xref: /netbsd-src/external/bsd/openldap/dist/servers/slapd/overlays/rwmconf.c (revision c505c4429840c353a86d4eb53b5e2bfc0092264e)
1 /*	$NetBSD: rwmconf.c,v 1.1.1.2 2010/03/08 02:14:20 lukem Exp $	*/
2 
3 /* rwmconf.c - rewrite/map configuration file routines */
4 /* OpenLDAP: pkg/ldap/servers/slapd/overlays/rwmconf.c,v 1.25.2.5 2009/01/22 00:01:13 kurt Exp */
5 /* This work is part of OpenLDAP Software <http://www.openldap.org/>.
6  *
7  * Copyright 1999-2009 The OpenLDAP Foundation.
8  * Portions Copyright 1999-2003 Howard Chu.
9  * Portions Copyright 2000-2003 Pierangelo Masarati.
10  * All rights reserved.
11  *
12  * Redistribution and use in source and binary forms, with or without
13  * modification, are permitted only as authorized by the OpenLDAP
14  * Public License.
15  *
16  * A copy of this license is available in the file LICENSE in the
17  * top-level directory of the distribution or, alternatively, at
18  * <http://www.OpenLDAP.org/license.html>.
19  */
20 /* ACKNOWLEDGEMENTS:
21  * This work was initially developed by the Howard Chu for inclusion
22  * in OpenLDAP Software and subsequently enhanced by Pierangelo
23  * Masarati.
24  */
25 
26 #include "portable.h"
27 
28 #ifdef SLAPD_OVER_RWM
29 
30 #include <stdio.h>
31 
32 #include <ac/string.h>
33 #include <ac/socket.h>
34 
35 #include "slap.h"
36 #include "rwm.h"
37 #include "lutil.h"
38 
39 int
40 rwm_map_config(
41 		struct ldapmap	*oc_map,
42 		struct ldapmap	*at_map,
43 		const char	*fname,
44 		int		lineno,
45 		int		argc,
46 		char		**argv )
47 {
48 	struct ldapmap		*map;
49 	struct ldapmapping	*mapping;
50 	char			*src, *dst;
51 	int			is_oc = 0;
52 	int			rc = 0;
53 
54 	if ( argc < 3 || argc > 4 ) {
55 		fprintf( stderr,
56 	"%s: line %d: syntax is \"map {objectclass | attribute} [<local> | *] {<foreign> | *}\"\n",
57 			fname, lineno );
58 		return 1;
59 	}
60 
61 	if ( strcasecmp( argv[1], "objectclass" ) == 0 ) {
62 		map = oc_map;
63 		is_oc = 1;
64 
65 	} else if ( strcasecmp( argv[1], "attribute" ) == 0 ) {
66 		map = at_map;
67 
68 	} else {
69 		fprintf( stderr, "%s: line %d: syntax is "
70 			"\"map {objectclass | attribute} [<local> | *] "
71 			"{<foreign> | *}\"\n",
72 			fname, lineno );
73 		return 1;
74 	}
75 
76 	if ( !is_oc && map->map == NULL ) {
77 		/* only init if required */
78 		if ( rwm_map_init( map, &mapping ) != LDAP_SUCCESS ) {
79 			return 1;
80 		}
81 	}
82 
83 	if ( strcmp( argv[2], "*" ) == 0 ) {
84 		if ( argc < 4 || strcmp( argv[3], "*" ) == 0 ) {
85 			map->drop_missing = ( argc < 4 );
86 			goto success_return;
87 		}
88 		src = dst = argv[3];
89 
90 	} else if ( argc < 4 ) {
91 		src = "";
92 		dst = argv[2];
93 
94 	} else {
95 		src = argv[2];
