1999-09-09 03:06:24 +08:00
|
|
|
/* $OpenLDAP$ */
|
1999-04-20 02:21:53 +08:00
|
|
|
/* root_dse.c - Provides the ROOT DSA-Specific Entry
|
|
|
|
*
|
2003-01-04 04:20:47 +08:00
|
|
|
* Copyright 1999-2003 The OpenLDAP Foundation.
|
1999-04-20 02:21:53 +08:00
|
|
|
* All rights reserved.
|
|
|
|
*
|
|
|
|
* Redistribution and use in source and binary forms are permitted only
|
|
|
|
* as authorized by the OpenLDAP Public License. A copy of this
|
|
|
|
* license is available at http://www.OpenLDAP.org/license.html or
|
|
|
|
* in file LICENSE in the top-level directory of the distribution.
|
|
|
|
*/
|
|
|
|
|
|
|
|
#include "portable.h"
|
|
|
|
|
|
|
|
#include <stdio.h>
|
2003-01-28 05:53:23 +08:00
|
|
|
|
1999-08-18 05:21:43 +08:00
|
|
|
#include <ac/string.h>
|
|
|
|
|
1999-04-20 02:21:53 +08:00
|
|
|
#include "slap.h"
|
2001-11-18 00:18:07 +08:00
|
|
|
#include <ldif.h>
|
2002-04-09 02:37:37 +08:00
|
|
|
#include "lber_pvt.h"
|
2002-12-08 01:19:29 +08:00
|
|
|
|
2003-02-10 10:09:00 +08:00
|
|
|
#ifdef LDAP_SLAPI
|
|
|
|
#include "slapi.h"
|
|
|
|
#endif
|
|
|
|
|
2002-02-16 00:33:44 +08:00
|
|
|
static struct berval supportedFeatures[] = {
|
2002-07-24 02:35:12 +08:00
|
|
|
BER_BVC(LDAP_FEATURE_ALL_OPERATIONAL_ATTRS), /* all Operational Attributes ("+") */
|
|
|
|
BER_BVC(LDAP_FEATURE_OBJECTCLASS_ATTRS), /* OCs in Attributes List */
|
|
|
|
BER_BVC(LDAP_FEATURE_ABSOLUTE_FILTERS), /* (&) and (|) search filters */
|
|
|
|
BER_BVC(LDAP_FEATURE_LANGUAGE_TAG_OPTIONS), /* Language Tag Options */
|
|
|
|
BER_BVC(LDAP_FEATURE_LANGUAGE_RANGE_OPTIONS), /* Language Range Options */
|
2002-02-16 00:33:44 +08:00
|
|
|
{0,NULL}
|
2001-09-09 12:01:07 +08:00
|
|
|
};
|
|
|
|
|
2001-10-24 07:29:41 +08:00
|
|
|
static Entry *usr_attr = NULL;
|
2001-09-09 12:01:07 +08:00
|
|
|
|
2000-05-17 00:22:52 +08:00
|
|
|
int
|
2000-07-14 06:54:38 +08:00
|
|
|
root_dse_info(
|
|
|
|
Connection *conn,
|
|
|
|
Entry **entry,
|
|
|
|
const char **text )
|
1999-04-20 02:21:53 +08:00
|
|
|
{
|
|
|
|
Entry *e;
|
2003-02-26 05:08:48 +08:00
|
|
|
struct berval vals[2], *bv;
|
|
|
|
struct berval nvals[2];
|
1999-04-20 02:21:53 +08:00
|
|
|
int i, j;
|
2000-07-14 06:54:38 +08:00
|
|
|
char ** supportedSASLMechanisms;
|
1999-04-20 02:21:53 +08:00
|
|
|
|
2001-12-20 06:41:00 +08:00
|
|
|
AttributeDescription *ad_structuralObjectClass
|
|
|
|
= slap_schema.si_ad_structuralObjectClass;
|
|
|
|
AttributeDescription *ad_objectClass
|
|
|
|
= slap_schema.si_ad_objectClass;
|
|
|
|
AttributeDescription *ad_namingContexts
|
|
|
|
= slap_schema.si_ad_namingContexts;
|
|
|
|
AttributeDescription *ad_supportedExtension
