2003-11-27 09:17:14 +08:00
|
|
|
/* mra.c - routines for dealing with extensible matching rule assertions */
|
2000-10-14 04:39:36 +08:00
|
|
|
/* $OpenLDAP$ */
|
2003-11-27 09:17:14 +08:00
|
|
|
/* This work is part of OpenLDAP Software <http://www.openldap.org/>.
|
|
|
|
*
|
2004-01-02 03:15:16 +08:00
|
|
|
* Copyright 1998-2004 The OpenLDAP Foundation.
|
2003-11-27 09:17:14 +08:00
|
|
|
* All rights reserved.
|
|
|
|
*
|
|
|
|
* Redistribution and use in source and binary forms, with or without
|
|
|
|
* modification, are permitted only as authorized by the OpenLDAP
|
|
|
|
* Public License.
|
|
|
|
*
|
|
|
|
* A copy of this license is available in the file LICENSE in the
|
|
|
|
* top-level directory of the distribution or, alternatively, at
|
|
|
|
* <http://www.OpenLDAP.org/license.html>.
|
2000-10-14 04:39:36 +08:00
|
|
|
*/
|
|
|
|
|
|
|
|
#include "portable.h"
|
|
|
|
|
|
|
|
#include <stdio.h>
|
|
|
|
|
|
|
|
#include <ac/string.h>
|
|
|
|
#include <ac/socket.h>
|
|
|
|
|
|
|
|
#include "slap.h"
|
|
|
|
|
|
|
|
void
|
|
|
|
mra_free(
|
2003-04-10 00:52:03 +08:00
|
|
|
Operation *op,
|
2002-03-13 07:07:07 +08:00
|
|
|
MatchingRuleAssertion *mra,
|
2004-05-20 03:39:40 +08:00
|
|
|
int freeit )
|
2000-10-14 04:39:36 +08:00
|
|
|
{
|
2004-10-28 03:37:02 +08:00
|
|
|
#ifdef LDAP_COMP_MATCH
|
|
|
|
/* free component assertion */
|
2004-12-08 02:40:47 +08:00
|
|
|
if ( mra->ma_rule->smr_usage & SLAP_MR_COMPONENT ) {
|
2004-10-28 03:37:02 +08:00
|
|
|
component_free( mra->ma_cf );
|
2004-12-08 02:40:47 +08:00
|
|
|
}
|
2004-10-28 03:37:02 +08:00
|
|
|
#endif
|
2003-04-10 00:52:03 +08:00
|
|
|
/* op->o_tmpfree( mra->ma_value.bv_val, op->o_tmpmemctx ); */
|
2001-12-29 23:01:10 +08:00
|
|
|
ch_free( mra->ma_value.bv_val );
|
2004-05-20 03:39:40 +08:00
|
|
|
if ( freeit ) op->o_tmpfree( (char *) mra, op->o_tmpmemctx );
|
2000-10-14 04:39:36 +08:00
|
|
|
}
|
|
|
|
|
|
|
|
int
|
|
|
|
get_mra(
|
2003-04-10 00:52:03 +08:00
|
|
|
Operation *op,
|
2002-03-13 07:07:07 +08:00
|
|
|
BerElement *ber,
|
|
|
|
MatchingRuleAssertion **mra,
|
2004-05-20 03:39:40 +08:00
|
|
|
const char **text )
|
2000-10-14 04:39:36 +08:00
|
|
|
{
|
2002-04-03 02:40:04 +08:00
|
|
|
int rc;
|
|
|
|
ber_tag_t tag, rtag;
|
2000-10-15 02:36:13 +08:00
|
|
|
ber_len_t length;
|
2004-04-07 12:11:43 +08:00
|
|
|
struct berval type = BER_BVNULL;
