]> git.sur5r.net Git - openldap/blobdiff - servers/slapd/connection.c
BDB_INDEX code does no harm (but no good yet, not used by filters yet).
[openldap] / servers / slapd / connection.c
index 6ee25228e39fae34a827821cd003b1894c7318d1..dd58fd82c3285e997ac435504fc2218ed019955a 100644 (file)
@@ -74,8 +74,8 @@ int connections_init(void)
 
        if( connections != NULL) {
 #ifdef NEW_LOGGING
-            LDAP_LOG(( "connection", LDAP_LEVEL_INFO,
-                       "connections_init:  already initialized.\n" ));
+               LDAP_LOG(( "connection", LDAP_LEVEL_INFO,
+                          "connections_init:  already initialized.\n" ));
 #else
                Debug( LDAP_DEBUG_ANY, "connections_init: already initialized.\n",
                        0, 0, 0 );
@@ -90,9 +90,9 @@ int connections_init(void)
 
        if( connections == NULL ) {
 #ifdef NEW_LOGGING
-            LDAP_LOG(( "connection", LDAP_LEVEL_ERR,
-                       "connections_init: allocation (%d * %ld) of connection array failed\n",
-                       dtblsize, (long) sizeof(Connection) ));
+               LDAP_LOG(( "connection", LDAP_LEVEL_ERR,
+                          "connections_init: allocation (%d * %ld) of connection array failed\n",
+                          dtblsize, (long) sizeof(Connection) ));
 #else
                Debug( LDAP_DEBUG_ANY,
                        "connections_init: allocation (%d*%ld) of connection array failed\n",
@@ -123,8 +123,8 @@ int connections_destroy(void)
 
        if( connections == NULL) {
 #ifdef NEW_LOGGING
-            LDAP_LOG(( "connection", LDAP_LEVEL_INFO,
-                       "connections_destroy: nothing to destroy.\n"));
+               LDAP_LOG(( "connection", LDAP_LEVEL_INFO,
+                          "connections_destroy: nothing to destroy.\n"));
 #else
                Debug( LDAP_DEBUG_ANY, "connections_destroy: nothing to destroy.\n",
                        0, 0, 0 );
@@ -185,7 +185,7 @@ int connections_timeout_idle(time_t now)
        int connindex;
        Connection* c;
 
-       for( c = connection_first( &connindex );
+       for( c = connection_first( &connindex );
                c != NULL;
                c = connection_next( c, &connindex ) )
        {
@@ -208,8 +208,8 @@ static Connection* connection_get( ber_socket_t s )
        Connection *c;
 
 #ifdef NEW_LOGGING
-        LDAP_LOG(( "connection", LDAP_LEVEL_ENTRY,
-                   "connection_get: socket %ld\n", (long)s ));
+       LDAP_LOG(( "connection", LDAP_LEVEL_ENTRY,
+                  "connection_get: socket %ld\n", (long)s ));
 #else
        Debug( LDAP_DEBUG_ARGS,
                "connection_get(%ld)\n",
@@ -273,8 +273,8 @@ static Connection* connection_get( ber_socket_t s )
                        assert( sd == AC_SOCKET_INVALID );
 
 #ifdef NEW_LOGGING
-                        LDAP_LOG(( "connection", LDAP_LEVEL_ARGS,
-                                   "connection_get:  connection %d not used\n", s ));
+                       LDAP_LOG(( "connection", LDAP_LEVEL_ARGS,
+                                  "connection_get:  connection %d not used\n", s ));
 #else
                        Debug( LDAP_DEBUG_TRACE,
                                "connection_get(%d): connection not used\n",
@@ -286,8 +286,8 @@ static Connection* connection_get( ber_socket_t s )
                }
 
 #ifdef NEW_LOGGING
-                LDAP_LOG(( "connection", LDAP_LEVEL_RESULTS,
-                           "connection_get: get for %d got connid %ld\n",s, c->c_connid ));
+               LDAP_LOG(( "connection", LDAP_LEVEL_RESULTS,
+                          "connection_get: get for %d got connid %ld\n",s, c->c_connid ));
 #else
                Debug( LDAP_DEBUG_TRACE,
                        "connection_get(%d): got connid=%ld\n",
@@ -300,7 +300,7 @@ static Connection* connection_get( ber_socket_t s )
                assert( c->c_conn_state != SLAP_C_INVALID );
                assert( sd != AC_SOCKET_INVALID );
 
