]> git.sur5r.net Git - openldap/blobdiff - servers/slapd/matchedValues.c
Add register_certificate_map_function() native plugin API for registering
[openldap] / servers / slapd / matchedValues.c
index 51c223e97d0ad71787f20f803395313361af352e..98df13d80f2d631015543262d5dad5658e5aff5b 100644 (file)
@@ -1,13 +1,18 @@
 /* $OpenLDAP$ */
-/* 
- * Copyright 1999-2002 The OpenLDAP Foundation.
+/* This work is part of OpenLDAP Software <http://www.openldap.org/>.
+ *
+ * Copyright 1999-2004 The OpenLDAP Foundation.
  * All rights reserved.
  *
- * Redistribution and use in source and binary forms are permitted only
- * as authorized by the OpenLDAP Public License.  A copy of this
- * license is available at http://www.OpenLDAP.org/license.html or
- * in file LICENSE in the top-level directory of the distribution.
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted only as authorized by the OpenLDAP
+ * Public License.
+ *
+ * A copy of this license is available in the file LICENSE in the
+ * top-level directory of the distribution or, alternatively, at
+ * <http://www.OpenLDAP.org/license.html>.
  */
+
 #include "portable.h"
 
 #include <stdio.h>
 
 #include "slap.h"
 
-#include "../../libraries/liblber/lber-int.h"
-
 static int
 test_mra_vrFilter(
-       Backend         *be,
-       Connection      *conn,
        Operation       *op,
        Attribute       *a,
        MatchingRuleAssertion *mra,
@@ -31,8 +32,6 @@ test_mra_vrFilter(
 
 static int
 test_substrings_vrFilter(
-       Backend         *be,
-       Connection      *conn,
        Operation       *op,
        Attribute       *a,
        ValuesReturnFilter *f,
@@ -41,8 +40,6 @@ test_substrings_vrFilter(
 
 static int
 test_presence_vrFilter(
-       Backend         *be,
-       Connection      *conn,
        Operation       *op,
        Attribute       *a,
        AttributeDescription *desc,
@@ -51,8 +48,6 @@ test_presence_vrFilter(
 
 static int
 test_ava_vrFilter(
-       Backend         *be,
-       Connection      *conn,
        Operation       *op,
        Attribute       *a,
        AttributeAssertion *ava,
@@ -63,147 +58,90 @@ test_ava_vrFilter(
 
 int
 filter_matched_values( 
-       Backend         *be,
-       Connection      *conn,
        Operation       *op,
        Attribute       *a,
-       char            ***e_flags
-)
+       char            ***e_flags )
 {
-       ValuesReturnFilter *f;
+       ValuesReturnFilter *vrf;
        int             rc = LDAP_SUCCESS;
 
-#ifdef NEW_LOGGING
-       LDAP_LOG( FILTER, ENTRY, "filter_matched_values: begin\n", 0, 0, 0 );
-#else
        Debug( LDAP_DEBUG_FILTER, "=> filter_matched_values\n", 0, 0, 0 );
-#endif
 
-       for ( f = op->vrFilter; f != NULL; f = f->f_next ) {
-               switch ( f->f_choice ) {
+       for ( vrf = op->o_vrFilter; vrf != NULL; vrf = vrf->vrf_next ) {
+               switch ( vrf->vrf_choice ) {
                case SLAPD_FILTER_COMPUTED:
-#ifdef NEW_LOGGING
-                       LDAP_LOG( FILTER, DETAIL1, 
-                               "test_vrFilter: COMPUTED %s (%d)\n",
-                               f->f_result == LDAP_COMPARE_FALSE ? "false" :
-                               f->f_result == LDAP_COMPARE_TRUE         ? "true"  :
-                               f->f_result == SLAPD_COMPARE_UNDEFINED ? "undefined" :
-                               "error", f->f_result, 0 );
-#else
                        Debug( LDAP_DEBUG_FILTER, "     COMPUTED %s (%d)\n",
-                               f->f_result == LDAP_COMPARE_FALSE ? "false" :
-                               f->f_result == LDAP_COMPARE_TRUE ? "true" :
-                               f->f_result == SLAPD_COMPARE_UNDEFINED ? "undefined" : "error",
-                               f->f_result, 0 );
-#endif
+                               vrf->vrf_result == LDAP_COMPARE_FALSE ? "false"
+                               : vrf->vrf_result == LDAP_COMPARE_TRUE ? "true"
+                               : vrf->vrf_result == SLAPD_COMPARE_UNDEFINED ? "undefined"
+                               : "error",
+                               vrf->vrf_result, 0 );
                        /*This type of filter does not affect the result */
                        rc = LDAP_SUCCESS;
                break;
 
