git.sur5r.net Git - openldap/blob - servers/slapd/overlays/retcode.c

   1 /* retcode.c - customizable response for client testing purposes */
   2 /* $OpenLDAP$ */
   3 /* This work is part of OpenLDAP Software <http://www.openldap.org/>.
   4  *
   5  * Copyright 2005-2006 The OpenLDAP Foundation.
   6  * Portions Copyright 2005 Pierangelo Masarati <ando@sys-net.it>
   7  * All rights reserved.
   8  *
   9  * Redistribution and use in source and binary forms, with or without
  10  * modification, are permitted only as authorized by the OpenLDAP
  11  * Public License.
  12  *
  13  * A copy of this license is available in the file LICENSE in the
  14  * top-level directory of the distribution or, alternatively, at
  15  * <http://www.OpenLDAP.org/license.html>.
  16  */
  17 /* ACKNOWLEDGEMENTS:
  18  * This work was initially developed by Pierangelo Masarati for inclusion
  19  * in OpenLDAP Software.
  20  */
  21
  22 #include "portable.h"
  23
  24 #ifdef SLAPD_OVER_RETCODE
  25
  26 #include <stdio.h>
  27
  28 #include <ac/unistd.h>
  29 #include <ac/string.h>
  30 #include <ac/ctype.h>
  31 #include <ac/socket.h>
  32
  33 #include "slap.h"
  34 #include "lutil.h"
  35
  36 static slap_overinst            retcode;
  37
  38 static AttributeDescription     *ad_errCode;
  39 static AttributeDescription     *ad_errText;
  40 static AttributeDescription     *ad_errOp;
  41 static AttributeDescription     *ad_errSleepTime;
  42 static AttributeDescription     *ad_errMatchedDN;
  43 static ObjectClass              *oc_errAbsObject;
  44 static ObjectClass              *oc_errObject;
  45 static ObjectClass              *oc_errAuxObject;
  46
  47 typedef enum retcode_op_e {
  48         SN_DG_OP_NONE           = 0x0000,
  49         SN_DG_OP_ADD            = 0x0001,
  50         SN_DG_OP_BIND           = 0x0002,
  51         SN_DG_OP_COMPARE        = 0x0004,
  52         SN_DG_OP_DELETE         = 0x0008,
  53         SN_DG_OP_MODIFY         = 0x0010,
  54         SN_DG_OP_RENAME         = 0x0020,
  55         SN_DG_OP_SEARCH         = 0x0040,
  56         SN_DG_EXTENDED          = 0x0080,
  57         SN_DG_OP_AUTH           = SN_DG_OP_BIND,
  58         SN_DG_OP_READ           = (SN_DG_OP_COMPARE|SN_DG_OP_SEARCH),
  59         SN_DG_OP_WRITE          = (SN_DG_OP_ADD|SN_DG_OP_DELETE|SN_DG_OP_MODIFY|SN_DG_OP_RENAME),
  60         SN_DG_OP_ALL            = (SN_DG_OP_AUTH|SN_DG_OP_READ|SN_DG_OP_WRITE|SN_DG_EXTENDED)
  61 } retcode_op_e;
  62
  63 typedef struct retcode_item_t {
  64         struct berval           rdi_dn;
  65         struct berval           rdi_ndn;
  66         struct berval           rdi_text;
  67         struct berval           rdi_matched;
  68         int                     rdi_err;
  69         BerVarray               rdi_ref;
  70         int                     rdi_sleeptime;
  71         Entry                   rdi_e;
  72         slap_mask_t             rdi_mask;
  73         struct retcode_item_t   *rdi_next;
  74 } retcode_item_t;
  75
  76 typedef struct retcode_t {
  77         struct berval           rd_pdn;
  78         struct berval           rd_npdn;
  79
  80         retcode_item_t          *rd_item;
  81
  82         unsigned                rd_flags;
  83 #define RETCODE_FNONE           0x00
  84 #define RETCODE_FINDIR          0x01
  85 #define RETCODE_INDIR( rd )     ( (rd)->rd_flags & RETCODE_FINDIR )
  86 } retcode_t;
  87
  88 static int
  89 retcode_entry_response( Operation *op, SlapReply *rs, BackendInfo *bi, Entry *e );
  90
  91 static int
  92 retcode_cleanup_cb( Operation *op, SlapReply *rs )
  93 {
  94         rs->sr_matched = NULL;
  95         rs->sr_text = NULL;
  96
  97         if ( rs->sr_ref != NULL ) {
  98                 ber_bvarray_free( rs->sr_ref );
  99                 rs->sr_ref = NULL;
 100         }
 101
 102         ch_free( op->o_callback );
 103         op->o_callback = NULL;
 104
 105         return SLAP_CB_CONTINUE;
 106 }
 107
 108 static int
 109 retcode_send_onelevel( Operation *op, SlapReply *rs )
 110 {
 111         slap_overinst   *on = (slap_overinst *)op->o_bd->bd_info;
 112         retcode_t       *rd = (retcode_t *)on->on_bi.bi_private;
 113
 114         retcode_item_t  *rdi;
 115
 116         for ( rdi = rd->rd_item; rdi != NULL; rdi = rdi->rdi_next ) {
 117                 if ( op->o_abandon ) {
 118                         return rs->sr_err = SLAPD_ABANDON;
 119                 }
 120
 121                 rs->sr_err = test_filter( op, &rdi->rdi_e, op->ors_filter );
 122                 if ( rs->sr_err == LDAP_COMPARE_TRUE ) {
 123                         if ( op->ors_slimit == rs->sr_nentries ) {
 124                                 rs->sr_err = LDAP_SIZELIMIT_EXCEEDED;
 125                                 goto done;
 126                         }
 127
 128                         /* safe default */
 129                         rs->sr_attrs = op->ors_attrs;
 130                         rs->sr_operational_attrs = NULL;
 131                         rs->sr_ctrls = NULL;
 132                         rs->sr_flags = 0;
 133                         rs->sr_err = LDAP_SUCCESS;
 134                         rs->sr_entry = &rdi->rdi_e;
 135
 136                         rs->sr_err = send_search_entry( op, rs );
 137                         rs->sr_entry = NULL;
 138
 139                         switch ( rs->sr_err ) {
 140                         case LDAP_UNAVAILABLE:  /* connection closed */
 141                                 rs->sr_err = LDAP_OTHER;
 142                                 /* fallthru */
 143                         case LDAP_SIZELIMIT_EXCEEDED:
 144                                 goto done;
 145                         }
 146                 }
 147                 rs->sr_err = LDAP_SUCCESS;
 148         }
 149
 150 done:;
 151
 152         send_ldap_result( op, rs );
 153
 154         return rs->sr_err;
 155 }
 156
 157 static int
 158 retcode_op_add( Operation *op, SlapReply *rs )
 159 {
 160         return retcode_entry_response( op, rs, NULL, op->ora_e );
 161 }
 162
 163 typedef struct retcode_cb_t {
 164         BackendInfo     *rdc_info;
 165         unsigned        rdc_flags;
 166         ber_tag_t       rdc_tag;
 167         AttributeName   *rdc_attrs;
 168 } retcode_cb_t;
 169
 170 static int
 171 retcode_cb_response( Operation *op, SlapReply *rs )
 172 {
 173         retcode_cb_t    *rdc = (retcode_cb_t *)op->o_callback->sc_private;
 174
 175         if ( rs->sr_type == REP_SEARCH ) {
 176                 ber_tag_t       o_tag = op->o_tag;
 177                 int             rc;
 178
 179                 op->o_tag = rdc->rdc_tag;
