]> git.sur5r.net Git - openldap/blobdiff - servers/slapd/config.c
initialize AttributeAssertion before using
[openldap] / servers / slapd / config.c
index aa482c3459d2e1346de643732764a9780065a201..8695fcd11c83a8b6544acdac4fd1ffa4b4dfd7f7 100644 (file)
@@ -2,7 +2,7 @@
 /* $OpenLDAP$ */
 /* This work is part of OpenLDAP Software <http://www.openldap.org/>.
  *
- * Copyright 1998-2004 The OpenLDAP Foundation.
+ * Copyright 1998-2005 The OpenLDAP Foundation.
  * All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
 #include "slapi/slapi.h"
 #endif
 #include "lutil.h"
+#ifdef HAVE_LIMITS_H
+#include <limits.h>
+#endif /* HAVE_LIMITS_H */
+#ifndef PATH_MAX
+#define PATH_MAX 4096
+#endif /* ! PATH_MAX */
 #include "config.h"
 
 #define ARGS_STEP      512
@@ -56,7 +62,6 @@ char          *ldap_srvtab = "";
 char           **default_passwd_hash = NULL;
 struct berval default_search_base = BER_BVNULL;
 struct berval default_search_nbase = BER_BVNULL;
-unsigned               num_subordinates = 0;
 
 ber_len_t sockbuf_max_incoming = SLAP_SB_MAX_INCOMING_DEFAULT;
 ber_len_t sockbuf_max_incoming_auth= SLAP_SB_MAX_INCOMING_AUTH;
@@ -84,6 +89,8 @@ static char   *strtok_quote(char *line, char *sep);
 static int load_ucdata(char *path);
 #endif
 
+int read_config_file(const char *fname, int depth, ConfigArgs *cf);
+
 static int add_syncrepl LDAP_P(( Backend *, char **, int ));
 static int parse_syncrepl_line LDAP_P(( char **, int, syncinfo_t *));
 
@@ -138,7 +145,6 @@ enum {
        CFG_SALT,
        CFG_LIMITS,
        CFG_RO,
-       CFG_SUB,
        CFG_SASLOPT,
        CFG_REWRITE,
        CFG_DEPTH,
@@ -183,15 +189,14 @@ ConfigTable SystemConfiguration[] = {
 #ifdef SLAP_AUTH_REWRITE
   { "auth-rewrite",            2,  2, 14,  NULL,       ARG_MAGIC|CFG_REWRITE,  &config_generic,                NULL, NULL, NULL },
 #endif
-  { "sasl",                    2,  2,  4,  NULL,       ARG_MAGIC|CFG_SASLOPT,  &config_generic,                NULL, NULL, NULL },     /* XXX */
+  { "sasl",                    2,  0,  4,  NULL,       ARG_MAGIC|CFG_SASLOPT,  &config_generic,                NULL, NULL, NULL },     /* XXX */
   { "auth",                    2,  2,  4,  NULL,       ARG_MAGIC|CFG_SASLOPT,  &config_generic,                NULL, NULL, NULL },
   { "schemadn",                        2,  2,  0,  "dn",       ARG_MAGIC,              &config_schema_dn,              NULL, NULL, NULL },
   { "ucdata-path",             2,  2,  0,  "path",     ARG_IGNORED,            NULL,                           NULL, NULL, NULL },
   { "sizelimit",               2,  2,  0,  "limit",    ARG_MAGIC|CFG_SIZE,     &config_sizelimit,              NULL, NULL, NULL },
   { "timelimit",               2,  2,  0,  "limit",    ARG_MAGIC|CFG_TIME,     &config_timelimit,              NULL, NULL, NULL },
-  { "limits",                  2,  2,  0,  "limits",   ARG_DB|ARG_MAGIC|CFG_LIMITS, &config_generic,           NULL, NULL, NULL },
-  { "subordinate",             1,  1,  0,  "sub",      ARG_DB|ARG_MAGIC|CFG_SUB, &config_generic,              NULL, NULL, NULL },
-  { "overlay",                 2,  2,  0,  "overlay",  ARG_DB|ARG_MAGIC,       &config_overlay,                NULL, NULL, NULL },
+  { "limits",                  2,  0,  0,  "limits",   ARG_DB|ARG_MAGIC|CFG_LIMITS, &config_generic,           NULL, NULL, NULL },
+  { "overlay",                 2,  2,  0,  "overlay",  ARG_MAGIC,              &config_overlay,                NULL, NULL, NULL },
   { "suffix",                  2,  2,  0,  "suffix",   ARG_DB|ARG_MAGIC,       &config_suffix,                 NULL, NULL, NULL },
   { "maxDerefDepth",           2,  2,  0,  "depth",    ARG_DB|ARG_INT|ARG_MAGIC|CFG_DEPTH, &config_generic,    NULL, NULL, NULL },
   { "rootdn",                  2,  2,  0,  "dn",       ARG_DB|ARG_MAGIC,       &config_rootdn,                 NULL, NULL, NULL },
@@ -266,14 +271,17 @@ ConfigTable SystemConfiguration[] = {
 
 
 ConfigArgs *
-new_config_args(BackendDB *be, const char *fname, int lineno, int argc, char **argv) {
+new_config_args( BackendDB *be, const char *fname, int lineno, int argc, char **argv )
+{
        ConfigArgs *c;
-       if(!(c = ch_calloc(1, sizeof(ConfigArgs)))) return(NULL);
+       c = ch_calloc( 1, sizeof( ConfigArgs ) );
+       if ( c == NULL ) return(NULL);
        c->be     = be; 
        c->fname  = fname;
        c->argc   = argc;
        c->argv   = argv; 
        c->lineno = lineno;
+       snprintf( c->log, sizeof( c->log ), "%s: line %lu", fname, lineno );
        return(c);
 }
 
