2000-10-14 04:39:36 +08:00
|
|
|
/* $OpenLDAP$ */
|
|
|
|
/*
|
2002-01-05 05:17:25 +08:00
|
|
|
* Copyright 1998-2002 The OpenLDAP Foundation, All Rights Reserved.
|
2000-10-14 04:39:36 +08:00
|
|
|
* COPYING RESTRICTIONS APPLY, see COPYRIGHT file
|
|
|
|
*/
|
|
|
|
/* mra.c - routines for dealing with extensible matching rule assertions */
|
|
|
|
|
|
|
|
#include "portable.h"
|
|
|
|
|
|
|
|
#include <stdio.h>
|
|
|
|
|
|
|
|
#include <ac/string.h>
|
|
|
|
#include <ac/socket.h>
|
|
|
|
|
|
|
|
#include "slap.h"
|
|
|
|
|
|
|
|
void
|
|
|
|
mra_free(
|
2002-03-13 07:07:07 +08:00
|
|
|
MatchingRuleAssertion *mra,
|
|
|
|
int freeit
|
2000-10-14 04:39:36 +08:00
|
|
|
)
|
|
|
|
{
|
2001-12-29 23:01:10 +08:00
|
|
|
ch_free( mra->ma_value.bv_val );
|
2000-10-14 04:39:36 +08:00
|
|
|
if ( freeit ) {
|
|
|
|
ch_free( (char *) mra );
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
int
|
|
|
|
get_mra(
|
2002-03-13 07:07:07 +08:00
|
|
|
BerElement *ber,
|
|
|
|
MatchingRuleAssertion **mra,
|
2000-10-14 04:39:36 +08:00
|
|
|
const char **text
|
|
|
|
)
|
|
|
|
{
|
2002-04-03 02:40:04 +08:00
|
|
|
int rc;
|
|
|
|
ber_tag_t tag, rtag;
|
2000-10-15 02:36:13 +08:00
|
|
|
ber_len_t length;
|
2002-03-13 07:07:07 +08:00
|
|
|
struct berval type = { 0, NULL }, value;
|
2000-10-14 04:39:36 +08:00
|
|
|
MatchingRuleAssertion *ma;
|
|
|
|
|
|
|
|
ma = ch_malloc( sizeof( MatchingRuleAssertion ) );
|
|
|
|
ma->ma_rule = NULL;
|
2001-12-26 21:47:10 +08:00
|
|
|
ma->ma_rule_text.bv_len = 0;
|
2002-03-13 07:07:07 +08:00
|
|
|
ma->ma_rule_text.bv_val = NULL;
|
2000-10-14 04:39:36 +08:00
|
|
|
ma->ma_desc = NULL;
|
|
|
|
ma->ma_dnattrs = 0;
|
2002-03-13 07:07:07 +08:00
|
|
|
ma->ma_value.bv_len = 0;
|
2001-12-29 23:01:10 +08:00
|
|
|
ma->ma_value.bv_val = NULL;
|
2000-10-14 04:39:36 +08:00
|
|
|
|
2002-04-03 02:40:04 +08:00
|
|
|
rtag = ber_scanf( ber, "{t", &tag );
|
2000-10-14 04:39:36 +08:00
|
|
|
|
2002-04-03 02:40:04 +08:00
|
|
|
if( rtag == LBER_ERROR ) {
|
2001-01-16 03:17:29 +08:00
|
|
|
#ifdef NEW_LOGGING
|
2002-07-12 04:33:24 +08:00
|
|
|
LDAP_LOG( OPERATION, ERR,
|
|
|
|
"get_mra: ber_scanf (\"{t\") failure\n", 0, 0, 0 );
|
2001-01-16 03:17:29 +08:00
|
|
|
#else
|
2000-10-14 04:39:36 +08:00
|
|
|
Debug( LDAP_DEBUG_ANY, " get_mra ber_scanf\n", 0, 0, 0 );
|
2001-01-16 03:17:29 +08:00
|
|
|
#endif
|
|
|
|
|
2000-10-14 04:39:36 +08:00
|
|
|
*text = "Error parsing matching rule assertion";
|
2000-10-15 02:36:13 +08:00
|
|
|
mra_free( ma, 1 );
|
