xref: /netbsd-src/external/bsd/openldap/dist/libraries/libldap/compare.c (revision 549b59ed3ccf0d36d3097190a0db27b770f3a839)
1*549b59edSchristos /*	$NetBSD: compare.c,v 1.3 2021/08/14 16:14:55 christos Exp $	*/
24e6df137Slukem 
3d11b170bStron /* $OpenLDAP$ */
42de962bdSlukem /* This work is part of OpenLDAP Software <http://www.openldap.org/>.
52de962bdSlukem  *
6*549b59edSchristos  * Copyright 1998-2021 The OpenLDAP Foundation.
72de962bdSlukem  * All rights reserved.
82de962bdSlukem  *
92de962bdSlukem  * Redistribution and use in source and binary forms, with or without
102de962bdSlukem  * modification, are permitted only as authorized by the OpenLDAP
112de962bdSlukem  * Public License.
122de962bdSlukem  *
132de962bdSlukem  * A copy of this license is available in the file LICENSE in the
142de962bdSlukem  * top-level directory of the distribution or, alternatively, at
152de962bdSlukem  * <http://www.OpenLDAP.org/license.html>.
162de962bdSlukem  */
172de962bdSlukem /* Portions Copyright (c) 1990 Regents of the University of Michigan.
182de962bdSlukem  * All rights reserved.
192de962bdSlukem  */
202de962bdSlukem 
21376af7d7Schristos #include <sys/cdefs.h>
22*549b59edSchristos __RCSID("$NetBSD: compare.c,v 1.3 2021/08/14 16:14:55 christos Exp $");
23376af7d7Schristos 
242de962bdSlukem #include "portable.h"
252de962bdSlukem 
262de962bdSlukem #include <stdio.h>
272de962bdSlukem 
282de962bdSlukem #include <ac/socket.h>
292de962bdSlukem #include <ac/string.h>
302de962bdSlukem #include <ac/time.h>
312de962bdSlukem 
322de962bdSlukem #include "ldap-int.h"
332de962bdSlukem #include "ldap_log.h"
342de962bdSlukem 
352de962bdSlukem /* The compare request looks like this:
362de962bdSlukem  *	CompareRequest ::= SEQUENCE {
372de962bdSlukem  *		entry	DistinguishedName,
382de962bdSlukem  *		ava	SEQUENCE {
392de962bdSlukem  *			type	AttributeType,
402de962bdSlukem  *			value	AttributeValue
412de962bdSlukem  *		}
422de962bdSlukem  *	}
432de962bdSlukem  */
442de962bdSlukem 
45376af7d7Schristos BerElement *
ldap_build_compare_req(LDAP * ld,LDAP_CONST char * dn,LDAP_CONST char * attr,struct berval * bvalue,LDAPControl ** sctrls,LDAPControl ** cctrls,int * msgidp)46376af7d7Schristos ldap_build_compare_req(
47376af7d7Schristos 	LDAP *ld,
48376af7d7Schristos 	LDAP_CONST char *dn,
49376af7d7Schristos 	LDAP_CONST char *attr,
50376af7d7Schristos 	struct berval *bvalue,
51376af7d7Schristos 	LDAPControl **sctrls,
52376af7d7Schristos 	LDAPControl **cctrls,
53376af7d7Schristos 	int	*msgidp )
54376af7d7Schristos {
55376af7d7Schristos 	BerElement	*ber;
56376af7d7Schristos 	int rc;
57376af7d7Schristos 
58376af7d7Schristos 	/* create a message to send */
59376af7d7Schristos 	if ( (ber = ldap_alloc_ber_with_options( ld )) == NULL ) {
60376af7d7Schristos 		return( NULL );
61376af7d7Schristos 	}
62376af7d7Schristos 
63376af7d7Schristos 	LDAP_NEXT_MSGID(ld, *msgidp);
64376af7d7Schristos 	rc = ber_printf( ber, "{it{s{sON}N}", /* '}' */
65376af7d7Schristos 		*msgidp,
66376af7d7Schristos 		LDAP_REQ_COMPARE, dn, attr, bvalue );
67376af7d7Schristos 	if ( rc == -1 )
68376af7d7Schristos 	{
69376af7d7Schristos 		ld->ld_errno = LDAP_ENCODING_ERROR;
