]> git.sur5r.net Git - openldap/blobdiff - servers/slapd/dn.c
ITS#1716 is_entry_subentr/ies/y/
[openldap] / servers / slapd / dn.c
index 4b3394a82223f745d2c077162819a38f73a59716..450691d326a5c076b48dfc116a07b0e8f5f409b5 100644 (file)
@@ -1,7 +1,7 @@
 /* dn.c - routines for dealing with distinguished names */
 /* $OpenLDAP$ */
 /*
- * Copyright 1998-2000 The OpenLDAP Foundation, All Rights Reserved.
+ * Copyright 1998-2002 The OpenLDAP Foundation, All Rights Reserved.
  * COPYING RESTRICTIONS APPLY, see COPYRIGHT file
  */
 
 
 #include "slap.h"
 
+const struct berval slap_empty_bv = { 0, "" };
+
 #define SLAP_LDAPDN_PRETTY 0x1
 
+#define SLAP_LDAPDN_MAXLEN 8192
+
 /*
  * The DN syntax-related functions take advantage of the dn representation
  * handling functions ldap_str2dn/ldap_dn2str.  The latter are not schema-
@@ -49,14 +53,14 @@ LDAPDN_validate( LDAPDN *dn )
 
        assert( dn );
 
-       for ( iRDN = 0; dn[ iRDN ]; iRDN++ ) {
-               LDAPRDN         *rdn = dn[ iRDN ][ 0 ];
+       for ( iRDN = 0; dn[ 0 ][ iRDN ]; iRDN++ ) {
+               LDAPRDN         *rdn = dn[ 0 ][ iRDN ];
                int             iAVA;
 
                assert( rdn );
 
-               for ( iAVA = 0; rdn[ iAVA ]; iAVA++ ) {
-                       LDAPAVA                 *ava = rdn[ iAVA ][ 0 ];
+               for ( iAVA = 0; rdn[ 0 ][ iAVA ]; iAVA++ ) {
+                       LDAPAVA                 *ava = rdn[ 0 ][ iAVA ];
                        AttributeDescription    *ad;
                        slap_syntax_validate_func *validate = NULL;
 
@@ -65,7 +69,7 @@ LDAPDN_validate( LDAPDN *dn )
                        if ( ( ad = AVA_PRIVATE( ava ) ) == NULL ) {
                                const char      *text = NULL;
 
-                               rc = slap_bv2ad( ava->la_attr, &ad, &text );
+                               rc = slap_bv2ad( &ava->la_attr, &ad, &text );
                                if ( rc != LDAP_SUCCESS ) {
                                        return LDAP_INVALID_SYNTAX;
                                }
@@ -76,8 +80,7 @@ LDAPDN_validate( LDAPDN *dn )
                        /* 
                         * Replace attr oid/name with the canonical name
                         */
-                       ber_bvfree( ava->la_attr );
-                       ava->la_attr = ber_bvdup( &ad->ad_cname );
+                       ava->la_attr = ad->ad_cname;
 
                        validate = ad->ad_type->sat_syntax->ssyn_validate;
 
@@ -86,7 +89,7 @@ LDAPDN_validate( LDAPDN *dn )
                                 * validate value by validate function
                                 */
                                rc = ( *validate )( ad->ad_type->sat_syntax,
-                                       ava->la_value );
+                                       &ava->la_value );
                        
                                if ( rc != LDAP_SUCCESS ) {
                                        return LDAP_INVALID_SYNTAX;
@@ -112,25 +115,30 @@ dnValidate(
        assert( in );
 
        if ( in->bv_len == 0 ) {
-               return( LDAP_SUCCESS );
+               return LDAP_SUCCESS;
+
+       } else if ( in->bv_len > SLAP_LDAPDN_MAXLEN ) {
+               return LDAP_INVALID_SYNTAX;
+       }
+
+       rc = ldap_bv2dn( in, &dn, LDAP_DN_FORMAT_LDAP );
+       if ( rc != LDAP_SUCCESS ) {
+               return LDAP_INVALID_SYNTAX;
        }
 
-       rc = ldap_str2dn( in->bv_val, &dn, LDAP_DN_FORMAT_LDAP );
+       assert( strlen( in->bv_val ) == in->bv_len );
 
