]> git.sur5r.net Git - openldap/blobdiff - servers/slapd/back-meta/search.c
fix ITS#4071
[openldap] / servers / slapd / back-meta / search.c
index 570d9deb5f0e10eb852b26cc2a77c6c273a3aeb9..544bf6e31f5f2c0a9ebe69d01b505cebadf15221 100644 (file)
@@ -244,8 +244,9 @@ meta_back_search( Operation *op, SlapReply *rs )
        LDAPMessage     *res = NULL, *e;
        int             rc = 0, sres = LDAP_SUCCESS;
        char            *matched = NULL;
-       int             i, last = 0, ncandidates = 0,
+       int             last = 0, ncandidates = 0,
                        initial_candidates = 0, candidate_match = 0;
+       long            i;
        dncookie        dc;
        int             is_ok = 0;
        void            *savepriv;
@@ -272,17 +273,17 @@ meta_back_search( Operation *op, SlapReply *rs )
                metasingleconn_t        *msc = &mc->mc_conns[ i ];
 
                candidates[ i ].sr_msgid = -1;
-
-               if ( candidates[ i ].sr_tag != META_CANDIDATE ) {
-                       continue;
-               }
-
-               candidates[ i ].sr_err = LDAP_SUCCESS;
                candidates[ i ].sr_matched = NULL;
                candidates[ i ].sr_text = NULL;
                candidates[ i ].sr_ref = NULL;
                candidates[ i ].sr_ctrls = NULL;
 
+               if ( candidates[ i ].sr_tag != META_CANDIDATE
+                       || candidates[ i ].sr_err != LDAP_SUCCESS )
+               {
+                       continue;
+               }
+
                switch ( meta_back_search_start( op, rs, &dc, msc, i, candidates ) )
                {
                case 0:
@@ -320,10 +321,33 @@ meta_back_search( Operation *op, SlapReply *rs )
 #endif
 
        if ( initial_candidates == 0 ) {
-               send_ldap_error( op, rs, LDAP_NO_SUCH_OBJECT, NULL );
-               /* FIXME: find a way to look up the best match */
-
+               /* NOTE: here we are not sending any matchedDN;
+                * this is intended, because if the back-meta
+                * is serving this search request, but no valid
+                * candidate could be looked up, it means that
+                * there is a hole in the mapping of the targets
+                * and thus no knowledge of any remote superior
+                * is available */
+               Debug( LDAP_DEBUG_ANY, "%s meta_back_search: "
+                       "base=\"%s\" scope=%d: "
+                       "no candidate could be selected\n",
+                       op->o_log_prefix, op->o_req_dn.bv_val,
+                       op->ors_scope );
+
+               /* FIXME: we're sending the first error we encounter;
+                * maybe we should pick the worst... */
                rc = LDAP_NO_SUCH_OBJECT;
+               for ( i = 0; i < mi->mi_ntargets; i++ ) {
+                       if ( candidates[ i ].sr_tag == META_CANDIDATE
+                               && candidates[ i ].sr_err != LDAP_SUCCESS )
+                       {
+                               rc = candidates[ i ].sr_err;
+                               break;
+                       }
+               }
+
+               send_ldap_error( op, rs, rc, NULL );
+
                goto finish;
        }
 
@@ -334,7 +358,6 @@ meta_back_search( Operation *op, SlapReply *rs )
 
        if ( op->ors_tlimit != SLAP_NO_LIMIT ) {
                stoptime = op->o_time + op->ors_tlimit;
-               tv.tv_sec = 0;
        }
 
        /*
@@ -607,11 +630,11 @@ really_bad:;
                                sres = slap_map_api2result( rs );
 
                                snprintf( buf, sizeof( buf ),
-                                       "%s meta_back_search[%d] "
-                                       "match=\"%s\" err=%d\n",
+                                       "%s meta_back_search[%ld] "
+                                       "match=\"%s\" err=%ld\n",
                                        op->o_log_prefix, i,
                                        candidates[ i ].sr_matched ? candidates[ i ].sr_matched : "",
-                                       candidates[ i ].sr_err );
+                                       (long) candidates[ i ].sr_err );
                                Debug( LDAP_DEBUG_ANY, "%s", buf, 0, 0 );
 
