git.sur5r.net Git - openldap/blob - libraries/libldap/request.c

   1 /* $OpenLDAP$ */
   2 /* This work is part of OpenLDAP Software <http://www.openldap.org/>.
   3  *
   4  * Copyright 1998-2005 The OpenLDAP Foundation.
   5  * All rights reserved.
   6  *
   7  * Redistribution and use in source and binary forms, with or without
   8  * modification, are permitted only as authorized by the OpenLDAP
   9  * Public License.
  10  *
  11  * A copy of this license is available in the file LICENSE in the
  12  * top-level directory of the distribution or, alternatively, at
  13  * <http://www.OpenLDAP.org/license.html>.
  14  */
  15 /* Portions Copyright (c) 1995 Regents of the University of Michigan.
  16  * All rights reserved.
  17  */
  18 /* This notice applies to changes, created by or for Novell, Inc.,
  19  * to preexisting works for which notices appear elsewhere in this file.
  20  *
  21  * Copyright (C) 1999, 2000 Novell, Inc. All Rights Reserved.
  22  *
  23  * THIS WORK IS SUBJECT TO U.S. AND INTERNATIONAL COPYRIGHT LAWS AND TREATIES.
  24  * USE, MODIFICATION, AND REDISTRIBUTION OF THIS WORK IS SUBJECT TO VERSION
  25  * 2.0.1 OF THE OPENLDAP PUBLIC LICENSE, A COPY OF WHICH IS AVAILABLE AT
  26  * HTTP://WWW.OPENLDAP.ORG/LICENSE.HTML OR IN THE FILE "LICENSE" IN THE
  27  * TOP-LEVEL DIRECTORY OF THE DISTRIBUTION. ANY USE OR EXPLOITATION OF THIS
  28  * WORK OTHER THAN AS AUTHORIZED IN VERSION 2.0.1 OF THE OPENLDAP PUBLIC
  29  * LICENSE, OR OTHER PRIOR WRITTEN CONSENT FROM NOVELL, COULD SUBJECT THE
  30  * PERPETRATOR TO CRIMINAL AND CIVIL LIABILITY.
  31  *---
  32  * Modification to OpenLDAP source by Novell, Inc.
  33  * April 2000 sfs  Added code to chase V3 referrals
  34  *  request.c - sending of ldap requests; handling of referrals
  35  *---
  36  * Note: A verbatim copy of version 2.0.1 of the OpenLDAP Public License
  37  * can be found in the file "build/LICENSE-2.0.1" in this distribution
  38  * of OpenLDAP Software.
  39  */
  40
  41 #include "portable.h"
  42
  43 #include <stdio.h>
  44
  45 #include <ac/stdlib.h>
  46
  47 #include <ac/errno.h>
  48 #include <ac/socket.h>
  49 #include <ac/string.h>
  50 #include <ac/time.h>
  51 #include <ac/unistd.h>
  52
  53 #include "ldap-int.h"
  54 #include "lber.h"
  55
  56 static LDAPConn *find_connection LDAP_P(( LDAP *ld, LDAPURLDesc *srv, int any ));
  57 static void use_connection LDAP_P(( LDAP *ld, LDAPConn *lc ));
  58 static void ldap_free_request_int LDAP_P(( LDAP *ld, LDAPRequest *lr ));
  59
  60 static BerElement *
  61 re_encode_request( LDAP *ld,
  62         BerElement *origber,
  63         ber_int_t msgid,
  64         int sref,
  65         LDAPURLDesc *srv,
  66         int *type );
  67
  68 BerElement *
  69 ldap_alloc_ber_with_options( LDAP *ld )
  70 {
  71         BerElement      *ber;
  72
  73     if (( ber = ber_alloc_t( ld->ld_lberoptions )) == NULL ) {
  74                 ld->ld_errno = LDAP_NO_MEMORY;
  75         }
  76
  77         return( ber );
  78 }
  79
  80
  81 void
  82 ldap_set_ber_options( LDAP *ld, BerElement *ber )
  83 {
  84         ber->ber_options = ld->ld_lberoptions;
  85 }
  86
  87
  88 ber_int_t
  89 ldap_send_initial_request(
  90         LDAP *ld,
  91         ber_tag_t msgtype,
  92         const char *dn,
  93         BerElement *ber,
  94         ber_int_t msgid)
  95 {
  96         LDAPURLDesc     *servers;
  97         int rc;
  98
  99         Debug( LDAP_DEBUG_TRACE, "ldap_send_initial_request\n", 0, 0, 0 );
 100
 101         if ( ber_sockbuf_ctrl( ld->ld_sb, LBER_SB_OPT_GET_FD, NULL ) == -1 ) {
 102                 /* not connected yet */
 103                 int rc = ldap_open_defconn( ld );
 104
 105                 if( rc < 0 ) {
 106                         ber_free( ber, 1 );
 107                         return( -1 );
 108                 }
 109
 110                 Debug( LDAP_DEBUG_TRACE,
 111                         "ldap_open_defconn: successful\n",
 112                         0, 0, 0 );
 113         }
 114
 115         {
 116                 /*
 117                  * use of DNS is turned off or this is an X.500 DN...
