git.sur5r.net Git - openldap/blob - servers/slapd/back-sql/compare.c

   1 /* $OpenLDAP$ */
   2 /* This work is part of OpenLDAP Software <http://www.openldap.org/>.
   3  *
   4  * Copyright 1999-2005 The OpenLDAP Foundation.
   5  * Portions Copyright 1999 Dmitry Kovalev.
   6  * Portions Copyright 2002 Pierangelo Masarati.
   7  * All rights reserved.
   8  *
   9  * Redistribution and use in source and binary forms, with or without
  10  * modification, are permitted only as authorized by the OpenLDAP
  11  * Public License.
  12  *
  13  * A copy of this license is available in the file LICENSE in the
  14  * top-level directory of the distribution or, alternatively, at
  15  * <http://www.OpenLDAP.org/license.html>.
  16  */
  17 /* ACKNOWLEDGEMENTS:
  18  * This work was initially developed by Dmitry Kovalev for inclusion
  19  * by OpenLDAP Software.  Additional significant contributors include
  20  * Pierangelo Masarati.
  21  */
  22
  23 #include "portable.h"
  24
  25 #include <stdio.h>
  26 #include <sys/types.h>
  27
  28 #include "slap.h"
  29 #include "proto-sql.h"
  30
  31 int
  32 backsql_compare( Operation *op, SlapReply *rs )
  33 {
  34         SQLHDBC                 dbh = SQL_NULL_HDBC;
  35         Entry                   e = { 0 };
  36         Attribute               *a = NULL;
  37         backsql_srch_info       bsi = { 0 };
  38         int                     rc;
  39         int                     manageDSAit = get_manageDSAit( op );
  40         AttributeName           anlist[2];
  41
  42         Debug( LDAP_DEBUG_TRACE, "==>backsql_compare()\n", 0, 0, 0 );
  43
  44         rs->sr_err = backsql_get_db_conn( op, &dbh );
  45         if ( !dbh ) {
  46                 Debug( LDAP_DEBUG_TRACE, "backsql_compare(): "
  47                         "could not get connection handle - exiting\n",
  48                         0, 0, 0 );
  49
  50                 rs->sr_text = ( rs->sr_err == LDAP_OTHER )
  51                         ? "SQL-backend error" : NULL;
  52                 goto return_results;
  53         }
  54
  55         anlist[ 0 ].an_name = op->oq_compare.rs_ava->aa_desc->ad_cname;
  56         anlist[ 0 ].an_desc = op->oq_compare.rs_ava->aa_desc;
  57         BER_BVZERO( &anlist[ 1 ].an_name );
  58
  59         /*
  60          * Get the entry
  61          */
  62         bsi.bsi_e = &e;
  63         rc = backsql_init_search( &bsi, &op->o_req_ndn,
  64                         LDAP_SCOPE_BASE,
  65                         SLAP_NO_LIMIT, SLAP_NO_LIMIT,
  66                         (time_t)(-1), NULL, dbh, op, rs, anlist,
  67                         ( BACKSQL_ISF_MATCHED | BACKSQL_ISF_GET_ENTRY ) );
  68         switch ( rc ) {
  69         case LDAP_SUCCESS:
  70                 break;
  71
  72         case LDAP_REFERRAL:
  73                 if ( manageDSAit && !BER_BVISNULL( &bsi.bsi_e->e_nname ) &&
  74                                 dn_match( &op->o_req_ndn, &bsi.bsi_e->e_nname ) )
  75                 {
  76                         rs->sr_err = LDAP_SUCCESS;
  77                         rs->sr_text = NULL;
  78                         rs->sr_matched = NULL;
  79                         if ( rs->sr_ref ) {
  80                                 ber_bvarray_free( rs->sr_ref );
  81                                 rs->sr_ref = NULL;
  82                         }
  83                         break;
  84                 }
  85                 /* fallthru */
  86
  87         default:
  88                 Debug( LDAP_DEBUG_TRACE, "backsql_compare(): "
  89                         "could not retrieve compareDN ID - no such entry\n",
  90                         0, 0, 0 );
  91                 goto return_results;
  92         }
  93
  94         if ( get_assert( op ) &&
  95                         ( test_filter( op, &e, get_assertion( op ) )
  96                           != LDAP_COMPARE_TRUE ) )
  97         {
