X-Git-Url: https://git.sur5r.net/?a=blobdiff_plain;f=libraries%2Flibldap%2Fsbind.c;h=c40c8682d254a6313411baa93a44c175ab6d71d0;hb=b898f1271db5021e1873e38e1498a99d9450b646;hp=656c722f155fcbc3e9b119da616154c6c19bea0b;hpb=42e0d83cb3a1a1c5b25183f1ab74ce7edbe25de7;p=openldap diff --git a/libraries/libldap/sbind.c b/libraries/libldap/sbind.c index 656c722f15..c40c8682d2 100644 --- a/libraries/libldap/sbind.c +++ b/libraries/libldap/sbind.c @@ -1,31 +1,50 @@ +/* $OpenLDAP$ */ +/* This work is part of OpenLDAP Software . + * + * Copyright 1998-2010 The OpenLDAP Foundation. + * All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted only as authorized by the OpenLDAP + * Public License. + * + * A copy of this license is available in the file LICENSE in the + * top-level directory of the distribution or, alternatively, at + * . + */ +/* Portions Copyright (c) 1993 Regents of the University of Michigan. + * All rights reserved. + */ + /* - * Copyright (c) 1993 Regents of the University of Michigan. - * All rights reserved. + * BindRequest ::= SEQUENCE { + * version INTEGER, + * name DistinguishedName, -- who + * authentication CHOICE { + * simple [0] OCTET STRING -- passwd + * krbv42ldap [1] OCTET STRING -- OBSOLETE + * krbv42dsa [2] OCTET STRING -- OBSOLETE + * sasl [3] SaslCredentials -- LDAPv3 + * } + * } + * + * BindResponse ::= SEQUENCE { + * COMPONENTS OF LDAPResult, + * serverSaslCreds OCTET STRING OPTIONAL -- LDAPv3 + * } * - * sbind.c */ -#ifndef lint -static char copyright[] = "@(#) Copyright (c) 1993 Regents of the University of Michigan.\nAll rights reserved.\n"; -#endif +#include "portable.h" #include -#include -#ifdef MACOS -#include "macos.h" -#endif /* MACOS */ +#include +#include +#include -#if !defined( MACOS ) && !defined( DOS ) -#include -#include -#endif - -#include "lber.h" -#include "ldap.h" #include "ldap-int.h" - /* * ldap_simple_bind - bind to the ldap server (and X.500). The dn and * password of the entry to which to bind are supplied. The message id @@ -37,50 +56,32 @@ static char copyright[] = "@(#) Copyright (c) 1993 Regents of the University of */ int -ldap_simple_bind( LDAP *ld, char *dn, char *passwd ) +ldap_simple_bind( + LDAP *ld, + LDAP_CONST char *dn, + LDAP_CONST char *passwd ) { - BerElement *ber; - - /* - * The bind request looks like this: - * BindRequest ::= SEQUENCE { - * version INTEGER, - * name DistinguishedName, -- who - * authentication CHOICE { - * simple [0] OCTET STRING -- passwd - * } - * } - * all wrapped up in an LDAPMessage sequence. - */ + int rc; + int msgid; + struct berval cred; Debug( LDAP_DEBUG_TRACE, "ldap_simple_bind\n", 0, 0, 0 ); - if ( dn == NULL ) - dn = ""; - if ( passwd == NULL ) - passwd = ""; + assert( ld != NULL ); + assert( LDAP_VALID( ld ) ); - /* create a message to send */ - if ( (ber = alloc_ber_with_options( ld )) == NULLBER ) { - return( -1 ); + if ( passwd != NULL ) { + cred.bv_val = (char *) passwd; + cred.bv_len = strlen( passwd ); + } else { + cred.bv_val = ""; + cred.bv_len = 0; } - /* fill it in */ - if ( ber_printf( ber, "{it{ists}}", ++ld->ld_msgid, LDAP_REQ_BIND, - ld->ld_version, dn, LDAP_AUTH_SIMPLE, passwd ) == -1 ) { - ld->ld_errno = LDAP_ENCODING_ERROR; - ber_free( ber, 1 ); - return( -1 ); - } + rc = ldap_sasl_bind( ld, dn, LDAP_SASL_SIMPLE, &cred, + NULL, NULL, &msgid ); -#ifndef NO_CACHE - if ( ld->ld_cache != NULL ) { - ldap_flush_cache( ld ); - } -#endif /* !NO_CACHE */ - - /* send the message */ - return( send_initial_request( ld, LDAP_REQ_BIND, dn, ber )); + return rc == LDAP_SUCCESS ? msgid : -1; } /* @@ -95,18 +96,20 @@ ldap_simple_bind( LDAP *ld, char *dn, char *passwd ) */ int -ldap_simple_bind_s( LDAP *ld, char *dn, char *passwd ) +ldap_simple_bind_s( LDAP *ld, LDAP_CONST char *dn, LDAP_CONST char *passwd ) { - int msgid; - LDAPMessage *result; + struct berval cred; Debug( LDAP_DEBUG_TRACE, "ldap_simple_bind_s\n", 0, 0, 0 ); - if ( (msgid = ldap_simple_bind( ld, dn, passwd )) == -1 ) - return( ld->ld_errno ); - - if ( ldap_result( ld, msgid, 1, (struct timeval *) 0, &result ) == -1 ) - return( ld->ld_errno ); /* ldap_result sets ld_errno */ + if ( passwd != NULL ) { + cred.bv_val = (char *) passwd; + cred.bv_len = strlen( passwd ); + } else { + cred.bv_val = ""; + cred.bv_len = 0; + } - return( ldap_result2error( ld, result, 1 ) ); + return ldap_sasl_bind_s( ld, dn, LDAP_SASL_SIMPLE, &cred, + NULL, NULL, NULL ); }