Add pointer to an existing document since the netscape.com URLs are dead.

[openldap] / servers / slapd / sasl.c

diff --git a/servers/slapd/sasl.c b/servers/slapd/sasl.c
index 484300bf6f36b8ce81345060d555cd2c57bc9b49..0cd5afca9a5e419dc76c6e94903eeacfcfc6b18f 100644 (file)
--- a/servers/slapd/sasl.c
+++ b/servers/slapd/sasl.c
@@ -1,7 +1,7 @@
 /* $OpenLDAP$ */
 /* This work is part of OpenLDAP Software <http://www.openldap.org/>.
  *
- * Copyright 1998-2006 The OpenLDAP Foundation.
+ * Copyright 1998-2007 The OpenLDAP Foundation.
  * All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
@@ -464,7 +464,7 @@ slap_auxprop_store(
        }
        *modtail = NULL;
 
-       rc = slap_mods_check( modlist, &text, textbuf, textlen, NULL );
+       rc = slap_mods_check( &op, modlist, &text, textbuf, textlen, NULL );
 
        if ( rc == LDAP_SUCCESS ) {
                rc = slap_mods_no_user_mod_check( &op, modlist,
@@ -1048,6 +1048,42 @@ int slap_sasl_destroy( void )
        return 0;
 }
 
+#if SASL_VERSION_MAJOR >= 2
+static char *
+slap_sasl_peer2ipport( struct berval *peer )
+{
+       int             isv6 = 0;
+       char            *ipport,
+                       *p = &peer->bv_val[ STRLENOF( "IP=" ) ];
+       ber_len_t       plen = peer->bv_len - STRLENOF( "IP=" );
+
+       /* IPv6? */
+       if ( p[0] == '[' ) {
+               isv6 = 1;
+               plen--;
+       }
+       ipport = ch_strdup( &p[isv6] );
+
+       /* Convert IPv6/IPv4 addresses to address;port syntax. */
+       p = strrchr( ipport, ':' );
+       if ( p != NULL ) {
+               *p = ';';
+               if ( isv6 ) {
+                       assert( p[-1] == ']' );
+                       AC_MEMCPY( &p[-1], p, plen - ( p - ipport ) + 1 );
+               }
+
+       } else if ( isv6 ) {
+               /* trim ']' */
+               plen--;
+               assert( p[plen] == ']' );
+               p[plen] = '\0';
+       }
+
+       return ipport;
+}
+#endif
+
 int slap_sasl_open( Connection *conn, int reopen )
 {
        int sc = LDAP_SUCCESS;
@@ -1102,38 +1138,20 @@ int slap_sasl_open( Connection *conn, int reopen )
 
        conn->c_sasl_layers = 0;
 
-       if( global_host == NULL ) {
-               global_host = ldap_pvt_get_fqdn( NULL );
-       }
-
        /* create new SASL context */
 #if SASL_VERSION_MAJOR >= 2
        if ( conn->c_sock_name.bv_len != 0 &&
-            strncmp( conn->c_sock_name.bv_val, "IP=", 3 ) == 0) {
-               char *p;
-
-               iplocalport = ch_strdup( conn->c_sock_name.bv_val + 3 );
-               /* Convert IPv6 addresses to address;port syntax. */
-               p = strrchr( iplocalport, ' ' );
-               /* Convert IPv4 addresses to address;port syntax. */
-               if ( p == NULL ) p = strchr( iplocalport, ':' );
-               if ( p != NULL ) {
-                       *p = ';';
-               }
+               strncmp( conn->c_sock_name.bv_val, "IP=", STRLENOF( "IP=" ) ) == 0 )
+       {
+               iplocalport = slap_sasl_peer2ipport( &conn->c_sock_name );
        }
+
        if ( conn->c_peer_name.bv_len != 0 &&
-            strncmp( conn->c_peer_name.bv_val, "IP=", 3 ) == 0) {
-               char *p;
-
-               ipremoteport = ch_strdup( conn->c_peer_name.bv_val + 3 );
-               /* Convert IPv6 addresses to address;port syntax. */
-               p = strrchr( ipremoteport, ' ' );
-               /* Convert IPv4 addresses to address;port syntax. */
-               if ( p == NULL ) p = strchr( ipremoteport, ':' );
-               if ( p != NULL ) {
-                       *p = ';';
-               }
+               strncmp( conn->c_peer_name.bv_val, "IP=", STRLENOF( "IP=" ) ) == 0 )
+       {
+               ipremoteport = slap_sasl_peer2ipport( &conn->c_peer_name );
        }
+
        sc = sasl_server_new( "ldap", global_host, global_realm,
                iplocalport, ipremoteport, session_callbacks, SASL_SUCCESS_DATA, &ctx );
        if ( iplocalport != NULL ) {
@@ -1534,7 +1552,7 @@ slap_sasl_setpass( Operation *op, SlapReply *rs )
        assert( ber_bvcmp( &slap_EXOP_MODIFY_PASSWD, &op->ore_reqoid ) == 0 );
 
        rs->sr_err = sasl_getprop( op->o_conn->c_sasl_authctx, SASL_USERNAME,
-               (SASL_CONST void **)&id.bv_val );
+               (SASL_CONST void **)(char *)&id.bv_val );
 
        if( rs->sr_err != SASL_OK ) {
                rs->sr_text = "unable to retrieve SASL username";