servers/slapd/aci.c

173 		switch ( *bv.bv_val ) {
261 					if ( strncasecmp( val->bv_val, left.bv_val, left.bv_len ) == 0 ) {
289 				bv.bv_val, attr->bv_val );
296 			bv.bv_val, attr->bv_val );
309 			bv.bv_val, mask );
413 		bv.bv_val = (char *)&buf;
425 			slap_sl_free( ndn.bv_val, op->o_tmpmemctx );
564 	sdn.bv_val = type.bv_val + type.bv_len + STRLENOF( "#" );
565 	sdn.bv_len = aci->bv_len - ( sdn.bv_val - aci->bv_val );
569 		opts.bv_len = type.bv_len - ( opts.bv_val - type.bv_val );
570 		type.bv_len = opts.bv_val - type.bv_val - 1;
799 	bv->bv_val = ch_malloc( STRLENOF(" aci=") + ad->ad_cname.bv_len + 1 );
800 	ptr = lutil_strcopy( bv->bv_val, " aci=" );
801 	ptr = lutil_strcopy( ptr, ad->ad_cname.bv_val );
802 	bv->bv_len = ptr - bv->bv_val;
895 			Debug( LDAP_DEBUG_ACL, "        checking ACI of \"%s\"\n", parent_ndn.bv_val );
1028 	tail->bv_val = sub->bv_val + sub->bv_len;
1029 	head_len = (unsigned long) tail->bv_val - (unsigned long) val->bv_val;
1057 		switch ( perms->bv_val[ i ] ) {
1067 		        Debug( LDAP_DEBUG_ACL, "aciValidatePerms: perms needs to be one of x,d,c,s,r,w in '%s'\n", perms->bv_val );
1075 		while ( i < perms->bv_len && perms->bv_val[ i ] == ' ' )
1080 		if ( perms->bv_val[ i ] != ',' ) {
1081 		        Debug( LDAP_DEBUG_ACL, "aciValidatePerms: missing comma in '%s'\n", perms->bv_val );
1087 		} while ( perms->bv_val[ i ] == ' ' );
1110 		Debug( LDAP_DEBUG_ACL, "aciValidateRight: '%s' must be either 'grant' or 'deny'\n", bv.bv_val );
1144 						Debug( LDAP_DEBUG_ACL, "aciValidateRight: unknown attribute: '%s'\n", attr.bv_val );
1150 						Debug( LDAP_DEBUG_ACL, "aciValidateRight: unknown attribute: '%s'\n", left.bv_val );
1163 		Debug( LDAP_DEBUG_ACL, "aciValidateRight: perms:attr need to be pairs in '%s'\n", action->bv_val );
1184 	        Debug( LDAP_DEBUG_ACL, "aciNormalizeRight: missing ';' in '%s'\n", action->bv_val );
1189 	        Debug( LDAP_DEBUG_ACL, "aciNormalizeRight: '%s' must be grant or deny\n", grantdeny.bv_val );
1239 						ber_memfree_x( nattrs.bv_val, ctx );
1249 							ber_memfree_x( nattrs.bv_val, ctx );
1250 							Debug( LDAP_DEBUG_ACL, "aciNormalizeRight: unknown attribute: '%s'\n", attr.bv_val );
1257 							ber_memfree_x( nattrs.bv_val, ctx );
1258 							Debug( LDAP_DEBUG_ACL, "aciNormalizeRight: unknown attribute: '%s'\n", left.bv_val );
1266 					nattrs.bv_val = slap_sl_realloc( nattrs.bv_val, len + 1, ctx );
1267 	                        	ptr = &nattrs.bv_val[ nattrs.bv_len ];
1271 					ptr = lutil_strncopy( ptr, ad->ad_cname.bv_val, ad->ad_cname.bv_len );
1278 			naction->bv_val = slap_sl_realloc( naction->bv_val,
1284 			ptr = &naction->bv_val[ naction->bv_len ];
1287 			ptr = lutil_strncopy( ptr, perms.bv_val, perms.bv_len );
1290 			ptr = lutil_strncopy( ptr, nattrs.bv_val, nattrs.bv_len );
1295 				ber_memfree_x( nattrs.bv_val, ctx );
1305 		Debug( LDAP_DEBUG_ACL, "aciNormalizeRight: perms:attr need to be pairs in '%s'\n", action->bv_val );
1344 			ber_memfree_x( nactions->bv_val, ctx );
1353 			nactions->bv_val = slap_sl_realloc( nactions->bv_val,
1357 			nactions->bv_val[ nactions->bv_len ] = '$';
1358 			AC_MEMCPY( &nactions->bv_val[ nactions->bv_len + 1 ],
1359 				nbv.bv_val, nbv.bv_len + 1 );
1360 			ber_memfree_x( nbv.bv_val, ctx );
1430 		Debug( LDAP_DEBUG_ACL, "aciValidate: invalid oid '%s'\n", oid.bv_val );
1438 		Debug( LDAP_DEBUG_ACL, "aciValidate: invalid scope '%s'\n", scope.bv_val );
1451 		Debug( LDAP_DEBUG_ACL, "aciValidate: missing type in '%s'\n", val->bv_val );
1459 			Debug( LDAP_DEBUG_ACL, "aciValidate: invalid type '%s'\n", type.bv_val );
1465 			Debug( LDAP_DEBUG_ACL, "aciValidate: invalid type '%s'\n", isgr.bv_val );