-       c->c_activitytime = slap_get_time();
+       c->c_activitytime = slap_get_time();
        }
 
        return c;
@@ -317,7 +317,7 @@ long connection_init(
        const char* dnsname,
        const char* peername,
        const char* sockname,
-       int use_tls,
+       int tls_udp_option,
        slap_ssf_t ssf,
        const char *authid )
 {
@@ -331,17 +331,17 @@ long connection_init(
        assert( sockname != NULL );
 
 #ifndef HAVE_TLS
-       assert( !use_tls );
+       assert( tls_udp_option != 1 );
 #endif
 
        if( s == AC_SOCKET_INVALID ) {
 #ifdef NEW_LOGGING
-            LDAP_LOG(( "connection", LDAP_LEVEL_INFO,
-                       "connection_init: init of socket %ld invalid.\n", (long)s ));
+               LDAP_LOG(( "connection", LDAP_LEVEL_INFO,
+                          "connection_init: init of socket %ld invalid.\n", (long)s ));
 #else
-        Debug( LDAP_DEBUG_ANY,
-                       "connection_init(%ld): invalid.\n",
-                       (long) s, 0, 0 );
+               Debug( LDAP_DEBUG_ANY,
+                      "connection_init(%ld): invalid.\n",
+                      (long) s, 0, 0 );
 #endif
                return -1;
        }
@@ -362,75 +362,81 @@ long connection_init(
 
                c = NULL;
 
-        for( i=0; i < dtblsize; i++) {
-               ber_socket_t    sd;
+       for( i=0; i < dtblsize; i++) {
+               ber_socket_t    sd;
 
-            if( connections[i].c_struct_state == SLAP_C_UNINITIALIZED ) {
-                assert( connections[i].c_sb == 0 );
-                c = &connections[i];
-                break;
-            }
+           if( connections[i].c_struct_state == SLAP_C_UNINITIALIZED ) {
+               assert( connections[i].c_sb == 0 );
+               c = &connections[i];
+               break;
+           }
 
                        sd = AC_SOCKET_INVALID;
                        if (connections[i].c_sb != NULL)
-                       ber_sockbuf_ctrl( connections[i].c_sb, LBER_SB_OPT_GET_FD, &sd );
+                       ber_sockbuf_ctrl( connections[i].c_sb, LBER_SB_OPT_GET_FD, &sd );
            
-            if( connections[i].c_struct_state == SLAP_C_UNUSED ) {
-                assert( sd == AC_SOCKET_INVALID );
-                c = &connections[i];
-                break;
-            }
-
-            assert( connections[i].c_struct_state == SLAP_C_USED );
-            assert( connections[i].c_conn_state != SLAP_C_INVALID );
-            assert( sd != AC_SOCKET_INVALID );
-        }
-
-        if( c == NULL ) {
+           if( connections[i].c_struct_state == SLAP_C_UNUSED ) {
+               assert( sd == AC_SOCKET_INVALID );
+               c = &connections[i];
+               break;
+           }
+
+           assert( connections[i].c_struct_state == SLAP_C_USED );
+           assert( connections[i].c_conn_state != SLAP_C_INVALID );
+           assert( sd != AC_SOCKET_INVALID );
+       }
+
+       if( c == NULL ) {
 #ifdef NEW_LOGGING
-            LDAP_LOG(( "connection", LDAP_LEVEL_INFO,
-                       "connection_init: skt %d  connection table full (%d/%d)\n",
-                       s, i, dtblsize ));
+               LDAP_LOG(( "connection", LDAP_LEVEL_INFO,
+                          "connection_init: skt %d      connection table full (%d/%d)\n",
+                          s, i, dtblsize ));
 #else
-               Debug( LDAP_DEBUG_ANY,
+               Debug( LDAP_DEBUG_ANY,
                                "connection_init(%d): connection table full (%d/%d)\n",
                                s, i, dtblsize);
 #endif
-            ldap_pvt_thread_mutex_unlock( &connections_mutex );
-            return -1;
-        }
+           ldap_pvt_thread_mutex_unlock( &connections_mutex );
+           return -1;
+       }
     }
 #endif
 
     assert( c != NULL );
 
