2 /* This work is part of OpenLDAP Software <http://www.openldap.org/>.
4 * Copyright 2002-2005 The OpenLDAP Foundation.
5 * Portions Copyright 1997,2002-2003 IBM Corporation.
8 * Redistribution and use in source and binary forms, with or without
9 * modification, are permitted only as authorized by the OpenLDAP
12 * A copy of this license is available in the file LICENSE in the
13 * top-level directory of the distribution or, alternatively, at
14 * <http://www.OpenLDAP.org/license.html>.
17 * This work was initially developed by IBM Corporation for use in
18 * IBM products and subsequently ported to OpenLDAP Software by
19 * Steve Omrani. Additional significant contributors include:
25 #include <ac/string.h>
26 #include <ac/stdarg.h>
28 #include <ac/unistd.h>
38 * server start time (should we use a struct timeval also in slapd?
40 static struct timeval base_time;
41 ldap_pvt_thread_mutex_t slapi_hn_mutex;
42 ldap_pvt_thread_mutex_t slapi_time_mutex;
45 ldap_pvt_thread_mutex_t mutex;
48 struct slapi_condvar {
49 ldap_pvt_thread_cond_t cond;
50 ldap_pvt_thread_mutex_t mutex;
53 static int checkBVString(const struct berval *bv)
57 for ( i = 0; i < bv->bv_len; i++ ) {
58 if ( bv->bv_val[i] == '\0' )
61 if ( bv->bv_val[i] != '\0' )
68 * This function converts an array of pointers to berval objects to
69 * an array of berval objects.
74 struct berval **bvptr,
77 int rc = LDAP_SUCCESS;
81 if ( bvptr == NULL || *bvptr == NULL ) {
85 for ( i = 0; bvptr != NULL && bvptr[i] != NULL; i++ ) {
89 tmpberval = (BerVarray)slapi_ch_malloc( (i + 1)*sizeof(struct berval));
90 if ( tmpberval == NULL ) {
91 return LDAP_NO_MEMORY;
94 for ( i = 0; bvptr[i] != NULL; i++ ) {
95 tmpberval[i].bv_val = bvptr[i]->bv_val;
96 tmpberval[i].bv_len = bvptr[i]->bv_len;
98 tmpberval[i].bv_val = NULL;
99 tmpberval[i].bv_len = 0;
101 if ( rc == LDAP_SUCCESS ) {
113 Slapi_Entry *e = NULL;
116 pTmpS = slapi_ch_strdup( s );
117 if ( pTmpS != NULL ) {
118 e = str2entry( pTmpS );
119 slapi_ch_free( (void **)&pTmpS );
132 ldap_pvt_thread_mutex_lock( &entry2str_mutex );
133 ret = entry2str( e, len );
134 ldap_pvt_thread_mutex_unlock( &entry2str_mutex );
140 slapi_entry_get_dn( Slapi_Entry *e )
142 return e->e_name.bv_val;
146 slapi_x_entry_get_id( Slapi_Entry *e )
152 slapi_int_dn_pretty( struct berval *in, struct berval *out )
154 Syntax *syntax = slap_schema.si_syn_distinguishedName;
156 assert( syntax != NULL );
158 return (syntax->ssyn_pretty)( syntax, in, out, NULL );
162 slapi_int_dn_normalize( struct berval *in, struct berval *out )
164 MatchingRule *mr = slap_schema.si_mr_distinguishedNameMatch;
165 Syntax *syntax = slap_schema.si_syn_distinguishedName;
167 assert( mr != NULL );
169 return (mr->smr_normalize)( 0, syntax, mr, in, out, NULL );
177 struct berval dn = BER_BVNULL;
180 dn.bv_len = strlen( ldn );
182 slapi_int_dn_pretty( &dn, &e->e_name );
183 slapi_int_dn_normalize( &dn, &e->e_nname );
187 slapi_entry_dup( Slapi_Entry *e )
189 return entry_dup( e );
193 slapi_entry_attr_delete(
197 AttributeDescription *ad = NULL;
200 if ( slap_str2ad( type, &ad, &text ) != LDAP_SUCCESS ) {
201 return 1; /* LDAP_NO_SUCH_ATTRIBUTE */
204 if ( attr_delete( &e->e_attrs, ad ) == LDAP_SUCCESS ) {
205 return 0; /* attribute is deleted */
207 return -1; /* something went wrong */
212 slapi_entry_alloc( void )
214 return (Slapi_Entry *)slapi_ch_calloc( 1, sizeof(Slapi_Entry) );
218 slapi_entry_free( Slapi_Entry *e )
225 slapi_entry_attr_merge(
228 struct berval **vals )
230 AttributeDescription *ad = NULL;
235 rc = bvptr2obj( vals, &bv );
236 if ( rc != LDAP_SUCCESS ) {
240 rc = slap_str2ad( type, &ad, &text );
241 if ( rc != LDAP_SUCCESS ) {
245 rc = attr_merge_normalize_one( e, ad, bv, NULL );
252 slapi_entry_attr_find(
257 AttributeDescription *ad = NULL;
261 rc = slap_str2ad( type, &ad, &text );
262 if ( rc != LDAP_SUCCESS ) {
266 *attr = attr_find( e->e_attrs, ad );
267 if ( *attr == NULL ) {
275 slapi_entry_attr_get_charptr( const Slapi_Entry *e, const char *type )
277 AttributeDescription *ad = NULL;
282 rc = slap_str2ad( type, &ad, &text );
283 if ( rc != LDAP_SUCCESS ) {
287 attr = attr_find( e->e_attrs, ad );
288 if ( attr == NULL ) {
292 if ( attr->a_vals != NULL && attr->a_vals[0].bv_len != 0 ) {
295 p = slapi_value_get_string( &attr->a_vals[0] );
297 return slapi_ch_strdup( (char *)p );
305 slapi_entry_attr_get_int( const Slapi_Entry *e, const char *type )
307 AttributeDescription *ad = NULL;
312 rc = slap_str2ad( type, &ad, &text );
313 if ( rc != LDAP_SUCCESS ) {
317 attr = attr_find( e->e_attrs, ad );
318 if ( attr == NULL ) {
322 return slapi_value_get_int( attr->a_vals );
326 slapi_entry_attr_get_long( const Slapi_Entry *e, const char *type )
328 AttributeDescription *ad = NULL;
333 rc = slap_str2ad( type, &ad, &text );
334 if ( rc != LDAP_SUCCESS ) {
338 attr = attr_find( e->e_attrs, ad );
339 if ( attr == NULL ) {
343 return slapi_value_get_long( attr->a_vals );
347 slapi_entry_attr_get_uint( const Slapi_Entry *e, const char *type )
349 AttributeDescription *ad = NULL;
354 rc = slap_str2ad( type, &ad, &text );
355 if ( rc != LDAP_SUCCESS ) {
359 attr = attr_find( e->e_attrs, ad );
360 if ( attr == NULL ) {
364 return slapi_value_get_uint( attr->a_vals );
368 slapi_entry_attr_get_ulong( const Slapi_Entry *e, const char *type )
370 AttributeDescription *ad = NULL;
375 rc = slap_str2ad( type, &ad, &text );
376 if ( rc != LDAP_SUCCESS ) {
380 attr = attr_find( e->e_attrs, ad );
381 if ( attr == NULL ) {
385 return slapi_value_get_ulong( attr->a_vals );
389 slapi_entry_attr_hasvalue( Slapi_Entry *e, const char *type, const char *value )
392 AttributeDescription *ad = NULL;
397 rc = slap_str2ad( type, &ad, &text );
398 if ( rc != LDAP_SUCCESS ) {
402 attr = attr_find( e->e_attrs, ad );
403 if ( attr == NULL ) {
407 bv.bv_val = (char *)value;
408 bv.bv_len = strlen( value );
410 return ( slapi_attr_value_find( attr, &bv ) != -1 );
414 slapi_entry_attr_set_charptr(Slapi_Entry* e, const char *type, const char *value)
416 AttributeDescription *ad = NULL;
421 rc = slap_str2ad( type, &ad, &text );
422 if ( rc != LDAP_SUCCESS ) {
426 attr_delete ( &e->e_attrs, ad );
427 if ( value != NULL ) {
428 bv.bv_val = (char *)value;
429 bv.bv_len = strlen(value);
430 attr_merge_normalize_one( e, ad, &bv, NULL );
435 slapi_entry_attr_set_int( Slapi_Entry* e, const char *type, int l)
439 snprintf( buf, sizeof( buf ), "%d", l );
440 slapi_entry_attr_set_charptr( e, type, buf );
444 slapi_entry_attr_set_uint( Slapi_Entry* e, const char *type, unsigned int l)
448 snprintf( buf, sizeof( buf ), "%u", l );
449 slapi_entry_attr_set_charptr( e, type, buf );
453 slapi_entry_attr_set_long(Slapi_Entry* e, const char *type, long l)
457 snprintf( buf, sizeof( buf ), "%ld", l );
458 slapi_entry_attr_set_charptr( e, type, buf );
462 slapi_entry_attr_set_ulong(Slapi_Entry* e, const char *type, unsigned long l)
466 snprintf( buf, sizeof( buf ), "%lu", l );
467 slapi_entry_attr_set_charptr( e, type, buf );
471 slapi_is_rootdse( const char *dn )
473 return ( dn == NULL || dn[0] == '\0' );
477 slapi_entry_has_children( const Slapi_Entry *e )
480 int hasSubordinates = 0;
482 pb = slapi_pblock_new();
483 slapi_int_connection_init_pb( pb, LDAP_REQ_SEARCH );
485 slapi_pblock_set( pb, SLAPI_TARGET_DN, slapi_entry_get_dn( (Entry *)e ) );
487 pb->pb_op->o_bd = select_backend( (struct berval *)&e->e_nname, 0, 0 );
488 if ( pb->pb_op->o_bd != NULL ) {
489 pb->pb_op->o_bd->be_has_subordinates( pb->pb_op, (Entry *)e, &hasSubordinates );
492 slapi_pblock_destroy( pb );
494 return ( hasSubordinates == LDAP_COMPARE_TRUE );
498 * Return approximate size of the entry rounded to the nearest
499 * 1K. Only the size of the attribute values are counted in the
500 * Sun implementation.
502 * http://docs.sun.com/source/816-6701-10/funcref.html#1017388
504 size_t slapi_entry_size(Slapi_Entry *e)
510 for ( size = 0, a = e->e_attrs; a != NULL; a = a->a_next ) {
511 for ( i = 0; a->a_vals[i].bv_val != NULL; i++ ) {
512 size += a->a_vals[i].bv_len + 1;
517 size -= (size % 1024);
523 * Add values to entry.