        /*
         * Schema-aware validate
         */
-       if ( rc == LDAP_SUCCESS ) {
-               rc = LDAPDN_validate( dn );
-       }
-       
+       rc = LDAPDN_validate( dn );
        ldap_dnfree( dn );
-       
+
        if ( rc != LDAP_SUCCESS ) {
-               return( LDAP_INVALID_SYNTAX );
+               return LDAP_INVALID_SYNTAX;
        }
 
-       return( LDAP_SUCCESS );
+       return LDAP_SUCCESS;
 }
 
 /*
@@ -141,6 +149,9 @@ dnValidate(
  * (use memcmp, which implies alphabetical order in case of IA5 value;
  * this should guarantee the repeatability of the operation).
  *
+ * Note: the sorting can be slightly improved by sorting first
+ * by attribute type length, then by alphabetical order.
+ *
  * uses a linear search; should be fine since the number of AVAs in
  * a RDN should be limited.
  */
@@ -148,18 +159,18 @@ static void
 AVA_Sort( LDAPRDN *rdn, int iAVA )
 {
        int             i;
-       LDAPAVA         *ava_in = rdn[ iAVA ][ 0 ];
+       LDAPAVA         *ava_in = rdn[ 0 ][ iAVA ];
 
        assert( rdn );
        assert( ava_in );
        
        for ( i = 0; i < iAVA; i++ ) {
-               LDAPAVA         *ava = rdn[ i ][ 0 ];
+               LDAPAVA         *ava = rdn[ 0 ][ i ];
                int             a, j;
 
                assert( ava );
 
-               a = strcmp( ava_in->la_attr->bv_val, ava->la_attr->bv_val );
+               a = strcmp( ava_in->la_attr.bv_val, ava->la_attr.bv_val );
 
                if ( a > 0 ) {
                        break;
@@ -168,12 +179,12 @@ AVA_Sort( LDAPRDN *rdn, int iAVA )
                while ( a == 0 ) {
                        int             v, d;
 
-                       d = ava_in->la_value->bv_len - ava->la_value->bv_len;
+                       d = ava_in->la_value.bv_len - ava->la_value.bv_len;
 
-                       v = memcmp( ava_in->la_value->bv_val, 
-                                       ava->la_value->bv_val,
-                                       d <= 0 ? ava_in->la_value->bv_len 
-                                               : ava->la_value->bv_len );
+                       v = memcmp( ava_in->la_value.bv_val, 
+                                       ava->la_value.bv_val,
+                                       d <= 0 ? ava_in->la_value.bv_len 
+                                               : ava->la_value.bv_len );
 
                        if ( v == 0 && d != 0 ) {
                                v = d;
@@ -193,18 +204,18 @@ AVA_Sort( LDAPRDN *rdn, int iAVA )
                                return;
                        }
 
-                       ava = rdn[ i ][ 0 ];
-                       a = strcmp( ava_in->la_value->bv_val, 
-                                       ava->la_value->bv_val );
+                       ava = rdn[ 0 ][ i ];
+                       a = strcmp( ava_in->la_attr.bv_val, 
+                                       ava->la_attr.bv_val );
                }
 
                /*
                 * move ahead
                 */
                for ( j = iAVA; j > i; j-- ) {
-                       rdn[ j ][ 0 ] = rdn[ j - 1 ][ 0 ];
+                       rdn[ 0 ][ j ] = rdn[ 0 ][ j - 1 ];
                }
-               rdn[ i ][ 0 ] = ava_in;
+               rdn[ 0 ][ i ] = ava_in;
 
                return;
        }
@@ -222,52 +233,77 @@ LDAPDN_rewrite( LDAPDN *dn, unsigned flags )
 
        assert( dn );
 
-       for ( iRDN = 0; dn[ iRDN ]; iRDN++ ) {
-               LDAPRDN         *rdn = dn[ iRDN ][ 0 ];
+       for ( iRDN = 0; dn[ 0 ][ iRDN ]; iRDN++ ) {
+               LDAPRDN         *rdn = dn[ 0 ][ iRDN ];
                int             iAVA;
 
                assert( rdn );
 
