openldap/servers/slapd/back-ldap/add.c

163 lines
3.9 KiB
C
Raw Normal View History

/* add.c - ldap backend add function */
/* $OpenLDAP$ */
2003-11-27 14:35:14 +08:00
/* This work is part of OpenLDAP Software <http://www.openldap.org/>.
*
2004-01-02 03:15:16 +08:00
* Copyright 1999-2004 The OpenLDAP Foundation.
2003-12-09 01:41:40 +08:00
* Portions Copyright 2000-2003 Pierangelo Masarati.
* Portions Copyright 1999-2003 Howard Chu.
2003-11-27 14:35:14 +08:00
* All rights reserved.
*
* Redistribution and use in source and binary forms, with or without
* modification, are permitted only as authorized by the OpenLDAP
* Public License.
*
* A copy of this license is available in the file LICENSE in the
* top-level directory of the distribution or, alternatively, at
* <http://www.OpenLDAP.org/license.html>.
*/
/* ACKNOWLEDGEMENTS:
* This work was initially developed by the Howard Chu for inclusion
* in OpenLDAP Software and subsequently enhanced by Pierangelo
* Masarati.
2001-01-17 15:09:22 +08:00
*/
#include "portable.h"
#include <stdio.h>
#include <ac/string.h>
#include <ac/socket.h>
#include "slap.h"
#include "back-ldap.h"
int
ldap_back_add(
Operation *op,
SlapReply *rs )
{
struct ldapinfo *li = (struct ldapinfo *) op->o_bd->be_private;
struct ldapconn *lc;
2002-01-02 19:00:36 +08:00
int i, j;
Attribute *a;
LDAPMod **attrs;
2002-01-02 19:00:36 +08:00
struct berval mapped;
2004-04-07 12:11:43 +08:00
struct berval mdn = BER_BVNULL;
ber_int_t msgid;
dncookie dc;
2004-02-17 21:34:51 +08:00
int isupdate;
LDAPControl **ctrls = NULL;
2004-05-14 04:25:53 +08:00
#ifdef LDAP_BACK_PROXY_AUTHZ
int rc = LDAP_SUCCESS;
#endif /* LDAP_BACK_PROXY_AUTHZ */
Debug(LDAP_DEBUG_ARGS, "==> ldap_back_add: %s\n", op->o_req_dn.bv_val, 0, 0);
2003-04-04 07:23:56 +08:00
lc = ldap_back_getconn(op, rs);
if ( !lc || !ldap_back_dobind( lc, op, rs ) ) {
return( -1 );
}
/*
* Rewrite the add dn, if needed
*/
dc.rwmap = &li->rwmap;
#ifdef ENABLE_REWRITE
dc.conn = op->o_conn;
dc.rs = rs;
dc.ctx = "addDN";
#else
dc.tofrom = 1;
dc.normalized = 0;
#endif
if ( ldap_back_dn_massage( &dc, &op->o_req_dn, &mdn ) ) {
send_ldap_result( op, rs );
return -1;
}
/* Count number of attributes in entry */
for (i = 1, a = op->oq_add.rs_e->e_attrs; a; i++, a = a->a_next)
;
/* Create array of LDAPMods for ldap_add() */
attrs = (LDAPMod **)ch_malloc(sizeof(LDAPMod *)*i);
#ifdef ENABLE_REWRITE
dc.ctx = "addAttrDN";
#endif
isupdate = be_shadow_update( op );
for (i=0, a=op->oq_add.rs_e->e_attrs; a; a=a->a_next) {
2004-02-17 21:34:51 +08:00
if ( !isupdate && a->a_desc->ad_type->sat_no_user_mod ) {
continue;
}
ldap_back_map(&li->rwmap.rwm_at, &a->a_desc->ad_cname, &mapped,
2003-01-28 00:39:56 +08:00
BACKLDAP_MAP);
2003-01-28 00:48:55 +08:00
if (mapped.bv_val == NULL || mapped.bv_val[0] == '\0') {
continue;
}
attrs[i] = (LDAPMod *)ch_malloc(sizeof(LDAPMod));
if (attrs[i] == NULL) {
continue;
}
attrs[i]->mod_op = LDAP_MOD_BVALUES;
2002-01-02 19:00:36 +08:00
attrs[i]->mod_type = mapped.bv_val;
if ( a->a_desc->ad_type->sat_syntax ==
slap_schema.si_syn_distinguishedName ) {
2002-11-11 02:16:43 +08:00
/*
* FIXME: rewrite could fail; in this case
* the operation should give up, right?
*/
(void)ldap_dnattr_rewrite( &dc, a->a_vals );
2001-02-20 03:14:12 +08:00
}
2002-01-02 19:00:36 +08:00
for (j=0; a->a_vals[j].bv_val; j++);
attrs[i]->mod_vals.modv_bvals = ch_malloc((j+1)*sizeof(struct berval *));
for (j=0; a->a_vals[j].bv_val; j++)
attrs[i]->mod_vals.modv_bvals[j] = &a->a_vals[j];
2002-01-05 19:41:23 +08:00
attrs[i]->mod_vals.modv_bvals[j] = NULL;
i++;
}
2001-02-20 03:14:12 +08:00
attrs[i] = NULL;
2004-05-14 04:25:53 +08:00
ctrls = op->o_ctrls;
#ifdef LDAP_BACK_PROXY_AUTHZ
rc = ldap_back_proxy_authz_ctrl( lc, op, rs, &ctrls );
if ( rc != LDAP_SUCCESS ) {
goto cleanup;
}
#endif /* LDAP_BACK_PROXY_AUTHZ */
rs->sr_err = ldap_add_ext(lc->ld, mdn.bv_val, attrs,
2004-05-14 04:25:53 +08:00
ctrls, NULL, &msgid);
#ifdef LDAP_BACK_PROXY_AUTHZ
cleanup:
if ( ctrls && ctrls != op->o_ctrls ) {
free( ctrls[ 0 ] );
free( ctrls );
}
#endif /* LDAP_BACK_PROXY_AUTHZ */
2002-01-02 19:00:36 +08:00
for (--i; i>= 0; --i) {
ch_free(attrs[i]->mod_vals.modv_bvals);
ch_free(attrs[i]);
2002-01-02 19:00:36 +08:00
}
ch_free(attrs);
if ( mdn.bv_val != op->o_req_dn.bv_val ) {
2001-12-28 12:20:08 +08:00
free( mdn.bv_val );
}
#ifdef LDAP_BACK_PROXY_AUTHZ
if ( rc != LDAP_SUCCESS ) {
send_ldap_result( op, rs );
return -1;
}
#endif /* LDAP_BACK_PROXY_AUTHZ */
return ldap_back_op_result( lc, op, rs, msgid, 1 ) != LDAP_SUCCESS;
}