1472 	if ( subject.bv_val[ 0 ] != '#' ) {
1473 		Debug( LDAP_DEBUG_ACL, "aciValidate: missing subject in '%s'\n", val->bv_val );
1484 				Debug( LDAP_DEBUG_ACL, "aciValidate: unknown dn attribute '%s'\n", subject.bv_val );
1490 				Debug( LDAP_DEBUG_ACL, "aciValidate: wrong syntax for dn attribute '%s'\n", subject.bv_val );
1505 		ocbv.bv_val = ber_bvchr( &type, '/' );
1506 		if ( ocbv.bv_val != NULL ) {
1507 			ocbv.bv_val++;
1509 					- ( ocbv.bv_val - type.bv_val );
1511 			atbv.bv_val = ber_bvchr( &ocbv, '/' );
1512 			if ( atbv.bv_val != NULL ) {
1517 				atbv.bv_val++;
1519 					- ( atbv.bv_val - type.bv_val );
1520 				ocbv.bv_len = atbv.bv_val - ocbv.bv_val - 1;
1524 				        Debug( LDAP_DEBUG_ACL, "aciValidate: unknown group attribute '%s'\n", atbv.bv_val );
1530 			        Debug( LDAP_DEBUG_ACL, "aciValidate: unknown group '%s'\n", ocbv.bv_val );
1538 	        Debug( LDAP_DEBUG_ACL, "aciValidate: missing dn in '%s'\n", val->bv_val );
1542 	subject.bv_val++;
1548 	        Debug( LDAP_DEBUG_ACL, "aciValidate: invalid dn '%s'\n", subject.bv_val );
1585 		Debug( LDAP_DEBUG_ACL, "aciPrettyNormal: invalid oid '%s'\n", oid.bv_val );
1591 		Debug( LDAP_DEBUG_ACL, "aciPrettyNormal: missing scope in '%s'\n", val->bv_val );
1596 		Debug( LDAP_DEBUG_ACL, "aciPrettyNormal: invalid scope '%s'\n", scope.bv_val );
1603 		Debug( LDAP_DEBUG_ACL, "aciPrettyNormal: missing rights in '%s'\n", val->bv_val );
1614 		Debug( LDAP_DEBUG_ACL, "aciPrettyNormal: missing type in '%s'\n", val->bv_val );
1623 		        Debug( LDAP_DEBUG_ACL, "aciPrettyNormal: invalid type '%s'\n", type.bv_val );
1630 		        Debug( LDAP_DEBUG_ACL, "aciPrettyNormal: invalid type '%s'\n", isgr.bv_val );
1640 	if ( BER_BVISEMPTY( &subject ) || subject.bv_val[ 0 ] != '#' ) {
1641 	        Debug( LDAP_DEBUG_ACL, "aciPrettyNormal: missing subject in '%s'\n", val->bv_val );
1646 	subject.bv_val++;
1662 	                Debug( LDAP_DEBUG_ACL, "aciPrettyNormal: invalid subject dn '%s'\n", subject.bv_val );
1673 			ocbv.bv_val = ber_bvchr( &type, '/' );
1674 			if ( ocbv.bv_val != NULL ) {
1683 				ocbv.bv_val++;
1684 				ocbv.bv_len = type.bv_len - ( ocbv.bv_val - type.bv_val );
1686 				atbv.bv_val = ber_bvchr( &ocbv, '/' );
1687 				if ( atbv.bv_val != NULL ) {
1688 					atbv.bv_val++;
1690 						- ( atbv.bv_val - type.bv_val );
1691 					ocbv.bv_len = atbv.bv_val - ocbv.bv_val - 1;
1695 	                                        Debug( LDAP_DEBUG_ACL, "aciPrettyNormal: unknown group attribute '%s'\n", atbv.bv_val );
1705                                         Debug( LDAP_DEBUG_ACL, "aciPrettyNormal: invalid group '%s'\n", ocbv.bv_val );
1711 				bv.bv_val = slap_sl_malloc( bv.bv_len + 1, ctx );
1713 				ptr = bv.bv_val;
1714 				ptr = lutil_strncopy( ptr, ntype.bv_val, ntype.bv_len );
1718 					oc->soc_cname.bv_val,
1724 						ad->ad_cname.bv_val,
1741                         Debug( LDAP_DEBUG_ACL, "aciPrettyNormal: unknown dn attribute '%s'\n", subject.bv_val );
1748                         Debug( LDAP_DEBUG_ACL, "aciPrettyNormal: wrong syntax for dn attribute '%s'\n", subject.bv_val );
1770 	out->bv_val = slap_sl_malloc( out->bv_len + 1, ctx );
1771 	ptr = lutil_strncopy( out->bv_val, oid.bv_val, oid.bv_len );
1774 	ptr = lutil_strncopy( ptr, scope.bv_val, scope.bv_len );
1777 	ptr = lutil_strncopy( ptr, nrights.bv_val, nrights.bv_len );
1780 	ptr = lutil_strncopy( ptr, ntype.bv_val, ntype.bv_len );
1784 		ptr = lutil_strncopy( ptr, nsubject.bv_val, nsubject.bv_len );
1790 		ber_memfree_x( nsubject.bv_val, ctx );
1794 		ber_memfree_x( ntype.bv_val, ctx );
1798 		ber_memfree_x( nrights.bv_val, ctx );