-               for ( iAVA = 0; rdn[ iAVA ]; iAVA++ ) {
-                       LDAPAVA                 *ava = rdn[ iAVA ][ 0 ];
+               for ( iAVA = 0; rdn[ 0 ][ iAVA ]; iAVA++ ) {
+                       LDAPAVA                 *ava = rdn[ 0 ][ iAVA ];
                        AttributeDescription    *ad;
+                       slap_syntax_validate_func *validf = NULL;
                        slap_syntax_transform_func *transf = NULL;
                        MatchingRule *mr;
-                       struct berval           *bv = NULL;
+                       struct berval           bv = { 0, NULL };
+                       int                     do_sort = 0;
 
                        assert( ava );
 
                        if ( ( ad = AVA_PRIVATE( ava ) ) == NULL ) {
                                const char      *text = NULL;
 
-                               rc = slap_bv2ad( ava->la_attr, &ad, &text );
+                               rc = slap_bv2ad( &ava->la_attr, &ad, &text );
                                if ( rc != LDAP_SUCCESS ) {
                                        return LDAP_INVALID_SYNTAX;
                                }
                                
                                ava->la_private = ( void * )ad;
+                               do_sort = 1;
                        }
 
                        /* 
                         * Replace attr oid/name with the canonical name
                         */
-                       ber_bvfree( ava->la_attr );
-                       ava->la_attr = ber_bvdup( &ad->ad_cname );
+                       ava->la_attr = ad->ad_cname;
 
-                       if( flags & SLAP_LDAPDN_PRETTY ) {
+                       if( ava->la_flags & LDAP_AVA_BINARY ) {
+                               /* AVA is binary encoded, don't muck with it */
+                               validf = NULL;
+                               transf = NULL;
+                               mr = NULL;
+                       } else if( flags & SLAP_LDAPDN_PRETTY ) {
+                               validf = NULL;
                                transf = ad->ad_type->sat_syntax->ssyn_pretty;
                                mr = NULL;
                        } else {
+                               validf = ad->ad_type->sat_syntax->ssyn_validate;
                                transf = ad->ad_type->sat_syntax->ssyn_normalize;
                                mr = ad->ad_type->sat_equality;
                        }
 
+                       if ( validf ) {
+                               /* validate value before normalization */
+                               rc = ( *validf )( ad->ad_type->sat_syntax,
+                                       ava->la_value.bv_len
+                                               ? &ava->la_value
+                                               : (struct berval *) &slap_empty_bv );
+
+                               if ( rc != LDAP_SUCCESS ) {
+                                       return LDAP_INVALID_SYNTAX;
+                               }
+                       }
+
                        if ( transf ) {
                                /*
                                 * transform value by normalize/pretty function
+                                *      if value is empty, use empty_bv
                                 */
                                rc = ( *transf )( ad->ad_type->sat_syntax,
-                                       ava->la_value, &bv );
+                                       ava->la_value.bv_len
+                                               ? &ava->la_value
+                                               : (struct berval *) &slap_empty_bv,
+                                       &bv );
                        
                                if ( rc != LDAP_SUCCESS ) {
                                        return LDAP_INVALID_SYNTAX;
@@ -275,20 +311,21 @@ LDAPDN_rewrite( LDAPDN *dn, unsigned flags )
                        }
 
                        if( mr && ( mr->smr_usage & SLAP_MR_DN_FOLD ) ) {
-                               struct berval *s = bv;
+                               char *s = bv.bv_val;
 
-                               bv = ber_bvstr( UTF8normalize( bv ? bv : ava->la_value, 
-                                       UTF8_CASEFOLD ) );
-
-                               ber_bvfree( s );
+                               if ( UTF8bvnormalize( &bv, &bv, 
+                                               LDAP_UTF8_CASEFOLD ) == NULL ) {
+                                       return LDAP_INVALID_SYNTAX;
+                               }
+                               free( s );
                        }
 
-                       if( bv ) {
-                               ber_bvfree( ava->la_value );
+                       if( bv.bv_val ) {
+                               free( ava->la_value.bv_val );
                                ava->la_value = bv;
                        }
 
-                       AVA_Sort( rdn, iAVA );
+                       if( do_sort ) AVA_Sort( rdn, iAVA );
                }
        }
 
@@ -304,28 +341,45 @@ dnNormalize(
        struct berval *val,
        struct berval **normalized )
 {
-       struct berval *out = NULL;
-
-       Debug( LDAP_DEBUG_TRACE, ">>> dnNormalize: <%s>\n", val->bv_val, 0, 0 );
+       struct berval *out;
+       int rc;
+
+       assert( normalized && *normalized == NULL );
+
+       out = ch_malloc( sizeof( struct berval ) );
+       rc = dnNormalize2( syntax, val, out );
+       if ( rc != LDAP_SUCCESS )
+               free( out );
+       else
+               *normalized = out;
+       return rc;
+}
 
