]> git.sur5r.net Git - openldap/blobdiff - libraries/libldap/init.c
ITS#6437 cleanup (noop change): Compute pad,order_start at compile time
[openldap] / libraries / libldap / init.c
index 96e7b8f3dc9f67be7a18bb108a3c23902bb831e0..26576fabd88a423a47de19ee9c2e9bf963d79702 100644 (file)
@@ -1,25 +1,42 @@
 /* $OpenLDAP$ */
-/*
- * Copyright 1998-2002 The OpenLDAP Foundation, All Rights Reserved.
- * COPYING RESTRICTIONS APPLY, see COPYRIGHT file
+/* This work is part of OpenLDAP Software <http://www.openldap.org/>.
+ *
+ * Copyright 1998-2011 The OpenLDAP Foundation.
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted only as authorized by the OpenLDAP
+ * Public License.
+ *
+ * A copy of this license is available in the file LICENSE in the
+ * top-level directory of the distribution or, alternatively, at
+ * <http://www.OpenLDAP.org/license.html>.
  */
+
 #include "portable.h"
 
 #include <stdio.h>
 #include <ac/stdlib.h>
 
+#ifdef HAVE_GETEUID
+#include <ac/unistd.h>
+#endif
+
 #include <ac/socket.h>
 #include <ac/string.h>
 #include <ac/ctype.h>
 #include <ac/time.h>
 
+#ifdef HAVE_LIMITS_H
 #include <limits.h>
+#endif
 
 #include "ldap-int.h"
 #include "ldap_defaults.h"
+#include "lutil.h"
 
 struct ldapoptions ldap_int_global_options =
-       { LDAP_UNINITIALIZED, LDAP_DEBUG_NONE };  
+       { LDAP_UNINITIALIZED, LDAP_DEBUG_NONE LDAP_LDO_MUTEX_NULLARG };  
 
 #define ATTR_NONE      0
 #define ATTR_BOOL      1
@@ -31,6 +48,11 @@ struct ldapoptions ldap_int_global_options =
 #define ATTR_SASL      6
 #define ATTR_TLS       7
 
+#define ATTR_OPT_TV    8
+#define ATTR_OPT_INT   9
+
+#define ATTR_GSSAPI    10
+
 struct ol_keyvalue {
        const char *            key;
        int                     value;
@@ -51,6 +73,9 @@ static const struct ol_attribute {
        const void *    data;
        size_t          offset;
 } attrs[] = {
+       {0, ATTR_OPT_TV,        "TIMEOUT",              NULL,   LDAP_OPT_TIMEOUT},
+       {0, ATTR_OPT_TV,        "NETWORK_TIMEOUT",      NULL,   LDAP_OPT_NETWORK_TIMEOUT},
+       {0, ATTR_OPT_INT,       "VERSION",              NULL,   LDAP_OPT_PROTOCOL_VERSION},
        {0, ATTR_KV,            "DEREF",        deref_kv, /* or &deref_kv[0] */
                offsetof(struct ldapoptions, ldo_deref)},
        {0, ATTR_INT,           "SIZELIMIT",    NULL,
@@ -66,40 +91,59 @@ static const struct ol_attribute {
        {0, ATTR_OPTION,        "HOST",                 NULL,   LDAP_OPT_HOST_NAME}, /* deprecated */
        {0, ATTR_OPTION,        "URI",                  NULL,   LDAP_OPT_URI}, /* replaces HOST/PORT */
        {0, ATTR_BOOL,          "REFERRALS",    NULL,   LDAP_BOOL_REFERRALS},
+#if 0
+       /* This should only be allowed via ldap_set_option(3) */
        {0, ATTR_BOOL,          "RESTART",              NULL,   LDAP_BOOL_RESTART},
+#endif
 
 #ifdef HAVE_CYRUS_SASL
-       {1, ATTR_STRING,        "SASL_MECH",            NULL,
+       {0, ATTR_STRING,        "SASL_MECH",            NULL,
                offsetof(struct ldapoptions, ldo_def_sasl_mech)},
-       {1, ATTR_STRING,        "SASL_REALM",           NULL,
+       {0, ATTR_STRING,        "SASL_REALM",           NULL,
                offsetof(struct ldapoptions, ldo_def_sasl_realm)},
        {1, ATTR_STRING,        "SASL_AUTHCID",         NULL,
                offsetof(struct ldapoptions, ldo_def_sasl_authcid)},
        {1, ATTR_STRING,        "SASL_AUTHZID",         NULL,
                offsetof(struct ldapoptions, ldo_def_sasl_authzid)},
        {0, ATTR_SASL,          "SASL_SECPROPS",        NULL,   LDAP_OPT_X_SASL_SECPROPS},
+       {0, ATTR_BOOL,          "SASL_NOCANON", NULL,   LDAP_BOOL_SASL_NOCANON},
+#endif
+
+#ifdef HAVE_GSSAPI
+       {0, ATTR_GSSAPI,"GSSAPI_SIGN",                  NULL,   LDAP_OPT_SIGN},
+       {0, ATTR_GSSAPI,"GSSAPI_ENCRYPT",               NULL,   LDAP_OPT_ENCRYPT},
+       {0, ATTR_GSSAPI,"GSSAPI_ALLOW_REMOTE_PRINCIPAL",NULL,   LDAP_OPT_X_GSSAPI_ALLOW_REMOTE_PRINCIPAL},
 #endif
 
