1999-09-09 03:06:24 +08:00
|
|
|
/* $OpenLDAP$ */
|
1998-08-09 08:43:13 +08:00
|
|
|
/*
|
2003-01-04 04:20:47 +08:00
|
|
|
* Copyright 1998-2003 The OpenLDAP Foundation, All Rights Reserved.
|
2000-02-07 05:09:44 +08:00
|
|
|
* COPYING RESTRICTIONS APPLY, see COPYRIGHT file
|
|
|
|
*/
|
|
|
|
/* Portions
|
1998-08-09 08:43:13 +08:00
|
|
|
* Copyright (c) 1995 Regents of the University of Michigan.
|
|
|
|
* All rights reserved.
|
|
|
|
*
|
|
|
|
* Redistribution and use in source and binary forms are permitted
|
|
|
|
* provided that this notice is preserved and that due credit is given
|
|
|
|
* to the University of Michigan at Ann Arbor. The name of the University
|
|
|
|
* may not be used to endorse or promote products derived from this
|
|
|
|
* software without specific prior written permission. This software
|
|
|
|
* is provided ``as is'' without express or implied warranty.
|
|
|
|
*/
|
|
|
|
|
1998-10-25 09:41:42 +08:00
|
|
|
#include "portable.h"
|
|
|
|
|
1998-08-09 08:43:13 +08:00
|
|
|
#include <stdio.h>
|
1998-10-25 09:41:42 +08:00
|
|
|
|
|
|
|
#include <ac/string.h>
|
|
|
|
#include <ac/socket.h>
|
|
|
|
|
1999-10-28 15:13:33 +08:00
|
|
|
#include "ldap_pvt.h"
|
2002-12-16 20:14:37 +08:00
|
|
|
#include "lutil.h"
|
Protoized, moved extern definitions to .h files, fixed related bugs.
Most function and variable definitions are now preceded by its extern
definition, for error checking. Retyped a number of functions, usually
to return void. Fixed a number of printf format errors.
API changes (in ldap/include):
Added avl_dup_ok, avl_prefixapply, removed ber_fatten (probably typo
for ber_flatten), retyped ldap_sort_strcasecmp, grew lutil.h.
A number of `extern' declarations are left (some added by protoize), to
be cleaned away later. Mostly strdup(), strcasecmp(), mktemp(), optind,
optarg, errno.
1998-11-16 06:40:11 +08:00
|
|
|
#include "slap.h"
|
1998-08-09 08:43:13 +08:00
|
|
|
|
2003-01-23 16:45:28 +08:00
|
|
|
#ifdef LDAP_SLAPI
|
2003-02-10 10:09:00 +08:00
|
|
|
#include "slapi.h"
|
2003-04-10 00:52:03 +08:00
|
|
|
static char **anlist2charray( Operation *op, AttributeName *an );
|
2003-03-31 12:54:06 +08:00
|
|
|
static void initSearchPlugin( Operation *op, char **attrs, int managedsait );
|
|
|
|
static int doPreSearchPluginFNs( Operation *op );
|
|
|
|
static int doSearchRewriteFNs( Operation *op );
|
|
|
|
static void doPostSearchPluginFNs( Operation *op );
|
2003-01-23 16:45:28 +08:00
|
|
|
#endif /* LDAPI_SLAPI */
|
|
|
|
|
1999-07-02 05:20:45 +08:00
|
|
|
int
|
Protoized, moved extern definitions to .h files, fixed related bugs.
Most function and variable definitions are now preceded by its extern
definition, for error checking. Retyped a number of functions, usually
to return void. Fixed a number of printf format errors.
API changes (in ldap/include):
Added avl_dup_ok, avl_prefixapply, removed ber_fatten (probably typo
for ber_flatten), retyped ldap_sort_strcasecmp, grew lutil.h.
A number of `extern' declarations are left (some added by protoize), to
be cleaned away later. Mostly strdup(), strcasecmp(), mktemp(), optind,
optarg, errno.
1998-11-16 06:40:11 +08:00
|
|
|
do_search(
|
2003-03-30 17:03:54 +08:00
|
|
|
Operation *op, /* info about the op to which we're responding */
|
|
|
|
SlapReply *rs /* all the response data we'll send */
|
2000-06-16 09:19:30 +08:00
|
|
|
) {
|
2001-12-23 05:52:58 +08:00
|
|
|
struct berval base = { 0, NULL };
|
2002-01-06 08:35:41 +08:00
|
|
|
ber_len_t siz, off, i;
|
2000-10-21 11:29:02 +08:00
|
|
|
int manageDSAit;
|
2003-04-30 10:01:03 +08:00
|
|
|
int be_manageDSAit;
|
