mirror of
https://git.openldap.org/openldap/openldap.git
synced 2024-12-21 03:10:25 +08:00
408 lines
7.7 KiB
C
408 lines
7.7 KiB
C
/* $OpenLDAP$ */
|
|
/*
|
|
* Copyright 1999-2002 The OpenLDAP Foundation.
|
|
* All rights reserved.
|
|
*
|
|
* Redistribution and use in source and binary forms are permitted only
|
|
* as authorized by the OpenLDAP Public License. A copy of this
|
|
* license is available at http://www.OpenLDAP.org/license.html or
|
|
* in file LICENSE in the top-level directory of the distribution.
|
|
*/
|
|
#include "portable.h"
|
|
|
|
#include <stdio.h>
|
|
|
|
#include <ac/string.h>
|
|
#include <ac/socket.h>
|
|
|
|
#include "slap.h"
|
|
|
|
#include "../../libraries/liblber/lber-int.h"
|
|
|
|
static int
|
|
test_mra_vrFilter(
|
|
Backend *be,
|
|
Connection *conn,
|
|
Operation *op,
|
|
Attribute *a,
|
|
MatchingRuleAssertion *mra,
|
|
char ***e_flags
|
|
);
|
|
|
|
static int
|
|
test_substrings_vrFilter(
|
|
Backend *be,
|
|
Connection *conn,
|
|
Operation *op,
|
|
Attribute *a,
|
|
ValuesReturnFilter *f,
|
|
char ***e_flags
|
|
);
|
|
|
|
static int
|
|
test_presence_vrFilter(
|
|
Backend *be,
|
|
Connection *conn,
|
|
Operation *op,
|
|
Attribute *a,
|
|
AttributeDescription *desc,
|
|
char ***e_flags
|
|
);
|
|
|
|
static int
|
|
test_ava_vrFilter(
|
|
Backend *be,
|
|
Connection *conn,
|
|
Operation *op,
|
|
Attribute *a,
|
|
AttributeAssertion *ava,
|
|
int type,
|
|
char ***e_flags
|
|
);
|
|
|
|
|
|
int
|
|
filter_matched_values(
|
|
Backend *be,
|
|
Connection *conn,
|
|
Operation *op,
|
|
Attribute *a,
|
|
char ***e_flags
|
|
)
|
|
{
|
|
ValuesReturnFilter *f;
|
|
int rc = LDAP_SUCCESS;
|
|
|
|
#ifdef NEW_LOGGING
|
|
LDAP_LOG( FILTER, ENTRY, "filter_matched_values: begin\n", 0, 0, 0 );
|
|
#else
|
|
Debug( LDAP_DEBUG_FILTER, "=> filter_matched_values\n", 0, 0, 0 );
|
|
#endif
|
|
|
|
for ( f = op->vrFilter; f != NULL; f = f->f_next ) {
|
|
switch ( f->f_choice ) {
|
|
case SLAPD_FILTER_COMPUTED:
|
|
#ifdef NEW_LOGGING
|
|
LDAP_LOG( FILTER, DETAIL1,
|
|
"test_vrFilter: COMPUTED %s (%d)\n",
|
|
f->f_result == LDAP_COMPARE_FALSE ? "false" :
|
|
f->f_result == LDAP_COMPARE_TRUE ? "true" :
|
|
f->f_result == SLAPD_COMPARE_UNDEFINED ? "undefined" :
|
|
"error", f->f_result, 0 );
|
|
#else
|
|
Debug( LDAP_DEBUG_FILTER, " COMPUTED %s (%d)\n",
|
|
f->f_result == LDAP_COMPARE_FALSE ? "false" :
|
|
f->f_result == LDAP_COMPARE_TRUE ? "true" :
|
|
f->f_result == SLAPD_COMPARE_UNDEFINED ? "undefined" : "error",
|
|
f->f_result, 0 );
|
|
#endif
|
|
/*This type of filter does not affect the result */
|
|
rc = LDAP_SUCCESS;
|
|
break;
|
|
|
|
case LDAP_FILTER_EQUALITY:
|
|
#ifdef NEW_LOGGING
|
|
LDAP_LOG( FILTER, DETAIL1, "test_vrFilter: EQUALITY\n", 0, 0, 0 );
|
|
#else
|
|
Debug( LDAP_DEBUG_FILTER, " EQUALITY\n", 0, 0, 0 );
|
|
#endif
|
|
rc = test_ava_vrFilter( be, conn, op, a, f->f_ava,
|
|
LDAP_FILTER_EQUALITY, e_flags );
|
|
if( rc == -1 ) {
|
|
return rc;
|
|
}
|
|
break;
|
|
|
