]> git.sur5r.net Git - openldap/blobdiff - servers/slapd/back-sql/config.c
ITS#3576 use actual backend (not glue instance) for restriction and
[openldap] / servers / slapd / back-sql / config.c
index 6fe8a912072e0278599e3b1963b610c51899103d..9e82f0b3584fc15945b19c07e122a20cf347eef9 100644 (file)
@@ -1,8 +1,10 @@
 /* $OpenLDAP$ */
 /* This work is part of OpenLDAP Software <http://www.openldap.org/>.
  *
- * Copyright 1999-2004 The OpenLDAP Foundation.
+ * Copyright 1999-2005 The OpenLDAP Foundation.
  * Portions Copyright 1999 Dmitry Kovalev.
+ * Portions Copyright 2002 Pierangelo Masarati.
+ * Portions Copyright 2004 Mark Adamson.
  * All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  */
 /* ACKNOWLEDGEMENTS:
  * This work was initially developed by Dmitry Kovalev for inclusion
- * by OpenLDAP Software.
+ * by OpenLDAP Software.  Additional significant contributors include
+ * Pierangelo Masarati.
  */
 
 #include "portable.h"
 
-#ifdef SLAPD_SQL
-
 #include <stdio.h>
 #include "ac/string.h"
 #include <sys/types.h>
 
 #include "slap.h"
+#include "ldif.h"
 #include "proto-sql.h"
 
+static int
+create_baseObject(
+       BackendDB       *be,
+       const char      *fname,
+       int             lineno );
+
+static int
+read_baseObject(
+       BackendDB       *be,
+       const char      *fname );
+
 int
 backsql_db_config(
        BackendDB       *be,
@@ -163,18 +176,20 @@ backsql_db_config(
                Debug( LDAP_DEBUG_TRACE, "<==backsql_db_config(): "
                        "at_query=%s\n", bi->sql_at_query, 0, 0 );
 
-       } else if ( !strcasecmp( argv[ 0 ], "insentry_query" ) ) {
+       } else if ( !strcasecmp( argv[ 0 ], "insentry_stmt" ) ||
+                       !strcasecmp( argv[ 0 ], "insentry_query" ) )
+       {
                if ( argc < 2 ) {
                        Debug( LDAP_DEBUG_TRACE, 
                                "<==backsql_db_config (%s line %d): "
                                "missing SQL statement "
-                               "in \"insentry_query\" directive\n",
+                               "in \"insentry_stmt\" directive\n",
                                fname, lineno, 0 );
                        return 1;
                }
-               bi->sql_insentry_query = ch_strdup( argv[ 1 ] );
+               bi->sql_insentry_stmt = ch_strdup( argv[ 1 ] );
                Debug( LDAP_DEBUG_TRACE, "<==backsql_db_config(): "
-                       "insentry_query=%s\n", bi->sql_insentry_query, 0, 0 );
+                       "insentry_stmt=%s\n", bi->sql_insentry_stmt, 0, 0 );
 
        } else if ( !strcasecmp( argv[ 0 ], "create_needs_select" ) ) {
                if ( argc < 2 ) {
@@ -261,44 +276,50 @@ backsql_db_config(
                Debug( LDAP_DEBUG_TRACE, "<==backsql_db_config(): "
                        "strcast_func=%s\n", bi->sql_strcast_func.bv_val, 0, 0 );
 
-       } else if ( !strcasecmp( argv[ 0 ], "delentry_query" ) ) {
+       } else if ( !strcasecmp( argv[ 0 ], "delentry_stmt" ) ||
+                       !strcasecmp( argv[ 0 ], "delentry_query" ) )
+       {
                if ( argc < 2 ) {
                        Debug( LDAP_DEBUG_TRACE,
                                "<==backsql_db_config (%s line %d): "
                                "missing SQL statement "
-                               "in \"delentry_query\" directive\n",
+                               "in \"delentry_stmt\" directive\n",
                                fname, lineno, 0 );
                        return 1;
                }
-               bi->sql_delentry_query = ch_strdup( argv[ 1 ] );
+               bi->sql_delentry_stmt = ch_strdup( argv[ 1 ] );
                Debug( LDAP_DEBUG_TRACE, "<==backsql_db_config(): "
-                       "delentry_query=%s\n", bi->sql_delentry_query, 0, 0 );
+                       "delentry_stmt=%s\n", bi->sql_delentry_stmt, 0, 0 );
 
