]> git.sur5r.net Git - openldap/blobdiff - servers/slapd/back-sql/bind.c
drop stored procedures
[openldap] / servers / slapd / back-sql / bind.c
index 45b60659f034758801a63131a95544c10877cbdd..0bc12e5a24c7475f2dfdb53407c06f647258487d 100644 (file)
@@ -32,10 +32,9 @@ int
 backsql_bind( Operation *op, SlapReply *rs )
 {
        SQLHDBC                 dbh = SQL_NULL_HDBC;
-       AttributeDescription    *password = slap_schema.si_ad_userPassword;
-       Entry                   *e, user_entry;
+       Entry                   e = { 0 };
        Attribute               *a;
-       backsql_srch_info       bsi;
+       backsql_srch_info       bsi = { 0 };
        AttributeName           anlist[2];
        int                     rc;
  
@@ -45,7 +44,7 @@ backsql_bind( Operation *op, SlapReply *rs )
                ber_dupbv( &op->oq_bind.rb_edn, be_root_dn( op->o_bd ) );
                Debug( LDAP_DEBUG_TRACE, "<==backsql_bind() root bind\n", 
                                0, 0, 0 );
-               return 0;
+               return LDAP_SUCCESS;
        }
 
        ber_dupbv( &op->oq_bind.rb_edn, &op->o_req_ndn );
@@ -54,7 +53,7 @@ backsql_bind( Operation *op, SlapReply *rs )
                rs->sr_err = LDAP_STRONG_AUTH_NOT_SUPPORTED;
                rs->sr_text = "authentication method not supported"; 
                send_ldap_result( op, rs );
-               return 1;
+               return rs->sr_err;
        }
 
        /*
@@ -68,45 +67,33 @@ backsql_bind( Operation *op, SlapReply *rs )
 
                rs->sr_text = ( rs->sr_err == LDAP_OTHER )
                        ? "SQL-backend error" : NULL;
-               send_ldap_result( op, rs );
-               return 1;
+               goto error_return;
        }
 
-       anlist[0].an_name = password->ad_cname;
-       anlist[0].an_desc = password;
+       anlist[0].an_name = slap_schema.si_ad_userPassword->ad_cname;
+       anlist[0].an_desc = slap_schema.si_ad_userPassword;
        anlist[1].an_name.bv_val = NULL;
 
+       bsi.bsi_e = &e;
        rc = backsql_init_search( &bsi, &op->o_req_ndn, LDAP_SCOPE_BASE, 
                        SLAP_NO_LIMIT, SLAP_NO_LIMIT,
                        (time_t)(-1), NULL, dbh, op, rs, anlist,
-                       BACKSQL_ISF_GET_ID );
+                       BACKSQL_ISF_GET_ENTRY );
        if ( rc != LDAP_SUCCESS ) {
                Debug( LDAP_DEBUG_TRACE, "backsql_bind(): "
                        "could not retrieve bindDN ID - no such entry\n", 
                        0, 0, 0 );
                rs->sr_err = LDAP_INVALID_CREDENTIALS;
-               send_ldap_result( op, rs );
-               return 1;
-       }
-
-       bsi.bsi_e = &user_entry;
-       rc = backsql_id2entry( &bsi, &bsi.bsi_base_id );
-       if ( rc != LDAP_SUCCESS ) {
-               Debug( LDAP_DEBUG_TRACE, "backsql_bind(): "
-                       "error %d in backsql_id2entry() "
-                       "- auth failed\n", rc, 0, 0 );
-               rs->sr_err = LDAP_INVALID_CREDENTIALS;
                goto error_return;
        }
-       e = &user_entry;
 
-       a = attr_find( e->e_attrs, password );
+       a = attr_find( e.e_attrs, slap_schema.si_ad_userPassword );
        if ( a == NULL ) {
                rs->sr_err = LDAP_INVALID_CREDENTIALS;
                goto error_return;
        }
 
-       if ( slap_passwd_check( op, e, a, &op->oq_bind.rb_cred,
+       if ( slap_passwd_check( op, &e, a, &op->oq_bind.rb_cred,
                                &rs->sr_text ) != 0 )
        {
                rs->sr_err = LDAP_INVALID_CREDENTIALS;
@@ -115,15 +102,23 @@ backsql_bind( Operation *op, SlapReply *rs )
 
 error_return:;
        if ( !BER_BVISNULL( &bsi.bsi_base_id.eid_ndn ) ) {
-               (void)backsql_free_entryID( &bsi.bsi_base_id, 0 );
+               (void)backsql_free_entryID( op, &bsi.bsi_base_id, 0 );
+       }
+
+       if ( !BER_BVISNULL( &e.e_nname ) ) {
+               backsql_entry_clean( op, &e );
        }
 
-       if ( rs->sr_err ) {
+       if ( bsi.bsi_attrs != NULL ) {
+               op->o_tmpfree( bsi.bsi_attrs, op->o_tmpmemctx );
+       }
+
+       if ( rs->sr_err != LDAP_SUCCESS ) {
                send_ldap_result( op, rs );
-               return 1;
        }
        
-       Debug(LDAP_DEBUG_TRACE,"<==backsql_bind()\n",0,0,0);
-       return 0;
+       Debug( LDAP_DEBUG_TRACE,"<==backsql_bind()\n", 0, 0, 0 );
+
+       return rs->sr_err;
 }