 180                 if ( op->o_tag == LDAP_REQ_SEARCH ) {
 181                         rs->sr_attrs = rdc->rdc_attrs;
 182                 }
 183                 rc = retcode_entry_response( op, rs, rdc->rdc_info, rs->sr_entry );
 184                 op->o_tag = o_tag;
 185
 186                 return rc;
 187         }
 188
 189         if ( rs->sr_err == LDAP_SUCCESS ) {
 190                 if ( !op->o_abandon ) {
 191                         rdc->rdc_flags = SLAP_CB_CONTINUE;
 192                 }
 193                 return 0;
 194         }
 195
 196         return SLAP_CB_CONTINUE;
 197 }
 198
 199 static int
 200 retcode_op_internal( Operation *op, SlapReply *rs )
 201 {
 202         slap_overinst   *on = (slap_overinst *)op->o_bd->bd_info;
 203
 204         Operation       op2 = *op;
 205         SlapReply       rs2 = { 0 };
 206         BackendDB       db = *op->o_bd;
 207         slap_callback   sc = { 0 };
 208         retcode_cb_t    rdc;
 209
 210         int             rc;
 211
 212         op2.o_tag = LDAP_REQ_SEARCH;
 213         op2.ors_scope = LDAP_SCOPE_BASE;
 214         op2.ors_deref = LDAP_DEREF_NEVER;
 215         op2.ors_tlimit = SLAP_NO_LIMIT;
 216         op2.ors_slimit = SLAP_NO_LIMIT;
 217         op2.ors_limit = NULL;
 218         op2.ors_attrsonly = 0;
 219         op2.ors_attrs = slap_anlist_all_attributes;
 220
 221         ber_str2bv_x( "(objectClass=errAbsObject)",
 222                 STRLENOF( "(objectClass=errAbsObject)" ),
 223                 1, &op2.ors_filterstr, op2.o_tmpmemctx );
 224         op2.ors_filter = str2filter_x( &op2, op2.ors_filterstr.bv_val );
 225
 226         db.bd_info = on->on_info->oi_orig;
 227         op2.o_bd = &db;
 228
 229         rdc.rdc_info = on->on_info->oi_orig;
 230         rdc.rdc_flags = RETCODE_FINDIR;
 231         if ( op->o_tag == LDAP_REQ_SEARCH ) {
 232                 rdc.rdc_attrs = op->ors_attrs;
 233         }
 234         rdc.rdc_tag = op->o_tag;
 235         sc.sc_response = retcode_cb_response;
 236         sc.sc_private = &rdc;
 237         op2.o_callback = &sc;
 238
 239         rc = op2.o_bd->be_search( &op2, &rs2 );
 240
 241         filter_free_x( &op2, op2.ors_filter );
 242         ber_memfree_x( op2.ors_filterstr.bv_val, op2.o_tmpmemctx );
 243
 244         if ( rdc.rdc_flags == SLAP_CB_CONTINUE ) {
 245                 return SLAP_CB_CONTINUE;
 246         }
 247
 248         return rc;
 249 }
 250
 251 static int
 252 retcode_op_func( Operation *op, SlapReply *rs )
 253 {
 254         slap_overinst   *on = (slap_overinst *)op->o_bd->bd_info;
 255         retcode_t       *rd = (retcode_t *)on->on_bi.bi_private;
 256
 257         retcode_item_t  *rdi;
 258         struct berval           nrdn, npdn;
 259
 260         slap_callback           *cb = NULL;
 261
 262         if ( !dnIsSuffix( &op->o_req_ndn, &rd->rd_npdn ) ) {
 263                 if ( RETCODE_INDIR( rd ) ) {
 264                         switch ( op->o_tag ) {
 265                         case LDAP_REQ_ADD:
 266                                 return retcode_op_add( op, rs );
 267
 268                         case LDAP_REQ_BIND:
 269                                 /* skip if rootdn */
 270                                 if ( be_isroot_pw( op ) ) {
 271                                         return SLAP_CB_CONTINUE;
 272                                 }
 273                                 return retcode_op_internal( op, rs );
 274
 275                         case LDAP_REQ_SEARCH:
 276                                 if ( op->ors_scope == LDAP_SCOPE_BASE ) {
 277                                         rs->sr_err = retcode_op_internal( op, rs );
 278                                         if ( rs->sr_err == SLAP_CB_CONTINUE ) {
 279                                                 rs->sr_err = LDAP_SUCCESS;
 280                                         }
 281                                         send_ldap_result( op, rs );
 282                                         return rs->sr_err;
 283                                 }
 284                                 break;
 285
 286                         case LDAP_REQ_MODIFY:
 287                         case LDAP_REQ_DELETE:
 288                         case LDAP_REQ_MODRDN:
 289                         case LDAP_REQ_COMPARE:
 290                                 return retcode_op_internal( op, rs );
 291                         }
 292                 }
 293
 294                 return SLAP_CB_CONTINUE;
 295         }
 296
 297         if ( op->o_tag == LDAP_REQ_SEARCH
 298                         && op->ors_scope != LDAP_SCOPE_BASE
 299                         && op->o_req_ndn.bv_len == rd->rd_npdn.bv_len )
 300         {
 301                 return retcode_send_onelevel( op, rs );
 302         }
 303
 304         dnParent( &op->o_req_ndn, &npdn );
 305         if ( npdn.bv_len != rd->rd_npdn.bv_len ) {
 306                 rs->sr_err = LDAP_NO_SUCH_OBJECT;
 307                 rs->sr_matched = rd->rd_pdn.bv_val;
 308                 send_ldap_result( op, rs );
 309                 rs->sr_matched = NULL;
 310                 return rs->sr_err;
 311         }
 312
 313         dnRdn( &op->o_req_ndn, &nrdn );
 314
 315         for ( rdi = rd->rd_item; rdi != NULL; rdi = rdi->rdi_next ) {
 316                 struct berval   rdi_nrdn;
 317
 318                 dnRdn( &rdi->rdi_ndn, &rdi_nrdn );
 319                 if ( dn_match( &nrdn, &rdi_nrdn ) ) {
 320                         break;
 321                 }
 322         }
 323
 324         if ( rdi != NULL && rdi->rdi_mask != SN_DG_OP_ALL ) {
 325                 retcode_op_e    o_tag = SN_DG_OP_NONE;
 326
 327                 switch ( op->o_tag ) {
 328                 case LDAP_REQ_ADD:
 329                         o_tag = SN_DG_OP_ADD;
 330                         break;
 331
 332                 case LDAP_REQ_BIND:
 333                         o_tag = SN_DG_OP_BIND;
 334                         break;
 335
 336                 case LDAP_REQ_COMPARE:
 337                         o_tag = SN_DG_OP_COMPARE;
 338                         break;
 339
 340                 case LDAP_REQ_DELETE:
 341                         o_tag = SN_DG_OP_DELETE;
 342                         break;
 343
 344                 case LDAP_REQ_MODIFY:
 345                         o_tag = SN_DG_OP_MODIFY;
 346                         break;
 347
 348                 case LDAP_REQ_MODRDN:
 349                         o_tag = SN_DG_OP_RENAME;
 350                         break;
 351
 352                 case LDAP_REQ_SEARCH:
 353                         o_tag = SN_DG_OP_SEARCH;
 354                         break;