|
|
|
|
= slap_schema.si_ad_supportedExtension;
|
|
|
|
AttributeDescription *ad_supportedLDAPVersion
|
|
|
|
= slap_schema.si_ad_supportedLDAPVersion;
|
|
|
|
AttributeDescription *ad_supportedSASLMechanisms
|
|
|
|
= slap_schema.si_ad_supportedSASLMechanisms;
|
|
|
|
AttributeDescription *ad_supportedFeatures
|
|
|
|
= slap_schema.si_ad_supportedFeatures;
|
2002-06-19 14:44:16 +08:00
|
|
|
AttributeDescription *ad_monitorContext
|
|
|
|
= slap_schema.si_ad_monitorContext;
|
2001-12-20 06:41:00 +08:00
|
|
|
AttributeDescription *ad_ref
|
|
|
|
= slap_schema.si_ad_ref;
|
2000-05-16 05:22:57 +08:00
|
|
|
|
2002-01-02 19:00:36 +08:00
|
|
|
vals[1].bv_val = NULL;
|
2003-02-26 05:08:48 +08:00
|
|
|
nvals[1].bv_val = NULL;
|
1999-04-20 02:21:53 +08:00
|
|
|
|
2002-11-09 01:13:20 +08:00
|
|
|
e = (Entry *) SLAP_CALLOC( 1, sizeof(Entry) );
|
|
|
|
|
|
|
|
if( e == NULL ) {
|
|
|
|
#ifdef NEW_LOGGING
|
|
|
|
LDAP_LOG( OPERATION, ERR,
|
|
|
|
"root_dse_info: SLAP_CALLOC failed", 0, 0, 0 );
|
|
|
|
#else
|
|
|
|
Debug( LDAP_DEBUG_ANY,
|
|
|
|
"root_dse_info: SLAP_CALLOC failed", 0, 0, 0 );
|
|
|
|
#endif
|
|
|
|
return LDAP_OTHER;
|
|
|
|
}
|
1999-04-20 02:21:53 +08:00
|
|
|
|
|
|
|
e->e_attrs = NULL;
|
2001-12-27 00:42:35 +08:00
|
|
|
e->e_name.bv_val = ch_strdup( LDAP_ROOT_DSE );
|
|
|
|
e->e_name.bv_len = sizeof( LDAP_ROOT_DSE )-1;
|
|
|
|
e->e_nname.bv_val = ch_strdup( LDAP_ROOT_DSE );
|
|
|
|
e->e_nname.bv_len = sizeof( LDAP_ROOT_DSE )-1;
|
|
|
|
|
|
|
|
/* the DN is an empty string so no pretty/normalization is needed */
|
|
|
|
assert( !e->e_name.bv_len );
|
|
|
|
assert( !e->e_nname.bv_len );
|
|
|
|
|
1999-04-20 02:21:53 +08:00
|
|
|
e->e_private = NULL;
|
|
|
|
|
2002-01-02 19:00:36 +08:00
|
|
|
vals[0].bv_val = "top";
|
|
|
|
vals[0].bv_len = sizeof("top")-1;
|
2003-03-24 09:56:56 +08:00
|
|
|
if( attr_merge( e, ad_objectClass, vals, NULL ) )
|
2003-02-26 05:08:48 +08:00
|
|
|
{
|
2002-11-02 02:59:52 +08:00
|
|
|
return LDAP_OTHER;
|
2003-02-26 05:08:48 +08:00
|
|
|
}
|
2000-05-16 05:22:57 +08:00
|
|
|
|
2002-01-02 19:00:36 +08:00
|
|
|
vals[0].bv_val = "OpenLDAProotDSE";
|
|
|
|
vals[0].bv_len = sizeof("OpenLDAProotDSE")-1;
|
2003-03-24 09:56:56 +08:00
|
|
|
if( attr_merge( e, ad_objectClass, vals, NULL ) )
|
2002-11-02 02:59:52 +08:00
|
|
|
return LDAP_OTHER;
|
2003-03-24 09:56:56 +08:00
|
|
|
if( attr_merge( e, ad_structuralObjectClass, vals, NULL ) )
|
2002-11-02 02:59:52 +08:00
|
|
|
return LDAP_OTHER;
|
2000-05-16 05:22:57 +08:00
|
|
|
|
1999-04-20 02:21:53 +08:00
|
|
|
for ( i = 0; i < nbackends; i++ ) {
|
2002-06-19 14:06:21 +08:00
|