@@ -287,41 +295,44 @@ int parse_config_table(ConfigTable *Conf, ConfigArgs *c) {
        if(!Conf[i].name) return(ARG_UNKNOWN);
        arg_type = Conf[i].arg_type;
        if(arg_type == ARG_IGNORED) {
-               Debug(LDAP_DEBUG_CONFIG, "%s: line %lu: keyword <%s> ignored\n",
-                       c->fname, c->lineno, Conf[i].name);
+               Debug(LDAP_DEBUG_CONFIG, "%s: keyword <%s> ignored\n",
+                       c->log, Conf[i].name, 0);
                return(0);
        }
        if(Conf[i].min_args && (c->argc < Conf[i].min_args)) {
-               Debug(LDAP_DEBUG_CONFIG, "%s: line %lu: ", c->fname, c->lineno, 0);
-               Debug(LDAP_DEBUG_CONFIG, "keyword <%s> missing <%s> argument\n", Conf[i].name, Conf[i].what, 0);
+               Debug(LDAP_DEBUG_CONFIG, "%s: keyword <%s> missing <%s> argument\n",
+                       c->log, Conf[i].name, Conf[i].what);
                return(ARG_BAD_CONF);
        }
        if(Conf[i].max_args && (c->argc > Conf[i].max_args)) {
-               Debug(LDAP_DEBUG_CONFIG, "%s: line %lu: ", c->fname, c->lineno, 0);
-               Debug(LDAP_DEBUG_CONFIG, "extra cruft after <%s> in <%s> line (ignored)\n", Conf[i].what, Conf[i].name, 0);
+               Debug(LDAP_DEBUG_CONFIG, "%s: extra cruft after <%s> in <%s> line (ignored)\n",
+                       c->log, Conf[i].what, Conf[i].name);
        }
        if((arg_type & ARG_DB) && !c->be) {
-               Debug(LDAP_DEBUG_CONFIG, "%s: line %lu: keyword <%s> allowed only within database declaration\n",
-                       c->fname, c->lineno, Conf[i].name);
+               Debug(LDAP_DEBUG_CONFIG, "%s: keyword <%s> allowed only within database declaration\n",
+                       c->log, Conf[i].name, 0);
                return(ARG_BAD_CONF);
        }
        if((arg_type & ARG_PRE_DB) && c->be) {
-               Debug(LDAP_DEBUG_CONFIG, "%s: line %lu: keyword <%s> must appear before any database declaration\n",
-                       c->fname, c->lineno, Conf[i].name);
+               Debug(LDAP_DEBUG_CONFIG, "%s: keyword <%s> must appear before any database declaration\n",
+                       c->log, Conf[i].name, 0);
                return(ARG_BAD_CONF);
        }
        if((arg_type & ARG_PAREN) && *c->argv[1] != '(' /*')'*/) {
-               Debug(LDAP_DEBUG_CONFIG, "%s: line %lu: old <%s> format not supported\n", c->fname, c->lineno, Conf[i].name);
+               Debug(LDAP_DEBUG_CONFIG, "%s: old <%s> format not supported\n",
+                       c->log, Conf[i].name, 0);
                return(ARG_BAD_CONF);
        }
        if((arg_type & ARGS_POINTER) && !Conf[i].arg_item) {
-               Debug(LDAP_DEBUG_CONFIG, "%s: line %lu: null arg_item for <%s>\n", c->fname, c->lineno, Conf[i].name);
+               Debug(LDAP_DEBUG_CONFIG, "%s: null arg_item for <%s>\n",
+                       c->log, Conf[i].name, 0);
                return(ARG_BAD_CONF);
        }
        c->type = arg_user = (arg_type & ARGS_USERLAND);
        c->value_int = c->value_long = c->value_ber_t = 0;
        c->value_string = NULL;
        if(arg_type & ARGS_NUMERIC) {
+               int j;
                iarg = 0; larg = 0; barg = 0;
                switch(arg_type & ARGS_NUMERIC) {
                        case ARG_INT:           iarg = atoi(c->argv[1]);                break;
@@ -333,18 +344,18 @@ int parse_config_table(ConfigTable *Conf, ConfigArgs *c) {
                                } else if(!strcasecmp(c->argv[1], "off")) {
                                        iarg = 0;
                                } else {
-                                       Debug(LDAP_DEBUG_CONFIG, "%s: line %lu: ignoring ", c->fname, c->lineno, 0);
+                                       Debug(LDAP_DEBUG_CONFIG, "%s: ignoring ", c->log, 0, 0);
                                        Debug(LDAP_DEBUG_CONFIG, "invalid %s value (%s) in <%s> line\n",
                                                Conf[i].what, c->argv[1], Conf[i].name);
                                        return(0);
                                }
                                break;
                }
-               i = (arg_type & ARG_NONZERO) ? 1 : 0;
+               j = (arg_type & ARG_NONZERO) ? 1 : 0;
                rc = (Conf == SystemConfiguration) ? ((arg_type & ARG_SPECIAL) && (larg < index_substr_if_maxlen)) : 0;
-               if(iarg < i || larg < i || barg < i || rc) {
+               if(iarg < j || larg < j || barg < j || rc) {
                        larg = larg ? larg : (barg ? barg : iarg);
-                       Debug(LDAP_DEBUG_CONFIG, "%s: line %lu: " , c->fname, c->lineno, 0);
+                       Debug(LDAP_DEBUG_CONFIG, "%s: " , c->log, 0, 0);
                        Debug(LDAP_DEBUG_CONFIG, "invalid %s value (%ld) in <%s> line\n", Conf[i].what, larg, Conf[i].name);
                        return(ARG_BAD_CONF);
                }
@@ -358,8 +369,8 @@ int parse_config_table(ConfigTable *Conf, ConfigArgs *c) {
                rc = (*((ConfigDriver*)Conf[i].arg_item))(c);
                if(c->be == frontendDB) c->be = NULL;
                if(rc) {
-                       Debug(LDAP_DEBUG_CONFIG, "%s: line %lu: ", c->fname, c->lineno, 0);
-                       Debug(LDAP_DEBUG_CONFIG, "handler for <%s> exited with %d!", Conf[i].name, rc, 0);
+                       Debug(LDAP_DEBUG_CONFIG, "%s: handler for <%s> exited with %d!",
+                               c->log, Conf[i].name, rc);
                        return(ARG_BAD_CONF);
                }
                return(0);
@@ -372,8 +383,7 @@ int parse_config_table(ConfigTable *Conf, ConfigArgs *c) {
                        case ARG_STRING: {
                                char *cc = *((char**)Conf[i].arg_item);
                                if(cc) ch_free(cc);     /* potential memory leak */
-                               cc = c->value_string;
-                               /* memcpy(Conf[i].arg_item, &c->value_string, sizeof(void *)); */
+                               *(char **)Conf[i].arg_item = c->value_string;
                                break;
                                }
        }
@@ -382,21 +392,23 @@ int parse_config_table(ConfigTable *Conf, ConfigArgs *c) {
 
 int
 read_config(const char *fname, int depth) {
-       return(read_config_file(fname, depth, NULL));
+       return read_config_file(fname, depth, NULL);
 }
 
 int
-read_config_file(char *fname, int depth, ConfigArgs *cf)
+read_config_file(const char *fname, int depth, ConfigArgs *cf)
 {
        FILE *fp;
-       char *line, *savefname;
        ConfigArgs *c;
-       int rc, i;
+       int rc;
 
-       c = ch_calloc(1, sizeof(ConfigArgs));
+       c = ch_calloc( 1, sizeof( ConfigArgs ) );
+       if ( c == NULL ) {
+               return 1;
+       }
 
-       if(depth) {
-               memcpy(c, cf, sizeof(ConfigArgs));
+       if ( depth ) {
+               memcpy( c, cf, sizeof( ConfigArgs ) );
        } else {
                c->depth = depth; /* XXX */
                c->bi = NULL;
@@ -404,10 +416,11 @@ read_config_file(char *fname, int depth, ConfigArgs *cf)
        }
 
        c->fname = fname;
-       c->argv = ch_calloc(ARGS_STEP + 1, sizeof(*c->argv));
+       c->argv = ch_calloc( ARGS_STEP + 1, sizeof( *c->argv ) );
        c->argv_size = ARGS_STEP + 1;
 
-       if((fp = fopen(fname, "r")) == NULL) {
+       fp = fopen( fname, "r" );
+       if ( fp == NULL ) {
                ldap_syslog = 1;
                Debug(LDAP_DEBUG_ANY,
                    "could not open config file \"%s\": %s (%d)\n",
@@ -419,58 +432,85 @@ read_config_file(char *fname, int depth, ConfigArgs *cf)
 
        fp_getline_init(c);
 
-       while(fp_getline(fp, c)) {
+       while ( fp_getline( fp, c ) ) {
                /* skip comments and blank lines */
-               if(c->line[0] == '#' || c->line[0] == '\0') continue;
-               if(fp_parse_line(c)) goto badline;
+               if ( c->line[0] == '#' || c->line[0] == '\0' ) {
+                       continue;
+               }
+
+               snprintf( c->log, sizeof( c->log ), "%s: line %lu",
+                               c->fname, c->lineno );
+
+               if ( fp_parse_line( c ) ) {
+                       goto badline;
+               }
 
-               if(c->argc < 1) {
-                       Debug(LDAP_DEBUG_CONFIG, "%s: line %lu: bad config line (ignored)\n", fname, c->lineno, 0);
+               if ( c->argc < 1 ) {
+                       Debug(LDAP_DEBUG_CONFIG, "%s: bad config line (ignored)\n", c->log, 0, 0);
                        continue;
                }
 