                                switch ( sres ) {
@@ -679,8 +702,7 @@ really_bad:;
                }
 
                if ( gotit == 0 ) {
-                       tv.tv_sec = 0;
-                        tv.tv_usec = 100000;   /* 0.1 s */
+                       LDAP_BACK_TV_SET( &tv );
                         ldap_pvt_thread_yield();
 
                } else {
@@ -703,7 +725,7 @@ really_bad:;
         * FIXME: only the last one gets caught!
         */
        savepriv = op->o_private;
-       op->o_private = (void *)mi->mi_ntargets;
+       op->o_private = (void *)(long)mi->mi_ntargets;
        if ( candidate_match > 0 ) {
                struct berval   pmatched = BER_BVNULL;
 
@@ -747,7 +769,7 @@ really_bad:;
                }
 
        } else if ( sres == LDAP_NO_SUCH_OBJECT ) {
-               matched = ch_strdup( op->o_bd->be_suffix[ 0 ].bv_val );
+               matched = op->o_bd->be_suffix[ 0 ].bv_val;
        }
 
 #if 0
@@ -792,7 +814,7 @@ really_bad:;
        rs->sr_ref = NULL;
 
 finish:;
-       if ( matched ) {
+       if ( matched && matched != op->o_bd->be_suffix[ 0 ].bv_val ) {
                op->o_tmpfree( matched, op->o_tmpmemctx );
        }
 
@@ -844,9 +866,11 @@ meta_send_entry(
        Entry                   ent = { 0 };
        BerElement              ber = *e->lm_ber;
        Attribute               *attr, **attrp;
-       struct berval           *bv, bdn;
+       struct berval           bdn,
+                               dn = BER_BVNULL;
        const char              *text;
        dncookie                dc;
+       int                     rc;
 
        if ( ber_scanf( &ber, "{m{", &bdn ) == LBER_ERROR ) {
                return LDAP_DECODING_ERROR;
@@ -860,7 +884,7 @@ meta_send_entry(
        dc.rs = rs;
        dc.ctx = "searchResult";
 
-       rs->sr_err = ldap_back_dn_massage( &dc, &bdn, &ent.e_name );
+       rs->sr_err = ldap_back_dn_massage( &dc, &bdn, &dn );
        if ( rs->sr_err != LDAP_SUCCESS) {
                return rs->sr_err;
        }
@@ -872,9 +896,14 @@ meta_send_entry(
         * 
         * FIXME: should we log anything, or delegate to dnNormalize?
         */
-       if ( dnNormalize( 0, NULL, NULL, &ent.e_name, &ent.e_nname,
-               op->o_tmpmemctx ) != LDAP_SUCCESS )
-       {
+       rc = dnPrettyNormal( NULL, &dn, &ent.e_name, &ent.e_nname,
+               op->o_tmpmemctx );
+       if ( dn.bv_val != bdn.bv_val ) {
+               free( dn.bv_val );
+       }
+       BER_BVZERO( &dn );
+
+       if ( rc != LDAP_SUCCESS ) {
                return LDAP_INVALID_DN_SYNTAX;
        }
 
@@ -890,7 +919,9 @@ meta_send_entry(
 
        dc.ctx = "searchAttrDN";
        while ( ber_scanf( &ber, "{m", &a ) != LBER_ERROR ) {
-               int             last = 0;
+               int                             last = 0;
+               slap_syntax_validate_func       *validate;
+               slap_syntax_transform_func      *pretty;
 
                ldap_back_map( &mi->mi_targets[ target ].mt_rwmap.rwm_at, 
                                &a, &mapped, BACKLDAP_REMAP );
@@ -906,8 +937,8 @@ meta_send_entry(
                attr->a_desc = NULL;
                if ( slap_bv2ad( &mapped, &attr->a_desc, &text )
                                != LDAP_SUCCESS) {
-                       if ( slap_bv2undef_ad( &mapped, &attr->a_desc, &text ) 
-                                       != LDAP_SUCCESS )
+                       if ( slap_bv2undef_ad( &mapped, &attr->a_desc, &text,
+                               SLAP_AD_PROXIED ) != LDAP_SUCCESS )
                        {
                                char    buf[ SLAP_TEXT_BUFLEN ];
 