                case LDAP_FILTER_EQUALITY:
-#ifdef NEW_LOGGING
-                       LDAP_LOG( FILTER, DETAIL1, "test_vrFilter: EQUALITY\n", 0, 0, 0 );
-#else
                        Debug( LDAP_DEBUG_FILTER, "     EQUALITY\n", 0, 0, 0 );
-#endif
-                       rc = test_ava_vrFilter( be, conn, op, a, f->f_ava,
+                       rc = test_ava_vrFilter( op, a, vrf->vrf_ava,
                                LDAP_FILTER_EQUALITY, e_flags );
-                       if( rc == -1 ) {
-                               return rc;
-                       }
+                       if( rc == -1 ) return rc;
                        break;
 
                case LDAP_FILTER_SUBSTRINGS:
-#ifdef NEW_LOGGING
-                       LDAP_LOG( FILTER, DETAIL1, "test_vrFilter  SUBSTRINGS\n", 0, 0, 0 );
-#else
                        Debug( LDAP_DEBUG_FILTER, "     SUBSTRINGS\n", 0, 0, 0 );
-#endif
-
-                       rc = test_substrings_vrFilter( be, conn, op, a,
-                               f, e_flags );
-                       if( rc == -1 ) {
-                               return rc;
-                       }
+                       rc = test_substrings_vrFilter( op, a,
+                               vrf, e_flags );
+                       if( rc == -1 ) return rc;
                        break;
 
                case LDAP_FILTER_PRESENT:
-#ifdef NEW_LOGGING
-                       LDAP_LOG( FILTER, DETAIL1, "test_vrFilter:      PRESENT\n", 0, 0, 0 );
-#else
                        Debug( LDAP_DEBUG_FILTER, "     PRESENT\n", 0, 0, 0 );
-#endif
-                       rc = test_presence_vrFilter( be, conn, op, a,
-                               f->f_desc, e_flags );
-                       if( rc == -1 ) {
-                               return rc;
-                       }
+                       rc = test_presence_vrFilter( op, a,
+                               vrf->vrf_desc, e_flags );
+                       if( rc == -1 ) return rc;
                        break;
 
                case LDAP_FILTER_GE:
-                       rc = test_ava_vrFilter( be, conn, op, a, f->f_ava,
+                       rc = test_ava_vrFilter( op, a, vrf->vrf_ava,
                                LDAP_FILTER_GE, e_flags );
-                       if( rc == -1 ) {
-                               return rc;
-                       }
+                       if( rc == -1 ) return rc;
                        break;
 
                case LDAP_FILTER_LE:
-                       rc = test_ava_vrFilter( be, conn, op, a, f->f_ava,
+                       rc = test_ava_vrFilter( op, a, vrf->vrf_ava,
                                LDAP_FILTER_LE, e_flags );
-                       if( rc == -1 ) {
-                               return rc;
-                       }
+                       if( rc == -1 ) return rc;
                        break;
 
                case LDAP_FILTER_EXT:
-#ifdef NEW_LOGGING
-                       LDAP_LOG( FILTER, DETAIL1, "test_vrFilter:      EXT\n", 0, 0, 0 );
-#else
                        Debug( LDAP_DEBUG_FILTER, "     EXT\n", 0, 0, 0 );
-#endif
-                       rc = test_mra_vrFilter( be, conn, op, a,
-                               f->f_mra, e_flags );
-                       if( rc == -1 ) {
-                               return rc;
-                       }
+                       rc = test_mra_vrFilter( op, a,
+                               vrf->vrf_mra, e_flags );
+                       if( rc == -1 ) return rc;
                        break;
 
                default:
-#ifdef NEW_LOGGING
-                       LDAP_LOG( FILTER, INFO, 
-                               "test_vrFilter:  unknown filter type %lu\n", f->f_choice, 0, 0 );
-#else
                        Debug( LDAP_DEBUG_ANY, "        unknown filter type %lu\n",
-                               f->f_choice, 0, 0 );
-#endif
+                               vrf->vrf_choice, 0, 0 );
                        rc = LDAP_PROTOCOL_ERROR;
-               } 
+               }
        }
 