 355
 356                 case LDAP_REQ_EXTENDED:
 357                         o_tag = SN_DG_EXTENDED;
 358                         break;
 359
 360                 default:
 361                         /* Should not happen */
 362                         break;
 363                 }
 364
 365                 if ( !( o_tag & rdi->rdi_mask ) ) {
 366                         return SLAP_CB_CONTINUE;
 367                 }
 368         }
 369
 370         if ( rdi == NULL ) {
 371                 rs->sr_matched = rd->rd_pdn.bv_val;
 372                 rs->sr_err = LDAP_NO_SUCH_OBJECT;
 373                 rs->sr_text = "retcode not found";
 374
 375         } else {
 376                 rs->sr_err = rdi->rdi_err;
 377                 rs->sr_text = rdi->rdi_text.bv_val;
 378                 rs->sr_matched = rdi->rdi_matched.bv_val;
 379
 380                 /* FIXME: we only honor the rdi_ref field in case rdi_err
 381                  * is LDAP_REFERRAL otherwise send_ldap_result() bails out */
 382                 if ( rs->sr_err == LDAP_REFERRAL ) {
 383                         BerVarray       ref;
 384
 385                         if ( rdi->rdi_ref != NULL ) {
 386                                 ref = rdi->rdi_ref;
 387                         } else {
 388                                 ref = default_referral;
 389                         }
 390
 391                         if ( ref != NULL ) {
 392                                 rs->sr_ref = referral_rewrite( ref,
 393                                         NULL, &op->o_req_dn, LDAP_SCOPE_DEFAULT );
 394
 395                         } else {
 396                                 rs->sr_err = LDAP_OTHER;
 397                                 rs->sr_text = "bad referral object";
 398                         }
 399                 }
 400
 401                 if ( rdi->rdi_sleeptime > 0 ) {
 402                         sleep( rdi->rdi_sleeptime );
 403                 }
 404         }
 405
 406         switch ( op->o_tag ) {
 407         case LDAP_REQ_EXTENDED:
 408                 if ( rdi == NULL ) {
 409                         break;
 410                 }
 411                 cb = ( slap_callback * )ch_malloc( sizeof( slap_callback ) );
 412                 memset( cb, 0, sizeof( slap_callback ) );
 413                 cb->sc_cleanup = retcode_cleanup_cb;
 414                 op->o_callback = cb;
 415                 break;
 416
 417         default:
 418                 send_ldap_result( op, rs );
 419                 if ( rs->sr_ref != NULL ) {
 420                         ber_bvarray_free( rs->sr_ref );
 421                         rs->sr_ref = NULL;
 422                 }
 423                 rs->sr_matched = NULL;
 424                 rs->sr_text = NULL;
 425                 break;
 426         }
 427
 428         return rs->sr_err;
 429 }
 430
 431 static int
 432 retcode_op2str( ber_tag_t op, struct berval *bv )
 433 {
 434         switch ( op ) {
 435         case LDAP_REQ_BIND:
 436                 BER_BVSTR( bv, "bind" );
 437                 return 0;
 438         case LDAP_REQ_ADD:
 439                 BER_BVSTR( bv, "add" );
 440                 return 0;
 441         case LDAP_REQ_DELETE:
 442                 BER_BVSTR( bv, "delete" );
 443                 return 0;
 444         case LDAP_REQ_MODRDN:
 445                 BER_BVSTR( bv, "modrdn" );
 446                 return 0;
 447         case LDAP_REQ_MODIFY:
 448                 BER_BVSTR( bv, "modify" );
 449                 return 0;
 450         case LDAP_REQ_COMPARE:
 451                 BER_BVSTR( bv, "compare" );
 452                 return 0;
 453         case LDAP_REQ_SEARCH:
 454                 BER_BVSTR( bv, "search" );
 455                 return 0;
 456         case LDAP_REQ_EXTENDED:
 457                 BER_BVSTR( bv, "extended" );
 458                 return 0;
 459         }
 460         return -1;
 461 }
 462
 463 static int
 464 retcode_entry_response( Operation *op, SlapReply *rs, BackendInfo *bi, Entry *e )
 465 {
 466         Attribute       *a;
 467         int             err;
 468         char            *next;
 469
 470         if ( get_manageDSAit( op ) ) {
 471                 return SLAP_CB_CONTINUE;
 472         }
 473
 474         if ( !is_entry_objectclass_or_sub( e, oc_errAbsObject ) ) {
 475                 return SLAP_CB_CONTINUE;
 476         }
 477
 478         /* operation */
 479         a = attr_find( e->e_attrs, ad_errOp );
 480         if ( a != NULL ) {
 481                 int             i,
 482                                 gotit = 0;
 483                 struct berval   bv = BER_BVNULL;
 484
 485                 (void)retcode_op2str( op->o_tag, &bv );
 486
 487                 if ( BER_BVISNULL( &bv ) ) {
 488                         return SLAP_CB_CONTINUE;
 489                 }
 490
 491                 for ( i = 0; !BER_BVISNULL( &a->a_nvals[ i ] ); i++ ) {
 492                         if ( bvmatch( &a->a_nvals[ i ], &bv ) ) {
 493                                 gotit = 1;
 494                                 break;
 495                         }
 496                 }
 497
 498                 if ( !gotit ) {
 499                         return SLAP_CB_CONTINUE;
 500                 }
 501         }
 502
 503         /* error code */
 504         a = attr_find( e->e_attrs, ad_errCode );
 505         if ( a == NULL ) {
 506                 return SLAP_CB_CONTINUE;
 507         }
 508         err = strtol( a->a_nvals[ 0 ].bv_val, &next, 0 );
 509         if ( next == a->a_nvals[ 0 ].bv_val || next[ 0 ] != '\0' ) {
 510                 return SLAP_CB_CONTINUE;
 511         }
 512         rs->sr_err = err;
 513
 514         /* sleep time */
 515         a = attr_find( e->e_attrs, ad_errSleepTime );
 516         if ( a != NULL ) {
 517                 int     sleepTime;
 518
 519                 sleepTime = strtoul( a->a_nvals[ 0 ].bv_val, &next, 0 );
 520                 if ( next != a->a_nvals[ 0 ].bv_val && next[ 0 ] == '\0' ) {
 521                         sleep( sleepTime );
 522                 }
 523         }
 524
 525         if ( rs->sr_err != LDAP_SUCCESS ) {
 526                 BackendDB       db = *op->o_bd,
 527                                 *o_bd = op->o_bd;
 528                 void            *o_callback = op->o_callback;
 529
 530                 /* message text */
 531                 a = attr_find( e->e_attrs, ad_errText );
 532                 if ( a != NULL ) {
 533                         rs->sr_text = a->a_vals[ 0 ].bv_val;
 534                 }
 535
 536                 /* matched DN */
 537                 a = attr_find( e->e_attrs, ad_errMatchedDN );