-               rc = parse_config_table(SystemConfiguration, c);
-               if(!rc) continue;
-               if(rc & ARGS_USERLAND) switch(rc) {     /* XXX a usertype would be opaque here */
-                       default:        Debug(LDAP_DEBUG_CONFIG, "%s: line %lu: unknown user type <%d>\n",
-                                               c->fname, c->lineno, *c->argv);
-                                       goto badline;
-               } else if(rc == ARG_BAD_CONF || rc != ARG_UNKNOWN) {
+               rc = parse_config_table( SystemConfiguration, c );
+               if ( !rc ) {
+                       continue;
+               }
+               if ( rc & ARGS_USERLAND ) {
+                       switch(rc) {    /* XXX a usertype would be opaque here */
+                       default:
+                               Debug(LDAP_DEBUG_CONFIG, "%s: unknown user type <%d>\n",
+                                       c->log, *c->argv, 0);
+                               goto badline;
+                       }
+
+               } else if ( rc == ARG_BAD_CONF || rc != ARG_UNKNOWN ) {
                        goto badline;
-               } else if(c->bi && c->bi->bi_config) {          /* XXX to check: could both be/bi_config? oops */
-                       if(rc = (*c->bi->bi_config)(c->bi, c->fname, c->lineno, c->argc, c->argv)) switch(rc) {
+                       
+               } else if ( c->bi && c->bi->bi_config ) {               /* XXX to check: could both be/bi_config? oops */
+                       rc = (*c->bi->bi_config)(c->bi, c->fname, c->lineno, c->argc, c->argv);
+                       if ( rc ) {
+                               switch(rc) {
                                case SLAP_CONF_UNKNOWN:
-                                       Debug(LDAP_DEBUG_CONFIG, "%s: line %lu: "
+                                       Debug(LDAP_DEBUG_CONFIG, "%s: "
                                                "unknown directive <%s> inside backend info definition (ignored)\n",
-                                               c->fname, c->lineno, *c->argv);
+                                               c->log, *c->argv, 0);
                                        continue;
                                default:
                                        goto badline;
+                               }
                        }
-               } else if(c->be && c->be->be_config) {
-                       if(rc = (*c->be->be_config)(c->be, c->fname, c->lineno, c->argc, c->argv)) switch(rc) {
+                       
+               } else if ( c->be && c->be->be_config ) {
+                       rc = (*c->be->be_config)(c->be, c->fname, c->lineno, c->argc, c->argv);
+                       if ( rc ) {
+                               switch(rc) {
                                case SLAP_CONF_UNKNOWN:
-                                       Debug( LDAP_DEBUG_CONFIG, "%s: line %lu: "
+                                       Debug( LDAP_DEBUG_CONFIG, "%s: "
                                                "unknown directive <%s> inside backend database definition (ignored)\n",
-                                               c->fname, c->lineno, *c->argv);
+                                               c->log, *c->argv, 0);
                                        continue;
                                default:
                                        goto badline;
+                               }
                        }
-               } else if(frontendDB->be_config) {
-                       if(rc = (*frontendDB->be_config)(frontendDB, c->fname, (int)c->lineno, c->argc, c->argv)) switch(rc) {
+
+               } else if ( frontendDB->be_config ) {
+                       rc = (*frontendDB->be_config)(frontendDB, c->fname, (int)c->lineno, c->argc, c->argv);
+                       if ( rc ) {
+                               switch(rc) {
                                case SLAP_CONF_UNKNOWN:
-                                       Debug( LDAP_DEBUG_CONFIG, "%s: line %lu: "
-                                               "%s: line %lu: unknown directive <%s> inside global database definition (ignored)\n",
-                                               c->fname, c->lineno, *c->argv);
+                                       Debug( LDAP_DEBUG_CONFIG, "%s: "
+                                               "unknown directive <%s> inside global database definition (ignored)\n",
+                                               c->log, *c->argv, 0);
                                        continue;
                                default:
                                        goto badline;
+                               }
                        }
+                       
                } else {
-                       Debug(LDAP_DEBUG_CONFIG, "%s: line %lu: "
+                       Debug(LDAP_DEBUG_CONFIG, "%s: "
                                "unknown directive <%s> outside backend info and database definitions (ignored)\n",
-                               c->fname, c->lineno, *c->argv);
+                               c->log, *c->argv, 0);
                        continue;
 
                }
@@ -479,9 +519,16 @@ read_config_file(char *fname, int depth, ConfigArgs *cf)
        fclose(fp);
 
        if ( BER_BVISNULL( &frontendDB->be_schemadn ) ) {
-               ber_str2bv( SLAPD_SCHEMA_DN, sizeof(SLAPD_SCHEMA_DN)-1, 1,
+               ber_str2bv( SLAPD_SCHEMA_DN, STRLENOF( SLAPD_SCHEMA_DN ), 1,
                        &frontendDB->be_schemadn );
-               dnNormalize( 0, NULL, NULL, &frontendDB->be_schemadn, &frontendDB->be_schemandn, NULL );
+               rc = dnNormalize( 0, NULL, NULL, &frontendDB->be_schemadn, &frontendDB->be_schemandn, NULL );
+               if ( rc != LDAP_SUCCESS ) {
+                       Debug(LDAP_DEBUG_ANY, "%s: "
+                               "unable to normalize default schema DN \"%s\"\n",
+                               c->log, frontendDB->be_schemadn.bv_val, 0 );
+                       /* must not happen */
+                       assert( 0 );
+               }
        }
 
        ch_free(c->argv);
@@ -503,8 +550,8 @@ config_generic(ConfigArgs *c) {
        switch(c->type) {
                case CFG_BACKEND:
                        if(!(c->bi = backend_info(c->argv[1]))) {
-                               Debug(LDAP_DEBUG_ANY, "%s: line %lu: "
-                                       "backend %s failed init!\n", c->fname, c->lineno, c->argv[1]);
+                               Debug(LDAP_DEBUG_ANY, "%s: "
+                                       "backend %s failed init!\n", c->log, c->argv[1], 0);
                                return(1);
                        }
                        break;
@@ -512,8 +559,8 @@ config_generic(ConfigArgs *c) {
                case CFG_DATABASE:
                        c->bi = NULL;
                        if(!(c->be = backend_db_init(c->argv[1]))) {
-                               Debug(LDAP_DEBUG_ANY, "%s: line %lu: "
-                                       "database %s failed init!\n", c->fname, c->lineno, c->argv[1]);
+                               Debug(LDAP_DEBUG_ANY, "%s: "
+                                       "database %s failed init!\n", c->log, c->argv[1], 0);
                                return(1);
                        }
                        break;
@@ -543,11 +590,6 @@ config_generic(ConfigArgs *c) {
                                c->be->be_restrictops &= ~SLAP_RESTRICT_OP_WRITES;
                        break;
 
-               case CFG_SUB:
-                       SLAP_DBFLAGS(c->be) |= SLAP_DBFLAG_GLUE_SUBORDINATE;
-                       num_subordinates++;
-                       break;
-
                case CFG_SASLOPT:
                        /* XXX slap_sasl_config doesn't actually use the line argument */
                        if(slap_sasl_config(c->argc, c->argv, c->line, c->fname, c->lineno))
@@ -583,9 +625,9 @@ config_generic(ConfigArgs *c) {
 
                case CFG_CHECK:
                        global_schemacheck = c->value_int;
-                       if(!global_schemacheck) Debug(LDAP_DEBUG_ANY, "%s: line %lu: "
+                       if(!global_schemacheck) Debug(LDAP_DEBUG_ANY, "%s: "
                                "schema checking disabled! your mileage may vary!\n",
-                               c->fname, c->lineno, 0);
+                               c->log, 0, 0);
                        break;
 
                case CFG_ACL:
@@ -600,10 +642,10 @@ config_generic(ConfigArgs *c) {
 
                case CFG_REPLOG:
                        if(SLAP_MONITOR(c->be)) {
-                               Debug(LDAP_DEBUG_ANY, "%s: line %lu: "
+                               Debug(LDAP_DEBUG_ANY, "%s: "
                                        "\"replogfile\" should not be used "
                                        "inside monitor database\n",
-                                       c->fname, c->lineno, 0);
+                                       c->log, 0, 0);
                                return(0);      /* FIXME: should this be an error? */
                        }
 