|
|
|
|
struct berval value = BER_BVNULL;
|
|
|
|
struct berval rule_text = BER_BVNULL;
|
2003-03-16 14:41:53 +08:00
|
|
|
MatchingRuleAssertion ma;
|
2000-10-14 04:39:36 +08:00
|
|
|
|
2003-03-16 14:41:53 +08:00
|
|
|
memset( &ma, 0, sizeof ma);
|
2000-10-14 04:39:36 +08:00
|
|
|
|
2003-03-16 14:41:53 +08:00
|
|
|
rtag = ber_scanf( ber, "{t" /*"}"*/, &tag );
|
2000-10-14 04:39:36 +08:00
|
|
|
|
2002-04-03 02:40:04 +08:00
|
|
|
if( rtag == LBER_ERROR ) {
|
2000-10-14 04:39:36 +08:00
|
|
|
Debug( LDAP_DEBUG_ANY, " get_mra ber_scanf\n", 0, 0, 0 );
|
2001-01-16 03:17:29 +08:00
|
|
|
|
2000-10-14 04:39:36 +08:00
|
|
|
*text = "Error parsing matching rule assertion";
|
|
|
|
return SLAPD_DISCONNECT;
|
|
|
|
}
|
|
|
|
|
|
|
|
if ( tag == LDAP_FILTER_EXT_OID ) {
|
2003-04-03 04:10:53 +08:00
|
|
|
rtag = ber_scanf( ber, "m", &rule_text );
|
2002-04-03 02:40:04 +08:00
|
|
|
if ( rtag == LBER_ERROR ) {
|
2000-10-14 04:39:36 +08:00
|
|
|
Debug( LDAP_DEBUG_ANY, " get_mra ber_scanf for mr\n", 0, 0, 0 );
|
2001-01-16 03:17:29 +08:00
|
|
|
|
2000-10-14 04:39:36 +08:00
|
|
|
*text = "Error parsing matching rule in matching rule assertion";
|
|
|
|
return SLAPD_DISCONNECT;
|
|
|
|
}
|
|
|
|
|
2002-04-03 02:40:04 +08:00
|
|
|
rtag = ber_scanf( ber, "t", &tag );
|
|
|
|
if( rtag == LBER_ERROR ) {
|
2000-10-14 04:39:36 +08:00
|
|
|
Debug( LDAP_DEBUG_ANY, " get_mra ber_scanf\n", 0, 0, 0 );
|
2001-01-16 03:17:29 +08:00
|
|
|
|
2000-10-14 04:39:36 +08:00
|
|
|
*text = "Error parsing matching rule assertion";
|
|
|
|
return SLAPD_DISCONNECT;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
if ( tag == LDAP_FILTER_EXT_TYPE ) {
|
2002-04-03 02:40:04 +08:00
|
|
|
rtag = ber_scanf( ber, "m", &type );
|
|
|
|
if ( rtag == LBER_ERROR ) {
|
2000-10-14 04:39:36 +08:00
|
|
|
Debug( LDAP_DEBUG_ANY, " get_mra ber_scanf for ad\n", 0, 0, 0 );
|
2001-01-16 03:17:29 +08:00
|
|
|
|
2000-10-14 04:39:36 +08:00
|
|
|
*text = "Error parsing attribute description in matching rule assertion";
|
|
|
|
return SLAPD_DISCONNECT;
|
|
|
|
}
|
|
|
|
|
2002-04-03 02:40:04 +08:00
|
|
|
rtag = ber_scanf( ber, "t", &tag );
|
|
|
|
if( rtag == LBER_ERROR ) {
|
2000-10-14 04:39:36 +08:00
|
|
|
Debug( LDAP_DEBUG_ANY, " get_mra ber_scanf\n", 0, 0, 0 );
|
2001-01-16 03:17:29 +08:00
|
|
|
|
2000-10-14 04:39:36 +08:00
|
|
|
*text = "Error parsing matching rule assertion";