 #ifdef HAVE_TLS
-       {0, ATTR_TLS,           "TLS",                  NULL,   LDAP_OPT_X_TLS},
-       {1, ATTR_TLS,           "TLS_CERT",             NULL,   LDAP_OPT_X_TLS_CERTFILE},
-       {1, ATTR_TLS,           "TLS_KEY",              NULL,   LDAP_OPT_X_TLS_KEYFILE},
-       {0, ATTR_TLS,           "TLS_CACERT",   NULL,   LDAP_OPT_X_TLS_CACERTFILE},
-       {0, ATTR_TLS,           "TLS_CACERTDIR",NULL,   LDAP_OPT_X_TLS_CACERTDIR},
-       {0, ATTR_TLS,           "TLS_REQCERT",  NULL,   LDAP_OPT_X_TLS_REQUIRE_CERT},
-       {0, ATTR_TLS,           "TLS_RANDFILE", NULL,   LDAP_OPT_X_TLS_RANDOM_FILE},
+       {1, ATTR_TLS,   "TLS_CERT",                     NULL,   LDAP_OPT_X_TLS_CERTFILE},
+       {1, ATTR_TLS,   "TLS_KEY",                      NULL,   LDAP_OPT_X_TLS_KEYFILE},
+       {0, ATTR_TLS,   "TLS_CACERT",           NULL,   LDAP_OPT_X_TLS_CACERTFILE},
+       {0, ATTR_TLS,   "TLS_CACERTDIR",        NULL,   LDAP_OPT_X_TLS_CACERTDIR},
+       {0, ATTR_TLS,   "TLS_REQCERT",          NULL,   LDAP_OPT_X_TLS_REQUIRE_CERT},
+       {0, ATTR_TLS,   "TLS_RANDFILE",         NULL,   LDAP_OPT_X_TLS_RANDOM_FILE},
+       {0, ATTR_TLS,   "TLS_CIPHER_SUITE",     NULL,   LDAP_OPT_X_TLS_CIPHER_SUITE},
+       {0, ATTR_TLS,   "TLS_PROTOCOL_MIN",     NULL,   LDAP_OPT_X_TLS_PROTOCOL_MIN},
+
+#ifdef HAVE_OPENSSL_CRL
+       {0, ATTR_TLS,   "TLS_CRLCHECK",         NULL,   LDAP_OPT_X_TLS_CRLCHECK},
+#endif
+#ifdef HAVE_GNUTLS
+       {0, ATTR_TLS,   "TLS_CRLFILE",                  NULL,   LDAP_OPT_X_TLS_CRLFILE},
+#endif
+        
 #endif
 
        {0, ATTR_NONE,          NULL,           NULL,   0}
 };
 
-#define MAX_LDAP_ATTR_LEN  sizeof("TLS_CACERTDIR")
+#define MAX_LDAP_ATTR_LEN  sizeof("GSSAPI_ALLOW_REMOTE_PRINCIPAL")
 #define MAX_LDAP_ENV_PREFIX_LEN 8
 
 static void openldap_ldap_init_w_conf(
        const char *file, int userconf )
 {
-       char linebuf[128];
+       char linebuf[ AC_LINE_MAX ];
        FILE *fp;
        int i;
        char *cmd, *opt;
@@ -115,12 +159,7 @@ static void openldap_ldap_init_w_conf(
                return;
        }
 
-#ifdef NEW_LOGGING
-       LDAP_LOG ( CONFIG, DETAIL1, 
-               "openldap_init_w_conf: trying %s\n", file, 0, 0 );
-#else
        Debug(LDAP_DEBUG_TRACE, "ldap_init: trying %s\n", file, 0, 0);
-#endif
 
        fp = fopen(file, "r");
        if(fp == NULL) {
@@ -128,11 +167,7 @@ static void openldap_ldap_init_w_conf(
                return;
        }
 