96 		dst = ( strcmp( argv[3], "*" ) == 0 ? src : argv[3] );
97 	}
98 
99 	if ( ( map == at_map )
100 			&& ( strcasecmp( src, "objectclass" ) == 0
101 			|| strcasecmp( dst, "objectclass" ) == 0 ) )
102 	{
103 		fprintf( stderr,
104 			"%s: line %d: objectclass attribute cannot be mapped\n",
105 			fname, lineno );
106 		return 1;
107 	}
108 
109 	mapping = (struct ldapmapping *)ch_calloc( 2,
110 		sizeof(struct ldapmapping) );
111 	if ( mapping == NULL ) {
112 		fprintf( stderr,
113 			"%s: line %d: out of memory\n",
114 			fname, lineno );
115 		return 1;
116 	}
117 	ber_str2bv( src, 0, 1, &mapping[0].m_src );
118 	ber_str2bv( dst, 0, 1, &mapping[0].m_dst );
119 	mapping[1].m_src = mapping[0].m_dst;
120 	mapping[1].m_dst = mapping[0].m_src;
121 
122 	mapping[0].m_flags = RWMMAP_F_NONE;
123 	mapping[1].m_flags = RWMMAP_F_NONE;
124 
125 	/*
126 	 * schema check
127 	 */
128 	if ( is_oc ) {
129 		if ( src[0] != '\0' ) {
130 			mapping[0].m_src_oc = oc_bvfind( &mapping[0].m_src );
131 			if ( mapping[0].m_src_oc == NULL ) {
132 				fprintf( stderr,
133 	"%s: line %d: warning, source objectClass '%s' "
134 	"should be defined in schema\n",
135 					fname, lineno, src );
136 
137 				/*
138 				 * FIXME: this should become an err
139 				 */
140 				mapping[0].m_src_oc = ch_malloc( sizeof( ObjectClass ) );
141 				memset( mapping[0].m_src_oc, 0, sizeof( ObjectClass ) );
142 				mapping[0].m_src_oc->soc_cname = mapping[0].m_src;
143 				mapping[0].m_flags |= RWMMAP_F_FREE_SRC;
144 			}
145 			mapping[1].m_dst_oc = mapping[0].m_src_oc;
146 		}
147 
148 		mapping[0].m_dst_oc = oc_bvfind( &mapping[0].m_dst );
149 		if ( mapping[0].m_dst_oc == NULL ) {
150 			fprintf( stderr,
151 	"%s: line %d: warning, destination objectClass '%s' "
152 	"is not defined in schema\n",
153 				fname, lineno, dst );
154 
155 			mapping[0].m_dst_oc = oc_bvfind_undef( &mapping[0].m_dst );
156 			if ( mapping[0].m_dst_oc == NULL ) {
157 				fprintf( stderr, "%s: line %d: unable to mimic destination objectClass '%s'\n",
158 					fname, lineno, dst );
159 				goto error_return;
160 			}
161 		}
162 		mapping[1].m_src_oc = mapping[0].m_dst_oc;
163 
164 		mapping[0].m_flags |= RWMMAP_F_IS_OC;
165 		mapping[1].m_flags |= RWMMAP_F_IS_OC;
166 
167 	} else {
168 		int			rc;
169 		const char		*text = NULL;
170 
171 		if ( src[0] != '\0' ) {
172 			rc = slap_bv2ad( &mapping[0].m_src,
173 					&mapping[0].m_src_ad, &text );
174 			if ( rc != LDAP_SUCCESS ) {
175 				fprintf( stderr,
176 	"%s: line %d: warning, source attributeType '%s' "
177 	"should be defined in schema\n",
178 					fname, lineno, src );
179 
180 				/*
181 				 * we create a fake "proxied" ad
182 				 * and add it here.