70376af7d7Schristos 		ber_free( ber, 1 );
71376af7d7Schristos 		return( NULL );
72376af7d7Schristos 	}
73376af7d7Schristos 
74376af7d7Schristos 	/* Put Server Controls */
75376af7d7Schristos 	if( ldap_int_put_controls( ld, sctrls, ber ) != LDAP_SUCCESS ) {
76376af7d7Schristos 		ber_free( ber, 1 );
77376af7d7Schristos 		return( NULL );
78376af7d7Schristos 	}
79376af7d7Schristos 
80376af7d7Schristos 	if( ber_printf( ber, /*{*/ "N}" ) == -1 ) {
81376af7d7Schristos 		ld->ld_errno = LDAP_ENCODING_ERROR;
82376af7d7Schristos 		ber_free( ber, 1 );
83376af7d7Schristos 		return( NULL );
84376af7d7Schristos 	}
85376af7d7Schristos 
86376af7d7Schristos 	return( ber );
87376af7d7Schristos }
88376af7d7Schristos 
892de962bdSlukem /*
902de962bdSlukem  * ldap_compare_ext - perform an ldap extended compare operation.  The dn
912de962bdSlukem  * of the entry to compare to and the attribute and value to compare (in
922de962bdSlukem  * attr and value) are supplied.  The msgid of the response is returned.
932de962bdSlukem  *
942de962bdSlukem  * Example:
952de962bdSlukem  *	struct berval bvalue = { "secret", sizeof("secret")-1 };
962de962bdSlukem  *	rc = ldap_compare( ld, "c=us@cn=bob",
972de962bdSlukem  *		"userPassword", &bvalue,
982de962bdSlukem  *		sctrl, cctrl, &msgid )
992de962bdSlukem  */
1002de962bdSlukem int
ldap_compare_ext(LDAP * ld,LDAP_CONST char * dn,LDAP_CONST char * attr,struct berval * bvalue,LDAPControl ** sctrls,LDAPControl ** cctrls,int * msgidp)1012de962bdSlukem ldap_compare_ext(
1022de962bdSlukem 	LDAP *ld,
1032de962bdSlukem 	LDAP_CONST char *dn,
1042de962bdSlukem 	LDAP_CONST char *attr,
1052de962bdSlukem 	struct berval *bvalue,
1062de962bdSlukem 	LDAPControl **sctrls,
1072de962bdSlukem 	LDAPControl **cctrls,
1082de962bdSlukem 	int	*msgidp )
1092de962bdSlukem {
1102de962bdSlukem 	int rc;
1112de962bdSlukem 	BerElement	*ber;
1122de962bdSlukem 	ber_int_t	id;
1132de962bdSlukem 
114*549b59edSchristos 	Debug0( LDAP_DEBUG_TRACE, "ldap_compare\n" );
1152de962bdSlukem 
1162de962bdSlukem 	assert( ld != NULL );
1172de962bdSlukem 	assert( LDAP_VALID( ld ) );
1182de962bdSlukem 	assert( dn != NULL );
1192de962bdSlukem 	assert( attr != NULL );
1202de962bdSlukem 	assert( msgidp != NULL );
1212de962bdSlukem 
1222de962bdSlukem 	/* check client controls */
1232de962bdSlukem 	rc = ldap_int_client_controls( ld, cctrls );
1242de962bdSlukem 	if( rc != LDAP_SUCCESS ) return rc;
1252de962bdSlukem 
126376af7d7Schristos 	ber = ldap_build_compare_req(
127376af7d7Schristos 		ld, dn, attr, bvalue, sctrls, cctrls, &id );
128376af7d7Schristos 	if( !ber )
1292de962bdSlukem 		return ld->ld_errno;
1302de962bdSlukem 
1312de962bdSlukem 	/* send the message */
1322de962bdSlukem 	*msgidp = ldap_send_initial_request( ld, LDAP_REQ_COMPARE, dn, ber, id );
1332de962bdSlukem 	return ( *msgidp < 0 ? ld->ld_errno : LDAP_SUCCESS );
1342de962bdSlukem }
1352de962bdSlukem 
1362de962bdSlukem /*
1372de962bdSlukem  * ldap_compare_ext - perform an ldap extended compare operation.  The dn
1382de962bdSlukem  * of the entry to compare to and the attribute and value to compare (in
1392de962bdSlukem  * attr and value) are supplied.  The msgid of the response is returned.
