1N/A/*
1N/A *
1N/A * Copyright 1999 Sun Microsystems, Inc. All rights reserved.
1N/A * Use is subject to license terms.
1N/A *
1N/A *
1N/A * Comments:
1N/A *
1N/A */
1N/A
1N/A#pragma ident "%Z%%M% %I% %E% SMI"
1N/A
1N/A#include <stdio.h>
1N/A#include <string.h>
1N/A#include <sys/time.h>
1N/A#include <sys/types.h>
1N/A#include <sys/socket.h>
1N/A#include <sys/errno.h>
1N/A#include "portable.h"
1N/A#include "lber.h"
1N/A#include "ldap.h"
1N/A#include "ldap-private.h"
1N/A#include "ldap-int.h"
1N/A
1N/Astatic BerElement *
1N/Are_encode_request( LDAP *ld, BerElement *origber, int msgid, LDAPURLDesc *urldesc );
1N/Astatic void addFollowedRef(LDAPRequest *lr, char *ref);
1N/Astatic void addToFollowRef(LDAPRequest *lr, char *ref);
1N/Astatic int addUnFollowedRef(LDAP *ld, LDAPRequest *lr, char *ref);
1N/A
1N/Achar ** ldap_errormsg2referrals(char *errmsg) {
1N/A char ** refs;
1N/A int count;
1N/A size_t len;
1N/A char *p, *ref;
1N/A
1N/A if (errmsg == NULL){
1N/A return (NULL);
1N/A }
1N/A len = strlen( errmsg );
1N/A for ( p = errmsg; len >= LDAP_REF_STR_LEN; ++p, --len ) {
1N/A if (( *p == 'R' || *p == 'r' ) && strncasecmp( p,
1N/A LDAP_REF_STR, LDAP_REF_STR_LEN ) == 0 ) {
1N/A *p = '\0';
1N/A p += LDAP_REF_STR_LEN;
1N/A break;
1N/A }
1N/A }
1N/A
1N/A if ( len < LDAP_REF_STR_LEN ) {
1N/A return( NULL);
1N/A }
1N/A count = 1;
1N/A ref = p;
1N/A while ((ref = strchr(ref, '\n')) != NULL)
1N/A count++;
1N/A
1N/A if ((refs = (char **)calloc(count + 1, sizeof(char *))) == NULL){
1N/A return (NULL);
1N/A }
1N/A
1N/A count = 0;
1N/A for (ref = p; ref != NULL; ref= p){
1N/A if ((p = strchr(ref, '\n')) != NULL){
1N/A *p = '\0';
1N/A }
1N/A refs[count++] = strdup(ref);
1N/A if (p != NULL)
1N/A *p++ = '\n';
1N/A }
1N/A return (refs);
1N/A}
1N/A
1N/Achar *ldap_referral2error_msg(char ** refs)
1N/A{
1N/A int i;
1N/A size_t len = 0;
1N/A char *msg = NULL;
1N/A
1N/A if (refs == NULL)
1N/A return (msg);
1N/A
1N/A for (i = 0; refs[i] != NULL; i++){
1N/A len += strlen (refs[i]) + 1;
1N/A }
1N/A
1N/A if ((len > 0) && ((msg = (char *)malloc(len + LDAP_REF_STR_LEN + 2)) != NULL)) {
1N/A strncpy(msg, LDAP_REF_STR, LDAP_REF_STR_LEN);
1N/A for (i = 0; refs[i] != NULL; i++) {
1N/A strcat(msg, refs[i]);
1N/A strcat(msg, "\n");
1N/A }
1N/A }
1N/A return (msg);
1N/A}
1N/A
1N/A
1N/Aint
1N/Achase_referrals( LDAP *ld, LDAPRequest *lr, char **refs, int *count, int samerequest )
1N/A{
1N/A int rc, len, newdn, i, j, refcnt, errCode;
1N/A char *p, *ports, *ref, *tmpref, *refdn;
1N/A LDAPRequest *origreq;
1N/A LDAPServer *srv;
1N/A BerElement *ber;
1N/A LDAPURLDesc *ludp;
1N/A
1N/A
1N/A Debug( LDAP_DEBUG_TRACE, catgets(slapdcat, 1, 215, "=> chase_referrals\n"), 0, 0, 0 );
1N/A
1N/A ld->ld_errno = LDAP_SUCCESS; /* optimistic */
1N/A *count = 0;
1N/A if ( refs == NULL ) {
1N/A return( LDAP_SUCCESS );
1N/A }
1N/A
1N/A#ifdef _REENTRANT
1N/A LOCK_LDAP(ld);
1N/A#endif
1N/A
1N/A if ( lr->lr_parentcnt >= ld->ld_refhoplimit ) {
1N/A Debug( LDAP_DEBUG_ANY,
