|
259
|
1 /* LDAP client interface for XEmacs.
|
|
265
|
2 Copyright (C) 1998 Free Software Foundation, Inc.
|
|
259
|
3
|
|
|
4 This file is part of XEmacs.
|
|
|
5
|
|
|
6 XEmacs is free software; you can redistribute it and/or modify it
|
|
|
7 under the terms of the GNU General Public License as published by the
|
|
|
8 Free Software Foundation; either version 2, or (at your option) any
|
|
|
9 later version.
|
|
|
10
|
|
|
11 XEmacs is distributed in the hope that it will be useful, but WITHOUT
|
|
|
12 ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
|
|
|
13 FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
|
|
|
14 for more details.
|
|
|
15
|
|
|
16 You should have received a copy of the GNU General Public License
|
|
|
17 along with XEmacs; see the file COPYING. If not, write to
|
|
|
18 the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
|
|
|
19 Boston, MA 02111-1307, USA. */
|
|
|
20
|
|
|
21 /* Synched up with: Not in FSF. */
|
|
|
22
|
|
|
23 /* Author: Oscar Figueiredo */
|
|
|
24
|
|
|
25 /* This file provides lisp primitives for access to an LDAP library
|
|
|
26 conforming to the API defined in RFC 1823.
|
|
|
27 It has been tested with:
|
|
|
28 - UMich LDAP 3.3 (http://www.umich.edu/~dirsvcs/ldap/)
|
|
|
29 - Netscape's LDAP SDK 1.0 (http://developer.netscape.com) */
|
|
|
30
|
|
|
31
|
|
|
32 #include <config.h>
|
|
|
33 #include "lisp.h"
|
|
278
|
34 #include "opaque.h"
|
|
259
|
35
|
|
265
|
36 #include <errno.h>
|
|
259
|
37 #include <lber.h>
|
|
|
38 #include <ldap.h>
|
|
|
39
|
|
276
|
40 #include "eldap.h"
|
|
|
41
|
|
259
|
42 #ifdef HAVE_NS_LDAP
|
|
|
43 #define HAVE_LDAP_SET_OPTION 1
|
|
|
44 #define HAVE_LDAP_GET_ERRNO 1
|
|
|
45 #else
|
|
|
46 #undef HAVE_LDAP_SET_OPTION
|
|
|
47 #undef HAVE_LDAP_GET_ERRNO
|
|
|
48 #endif
|
|
|
49
|
|
276
|
50 static int ldap_default_port;
|
|
|
51 static Lisp_Object Vldap_default_base;
|
|
|
52
|
|
|
53 /* ldap-open plist keywords */
|
|
280
|
54 extern Lisp_Object Qport, Qauth, Qbinddn, Qpasswd, Qderef, Qtimelimit,
|
|
276
|
55 Qsizelimit;
|
|
259
|
56 /* Search scope limits */
|
|
280
|
57 extern Lisp_Object Qbase, Qonelevel, Qsubtree;
|
|
259
|
58 /* Authentication methods */
|
|
|
59 #ifdef LDAP_AUTH_KRBV41
|
|
280
|
60 extern Lisp_Object Qkrbv41;
|
|
259
|
61 #endif
|
|
|
62 #ifdef LDAP_AUTH_KRBV42
|
|
280
|
63 extern Lisp_Object Qkrbv42;
|
|
259
|
64 #endif
|
|
|
65 /* Deref policy */
|
|
280
|
66 extern Lisp_Object Qnever, Qalways, Qfind;
|
|
|
67 /* Connection status */
|
|
|
68 extern Lisp_Object Qopen, Qclosed;
|
|
259
|
69
|
|
276
|
70 static Lisp_Object Qldapp;
|
|
|
71
|
|
|
72
|
|
|
73 /************************************************************************/
|
|
|
74 /* Utility Functions */
|
|
|
75 /************************************************************************/
|
|
|
76
|
|
|
77 static void
|
|
|
78 signal_ldap_error (LDAP *ld)
|
|
|
79 {
|
|
|
80 #if HAVE_LDAP_GET_ERRNO
|
|
|
81 signal_simple_error
|
|
|
82 ("LDAP error",
|
|
|
83 build_string (ldap_err2string (ldap_get_lderrno (ld, NULL, NULL))));
|
|
|
84 #else
|
|
|
85 signal_simple_error ("LDAP error",
|
|
|
86 build_string (ldap_err2string (ld->ld_errno)));
|
|
|
87 #endif
|
|
|
88 }
|
|
|
89
|
|
|
90
|
|
|
91 /************************************************************************/
|
|
|
92 /* The ldap Lisp object */
|
|
|
93 /************************************************************************/
|
|
|
94
|
|
|
95 /*
|
|
|
96 * Structure records pertinent information about an open LDAP connection.