2003-01-23 16:45:28 +08:00
|
|
|
#ifdef LDAP_SLAPI
|
|
|
|
char **attrs = NULL;
|
|
|
|
#endif
|
2002-12-08 01:19:29 +08:00
|
|
|
|
2001-01-16 03:17:29 +08:00
|
|
|
#ifdef NEW_LOGGING
|
2003-03-30 17:03:54 +08:00
|
|
|
LDAP_LOG( OPERATION, ENTRY, "do_search: conn %d\n", op->o_connid, 0, 0 );
|
2001-01-16 03:17:29 +08:00
|
|
|
#else
|
1998-08-09 08:43:13 +08:00
|
|
|
Debug( LDAP_DEBUG_TRACE, "do_search\n", 0, 0, 0 );
|
2001-01-16 03:17:29 +08:00
|
|
|
#endif
|
|
|
|
|
1998-08-09 08:43:13 +08:00
|
|
|
/*
|
|
|
|
* Parse the search request. It looks like this:
|
|
|
|
*
|
|
|
|
* SearchRequest := [APPLICATION 3] SEQUENCE {
|
|
|
|
* baseObject DistinguishedName,
|
|
|
|
* scope ENUMERATED {
|
|
|
|
* baseObject (0),
|
|
|
|
* singleLevel (1),
|
|
|
|
* wholeSubtree (2)
|
|
|
|
* },
|
|
|
|
* derefAliases ENUMERATED {
|
|
|
|
* neverDerefaliases (0),
|
|
|
|
* derefInSearching (1),
|
|
|
|
* derefFindingBaseObj (2),
|
|
|
|
* alwaysDerefAliases (3)
|
|
|
|
* },
|
|
|
|
* sizelimit INTEGER (0 .. 65535),
|
|
|
|
* timelimit INTEGER (0 .. 65535),
|
|
|
|
* attrsOnly BOOLEAN,
|
|
|
|
* filter Filter,
|
|
|
|
* attributes SEQUENCE OF AttributeType
|
|
|
|
* }
|
|
|
|
*/
|
|
|
|
|
|
|
|
/* baseObject, scope, derefAliases, sizelimit, timelimit, attrsOnly */
|
2002-01-06 14:11:01 +08:00
|
|
|
if ( ber_scanf( op->o_ber, "{miiiib" /*}*/,
|
2003-03-31 15:49:34 +08:00
|
|
|
&base, &op->ors_scope, &op->ors_deref, &op->ors_slimit,
|
|
|
|
&op->ors_tlimit, &op->ors_attrsonly ) == LBER_ERROR )
|
2001-12-23 05:52:58 +08:00
|
|
|
{
|
2003-03-30 17:03:54 +08:00
|
|
|
send_ldap_discon( op, rs, LDAP_PROTOCOL_ERROR, "decoding error" );
|
|
|
|
rs->sr_err = SLAPD_DISCONNECT;
|
1999-01-09 05:48:09 +08:00
|
|
|
goto return_results;
|
1998-08-09 08:43:13 +08:00
|
|
|
}
|
1999-07-02 05:20:45 +08:00
|
|
|
|
2003-03-31 15:49:34 +08:00
|
|
|
switch( op->ors_scope ) {
|
1999-07-16 10:45:46 +08:00
|
|
|
case LDAP_SCOPE_BASE:
|
|
|
|
case LDAP_SCOPE_ONELEVEL:
|
|
|
|
case LDAP_SCOPE_SUBTREE:
|
|
|
|
break;
|
|
|
|
default:
|
2003-03-30 17:03:54 +08:00
|
|
|
send_ldap_error( op, rs, LDAP_PROTOCOL_ERROR, "invalid scope" );
|
1999-07-16 10:45:46 +08:00
|
|
|
goto return_results;
|
|
|
|
}
|
|
|
|
|
2003-03-31 15:49:34 +08:00
|
|
|
switch( op->ors_deref ) {
|
1999-07-16 10:45:46 +08:00
|
|
|
case LDAP_DEREF_NEVER:
|
|
|
|
case LDAP_DEREF_FINDING:
|
|
|
|
case LDAP_DEREF_SEARCHING:
|
|
|
|
case LDAP_DEREF_ALWAYS:
|
|
|
|
break;
|
|
|
|
default:
|
2003-03-30 17:03:54 +08:00
|
|
|
send_ldap_error( op, rs, LDAP_PROTOCOL_ERROR, "invalid deref" );
|
1999-01-09 05:48:09 +08:00
|
|
|
goto return_results;
|
1998-08-09 08:43:13 +08:00
|
|
|
}
|
1999-01-19 13:10:50 +08:00
|
|
|
|
2003-04-11 09:29:28 +08:00
|
|
|
rs->sr_err = dnPrettyNormal( NULL, &base, &op->o_req_dn, &op->o_req_ndn, op->o_tmpmemctx );
|
2003-03-30 17:03:54 +08:00
|
|
|
if( rs->sr_err != LDAP_SUCCESS ) {
|
2001-12-23 08:43:57 +08:00
|
|
|
#ifdef NEW_LOGGING
|
2002-07-12 04:33:24 +08:00
|
|
|
LDAP_LOG( OPERATION, ERR,
|
2001-12-23 08:43:57 +08:00
|
|
|
"do_search: conn %d invalid dn (%s)\n",
|
2003-03-30 17:03:54 +08:00
|
|
|
op->o_connid, base.bv_val, 0 );
|
2001-12-23 08:43:57 +08:00
|
|
|
#else
|
|
|
|
Debug( LDAP_DEBUG_ANY,
|
|
|
|
"do_search: invalid dn (%s)\n", base.bv_val, 0, 0 );
|
|
|
|
#endif
|
2003-03-30 17:03:54 +08:00
|
|
|
send_ldap_error( op, rs, LDAP_INVALID_DN_SYNTAX, "invalid DN" );
|
2001-12-23 08:43:57 +08:00
|
|
|
goto return_results;
|
|
|
|
}
|
1999-09-19 09:29:45 +08:00
|
|
|
|
2001-01-16 03:17:29 +08:00
|
|
|
#ifdef NEW_LOGGING
|
2002-07-12 04:33:24 +08:00
|
|
|
LDAP_LOG( OPERATION, ARGS, "SRCH \"%s\" %d %d",