-    if( c->c_struct_state == SLAP_C_UNINITIALIZED ) {
+       if( c->c_struct_state == SLAP_C_UNINITIALIZED ) {
                c->c_authmech = NULL;
-        c->c_dn = NULL;
-        c->c_cdn = NULL;
+               c->c_dn = NULL;
+               c->c_cdn = NULL;
 
                c->c_listener_url = NULL;
                c->c_peer_domain = NULL;
-        c->c_peer_name = NULL;
-        c->c_sock_name = NULL;
+               c->c_peer_name = NULL;
+               c->c_sock_name = NULL;
 
-        c->c_ops = NULL;
-        c->c_pending_ops = NULL;
+               c->c_ops = NULL;
+               c->c_pending_ops = NULL;
 
                c->c_sasl_bind_mech = NULL;
                c->c_sasl_context = NULL;
                c->c_sasl_extra = NULL;
 
-        c->c_sb = ber_sockbuf_alloc( );
+               c->c_sb = ber_sockbuf_alloc( );
+
+               {
+                       ber_len_t max = sockbuf_max_incoming;
+                       ber_sockbuf_ctrl( c->c_sb, LBER_SB_OPT_SET_MAX_INCOMING, &max );
+               }
+
                c->c_currentber = NULL;
 
-        /* should check status of thread calls */
-        ldap_pvt_thread_mutex_init( &c->c_mutex );
-        ldap_pvt_thread_mutex_init( &c->c_write_mutex );
-        ldap_pvt_thread_cond_init( &c->c_write_cv );
+               /* should check status of thread calls */
+               ldap_pvt_thread_mutex_init( &c->c_mutex );
+               ldap_pvt_thread_mutex_init( &c->c_write_mutex );
+               ldap_pvt_thread_cond_init( &c->c_write_cv );
 
-        c->c_struct_state = SLAP_C_UNUSED;
-    }
+               c->c_struct_state = SLAP_C_UNUSED;
+       }
 
     ldap_pvt_thread_mutex_lock( &c->c_mutex );
 
@@ -468,12 +474,27 @@ long connection_init(
 
     c->c_activitytime = c->c_starttime = slap_get_time();
 
+#ifdef LDAP_CONNECTIONLESS
+       c->c_is_udp = 0;
+       if (tls_udp_option == 2)
+       {
+               c->c_is_udp = 1;
+#ifdef LDAP_DEBUG
+       ber_sockbuf_add_io( c->c_sb, &ber_sockbuf_io_debug,
+               LBER_SBIOD_LEVEL_PROVIDER, (void*)"udp_" );
+#endif
+       ber_sockbuf_add_io( c->c_sb, &ber_sockbuf_io_udp,
+               LBER_SBIOD_LEVEL_PROVIDER, (void *)&s );
+       } else
+#endif
+       {
 #ifdef LDAP_DEBUG
        ber_sockbuf_add_io( c->c_sb, &ber_sockbuf_io_debug,
                LBER_SBIOD_LEVEL_PROVIDER, (void*)"tcp_" );
 #endif
        ber_sockbuf_add_io( c->c_sb, &ber_sockbuf_io_tcp,
                LBER_SBIOD_LEVEL_PROVIDER, (void *)&s );
+       }
        ber_sockbuf_add_io( c->c_sb, &ber_sockbuf_io_readahead,
                LBER_SBIOD_LEVEL_PROVIDER, NULL );
 
@@ -486,9 +507,9 @@ long connection_init(
                c /* non-NULL */ ) < 0 )
        {
 #ifdef NEW_LOGGING
-            LDAP_LOG(( "connection", LDAP_LEVEL_INFO,
-                       "connection_init: conn %d  set nonblocking failed\n",
-                       c->c_connid ));
+               LDAP_LOG(( "connection", LDAP_LEVEL_INFO,
+                          "connection_init: conn %d  set nonblocking failed\n",
+                          c->c_connid ));
 #else
                Debug( LDAP_DEBUG_ANY,
                        "connection_init(%d, %s): set nonblocking failed\n",
@@ -505,7 +526,7 @@ long connection_init(
        c->c_tls_ssf = 0;
 