|
|
|
97 */
|
|
|
98
|
|
|
99 struct Lisp_LDAP
|
|
|
100 {
|
|
|
101 /* lcrecord header */
|
|
|
102 struct lcrecord_header header;
|
|
|
103 /* The LDAP connection handle used by the LDAP API */
|
|
|
104 LDAP *ld;
|
|
|
105 /* Name of the host we connected to */
|
|
|
106 Lisp_Object host;
|
|
|
107 /* Status of the LDAP connection.
|
|
|
108 This is a symbol: open or closed */
|
|
|
109 Lisp_Object status_symbol;
|
|
|
110 };
|
|
|
111
|
|
|
112
|
|
|
113
|
|
|
114 static Lisp_Object
|
|
|
115 mark_ldap (Lisp_Object obj, void (*markobj) (Lisp_Object))
|
|
|
116 {
|
|
|
117 struct Lisp_LDAP *ldap = XLDAP (obj);
|
|
|
118 ((markobj) (ldap->host));
|
|
|
119 return ldap->status_symbol;
|
|
|
120 }
|
|
|
121
|
|
|
122 static void
|
|
|
123 print_ldap (Lisp_Object obj, Lisp_Object printcharfun, int escapeflag)
|
|
|
124 {
|
|
|
125 char buf[16];
|
|
|
126
|
|
|
127 struct Lisp_LDAP *ldap = XLDAP (obj);
|
|
|
128
|
|
|
129 if (print_readably)
|
|
|
130 error ("printing unreadable object #<ldap %s>",
|
|
|
131 XSTRING_DATA (ldap->host));
|
|
|
132
|
|
278
|
133 write_c_string ("#<ldap ", printcharfun);
|
|
|
134 print_internal (ldap->host, printcharfun, 1);
|
|
|
135 write_c_string (" state:",printcharfun);
|
|
|
136 print_internal (ldap->status_symbol, printcharfun, 1);
|
|
|
137 sprintf (buf, " 0x%x>", ldap);
|
|
|
138 write_c_string (buf, printcharfun);
|
|
276
|
139 }
|
|
|
140
|
|
|
141 static struct Lisp_LDAP *
|
|
|
142 allocate_ldap (void)
|
|
|
143 {
|
|
|
144 struct Lisp_LDAP *ldap =
|
|
|
145 alloc_lcrecord_type (struct Lisp_LDAP, lrecord_ldap);
|
|
|
146
|
|
|
147 ldap->ld = (LDAP *) NULL;
|
|
|
148 ldap->host = Qnil;
|
|
|
149 ldap->status_symbol = Qnil;
|
|
|
150 return ldap;
|
|
|
151 }
|
|
|
152
|
|
280
|
153 static void
|
|
|
154 finalize_ldap (void *header, int for_disksave)
|
|
|
155 {
|
|
|
156 struct Lisp_LDAP *ldap = (struct Lisp_LDAP *) header;
|
|
|
157
|
|
|
158 if (for_disksave)
|
|
|
159 {
|
|
|
160 Lisp_Object obj;
|
|
|
161 XSETLDAP (obj, ldap);
|
|
|
162 signal_simple_error
|
|
|
163 ("Can't dump an emacs containing LDAP objects", obj);
|
|
|
164 }
|
|
|
165 if (EQ (ldap->status_symbol, Qopen))
|
|
|
166 ldap_unbind (ldap->ld);