|
2003-03-31 15:49:34 +08:00
|
|
|
base.bv_val, op->ors_scope, op->ors_deref );
|
2002-07-12 04:33:24 +08:00
|
|
|
LDAP_LOG( OPERATION, ARGS, " %d %d %d\n",
|
2003-03-31 15:49:34 +08:00
|
|
|
op->ors_slimit, op->ors_tlimit, op->ors_attrsonly);
|
2001-01-16 03:17:29 +08:00
|
|
|
#else
|
2002-01-03 01:06:56 +08:00
|
|
|
Debug( LDAP_DEBUG_ARGS, "SRCH \"%s\" %d %d",
|
2003-03-31 15:49:34 +08:00
|
|
|
base.bv_val, op->ors_scope, op->ors_deref );
|
2002-01-03 01:06:56 +08:00
|
|
|
Debug( LDAP_DEBUG_ARGS, " %d %d %d\n",
|
2003-03-31 15:49:34 +08:00
|
|
|
op->ors_slimit, op->ors_tlimit, op->ors_attrsonly);
|
2001-01-16 03:17:29 +08:00
|
|
|
#endif
|
1998-08-09 08:43:13 +08:00
|
|
|
|
|
|
|
/* filter - returns a "normalized" version */
|
2003-04-10 00:52:03 +08:00
|
|
|
rs->sr_err = get_filter( op, op->o_ber, &op->ors_filter, &rs->sr_text );
|
2003-03-30 17:03:54 +08:00
|
|
|
if( rs->sr_err != LDAP_SUCCESS ) {
|
|
|
|
if( rs->sr_err == SLAPD_DISCONNECT ) {
|
|
|
|
rs->sr_err = LDAP_PROTOCOL_ERROR;
|
|
|
|
send_ldap_disconnect( op, rs );
|
1999-07-08 02:51:39 +08:00
|
|
|
} else {
|
2003-03-30 17:03:54 +08:00
|
|
|
send_ldap_result( op, rs );
|
1999-07-08 02:51:39 +08:00
|
|
|
}
|
1999-01-09 05:48:09 +08:00
|
|
|
goto return_results;
|
1998-08-09 08:43:13 +08:00
|
|
|
}
|
2003-04-10 07:37:00 +08:00
|
|
|
filter2bv_x( op, op->ors_filter, &op->ors_filterstr );
|
1999-07-08 02:51:39 +08:00
|
|
|
|
2001-01-16 03:17:29 +08:00
|
|
|
#ifdef NEW_LOGGING
|
2002-07-12 04:33:24 +08:00
|
|
|
LDAP_LOG( OPERATION, ARGS,
|
|
|
|
"do_search: conn %d filter: %s\n",
|
2003-03-31 15:49:34 +08:00
|
|
|
op->o_connid, op->ors_filterstr.bv_len ? op->ors_filterstr.bv_val : "empty", 0 );
|
2001-01-16 03:17:29 +08:00
|
|
|
#else
|
2002-03-07 11:13:11 +08:00
|
|
|
Debug( LDAP_DEBUG_ARGS, " filter: %s\n",
|
2003-03-31 15:49:34 +08:00
|
|
|
op->ors_filterstr.bv_len ? op->ors_filterstr.bv_val : "empty", 0, 0 );
|
2001-01-16 03:17:29 +08:00
|
|
|
#endif
|
|
|
|
|
1998-08-09 08:43:13 +08:00
|
|
|
/* attributes */
|
2002-01-03 13:38:26 +08:00
|
|
|
siz = sizeof(AttributeName);
|
|
|
|
off = 0;
|
2003-03-31 15:49:34 +08:00
|
|
|
if ( ber_scanf( op->o_ber, "{M}}", &op->ors_attrs, &siz, off ) == LBER_ERROR ) {
|
2003-03-30 17:03:54 +08:00
|
|
|
send_ldap_discon( op, rs, LDAP_PROTOCOL_ERROR, "decoding attrs error" );
|
|
|
|
rs->sr_err = SLAPD_DISCONNECT;
|
2001-12-31 19:35:52 +08:00
|
|
|
goto return_results;
|
|
|
|
}
|
2002-01-03 13:38:26 +08:00
|
|
|
for ( i=0; i<siz; i++ ) {
|
2003-03-30 17:03:54 +08:00
|
|
|
const char *dummy; /* ignore msgs from bv2ad */
|
2003-03-31 15:49:34 +08:00
|
|
|
op->ors_attrs[i].an_desc = NULL;
|
|
|
|
op->ors_attrs[i].an_oc = NULL;
|
|
|
|
slap_bv2ad(&op->ors_attrs[i].an_name, &op->ors_attrs[i].an_desc, &dummy);
|
1998-08-09 08:43:13 +08:00
|
|
|
}
|
1999-01-09 05:48:09 +08:00
|
|
|
|
2003-03-30 17:03:54 +08:00
|
|
|
if( get_ctrls( op, rs, 1 ) != LDAP_SUCCESS ) {
|
2001-01-16 03:17:29 +08:00
|
|
|
#ifdef NEW_LOGGING
|
2002-07-12 04:33:24 +08:00
|
|
|
LDAP_LOG( OPERATION, INFO,
|
2001-12-23 05:52:58 +08:00
|
|
|
"do_search: conn %d get_ctrls failed (%d)\n",
|
2003-03-30 17:03:54 +08:00
|
|
|
op->o_connid, rs->sr_err, 0 );
|
2001-01-16 03:17:29 +08:00
|
|
|
#else
|
1999-07-01 06:43:27 +08:00
|
|
|
Debug( LDAP_DEBUG_ANY, "do_search: get_ctrls failed\n", 0, 0, 0 );
|
2001-01-16 03:17:29 +08:00
|
|
|
#endif
|
|
|
|
|
1999-07-01 06:43:27 +08:00
|
|
|
goto return_results;
|
2002-01-09 14:29:54 +08:00
|
|
|
}
|
1999-07-02 05:20:45 +08:00
|
|
|
|
2001-01-16 03:17:29 +08:00
|
|
|
#ifdef NEW_LOGGING
|
2002-07-12 04:33:24 +08:00
|
|
|
LDAP_LOG( OPERATION, ARGS,