 #ifdef HAVE_TLS
-    if ( use_tls ) {
+    if ( tls_udp_option == 1 ) {
            c->c_is_tls = 1;
            c->c_needs_tls_accept = 1;
     } else {
@@ -530,14 +551,19 @@ void connection2anonymous( Connection *c )
     assert( connections != NULL );
     assert( c != NULL );
 
+       {
+               ber_len_t max = sockbuf_max_incoming;
+               ber_sockbuf_ctrl( c->c_sb, LBER_SB_OPT_SET_MAX_INCOMING, &max );
+       }
+
        if(c->c_authmech != NULL ) {
                free(c->c_authmech);
                c->c_authmech = NULL;
        }
 
     if(c->c_dn != NULL) {
-        free(c->c_dn);
-        c->c_dn = NULL;
+       free(c->c_dn);
+       c->c_dn = NULL;
     }
 
        if(c->c_cdn != NULL) {
@@ -624,9 +650,15 @@ connection_destroy( Connection *c )
                        c->c_connid, sd, 0, 0, 0 );
        }
 
-       ber_sockbuf_free( c->c_sb );
+       ber_sockbuf_free( c->c_sb );
+
        c->c_sb = ber_sockbuf_alloc( );
 
+       {
+               ber_len_t max = sockbuf_max_incoming;
+               ber_sockbuf_ctrl( c->c_sb, LBER_SB_OPT_SET_MAX_INCOMING, &max );
+       }
+
     c->c_conn_state = SLAP_C_INVALID;
     c->c_struct_state = SLAP_C_UNUSED;
 }
@@ -681,9 +713,9 @@ void connection_closing( Connection *c )
 
                ber_sockbuf_ctrl( c->c_sb, LBER_SB_OPT_GET_FD, &sd );
 #ifdef NEW_LOGGING
-                LDAP_LOG(( "connection", LDAP_LEVEL_DETAIL1,
-                           "connection_closing: conn %d readying socket %d for close.\n",
-                           c->c_connid, sd ));
+               LDAP_LOG(( "connection", LDAP_LEVEL_DETAIL1,
+                          "connection_closing: conn %d readying socket %d for close.\n",
+                          c->c_connid, sd ));
 #else
                Debug( LDAP_DEBUG_TRACE,
                        "connection_closing: readying conn=%ld sd=%d for close\n",
@@ -718,9 +750,9 @@ static void connection_close( Connection *c )
        ber_sockbuf_ctrl( c->c_sb, LBER_SB_OPT_GET_FD, &sd );
        if( c->c_ops != NULL ) {
 #ifdef NEW_LOGGING
-            LDAP_LOG(( "connection", LDAP_LEVEL_DETAIL1,
-                       "connection_close: conn %d  deferring sd %d\n",
-                       c->c_connid, sd ));
+               LDAP_LOG(( "connection", LDAP_LEVEL_DETAIL1,
+                          "connection_close: conn %d  deferring sd %d\n",
+                          c->c_connid, sd ));
 #else
                Debug( LDAP_DEBUG_TRACE,
                        "connection_close: deferring conn=%ld sd=%d\n",
@@ -730,9 +762,9 @@ static void connection_close( Connection *c )
        }
 
 #ifdef NEW_LOGGING
-        LDAP_LOG(( "connection", LDAP_LEVEL_RESULTS,
-                   "connection_close: conn %d  sd %d\n",
-                   c->c_connid, sd ));
+       LDAP_LOG(( "connection", LDAP_LEVEL_RESULTS,
+                  "connection_close: conn %d  sd %d\n",
+                  c->c_connid, sd ));
 #else
        Debug( LDAP_DEBUG_TRACE, "connection_close: conn=%ld sd=%d\n",
                c->c_connid, sd, 0 );
@@ -836,9 +868,9 @@ connection_operation( void *arg_v )
 
        if( conn->c_sasl_bind_in_progress && tag != LDAP_REQ_BIND ) {
 #ifdef NEW_LOGGING
-            LDAP_LOG(( "connection", LDAP_LEVEL_ERR,
-                       "connection_operation: conn %d  SASL bind in progress (tag=%ld).\n",
-                       conn->c_connid, (long)tag ));
+               LDAP_LOG(( "connection", LDAP_LEVEL_ERR,
+                          "connection_operation: conn %d  SASL bind in progress (tag=%ld).\n",
+                          conn->c_connid, (long)tag ));
 #else
                Debug( LDAP_DEBUG_ANY, "connection_operation: "
                        "error: SASL bind in progress (tag=%ld).\n",
@@ -893,9 +925,9 @@ connection_operation( void *arg_v )
 