2000-10-14 04:39:36 +08:00
|
|
|
return SLAPD_DISCONNECT;
|
|
|
|
}
|
|
|
|
|
|
|
|
if ( tag == LDAP_FILTER_EXT_OID ) {
|
2002-04-03 02:40:04 +08:00
|
|
|
rtag = ber_scanf( ber, "m", &ma->ma_rule_text );
|
|
|
|
if ( rtag == LBER_ERROR ) {
|
2001-01-16 03:17:29 +08:00
|
|
|
#ifdef NEW_LOGGING
|
2002-07-12 04:33:24 +08:00
|
|
|
LDAP_LOG( OPERATION, ERR,
|
|
|
|
"get_mra: ber_scanf(\"o\") failure.\n", 0, 0, 0 );
|
2001-01-16 03:17:29 +08:00
|
|
|
#else
|
2000-10-14 04:39:36 +08:00
|
|
|
Debug( LDAP_DEBUG_ANY, " get_mra ber_scanf for mr\n", 0, 0, 0 );
|
2001-01-16 03:17:29 +08:00
|
|
|
#endif
|
|
|
|
|
2000-10-14 04:39:36 +08:00
|
|
|
*text = "Error parsing matching rule in matching rule assertion";
|
2000-10-15 02:36:13 +08:00
|
|
|
mra_free( ma, 1 );
|
2000-10-14 04:39:36 +08:00
|
|
|
return SLAPD_DISCONNECT;
|
|
|
|
}
|
|
|
|
|
2002-04-03 02:40:04 +08:00
|
|
|
rtag = ber_scanf( ber, "t", &tag );
|
|
|
|
if( rtag == LBER_ERROR ) {
|
2001-01-16 03:17:29 +08:00
|
|
|
#ifdef NEW_LOGGING
|
2002-07-12 04:33:24 +08:00
|
|
|
LDAP_LOG( OPERATION, ERR,
|
|
|
|
"get_mra: ber_scanf (\"t\") failure\n", 0, 0, 0 );
|
2001-01-16 03:17:29 +08:00
|
|
|
#else
|
2000-10-14 04:39:36 +08:00
|
|
|
Debug( LDAP_DEBUG_ANY, " get_mra ber_scanf\n", 0, 0, 0 );
|
2001-01-16 03:17:29 +08:00
|
|
|
#endif
|
|
|
|
|
2000-10-14 04:39:36 +08:00
|
|
|
*text = "Error parsing matching rule assertion";
|
2000-10-15 02:36:13 +08:00
|
|
|
mra_free( ma, 1 );
|
2000-10-14 04:39:36 +08:00
|
|
|
return SLAPD_DISCONNECT;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
if ( tag == LDAP_FILTER_EXT_TYPE ) {
|
2002-04-03 02:40:04 +08:00
|
|
|
rtag = ber_scanf( ber, "m", &type );
|
|
|
|
if ( rtag == LBER_ERROR ) {
|
2001-01-16 03:17:29 +08:00
|
|
|
#ifdef NEW_LOGGING
|
2002-07-12 04:33:24 +08:00
|
|
|
LDAP_LOG( OPERATION, ERR,
|
|
|
|
"get_mra: ber_scanf (\"o\") failure.\n", 0, 0, 0 );
|
2001-01-16 03:17:29 +08:00
|
|
|
#else
|
2000-10-14 04:39:36 +08:00
|
|
|
Debug( LDAP_DEBUG_ANY, " get_mra ber_scanf for ad\n", 0, 0, 0 );
|
2001-01-16 03:17:29 +08:00
|
|
|
#endif
|
|
|
|
|
2000-10-14 04:39:36 +08:00
|
|
|
*text = "Error parsing attribute description in matching rule assertion";
|
|
|
|
return SLAPD_DISCONNECT;
|
|
|
|
}
|
|
|
|
|
2002-04-03 02:40:04 +08:00
|
|
|
rtag = ber_scanf( ber, "t", &tag );
|
|
|
|
if( rtag == LBER_ERROR ) {
|
2001-01-16 03:17:29 +08:00
|
|
|
#ifdef NEW_LOGGING
|
2002-07-12 04:33:24 +08:00
|
|
|
LDAP_LOG( OPERATION, ERR,
|
|
|
|
"get_mra: ber_scanf (\"t\") failure.\n", 0, 0, 0 );