 538                 if ( a != NULL ) {
 539                         rs->sr_matched = a->a_vals[ 0 ].bv_val;
 540                 }
 541
 542                 if ( bi == NULL ) {
 543                         slap_overinst   *on = (slap_overinst *)op->o_bd->bd_info;
 544
 545                         bi = on->on_info->oi_orig;
 546                 }
 547
 548                 db.bd_info = bi;
 549                 op->o_bd = &db;
 550                 op->o_callback = NULL;
 551
 552                 /* referral */
 553                 if ( rs->sr_err == LDAP_REFERRAL ) {
 554                         BerVarray       refs = default_referral;
 555
 556                         a = attr_find( e->e_attrs, slap_schema.si_ad_ref );
 557                         if ( a != NULL ) {
 558                                 refs = a->a_vals;
 559                         }
 560                         rs->sr_ref = referral_rewrite( refs,
 561                                 NULL, &op->o_req_dn, op->oq_search.rs_scope );
 562
 563                         send_search_reference( op, rs );
 564                         ber_bvarray_free( rs->sr_ref );
 565                         rs->sr_ref = NULL;
 566
 567                 } else {
 568                         send_ldap_result( op, rs );
 569                 }
 570
 571                 rs->sr_text = NULL;
 572                 rs->sr_matched = NULL;
 573                 op->o_bd = o_bd;
 574                 op->o_callback = o_callback;
 575         }
 576
 577         if ( rs->sr_err != LDAP_SUCCESS ) {
 578                 op->o_abandon = 1;
 579                 return rs->sr_err;
 580         }
 581
 582         return SLAP_CB_CONTINUE;
 583 }
 584
 585 static int
 586 retcode_response( Operation *op, SlapReply *rs )
 587 {
 588         slap_overinst   *on = (slap_overinst *)op->o_bd->bd_info;
 589         retcode_t       *rd = (retcode_t *)on->on_bi.bi_private;
 590
 591         if ( rs->sr_type != REP_SEARCH || !RETCODE_INDIR( rd ) ) {
 592                 return SLAP_CB_CONTINUE;
 593         }
 594
 595         return retcode_entry_response( op, rs, NULL, rs->sr_entry );
 596 }
 597
 598 static int
 599 retcode_db_init( BackendDB *be )
 600 {
 601         slap_overinst   *on = (slap_overinst *)be->bd_info;
 602         retcode_t       *rd;
 603
 604         rd = (retcode_t *)ch_malloc( sizeof( retcode_t ) );
 605         memset( rd, 0, sizeof( retcode_t ) );
 606
 607         on->on_bi.bi_private = (void *)rd;
 608
 609         return 0;
 610 }
 611
 612 static int
 613 retcode_db_config(
 614         BackendDB       *be,
 615         const char      *fname,
 616         int             lineno,
 617         int             argc,
 618         char            **argv )
 619 {
 620         slap_overinst   *on = (slap_overinst *)be->bd_info;
 621         retcode_t       *rd = (retcode_t *)on->on_bi.bi_private;
 622
 623         char                    *argv0 = argv[ 0 ] + STRLENOF( "retcode-" );
 624
 625         if ( strncasecmp( argv[ 0 ], "retcode-", STRLENOF( "retcode-" ) ) != 0 ) {
 626                 return SLAP_CONF_UNKNOWN;
 627         }
 628
 629         if ( strcasecmp( argv0, "parent" ) == 0 ) {
 630                 struct berval   dn;
 631                 int             rc;
 632
 633                 if ( argc != 2 ) {
 634                         fprintf( stderr, "%s: line %d: retcode: "
 635                                 "\"retcode-parent <DN>\": missing <DN>\n",
 636                                 fname, lineno );
 637                         return 1;
 638                 }
 639
 640                 if ( !BER_BVISNULL( &rd->rd_pdn ) ) {
 641                         fprintf( stderr, "%s: line %d: retcode: "
 642                                 "parent already defined.\n", fname, lineno );
 643                         return 1;
 644                 }
 645
 646                 ber_str2bv( argv[ 1 ], 0, 0, &dn );
 647
 648                 rc = dnPrettyNormal( NULL, &dn, &rd->rd_pdn, &rd->rd_npdn, NULL );
 649                 if ( rc != LDAP_SUCCESS ) {
 650                         fprintf( stderr, "%s: line %d: retcode: "
 651                                 "unable to normalize parent DN \"%s\": %d\n",
 652                                 fname, lineno, argv[ 1 ], rc );
 653                         return 1;
 654                 }
 655
 656         } else if ( strcasecmp( argv0, "item" ) == 0 ) {
 657                 retcode_item_t  rdi = { BER_BVNULL }, **rdip;
 658                 struct berval           bv, rdn, nrdn;
 659                 int                     rc;
 660                 char                    *next = NULL;
 661
 662                 if ( argc < 3 ) {
 663                         fprintf( stderr, "%s: line %d: retcode: "
 664                                 "\"retcode-item <RDN> <retcode> [<text>]\": "
 665                                 "missing args\n",
 666                                 fname, lineno );
 667                         return 1;
 668                 }
 669
 670                 ber_str2bv( argv[ 1 ], 0, 0, &bv );
 671
 672                 rc = dnPrettyNormal( NULL, &bv, &rdn, &nrdn, NULL );
 673                 if ( rc != LDAP_SUCCESS ) {
 674                         fprintf( stderr, "%s: line %d: retcode: "
 675                                 "unable to normalize RDN \"%s\": %d\n",
 676                                 fname, lineno, argv[ 1 ], rc );
 677                         return 1;
 678                 }
 679
 680                 if ( !dnIsOneLevelRDN( &nrdn ) ) {
 681                         fprintf( stderr, "%s: line %d: retcode: "
 682                                 "value \"%s\" is not a RDN\n",
 683                                 fname, lineno, argv[ 1 ] );
 684                         return 1;
 685                 }
 686
 687                 if ( BER_BVISNULL( &rd->rd_npdn ) ) {
 688                         /* FIXME: we use the database suffix */
 689                         if ( be->be_nsuffix == NULL ) {
 690                                 fprintf( stderr, "%s: line %d: retcode: "
 691                                         "either \"retcode-parent\" "
 692                                         "or \"suffix\" must be defined.\n",
 693                                         fname, lineno );
 694                                 return 1;
 695                         }
 696
 697                         ber_dupbv( &rd->rd_pdn, &be->be_suffix[ 0 ] );
 698                         ber_dupbv( &rd->rd_npdn, &be->be_nsuffix[ 0 ] );
 699                 }
 700
 701                 build_new_dn( &rdi.rdi_dn, &rd->rd_pdn, &rdn, NULL );