+int
+dnNormalize2(
+       Syntax *syntax,
+       struct berval *val,
+       struct berval *out )
+{
        assert( val );
-       assert( normalized );
+       assert( out );
 
-       assert( *normalized == NULL );
+       Debug( LDAP_DEBUG_TRACE, ">>> dnNormalize: <%s>\n", val->bv_val, 0, 0 );
 
        if ( val->bv_len != 0 ) {
                LDAPDN          *dn = NULL;
-               char            *dn_out = NULL;
                int             rc;
 
                /*
                 * Go to structural representation
                 */
-               rc = ldap_str2dn( val->bv_val, &dn, LDAP_DN_FORMAT_LDAP );
+               rc = ldap_bv2dn( val, &dn, LDAP_DN_FORMAT_LDAP );
                if ( rc != LDAP_SUCCESS ) {
                        return LDAP_INVALID_SYNTAX;
                }
 
+               assert( strlen( val->bv_val ) == val->bv_len );
+
                /*
                 * Schema-aware rewrite
                 */
@@ -337,23 +391,19 @@ dnNormalize(
                /*
                 * Back to string representation
                 */
-               rc = ldap_dn2str( dn, &dn_out, LDAP_DN_FORMAT_LDAPV3 );
+               rc = ldap_dn2bv( dn, out, LDAP_DN_FORMAT_LDAPV3 );
 
                ldap_dnfree( dn );
 
                if ( rc != LDAP_SUCCESS ) {
                        return LDAP_INVALID_SYNTAX;
                }
-
-               out = ber_bvstr( dn_out );
-
        } else {
-               out = ber_bvdup( val );
+               ber_dupbv( out, val );
        }
 
        Debug( LDAP_DEBUG_TRACE, "<<< dnNormalize: <%s>\n", out->bv_val, 0, 0 );
 
-       *normalized = out;
        return LDAP_SUCCESS;
 }
 
@@ -366,25 +416,49 @@ dnPretty(
        struct berval *val,
        struct berval **pretty)
 {
-       struct berval *out = NULL;
+       struct berval *out;
+       int rc;
+
+       assert( pretty && *pretty == NULL );
+
+       out = ch_malloc( sizeof( struct berval ) );
+       rc = dnPretty2( syntax, val, out );
+       if ( rc != LDAP_SUCCESS )
+               free( out );
+       else
+               *pretty = out;
+       return rc;
+}
+
+int
+dnPretty2(
+       Syntax *syntax,
+       struct berval *val,
+       struct berval *out)
+{
+       assert( val );
+       assert( out );
 
        Debug( LDAP_DEBUG_TRACE, ">>> dnPretty: <%s>\n", val->bv_val, 0, 0 );
 
-       assert( val );
-       assert( pretty );
-       assert( *pretty == NULL );
+       if ( val->bv_len == 0 ) {
+               ber_dupbv( out, val );
 
-       if ( val->bv_len != 0 ) {
+       } else if ( val->bv_len > SLAP_LDAPDN_MAXLEN ) {
+               return LDAP_INVALID_SYNTAX;
+
+       } else {
                LDAPDN          *dn = NULL;
-               char            *dn_out = NULL;
                int             rc;
 
                /* FIXME: should be liberal in what we accept */
-               rc = ldap_str2dn( val->bv_val, &dn, LDAP_DN_FORMAT_LDAP );
+               rc = ldap_bv2dn( val, &dn, LDAP_DN_FORMAT_LDAP );
                if ( rc != LDAP_SUCCESS ) {
                        return LDAP_INVALID_SYNTAX;
                }
 
+               assert( strlen( val->bv_val ) == val->bv_len );
+
                /*
                 * Schema-aware rewrite
                 */
@@ -397,7 +471,7 @@ dnPretty(
                /* RE: the default is the form that is used as
                 * an internal representation; the pretty form
                 * is a variant */
-               rc = ldap_dn2str( dn, &dn_out,
+               rc = ldap_dn2bv( dn, out,
                        LDAP_DN_FORMAT_LDAPV3 | LDAP_DN_PRETTY );
 
                ldap_dnfree( dn );
@@ -405,17 +479,10 @@ dnPretty(
                if ( rc != LDAP_SUCCESS ) {
                        return LDAP_INVALID_SYNTAX;
                }
-
-               out = ber_bvstr( dn_out );
-
-       } else {
-               out = ber_bvdup( val );
        }
 
