mirror of
https://git.openldap.org/openldap/openldap.git
synced 2024-12-15 03:01:09 +08:00
7e6ad5100c
Most function and variable definitions are now preceded by its extern definition, for error checking. Retyped a number of functions, usually to return void. Fixed a number of printf format errors. API changes (in ldap/include): Added avl_dup_ok, avl_prefixapply, removed ber_fatten (probably typo for ber_flatten), retyped ldap_sort_strcasecmp, grew lutil.h. A number of `extern' declarations are left (some added by protoize), to be cleaned away later. Mostly strdup(), strcasecmp(), mktemp(), optind, optarg, errno.
517 lines
12 KiB
C
517 lines
12 KiB
C
/*
|
|
* Copyright (c) 1990, 1994 Regents of the University of Michigan.
|
|
* All rights reserved.
|
|
*
|
|
* cldap.c - synchronous, retrying interface to the cldap protocol
|
|
*/
|
|
|
|
#include "portable.h"
|
|
|
|
#ifdef LDAP_CONNECTIONLESS
|
|
|
|
#ifndef lint
|
|
static char copyright[] = "@(#) Copyright (c) 1990, 1994 Regents of the University of Michigan.\nAll rights reserved.\n";
|
|
#endif
|
|
|
|
#include <stdio.h>
|
|
#include <stdlib.h>
|
|
|
|
#include <ac/errno.h>
|
|
#include <ac/socket.h>
|
|
#include <ac/string.h>
|
|
#include <ac/time.h>
|
|
#include <ac/unistd.h>
|
|
|
|
#include "ldap-int.h"
|
|
|
|
#define DEF_CLDAP_TIMEOUT 3
|
|
#define DEF_CLDAP_TRIES 4
|
|
|
|
|
|
struct cldap_retinfo {
|
|
int cri_maxtries;
|
|
int cri_try;
|
|
int cri_useaddr;
|
|
long cri_timeout;
|
|
};
|
|
|
|
static int add_addr LDAP_P((
|
|
LDAP *ld, struct sockaddr *sap ));
|
|
static int cldap_result LDAP_P((
|
|
LDAP *ld, int msgid, LDAPMessage **res,
|
|
struct cldap_retinfo *crip, char *base ));
|
|
static int cldap_parsemsg LDAP_P((
|
|
LDAP *ld, int msgid, BerElement *ber,
|
|
LDAPMessage **res, char *base ));
|
|
|
|
/*
|
|
* cldap_open - initialize and connect to an ldap server. A magic cookie to
|
|
* be used for future communication is returned on success, NULL on failure.
|
|
*
|
|
* Example:
|
|
* LDAP *ld;
|
|
* ld = cldap_open( hostname, port );
|
|
*/
|
|
|
|
LDAP *
|
|
cldap_open( char *host, int port )
|
|
{
|
|
int s;
|
|
unsigned long address;
|
|
struct sockaddr_in sock;
|
|
struct hostent *hp;
|
|
LDAP *ld;
|
|
char *p;
|
|
int i;
|
|
|
|
Debug( LDAP_DEBUG_TRACE, "ldap_open\n", 0, 0, 0 );
|
|
|
|
if ( (s = socket( AF_INET, SOCK_DGRAM, 0 )) < 0 ) {
|
|
return( NULL );
|
|
}
|
|
|
|
sock.sin_addr.s_addr = 0;
|
|
sock.sin_family = AF_INET;
|
|
sock.sin_port = 0;
|
|
if ( bind(s, (struct sockaddr *) &sock, sizeof(sock)) < 0) {
|
|
close( s );
|
|
return( NULL );
|
|
}
|
|
|
|
if (( ld = ldap_init( host, port )) == NULL ) {
|
|
close( s );
|
|
return( NULL );
|
|
}
|
|
if ( (ld->ld_sb.sb_fromaddr = (void *) calloc( 1,
|
|
sizeof( struct sockaddr ))) == NULL ) {
|
|
|
|
ldap_ld_free(ld, 1);
|
|
return( NULL );
|
|
}
|
|
ld->ld_sb.sb_sd = s;
|
|
ld->ld_sb.sb_naddr = 0;
|
|
ld->ld_version = LDAP_VERSION;
|
|
|
|
sock.sin_family = AF_INET;
|
|
sock.sin_port = htons( port );
|
|
|
|
/*
|
|
* 'host' may be a space-separated list.