 702                 build_new_dn( &rdi.rdi_ndn, &rd->rd_npdn, &nrdn, NULL );
 703
 704                 ch_free( rdn.bv_val );
 705                 ch_free( nrdn.bv_val );
 706
 707                 rdi.rdi_err = strtol( argv[ 2 ], &next, 0 );
 708                 if ( next == argv[ 2 ] || next[ 0 ] != '\0' ) {
 709                         fprintf( stderr, "%s: line %d: retcode: "
 710                                 "unable to parse return code \"%s\"\n",
 711                                 fname, lineno, argv[ 2 ] );
 712                         return 1;
 713                 }
 714
 715                 rdi.rdi_mask = SN_DG_OP_ALL;
 716
 717                 if ( argc > 3 ) {
 718                         int     i;
 719
 720                         for ( i = 3; i < argc; i++ ) {
 721                                 if ( strncasecmp( argv[ i ], "op=", STRLENOF( "op=" ) ) == 0 )
 722                                 {
 723                                         char            **ops;
 724                                         int             j;
 725
 726                                         ops = ldap_str2charray( &argv[ i ][ STRLENOF( "op=" ) ], "," );
 727                                         assert( ops != NULL );
 728
 729                                         rdi.rdi_mask = SN_DG_OP_NONE;
 730
 731                                         for ( j = 0; ops[ j ] != NULL; j++ ) {
 732                                                 if ( strcasecmp( ops[ j ], "add" ) == 0 ) {
 733                                                         rdi.rdi_mask |= SN_DG_OP_ADD;
 734
 735                                                 } else if ( strcasecmp( ops[ j ], "bind" ) == 0 ) {
 736                                                         rdi.rdi_mask |= SN_DG_OP_BIND;
 737
 738                                                 } else if ( strcasecmp( ops[ j ], "compare" ) == 0 ) {
 739                                                         rdi.rdi_mask |= SN_DG_OP_COMPARE;
 740
 741                                                 } else if ( strcasecmp( ops[ j ], "delete" ) == 0 ) {
 742                                                         rdi.rdi_mask |= SN_DG_OP_DELETE;
 743
 744                                                 } else if ( strcasecmp( ops[ j ], "modify" ) == 0 ) {
 745                                                         rdi.rdi_mask |= SN_DG_OP_MODIFY;
 746
 747                                                 } else if ( strcasecmp( ops[ j ], "rename" ) == 0
 748                                                         || strcasecmp( ops[ j ], "modrdn" ) == 0 )
 749                                                 {
 750                                                         rdi.rdi_mask |= SN_DG_OP_RENAME;
 751
 752                                                 } else if ( strcasecmp( ops[ j ], "search" ) == 0 ) {
 753                                                         rdi.rdi_mask |= SN_DG_OP_SEARCH;
 754
 755                                                 } else if ( strcasecmp( ops[ j ], "extended" ) == 0 ) {
 756                                                         rdi.rdi_mask |= SN_DG_EXTENDED;
 757
 758                                                 } else if ( strcasecmp( ops[ j ], "auth" ) == 0 ) {
 759                                                         rdi.rdi_mask |= SN_DG_OP_AUTH;
 760
 761                                                 } else if ( strcasecmp( ops[ j ], "read" ) == 0 ) {
 762                                                         rdi.rdi_mask |= SN_DG_OP_READ;
 763
 764                                                 } else if ( strcasecmp( ops[ j ], "write" ) == 0 ) {
 765                                                         rdi.rdi_mask |= SN_DG_OP_WRITE;
 766
 767                                                 } else if ( strcasecmp( ops[ j ], "all" ) == 0 ) {
 768                                                         rdi.rdi_mask |= SN_DG_OP_ALL;
 769
 770                                                 } else {
 771                                                         fprintf( stderr, "retcode: unknown op \"%s\"\n",
 772                                                                 ops[ j ] );
 773                                                         return 1;
 774                                                 }
 775                                         }
 776
 777                                         ldap_charray_free( ops );
 778
 779                                 } else if ( strncasecmp( argv[ i ], "text=", STRLENOF( "text=" ) ) == 0 )
 780                                 {
 781                                         if ( !BER_BVISNULL( &rdi.rdi_text ) ) {
 782                                                 fprintf( stderr, "%s: line %d: retcode: "
 783                                                         "\"text\" already provided.\n",
 784                                                         fname, lineno );
 785                                                 return 1;
 786                                         }
 787                                         ber_str2bv( &argv[ i ][ STRLENOF( "text=" ) ], 0, 1, &rdi.rdi_text );
 788
 789                                 } else if ( strncasecmp( argv[ i ], "matched=", STRLENOF( "matched=" ) ) == 0 )
 790                                 {
 791                                         struct berval   dn;
 792
 793                                         if ( !BER_BVISNULL( &rdi.rdi_matched ) ) {
 794                                                 fprintf( stderr, "%s: line %d: retcode: "
 795                                                         "\"matched\" already provided.\n",
 796                                                         fname, lineno );
 797                                                 return 1;
 798                                         }
 799                                         ber_str2bv( &argv[ i ][ STRLENOF( "matched=" ) ], 0, 0, &dn );
 800                                         if ( dnPretty( NULL, &dn, &rdi.rdi_matched, NULL ) != LDAP_SUCCESS ) {
 801                                                 fprintf( stderr, "%s: line %d: retcode: "
 802                                                         "unable to prettify matched DN \"%s\".\n",
 803                                                         fname, lineno, &argv[ i ][ STRLENOF( "matched=" ) ] );
 804                                                 return 1;
 805                                         }
 806
 807                                 } else if ( strncasecmp( argv[ i ], "ref=", STRLENOF( "ref=" ) ) == 0 )
