]> git.sur5r.net Git - openldap/blobdiff - libraries/libldap/init.c
ITS#399: timelimit/timeout handling
[openldap] / libraries / libldap / init.c
index b4f82f95c7dc253f621212bf768c7216de085581..46bae1239f93f1dcaf7f4ec0952eefdc87fa217e 100644 (file)
@@ -1,3 +1,4 @@
+/* $OpenLDAP$ */
 /*
  * Copyright 1998-1999 The OpenLDAP Foundation, All Rights Reserved.
  * COPYING RESTRICTIONS APPLY, see COPYRIGHT file
@@ -5,7 +6,7 @@
 #include "portable.h"
 
 #include <stdio.h>
-#include <stdlib.h>
+#include <ac/stdlib.h>
 
 #include <ac/socket.h>
 #include <ac/string.h>
@@ -13,7 +14,7 @@
 #include <ac/time.h>
 
 #include "ldap-int.h"
-#include "ldapconfig.h"
+#include "ldap_defaults.h"
 
 struct ldapoptions ldap_int_global_options =
        { LDAP_UNINITIALIZED, LDAP_DEBUG_NONE };  
@@ -26,6 +27,8 @@ struct ldapoptions ldap_int_global_options =
 #define ATTR_INT       2
 #define ATTR_KV                3
 #define ATTR_STRING    4
+#define ATTR_TLS       5
+#define ATTR_URIS      6
 
 struct ol_keyvalue {
        const char *            key;
@@ -41,33 +44,43 @@ static const struct ol_keyvalue deref_kv[] = {
 };
 
 static const struct ol_attribute {
+       int                     useronly;
        int                     type;
        const char *    name;
        const void *    data;
        size_t          offset;
 } attrs[] = {
-       {ATTR_KV,               "DEREF",        deref_kv, /* or &deref_kv[0] */
+       {0, ATTR_KV,            "DEREF",        deref_kv, /* or &deref_kv[0] */
                offsetof(struct ldapoptions, ldo_deref)},
-       {ATTR_INT,              "SIZELIMIT",    NULL,
+       {0, ATTR_INT,           "SIZELIMIT",    NULL,
                offsetof(struct ldapoptions, ldo_sizelimit)},
-       {ATTR_INT,              "TIMELIMIT",    NULL,
+       {0, ATTR_INT,           "TIMELIMIT",    NULL,
                offsetof(struct ldapoptions, ldo_timelimit)},
-       {ATTR_STRING,   "BASE",                 NULL,
+       {0, ATTR_STRING,        "BASE",                 NULL,
                offsetof(struct ldapoptions, ldo_defbase)},
-       {ATTR_STRING,   "HOST",                 NULL,
-               offsetof(struct ldapoptions, ldo_defhost)},
-       {ATTR_INT,              "PORT",                 NULL,
+       {0, ATTR_INT,           "PORT",                 NULL,
                offsetof(struct ldapoptions, ldo_defport)},
-       {ATTR_BOOL,             "REFERRALS",    NULL,   LDAP_BOOL_REFERRALS},
-       {ATTR_BOOL,             "RESTART",      NULL,   LDAP_BOOL_RESTART},
-       {ATTR_BOOL,             "DNS",          NULL,   LDAP_BOOL_DNS},
-       {ATTR_NONE,             NULL,           NULL,   0}
+       /* **** keep this around for backward compatibility */
+       {0, ATTR_URIS,          "HOST",                 NULL,   1},
+       /* **** */
+       {0, ATTR_URIS,          "URI",                  NULL,   0},
+       {0, ATTR_BOOL,          "REFERRALS",    NULL,   LDAP_BOOL_REFERRALS},
+       {0, ATTR_BOOL,          "RESTART",              NULL,   LDAP_BOOL_RESTART},
+       {0, ATTR_BOOL,          "DNS",                  NULL,   LDAP_BOOL_DNS},
+       {0, ATTR_TLS,           "TLS",                  NULL,   LDAP_OPT_X_TLS},
+       {0, ATTR_TLS,           "TLS_CERT",             NULL,   LDAP_OPT_X_TLS_CERTFILE},
+       {0, ATTR_TLS,           "TLS_KEY",              NULL,   LDAP_OPT_X_TLS_KEYFILE},
+       {0, ATTR_TLS,           "TLS_CACERT",   NULL,   LDAP_OPT_X_TLS_CACERTFILE},
+       {0, ATTR_TLS,           "TLS_CACERTDIR",NULL,   LDAP_OPT_X_TLS_CACERTDIR},
+       {0, ATTR_TLS,           "TLS_REQCERT",  NULL,   LDAP_OPT_X_TLS_REQUIRE_CERT},
+       {0, ATTR_NONE,          NULL,           NULL,   0}
 };
 
-#define MAX_LDAP_ATTR_LEN  sizeof("SIZELIMIT")
+#define MAX_LDAP_ATTR_LEN  sizeof("TLS_CACERTDIR")
 #define MAX_LDAP_ENV_PREFIX_LEN 8
 
-static void openldap_ldap_init_w_conf(const char *file)
+static void openldap_ldap_init_w_conf(
+       const char *file, int userconf )
 {
        char linebuf[128];
        FILE *fp;
@@ -125,6 +138,10 @@ static void openldap_ldap_init_w_conf(const char *file)
                for(i=0; attrs[i].type != ATTR_NONE; i++) {
                        void *p;
 