|
|
|
167 }
|
|
|
168
|
|
276
|
169 DEFINE_LRECORD_IMPLEMENTATION ("ldap", ldap,
|
|
280
|
170 mark_ldap, print_ldap, finalize_ldap,
|
|
276
|
171 NULL, NULL, struct Lisp_LDAP);
|
|
|
172
|
|
|
173
|
|
|
174
|
|
|
175
|
|
|
176 /************************************************************************/
|
|
|
177 /* Basic ldap accessors */
|
|
|
178 /************************************************************************/
|
|
|
179
|
|
|
180 DEFUN ("ldapp", Fldapp, 1, 1, 0, /*
|
|
|
181 Return t if OBJECT is a LDAP connection.
|
|
|
182 */
|
|
|
183 (object))
|
|
|
184 {
|
|
|
185 return LDAPP (object) ? Qt : Qnil;
|
|
|
186 }
|
|
|
187
|
|
|
188
|
|
|
189 DEFUN ("ldap-host", Fldap_host, 1, 1, 0, /*
|
|
|
190 Return the server host of the connection LDAP, as a string.
|
|
|
191 */
|
|
|
192 (ldap))
|
|
|
193 {
|
|
|
194 CHECK_LDAP (ldap);
|
|
|
195 return (XLDAP (ldap))->host;
|
|
|
196 }
|
|
|
197
|
|
|
198
|
|
|
199
|
|
|
200 DEFUN ("ldap-status", Fldap_status, 1, 1, 0, /*
|
|
|
201 Return the status of the connection LDAP.
|
|
|
202 This is a symbol, one of these:
|
|
|
203
|
|
|
204 open -- for a LDAP connection that is open.
|
|
|
205 closed -- for a LDAP connection that is closed.
|
|
|
206 */
|
|
|
207 (ldap))
|
|
|
208 {
|
|
|
209 CHECK_LDAP (ldap);
|
|
|
210 return (XLDAP (ldap))->status_symbol;
|
|
|
211 }
|
|
|
212
|
|
|
213
|
|
|
214
|
|
|
215 /************************************************************************/
|
|
|
216 /* Opening/Closing a LDAP connection */
|
|
|
217 /************************************************************************/
|
|
|
218
|
|
|
219
|
|
|
220 DEFUN ("ldap-open", Fldap_open, 1, 2, 0, /*
|
|
|
221 Open a LDAP connection to HOST.
|
|
|
222 PLIST is a plist containing additional parameters for the connection.
|
|
259
|
223 Valid keys in that list are:
|
|
276
|
224 `port' the TCP port to use for the connection if different from
|
|
|
225 `ldap-default-port'.
|
|
259
|
226 `auth' is the authentication method to use, possible values depend on
|
|
|
227 the LDAP library XEmacs was compiled with: `simple', `krbv41' and `krbv42'.
|
|
|
228 `binddn' is the distinguished name of the user to bind as (in RFC 1779 syntax).
|
|
|
229 `passwd' is the password to use for simple authentication.
|
|
|
230 `deref' is one of the symbols `never', `always', `search' or `find'.
|
|
|
231 `timelimit' is the timeout limit for the connection in seconds.
|
|
|
232 `sizelimit' is the maximum number of matches to return.