|
|
if ( backends[i].be_flags & SLAP_BFLAG_MONITOR ) {
|
2002-06-19 14:44:16 +08:00
|
|
|
vals[0] = backends[i].be_suffix[0];
|
2003-03-24 09:56:56 +08:00
|
|
|
nvals[0] = backends[i].be_nsuffix[0];
|
2003-02-26 05:08:48 +08:00
|
|
|
if( attr_merge( e, ad_monitorContext, vals, nvals ) )
|
|
|
|
{
|
2002-11-02 02:59:52 +08:00
|
|
|
return LDAP_OTHER;
|
2003-02-26 05:08:48 +08:00
|
|
|
}
|
2002-06-19 14:06:21 +08:00
|
|
|
continue;
|
|
|
|
}
|
2003-03-04 06:25:28 +08:00
|
|
|
if ( SLAP_GLUE_SUBORDINATE( &backends[i] ) ) {
|
2001-12-09 10:01:58 +08:00
|
|
|
continue;
|
2002-01-11 06:34:11 +08:00
|
|
|
}
|
2002-05-02 02:50:14 +08:00
|
|
|
for ( j = 0; backends[i].be_suffix[j].bv_val != NULL; j++ ) {
|
|
|
|
vals[0] = backends[i].be_suffix[j];
|
2003-03-24 09:56:56 +08:00
|
|
|
nvals[0] = backends[i].be_nsuffix[0];
|
|
|
|
if( attr_merge( e, ad_namingContexts, vals, nvals ) )
|
2003-02-26 05:08:48 +08:00
|
|
|
{
|
2002-11-02 02:59:52 +08:00
|
|
|
return LDAP_OTHER;
|
2003-02-26 05:08:48 +08:00
|
|
|
}
|
1999-04-20 02:21:53 +08:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
/* altServer unsupported */
|
|
|
|
|
1999-07-02 05:20:45 +08:00
|
|
|
/* supportedControl */
|
2003-02-28 20:34:35 +08:00
|
|
|
if ( controls_root_dse_info( e ) != 0 ) {
|
|
|
|
return LDAP_OTHER;
|
1999-07-02 05:20:45 +08:00
|
|
|
}
|
|
|
|
|
|
|
|
/* supportedExtension */
|
2003-06-01 04:19:02 +08:00
|
|
|
if ( exop_root_dse_info( e ) != 0 ) {
|
|
|
|
return LDAP_OTHER;
|
1999-07-02 05:20:45 +08:00
|
|
|
}
|
|
|
|
|
2003-02-09 05:53:05 +08:00
|
|
|
#ifdef LDAP_SLAPI
|
2002-12-08 01:19:29 +08:00
|
|
|
/* netscape supportedExtension */
|
|
|
|
for ( i = 0; (bv = ns_get_supported_extop(i)) != NULL; i++ ) {
|
|
|
|
vals[0] = *bv;
|
2003-06-01 04:19:02 +08:00
|
|
|
if( attr_merge( e, ad_supportedExtension, vals, NULL )) {
|
2003-02-26 05:08:48 +08:00
|
|
|
return LDAP_OTHER;
|
|
|
|
}
|
2002-12-08 01:19:29 +08:00
|
|
|
}
|
2003-02-09 05:53:05 +08:00
|
|
|
#endif /* LDAP_SLAPI */
|
2002-12-08 01:19:29 +08:00
|
|
|
|
2001-09-09 12:01:07 +08:00
|
|
|
/* supportedFeatures */
|
2003-06-01 04:19:02 +08:00
|
|
|
if( attr_merge( e, ad_supportedFeatures, supportedFeatures, NULL ) ) {
|
2002-11-02 02:59:52 +08:00
|
|
|
return LDAP_OTHER;
|
2003-02-26 05:08:48 +08:00
|
|
|
}
|
2001-09-09 12:01:07 +08:00
|
|
|
|
1999-07-02 05:20:45 +08:00
|
|
|
/* supportedLDAPVersion */
|
1999-04-20 02:21:53 +08:00
|
|
|
for ( i=LDAP_VERSION_MIN; i<=LDAP_VERSION_MAX; i++ ) {
|
2002-07-24 02:35:12 +08:00
|
|
|
char buf[BUFSIZ];
|
2001-12-21 12:44:34 +08:00
|
|
|
if (!( global_allows & SLAP_ALLOW_BIND_V2 ) &&
|