-       } else if ( !strcasecmp( argv[ 0 ], "delobjclasses_query" ) ) {
+       } else if ( !strcasecmp( argv[ 0 ], "renentry_stmt" ) ||
+                       !strcasecmp( argv[ 0 ], "renentry_query" ) )
+       {
                if ( argc < 2 ) {
                        Debug( LDAP_DEBUG_TRACE,
                                "<==backsql_db_config (%s line %d): "
                                "missing SQL statement "
-                               "in \"delobjclasses_query\" directive\n",
+                               "in \"renentry_stmt\" directive\n",
                                fname, lineno, 0 );
                        return 1;
                }
-               bi->sql_delobjclasses_query = ch_strdup( argv[ 1 ] );
+               bi->sql_renentry_stmt = ch_strdup( argv[ 1 ] );
                Debug( LDAP_DEBUG_TRACE, "<==backsql_db_config(): "
-                       "delobjclasses_query=%s\n", bi->sql_delobjclasses_query, 0, 0 );
+                       "renentry_stmt=%s\n", bi->sql_renentry_stmt, 0, 0 );
 
-       } else if ( !strcasecmp( argv[ 0 ], "delreferrals_query" ) ) {
+       } else if ( !strcasecmp( argv[ 0 ], "delobjclasses_stmt" ) ||
+                       !strcasecmp( argv[ 0 ], "delobjclasses_query" ) )
+       {
                if ( argc < 2 ) {
                        Debug( LDAP_DEBUG_TRACE,
                                "<==backsql_db_config (%s line %d): "
                                "missing SQL statement "
-                               "in \"delreferrals_query\" directive\n",
+                               "in \"delobjclasses_stmt\" directive\n",
                                fname, lineno, 0 );
                        return 1;
                }
-               bi->sql_delreferrals_query = ch_strdup( argv[ 1 ] );
+               bi->sql_delobjclasses_stmt = ch_strdup( argv[ 1 ] );
                Debug( LDAP_DEBUG_TRACE, "<==backsql_db_config(): "
-                       "delreferrals_query=%s\n", bi->sql_delreferrals_query, 0, 0 );
+                       "delobjclasses_stmt=%s\n", bi->sql_delobjclasses_stmt, 0, 0 );
 
        } else if ( !strcasecmp( argv[ 0 ], "has_ldapinfo_dn_ru") ) {
                if ( argc < 2 ) {
@@ -389,8 +410,42 @@ backsql_db_config(
                        "allow_orphans=%s\n", 
                        BACKSQL_ALLOW_ORPHANS( bi ) ? "yes" : "no", 0, 0 );
 
+       } else if ( !strcasecmp( argv[ 0 ], "baseobject" ) ) {
+               if ( be->be_suffix == NULL ) {
+                       Debug( LDAP_DEBUG_TRACE,
+                               "<==backsql_db_config (%s line %d): : "
+                               "must be defined after \"suffix\"\n",
+                               fname, lineno, 0 );
+                       return 1;
+               }
+
+               if ( bi->sql_baseObject ) {
+                       Debug( LDAP_DEBUG_TRACE,
+                               "<==backsql_db_config (%s line %d): : "
+                               "\"baseObject\" already provided (will be overwritten)\n",
+                               fname, lineno, 0 );
+                       entry_free( bi->sql_baseObject );
+               }
+       
+               switch ( argc ) {
+               case 1:
+                       return create_baseObject( be, fname, lineno );
+
+               case 2:
+                       return read_baseObject( be, argv[ 1 ] );
+
+               default:
+                       Debug( LDAP_DEBUG_TRACE,
+                               "<==backsql_db_config (%s line %d): "
+                               "trailing values "
+                               "in \"baseObject\" directive?\n",
+                               fname, lineno, 0 );
+                       return 1;
+               }
+
        } else if ( !strcasecmp( argv[ 0 ], "sqllayer") ) {
-               if ( backsql_api_config( bi, argv[ 1 ] ) ) {
+               if ( backsql_api_config( bi, argv[ 1 ], argc - 2, &argv[ 2 ] ) )
+               {
                        Debug( LDAP_DEBUG_TRACE,
                                "<==backsql_db_config (%s line %d): "
                                "unable to load sqllayer \"%s\"\n",
@@ -398,6 +453,114 @@ backsql_db_config(
                        return 1;
                }
 