|
|
|
233 */
|
|
276
|
234 (host, plist))
|
|
259
|
235 {
|
|
276
|
236 /* This function can call lisp */
|
|
259
|
237
|
|
276
|
238 struct Lisp_LDAP *lisp_ldap;
|
|
259
|
239 LDAP *ld;
|
|
278
|
240 int ldap_port = 0;
|
|
259
|
241 int ldap_auth = LDAP_AUTH_SIMPLE;
|
|
|
242 char *ldap_binddn = NULL;
|
|
|
243 char *ldap_passwd = NULL;
|
|
|
244 int ldap_deref = LDAP_DEREF_NEVER;
|
|
|
245 int ldap_timelimit = 0;
|
|
|
246 int ldap_sizelimit = 0;
|
|
278
|
247 int err;
|
|
259
|
248
|
|
276
|
249 Lisp_Object ldap, list, keyword, value;
|
|
|
250 struct gcpro gcpro1;
|
|
259
|
251
|
|
276
|
252 ldap = Qnil;
|
|
|
253 GCPRO1 (ldap);
|
|
259
|
254
|
|
276
|
255 CHECK_STRING (host);
|
|
|
256
|
|
|
257 EXTERNAL_PROPERTY_LIST_LOOP(list, keyword, value, plist)
|
|
|
258 {
|
|
|
259 /* TCP Port */
|
|
|
260 if (EQ (keyword, Qport))
|
|
259
|
261 {
|
|
276
|
262 CHECK_INT (value);
|
|
|
263 ldap_port = XINT (value);
|
|
259
|
264 }
|
|
|
265 /* Authentication method */
|
|
276
|
266 if (EQ (keyword, Qauth))
|
|
259
|
267 {
|
|
|
268 CHECK_SYMBOL (value);
|
|
|
269
|
|
|
270 if (EQ (value, Qsimple))
|
|
|
271 ldap_auth = LDAP_AUTH_SIMPLE;
|
|
|
272 #ifdef LDAP_AUTH_KRBV41
|
|
|
273 else if (EQ (value, Qkrbv41))
|
|
|
274 ldap_auth = LDAP_AUTH_KRBV41;
|
|
|
275 #endif
|
|
|
276 #ifdef LDAP_AUTH_KRBV42
|
|
|
277 else if (EQ (value, Qkrbv42))
|
|
|
278 ldap_auth = LDAP_AUTH_KRBV42;
|
|
|
279 #endif
|
|
|
280 else
|
|
|
281 signal_simple_error ("Invalid authentication method", value);
|
|
|
282 }
|
|
|
283 /* Bind DN */
|
|
|
284 else if (EQ (keyword, Qbinddn))
|
|
|
285 {
|
|
276
|
286 CHECK_STRING (value);
|
|
|
287 ldap_binddn = alloca (XSTRING_LENGTH (value) + 1);
|
|
|
288 strcpy (ldap_binddn, (char *)XSTRING_DATA (value));
|
|
259
|
289 }
|
|
|
290 /* Password */
|
|
|
291 else if (EQ (keyword, Qpasswd))
|
|
|
292 {
|
|
276
|
293 CHECK_STRING (value);
|
|
|
294 ldap_passwd = alloca (XSTRING_LENGTH (value) + 1);
|
|
|
295 strcpy (ldap_passwd, (char *)XSTRING_DATA (value));
|
|
259
|
296 }
|
|
|
297 /* Deref */
|
|
|
298 else if (EQ (keyword, Qderef))
|
|
|
299 {
|
|
|
300 CHECK_SYMBOL (value);
|
|
|
301 if (EQ (value, Qnever))
|
|
|
302 ldap_deref = LDAP_DEREF_NEVER;
|
|
|
303 else if (EQ (value, Qsearch))
|
|
|
304 ldap_deref = LDAP_DEREF_SEARCHING;
|
|
|
305 else if (EQ (value, Qfind))
|
|
|
306 ldap_deref = LDAP_DEREF_FINDING;
|
|
|
307 else if (EQ (value, Qalways))
|
|
|
308 ldap_deref = LDAP_DEREF_ALWAYS;
|
|
|
309 else
|
|
|