@@ -612,9 +654,9 @@ config_generic(ConfigArgs *c) {
 
                case CFG_ROOTDSE:
                        if(read_root_dse_file(c->argv[1])) {
-                               Debug(LDAP_DEBUG_ANY, "%s: line %lu: "
+                               Debug(LDAP_DEBUG_ANY, "%s: "
                                        "could not read \"rootDSE <filename>\" line\n",
-                                       c->fname, c->lineno, 0);
+                                       c->log, 0, 0);
                                return(1);
                        }
                        break;
@@ -627,9 +669,9 @@ config_generic(ConfigArgs *c) {
 
                case CFG_LASTMOD:
                        if(SLAP_NOLASTMODCMD(c->be)) {
-                               Debug(LDAP_DEBUG_ANY, "%s: line %lu: "
+                               Debug(LDAP_DEBUG_ANY, "%s: "
                                        "lastmod not available for %s databases\n",
-                                       c->fname, c->lineno, c->be->bd_info->bi_type);
+                                       c->log, c->be->bd_info->bi_type, 0);
                                return(1);
                        }
                        if(c->value_int)
@@ -666,8 +708,8 @@ config_generic(ConfigArgs *c) {
 
 
                default:
-                       Debug(LDAP_DEBUG_ANY, "%s: line %lu: unknown CFG_TYPE %d"
-                               "(ignored)\n", c->fname, c->lineno, c->type);
+                       Debug(LDAP_DEBUG_ANY, "%s: unknown CFG_TYPE %d"
+                               "(ignored)\n", c->log, c->type, 0);
 
        }
        return(0);
@@ -678,18 +720,18 @@ int
 config_search_base(ConfigArgs *c) {
        struct berval dn;
        int rc;
-       if(c->bi || c->be) {
-               Debug(LDAP_DEBUG_ANY, "%s: line %lu: defaultSearchBase line must appear "
+       if(c->bi || c->be != frontendDB) {
+               Debug(LDAP_DEBUG_ANY, "%s: defaultSearchBase line must appear "
                        "prior to any backend or database definition\n",
-                       c->fname, c->lineno, 0);
+                       c->log, 0, 0);
                return(1);
        }
 
        if(default_search_nbase.bv_len) {
-               Debug(LDAP_DEBUG_ANY, "%s: line %lu: "
+               Debug(LDAP_DEBUG_ANY, "%s: "
                        "default search base \"%s\" already defined "
                        "(discarding old)\n",
-                       c->fname, c->lineno, default_search_base.bv_val);
+                       c->log, default_search_base.bv_val, 0);
                free(default_search_base.bv_val);
                free(default_search_nbase.bv_val);
        }
@@ -699,8 +741,8 @@ config_search_base(ConfigArgs *c) {
 
        if(rc != LDAP_SUCCESS) {
                Debug(LDAP_DEBUG_ANY,
-                       "%s: line %lu: defaultSearchBase DN is invalid\n",
-                       c->fname, c->lineno, 0 );
+                       "%s: defaultSearchBase DN is invalid: %d (%s)\n",
+                       c->log, rc, ldap_err2string( rc ));
                return(1);
        }
        return(0);
@@ -710,22 +752,22 @@ int
 config_passwd_hash(ConfigArgs *c) {
        int i;
        if(default_passwd_hash) {
-               Debug(LDAP_DEBUG_ANY, "%s: line %lu: "
+               Debug(LDAP_DEBUG_ANY, "%s: "
                        "already set default password_hash\n",
-                       c->fname, c->lineno, 0);
+                       c->log, 0, 0);
                return(1);
        }
        for(i = 1; i < c->argc; i++) {
                if(!lutil_passwd_scheme(c->argv[i])) {
-                       Debug(LDAP_DEBUG_ANY, "%s: line %lu: "
+                       Debug(LDAP_DEBUG_ANY, "%s: "
                                "password scheme \"%s\" not available\n",
-                               c->fname, c->lineno, c->argv[i] );
+                               c->log, c->argv[i], 0);
                } else {
                        ldap_charray_add(&default_passwd_hash, c->argv[i]);
                }
                if(!default_passwd_hash) {
-                       Debug(LDAP_DEBUG_ANY, "%s: line %lu: no valid hashes found\n",
-                               c->fname, c->lineno, 0 );
+                       Debug(LDAP_DEBUG_ANY, "%s: no valid hashes found\n",
+                               c->log, 0, 0 );
                        return(1);
                }
        }
@@ -739,8 +781,9 @@ config_schema_dn(ConfigArgs *c) {
        ber_str2bv(c->argv[1], 0, 1, &dn);
        rc = dnPrettyNormal(NULL, &dn, &c->be->be_schemadn, &c->be->be_schemandn, NULL);
        if(rc != LDAP_SUCCESS) {
-               Debug(LDAP_DEBUG_ANY, "%s: line %lu: "
-                       "schema DN is invalid\n", c->fname, c->lineno, 0);
+               Debug(LDAP_DEBUG_ANY, "%s: "
+                       "schema DN is invalid: %d (%s)\n",
+                       c->log, rc, ldap_err2string( rc ));
                return(1);
        }
        return(0);
@@ -753,10 +796,11 @@ config_sizelimit(ConfigArgs *c) {
        struct slap_limits_set *lim = &c->be->be_def_limit;
        for(i = 1; i < c->argc; i++) {
                if(!strncasecmp(c->argv[i], "size", 4)) {
-                       if(rc = limits_parse_one(c->argv[i], lim)) {
-                               Debug(LDAP_DEBUG_ANY, "%s: line %lu: "
+                       rc = limits_parse_one(c->argv[i], lim);
+                       if ( rc ) {
+                               Debug(LDAP_DEBUG_ANY, "%s: "
                                        "unable to parse value \"%s\" in \"sizelimit <limit>\" line\n",
-                                       c->fname, c->lineno, c->argv[i]);
+                                       c->log, c->argv[i], 0);
                                return(1);
                        }
                } else {
@@ -765,14 +809,14 @@ config_sizelimit(ConfigArgs *c) {
                        } else {
                                lim->lms_s_soft = strtol(c->argv[i], &next, 0);
                                if(next == c->argv[i]) {
-                                       Debug(LDAP_DEBUG_ANY, "%s: line %lu: "
+                                       Debug(LDAP_DEBUG_ANY, "%s: "
                                                "unable to parse limit \"%s\" in \"sizelimit <limit>\" line\n",
-                                               c->fname, c->lineno, c->argv[i]);
+                                               c->log, c->argv[i], 0);
                                        return(1);
                                } else if(next[0] != '\0') {
-                                       Debug(LDAP_DEBUG_ANY, "%s: line %lu: "
+                                       Debug(LDAP_DEBUG_ANY, "%s: "
                                                "trailing chars \"%s\" in \"sizelimit <limit>\" line (ignored)\n",
-                                               c->fname, c->lineno, next);
+                                               c->log, next, 0);
                                }
                        }
                        lim->lms_s_hard = 0;
@@ -788,10 +832,11 @@ config_timelimit(ConfigArgs *c) {
        struct slap_limits_set *lim = &c->be->be_def_limit;
        for(i = 1; i < c->argc; i++) {
                if(!strncasecmp(c->argv[i], "time", 4)) {
-                       if(rc = limits_parse_one(c->argv[i], lim)) {
-                               Debug(LDAP_DEBUG_ANY, "%s: line %lu: "
+                       rc = limits_parse_one(c->argv[i], lim);
+                       if ( rc ) {
+                               Debug(LDAP_DEBUG_ANY, "%s: "
                                        "unable to parse value \"%s\" in \"timelimit <limit>\" line\n",
-                                       c->fname, c->lineno, c->argv[i]);
+                                       c->log, c->argv[i], 0);
                                return(1);
                        }
                } else {
@@ -800,14 +845,14 @@ config_timelimit(ConfigArgs *c) {
                        } else {
                                lim->lms_t_soft = strtol(c->argv[i], &next, 0);
                                if(next == c->argv[i]) {
-                                       Debug(LDAP_DEBUG_ANY, "%s: line %lu: "
+                                       Debug(LDAP_DEBUG_ANY, "%s: "
                                                "unable to parse limit \"%s\" in \"timelimit <limit>\" line\n",
-                                               c->fname, c->lineno, c->argv[i]);
+                                               c->log, c->argv[i], 0);
                                        return(1);
                                } else if(next[0] != '\0') {
-                                       Debug(LDAP_DEBUG_ANY, "%s: line %lu: "
+                                       Debug(LDAP_DEBUG_ANY, "%s: "
                                                "trailing chars \"%s\" in \"timelimit <limit>\" line (ignored)\n",
-                                               c->fname, c->lineno, next);
+                                               c->log, next, 0);
                                }
                        }
                        lim->lms_t_hard = 0;
@@ -820,10 +865,8 @@ int
 config_overlay(ConfigArgs *c) {
        if(c->argv[1][0] == '-' && overlay_config(c->be, &c->argv[1][1])) {
                /* log error */
-               Debug(LDAP_DEBUG_ANY, "%s: line %lu: (optional) %s",
-                       c->fname, c->lineno, c->be == frontendDB ? "global " : "");
-               Debug(LDAP_DEBUG_ANY, "overlay \"%s\" configuration "
-                       "failed (ignored)\n", c->argv[1][1], 0, 0);
+               Debug(LDAP_DEBUG_ANY, "%s: (optional) %s overlay \"%s\" configuration failed (ignored)\n",
+                       c->log, c->be == frontendDB ? "global " : "", c->argv[1][1]);
        } else if(overlay_config(c->be, c->argv[1])) {
                return(1);
        }
@@ -837,9 +880,9 @@ config_suffix(ConfigArgs *c) {
        int rc;
 #ifdef SLAPD_MONITOR_DN
        if(!strcasecmp(c->argv[1], SLAPD_MONITOR_DN)) {
-               Debug(LDAP_DEBUG_ANY, "%s: line %lu: "
-                       "%s\" is reserved for monitoring slapd\n",
-                       c->fname, c->lineno, SLAPD_MONITOR_DN);
+               Debug(LDAP_DEBUG_ANY, "%s: "
+                       "\"%s\" is reserved for monitoring slapd\n",
+                       c->log, SLAPD_MONITOR_DN, 0);
                return(1);
        }
 #endif
@@ -847,26 +890,27 @@ config_suffix(ConfigArgs *c) {
 