  98                 rs->sr_err = LDAP_ASSERTION_FAILED;
  99                 goto return_results;
 100         }
 101
 102         if ( is_at_operational( op->oq_compare.rs_ava->aa_desc->ad_type ) ) {
 103                 SlapReply       nrs = { 0 };
 104                 Attribute       **ap;
 105
 106                 for ( ap = &e.e_attrs; *ap; ap = &(*ap)->a_next )
 107                         ;
 108
 109                 nrs.sr_attrs = anlist;
 110                 nrs.sr_entry = &e;
 111                 nrs.sr_attr_flags = SLAP_OPATTRS_NO;
 112                 nrs.sr_operational_attrs = NULL;
 113
 114                 rs->sr_err = backsql_operational( op, &nrs );
 115                 if ( rs->sr_err != LDAP_SUCCESS ) {
 116                         goto return_results;
 117                 }
 118
 119                 *ap = nrs.sr_operational_attrs;
 120         }
 121
 122         if ( ! access_allowed( op, &e, op->oq_compare.rs_ava->aa_desc,
 123                                 &op->oq_compare.rs_ava->aa_value,
 124                                 ACL_COMPARE, NULL ) )
 125         {
 126                 rs->sr_err = LDAP_INSUFFICIENT_ACCESS;
 127                 goto return_results;
 128         }
 129
 130         rs->sr_err = LDAP_NO_SUCH_ATTRIBUTE;
 131         for ( a = attrs_find( e.e_attrs, op->oq_compare.rs_ava->aa_desc );
 132                         a != NULL;
 133                         a = attrs_find( a->a_next, op->oq_compare.rs_ava->aa_desc ) )
 134         {
 135                 rs->sr_err = LDAP_COMPARE_FALSE;
 136                 if ( value_find_ex( op->oq_compare.rs_ava->aa_desc,
 137                                         SLAP_MR_ATTRIBUTE_VALUE_NORMALIZED_MATCH |
 138                                         SLAP_MR_ASSERTED_VALUE_NORMALIZED_MATCH,
 139                                         a->a_nvals,
 140                                         &op->oq_compare.rs_ava->aa_value,
 141                                         op->o_tmpmemctx ) == 0 )
 142                 {
 143                         rs->sr_err = LDAP_COMPARE_TRUE;
 144                         break;
 145                 }
 146         }
 147
 148 return_results:;
 149         switch ( rs->sr_err ) {
 150         case LDAP_COMPARE_TRUE:
 151         case LDAP_COMPARE_FALSE:
 152                 break;
 153
 154         default:
 155 #ifdef SLAP_ACL_HONOR_DISCLOSE
 156                 if ( !BER_BVISNULL( &e.e_nname ) &&
 157                                 ! access_allowed( op, &e,
 158                                         slap_schema.si_ad_entry, NULL,
 159                                         ACL_DISCLOSE, NULL ) )
 160                 {
 161                         rs->sr_err = LDAP_NO_SUCH_OBJECT;
 162                         rs->sr_text = NULL;
 163                 }
 164 #endif /* SLAP_ACL_HONOR_DISCLOSE */
 165                 break;
 166         }
 167
 168         send_ldap_result( op, rs );
 169
 170         if ( rs->sr_matched ) {
 171                 rs->sr_matched = NULL;
 172         }
 173
 174         if ( rs->sr_ref ) {
 175                 ber_bvarray_free( rs->sr_ref );
 176                 rs->sr_ref = NULL;
 177         }
 178
 179         if ( !BER_BVISNULL( &bsi.bsi_base_id.eid_ndn ) ) {
 180                 (void)backsql_free_entryID( op, &bsi.bsi_base_id, 0 );
 181         }
 182
 183         if ( !BER_BVISNULL( &e.e_nname ) ) {
 184                 backsql_entry_clean( op, &e );
 185         }
 186
 187         if ( bsi.bsi_attrs != NULL ) {
 188                 op->o_tmpfree( bsi.bsi_attrs, op->o_tmpmemctx );
 189         }
 190
 191         Debug(LDAP_DEBUG_TRACE,"<==backsql_compare()\n",0,0,0);
 192         switch ( rs->sr_err ) {
 193         case LDAP_COMPARE_TRUE:
 194         case LDAP_COMPARE_FALSE:
 195                 return LDAP_SUCCESS;
 196
 197         default:
 198                 return rs->sr_err;
 199         }
 200 }
 201