526 * LDAP_SUCCESS Values added to entry
527 * LDAP_TYPE_OR_VALUE_EXISTS One or more values exist in entry already
528 * LDAP_CONSTRAINT_VIOLATION Any other error (odd, but it's the spec)
531 slapi_entry_add_values( Slapi_Entry *e, const char *type, struct berval **vals )
536 char textbuf[SLAP_TEXT_BUFLEN];
538 mod.sm_op = LDAP_MOD_ADD;
541 mod.sm_type.bv_val = (char *)type;
542 mod.sm_type.bv_len = strlen( type );
544 rc = slap_str2ad( type, &mod.sm_desc, &text );
545 if ( rc != LDAP_SUCCESS ) {
549 if ( vals == NULL ) {
550 /* Apparently vals can be NULL
551 * FIXME: sm_values = NULL ? */
552 mod.sm_values = (BerVarray)ch_malloc( sizeof(struct berval) );
553 mod.sm_values->bv_val = NULL;
556 rc = bvptr2obj( vals, &mod.sm_values );
557 if ( rc != LDAP_SUCCESS ) {
558 return LDAP_CONSTRAINT_VIOLATION;
561 mod.sm_nvalues = NULL;
563 rc = modify_add_values( e, &mod, 0, &text, textbuf, sizeof(textbuf) );
565 slapi_ch_free( (void **)&mod.sm_values );
567 return (rc == LDAP_SUCCESS) ? LDAP_SUCCESS : LDAP_CONSTRAINT_VIOLATION;
571 slapi_entry_add_values_sv( Slapi_Entry *e, const char *type, Slapi_Value **vals )
573 return slapi_entry_add_values( e, type, vals );
577 slapi_entry_add_valueset(Slapi_Entry *e, const char *type, Slapi_ValueSet *vs)
579 AttributeDescription *ad = NULL;
583 rc = slap_str2ad( type, &ad, &text );
584 if ( rc != LDAP_SUCCESS ) {
588 return attr_merge_normalize( e, ad, *vs, NULL );
592 slapi_entry_delete_values( Slapi_Entry *e, const char *type, struct berval **vals )
597 char textbuf[SLAP_TEXT_BUFLEN];
599 mod.sm_op = LDAP_MOD_DELETE;
602 mod.sm_type.bv_val = (char *)type;
603 mod.sm_type.bv_len = strlen( type );
605 if ( vals == NULL ) {
606 /* If vals is NULL, this is a NOOP. */
610 rc = slap_str2ad( type, &mod.sm_desc, &text );
611 if ( rc != LDAP_SUCCESS ) {
615 if ( vals[0] == NULL ) {
616 /* SLAPI doco says LDApb_opERATIONS_ERROR but LDAP_OTHER is better */
617 return attr_delete( &e->e_attrs, mod.sm_desc ) ? LDAP_OTHER : LDAP_SUCCESS;
620 rc = bvptr2obj( vals, &mod.sm_values );
621 if ( rc != LDAP_SUCCESS ) {
622 return LDAP_CONSTRAINT_VIOLATION;
624 mod.sm_nvalues = NULL;
626 rc = modify_delete_values( e, &mod, 0, &text, textbuf, sizeof(textbuf) );
628 slapi_ch_free( (void **)&mod.sm_values );
634 slapi_entry_delete_values_sv( Slapi_Entry *e, const char *type, Slapi_Value **vals )
636 return slapi_entry_delete_values( e, type, vals );
640 slapi_entry_merge_values_sv( Slapi_Entry *e, const char *type, Slapi_Value **vals )
642 return slapi_entry_attr_merge( e, (char *)type, vals );
646 slapi_entry_add_value(Slapi_Entry *e, const char *type, const Slapi_Value *value)
648 AttributeDescription *ad = NULL;
652 rc = slap_str2ad( type, &ad, &text );
653 if ( rc != LDAP_SUCCESS ) {
657 rc = attr_merge_normalize_one( e, ad, (Slapi_Value *)value, NULL );
658 if ( rc != LDAP_SUCCESS ) {
666 slapi_entry_add_string(Slapi_Entry *e, const char *type, const char *value)
670 val.bv_val = (char *)value;
671 val.bv_len = strlen( value );
673 return slapi_entry_add_value( e, type, &val );
677 slapi_entry_delete_string(Slapi_Entry *e, const char *type, const char *value)
679 Slapi_Value *vals[2];
682 val.bv_val = (char *)value;
683 val.bv_len = strlen( value );
687 return slapi_entry_delete_values_sv( e, type, vals );
691 slapi_entry_attr_merge_sv( Slapi_Entry *e, const char *type, Slapi_Value **vals )
693 return slapi_entry_attr_merge( e, (char *)type, vals );
697 slapi_entry_first_attr( const Slapi_Entry *e, Slapi_Attr **attr )
705 return ( *attr != NULL ) ? 0 : -1;
709 slapi_entry_next_attr( const Slapi_Entry *e, Slapi_Attr *prevattr, Slapi_Attr **attr )
715 if ( prevattr == NULL ) {
719 *attr = prevattr->a_next;
721 return ( *attr != NULL ) ? 0 : -1;
725 slapi_entry_attr_replace_sv( Slapi_Entry *e, const char *type, Slapi_Value **vals )
727 AttributeDescription *ad = NULL;
732 rc = slap_str2ad( type, &ad, &text );
733 if ( rc != LDAP_SUCCESS ) {
737 attr_delete( &e->e_attrs, ad );
739 rc = bvptr2obj( vals, &bv );
740 if ( rc != LDAP_SUCCESS ) {
744 rc = attr_merge_normalize( e, ad, bv, NULL );
745 slapi_ch_free( (void **)&bv );
746 if ( rc != LDAP_SUCCESS ) {
754 * FIXME -- The caller must free the allocated memory.
755 * In Netscape they do not have to.
758 slapi_attr_get_values(
760 struct berval ***vals )
765 if ( attr == NULL ) {
769 for ( i = 0; attr->a_vals[i].bv_val != NULL; i++ ) {
773 bv = (struct berval **)ch_malloc( (i + 1) * sizeof(struct berval *) );
774 for ( j = 0; j < i; j++ ) {
775 bv[j] = ber_dupbv( NULL, &attr->a_vals[j] );
779 *vals = (struct berval **)bv;
785 slapi_dn_normalize( char *dn )
790 assert( dn != NULL );
793 bdn.bv_len = strlen( dn );
795 if ( slapi_int_dn_pretty( &bdn, &pdn ) != LDAP_SUCCESS ) {
803 slapi_dn_normalize_case( char *dn )
808 assert( dn != NULL );
811 bdn.bv_len = strlen( dn );
813 if ( slapi_int_dn_normalize( &bdn, &ndn ) != LDAP_SUCCESS ) {
825 struct berval bdn, ndn;
826 struct berval bsuffix, nsuffix;
829 assert( dn != NULL );
830 assert( suffix != NULL );
833 bdn.bv_len = strlen( dn );
835 bsuffix.bv_val = suffix;
836 bsuffix.bv_len = strlen( suffix );
838 if ( dnNormalize( 0, NULL, NULL, &bdn, &ndn, NULL ) != LDAP_SUCCESS ) {
842 if ( dnNormalize( 0, NULL, NULL, &bsuffix, &nsuffix, NULL )
845 slapi_ch_free( (void **)&ndn.bv_val );
849 rc = dnIsSuffix( &ndn, &nsuffix );
851 slapi_ch_free( (void **)&ndn.bv_val );
852 slapi_ch_free( (void **)&nsuffix.bv_val );
859 const char *parentdn,
860 const char *childdn )
862 struct berval assertedParentDN, normalizedAssertedParentDN;
863 struct berval childDN, normalizedChildDN;
864 struct berval normalizedParentDN;
867 assert( parentdn != NULL );
868 assert( childdn != NULL );
870 assertedParentDN.bv_val = (char *)parentdn;
871 assertedParentDN.bv_len = strlen( parentdn );
873 if ( dnNormalize( 0, NULL, NULL, &assertedParentDN,
874 &normalizedAssertedParentDN, NULL ) != LDAP_SUCCESS )
879 childDN.bv_val = (char *)childdn;
880 childDN.bv_len = strlen( childdn );
882 if ( dnNormalize( 0, NULL, NULL, &childDN,
883 &normalizedChildDN, NULL ) != LDAP_SUCCESS )
885 slapi_ch_free( (void **)&normalizedAssertedParentDN.bv_val );
889 dnParent( &normalizedChildDN, &normalizedParentDN );
891 if ( dnMatch( &match, 0, slap_schema.si_syn_distinguishedName, NULL,
892 &normalizedParentDN, (void *)&normalizedAssertedParentDN ) != LDAP_SUCCESS )
897 slapi_ch_free( (void **)&normalizedAssertedParentDN.bv_val );
898 slapi_ch_free( (void **)&normalizedChildDN.bv_val );
900 return ( match == 0 );
904 * Returns DN of the parent entry, or NULL if the DN is
905 * an empty string or NULL, or has no parent.