2000-09-01 02:51:15 +08:00
|
|
|
( i < LDAP_VERSION3 ) )
|
|
|
|
{
|
|
|
|
/* version 2 and lower are disallowed */
|
|
|
|
continue;
|
|
|
|
}
|
2002-07-24 02:35:12 +08:00
|
|
|
snprintf(buf, sizeof buf, "%d", i);
|
2002-01-02 19:00:36 +08:00
|
|
|
vals[0].bv_val = buf;
|
|
|
|
vals[0].bv_len = strlen( vals[0].bv_val );
|
2003-02-26 05:08:48 +08:00
|
|
|
if( attr_merge( e, ad_supportedLDAPVersion, vals, NULL ) )
|
|
|
|
{
|
2002-11-02 02:59:52 +08:00
|
|
|
return LDAP_OTHER;
|
2003-02-26 05:08:48 +08:00
|
|
|
}
|
1999-04-20 02:21:53 +08:00
|
|
|
}
|
1999-07-02 05:20:45 +08:00
|
|
|
|
|
|
|
/* supportedSASLMechanism */
|
2000-07-14 06:54:38 +08:00
|
|
|
supportedSASLMechanisms = slap_sasl_mechs( conn );
|
|
|
|
|
1999-08-03 10:37:42 +08:00
|
|
|
if( supportedSASLMechanisms != NULL ) {
|
|
|
|
for ( i=0; supportedSASLMechanisms[i] != NULL; i++ ) {
|
2002-01-02 19:00:36 +08:00
|
|
|
vals[0].bv_val = supportedSASLMechanisms[i];
|
|
|
|
vals[0].bv_len = strlen( vals[0].bv_val );
|
2003-02-26 05:08:48 +08:00
|
|
|
if( attr_merge( e, ad_supportedSASLMechanisms, vals, NULL ) )
|
|
|
|
{
|
2002-11-02 02:59:52 +08:00
|
|
|
return LDAP_OTHER;
|
2003-02-26 05:08:48 +08:00
|
|
|
}
|
1999-08-03 10:37:42 +08:00
|
|
|
}
|
2002-08-24 08:55:24 +08:00
|
|
|
ldap_charray_free( supportedSASLMechanisms );
|
1999-07-02 05:20:45 +08:00
|
|
|
}
|
|
|
|
|
1999-07-16 10:45:46 +08:00
|
|
|
if ( default_referral != NULL ) {
|
2003-02-26 05:08:48 +08:00
|
|
|
if( attr_merge( e, ad_ref, default_referral, NULL /* FIXME */ ) )
|
|
|
|
{
|
2002-11-02 02:59:52 +08:00
|
|
|
return LDAP_OTHER;
|
2003-02-26 05:08:48 +08:00
|
|
|
}
|
1999-07-16 10:45:46 +08:00
|
|
|
}
|
1999-07-02 05:20:45 +08:00
|
|
|
|
2001-10-24 07:29:41 +08:00
|
|
|
if( usr_attr != NULL) {
|
2002-01-05 07:49:58 +08:00
|
|
|
Attribute *a;
|
|
|
|
for( a = usr_attr->e_attrs; a != NULL; a = a->a_next ) {
|
2003-03-24 09:56:56 +08:00
|
|
|
if( attr_merge( e, a->a_desc, a->a_vals,
|
|
|
|
(a->a_nvals == a->a_vals) ? NULL : a->a_nvals ) )
|
2003-02-26 05:08:48 +08:00
|
|
|
{
|
2002-11-02 02:59:52 +08:00
|
|
|
return LDAP_OTHER;
|
2003-02-26 05:08:48 +08:00
|
|
|
}
|
2001-10-24 07:29:41 +08:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2000-05-17 00:22:52 +08:00
|
|
|
*entry = e;
|
|
|
|
return LDAP_SUCCESS;
|
1999-04-20 02:21:53 +08:00
|
|
|
}
|
|
|
|
|
2001-10-24 07:29:41 +08:00
|
|
|
/*
|
|
|
|
* Read the entries specified in fname and merge the attributes
|
|
|
|
* to the user defined rootDSE. Note thaat if we find any errors
|
|
|
|
* what so ever, we will discard the entire entries, print an
|
|
|
|
* error message and return.
