info;
 112         retcode_t       *rd = (retcode_t *)on->on_bi.bi_private;
 113
 114         retcode_item_t  *rdi;
 115
 116         for ( rdi = rd->rd_item; rdi != NULL; rdi = rdi->rdi_next ) {
 117                 int     rc;
 118
 119                 if ( op->o_abandon ) {
 120                         return rs->sr_err = SLAPD_ABANDON;
 121                 }
 122
 123                 rs->sr_err = test_filter( op, &rdi->rdi_e, op->ors_filter );
 124                 if ( rs->sr_err == LDAP_COMPARE_TRUE ) {
 125                         if ( op->ors_slimit == rs->sr_nentries ) {
 126                                 rs->sr_err = LDAP_SIZELIMIT_EXCEEDED;
 127                                 goto done;
 128                         }
 129
 130                         /* safe default */
 131                         rs->sr_attrs = op->ors_attrs;
 132                         rs->sr_operational_attrs = NULL;
 133                         rs->sr_ctrls = NULL;
 134                         rs->sr_flags = 0;
 135                         rs->sr_err = LDAP_SUCCESS;
 136                         rs->sr_entry = &rdi->rdi_e;
 137
 138                         rc = send_search_entry( op, rs );
 139
 140                         switch ( rc ) {
 141                         case 0:         /* entry sent ok */
 142                                 break;
 143                         case 1:         /* entry not sent */
 144                                 break;
 145                         case -1:        /* connection closed */
 146                                 rs->sr_entry = NULL;
 147                                 rs->sr_err = LDAP_OTHER;
 148                                 goto done;
 149                         }
 150                 }
 151                 rs->sr_err = LDAP_SUCCESS;
 152         }
 153
 154 done:;
 155
 156         send_ldap_result( op, rs );
 157
 158         return rs->sr_err;
 159 }
 160
 161 static int
 162 retcode_op_add( Operation *op, SlapReply *rs )
 163 {
 164         return retcode_entry_response( op, rs, NULL, op->ora_e );
 165 }
 166
 167 typedef struct retcode_cb_t {
 168         BackendInfo     *rdc_info;
 169         unsigned        rdc_flags;
 170         ber_tag_t       rdc_tag;
 171         AttributeName   *rdc_attrs;
 172 } retcode_cb_t;
 173
 174 static int
 175 retcode_cb_response( Operation *op, SlapReply *rs )
 176 {
 177         retcode_cb_t    *rdc = (retcode_cb_t *)op->o_callback->sc_private;
 178
 179         if ( rs->sr_type == REP_SEARCH ) {
 180                 ber_tag_t       o_tag = op->o_tag;
 181                 int             rc;
 182
 183                 op->o_tag = rdc->rdc_tag;
 184                 if ( op->o_tag == LDAP_REQ_SEARCH ) {
 185                         rs->sr_attrs = rdc->rdc_attrs;
 186                 }
 187                 rc = retcode_entry_response( op, rs, rdc->rdc_info, rs->sr_entry );
 188                 op->o_tag = o_tag;
 189
 190                 return rc;
 191         }
 192
 193         if ( rs->sr_err == LDAP_SUCCESS ) {
 194                 if ( !op->o_abandon ) {
 195                         rdc->rdc_flags = SLAP_CB_CONTINUE;
 196                 }
 197                 return 0;
 198         }
 199
 200         return SLAP_CB_CONTINUE;
 201 }
 202
 203 static int
 204 retcode_op_internal( Operation *op, SlapReply *rs )
 205 {
 206         slap_overinst   *on = (slap_overinst *)op->o_bd->bd_info;
 207
 208         Operation       op2 = *op;
 209         SlapReply       rs2 = { 0 };
 210         BackendDB       db = *op->o_bd;
 211         slap_callback   sc = { 0 };
 212         retcode_cb_t    rdc;
 213
 214         int             rc;
 215
 216         op2.o_tag = LDAP_REQ_SEARCH;
 217         op2.ors_scope = LDAP_SCOPE_BASE;
 218         op2.ors_deref = LDAP_DEREF_NEVER;
 219         op2.ors_tlimit = SLAP_NO_LIMIT;
 220         op2.ors_slimit = SLAP_NO_LIMIT;
 221         op2.ors_limit = NULL;
 222         op2.ors_attrsonly = 0;
 223         op2.ors_attrs = slap_anlist_all_attributes;
 224
 225         ber_str2bv_x( "(objectClass=errAbsObject)",
 226                 STRLENOF( "(objectClass=errAbsObject)" ),
 227                 1, &op2.ors_filterstr, op2.o_tmpmemctx );
 228         op2.ors_filter = str2filter_x( &op2, op2.ors_filterstr.bv_val );
 229
 230         db.bd_info = on->on_info->oi_orig;
 231         op2.o_bd = &db;
 232
 233         rdc.rdc_info = on->on_info->oi_orig;
 234         rdc.rdc_flags = RETCODE_FINDIR;
 235         if ( op->o_tag == LDAP_REQ_SEARCH ) {
 236                 rdc.rdc_attrs = op->ors_attrs;
 237         }
 238         rdc.rdc_tag = op->o_tag;
 239         sc.sc_response = retcode_cb_response;
 240         sc.sc_private = &rdc;
 241         op2.o_callback = &sc;
 242
 243         rc = op2.o_bd->be_search( &op2, &rs2 );
 244
 245         filter_free_x( &op2, op2.ors_filter );
 246         ber_memfree_x( op2.ors_filterstr.bv_val, op2.o_tmpmemctx );
 247
 248         if ( rdc.rdc_flags == SLAP_CB_CONTINUE ) {
 249                 return SLAP_CB_CONTINUE;
 250         }
 251
 252         return rc;
 253 }
 254
 255 static int
 256 retcode_op_func( Operation *op, SlapReply *rs )
 257 {
 258         slap_overinst   *on = (slap_overinst *)op->o_bd->bd_info;
 259         retcode_t       *rd = (retcode_t *)on->on_bi.bi_private;
 260
 261         retcode_item_t  *rdi;
 262         struct berval           nrdn, npdn;
 263
 264         slap_callback           *cb = NULL;
 265
 266         if ( !dnIsSuffix( &op->o_req_ndn, &rd->rd_npdn ) ) {
 267                 if ( RETCODE_INDIR( rd ) ) {
 268                         switch ( op->o_tag ) {
 269                         case LDAP_REQ_ADD:
 270                                 return retcode_op_add( op, rs );
 271
 272                         case LDAP_REQ_BIND:
 273                                 /* skip if rootdn */
 274                                 if ( be_isroot_pw( op ) ) {
 275                                         return SLAP_CB_CONTINUE;
 276                                 }
 277                                 return retcode_op_internal( op, rs );
 278
 279                         case LDAP_REQ_SEARCH:
 280                                 if ( op->ors_scope == LDAP_SCOPE_BASE ) {
 281                                         rs->sr_err = retcode_op_internal( op, rs );
 282                                         if ( rs->sr_err == SLAP_CB_CONTINUE ) {
 283                                                 rs->sr_err = LDAP_SUCCESS;
 284                                         }
 285                                         send_ldap_result( op, rs );
 286                                         return rs->sr_err;
 287                                 }
 288                                 break;
 289
 290                         case LDAP_REQ_MODIFY:
 291                         case LDAP_REQ_DELETE:
 292                         case LDAP_REQ_MODRDN:
 293                         case LDAP_REQ_COMPARE:
 294                                 return retcode_op_internal( op, rs );
 295                         }
 296                 }
 297
 298                 return SLAP_CB_CONTINUE;
 299         }
 300
 301         if ( op->o_tag == LDAP_REQ_SEARCH
 302                         && op->ors_scope != LDAP_SCOPE_BASE
 303                         && op->o_req_ndn.bv_len == rd->rd_npdn.bv_len )
 304         {
 305                 return retcode_send_onelevel( op, rs );
 306         }
 307
 308         dnParent( &op->o_req_ndn, &npdn );
 309         if ( npdn.bv_len != rd->rd_npdn.bv_len ) {
 310                 rs->sr_err = LDAP_NO_SUCH_OBJECT;
 311                 rs->sr_matched = rd->rd_pdn.bv_val;
 312                 send_ldap_result( op, rs );
 313                 rs->sr_matched = NULL;
 314                 return rs->sr_err;
 315         }
 316
 317         dnRdn( &op->o_req_ndn, &nrdn );
 318
 319         for ( rdi = rd->rd_item; rdi != NULL; rdi = rdi->rdi_next ) {
 320                 struct berval   rdi_nrdn;
 321
 322                 dnRdn( &rdi->rdi_ndn, &rdi_nrdn );
 323                 if ( dn_match( &nrdn, &rdi_nrdn ) ) {
 324                         break;
 325                 }
 326         }
 327
 328         if ( rdi != NULL && rdi->rdi_mask != SN_DG_OP_ALL ) {
 329                 retcode_op_e    o_tag = SN_DG_OP_NONE;
 330
 331                 switch ( op->o_tag ) {
 332                 case LDAP_REQ_ADD:
 333                         o_tag = SN_DG_OP_ADD;
 334                         break;
 335
 336                 case LDAP_REQ_BIND:
 337                         o_tag = SN_DG_OP_BIND;
 338                         break;
 339
 340                 case LDAP_REQ_COMPARE:
 341                         o_tag = SN_DG_OP_COMPARE;
 342                         break;
 343
 344                 case LDAP_REQ_DELETE:
 345                         o_tag = SN_DG_OP_DELETE;
 346                         break;
 347
 348                 case LDAP_REQ_MODIFY:
 349                         o_tag = SN_DG_OP_MODIFY;
 350                         break;
 351
 352                 case LDAP_REQ_MODRDN:
 353                         o_tag = SN_DG_OP_RENAME;
 354                         break;
 355
 356                 case LDAP_REQ_SEARCH:
 357                         o_tag = SN_DG_OP_SEARCH;
 358                         break;
 359
 360                 case LDAP_REQ_EXTENDED:
 361                         o_tag = SN_DG_EXTENDED;
 362                         break;
 363
 364                 default:
 365                         /* Should not happen */
 366                         break;
 367                 }
 368
 369                 if ( !( o_tag & rdi->rdi_mask ) ) {
 370                         return SLAP_CB_CONTINUE;
 371                 }
 372         }
 373
 374         if ( rdi == NULL ) {
 375                 rs->sr_matched = rd->rd_pdn.bv_val;
 376                 rs->sr_err = LDAP_NO_SUCH_OBJECT;
 377                 rs->sr_text = "retcode not found";
 378
 379         } else {
 380                 rs->sr_err = rdi->rdi_err;
 381                 rs->sr_text = rdi->rdi_text.bv_val;
 382                 rs->sr_matched = rdi->rdi_matched.bv_val;
 383
 384                 /* FIXME: we only honor the rdi_ref field in case rdi_err
 385                  * is LDAP_REFERRAL otherwise send_ldap_result() bails out */
 386                 if ( rs->sr_err == LDAP_REFERRAL ) {
 387                         BerVarray       ref;
 388
 389                         if ( rdi->rdi_ref != NULL ) {
 390                                 ref = rdi->rdi_ref;
 391                         } else {
 392                                 ref = default_referral;
 393                         }
 394
 395                         if ( ref != NULL ) {
 396                                 rs->sr_ref = referral_rewrite( ref,
 397                                         NULL, &op->o_req_dn, LDAP_SCOPE_DEFAULT );
 398
 399                         } else {
 400                                 rs->sr_err = LDAP_OTHER;
 401                                 rs->sr_text = "bad referral object";
 402                         }
 403                 }
 404
 405                 if ( rdi->rdi_sleeptime > 0 ) {
 406                         sleep( rdi->rdi_sleeptime );
 407                 }
 408         }
 409
 410         switch ( op->o_tag ) {
 411         case LDAP_REQ_EXTENDED:
 412                 if ( rdi == NULL ) {
 413                         break;
 414                 }
 415                 cb = ( slap_callback * )ch_malloc( sizeof( slap_callback ) );
 416                 memset( cb, 0, sizeof( slap_callback ) );
 417                 cb->sc_cleanup = retcode_cleanup_cb;
 418                 op->o_callback = cb;
 419                 break;
 420
 421         default:
 422                 send_ldap_result( op, rs );
 423                 if ( rs->sr_ref != NULL ) {
 424                         ber_bvarray_free( rs->sr_ref );
 425                         rs->sr_ref = NULL;
 426                 }
 427                 rs->sr_matched = NULL;
 428                 rs->sr_text = NULL;
 429                 break;
 430         }
 431
 432         return rs->sr_err;
 433 }
 434
 435 static int
 436 retcode_op2str( ber_tag_t op, struct berval *bv )
 437 {
 438         switch ( op ) {
 439         case LDAP_REQ_BIND:
 440                 BER_BVSTR( bv, "bind" );
 441                 return 0;
 442         case LDAP_REQ_ADD:
 443                 BER_BVSTR( bv, "add" );
 444                 return 0;
 445         case LDAP_REQ_DELETE:
 446                 BER_BVSTR( bv, "delete" );
 447                 return 0;
 448         case LDAP_REQ_MODRDN:
 449                 BER_BVSTR( bv, "modrdn" );
 450                 return 0;
 451         case LDAP_REQ_MODIFY:
 452                 BER_BVSTR( bv, "modify" );
 453                 return 0;
 454         case LDAP_REQ_COMPARE:
 455                 BER_BVSTR( bv, "compare" );
 456                 return 0;
 457         case LDAP_REQ_SEARCH:
 458                 BER_BVSTR( bv, "search" );
 459                 return 0;
 460         case LDAP_REQ_EXTENDED:
 461                 BER_BVSTR( bv, "extended" );
 462                 return 0;
 463         }
 464         return -1;
 465 }
 466
 467 static int
 468 retcode_entry_response( Operation *op, SlapReply *rs, BackendInfo *bi, Entry *e )
 469 {
 470         Attribute       *a;
 471         int             err;
 472         char            *next;
 473
 474         if ( get_manageDSAit( op ) ) {
 475                 return SLAP_CB_CONTINUE;
 476         }
 477
 478         if ( !is_entry_objectclass_or_sub( e, oc_errAbsObject ) ) {
 479                 return SLAP_CB_CONTINUE;
 480         }
 481
 482         /* operation */
 483         a = attr_find( e->e_attrs, ad_errOp );
 484         if ( a != NULL ) {
 485                 int             i,
 486                                 gotit = 0;
 487                 struct berval   bv = BER_BVNULL;
 488
 489                 (void)retcode_op2str( op->o_tag, &bv );
 490
 491                 if ( BER_BVISNULL( &bv ) ) {
 492                         return SLAP_CB_CONTINUE;
 493                 }
 494
 495                 for ( i = 0; !BER_BVISNULL( &a->a_nvals[ i ] ); i++ ) {
 496                         if ( bvmatch( &a->a_nvals[ i ], &bv ) ) {
 497                                 gotit = 1;
 498                                 break;
 499                         }
 500                 }
 501
 502                 if ( !gotit ) {
 503                         return SLAP_CB_CONTINUE;
 504                 }
 505         }
 506
 507         /* error code */
 508         a = attr_find( e->e_attrs, ad_errCode );
 509         if ( a == NULL ) {
 510                 return SLAP_CB_CONTINUE;
 511         }
 512         err = strtol( a->a_nvals[ 0 ].bv_val, &next, 0 );
 513         if ( next == a->a_nvals[ 0 ].bv_val || next[ 0 ] != '\0' ) {
 514                 return SLAP_CB_CONTINUE;
 515         }
 516         rs->sr_err = err;
 517
 518         /* sleep time */
 519         a = attr_find( e->e_attrs, ad_errSleepTime );
 520         if ( a != NULL ) {
 521                 int     sleepTime;
 522
 523                 sleepTime = strtoul( a->a_nvals[ 0 ].bv_val, &next, 0 );
 524                 if ( next != a->a_nvals[ 0 ].bv_val && next[ 0 ] == '\0' ) {
 525                         sleep( sleepTime );
 526                 }
 527         }
 528
 529         if ( rs->sr_err != LDAP_SUCCESS ) {
 530                 BackendDB       db = *op->o_bd,
 531                                 *o_bd = op->o_bd;
 532                 void            *o_callback = op->o_callback;
 533
 534                 /* message text */
 535                 a = attr_find( e->e_attrs, ad_errText );
 536                 if ( a != NULL ) {
 537                         rs->sr_text = a->a_vals[ 0 ].bv_val;
 538                 }
 539
 540                 /* matched DN */
 541                 a = attr_find( e->e_attrs, ad_errMatchedDN );
 542                 if ( a != NULL ) {
 543                         rs->sr_matched = a->a_vals[ 0 ].bv_val;
 544                 }
 545
 546                 if ( bi == NULL ) {
 547                         slap_overinst   *on = (slap_overinst *)op->o_bd->bd_info;
 548
 549                         bi = on->on_info->oi_orig;
 550                 }
 551
 552                 db.bd_info = bi;
 553                 op->o_bd = &db;
 554                 op->o_callback = NULL;
 555
 556                 /* referral */
 557                 if ( rs->sr_err == LDAP_REFERRAL ) {
 558                         BerVarray       refs = default_referral;
 559
 560                         a = attr_find( e->e_attrs, slap_schema.si_ad_ref );
 561                         if ( a != NULL ) {
 562                                 refs = a->a_vals;
 563                         }
 564                         rs->sr_ref = referral_rewrite( refs,
 565                                 NULL, &op->o_req_dn, op->oq_search.rs_scope );
 566
 567                         send_search_reference( op, rs );
 568                         ber_bvarray_free( rs->sr_ref );
 569                         rs->sr_ref = NULL;
 570
 571                 } else {
 572                         send_ldap_result( op, rs );
 573                 }
 574
 575                 rs->sr_text = NULL;
 576                 rs->sr_matched = NULL;
 577                 op->o_bd = o_bd;
 578                 op->o_callback = o_callback;
 579         }
 580
 581         if ( rs->sr_err != LDAP_SUCCESS ) {
 582                 op->o_abandon = 1;
 583                 return rs->sr_err;
 584         }
 585
 586         return SLAP_CB_CONTINUE;
 587 }
 588
 589 static int
 590 retcode_response( Operation *op, SlapReply *rs )
 591 {
 592         slap_overinst   *on = (slap_overinst *)op->o_bd->bd_info;
 593         retcode_t       *rd = (retcode_t *)on->on_bi.bi_private;
 594
 595         if ( rs->sr_type != REP_SEARCH || !RETCODE_INDIR( rd ) ) {
 596                 return SLAP_CB_CONTINUE;
 597         }
 598
 599         return retcode_entry_response( op, rs, NULL, rs->sr_entry );
 600 }
 601
 602 static int
 603 retcode_db_init( BackendDB *be )
 604 {
 605         slap_overinst   *on = (slap_overinst *)be->bd_info;
 606         retcode_t       *rd;
 607
 608         rd = (retcode_t *)ch_malloc( sizeof( retcode_t ) );
 609         memset( rd, 0, sizeof( retcode_t ) );
 610
 611         on->on_bi.bi_private = (void *)rd;