183 				 */
184 
185 				rc = slap_bv2undef_ad( &mapping[0].m_src,
186 						&mapping[0].m_src_ad, &text,
187 						SLAP_AD_PROXIED );
188 				if ( rc != LDAP_SUCCESS ) {
189 					fprintf( stderr,
190 	"%s: line %d: source attributeType '%s': %d (%s)\n",
191 						fname, lineno, src, rc, text ? text : "null" );
192 					goto error_return;
193 				}
194 
195 			}
196 			mapping[1].m_dst_ad = mapping[0].m_src_ad;
197 		}
198 
199 		rc = slap_bv2ad( &mapping[0].m_dst, &mapping[0].m_dst_ad, &text );
200 		if ( rc != LDAP_SUCCESS ) {
201 			fprintf( stderr,
202 	"%s: line %d: warning, destination attributeType '%s' "
203 	"is not defined in schema\n",
204 				fname, lineno, dst );
205 
206 			rc = slap_bv2undef_ad( &mapping[0].m_dst,
207 					&mapping[0].m_dst_ad, &text,
208 					SLAP_AD_PROXIED );
209 			if ( rc != LDAP_SUCCESS ) {
210 				fprintf( stderr,
211 	"%s: line %d: destination attributeType '%s': %d (%s)\n",
212 					fname, lineno, dst, rc, text ? text : "null" );
213 				goto error_return;
214 			}
215 		}
216 		mapping[1].m_src_ad = mapping[0].m_dst_ad;
217 	}
218 
219 	if ( ( src[0] != '\0' && avl_find( map->map, (caddr_t)mapping, rwm_mapping_cmp ) != NULL)
220 			|| avl_find( map->remap, (caddr_t)&mapping[1], rwm_mapping_cmp ) != NULL)
221 	{
222 		fprintf( stderr,
223 			"%s: line %d: duplicate mapping found.\n",
224 			fname, lineno );
225 		/* FIXME: free stuff */
226 		goto error_return;
227 	}
228 
229 	if ( src[0] != '\0' ) {
230 		avl_insert( &map->map, (caddr_t)&mapping[0],
231 					rwm_mapping_cmp, rwm_mapping_dup );
232 	}
233 	avl_insert( &map->remap, (caddr_t)&mapping[1],
234 				rwm_mapping_cmp, rwm_mapping_dup );
235 
236 success_return:;
237 	return rc;
238 
239 error_return:;
240 	if ( mapping ) {
241 		rwm_mapping_free( mapping );
242 	}
243 
244 	return 1;
245 }
246 
247 static char *
248 rwm_suffix_massage_regexize( const char *s )
249 {
250 	char *res, *ptr;
251 	const char *p, *r;
252 	int i;
253 
254 	if ( s[0] == '\0' ) {
255 		return ch_strdup( "^(.+)$" );
256 	}
257 
258 	for ( i = 0, p = s;
259 			( r = strchr( p, ',' ) ) != NULL;
260 			p = r + 1, i++ )
261 		;
262 
263 	res = ch_calloc( sizeof( char ), strlen( s )
264 			+ STRLENOF( "((.+),)?" )
265 			+ STRLENOF( "[ ]?" ) * i
266 			+ STRLENOF( "$" ) + 1 );
267 
268 	ptr = lutil_strcopy( res, "((.+),)?" );
269 	for ( i = 0, p = s;
270 			( r = strchr( p, ',' ) ) != NULL;
271 			p = r + 1 , i++ ) {
272 		ptr = lutil_strncopy( ptr, p, r - p + 1 );
273 		ptr = lutil_strcopy( ptr, "[ ]?" );
274 
275 		if ( r[ 1 ] == ' ' ) {
276 			r++;
277 		}
278 	}
279 	ptr = lutil_strcopy( ptr, p );
280 	ptr[0] = '$';
281 	ptr[1] = '\0';
282 
283 	return res;
284 }
285 
286 static char *
287 rwm_suffix_massage_patternize( const char *s, const char *p )
288 {
289 	ber_len_t	len;
290 	char		*res, *ptr;
291 
292 	len = strlen( p );
293 
294 	if ( s[ 0 ] == '\0' ) {
295 		len++;
296 	}
297 
298 	res = ch_calloc( sizeof( char ), len + STRLENOF( "%1" ) + 1 );
299 	if ( res == NULL ) {
300 		return NULL;
301 	}
302 
303 	ptr = lutil_strcopy( res, ( p[0] == '\0' ? "%2" : "%1" ) );
304 	if ( s[ 0 ] == '\0' ) {
305 		ptr[ 0 ] = ',';
306 		ptr++;
307 	}
308 	lutil_strcopy( ptr, p );