1N/A catgets(slapdcat, 1, 216, "more than %d referral hops (dropping)\n"),
1N/A ld->ld_refhoplimit, 0, 0 );
1N/A /* XXX report as error in ld->ld_errno? */
1N/A rc = ld->ld_errno = (ld->ld_version >= LDAP_VERSION3) ? LDAP_REFERRAL_LIMIT_EXCEEDED : LDAP_OTHER;
1N/A#ifdef _REENTRANT
1N/A UNLOCK_LDAP(ld);
1N/A#endif
1N/A return( rc );
1N/A }
1N/A
1N/A /* find original request */
1N/A for ( origreq = lr; origreq->lr_parent != NULL;
1N/A origreq = origreq->lr_parent ) {
1N/A ;
1N/A }
1N/A
1N/A for (refcnt = 0; refs[refcnt] != NULL; refcnt++)
1N/A ; /* Count number of referrals */
1N/A Debug(LDAP_DEBUG_TRACE, catgets(slapdcat, 1, 1277, "%d possible referrals to chase\n"), refcnt, 0,0);
1N/A
1N/A rc = 0;
1N/A /* parse out & follow referrals */
1N/A for (i = 0; rc == 0 && refs[i] != NULL; i++) {
1N/A Debug(LDAP_DEBUG_TRACE, catgets(slapdcat, 1, -1, "Try to chase %s\n"), refs[i], 0,0);
1N/A
1N/A /* Parse URL */
1N/A if (ldap_url_parse(refs[i], &ludp) != 0){
1N/A Debug(LDAP_DEBUG_TRACE, catgets(slapdcat, 1, -1, "Bad URL for referral %s\n"), refs[i], 0,0);
1N/A errCode = LDAP_PARAM_ERROR;
1N/A addUnFollowedRef(ld, lr, refs[i]);
1N/A /* try next URL */
1N/A continue;
1N/A }
1N/A
1N/A /* Encode previous request with new URL */
1N/A if (( ber = re_encode_request( ld, origreq->lr_ber, ++ld->ld_msgid, ludp )) == NULL ) {
1N/A Debug(LDAP_DEBUG_TRACE, catgets(slapdcat, 1, -1, "Error while encoding request for referral\n"), 0, 0,0);
1N/A ldap_free_urldesc(ludp);
1N/A errCode = ld->ld_errno;
1N/A addUnFollowedRef(ld, lr, refs[i]);
1N/A /* try next URL */
1N/A continue;
1N/A }
1N/A
1N/A if (( srv = (LDAPServer *)calloc( 1, sizeof( LDAPServer ))) == NULL ) {
1N/A ldap_free_urldesc(ludp);
1N/A ber_free( ber, 1 );
1N/A rc = ld->ld_errno = LDAP_NO_MEMORY;
1N/A#ifdef _REENTRANT
1N/A UNLOCK_LDAP(ld);
1N/A#endif
1N/A return( rc );
1N/A }
1N/A
1N/A if (( srv->lsrv_host = strdup( ludp->lud_host ? ludp->lud_host : ld->ld_defhost)) == NULL ) {
1N/A ldap_free_urldesc(ludp);
1N/A free( (char *)srv );
1N/A ber_free( ber, 1 );
1N/A rc = ld->ld_errno = LDAP_NO_MEMORY;
1N/A#ifdef _REENTRANT
1N/A UNLOCK_LDAP(ld);
1N/A#endif
1N/A return( rc );
1N/A }
1N/A
1N/A srv->lsrv_port = ludp->lud_port ? ludp->lud_port : LDAP_PORT;
1N/A
1N/A if ( srv != NULL && send_server_request( ld, ber, ld->ld_msgid,
1N/A lr, srv, NULL, 1 ) >= 0 ) {
1N/A ++*count;
1N/A Debug(LDAP_DEBUG_TRACE, catgets(slapdcat, 1, -1, "Request has been forwarded to %s\n"), refs[i], 0,0);
1N/A addFollowedRef(lr, refs[i]);
1N/A for (j = i+1; refs[j] != NULL; j++){
1N/A addToFollowRef(lr, refs[j]);
1N/A }
1N/A ldap_free_urldesc(ludp);
1N/A break;
1N/A } else {
1N/A Debug( LDAP_DEBUG_ANY,
1N/A catgets(slapdcat, 1, 220, "Unable to chase referral (%s)\n"),
1N/A ldap_err2string( ld->ld_errno ), 0, 0 );
1N/A addUnFollowedRef(ld, lr, refs[i]);
1N/A errCode = ld->ld_errno;
1N/A }
1N/A ldap_free_urldesc(ludp); /* So far spawn all requests */
1N/A }
1N/A
1N/A#ifdef _REENTRANT
1N/A UNLOCK_LDAP(ld);