908 slapi_dn_parent( const char *_dn )
910 struct berval dn, prettyDN;
911 struct berval parentDN;
917 dn.bv_val = (char *)_dn;
918 dn.bv_len = strlen( _dn );
920 if ( dn.bv_len == 0 ) {
924 if ( dnPretty( NULL, &dn, &prettyDN, NULL ) != LDAP_SUCCESS ) {
928 dnParent( &prettyDN, &parentDN ); /* in-place */
930 slapi_ch_free( (void **)&prettyDN.bv_val );
932 if ( parentDN.bv_len == 0 ) {
936 return slapi_ch_strdup( parentDN.bv_val );
940 * Returns DN of the parent entry; or NULL if the DN is
941 * an empty string, if the DN has no parent, or if the
942 * DN is the suffix of the backend database
944 char *slapi_dn_beparent( Slapi_PBlock *pb, const char *_dn )
947 struct berval dn, prettyDN;
948 struct berval normalizedDN, parentDN;
950 if ( pb == NULL || pb->pb_op == NULL )
953 be = pb->pb_op->o_bd;
955 dn.bv_val = (char *)_dn;
956 dn.bv_len = strlen( _dn );
958 if ( dnPrettyNormal( NULL, &dn, &prettyDN, &normalizedDN, NULL ) != LDAP_SUCCESS ) {
962 if ( be != NULL && be_issuffix( be, &normalizedDN ) ) {
963 slapi_ch_free( (void **)&prettyDN.bv_val );
964 slapi_ch_free( (void **)&normalizedDN.bv_val );
968 dnParent( &prettyDN, &parentDN );
970 slapi_ch_free( (void **)&prettyDN.bv_val );
971 slapi_ch_free( (void **)&normalizedDN.bv_val );
973 if ( parentDN.bv_len == 0 ) {
977 return slapi_ch_strdup( parentDN.bv_val );
981 slapi_dn_ignore_case( char *dn )
983 return slapi_dn_normalize_case( dn );
987 slapi_ch_malloc( unsigned long size )
989 return ch_malloc( size );
993 slapi_ch_free( void **ptr )
995 if ( ptr == NULL || *ptr == NULL )
1002 slapi_ch_free_string( char **ptr )
1004 slapi_ch_free( (void **)ptr );
1008 slapi_ch_array_free( char **arrayp )
1012 if ( arrayp != NULL ) {
1013 for ( p = arrayp; *p != NULL; p++ ) {
1014 slapi_ch_free( (void **)p );
1016 slapi_ch_free( (void **)&arrayp );
1021 slapi_ch_bvdup(const struct berval *v)
1025 bv = (struct berval *) slapi_ch_malloc( sizeof(struct berval) );
1026 bv->bv_len = v->bv_len;
1027 bv->bv_val = slapi_ch_malloc( bv->bv_len );
1028 AC_MEMCPY( bv->bv_val, v->bv_val, bv->bv_len );
1034 slapi_ch_bvecdup(const struct berval **v)
1043 for ( i = 0; v[i] != NULL; i++ )
1046 rv = (struct berval **) slapi_ch_malloc( (i + 1) * sizeof(struct berval *) );
1048 for ( i = 0; v[i] != NULL; i++ ) {
1049 rv[i] = slapi_ch_bvdup( v[i] );
1058 unsigned long nelem,
1059 unsigned long size )
1061 return ch_calloc( nelem, size );
1067 unsigned long size )
1069 return ch_realloc( block, size );
1073 slapi_ch_strdup( char *s )
1075 return ch_strdup( (const char *)s );
1079 slapi_ch_stlen( char *s )
1081 return strlen( (const char *)s );
1085 slapi_control_present(
1086 LDAPControl **controls,
1088 struct berval **val,
1102 for ( i = 0; controls != NULL && controls[i] != NULL; i++ ) {
1103 if ( strcmp( controls[i]->ldctl_oid, oid ) != 0 ) {
1108 if ( controls[i]->ldctl_value.bv_len != 0 ) {
1110 *val = &controls[i]->ldctl_value;
1115 *iscritical = controls[i]->ldctl_iscritical;
1125 slapControlMask2SlapiControlOp(slap_mask_t slap_mask,
1126 unsigned long *slapi_mask)
1128 *slapi_mask = SLAPI_OPERATION_NONE;
1130 if ( slap_mask & SLAP_CTRL_ABANDON )
1131 *slapi_mask |= SLAPI_OPERATION_ABANDON;
1133 if ( slap_mask & SLAP_CTRL_ADD )
1134 *slapi_mask |= SLAPI_OPERATION_ADD;
1136 if ( slap_mask & SLAP_CTRL_BIND )
1137 *slapi_mask |= SLAPI_OPERATION_BIND;
1139 if ( slap_mask & SLAP_CTRL_COMPARE )
1140 *slapi_mask |= SLAPI_OPERATION_COMPARE;
1142 if ( slap_mask & SLAP_CTRL_DELETE )
1143 *slapi_mask |= SLAPI_OPERATION_DELETE;
1145 if ( slap_mask & SLAP_CTRL_MODIFY )
1146 *slapi_mask |= SLAPI_OPERATION_MODIFY;
1148 if ( slap_mask & SLAP_CTRL_RENAME )
1149 *slapi_mask |= SLAPI_OPERATION_MODDN;
1151 if ( slap_mask & SLAP_CTRL_SEARCH )
1152 *slapi_mask |= SLAPI_OPERATION_SEARCH;
1154 if ( slap_mask & SLAP_CTRL_UNBIND )
1155 *slapi_mask |= SLAPI_OPERATION_UNBIND;
1159 slapiControlOp2SlapControlMask(unsigned long slapi_mask,
1160 slap_mask_t *slap_mask)
1164 if ( slapi_mask & SLAPI_OPERATION_BIND )
1165 *slap_mask |= SLAP_CTRL_BIND;
1167 if ( slapi_mask & SLAPI_OPERATION_UNBIND )
1168 *slap_mask |= SLAP_CTRL_UNBIND;
1170 if ( slapi_mask & SLAPI_OPERATION_SEARCH )
1171 *slap_mask |= SLAP_CTRL_SEARCH;
1173 if ( slapi_mask & SLAPI_OPERATION_MODIFY )
1174 *slap_mask |= SLAP_CTRL_MODIFY;
1176 if ( slapi_mask & SLAPI_OPERATION_ADD )
1177 *slap_mask |= SLAP_CTRL_ADD;
1179 if ( slapi_mask & SLAPI_OPERATION_DELETE )
1180 *slap_mask |= SLAP_CTRL_DELETE;
1182 if ( slapi_mask & SLAPI_OPERATION_MODDN )
1183 *slap_mask |= SLAP_CTRL_RENAME;
1185 if ( slapi_mask & SLAPI_OPERATION_COMPARE )
1186 *slap_mask |= SLAP_CTRL_COMPARE;
1188 if ( slapi_mask & SLAPI_OPERATION_ABANDON )
1189 *slap_mask |= SLAP_CTRL_ABANDON;
1191 *slap_mask |= SLAP_CTRL_GLOBAL;
1195 slapi_int_parse_control(
1200 /* Plugins must deal with controls themselves. */
1202 return LDAP_SUCCESS;
1206 slapi_register_supported_control(
1208 unsigned long controlops )
1210 slap_mask_t controlmask;
1212 slapiControlOp2SlapControlMask( controlops, &controlmask );
1214 register_supported_control( controloid, controlmask, NULL, slapi_int_parse_control, NULL );
1218 slapi_get_supported_controls(
1220 unsigned long **ctrlopsp )
1224 rc = get_supported_controls( ctrloidsp, (slap_mask_t **)ctrlopsp );
1225 if ( rc != LDAP_SUCCESS ) {
1229 for ( i = 0; (*ctrloidsp)[i] != NULL; i++ ) {
1230 /* In place, naughty. */
1231 slapControlMask2SlapiControlOp( (*ctrlopsp)[i], &((*ctrlopsp)[i]) );
1234 return LDAP_SUCCESS;
1238 slapi_dup_control( LDAPControl *ctrl )
1242 ret = (LDAPControl *)slapi_ch_malloc( sizeof(*ret) );
1243 ret->ldctl_oid = slapi_ch_strdup( ctrl->ldctl_oid );
1244 ber_dupbv( &ret->ldctl_value, &ctrl->ldctl_value );
1245 ret->ldctl_iscritical = ctrl->ldctl_iscritical;
1251 slapi_register_supported_saslmechanism( char *mechanism )
1253 /* FIXME -- can not add saslmechanism to OpenLDAP dynamically */
1254 slapi_log_error( SLAPI_LOG_FATAL, "slapi_register_supported_saslmechanism",
1255 "OpenLDAP does not support dynamic registration of SASL mechanisms\n" );
1259 slapi_get_supported_saslmechanisms( void )
1261 /* FIXME -- can not get the saslmechanism without a connection. */
1262 slapi_log_error( SLAPI_LOG_FATAL, "slapi_get_supported_saslmechanisms",
1263 "can not get the SASL mechanism list "
1264 "without a connection\n" );
1269 slapi_get_supported_extended_ops( void )
1272 char **ppExtOpOID = NULL;
1275 for ( i = 0; get_supported_extop( i ) != NULL; i++ ) {
1279 for ( j = 0; slapi_int_get_supported_extop( j ) != NULL; j++ ) {
1284 if ( numExtOps == 0 ) {
1288 ppExtOpOID = (char **)slapi_ch_malloc( (numExtOps + 1) * sizeof(char *) );
1289 for ( k = 0; k < i; k++ ) {
1292 bv = get_supported_extop( k );
1293 assert( bv != NULL );
1295 ppExtOpOID[ k ] = bv->bv_val;
1298 for ( ; k < j; k++ ) {
1301 bv = slapi_int_get_supported_extop( k );
1302 assert( bv != NULL );
1304 ppExtOpOID[ i + k ] = bv->bv_val;
1306 ppExtOpOID[ i + k ] = NULL;
1312 slapi_send_ldap_result(
1318 struct berval **urls )
1322 PBLOCK_ASSERT_OP( pb, 0 );
1327 rs->sr_matched = matched;
1331 if ( err == LDAP_SASL_BIND_IN_PROGRESS ) {
1332 send_ldap_sasl( pb->pb_op, rs );
1333 } else if ( rs->sr_rspoid != NULL ) {
1334 send_ldap_extended( pb->pb_op, rs );
1336 if ( pb->pb_op->o_tag == LDAP_REQ_SEARCH )
1337 rs->sr_nentries = nentries;
1339 send_ldap_result( pb->pb_op, rs );
1344 slapi_send_ldap_search_entry(
1347 LDAPControl **ectrls,
1351 SlapReply rs = { REP_SEARCH };
1353 AttributeName *an = NULL;
1357 assert( pb->pb_op != NULL );
1359 if ( attrs != NULL ) {
1360 for ( i = 0; attrs[ i ] != NULL; i++ ) {
1366 an = (AttributeName *) slapi_ch_malloc( (i+1) * sizeof(AttributeName) );
1367 for ( i = 0; attrs[i] != NULL; i++ ) {
1368 an[i].an_name.bv_val = attrs[i];
1369 an[i].an_name.bv_len = strlen( attrs[i] );
1370 an[i].an_desc = NULL;
