authdb.cpp 5.6 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231
  1. /** BEGIN COPYRIGHT BLOCK
  2. * Copyright (C) 2001 Sun Microsystems, Inc. Used by permission.
  3. * Copyright (C) 2005 Red Hat, Inc.
  4. * All rights reserved.
  5. *
  6. * License: GPL (version 3 or any later version).
  7. * See LICENSE for details.
  8. * END COPYRIGHT BLOCK **/
  9. #ifdef HAVE_CONFIG_H
  10. # include <config.h>
  11. #endif
  12. #include <stdio.h>
  13. #include <string.h>
  14. #include <plhash.h>
  15. #include <netsite.h>
  16. #include <ldaputil/errors.h>
  17. #include <ldaputil/certmap.h>
  18. #include <ldaputil/dbconf.h>
  19. #include <libaccess/acl.h>
  20. #include "aclpriv.h"
  21. #include <libaccess/authdb.h>
  22. #include <libaccess/aclproto.h>
  23. #include <libaccess/las.h>
  24. #include <libaccess/acl.h>
  25. #include <libaccess/aclglobal.h>
  26. #include <libaccess/dbtlibaccess.h>
  27. #include <libaccess/aclerror.h>
  28. #define BIG_LINE 1024
  29. char *ACL_default_dbname = 0;
  30. ACLDbType_t ACL_default_dbtype = ACL_DBTYPE_INVALID;
  31. ACLMethod_t ACL_default_method = ACL_METHOD_INVALID;
  32. int acl_registered_dbcnt = 0;
  33. extern int acl_registered_names(PLHashTable *ht, int count, char ***names);
  34. /************************** Database Types *************************/
  35. #define databaseNamesHashTable ACLDbNameHash
  36. int acl_num_databases ()
  37. {
  38. return acl_registered_dbcnt;
  39. }
  40. static int reg_dbname_internal (NSErr_t *errp, ACLDbType_t dbtype,
  41. const char *dbname, const char *url,
  42. PList_t plist)
  43. {
  44. DbParseFn_t parseFunc;
  45. void *db;
  46. int rv;
  47. AuthdbInfo_t *authdb_info;
  48. if (!ACL_DbTypeIsRegistered(errp, dbtype)) {
  49. nserrGenerate(errp, ACLERRFAIL, ACLERR4400, ACL_Program, 2, XP_GetAdminStr(DBT_DbtypeNotDefinedYet), dbname);
  50. return -1;
  51. }
  52. parseFunc = ACL_DbTypeParseFn(errp, dbtype);
  53. if (!parseFunc) {
  54. nserrGenerate(errp, ACLERRFAIL, ACLERR4400, ACL_Program, 2, XP_GetAdminStr(DBT_DbtypeNotDefinedYet), dbname);
  55. return -1;
  56. }
  57. rv = (*parseFunc)(errp, dbtype, dbname, url, plist, (void **)&db);
  58. if (rv < 0) {
  59. /* plist contains error message/code */
  60. return rv;
  61. }
  62. /* Store the db returned by the parse function in the hash table.
  63. */
  64. authdb_info = (AuthdbInfo_t *)pool_malloc(ACL_DATABASE_POOL, sizeof(AuthdbInfo_t));
  65. if (!authdb_info) {
  66. nserrGenerate(errp, ACLERRNOMEM, ACLERR4420, ACL_Program, 0);
  67. return -1;
  68. }
  69. authdb_info->dbname = pool_strdup(ACL_DATABASE_POOL, dbname);
  70. authdb_info->dbtype = dbtype;
  71. authdb_info->dbinfo = db; /* value returned from parseFunc */
  72. PR_HashTableAdd(ACLDbNameHash, authdb_info->dbname, authdb_info);
  73. acl_registered_dbcnt++;
  74. return 0;
  75. }
  76. NSAPI_PUBLIC int ACL_DatabaseRegister (NSErr_t *errp, ACLDbType_t dbtype,
  77. const char *dbname, const char *url,
  78. PList_t plist)
  79. {
  80. if (!dbname || !*dbname) {
  81. nserrGenerate(errp, ACLERRFAIL, ACLERR4500, ACL_Program, 1, XP_GetAdminStr(DBT_DatabaseRegisterDatabaseNameMissing));
  82. return -1;
  83. }
  84. return reg_dbname_internal(errp, dbtype, dbname, url, plist);
  85. }
  86. NSAPI_PUBLIC int
  87. ACL_DatabaseNamesGet(NSErr_t *errp, char ***names, int *count)
  88. {
  89. *count = acl_registered_dbcnt;
  90. return acl_registered_names (ACLDbNameHash, *count, names);
  91. }
  92. NSAPI_PUBLIC int
  93. ACL_DatabaseNamesFree(NSErr_t *errp, char **names, int count)
  94. {
  95. int i;
  96. for (i = count-1; i; i--) FREE(names[i]);
  97. FREE(names);
  98. return 0;
  99. }
  100. /* try to determine the dbtype from the database url */
  101. static int acl_url_to_dbtype (const char *url, ACLDbType_t *dbtype_out)
  102. {
  103. ACLDbType_t dbtype;
  104. NSErr_t *errp = 0;
  105. *dbtype_out = dbtype = ACL_DBTYPE_INVALID;
  106. if (!url || !*url) return -1;
  107. // urls with ldap:, ldaps: and ldapdb: are all of type ACL_DBTYPE_LDAP.