|
|
*/
|
|
if ( host != NULL ) {
|
|
for ( ; host != NULL; host = p ) {
|
|
if (( p = strchr( host, ' ' )) != NULL ) {
|
|
for (*p++ = '\0'; *p == ' '; p++) {
|
|
;
|
|
}
|
|
}
|
|
|
|
address = inet_addr( host );
|
|
/* This was just a test for -1 until OSF1 let inet_addr return
|
|
unsigned int, which is narrower than 'unsigned long address' */
|
|
if ( address == 0xffffffff || address == (unsigned long) -1 ) {
|
|
if ( (hp = gethostbyname( host )) == NULL ) {
|
|
errno = EHOSTUNREACH;
|
|
continue;
|
|
}
|
|
|
|
for ( i = 0; hp->h_addr_list[ i ] != 0; ++i ) {
|
|
SAFEMEMCPY( (char *)&sock.sin_addr.s_addr,
|
|
(char *)hp->h_addr_list[ i ],
|
|
sizeof(sock.sin_addr.s_addr));
|
|
if ( add_addr( ld, (struct sockaddr *)&sock ) < 0 ) {
|
|
ldap_ld_free( ld, 1 );
|
|
return( NULL );
|
|
}
|
|
}
|
|
|
|
} else {
|
|
sock.sin_addr.s_addr = address;
|
|
if ( add_addr( ld, (struct sockaddr *)&sock ) < 0 ) {
|
|
ldap_ld_free( ld, 1 );
|
|
return( NULL );
|
|
}
|
|
}
|
|
|
|
if ( ld->ld_host == NULL ) {
|
|
ld->ld_host = strdup( host );
|
|
}
|
|
}
|
|
|
|
} else {
|
|
address = INADDR_LOOPBACK;
|
|
sock.sin_addr.s_addr = htonl( address );
|
|
if ( add_addr( ld, (struct sockaddr *)&sock ) < 0 ) {
|
|
ldap_ld_free( ld, 1 );
|
|
return( NULL );
|
|
}
|
|
}
|
|
|
|
if ( ld->ld_sb.sb_addrs == NULL
|
|
#ifdef LDAP_API_FEATURE_X_OPENLDAP_V2_REFERRALS
|
|
|| ( ld->ld_defconn = ldap_new_connection( ld, NULL, 1,0,0 )) == NULL
|
|
#endif /* LDAP_API_FEATURE_X_OPENLDAP_V2_REFERRALS */
|
|
) {
|
|
ldap_ld_free( ld, 0 );
|
|
return( NULL );
|
|
}
|
|
|
|
ld->ld_sb.sb_useaddr = ld->ld_sb.sb_addrs[ 0 ];
|
|
cldap_setretryinfo( ld, 0, 0 );
|
|
|
|
#ifdef LDAP_DEBUG
|
|
putchar( '\n' );
|
|
for ( i = 0; i < ld->ld_sb.sb_naddr; ++i ) {
|
|
Debug( LDAP_DEBUG_TRACE, "end of cldap_open address %d is %s\n",
|
|
i, inet_ntoa( ((struct sockaddr_in *)
|
|
ld->ld_sb.sb_addrs[ i ])->sin_addr ), 0 );
|
|
}
|
|
#endif
|
|
|
|
return( ld );
|
|
}
|
|
|
|
|
|
|
|
void
|
|
cldap_close( LDAP *ld )
|
|
{
|
|
ldap_ld_free( ld, 0 );
|
|
}
|
|
|
|
|
|
void
|
|
cldap_setretryinfo( LDAP *ld, int tries, int timeout )
|
|
{
|
|
ld->ld_cldaptries = ( tries <= 0 ) ? DEF_CLDAP_TRIES : tries;
|
|
ld->ld_cldaptimeout = ( timeout <= 0 ) ? DEF_CLDAP_TIMEOUT : timeout;
|
|
}
|
|
|
|
|
|
int
|
|
cldap_search_s( LDAP *ld, char *base, int scope, char *filter, char **attrs,
|
|
int attrsonly, LDAPMessage **res, char *logdn )
|
|
{
|
|
int ret, msgid;
|
|
struct cldap_retinfo cri;
|
|
|
|
*res = NULLMSG;
|
|
|
|
(void) memset( &cri, 0, sizeof( cri ));
|
|
|
|
if ( logdn != NULL ) {
|
|
ld->ld_cldapdn = logdn;
|
|
} else if ( ld->ld_cldapdn == NULL ) {
|
|
ld->ld_cldapdn = "";
|
|
}
|
|
|
|
do {
|
|
if ( cri.cri_try != 0 ) {
|
|
--ld->ld_msgid; /* use same id as before */
|
|
}
|
|