1371 rs.sr_err = slap_bv2ad( &an[i].an_name, &an[i].an_desc, &text );
1372 if ( rs.sr_err != LDAP_SUCCESS) {
1373 slapi_ch_free( (void **)&an );
1377 an[i].an_name.bv_len = 0;
1378 an[i].an_name.bv_val = NULL;
1381 rs.sr_err = LDAP_SUCCESS;
1382 rs.sr_matched = NULL;
1385 rs.sr_ctrls = ectrls;
1387 rs.sr_operational_attrs = NULL;
1392 rc = send_search_entry( pb->pb_op, &rs );
1394 slapi_ch_free( (void **)&an );
1400 slapi_send_ldap_search_reference(
1403 struct berval **references,
1404 LDAPControl **ectrls,
1405 struct berval **v2refs
1408 SlapReply rs = { REP_SEARCHREF };
1411 rs.sr_err = LDAP_SUCCESS;
1412 rs.sr_matched = NULL;
1415 rc = bvptr2obj( references, &rs.sr_ref );
1416 if ( rc != LDAP_SUCCESS ) {
1420 rs.sr_ctrls = ectrls;
1422 rs.sr_operational_attrs = NULL;
1425 if ( v2refs != NULL ) {
1426 rc = bvptr2obj( v2refs, &rs.sr_v2ref );
1427 if ( rc != LDAP_SUCCESS ) {
1428 slapi_ch_free( (void **)&rs.sr_ref );
1435 rc = send_search_reference( pb->pb_op, &rs );
1437 slapi_ch_free( (void **)&rs.sr_ref );
1438 slapi_ch_free( (void **)&rs.sr_v2ref );
1444 slapi_str2filter( char *str )
1446 return str2filter( str );
1458 slapi_filter_dup( Slapi_Filter *filter )
1462 f = (Filter *) slapi_ch_malloc( sizeof(Filter) );
1464 f->f_choice = filter->f_choice;
1466 switch ( f->f_choice ) {
1467 case LDAP_FILTER_AND:
1468 case LDAP_FILTER_NOT:
1469 case LDAP_FILTER_OR: {
1470 Filter *pFilter, **ppF;
1472 for ( pFilter = filter->f_list, ppF = &f->f_list;
1474 pFilter = pFilter->f_next, ppF = &f->f_next )
1476 *ppF = slapi_filter_dup( pFilter );
1482 case LDAP_FILTER_PRESENT:
1483 f->f_desc = filter->f_desc;
1485 case LDAP_FILTER_EQUALITY:
1486 case LDAP_FILTER_GE:
1487 case LDAP_FILTER_LE:
1488 case LDAP_FILTER_APPROX:
1489 f->f_ava = (AttributeAssertion *)slapi_ch_malloc( sizeof(AttributeAssertion) );
1490 f->f_ava->aa_desc = filter->f_ava->aa_desc;
1491 ber_dupbv( &f->f_ava->aa_value, &filter->f_ava->aa_value );
1493 case LDAP_FILTER_EXT:
1494 f->f_mra = (MatchingRuleAssertion *)slapi_ch_malloc( sizeof(MatchingRuleAssertion) );
1495 f->f_mra->ma_rule = filter->f_mra->ma_rule;
1496 f->f_mra->ma_rule_text = filter->f_mra->ma_rule_text; /* struct copy */
1497 f->f_mra->ma_desc = filter->f_mra->ma_desc;
1498 f->f_mra->ma_dnattrs = filter->f_mra->ma_dnattrs;
1499 ber_dupbv( &f->f_mra->ma_value, &filter->f_mra->ma_value );
1501 case LDAP_FILTER_SUBSTRINGS: {
1504 f->f_sub = (SubstringsAssertion *)slapi_ch_malloc( sizeof(SubstringsAssertion) );
1505 f->f_sub->sa_desc = filter->f_sub->sa_desc;
1506 ber_dupbv( &f->f_sub_initial, &filter->f_sub_initial );
1507 if ( filter->f_sub_any != NULL ) {
1508 for ( i = 0; filter->f_sub_any[i].bv_val != NULL; i++ )
1510 f->f_sub_any = (BerVarray)slapi_ch_malloc( (i + 1) * (sizeof(struct berval)) );
1511 for ( i = 0; filter->f_sub_any[i].bv_val != NULL; i++ ) {
1512 ber_dupbv( &f->f_sub_any[i], &filter->f_sub_any[i] );
1514 f->f_sub_any[i].bv_val = NULL;
1516 f->f_sub_any = NULL;
1518 ber_dupbv( &f->f_sub_final, &filter->f_sub_final );
1521 case SLAPD_FILTER_COMPUTED:
1522 f->f_result = filter->f_result;
1525 slapi_ch_free( (void **)&f );
1534 slapi_filter_get_choice( Slapi_Filter *f )
1548 slapi_filter_get_ava(
1551 struct berval **bval )
1554 int rc = LDAP_SUCCESS;
1556 assert( type != NULL );
1557 assert( bval != NULL );
1562 ftype = f->f_choice;
1563 if ( ftype == LDAP_FILTER_EQUALITY
1564 || ftype == LDAP_FILTER_GE
1565 || ftype == LDAP_FILTER_LE
1566 || ftype == LDAP_FILTER_APPROX ) {
1568 * According to the SLAPI Reference Manual these are
1571 *type = f->f_un.f_un_ava->aa_desc->ad_cname.bv_val;
1572 *bval = &f->f_un.f_un_ava->aa_value;
1573 } else { /* filter type not supported */
1581 slapi_filter_list_first( Slapi_Filter *f )
1589 ftype = f->f_choice;
1590 if ( ftype == LDAP_FILTER_AND
1591 || ftype == LDAP_FILTER_OR
1592 || ftype == LDAP_FILTER_NOT ) {
1593 return (Slapi_Filter *)f->f_list;
1600 slapi_filter_list_next(
1602 Slapi_Filter *fprev )
1610 ftype = f->f_choice;
1611 if ( ftype == LDAP_FILTER_AND
1612 || ftype == LDAP_FILTER_OR
1613 || ftype == LDAP_FILTER_NOT )
1615 return fprev->f_next;
1622 slapi_filter_get_attribute_type( Slapi_Filter *f, char **type )
1628 switch ( f->f_choice ) {
1629 case LDAP_FILTER_GE:
1630 case LDAP_FILTER_LE:
1631 case LDAP_FILTER_EQUALITY:
1632 case LDAP_FILTER_APPROX:
1633 *type = f->f_av_desc->ad_cname.bv_val;
1635 case LDAP_FILTER_SUBSTRINGS:
1636 *type = f->f_sub_desc->ad_cname.bv_val;
1638 case LDAP_FILTER_PRESENT:
1639 *type = f->f_desc->ad_cname.bv_val;
1641 case LDAP_FILTER_EXT:
1642 *type = f->f_mr_desc->ad_cname.bv_val;
1645 /* Complex filters need not apply. */
1654 slapi_x_filter_set_attribute_type( Slapi_Filter *f, const char *type )
1656 AttributeDescription **adp, *ad = NULL;
1664 switch ( f->f_choice ) {
1665 case LDAP_FILTER_GE:
1666 case LDAP_FILTER_LE:
1667 case LDAP_FILTER_EQUALITY:
1668 case LDAP_FILTER_APPROX:
1669 adp = &f->f_av_desc;
1671 case LDAP_FILTER_SUBSTRINGS:
1672 adp = &f->f_sub_desc;
1674 case LDAP_FILTER_PRESENT:
1677 case LDAP_FILTER_EXT:
1678 adp = &f->f_mr_desc;
1681 /* Complex filters need not apply. */
1685 rc = slap_str2ad( type, &ad, &text );
1686 if ( rc == LDAP_SUCCESS )
1689 return ( rc == LDAP_SUCCESS ) ? 0 : -1;
1693 slapi_filter_get_subfilt( Slapi_Filter *f, char **type, char **initial,
1694 char ***any, char **final )
1698 if ( f->f_choice != LDAP_FILTER_SUBSTRINGS ) {
1703 * The caller shouldn't free but we can't return an
1704 * array of char *s from an array of bervals without
1705 * allocating memory, so we may as well be consistent.
1708 *type = f->f_sub_desc->ad_cname.bv_val;
1709 *initial = f->f_sub_initial.bv_val ? slapi_ch_strdup(f->f_sub_initial.bv_val) : NULL;
1710 if ( f->f_sub_any != NULL ) {
1711 for ( i = 0; f->f_sub_any[i].bv_val != NULL; i++ )
1713 *any = (char **)slapi_ch_malloc( (i + 1) * sizeof(char *) );
1714 for ( i = 0; f->f_sub_any[i].bv_val != NULL; i++ ) {
1715 (*any)[i] = slapi_ch_strdup(f->f_sub_any[i].bv_val);
1721 *final = f->f_sub_final.bv_val ? slapi_ch_strdup(f->f_sub_final.bv_val) : NULL;
1727 slapi_filter_join( int ftype, Slapi_Filter *f1, Slapi_Filter *f2 )
1729 Slapi_Filter *f = NULL;
1731 if ( ftype == LDAP_FILTER_AND ||
1732 ftype == LDAP_FILTER_OR ||
1733 ftype == LDAP_FILTER_NOT )
1735 f = (Slapi_Filter *)slapi_ch_malloc( sizeof(*f) );
1736 f->f_choice = ftype;
1738 f->f_list->f_next = f2;
1746 slapi_x_filter_append( int ftype,
1747 Slapi_Filter **pContainingFilter, /* NULL on first call */
1748 Slapi_Filter **pNextFilter,
1749 Slapi_Filter *filterToAppend )
1751 if ( ftype == LDAP_FILTER_AND ||
1752 ftype == LDAP_FILTER_OR ||
1753 ftype == LDAP_FILTER_NOT )
1755 if ( *pContainingFilter == NULL ) {
1756 *pContainingFilter = (Slapi_Filter *)slapi_ch_malloc( sizeof(Slapi_Filter) );
1757 (*pContainingFilter)->f_choice = ftype;
1758 (*pContainingFilter)->f_list = filterToAppend;
1759 (*pContainingFilter)->f_next = NULL;
1761 if ( (*pContainingFilter)->f_choice != ftype ) {
1765 (*pNextFilter)->f_next = filterToAppend;
1767 *pNextFilter = filterToAppend;
1775 slapi_filter_test( Slapi_PBlock *pb, Slapi_Entry *e, Slapi_Filter *f,
1782 /* spec says return zero if no filter. */
1786 if ( verify_access ) {
1789 return LDAP_PARAM_ERROR;
1795 * According to acl.c it is safe to call test_filter() with
1798 rc = test_filter( op, e, f );
1800 case LDAP_COMPARE_TRUE:
1803 case LDAP_COMPARE_FALSE:
1805 case SLAPD_COMPARE_UNDEFINED:
1808 case LDAP_PROTOCOL_ERROR:
1809 /* filter type unknown: spec says return -1 */
1818 slapi_filter_test_simple( Slapi_Entry *e, Slapi_Filter *f)
1820 return slapi_filter_test( NULL, e, f, 0 );
1824 slapi_filter_apply( Slapi_Filter *f, FILTER_APPLY_FN fn, void *arg, int *error_code )
1826 switch ( f->f_choice ) {
1827 case LDAP_FILTER_AND:
1828 case LDAP_FILTER_NOT:
1829 case LDAP_FILTER_OR: {
1833 * FIXME: altering f; should we use a temporary?