310 signal_simple_error ("Invalid deref value", value);
|
|
|
311 }
|
|
|
312 /* Timelimit */
|
|
|
313 else if (EQ (keyword, Qtimelimit))
|
|
|
314 {
|
|
276
|
315 CHECK_INT (value);
|
|
|
316 ldap_timelimit = XINT (value);
|
|
259
|
317 }
|
|
|
318 /* Sizelimit */
|
|
|
319 else if (EQ (keyword, Qsizelimit))
|
|
|
320 {
|
|
276
|
321 CHECK_INT (value);
|
|
|
322 ldap_sizelimit = XINT (value);
|
|
259
|
323 }
|
|
|
324 }
|
|
|
325
|
|
276
|
326 if (ldap_port == 0)
|
|
259
|
327 {
|
|
276
|
328 ldap_port = ldap_default_port;
|
|
259
|
329 }
|
|
|
330
|
|
276
|
331 /* Connect to the server and bind */
|
|
|
332 ld = ldap_open ((char *)XSTRING_DATA (host), ldap_port);
|
|
|
333 if (ld == NULL )
|
|
|
334 signal_simple_error_2 ("Failed connecting to host",
|
|
|
335 host,
|
|
|
336 lisp_strerror (errno));
|
|
259
|
337
|
|
|
338
|
|
280
|
339 #ifdef HAVE_LDAP_SET_OPTION
|
|
259
|
340 if (ldap_set_option (ld, LDAP_OPT_DEREF, (void *)&ldap_deref) != LDAP_SUCCESS)
|
|
276
|
341 signal_ldap_error (ld);
|
|
|
342 if (ldap_set_option (ld, LDAP_OPT_TIMELIMIT,
|
|
|
343 (void *)&ldap_timelimit) != LDAP_SUCCESS)
|
|
|
344 signal_ldap_error (ld);
|
|
|
345 if (ldap_set_option (ld, LDAP_OPT_SIZELIMIT,
|
|
|
346 (void *)&ldap_sizelimit) != LDAP_SUCCESS)
|
|
|
347 signal_ldap_error (ld);
|
|
259
|
348 if (ldap_set_option (ld, LDAP_OPT_REFERRALS, LDAP_OPT_ON) != LDAP_SUCCESS)
|
|
276
|
349 signal_ldap_error (ld);
|
|
280
|
350 #else /* not HAVE_LDAP_SET_OPTION */
|
|
259
|
351 ld->ld_deref = ldap_deref;
|
|
|
352 ld->ld_timelimit = ldap_timelimit;
|
|
|
353 ld->ld_sizelimit = ldap_sizelimit;
|
|
|
354 #ifdef LDAP_REFERRALS
|
|
|
355 ld->ld_options = LDAP_OPT_REFERRALS;
|
|
280
|
356 #else /* not LDAP_REFERRALS */
|
|
259
|
357 ld->ld_options = 0;
|
|
280
|
358 #endif /* not LDAP_REFERRALS */
|
|
|
359 #endif /* not HAVE_LDAP_SET_OPTION */
|
|
259
|
360
|
|
276
|
361 /* ldap_bind_s calls select and may be wedged by spurious signals */
|
|
|
362 slow_down_interrupts ();
|
|
|
363 err = ldap_bind_s (ld, ldap_binddn, ldap_passwd, ldap_auth);
|
|
|
364 speed_up_interrupts ();
|
|
|
365 if (err != LDAP_SUCCESS)
|
|
259
|
366 signal_simple_error ("Failed binding to the server",
|
|
|
367 build_string (ldap_err2string (err)));
|
|
|
368
|
|
276
|
369 lisp_ldap = allocate_ldap ();
|
|
|
370 lisp_ldap->ld = ld;
|
|
|
371 lisp_ldap->host = host;
|
|
|
372 lisp_ldap->status_symbol = Qopen;
|
|
|
373 XSETLDAP (ldap,lisp_ldap);
|
|
|
374
|
|
|
375 UNGCPRO;
|
|
|
376 return ldap;