ld->ld_sb.sb_useaddr = ld->ld_sb.sb_addrs[ cri.cri_useaddr ];
|
|
|
|
Debug( LDAP_DEBUG_TRACE, "cldap_search_s try %d (to %s)\n",
|
|
cri.cri_try, inet_ntoa( ((struct sockaddr_in *)
|
|
ld->ld_sb.sb_useaddr)->sin_addr ), 0 );
|
|
|
|
if ( (msgid = ldap_search( ld, base, scope, filter, attrs,
|
|
attrsonly )) == -1 ) {
|
|
return( ld->ld_errno );
|
|
}
|
|
#ifndef LDAP_NOCACHE
|
|
if ( ld->ld_cache != NULL && ld->ld_responses != NULL ) {
|
|
Debug( LDAP_DEBUG_TRACE, "cldap_search_s res from cache\n",
|
|
0, 0, 0 );
|
|
*res = ld->ld_responses;
|
|
ld->ld_responses = ld->ld_responses->lm_next;
|
|
return( ldap_result2error( ld, *res, 0 ));
|
|
}
|
|
#endif /* LDAP_NOCACHE */
|
|
ret = cldap_result( ld, msgid, res, &cri, base );
|
|
} while (ret == -1);
|
|
|
|
return( ret );
|
|
}
|
|
|
|
|
|
static int
|
|
add_addr( LDAP *ld, struct sockaddr *sap )
|
|
{
|
|
struct sockaddr *newsap, **addrs;
|
|
|
|
if (( newsap = (struct sockaddr *)malloc( sizeof( struct sockaddr )))
|
|
== NULL ) {
|
|
ld->ld_errno = LDAP_NO_MEMORY;
|
|
return( -1 );
|
|
}
|
|
|
|
if ( ld->ld_sb.sb_naddr == 0 ) {
|
|
addrs = (struct sockaddr **)malloc( sizeof(struct sockaddr *));
|
|
} else {
|
|
addrs = (struct sockaddr **)realloc( ld->ld_sb.sb_addrs,
|
|
( ld->ld_sb.sb_naddr + 1 ) * sizeof(struct sockaddr *));
|
|
}
|
|
|
|
if ( addrs == NULL ) {
|
|
free( newsap );
|
|
ld->ld_errno = LDAP_NO_MEMORY;
|
|
return( -1 );
|
|
}
|
|
|
|
SAFEMEMCPY( (char *)newsap, (char *)sap, sizeof( struct sockaddr ));
|
|
addrs[ ld->ld_sb.sb_naddr++ ] = newsap;
|
|
ld->ld_sb.sb_addrs = (void **)addrs;
|
|
return( 0 );
|
|
}
|
|
|
|
|
|
static int
|
|
cldap_result( LDAP *ld, int msgid, LDAPMessage **res,
|
|
struct cldap_retinfo *crip, char *base )
|
|
{
|
|
Sockbuf *sb = &ld->ld_sb;
|
|
BerElement ber;
|
|
char *logdn;
|
|
int ret, id, fromaddr, i;
|
|
struct timeval tv;
|
|
|
|
fromaddr = -1;
|
|
|
|
if ( crip->cri_try == 0 ) {
|
|
crip->cri_maxtries = ld->ld_cldaptries * sb->sb_naddr;
|
|
crip->cri_timeout = ld->ld_cldaptimeout;
|
|
crip->cri_useaddr = 0;
|
|
Debug( LDAP_DEBUG_TRACE, "cldap_result tries %d timeout %d\n",
|
|
ld->ld_cldaptries, ld->ld_cldaptimeout, 0 );
|
|
}
|
|
|
|
if ((tv.tv_sec = crip->cri_timeout / sb->sb_naddr) < 1 ) {
|
|
tv.tv_sec = 1;
|
|
}
|
|
tv.tv_usec = 0;
|
|
|
|
Debug( LDAP_DEBUG_TRACE,
|
|
"cldap_result waiting up to %ld seconds for a response\n",
|
|
(long) tv.tv_sec, 0, 0 );
|
|
ber_init_w_nullc( &ber, 0 );
|
|
ldap_set_ber_options( ld, &ber );
|
|
|
|
if ( cldap_getmsg( ld, &tv, &ber ) == -1 ) {
|
|
ret = ld->ld_errno;
|
|
Debug( LDAP_DEBUG_TRACE, "cldap_getmsg returned -1 (%d)\n",
|
|
ret, 0, 0 );
|
|
} else if ( ld->ld_errno == LDAP_TIMEOUT ) {
|
|
Debug( LDAP_DEBUG_TRACE,
|
|
"cldap_result timed out\n", 0, 0, 0 );
|
|
/*
|
|
* It timed out; is it time to give up?