 118                  * use our default connection
 119                  */
 120                 servers = NULL;
 121         }
 122
 123 #ifdef LDAP_CONNECTIONLESS
 124         if (LDAP_IS_UDP(ld)) {
 125                 if (msgtype == LDAP_REQ_BIND) {
 126                         if (ld->ld_options.ldo_cldapdn)
 127                                 ldap_memfree(ld->ld_options.ldo_cldapdn);
 128                         ld->ld_options.ldo_cldapdn = ldap_strdup(dn);
 129                         return 0;
 130                 }
 131                 if (msgtype != LDAP_REQ_ABANDON && msgtype != LDAP_REQ_SEARCH)
 132                         return LDAP_PARAM_ERROR;
 133         }
 134 #endif
 135 #ifdef LDAP_R_COMPILE
 136         ldap_pvt_thread_mutex_lock( &ld->ld_req_mutex );
 137 #endif
 138         rc = ldap_send_server_request( ld, ber, msgid, NULL,
 139                 servers, NULL, NULL );
 140 #ifdef LDAP_R_COMPILE
 141         ldap_pvt_thread_mutex_unlock( &ld->ld_req_mutex );
 142 #endif
 143         if (servers)
 144                 ldap_free_urllist(servers);
 145         return(rc);
 146 }
 147
 148
 149 int
 150 ldap_int_flush_request(
 151         LDAP *ld,
 152         LDAPRequest *lr )
 153 {
 154         LDAPConn *lc = lr->lr_conn;
 155
 156         if ( ber_flush( lc->lconn_sb, lr->lr_ber, 0 ) != 0 ) {
 157                 if ( errno == EAGAIN ) {
 158                         /* need to continue write later */
 159                         lr->lr_status = LDAP_REQST_WRITING;
 160                         ldap_mark_select_write( ld, lc->lconn_sb );
 161                         ld->ld_errno = LDAP_BUSY;
 162                         return -2;
 163                 } else {
 164                         ld->ld_errno = LDAP_SERVER_DOWN;
 165                         ldap_free_request( ld, lr );
 166                         ldap_free_connection( ld, lc, 0, 0 );
 167                         return( -1 );
 168                 }
 169         } else {
 170                 if ( lr->lr_parent == NULL ) {
 171                         lr->lr_ber->ber_end = lr->lr_ber->ber_ptr;
 172                         lr->lr_ber->ber_ptr = lr->lr_ber->ber_buf;
 173                 }
 174                 lr->lr_status = LDAP_REQST_INPROGRESS;
 175
 176                 /* sent -- waiting for a response */
 177                 ldap_mark_select_read( ld, lc->lconn_sb );
 178         }
 179         return 0;
 180 }
 181
 182 int
 183 ldap_send_server_request(
 184         LDAP *ld,
 185         BerElement *ber,
 186         ber_int_t msgid,
 187         LDAPRequest *parentreq,
 188         LDAPURLDesc *srvlist,
 189         LDAPConn *lc,
 190         LDAPreqinfo *bind )
 191 {
 192         LDAPRequest     *lr;
 193         int incparent, rc;
 194
 195         Debug( LDAP_DEBUG_TRACE, "ldap_send_server_request\n", 0, 0, 0 );
 196
 197         incparent = 0;
 198         ld->ld_errno = LDAP_SUCCESS;    /* optimistic */
 199
 200         if ( lc == NULL ) {
 201                 if ( srvlist == NULL ) {
 202                         lc = ld->ld_defconn;
 203                 } else {
 204                         if (( lc = find_connection( ld, srvlist, 1 )) ==
 205                             NULL ) {
 206                                 if ( (bind != NULL) && (parentreq != NULL) ) {
 207                                         /* Remember the bind in the parent */
 208                                         incparent = 1;
 209                                         ++parentreq->lr_outrefcnt;
 210                                 }
 211                                 lc = ldap_new_connection( ld, srvlist, 0, 1, bind );
 212                         }
 213                 }
 214         }
 215
 216         if ( lc == NULL || lc->lconn_status != LDAP_CONNST_CONNECTED ) {
 217                 ber_free( ber, 1 );
 218                 if ( ld->ld_errno == LDAP_SUCCESS ) {
 219                         ld->ld_errno = LDAP_SERVER_DOWN;
 220                 }
 221                 if ( incparent ) {
 222                         /* Forget about the bind */
 223                         --parentreq->lr_outrefcnt;
 224                 }
 225                 return( -1 );
 226         }
 227
 228         use_connection( ld, lc );
 229
 230         /* If we still have an incomplete write, try to finish it before
 231          * dealing with the new request. If we don't finish here, return
 232          * LDAP_BUSY and let the caller retry later. We only allow a single
 233          * request to be in WRITING state.
 234          */
 235         rc = 0;
 236         if ( ld->ld_requests &&
 237                 ld->ld_requests->lr_status == LDAP_REQST_WRITING &&
 238                 ldap_int_flush_request( ld, ld->ld_requests ) < 0 )
 239         {
 240                 rc = -1;
 241         }
 242         if ( rc ) return rc;
 243
 244         lr = (LDAPRequest *)LDAP_CALLOC( 1, sizeof( LDAPRequest ));
 245         if ( lr == NULL ) {
 246                 ld->ld_errno = LDAP_NO_MEMORY;
 247                 ldap_free_connection( ld, lc, 0, 0 );
 248                 ber_free( ber, 1 );
 249                 if ( incparent ) {
 250                         /* Forget about the bind */
 251                         --parentreq->lr_outrefcnt;
 252                 }
 253                 return( -1 );
 254         }
 255         lr->lr_msgid = msgid;
 256         lr->lr_status = LDAP_REQST_INPROGRESS;
 257         lr->lr_res_errno = LDAP_SUCCESS;        /* optimistic */
 258         lr->lr_ber = ber;
 259         lr->lr_conn = lc;
 260         if ( parentreq != NULL ) {      /* sub-request */
 261                 if ( !incparent ) {
 262                         /* Increment if we didn't do it before the bind */
 263                         ++parentreq->lr_outrefcnt;
 264                 }
 265                 lr->lr_origid = parentreq->lr_origid;
 266                 lr->lr_parentcnt = ++parentreq->lr_parentcnt;
 267                 lr->lr_parent = parentreq;
 268                 lr->lr_refnext = parentreq->lr_child;
 269                 parentreq->lr_child = lr;
 270         } else {                        /* original request */
 271                 lr->lr_origid = lr->lr_msgid;
 272         }
 273
 274         lr->lr_prev = NULL;
 275         if (( lr->lr_next = ld->ld_requests ) != NULL ) {
 276                 lr->lr_next->lr_prev = lr;
 277         }
 278         ld->ld_requests = lr;
 279
 280         ld->ld_errno = LDAP_SUCCESS;
 281         if ( ldap_int_flush_request( ld, lr ) == -1 ) {
 282                 msgid = -1;
 283         }
 284
 285         return( msgid );
 286 }
 287
 288 LDAPConn *
 289 ldap_new_connection( LDAP *ld, LDAPURLDesc *srvlist, int use_ldsb,
 290         int connect, LDAPreqinfo *bind )
 291 {
 292         LDAPConn        *lc;
 293         LDAPURLDesc     *srv;
 294
 295         Debug( LDAP_DEBUG_TRACE, "ldap_new_connection %d %d %d\n",
 296                 use_ldsb, connect, (bind != NULL) );
 297         /*
 298          * make a new LDAP server connection
 299          * XXX open connection synchronously for now
 300          */
 301         lc = (LDAPConn *)LDAP_CALLOC( 1, sizeof( LDAPConn ) );
 302         if ( lc == NULL ) {
 303                 ld->ld_errno = LDAP_NO_MEMORY;
 304                 return( NULL );
 305         }
 306
 307         if ( use_ldsb ) {
 308                 assert( ld->ld_sb != NULL );
 309                 lc->lconn_sb = ld->ld_sb;
 310
 311         } else {
 312                 lc->lconn_sb = ber_sockbuf_alloc();
 313                 if ( lc->lconn_sb == NULL ) {
 314                         LDAP_FREE( (char *)lc );
 315                         ld->ld_errno = LDAP_NO_MEMORY;
 316                         return( NULL );
 317                 }
 318         }
 319
 320         if ( connect ) {
 321                 for ( srv = srvlist; srv != NULL; srv = srv->lud_next ) {
 322                         if ( ldap_int_open_connection( ld, lc, srv, 0 ) != -1 )
 323                         {
 324                                 break;
 325                         }
 326                 }
 327
 328                 if ( srv == NULL ) {
 329                         if ( !use_ldsb ) {
 330                                 ber_sockbuf_free( lc->lconn_sb );
 331                         }
 332                         LDAP_FREE( (char *)lc );
 333                         ld->ld_errno = LDAP_SERVER_DOWN;
 334                         return( NULL );
 335                 }
 336
 337                 lc->lconn_server = ldap_url_dup( srv );
 338         }
 339
 340         lc->lconn_status = LDAP_CONNST_CONNECTED;
 341         lc->lconn_next = ld->ld_conns;
 342         ld->ld_conns = lc;
 343
 344         /*
 345          * XXX for now, we always do a synchronous bind.  This will have
 346          * to change in the long run...