 808                                 {
 809                                         char            **refs;
 810                                         int             j;
 811
 812                                         if ( rdi.rdi_ref != NULL ) {
 813                                                 fprintf( stderr, "%s: line %d: retcode: "
 814                                                         "\"ref\" already provided.\n",
 815                                                         fname, lineno );
 816                                                 return 1;
 817                                         }
 818
 819                                         if ( rdi.rdi_err != LDAP_REFERRAL ) {
 820                                                 fprintf( stderr, "%s: line %d: retcode: "
 821                                                         "providing \"ref\"\n"
 822                                                         "\talong with a non-referral "
 823                                                         "resultCode may cause slapd failures\n"
 824                                                         "\trelated to internal checks.\n",
 825                                                         fname, lineno );
 826                                         }
 827
 828                                         refs = ldap_str2charray( &argv[ i ][ STRLENOF( "ref=" ) ], " " );
 829                                         assert( refs != NULL );
 830
 831                                         for ( j = 0; refs[ j ] != NULL; j++ ) {
 832                                                 struct berval   bv;
 833
 834                                                 ber_str2bv( refs[ j ], 0, 1, &bv );
 835                                                 ber_bvarray_add( &rdi.rdi_ref, &bv );
 836                                         }
 837
 838                                         ldap_charray_free( refs );
 839
 840                                 } else if ( strncasecmp( argv[ i ], "sleeptime=", STRLENOF( "sleeptime=" ) ) == 0 )
 841                                 {
 842                                         char            *next;
 843                                         if ( rdi.rdi_sleeptime != 0 ) {
 844                                                 fprintf( stderr, "%s: line %d: retcode: "
 845                                                         "\"sleeptime\" already provided.\n",
 846                                                         fname, lineno );
 847                                                 return 1;
 848                                         }
 849
 850                                         rdi.rdi_sleeptime = strtol( &argv[ i ][ STRLENOF( "sleeptime=" ) ], &next, 10 );
 851                                         if ( next == argv[ i ] || next[ 0 ] != '\0' ) {
 852                                                 fprintf( stderr, "%s: line %d: retcode: "
 853                                                         "unable to parse \"sleeptime=%s\".\n",
 854                                                         fname, lineno, &argv[ i ][ STRLENOF( "sleeptime=" ) ] );
 855                                                 return 1;
 856                                         }
 857
 858                                 } else {
 859                                         fprintf( stderr, "%s: line %d: retcode: "
 860                                                 "unknown option \"%s\".\n",
 861                                                         fname, lineno, argv[ i ] );
 862                                         return 1;
 863                                 }
 864                         }
 865                 }
 866
 867                 for ( rdip = &rd->rd_item; *rdip; rdip = &(*rdip)->rdi_next )
 868                         /* go to last */ ;
 869
 870
 871                 *rdip = ( retcode_item_t * )ch_malloc( sizeof( retcode_item_t ) );
 872                 *(*rdip) = rdi;
 873
 874         } else if ( strcasecmp( argv0, "indir" ) == 0 ) {
 875                 rd->rd_flags |= RETCODE_FINDIR;
 876
 877         } else {
 878                 return SLAP_CONF_UNKNOWN;
 879         }
 880
 881         return 0;
 882 }
 883
 884 static int
 885 retcode_db_open( BackendDB *be )
 886 {
 887         slap_overinst   *on = (slap_overinst *)be->bd_info;
 888         retcode_t       *rd = (retcode_t *)on->on_bi.bi_private;
 889
 890         retcode_item_t  *rdi;
 891
 892         for ( rdi = rd->rd_item; rdi; rdi = rdi->rdi_next ) {
 893                 LDAPRDN                 rdn = NULL;
 894                 int                     rc, j;
 895                 char*                   p;
 896                 struct berval           val[ 3 ];
 897                 char                    buf[ SLAP_TEXT_BUFLEN ];
 898
 899                 /* DN */
 900                 rdi->rdi_e.e_name = rdi->rdi_dn;
 901                 rdi->rdi_e.e_nname = rdi->rdi_ndn;
 902
 903                 /* objectClass */
 904                 val[ 0 ] = oc_errObject->soc_cname;
 905                 val[ 1 ] = slap_schema.si_oc_extensibleObject->soc_cname;
 906                 BER_BVZERO( &val[ 2 ] );
 907
 908                 attr_merge( &rdi->rdi_e, slap_schema.si_ad_objectClass, val, NULL );
 909
 910                 /* RDN avas */
 911                 rc = ldap_bv2rdn( &rdi->rdi_dn, &rdn, (char **) &p,
 912                                 LDAP_DN_FORMAT_LDAP );
 913
 914                 assert( rc == LDAP_SUCCESS );
 915
 916                 for ( j = 0; rdn[ j ]; j++ ) {
 917                         LDAPAVA                 *ava = rdn[ j ];
 918                         AttributeDescription    *ad = NULL;
 919                         const char              *text;
 920
 921                         rc = slap_bv2ad( &ava->la_attr, &ad, &text );
 922                         assert( rc == LDAP_SUCCESS );
 923
 924                         attr_merge_normalize_one( &rdi->rdi_e, ad,
 925                                         &ava->la_value, NULL );
 926                 }
 927
 928                 ldap_rdnfree( rdn );
 929
 930                 /* error code */
 931                 snprintf( buf, sizeof( buf ), "%d", rdi->rdi_err );
 932                 ber_str2bv( buf, 0, 0, &val[ 0 ] );
 933
 934                 attr_merge_one( &rdi->rdi_e, ad_errCode, &val[ 0 ], NULL );
 935
 936                 if ( rdi->rdi_ref != NULL ) {
 937                         attr_merge_normalize( &rdi->rdi_e, slap_schema.si_ad_ref,
 938                                 rdi->rdi_ref, NULL );