|
|
*/
|
|
if ( ++crip->cri_try >= crip->cri_maxtries ) {
|
|
ret = LDAP_TIMEOUT;
|
|
--crip->cri_try;
|
|
} else {
|
|
if ( ++crip->cri_useaddr >= sb->sb_naddr ) {
|
|
/*
|
|
* new round: reset address to first one and
|
|
* double the timeout
|
|
*/
|
|
crip->cri_useaddr = 0;
|
|
crip->cri_timeout <<= 1;
|
|
}
|
|
ret = -1;
|
|
}
|
|
|
|
} else {
|
|
/*
|
|
* Got a response. It should look like:
|
|
* { msgid, logdn, { searchresponse...}}
|
|
*/
|
|
logdn = NULL;
|
|
|
|
if ( ber_scanf( &ber, "ia", &id, &logdn ) == LBER_ERROR ) {
|
|
free( ber.ber_buf ); /* gack! */
|
|
ret = LDAP_DECODING_ERROR;
|
|
Debug( LDAP_DEBUG_TRACE,
|
|
"cldap_result: ber_scanf returned LBER_ERROR (%d)\n",
|
|
ret, 0, 0 );
|
|
} else if ( id != msgid ) {
|
|
free( ber.ber_buf ); /* gack! */
|
|
Debug( LDAP_DEBUG_TRACE,
|
|
"cldap_result: looking for msgid %d; got %d\n",
|
|
msgid, id, 0 );
|
|
ret = -1; /* ignore and keep looking */
|
|
} else {
|
|
/*
|
|
* got a result: determine which server it came from
|
|
* decode into ldap message chain
|
|
*/
|
|
for ( fromaddr = 0; fromaddr < sb->sb_naddr; ++fromaddr ) {
|
|
if ( memcmp( &((struct sockaddr_in *)
|
|
sb->sb_addrs[ fromaddr ])->sin_addr,
|
|
&((struct sockaddr_in *)sb->sb_fromaddr)->sin_addr,
|
|
sizeof( struct in_addr )) == 0 ) {
|
|
break;
|
|
}
|
|
}
|
|
ret = cldap_parsemsg( ld, msgid, &ber, res, base );
|
|
free( ber.ber_buf ); /* gack! */
|
|
Debug( LDAP_DEBUG_TRACE,
|
|
"cldap_result got result (%d)\n", ret, 0, 0 );
|
|
}
|
|
|
|
if ( logdn != NULL ) {
|
|
free( logdn );
|
|
}
|
|
}
|
|
|
|
|
|
/*
|
|
* If we are giving up (successfully or otherwise) then
|
|
* abandon any outstanding requests.
|
|
*/
|
|
if ( ret != -1 ) {
|
|
i = crip->cri_try;
|
|
if ( i >= sb->sb_naddr ) {
|
|
i = sb->sb_naddr - 1;
|
|
}
|
|
|
|
for ( ; i >= 0; --i ) {
|
|
if ( i == fromaddr ) {
|
|
continue;
|
|
}
|
|
sb->sb_useaddr = sb->sb_addrs[ i ];
|
|
Debug( LDAP_DEBUG_TRACE, "cldap_result abandoning id %d (to %s)\n",
|
|
msgid, inet_ntoa( ((struct sockaddr_in *)
|
|
sb->sb_useaddr)->sin_addr ), 0 );
|
|
(void) ldap_abandon( ld, msgid );
|
|
}
|
|
}
|
|
|
|
return( ld->ld_errno = ret );
|
|
}
|
|
|
|
|
|
static int
|
|
cldap_parsemsg( LDAP *ld, int msgid, BerElement *ber,
|
|
LDAPMessage **res, char *base )
|
|
{
|
|
unsigned long tag, len;
|
|
int baselen, slen, rc;
|
|
char *dn, *p, *cookie;
|
|
LDAPMessage *chain, *prev, *ldm;
|
|
struct berval *bv;
|
|
|
|
rc = LDAP_DECODING_ERROR; /* pessimistic */
|
|
ldm = chain = prev = NULLMSG;
|
|
baselen = ( base == NULL ) ? 0 : strlen( base );
|
|
bv = NULL;
|
|
|
|
for ( tag = ber_first_element( ber, &len, &cookie );
|
|
tag != LBER_DEFAULT && rc != LDAP_SUCCESS;
|
|
tag = ber_next_element( ber, &len, cookie )) {
|
|