 347          */
 348         if ( bind != NULL) {
 349                 int             err = 0;
 350                 LDAPConn        *savedefconn;
 351
 352                 /* Set flag to prevent additional referrals
 353                  * from being processed on this
 354                  * connection until the bind has completed
 355                  */
 356                 lc->lconn_rebind_inprogress = 1;
 357                 /* V3 rebind function */
 358                 if ( ld->ld_rebind_proc != NULL) {
 359                         LDAPURLDesc     *srvfunc;
 360                         if( ( srvfunc = ldap_url_dup( srvlist)) == NULL) {
 361                                 ld->ld_errno = LDAP_NO_MEMORY;
 362                                 err = -1;
 363                         } else {
 364                                 savedefconn = ld->ld_defconn;
 365                                 ++lc->lconn_refcnt;     /* avoid premature free */
 366                                 ld->ld_defconn = lc;
 367
 368                                 Debug( LDAP_DEBUG_TRACE, "Call application rebind_proc\n", 0, 0, 0);
 369 #ifdef LDAP_R_COMPILE
 370                                 ldap_pvt_thread_mutex_unlock( &ld->ld_req_mutex );
 371                                 ldap_pvt_thread_mutex_unlock( &ld->ld_res_mutex );
 372 #endif
 373                                 err = (*ld->ld_rebind_proc)( ld,
 374                                         bind->ri_url, bind->ri_request, bind->ri_msgid,
 375                                         ld->ld_rebind_params );
 376 #ifdef LDAP_R_COMPILE
 377                                 ldap_pvt_thread_mutex_lock( &ld->ld_res_mutex );
 378                                 ldap_pvt_thread_mutex_lock( &ld->ld_req_mutex );
 379 #endif
 380
 381                                 ld->ld_defconn = savedefconn;
 382                                 --lc->lconn_refcnt;
 383
 384                                 if ( err != 0 ) {
 385                                         err = -1;
 386                                         ldap_free_connection( ld, lc, 1, 0 );
 387                                         lc = NULL;
 388                                 }
 389                                 ldap_free_urldesc( srvfunc );
 390                         }
 391                 } else {
 392                         savedefconn = ld->ld_defconn;
 393                         ++lc->lconn_refcnt;     /* avoid premature free */
 394                         ld->ld_defconn = lc;
 395
 396                         Debug( LDAP_DEBUG_TRACE, "anonymous rebind via ldap_bind_s\n", 0, 0, 0);
 397 #ifdef LDAP_R_COMPILE
 398                         ldap_pvt_thread_mutex_unlock( &ld->ld_req_mutex );
 399                         ldap_pvt_thread_mutex_unlock( &ld->ld_res_mutex );
 400 #endif
 401                         if ( ldap_bind_s( ld, "", "", LDAP_AUTH_SIMPLE ) != LDAP_SUCCESS ) {
 402                                 err = -1;
 403                         }
 404 #ifdef LDAP_R_COMPILE
 405                         ldap_pvt_thread_mutex_lock( &ld->ld_res_mutex );
 406                         ldap_pvt_thread_mutex_lock( &ld->ld_req_mutex );
 407 #endif
 408                         ld->ld_defconn = savedefconn;
 409                         --lc->lconn_refcnt;
 410
 411                         if ( err != 0 ) {
 412                                 ldap_free_connection( ld, lc, 1, 0 );
 413                                 lc = NULL;
 414                         }
 415                 }
 416                 if ( lc != NULL )
 417                         lc->lconn_rebind_inprogress = 0;
 418         }
 419
 420         return( lc );
 421 }
 422
 423
 424 static LDAPConn *
 425 find_connection( LDAP *ld, LDAPURLDesc *srv, int any )
 426 /*
 427  * return an existing connection (if any) to the server srv
 428  * if "any" is non-zero, check for any server in the "srv" chain
 429  */
 430 {
 431         LDAPConn        *lc;
 432         LDAPURLDesc     *lcu, *lsu;
 433         int lcu_port, lsu_port;
 434
 435         for ( lc = ld->ld_conns; lc != NULL; lc = lc->lconn_next ) {
 436                 lcu = lc->lconn_server;
 437                 lcu_port = ldap_pvt_url_scheme_port( lcu->lud_scheme,
 438                         lcu->lud_port );
 439
 440                 for ( lsu = srv; lsu != NULL; lsu = lsu->lud_next ) {
 441                         lsu_port = ldap_pvt_url_scheme_port( lsu->lud_scheme,
 442                                 lsu->lud_port );
 443
 444                         if ( strcmp( lcu->lud_scheme, lsu->lud_scheme ) == 0
 445                                 && lcu->lud_host != NULL && *lcu->lud_host != '\0'
 446                             && lsu->lud_host != NULL && *lsu->lud_host != '\0'
 447                                 && strcasecmp( lsu->lud_host, lcu->lud_host ) == 0
 448                             && lsu_port == lcu_port )
 449                         {
 450                                 return lc;
 451                         }
 452
 453                         if ( !any ) break;
 454                 }
 455         }
 456
 457         return NULL;
 458 }
 459
 460
 461
 462 static void
 463 use_connection( LDAP *ld, LDAPConn *lc )
 464 {
 465         ++lc->lconn_refcnt;
 466         lc->lconn_lastused = time( NULL );
 467 }
 468
 469
 470 void
 471 ldap_free_connection( LDAP *ld, LDAPConn *lc, int force, int unbind )
 472 {
 473         LDAPConn        *tmplc, *prevlc;
 474
 475         Debug( LDAP_DEBUG_TRACE,
 476                 "ldap_free_connection %d %d\n",
 477                 force, unbind, 0 );
 478
 479         if ( force || --lc->lconn_refcnt <= 0 ) {
 480                 if ( lc->lconn_status == LDAP_CONNST_CONNECTED ) {
 481                         ldap_mark_select_clear( ld, lc->lconn_sb );
 482                         if ( unbind ) {
 483                                 ldap_send_unbind( ld, lc->lconn_sb, NULL, NULL );
 484                         }
 485                 }
 486
 487                 if ( lc->lconn_ber != NULL ) {
 488                         ber_free( lc->lconn_ber, 1 );
 489                 }
 490
 491                 ldap_int_sasl_close( ld, lc );
 492
 493                 prevlc = NULL;
 494                 for ( tmplc = ld->ld_conns;
 495                         tmplc != NULL;
 496                         tmplc = tmplc->lconn_next )
 497                 {
 498                         if ( tmplc == lc ) {
 499                                 if ( prevlc == NULL ) {
 500                                     ld->ld_conns = tmplc->lconn_next;
 501                                 } else {
 502                                     prevlc->lconn_next = tmplc->lconn_next;