|
|
|
|
return SLAPD_DISCONNECT;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2000-10-15 02:36:13 +08:00
|
|
|
if ( tag != LDAP_FILTER_EXT_VALUE ) {
|
|
|
|
Debug( LDAP_DEBUG_ANY, " get_mra ber_scanf missing value\n", 0, 0, 0 );
|
2001-01-16 03:17:29 +08:00
|
|
|
|
2000-10-15 02:36:13 +08:00
|
|
|
*text = "Missing value in matching rule assertion";
|
|
|
|
return SLAPD_DISCONNECT;
|
|
|
|
}
|
|
|
|
|
2002-04-03 02:40:04 +08:00
|
|
|
rtag = ber_scanf( ber, "m", &value );
|
2000-10-14 04:39:36 +08:00
|
|
|
|
2002-04-03 02:40:04 +08:00
|
|
|
if( rtag == LBER_ERROR ) {
|
2000-10-14 04:39:36 +08:00
|
|
|
Debug( LDAP_DEBUG_ANY, " get_mra ber_scanf\n", 0, 0, 0 );
|
2001-01-16 03:17:29 +08:00
|
|
|
|
2000-10-14 04:39:36 +08:00
|
|
|
*text = "Error decoding value in matching rule assertion";
|
|
|
|
return SLAPD_DISCONNECT;
|
|
|
|
}
|
|
|
|
|
2000-10-15 02:36:13 +08:00
|
|
|
tag = ber_peek_tag( ber, &length );
|
|
|
|
|
|
|
|
if ( tag == LDAP_FILTER_EXT_DNATTRS ) {
|
2003-03-16 14:41:53 +08:00
|
|
|
rtag = ber_scanf( ber, /*"{"*/ "b}", &ma.ma_dnattrs );
|
2000-10-15 02:36:13 +08:00
|
|
|
} else {
|
2003-03-16 14:41:53 +08:00
|
|
|
rtag = ber_scanf( ber, /*"{"*/ "}" );
|
2000-10-15 02:36:13 +08:00
|
|
|
}
|
|
|
|
|
2002-04-03 02:40:04 +08:00
|
|
|
if( rtag == LBER_ERROR ) {
|
2000-10-15 02:36:13 +08:00
|
|
|
Debug( LDAP_DEBUG_ANY, " get_mra ber_scanf\n", 0, 0, 0 );
|
2001-01-16 03:17:29 +08:00
|
|
|
|
2000-10-15 02:36:13 +08:00
|
|
|
*text = "Error decoding dnattrs matching rule assertion";
|
|
|
|
return SLAPD_DISCONNECT;
|
|
|
|
}
|
|
|
|
|
2002-03-13 07:07:07 +08:00
|
|
|
if( type.bv_val != NULL ) {
|
2003-03-16 14:41:53 +08:00
|
|
|
rc = slap_bv2ad( &type, &ma.ma_desc, text );
|
2002-03-13 07:07:07 +08:00
|
|
|
if( rc != LDAP_SUCCESS ) {
|
|
|
|
return rc;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2003-04-03 04:10:53 +08:00
|
|
|
if( rule_text.bv_val != NULL ) {
|
|
|
|
ma.ma_rule = mr_bvfind( &rule_text );
|
2003-03-16 14:41:53 +08:00
|
|
|
if( ma.ma_rule == NULL ) {
|
2002-03-13 07:07:07 +08:00
|
|
|
*text = "matching rule not recognized";
|
|
|
|
return LDAP_INAPPROPRIATE_MATCHING;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2003-03-16 14:41:53 +08:00
|
|
|
if ( ma.ma_rule == NULL ) {
|
2002-08-29 18:55:48 +08:00
|
|
|
/*
|
|
|
|
* Need either type or rule ...