        rc = dnPrettyNormal(NULL, &dn, &pdn, &ndn, NULL);
        if(rc != LDAP_SUCCESS) {
-               Debug(LDAP_DEBUG_ANY, "%s: line %lu: suffix DN is invalid\n",
-                       c->fname, c->lineno, 0);
+               Debug( LDAP_DEBUG_ANY,
+                       "%s: suffix DN is invalid: %d (%s)\n",
+                       c->log, rc, ldap_err2string( rc ));
                return(1);
        }
        tbe = select_backend(&ndn, 0, 0);
        if(tbe == c->be) {
-               Debug(LDAP_DEBUG_ANY, "%s: line %lu: suffix already served by this backend! (ignored)\n",
-                       c->fname, c->lineno, 0);
+               Debug(LDAP_DEBUG_ANY, "%s: suffix already served by this backend! (ignored)\n",
+                       c->log, 0, 0);
                free(pdn.bv_val);
                free(ndn.bv_val);
        } else if(tbe) {
-               Debug(LDAP_DEBUG_ANY, "%s: line %lu: suffix already served by a preceding backend \"%s\"\n",
-                       c->fname, c->lineno, tbe->be_suffix[0].bv_val);
+               Debug(LDAP_DEBUG_ANY, "%s: suffix already served by a preceding backend \"%s\"\n",
+                       c->log, tbe->be_suffix[0].bv_val, 0);
                free(pdn.bv_val);
                free(ndn.bv_val);
                return(1);
        } else if(pdn.bv_len == 0 && default_search_nbase.bv_len) {
-               Debug(LDAP_DEBUG_ANY, "%s: line %lu: suffix DN empty and default search "
+               Debug(LDAP_DEBUG_ANY, "%s: suffix DN empty and default search "
                        "base provided \"%s\" (assuming okay)\n",
-                       c->fname, c->lineno, default_search_base.bv_val);
+                       c->log, default_search_base.bv_val, 0);
        }
        ber_bvarray_add(&c->be->be_suffix, &pdn);
        ber_bvarray_add(&c->be->be_nsuffix, &ndn);
@@ -883,8 +927,9 @@ config_rootdn(ConfigArgs *c) {
        rc = dnPrettyNormal(NULL, &dn, &c->be->be_rootdn, &c->be->be_rootndn, NULL);
 
        if(rc != LDAP_SUCCESS) {
-               Debug(LDAP_DEBUG_ANY, "%s: line %lu: "
-                       "rootdn DN is invalid\n", c->fname, c->lineno, 0);
+               Debug(LDAP_DEBUG_ANY, "%s: "
+                       "rootdn DN is invalid: %d (%s)\n",
+                       c->log, rc, ldap_err2string( rc ));
                return(1);
        }
        return(0);
@@ -894,9 +939,9 @@ int
 config_rootpw(ConfigArgs *c) {
        Backend *tbe = select_backend(&c->be->be_rootndn, 0, 0);
        if(tbe != c->be) {
-               Debug(LDAP_DEBUG_ANY, "%s: line %lu: "
+               Debug(LDAP_DEBUG_ANY, "%s: "
                        "rootpw can only be set when rootdn is under suffix\n",
-                       c->fname, c->lineno, 0);
+                       c->log, 0, 0);
                return(1);
        }
        ber_str2bv(c->argv[1], 0, 1, &c->be->be_rootpw);
@@ -975,9 +1020,9 @@ config_restrict(ConfigArgs *c) {
                c->be->be_restrictops |= restrictops;
                return(0);
        }
-       Debug(LDAP_DEBUG_ANY, "%s: line %lu: "
+       Debug(LDAP_DEBUG_ANY, "%s: "
                "unknown operation %s in \"restrict <features>\" line\n",
-               c->fname, c->lineno, c->argv[i]);
+               c->log, c->argv[i], 0);
        return(1);
 }
 