|
|
|
377 }
|
|
|
378
|
|
|
379
|
|
|
380
|
|
|
381 DEFUN ("ldap-close", Fldap_close, 1, 1, 0, /*
|
|
|
382 Close an LDAP connection.
|
|
|
383 */
|
|
|
384 (ldap))
|
|
|
385 {
|
|
280
|
386 struct Lisp_LDAP *lldap;
|
|
|
387 CHECK_LIVE_LDAP (ldap);
|
|
|
388 lldap = XLDAP (ldap);
|
|
|
389 ldap_unbind (lldap->ld);
|
|
|
390 lldap->status_symbol = Qclosed;
|
|
276
|
391 return Qnil;
|
|
|
392 }
|
|
|
393
|
|
|
394
|
|
|
395
|
|
|
396 /************************************************************************/
|
|
|
397 /* Working on a LDAP connection */
|
|
|
398 /************************************************************************/
|
|
278
|
399 struct ldap_unwind_struct
|
|
|
400 {
|
|
|
401 LDAPMessage *res;
|
|
|
402 char **vals;
|
|
|
403 };
|
|
|
404
|
|
|
405
|
|
|
406 static Lisp_Object
|
|
|
407 ldap_search_unwind (Lisp_Object unwind_obj)
|
|
|
408 {
|
|
|
409 struct ldap_unwind_struct *unwind =
|
|
|
410 (struct ldap_unwind_struct *) get_opaque_ptr (unwind_obj);
|
|
|
411 if (unwind->res != (LDAPMessage *)NULL)
|
|
|
412 ldap_msgfree (unwind->res);
|
|
|
413 if (unwind->vals != (char **)NULL)
|
|
|
414 ldap_value_free (unwind->vals);
|
|
|
415 }
|
|
276
|
416
|
|
|
417 DEFUN ("ldap-search-internal", Fldap_search_internal, 2, 6, 0, /*
|
|
|
418 Perform a search on an open LDAP connection.
|
|
|
419 LDAP is an LDAP connection object created with `ldap-open'.
|
|
|
420 FILTER is a filter string for the search as described in RFC 1558
|
|
|
421 BASE is the distinguished name at which to start the search
|
|
|
422 SCOPE is an integer or a symbol indicating the scope of the search
|
|
|
423 Possible values are `ldap-scope-base', `ldap-scope-onelevel' or
|
|
|
424 `ldap-scope-subtree'
|
|
|
425 ATTRS is a list of strings indicating which attributes to retrieve
|
|
|
426 for each matching entry. If nil return all available attributes.
|
|
|
427 If ATTRSONLY is non-nil then only the attributes are retrieved, not
|
|
|
428 the associated values
|
|
|
429 The function returns a list of matching entries. Each entry is itself
|
|
|
430 an alist of attribute/values.
|
|
|
431 */
|
|
|
432 (ldap, filter, base, scope, attrs, attrsonly))
|
|
|
433 {
|
|
|
434 /* This function can call lisp */
|
|
|
435
|
|
|
436 /* Vars for query */
|
|
|
437 LDAP *ld;
|
|
278
|
438 LDAPMessage *e;
|
|
276
|
439 BerElement *ptr;
|
|
|
440 char *a;
|
|
|
441 int i, rc, err;
|
|
|
442 int matches;
|
|
278
|
443 struct ldap_unwind_struct unwind;
|
|
276
|
444
|
|
|
445 int ldap_scope = LDAP_SCOPE_SUBTREE;
|
|
|
446 char **ldap_attributes = NULL;
|
|
|
447
|
|
278
|
448 int speccount = specpdl_depth ();
|
|
|
449
|
|
276
|
450 Lisp_Object list, entry, result;
|
|
|
451 struct gcpro gcpro1, gcpro2, gcpro3;
|
|
|
452
|
|
|
453 list = entry = result = Qnil;