-#ifdef NEW_LOGGING
-       LDAP_LOG ( CONFIG, DETAIL1, "openldap_init_w_conf: using %s\n", file, 0, 0 );
-#else
        Debug(LDAP_DEBUG_TRACE, "ldap_init: using %s\n", file, 0, 0);
-#endif
 
        while((start = fgets(linebuf, sizeof(linebuf), fp)) != NULL) {
                /* skip lines starting with '#' */
@@ -195,10 +230,15 @@ static void openldap_ldap_init_w_conf(
 
                                break;
 
-                       case ATTR_INT:
+                       case ATTR_INT: {
+                               char *next;
+                               long l;
                                p = &((char *) gopts)[attrs[i].offset];
-                               * (int*) p = atoi(opt);
-                               break;
+                               l = strtol( opt, &next, 10 );
+                               if ( next != opt && next[ 0 ] == '\0' ) {
+                                       * (int*) p = l;
+                               }
+                               } break;
 
                        case ATTR_KV: {
                                        const struct ol_keyvalue *kv;
@@ -226,6 +266,11 @@ static void openldap_ldap_init_w_conf(
                        case ATTR_SASL:
 #ifdef HAVE_CYRUS_SASL
                                ldap_int_sasl_config( gopts, attrs[i].offset, opt );
+#endif
+                               break;
+                       case ATTR_GSSAPI:
+#ifdef HAVE_GSSAPI
+                               ldap_int_gssapi_config( gopts, attrs[i].offset, opt );
 #endif
                                break;
                        case ATTR_TLS:
@@ -233,6 +278,24 @@ static void openldap_ldap_init_w_conf(
                                ldap_int_tls_config( NULL, attrs[i].offset, opt );
 #endif
                                break;
+                       case ATTR_OPT_TV: {
+                               struct timeval tv;
+                               char *next;
+                               tv.tv_usec = 0;
+                               tv.tv_sec = strtol( opt, &next, 10 );
+                               if ( next != opt && next[ 0 ] == '\0' && tv.tv_sec > 0 ) {
+                                       (void)ldap_set_option( NULL, attrs[i].offset, (const void *)&tv );
+                               }
+                               } break;
+                       case ATTR_OPT_INT: {
+                               long l;
+                               char *next;
+                               l = strtol( opt, &next, 10 );
+                               if ( next != opt && next[ 0 ] == '\0' && l > 0 && (long)((int)l) == l ) {
+                                       int v = (int)l;
+                                       (void)ldap_set_option( NULL, attrs[i].offset, (const void *)&v );
+                               }
+                               } break;
                        }
 
                        break;
@@ -260,22 +323,12 @@ static void openldap_ldap_init_w_userconf(const char *file)
        home = getenv("HOME");
 
        if (home != NULL) {
-#ifdef NEW_LOGGING
-       LDAP_LOG ( CONFIG, ARGS, 
-               "openldap_init_w_userconf: HOME env is %s\n", home, 0, 0 );
-#else
                Debug(LDAP_DEBUG_TRACE, "ldap_init: HOME env is %s\n",
                      home, 0, 0);
-#endif
                path = LDAP_MALLOC(strlen(home) + strlen(file) + sizeof( LDAP_DIRSEP "."));
        } else {
-#ifdef NEW_LOGGING
-       LDAP_LOG ( CONFIG, ARGS, "openldap_init_w_userconf: HOME env is NULL\n",
-               0, 0, 0 );
-#else
                Debug(LDAP_DEBUG_TRACE, "ldap_init: HOME env is NULL\n",
                      0, 0, 0);
-#endif
        }
 
        if(home != NULL && path != NULL) {
@@ -374,11 +427,34 @@ static void openldap_ldap_init_w_env(
                        ldap_int_sasl_config( gopts, attrs[i].offset, value );
 #endif                         
                        break;
+               case ATTR_GSSAPI:
+#ifdef HAVE_GSSAPI
+                       ldap_int_gssapi_config( gopts, attrs[i].offset, value );
+#endif
+                       break;
                case ATTR_TLS:
 #ifdef HAVE_TLS
                        ldap_int_tls_config( NULL, attrs[i].offset, value );
 #endif                         
                        break;
+               case ATTR_OPT_TV: {
+                       struct timeval tv;
+                       char *next;
+                       tv.tv_usec = 0;
+                       tv.tv_sec = strtol( value, &next, 10 );
+                       if ( next != value && next[ 0 ] == '\0' && tv.tv_sec > 0 ) {
+                               (void)ldap_set_option( NULL, attrs[i].offset, (const void *)&tv );
+                       }
+                       } break;
+               case ATTR_OPT_INT: {
+                       long l;
+                       char *next;
+                       l = strtol( value, &next, 10 );
+                       if ( next != value && next[ 0 ] == '\0' && l > 0 && (long)((int)l) == l ) {
+                               int v = (int)l;
+                               (void)ldap_set_option( NULL, attrs[i].offset, (const void *)&v );
+                       }
+                       } break;
                }
        }
 }
@@ -399,6 +475,11 @@ ldap_int_destroy_global_options(void)
 {
        struct ldapoptions *gopts = LDAP_INT_GLOBAL_OPT();
 
