/* * Copyright (c) 1995 Regents of the University of Michigan. * All rights reserved. * * Redistribution and use in source and binary forms are permitted * provided that this notice is preserved and that due credit is given * to the University of Michigan at Ann Arbor. The name of the University * may not be used to endorse or promote products derived from this * software without specific prior written permission. This software * is provided ``as is'' without express or implied warranty. */ #include "portable.h" #include #include #include #include "ldapconfig.h" #include "slap.h" void do_search( Connection *conn, /* where to send results */ Operation *op /* info about the op to which we're responding */ ) { int i, err; int scope, deref, attrsonly; int sizelimit, timelimit; char *base = NULL, *fstr = NULL; Filter *filter = NULL; char **attrs = NULL; Backend *be; Debug( LDAP_DEBUG_TRACE, "do_search\n", 0, 0, 0 ); /* * Parse the search request. It looks like this: * * SearchRequest := [APPLICATION 3] SEQUENCE { * baseObject DistinguishedName, * scope ENUMERATED { * baseObject (0), * singleLevel (1), * wholeSubtree (2) * }, * derefAliases ENUMERATED { * neverDerefaliases (0), * derefInSearching (1), * derefFindingBaseObj (2), * alwaysDerefAliases (3) * }, * sizelimit INTEGER (0 .. 65535), * timelimit INTEGER (0 .. 65535), * attrsOnly BOOLEAN, * filter Filter, * attributes SEQUENCE OF AttributeType * } */ /* baseObject, scope, derefAliases, sizelimit, timelimit, attrsOnly */ if ( ber_scanf( op->o_ber, "{aiiiib", &base, &scope, &deref, &sizelimit, &timelimit, &attrsonly ) == LBER_ERROR ) { send_ldap_result( conn, op, LDAP_PROTOCOL_ERROR, NULL, "" ); goto return_results; } if ( scope != LDAP_SCOPE_BASE && scope != LDAP_SCOPE_ONELEVEL && scope != LDAP_SCOPE_SUBTREE ) { send_ldap_result( conn, op, LDAP_PROTOCOL_ERROR, NULL, "Unknown search scope" ); goto return_results; } (void) dn_normalize_case( base ); Debug( LDAP_DEBUG_ARGS, "SRCH \"%s\" %d %d", base, scope, deref ); Debug( LDAP_DEBUG_ARGS, " %d %d %d\n", sizelimit, timelimit, attrsonly); /* filter - returns a "normalized" version */ if ( (err = get_filter( conn, op->o_ber, &filter, &fstr )) != 0 ) { send_ldap_result( conn, op, err, NULL, "Bad search filter" ); goto return_results; } Debug( LDAP_DEBUG_ARGS, " filter: %s\n", fstr, 0, 0 ); /* attributes */ if ( ber_scanf( op->o_ber, "{v}}", &attrs ) == LBER_ERROR ) { send_ldap_result( conn, op, LDAP_PROTOCOL_ERROR, NULL, "" ); goto return_results; } Debug( LDAP_DEBUG_ARGS, " attrs:", 0, 0, 0 ); if ( attrs != NULL ) { for ( i = 0; attrs[i] != NULL; i++ ) { attr_normalize( attrs[i] ); Debug( LDAP_DEBUG_ARGS, " %s", attrs[i], 0, 0 ); } } Debug( LDAP_DEBUG_ARGS, "\n", 0, 0, 0 ); Statslog( LDAP_DEBUG_STATS, "conn=%d op=%d SRCH base=\"%s\" scope=%d filter=\"%s\"\n", conn->c_connid, op->o_opid, base, scope, fstr ); #if defined( SLAPD_MONITOR_DN ) || defined( SLAPD_CONFIG_DN ) || defined( SLAPD_SCHEMA_DN ) if ( scope == LDAP_SCOPE_BASE ) { #if defined( SLAPD_MONITOR_DN ) if ( strcmp( base, SLAPD_MONITOR_DN ) == 0 ) { monitor_info( conn, op ); goto return_results; } #endif #if defined( SLAPD_CONFIG_DN ) if ( strcmp( base, SLAPD_CONFIG_DN ) == 0 ) { config_info( conn, op ); goto return_results; } #endif #if defined( SLAPD_SCHEMA_DN ) if ( strcmp( base, SLAPD_SCHEMA_DN ) == 0 ) { schema_info( conn, op ); goto return_results; } #endif } #endif /* monitor or config or schema dn */ if ( strcmp( base, LDAP_ROOT_DSE ) == 0 && scope == LDAP_SCOPE_BASE ) { root_dse_info( conn, op, attrs, attrsonly ); goto return_results; } /* * We could be serving multiple database backends. Select the * appropriate one, or send a referral to our "referral server" * if we don't hold it. */ if ( (be = select_backend( base )) == NULL ) { send_ldap_result( conn, op, LDAP_PARTIAL_RESULTS, NULL, default_referral ); goto return_results; } /* translate the base if it matches an aliased base part */ base = suffixAlias ( base, op, be ); /* actually do the search and send the result(s) */ if ( be->be_search ) { (*be->be_search)( be, conn, op, base, scope, deref, sizelimit, timelimit, filter, fstr, attrs, attrsonly ); } else { send_ldap_result( conn, op, LDAP_UNWILLING_TO_PERFORM, NULL, "Function not implemented" ); } return_results:; if( base != NULL) free( base ); if( fstr != NULL) free( fstr ); if( filter != NULL) filter_free( filter ); if ( attrs != NULL ) { charray_free( attrs ); } }