|
2001-01-16 03:17:29 +08:00
|
|
|
#else
|
2000-10-14 04:39:36 +08:00
|
|
|
Debug( LDAP_DEBUG_ANY, " get_mra ber_scanf\n", 0, 0, 0 );
|
2001-01-16 03:17:29 +08:00
|
|
|
#endif
|
|
|
|
|
2000-10-14 04:39:36 +08:00
|
|
|
*text = "Error parsing matching rule assertion";
|
2000-10-15 02:36:13 +08:00
|
|
|
mra_free( ma, 1 );
|
2000-10-14 04:39:36 +08:00
|
|
|
return SLAPD_DISCONNECT;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2000-10-15 02:36:13 +08:00
|
|
|
if ( tag != LDAP_FILTER_EXT_VALUE ) {
|
2001-01-16 03:17:29 +08:00
|
|
|
#ifdef NEW_LOGGING
|
2002-07-12 04:33:24 +08:00
|
|
|
LDAP_LOG( OPERATION, ERR,
|
|
|
|
"get_mra: ber_scanf missing value\n", 0, 0, 0 );
|
2001-01-16 03:17:29 +08:00
|
|
|
#else
|
2000-10-15 02:36:13 +08:00
|
|
|
Debug( LDAP_DEBUG_ANY, " get_mra ber_scanf missing value\n", 0, 0, 0 );
|
2001-01-16 03:17:29 +08:00
|
|
|
#endif
|
|
|
|
|
2000-10-15 02:36:13 +08:00
|
|
|
*text = "Missing value in matching rule assertion";
|
|
|
|
mra_free( ma, 1 );
|
|
|
|
return SLAPD_DISCONNECT;
|
|
|
|
}
|
|
|
|
|
2002-04-03 02:40:04 +08:00
|
|
|
rtag = ber_scanf( ber, "m", &value );
|
2000-10-14 04:39:36 +08:00
|
|
|
|
2002-04-03 02:40:04 +08:00
|
|
|
if( rtag == LBER_ERROR ) {
|
2001-01-16 03:17:29 +08:00
|
|
|
#ifdef NEW_LOGGING
|
2002-07-12 04:33:24 +08:00
|
|
|
LDAP_LOG( OPERATION, ERR,
|
|
|
|
"get_mra: ber_scanf (\"o\") failure.\n", 0, 0, 0 );
|
2001-01-16 03:17:29 +08:00
|
|
|
#else
|
2000-10-14 04:39:36 +08:00
|
|
|
Debug( LDAP_DEBUG_ANY, " get_mra ber_scanf\n", 0, 0, 0 );
|
2001-01-16 03:17:29 +08:00
|
|
|
#endif
|
|
|
|
|
2000-10-14 04:39:36 +08:00
|
|
|
*text = "Error decoding value in matching rule assertion";
|
2000-10-15 02:36:13 +08:00
|
|
|
mra_free( ma, 1 );
|
2000-10-14 04:39:36 +08:00
|
|
|
return SLAPD_DISCONNECT;
|
|
|
|
}
|
|
|
|
|
2000-10-15 02:36:13 +08:00
|
|
|
tag = ber_peek_tag( ber, &length );
|
|
|
|
|
|
|
|
if ( tag == LDAP_FILTER_EXT_DNATTRS ) {
|
2002-04-03 02:40:04 +08:00
|
|
|
rtag = ber_scanf( ber, "b}", &ma->ma_dnattrs );
|
2000-10-15 02:36:13 +08:00
|
|
|
} else {
|
2002-04-03 02:40:04 +08:00
|
|
|
rtag = ber_scanf( ber, "}" );
|
2000-10-15 02:36:13 +08:00
|
|
|
}
|
|
|
|
|
2002-04-03 02:40:04 +08:00
|
|
|
if( rtag == LBER_ERROR ) {
|
2001-01-16 03:17:29 +08:00
|
|
|
#ifdef NEW_LOGGING
|
2002-07-12 04:33:24 +08:00
|
|
|
LDAP_LOG( OPERATION, ERR, "get_mra: ber_scanf failure\n", 0, 0, 0);
|
2001-01-16 03:17:29 +08:00
|
|
|
#else
|
2000-10-15 02:36:13 +08:00
|
|
|