@@ -992,10 +1037,11 @@ config_allows(ConfigArgs *c) {
                { "update_anon",        SLAP_ALLOW_UPDATE_ANON },
                { NULL, 0 }
        };
-       if(i = verbs_to_mask(c, allowable_ops, &allows)) {
-               Debug(LDAP_DEBUG_ANY, "%s: line %lu: "
+       i = verbs_to_mask(c, allowable_ops, &allows);
+       if ( i ) {
+               Debug(LDAP_DEBUG_ANY, "%s: "
                        "unknown feature %s in \"allow <features>\" line\n",
-                       c->fname, c->lineno, c->argv[i]);
+                       c->log, c->argv[i], 0);
                return(1);
        }
        global_allows |= allows;
@@ -1014,10 +1060,11 @@ config_disallows(ConfigArgs *c) {
                { "tls_authc",          SLAP_DISALLOW_TLS_AUTHC },
                { NULL, 0 }
        };
-       if(i = verbs_to_mask(c, disallowable_ops, &disallows)) {
-               Debug(LDAP_DEBUG_ANY, "%s: line %lu: "
+       i = verbs_to_mask(c, disallowable_ops, &disallows);
+       if ( i ) {
+               Debug(LDAP_DEBUG_ANY, "%s: "
                        "unknown feature %s in \"disallow <features>\" line\n",
-                       c->fname, c->lineno, c->argv[i]);
+                       c->log, c->argv[i], 0);
                return(1);
        }
        global_disallows |= disallows;
@@ -1036,10 +1083,11 @@ config_requires(ConfigArgs *c) {
                { "strong",             SLAP_REQUIRE_STRONG },
                { NULL, 0 }
        };
-       if(i = verbs_to_mask(c, requires_ops, &requires)) {
-               Debug(LDAP_DEBUG_ANY, "%s: line %lu: "
+       i = verbs_to_mask(c, requires_ops, &requires);
+       if ( i ) {
+               Debug(LDAP_DEBUG_ANY, "%s: "
                        "unknown feature %s in \"require <features>\" line\n",
-                       c->fname, c->lineno, c->argv[i]);
+                       c->log, c->argv[i], 0);
                return(1);
        }
        c->be->be_requires = requires;
@@ -1077,18 +1125,18 @@ config_loglevel(ConfigArgs *c) {
                        level = strtol( c->argv[i], &next, 10 );
                        if ( next == NULL || next[0] != '\0' ) {
                                Debug( LDAP_DEBUG_ANY,
-                                       "%s: line %lu: unable to parse level \"%s\" "
+                                       "%s: unable to parse level \"%s\" "
                                        "in \"loglevel <level> [...]\" line.\n",
-                                       c->fname, c->lineno , c->argv[i] );
+                                       c->log, c->argv[i], 0);
                                return( 1 );
                        }
                } else {
                        int j = verb_to_mask(c, loglevel_ops, c->argv[i][0]);
                        if(!loglevel_ops[j].word) {
                                Debug( LDAP_DEBUG_ANY,
-                                       "%s: line %lu: unknown level \"%s\" "
+                                       "%s: unknown level \"%s\" "
                                        "in \"loglevel <level> [...]\" line.\n",
-                                       c->fname, c->lineno , c->argv[i] );
+                                       c->log, c->argv[i], 0);
                                return( 1 );
                        }
                        level = loglevel_ops[j].mask;
@@ -1101,9 +1149,9 @@ config_loglevel(ConfigArgs *c) {
 int
 config_syncrepl(ConfigArgs *c) {
        if(SLAP_SHADOW(c->be)) {
-               Debug(LDAP_DEBUG_ANY, "%s: line %lu: "
+               Debug(LDAP_DEBUG_ANY, "%s: "
                        "syncrepl: database already shadowed.\n",
-                       c->fname, c->lineno, 0);
+                       c->log, 0, 0);
                return(1);
        } else if(add_syncrepl(c->be, c->argv, c->argc)) {
                return(1);
@@ -1116,9 +1164,9 @@ int
 config_referral(ConfigArgs *c) {
        struct berval vals[2];
        if(validate_global_referral(c->argv[1])) {
-               Debug(LDAP_DEBUG_ANY, "%s: line %lu: "
+               Debug(LDAP_DEBUG_ANY, "%s: "
                        "invalid URL (%s) in \"referral\" line.\n",
-                       c->fname, c->lineno, c->argv[1] );
+                       c->log, c->argv[1], 0);
                return(1);
        }
 
@@ -1164,17 +1212,17 @@ config_security(ConfigArgs *c) {
                        tgt = &set->sss_simple_bind;
                        src = &c->argv[i][12];
                } else {
-                       Debug(LDAP_DEBUG_ANY, "%s: line %lu: "
+                       Debug(LDAP_DEBUG_ANY, "%s: "
                                "unknown factor %s in \"security <factors>\" line\n",
-                               c->fname, c->lineno, c->argv[i]);
+                               c->log, c->argv[i], 0);
                        return(1);
                }
 
                *tgt = strtol(src, &next, 10);
                if(next == NULL || next[0] != '\0' ) {
-                       Debug(LDAP_DEBUG_ANY, "%s: line %lu: "
+                       Debug(LDAP_DEBUG_ANY, "%s: "
                                "unable to parse factor \"%s\" in \"security <factors>\" line\n",
-                               c->fname, c->lineno, c->argv[i]);
+                               c->log, c->argv[i], 0);
                        return(1);
                }
        }
@@ -1184,31 +1232,33 @@ config_security(ConfigArgs *c) {
 int
 config_replica(ConfigArgs *c) {
        int i, nr = -1;
-       char *replicahost;
+       char *replicahost, *replicalog = NULL;
        LDAPURLDesc *ludp;
 
        if(SLAP_MONITOR(c->be)) {
-               Debug(LDAP_DEBUG_ANY, "%s: line %lu: "
+               Debug(LDAP_DEBUG_ANY, "%s: "
                        "\"replica\" should not be used inside monitor database\n",
-                       c->fname, c->lineno, 0);
+                       c->log, 0, 0);
                return(0);      /* FIXME: should this be an error? */
        }
 
        for(i = 1; i < c->argc; i++) {
-               if(!strncasecmp(c->argv[i], "host=", 5)) {
-                       nr = add_replica_info(c->be, c->argv[i] + 5);
+               if(!strncasecmp(c->argv[i], "host=", STRLENOF("host="))) {
+                       replicalog = c->argv[i] + STRLENOF("host=");
+                       nr = add_replica_info(c->be, c->argv[i] + STRLENOF("host="));
                        break;
-               } else if(!strncasecmp(c->argv[i], "uri=", 4)) {
-                       if(ldap_url_parse(c->argv[i] + 4, &ludp) != LDAP_SUCCESS) {
-                               Debug(LDAP_DEBUG_ANY, "%s: line %lu: "
+               } else if(!strncasecmp(c->argv[i], "uri=", STRLENOF("uri="))) {
+                       if(ldap_url_parse(c->argv[i] + STRLENOF("uri="), &ludp) != LDAP_SUCCESS) {
+                               Debug(LDAP_DEBUG_ANY, "%s: "
                                        "replica line contains invalid "
-                                       "uri definition.\n", c->fname, c->lineno, 0);
+                                       "uri definition.\n", c->log, 0, 0);
                                return(1);
                        }
                        if(!ludp->lud_host) {
-                               Debug(LDAP_DEBUG_ANY, "%s: line %lu: "
+                               Debug(LDAP_DEBUG_ANY, "%s: "
                                        "replica line contains invalid "
-                                       "uri definition - missing hostname.\n", c->fname, c->lineno, 0);
+                                       "uri definition - missing hostname.\n",
+                                       c->log, 0, 0);
                                return(1);
                        }
                        replicahost = ch_malloc(strlen(c->argv[i]));
@@ -1219,6 +1269,7 @@ config_replica(ConfigArgs *c) {
                                exit(EXIT_FAILURE);
                        }
                        sprintf(replicahost, "%s:%d", ludp->lud_host, ludp->lud_port);
+                       replicalog = c->argv[i] + STRLENOF("uri=");
                        nr = add_replica_info(c->be, replicahost);
                        ldap_free_urldesc(ludp);
                        ch_free(replicahost);
@@ -1226,34 +1277,34 @@ config_replica(ConfigArgs *c) {
                }
        }
        if(i == c->argc) {
-               Debug(LDAP_DEBUG_ANY, "%s: line %lu: "
+               Debug(LDAP_DEBUG_ANY, "%s: "
                        "missing host or uri in \"replica\" line\n",
-                       c->fname, c->lineno, 0);
+                       c->log, 0, 0);
                return(1);
        } else if(nr == -1) {
-               Debug(LDAP_DEBUG_ANY, "%s: line %lu: "
+               Debug(LDAP_DEBUG_ANY, "%s: "
                        "unable to add replica \"%s\"\n",
-                       c->fname, c->lineno, c->argv[i] + 5);
+                       c->log, replicalog, 0);
                return(1);
        } else {
                for(i = 1; i < c->argc; i++) {
-                       if(!strncasecmp(c->argv[i], "suffix=", 7)) {
-                               switch(add_replica_suffix(c->be, nr, c->argv[i] + 7)) {
+                       if(!strncasecmp(c->argv[i], "suffix=", STRLENOF( "suffix="))) {
+                               switch(add_replica_suffix(c->be, nr, c->argv[i] + STRLENOF("suffix="))) {
                                        case 1:
-                                               Debug(LDAP_DEBUG_ANY, "%s: line %lu: "
+                                               Debug(LDAP_DEBUG_ANY, "%s: "
                                                "suffix \"%s\" in \"replica\" line is not valid for backend (ignored)\n",
-                                               c->fname, c->lineno, c->argv[i] + 7);
+                                               c->log, c->argv[i] + STRLENOF("suffix="), 0);
                                                break;
                                        case 2:
-                                               Debug(LDAP_DEBUG_ANY, "%s: line %lu: "
+                                               Debug(LDAP_DEBUG_ANY, "%s: "
                                                "unable to normalize suffix in \"replica\" line (ignored)\n",
-                                               c->fname, c->lineno, 0);
+                                               c->log, 0, 0);
                                                break;
                                }
 