 612
 613         return 0;
 614 }
 615
 616 static int
 617 retcode_db_config(
 618         BackendDB       *be,
 619         const char      *fname,
 620         int             lineno,
 621         int             argc,
 622         char            **argv )
 623 {
 624         slap_overinst   *on = (slap_overinst *)be->bd_info;
 625         retcode_t       *rd = (retcode_t *)on->on_bi.bi_private;
 626
 627         char                    *argv0 = argv[ 0 ] + STRLENOF( "retcode-" );
 628
 629         if ( strncasecmp( argv[ 0 ], "retcode-", STRLENOF( "retcode-" ) ) != 0 ) {
 630                 return SLAP_CONF_UNKNOWN;
 631         }
 632
 633         if ( strcasecmp( argv0, "parent" ) == 0 ) {
 634                 struct berval   dn;
 635                 int             rc;
 636
 637                 if ( argc != 2 ) {
 638                         fprintf( stderr, "%s: line %d: retcode: "
 639                                 "\"retcode-parent <DN>\": missing <DN>\n",
 640                                 fname, lineno );
 641                         return 1;
 642                 }
 643
 644                 if ( !BER_BVISNULL( &rd->rd_pdn ) ) {
 645                         fprintf( stderr, "%s: line %d: retcode: "
 646                                 "parent already defined.\n", fname, lineno );
 647                         return 1;
 648                 }
 649
 650                 ber_str2bv( argv[ 1 ], 0, 0, &dn );
 651
 652                 rc = dnPrettyNormal( NULL, &dn, &rd->rd_pdn, &rd->rd_npdn, NULL );
 653                 if ( rc != LDAP_SUCCESS ) {
 654                         fprintf( stderr, "%s: line %d: retcode: "
 655                                 "unable to normalize parent DN \"%s\": %d\n",
 656                                 fname, lineno, argv[ 1 ], rc );
 657                         return 1;
 658                 }
 659
 660         } else if ( strcasecmp( argv0, "item" ) == 0 ) {
 661                 retcode_item_t  rdi = { BER_BVNULL }, **rdip;
 662                 struct berval           bv, rdn, nrdn;
 663                 int                     rc;
 664                 char                    *next = NULL;
 665
 666                 if ( argc < 3 ) {
 667                         fprintf( stderr, "%s: line %d: retcode: "
 668                                 "\"retcode-item <RDN> <retcode> [<text>]\": "
 669                                 "missing args\n",
 670                                 fname, lineno );
 671                         return 1;
 672                 }
 673
 674                 ber_str2bv( argv[ 1 ], 0, 0, &bv );
 675
 676                 rc = dnPrettyNormal( NULL, &bv, &rdn, &nrdn, NULL );
 677                 if ( rc != LDAP_SUCCESS ) {
 678                         fprintf( stderr, "%s: line %d: retcode: "
 679                                 "unable to normalize RDN \"%s\": %d\n",
 680                                 fname, lineno, argv[ 1 ], rc );
 681                         return 1;
 682                 }
 683
 684                 if ( !dnIsOneLevelRDN( &nrdn ) ) {
 685                         fprintf( stderr, "%s: line %d: retcode: "
 686                                 "value \"%s\" is not a RDN\n",
 687                                 fname, lineno, argv[ 1 ] );
 688                         return 1;
 689                 }
 690
 691                 if ( BER_BVISNULL( &rd->rd_npdn ) ) {
 692                         /* FIXME: we use the database suffix */
 693                         if ( be->be_nsuffix == NULL ) {
 694                                 fprintf( stderr, "%s: line %d: retcode: "
 695                                         "either \"retcode-parent\" "
 696                                         "or \"suffix\" must be defined.\n",
 697                                         fname, lineno );
 698                                 return 1;
 699                         }
 700
 701                         ber_dupbv( &rd->rd_pdn, &be->be_suffix[ 0 ] );
 702                         ber_dupbv( &rd->rd_npdn, &be->be_nsuffix[ 0 ] );
 703                 }
 704
 705                 build_new_dn( &rdi.rdi_dn, &rd->rd_pdn, &rdn, NULL );
 706                 build_new_dn( &rdi.rdi_ndn, &rd->rd_npdn, &nrdn, NULL );
 707
 708                 ch_free( rdn.bv_val );
 709                 ch_free( nrdn.bv_val );
 710
 711                 rdi.rdi_err = strtol( argv[ 2 ], &next, 0 );
 712                 if ( next == argv[ 2 ] || next[ 0 ] != '\0' ) {
 713                         fprintf( stderr, "%s: line %d: retcode: "
 714                                 "unable to parse return code \"%s\"\n",
 715                                 fname, lineno, argv[ 2 ] );
 716                         return 1;
 717                 }
 718
 719                 rdi.rdi_mask = SN_DG_OP_ALL;
 720
 721                 if ( argc > 3 ) {
 722                         int     i;
 723
 724                         for ( i = 3; i < argc; i++ ) {
 725                                 if ( strncasecmp( argv[ i ], "op=", STRLENOF( "op=" ) ) == 0 )
 726                                 {
 727                                         char            **ops;
 728                                         int             j;
 729
 730                                         ops = ldap_str2charray( &argv[ i ][ STRLENOF( "op=" ) ], "," );
 731                                         assert( ops != NULL );
 732
 733                                         rdi.rdi_mask = SN_DG_OP_NONE;
 734
 735                                         for ( j = 0; ops[ j ] != NULL; j++ ) {
 736                                                 if ( strcasecmp( ops[ j ], "add" ) == 0 ) {
 737                                                         rdi.rdi_mask |= SN_DG_OP_ADD;
 738
 739                                                 } else if ( strcasecmp( ops[ j ], "bind" ) == 0 ) {
 740                                                         rdi.rdi_mask |= SN_DG_OP_BIND;
 741
 742                                                 } else if ( strcasecmp( ops[ j ], "compare" ) == 0 ) {
 743                                                         rdi.rdi_mask |= SN_DG_OP_COMPARE;