@@ -950,10 +981,24 @@ meta_send_entry(
                {
                        attr->a_vals = (struct berval *)&slap_dummy_bv;
 
-               } else if ( attr->a_desc == slap_schema.si_ad_objectClass
+               } else {
+                       for ( last = 0; !BER_BVISNULL( &attr->a_vals[ last ] ); ++last )
+                               ;
+               }
+
+               validate = attr->a_desc->ad_type->sat_syntax->ssyn_validate;
+               pretty = attr->a_desc->ad_type->sat_syntax->ssyn_pretty;
+
+               if ( !validate && !pretty ) {
+                       attr->a_nvals = NULL;
+                       attr_free( attr );
+                       goto next_attr;
+               }
+
+               if ( attr->a_desc == slap_schema.si_ad_objectClass
                                || attr->a_desc == slap_schema.si_ad_structuralObjectClass )
                {
-                       for ( last = 0; !BER_BVISNULL( &attr->a_vals[ last ] ); ++last );
+                       struct berval   *bv;
 
                        for ( bv = attr->a_vals; !BER_BVISNULL( bv ); bv++ ) {
                                ldap_back_map( &mi->mi_targets[ target ].mt_rwmap.rwm_oc,
@@ -991,10 +1036,50 @@ meta_send_entry(
 
                } else if ( attr->a_desc == slap_schema.si_ad_ref ) {
                        ldap_back_referral_result_rewrite( &dc, attr->a_vals );
+
+               } else {
+                       int     i;
+
+                       for ( i = 0; i < last; i++ ) {
+                               struct berval   pval;
+                               int             rc;
+
+                               if ( pretty ) {
+                                       rc = pretty( attr->a_desc->ad_type->sat_syntax,
+                                               &attr->a_vals[i], &pval, NULL );
+
+                               } else {
+                                       rc = validate( attr->a_desc->ad_type->sat_syntax,
+                                               &attr->a_vals[i] );
+                               }
+
+                               if ( rc ) {
+                                       LBER_FREE( attr->a_vals[i].bv_val );
+                                       if ( --last == i ) {
+                                               BER_BVZERO( &attr->a_vals[ i ] );
+                                               break;
+                                       }
+                                       attr->a_vals[i] = attr->a_vals[last];
+                                       BER_BVZERO( &attr->a_vals[last] );
+                                       i--;
+                                       continue;
+                               }
+
+                               if ( pretty ) {
+                                       LBER_FREE( attr->a_vals[i].bv_val );
+                                       attr->a_vals[i] = pval;
+                               }
+                       }
+
+                       if ( last == 0 && attr->a_vals != &slap_dummy_bv ) {
+                               attr_free( attr );
+                               goto next_attr;
+                       }
                }
 
                if ( last && attr->a_desc->ad_type->sat_equality &&
-                       attr->a_desc->ad_type->sat_equality->smr_normalize ) {
+                       attr->a_desc->ad_type->sat_equality->smr_normalize )
+               {
                        int i;
 
                        attr->a_nvals = ch_malloc( ( last + 1 ) * sizeof( struct berval ) );
@@ -1014,6 +1099,7 @@ meta_send_entry(
 
                *attrp = attr;
                attrp = &attr->a_next;
+next_attr:;
        }
        rs->sr_entry = &ent;
        rs->sr_attrs = op->ors_attrs;
@@ -1023,9 +1109,7 @@ meta_send_entry(
        rs->sr_attrs = NULL;
        
        if ( !BER_BVISNULL( &ent.e_name ) ) {
-               if ( ent.e_name.bv_val != bdn.bv_val ) {
-                       free( ent.e_name.bv_val );
-               }
+               free( ent.e_name.bv_val );
                BER_BVZERO( &ent.e_name );
        }
        if ( !BER_BVISNULL( &ent.e_nname ) ) {