mirror of
https://git.openldap.org/openldap/openldap.git
synced 2024-12-27 03:20:22 +08:00
f11c6b27e7
Now related ITSes need be audited and possibly closed.
Enhancements:
- re-styled code for better readability
- upgraded backend API to reflect recent changes
- LDAP schema is checked when loading SQL/LDAP mapping
- AttributeDescription/ObjectClass pointers used for more efficient
mapping lookup
- bervals used where string length is required often
- atomized write operations by committing at the end of each operation
and defaulting connection closure to rollback
- added LDAP access control to write operations
- fully implemented modrdn (with rdn attrs change, deleteoldrdn,
access check, parent/children check and more)
- added parent access control, children control to delete operation
- added structuralObjectClass operational attribute check and
value return on search
- added hasSubordinate operational attribute on demand
- search limits are appropriately enforced
- function backsql_strcat() has been made more efficient
- concat function has been made configurable by means of a pattern
- added config switches:
- fail_if_no_mapping write operations fail if there is no mapping
- has_ldapinfo_dn_ru overrides autodetect
- concat_pattern a string containing two '?' is used
(note that "?||?" should be more portable
than builtin function "CONCAT(?,?)")
- strcast_func cast of string constants in "SELECT DISTINCT statements (needed by PostgreSQL)
- upper_needs_cast cast the argument of upper when required
(basically when building dn substring queries)
Todo:
- add security checks for SQL statements that can be injected (?)
- re-test with previously supported RDBMs
- replace dn_ru and so with normalized dn (no need for upper() and so
in dn match)
- implement a backsql_normalize() function to replace the upper()
conversion routines
- note that subtree deletion, subtree renaming and so could be easily
implemented (rollback and consistency checks are available :)
- implement "lastmod" and other operational stuff (ldap_entries table ?)
78 lines
4.1 KiB
SQL
78 lines
4.1 KiB
SQL
--mappings
|
|
|
|
insert into ldap_oc_mappings (id,name,keytbl,keycol,create_proc,create_keyval,delete_proc,expect_return)
|
|
values (1,'inetOrgPerson','persons','id','insert into persons (id,name,surname) values ((select max(id)+1 from persons),'''','''')','select max(id) from persons',NULL,0);
|
|
|
|
insert into ldap_oc_mappings (id,name,keytbl,keycol,create_proc,create_keyval,delete_proc,expect_return)
|
|
values (2,'document','documents','id',NULL,NULL,NULL,0);
|
|
|
|
insert into ldap_oc_mappings (id,name,keytbl,keycol,create_proc,create_keyval,delete_proc,expect_return)
|
|
values (3,'organization','institutes','id',NULL,NULL,NULL,0);
|
|
|
|
|
|
insert into ldap_attr_mappings (id,oc_map_id,name,sel_expr,from_tbls,join_where,add_proc,delete_proc,param_order,expect_return)
|
|
values (1,1,'cn','case when persons.name!='''' and persons.surname!='''' then persons.name||'' ''||persons.surname when persons.surname!='''' then persons.surname when persons.name!='''' then persons.name else '''' end','persons',NULL,NULL,NULL,3,0);
|
|
|
|
insert into ldap_attr_mappings (id,oc_map_id,name,sel_expr,from_tbls,join_where,add_proc,delete_proc,param_order,expect_return)