-#ifdef NEW_LOGGING
-       LDAP_LOG( FILTER, ENTRY, "filter_matched_values:  return=%d\n", rc, 0, 0 );
-#else
        Debug( LDAP_DEBUG_FILTER, "<= filter_matched_values %d\n", rc, 0, 0 );
-#endif
        return( rc );
 }
 
 static int
 test_ava_vrFilter(
-       Backend         *be,
-       Connection      *conn,
        Operation       *op,
        Attribute       *a,
        AttributeAssertion *ava,
        int             type,
-       char            ***e_flags
-)
+       char            ***e_flags )
 {
        int             i, j;
 
        for ( i=0; a != NULL; a = a->a_next, i++ ) {
-
                MatchingRule *mr;
                struct berval *bv;
        
@@ -215,8 +153,8 @@ test_ava_vrFilter(
                case LDAP_FILTER_APPROX:
                        mr = a->a_desc->ad_type->sat_approx;
                        if( mr != NULL ) break;
+                       /* use EQUALITY matching rule if no APPROX rule */
 
-               /* use EQUALITY matching rule if no APPROX rule */
                case LDAP_FILTER_EQUALITY:
                        mr = a->a_desc->ad_type->sat_equality;
                        break;
@@ -230,65 +168,55 @@ test_ava_vrFilter(
                        mr = NULL;
                }
 
-               if( mr == NULL ) {
-                       continue;
+               if( mr == NULL ) continue;
 
-               }
-
-               for ( bv = a->a_vals, j=0; bv->bv_val != NULL; bv++, j++ ) {
-                       int ret;
-                       int rc;
+               bv = a->a_nvals;
+               for ( j=0; bv->bv_val != NULL; bv++, j++ ) {
+                       int rc, match;
                        const char *text;
 
-                       rc = value_match( &ret, a->a_desc, mr, 
-                               SLAP_MR_ASSERTION_SYNTAX_MATCH, bv, &ava->aa_value, &text );
-                       if( rc != LDAP_SUCCESS ) {
-                               return rc;
-                       }
+                       rc = value_match( &match, a->a_desc, mr, 0,
+                               bv, &ava->aa_value, &text );
+                       if( rc != LDAP_SUCCESS ) return rc;
 
                        switch ( type ) {
                        case LDAP_FILTER_EQUALITY:
                        case LDAP_FILTER_APPROX:
-                               if ( ret == 0 ) {
+                               if ( match == 0 ) {
                                        (*e_flags)[i][j] = 1;
                                }
                                break;
        
                        case LDAP_FILTER_GE:
-                               if ( ret >= 0 ) {
+                               if ( match >= 0 ) {
                                        (*e_flags)[i][j] = 1;
                                }
                                break;
        
                        case LDAP_FILTER_LE:
-                               if ( ret <= 0 ) {
+                               if ( match <= 0 ) {
                                        (*e_flags)[i][j] = 1;
                                }
                                break;
                        }
                }
        }
-       return( LDAP_SUCCESS );
+       return LDAP_SUCCESS;
 }
 
 static int
 test_presence_vrFilter(
-       Backend         *be,
-       Connection      *conn,
        Operation       *op,
        Attribute       *a,
        AttributeDescription *desc,
-       char            ***e_flags
-)
+       char            ***e_flags )
 {
        int i, j;
 
        for ( i=0; a != NULL; a = a->a_next, i++ ) {
                struct berval *bv;
 
-               if ( !is_ad_subtype( a->a_desc, desc ) ) {
-                       continue;
-               }
+               if ( !is_ad_subtype( a->a_desc, desc ) ) continue;
 
                for ( bv = a->a_vals, j=0; bv->bv_val != NULL; bv++, j++ );
                memset( (*e_flags)[i], 1, j);
@@ -299,13 +227,10 @@ test_presence_vrFilter(
 
 static int
 test_substrings_vrFilter(
-       Backend         *be,
-       Connection      *conn,
        Operation       *op,
        Attribute       *a,
-       ValuesReturnFilter *f,
-       char            ***e_flags
-)
+       ValuesReturnFilter *vrf,
+       char            ***e_flags )
 {
        int i, j;
 
@@ -313,28 +238,23 @@ test_substrings_vrFilter(
                MatchingRule *mr = a->a_desc->ad_type->sat_substr;
                struct berval *bv;
 
-               if ( !is_ad_subtype( a->a_desc, f->f_sub_desc ) ) {
+               if ( !is_ad_subtype( a->a_desc, vrf->vrf_sub_desc ) ) {
                        continue;
                }
 
-               if( mr == NULL ) {
-                       continue;
-               }
+               if( mr == NULL ) continue;
 
