1*549b59edSchristos /* $NetBSD: compare.c,v 1.3 2021/08/14 16:14:55 christos Exp $ */
24e6df137Slukem
3d11b170bStron /* $OpenLDAP$ */
42de962bdSlukem /* This work is part of OpenLDAP Software <http://www.openldap.org/>.
52de962bdSlukem *
6*549b59edSchristos * Copyright 1998-2021 The OpenLDAP Foundation.
72de962bdSlukem * All rights reserved.
82de962bdSlukem *
92de962bdSlukem * Redistribution and use in source and binary forms, with or without
102de962bdSlukem * modification, are permitted only as authorized by the OpenLDAP
112de962bdSlukem * Public License.
122de962bdSlukem *
132de962bdSlukem * A copy of this license is available in the file LICENSE in the
142de962bdSlukem * top-level directory of the distribution or, alternatively, at
152de962bdSlukem * <http://www.OpenLDAP.org/license.html>.
162de962bdSlukem */
172de962bdSlukem /* Portions Copyright (c) 1990 Regents of the University of Michigan.
182de962bdSlukem * All rights reserved.
192de962bdSlukem */
202de962bdSlukem
21376af7d7Schristos #include <sys/cdefs.h>
22*549b59edSchristos __RCSID("$NetBSD: compare.c,v 1.3 2021/08/14 16:14:55 christos Exp $");
23376af7d7Schristos
242de962bdSlukem #include "portable.h"
252de962bdSlukem
262de962bdSlukem #include <stdio.h>
272de962bdSlukem
282de962bdSlukem #include <ac/socket.h>
292de962bdSlukem #include <ac/string.h>
302de962bdSlukem #include <ac/time.h>
312de962bdSlukem
322de962bdSlukem #include "ldap-int.h"
332de962bdSlukem #include "ldap_log.h"
342de962bdSlukem
352de962bdSlukem /* The compare request looks like this:
362de962bdSlukem * CompareRequest ::= SEQUENCE {
372de962bdSlukem * entry DistinguishedName,
382de962bdSlukem * ava SEQUENCE {
392de962bdSlukem * type AttributeType,
402de962bdSlukem * value AttributeValue
412de962bdSlukem * }
422de962bdSlukem * }
432de962bdSlukem */
442de962bdSlukem
45376af7d7Schristos BerElement *
ldap_build_compare_req(LDAP * ld,LDAP_CONST char * dn,LDAP_CONST char * attr,struct berval * bvalue,LDAPControl ** sctrls,LDAPControl ** cctrls,int * msgidp)46376af7d7Schristos ldap_build_compare_req(
47376af7d7Schristos LDAP *ld,
48376af7d7Schristos LDAP_CONST char *dn,
49376af7d7Schristos LDAP_CONST char *attr,
50376af7d7Schristos struct berval *bvalue,
51376af7d7Schristos LDAPControl **sctrls,
52376af7d7Schristos LDAPControl **cctrls,
53376af7d7Schristos int *msgidp )
54376af7d7Schristos {
55376af7d7Schristos BerElement *ber;
56376af7d7Schristos int rc;
57376af7d7Schristos
58376af7d7Schristos /* create a message to send */
59376af7d7Schristos if ( (ber = ldap_alloc_ber_with_options( ld )) == NULL ) {
60376af7d7Schristos return( NULL );
61376af7d7Schristos }
62376af7d7Schristos
63376af7d7Schristos LDAP_NEXT_MSGID(ld, *msgidp);
64376af7d7Schristos rc = ber_printf( ber, "{it{s{sON}N}", /* '}' */
65376af7d7Schristos *msgidp,
66376af7d7Schristos LDAP_REQ_COMPARE, dn, attr, bvalue );
67376af7d7Schristos if ( rc == -1 )
68376af7d7Schristos {
69376af7d7Schristos ld->ld_errno = LDAP_ENCODING_ERROR;
70376af7d7Schristos ber_free( ber, 1 );
71376af7d7Schristos return( NULL );
72376af7d7Schristos }
73376af7d7Schristos
74376af7d7Schristos /* Put Server Controls */
75376af7d7Schristos if( ldap_int_put_controls( ld, sctrls, ber ) != LDAP_SUCCESS ) {
76376af7d7Schristos ber_free( ber, 1 );
77376af7d7Schristos return( NULL );
78376af7d7Schristos }
79376af7d7Schristos
80376af7d7Schristos if( ber_printf( ber, /*{*/ "N}" ) == -1 ) {
81376af7d7Schristos ld->ld_errno = LDAP_ENCODING_ERROR;
82376af7d7Schristos ber_free( ber, 1 );
83376af7d7Schristos return( NULL );
84376af7d7Schristos }
85376af7d7Schristos
86376af7d7Schristos return( ber );
87376af7d7Schristos }
88376af7d7Schristos
892de962bdSlukem /*
902de962bdSlukem * ldap_compare_ext - perform an ldap extended compare operation. The dn
912de962bdSlukem * of the entry to compare to and the attribute and value to compare (in
922de962bdSlukem * attr and value) are supplied. The msgid of the response is returned.