  108. if (!strncmp(url, URL_PREFIX_LDAP, URL_PREFIX_LDAP_LEN))
  109. dbtype = ACL_DbTypeLdap;
  110. else {
  111. /* treat prefix in the url as dbtype if it has been registered.
  112. */
  113. size_t prefix_len = strcspn(url, ":");
  114. char dbtypestr[BIG_LINE];
  115. if (prefix_len && (prefix_len < sizeof(dbtypestr))) {
  116. strncpy(dbtypestr, url, prefix_len);
  117. dbtypestr[prefix_len] = 0;
  118. if (!ACL_DbTypeFind(errp, dbtypestr, &dbtype)) {
  119. /* prefix is not a registered dbtype */
  120. dbtype = ACL_DBTYPE_INVALID;
  121. }
  122. }
  123. }
  124. if (ACL_DbTypeIsEqual(errp, dbtype, ACL_DBTYPE_INVALID)) {
  125. /* try all the registered parse functions to determine the dbtype */
  126. }
  127. if (ACL_DbTypeIsEqual(errp, dbtype, ACL_DBTYPE_INVALID)) return -1;
  128. *dbtype_out = dbtype;
  129. return 0;
  130. }
  131. NSAPI_PUBLIC int ACL_RegisterDbFromACL (NSErr_t *errp, const char *url,
  132. ACLDbType_t *dbtype)
  133. {
  134. /* If the database by name url is already registered, don't do anything.
  135. * If it is not registered, determine the dbtype from the url.
  136. * If the dbtype can be determined, register the database with dbname same
  137. * as the url. Return the dbtype.
  138. */
  139. void *db;
  140. int rv;
  141. PList_t plist;
  142. if (ACL_DatabaseFind(errp, url, dbtype, &db) == LAS_EVAL_TRUE)
  143. return 0;
  144. /* The database is not registered yet. Parse the url to find out its
  145. * type. If parsing fails, return failure.
  146. */
  147. rv = acl_url_to_dbtype(url, dbtype);
  148. if (rv < 0) {
  149. return rv;
  150. }
  151. plist = PListNew(NULL);
  152. rv = ACL_DatabaseRegister(errp, *dbtype, url, url, plist);
  153. PListDestroy(plist);
  154. return rv;
  155. }
  156. NSAPI_PUBLIC int ACL_DatabaseFind(NSErr_t *errp, const char *name,
  157. ACLDbType_t *dbtype, void **db)
  158. {
  159. AuthdbInfo_t *info;
  160. *dbtype = ACL_DBTYPE_INVALID;
  161. *db = 0;
  162. if (ACLDbNameHash) {
  163. info = (AuthdbInfo_t *)PR_HashTableLookup(ACLDbNameHash,
  164. name
  165. );
  166. if (info) {
  167. *dbtype = info->dbtype;
  168. *db = info->dbinfo;
  169. return LAS_EVAL_TRUE;
  170. }
  171. }
  172. return LAS_EVAL_FAIL;
  173. }
  174. void
  175. ACL_DatabaseDestroy(void)
  176. {
  177. pool_destroy(ACL_DATABASE_POOL);
  178. ACL_DATABASE_POOL = NULL;
  179. ACLDbNameHash = NULL;
  180. return;
  181. }