        default:
 #ifdef NEW_LOGGING
-            LDAP_LOG(( "connection", LDAP_LEVEL_INFO,
-                       "connection_operation: conn %d  unknown LDAP request 0x%lx\n",
-                       conn->c_connid, tag ));
+               LDAP_LOG(( "connection", LDAP_LEVEL_INFO,
+                          "connection_operation: conn %d  unknown LDAP request 0x%lx\n",
+                          conn->c_connid, tag ));
 #else
                Debug( LDAP_DEBUG_ANY, "unknown LDAP request 0x%lx\n",
                    tag, 0, 0 );
@@ -962,9 +994,9 @@ int connection_read(ber_socket_t s)
 
        if( c == NULL ) {
 #ifdef NEW_LOGGING
-            LDAP_LOG(( "connection", LDAP_LEVEL_INFO,
-                       "connection_read: sock %ld no connection\n",
-                       (long)s ));
+               LDAP_LOG(( "connection", LDAP_LEVEL_INFO,
+                          "connection_read: sock %ld no connection\n",
+                          (long)s ));
 #else
                Debug( LDAP_DEBUG_ANY,
                        "connection_read(%ld): no connection!\n",
@@ -980,9 +1012,9 @@ int connection_read(ber_socket_t s)
 
        if( c->c_conn_state == SLAP_C_CLOSING ) {
 #ifdef NEW_LOGGING
-            LDAP_LOG(( "connection", LDAP_LEVEL_INFO,
-                       "connection_read: conn %d connection closing, ignoring input\n",
-                       c->c_connid));
+               LDAP_LOG(( "connection", LDAP_LEVEL_INFO,
+                          "connection_read: conn %d connection closing, ignoring input\n",
+                          c->c_connid));
 #else
                Debug( LDAP_DEBUG_TRACE,
                        "connection_read(%d): closing, ignoring input for id=%ld\n",
@@ -994,8 +1026,8 @@ int connection_read(ber_socket_t s)
        }
 
 #ifdef NEW_LOGGING
-        LDAP_LOG(( "connection", LDAP_LEVEL_DETAIL1,
-                   "connection_read: conn %d  checking for input.\n", c->c_connid ));
+       LDAP_LOG(( "connection", LDAP_LEVEL_DETAIL1,
+                  "connection_read: conn %d  checking for input.\n", c->c_connid ));
 #else
        Debug( LDAP_DEBUG_TRACE,
                "connection_read(%d): checking for input on id=%ld\n",
@@ -1010,9 +1042,9 @@ int connection_read(ber_socket_t s)
                        fd_set rfd;
 
 #ifdef NEW_LOGGING
-                        LDAP_LOG(( "connection", LDAP_LEVEL_ERR,
-                                   "connection_read: conn %d  TLS accept error, error %d\n",
-                                   c->c_connid, rc ));
+                       LDAP_LOG(( "connection", LDAP_LEVEL_ERR,
+                                  "connection_read: conn %d  TLS accept error, error %d\n",
+                                  c->c_connid, rc ));
 #else
                        Debug( LDAP_DEBUG_TRACE,
                                "connection_read(%d): TLS accept error "
@@ -1047,7 +1079,7 @@ int connection_read(ber_socket_t s)
                        c->c_needs_tls_accept = 0;
 
                        /* we need to let SASL know */
-                       ssl = (void *)ldap_pvt_tls_sb_handle( c->c_sb );
+                       ssl = (void *)ldap_pvt_tls_sb_ctx( c->c_sb );
 
