X-Git-Url: https://git.sur5r.net/?a=blobdiff_plain;f=servers%2Fslapd%2Freferral.c;h=4537420f3e54c55a82303a3ff8c30c0b9147c5f0;hb=2c7f30061933e3bc65477ea2d9561b264497a6c9;hp=1293c32a354951aa2c58b5b4b88b9f7a85925ad5;hpb=3bfab4699e19d4d7595c129b89d0dd2048e812bc;p=openldap diff --git a/servers/slapd/referral.c b/servers/slapd/referral.c index 1293c32a35..4537420f3e 100644 --- a/servers/slapd/referral.c +++ b/servers/slapd/referral.c @@ -1,8 +1,17 @@ /* referral.c - muck with referrals */ /* $OpenLDAP$ */ -/* - * Copyright 1998-2002 The OpenLDAP Foundation, All Rights Reserved. - * COPYING RESTRICTIONS APPLY, see COPYRIGHT file +/* This work is part of OpenLDAP Software . + * + * Copyright 1998-2006 The OpenLDAP Foundation. + * All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted only as authorized by the OpenLDAP + * Public License. + * + * A copy of this license is available in the file LICENSE in the + * top-level directory of the distribution or, alternatively, at + * . */ #include "portable.h" @@ -11,14 +20,11 @@ #include #include -#include #include #include #include #include -#include - #include "slap.h" /* @@ -27,25 +33,25 @@ */ static char * referral_dn_muck( const char * refDN, - const char * baseDN, - const char * targetDN ) + struct berval * baseDN, + struct berval * targetDN ) { int rc; struct berval bvin; - struct berval nrefDN = { 0, NULL }; - struct berval nbaseDN = { 0, NULL }; - struct berval ntargetDN = { 0, NULL }; + struct berval nrefDN = BER_BVNULL; + struct berval nbaseDN = BER_BVNULL; + struct berval ntargetDN = BER_BVNULL; if( !baseDN ) { /* no base, return target */ - return targetDN ? ch_strdup( targetDN ) : NULL; + return targetDN ? ch_strdup( targetDN->bv_val ) : NULL; } if( refDN ) { bvin.bv_val = (char *)refDN; bvin.bv_len = strlen( refDN ); - rc = dnPretty2( NULL, &bvin, &nrefDN ); + rc = dnPretty( NULL, &bvin, &nrefDN, NULL ); if( rc != LDAP_SUCCESS ) { /* Invalid refDN */ return NULL; @@ -57,13 +63,10 @@ static char * referral_dn_muck( * if refDN present return refDN * else return baseDN */ - return nrefDN.bv_len ? nrefDN.bv_val : ch_strdup( baseDN ); + return nrefDN.bv_len ? nrefDN.bv_val : ch_strdup( baseDN->bv_val ); } - bvin.bv_val = (char *)targetDN; - bvin.bv_len = strlen( targetDN ); - - rc = dnPretty2( NULL, &bvin, &ntargetDN ); + rc = dnPretty( NULL, targetDN, &ntargetDN, NULL ); if( rc != LDAP_SUCCESS ) { /* Invalid targetDN */ ch_free( nrefDN.bv_val ); @@ -71,10 +74,7 @@ static char * referral_dn_muck( } if( nrefDN.bv_len ) { - bvin.bv_val = (char *)baseDN; - bvin.bv_len = strlen( baseDN ); - - rc = dnPretty2( NULL, &bvin, &nbaseDN ); + rc = dnPretty( NULL, baseDN, &nbaseDN, NULL ); if( rc != LDAP_SUCCESS ) { /* Invalid baseDN */ ch_free( nrefDN.bv_val ); @@ -82,7 +82,7 @@ static char * referral_dn_muck( return NULL; } - if( dn_match( &nbaseDN, &nrefDN ) == 0 ) { + if( dn_match( &nbaseDN, &nrefDN ) ) { ch_free( nrefDN.bv_val ); ch_free( nbaseDN.bv_val ); return ntargetDN.bv_val; @@ -108,7 +108,12 @@ static char * referral_dn_muck( } muck.bv_len = ntargetDN.bv_len + nrefDN.bv_len - nbaseDN.bv_len; - muck.bv_val = ch_malloc( muck.bv_len + 1 ); + muck.bv_val = SLAP_MALLOC( muck.bv_len + 1 ); + if( muck.bv_val == NULL ) { + Debug( LDAP_DEBUG_ANY, + "referral_dn_muck: SLAP_MALLOC failed\n", 0, 0, 0 ); + return NULL; + } strncpy( muck.bv_val, ntargetDN.bv_val, ntargetDN.bv_len-nbaseDN.bv_len ); @@ -148,70 +153,41 @@ int validate_global_referral( const char *url ) case LDAP_URL_ERR_BADSCHEME: /* not LDAP hence valid */ + Debug( LDAP_DEBUG_CONFIG, "referral \"%s\": not LDAP.\n", url, 0, 0 ); return 0; default: /* other error, bail */ -#ifdef NEW_LOGGING - LDAP_LOG(( "config", LDAP_LEVEL_CRIT, - "referral: invalid URL (%s): %s (%d)\n", - url, "" /* ldap_url_error2str(rc) */, rc )); -#else Debug( LDAP_DEBUG_ANY, "referral: invalid URL (%s): %s (%d)\n", url, "" /* ldap_url_error2str(rc) */, rc ); -#endif return 1; } rc = 0; if( lurl->lud_dn && *lurl->lud_dn ) { -#ifdef NEW_LOGGING - LDAP_LOG(( "config", LDAP_LEVEL_CRIT, - "referral: URL (%s): contains DN\n", - url )); -#else Debug( LDAP_DEBUG_ANY, "referral: URL (%s): contains DN\n", url, 0, 0 ); -#endif rc = 1; } else if( lurl->lud_attrs ) { -#ifdef NEW_LOGGING - LDAP_LOG(( "config", LDAP_LEVEL_CRIT, - "referral: URL (%s): requests attributes\n", - url )); -#else Debug( LDAP_DEBUG_ANY, "referral: URL (%s): requests attributes\n", url, 0, 0 ); -#endif rc = 1; } else if( lurl->lud_scope != LDAP_SCOPE_DEFAULT ) { -#ifdef NEW_LOGGING - LDAP_LOG(( "config", LDAP_LEVEL_CRIT, - "referral: URL (%s): contains explicit scope\n", - url )); -#else Debug( LDAP_DEBUG_ANY, "referral: URL (%s): contains explicit scope\n", url, 0, 0 ); -#endif rc = 1; } else if( lurl->lud_filter ) { -#ifdef NEW_LOGGING - LDAP_LOG(( "config", LDAP_LEVEL_CRIT, - "referral: URL (%s): contains explicit filter\n", - url )); -#else Debug( LDAP_DEBUG_ANY, "referral: URL (%s): contains explicit filter\n", url, 0, 0 ); -#endif rc = 1; } @@ -225,59 +201,70 @@ BerVarray referral_rewrite( struct berval *target, int scope ) { - int i; - BerVarray refs; - struct berval *iv, *jv; + int i; + BerVarray refs; + struct berval *iv, *jv; - if( in == NULL ) return NULL; + if ( in == NULL ) { + return NULL; + } - for( i=0; in[i].bv_val != NULL ; i++ ) { + for ( i = 0; !BER_BVISNULL( &in[i] ); i++ ) { /* just count them */ } - if( i < 1 ) return NULL; - - refs = ch_malloc( (i+1) * sizeof( struct berval ) ); + if ( i < 1 ) { + return NULL; + } - for( iv=in,jv=refs; iv->bv_val != NULL ; iv++ ) { - LDAPURLDesc *url; - int rc = ldap_url_parse_ext( iv->bv_val, &url ); + refs = SLAP_MALLOC( ( i + 1 ) * sizeof( struct berval ) ); + if ( refs == NULL ) { + Debug( LDAP_DEBUG_ANY, + "referral_rewrite: SLAP_MALLOC failed\n", 0, 0, 0 ); + return