|
case LDAP_FILTER_SUBSTRINGS:
|
|
#ifdef NEW_LOGGING
|
|
LDAP_LOG( FILTER, DETAIL1, "test_vrFilter SUBSTRINGS\n", 0, 0, 0 );
|
|
#else
|
|
Debug( LDAP_DEBUG_FILTER, " SUBSTRINGS\n", 0, 0, 0 );
|
|
#endif
|
|
|
|
rc = test_substrings_vrFilter( be, conn, op, a,
|
|
f, e_flags );
|
|
if( rc == -1 ) {
|
|
return rc;
|
|
}
|
|
break;
|
|
|
|
case LDAP_FILTER_PRESENT:
|
|
#ifdef NEW_LOGGING
|
|
LDAP_LOG( FILTER, DETAIL1, "test_vrFilter: PRESENT\n", 0, 0, 0 );
|
|
#else
|
|
Debug( LDAP_DEBUG_FILTER, " PRESENT\n", 0, 0, 0 );
|
|
#endif
|
|
rc = test_presence_vrFilter( be, conn, op, a,
|
|
f->f_desc, e_flags );
|
|
if( rc == -1 ) {
|
|
return rc;
|
|
}
|
|
break;
|
|
|
|
case LDAP_FILTER_GE:
|
|
rc = test_ava_vrFilter( be, conn, op, a, f->f_ava,
|
|
LDAP_FILTER_GE, e_flags );
|
|
if( rc == -1 ) {
|
|
return rc;
|
|
}
|
|
break;
|
|
|
|
case LDAP_FILTER_LE:
|
|
rc = test_ava_vrFilter( be, conn, op, a, f->f_ava,
|
|
LDAP_FILTER_LE, e_flags );
|
|
if( rc == -1 ) {
|
|
return rc;
|
|
}
|
|
break;
|
|
|
|
case LDAP_FILTER_EXT:
|
|
#ifdef NEW_LOGGING
|
|
LDAP_LOG( FILTER, DETAIL1, "test_vrFilter: EXT\n", 0, 0, 0 );
|
|
#else
|
|
Debug( LDAP_DEBUG_FILTER, " EXT\n", 0, 0, 0 );
|
|
#endif
|
|
rc = test_mra_vrFilter( be, conn, op, a,
|
|
f->f_mra, e_flags );
|
|
if( rc == -1 ) {
|
|
return rc;
|
|
}
|
|
break;
|
|
|
|
default:
|
|
#ifdef NEW_LOGGING
|
|
LDAP_LOG( FILTER, INFO,
|
|
"test_vrFilter: unknown filter type %lu\n", f->f_choice, 0, 0 );
|
|
#else
|
|
Debug( LDAP_DEBUG_ANY, " unknown filter type %lu\n",
|
|
f->f_choice, 0, 0 );
|
|
#endif
|
|
rc = LDAP_PROTOCOL_ERROR;
|
|
}
|
|
}
|
|
|
|
#ifdef NEW_LOGGING
|
|
LDAP_LOG( FILTER, ENTRY, "filter_matched_values: return=%d\n", rc, 0, 0 );
|
|
#else
|
|
Debug( LDAP_DEBUG_FILTER, "<= filter_matched_values %d\n", rc, 0, 0 );
|
|
#endif
|
|
return( rc );
|
|
}
|
|
|
|
static int
|
|
test_ava_vrFilter(
|
|
Backend *be,
|
|
Connection *conn,
|
|
Operation *op,
|
|
Attribute *a,
|
|
AttributeAssertion *ava,
|
|
int type,
|
|
char ***e_flags
|
|
)
|
|
{
|
|
int i, j;
|
|
|
|
for ( i=0; a != NULL; a = a->a_next, i++ ) {
|
|
|
|
MatchingRule *mr;
|
|
struct berval *bv;
|
|
|
|
if ( !is_ad_subtype( a->a_desc, ava->aa_desc ) ) {
|
|
continue;
|
|
}
|
|
|
|
switch ( type ) {
|
|
case LDAP_FILTER_APPROX:
|
|
mr = a->a_desc->ad_type->sat_approx;
|
|
if( mr != NULL ) break;
|
|
|
|
/* use EQUALITY matching rule if no APPROX rule */
|
|
case LDAP_FILTER_EQUALITY:
|
|
mr = a->a_desc->ad_type->sat_equality;
|
|
break;
|
|
|
|
case LDAP_FILTER_GE:
|
|
case LDAP_FILTER_LE:
|
|
mr = a->a_desc->ad_type->sat_ordering;
|
|
break;
|
|
|
|
default:
|
|
mr = NULL;
|
|
}
|
|
|
|
if( mr == NULL ) {
|
|
continue;
|
|
|
|
}
|
|
|
|
for ( bv = a->a_vals, j=0; bv->bv_val != NULL; bv++, j++ ) {
|
|
int ret;
|
|
int rc;
|
|
const char *text;
|
|
|
|
rc = value_match( &ret, a->a_desc, mr,
|
|
SLAP_MR_ASSERTION_SYNTAX_MATCH, bv, &ava->aa_value, &text );
|
|
if( rc != LDAP_SUCCESS ) {
|
|
return rc;
|
|
}
|