|
|
values (2,1,'telephoneNumber','phones.phone','persons,phones',
|
|
'phones.pers_id=persons.id',NULL,NULL,3,0);
|
|
|
|
insert into ldap_attr_mappings (id,oc_map_id,name,sel_expr,from_tbls,join_where,add_proc,delete_proc,param_order,expect_return)
|
|
values (3,1,'sn','persons.surname','persons',NULL,'update persons set surname=? where id=?',NULL,3,0);
|
|
|
|
insert into ldap_attr_mappings (id,oc_map_id,name,sel_expr,from_tbls,join_where,add_proc,delete_proc,param_order,expect_return)
|
|
values (6,1,'givenName','persons.name','persons',NULL,'update persons set name=? where id=?',NULL,3,0);
|
|
|
|
insert into ldap_attr_mappings (id,oc_map_id,name,sel_expr,from_tbls,join_where,add_proc,delete_proc,param_order,expect_return)
|
|
values (4,2,'description','documents.abstract','documents',NULL,NULL,NULL,3,0);
|
|
|
|
insert into ldap_attr_mappings (id,oc_map_id,name,sel_expr,from_tbls,join_where,add_proc,delete_proc,param_order,expect_return)
|
|
values (5,2,'documentTitle','documents.title','documents',NULL,NULL,NULL,3,0);
|
|
|
|
-- insert into ldap_attr_mappings (id,oc_map_id,name,sel_expr,from_tbls,join_where,add_proc,delete_proc,param_order,expect_return)
|
|
-- values (6,2,'documentAuthor','persons.name','persons,documents,authors_docs',
|
|
-- 'persons.id=authors_docs.pers_id AND documents.id=authors_docs.doc_id',
|
|
-- NULL,NULL,3,0);
|
|
|
|
insert into ldap_attr_mappings (id,oc_map_id,name,sel_expr,from_tbls,join_where,add_proc,delete_proc,param_order,expect_return)
|
|
values (7,3,'o','institutes.name','institutes',NULL,NULL,NULL,3,0);
|
|
|
|
insert into ldap_attr_mappings (id,oc_map_id,name,sel_expr,from_tbls,join_where,add_proc,delete_proc,param_order,expect_return)
|
|
values (8,1,'documentAuthor','ldap_entries.dn','ldap_entries,documents,authors_docs,persons',
|
|
'ldap_entries.keyval=documents.id AND ldap_entries.oc_map_id=2 AND authors_docs.doc_id=documents.id AND authors_docs.pers_id=persons.id',
|
|
NULL,NULL,3,0);
|
|
|
|
insert into ldap_attr_mappings (id,oc_map_id,name,sel_expr,from_tbls,join_where,add_proc,delete_proc,param_order,expect_return)
|
|
values (9,2,'documentAuthor','ldap_entries.dn','ldap_entries,documents,authors_docs,persons',
|
|
'ldap_entries.keyval=persons.id AND ldap_entries.oc_map_id=1 AND authors_docs.doc_id=documents.id AND authors_docs.pers_id=persons.id',
|
|
NULL,NULL,3,0);
|
|
|
|
-- entries
|
|
|
|
insert into ldap_entries (id,dn,oc_map_id,parent,keyval)
|
|
values (1,'o=sql,c=RU',3,0,1);
|
|
|
|
insert into ldap_entries (id,dn,oc_map_id,parent,keyval)
|
|
values (2,'cn=Mitya Kovalev,o=sql,c=RU',1,1,1);
|
|
|
|
insert into ldap_entries (id,dn,oc_map_id,parent,keyval)
|
|
values (3,'cn=Torvlobnor Puzdoy,o=sql,c=RU',1,1,2);
|
|
|
|
insert into ldap_entries (id,dn,oc_map_id,parent,keyval)
|
|
values (4,'cn=Akakiy Zinberstein,o=sql,c=RU',1,1,3);
|
|
|
|
insert into ldap_entries (id,dn,oc_map_id,parent,keyval)
|
|
values (5,'documentTitle=book1,o=sql,c=RU',2,1,1);
|
|
|
|
insert into ldap_entries (id,dn,oc_map_id,parent,keyval)
|
|
values (6,'documentTitle=book2,o=sql,c=RU',2,1,2);
|
|
|
|
|
|
-- referrals
|
|
|
|
insert into ldap_entry_objclasses (entry_id,oc_name)
|
|
values (4,'referral');
|
|
|
|
insert into ldap_referrals (entry_id,url)
|
|
values (4,'http://localhost');
|