        Debug( LDAP_DEBUG_TRACE, "<<< dnPretty: <%s>\n", out->bv_val, 0, 0 );
 
-       *pretty = out;
-
        return LDAP_SUCCESS;
 }
 
@@ -435,9 +502,16 @@ dnPrettyNormal(
        assert( pretty );
        assert( normal );
 
-       if ( val->bv_len != 0 ) {
+       if ( val->bv_len == 0 ) {
+               ber_dupbv( pretty, val );
+               ber_dupbv( normal, val );
+
+       } else if ( val->bv_len > SLAP_LDAPDN_MAXLEN ) {
+               /* too big */
+               return LDAP_INVALID_SYNTAX;
+
+       } else {
                LDAPDN          *dn = NULL;
-               char            *dn_out = NULL;
                int             rc;
 
                pretty->bv_val = NULL;
@@ -446,11 +520,13 @@ dnPrettyNormal(
                normal->bv_len = 0;
 
                /* FIXME: should be liberal in what we accept */
-               rc = ldap_str2dn( val->bv_val, &dn, LDAP_DN_FORMAT_LDAP );
+               rc = ldap_bv2dn( val, &dn, LDAP_DN_FORMAT_LDAP );
                if ( rc != LDAP_SUCCESS ) {
                        return LDAP_INVALID_SYNTAX;
                }
 
+               assert( strlen( val->bv_val ) == val->bv_len );
+
                /*
                 * Schema-aware rewrite
                 */
@@ -459,7 +535,7 @@ dnPrettyNormal(
                        return LDAP_INVALID_SYNTAX;
                }
 
-               rc = ldap_dn2str( dn, &dn_out,
+               rc = ldap_dn2bv( dn, pretty,
                        LDAP_DN_FORMAT_LDAPV3 | LDAP_DN_PRETTY );
 
                if ( rc != LDAP_SUCCESS ) {
@@ -467,8 +543,6 @@ dnPrettyNormal(
                        return LDAP_INVALID_SYNTAX;
                }
 
-               ber_str2bv( dn_out, 0, 0, pretty );
-
                if ( LDAPDN_rewrite( dn, 0 ) != LDAP_SUCCESS ) {
                        ldap_dnfree( dn );
                        free( pretty->bv_val );
@@ -477,7 +551,7 @@ dnPrettyNormal(
                        return LDAP_INVALID_SYNTAX;
                }
 
-               rc = ldap_dn2str( dn, &dn_out, LDAP_DN_FORMAT_LDAPV3 );
+               rc = ldap_dn2bv( dn, normal, LDAP_DN_FORMAT_LDAPV3 );
 
                ldap_dnfree( dn );
                if ( rc != LDAP_SUCCESS ) {
@@ -486,11 +560,6 @@ dnPrettyNormal(
                        pretty->bv_len = 0;
                        return LDAP_INVALID_SYNTAX;
                }
-
-               ber_str2bv( dn_out, 0, 0, normal );
-       } else {
-               ber_dupbv( pretty, val );
-               ber_dupbv( normal, val );
        }
 
        Debug( LDAP_DEBUG_TRACE, "<<< dnPrettyNormal: <%s>, <%s>\n",
@@ -521,7 +590,8 @@ dnMatch(
        match = value->bv_len - asserted->bv_len;
 
        if ( match == 0 ) {
-               match = strcmp( value->bv_val, asserted->bv_val );
+               match = memcmp( value->bv_val, asserted->bv_val, 
+                               value->bv_len );
        }
 
 #ifdef NEW_LOGGING
@@ -537,160 +607,44 @@ dnMatch(
        return( LDAP_SUCCESS );
 }
 