 503                                 }
 504                                 break;
 505                         }
 506                         prevlc = tmplc;
 507                 }
 508                 ldap_free_urllist( lc->lconn_server );
 509 #ifdef LDAP_API_FEATURE_X_OPENLDAP_V2_KBIND
 510                 if ( lc->lconn_krbinstance != NULL ) {
 511                         LDAP_FREE( lc->lconn_krbinstance );
 512                 }
 513 #endif
 514
 515                 /* FIXME: is this at all possible? */
 516                 if ( force ) {
 517                         LDAPRequest     *lr;
 518
 519                         for ( lr = ld->ld_requests; lr; ) {
 520                                 LDAPRequest     *lr_next = lr->lr_next;
 521
 522                                 if ( lr->lr_conn == lc ) {
 523                                         ldap_free_request_int( ld, lr );
 524                                 }
 525
 526                                 lr = lr_next;
 527                         }
 528                 }
 529                 if ( lc->lconn_sb != ld->ld_sb ) {
 530                         ber_sockbuf_free( lc->lconn_sb );
 531                 }
 532                 if ( lc->lconn_rebind_queue != NULL) {
 533                         int i;
 534                         for( i = 0; lc->lconn_rebind_queue[i] != NULL; i++ ) {
 535                                 LDAP_VFREE( lc->lconn_rebind_queue[i] );
 536                         }
 537                         LDAP_FREE( lc->lconn_rebind_queue );
 538                 }
 539                 LDAP_FREE( lc );
 540                 Debug( LDAP_DEBUG_TRACE,
 541                         "ldap_free_connection: actually freed\n",
 542                         0, 0, 0 );
 543         } else {
 544                 lc->lconn_lastused = time( NULL );
 545                 Debug( LDAP_DEBUG_TRACE, "ldap_free_connection: refcnt %d\n",
 546                                 lc->lconn_refcnt, 0, 0 );
 547         }
 548 }
 549
 550
 551 #ifdef LDAP_DEBUG
 552 void
 553 ldap_dump_connection( LDAP *ld, LDAPConn *lconns, int all )
 554 {
 555         LDAPConn        *lc;
 556         char            timebuf[32];
 557
 558         fprintf( stderr, "** Connection%s:\n", all ? "s" : "" );
 559         for ( lc = lconns; lc != NULL; lc = lc->lconn_next ) {
 560                 if ( lc->lconn_server != NULL ) {
 561                         fprintf( stderr, "* host: %s  port: %d%s\n",
 562                             ( lc->lconn_server->lud_host == NULL ) ? "(null)"
 563                             : lc->lconn_server->lud_host,
 564                             lc->lconn_server->lud_port, ( lc->lconn_sb ==
 565                             ld->ld_sb ) ? "  (default)" : "" );
 566                 }
 567                 fprintf( stderr, "  refcnt: %d  status: %s\n", lc->lconn_refcnt,
 568                     ( lc->lconn_status == LDAP_CONNST_NEEDSOCKET ) ?
 569                     "NeedSocket" : ( lc->lconn_status ==
 570                     LDAP_CONNST_CONNECTING ) ? "Connecting" : "Connected" );
 571                 fprintf( stderr, "  last used: %s",
 572                     ldap_pvt_ctime( &lc->lconn_lastused, timebuf ));
 573                 if( lc->lconn_rebind_inprogress ) {
 574                         fprintf( stderr, "  rebind in progress\n");
 575                         if( lc->lconn_rebind_queue != NULL) {
 576                                 int i = 0;
 577                                 for( ;lc->lconn_rebind_queue[i] != NULL; i++) {
 578                                         int j = 0;
 579                                         for( ;lc->lconn_rebind_queue[i][j] != 0; j++) {
 580                                                 fprintf( stderr, "    queue %d entry %d - %s\n",
 581                                                         i, j, lc->lconn_rebind_queue[i][j]);
 582                                         }
 583                                 }
 584                         } else {
 585                                 fprintf( stderr, "    queue is empty\n");
 586                         }
 587                 }
 588                 fprintf(stderr, "\n");
 589                 if ( !all ) {
 590                         break;
 591                 }
 592         }
 593 }
 594
 595
 596 void
 597 ldap_dump_requests_and_responses( LDAP *ld )
 598 {
 599         LDAPRequest     *lr;
 600         LDAPMessage     *lm, *l;
 601
 602 #ifdef LDAP_R_COMPILE
 603         ldap_pvt_thread_mutex_lock( &ld->ld_req_mutex );
 604 #endif
 605         fprintf( stderr, "** Outstanding Requests:\n" );
 606         if (( lr = ld->ld_requests ) == NULL ) {
 607                 fprintf( stderr, "   Empty\n" );
 608         }
 609         for ( ; lr != NULL; lr = lr->lr_next ) {
 610             fprintf( stderr, " * msgid %d,  origid %d, status %s\n",
 611                 lr->lr_msgid, lr->lr_origid,
 612                 ( lr->lr_status == LDAP_REQST_INPROGRESS ) ? "InProgress" :
 613                 ( lr->lr_status == LDAP_REQST_CHASINGREFS ) ? "ChasingRefs" :
 614                 ( lr->lr_status == LDAP_REQST_NOTCONNECTED ) ? "NotConnected" :
 615                 ( lr->lr_status == LDAP_REQST_WRITING) ? "Writing" :
 616                 ( lr->lr_status == LDAP_REQST_COMPLETED ? "Request Completed" : "Invalid Status"));
 617             fprintf( stderr, "   outstanding referrals %d, parent count %d\n",
 618                     lr->lr_outrefcnt, lr->lr_parentcnt );
 619         }
 620 #ifdef LDAP_R_COMPILE
 621         ldap_pvt_thread_mutex_unlock( &ld->ld_req_mutex );
 622 #endif
 623         fprintf( stderr, "** Response Queue:\n" );
 624         if (( lm = ld->ld_responses ) == NULL ) {
 625                 fprintf( stderr, "   Empty\n" );
 626         }
 627         for ( ; lm != NULL; lm = lm->lm_next ) {
 628                 fprintf( stderr, " * msgid %d,  type %lu\n",
 629                     lm->lm_msgid, (unsigned long) lm->lm_msgtype );
 630                 if (( l = lm->lm_chain ) != NULL ) {
 631                         fprintf( stderr, "   chained responses:\n" );
 632                         for ( ; l != NULL; l = l->lm_chain ) {
 633                                 fprintf( stderr,
 634                                     "  * msgid %d,  type %lu\n",
 635                                     l->lm_msgid,
 636                                     (unsigned long) l->lm_msgtype );
 637                         }
 638                 }
 639         }
 640 }
 641 #endif /* LDAP_DEBUG */
 642
 643 static void
 644 ldap_free_request_int( LDAP *ld, LDAPRequest *lr )
 645 {
 646         if ( lr->lr_prev == NULL ) {