1N/A#endif
1N/A if (refs[i] != NULL) {
1N/A rc = LDAP_SUCCESS;
1N/A } else {
1N/A Debug(LDAP_DEBUG_TRACE, catgets(slapdcat, 1, -1, "No referral was successfully chased (last error %d)\n"), errCode, 0, 0);
1N/A rc = errCode;
1N/A }
1N/A Debug ( LDAP_DEBUG_TRACE, catgets(slapdcat, 1, 1278, "<= chase_referrals --- \n"), 0,0,0);
1N/A
1N/A return( rc );
1N/A}
1N/A
1N/Astatic void addFollowedRef(LDAPRequest *lr, char *ref)
1N/A{
1N/A int i;
1N/A
1N/A if (lr->lr_ref_followed == NULL){
1N/A if ((lr->lr_ref_followed = (char **)calloc(2, sizeof(char*))) == NULL)
1N/A return;
1N/A i = 0;
1N/A } else {
1N/A for (i = 0; lr->lr_ref_followed[i] != NULL; i++);
1N/A if ((lr->lr_ref_followed = (char **)realloc((char *)lr->lr_ref_followed, (i+2) * sizeof(char *))) == NULL){
1N/A return;
1N/A }
1N/A }
1N/A lr->lr_ref_followed[i++] = strdup(ref);
1N/A lr->lr_ref_followed[i] = NULL;
1N/A return;
1N/A}
1N/A
1N/Astatic void addToFollowRef(LDAPRequest *lr, char *ref)
1N/A{
1N/A int i;
1N/A
1N/A if (lr->lr_ref_tofollow == NULL){
1N/A if ((lr->lr_ref_tofollow = (char **)calloc(2, sizeof(char*))) == NULL)
1N/A return;
1N/A i = 0;
1N/A } else {
1N/A for (i = 0; lr->lr_ref_tofollow[i] != NULL; i++);
1N/A if ((lr->lr_ref_tofollow = (char **)realloc((char *)lr->lr_ref_tofollow, (i+2) * sizeof(char *))) == NULL){
1N/A return;
1N/A }
1N/A }
1N/A lr->lr_ref_tofollow[i++] = strdup(ref);
1N/A lr->lr_ref_tofollow[i] = NULL;
1N/A return;
1N/A}
1N/A
1N/Astatic int addUnFollowedRef(LDAP *ld, LDAPRequest *lr, char *ref)
1N/A{
1N/A int i;
1N/A
1N/A if (lr->lr_ref_unfollowed == NULL){
1N/A if ((lr->lr_ref_unfollowed = (char **)calloc(2, sizeof(char*))) == NULL){
1N/A ld->ld_errno = LDAP_NO_MEMORY;
1N/A return (-1);
1N/A }
1N/A i = 0;
1N/A } else {
1N/A for (i = 0; lr->lr_ref_unfollowed[i] != NULL; i++);
1N/A if ((lr->lr_ref_unfollowed = (char **)realloc((char *)lr->lr_ref_unfollowed, (i+2) * sizeof(char *))) == NULL){
1N/A ld->ld_errno = LDAP_NO_MEMORY;
1N/A return (-1);
1N/A }
1N/A }
1N/A lr->lr_ref_unfollowed[i++] = strdup(ref);
1N/A lr->lr_ref_unfollowed[i] = NULL;
1N/A return (0);
1N/A}
1N/A
1N/A
1N/Aint
1N/Aappend_referral( LDAP *ld, char **referralsp, char *s )
1N/A{
1N/A int first;
1N/A
1N/A if ( *referralsp == NULL ) {
1N/A first = 1;
1N/A *referralsp = (char *)malloc( strlen( s ) + LDAP_REF_STR_LEN
1N/A + 1 );
1N/A } else {
1N/A first = 0;
1N/A *referralsp = (char *)realloc( *referralsp,
1N/A strlen( *referralsp ) + strlen( s ) + 2 );
1N/A }
1N/A
1N/A if ( *referralsp == NULL ) {
1N/A ld->ld_errno = LDAP_NO_MEMORY;
1N/A return( -1 );
1N/A }
1N/A
1N/A if ( first ) {
1N/A strcpy( *referralsp, LDAP_REF_STR );
1N/A } else {
1N/A strcat( *referralsp, "\n" );
1N/A }
1N/A strcat( *referralsp, s );
1N/A
1N/A return( 0 );
1N/A}
1N/A
1N/A
1N/A
1N/Astatic BerElement *
1N/Are_encode_request( LDAP *ld, BerElement *origber, int msgid, LDAPURLDesc *urldesc )
1N/A{
1N/A/*
1N/A * XXX this routine knows way too much about how the lber library works!