 744
 745                                                 } else if ( strcasecmp( ops[ j ], "delete" ) == 0 ) {
 746                                                         rdi.rdi_mask |= SN_DG_OP_DELETE;
 747
 748                                                 } else if ( strcasecmp( ops[ j ], "modify" ) == 0 ) {
 749                                                         rdi.rdi_mask |= SN_DG_OP_MODIFY;
 750
 751                                                 } else if ( strcasecmp( ops[ j ], "rename" ) == 0
 752                                                         || strcasecmp( ops[ j ], "modrdn" ) == 0 )
 753                                                 {
 754                                                         rdi.rdi_mask |= SN_DG_OP_RENAME;
 755
 756                                                 } else if ( strcasecmp( ops[ j ], "search" ) == 0 ) {
 757                                                         rdi.rdi_mask |= SN_DG_OP_SEARCH;
 758
 759                                                 } else if ( strcasecmp( ops[ j ], "extended" ) == 0 ) {
 760                                                         rdi.rdi_mask |= SN_DG_EXTENDED;
 761
 762                                                 } else if ( strcasecmp( ops[ j ], "auth" ) == 0 ) {
 763                                                         rdi.rdi_mask |= SN_DG_OP_AUTH;
 764
 765                                                 } else if ( strcasecmp( ops[ j ], "read" ) == 0 ) {
 766                                                         rdi.rdi_mask |= SN_DG_OP_READ;
 767
 768                                                 } else if ( strcasecmp( ops[ j ], "write" ) == 0 ) {
 769                                                         rdi.rdi_mask |= SN_DG_OP_WRITE;
 770
 771                                                 } else if ( strcasecmp( ops[ j ], "all" ) == 0 ) {
 772                                                         rdi.rdi_mask |= SN_DG_OP_ALL;
 773
 774                                                 } else {
 775                                                         fprintf( stderr, "retcode: unknown op \"%s\"\n",
 776                                                                 ops[ j ] );
 777                                                         return 1;
 778                                                 }
 779                                         }
 780
 781                                         ldap_charray_free( ops );
 782
 783                                 } else if ( strncasecmp( argv[ i ], "text=", STRLENOF( "text=" ) ) == 0 )
 784                                 {
 785                                         if ( !BER_BVISNULL( &rdi.rdi_text ) ) {
 786                                                 fprintf( stderr, "%s: line %d: retcode: "
 787                                                         "\"text\" already provided.\n",
 788                                                         fname, lineno );
 789                                                 return 1;
 790                                         }
 791                                         ber_str2bv( &argv[ i ][ STRLENOF( "text=" ) ], 0, 1, &rdi.rdi_text );
 792
 793                                 } else if ( strncasecmp( argv[ i ], "matched=", STRLENOF( "matched=" ) ) == 0 )
 794                                 {
 795                                         struct berval   dn;
 796
 797                                         if ( !BER_BVISNULL( &rdi.rdi_matched ) ) {
 798                                                 fprintf( stderr, "%s: line %d: retcode: "
 799                                                         "\"matched\" already provided.\n",
 800                                                         fname, lineno );
 801                                                 return 1;
 802                                         }
 803                                         ber_str2bv( &argv[ i ][ STRLENOF( "matched=" ) ], 0, 0, &dn );
 804                                         if ( dnPretty( NULL, &dn, &rdi.rdi_matched, NULL ) != LDAP_SUCCESS ) {
 805                                                 fprintf( stderr, "%s: line %d: retcode: "
 806                                                         "unable to prettify matched DN \"%s\".\n",
 807                                                         fname, lineno, &argv[ i ][ STRLENOF( "matched=" ) ] );
 808                                                 return 1;
 809                                         }
 810
 811                                 } else if ( strncasecmp( argv[ i ], "ref=", STRLENOF( "ref=" ) ) == 0 )
 812                                 {
 813                                         char            **refs;
 814                                         int             j;
 815
 816                                         if ( rdi.rdi_ref != NULL ) {
 817                                                 fprintf( stderr, "%s: line %d: retcode: "
 818                                                         "\"ref\" already provided.\n",
 819                                                         fname, lineno );
 820                                                 return 1;
 821                                         }
 822
 823                                         if ( rdi.rdi_err != LDAP_REFERRAL ) {
 824                                                 fprintf( stderr, "%s: line %d: retcode: "
 825                                                         "providing \"ref\"\n"
 826                                                         "\talong with a non-referral "
 827                                                         "resultCode may cause slapd failures\n"
 828                                                         "\trelated to internal checks.\n",
 829                                                         fname, lineno );
 830                                         }
 831
 832                                         refs = ldap_str2charray( &argv[ i ][ STRLENOF( "ref=" ) ], " " );