 647                 /* free'ing the first request? */
 648                 assert( ld->ld_requests == lr );
 649                 ld->ld_requests = lr->lr_next;
 650
 651         } else {
 652                 lr->lr_prev->lr_next = lr->lr_next;
 653         }
 654
 655         if ( lr->lr_next != NULL ) {
 656                 lr->lr_next->lr_prev = lr->lr_prev;
 657         }
 658
 659         if ( lr->lr_ber != NULL ) {
 660                 ber_free( lr->lr_ber, 1 );
 661         }
 662
 663         if ( lr->lr_res_error != NULL ) {
 664                 LDAP_FREE( lr->lr_res_error );
 665         }
 666
 667         if ( lr->lr_res_matched != NULL ) {
 668                 LDAP_FREE( lr->lr_res_matched );
 669         }
 670
 671         LDAP_FREE( lr );
 672 }
 673
 674 void
 675 ldap_free_request( LDAP *ld, LDAPRequest *lr )
 676 {
 677         LDAPRequest     **ttmplr;
 678
 679         Debug( LDAP_DEBUG_TRACE, "ldap_free_request (origid %d, msgid %d)\n",
 680                 lr->lr_origid, lr->lr_msgid, 0 );
 681
 682         /* free all referrals (child requests) */
 683         while ( lr->lr_child )
 684                 ldap_free_request( ld, lr->lr_child );
 685
 686         if ( lr->lr_parent != NULL ) {
 687                 --lr->lr_parent->lr_outrefcnt;
 688                 for ( ttmplr = &lr->lr_parent->lr_child; *ttmplr && *ttmplr != lr; ttmplr = &(*ttmplr)->lr_refnext );
 689                 if ( *ttmplr == lr )
 690                         *ttmplr = lr->lr_refnext;
 691         }
 692         ldap_free_request_int( ld, lr );
 693 }
 694
 695 /*
 696  * call first time with *cntp = -1
 697  * when returns *cntp == -1, no referrals are left
 698  *
 699  * NOTE: may replace *refsp, or shuffle the contents
 700  * of the original array.
 701  */
 702 static int ldap_int_nextref(
 703         LDAP                    *ld,
 704         char                    ***refsp,
 705         int                     *cntp,
 706         void                    *params )
 707 {
 708         assert( refsp != NULL );
 709         assert( *refsp != NULL );
 710         assert( cntp != NULL );
 711
 712         if ( *cntp < -1 ) {
 713                 *cntp = -1;
 714                 return -1;
 715         }
 716
 717         (*cntp)++;
 718
 719         if ( (*refsp)[ *cntp ] == NULL ) {
 720                 *cntp = -1;
 721         }
 722
 723         return 0;
 724 }
 725
 726 /*
 727  * Chase v3 referrals
 728  *
 729  * Parameters:
 730  *  (IN) ld = LDAP connection handle
 731  *  (IN) lr = LDAP Request structure
 732  *  (IN) refs = array of pointers to referral strings that we will chase
 733  *              The array will be free'd by this function when no longer needed
 734  *  (IN) sref != 0 if following search reference
 735  *  (OUT) errstrp = Place to return a string of referrals which could not be followed
 736  *  (OUT) hadrefp = 1 if sucessfully followed referral
 737  *
 738  * Return value - number of referrals followed
 739  */
 740 int
 741 ldap_chase_v3referrals( LDAP *ld, LDAPRequest *lr, char **refs, int sref, char **errstrp, int *hadrefp )
 742 {
 743         char            *unfollowed;
 744         int              unfollowedcnt = 0;
 745         LDAPRequest     *origreq;
 746         LDAPURLDesc     *srv = NULL;
 747         BerElement      *ber;
 748         char            **refarray = NULL;
 749         LDAPConn        *lc;
 750         int                      rc, count, i, j, id;
 751         LDAPreqinfo  rinfo;
 752
 753         ld->ld_errno = LDAP_SUCCESS;    /* optimistic */
 754         *hadrefp = 0;
 755
 756         Debug( LDAP_DEBUG_TRACE, "ldap_chase_v3referrals\n", 0, 0, 0 );
 757
 758         unfollowed = NULL;
 759         rc = count = 0;
 760
 761         /* If no referrals in array, return */
 762         if ( (refs == NULL) || ( (refs)[0] == NULL) ) {
 763                 rc = 0;
 764                 goto done;
 765         }
 766
 767         /* Check for hop limit exceeded */
 768         if ( lr->lr_parentcnt >= ld->ld_refhoplimit ) {
 769                 Debug( LDAP_DEBUG_ANY,
 770                     "more than %d referral hops (dropping)\n", ld->ld_refhoplimit, 0, 0 );
 771                 ld->ld_errno = LDAP_REFERRAL_LIMIT_EXCEEDED;
 772             rc = -1;
 773                 goto done;
 774         }
 775
 776         /* find original request */
 777         for ( origreq = lr;
 778                 origreq->lr_parent != NULL;
 779                 origreq = origreq->lr_parent )
 780         {
 781                 /* empty */ ;
 782         }
 783
 784         refarray = refs;
 785         refs = NULL;
 786
 787         if ( ld->ld_nextref_proc == NULL ) {
 788                 ld->ld_nextref_proc = ldap_int_nextref;
 789         }
 790
 791         /* parse out & follow referrals */
 792         i = -1;
 793         for ( ld->ld_nextref_proc( ld, &refarray, &i, ld->ld_nextref_params );
 794                         i != -1;
 795                         ld->ld_nextref_proc( ld, &refarray, &i, ld->ld_nextref_params ) )
 796         {
 797
 798                 /* Parse the referral URL */
 799                 if (( rc = ldap_url_parse_ext( refarray[i], &srv)) != LDAP_SUCCESS) {
 800                         ld->ld_errno = rc;
 801                         rc = -1;
 802                         goto done;
 803                 }
 804
 805                 if( srv->lud_crit_exts ) {
 806                         /* we do not support any extensions */
 807                         ld->ld_errno = LDAP_NOT_SUPPORTED;
 808                         rc = -1;
 809                         goto done;
 810                 }
 811
 812                 /* treat ldap://hostpart and ldap://hostpart/ the same */
 813                 if ( srv->lud_dn && srv->lud_dn[0] == '\0' ) {
 814                         LDAP_FREE( srv->lud_dn );
 815                         srv->lud_dn = NULL;
 816                 }
 817
 818                 /* check connection for re-bind in progress */
 819                 if (( lc = find_connection( ld, srv, 1 )) != NULL ) {
 820                         if( lc->lconn_rebind_inprogress) {
 821                                 /* We are already chasing a referral or search reference and a
 822                                  * bind on that connection is in progress.  We must queue
 823                                  * referrals on that connection, so we don't get a request
 824                                  * going out before the bind operation completes. This happens
 825                                  * if two search references come in one behind the other
 826                                  * for the same server with different contexts.
