mirror of
https://git.openldap.org/openldap/openldap.git
synced 2024-12-27 03:20:22 +08:00
c1b5e84e2d
context checking and multiple match resolution via an internal search b) move the candidate listing in a persistent per-thread buffer c) fix bind procedure d) minor cleanup (a) and (b) should address ITS#2935; (b) and (c) should address ITS#3171 A test is also added
218 lines
4.7 KiB
C
218 lines
4.7 KiB
C
/* $OpenLDAP$ */
|
|
/* This work is part of OpenLDAP Software <http://www.openldap.org/>.
|
|
*
|
|
* Copyright 1999-2005 The OpenLDAP Foundation.
|
|
* Portions Copyright 2001-2003 Pierangelo Masarati.
|
|
* Portions Copyright 1999-2003 Howard Chu.
|
|
* All rights reserved.
|
|
*
|
|
* Redistribution and use in source and binary forms, with or without
|
|
* modification, are permitted only as authorized by the OpenLDAP
|
|
* Public License.
|
|
*
|
|
* A copy of this license is available in the file LICENSE in the
|
|
* top-level directory of the distribution or, alternatively, at
|
|
* <http://www.OpenLDAP.org/license.html>.
|
|
*/
|
|
/* ACKNOWLEDGEMENTS:
|
|
* This work was initially developed by the Howard Chu for inclusion
|
|
* in OpenLDAP Software and subsequently enhanced by Pierangelo
|
|
* Masarati.
|
|
*/
|
|
|
|
#include "portable.h"
|
|
|
|
#include <stdio.h>
|
|
|
|
#include "slap.h"
|
|
#include "../back-ldap/back-ldap.h"
|
|
#include "back-meta.h"
|
|
|
|
/*
|
|
* The meta-directory has one suffix, called <suffix>.
|
|
* It handles a pool of target servers, each with a branch suffix
|
|
* of the form <branch X>,<suffix>
|
|
*
|
|
* When the meta-directory receives a request with a dn that belongs
|
|
* to a branch, the corresponding target is invoked. When the dn
|
|
* does not belong to a specific branch, all the targets that
|
|
* are compatible with the dn are selected as candidates, and
|
|
* the request is spawned to all the candidate targets
|
|
*
|
|
* A request is characterized by a dn. The following cases are handled:
|
|
* - the dn is the suffix: <dn> == <suffix>,
|
|
* all the targets are candidates (search ...)
|
|
* - the dn is a branch suffix: <dn> == <branch X>,<suffix>, or
|
|
* - the dn is a subtree of a branch suffix:
|
|
* <dn> == <rdn>,<branch X>,<suffix>,
|
|
* the target is the only candidate.
|
|
*
|
|
* A possible extension will include the handling of multiple suffixes
|
|
*/
|
|
|
|
static int
|
|
meta_back_count_candidates(
|
|
struct metainfo *li,
|
|
struct berval *ndn
|
|
);
|
|
|
|
static int
|
|
meta_back_is_candidate_unique(
|
|
struct metainfo *li,
|
|
struct berval *ndn
|
|
);
|
|
|
|
/*
|
|
* returns 1 if suffix is candidate for dn, otherwise 0
|
|
*
|
|
* Note: this function should never be called if dn is the <suffix>.