-                       } else if(!strncasecmp(c->argv[i], "attr", 4)) {
+                       } else if(!strncasecmp(c->argv[i], "attr", STRLENOF("attr"))) {
                                int exclude = 0;
-                               char *arg = c->argv[i] + 4;
+                               char *arg = c->argv[i] + STRLENOF("attr");
                                if(arg[0] == '!') {
                                        arg++;
                                        exclude = 1;
@@ -1262,9 +1313,9 @@ config_replica(ConfigArgs *c) {
                                        continue;
                                }
                                if(add_replica_attrs(c->be, nr, arg + 1, exclude)) {
-                                       Debug(LDAP_DEBUG_ANY, "%s: line %lu: "
+                                       Debug(LDAP_DEBUG_ANY, "%s: "
                                                "attribute \"%s\" in \"replica\" line is unknown\n",
-                                               c->fname, c->lineno, arg + 1);
+                                               c->log, arg + 1, 0);
                                        return(1);
                                }
                        }
@@ -1278,9 +1329,9 @@ config_updatedn(ConfigArgs *c) {
        struct berval dn;
        int rc;
        if(SLAP_SHADOW(c->be)) {
-               Debug(LDAP_DEBUG_ANY, "%s: line %lu: "
+               Debug(LDAP_DEBUG_ANY, "%s: "
                        "updatedn: database already shadowed.\n",
-                       c->fname, c->lineno, 0);
+                       c->log, 0, 0);
                return(1);
        }
 
@@ -1289,8 +1340,9 @@ config_updatedn(ConfigArgs *c) {
        rc = dnNormalize(0, NULL, NULL, &dn, &c->be->be_update_ndn, NULL);
 
        if(rc != LDAP_SUCCESS) {
-               Debug(LDAP_DEBUG_ANY, "%s: line %lu: "
-                       "updatedn DN is invalid\n", c->fname, c->lineno, 0);
+               Debug(LDAP_DEBUG_ANY, "%s: "
+                       "updatedn DN is invalid: %d (%s)\n",
+                       c->log, rc, ldap_err2string( rc ));
                return(1);
        }
 
@@ -1302,16 +1354,16 @@ int
 config_updateref(ConfigArgs *c) {
        struct berval vals[2];
        if(!SLAP_SHADOW(c->be)) {
-               Debug(LDAP_DEBUG_ANY, "%s: line %lu: "
+               Debug(LDAP_DEBUG_ANY, "%s: "
                        "updateref line must after syncrepl or updatedn.\n",
-                       c->fname, c->lineno, 0);
+                       c->log, 0, 0);
                return(1);
        }
 
        if(validate_global_referral(c->argv[1])) {
-               Debug(LDAP_DEBUG_ANY, "%s: line %lu: "
+               Debug(LDAP_DEBUG_ANY, "%s: "
                        "invalid URL (%s) in \"updateref\" line.\n",
-                       c->fname, c->lineno, c->argv[1]);
+                       c->log, c->argv[1], 0);
                return(1);
        }
        ber_str2bv(c->argv[1], 0, 0, &vals[0]);
@@ -1347,9 +1399,9 @@ config_tls_option(ConfigArgs *c) {
 #ifdef HAVE_OPENSSL_CRL
        case CFG_TLS_CRLCHECK:  flag = LDAP_OPT_X_TLS_CRLCHECK;         break;
 #endif
-               default:                Debug(LDAP_DEBUG_ANY, "%s: line %lu: "
+               default:                Debug(LDAP_DEBUG_ANY, "%s: "
                                                "unknown tls_option <%x>\n",
-                                               c->fname, c->lineno, c->type);
+                                               c->log, c->type, 0);
        }
        return(ldap_pvt_tls_set_option(NULL, flag, c->argv[1]));
 }
@@ -1446,7 +1498,7 @@ fp_getline_init(ConfigArgs *c) {
 }
 
 static int
-fp_getline(FILE *fp, ConfigArgs *c)
+fp_getline( FILE *fp, ConfigArgs *c )
 {
        char    *p;
 
@@ -1455,24 +1507,33 @@ fp_getline(FILE *fp, ConfigArgs *c)
        c->lineno++;
 
        /* avoid stack of bufs */
-       if(strncasecmp(line, "include", 7) == 0) {
+       if ( strncasecmp( line, "include", STRLENOF( "include" ) ) == 0 ) {
                buf[0] = '\0';
                c->line = line;
                return(1);
        }
 
-       while(fgets(buf, sizeof(buf), fp)) {
-               if(p = strchr(buf, '\n')) {
-                       if(p > buf && p[-1] == '\r') --p;
+       while ( fgets( buf, sizeof( buf ), fp ) ) {
+               p = strchr( buf, '\n' );
+               if ( p ) {
+                       if ( p > buf && p[-1] == '\r' ) {
+                               --p;
+                       }
                        *p = '\0';
                }
                /* XXX ugly */
                c->line = line;
-               if(line[0] && (p = line + strlen(line) - 1)[0] == '\\' && p[-1] != '\\' ) {
+               if ( line[0]
+                               && ( p = line + strlen( line ) - 1 )[0] == '\\'
+                               && p[-1] != '\\' )
+               {
                        p[0] = '\0';
                        lcur--;
+                       
                } else {
-                       if(!isspace((unsigned char)buf[0])) return(1);
+                       if ( !isspace( (unsigned char)buf[0] ) ) {
+                               return(1);
+                       }
                        buf[0] = ' ';
                }
                CATLINE(buf);
@@ -1489,7 +1550,6 @@ fp_parse_line(ConfigArgs *c)
 {
        char *token;
        char *tline = ch_strdup(c->line);
-       char logbuf[STRLENOF("pseudorootpw ***")]; /* longest secret */
        char *hide[] = { "rootpw", "replica", "bindpw", "pseudorootpw", "dbpasswd", '\0' };
        int i;
 