932de962bdSlukem *
942de962bdSlukem * Example:
952de962bdSlukem * struct berval bvalue = { "secret", sizeof("secret")-1 };
962de962bdSlukem * rc = ldap_compare( ld, "c=us@cn=bob",
972de962bdSlukem * "userPassword", &bvalue,
982de962bdSlukem * sctrl, cctrl, &msgid )
992de962bdSlukem */
1002de962bdSlukem int
ldap_compare_ext(LDAP * ld,LDAP_CONST char * dn,LDAP_CONST char * attr,struct berval * bvalue,LDAPControl ** sctrls,LDAPControl ** cctrls,int * msgidp)1012de962bdSlukem ldap_compare_ext(
1022de962bdSlukem LDAP *ld,
1032de962bdSlukem LDAP_CONST char *dn,
1042de962bdSlukem LDAP_CONST char *attr,
1052de962bdSlukem struct berval *bvalue,
1062de962bdSlukem LDAPControl **sctrls,
1072de962bdSlukem LDAPControl **cctrls,
1082de962bdSlukem int *msgidp )
1092de962bdSlukem {
1102de962bdSlukem int rc;
1112de962bdSlukem BerElement *ber;
1122de962bdSlukem ber_int_t id;
1132de962bdSlukem
114*549b59edSchristos Debug0( LDAP_DEBUG_TRACE, "ldap_compare\n" );
1152de962bdSlukem
1162de962bdSlukem assert( ld != NULL );
1172de962bdSlukem assert( LDAP_VALID( ld ) );
1182de962bdSlukem assert( dn != NULL );
1192de962bdSlukem assert( attr != NULL );
1202de962bdSlukem assert( msgidp != NULL );
1212de962bdSlukem
1222de962bdSlukem /* check client controls */
1232de962bdSlukem rc = ldap_int_client_controls( ld, cctrls );
1242de962bdSlukem if( rc != LDAP_SUCCESS ) return rc;
1252de962bdSlukem
126376af7d7Schristos ber = ldap_build_compare_req(
127376af7d7Schristos ld, dn, attr, bvalue, sctrls, cctrls, &id );
128376af7d7Schristos if( !ber )
1292de962bdSlukem return ld->ld_errno;
1302de962bdSlukem
1312de962bdSlukem /* send the message */
1322de962bdSlukem *msgidp = ldap_send_initial_request( ld, LDAP_REQ_COMPARE, dn, ber, id );
1332de962bdSlukem return ( *msgidp < 0 ? ld->ld_errno : LDAP_SUCCESS );
1342de962bdSlukem }
1352de962bdSlukem
1362de962bdSlukem /*
1372de962bdSlukem * ldap_compare_ext - perform an ldap extended compare operation. The dn
1382de962bdSlukem * of the entry to compare to and the attribute and value to compare (in
1392de962bdSlukem * attr and value) are supplied. The msgid of the response is returned.