-#ifdef SLAP_DN_MIGRATION
-/*
- * these routines are provided for migration purposes only!
- *     dn_validate is deprecated in favor of dnValidate
- *     dn_normalize is deprecated in favor of dnNormalize
- *     strcmp/strcasecmp for DNs is deprecated in favor of dnMatch
- *
- * other routines are likewise deprecated but may not yet have
- * replacement functions.
- */
-
-/*
- * dn_validate - validate and compress dn.  the dn is
- * compressed in place are returned if valid.
- * Deprecated in favor of dnValidate()
- */
-char *
-dn_validate( char *dn )
-{
-       struct berval val;
-       struct berval *pretty = NULL;
-       int             rc;
-
-       if ( dn == NULL || dn[0] == '\0' ) {
-               return dn;
-       }
-
-       val.bv_val = dn;
-       val.bv_len = strlen( dn );
-
-       rc = dnPretty( NULL, &val, &pretty );
-       if ( rc != LDAP_SUCCESS ) {
-               return NULL;
-       }
-
-       if ( val.bv_len < pretty->bv_len ) {
-               ber_bvfree( pretty );
-               return NULL;
-       }
-
-       AC_MEMCPY( dn, pretty->bv_val, pretty->bv_len + 1 );
-       ber_bvfree( pretty );
-
-       return dn;
-}
-
-/*
- * dn_normalize - put dn into a canonical form suitable for storing
- * in a hash database. this involves normalizing the case as well as
- * the format. the dn is normalized in place as well as returned if valid.
- * Deprecated in favor of dnNormalize()
- */
-char *
-dn_normalize( char *dn )
-{
-       struct berval val;
-       struct berval *normalized = NULL;
-       int             rc;
-
-       if ( dn == NULL || dn[0] == '\0' ) {
-               return dn;
-       }
-
-       val.bv_val = dn;
-       val.bv_len = strlen( dn );
-
-       rc = dnNormalize( NULL, &val, &normalized );
-       if ( rc != LDAP_SUCCESS ) {
-               return NULL;
-       }
-
-       if ( val.bv_len < normalized->bv_len ) {
-               ber_bvfree( normalized );
-               return NULL;
-       }
-
-       AC_MEMCPY( dn, normalized->bv_val, normalized->bv_len + 1 );
-       ber_bvfree( normalized );
-
-       return dn;
-}
-
 /*
  * dnParent - dn's parent, in-place
+ *
+ * note: the incoming dn is assumed to be normalized/prettyfied,
+ * so that escaped rdn/ava separators are in '\'+hexpair form
  */
-int
+void
 dnParent( 
-       const char      *dn, 
-       const char      **pdn )
+       struct berval   *dn, 
+       struct berval   *pdn )
 {
-       LDAPRDN         *tmpRDN;
-       const char      *p;
-       int             rc;
+       char    *p;
 
-       rc = ldap_str2rdn( dn, &tmpRDN, &p, LDAP_DN_FORMAT_LDAP );
-       if ( rc != LDAP_SUCCESS ) {
-               return rc;
+       p = strchr( dn->bv_val, ',' );
+
+       /* one-level dn */
+       if ( p == NULL ) {
+               *pdn = slap_empty_bv;
+               return;
        }
-       ldap_rdnfree( tmpRDN );
 
        assert( DN_SEPARATOR( p[ 0 ] ) );
        p++;
 
-       while ( ASCII_SPACE( p[ 0 ] ) ) {
-               p++;
-       }
-
-       *pdn = p;
+       assert( ATTR_LEADCHAR( p[ 0 ] ) );
+       pdn->bv_val = p;
+       pdn->bv_len = dn->bv_len - (p - dn->bv_val);
 
-       return LDAP_SUCCESS;
-}
-
-/*
- * dn_parent - return the dn's parent, in-place
- * FIXME: should be replaced by dnParent()
- */
-char *
-dn_parent(
-       Backend         *be,
-       const char      *dn )
-{
-       const char      *pdn;
-
-       if ( dn == NULL ) {
-               return NULL;
-       }
-
-       while ( dn[ 0 ] != '\0' && ASCII_SPACE( dn[ 0 ] ) ) {
-               dn++;
-       }
-
-       if ( dn[ 0 ] == '\0' ) {
-               return NULL;
-       }
-
-       if ( be != NULL && be_issuffix( be, dn ) ) {
-               return NULL;
-       }
-
-       if ( dnParent( dn, &pdn ) != LDAP_SUCCESS ) {
-               return NULL;
-       }
-       
-       return ( char * )pdn;
+       return;
 }
 
 int
 dnExtractRdn( 
        struct berval   *dn, 
-       struct berval   **rdn )
+       struct berval   *rdn )
 {
        LDAPRDN         *tmpRDN;
        const char      *p;
-       char            *rdnout;
        int             rc;
 
        assert( dn );
@@ -700,36 +654,29 @@ dnExtractRdn(
                return LDAP_OTHER;
        }
 