NULL; + } - if( rc == LDAP_URL_ERR_BADSCHEME ) { + for ( iv = in, jv = refs; !BER_BVISNULL( iv ); iv++ ) { + LDAPURLDesc *url; + char *dn; + int rc; + + rc = ldap_url_parse_ext( iv->bv_val, &url ); + if ( rc == LDAP_URL_ERR_BADSCHEME ) { ber_dupbv( jv++, iv ); continue; - } else if( rc != LDAP_URL_SUCCESS ) { + } else if ( rc != LDAP_URL_SUCCESS ) { continue; } - { - char *dn = url->lud_dn; - url->lud_dn = referral_dn_muck( - ( dn && *dn ) ? dn : NULL, - base ? base->bv_val : NULL, - target ? target->bv_val : NULL ); + dn = url->lud_dn; + url->lud_dn = referral_dn_muck( ( dn && *dn ) ? dn : NULL, + base, target ); + ldap_memfree( dn ); - ldap_memfree( dn ); - } - - if( url->lud_scope == LDAP_SCOPE_DEFAULT ) { + if ( url->lud_scope == LDAP_SCOPE_DEFAULT ) { url->lud_scope = scope; } jv->bv_val = ldap_url_desc2str( url ); - jv->bv_len = strlen( jv->bv_val ); + if ( jv->bv_val != NULL ) { + jv->bv_len = strlen( jv->bv_val ); - ldap_free_urldesc( url ); + } else { + ber_dupbv( jv, iv ); + } jv++; + + ldap_free_urldesc( url ); } - if( jv == refs ) { + if ( jv == refs ) { ch_free( refs ); refs = NULL; } else { - jv->bv_val = NULL; + BER_BVZERO( jv ); } return refs; @@ -285,8 +272,6 @@ BerVarray referral_rewrite( BerVarray get_entry_referrals( - Backend *be, - Connection *conn, Operation *op, Entry *e ) { @@ -307,7 +292,12 @@ BerVarray get_entry_referrals( if( i < 1 ) return NULL; - refs = ch_malloc( (i + 1) * sizeof(struct berval)); + refs = SLAP_MALLOC( (i + 1) * sizeof(struct berval)); + if( refs == NULL ) { + Debug( LDAP_DEBUG_ANY, + "get_entry_referrals: SLAP_MALLOC failed\n", 0, 0, 0 ); + return NULL; + } for( iv=attr->a_vals, jv=refs; iv->bv_val != NULL; iv++ ) { unsigned k; @@ -315,7 +305,7 @@ BerVarray get_entry_referrals( /* trim the label */ for( k=0; kbv_len; k++ ) { - if( isspace(jv->bv_val[k]) ) { + if( isspace( (unsigned char) jv->bv_val[k] ) ) { jv->bv_val[k] = '\0'; jv->bv_len = k; break; @@ -341,3 +331,48 @@ BerVarray get_entry_referrals( return refs; } + +int get_alias_dn( + Entry *e, + struct berval *ndn, + int *err, + const char **text ) +{ + Attribute *a; + AttributeDescription *aliasedObjectName + = slap_schema.si_ad_aliasedObjectName; + + a = attr_find( e->e_attrs, aliasedObjectName ); + + if( a == NULL ) { + /* + * there was an aliasedobjectname defined but no data. + */ + *err = LDAP_ALIAS_PROBLEM; + *text = "alias missing aliasedObjectName attribute"; + return -1; + } + + /* + * aliasedObjectName should be SINGLE-VALUED with a single value. + */ + if ( a->a_vals[0].bv_val == NULL ) { + /* + * there was an aliasedobjectname defined but no data. + */ + *err = LDAP_ALIAS_PROBLEM; + *text = "alias missing aliasedObjectName value"; + return -1; + } + + if( a->a_nvals[1].bv_val != NULL ) { + *err = LDAP_ALIAS_PROBLEM; + *text = "alias has multivalued aliasedObjectName"; + return -1; + } + + *ndn = a->a_nvals[0]; + + return 0; +} +