 833                                         assert( refs != NULL );
 834
 835                                         for ( j = 0; refs[ j ] != NULL; j++ ) {
 836                                                 struct berval   bv;
 837
 838                                                 ber_str2bv( refs[ j ], 0, 1, &bv );
 839                                                 ber_bvarray_add( &rdi.rdi_ref, &bv );
 840                                         }
 841
 842                                         ldap_charray_free( refs );
 843
 844                                 } else if ( strncasecmp( argv[ i ], "sleeptime=", STRLENOF( "sleeptime=" ) ) == 0 )
 845                                 {
 846                                         char            *next;
 847                                         if ( rdi.rdi_sleeptime != 0 ) {
 848                                                 fprintf( stderr, "%s: line %d: retcode: "
 849                                                         "\"sleeptime\" already provided.\n",
 850                                                         fname, lineno );
 851                                                 return 1;
 852                                         }
 853
 854                                         rdi.rdi_sleeptime = strtol( &argv[ i ][ STRLENOF( "sleeptime=" ) ], &next, 10 );
 855                                         if ( next == argv[ i ] || next[ 0 ] != '\0' ) {
 856                                                 fprintf( stderr, "%s: line %d: retcode: "
 857                                                         "unable to parse \"sleeptime=%s\".\n",
 858                                                         fname, lineno, &argv[ i ][ STRLENOF( "sleeptime=" ) ] );
 859                                                 return 1;
 860                                         }
 861
 862                                 } else {
 863                                         fprintf( stderr, "%s: line %d: retcode: "
 864                                                 "unknown option \"%s\".\n",
 865                                                         fname, lineno, argv[ i ] );
 866                                         return 1;
 867                                 }
 868                         }
 869                 }
 870
 871                 for ( rdip = &rd->rd_item; *rdip; rdip = &(*rdip)->rdi_next )
 872                         /* go to last */ ;
 873
 874
 875                 *rdip = ( retcode_item_t * )ch_malloc( sizeof( retcode_item_t ) );
 876                 *(*rdip) = rdi;
 877
 878         } else if ( strcasecmp( argv0, "indir" ) == 0 ) {
 879                 rd->rd_flags |= RETCODE_FINDIR;
 880
 881         } else {
 882                 return SLAP_CONF_UNKNOWN;
 883         }
 884
 885         return 0;
 886 }
 887
 888 static int
 889 retcode_db_open( BackendDB *be )
 890 {
 891         slap_overinst   *on = (slap_overinst *)be->bd_info;
 892         retcode_t       *rd = (retcode_t *)on->on_bi.bi_private;
 893
 894         retcode_item_t  *rdi;
 895
 896         for ( rdi = rd->rd_item; rdi; rdi = rdi->rdi_next ) {
 897                 LDAPRDN                 rdn = NULL;
 898                 int                     rc, j;
 899                 char*                   p;
 900                 struct berval           val[ 3 ];
 901                 char                    buf[ SLAP_TEXT_BUFLEN ];
 902
 903                 /* DN */
 904                 rdi->rdi_e.e_name = rdi->rdi_dn;
 905                 rdi->rdi_e.e_nname = rdi->rdi_ndn;
 906
 907                 /* objectClass */
 908                 val[ 0 ] = oc_errObject->soc_cname;
 909                 val[ 1 ] = slap_schema.si_oc_extensibleObject->soc_cname;
 910                 BER_BVZERO( &val[ 2 ] );
 911
 912                 attr_merge( &rdi->rdi_e, slap_schema.si_ad_objectClass, val, NULL );
 913
 914                 /* RDN avas */
 915                 rc = ldap_bv2rdn( &rdi->rdi_dn, &rdn, (char **) &p,
 916                                 LDAP_DN_FORMAT_LDAP );
 917
 918                 assert( rc == LDAP_SUCCESS );
 919
 920                 for ( j = 0; rdn[ j ]; j++ ) {
 921                         LDAPAVA                 *ava = rdn[ j ];
 922                         AttributeDescription    *ad = NULL;
 923                         const char              *text;
 924
 925                         rc = slap_bv2ad( &ava->la_attr, &ad, &text );
 926                         assert( rc == LDAP_SUCCESS );
 927
 928                         attr_merge_normalize_one( &rdi->rdi_e, ad,
 929                                         &ava->la_value, NULL );
 930                 }
 931
 932                 ldap_rdnfree( rdn );
 933
 934                 /* error code */
 935                 snprintf( buf, sizeof( buf ), "%d", rdi->rdi_err );
 936                 ber_str2bv( buf, 0, 0, &val[ 0 ] );
 937
 938                 attr_merge_one( &rdi->rdi_e, ad_errCode, &val[ 0 ], NULL );
 939
 940                 if ( rdi->rdi_ref != NULL ) {
 941                         attr_merge_normalize( &rdi->rdi_e, slap_schema.si_ad_ref,
 942                                 rdi->rdi_ref, NULL );
 943                 }
 944
 945                 /* text */
 946                 if ( !BER_BVISNULL( &rdi->rdi_text ) ) {
 947                         val[ 0 ] = rdi->rdi_text;
 948
 949                         attr_merge_normalize_one( &rdi->rdi_e, ad_errText, &val[ 0 ], NULL );
 950                 }
 951
 952                 /* matched */
 953                 if ( !BER_BVISNULL( &rdi->rdi_matched ) ) {
 954                         val[ 0 ] = rdi->rdi_matched;
 955
 956                         attr_merge_normalize_one( &rdi->rdi_e, ad_errMatchedDN, &val[ 0 ], NULL );
 957                 }
 958
 959                 /* sleep time */
 960                 if ( rdi->rdi_sleeptime > 0 ) {
 961                         snprintf( buf, sizeof( buf ), "%d", rdi->rdi_sleeptime );
 962                         ber_str2bv( buf, 0, 0, &val[ 0 ] );
 963
 964                         attr_merge_one( &rdi->rdi_e, ad_errSleepTime, &val[ 0 ], NULL );
 965                 }
 966