|
2003-03-30 17:03:54 +08:00
|
|
|
"do_search: conn %d attrs:", op->o_connid, 0, 0 );
|
2001-01-16 03:17:29 +08:00
|
|
|
#else
|
1998-08-09 08:43:13 +08:00
|
|
|
Debug( LDAP_DEBUG_ARGS, " attrs:", 0, 0, 0 );
|
2001-01-16 03:17:29 +08:00
|
|
|
#endif
|
|
|
|
|
2002-01-03 13:38:26 +08:00
|
|
|
if ( siz != 0 ) {
|
|
|
|
for ( i = 0; i<siz; i++ ) {
|
2001-01-16 03:17:29 +08:00
|
|
|
#ifdef NEW_LOGGING
|
2002-07-12 04:33:24 +08:00
|
|
|
LDAP_LOG( OPERATION, ARGS,
|
2003-03-31 15:49:34 +08:00
|
|
|
"do_search: %s", op->ors_attrs[i].an_name.bv_val, 0, 0 );
|
2001-01-16 03:17:29 +08:00
|
|
|
#else
|
2003-03-31 15:49:34 +08:00
|
|
|
Debug( LDAP_DEBUG_ARGS, " %s", op->ors_attrs[i].an_name.bv_val, 0, 0 );
|
2001-01-16 03:17:29 +08:00
|
|
|
#endif
|
1998-08-09 08:43:13 +08:00
|
|
|
}
|
|
|
|
}
|
1999-07-01 06:43:27 +08:00
|
|
|
|
2001-01-16 03:17:29 +08:00
|
|
|
#ifdef NEW_LOGGING
|
2002-07-12 04:33:24 +08:00
|
|
|
LDAP_LOG( OPERATION, ARGS, "\n" , 0, 0, 0 );
|
2001-01-16 03:17:29 +08:00
|
|
|
#else
|
1998-08-09 08:43:13 +08:00
|
|
|
Debug( LDAP_DEBUG_ARGS, "\n", 0, 0, 0 );
|
2001-01-16 03:17:29 +08:00
|
|
|
#endif
|
|
|
|
|
2002-12-16 20:14:37 +08:00
|
|
|
if ( StatslogTest( LDAP_DEBUG_STATS ) ) {
|
|
|
|
char abuf[BUFSIZ/2], *ptr = abuf;
|
2003-02-01 04:38:25 +08:00
|
|
|
int len = 0, alen;
|
2002-12-16 20:14:37 +08:00
|
|
|
|
2003-06-12 00:22:29 +08:00
|
|
|
sprintf(abuf, "scope=%d deref=%d", op->ors_scope, op->ors_deref);
|
2002-12-16 20:14:37 +08:00
|
|
|
Statslog( LDAP_DEBUG_STATS,
|
2003-06-12 00:22:29 +08:00
|
|
|
"conn=%lu op=%lu SRCH base=\"%s\" %s filter=\"%s\"\n",
|
|
|
|
op->o_connid, op->o_opid, op->o_req_dn.bv_val, abuf,
|
|
|
|
op->ors_filterstr.bv_val );
|
2002-12-16 20:14:37 +08:00
|
|
|
|
|
|
|
for ( i = 0; i<siz; i++ ) {
|
2003-03-31 15:49:34 +08:00
|
|
|
alen = op->ors_attrs[i].an_name.bv_len;
|
2003-02-01 04:38:25 +08:00
|
|
|
if (alen >= sizeof(abuf)) {
|
|
|
|
alen = sizeof(abuf)-1;
|
|
|
|
}
|
|
|
|
if (len && (len + 1 + alen >= sizeof(abuf))) {
|
2002-12-16 20:14:37 +08:00
|
|
|
Statslog( LDAP_DEBUG_STATS, "conn=%lu op=%lu SRCH attr=%s\n",
|
|
|
|
op->o_connid, op->o_opid, abuf, 0, 0 );
|
2003-06-12 00:22:29 +08:00
|
|
|
len = 0;
|
2002-12-16 20:14:37 +08:00
|
|
|
ptr = abuf;
|
|
|
|
}
|
|
|
|
if (len) {
|
|
|
|
*ptr++ = ' ';
|
|
|
|
len++;
|
|
|
|
}
|
2003-03-31 15:49:34 +08:00
|
|
|
ptr = lutil_strncopy(ptr, op->ors_attrs[i].an_name.bv_val, alen);
|
2003-02-01 04:38:25 +08:00
|
|
|
len += alen;
|
|
|
|
*ptr = '\0';
|
2002-12-16 20:14:37 +08:00
|
|
|
}
|
|
|
|
if (len) {
|
2002-12-16 20:17:49 +08:00
|
|
|
Statslog( LDAP_DEBUG_STATS, "conn=%lu op=%lu SRCH attr=%s\n",
|
2002-12-16 20:14:37 +08:00
|
|
|
op->o_connid, op->o_opid, abuf, 0, 0 );
|
|
|
|
}
|
|
|
|
}
|
1998-08-09 08:43:13 +08:00
|
|
|
|
2001-02-03 10:21:37 +08:00
|
|
|
manageDSAit = get_manageDSAit( op );
|
|
|
|
|
2003-10-24 13:58:42 +08:00
|
|
|
/* fake while loop to allow breaking out */
|
|
|
|
while ( op->ors_scope == LDAP_SCOPE_BASE ) {
|
2000-05-17 00:22:52 +08:00
|
|
|
Entry *entry = NULL;
|
|
|
|
|
2003-03-30 17:03:54 +08:00
|
|
|
if ( op->o_req_ndn.bv_len == 0 ) {
|
2001-10-02 09:02:23 +08:00
|
|
|
#ifdef LDAP_CONNECTIONLESS
|
2002-01-09 14:29:54 +08:00
|
|
|
/* Ignore LDAPv2 CLDAP Root DSE queries */
|
2003-03-30 17:03:54 +08:00
|
|
|
if (op->o_protocol == LDAP_VERSION2 && op->o_conn->c_is_udp) {
|
2001-10-02 09:02:23 +08:00
|
|
|
goto return_results;
|
|
|
|
}
|
|
|
|
#endif
|
2001-02-03 10:32:14 +08:00
|
|
|
/* check restrictions */
|
2003-03-30 17:03:54 +08:00
|
|
|
if( backend_check_restrictions( op, rs, NULL ) != LDAP_SUCCESS ) {
|