@@ -1577,9 +1637,7 @@ add_syncrepl(
 )
 {
        syncinfo_t *si;
-       syncinfo_t *si_entry;
        int     rc = 0;
-       int duplicated_replica_id = 0;
 
        si = (syncinfo_t *) ch_calloc( 1, sizeof( syncinfo_t ) );
 
@@ -1589,9 +1647,6 @@ add_syncrepl(
        }
 
        si->si_tls = SYNCINFO_TLS_OFF;
-       if ( be->be_rootndn.bv_val ) {
-               ber_dupbv( &si->si_updatedn, &be->be_rootndn );
-       }
        si->si_bindmethod = LDAP_AUTH_SIMPLE;
        si->si_schemachecking = 0;
        ber_str2bv( "(objectclass=*)", STRLENOF("(objectclass=*)"), 1,
@@ -1610,9 +1665,6 @@ add_syncrepl(
        si->si_retryinterval = NULL;
        si->si_retrynum_init = NULL;
        si->si_retrynum = NULL;
-       si->si_syncCookie.ctxcsn = NULL;
-       si->si_syncCookie.octet_str = NULL;
-       si->si_syncCookie.sid = -1;
        si->si_manageDSAit = 0;
        si->si_tlimit = 0;
        si->si_slimit = 0;
@@ -1622,28 +1674,20 @@ add_syncrepl(
 
        rc = parse_syncrepl_line( cargv, cargc, si );
 
-       LDAP_STAILQ_FOREACH( si_entry, &be->be_syncinfo, si_next ) {
-               if ( si->si_rid == si_entry->si_rid ) {
-                       Debug( LDAP_DEBUG_ANY,
-                               "add_syncrepl: duplicated replica id\n",0, 0, 0 );
-                       duplicated_replica_id = 1;
-                       break;
-               }
-       }
-
-       if ( rc < 0 || duplicated_replica_id ) {
+       if ( rc < 0 ) {
                Debug( LDAP_DEBUG_ANY, "failed to add syncinfo\n", 0, 0, 0 );
                syncinfo_free( si );    
                return 1;
        } else {
                Debug( LDAP_DEBUG_CONFIG,
                        "Config: ** successfully added syncrepl \"%s\"\n",
-                       si->si_provideruri == NULL ? "(null)" : si->si_provideruri, 0, 0 );
+                       BER_BVISNULL( &si->si_provideruri ) ?
+                       "(null)" : si->si_provideruri.bv_val, 0, 0 );
                if ( !si->si_schemachecking ) {
                        SLAP_DBFLAGS(be) |= SLAP_DBFLAG_NO_SCHEMA_CHECK;
                }
                si->si_be = be;
-               LDAP_STAILQ_INSERT_TAIL( &be->be_syncinfo, si, si_next );
+               be->be_syncinfo = si;
                return 0;
        }
 }
@@ -1661,7 +1705,6 @@ add_syncrepl(
 #define SLIMITSTR              "sizelimit"
 #define TLIMITSTR              "timelimit"
 #define SCHEMASTR              "schemachecking"
-#define UPDATEDNSTR            "updatedn"
 #define BINDMETHSTR            "bindmethod"
 #define SIMPLESTR                      "simple"
 #define SASLSTR                                "sasl"
@@ -1688,6 +1731,7 @@ add_syncrepl(
 #define LMREQSTR               "req"
 #define SRVTABSTR              "srvtab"
 #define SUFFIXSTR              "suffix"
+#define UPDATEDNSTR            "updatedn"
 
 /* mandatory */
 #define GOT_ID                 0x0001
@@ -1705,9 +1749,8 @@ parse_syncrepl_line(
 )
 {
        int     gots = 0;
-       int     i, j;
-       char    *hp, *val;
-       int     nr_attr = 0;
+       int     i;
+       char    *val;
 
        for ( i = 1; i < cargc; i++ ) {
                if ( !strncasecmp( cargv[ i ], IDSTR "=",
@@ -1728,13 +1771,7 @@ parse_syncrepl_line(
                                        STRLENOF( PROVIDERSTR "=" ) ) )
                {
                        val = cargv[ i ] + STRLENOF( PROVIDERSTR "=" );
-                       si->si_provideruri = ch_strdup( val );
-                       si->si_provideruri_bv = (BerVarray)
-                               ch_calloc( 2, sizeof( struct berval ));
-                       ber_str2bv( si->si_provideruri, strlen( si->si_provideruri ),
-                               1, &si->si_provideruri_bv[0] );
-                       si->si_provideruri_bv[1].bv_len = 0;
-                       si->si_provideruri_bv[1].bv_val = NULL;
+                       ber_str2bv( val, 0, 1, &si->si_provideruri );
                        gots |= GOT_PROVIDER;
                } else if ( !strncasecmp( cargv[ i ], STARTTLSSTR "=",
                                        STRLENOF(STARTTLSSTR "=") ) )
@@ -1745,15 +1782,6 @@ parse_syncrepl_line(
                        } else {
                                si->si_tls = SYNCINFO_TLS_ON;
                        }
-               } else if ( !strncasecmp( cargv[ i ], UPDATEDNSTR "=",
-                                       STRLENOF( UPDATEDNSTR "=" ) ) )
-               {
-                       struct berval updatedn = BER_BVNULL;
-
-                       val = cargv[ i ] + STRLENOF( UPDATEDNSTR "=" );
-                       ber_str2bv( val, 0, 0, &updatedn );
-                       ch_free( si->si_updatedn.bv_val );
-                       dnNormalize( 0, NULL, NULL, &updatedn, &si->si_updatedn, NULL );
                } else if ( !strncasecmp( cargv[ i ], BINDMETHSTR "=",
                                STRLENOF( BINDMETHSTR "=" ) ) )
                {
@@ -1837,14 +1865,18 @@ parse_syncrepl_line(
                } else if ( !strncasecmp( cargv[ i ], SEARCHBASESTR "=",
                                        STRLENOF( SEARCHBASESTR "=" ) ) )
                {
-                       struct berval bv;
+                       struct berval   bv;
+                       int             rc;
+
                        val = cargv[ i ] + STRLENOF( SEARCHBASESTR "=" );
                        if ( si->si_base.bv_val ) {
                                ch_free( si->si_base.bv_val );
                        }
                        ber_str2bv( val, 0, 0, &bv );
-                       if ( dnNormalize( 0, NULL, NULL, &bv, &si->si_base, NULL )) {
-                               fprintf( stderr, "Invalid base DN \"%s\"\n", val );
+                       rc = dnNormalize( 0, NULL, NULL, &bv, &si->si_base, NULL );
+                       if ( rc != LDAP_SUCCESS ) {
+                               fprintf( stderr, "Invalid base DN \"%s\": %d (%s)\n",
+                                       val, rc, ldap_err2string( rc ) );
                                return -1;
                        }
                } else if ( !strncasecmp( cargv[ i ], SCOPESTR "=",
@@ -1923,7 +1955,6 @@ parse_syncrepl_line(
                                }
                                ch_free( attr_fname );
                        } else {
-                               int j;
                                si->si_exanlist = str2anlist( si->si_exanlist, val, " ,\t" );
                                if ( si->si_exanlist == NULL ) {
                                        return -1;
@@ -2004,7 +2035,6 @@ parse_syncrepl_line(
                } else if ( !strncasecmp( cargv[ i ], RETRYSTR "=",
                                        STRLENOF( RETRYSTR "=" ) ) )
                {
-                       char *str;
                        char **retry_list;
                        int j, k, n;
 
@@ -2086,7 +2116,6 @@ slap_str2clist( char ***out, char *in, const char *brkstr )
        char    *s;
        char    *lasts;
        int     i, j;
-       const char *text;
        char    **new;
 
        /* find last element in list */