 967                 /* operations */
 968                 if ( rdi->rdi_mask & SN_DG_OP_ADD ) {
 969                         BER_BVSTR( &val[ 0 ], "add" );
 970                         attr_merge_normalize_one( &rdi->rdi_e, ad_errOp, &val[ 0 ], NULL );
 971                 }
 972
 973                 if ( rdi->rdi_mask & SN_DG_OP_BIND ) {
 974                         BER_BVSTR( &val[ 0 ], "bind" );
 975                         attr_merge_normalize_one( &rdi->rdi_e, ad_errOp, &val[ 0 ], NULL );
 976                 }
 977
 978                 if ( rdi->rdi_mask & SN_DG_OP_COMPARE ) {
 979                         BER_BVSTR( &val[ 0 ], "compare" );
 980                         attr_merge_normalize_one( &rdi->rdi_e, ad_errOp, &val[ 0 ], NULL );
 981                 }
 982
 983                 if ( rdi->rdi_mask & SN_DG_OP_DELETE ) {
 984                         BER_BVSTR( &val[ 0 ], "delete" );
 985                         attr_merge_normalize_one( &rdi->rdi_e, ad_errOp, &val[ 0 ], NULL );
 986                 }
 987
 988                 if ( rdi->rdi_mask & SN_DG_EXTENDED ) {
 989                         BER_BVSTR( &val[ 0 ], "extended" );
 990                         attr_merge_normalize_one( &rdi->rdi_e, ad_errOp, &val[ 0 ], NULL );
 991                 }
 992
 993                 if ( rdi->rdi_mask & SN_DG_OP_MODIFY ) {
 994                         BER_BVSTR( &val[ 0 ], "modify" );
 995                         attr_merge_normalize_one( &rdi->rdi_e, ad_errOp, &val[ 0 ], NULL );
 996                 }
 997
 998                 if ( rdi->rdi_mask & SN_DG_OP_RENAME ) {
 999                         BER_BVSTR( &val[ 0 ], "rename" );
1000                         attr_merge_normalize_one( &rdi->rdi_e, ad_errOp, &val[ 0 ], NULL );
1001                 }
1002
1003                 if ( rdi->rdi_mask & SN_DG_OP_SEARCH ) {
1004                         BER_BVSTR( &val[ 0 ], "search" );
1005                         attr_merge_normalize_one( &rdi->rdi_e, ad_errOp, &val[ 0 ], NULL );
1006                 }
1007         }
1008
1009         return 0;
1010 }
1011
1012 static int
1013 retcode_db_destroy( BackendDB *be )
1014 {
1015         slap_overinst   *on = (slap_overinst *)be->bd_info;
1016         retcode_t       *rd = (retcode_t *)on->on_bi.bi_private;
1017
1018         if ( rd ) {
1019                 retcode_item_t  *rdi, *next;
1020
1021                 for ( rdi = rd->rd_item; rdi != NULL; rdi = next ) {
1022                         ber_memfree( rdi->rdi_dn.bv_val );
1023                         ber_memfree( rdi->rdi_ndn.bv_val );
1024
1025                         if ( !BER_BVISNULL( &rdi->rdi_text ) ) {
1026                                 ber_memfree( rdi->rdi_text.bv_val );
1027                         }
1028
1029                         if ( !BER_BVISNULL( &rdi->rdi_matched ) ) {
1030                                 ber_memfree( rdi->rdi_matched.bv_val );
1031                         }
1032
1033                         if ( rdi->rdi_ref ) {
1034                                 ber_bvarray_free( rdi->rdi_ref );
1035                         }
1036
1037                         BER_BVZERO( &rdi->rdi_e.e_name );
1038                         BER_BVZERO( &rdi->rdi_e.e_nname );
1039
1040                         entry_clean( &rdi->rdi_e );
1041
1042                         next = rdi->rdi_next;
1043
1044                         ch_free( rdi );
1045                 }
1046
1047                 if ( !BER_BVISNULL( &rd->rd_pdn ) ) {
1048                         ber_memfree( rd->rd_pdn.bv_val );
1049                 }
1050
1051                 if ( !BER_BVISNULL( &rd->rd_npdn ) ) {
1052                         ber_memfree( rd->rd_npdn.bv_val );
1053                 }
1054
1055                 ber_memfree( rd );
1056         }
1057
1058         return 0;
1059 }
1060
1061 #if SLAPD_OVER_RETCODE == SLAPD_MOD_DYNAMIC
1062 static
1063 #endif /* SLAPD_OVER_RETCODE == SLAPD_MOD_DYNAMIC */
1064 int
1065 retcode_init( void )
1066 {
1067         int             i, code;
1068         const char      *err;
1069
1070         static struct {
1071                 char                    *name;
1072                 char                    *desc;
1073                 AttributeDescription    **ad;
1074         } retcode_at[] = {
1075                 { "errCode", "( 1.3.6.1.4.1.4203.666.11.4.1.1 "
1076                         "NAME ( 'errCode' ) "
1077                         "DESC 'LDAP error code' "
1078                         "EQUALITY integerMatch "
1079                         "ORDERING integerOrderingMatch "
1080                         "SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 "
1081                         "SINGLE-VALUE )",
1082                         &ad_errCode },
1083                 { "errOp", "( 1.3.6.1.4.1.4203.666.11.4.1.2 "
1084                         "NAME ( 'errOp' ) "
1085                         "DESC 'Operations the errObject applies to' "
1086                         "EQUALITY caseIgnoreMatch "
1087                         "SUBSTR caseIgnoreSubstringsMatch "
1088                         "SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )",
1089                         &ad_errOp},
1090                 { "errText", "( 1.3.6.1.4.1.4203.666.11.4.1.3 "
1091                         "NAME ( 'errText' ) "
1092                         "DESC 'LDAP error textual description' "
1093                         "EQUALITY caseIgnoreMatch "
1094                         "SUBSTR caseIgnoreSubstringsMatch "
1095                         "SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 "
1096                         "SINGLE-VALUE )",
1097                         &ad_errText },
1098                 { "errSleepTime", "( 1.3.6.1.4.1.4203.666.11.4.1.4 "
1099                         "NAME ( 'errSleepTime' ) "
1100                         "DESC 'Time to wait before returning the error' "
1101                         "EQUALITY integerMatch "
1102                         "SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 "
1103                         "SINGLE-VALUE )",
1104                         &ad_errSleepTime },
1105                 { "errMatchedDN", "( 1.3.6.1.4.1.4203.666.11.4.1.5 "