|
|
|
|
*/
|
|
|
|
int read_root_dse_file( const char *fname )
|
|
|
|
{
|
|
|
|
FILE *fp;
|
|
|
|
int rc = 0, lineno = 0, lmax = 0;
|
|
|
|
char *buf = NULL;
|
|
|
|
|
|
|
|
if ( (fp = fopen( fname, "r" )) == NULL ) {
|
|
|
|
Debug( LDAP_DEBUG_ANY,
|
|
|
|
"could not open rootdse attr file \"%s\" - absolute path?\n",
|
|
|
|
fname, 0, 0 );
|
|
|
|
perror( fname );
|
|
|
|
return EXIT_FAILURE;
|
|
|
|
}
|
|
|
|
|
2002-11-09 01:13:20 +08:00
|
|
|
usr_attr = (Entry *) SLAP_CALLOC( 1, sizeof(Entry) );
|
|
|
|
if( usr_attr == NULL ) {
|
|
|
|
#ifdef NEW_LOGGING
|
|
|
|
LDAP_LOG( OPERATION, ERR,
|
|
|
|
"read_root_dse_file: SLAP_CALLOC failed", 0, 0, 0 );
|
|
|
|
#else
|
|
|
|
Debug( LDAP_DEBUG_ANY,
|
|
|
|
"read_root_dse_file: SLAP_CALLOC failed", 0, 0, 0 );
|
|
|
|
#endif
|
2003-03-14 17:37:27 +08:00
|
|
|
fclose( fp );
|
2002-11-09 01:13:20 +08:00
|
|
|
return LDAP_OTHER;
|
|
|
|
}
|
2001-10-24 07:29:41 +08:00
|
|
|
usr_attr->e_attrs = NULL;
|
|
|
|
|
|
|
|
while( ldif_read_record( fp, &lineno, &buf, &lmax ) ) {
|
|
|
|
Entry *e = str2entry( buf );
|
2002-01-05 07:49:58 +08:00
|
|
|
Attribute *a;
|
2001-10-24 07:29:41 +08:00
|
|
|
|
|
|
|
if( e == NULL ) {
|
|
|
|
fprintf( stderr, "root_dse: could not parse entry (line=%d)\n",
|
|
|
|
lineno );
|
2003-03-14 17:37:27 +08:00
|
|
|
rc = EXIT_FAILURE;
|
|
|
|
break;
|
2001-10-24 07:29:41 +08:00
|
|
|
}
|
|
|
|
|
2001-12-27 00:42:35 +08:00
|
|
|
/* make sure the DN is the empty DN */
|
|
|
|
if( e->e_nname.bv_len ) {
|
2001-10-24 07:29:41 +08:00
|
|
|
fprintf( stderr,
|
|
|
|
"root_dse: invalid rootDSE - dn=\"%s\" (line=%d)\n",
|
|
|
|
e->e_dn, lineno );
|
|
|
|
entry_free( e );
|
2003-03-14 17:37:27 +08:00
|
|
|
rc = EXIT_FAILURE;
|
|
|
|
break;
|
2001-10-24 07:29:41 +08:00
|
|
|
}
|
|
|
|
|
|
|
|
/*
|
|
|
|
* we found a valid entry, so walk thru all the attributes in the
|
|
|
|
* entry, and add each attribute type and description to the
|
|
|
|
* usr_attr entry
|
|
|
|
*/
|
|
|
|
|
|
|
|
for(a = e->e_attrs; a != NULL; a = a->a_next) {
|
2003-03-24 09:56:56 +08:00
|
|
|
if( attr_merge( usr_attr, a->a_desc, a->a_vals,
|
|
|
|
(a->a_nvals == a->a_vals) ? NULL : a->a_nvals ) )
|
2003-02-26 05:08:48 +08:00
|
|
|
{
|
2003-03-14 17:37:27 +08:00
|
|
|
rc = LDAP_OTHER;
|
|
|
|
break;
|
2003-02-26 05:08:48 +08:00
|
|
|
}
|
2001-10-24 07:29:41 +08:00
|
|
|
}
|
|
|
|
|
|
|
|
entry_free( e );
|
2003-03-14 17:37:27 +08:00
|
|
|
if (rc) break;
|
|
|
|
}
|
|
|
|
|
|
|
|
if (rc) {
|
|
|
|
entry_free( usr_attr );
|
|
|
|
usr_attr = NULL;
|
2001-10-24 07:29:41 +08:00
|
|
|
}
|
|
|
|
|
|
|
|
ch_free( buf );
|
|
|
|
|
2003-03-14 17:37:27 +08:00
|
|
|
fclose( fp );
|
|
|
|
|
2002-01-03 01:05:12 +08:00
|
|
|
Debug(LDAP_DEBUG_CONFIG, "rootDSE file %s read.\n", fname, 0, 0);
|
2001-10-24 07:29:41 +08:00
|
|
|
return rc;
|
|
|
|
}
|