309 
310 	return res;
311 }
312 
313 int
314 rwm_suffix_massage_config(
315 		struct rewrite_info *info,
316 		struct berval *pvnc,
317 		struct berval *nvnc,
318 		struct berval *prnc,
319 		struct berval *nrnc
320 )
321 {
322 	char *rargv[ 5 ];
323 	int line = 0;
324 
325 	rargv[ 0 ] = "rewriteEngine";
326 	rargv[ 1 ] = "on";
327 	rargv[ 2 ] = NULL;
328 	rewrite_parse( info, "<suffix massage>", ++line, 2, rargv );
329 
330 	rargv[ 0 ] = "rewriteContext";
331 	rargv[ 1 ] = "default";
332 	rargv[ 2 ] = NULL;
333 	rewrite_parse( info, "<suffix massage>", ++line, 2, rargv );
334 
335 	rargv[ 0 ] = "rewriteRule";
336 	rargv[ 1 ] = rwm_suffix_massage_regexize( pvnc->bv_val );
337 	rargv[ 2 ] = rwm_suffix_massage_patternize( pvnc->bv_val, prnc->bv_val );
338 	rargv[ 3 ] = ":";
339 	rargv[ 4 ] = NULL;
340 	rewrite_parse( info, "<suffix massage>", ++line, 4, rargv );
341 	ch_free( rargv[ 1 ] );
342 	ch_free( rargv[ 2 ] );
343 
344 	if ( BER_BVISEMPTY( pvnc ) ) {
345 		rargv[ 0 ] = "rewriteRule";
346 		rargv[ 1 ] = "^$";
347 		rargv[ 2 ] = prnc->bv_val;
348 		rargv[ 3 ] = ":";
349 		rargv[ 4 ] = NULL;
350 		rewrite_parse( info, "<suffix massage>", ++line, 4, rargv );
351 	}
352 
353 	rargv[ 0 ] = "rewriteContext";
354 	rargv[ 1 ] = "searchEntryDN";
355 	rargv[ 2 ] = NULL;
356 	rewrite_parse( info, "<suffix massage>", ++line, 2, rargv );
357 
358 	rargv[ 0 ] = "rewriteRule";
359 	rargv[ 1 ] = rwm_suffix_massage_regexize( prnc->bv_val );
360 	rargv[ 2 ] = rwm_suffix_massage_patternize( prnc->bv_val, pvnc->bv_val );
361 	rargv[ 3 ] = ":";
362 	rargv[ 4 ] = NULL;
363 	rewrite_parse( info, "<suffix massage>", ++line, 4, rargv );
364 	ch_free( rargv[ 1 ] );
365 	ch_free( rargv[ 2 ] );
366 
367 	if ( BER_BVISEMPTY( prnc ) ) {
368 		rargv[ 0 ] = "rewriteRule";
369 		rargv[ 1 ] = "^$";
370 		rargv[ 2 ] = pvnc->bv_val;
371 		rargv[ 3 ] = ":";
372 		rargv[ 4 ] = NULL;
373 		rewrite_parse( info, "<suffix massage>", ++line, 4, rargv );
374 	}
375 
376 	rargv[ 0 ] = "rewriteContext";
377 	rargv[ 1 ] = "matchedDN";
378 	rargv[ 2 ] = "alias";
379 	rargv[ 3 ] = "searchEntryDN";
380 	rargv[ 4 ] = NULL;
381 	rewrite_parse( info, "<suffix massage>", ++line, 4, rargv );
382 
383 #ifdef RWM_REFERRAL_REWRITE
384 	/* FIXME: we don't want this on by default, do we? */
385 	rargv[ 0 ] = "rewriteContext";
386 	rargv[ 1 ] = "referralDN";
387 	rargv[ 2 ] = "alias";
388 	rargv[ 3 ] = "searchEntryDN";
389 	rargv[ 4 ] = NULL;
390 	rewrite_parse( info, "<suffix massage>", ++line, 4, rargv );
391 #else /* ! RWM_REFERRAL_REWRITE */
392 	rargv[ 0 ] = "rewriteContext";
393 	rargv[ 1 ] = "referralAttrDN";
394 	rargv[ 2 ] = NULL;
395 	rewrite_parse( info, "<suffix massage>", ++line, 2, rargv );
396 
397 	rargv[ 0 ] = "rewriteContext";
398 	rargv[ 1 ] = "referralDN";
399 	rargv[ 2 ] = NULL;
400 	rewrite_parse( info, "<suffix massage>", ++line, 2, rargv );
401 #endif /* ! RWM_REFERRAL_REWRITE */
402 
403 	rargv[ 0 ] = "rewriteContext";
404 	rargv[ 1 ] = "searchAttrDN";
405 	rargv[ 2 ] = "alias";
406 	rargv[ 3 ] = "searchEntryDN";
407 	rargv[ 4 ] = NULL;
408 	rewrite_parse( info, "<suffix massage>", ++line, 4, rargv );
409 
410 	return 0;
411 }
412 
413 #endif /* SLAPD_OVER_RWM */
414