1835 for ( f = f->f_list; f != NULL; f = f->f_next ) {
1836 rc = slapi_filter_apply( f, fn, arg, error_code );
1840 if ( *error_code == SLAPI_FILTER_SCAN_NOMORE ) {
1846 case LDAP_FILTER_EQUALITY:
1847 case LDAP_FILTER_SUBSTRINGS:
1848 case LDAP_FILTER_GE:
1849 case LDAP_FILTER_LE:
1850 case LDAP_FILTER_PRESENT:
1851 case LDAP_FILTER_APPROX:
1852 case LDAP_FILTER_EXT:
1853 *error_code = fn( f, arg );
1856 *error_code = SLAPI_FILTER_UNKNOWN_FILTER_TYPE;
1859 if ( *error_code == SLAPI_FILTER_SCAN_NOMORE ||
1860 *error_code == SLAPI_FILTER_SCAN_CONTINUE ) {
1869 struct berval **vals,
1873 * FIXME: what's the point?
1878 #define MAX_HOSTNAME 512
1881 slapi_get_hostname( void )
1884 static int been_here = 0;
1885 static char *static_hn = NULL;
1887 ldap_pvt_thread_mutex_lock( &slapi_hn_mutex );
1889 static_hn = (char *)slapi_ch_malloc( MAX_HOSTNAME );
1890 if ( static_hn == NULL) {
1891 slapi_log_error( SLAPI_LOG_FATAL, "slapi_get_hostname",
1892 "Cannot allocate memory for hostname\n" );
1894 ldap_pvt_thread_mutex_unlock( &slapi_hn_mutex );
1899 if ( gethostname( static_hn, MAX_HOSTNAME ) != 0 ) {
1900 slapi_log_error( SLAPI_LOG_FATAL,
1902 "can't get hostname\n" );
1903 slapi_ch_free( (void **)&static_hn );
1905 ldap_pvt_thread_mutex_unlock( &slapi_hn_mutex );
1914 ldap_pvt_thread_mutex_unlock( &slapi_hn_mutex );
1916 hn = ch_strdup( static_hn );
1922 * FIXME: this should go in an appropriate header ...
1924 extern int slapi_int_log_error( int level, char *subsystem, char *fmt, va_list arglist );
1933 int rc = LDAP_SUCCESS;
1936 va_start( arglist, fmt );
1937 rc = slapi_int_log_error( severity, subsystem, fmt, arglist );
1945 slapi_timer_current_time( void )
1947 static int first_time = 1;
1948 #if !defined (_WIN32)
1952 ldap_pvt_thread_mutex_lock( &slapi_time_mutex );
1955 gettimeofday( &base_time, NULL );
1957 gettimeofday( &now, NULL );
1958 ret = ( now.tv_sec - base_time.tv_sec ) * 1000000 +
1959 (now.tv_usec - base_time.tv_usec);
1960 ldap_pvt_thread_mutex_unlock( &slapi_time_mutex );
1966 return (slap_get_time() - starttime) * 1000000;
1973 performance_counter_present = QueryPerformanceCounter( &base_time );
1974 QueryPerformanceFrequency( &performance_freq );
1977 if ( !performance_counter_present )
1980 QueryPerformanceCounter( &now );
1981 return (1000000*(now.QuadPart-base_time.QuadPart))/performance_freq.QuadPart;
1989 slapi_timer_get_time( char *label )
1991 unsigned long start = slapi_timer_current_time();
1992 printf("%10ld %10d usec %s\n", start, 0, label);
2000 slapi_timer_elapsed_time(
2002 unsigned long start )
2004 unsigned long stop = slapi_timer_current_time();
2005 printf ("%10ld %10ld usec %s\n", stop, stop - start, label);
2009 slapi_free_search_results_internal( Slapi_PBlock *pb )
2011 Slapi_Entry **entries;
2012 int k = 0, nEnt = 0;
2014 slapi_pblock_get( pb, SLAPI_NENTRIES, &nEnt );
2015 slapi_pblock_get( pb, SLAPI_PLUGIN_INTOP_SEARCH_ENTRIES, &entries );
2016 if ( nEnt == 0 || entries == NULL ) {
2020 for ( k = 0; k < nEnt; k++ ) {
2021 slapi_entry_free( entries[k] );
2025 slapi_ch_free( (void **)&entries );
2028 int slapi_is_connection_ssl( Slapi_PBlock *pb, int *isSSL )
2031 return LDAP_PARAM_ERROR;
2033 if ( pb->pb_conn == NULL )
2034 return LDAP_PARAM_ERROR;
2037 *isSSL = pb->pb_conn->c_is_tls;
2042 return LDAP_SUCCESS;
2046 * DS 5.x compatability API follow
2049 int slapi_attr_get_flags( const Slapi_Attr *attr, unsigned long *flags )
2054 return LDAP_PARAM_ERROR;
2056 at = attr->a_desc->ad_type;
2058 *flags = SLAPI_ATTR_FLAG_STD_ATTR;
2060 if ( is_at_single_value( at ) )
2061 *flags |= SLAPI_ATTR_FLAG_SINGLE;
2062 if ( is_at_operational( at ) )
2063 *flags |= SLAPI_ATTR_FLAG_OPATTR;
2064 if ( is_at_obsolete( at ) )
2065 *flags |= SLAPI_ATTR_FLAG_OBSOLETE;
2066 if ( is_at_collective( at ) )
2067 *flags |= SLAPI_ATTR_FLAG_COLLECTIVE;
2068 if ( is_at_no_user_mod( at ) )
2069 *flags |= SLAPI_ATTR_FLAG_NOUSERMOD;
2071 return LDAP_SUCCESS;
2074 int slapi_attr_flag_is_set( const Slapi_Attr *attr, unsigned long flag )
2076 unsigned long flags;
2078 if ( slapi_attr_get_flags( attr, &flags ) != 0 )
2080 return (flags & flag) ? 1 : 0;
2083 Slapi_Attr *slapi_attr_new( void )
2087 ad = (Attribute *)slapi_ch_calloc( 1, sizeof(*ad) );
2092 Slapi_Attr *slapi_attr_init( Slapi_Attr *a, const char *type )
2095 AttributeDescription *ad = NULL;
2097 if( slap_str2ad( type, &ad, &text ) != LDAP_SUCCESS ) {
2110 void slapi_attr_free( Slapi_Attr **a )
2116 Slapi_Attr *slapi_attr_dup( const Slapi_Attr *attr )
2118 return attr_dup( (Slapi_Attr *)attr );
2121 int slapi_attr_add_value( Slapi_Attr *a, const Slapi_Value *v )
2124 struct berval *nvalp;
2126 AttributeDescription *desc = a->a_desc;
2128 if ( desc->ad_type->sat_equality &&
2129 desc->ad_type->sat_equality->smr_normalize ) {
2130 rc = (*desc->ad_type->sat_equality->smr_normalize)(
2131 SLAP_MR_VALUE_OF_ATTRIBUTE_SYNTAX,
2132 desc->ad_type->sat_syntax,
2133 desc->ad_type->sat_equality,
2134 (Slapi_Value *)v, &nval, NULL );
2135 if ( rc != LDAP_SUCCESS ) {
2143 rc = value_add_one( &a->a_vals, (Slapi_Value *)v );
2144 if ( rc == 0 && nvalp != NULL ) {
2145 rc = value_add_one( &a->a_nvals, nvalp );
2147 a->a_nvals = a->a_vals;
2150 if ( nvalp != NULL ) {
2151 slapi_ch_free_string( &nval.bv_val );
2157 int slapi_attr_type2plugin( const char *type, void **pi )
2164 int slapi_attr_get_type( const Slapi_Attr *attr, char **type )
2166 if ( attr == NULL ) {
2167 return LDAP_PARAM_ERROR;
2170 *type = attr->a_desc->ad_cname.bv_val;
2172 return LDAP_SUCCESS;
2175 int slapi_attr_get_oid_copy( const Slapi_Attr *attr, char **oidp )
2177 if ( attr == NULL ) {
2178 return LDAP_PARAM_ERROR;
2180 *oidp = attr->a_desc->ad_type->sat_oid;
2182 return LDAP_SUCCESS;
2185 int slapi_attr_value_cmp( const Slapi_Attr *a, const struct berval *v1, const struct berval *v2 )
2192 mr = a->a_desc->ad_type->sat_equality;
2193 rc = value_match( &ret, a->a_desc, mr,
2194 SLAP_MR_VALUE_OF_ASSERTION_SYNTAX,
2195 (struct berval *)v1, (void *)v2, &text );
2196 if ( rc != LDAP_SUCCESS )
2199 return ( ret == 0 ) ? 0 : -1;
2202 int slapi_attr_value_find( const Slapi_Attr *a, struct berval *v )
2211 if ( a ->a_vals == NULL ) {
2214 mr = a->a_desc->ad_type->sat_equality;
2215 for ( bv = a->a_vals, j = 0; bv->bv_val != NULL; bv++, j++ ) {
2216 rc = value_match( &ret, a->a_desc, mr,
2217 SLAP_MR_VALUE_OF_ASSERTION_SYNTAX, bv, v, &text );
2218 if ( rc != LDAP_SUCCESS ) {
2228 int slapi_attr_type_cmp( const char *t1, const char *t2, int opt )
2230 AttributeDescription *a1 = NULL;
2231 AttributeDescription *a2 = NULL;
2235 if ( slap_str2ad( t1, &a1, &text ) != LDAP_SUCCESS ) {
2239 if ( slap_str2ad( t2, &a2, &text ) != LDAP_SUCCESS ) {
2243 #define ad_base_cmp(l,r) (((l)->ad_type->sat_cname.bv_len < (r)->ad_type->sat_cname.bv_len) \
2244 ? -1 : (((l)->ad_type->sat_cname.bv_len > (r)->ad_type->sat_cname.bv_len) \
2245 ? 1 : strcasecmp((l)->ad_type->sat_cname.bv_val, (r)->ad_type->sat_cname.bv_val )))
2248 case SLAPI_TYPE_CMP_EXACT:
2249 ret = ad_cmp( a1, a2 );
2251 case SLAPI_TYPE_CMP_BASE:
2252 ret = ad_base_cmp( a1, a2 );
2254 case SLAPI_TYPE_CMP_SUBTYPE:
2255 ret = is_ad_subtype( a2, a2 );
2265 int slapi_attr_types_equivalent( const char *t1, const char *t2 )
2267 return ( slapi_attr_type_cmp( t1, t2, SLAPI_TYPE_CMP_EXACT ) == 0 );
2270 int slapi_attr_first_value( Slapi_Attr *a, Slapi_Value **v )
2272 return slapi_valueset_first_value( &a->a_vals, v );
2275 int slapi_attr_next_value( Slapi_Attr *a, int hint, Slapi_Value **v )