-       rc = ldap_str2rdn( dn->bv_val, &tmpRDN, &p, LDAP_DN_FORMAT_LDAP );
+       rc = ldap_bv2rdn( dn, &tmpRDN, (char **)&p, LDAP_DN_FORMAT_LDAP );
        if ( rc != LDAP_SUCCESS ) {
                return rc;
        }
 
-       rc = ldap_rdn2str( tmpRDN, &rdnout, LDAP_DN_FORMAT_LDAPV3 );
+       rc = ldap_rdn2bv( tmpRDN, rdn, LDAP_DN_FORMAT_LDAPV3 );
        ldap_rdnfree( tmpRDN );
        if ( rc != LDAP_SUCCESS ) {
                return rc;
        }
 
-       *rdn = ber_bvstr( rdnout );
-       if ( *rdn == NULL ) {
-               free( rdnout );
-               return LDAP_NO_MEMORY;
-       }
-
        return LDAP_SUCCESS;
 }
 
 /*
- * FIXME: should be replaced by dnExtractRdn() (together with dn_rdn)
+ * We can assume the input is a prettied or normalized DN
  */
 int 
 dn_rdnlen(
        Backend         *be,
        struct berval   *dn_in )
 {
-       struct berval   *rdn = NULL;
-       int             retval = 0;
+       const char      *p;
 
        assert( dn_in );
 
@@ -741,183 +688,13 @@ dn_rdnlen(
                return 0;
        }
 
-       if ( be != NULL && be_issuffix( be, dn_in->bv_val ) ) {
-               return 0;
-       }
-
-       if ( dnExtractRdn( dn_in, &rdn ) != LDAP_SUCCESS ) {
+       if ( be != NULL && be_issuffix( be, dn_in ) ) {
                return 0;
        }
 
-       retval = rdn->bv_len;
-       ber_bvfree( rdn );
-
-       return retval;
-}
-
-/*
- * FIXME: should be replaced by dnExtractRdn() (together with dn_rdnlen)
- */
-char * dn_rdn(
-       Backend *be,
-       struct berval   *dn_in )
-{
-       struct berval   *rdn = NULL;
-       char            *retval;
-
-       assert( dn_in );
-
-       if ( dn_in == NULL ) {
-               return NULL;
-       }
-
-       if ( !dn_in->bv_len ) {
-               return NULL;
-       }
-
-       if ( be != NULL && be_issuffix( be, dn_in->bv_val ) ) {
-               return NULL;
-       }
-
-       if ( dnExtractRdn( dn_in, &rdn ) != LDAP_SUCCESS ) {
-               return NULL;
-       }
-
-       retval = rdn->bv_val;
-       free( rdn );
-
-       return retval;
-}
-
-/*
- * dn_issuffix - tells whether suffix is a suffix of dn.
- * Both dn and suffix must be normalized.
- *     deprecated in favor of dnIsSuffix()
- */
-int
-dn_issuffix(
-       const char      *dn,
-       const char      *suffix
-)
-{
-       struct berval   bvdn, bvsuffix;
-
-       assert( dn );
-       assert( suffix );
-
-       bvdn.bv_val = (char *) dn;
-       bvdn.bv_len = strlen( dn );
-       bvsuffix.bv_val = (char *) suffix;
-       bvsuffix.bv_len = strlen( suffix );
-
-       return dnIsSuffix( &bvdn, &bvsuffix );
-}
-
-/* rdn_attr_type:
- *
- * Given a string (i.e. an rdn) of the form:
- *      "attribute_type = attribute_value"
- * this function returns the type of an attribute, that is the
- * string "attribute_type" which is placed in newly allocated
- * memory. The returned string will be null-terminated.
- *
- * Deprecated
- */
-
-char * rdn_attr_type( const char * s )
-{
-       char    **attrs, **values, *retval;
-
-       if ( rdn_attrs( s, &attrs, &values ) != LDAP_SUCCESS ) {
-               return NULL;
-       }
-
-       retval = ch_strdup( attrs[ 0 ] );
-
-       charray_free( attrs );
-       charray_free( values );
-
-       return retval;
-}
-
-
-/* rdn_attr_value:
- *
- * Given a string (i.e. an rdn) of the form:
- *      "attribute_type = attribute_value"
- * this function returns "attribute_type" which is placed in newly allocated
- * memory. The returned string will be null-terminated and may contain
- * spaces (i.e. "John Doe\0").
- *
- * Deprecated
- */
-
-char *
-rdn_attr_value( const char * rdn )
-{
-       char    **attrs, **values, *retval;
-
-       if ( rdn_attrs( rdn, &attrs, &values ) != LDAP_SUCCESS ) {
-               return NULL;
-       }
-
-       retval = ch_strdup( values[ 0 ] );
-
-       charray_free( attrs );
-       charray_free( values );
+       p = strchr( dn_in->bv_val, ',' );
 
