slapd-modules/autogroup/autogroup.c

3 /* autogroup.c - automatic group overlay */
36 /* Filter represents the memberURL of a group. */
46 /* Description of group attributes. */
54 /* Represents the group entry. */
74 	autogroup_def_t		*ags_def;	/* Attributes definition of the group being added. */
77 /* Used for adding members, found when searching, to a group. */
79 	autogroup_entry_t	*agg_group;	/* The group to which the members will be added. */
84 						search results which will be added to the group. */
93 **	age	- the group to which the member DN will be added
143 ** age		- the group from which the DN will be deleted
144 ** If we pass a NULL dn and ndn, all members are deleted from the group.
201 ** Callback used to add entries to a group,
204 ** The group is passed in autogroup_ga_t->agg_group
243 ** Callback used to add entries to a group, which is already in the database.
245 ** The group is passed in autogroup_ga_t->agg_group
295 ** Adds all entries matching the passed filter to the specified group.
296 ** If modify == 1, then we modify the group's entry in the database using be_modify.
297 ** If modify == 0, then, we must supply a rw entry for the group,
299 ** e	- the group entry, to which the members will be added
300 ** age	- the group
375 ** Adds a group to the internal list from the passed entry.
376 ** scan specifies whether to add all maching members to the group.
377 ** modify specifies whether to modify the given group entry (when modify == 0),
378 **	or to modify the group entry in the database (when modify == 1 and e = NULL and ndn != NULL).
380 ** agd - the attribute definition of the added group
381 ** e	- the entry representing the group, can be NULL if the ndn is specified, and modify == 1
382 ** ndn	- the DN of the group, can be NULL if we give a non-NULL e
412 				Debug( LDAP_DEBUG_TRACE, "autogroup_add_group: group already exists: <%s>\n", e->e_name.bv_val,0,0);
436 		Debug( LDAP_DEBUG_TRACE, "autogroup_add_group: group has no memberURL\n", 0,0,0);
530 ** When adding a group, we first strip any existing members,
548 	/* Check if it's a group. */
594 ** agi	- internal group and attribute definitions list
595 ** e	- the group to remove from the internal list
643 	Debug( LDAP_DEBUG_TRACE, "autogroup_delete_group: group <%s> not found, should not happen\n", age->age_dn.bv_val, 0, 0);
699 	   If yes, we can delete the entry from that group. */
731 	Entry			*e, *group;
778 			/* If a groups DN is modified, just update age_dn/ndn of that group with the new DN. */
792 							Debug( LDAP_DEBUG_TRACE, "autogroup_response MODRDN updating group's DN to <%s>\n", new_dn.bv_val, 0, 0);
809 			/* For each group:
810 			   1. check if the orginal entry's DN is in the group.
811 			   2. chceck if the any of the group filter's base DN is a suffix of the new DN
814 			   If 1 and 2 is true, we remove the old DN from the group, and add the new DN.
815 			   If 1 is false, and 2 is true, we check the entry against the group's filters,
816 				and add it's DN to the group.
817 			   If 1 is true, and 2 is false, we delete the entry's DN from the group.
826 				if ( overlay_entry_get_ov( op, &age->age_ndn, NULL, NULL, 0, &group, on ) !=
827 					LDAP_SUCCESS || group == NULL ) {
828 					Debug( LDAP_DEBUG_TRACE, "autogroup_response MODRDN cannot get group entry <%s>\n", age->age_dn.bv_val, 0, 0);
838 				a = attrs_find( group->e_attrs, age->age_def->agd_member_ad );
851 				overlay_entry_release_ov( op, group, 0, on );
911 			/* If we modify a group's memberURL, we have to delete all of it's members,
935 									Debug( LDAP_DEBUG_TRACE, "autogroup_response MODIFY changing memberURL for group <%s>\n",
967 			   the modified entry maches any of the filters of that group.
969 			   If the entry exists in a group, but the modified attributes do
970 				not match any of the group's filters, we delete the entry from that group.
971 			   If the entry doesn't exist in a group, but matches a filter,
972 				we add it to that group.
981 				if ( overlay_entry_get_ov( op, &age->age_ndn, NULL, NULL, 0, &group, on ) !=
982 					LDAP_SUCCESS || group == NULL ) {
991 				a = attrs_find( group->e_attrs, age->age_def->agd_member_ad );
1004 				overlay_entry_release_ov( op, group, 0, on );
1033 ** When modifing a group, we must deny any modifications to the member attribute,
1034 ** because the group would be inconsistent.
1090 							Debug( LDAP_DEBUG_TRACE, "autogroup_modify_entry attempted to modify group's <%s> member attribute\n", op->o_req_dn.bv_val, 0, 0);
1091 							send_ldap_error(op, rs, LDAP_CONSTRAINT_VIOLATION, "attempt to modify dynamic group member attribute");
1112 ** group entries, according to the objectClass.
1147 	{ "autogroup-attrset", "group-oc> <URL-ad> <member-ad",
1150 			"DESC 'Automatic groups: <group objectClass>, <URL attributeDescription>, <member attributeDescription>' "