1402de962bdSlukem *
1412de962bdSlukem * Example:
1422de962bdSlukem * msgid = ldap_compare( ld, "c=us@cn=bob", "userPassword", "secret" )
1432de962bdSlukem */
1442de962bdSlukem int
ldap_compare(LDAP * ld,LDAP_CONST char * dn,LDAP_CONST char * attr,LDAP_CONST char * value)1452de962bdSlukem ldap_compare(
1462de962bdSlukem LDAP *ld,
1472de962bdSlukem LDAP_CONST char *dn,
1482de962bdSlukem LDAP_CONST char *attr,
1492de962bdSlukem LDAP_CONST char *value )
1502de962bdSlukem {
1512de962bdSlukem int msgid;
1522de962bdSlukem struct berval bvalue;
1532de962bdSlukem
1542de962bdSlukem assert( value != NULL );
1552de962bdSlukem
1562de962bdSlukem bvalue.bv_val = (char *) value;
1572de962bdSlukem bvalue.bv_len = (value == NULL) ? 0 : strlen( value );
1582de962bdSlukem
1592de962bdSlukem return ldap_compare_ext( ld, dn, attr, &bvalue, NULL, NULL, &msgid ) == LDAP_SUCCESS
1602de962bdSlukem ? msgid : -1;
1612de962bdSlukem }
1622de962bdSlukem
1632de962bdSlukem int
ldap_compare_ext_s(LDAP * ld,LDAP_CONST char * dn,LDAP_CONST char * attr,struct berval * bvalue,LDAPControl ** sctrl,LDAPControl ** cctrl)1642de962bdSlukem ldap_compare_ext_s(
1652de962bdSlukem LDAP *ld,
1662de962bdSlukem LDAP_CONST char *dn,
1672de962bdSlukem LDAP_CONST char *attr,
1682de962bdSlukem struct berval *bvalue,
1692de962bdSlukem LDAPControl **sctrl,
1702de962bdSlukem LDAPControl **cctrl )
1712de962bdSlukem {
1722de962bdSlukem int rc;
1732de962bdSlukem int msgid;
1742de962bdSlukem LDAPMessage *res;
1752de962bdSlukem
1762de962bdSlukem rc = ldap_compare_ext( ld, dn, attr, bvalue, sctrl, cctrl, &msgid );
1772de962bdSlukem
1782de962bdSlukem if ( rc != LDAP_SUCCESS )
1792de962bdSlukem return( rc );
1802de962bdSlukem
1812de962bdSlukem if ( ldap_result( ld, msgid, LDAP_MSG_ALL, (struct timeval *) NULL, &res ) == -1 || !res )
1822de962bdSlukem return( ld->ld_errno );
1832de962bdSlukem
1842de962bdSlukem return( ldap_result2error( ld, res, 1 ) );
1852de962bdSlukem }
1862de962bdSlukem
1872de962bdSlukem int
ldap_compare_s(LDAP * ld,LDAP_CONST char * dn,LDAP_CONST char * attr,LDAP_CONST char * value)1882de962bdSlukem ldap_compare_s(
1892de962bdSlukem LDAP *ld,
1902de962bdSlukem LDAP_CONST char *dn,
1912de962bdSlukem LDAP_CONST char *attr,
1922de962bdSlukem LDAP_CONST char *value )
1932de962bdSlukem {
1942de962bdSlukem struct berval bvalue;
1952de962bdSlukem
1962de962bdSlukem assert( value != NULL );
1972de962bdSlukem
1982de962bdSlukem bvalue.bv_val = (char *) value;
1992de962bdSlukem bvalue.bv_len = (value == NULL) ? 0 : strlen( value );
2002de962bdSlukem
2012de962bdSlukem return ldap_compare_ext_s( ld, dn, attr, &bvalue, NULL, NULL );
2022de962bdSlukem }
203