 827                                  */
 828                                 Debug( LDAP_DEBUG_TRACE,
 829                                         "ldap_chase_v3referrals: queue referral \"%s\"\n",
 830                                         refarray[i], 0, 0);
 831                                 if( lc->lconn_rebind_queue == NULL ) {
 832                                         /* Create a referral list */
 833                                         lc->lconn_rebind_queue =
 834                                                 (char ***) LDAP_MALLOC( sizeof(void *) * 2);
 835
 836                                         if( lc->lconn_rebind_queue == NULL) {
 837                                                 ld->ld_errno = LDAP_NO_MEMORY;
 838                                                 rc = -1;
 839                                                 goto done;
 840                                         }
 841
 842                                         lc->lconn_rebind_queue[0] = refarray;
 843                                         lc->lconn_rebind_queue[1] = NULL;
 844                                         refarray = NULL;
 845
 846                                 } else {
 847                                         /* Count how many referral arrays we already have */
 848                                         for( j = 0; lc->lconn_rebind_queue[j] != NULL; j++) {
 849                                                 /* empty */;
 850                                         }
 851
 852                                         /* Add the new referral to the list */
 853                                         lc->lconn_rebind_queue = (char ***) LDAP_REALLOC(
 854                                                 lc->lconn_rebind_queue, sizeof(void *) * (j + 2));
 855
 856                                         if( lc->lconn_rebind_queue == NULL ) {
 857                                                 ld->ld_errno = LDAP_NO_MEMORY;
 858                                                 rc = -1;
 859                                                 goto done;
 860                                         }
 861                                         lc->lconn_rebind_queue[j] = refarray;
 862                                         lc->lconn_rebind_queue[j+1] = NULL;
 863                                         refarray = NULL;
 864                                 }
 865
 866                                 /* We have queued the referral/reference, now just return */
 867                                 rc = 0;
 868                                 *hadrefp = 1;
 869                                 count = 1; /* Pretend we already followed referral */
 870                                 goto done;
 871                         }
 872                 }
 873                 /* Re-encode the request with the new starting point of the search.
 874                  * Note: In the future we also need to replace the filter if one
 875                  * was provided with the search reference
 876                  */
 877
 878                 /* For references we don't want old dn if new dn empty */
 879                 if ( sref && srv->lud_dn == NULL ) {
 880                         srv->lud_dn = LDAP_STRDUP( "" );
 881                 }
 882
 883                 LDAP_NEXT_MSGID( ld, id );
 884                 ber = re_encode_request( ld, origreq->lr_ber, id,
 885                         sref, srv, &rinfo.ri_request );
 886
 887                 if( ber == NULL ) {
 888                         ld->ld_errno = LDAP_ENCODING_ERROR;
 889                         rc = -1;
 890                         goto done;
 891                 }
 892
 893                 Debug( LDAP_DEBUG_TRACE,
 894                         "ldap_chase_v3referral: msgid %d, url \"%s\"\n",
 895                         lr->lr_msgid, refarray[i], 0);
 896
 897                 /* Send the new request to the server - may require a bind */
 898                 rinfo.ri_msgid = origreq->lr_origid;
 899                 rinfo.ri_url = refarray[i];
 900 #ifdef LDAP_R_COMPILE
 901                 ldap_pvt_thread_mutex_lock( &ld->ld_req_mutex );
 902 #endif
 903                 rc = ldap_send_server_request( ld, ber, id,
 904                         origreq, srv, NULL, &rinfo );
 905 #ifdef LDAP_R_COMPILE
 906                 ldap_pvt_thread_mutex_unlock( &ld->ld_req_mutex );
 907 #endif
 908                 if ( rc < 0 ) {
 909                         /* Failure, try next referral in the list */
 910                         Debug( LDAP_DEBUG_ANY, "Unable to chase referral \"%s\" (%s)\n",
 911                                 refarray[i], ldap_err2string( ld->ld_errno ), 0);
 912                         unfollowedcnt += ldap_append_referral( ld, &unfollowed, refarray[i]);
 913                         ldap_free_urllist(srv);
 914                         srv = NULL;
 915                 } else {
 916                         /* Success, no need to try this referral list further */
 917                         rc = 0;
 918                         ++count;
 919                         *hadrefp = 1;
 920
 921                         /* check if there is a queue of referrals that came in during bind */
 922                         if( lc == NULL) {
 923                                 if (( lc = find_connection( ld, srv, 1 )) == NULL ) {
 924                                         ld->ld_errno = LDAP_OPERATIONS_ERROR;
 925                                         rc = -1;
 926                                         goto done;
 927                                 }
 928                         }
 929
 930                         if( lc->lconn_rebind_queue != NULL) {
 931                                 /* Release resources of previous list */
 932                                 LDAP_VFREE(refarray);
 933                                 refarray = NULL;
 934                                 ldap_free_urllist(srv);
 935                                 srv = NULL;
 936
 937                                 /* Pull entries off end of queue so list always null terminated */
 938                                 for( j = 0; lc->lconn_rebind_queue[j] != NULL; j++) {
 939                                         ;
 940                                 }
 941                                 refarray = lc->lconn_rebind_queue[j-1];
 942                                 lc->lconn_rebind_queue[j-1] = NULL;
 943                                 /* we pulled off last entry from queue, free queue */
 944                                 if ( j == 1 ) {
 945                                         LDAP_FREE( lc->lconn_rebind_queue);
