1999-05-26 10:35:20 +08:00
|
|
|
/* add.c - ldap backend add function */
|
1999-09-09 03:06:24 +08:00
|
|
|
/* $OpenLDAP$ */
|
2003-11-27 14:35:14 +08:00
|
|
|
/* This work is part of OpenLDAP Software <http://www.openldap.org/>.
|
|
|
|
*
|
2004-01-02 03:15:16 +08:00
|
|
|
* Copyright 1999-2004 The OpenLDAP Foundation.
|
2003-12-09 01:41:40 +08:00
|
|
|
* Portions Copyright 2000-2003 Pierangelo Masarati.
|
|
|
|
* Portions Copyright 1999-2003 Howard Chu.
|
2003-11-27 14:35:14 +08:00
|
|
|
* All rights reserved.
|
|
|
|
*
|
|
|
|
* Redistribution and use in source and binary forms, with or without
|
|
|
|
* modification, are permitted only as authorized by the OpenLDAP
|
|
|
|
* Public License.
|
|
|
|
*
|
|
|
|
* A copy of this license is available in the file LICENSE in the
|
|
|
|
* top-level directory of the distribution or, alternatively, at
|
|
|
|
* <http://www.OpenLDAP.org/license.html>.
|
|
|
|
*/
|
|
|
|
/* ACKNOWLEDGEMENTS:
|
|
|
|
* This work was initially developed by the Howard Chu for inclusion
|
|
|
|
* in OpenLDAP Software and subsequently enhanced by Pierangelo
|
|
|
|
* Masarati.
|
2001-01-17 15:09:22 +08:00
|
|
|
*/
|
1999-05-26 10:35:20 +08:00
|
|
|
|
|
|
|
#include "portable.h"
|
|
|
|
|
|
|
|
#include <stdio.h>
|
|
|
|
|
|
|
|
#include <ac/string.h>
|
|
|
|
#include <ac/socket.h>
|
|
|
|
|
|
|
|
#include "slap.h"
|
|
|
|
#include "back-ldap.h"
|
|
|
|
|
|
|
|
int
|
|
|
|
ldap_back_add(
|
|
|
|
Operation *op,
|
2003-03-30 17:03:54 +08:00
|
|
|
SlapReply *rs )
|
1999-05-26 10:35:20 +08:00
|
|
|
{
|
2003-03-30 17:03:54 +08:00
|
|
|
struct ldapinfo *li = (struct ldapinfo *) op->o_bd->be_private;
|
1999-05-26 10:35:20 +08:00
|
|
|
struct ldapconn *lc;
|
2002-01-02 19:00:36 +08:00
|
|
|
int i, j;
|
1999-05-26 10:35:20 +08:00
|
|
|
Attribute *a;
|
|
|
|
LDAPMod **attrs;
|
2002-01-02 19:00:36 +08:00
|
|
|
struct berval mapped;
|
2001-12-28 12:20:08 +08:00
|
|
|
struct berval mdn = { 0, NULL };
|
2003-02-14 13:23:45 +08:00
|
|
|
ber_int_t msgid;
|
2003-04-07 18:15:18 +08:00
|
|
|
dncookie dc;
|
2003-12-01 16:04:51 +08:00
|
|
|
#ifdef LDAP_BACK_PROXY_AUTHZ
|
|
|
|
LDAPControl **ctrls = NULL;
|
|
|
|
int rc = LDAP_SUCCESS;
|
|
|
|
#endif /* LDAP_BACK_PROXY_AUTHZ */
|
2001-01-20 05:27:20 +08:00
|
|
|
|
2001-05-17 06:55:44 +08:00
|
|
|
#ifdef NEW_LOGGING
|
2003-03-30 17:03:54 +08:00
|
|
|
LDAP_LOG( BACK_LDAP, ENTRY, "ldap_back_add: %s\n", op->o_req_dn.bv_val, 0, 0 );
|
2001-05-17 06:55:44 +08:00
|
|
|
#else /* !NEW_LOGGING */
|