Debug( LDAP_DEBUG_ANY, " get_mra ber_scanf\n", 0, 0, 0 );
|
2001-01-16 03:17:29 +08:00
|
|
|
#endif
|
|
|
|
|
2000-10-15 02:36:13 +08:00
|
|
|
*text = "Error decoding dnattrs matching rule assertion";
|
|
|
|
mra_free( ma, 1 );
|
|
|
|
return SLAPD_DISCONNECT;
|
|
|
|
}
|
|
|
|
|
2002-03-13 07:07:07 +08:00
|
|
|
if( ma->ma_dnattrs ) {
|
|
|
|
*text = "matching with \":dn\" not supported";
|
|
|
|
return LDAP_INAPPROPRIATE_MATCHING;
|
|
|
|
}
|
|
|
|
|
|
|
|
if( type.bv_val != NULL ) {
|
|
|
|
rc = slap_bv2ad( &type, &ma->ma_desc, text );
|
|
|
|
if( rc != LDAP_SUCCESS ) {
|
|
|
|
mra_free( ma, 1 );
|
|
|
|
return rc;
|
|
|
|
}
|
|
|
|
|
|
|
|
} else {
|
|
|
|
*text = "matching without attribute description rule not supported";
|
|
|
|
return LDAP_INAPPROPRIATE_MATCHING;
|
|
|
|
}
|
|
|
|
|
|
|
|
if( ma->ma_rule_text.bv_val != NULL ) {
|
|
|
|
ma->ma_rule = mr_bvfind( &ma->ma_rule_text );
|
|
|
|
if( ma->ma_rule == NULL ) {
|
|
|
|
mra_free( ma, 1 );
|
|
|
|
*text = "matching rule not recognized";
|
|
|
|
return LDAP_INAPPROPRIATE_MATCHING;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
if( ma->ma_desc != NULL &&
|
|
|
|
ma->ma_desc->ad_type->sat_equality != NULL &&
|
|
|
|
ma->ma_desc->ad_type->sat_equality->smr_usage & SLAP_MR_EXT )
|
|
|
|
{
|
|
|
|
/* no matching rule was provided, use the attribute's
|
|
|
|
equality rule if it supports extensible matching. */
|
|
|
|
ma->ma_rule = ma->ma_desc->ad_type->sat_equality;
|
|
|
|
|
|
|
|
} else {
|
|
|
|
mra_free( ma, 1 );
|
|
|
|
return LDAP_INAPPROPRIATE_MATCHING;
|
|
|
|
}
|
2000-10-14 04:39:36 +08:00
|
|
|
|
2002-03-13 07:07:07 +08:00
|
|
|
/* check to see if the matching rule is appropriate for
|
|
|
|
the syntax of the attribute. This check will need
|
|
|
|
to be extended to support other kinds of extensible
|
|
|
|
matching rules */
|
|
|
|
if( strcmp( ma->ma_rule->smr_syntax->ssyn_oid,
|
|
|
|
ma->ma_desc->ad_type->sat_syntax->ssyn_oid ) != 0 )
|
|
|
|
{
|
|
|
|
mra_free( ma, 1 );
|
|
|
|
return LDAP_INAPPROPRIATE_MATCHING;
|
|
|
|
}
|
|
|
|
|
|
|
|
/*
|
|
|
|
* OK, if no matching rule, normalize for equality, otherwise
|
|
|
|
* normalize for the matching rule.
|
|
|
|
*/
|
|
|
|
rc = value_validate_normalize( ma->ma_desc, SLAP_MR_EQUALITY,
|
|
|
|
&value, &ma->ma_value, text );
|
|
|
|
|
|
|
|
if( rc != LDAP_SUCCESS ) {
|
|
|
|
mra_free( ma, 1 );
|
|
|
|
return rc;
|
|
|
|
}
|
|
|
|
|
|
|
|
*mra = ma;
|
2000-10-14 04:39:36 +08:00
|
|
|
return LDAP_SUCCESS;
|
|
|
|
}
|
|
|
|
|