 946                                         lc->lconn_rebind_queue = NULL;
 947                                 }
 948                                 /* restart the loop the with new referral list */
 949                                 i = -1;
 950                                 continue;
 951                         }
 952                         break; /* referral followed, break out of for loop */
 953                 }
 954         } /* end for loop */
 955 done:
 956         LDAP_VFREE( refarray );
 957         ldap_free_urllist( srv );
 958         LDAP_FREE( *errstrp );
 959
 960         if( rc == 0 ) {
 961                 *errstrp = NULL;
 962                 LDAP_FREE( unfollowed );
 963                 return count;
 964         } else {
 965                 ld->ld_errno = LDAP_REFERRAL;
 966                 *errstrp = unfollowed;
 967                 return rc;
 968         }
 969 }
 970
 971 /*
 972  * XXX merging of errors in this routine needs to be improved
 973  */
 974 int
 975 ldap_chase_referrals( LDAP *ld,
 976         LDAPRequest *lr,
 977         char **errstrp,
 978         int sref,
 979         int *hadrefp )
 980 {
 981         int             rc, count, id;
 982         unsigned        len;
 983         char            *p, *ref, *unfollowed;
 984         LDAPRequest     *origreq;
 985         LDAPURLDesc     *srv;
 986         BerElement      *ber;
 987         LDAPreqinfo  rinfo;
 988
 989         Debug( LDAP_DEBUG_TRACE, "ldap_chase_referrals\n", 0, 0, 0 );
 990
 991         ld->ld_errno = LDAP_SUCCESS;    /* optimistic */
 992         *hadrefp = 0;
 993
 994         if ( *errstrp == NULL ) {
 995                 return( 0 );
 996         }
 997
 998         len = strlen( *errstrp );
 999         for ( p = *errstrp; len >= LDAP_REF_STR_LEN; ++p, --len ) {
1000                 if ( strncasecmp( p, LDAP_REF_STR, LDAP_REF_STR_LEN ) == 0 ) {
1001                         *p = '\0';
1002                         p += LDAP_REF_STR_LEN;
1003                         break;
1004                 }
1005         }
1006
1007         if ( len < LDAP_REF_STR_LEN ) {
1008                 return( 0 );
1009         }
1010
1011         if ( lr->lr_parentcnt >= ld->ld_refhoplimit ) {
1012                 Debug( LDAP_DEBUG_ANY,
1013                     "more than %d referral hops (dropping)\n",
1014                     ld->ld_refhoplimit, 0, 0 );
1015                     /* XXX report as error in ld->ld_errno? */
1016                     return( 0 );
1017         }
1018
1019         /* find original request */
1020         for ( origreq = lr; origreq->lr_parent != NULL;
1021              origreq = origreq->lr_parent ) {
1022                 /* empty */;
1023         }
1024
1025         unfollowed = NULL;
1026         rc = count = 0;
1027
1028         /* parse out & follow referrals */
1029         for ( ref = p; rc == 0 && ref != NULL; ref = p ) {
1030                 if (( p = strchr( ref, '\n' )) != NULL ) {
1031                         *p++ = '\0';
1032                 } else {
1033                         p = NULL;
1034                 }
1035
1036                 rc = ldap_url_parse_ext( ref, &srv );
1037
1038                 if ( rc != LDAP_URL_SUCCESS ) {
1039                         Debug( LDAP_DEBUG_TRACE,
1040                             "ignoring unknown referral <%s>\n", ref, 0, 0 );
1041                         rc = ldap_append_referral( ld, &unfollowed, ref );
1042                         *hadrefp = 1;
1043                         continue;
1044                 }
1045
1046                 if( srv->lud_dn != NULL && srv->lud_dn == '\0' ) {
1047                         LDAP_FREE( srv->lud_dn );
1048                         srv->lud_dn = NULL;
1049                 }
1050
1051                 Debug( LDAP_DEBUG_TRACE,
1052                     "chasing LDAP referral: <%s>\n", ref, 0, 0 );
1053
1054                 *hadrefp = 1;
1055
1056                 LDAP_NEXT_MSGID( ld, id );
1057                 ber = re_encode_request( ld, origreq->lr_ber,
1058                     id, sref, srv, &rinfo.ri_request );
1059
1060                 if( ber == NULL ) {
1061                         return -1 ;
1062                 }
1063
1064                 /* copy the complete referral for rebind process */
1065                 rinfo.ri_url = LDAP_STRDUP( ref );
1066
1067                 rinfo.ri_msgid = origreq->lr_origid;
1068
1069 #ifdef LDAP_R_COMPILE
1070                 ldap_pvt_thread_mutex_lock( &ld->ld_req_mutex );
1071 #endif
1072                 rc = ldap_send_server_request( ld, ber, id,
1073                         lr, srv, NULL, &rinfo );
1074 #ifdef LDAP_R_COMPILE
1075                 ldap_pvt_thread_mutex_unlock( &ld->ld_req_mutex );
1076 #endif
1077
1078                 LDAP_FREE( rinfo.ri_url );
1079
1080                 if( rc >= 0 ) {
1081                         ++count;
1082                 } else {
1083                         Debug( LDAP_DEBUG_ANY,
1084                             "Unable to chase referral (%s)\n",
1085                             ldap_err2string( ld->ld_errno ), 0, 0 );
1086                         rc = ldap_append_referral( ld, &unfollowed, ref );
1087                 }
1088
1089                 ldap_free_urllist(srv);
1090         }
1091
1092         LDAP_FREE( *errstrp );
1093         *errstrp = unfollowed;
1094
1095         return(( rc == 0 ) ? count : rc );
1096 }
1097
1098
1099 int
1100 ldap_append_referral( LDAP *ld, char **referralsp, char *s )
1101 {
1102         int     first;
1103
1104         if ( *referralsp == NULL ) {
1105                 first = 1;
1106                 *referralsp = (char *)LDAP_MALLOC( strlen( s ) + LDAP_REF_STR_LEN
1107                     + 1 );
1108         } else {
1109                 first = 0;
1110                 *referralsp = (char *)LDAP_REALLOC( *referralsp,
1111                     strlen( *referralsp ) + strlen( s ) + 2 );
1112         }
1113
1114         if ( *referralsp == NULL ) {
1115                 ld->ld_errno = LDAP_NO_MEMORY;
1116                 return( -1 );
1117         }
1118
1119         if ( first ) {
1120                 strcpy( *referralsp, LDAP_REF_STR );
1121         } else {
1122                 strcat( *referralsp, "\n" );
1123         }
1124         strcat( *referralsp, s );
1125
1126         return( 0 );
1127 }
1128
1129
1130
1131 static BerElement *
1132 re_encode_request( LDAP *ld,
1133         BerElement *origber,
1134         ber_int_t msgid,
1135         int sref,
1136         LDAPURLDesc *srv,
1137         int *type )
1138 {
1139         /*
1140          * XXX this routine knows way too much about how the lber library works!