+                       if( !userconf && !attrs[i].useronly ) {
+                               continue;
+                       }
+
                        if(strcasecmp(cmd, attrs[i].name) != 0) {
                                continue;
                        }
@@ -168,6 +185,18 @@ static void openldap_ldap_init_w_conf(const char *file)
                                if (* (char**) p != NULL) LDAP_FREE(* (char**) p);
                                * (char**) p = LDAP_STRDUP(opt);
                                break;
+                       case ATTR_TLS:
+#ifdef HAVE_TLS
+                               ldap_pvt_tls_config( &gopts, attrs[i].offset, opt );
+#endif
+                               break;
+                       case ATTR_URIS:
+                               if (attrs[i].offset == 0) {
+                                       ldap_set_option( NULL, LDAP_OPT_URI, opt );
+                               } else {
+                                       ldap_set_option( NULL, LDAP_OPT_HOST_NAME, opt );
+                               }
+                               break;
                        }
                }
        }
@@ -175,6 +204,11 @@ static void openldap_ldap_init_w_conf(const char *file)
        fclose(fp);
 }
 
+static void openldap_ldap_init_w_sysconf(const char *file)
+{
+       openldap_ldap_init_w_conf( file, 0 );
+}
+
 static void openldap_ldap_init_w_userconf(const char *file)
 {
        char *home;
@@ -198,11 +232,11 @@ static void openldap_ldap_init_w_userconf(const char *file)
 
                /* try ~/file */
                sprintf(path, "%s/%s", home, file);
-               openldap_ldap_init_w_conf(path);
+               openldap_ldap_init_w_conf(path, 1);
 
                /* try ~/.file */
                sprintf(path, "%s/.%s", home, file);
-               openldap_ldap_init_w_conf(path);
+               openldap_ldap_init_w_conf(path, 1);
        }
 
        if(path != NULL) {
@@ -210,7 +244,7 @@ static void openldap_ldap_init_w_userconf(const char *file)
        }
 
        /* try file */
-       openldap_ldap_init_w_conf(file);
+       openldap_ldap_init_w_conf(file, 1);
 }
 
 static void openldap_ldap_init_w_env(const char *prefix)
@@ -222,7 +256,7 @@ static void openldap_ldap_init_w_env(const char *prefix)
        char *value;
 
        if (prefix == NULL) {
-               prefix = DEFAULT_LDAP_ENV_PREFIX;
+               prefix = LDAP_ENV_PREFIX;
        }
 
        strncpy(buf, prefix, MAX_LDAP_ENV_PREFIX_LEN);
@@ -279,6 +313,18 @@ static void openldap_ldap_init_w_env(const char *prefix)
                                * (char**) p = LDAP_STRDUP(value);
                        }
                        break;
+               case ATTR_TLS:
+#ifdef HAVE_TLS
+                       ldap_pvt_tls_config( &gopts, attrs[i].offset, value );
+#endif                         
+                       break;
+               case ATTR_URIS:
+                       if (attrs[i].offset == 0) {
+                               ldap_set_option( NULL, LDAP_OPT_URI, value );
+                       } else {
+                               ldap_set_option( NULL, LDAP_OPT_HOST_NAME, value );
+                       }
+                       break;
                }
        }
 }
@@ -291,14 +337,24 @@ void ldap_int_initialize( void )
 
        ldap_int_utils_init();
 
+#ifdef HAVE_TLS
+       ldap_pvt_tls_init();
+#endif
+
+       if ( ldap_int_tblsize == 0 )
+               ldap_int_ip_init();
+
+       gopts.ldo_debug = 0;
+
        gopts.ldo_version =     LDAP_VERSION2;
        gopts.ldo_deref =       LDAP_DEREF_NEVER;
        gopts.ldo_timelimit = LDAP_NO_LIMIT;
        gopts.ldo_sizelimit = LDAP_NO_LIMIT;
 
-       gopts.ldo_debug = 0;
+       gopts.ldo_tm_api = (struct timeval *)NULL;
+       gopts.ldo_tm_net = (struct timeval *)NULL;
 
-       gopts.ldo_defhost = LDAP_STRDUP("localhost");
+       ldap_url_parselist(&gopts.ldo_defludp, "ldap://localhost/");
        gopts.ldo_defport = LDAP_PORT;
 
        gopts.ldo_refhoplimit = LDAP_DEFAULT_REFHOPLIMIT;
@@ -307,25 +363,29 @@ void ldap_int_initialize( void )
 
        LDAP_BOOL_SET(&gopts, LDAP_BOOL_REFERRALS);
 
+#ifdef HAVE_TLS
+       gopts.ldo_tls_ctx = NULL;
+#endif
+
        gopts.ldo_valid = LDAP_INITIALIZED;
 
        if( getenv("LDAPNOINIT") != NULL ) {
                return;
        }
 
-       openldap_ldap_init_w_conf(DEFAULT_LDAP_CONF_FILE);
-       openldap_ldap_init_w_userconf(DEFAULT_LDAP_USERRC_FILE);
+       openldap_ldap_init_w_sysconf(LDAP_CONF_FILE);
+       openldap_ldap_init_w_userconf(LDAP_USERRC_FILE);
 
        {
-               char *altfile = getenv("LDAPCONF");
+               char *altfile = getenv(LDAP_ENV_PREFIX "CONF");
 
                if( altfile != NULL ) {
-                       openldap_ldap_init_w_conf( altfile );
+                       openldap_ldap_init_w_sysconf( altfile );
                }
        }
 
        {
-               char *altfile = getenv("LDAPRC");
+               char *altfile = getenv(LDAP_ENV_PREFIX "RC");
 
                if( altfile != NULL ) {
                        openldap_ldap_init_w_userconf( altfile );