|
|
|
454 GCPRO3(list, entry, result);
|
|
|
455
|
|
278
|
456 unwind.res = (LDAPMessage *)NULL;
|
|
|
457 unwind.vals = (char **)NULL;
|
|
|
458
|
|
276
|
459 /* Do all the parameter checking */
|
|
|
460 CHECK_LIVE_LDAP (ldap);
|
|
|
461 ld = (XLDAP (ldap))->ld;
|
|
|
462
|
|
|
463 /* Filter */
|
|
|
464 CHECK_STRING (filter);
|
|
|
465
|
|
|
466 /* Search base */
|
|
|
467 if (NILP (base))
|
|
|
468 {
|
|
|
469 base = Vldap_default_base;
|
|
|
470 }
|
|
|
471 if (!NILP (base))
|
|
|
472 {
|
|
|
473 CHECK_STRING (Vldap_default_base);
|
|
|
474 }
|
|
|
475
|
|
|
476 /* Search scope */
|
|
|
477 if (!NILP (scope))
|
|
|
478 {
|
|
|
479 CHECK_SYMBOL (scope);
|
|
|
480 if (EQ (scope, Qbase))
|
|
|
481 ldap_scope = LDAP_SCOPE_BASE;
|
|
|
482 else if (EQ (scope, Qonelevel))
|
|
|
483 ldap_scope = LDAP_SCOPE_ONELEVEL;
|
|
|
484 else if (EQ (scope, Qsubtree))
|
|
|
485 ldap_scope = LDAP_SCOPE_SUBTREE;
|
|
|
486 else
|
|
|
487 signal_simple_error ("Invalid scope", scope);
|
|
|
488 }
|
|
|
489
|
|
|
490 /* Attributes to search */
|
|
|
491 if (!NILP (attrs))
|
|
|
492 {
|
|
|
493 CHECK_CONS (attrs);
|
|
278
|
494 ldap_attributes = alloca_array (char *, 1 + XINT (Flength (attrs)));
|
|
276
|
495
|
|
278
|
496 i = 0;
|
|
|
497 EXTERNAL_LIST_LOOP (attrs, attrs)
|
|
|
498 {
|
|
|
499 Lisp_Object current = XCAR (attrs);
|
|
|
500 CHECK_STRING (current);
|
|
|
501 ldap_attributes[i] =
|
|
|
502 alloca_array (char, 1 + XSTRING_LENGTH (current));
|
|
|
503 memcpy (ldap_attributes[i],
|
|
|
504 XSTRING_DATA (current), XSTRING_LENGTH (current));
|
|
|
505 ++i;
|
|
|
506 }
|
|
276
|
507 ldap_attributes[i] = NULL;
|
|
|
508 }
|
|
|
509
|
|
|
510 /* Attributes only ? */
|
|
|
511 CHECK_SYMBOL (attrsonly);
|
|
|
512
|
|
|
513
|
|
|
514 /* Perform the search */
|
|
|
515 if (ldap_search (ld,
|
|
|
516 NILP (base) ? "" : (char *) XSTRING_DATA (base),
|
|
|
517 ldap_scope,
|
|
|
518 NILP (filter) ? "" : (char *) XSTRING_DATA (filter),
|
|
|
519 ldap_attributes,
|
|
|
520 NILP (attrsonly) ? 0 : 1)
|
|
|
521 == -1)
|
|
|
522 {
|
|
|
523 signal_ldap_error (ld);
|
|
259
|
524 }
|
|
|
525
|
|
278
|
526 /* Ensure we don't exit without cleaning up */
|
|
|
527 record_unwind_protect (ldap_search_unwind,
|
|
|
528 make_opaque_ptr (&unwind));
|
|
|
529
|
|
259
|
530 /* Build the results list */
|
|
|
531 matches = 0;
|
|
|
532
|
|
276
|
533 /* ldap_result calls select() and can get wedged by EINTR signals */
|
|
|
534 slow_down_interrupts ();
|
|
278
|
535 rc = ldap_result (ld, LDAP_RES_ANY, 0, NULL, &(unwind.res));
|
|
276
|
536 speed_up_interrupts ();
|
|
|
537 while ( rc == LDAP_RES_SEARCH_ENTRY )
|
|
259
|
538 {
|
|
278
|
539 QUIT;
|
|
259
|
540 matches ++;
|
|
278
|
541 e = ldap_first_entry (ld, unwind.res);
|
|
259
|