|
|
|
send_ldap_result( op, rs );
|
2001-02-03 10:32:14 +08:00
|
|
|
goto return_results;
|
|
|
|
}
|
|
|
|
|
2003-01-23 16:45:28 +08:00
|
|
|
#ifdef LDAP_SLAPI
|
2003-10-24 13:58:42 +08:00
|
|
|
if ( op->o_pb ) {
|
|
|
|
attrs = anlist2charray( op, op->ors_attrs );
|
|
|
|
initSearchPlugin( op, attrs, manageDSAit );
|
|
|
|
rs->sr_err = doPreSearchPluginFNs( op );
|
|
|
|
if ( rs->sr_err ) break;
|
2003-03-30 17:03:54 +08:00
|
|
|
doSearchRewriteFNs( op );
|
2003-01-23 16:45:28 +08:00
|
|
|
}
|
|
|
|
#endif /* LDAP_SLAPI */
|
2003-10-24 13:58:42 +08:00
|
|
|
rs->sr_err = root_dse_info( op->o_conn, &entry, &rs->sr_text );
|
2000-05-17 00:22:52 +08:00
|
|
|
|
2003-03-30 17:03:54 +08:00
|
|
|
} else if ( bvmatch( &op->o_req_ndn, &global_schemandn ) ) {
|
2001-02-03 10:32:14 +08:00
|
|
|
/* check restrictions */
|
2003-03-30 17:03:54 +08:00
|
|
|
if( backend_check_restrictions( op, rs, NULL ) != LDAP_SUCCESS ) {
|
|
|
|
send_ldap_result( op, rs );
|
2001-02-03 10:32:14 +08:00
|
|
|
goto return_results;
|
|
|
|
}
|
|
|
|
|
2003-01-23 16:45:28 +08:00
|
|
|
#ifdef LDAP_SLAPI
|
2003-10-24 13:58:42 +08:00
|
|
|
if ( op->o_pb ) {
|
|
|
|
attrs = anlist2charray( op, op->ors_attrs );
|
|
|
|
initSearchPlugin( op, attrs, manageDSAit );
|
|
|
|
rs->sr_err = doPreSearchPluginFNs( op );
|
|
|
|
if ( rs->sr_err ) break;
|
2003-03-30 17:03:54 +08:00
|
|
|
doSearchRewriteFNs( op );
|
2003-01-23 16:45:28 +08:00
|
|
|
}
|
|
|
|
#endif /* LDAP_SLAPI */
|
2003-10-24 13:58:42 +08:00
|
|
|
rs->sr_err = schema_info( &entry, &rs->sr_text );
|
1998-08-09 08:43:13 +08:00
|
|
|
}
|
|
|
|
|
2003-03-30 17:03:54 +08:00
|
|
|
if( rs->sr_err != LDAP_SUCCESS ) {
|
|
|
|
send_ldap_result( op, rs );
|
2003-01-23 16:45:28 +08:00
|
|
|
#ifdef LDAP_SLAPI
|
2003-10-24 13:58:42 +08:00
|
|
|
if ( op->o_pb ) doPostSearchPluginFNs( op );
|
2003-01-23 16:45:28 +08:00
|
|
|
#endif /* LDAP_SLAPI */
|
2000-05-17 00:22:52 +08:00
|
|
|
goto return_results;
|
|
|
|
|
|
|
|
} else if ( entry != NULL ) {
|
2003-03-31 15:49:34 +08:00
|
|
|
rs->sr_err = test_filter( op, entry, op->ors_filter );
|
2000-05-17 01:00:42 +08:00
|
|
|
|
2003-03-30 17:03:54 +08:00
|
|
|
if( rs->sr_err == LDAP_COMPARE_TRUE ) {
|
|
|
|
rs->sr_entry = entry;
|
2003-03-31 15:49:34 +08:00
|
|
|
rs->sr_attrs = op->ors_attrs;
|
2003-03-30 17:03:54 +08:00
|
|
|
send_search_entry( op, rs );
|
|
|
|
rs->sr_entry = NULL;
|
2000-05-17 01:00:42 +08:00
|
|
|
}
|
|
|
|
entry_free( entry );
|
|
|
|
|
2003-03-30 17:03:54 +08:00
|
|
|
rs->sr_err = LDAP_SUCCESS;
|
2003-04-01 12:12:18 +08:00
|
|
|
send_ldap_result( op, rs );
|
2003-01-23 16:45:28 +08:00
|
|
|
#ifdef LDAP_SLAPI
|
2003-10-24 13:58:42 +08:00
|
|
|
if ( op->o_pb ) doPostSearchPluginFNs( op );
|
2003-01-23 16:45:28 +08:00
|
|
|
#endif /* LDAP_SLAPI */
|
1999-07-16 10:45:46 +08:00
|
|
|
goto return_results;
|
|
|
|
}
|
2003-10-24 13:58:42 +08:00
|
|
|
break;
|
1999-04-20 04:02:24 +08:00
|
|
|
}
|
|
|
|
|
2003-03-30 17:03:54 +08:00
|
|
|
if( !op->o_req_ndn.bv_len && default_search_nbase.bv_len ) {
|
2003-04-11 09:29:28 +08:00
|
|
|
sl_free( op->o_req_dn.bv_val, op->o_tmpmemctx );
|
|
|
|
sl_free( op->o_req_ndn.bv_val, op->o_tmpmemctx );
|
2001-12-25 10:30:01 +08:00
|
|
|
|
2003-04-11 09:29:28 +08:00
|
|
|
ber_dupbv_x( &op->o_req_dn, &default_search_base, op->o_tmpmemctx );
|
|
|
|
ber_dupbv_x( &op->o_req_ndn, &default_search_nbase, op->o_tmpmemctx );
|
2001-02-03 10:32:14 +08:00
|
|
|
}
|
|
|
|
|
|
|
|
/*
|
|
|
|
* We could be serving multiple database backends. Select the
|
|
|
|
* appropriate one, or send a referral to our "referral server"
|
|
|
|
* if we don't hold it.