2277 return slapi_valueset_next_value( &a->a_vals, hint, v );
2280 int slapi_attr_get_numvalues( const Slapi_Attr *a, int *numValues )
2282 *numValues = slapi_valueset_count( &a->a_vals );
2287 int slapi_attr_get_valueset( const Slapi_Attr *a, Slapi_ValueSet **vs )
2289 *vs = &((Slapi_Attr *)a)->a_vals;
2294 int slapi_attr_get_bervals_copy( Slapi_Attr *a, struct berval ***vals )
2296 return slapi_attr_get_values( a, vals );
2299 char *slapi_attr_syntax_normalize( const char *s )
2301 AttributeDescription *ad = NULL;
2304 if ( slap_str2ad( s, &ad, &text ) != LDAP_SUCCESS ) {
2308 return ad->ad_cname.bv_val;
2311 Slapi_Value *slapi_value_new( void )
2315 bv = (struct berval *)slapi_ch_malloc( sizeof(*bv) );
2320 Slapi_Value *slapi_value_new_berval(const struct berval *bval)
2322 return ber_dupbv( NULL, (struct berval *)bval );
2325 Slapi_Value *slapi_value_new_value(const Slapi_Value *v)
2327 return slapi_value_new_berval( v );
2330 Slapi_Value *slapi_value_new_string(const char *s)
2334 bv.bv_val = (char *)s;
2335 bv.bv_len = strlen( s );
2337 return slapi_value_new_berval( &bv );
2340 Slapi_Value *slapi_value_init(Slapi_Value *val)
2348 Slapi_Value *slapi_value_init_berval(Slapi_Value *v, struct berval *bval)
2350 return ber_dupbv( v, bval );
2353 Slapi_Value *slapi_value_init_string(Slapi_Value *v, const char *s)
2355 v->bv_val = slapi_ch_strdup( (char *)s );
2356 v->bv_len = strlen( s );
2361 Slapi_Value *slapi_value_dup(const Slapi_Value *v)
2363 return slapi_value_new_value( v );
2366 void slapi_value_free(Slapi_Value **value)
2368 if ( value == NULL ) {
2372 if ( (*value) != NULL ) {
2373 slapi_ch_free( (void **)&(*value)->bv_val );
2374 slapi_ch_free( (void **)value );
2378 const struct berval *slapi_value_get_berval( const Slapi_Value *value )
2383 Slapi_Value *slapi_value_set_berval( Slapi_Value *value, const struct berval *bval )
2385 if ( value == NULL ) {
2388 if ( value->bv_val != NULL ) {
2389 slapi_ch_free( (void **)&value->bv_val );
2391 slapi_value_init_berval( value, (struct berval *)bval );
2396 Slapi_Value *slapi_value_set_value( Slapi_Value *value, const Slapi_Value *vfrom)
2398 if ( value == NULL ) {
2401 return slapi_value_set_berval( value, vfrom );
2404 Slapi_Value *slapi_value_set( Slapi_Value *value, void *val, unsigned long len)
2406 if ( value == NULL ) {
2409 if ( value->bv_val != NULL ) {
2410 slapi_ch_free( (void **)&value->bv_val );
2412 value->bv_val = slapi_ch_malloc( len );
2413 value->bv_len = len;
2414 AC_MEMCPY( value->bv_val, val, len );
2419 int slapi_value_set_string(Slapi_Value *value, const char *strVal)
2421 if ( value == NULL ) {
2424 slapi_value_set( value, (void *)strVal, strlen( strVal ) );
2428 int slapi_value_set_int(Slapi_Value *value, int intVal)
2432 snprintf( buf, sizeof( buf ), "%d", intVal );
2434 return slapi_value_set_string( value, buf );
2437 const char *slapi_value_get_string(const Slapi_Value *value)
2439 if ( value == NULL ) return NULL;
2440 if ( value->bv_val == NULL ) return NULL;
2441 if ( !checkBVString( value ) ) return NULL;
2443 return value->bv_val;
2446 int slapi_value_get_int(const Slapi_Value *value)
2448 if ( value == NULL ) return 0;
2449 if ( value->bv_val == NULL ) return 0;
2450 if ( !checkBVString( value ) ) return 0;
2452 return (int)strtol( value->bv_val, NULL, 10 );
2455 unsigned int slapi_value_get_uint(const Slapi_Value *value)
2457 if ( value == NULL ) return 0;
2458 if ( value->bv_val == NULL ) return 0;
2459 if ( !checkBVString( value ) ) return 0;
2461 return (unsigned int)strtoul( value->bv_val, NULL, 10 );
2464 long slapi_value_get_long(const Slapi_Value *value)
2466 if ( value == NULL ) return 0;
2467 if ( value->bv_val == NULL ) return 0;
2468 if ( !checkBVString( value ) ) return 0;
2470 return strtol( value->bv_val, NULL, 10 );
2473 unsigned long slapi_value_get_ulong(const Slapi_Value *value)
2475 if ( value == NULL ) return 0;
2476 if ( value->bv_val == NULL ) return 0;
2477 if ( !checkBVString( value ) ) return 0;
2479 return strtoul( value->bv_val, NULL, 10 );
2482 size_t slapi_value_get_length(const Slapi_Value *value)
2484 if ( value == NULL )
2487 return (size_t) value->bv_len;
2490 int slapi_value_compare(const Slapi_Attr *a, const Slapi_Value *v1, const Slapi_Value *v2)
2492 return slapi_attr_value_cmp( a, v1, v2 );
2495 /* A ValueSet is a container for a BerVarray. */
2496 Slapi_ValueSet *slapi_valueset_new( void )
2500 vs = (Slapi_ValueSet *)slapi_ch_malloc( sizeof( *vs ) );
2506 void slapi_valueset_free(Slapi_ValueSet *vs)
2511 ber_bvarray_free( vp );
2512 slapi_ch_free( (void **)&vp );
2518 void slapi_valueset_init(Slapi_ValueSet *vs)
2520 if ( vs != NULL && *vs == NULL ) {
2521 *vs = (Slapi_ValueSet)slapi_ch_calloc( 1, sizeof(struct berval) );
2522 (*vs)->bv_val = NULL;
2527 void slapi_valueset_done(Slapi_ValueSet *vs)
2534 for ( vp = *vs; vp->bv_val != NULL; vp++ ) {
2536 slapi_ch_free( (void **)&vp->bv_val );
2538 /* but don't free *vs or vs */
2541 void slapi_valueset_add_value(Slapi_ValueSet *vs, const Slapi_Value *addval)
2545 ber_dupbv( &bv, (Slapi_Value *)addval );
2546 ber_bvarray_add( vs, &bv );
2549 int slapi_valueset_first_value( Slapi_ValueSet *vs, Slapi_Value **v )
2551 return slapi_valueset_next_value( vs, 0, v );
2554 int slapi_valueset_next_value( Slapi_ValueSet *vs, int index, Slapi_Value **v)
2564 for ( i = 0; vp[i].bv_val != NULL; i++ ) {
2574 int slapi_valueset_count( const Slapi_ValueSet *vs )
2584 for ( i = 0; vp[i].bv_val != NULL; i++ )
2591 void slapi_valueset_set_valueset(Slapi_ValueSet *vs1, const Slapi_ValueSet *vs2)
2595 for ( vp = *vs2; vp->bv_val != NULL; vp++ ) {
2596 slapi_valueset_add_value( vs1, vp );
2600 int slapi_access_allowed( Slapi_PBlock *pb, Slapi_Entry *e, char *attr,
2601 struct berval *val, int access )
2604 slap_access_t slap_access;
2605 AttributeDescription *ad = NULL;
2608 rc = slap_str2ad( attr, &ad, &text );
2609 if ( rc != LDAP_SUCCESS ) {
2614 * Whilst the SLAPI access types are arranged as a bitmask, the
2615 * documentation indicates that they are to be used separately.
2617 switch ( access & SLAPI_ACL_ALL ) {
2618 case SLAPI_ACL_COMPARE:
2619 slap_access = ACL_COMPARE;
2621 case SLAPI_ACL_SEARCH:
2622 slap_access = ACL_SEARCH;
2624 case SLAPI_ACL_READ:
2625 slap_access = ACL_READ;
2627 case SLAPI_ACL_WRITE:
2628 slap_access = ACL_WRITE;
2630 case SLAPI_ACL_DELETE:
2631 slap_access = ACL_WDEL;
2634 slap_access = ACL_WADD;
2636 case SLAPI_ACL_SELF: /* not documented */
2637 case SLAPI_ACL_PROXY: /* not documented */
2639 return LDAP_INSUFFICIENT_ACCESS;
2643 assert( pb->pb_op != NULL );
2645 if ( access_allowed( pb->pb_op, e, ad, val, slap_access, NULL ) ) {
2646 return LDAP_SUCCESS;
2649 return LDAP_INSUFFICIENT_ACCESS;
2652 int slapi_acl_check_mods(Slapi_PBlock *pb, Slapi_Entry *e, LDAPMod **mods, char **errbuf)
2654 int rc = LDAP_SUCCESS;
2657 if ( pb == NULL || pb->pb_op == NULL )
2658 return LDAP_PARAM_ERROR;
2660 ml = slapi_int_ldapmods2modifications( mods, NULL );
2665 if ( rc == LDAP_SUCCESS ) {
2666 rc = acl_check_modlist( pb->pb_op, e, ml ) ? LDAP_SUCCESS : LDAP_INSUFFICIENT_ACCESS;
2669 /* Careful when freeing the modlist because it has pointers into the mods array. */
2670 slapi_int_mods_free( ml );
2676 * Synthesise an LDAPMod array from a Modifications list to pass
2677 * to SLAPI. This synthesis is destructive and as such the
2678 * Modifications list may not be used after calling this
2681 * This function must also be called before slap_mods_check().