+       } else if ( !strcasecmp( argv[ 0 ], "id_query" ) ) {
+               if ( argc < 2 ) {
+                       Debug( LDAP_DEBUG_TRACE, 
+                               "<==backsql_db_config (%s line %d): "
+                               "missing SQL condition "
+                               "in \"id_query\" directive\n",
+                               fname, lineno, 0 );
+                       return 1;
+               }
+               bi->sql_id_query = ch_strdup( argv[ 1 ] );
+               Debug( LDAP_DEBUG_TRACE, "<==backsql_db_config(): "
+                       "id_query=%s\n", bi->sql_id_query, 0, 0 );
+
+       } else if ( !strcasecmp( argv[ 0 ], "use_subtree_shortcut") ) {
+               if ( argc < 2 ) {
+                       Debug( LDAP_DEBUG_TRACE,
+                               "<==backsql_db_config (%s line %d): "
+                               "missing { yes | no }"
+                               "in \"use_subtree_shortcut\" directive\n",
+                               fname, lineno, 0 );
+                       return 1;
+               }
+
+               if ( strcasecmp( argv[ 1 ], "yes" ) == 0 ) {
+                       bi->sql_flags |= BSQLF_USE_SUBTREE_SHORTCUT;
+
+               } else if ( strcasecmp( argv[ 1 ], "no" ) == 0 ) {
+                       bi->sql_flags &= ~BSQLF_USE_SUBTREE_SHORTCUT;
+
+               } else {
+                       Debug( LDAP_DEBUG_TRACE,
+                               "<==backsql_db_config (%s line %d): "
+                               "\"use_subtree_shortcut\" directive arg "
+                               "must be \"yes\" or \"no\"\n",
+                               fname, lineno, 0 );
+                       return 1;
+
+               }
+               Debug( LDAP_DEBUG_TRACE, "<==backsql_db_config(): "
+                       "use_subtree_shortcut=%s\n", 
+                       BACKSQL_USE_SUBTREE_SHORTCUT( bi ) ? "yes" : "no",
+                       0, 0 );
+
+       } else if ( !strcasecmp( argv[ 0 ], "fetch_all_attrs") ) {
+               if ( argc < 2 ) {
+                       Debug( LDAP_DEBUG_TRACE,
+                               "<==backsql_db_config (%s line %d): "
+                               "missing { yes | no }"
+                               "in \"fetch_all_attrs\" directive\n",
+                               fname, lineno, 0 );
+                       return 1;
+               }
+
+               if ( strcasecmp( argv[ 1 ], "yes" ) == 0 ) {
+                       bi->sql_flags |= BSQLF_FETCH_ALL_ATTRS;
+
+               } else if ( strcasecmp( argv[ 1 ], "no" ) == 0 ) {
+                       bi->sql_flags &= ~BSQLF_FETCH_ALL_ATTRS;
+
+               } else {
+                       Debug( LDAP_DEBUG_TRACE,
+                               "<==backsql_db_config (%s line %d): "
+                               "\"fetch_all_attrs\" directive arg "
+                               "must be \"yes\" or \"no\"\n",
+                               fname, lineno, 0 );
+                       return 1;
+
+               }
+               Debug( LDAP_DEBUG_TRACE, "<==backsql_db_config(): "
+                       "fetch_all_attrs=%s\n", 
+                       BACKSQL_FETCH_ALL_ATTRS( bi ) ? "yes" : "no",
+                       0, 0 );
+
+       } else if ( !strcasecmp( argv[ 0 ], "fetch_attrs") ) {
+               char    *str, *s, *next;
+               char    delimstr[] = ",";
+
+               if ( argc < 2 ) {
+                       Debug( LDAP_DEBUG_TRACE,
+                               "<==backsql_db_config (%s line %d): "
+                               "missing <attrlist>"
+                               "in \"fetch_all_attrs <attrlist>\" directive\n",
+                               fname, lineno, 0 );
+                       return 1;
+               }
+
+               str = ch_strdup( argv[ 1 ] );
+               for ( s = ldap_pvt_strtok( str, delimstr, &next );
+                               s != NULL;
+                               s = ldap_pvt_strtok( NULL, delimstr, &next ) )
+               {
+                       if ( strlen( s ) == 1 ) {
+                               if ( *s == '*' ) {
+                                       bi->sql_flags |= BSQLF_FETCH_ALL_USERATTRS;
+                                       argv[ 1 ][ s - str ] = ',';
+
+                               } else if ( *s == '+' ) {
+                                       bi->sql_flags |= BSQLF_FETCH_ALL_OPATTRS;
+                                       argv[ 1 ][ s - str ] = ',';
+                               }
+                       }
+               }
+               ch_free( str );
+               bi->sql_anlist = str2anlist( bi->sql_anlist, argv[ 1 ], delimstr );
+               if ( bi->sql_anlist == NULL ) {
+                       return -1;
+               }
+
        } else {
                return SLAP_CONF_UNKNOWN;
        }
@@ -405,5 +568,218 @@ backsql_db_config(
        return 0;
 }
 