|
|
|
|
*/
|
2003-04-30 10:01:03 +08:00
|
|
|
|
2003-06-28 01:39:48 +08:00
|
|
|
/* Sync control overrides manageDSAit */
|
2003-04-30 10:01:03 +08:00
|
|
|
|
|
|
|
if ( manageDSAit != SLAP_NO_CONTROL ) {
|
|
|
|
if ( op->o_sync_mode & SLAP_SYNC_REFRESH ) {
|
|
|
|
be_manageDSAit = SLAP_NO_CONTROL;
|
2003-08-28 06:16:04 +08:00
|
|
|
} else {
|
2003-04-30 10:01:03 +08:00
|
|
|
be_manageDSAit = manageDSAit;
|
|
|
|
}
|
|
|
|
} else {
|
|
|
|
be_manageDSAit = manageDSAit;
|
|
|
|
}
|
|
|
|
|
|
|
|
if ( (op->o_bd = select_backend( &op->o_req_ndn, be_manageDSAit, 1 )) == NULL ) {
|
2003-03-30 17:03:54 +08:00
|
|
|
rs->sr_ref = referral_rewrite( default_referral,
|
2003-03-31 15:49:34 +08:00
|
|
|
NULL, &op->o_req_dn, op->ors_scope );
|
2001-10-26 10:05:14 +08:00
|
|
|
|
2003-03-30 17:03:54 +08:00
|
|
|
if (!rs->sr_ref) rs->sr_ref = default_referral;
|
|
|
|
rs->sr_err = LDAP_REFERRAL;
|
|
|
|
send_ldap_result( op, rs );
|
1998-08-09 08:43:13 +08:00
|
|
|
|
2003-03-30 17:03:54 +08:00
|
|
|
if (rs->sr_ref != default_referral)
|
|
|
|
ber_bvarray_free( rs->sr_ref );
|
|
|
|
rs->sr_ref = NULL;
|
1999-01-09 05:48:09 +08:00
|
|
|
goto return_results;
|
1998-08-09 08:43:13 +08:00
|
|
|
}
|
|
|
|
|
2001-02-03 10:32:14 +08:00
|
|
|
/* check restrictions */
|
2003-03-30 17:03:54 +08:00
|
|
|
if( backend_check_restrictions( op, rs, NULL ) != LDAP_SUCCESS ) {
|
|
|
|
send_ldap_result( op, rs );
|
2001-02-03 10:32:14 +08:00
|
|
|
goto return_results;
|
|
|
|
}
|
|
|
|
|
2000-06-16 09:19:30 +08:00
|
|
|
/* check for referrals */
|
2003-03-30 17:03:54 +08:00
|
|
|
if( backend_check_referrals( op, rs ) != LDAP_SUCCESS ) {
|
2000-06-16 09:19:30 +08:00
|
|
|
goto return_results;
|
|
|
|
}
|
|
|
|
|
2003-01-23 16:45:28 +08:00
|
|
|
#ifdef LDAP_SLAPI
|
2003-10-24 13:58:42 +08:00
|
|
|
if ( op->o_pb ) {
|
|
|
|
attrs = anlist2charray( op, op->ors_attrs );
|
|
|
|
initSearchPlugin( op, attrs, manageDSAit );
|
|
|
|
rs->sr_err = doPreSearchPluginFNs( op );
|
|
|
|
if ( rs->sr_err != LDAP_SUCCESS ) {
|
|
|
|
goto return_results;
|
|
|
|
}
|
2003-01-23 16:45:28 +08:00
|
|
|
|
2003-10-24 13:58:42 +08:00
|
|
|
doSearchRewriteFNs( op );
|
|
|
|
}
|
2003-01-23 16:45:28 +08:00
|
|
|
#endif /* LDAP_SLAPI */
|
|
|
|
|
|
|
|
/* actually do the search and send the result(s) */
|
2003-03-30 17:03:54 +08:00
|
|
|
if ( op->o_bd->be_search ) {
|
|
|
|
(op->o_bd->be_search)( op, rs );
|
2003-01-23 16:45:28 +08:00
|
|
|
} else {
|
2003-03-30 17:03:54 +08:00
|
|
|
send_ldap_error( op, rs, LDAP_UNWILLING_TO_PERFORM,
|
|
|
|
"operation not supported within namingContext" );
|
2003-01-23 16:45:28 +08:00
|
|
|
}
|
|
|
|
|
|
|
|
#ifdef LDAP_SLAPI
|
2003-10-24 13:58:42 +08:00
|
|
|
if ( op->o_pb ) doPostSearchPluginFNs( op );
|
2003-01-23 16:45:28 +08:00
|
|
|
#endif /* LDAP_SLAPI */
|
|
|
|
|
|
|
|
return_results:;
|
2003-02-05 15:37:02 +08:00
|
|
|
|
|
|
|
if ( ( op->o_sync_mode & SLAP_SYNC_PERSIST ) )
|
2003-03-30 17:03:54 +08:00
|
|
|
return rs->sr_err;
|
2003-02-05 15:37:02 +08:00
|
|
|
|
2003-04-11 09:29:28 +08:00
|
|
|
if( op->o_req_dn.bv_val != NULL) sl_free( op->o_req_dn.bv_val, op->o_tmpmemctx );
|
|
|
|
if( op->o_req_ndn.bv_val != NULL) sl_free( op->o_req_ndn.bv_val, op->o_tmpmemctx );
|
2003-01-23 16:45:28 +08:00
|
|
|
|
2003-04-10 00:52:03 +08:00
|
|
|
if( op->ors_filterstr.bv_val != NULL) op->o_tmpfree( op->ors_filterstr.bv_val, op->o_tmpmemctx );
|
|
|
|
if( op->ors_filter != NULL) filter_free_x( op, op->ors_filter );
|
|
|
|
if( op->ors_attrs != NULL ) op->o_tmpfree( op->ors_attrs, op->o_tmpmemctx );
|
2003-01-23 16:45:28 +08:00
|
|
|
#ifdef LDAP_SLAPI
|
2003-04-10 00:52:03 +08:00
|
|
|
if( attrs != NULL) op->o_tmpfree( attrs, op->o_tmpmemctx );
|
2003-01-23 16:45:28 +08:00
|
|
|
#endif /* LDAP_SLAPI */
|
|
|
|
|
2003-03-30 17:03:54 +08:00
|
|
|
return rs->sr_err;
|