                        c->c_tls_ssf = (slap_ssf_t) ldap_pvt_tls_get_strength( ssl );
                        if( c->c_tls_ssf > c->c_ssf ) {
@@ -1071,9 +1103,9 @@ int connection_read(ber_socket_t s)
 
                if( rc != LDAP_SUCCESS ) {
 #ifdef NEW_LOGGING
-                    LDAP_LOG(( "connection", LDAP_LEVEL_ERR,
-                               "connection_read: conn %d SASL install error %d, closing\n",
-                               c->c_connid, rc ));
+                       LDAP_LOG(( "connection", LDAP_LEVEL_ERR,
+                                  "connection_read: conn %d SASL install error %d, closing\n",
+                                  c->c_connid, rc ));
 #else
                        Debug( LDAP_DEBUG_TRACE,
                                "connection_read(%d): SASL install error "
@@ -1104,9 +1136,9 @@ int connection_read(ber_socket_t s)
 
        if( rc < 0 ) {
 #ifdef NEW_LOGGING
-            LDAP_LOG(( "connection", LDAP_LEVEL_ERR,
-                       "connection_read: conn %d  input error %d, closing.\n",
-                       c->c_connid, rc ));
+               LDAP_LOG(( "connection", LDAP_LEVEL_ERR,
+                          "connection_read: conn %d  input error %d, closing.\n",
+                          c->c_connid, rc ));
 #else
                Debug( LDAP_DEBUG_TRACE,
                        "connection_read(%d): input error=%d id=%ld, closing.\n",
@@ -1143,12 +1175,16 @@ connection_input(
        ber_len_t       len;
        ber_int_t       msgid;
        BerElement      *ber;
+#ifdef LDAP_CONNECTIONLESS
+       Sockaddr        peeraddr;
+       char            *cdn = NULL;
+#endif
 
        if ( conn->c_currentber == NULL && (conn->c_currentber = ber_alloc())
            == NULL ) {
 #ifdef NEW_LOGGING
-            LDAP_LOG(( "connection", LDAP_LEVEL_ERR,
-                       "connection_input: conn %d  ber_alloc failed.\n", conn->c_connid ));
+               LDAP_LOG(( "connection", LDAP_LEVEL_ERR,
+                          "connection_input: conn %d  ber_alloc failed.\n", conn->c_connid ));
 #else
                Debug( LDAP_DEBUG_ANY, "ber_alloc failed\n", 0, 0, 0 );
 #endif
@@ -1157,6 +1193,23 @@ connection_input(
 
        errno = 0;
 
+#ifdef LDAP_CONNECTIONLESS
+       if (conn->c_is_udp)
+       {
+               char    peername[sizeof("IP=255.255.255.255:65336")];
+               len = ber_int_sb_read(conn->c_sb, &peeraddr,
+                       sizeof(struct sockaddr));
+               if (len != sizeof(struct sockaddr))
+                       return 1;
+               sprintf( peername, "IP=%s:%d",
+                       inet_ntoa( peeraddr.sa_in_addr.sin_addr ),
+                       (unsigned) ntohs( peeraddr.sa_in_addr.sin_port ) );
+               Statslog( LDAP_DEBUG_STATS,
+                           "conn=%ld UDP request from %s (%s) accepted.\n",
+                           conn->c_connid, peername,
+                           conn->c_sock_name, 0, 0 );
+       }
+#endif
        tag = ber_get_next( conn->c_sb, &len, conn->c_currentber );
        if ( tag != LDAP_TAG_MESSAGE ) {
                int err = errno;
@@ -1165,9 +1218,9 @@ connection_input(
                ber_sockbuf_ctrl( conn->c_sb, LBER_SB_OPT_GET_FD, &sd );
 