+       if ( gopts == NULL )
+               return;
+
+       gopts->ldo_valid = LDAP_UNINITIALIZED;
+
        if ( gopts->ldo_defludp ) {
                ldap_free_urllist( gopts->ldo_defludp );
                gopts->ldo_defludp = NULL;
@@ -406,6 +487,22 @@ ldap_int_destroy_global_options(void)
 #if defined(HAVE_WINSOCK) || defined(HAVE_WINSOCK2)
        WSACleanup( );
 #endif
+
+#if defined(HAVE_TLS) || defined(HAVE_CYRUS_SASL)
+       if ( ldap_int_hostname ) {
+               LDAP_FREE( ldap_int_hostname );
+               ldap_int_hostname = NULL;
+       }
+#endif
+#ifdef HAVE_CYRUS_SASL
+       if ( gopts->ldo_def_sasl_authcid ) {
+               LDAP_FREE( gopts->ldo_def_sasl_authcid );
+               gopts->ldo_def_sasl_authcid = NULL;
+       }
+#endif
+#ifdef HAVE_TLS
+       ldap_int_tls_destroy( gopts );
+#endif
 }
 
 /* 
@@ -413,6 +510,15 @@ ldap_int_destroy_global_options(void)
  */
 void ldap_int_initialize_global_options( struct ldapoptions *gopts, int *dbglvl )
 {
+#ifdef LDAP_R_COMPILE
+       LDAP_PVT_MUTEX_FIRSTCREATE(gopts->ldo_mutex);
+#endif
+       LDAP_MUTEX_LOCK( &gopts->ldo_mutex );
+       if (gopts->ldo_valid == LDAP_INITIALIZED) {
+               /* someone else got here first */
+               LDAP_MUTEX_UNLOCK( &gopts->ldo_mutex );
+               return;
+       }
        if (dbglvl)
            gopts->ldo_debug = *dbglvl;
        else
@@ -423,8 +529,8 @@ void ldap_int_initialize_global_options( struct ldapoptions *gopts, int *dbglvl
        gopts->ldo_timelimit = LDAP_NO_LIMIT;
        gopts->ldo_sizelimit = LDAP_NO_LIMIT;
 
-       gopts->ldo_tm_api = (struct timeval *)NULL;
-       gopts->ldo_tm_net = (struct timeval *)NULL;
+       gopts->ldo_tm_api.tv_sec = -1;
+       gopts->ldo_tm_net.tv_sec = -1;
 
        /* ldo_defludp will be freed by the termination handler
         */
@@ -466,12 +572,21 @@ void ldap_int_initialize_global_options( struct ldapoptions *gopts, int *dbglvl
                SASL_SEC_NOPLAINTEXT | SASL_SEC_NOANONYMOUS;
 #endif
 
+#ifdef HAVE_TLS
+       gopts->ldo_tls_connect_cb = NULL;
+       gopts->ldo_tls_connect_arg = NULL;
+       gopts->ldo_tls_require_cert = LDAP_OPT_X_TLS_DEMAND;
+#endif
+       gopts->ldo_keepalive_probes = 0;
+       gopts->ldo_keepalive_interval = 0;
+       gopts->ldo_keepalive_idle = 0;
+
        gopts->ldo_valid = LDAP_INITIALIZED;
+       LDAP_MUTEX_UNLOCK( &gopts->ldo_mutex );
        return;
 }
 
-#if defined(LDAP_API_FEATURE_X_OPENLDAP_V2_KBIND) \
-       || defined(HAVE_TLS) || defined(HAVE_CYRUS_SASL)
+#if defined(HAVE_TLS) || defined(HAVE_CYRUS_SASL)
 char * ldap_int_hostname = NULL;
 #endif
 
@@ -483,6 +598,8 @@ void ldap_int_initialize( struct ldapoptions *gopts, int *dbglvl )
 
        ldap_int_error_init();
 
