mirror of
https://git.openldap.org/openldap/openldap.git
synced 2025-12-23 08:09:34 -05:00
f11c6b27e7
Now related ITSes need be audited and possibly closed.
Enhancements:
- re-styled code for better readability
- upgraded backend API to reflect recent changes
- LDAP schema is checked when loading SQL/LDAP mapping
- AttributeDescription/ObjectClass pointers used for more efficient
mapping lookup
- bervals used where string length is required often
- atomized write operations by committing at the end of each operation
and defaulting connection closure to rollback
- added LDAP access control to write operations
- fully implemented modrdn (with rdn attrs change, deleteoldrdn,
access check, parent/children check and more)
- added parent access control, children control to delete operation
- added structuralObjectClass operational attribute check and
value return on search
- added hasSubordinate operational attribute on demand
- search limits are appropriately enforced
- function backsql_strcat() has been made more efficient
- concat function has been made configurable by means of a pattern
- added config switches:
- fail_if_no_mapping write operations fail if there is no mapping
- has_ldapinfo_dn_ru overrides autodetect
- concat_pattern a string containing two '?' is used
(note that "?||?" should be more portable
than builtin function "CONCAT(?,?)")
- strcast_func cast of string constants in "SELECT DISTINCT statements (needed by PostgreSQL)
- upper_needs_cast cast the argument of upper when required
(basically when building dn substring queries)
Todo:
- add security checks for SQL statements that can be injected (?)
- re-test with previously supported RDBMs
- replace dn_ru and so with normalized dn (no need for upper() and so
in dn match)
- implement a backsql_normalize() function to replace the upper()
conversion routines
- note that subtree deletion, subtree renaming and so could be easily
implemented (rollback and consistency checks are available :)
- implement "lastmod" and other operational stuff (ldap_entries table ?)
113 lines
2.3 KiB
C
113 lines
2.3 KiB
C
/*
|
|
* Copyright 1999, Dmitry Kovalev <mit@openldap.org>, All rights reserved.
|
|
*
|
|
* Redistribution and use in source and binary forms are permitted only
|
|
* as authorized by the OpenLDAP Public License. A copy of this
|
|
* license is available at http://www.OpenLDAP.org/license.html or
|
|
* in file LICENSE in the top-level directory of the distribution.
|
|
*/
|
|
|
|
#include "portable.h"
|
|
|
|
#ifdef SLAPD_SQL
|
|
|
|
#include <stdio.h>
|
|
#include <sys/types.h>
|
|
#include "slap.h"
|
|
#include "back-sql.h"
|
|
#include "sql-wrap.h"
|
|
#include "entry-id.h"
|
|
|
|
int
|
|
backsql_compare(
|
|
BackendDB *bd,
|
|
Connection *conn,
|
|
Operation *op,
|
|
struct berval *dn,
|
|
struct berval *ndn,
|
|
AttributeAssertion *ava )
|
|
{
|
|
Debug( LDAP_DEBUG_TRACE, "==>backsql_compare() - not implemented\n",
|
|
0, 0, 0 );
|
|
return 1;
|
|
}
|
|
|
|
int
|
|
backsql_abandon(
|
|
BackendDB *be,
|
|
Connection *conn,
|
|
Operation *op,
|
|
int msgid )
|
|
{
|
|
Debug( LDAP_DEBUG_TRACE, "==>backsql_abandon()\n", 0, 0, 0 );
|
|
Debug( LDAP_DEBUG_TRACE, "<==backsql_abandon()\n", 0, 0, 0 );
|
|
return 0;
|
|
}
|
|
|
|
|
|
/*
|
|
* sets the supported operational attributes (if required)
|
|
*/
|
|
|
|
int
|
|
backsql_operational(
|
|
BackendDB *be,
|
|
Connection *conn,
|
|
Operation *op,
|
|
Entry *e,
|
|
AttributeName *attrs,
|
|
int opattrs,
|
|
Attribute **a )
|
|
{
|
|
|
|
backsql_info *bi = (backsql_info*)be->be_private;
|
|
SQLHDBC dbh = SQL_NULL_HDBC;
|
|
Attribute **aa = a;
|
|
int rc;
|
|
|
|
Debug( LDAP_DEBUG_TRACE, "==>backsql_operational(): entry '%s'\n",
|
|
e->e_nname.bv_val, 0, 0 );
|
|
|
|
|
|
if ( opattrs || ad_inlist( slap_schema.si_ad_hasSubordinates, attrs ) ) {
|
|
rc = backsql_get_db_conn( be, conn, &dbh );
|
|
if ( rc != LDAP_SUCCESS ) {
|
|
goto no_connection;
|
|
}
|
|
|
|
rc = backsql_has_children( bi, dbh, &e->e_nname );
|
|
|
|
switch( rc ) {
|
|
case LDAP_COMPARE_TRUE:
|
|
case LDAP_COMPARE_FALSE:
|
|
*aa = slap_operational_hasSubordinate( rc == LDAP_COMPARE_TRUE );
|
|
if ( *aa != NULL ) {
|
|
aa = &(*aa)->a_next;
|
|
}
|
|
rc = 0;
|
|
break;
|
|
|
|
default:
|
|
Debug(LDAP_DEBUG_TRACE,
|
|
"backsql_operational(): "
|
|
"has_children failed( %d)\n",
|
|
rc, 0, 0 );
|
|
rc = 1;
|
|
break;
|
|
}
|
|
}
|
|
|
|
return rc;
|
|
|
|
no_connection:;
|
|
Debug( LDAP_DEBUG_TRACE, "backsql_operational(): "
|
|
"could not get connection handle - exiting\n",
|
|
0, 0, 0 );
|
|
send_ldap_result( conn, op, rc, "",
|
|
rc == LDAP_OTHER ? "SQL-backend error" : "",
|
|
NULL, NULL );
|
|
return 1;
|
|
}
|
|
|
|
#endif /* SLAPD_SQL */
|
|
|