1141          */
1142         ber_int_t       along;
1143         ber_tag_t       tag;
1144         ber_tag_t       rtag;
1145         ber_int_t       ver;
1146         ber_int_t       scope;
1147         int             rc;
1148         BerElement      tmpber, *ber;
1149         char            *orig_dn;
1150         char            *dn;
1151
1152         Debug( LDAP_DEBUG_TRACE,
1153             "re_encode_request: new msgid %ld, new dn <%s>\n",
1154             (long) msgid,
1155                 ( srv == NULL || srv->lud_dn == NULL) ? "NONE" : srv->lud_dn, 0 );
1156
1157         tmpber = *origber;
1158
1159         /*
1160          * all LDAP requests are sequences that start with a message id.
1161          * For all except delete, this is followed by a sequence that is
1162          * tagged with the operation code.  For delete, the provided DN
1163          * is not wrapped by a sequence.
1164          */
1165         rtag = ber_scanf( &tmpber, "{it", /*}*/ &along, &tag );
1166
1167         if ( rtag == LBER_ERROR ) {
1168                 ld->ld_errno = LDAP_DECODING_ERROR;
1169                 return( NULL );
1170         }
1171
1172         assert( tag != 0);
1173         if ( tag == LDAP_REQ_BIND ) {
1174                 /* bind requests have a version number before the DN & other stuff */
1175                 rtag = ber_scanf( &tmpber, "{ia" /*}*/, &ver, &orig_dn );
1176
1177         } else if ( tag == LDAP_REQ_DELETE ) {
1178                 /* delete requests don't have a DN wrapping sequence */
1179                 rtag = ber_scanf( &tmpber, "a", &orig_dn );
1180
1181         } else if ( tag == LDAP_REQ_SEARCH ) {
1182                 /* search requests need to be re-scope-ed */
1183                 rtag = ber_scanf( &tmpber, "{ae" /*"}"*/, &orig_dn, &scope );
1184
1185                 if( srv->lud_scope != LDAP_SCOPE_DEFAULT ) {
1186                         /* use the scope provided in reference */
1187                         scope = srv->lud_scope;
1188
1189                 } else if ( sref ) {
1190                         /* use scope implied by previous operation
1191                          *   base -> base
1192                          *   one -> base
1193                          *   subtree -> subtree
1194                          *   subordinate -> subtree
1195                          */
1196                         switch( scope ) {
1197                         default:
1198                         case LDAP_SCOPE_BASE:
1199                         case LDAP_SCOPE_ONELEVEL:
1200                                 scope = LDAP_SCOPE_BASE;
1201                                 break;
1202                         case LDAP_SCOPE_SUBTREE:
1203 #ifdef LDAP_SCOPE_SUBORDINATE
1204                         case LDAP_SCOPE_SUBORDINATE:
1205 #endif
1206                                 scope = LDAP_SCOPE_SUBTREE;
1207                                 break;
1208                         }
1209                 }
1210
1211         } else {
1212                 rtag = ber_scanf( &tmpber, "{a" /*}*/, &orig_dn );
1213         }
1214
1215         if( rtag == LBER_ERROR ) {
1216                 ld->ld_errno = LDAP_DECODING_ERROR;
1217                 return NULL;
1218         }
1219
1220         if (( ber = ldap_alloc_ber_with_options( ld )) == NULL ) {
1221                 return NULL;
1222         }
1223
1224         if ( srv->lud_dn == NULL ) {
1225                 dn = orig_dn;
1226         } else {
1227                 dn = srv->lud_dn;
1228         }
1229
1230         if ( tag == LDAP_REQ_BIND ) {
1231                 rc = ber_printf( ber, "{it{is" /*}}*/, msgid, tag, ver, dn );
1232         } else if ( tag == LDAP_REQ_DELETE ) {
1233                 rc = ber_printf( ber, "{itsN}", msgid, tag, dn );
1234         } else if ( tag == LDAP_REQ_SEARCH ) {
1235                 rc = ber_printf( ber, "{it{se" /*}}*/, msgid, tag, dn, scope );
1236         } else {
1237                 rc = ber_printf( ber, "{it{s" /*}}*/, msgid, tag, dn );
1238         }
1239
1240         LDAP_FREE( orig_dn );
1241
1242         if ( rc == -1 ) {
1243                 ld->ld_errno = LDAP_ENCODING_ERROR;
1244                 ber_free( ber, 1 );
1245                 return NULL;
1246         }
1247
1248         if ( tag != LDAP_REQ_DELETE && (
1249                 ber_write(ber, tmpber.ber_ptr, ( tmpber.ber_end - tmpber.ber_ptr ), 0)
1250                 != ( tmpber.ber_end - tmpber.ber_ptr ) ||
1251             ber_printf( ber, /*{{*/ "N}N}" ) == -1 ) )
1252         {
1253                 ld->ld_errno = LDAP_ENCODING_ERROR;
1254                 ber_free( ber, 1 );
1255                 return NULL;
1256         }
1257
1258 #ifdef LDAP_DEBUG
1259         if ( ldap_debug & LDAP_DEBUG_PACKETS ) {
1260                 Debug( LDAP_DEBUG_ANY, "re_encode_request new request is:\n",
1261                     0, 0, 0 );
1262                 ber_log_dump( LDAP_DEBUG_BER, ldap_debug, ber, 0 );
1263         }
1264 #endif /* LDAP_DEBUG */
1265
1266         *type = tag;    /* return request type */
1267         return ber;
1268 }
1269
1270
1271 LDAPRequest *
1272 ldap_find_request_by_msgid( LDAP *ld, ber_int_t msgid )
1273 {
1274         LDAPRequest     *lr;
1275
1276 #ifdef LDAP_R_COMPILE
1277         ldap_pvt_thread_mutex_lock( &ld->ld_req_mutex );
1278 #endif
1279         for ( lr = ld->ld_requests; lr != NULL; lr = lr->lr_next ) {
1280                 if( lr->lr_status == LDAP_REQST_COMPLETED ) {
1281                         continue;       /* Skip completed requests */
1282                 }
1283                 if ( msgid == lr->lr_msgid ) {
1284                         break;
1285                 }
1286         }
1287 #ifdef LDAP_R_COMPILE
1288         ldap_pvt_thread_mutex_unlock( &ld->ld_req_mutex );
1289 #endif
1290
1291         return( lr );
1292 }
1293
1294