2003-01-23 16:45:28 +08:00
|
|
|
}
|
|
|
|
|
|
|
|
#ifdef LDAP_SLAPI
|
|
|
|
|
2003-04-10 00:52:03 +08:00
|
|
|
static char **anlist2charray( Operation *op, AttributeName *an )
|
2003-01-23 16:45:28 +08:00
|
|
|
{
|
|
|
|
char **attrs;
|
|
|
|
int i;
|
|
|
|
|
|
|
|
if ( an != NULL ) {
|
|
|
|
for ( i = 0; an[i].an_name.bv_val != NULL; i++ )
|
|
|
|
;
|
2003-04-10 00:52:03 +08:00
|
|
|
attrs = (char **)op->o_tmpalloc( (i + 1) * sizeof(char *), op->o_tmpmemctx );
|
2003-01-23 16:45:28 +08:00
|
|
|
for ( i = 0; an[i].an_name.bv_val != NULL; i++ ) {
|
|
|
|
attrs[i] = an[i].an_name.bv_val;
|
|
|
|
}
|
|
|
|
attrs[i] = NULL;
|
|
|
|
} else {
|
|
|
|
attrs = NULL;
|
|
|
|
}
|
|
|
|
|
|
|
|
return attrs;
|
|
|
|
}
|
|
|
|
|
2003-03-31 12:54:06 +08:00
|
|
|
static void initSearchPlugin( Operation *op,
|
2003-03-30 17:03:54 +08:00
|
|
|
char **attrs, int managedsait )
|
2003-01-23 16:45:28 +08:00
|
|
|
{
|
2003-03-31 14:41:30 +08:00
|
|
|
slapi_x_pblock_set_operation( op->o_pb, op );
|
2003-03-30 17:03:54 +08:00
|
|
|
slapi_pblock_set( op->o_pb, SLAPI_SEARCH_TARGET, (void *)op->o_req_dn.bv_val );
|
2003-03-31 15:49:34 +08:00
|
|
|
slapi_pblock_set( op->o_pb, SLAPI_SEARCH_SCOPE, (void *)op->ors_scope );
|
|
|
|
slapi_pblock_set( op->o_pb, SLAPI_SEARCH_DEREF, (void *)op->ors_deref );
|
|
|
|
slapi_pblock_set( op->o_pb, SLAPI_SEARCH_SIZELIMIT, (void *)op->ors_slimit );
|
|
|
|
slapi_pblock_set( op->o_pb, SLAPI_SEARCH_TIMELIMIT, (void *)op->ors_tlimit );
|
|
|
|
slapi_pblock_set( op->o_pb, SLAPI_SEARCH_FILTER, (void *)op->ors_filter );
|
|
|
|
slapi_pblock_set( op->o_pb, SLAPI_SEARCH_STRFILTER, (void *)op->ors_filterstr.bv_val );
|
2003-03-30 17:03:54 +08:00
|
|
|
slapi_pblock_set( op->o_pb, SLAPI_SEARCH_ATTRS, (void *)attrs );
|
2003-03-31 15:49:34 +08:00
|
|
|
slapi_pblock_set( op->o_pb, SLAPI_SEARCH_ATTRSONLY, (void *)op->ors_attrsonly );
|
2003-03-30 17:03:54 +08:00
|
|
|
slapi_pblock_set( op->o_pb, SLAPI_MANAGEDSAIT, (void *)managedsait );
|
2003-01-23 16:45:28 +08:00
|
|
|
}
|
|
|
|
|
2003-03-30 17:03:54 +08:00
|
|
|
static int doPreSearchPluginFNs( Operation *op )
|
2003-01-23 16:45:28 +08:00
|
|
|
{
|
|
|
|
int rc;
|
2002-12-08 01:19:29 +08:00
|
|
|
|
2003-03-30 17:03:54 +08:00
|
|
|
rc = doPluginFNs( op->o_bd, SLAPI_PLUGIN_PRE_SEARCH_FN, op->o_pb );
|
2003-04-14 08:07:48 +08:00
|
|
|
if ( rc < 0 ) {
|
2002-12-08 01:19:29 +08:00
|
|
|
/*
|
2003-01-21 07:18:11 +08:00
|
|
|
* A preoperation plugin failure will abort the
|
|
|
|
* entire operation.
|
2002-12-08 01:19:29 +08:00
|
|
|
*/
|
|
|
|
#ifdef NEW_LOGGING
|
2003-01-23 17:22:32 +08:00
|
|
|
LDAP_LOG( OPERATION, INFO, "doPreSearchPluginFNs: search preoperation plugin "
|
2003-01-23 19:29:52 +08:00
|
|
|
"returned %d\n", rc, 0, 0 );
|
2002-12-08 01:19:29 +08:00
|
|
|
#else
|
2003-01-23 17:22:32 +08:00
|
|
|
Debug(LDAP_DEBUG_TRACE, "doPreSearchPluginFNs: search preoperation plugin "
|
2003-01-23 19:29:52 +08:00
|
|
|
"returned %d.\n", rc, 0, 0);
|
2002-12-08 01:19:29 +08:00
|
|
|
#endif
|
2003-04-30 21:37:14 +08:00
|
|
|
if ( ( slapi_pblock_get( op->o_pb, SLAPI_RESULT_CODE, (void *)&rc ) != 0 ) ||
|
|
|
|
rc == LDAP_SUCCESS ) {
|
2003-01-21 17:42:26 +08:00
|
|
|
rc = LDAP_OTHER;
|
2003-04-30 21:37:14 +08:00
|
|
|
}
|
2003-01-23 16:45:28 +08:00
|
|
|
} else {
|
|
|
|
rc = LDAP_SUCCESS;
|
2003-01-21 07:18:11 +08:00
|
|
|
}
|
2003-01-22 22:54:12 +08:00
|
|
|
|
2003-01-23 16:45:28 +08:00
|
|
|
return rc;
|
|
|
|
}
|
|
|
|
|
2003-03-30 17:03:54 +08:00
|
|
|
static int doSearchRewriteFNs( Operation *op )
|
2003-01-23 16:45:28 +08:00
|
|
|
{
|
2003-03-30 17:03:54 +08:00
|
|
|
if ( doPluginFNs( op->o_bd, SLAPI_PLUGIN_COMPUTE_SEARCH_REWRITER_FN, op->o_pb ) == 0 ) {
|
2003-04-23 16:16:05 +08:00
|
|
|
int rc;
|
|
|
|
|
2003-01-22 23:46:45 +08:00
|
|
|
/*
|
|
|
|
* The plugin can set the SLAPI_SEARCH_FILTER.