1402de962bdSlukem  *
1412de962bdSlukem  * Example:
1422de962bdSlukem  *	msgid = ldap_compare( ld, "c=us@cn=bob", "userPassword", "secret" )
1432de962bdSlukem  */
1442de962bdSlukem int
ldap_compare(LDAP * ld,LDAP_CONST char * dn,LDAP_CONST char * attr,LDAP_CONST char * value)1452de962bdSlukem ldap_compare(
1462de962bdSlukem 	LDAP *ld,
1472de962bdSlukem 	LDAP_CONST char *dn,
1482de962bdSlukem 	LDAP_CONST char *attr,
1492de962bdSlukem 	LDAP_CONST char *value )
1502de962bdSlukem {
1512de962bdSlukem 	int msgid;
1522de962bdSlukem 	struct berval bvalue;
1532de962bdSlukem 
1542de962bdSlukem 	assert( value != NULL );
1552de962bdSlukem 
1562de962bdSlukem 	bvalue.bv_val = (char *) value;
1572de962bdSlukem 	bvalue.bv_len = (value == NULL) ? 0 : strlen( value );
1582de962bdSlukem 
1592de962bdSlukem 	return ldap_compare_ext( ld, dn, attr, &bvalue, NULL, NULL, &msgid ) == LDAP_SUCCESS
1602de962bdSlukem 		? msgid : -1;
1612de962bdSlukem }
1622de962bdSlukem 
1632de962bdSlukem int
ldap_compare_ext_s(LDAP * ld,LDAP_CONST char * dn,LDAP_CONST char * attr,struct berval * bvalue,LDAPControl ** sctrl,LDAPControl ** cctrl)1642de962bdSlukem ldap_compare_ext_s(
1652de962bdSlukem 	LDAP *ld,
1662de962bdSlukem 	LDAP_CONST char *dn,
1672de962bdSlukem 	LDAP_CONST char *attr,
1682de962bdSlukem 	struct berval *bvalue,
1692de962bdSlukem 	LDAPControl **sctrl,
1702de962bdSlukem 	LDAPControl **cctrl )
1712de962bdSlukem {
1722de962bdSlukem 	int		rc;
1732de962bdSlukem 	int		msgid;
1742de962bdSlukem 	LDAPMessage	*res;
1752de962bdSlukem 
1762de962bdSlukem 	rc = ldap_compare_ext( ld, dn, attr, bvalue, sctrl, cctrl, &msgid );
1772de962bdSlukem 
1782de962bdSlukem 	if (  rc != LDAP_SUCCESS )
1792de962bdSlukem 		return( rc );
1802de962bdSlukem 
1812de962bdSlukem 	if ( ldap_result( ld, msgid, LDAP_MSG_ALL, (struct timeval *) NULL, &res ) == -1 || !res )
1822de962bdSlukem 		return( ld->ld_errno );
1832de962bdSlukem 
1842de962bdSlukem 	return( ldap_result2error( ld, res, 1 ) );
1852de962bdSlukem }
1862de962bdSlukem 
1872de962bdSlukem int
ldap_compare_s(LDAP * ld,LDAP_CONST char * dn,LDAP_CONST char * attr,LDAP_CONST char * value)1882de962bdSlukem ldap_compare_s(
1892de962bdSlukem 	LDAP *ld,
1902de962bdSlukem 	LDAP_CONST char *dn,
1912de962bdSlukem 	LDAP_CONST char *attr,
1922de962bdSlukem 	LDAP_CONST char *value )
1932de962bdSlukem {
1942de962bdSlukem 	struct berval bvalue;
1952de962bdSlukem 
1962de962bdSlukem 	assert( value != NULL );
1972de962bdSlukem 
1982de962bdSlukem 	bvalue.bv_val = (char *) value;
1992de962bdSlukem 	bvalue.bv_len = (value == NULL) ? 0 : strlen( value );
2002de962bdSlukem 
2012de962bdSlukem 	return ldap_compare_ext_s( ld, dn, attr, &bvalue, NULL, NULL );
2022de962bdSlukem }
203