-               for ( bv = a->a_vals, j = 0; bv->bv_val != NULL; bv++, j++ ) {
-                       int ret;
-                       int rc;
+               bv = a->a_nvals;
+               for ( j = 0; bv->bv_val != NULL; bv++, j++ ) {
+                       int rc, match;
                        const char *text;
 
-                       rc = value_match( &ret, a->a_desc, mr,
-                               SLAP_MR_ASSERTION_SYNTAX_MATCH,
-                               bv, f->f_sub, &text );
+                       rc = value_match( &match, a->a_desc, mr, 0,
+                               bv, vrf->vrf_sub, &text );
 
-                       if( rc != LDAP_SUCCESS ) {
-                               return rc;
-                       }
+                       if( rc != LDAP_SUCCESS ) return rc;
 
-                       if ( ret == 0 ) {
+                       if ( match == 0 ) {
                                (*e_flags)[i][j] = 1;
                        }
                }
@@ -345,67 +265,54 @@ test_substrings_vrFilter(
 
 static int
 test_mra_vrFilter(
-       Backend         *be,
-       Connection      *conn,
        Operation       *op,
        Attribute       *a,
        MatchingRuleAssertion *mra,
-       char            ***e_flags
-)
+       char            ***e_flags )
 {
        int i, j;
 
        for ( i=0; a != NULL; a = a->a_next, i++ ) {
-               struct berval *bv, value;
-
-#ifndef SLAP_X_MRA_MATCH_DNATTRS
-               if ( !is_ad_subtype( a->a_desc, mra->ma_desc ) ) {
-                       return( LDAP_SUCCESS );
-               }
-               value = mra->ma_value;
+               struct berval *bv, assertedValue;
 
-#else /* SLAP_X_MRA_MATCH_DNATTRS */
                if ( mra->ma_desc ) {
                        if ( !is_ad_subtype( a->a_desc, mra->ma_desc ) ) {
-                               return( LDAP_SUCCESS );
+                               continue;
                        }
-                       value = mra->ma_value;
+                       assertedValue = mra->ma_value;
 
                } else {
+                       int rc;
                        const char      *text = NULL;
 
                        /* check if matching is appropriate */
-                       if ( strcmp( mra->ma_rule->smr_syntax->ssyn_oid,
-                               a->a_desc->ad_type->sat_syntax->ssyn_oid ) != 0 ) {
+                       if ( !mr_usable_with_at( mra->ma_rule, a->a_desc->ad_type ) ) {
                                continue;
                        }
 
-                       /* normalize for equality */
-                       if ( value_validate_normalize( a->a_desc, 
-                               SLAP_MR_EQUALITY,
-                               &mra->ma_value, &value,
-                               &text ) != LDAP_SUCCESS ) {
-                               continue;
-                       }
+                       rc = asserted_value_validate_normalize( a->a_desc, mra->ma_rule,
+                               SLAP_MR_EXT|SLAP_MR_VALUE_OF_ASSERTION_SYNTAX,
+                               &mra->ma_value, &assertedValue, &text, op->o_tmpmemctx );
 
+                       if( rc != LDAP_SUCCESS ) continue;
                }
-#endif /* SLAP_X_MRA_MATCH_DNATTRS */
 
-               for ( bv = a->a_vals, j = 0; bv->bv_val != NULL; bv++, j++ ) {
-                       int ret;
-                       int rc;
+               /* check match */
+               if (mra->ma_rule == a->a_desc->ad_type->sat_equality) {
+                       bv = a->a_nvals;
+               } else {
+                       bv = a->a_vals;
+               }
+                                       
+               for ( j = 0; bv->bv_val != NULL; bv++, j++ ) {
+                       int rc, match;
                        const char *text;
 
-                       rc = value_match( &ret, a->a_desc, mra->ma_rule,
-                               SLAP_MR_ASSERTION_SYNTAX_MATCH,
-                               bv, &value,
-                               &text );
+                       rc = value_match( &match, a->a_desc, mra->ma_rule, 0,
+                               bv, &assertedValue, &text );
+                       if( rc != LDAP_SUCCESS ) return rc;
 
-                       if( rc != LDAP_SUCCESS ) {
-                               return rc;
-                       }
-
-                       if ( ret == 0 ) {
+                       if ( match == 0 ) {
                                (*e_flags)[i][j] = 1;
                        }
                }
@@ -413,3 +320,4 @@ test_mra_vrFilter(
 
        return LDAP_SUCCESS;
 }
+