1N/A */
1N/A unsigned int along, tag, len;
1N/A int ver, scope, deref, sizelimit, timelimit, attrsonly;
1N/A int rc, hasCtrls;
1N/A BerElement tmpber, *ber;
1N/A char *dn, *seqstart;
1N/A
1N/A Debug( LDAP_DEBUG_TRACE,
1N/A catgets(slapdcat, 1, 221, "re_encode_request: new msgid %1$d, new dn <%2$s>\n"),
1N/A msgid, ( urldesc->lud_dn == NULL ) ? "NONE" : urldesc->lud_dn, 0 );
1N/A
1N/A tmpber = *origber;
1N/A
1N/A /*
1N/A * all LDAP requests are sequences that start with a message id,
1N/A * followed by a sequence that is tagged with the operation code
1N/A */
1N/A /* Bad assumption : delete op is not a sequence.
1N/A * So we have a special processing for it : it's much simpler
1N/A */
1N/A if ( ber_scanf( &tmpber, "{i", &along ) != LDAP_TAG_MSGID ||
1N/A ( tag = ber_peek_tag( &tmpber, &along )) == LBER_DEFAULT ) {
1N/A ld->ld_errno = LDAP_DECODING_ERROR;
1N/A return( NULL );
1N/A }
1N/A
1N/A /* Special case : delete request is not a sequence of... */
1N/A if (tag == LDAP_REQ_EXTENDED){
1N/A /* return error, I don't know how to do it automatically */
1N/A ld->ld_errno = LDAP_NOT_SUPPORTED;
1N/A return (NULL);
1N/A }
1N/A
1N/A if ( (ber = alloc_ber_with_options( ld )) == NULLBER ) {
1N/A return (NULL);
1N/A }
1N/A
1N/A if (tag == LDAP_REQ_DELETE) {
1N/A if ( ber_get_stringa( &tmpber, &dn ) == LBER_DEFAULT ) {
1N/A ld->ld_errno = LDAP_DECODING_ERROR;
1N/A Debug(LDAP_DEBUG_TRACE,
1N/A catgets(slapdcat, 1, 1279,"Error in decoding delete DN"),0,0,0);
1N/A ber_free( ber, 1);
1N/A return( NULL );
1N/A }
1N/A /* Check if controls */
1N/A hasCtrls = 0;
1N/A if (ber_peek_tag(&tmpber, &len) == LDAP_TAG_CONTROL_LIST){
1N/A hasCtrls = 1;
1N/A }
1N/A
1N/A if ( urldesc->lud_dn && *urldesc->lud_dn ) {
1N/A free( dn );
1N/A dn = urldesc->lud_dn;
1N/A }
1N/A if ( ber_printf( ber, "{its", msgid, tag, dn ) == -1 ) {
1N/A Debug(LDAP_DEBUG_TRACE, "Error in re_encoding delete request",0,0,0);
1N/A ld->ld_errno = LDAP_ENCODING_ERROR;
1N/A ber_free( ber, 1 );
1N/A return (NULL);
1N/A }
1N/A /* Now add controls if any */
1N/A if (hasCtrls && ber_write( ber, tmpber.ber_ptr, len, 0 ) != len ) {
1N/A ld->ld_errno = LDAP_ENCODING_ERROR;
1N/A ber_free( ber, 1 );
1N/A return( NULL );
1N/A }
1N/A if (ber_printf( ber, "}" ) == -1 ) {
1N/A ld->ld_errno = LDAP_ENCODING_ERROR;
1N/A ber_free( ber, 1 );
1N/A return( NULL );
1N/A }
1N/A
1N/A#ifdef LDAP_DEBUG
1N/A if ( ldap_debug & LDAP_DEBUG_PACKETS ) {
1N/A Debug( LDAP_DEBUG_ANY, catgets(slapdcat, 1, 222, "re_encode_request new request is:\n"),
1N/A 0, 0, 0 );
1N/A ber_dump( ber, 0 );
1N/A }
1N/A#endif /* LDAP_DEBUG */
1N/A return (ber);
1N/A }
1N/A
1N/A if (( tag = ber_skip_tag( &tmpber, &along )) == LBER_DEFAULT ) {
1N/A ld->ld_errno = LDAP_DECODING_ERROR;
1N/A return( NULL );
1N/A }
1N/A /* Keep length and pointer */
1N/A seqstart = tmpber.ber_ptr;
1N/A
1N/A /* bind requests have a version number before the DN & other stuff */