|
|
*/
|
|
int
|
|
meta_back_is_candidate(
|
|
struct berval *nsuffix,
|
|
struct berval *ndn
|
|
)
|
|
{
|
|
if ( dnIsSuffix( nsuffix, ndn ) || dnIsSuffix( ndn, nsuffix ) ) {
|
|
/*
|
|
* suffix longer than dn
|
|
*/
|
|
return META_CANDIDATE;
|
|
}
|
|
|
|
return META_NOT_CANDIDATE;
|
|
}
|
|
|
|
/*
|
|
* meta_back_count_candidates
|
|
*
|
|
* returns a count of the possible candidate targets
|
|
* Note: dn MUST be normalized
|
|
*/
|
|
|
|
static int
|
|
meta_back_count_candidates(
|
|
struct metainfo *li,
|
|
struct berval *ndn
|
|
)
|
|
{
|
|
int i, cnt = 0;
|
|
|
|
/*
|
|
* I know assertions should not check run-time values;
|
|
* at present I didn't find a place for such checks
|
|
* after config.c
|
|
*/
|
|
assert( li->mi_targets != NULL );
|
|
assert( li->mi_ntargets != 0 );
|
|
|
|
for ( i = 0; i < li->mi_ntargets; ++i ) {
|
|
if ( meta_back_is_candidate( &li->mi_targets[ i ]->mt_nsuffix, ndn ) )
|
|
{
|
|
++cnt;
|
|
}
|
|
}
|
|
|
|
return cnt;
|
|
}
|
|
|
|
/*
|
|
* meta_back_is_candidate_unique
|
|
*
|
|
* checks whether a candidate is unique
|
|
* Note: dn MUST be normalized
|
|
*/
|
|
static int
|
|
meta_back_is_candidate_unique(
|
|
struct metainfo *li,
|
|
struct berval *ndn
|
|
)
|
|
{
|
|
return ( meta_back_count_candidates( li, ndn ) == 1 );
|
|
}
|
|
|
|
/*
|
|
* meta_back_select_unique_candidate
|
|
*
|
|
* returns the index of the candidate in case it is unique, otherwise -1
|
|
* Note: dn MUST be normalized.
|
|
* Note: if defined, the default candidate is returned in case of no match.
|
|
*/
|
|
int
|
|
meta_back_select_unique_candidate(
|
|
struct metainfo *li,
|
|
struct berval *ndn
|
|
)
|
|
{
|
|
int i, candidate = META_TARGET_NONE;
|
|
|
|
for ( i = 0; i < li->mi_ntargets; ++i ) {
|
|
if ( meta_back_is_candidate( &li->mi_targets[ i ]->mt_nsuffix, ndn ) )
|
|
{
|
|
if ( candidate == META_TARGET_NONE ) {
|
|
candidate = i;
|
|
|
|
} else {
|
|
return META_TARGET_MULTIPLE;
|
|
}
|
|
}
|
|
}
|
|
|
|
return candidate;
|
|
}
|
|
|
|
/*
|
|
* meta_clear_unused_candidates
|
|
*
|
|
* clears all candidates except candidate
|
|
*/
|
|
int
|
|
meta_clear_unused_candidates(
|
|
Operation *op,
|
|
struct metaconn *lc,
|
|
int candidate
|
|
)
|
|
{
|
|
struct metainfo *li = ( struct metainfo * )op->o_bd->be_private;
|
|
int i;
|
|
char *candidates = meta_back_candidates_get( op );
|
|
|
|
for ( i = 0; i < li->mi_ntargets; ++i ) {
|
|
if ( i == candidate ) {
|
|
continue;
|
|
}
|
|
candidates[ i ] = META_NOT_CANDIDATE;
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
/*
|
|
* meta_clear_one_candidate
|
|
*
|
|
* clears the selected candidate
|
|
*/
|
|
int
|
|
meta_clear_one_candidate(
|
|
struct metasingleconn *lsc
|
|
)
|
|
{
|
|
if ( lsc->msc_ld ) {
|
|
ldap_unbind_ext_s( lsc->msc_ld, NULL, NULL );
|
|
lsc->msc_ld = NULL;
|
|
}
|
|
|
|
if ( !BER_BVISNULL( &lsc->msc_bound_ndn ) ) {
|
|
ber_memfree( lsc->msc_bound_ndn.bv_val );
|
|
BER_BVZERO( &lsc->msc_bound_ndn );
|
|
}
|
|
|
|
if ( !BER_BVISNULL( &lsc->msc_cred ) ) {
|
|
ber_memfree( lsc->msc_cred.bv_val );
|
|
BER_BVZERO( &lsc->msc_cred );
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|