+       ldap_int_utils_init();
+
 #ifdef HAVE_WINSOCK2
 {      WORD wVersionRequested;
        WSADATA wsaData;
@@ -509,7 +626,7 @@ void ldap_int_initialize( struct ldapoptions *gopts, int *dbglvl )
            return; 
        }
 }      /* The WinSock DLL is acceptable. Proceed. */
-#elif HAVE_WINSOCK
+#elif defined(HAVE_WINSOCK)
 {      WSADATA wsaData;
        if ( WSAStartup( 0x0101, &wsaData ) != 0 ) {
            return;
@@ -517,14 +634,21 @@ void ldap_int_initialize( struct ldapoptions *gopts, int *dbglvl )
 }
 #endif
 
-#if defined(LDAP_API_FEATURE_X_OPENLDAP_V2_KBIND) \
-       || defined(HAVE_TLS) || defined(HAVE_CYRUS_SASL)
-       ldap_int_hostname = ldap_pvt_get_fqdn( ldap_int_hostname );
+#if defined(HAVE_TLS) || defined(HAVE_CYRUS_SASL)
+       {
+               char    *name = ldap_int_hostname;
+
+               ldap_int_hostname = ldap_pvt_get_fqdn( name );
+
+               if ( name != NULL && name != ldap_int_hostname ) {
+                       LDAP_FREE( name );
+               }
+       }
 #endif
-       ldap_int_utils_init();
 
-       if ( ldap_int_tblsize == 0 )
-               ldap_int_ip_init();
+#ifndef HAVE_POLL
+       if ( ldap_int_tblsize == 0 ) ldap_int_ip_init();
+#endif
 
        ldap_int_initialize_global_options(gopts, NULL);
 
@@ -541,65 +665,45 @@ void ldap_int_initialize( struct ldapoptions *gopts, int *dbglvl )
                if( user == NULL ) user = getenv("LOGNAME");
 
                if( user != NULL ) {
-                       gopts->ldo_def_sasl_authcid = user;
+                       gopts->ldo_def_sasl_authcid = LDAP_STRDUP( user );
                }
     }
 #endif
 
        openldap_ldap_init_w_sysconf(LDAP_CONF_FILE);
+
+#ifdef HAVE_GETEUID
+       if ( geteuid() != getuid() )
+               return;
+#endif
+
        openldap_ldap_init_w_userconf(LDAP_USERRC_FILE);
 
        {
                char *altfile = getenv(LDAP_ENV_PREFIX "CONF");
 
                if( altfile != NULL ) {
-#ifdef NEW_LOGGING
-                       LDAP_LOG ( CONFIG, DETAIL1, 
-                               "openldap_init_w_userconf: %sCONF env is %s\n",
-                               LDAP_ENV_PREFIX, altfile, 0 );
-#else
                        Debug(LDAP_DEBUG_TRACE, "ldap_init: %s env is %s\n",
                              LDAP_ENV_PREFIX "CONF", altfile, 0);
-#endif
                        openldap_ldap_init_w_sysconf( altfile );
                }
                else
-#ifdef NEW_LOGGING
-                       LDAP_LOG ( CONFIG, DETAIL1, 
-                               "openldap_init_w_userconf: %sCONF env is NULL\n",
-                               LDAP_ENV_PREFIX, 0, 0 );
-#else
                        Debug(LDAP_DEBUG_TRACE, "ldap_init: %s env is NULL\n",
                              LDAP_ENV_PREFIX "CONF", 0, 0);
-#endif
        }
 
        {
                char *altfile = getenv(LDAP_ENV_PREFIX "RC");
 
                if( altfile != NULL ) {
-#ifdef NEW_LOGGING
-                       LDAP_LOG ( CONFIG, DETAIL1, 
-                               "openldap_init_w_userconf: %sRC env is %s\n",
-                               LDAP_ENV_PREFIX, altfile, 0 );
-#else
                        Debug(LDAP_DEBUG_TRACE, "ldap_init: %s env is %s\n",
                              LDAP_ENV_PREFIX "RC", altfile, 0);
-#endif
                        openldap_ldap_init_w_userconf( altfile );
                }
                else
-#ifdef NEW_LOGGING
-                       LDAP_LOG ( CONFIG, DETAIL1, 
-                               "openldap_init_w_userconf: %sRC env is NULL\n",
-                               LDAP_ENV_PREFIX, 0, 0 );
-#else
                        Debug(LDAP_DEBUG_TRACE, "ldap_init: %s env is NULL\n",
                              LDAP_ENV_PREFIX "RC", 0, 0);
-#endif
        }
 
        openldap_ldap_init_w_env(gopts, NULL);
-
-       ldap_int_sasl_init();
 }