 #ifdef NEW_LOGGING
-                LDAP_LOG(( "connection", LDAP_LEVEL_ERR,
-                           "connection_input: conn %d  ber_get_next failed, errno %d (%s).\n",
-                           conn->c_connid, err, sock_errstr(err) ));
+               LDAP_LOG(( "connection", LDAP_LEVEL_ERR,
+                          "connection_input: conn %d  ber_get_next failed, errno %d (%s).\n",
+                          conn->c_connid, err, sock_errstr(err) ));
 #else
                Debug( LDAP_DEBUG_TRACE,
                        "ber_get_next on fd %d failed errno=%d (%s)\n",
@@ -1189,9 +1242,9 @@ connection_input(
        if ( (tag = ber_get_int( ber, &msgid )) != LDAP_TAG_MSGID ) {
                /* log, close and send error */
 #ifdef NEW_LOGGING
-            LDAP_LOG(( "connection", LDAP_LEVEL_ERR,
-                       "connection_input: conn %d  ber_get_int returns 0x%lx.\n",
-                       conn->c_connid, tag ));
+               LDAP_LOG(( "connection", LDAP_LEVEL_ERR,
+                          "connection_input: conn %d  ber_get_int returns 0x%lx.\n",
+                          conn->c_connid, tag ));
 #else
                Debug( LDAP_DEBUG_ANY, "ber_get_int returns 0x%lx\n", tag, 0,
                    0 );
@@ -1203,9 +1256,9 @@ connection_input(
        if ( (tag = ber_peek_tag( ber, &len )) == LBER_ERROR ) {
                /* log, close and send error */
 #ifdef NEW_LOGGING
-            LDAP_LOG(( "connection", LDAP_LEVEL_ERR,
-                       "connection_input: conn %d  ber_peek_tag returns 0x%lx.\n",
-                       conn->c_connid, tag ));
+               LDAP_LOG(( "connection", LDAP_LEVEL_ERR,
+                          "connection_input: conn %d  ber_peek_tag returns 0x%lx.\n",
+                          conn->c_connid, tag ));
 #else
                Debug( LDAP_DEBUG_ANY, "ber_peek_tag returns 0x%lx\n", tag, 0,
                    0 );
@@ -1215,6 +1268,26 @@ connection_input(
                return -1;
        }
 
+#ifdef LDAP_CONNECTIONLESS
+       if (conn->c_is_udp) {
+               if (tag == LBER_OCTETSTRING) {
+                       ber_get_stringa( ber, &cdn );
+                       tag = ber_peek_tag(ber, &len);
+               }
+               if (tag != LDAP_REQ_ABANDON && tag != LDAP_REQ_SEARCH) {
+#ifdef NEW_LOGGING
+                   LDAP_LOG(( "connection", LDAP_LEVEL_ERR,
+                              "connection_input: conn %d  invalid req for UDP 0x%lx.\n",
+                              conn->c_connid, tag ));
+#else
+                   Debug( LDAP_DEBUG_ANY, "invalid req for UDP 0x%lx\n", tag, 0,
+                       0 );
+#endif
+                   ber_free( ber, 1 );
+                   return 0;
+               }
+       }
+#endif
        if(tag == LDAP_REQ_BIND) {
                /* immediately abandon all exiting operations upon BIND */
                connection_abandon( conn );
@@ -1222,13 +1295,20 @@ connection_input(
 
        op = slap_op_alloc( ber, msgid, tag, conn->c_n_ops_received++ );
 
+#ifdef LDAP_CONNECTIONLESS
+       op->o_peeraddr = peeraddr;
+       if (cdn) {
+           op->o_dn = cdn;
+           op->o_protocol = LDAP_VERSION2;
+       }
+#endif
        if ( conn->c_conn_state == SLAP_C_BINDING
                || conn->c_conn_state == SLAP_C_CLOSING )
        {
 #ifdef NEW_LOGGING
-            LDAP_LOG(( "connection", LDAP_LEVEL_INFO,
-                       "connection_input: conn %d  deferring operation\n",
-                       conn->c_connid ));
+               LDAP_LOG(( "connection", LDAP_LEVEL_INFO,
+                          "connection_input: conn %d  deferring operation\n",
+                          conn->c_connid ));
 #else
                Debug( LDAP_DEBUG_ANY, "deferring operation\n", 0, 0, 0 );
 #endif
@@ -1266,9 +1346,9 @@ connection_resched( Connection *conn )
 
                if( rc ) {
 #ifdef NEW_LOGGING
-                    LDAP_LOG(( "connection", LDAP_LEVEL_DETAIL1,
-                               "connection_resched: conn %d  reaquiring locks.\n",
-                               conn->c_connid ));
+                       LDAP_LOG(( "connection", LDAP_LEVEL_DETAIL1,
+                                  "connection_resched: conn %d  reaquiring locks.\n",
+                                  conn->c_connid ));
 #else
                        Debug( LDAP_DEBUG_TRACE,
                                "connection_resched: reaquiring locks conn=%ld sd=%d\n",
@@ -1286,9 +1366,9 @@ connection_resched( Connection *conn )
 