-#endif /* SLAPD_SQL */
+/*
+ * Read the entries specified in fname and merge the attributes
+ * to the user defined baseObject entry. Note that if we find any errors
+ * what so ever, we will discard the entire entries, print an
+ * error message and return.
+ */
+static int
+read_baseObject( 
+       BackendDB       *be,
+       const char      *fname )
+{
+       backsql_info    *bi = (backsql_info *)be->be_private;
+       FILE            *fp;
+       int             rc = 0, lineno = 0, lmax = 0;
+       char            *buf = NULL;
+
+       assert( fname );
+
+       fp = fopen( fname, "r" );
+       if ( fp == NULL ) {
+               Debug( LDAP_DEBUG_ANY,
+                       "could not open back-sql baseObject "
+                       "attr file \"%s\" - absolute path?\n",
+                       fname, 0, 0 );
+               perror( fname );
+               return LDAP_OTHER;
+       }
+
+       bi->sql_baseObject = (Entry *) SLAP_CALLOC( 1, sizeof(Entry) );
+       if ( bi->sql_baseObject == NULL ) {
+               Debug( LDAP_DEBUG_ANY,
+                       "read_baseObject_file: SLAP_CALLOC failed", 0, 0, 0 );
+               fclose( fp );
+               return LDAP_NO_MEMORY;
+       }
+       bi->sql_baseObject->e_name = be->be_suffix[0];
+       bi->sql_baseObject->e_nname = be->be_nsuffix[0];
+       bi->sql_baseObject->e_attrs = NULL;
+
+       while ( ldif_read_record( fp, &lineno, &buf, &lmax ) ) {
+               Entry           *e = str2entry( buf );
+               Attribute       *a;
+
+               if( e == NULL ) {
+                       fprintf( stderr, "back-sql baseObject: "
+                                       "could not parse entry (line=%d)\n",
+                                       lineno );
+                       rc = LDAP_OTHER;
+                       break;
+               }
+
+               /* make sure the DN is the database's suffix */
+               if ( !be_issuffix( be, &e->e_nname ) ) {
+                       fprintf( stderr,
+                               "back-sql: invalid baseObject - "
+                               "dn=\"%s\" (line=%d)\n",
+                               e->e_name.bv_val, lineno );
+                       entry_free( e );
+                       rc = EXIT_FAILURE;
+                       break;
+               }
+
+               /*
+                * we found a valid entry, so walk thru all the attributes in the
+                * entry, and add each attribute type and description to baseObject
+                */
+               for ( a = e->e_attrs; a != NULL; a = a->a_next ) {
+                       if ( attr_merge( bi->sql_baseObject, a->a_desc,
+                                               a->a_vals,
+                                               ( a->a_nvals == a->a_vals ) ?
+                                               NULL : a->a_nvals ) )
+                       {
+                               rc = LDAP_OTHER;
+                               break;
+                       }
+               }
+
+               entry_free( e );
+               if ( rc ) {
+                       break;
+               }
+       }
+
+       if ( rc ) {
+               entry_free( bi->sql_baseObject );
+               bi->sql_baseObject = NULL;
+       }
+
+       ch_free( buf );
+
+       fclose( fp );
+
+       Debug( LDAP_DEBUG_CONFIG, "back-sql baseObject file \"%s\" read.\n",
+                       fname, 0, 0 );
+
+       return rc;
+}
+
+static int
+create_baseObject(
+       BackendDB       *be,
+       const char      *fname,
+       int             lineno )
+{
+       backsql_info    *bi = (backsql_info *)be->be_private;
+       LDAPRDN         rdn;
+       char            *p;
+       int             rc, iAVA;
+       char            buf[1024];
+
+       snprintf( buf, sizeof(buf),
+                       "dn: %s\n"
+                       "objectClass: extensibleObject\n"
+                       "description: builtin baseObject for back-sql\n"
+                       "description: all entries mapped "
+                       "in the \"ldap_entries\" table\n"
+                       "description: must have "
