1 /* $OpenLDAP: pkg/ldap/libraries/libldap/passwd.c,v 1.18.2.3 2008/02/11 23:26:41 kurt Exp $ */ 2 /* This work is part of OpenLDAP Software <http://www.openldap.org/>. 3 * 4 * Copyright 1998-2008 The OpenLDAP Foundation. 5 * All rights reserved. 6 * 7 * Redistribution and use in source and binary forms, with or without 8 * modification, are permitted only as authorized by the OpenLDAP 9 * Public License. 10 * 11 * A copy of this license is available in the file LICENSE in the 12 * top-level directory of the distribution or, alternatively, at 13 * <http://www.OpenLDAP.org/license.html>. 14 */ 15 /* ACKNOWLEDGEMENTS: 16 * This program was orignally developed by Kurt D. Zeilenga for inclusion in 17 * OpenLDAP Software. 18 */ 19 20 #include "portable.h" 21 22 #include <stdio.h> 23 #include <ac/stdlib.h> 24 #include <ac/string.h> 25 #include <ac/time.h> 26 27 #include "ldap-int.h" 28 29 /* 30 * LDAP Password Modify (Extended) Operation (RFC 3062) 31 */ 32 33 int ldap_parse_passwd( 34 LDAP *ld, 35 LDAPMessage *res, 36 struct berval *newpasswd ) 37 { 38 int rc; 39 struct berval *retdata = NULL; 40 41 assert( ld != NULL ); 42 assert( LDAP_VALID( ld ) ); 43 assert( res != NULL ); 44 assert( newpasswd != NULL ); 45 46 newpasswd->bv_val = NULL; 47 newpasswd->bv_len = 0; 48 49 rc = ldap_parse_extended_result( ld, res, NULL, &retdata, 0 ); 50 if ( rc != LDAP_SUCCESS ) { 51 return rc; 52 } 53 54 if ( retdata != NULL ) { 55 ber_tag_t tag; 56 BerElement *ber = ber_init( retdata ); 57 58 if ( ber == NULL ) { 59 rc = ld->ld_errno = LDAP_NO_MEMORY; 60 goto done; 61 } 62 63 /* we should check the tag */ 64 tag = ber_scanf( ber, "{o}", newpasswd ); 65 ber_free( ber, 1 ); 66 67 if ( tag == LBER_ERROR ) { 68 rc = ld->ld_errno = LDAP_DECODING_ERROR; 69 } 70 } 71 72 done:; 73 ber_bvfree( retdata ); 74 75 return rc; 76 } 77 78 int 79 ldap_passwd( LDAP *ld, 80 struct berval *user, 81 struct berval *oldpw, 82 struct berval *newpw, 83 LDAPControl **sctrls, 84 LDAPControl **cctrls, 85 int *msgidp ) 86 { 87 int rc; 88 struct berval bv = BER_BVNULL; 89 BerElement *ber = NULL; 90 91 assert( ld != NULL ); 92 assert( LDAP_VALID( ld ) ); 93 assert( msgidp != NULL ); 94 95 if( user != NULL || oldpw != NULL || newpw != NULL ) { 96 /* build change password control */ 97 ber = ber_alloc_t( LBER_USE_DER ); 98 99 if( ber == NULL ) { 100 ld->ld_errno = LDAP_NO_MEMORY; 101 return ld->ld_errno; 102 } 103 104 ber_printf( ber, "{" /*}*/ ); 105 106 if( user != NULL ) { 107 ber_printf( ber, "tO", 108 LDAP_TAG_EXOP_MODIFY_PASSWD_ID, user ); 109 } 110 111 if( oldpw != NULL ) { 112 ber_printf( ber, "tO", 113 LDAP_TAG_EXOP_MODIFY_PASSWD_OLD, oldpw ); 114 } 115 116 if( newpw != NULL ) { 117 ber_printf( ber, "tO", 118 LDAP_TAG_EXOP_MODIFY_PASSWD_NEW, newpw ); 119 } 120 121 ber_printf( ber, /*{*/ "N}" ); 122 123 rc = ber_flatten2( ber, &bv, 0 ); 124 125 if( rc < 0 ) { 126 ld->ld_errno = LDAP_ENCODING_ERROR; 127 return ld->ld_errno; 128 } 129 130 } 131 132 rc = ldap_extended_operation( ld, LDAP_EXOP_MODIFY_PASSWD, 133 bv.bv_val ? &bv : NULL, sctrls, cctrls, msgidp ); 134 135 ber_free( ber, 1 ); 136 137 return rc; 138 } 139 140 int 141 ldap_passwd_s( 142 LDAP *ld, 143 struct berval *user, 144 struct berval *oldpw, 145 struct berval *newpw, 146 struct berval *newpasswd, 147 LDAPControl **sctrls, 148 LDAPControl **cctrls ) 149 { 150 int rc; 151 int msgid; 152 LDAPMessage *res; 153 154 rc = ldap_passwd( ld, user, oldpw, newpw, sctrls, cctrls, &msgid ); 155 if ( rc != LDAP_SUCCESS ) { 156 return rc; 157 } 158 159 if ( ldap_result( ld, msgid, LDAP_MSG_ALL, (struct timeval *) NULL, &res ) == -1 || !res ) { 160 return ld->ld_errno; 161 } 162 163 rc = ldap_parse_passwd( ld, res, newpasswd ); 164 if( rc != LDAP_SUCCESS ) { 165 ldap_msgfree( res ); 166 return rc; 167 } 168 169 return( ldap_result2error( ld, res, 1 ) ); 170 } 171