|
|
|
|
*/
|
2003-03-16 14:41:53 +08:00
|
|
|
if ( ma.ma_desc == NULL ) {
|
2002-09-01 05:39:42 +08:00
|
|
|
*text = "no matching rule or type";
|
2002-08-29 18:55:48 +08:00
|
|
|
return LDAP_INAPPROPRIATE_MATCHING;
|
|
|
|
}
|
|
|
|
|
2003-03-16 14:41:53 +08:00
|
|
|
if ( ma.ma_desc->ad_type->sat_equality != NULL &&
|
|
|
|
ma.ma_desc->ad_type->sat_equality->smr_usage & SLAP_MR_EXT )
|
2002-08-29 18:55:48 +08:00
|
|
|
{
|
|
|
|
/* no matching rule was provided, use the attribute's
|
|
|
|
equality rule if it supports extensible matching. */
|
2003-03-16 14:41:53 +08:00
|
|
|
ma.ma_rule = ma.ma_desc->ad_type->sat_equality;
|
2002-08-29 18:55:48 +08:00
|
|
|
|
|
|
|
} else {
|
2002-09-01 05:39:42 +08:00
|
|
|
*text = "no appropriate rule to use for type";
|
2002-08-29 18:55:48 +08:00
|
|
|
return LDAP_INAPPROPRIATE_MATCHING;
|
|
|
|
}
|
|
|
|
}
|
2000-10-14 04:39:36 +08:00
|
|
|
|
2003-03-16 14:41:53 +08:00
|
|
|
if ( ma.ma_desc != NULL ) {
|
|
|
|
if( !mr_usable_with_at( ma.ma_rule, ma.ma_desc->ad_type ) ) {
|
2002-09-01 05:39:42 +08:00
|
|
|
*text = "matching rule use with this attribute not appropriate";
|
2002-08-29 18:55:48 +08:00
|
|
|
return LDAP_INAPPROPRIATE_MATCHING;
|
|
|
|
}
|
2002-03-13 07:07:07 +08:00
|
|
|
|
2003-02-27 09:54:43 +08:00
|
|
|
}
|
2002-08-29 18:55:48 +08:00
|
|
|
|
2003-02-27 09:54:43 +08:00
|
|
|
/*
|
|
|
|
* Normalize per matching rule
|
|
|
|
*/
|
2003-03-16 14:41:53 +08:00
|
|
|
rc = asserted_value_validate_normalize( ma.ma_desc,
|
|
|
|
ma.ma_rule,
|
2003-02-27 09:54:43 +08:00
|
|
|
SLAP_MR_EXT|SLAP_MR_VALUE_OF_ASSERTION_SYNTAX,
|
2003-04-11 09:29:28 +08:00
|
|
|
&value, &ma.ma_value, text, op->o_tmpmemctx );
|
2003-04-02 17:35:08 +08:00
|
|
|
|
2004-09-18 10:32:06 +08:00
|
|
|
if( rc != LDAP_SUCCESS ) return rc;
|
2002-03-13 07:07:07 +08:00
|
|
|
|
2004-08-26 08:06:39 +08:00
|
|
|
#ifdef LDAP_COMP_MATCH
|
|
|
|
/* Matching Rule for Component Matching */
|
2004-09-18 10:32:06 +08:00
|
|
|
Debug( LDAP_DEBUG_FILTER, "matchingrule %s\n",
|
|
|
|
ma.ma_rule->smr_mrule.mr_oid, 0, 0);
|
|
|
|
if( ma.ma_rule && ma.ma_rule->smr_usage & SLAP_MR_COMPONENT ) {
|
|
|
|
rc = get_comp_filter( op, &ma.ma_value, &ma.ma_cf, text );
|
2004-08-26 08:06:39 +08:00
|
|
|
if ( rc != LDAP_SUCCESS ) return rc;
|
2004-09-18 10:32:06 +08:00
|
|
|
}
|
2004-08-26 08:06:39 +08:00
|
|
|
#endif
|
2004-09-18 10:32:06 +08:00
|
|
|
|
2003-04-03 04:10:53 +08:00
|
|
|
length = sizeof(ma);
|
|
|
|
/* Append rule_text to end of struct */
|
|
|
|
if (rule_text.bv_val) length += rule_text.bv_len + 1;
|
2003-04-10 00:52:03 +08:00
|
|
|
*mra = op->o_tmpalloc( length, op->o_tmpmemctx );
|
2003-03-16 14:41:53 +08:00
|
|
|
**mra = ma;
|
2003-04-03 04:10:53 +08:00
|
|
|
if (rule_text.bv_val) {
|
|
|
|
(*mra)->ma_rule_text.bv_len = rule_text.bv_len;
|
|
|
|
(*mra)->ma_rule_text.bv_val = (char *)(*mra+1);
|
|
|
|
AC_MEMCPY((*mra)->ma_rule_text.bv_val, rule_text.bv_val,
|
|
|
|
rule_text.bv_len+1);
|
|
|
|
}
|
2003-03-16 14:41:53 +08:00
|
|
|
|
2000-10-14 04:39:36 +08:00
|
|
|
return LDAP_SUCCESS;
|
|
|
|
}
|