 939                 }
 940
 941                 /* text */
 942                 if ( !BER_BVISNULL( &rdi->rdi_text ) ) {
 943                         val[ 0 ] = rdi->rdi_text;
 944
 945                         attr_merge_normalize_one( &rdi->rdi_e, ad_errText, &val[ 0 ], NULL );
 946                 }
 947
 948                 /* matched */
 949                 if ( !BER_BVISNULL( &rdi->rdi_matched ) ) {
 950                         val[ 0 ] = rdi->rdi_matched;
 951
 952                         attr_merge_normalize_one( &rdi->rdi_e, ad_errMatchedDN, &val[ 0 ], NULL );
 953                 }
 954
 955                 /* sleep time */
 956                 if ( rdi->rdi_sleeptime > 0 ) {
 957                         snprintf( buf, sizeof( buf ), "%d", rdi->rdi_sleeptime );
 958                         ber_str2bv( buf, 0, 0, &val[ 0 ] );
 959
 960                         attr_merge_one( &rdi->rdi_e, ad_errSleepTime, &val[ 0 ], NULL );
 961                 }
 962
 963                 /* operations */
 964                 if ( rdi->rdi_mask & SN_DG_OP_ADD ) {
 965                         BER_BVSTR( &val[ 0 ], "add" );
 966                         attr_merge_normalize_one( &rdi->rdi_e, ad_errOp, &val[ 0 ], NULL );
 967                 }
 968
 969                 if ( rdi->rdi_mask & SN_DG_OP_BIND ) {
 970                         BER_BVSTR( &val[ 0 ], "bind" );
 971                         attr_merge_normalize_one( &rdi->rdi_e, ad_errOp, &val[ 0 ], NULL );
 972                 }
 973
 974                 if ( rdi->rdi_mask & SN_DG_OP_COMPARE ) {
 975                         BER_BVSTR( &val[ 0 ], "compare" );
 976                         attr_merge_normalize_one( &rdi->rdi_e, ad_errOp, &val[ 0 ], NULL );
 977                 }
 978
 979                 if ( rdi->rdi_mask & SN_DG_OP_DELETE ) {
 980                         BER_BVSTR( &val[ 0 ], "delete" );
 981                         attr_merge_normalize_one( &rdi->rdi_e, ad_errOp, &val[ 0 ], NULL );
 982                 }
 983
 984                 if ( rdi->rdi_mask & SN_DG_EXTENDED ) {
 985                         BER_BVSTR( &val[ 0 ], "extended" );
 986                         attr_merge_normalize_one( &rdi->rdi_e, ad_errOp, &val[ 0 ], NULL );
 987                 }
 988
 989                 if ( rdi->rdi_mask & SN_DG_OP_MODIFY ) {
 990                         BER_BVSTR( &val[ 0 ], "modify" );
 991                         attr_merge_normalize_one( &rdi->rdi_e, ad_errOp, &val[ 0 ], NULL );
 992                 }
 993
 994                 if ( rdi->rdi_mask & SN_DG_OP_RENAME ) {
 995                         BER_BVSTR( &val[ 0 ], "rename" );
 996                         attr_merge_normalize_one( &rdi->rdi_e, ad_errOp, &val[ 0 ], NULL );
 997                 }
 998
 999                 if ( rdi->rdi_mask & SN_DG_OP_SEARCH ) {
1000                         BER_BVSTR( &val[ 0 ], "search" );
1001                         attr_merge_normalize_one( &rdi->rdi_e, ad_errOp, &val[ 0 ], NULL );
1002                 }
1003         }
1004
1005         return 0;
1006 }
1007
1008 static int
1009 retcode_db_destroy( BackendDB *be )
1010 {
1011         slap_overinst   *on = (slap_overinst *)be->bd_info;
1012         retcode_t       *rd = (retcode_t *)on->on_bi.bi_private;
1013
1014         if ( rd ) {
1015                 retcode_item_t  *rdi, *next;
1016
1017                 for ( rdi = rd->rd_item; rdi != NULL; rdi = next ) {
1018                         ber_memfree( rdi->rdi_dn.bv_val );
1019                         ber_memfree( rdi->rdi_ndn.bv_val );
1020
1021                         if ( !BER_BVISNULL( &rdi->rdi_text ) ) {
1022                                 ber_memfree( rdi->rdi_text.bv_val );
1023                         }
1024
1025                         if ( !BER_BVISNULL( &rdi->rdi_matched ) ) {
1026                                 ber_memfree( rdi->rdi_matched.bv_val );
1027                         }
1028
1029                         if ( rdi->rdi_ref ) {
1030                                 ber_bvarray_free( rdi->rdi_ref );
1031                         }
1032
1033                         BER_BVZERO( &rdi->rdi_e.e_name );
1034                         BER_BVZERO( &rdi->rdi_e.e_nname );
1035
1036                         entry_clean( &rdi->rdi_e );
1037
1038                         next = rdi->rdi_next;
1039
1040                         ch_free( rdi );
1041                 }
1042
1043                 if ( !BER_BVISNULL( &rd->rd_pdn ) ) {
1044                         ber_memfree( rd->rd_pdn.bv_val );
1045                 }
1046
1047                 if ( !BER_BVISNULL( &rd->rd_npdn ) ) {
1048                         ber_memfree( rd->rd_npdn.bv_val );
1049                 }
1050
1051                 ber_memfree( rd );
1052         }
1053
1054         return 0;
1055 }
1056
1057 #if SLAPD_OVER_RETCODE == SLAPD_MOD_DYNAMIC
1058 static
1059 #endif /* SLAPD_OVER_RETCODE == SLAPD_MOD_DYNAMIC */
1060 int
1061 retcode_initialize( void )
1062 {
1063         int             i, code;
1064         const char      *err;
1065
1066         static struct {
1067                 char                    *name;
1068                 char                    *desc;
1069                 AttributeDescription    **ad;
1070         } retcode_at[] = {
1071                 { "errCode", "( 1.3.6.1.4.1.4203.666.11.4.1.1 "
1072                         "NAME ( 'errCode' ) "
1073                         "DESC 'LDAP error code' "
1074                         "EQUALITY integerMatch "
1075                         "ORDERING integerOrderingMatch "
1076                         "SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 "
1077                         "SINGLE-VALUE )",
1078                         &ad_errCode },
1079                 { "errOp", "( 1.3.6.1.4.1.4203.666.11.4.1.2 "
1080                         "NAME ( 'errOp' ) "
1081                         "DESC 'Operations the errObject applies to' "
1082                         "EQUALITY caseIgnoreMatch "
1083                         "SUBSTR caseIgnoreSubstringsMatch "
1084                         "SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )",
1085                         &ad_errOp},
1086                 { "errText", "( 1.3.6.1.4.1.4203.666.11.4.1.3 "
1087                         "NAME ( 'errText' ) "
1088                         "DESC 'LDAP error textual description' "
1089                         "EQUALITY caseIgnoreMatch "
1090                         "SUBSTR caseIgnoreSubstringsMatch "
1091                         "SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 "
1092                         "SINGLE-VALUE )",
1093                         &ad_errText },