+                       "\"" BACKSQL_BASEOBJECT_IDSTR "\" "
+                       "in the \"parent\" column",
+                       be->be_suffix[0].bv_val );
+
+       bi->sql_baseObject = str2entry( buf );
+       if ( bi->sql_baseObject == NULL ) {
+               Debug( LDAP_DEBUG_TRACE,
+                       "<==backsql_db_config (%s line %d): "
+                       "unable to parse baseObject entry\n",
+                       fname, lineno, 0 );
+               return 1;
+       }
+
+       if ( BER_BVISEMPTY( &be->be_suffix[ 0 ] ) ) {
+               return 0;
+       }
+
+       rc = ldap_bv2rdn( &be->be_suffix[ 0 ], &rdn, (char **)&p,
+                       LDAP_DN_FORMAT_LDAP );
+       if ( rc != LDAP_SUCCESS ) {
+               snprintf( buf, sizeof(buf),
+                       "unable to extract RDN "
+                       "from baseObject DN \"%s\" (%d: %s)",
+                       be->be_suffix[ 0 ].bv_val,
+                       rc, ldap_err2string( rc ) );
+               Debug( LDAP_DEBUG_TRACE,
+                       "<==backsql_db_config (%s line %d): %s\n",
+                       fname, lineno, buf );
+               return 1;
+       }
+
+       for ( iAVA = 0; rdn[ iAVA ]; iAVA++ ) {
+               LDAPAVA                         *ava = rdn[ iAVA ];
+               AttributeDescription            *ad = NULL;
+               slap_syntax_transform_func      *transf = NULL;
+               struct berval                   bv = BER_BVNULL;
+               const char                      *text = NULL;
+
+               assert( ava );
+
+               rc = slap_bv2ad( &ava->la_attr, &ad, &text );
+               if ( rc != LDAP_SUCCESS ) {
+                       snprintf( buf, sizeof(buf),
+                               "AttributeDescription of naming "
+                               "attribute #%d from baseObject "
+                               "DN \"%s\": %d: %s",
+                               iAVA, be->be_suffix[ 0 ].bv_val,
+                               rc, ldap_err2string( rc ) );
+                       Debug( LDAP_DEBUG_TRACE,
+                               "<==backsql_db_config (%s line %d): %s\n",
+                               fname, lineno, buf );
+                       return 1;
+               }
+               
+               transf = ad->ad_type->sat_syntax->ssyn_pretty;
+               if ( transf ) {
+                       /*
+                        * transform value by pretty function
+                        *      if value is empty, use empty_bv
+                        */
+                       rc = ( *transf )( ad->ad_type->sat_syntax,
+                               ava->la_value.bv_len
+                                       ? &ava->la_value
+                                       : (struct berval *) &slap_empty_bv,
+                               &bv, NULL );
+       
+                       if ( rc != LDAP_SUCCESS ) {
+                               snprintf( buf, sizeof(buf),
+                                       "prettying of attribute #%d "
+                                       "from baseObject "
+                                       "DN \"%s\" failed: %d: %s",
+                                       iAVA, be->be_suffix[ 0 ].bv_val,
+                                       rc, ldap_err2string( rc ) );
+                               Debug( LDAP_DEBUG_TRACE,
+                                       "<==backsql_db_config (%s line %d): "
+                                       "%s\n",
+                                       fname, lineno, buf );
+                               return 1;
+                       }
+               }
+
+               if ( !BER_BVISNULL( &bv ) ) {
+                       if ( ava->la_flags & LDAP_AVA_FREE_VALUE ) {
+                               ber_memfree( ava->la_value.bv_val );
+                       }
+                       ava->la_value = bv;
+                       ava->la_flags |= LDAP_AVA_FREE_VALUE;
+               }
+
+               attr_merge_normalize_one( bi->sql_baseObject,
+                               ad, &ava->la_value, NULL );
+       }
+
+       ldap_rdnfree( rdn );
+
+       return 0;
+}