2683 LDAPMod **slapi_int_modifications2ldapmods(
2684 Modifications **pmodlist,
2688 Modifications *ml, *modlist;
2689 LDAPMod **mods, *modp;
2692 modlist = *pmodlist;
2694 for( i = 0, ml = modlist; ml != NULL; i++, ml = ml->sml_next )
2697 mods = (LDAPMod **)slap_sl_malloc( (i + 1) * sizeof(LDAPMod *), memctx );
2699 for( i = 0, ml = modlist; ml != NULL; ml = ml->sml_next ) {
2700 mods[i] = (LDAPMod *)slap_sl_malloc( sizeof(LDAPMod), memctx );
2702 modp->mod_op = ml->sml_op | LDAP_MOD_BVALUES;
2703 modp->mod_type = slapi_ch_strdup( ml->sml_type.bv_val );
2704 ml->sml_type.bv_val = NULL;
2706 if ( ml->sml_values != NULL ) {
2707 for( j = 0; ml->sml_values[j].bv_val != NULL; j++ )
2709 modp->mod_bvalues = (struct berval **)slap_sl_malloc( (j + 1) *
2710 sizeof(struct berval *), memctx );
2711 for( j = 0; ml->sml_values[j].bv_val != NULL; j++ ) {
2712 /* Take ownership of original values. */
2713 modp->mod_bvalues[j] = (struct berval *)slap_sl_malloc(
2714 sizeof(struct berval), memctx );
2715 modp->mod_bvalues[j]->bv_len = ml->sml_values[j].bv_len;
2716 modp->mod_bvalues[j]->bv_val = ml->sml_values[j].bv_val;
2717 ml->sml_values[j].bv_len = 0;
2718 ml->sml_values[j].bv_val = NULL;
2720 modp->mod_bvalues[j] = NULL;
2721 slapi_ch_free( (void **)&ml->sml_values );
2723 modp->mod_bvalues = NULL;
2730 slap_mods_free( modlist );
2737 * Convert a potentially modified array of LDAPMods back to a
2738 * Modification list.
2740 * The returned Modification list contains pointers into the
2741 * LDAPMods array; the latter MUST be freed with
2742 * slapi_int_free_ldapmods() (see below).
2744 Modifications *slapi_int_ldapmods2modifications ( LDAPMod **mods, void *memctx )
2746 Modifications *modlist = NULL, **modtail;
2749 if ( mods == NULL ) {
2755 for ( modp = mods; *modp != NULL; modp++ ) {
2757 LDAPMod *lmod = *modp;
2760 AttributeDescription *ad = NULL;
2762 if ( slap_str2ad( lmod->mod_type, &ad, &text ) != LDAP_SUCCESS ) {
2766 mod = (Modifications *) slap_sl_malloc( sizeof(Modifications), memctx );
2767 mod->sml_op = lmod->mod_op & ~(LDAP_MOD_BVALUES);
2769 mod->sml_type = ad->ad_cname;
2771 mod->sml_next = NULL;
2774 if ( lmod->mod_op & LDAP_MOD_BVALUES ) {
2775 if ( lmod->mod_bvalues != NULL ) {
2776 while ( lmod->mod_bvalues[i] != NULL )
2780 if ( lmod->mod_values != NULL ) {
2781 while ( lmod->mod_values[i] != NULL )
2787 mod->sml_values = NULL;
2789 mod->sml_values = (BerVarray) slap_sl_malloc( (i + 1) * sizeof(struct berval), memctx );
2791 /* NB: This implicitly trusts a plugin to return valid modifications. */
2792 if ( lmod->mod_op & LDAP_MOD_BVALUES ) {
2793 for ( i = 0; lmod->mod_bvalues[i] != NULL; i++ ) {
2794 mod->sml_values[i].bv_val = lmod->mod_bvalues[i]->bv_val;
2795 mod->sml_values[i].bv_len = lmod->mod_bvalues[i]->bv_len;
2798 for ( i = 0; lmod->mod_values[i] != NULL; i++ ) {
2799 mod->sml_values[i].bv_val = lmod->mod_values[i];
2800 mod->sml_values[i].bv_len = strlen( lmod->mod_values[i] );
2803 mod->sml_values[i].bv_val = NULL;
2804 mod->sml_values[i].bv_len = 0;
2806 mod->sml_nvalues = NULL;
2809 modtail = &mod->sml_next;
2816 * For an internal operation, the unnormalized values are
2817 * owned by the caller (ie. the plugin making the internal
2821 slapi_int_mods_free( Modifications *ml )
2823 Modifications *next;
2825 for ( ; ml != NULL; ml = next ) {
2826 next = ml->sml_next;
2828 if ( ml->sml_nvalues != NULL ) {
2829 ber_bvarray_free( ml->sml_nvalues );
2830 ml->sml_nvalues = NULL;
2832 slapi_ch_free( (void **)&ml->sml_values );
2833 slapi_ch_free( (void **)&ml );
2838 * This function only frees the parts of the mods array that
2839 * are not shared with the Modification list that was created
2840 * by slapi_int_ldapmods2modifications().
2843 slapi_int_free_ldapmods ( LDAPMod **mods )
2850 for ( i = 0; mods[i] != NULL; i++ ) {
2852 * Don't free values themselves; they're owned by the
2853 * Modification list. Do free the containing array.
2855 if ( mods[i]->mod_op & LDAP_MOD_BVALUES ) {
2856 if ( mods[i]->mod_bvalues != NULL ) {
2857 for ( j = 0; mods[i]->mod_bvalues[j] != NULL; j++ )
2858 slapi_ch_free( (void **)&mods[i]->mod_bvalues[j] );
2859 slapi_ch_free( (void **)&mods[i]->mod_bvalues );
2862 slapi_ch_free( (void **)&mods[i]->mod_values );
2864 slapi_ch_free_string( &mods[i]->mod_type );
2865 slapi_ch_free( (void **)&mods[i] );
2867 slapi_ch_free( (void **)&mods );
2871 * Sun ONE DS 5.x computed attribute support. Computed attributes
2872 * allow for dynamically generated operational attributes, a very
2873 * useful thing indeed.
2877 * For some reason Sun don't use the normal plugin mechanism
2878 * registration path to register an "evaluator" function (an
2879 * "evaluator" is responsible for adding computed attributes;
2880 * the nomenclature is somewhat confusing).
2882 * As such slapi_compute_add_evaluator() registers the
2883 * function directly.
2885 int slapi_compute_add_evaluator(slapi_compute_callback_t function)
2887 Slapi_PBlock *pPlugin = NULL;
2889 int type = SLAPI_PLUGIN_OBJECT;
2891 pPlugin = slapi_pblock_new();
2892 if ( pPlugin == NULL ) {
2893 rc = LDAP_NO_MEMORY;
2897 rc = slapi_pblock_set( pPlugin, SLAPI_PLUGIN_TYPE, (void *)&type );
2898 if ( rc != LDAP_SUCCESS ) {
2902 rc = slapi_pblock_set( pPlugin, SLAPI_PLUGIN_COMPUTE_EVALUATOR_FN, (void *)function );
2903 if ( rc != LDAP_SUCCESS ) {
2907 rc = slapi_int_register_plugin( frontendDB, pPlugin );
2914 if ( rc != LDAP_SUCCESS ) {
2915 if ( pPlugin != NULL ) {
2916 slapi_pblock_destroy( pPlugin );
2925 * See notes above regarding slapi_compute_add_evaluator().
2927 int slapi_compute_add_search_rewriter(slapi_search_rewrite_callback_t function)
2929 Slapi_PBlock *pPlugin = NULL;
2931 int type = SLAPI_PLUGIN_OBJECT;
2933 pPlugin = slapi_pblock_new();
2934 if ( pPlugin == NULL ) {
2935 rc = LDAP_NO_MEMORY;
2939 rc = slapi_pblock_set( pPlugin, SLAPI_PLUGIN_TYPE, (void *)&type );
2940 if ( rc != LDAP_SUCCESS ) {
2944 rc = slapi_pblock_set( pPlugin, SLAPI_PLUGIN_COMPUTE_SEARCH_REWRITER_FN, (void *)function );
2945 if ( rc != LDAP_SUCCESS ) {
2949 rc = slapi_int_register_plugin( frontendDB, pPlugin );
2956 if ( rc != LDAP_SUCCESS ) {
2957 if ( pPlugin != NULL ) {
2958 slapi_pblock_destroy( pPlugin );
2967 * Call compute evaluators
2969 int compute_evaluator(computed_attr_context *c, char *type, Slapi_Entry *e, slapi_compute_output_t outputfn)
2972 slapi_compute_callback_t *pGetPlugin, *tmpPlugin;
2974 rc = slapi_int_get_plugins( frontendDB, SLAPI_PLUGIN_COMPUTE_EVALUATOR_FN, (SLAPI_FUNC **)&tmpPlugin );
2975 if ( rc != LDAP_SUCCESS || tmpPlugin == NULL ) {
2976 /* Nothing to do; front-end should ignore. */
2980 for ( pGetPlugin = tmpPlugin; *pGetPlugin != NULL; pGetPlugin++ ) {
2982 * -1: no attribute matched requested type
2983 * 0: one attribute matched
2984 * >0: error happened
2986 rc = (*pGetPlugin)( c, type, e, outputfn );
2992 slapi_ch_free( (void **)&tmpPlugin );
2998 compute_rewrite_search_filter( Slapi_PBlock *pb )
3000 if ( pb == NULL || pb->pb_op == NULL )
3001 return LDAP_PARAM_ERROR;
3003 return slapi_int_call_plugins( pb->pb_op->o_bd, SLAPI_PLUGIN_COMPUTE_SEARCH_REWRITER_FN, pb );
3007 * New API to provide the plugin with access to the search
3008 * pblock. Have informed Sun DS team.