2003-03-30 17:03:54 +08:00
|
|
|
Debug(LDAP_DEBUG_ARGS, "==> ldap_back_add: %s\n", op->o_req_dn.bv_val, 0, 0);
|
2001-05-17 06:55:44 +08:00
|
|
|
#endif /* !NEW_LOGGING */
|
|
|
|
|
2003-04-04 07:23:56 +08:00
|
|
|
lc = ldap_back_getconn(op, rs);
|
|
|
|
if ( !lc || !ldap_back_dobind( lc, op, rs ) ) {
|
1999-05-26 10:35:20 +08:00
|
|
|
return( -1 );
|
2001-01-20 05:27:20 +08:00
|
|
|
}
|
1999-05-26 10:35:20 +08:00
|
|
|
|
2001-05-12 08:51:28 +08:00
|
|
|
/*
|
|
|
|
* Rewrite the add dn, if needed
|
|
|
|
*/
|
2003-04-08 00:52:59 +08:00
|
|
|
dc.rwmap = &li->rwmap;
|
2001-05-12 08:51:28 +08:00
|
|
|
#ifdef ENABLE_REWRITE
|
2003-04-07 18:15:18 +08:00
|
|
|
dc.conn = op->o_conn;
|
|
|
|
dc.rs = rs;
|
|
|
|
dc.ctx = "addDn";
|
|
|
|
#else
|
|
|
|
dc.tofrom = 1;
|
|
|
|
dc.normalized = 0;
|
|
|
|
#endif
|
|
|
|
if ( ldap_back_dn_massage( &dc, &op->o_req_dn, &mdn ) ) {
|
|
|
|
send_ldap_result( op, rs );
|
|
|
|
return -1;
|
1999-05-26 10:35:20 +08:00
|
|
|
}
|
|
|
|
|
|
|
|
/* Count number of attributes in entry */
|
2003-03-30 17:03:54 +08:00
|
|
|
for (i = 1, a = op->oq_add.rs_e->e_attrs; a; i++, a = a->a_next)
|
1999-05-26 10:35:20 +08:00
|
|
|
;
|
|
|
|
|
|
|
|
/* Create array of LDAPMods for ldap_add() */
|
|
|
|
attrs = (LDAPMod **)ch_malloc(sizeof(LDAPMod *)*i);
|
|
|
|
|
2003-04-07 19:55:12 +08:00
|
|
|
#ifdef ENABLE_REWRITE
|
2003-04-07 20:53:00 +08:00
|
|
|
dc.ctx = "addDnAttr";
|
2003-04-07 19:55:12 +08:00
|
|
|
#endif
|
2003-03-30 17:03:54 +08:00
|
|
|
for (i=0, a=op->oq_add.rs_e->e_attrs; a; a=a->a_next) {
|
2002-08-29 22:39:31 +08:00
|
|
|
if ( a->a_desc->ad_type->sat_no_user_mod ) {
|
|
|
|
continue;
|
|
|
|
}
|
|
|
|
|
2003-04-08 00:52:59 +08:00
|
|
|
ldap_back_map(&li->rwmap.rwm_at, &a->a_desc->ad_cname, &mapped,
|
2003-01-28 00:39:56 +08:00
|
|
|
BACKLDAP_MAP);
|
2003-01-28 00:48:55 +08:00
|
|
|
if (mapped.bv_val == NULL || mapped.bv_val[0] == '\0') {
|
2001-05-12 08:51:28 +08:00
|
|
|
continue;
|
|
|
|
}
|
|
|
|
|
|
|
|
attrs[i] = (LDAPMod *)ch_malloc(sizeof(LDAPMod));
|
|
|
|
if (attrs[i] == NULL) {
|
|
|
|
continue;
|
|
|
|
}
|
|
|
|
|
|
|
|
attrs[i]->mod_op = LDAP_MOD_BVALUES;
|
2002-01-02 19:00:36 +08:00
|
|
|
attrs[i]->mod_type = mapped.bv_val;
|
2001-05-12 08:51:28 +08:00
|
|
|
|
2003-04-07 18:15:18 +08:00
|
|
|
if ( a->a_desc->ad_type->sat_syntax ==
|
|
|
|
slap_schema.si_syn_distinguishedName ) {
|
2002-11-11 02:16:43 +08:00
|
|
|
/*
|
|
|
|
* FIXME: rewrite could fail; in this case
|
|
|
|
* the operation should give up, right?