|
|
|
|
* SLAPI_SEARCH_STRFILER is not normative.
|
|
|
|
*/
|
2003-04-11 14:30:41 +08:00
|
|
|
slapi_pblock_get( op->o_pb, SLAPI_SEARCH_FILTER, (void *)&op->ors_filter );
|
|
|
|
op->o_tmpfree( op->ors_filterstr.bv_val, op->o_tmpmemctx );
|
|
|
|
filter2bv_x( op, op->ors_filter, &op->ors_filterstr );
|
2003-04-23 16:16:05 +08:00
|
|
|
|
|
|
|
/*
|
|
|
|
* Also permit other search parameters to be reset. One thing
|
|
|
|
* this doesn't (yet) deal with is plugins that change a root
|
|
|
|
* DSE search to a non-root DSE search...
|
|
|
|
*/
|
|
|
|
slapi_pblock_get( op->o_pb, SLAPI_SEARCH_TARGET, (void **)&op->o_req_dn.bv_val );
|
|
|
|
op->o_req_dn.bv_len = strlen( op->o_req_dn.bv_val );
|
|
|
|
|
|
|
|
if( op->o_req_ndn.bv_val != NULL) {
|
|
|
|
sl_free( op->o_req_ndn.bv_val, op->o_tmpmemctx );
|
|
|
|
}
|
2003-04-30 02:28:14 +08:00
|
|
|
rc = dnNormalize( 0, NULL, NULL, &op->o_req_dn, &op->o_req_ndn,
|
|
|
|
op->o_tmpmemctx );
|
2003-04-23 16:16:05 +08:00
|
|
|
if ( rc != LDAP_SUCCESS ) {
|
|
|
|
return rc;
|
|
|
|
}
|
|
|
|
|
|
|
|
slapi_pblock_get( op->o_pb, SLAPI_SEARCH_SCOPE, (void **)&op->ors_scope );
|
|
|
|
slapi_pblock_get( op->o_pb, SLAPI_SEARCH_DEREF, (void **)&op->ors_deref );
|
|
|
|
|
2003-01-22 23:46:45 +08:00
|
|
|
#ifdef NEW_LOGGING
|
2003-04-11 14:30:41 +08:00
|
|
|
LDAP_LOG( OPERATION, ARGS,
|
|
|
|
"doSearchRewriteFNs: after compute_rewrite_search filter: %s\n",
|
|
|
|
op->ors_filterstr.bv_len ? op->ors_filterstr.bv_val : "empty", 0, 0 );
|
2003-01-22 23:46:45 +08:00
|
|
|
#else
|
2003-04-11 14:30:41 +08:00
|
|
|
Debug( LDAP_DEBUG_ARGS, " after compute_rewrite_search filter: %s\n",
|
|
|
|
op->ors_filterstr.bv_len ? op->ors_filterstr.bv_val : "empty", 0, 0 );
|
2003-01-22 23:46:45 +08:00
|
|
|
#endif
|
2003-01-22 22:57:35 +08:00
|
|
|
}
|
2002-12-08 01:19:29 +08:00
|
|
|
|
2003-01-23 16:45:28 +08:00
|
|
|
return LDAP_SUCCESS;
|
|
|
|
}
|
1998-08-09 08:43:13 +08:00
|
|
|
|
2003-03-30 17:03:54 +08:00
|
|
|
static void doPostSearchPluginFNs( Operation *op )
|
2003-01-23 16:45:28 +08:00
|
|
|
{
|
2003-04-14 08:07:48 +08:00
|
|
|
if ( doPluginFNs( op->o_bd, SLAPI_PLUGIN_POST_SEARCH_FN, op->o_pb ) < 0 ) {
|
2002-12-08 01:19:29 +08:00
|
|
|
#ifdef NEW_LOGGING
|
2003-01-23 17:22:32 +08:00
|
|
|
LDAP_LOG( OPERATION, INFO, "doPostSearchPluginFNs: search postoperation plugins "
|
2002-12-27 22:59:01 +08:00
|
|
|
"failed\n", 0, 0, 0 );
|
2002-12-08 01:19:29 +08:00
|
|
|
#else
|
2003-01-23 17:22:32 +08:00
|
|
|
Debug(LDAP_DEBUG_TRACE, "doPostSearchPluginFNs: search postoperation plugins "
|
2002-12-27 22:59:01 +08:00
|
|
|
"failed.\n", 0, 0, 0);
|
2002-12-08 01:19:29 +08:00
|
|
|
#endif
|
2003-01-21 07:18:11 +08:00
|
|
|
}
|
1998-08-09 08:43:13 +08:00
|
|
|
}
|
2003-01-23 19:29:52 +08:00
|
|
|
|
|
|
|
void dummy(void)
|
|
|
|
{
|
|
|
|
/*
|
|
|
|
* XXX slapi_search_internal() was no getting pulled
|
|
|
|
* in; all manner of linker flags failed to link it.
|
|
|
|
* FIXME
|
|
|
|
*/
|
|
|
|
slapi_search_internal( NULL, 0, NULL, NULL, NULL, 0 );
|
|
|
|
}
|
2003-01-23 16:45:28 +08:00
|
|
|
#endif /* LDAP_SLAPI */
|
|
|
|
|