                if( conn->c_conn_state != SLAP_C_CLOSING ) {
 #ifdef NEW_LOGGING
-                    LDAP_LOG(( "connection", LDAP_LEVEL_INFO,
-                               "connection_resched: conn %d  closed by other thread.\n",
-                               conn->c_connid ));
+                       LDAP_LOG(( "connection", LDAP_LEVEL_INFO,
+                                  "connection_resched: conn %d  closed by other thread.\n",
+                                  conn->c_connid ));
 #else
                        Debug( LDAP_DEBUG_TRACE, "connection_resched: "
                                "closed by other thread conn=%ld sd=%d\n",
@@ -1296,9 +1376,9 @@ connection_resched( Connection *conn )
 #endif
                } else {
 #ifdef NEW_LOGGING
-                    LDAP_LOG(( "connection", LDAP_LEVEL_DETAIL1,
-                               "connection_resched: conn %d  attempting closing.\n",
-                               conn->c_connid ));
+                       LDAP_LOG(( "connection", LDAP_LEVEL_DETAIL1,
+                                  "connection_resched: conn %d  attempting closing.\n",
+                                  conn->c_connid ));
 #else
                        Debug( LDAP_DEBUG_TRACE, "connection_resched: "
                                "attempting closing conn=%ld sd=%d\n",
@@ -1349,16 +1429,20 @@ static int connection_op_activate( Connection *conn, Operation *op )
        arg->co_conn = conn;
        arg->co_op = op;
 
-       arg->co_op->o_authz = conn->c_authz;
-       arg->co_op->o_dn = ch_strdup( conn->c_dn != NULL ? conn->c_dn : "" );
+       if (!arg->co_op->o_dn) {
+           arg->co_op->o_authz = conn->c_authz;
+           arg->co_op->o_dn = ch_strdup( conn->c_dn != NULL ? conn->c_dn : "" );
+       }
        arg->co_op->o_ndn = ch_strdup( arg->co_op->o_dn );
        (void) dn_normalize( arg->co_op->o_ndn );
        arg->co_op->o_authtype = conn->c_authtype;
        arg->co_op->o_authmech = conn->c_authmech != NULL
                ?  ch_strdup( conn->c_authmech ) : NULL;
        
-       arg->co_op->o_protocol = conn->c_protocol
+       if (!arg->co_op->o_protocol) {
+           arg->co_op->o_protocol = conn->c_protocol
                ? conn->c_protocol : LDAP_VERSION3;
+       }
        arg->co_op->o_connid = conn->c_connid;
 
        slap_op_add( &conn->c_ops, arg->co_op );
@@ -1368,9 +1452,9 @@ static int connection_op_activate( Connection *conn, Operation *op )
 
        if ( status != 0 ) {
 #ifdef NEW_LOGGING
-            LDAP_LOG(( "connection", LDAP_LEVEL_ERR,
-                       "connection_op_activate: conn %d  thread pool submit failed.\n",
-                       conn->c_connid ));
+               LDAP_LOG(( "connection", LDAP_LEVEL_ERR,
+                          "connection_op_activate: conn %d      thread pool submit failed.\n",
+                          conn->c_connid ));
 #else
                Debug( LDAP_DEBUG_ANY,
                "ldap_pvt_thread_pool_submit failed (%d)\n", status, 0, 0 );
@@ -1394,8 +1478,8 @@ int connection_write(ber_socket_t s)
 
        if( c == NULL ) {
 #ifdef NEW_LOGGING
-            LDAP_LOG(( "connection", LDAP_LEVEL_ERR,
-                       "connection_write: sock %ld  no connection!\n",(long)s));
+               LDAP_LOG(( "connection", LDAP_LEVEL_ERR,
+                          "connection_write: sock %ld  no connection!\n",(long)s));
 #else
                Debug( LDAP_DEBUG_ANY,
                        "connection_write(%ld): no connection!\n",
@@ -1409,9 +1493,9 @@ int connection_write(ber_socket_t s)
        c->c_n_write++;
 
 #ifdef NEW_LOGGING
-        LDAP_LOG(( "connection", LDAP_LEVEL_DETAIL1,
-                   "connection_write conn %d  waking output.\n",
-                   c->c_connid ));
+       LDAP_LOG(( "connection", LDAP_LEVEL_DETAIL1,
+                  "connection_write conn %d  waking output.\n",
+                  c->c_connid ));
 #else
        Debug( LDAP_DEBUG_TRACE,
                "connection_write(%d): waking output for id=%ld\n",