-       return retval;
-}
-
-
-/* rdn_attrs:
- *
- * Given a string (i.e. an rdn) of the form:
- *   "attribute_type=attribute_value[+attribute_type=attribute_value[...]]"
- * this function stores the types of the attributes in ptypes, that is the
- * array of strings "attribute_type" which is placed in newly allocated
- * memory, and the values of the attributes in pvalues, that is the
- * array of strings "attribute_value" which is placed in newly allocated
- * memory. Returns 0 on success, -1 on failure.
- *
- * note: got part of the code from dn_validate
- *
- * Deprecated; directly use LDAPRDN from ldap_str2rdn
- */
-int
-rdn_attrs( const char * rdn, char ***types, char ***values)
-{
-       LDAPRDN         *tmpRDN;
-       const char      *p;
-       int             iAVA;
-       int             rc;
-       
-       assert( rdn );
-       assert( values );
-
-       rc = ldap_str2rdn( rdn, &tmpRDN, &p, LDAP_DN_FORMAT_LDAP );
-       if ( rc != LDAP_SUCCESS ) {
-               return rc;
-       }
-
-       for ( iAVA = 0; tmpRDN[ iAVA ]; iAVA++ ) {
-               LDAPAVA         *ava = tmpRDN[ iAVA ][ 0 ];
-
-               assert( ava );
-               assert( ava->la_attr );
-               assert( ava->la_value );
-
-               if ( types ) {
-                       charray_add_n( types, ava->la_attr->bv_val, 
-                                       ava->la_attr->bv_len );
-               }
-               charray_add_n( values, ava->la_value->bv_val, 
-                               ava->la_value->bv_len );
-       }
-
-       ldap_rdnfree( tmpRDN );
-
-       return LDAP_SUCCESS;
+       return p ? p - dn_in->bv_val : dn_in->bv_len;
 }
 
 
@@ -934,7 +711,9 @@ rdnValidate( struct berval *rdn )
         * input is a pretty or normalized DN
         * hence, we can just search for ','
         */
-       if( rdn == NULL || rdn->bv_len == 0 ) {
+       if( rdn == NULL || rdn->bv_len == 0 ||
+               rdn->bv_len > SLAP_LDAPDN_MAXLEN )
+       {
                return LDAP_INVALID_SYNTAX;
        }
 
@@ -956,7 +735,7 @@ rdnValidate( struct berval *rdn )
        /*
         * must be parsable
         */
-       rc = ldap_str2rdn( rdn, &RDN, &p, LDAP_DN_FORMAT_LDAP );
+       rc = ldap_bv2rdn( rdn, &RDN, (char **)&p, LDAP_DN_FORMAT_LDAP );
        if ( rc != LDAP_SUCCESS ) {
                return 0;
        }
@@ -1012,7 +791,6 @@ build_new_dn( struct berval * new_dn,
        strcpy( ptr, parent_dn->bv_val );
 }
 
-#endif /* SLAP_DN_MIGRATION */
 
 /*
  * dnIsSuffix - tells whether suffix is a suffix of dn.
@@ -1039,8 +817,7 @@ dnIsSuffix(
        }
 
        /* no rdn separator or escaped rdn separator */
-       if ( d > 1 && ( !DN_SEPARATOR( dn->bv_val[ d - 1 ] ) 
-                               || DN_ESCAPE( dn->bv_val[ d - 2 ] ) ) ) {
+       if ( d > 1 && !DN_SEPARATOR( dn->bv_val[ d - 1 ] ) ) {
                return 0;
        }