3011 slapi_x_compute_get_pblock(computed_attr_context *c, Slapi_PBlock **pb)
3016 if ( c->cac_pb == NULL )
3024 Slapi_Mutex *slapi_new_mutex( void )
3028 m = (Slapi_Mutex *)slapi_ch_malloc( sizeof(*m) );
3029 if ( ldap_pvt_thread_mutex_init( &m->mutex ) != 0 ) {
3030 slapi_ch_free( (void **)&m );
3037 void slapi_destroy_mutex( Slapi_Mutex *mutex )
3039 if ( mutex != NULL ) {
3040 ldap_pvt_thread_mutex_destroy( &mutex->mutex );
3041 slapi_ch_free( (void **)&mutex);
3045 void slapi_lock_mutex( Slapi_Mutex *mutex )
3047 ldap_pvt_thread_mutex_lock( &mutex->mutex );
3050 int slapi_unlock_mutex( Slapi_Mutex *mutex )
3052 return ldap_pvt_thread_mutex_unlock( &mutex->mutex );
3055 Slapi_CondVar *slapi_new_condvar( Slapi_Mutex *mutex )
3059 if ( mutex == NULL ) {
3063 cv = (Slapi_CondVar *)slapi_ch_malloc( sizeof(*cv) );
3064 if ( ldap_pvt_thread_cond_init( &cv->cond ) != 0 ) {
3065 slapi_ch_free( (void **)&cv );
3069 cv->mutex = mutex->mutex;
3074 void slapi_destroy_condvar( Slapi_CondVar *cvar )
3076 if ( cvar != NULL ) {
3077 ldap_pvt_thread_cond_destroy( &cvar->cond );
3078 slapi_ch_free( (void **)&cvar );
3082 int slapi_wait_condvar( Slapi_CondVar *cvar, struct timeval *timeout )
3084 if ( cvar == NULL ) {
3088 return ldap_pvt_thread_cond_wait( &cvar->cond, &cvar->mutex );
3091 int slapi_notify_condvar( Slapi_CondVar *cvar, int notify_all )
3093 if ( cvar == NULL ) {
3098 return ldap_pvt_thread_cond_broadcast( &cvar->cond );
3101 return ldap_pvt_thread_cond_signal( &cvar->cond );
3104 int slapi_int_access_allowed( Operation *op,
3106 AttributeDescription *desc,
3108 slap_access_t access,
3109 AccessControlState *state )
3111 int rc, slap_access = 0;
3112 slapi_acl_callback_t *pGetPlugin, *tmpPlugin;
3115 pb = SLAPI_OPERATION_PBLOCK( op );
3117 /* internal operation */
3123 slap_access |= SLAPI_ACL_COMPARE;
3126 slap_access |= SLAPI_ACL_SEARCH;
3129 slap_access |= SLAPI_ACL_READ;
3132 slap_access |= SLAPI_ACL_WRITE;
3135 slap_access |= SLAPI_ACL_DELETE;
3138 slap_access |= SLAPI_ACL_ADD;
3144 rc = slapi_int_get_plugins( op->o_bd, SLAPI_PLUGIN_ACL_ALLOW_ACCESS, (SLAPI_FUNC **)&tmpPlugin );
3145 if ( rc != LDAP_SUCCESS || tmpPlugin == NULL ) {
3146 /* nothing to do; allowed access */
3150 rc = 1; /* default allow policy */
3152 for ( pGetPlugin = tmpPlugin; *pGetPlugin != NULL; pGetPlugin++ ) {
3157 rc = (*pGetPlugin)( pb, entry, desc->ad_cname.bv_val,
3158 val, slap_access, (void *)state );
3164 slapi_ch_free( (void **)&tmpPlugin );
3170 * There is no documentation for this.
3172 int slapi_rdn2typeval( char *rdn, char **type, struct berval *bv )
3184 rc = ldap_str2rdn( rdn, &lrdn, &p, LDAP_DN_FORMAT_LDAPV3 );
3185 if ( rc != LDAP_SUCCESS ) {
3189 if ( lrdn[1] != NULL ) {
3190 return -1; /* not single valued */
3195 *type = slapi_ch_strdup( ava->la_attr.bv_val );
3196 ber_dupbv( bv, &ava->la_value );
3203 char *slapi_dn_plus_rdn( const char *dn, const char *rdn )
3205 struct berval new_dn, parent_dn, newrdn;
3207 new_dn.bv_val = NULL;
3209 parent_dn.bv_val = (char *)dn;
3210 parent_dn.bv_len = strlen( dn );
3212 newrdn.bv_val = (char *)rdn;
3213 newrdn.bv_len = strlen( rdn );
3215 build_new_dn( &new_dn, &parent_dn, &newrdn, NULL );
3217 return new_dn.bv_val;
3220 int slapi_entry_schema_check( Slapi_PBlock *pb, Slapi_Entry *e )
3224 char textbuf[SLAP_TEXT_BUFLEN] = { '\0' };
3225 size_t textlen = sizeof textbuf;
3226 int rc = LDAP_SUCCESS;
3228 be = select_backend( &e->e_nname, 0, 0 );
3230 rc = entry_schema_check( be, e, NULL, 0,
3231 &text, textbuf, textlen );
3233 return ( rc == LDAP_SUCCESS ) ? 0 : 1;
3236 int slapi_entry_rdn_values_present( const Slapi_Entry *e )
3240 int i = 0, match = 0;
3242 rc = ldap_bv2dn( &((Entry *)e)->e_name, &dn, LDAP_DN_FORMAT_LDAPV3 );
3243 if ( rc != LDAP_SUCCESS ) {
3247 if ( dn[0] != NULL ) {
3248 LDAPRDN rdn = dn[0];
3250 for ( i = 0; rdn[i] != NULL; i++ ) {
3251 LDAPAVA *ava = &rdn[0][i];
3252 Slapi_Attr *a = NULL;
3254 if ( slapi_entry_attr_find( (Slapi_Entry *)e, ava->la_attr.bv_val, &a ) == 0 &&
3255 slapi_attr_value_find( a, &ava->la_value ) == 0 )
3262 return ( i == match );
3265 int slapi_entry_add_rdn_values( Slapi_Entry *e )
3270 rc = ldap_bv2dn( &e->e_name, &dn, LDAP_DN_FORMAT_LDAPV3 );
3271 if ( rc != LDAP_SUCCESS ) {
3275 if ( dn[0] != NULL ) {
3276 LDAPRDN rdn = dn[0];
3277 struct berval *vals[2];
3279 for ( i = 0; rdn[i] != NULL; i++ ) {
3280 LDAPAVA *ava = &rdn[0][i];
3281 Slapi_Attr *a = NULL;
3283 if ( slapi_entry_attr_find( e, ava->la_attr.bv_val, &a ) == 0 &&
3284 slapi_attr_value_find( a, &ava->la_value ) == 0 )
3287 vals[0] = &ava->la_value;
3290 slapi_entry_attr_merge( e, ava->la_attr.bv_val, vals );
3296 return LDAP_SUCCESS;
3299 const char *slapi_entry_get_uniqueid( const Slapi_Entry *e )
3303 attr = attr_find( e->e_attrs, slap_schema.si_ad_entryUUID );
3304 if ( attr == NULL ) {
3308 if ( attr->a_vals != NULL && attr->a_vals[0].bv_len != 0 ) {
3309 return slapi_value_get_string( &attr->a_vals[0] );
3315 void slapi_entry_set_uniqueid( Slapi_Entry *e, char *uniqueid )
3319 attr_delete ( &e->e_attrs, slap_schema.si_ad_entryUUID );
3321 bv.bv_val = uniqueid;
3322 bv.bv_len = strlen( uniqueid );
3323 attr_merge_normalize_one( e, slap_schema.si_ad_entryUUID, &bv, NULL );
3326 LDAP *slapi_ldap_init( char *ldaphost, int ldapport, int secure, int shared )
3333 size = sizeof("ldap:///");
3336 size += strlen( ldaphost );
3337 if ( ldapport != 0 )
3340 url = slapi_ch_malloc( size );
3342 if ( ldapport != 0 ) {
3343 sprintf( url, "ldap%s://%s:%d/", ( secure ? "s" : "" ), ldaphost, ldapport );
3345 sprintf( url, "ldap%s://%s/", ( secure ? "s" : "" ), ldaphost );
3348 rc = ldap_initialize( &ld, url );
3350 slapi_ch_free_string( &url );
3352 return ( rc == LDAP_SUCCESS ) ? ld : NULL;
3355 void slapi_ldap_unbind( LDAP *ld )
3357 ldap_unbind_ext_s( ld, NULL, NULL );
3360 int slapi_x_backend_get_flags( const Slapi_Backend *be, unsigned long *flags )
3363 return LDAP_PARAM_ERROR;
3365 *flags = SLAP_DBFLAGS(be);
3367 return LDAP_SUCCESS;
3371 slapi_int_count_controls( LDAPControl **ctrls )
3375 if ( ctrls == NULL )
3378 for ( i = 0; ctrls[i] != NULL; i++ )
3385 slapi_op_abandoned( Slapi_PBlock *pb )
3387 if ( pb->pb_op == NULL )
3390 return ( pb->pb_op->o_abandon );
3394 slapi_op_type_to_string(unsigned long type)
3399 case SLAPI_OPERATION_BIND:
3402 case SLAPI_OPERATION_UNBIND:
3405 case SLAPI_OPERATION_SEARCH:
3408 case SLAPI_OPERATION_MODIFY:
3411 case SLAPI_OPERATION_ADD:
3414 case SLAPI_OPERATION_DELETE:
3417 case SLAPI_OPERATION_MODDN:
3420 case SLAPI_OPERATION_COMPARE:
3423 case SLAPI_OPERATION_ABANDON:
3426 case SLAPI_OPERATION_EXTENDED:
3430 str = "unknown operation type";
3437 slapi_op_get_type(Slapi_Operation * op)
3441 switch ( op->o_tag ) {
3443 type = SLAPI_OPERATION_BIND;
3445 case LDAP_REQ_UNBIND:
3446 type = SLAPI_OPERATION_UNBIND;
3448 case LDAP_REQ_SEARCH:
3449 type = SLAPI_OPERATION_SEARCH;
3451 case LDAP_REQ_MODIFY:
3452 type = SLAPI_OPERATION_MODIFY;
3455 type = SLAPI_OPERATION_ADD;
3457 case LDAP_REQ_DELETE:
3458 type = SLAPI_OPERATION_DELETE;
3460 case LDAP_REQ_MODRDN:
3461 type = SLAPI_OPERATION_MODDN;
3463 case LDAP_REQ_COMPARE:
3464 type = SLAPI_OPERATION_COMPARE;
3466 case LDAP_REQ_ABANDON:
3467 type = SLAPI_OPERATION_ABANDON;
3469 case LDAP_REQ_EXTENDED:
3470 type = SLAPI_OPERATION_EXTENDED;
3473 type = SLAPI_OPERATION_NONE;
3481 slapi_operation_set_flag(Slapi_Operation *op, unsigned long flag)
3486 slapi_operation_clear_flag(Slapi_Operation *op, unsigned long flag)
3491 slapi_operation_is_flag_set(Slapi_Operation *op, unsigned long flag)
3496 #endif /* LDAP_SLAPI */