1N/A if ( tag == LDAP_REQ_BIND && ber_get_int( &tmpber, &ver ) ==
1N/A LBER_DEFAULT ) {
1N/A ld->ld_errno = LDAP_DECODING_ERROR;
1N/A ber_free( ber, 1 );
1N/A return( NULL );
1N/A }
1N/A
1N/A /* the rest of the request is the DN followed by other stuff */
1N/A if ( ber_get_stringa( &tmpber, &dn ) == LBER_DEFAULT ) {
1N/A ber_free( ber, 1 );
1N/A return( NULL );
1N/A }
1N/A if ( urldesc->lud_dn != NULL ) {
1N/A free( dn );
1N/A dn = urldesc->lud_dn;
1N/A }
1N/A
1N/A /* see what to do with CONTROLS */
1N/A
1N/A if ( tag == LDAP_REQ_BIND ) {
1N/A rc = ber_printf( ber, "{it{is", msgid, tag, ver, dn );
1N/A } else {
1N/A rc = ber_printf( ber, "{it{s", msgid, tag, dn );
1N/A }
1N/A
1N/A if ( rc == -1 ) {
1N/A ber_free( ber, 1 );
1N/A return( NULL );
1N/A }
1N/A
1N/A if (tag == LDAP_REQ_SEARCH) {
1N/A /* Now for SEARCH, decode more of the request */
1N/A if (ber_scanf(&tmpber, "iiiib", &scope, &deref, &sizelimit, &timelimit, &attrsonly) == LBER_DEFAULT){
1N/A ld->ld_errno = LDAP_DECODING_ERROR;
1N/A ber_free( ber, 1 );
1N/A return( NULL );
1N/A }
1N/A if (ber_printf(ber, "iiiib", urldesc->lud_scope == LDAP_SCOPE_UNKNOWN ? scope : urldesc->lud_scope,
1N/A deref, sizelimit, timelimit, attrsonly) == -1) {
1N/A ld->ld_errno = LDAP_ENCODING_ERROR;
1N/A ber_free( ber, 1 );
1N/A return( NULL );
1N/A }
1N/A /* We should then decode and check the filter as opposed to ludp->lud_filter */
1N/A /* Same for attributes */
1N/A /* Later */
1N/A }
1N/A /* The rest is the same for all requests */
1N/A
1N/A /* Copy Buffer from tmpber.ber_ptr for along - (tmpber.ber_ptr - seqstart) */
1N/A /* It's the rest of the request */
1N/A len = along - ( tmpber.ber_ptr - seqstart);
1N/A if ( ber_write( ber, tmpber.ber_ptr, len, 0) != len ||
1N/A ber_printf( ber, "}" ) == -1 ) {
1N/A ld->ld_errno = LDAP_ENCODING_ERROR;
1N/A ber_free( ber, 1 );
1N/A return( NULL );
1N/A }
1N/A
1N/A if (seqstart + along < tmpber.ber_end){ /* there's probably some controls, copy them also */
1N/A len = tmpber.ber_end - seqstart - along;
1N/A if ( ber_write( ber, seqstart + along, len, 0) != len ){
1N/A ld->ld_errno = LDAP_ENCODING_ERROR;
1N/A ber_free( ber, 1 );
1N/A return( NULL );
1N/A }
1N/A }
1N/A
1N/A if ( ber_printf(ber, "}") == -1) {
1N/A ld->ld_errno = LDAP_ENCODING_ERROR;
1N/A ber_free( ber, 1 );
1N/A return( NULL );
1N/A }
1N/A
1N/A#ifdef LDAP_DEBUG
1N/A if ( ldap_debug & LDAP_DEBUG_PACKETS ) {
1N/A Debug( LDAP_DEBUG_ANY, catgets(slapdcat, 1, 222, "re_encode_request new request is:\n"),
1N/A 0, 0, 0 );
1N/A ber_dump( ber, 0 );
1N/A }
1N/A#endif /* LDAP_DEBUG */
1N/A
1N/A return( ber );
1N/A}
1N/A
1N/A
1N/ALDAPRequest *
1N/Afind_request_by_msgid( LDAP *ld, int msgid )
1N/A{
1N/A LDAPRequest *lr;
1N/A
1N/A for ( lr = ld->ld_requests; lr != NULL; lr = lr->lr_next ) {
1N/A if ( msgid == lr->lr_msgid ) {
1N/A break;
1N/A }
1N/A }
1N/A
1N/A return( lr );
1N/A}