|
|
|
switch ( type ) {
|
|
case LDAP_FILTER_EQUALITY:
|
|
case LDAP_FILTER_APPROX:
|
|
if ( ret == 0 ) {
|
|
(*e_flags)[i][j] = 1;
|
|
}
|
|
break;
|
|
|
|
case LDAP_FILTER_GE:
|
|
if ( ret >= 0 ) {
|
|
(*e_flags)[i][j] = 1;
|
|
}
|
|
break;
|
|
|
|
case LDAP_FILTER_LE:
|
|
if ( ret <= 0 ) {
|
|
(*e_flags)[i][j] = 1;
|
|
}
|
|
break;
|
|
}
|
|
}
|
|
}
|
|
return( LDAP_SUCCESS );
|
|
}
|
|
|
|
static int
|
|
test_presence_vrFilter(
|
|
Backend *be,
|
|
Connection *conn,
|
|
Operation *op,
|
|
Attribute *a,
|
|
AttributeDescription *desc,
|
|
char ***e_flags
|
|
)
|
|
{
|
|
int i, j;
|
|
|
|
for ( i=0; a != NULL; a = a->a_next, i++ ) {
|
|
struct berval *bv;
|
|
|
|
if ( !is_ad_subtype( a->a_desc, desc ) ) {
|
|
continue;
|
|
}
|
|
|
|
for ( bv = a->a_vals, j=0; bv->bv_val != NULL; bv++, j++ );
|
|
memset( (*e_flags)[i], 1, j);
|
|
}
|
|
|
|
return( LDAP_SUCCESS );
|
|
}
|
|
|
|
static int
|
|
test_substrings_vrFilter(
|
|
Backend *be,
|
|
Connection *conn,
|
|
Operation *op,
|
|
Attribute *a,
|
|
ValuesReturnFilter *f,
|
|
char ***e_flags
|
|
)
|
|
{
|
|
int i, j;
|
|
|
|
for ( i=0; a != NULL; a = a->a_next, i++ ) {
|
|
MatchingRule *mr = a->a_desc->ad_type->sat_substr;
|
|
struct berval *bv;
|
|
|
|
if ( !is_ad_subtype( a->a_desc, f->f_sub_desc ) ) {
|
|
continue;
|
|
}
|
|
|
|
if( mr == NULL ) {
|
|
continue;
|
|
}
|
|
|
|
for ( bv = a->a_vals, j = 0; bv->bv_val != NULL; bv++, j++ ) {
|
|
int ret;
|
|
int rc;
|
|
const char *text;
|
|
|
|
rc = value_match( &ret, a->a_desc, mr,
|
|
SLAP_MR_ASSERTION_SYNTAX_MATCH,
|
|
bv, f->f_sub, &text );
|
|
|
|
if( rc != LDAP_SUCCESS ) {
|
|
return rc;
|
|
}
|
|
|
|
if ( ret == 0 ) {
|
|
(*e_flags)[i][j] = 1;
|
|
}
|
|
}
|
|
}
|
|
|
|
return LDAP_SUCCESS;
|
|
}
|
|
|
|
static int
|
|
test_mra_vrFilter(
|
|
Backend *be,
|
|
Connection *conn,
|
|
Operation *op,
|
|
Attribute *a,
|
|
MatchingRuleAssertion *mra,
|
|
char ***e_flags
|
|
)
|
|
{
|
|
int i, j;
|
|
|
|
for ( i=0; a != NULL; a = a->a_next, i++ ) {
|
|
struct berval *bv, value;
|
|
|
|
if ( mra->ma_desc ) {
|
|
if ( !is_ad_subtype( a->a_desc, mra->ma_desc ) ) {
|
|
continue;
|
|
}
|
|
value = mra->ma_value;
|
|
|
|
} else {
|
|
const char *text = NULL;
|
|
|
|
/* check if matching is appropriate */
|
|
if ( strcmp( mra->ma_rule->smr_syntax->ssyn_oid,
|
|
a->a_desc->ad_type->sat_syntax->ssyn_oid ) != 0 ) {
|
|
continue;
|
|
}
|
|
|
|
/* normalize for equality */
|
|
if ( value_validate_normalize( a->a_desc,
|
|
SLAP_MR_EQUALITY,
|
|
&mra->ma_value, &value,
|
|
&text ) != LDAP_SUCCESS ) {
|
|
continue;
|
|
}
|
|
|
|
}
|
|
|
|
for ( bv = a->a_vals, j = 0; bv->bv_val != NULL; bv++, j++ ) {
|
|
int ret;
|
|
int rc;
|
|
const char *text;
|
|
|
|
rc = value_match( &ret, a->a_desc, mra->ma_rule,
|
|
SLAP_MR_ASSERTION_SYNTAX_MATCH,
|
|
bv, &value,
|
|
&text );
|
|
|
|
if( rc != LDAP_SUCCESS ) {
|
|
return rc;
|
|
}
|
|
|
|
if ( ret == 0 ) {
|
|
(*e_flags)[i][j] = 1;
|
|
}
|
|
}
|
|
}
|
|
|
|
return LDAP_SUCCESS;
|
|
}
|