542 message ("Parsing results... %d", matches);
|
|
|
543 entry = Qnil;
|
|
|
544 for (a= ldap_first_attribute (ld, e, &ptr);
|
|
|
545 a != NULL;
|
|
|
546 a= ldap_next_attribute (ld, e, ptr) )
|
|
|
547 {
|
|
|
548 list = Fcons (build_string (a), Qnil);
|
|
278
|
549 unwind.vals = ldap_get_values (ld, e, a);
|
|
|
550 if (unwind.vals != NULL)
|
|
259
|
551 {
|
|
278
|
552 for (i=0; unwind.vals[i]!=NULL; i++)
|
|
259
|
553 {
|
|
278
|
554 list = Fcons (build_string (unwind.vals[i]),
|
|
259
|
555 list);
|
|
|
556 }
|
|
|
557 }
|
|
|
558 entry = Fcons (Fnreverse (list),
|
|
|
559 entry);
|
|
278
|
560 ldap_value_free (unwind.vals);
|
|
|
561 unwind.vals = (char **)NULL;
|
|
259
|
562 }
|
|
|
563 result = Fcons (Fnreverse (entry),
|
|
|
564 result);
|
|
278
|
565 ldap_msgfree (unwind.res);
|
|
|
566 unwind.res = (LDAPMessage *)NULL;
|
|
276
|
567
|
|
|
568 slow_down_interrupts ();
|
|
278
|
569 rc = ldap_result (ld, LDAP_RES_ANY, 0, NULL, &(unwind.res));
|
|
276
|
570 speed_up_interrupts ();
|
|
259
|
571 }
|
|
|
572
|
|
|
573 if (rc == -1)
|
|
|
574 {
|
|
276
|
575 signal_ldap_error (ld);
|
|
259
|
576 }
|
|
280
|
577 rc = ldap_result2error (ld, unwind.res, 0);
|
|
|
578 if ((rc != LDAP_SUCCESS) &&
|
|
|
579 (rc != LDAP_SIZELIMIT_EXCEEDED))
|
|
259
|
580 {
|
|
276
|
581 signal_ldap_error (ld);
|
|
259
|
582 }
|
|
|
583
|
|
278
|
584 ldap_msgfree (unwind.res);
|
|
|
585 unwind.res = (LDAPMessage *)NULL;
|
|
259
|
586 message ("Done.");
|
|
|
587
|
|
|
588 result = Fnreverse (result);
|
|
|
589 clear_message ();
|
|
|
590
|
|
278
|
591 unbind_to (speccount, Qnil);
|
|
259
|
592 UNGCPRO;
|
|
|
593 return result;
|
|
|
594 }
|
|
|
595
|
|
|
596
|
|
|
597 void
|
|
|
598 syms_of_eldap (void)
|
|
|
599 {
|
|
276
|
600 defsymbol (&Qldapp, "ldapp");
|
|
259
|
601
|
|
276
|
602 DEFSUBR (Fldapp);
|
|
|
603 DEFSUBR (Fldap_host);
|
|
|
604 DEFSUBR (Fldap_status);
|
|
|
605 DEFSUBR (Fldap_open);
|
|
|
606 DEFSUBR (Fldap_close);
|
|
|
607 DEFSUBR (Fldap_search_internal);
|
|
259
|
608 }
|
|
|
609
|
|
|
610 void
|
|
|
611 vars_of_eldap (void)
|
|
|
612 {
|
|
276
|
613 Fprovide (intern ("ldap"));
|
|
259
|
614
|
|
276
|
615 ldap_default_port = LDAP_PORT;
|
|
|
616 Vldap_default_base = Qnil;
|
|
|
617
|
|
|
618 DEFVAR_INT ("ldap-default-port", &ldap_default_port /*
|
|
|
619 Default TCP port for LDAP connections.
|
|
|
620 Initialized from the LDAP library. Default value is 389.
|
|
259
|
621 */ );
|
|
|
622
|
|
|
623 DEFVAR_LISP ("ldap-default-base", &Vldap_default_base /*
|
|
|
624 Default base for LDAP searches.
|
|
|
625 This is a string using the syntax of RFC 1779.
|
|
|
626 For instance, "o=ACME, c=US" limits the search to the
|
|
|
627 Acme organization in the United States.
|
|
|
628 */ );
|
|
|
629
|
|
|
630 }
|
|
276
|
631
|
|
|
632
|