1094                 { "errSleepTime", "( 1.3.6.1.4.1.4203.666.11.4.1.4 "
1095                         "NAME ( 'errSleepTime' ) "
1096                         "DESC 'Time to wait before returning the error' "
1097                         "EQUALITY integerMatch "
1098                         "SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 "
1099                         "SINGLE-VALUE )",
1100                         &ad_errSleepTime },
1101                 { "errMatchedDN", "( 1.3.6.1.4.1.4203.666.11.4.1.5 "
1102                         "NAME ( 'errMatchedDN' ) "
1103                         "DESC 'Value to be returned as matched DN' "
1104                         "EQUALITY distinguishedNameMatch "
1105                         "SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 "
1106                         "SINGLE-VALUE )",
1107                         &ad_errMatchedDN },
1108                 { NULL }
1109         };
1110
1111         static struct {
1112                 char            *name;
1113                 char            *desc;
1114                 ObjectClass     **oc;
1115         } retcode_oc[] = {
1116                 { "errAbsObject", "( 1.3.6.1.4.1.4203.666.11.4.3.0 "
1117                         "NAME ( 'errAbsObject' ) "
1118                         "SUP top ABSTRACT "
1119                         "MUST ( errCode ) "
1120                         "MAY ( "
1121                                 "cn "
1122                                 "$ description "
1123                                 "$ errOp "
1124                                 "$ errText "
1125                                 "$ errSleepTime "
1126                                 "$ errMatchedDN "
1127                         ") )",
1128                         &oc_errAbsObject },
1129                 { "errObject", "( 1.3.6.1.4.1.4203.666.11.4.3.1 "
1130                         "NAME ( 'errObject' ) "
1131                         "SUP errAbsObject STRUCTURAL "
1132                         ")",
1133                         &oc_errObject },
1134                 { "errAuxObject", "( 1.3.6.1.4.1.4203.666.11.4.3.2 "
1135                         "NAME ( 'errAuxObject' ) "
1136                         "SUP errAbsObject AUXILIARY "
1137                         ")",
1138                         &oc_errAuxObject },
1139                 { NULL }
1140         };
1141
1142
1143         for ( i = 0; retcode_at[ i ].name != NULL; i++ ) {
1144                 LDAPAttributeType       *at;
1145
1146                 at = ldap_str2attributetype( retcode_at[ i ].desc,
1147                         &code, &err, LDAP_SCHEMA_ALLOW_ALL );
1148                 if ( !at ) {
1149                         fprintf( stderr, "retcode: "
1150                                 "AttributeType load failed: %s %s\n",
1151                                 ldap_scherr2str( code ), err );
1152                         return code;
1153                 }
1154
1155 #if LDAP_VENDOR_VERSION_MINOR == X || LDAP_VENDOR_VERSION_MINOR > 2
1156                 code = at_add( at, 0, NULL, &err );
1157 #else
1158                 code = at_add( at, &err );
1159 #endif
1160                 ldap_memfree( at );
1161                 if ( code != LDAP_SUCCESS ) {
1162                         fprintf( stderr, "retcode: "
1163                                 "AttributeType load failed: %s %s\n",
1164                                 scherr2str( code ), err );
1165                         return code;
1166                 }
1167
1168                 code = slap_str2ad( retcode_at[ i ].name,
1169                                 retcode_at[ i ].ad, &err );
1170                 if ( code != LDAP_SUCCESS ) {
1171                         fprintf( stderr, "retcode: unable to find "
1172                                 "AttributeDescription \"%s\": %d (%s)\n",
1173                                 retcode_at[ i ].name, code, err );
1174                         return 1;
1175                 }
1176         }
1177
1178         for ( i = 0; retcode_oc[ i ].name != NULL; i++ ) {
1179                 LDAPObjectClass *oc;
1180
1181                 oc = ldap_str2objectclass( retcode_oc[ i ].desc,
1182                                 &code, &err, LDAP_SCHEMA_ALLOW_ALL );
1183                 if ( !oc ) {
1184                         fprintf( stderr, "retcode: "
1185                                 "ObjectClass load failed: %s %s\n",
1186                                 ldap_scherr2str( code ), err );
1187                         return code;
1188                 }
1189
1190 #if LDAP_VENDOR_VERSION_MINOR == X || LDAP_VENDOR_VERSION_MINOR > 2
1191                 code = oc_add( oc, 0, NULL, &err );
1192 #else
1193                 code = oc_add( oc, &err );
1194 #endif
1195                 ldap_memfree(oc);
1196                 if ( code != LDAP_SUCCESS ) {
1197                         fprintf( stderr, "retcode: "
1198                                 "ObjectClass load failed: %s %s\n",
1199                                 scherr2str( code ), err );
1200                         return code;
1201                 }
1202
1203                 *retcode_oc[ i ].oc = oc_find( retcode_oc[ i ].name );
1204                 if ( *retcode_oc[ i ].oc == NULL ) {
1205                         fprintf( stderr, "retcode: unable to find "
1206                                 "objectClass \"%s\"\n",
1207                                 retcode_oc[ i ].name );
1208                         return 1;
1209                 }
1210         }
1211
1212         retcode.on_bi.bi_type = "retcode";
1213
1214         retcode.on_bi.bi_db_init = retcode_db_init;
1215         retcode.on_bi.bi_db_config = retcode_db_config;
1216         retcode.on_bi.bi_db_open = retcode_db_open;
1217         retcode.on_bi.bi_db_destroy = retcode_db_destroy;
1218
1219         retcode.on_bi.bi_op_add = retcode_op_func;
1220         retcode.on_bi.bi_op_bind = retcode_op_func;
1221         retcode.on_bi.bi_op_compare = retcode_op_func;
1222         retcode.on_bi.bi_op_delete = retcode_op_func;
1223         retcode.on_bi.bi_op_modify = retcode_op_func;
1224         retcode.on_bi.bi_op_modrdn = retcode_op_func;
1225         retcode.on_bi.bi_op_search = retcode_op_func;
1226
1227         retcode.on_bi.bi_extended = retcode_op_func;
1228
1229         retcode.on_response = retcode_response;
1230
1231         return overlay_register( &retcode );
1232 }
1233
1234 #if SLAPD_OVER_RETCODE == SLAPD_MOD_DYNAMIC
1235 int
1236 init_module( int argc, char *argv[] )
1237 {
1238         return retcode_initialize();
1239 }
1240 #endif /* SLAPD_OVER_RETCODE == SLAPD_MOD_DYNAMIC */
1241
1242 #endif /* SLAPD_OVER_RETCODE */