1106                         "NAME ( 'errMatchedDN' ) "
1107                         "DESC 'Value to be returned as matched DN' "
1108                         "EQUALITY distinguishedNameMatch "
1109                         "SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 "
1110                         "SINGLE-VALUE )",
1111                         &ad_errMatchedDN },
1112                 { NULL }
1113         };
1114
1115         static struct {
1116                 char            *name;
1117                 char            *desc;
1118                 ObjectClass     **oc;
1119         } retcode_oc[] = {
1120                 { "errAbsObject", "( 1.3.6.1.4.1.4203.666.11.4.3.0 "
1121                         "NAME ( 'errAbsObject' ) "
1122                         "SUP top ABSTRACT "
1123                         "MUST ( errCode ) "
1124                         "MAY ( "
1125                                 "cn "
1126                                 "$ description "
1127                                 "$ errOp "
1128                                 "$ errText "
1129                                 "$ errSleepTime "
1130                                 "$ errMatchedDN "
1131                         ") )",
1132                         &oc_errAbsObject },
1133                 { "errObject", "( 1.3.6.1.4.1.4203.666.11.4.3.1 "
1134                         "NAME ( 'errObject' ) "
1135                         "SUP errAbsObject STRUCTURAL "
1136                         ")",
1137                         &oc_errObject },
1138                 { "errAuxObject", "( 1.3.6.1.4.1.4203.666.11.4.3.2 "
1139                         "NAME ( 'errAuxObject' ) "
1140                         "SUP errAbsObject AUXILIARY "
1141                         ")",
1142                         &oc_errAuxObject },
1143                 { NULL }
1144         };
1145
1146
1147         for ( i = 0; retcode_at[ i ].name != NULL; i++ ) {
1148                 LDAPAttributeType       *at;
1149
1150                 at = ldap_str2attributetype( retcode_at[ i ].desc,
1151                         &code, &err, LDAP_SCHEMA_ALLOW_ALL );
1152                 if ( !at ) {
1153                         fprintf( stderr, "retcode: "
1154                                 "AttributeType load failed: %s %s\n",
1155                                 ldap_scherr2str( code ), err );
1156                         return code;
1157                 }
1158
1159 #if LDAP_VENDOR_VERSION_MINOR == X || LDAP_VENDOR_VERSION_MINOR > 2
1160                 code = at_add( at, 0, NULL, &err );
1161 #else
1162                 code = at_add( at, &err );
1163 #endif
1164                 ldap_memfree( at );
1165                 if ( code != LDAP_SUCCESS ) {
1166                         fprintf( stderr, "retcode: "
1167                                 "AttributeType load failed: %s %s\n",
1168                                 scherr2str( code ), err );
1169                         return code;
1170                 }
1171
1172                 code = slap_str2ad( retcode_at[ i ].name,
1173                                 retcode_at[ i ].ad, &err );
1174                 if ( code != LDAP_SUCCESS ) {
1175                         fprintf( stderr, "retcode: unable to find "
1176                                 "AttributeDescription \"%s\": %d (%s)\n",
1177                                 retcode_at[ i ].name, code, err );
1178                         return 1;
1179                 }
1180         }
1181
1182         for ( i = 0; retcode_oc[ i ].name != NULL; i++ ) {
1183                 LDAPObjectClass *oc;
1184
1185                 oc = ldap_str2objectclass( retcode_oc[ i ].desc,
1186                                 &code, &err, LDAP_SCHEMA_ALLOW_ALL );
1187                 if ( !oc ) {
1188                         fprintf( stderr, "retcode: "
1189                                 "ObjectClass load failed: %s %s\n",
1190                                 ldap_scherr2str( code ), err );
1191                         return code;
1192                 }
1193
1194 #if LDAP_VENDOR_VERSION_MINOR == X || LDAP_VENDOR_VERSION_MINOR > 2
1195                 code = oc_add( oc, 0, NULL, &err );
1196 #else
1197                 code = oc_add( oc, &err );
1198 #endif
1199                 ldap_memfree(oc);
1200                 if ( code != LDAP_SUCCESS ) {
1201                         fprintf( stderr, "retcode: "
1202                                 "ObjectClass load failed: %s %s\n",
1203                                 scherr2str( code ), err );
1204                         return code;
1205                 }
1206
1207                 *retcode_oc[ i ].oc = oc_find( retcode_oc[ i ].name );
1208                 if ( *retcode_oc[ i ].oc == NULL ) {
1209                         fprintf( stderr, "retcode: unable to find "
1210                                 "objectClass \"%s\"\n",
1211                                 retcode_oc[ i ].name );
1212                         return 1;
1213                 }
1214         }
1215
1216         retcode.on_bi.bi_type = "retcode";
1217
1218         retcode.on_bi.bi_db_init = retcode_db_init;
1219         retcode.on_bi.bi_db_config = retcode_db_config;
1220         retcode.on_bi.bi_db_open = retcode_db_open;
1221         retcode.on_bi.bi_db_destroy = retcode_db_destroy;
1222
1223         retcode.on_bi.bi_op_add = retcode_op_func;
1224         retcode.on_bi.bi_op_bind = retcode_op_func;
1225         retcode.on_bi.bi_op_compare = retcode_op_func;
1226         retcode.on_bi.bi_op_delete = retcode_op_func;
1227         retcode.on_bi.bi_op_modify = retcode_op_func;
1228         retcode.on_bi.bi_op_modrdn = retcode_op_func;
1229         retcode.on_bi.bi_op_search = retcode_op_func;
1230
1231         retcode.on_bi.bi_extended = retcode_op_func;
1232
1233         retcode.on_response = retcode_response;
1234
1235         return overlay_register( &retcode );
1236 }
1237
1238 #if SLAPD_OVER_RETCODE == SLAPD_MOD_DYNAMIC
1239 int
1240 init_module( int argc, char *argv[] )
1241 {
1242         return retcode_init();
1243 }
1244 #endif /* SLAPD_OVER_RETCODE == SLAPD_MOD_DYNAMIC */
1245
1246 #endif /* SLAPD_OVER_RETCODE */