|
|
|
|
*/
|
2003-04-07 18:15:18 +08:00
|
|
|
(void)ldap_dnattr_rewrite( &dc, a->a_vals );
|
2001-02-20 03:14:12 +08:00
|
|
|
}
|
2001-05-12 08:51:28 +08:00
|
|
|
|
2002-01-02 19:00:36 +08:00
|
|
|
for (j=0; a->a_vals[j].bv_val; j++);
|
|
|
|
attrs[i]->mod_vals.modv_bvals = ch_malloc((j+1)*sizeof(struct berval *));
|
|
|
|
for (j=0; a->a_vals[j].bv_val; j++)
|
|
|
|
attrs[i]->mod_vals.modv_bvals[j] = &a->a_vals[j];
|
2002-01-05 19:41:23 +08:00
|
|
|
attrs[i]->mod_vals.modv_bvals[j] = NULL;
|
2001-05-12 08:51:28 +08:00
|
|
|
i++;
|
1999-05-26 10:35:20 +08:00
|
|
|
}
|
2001-02-20 03:14:12 +08:00
|
|
|
attrs[i] = NULL;
|
1999-05-26 10:35:20 +08:00
|
|
|
|
2003-12-01 16:04:51 +08:00
|
|
|
#ifdef LDAP_BACK_PROXY_AUTHZ
|
|
|
|
rc = ldap_back_proxy_authz_ctrl( lc, op, rs, &ctrls );
|
|
|
|
if ( rc != LDAP_SUCCESS ) {
|
|
|
|
goto cleanup;
|
|
|
|
}
|
|
|
|
#endif /* LDAP_BACK_PROXY_AUTHZ */
|
|
|
|
|
2003-04-05 06:20:49 +08:00
|
|
|
rs->sr_err = ldap_add_ext(lc->ld, mdn.bv_val, attrs,
|
2003-12-01 16:04:51 +08:00
|
|
|
#ifdef LDAP_BACK_PROXY_AUTHZ
|
|
|
|
ctrls,
|
|
|
|
#else /* ! LDAP_BACK_PROXY_AUTHZ */
|
|
|
|
op->o_ctrls,
|
|
|
|
#endif /* ! LDAP_BACK_PROXY_AUTHZ */
|
|
|
|
NULL, &msgid);
|
|
|
|
|
|
|
|
#ifdef LDAP_BACK_PROXY_AUTHZ
|
|
|
|
cleanup:
|
|
|
|
if ( ctrls && ctrls != op->o_ctrls ) {
|
|
|
|
free( ctrls[ 0 ] );
|
|
|
|
free( ctrls );
|
|
|
|
}
|
|
|
|
#endif /* LDAP_BACK_PROXY_AUTHZ */
|
|
|
|
|
2002-01-02 19:00:36 +08:00
|
|
|
for (--i; i>= 0; --i) {
|
2002-01-13 01:35:01 +08:00
|
|
|
ch_free(attrs[i]->mod_vals.modv_bvals);
|
|
|
|
ch_free(attrs[i]);
|
2002-01-02 19:00:36 +08:00
|
|
|
}
|
2002-01-13 01:35:01 +08:00
|
|
|
ch_free(attrs);
|
2003-03-30 17:03:54 +08:00
|
|
|
if ( mdn.bv_val != op->o_req_dn.bv_val ) {
|
2001-12-28 12:20:08 +08:00
|
|
|
free( mdn.bv_val );
|
2001-05-12 08:51:28 +08:00
|
|
|
}
|
2003-12-01 16:04:51 +08:00
|
|
|
#ifdef LDAP_BACK_PROXY_AUTHZ
|
|
|
|
if ( rc != LDAP_SUCCESS ) {
|
|
|
|
send_ldap_result( op, rs );
|
|
|
|
return -1;
|
|
|
|
}
|
|
|
|
#endif /* LDAP_BACK_PROXY_AUTHZ */
|
2003-04-05 06:20:49 +08:00
|
|
|
return ldap_back_op_result( lc, op, rs, msgid, 1 ) != LDAP_SUCCESS;
|
2001-05-12 08:51:28 +08:00
|
|
|
}
|
|
|
|
|