if (( ldm = (LDAPMessage *)calloc( 1, sizeof(LDAPMessage)))
|
|
== NULL || ( ldm->lm_ber = ldap_alloc_ber_with_options( ld ))
|
|
== NULLBER ) {
|
|
rc = LDAP_NO_MEMORY;
|
|
break; /* return w/error*/
|
|
}
|
|
ldm->lm_msgid = msgid;
|
|
ldm->lm_msgtype = tag;
|
|
|
|
if ( tag == LDAP_RES_SEARCH_RESULT ) {
|
|
Debug( LDAP_DEBUG_TRACE, "cldap_parsemsg got search result\n",
|
|
0, 0, 0 );
|
|
|
|
if ( ber_get_stringal( ber, &bv ) == LBER_DEFAULT ) {
|
|
break; /* return w/error */
|
|
}
|
|
|
|
if ( ber_printf( ldm->lm_ber, "to", tag, bv->bv_val,
|
|
bv->bv_len ) == -1 ) {
|
|
break; /* return w/error */
|
|
}
|
|
ber_bvfree( bv );
|
|
bv = NULL;
|
|
rc = LDAP_SUCCESS;
|
|
|
|
} else if ( tag == LDAP_RES_SEARCH_ENTRY ) {
|
|
if ( ber_scanf( ber, "{aO", &dn, &bv ) == LBER_ERROR ) {
|
|
break; /* return w/error */
|
|
}
|
|
Debug( LDAP_DEBUG_TRACE, "cldap_parsemsg entry %s\n", dn, 0, 0 );
|
|
if ( dn != NULL && *(dn + ( slen = strlen(dn)) - 1) == '*' &&
|
|
baselen > 0 ) {
|
|
/*
|
|
* substitute original searchbase for trailing '*'
|
|
*/
|
|
if (( p = (char *)malloc( slen + baselen )) == NULL ) {
|
|
rc = LDAP_NO_MEMORY;
|
|
free( dn );
|
|
break; /* return w/error */
|
|
}
|
|
strcpy( p, dn );
|
|
strcpy( p + slen - 1, base );
|
|
free( dn );
|
|
dn = p;
|
|
}
|
|
|
|
if ( ber_printf( ldm->lm_ber, "t{so}", tag, dn, bv->bv_val,
|
|
bv->bv_len ) == -1 ) {
|
|
break; /* return w/error */
|
|
}
|
|
free( dn );
|
|
ber_bvfree( bv );
|
|
bv = NULL;
|
|
|
|
} else {
|
|
Debug( LDAP_DEBUG_TRACE, "cldap_parsemsg got unknown tag %lu\n",
|
|
tag, 0, 0 );
|
|
rc = LDAP_PROTOCOL_ERROR;
|
|
break; /* return w/error */
|
|
}
|
|
|
|
/* Reset message ber so we can read from it later. Gack! */
|
|
ldm->lm_ber->ber_end = ldm->lm_ber->ber_ptr;
|
|
ldm->lm_ber->ber_ptr = ldm->lm_ber->ber_buf;
|
|
|
|
#ifdef LDAP_DEBUG
|
|
if ( ldap_debug & LDAP_DEBUG_PACKETS ) {
|
|
fprintf( stderr, "cldap_parsemsg add message id %d type %d:\n",
|
|
ldm->lm_msgid, ldm->lm_msgtype );
|
|
ber_dump( ldm->lm_ber, 1 );
|
|
}
|
|
#endif /* LDAP_DEBUG */
|
|
|
|
#ifndef LDAP_NOCACHE
|
|
if ( ld->ld_cache != NULL ) {
|
|
ldap_add_result_to_cache( ld, ldm );
|
|
}
|
|
#endif /* LDAP_NOCACHE */
|
|
|
|
if ( chain == NULL ) {
|
|
chain = ldm;
|
|
} else {
|
|
prev->lm_chain = ldm;
|
|
}
|
|
prev = ldm;
|
|
ldm = NULL;
|
|
}
|
|
|
|
/* dispose of any leftovers */
|
|
if ( ldm != NULL ) {
|
|
if ( ldm->lm_ber != NULLBER ) {
|
|
ber_free( ldm->lm_ber, 1 );
|
|
}
|
|
free( ldm );
|
|
}
|
|
if ( bv != NULL ) {
|
|
ber_bvfree( bv );
|
|
}
|
|
|
|
/* return chain, calling result2error if we got anything at all */
|
|
*res = chain;
|
|
return(( *res == NULLMSG ) ? rc : ldap_result2error( ld, *res, 0 ));
|
|
}
|
|
#endif /* LDAP_CONNECTIONLESS */
|