2 ldb database mapping module
4 Copyright (C) Jelmer Vernooij 2005
5 Copyright (C) Martin Kuehl <mkhl@samba.org> 2006
6 Copyright (C) Simo Sorce 2008
8 ** NOTE! The following LGPL license applies to the ldb
9 ** library. This does NOT imply that all of Samba is released
12 This library is free software; you can redistribute it and/or
13 modify it under the terms of the GNU Lesser General Public
14 License as published by the Free Software Foundation; either
15 version 3 of the License, or (at your option) any later version.
17 This library is distributed in the hope that it will be useful,
18 but WITHOUT ANY WARRANTY; without even the implied warranty of
19 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
20 Lesser General Public License for more details.
22 You should have received a copy of the GNU Lesser General Public
23 License along with this library; if not, see <http://www.gnu.org/licenses/>.
30 * Component: ldb ldb_map module
32 * Description: Map portions of data into a different format on a
35 * Author: Jelmer Vernooij, Martin Kuehl
38 #include "ldb_includes.h"
40 #include "ldb_map_private.h"
46 /* Description of the provided ldb requests:
47 - special attribute 'isMapped'
50 - if parse tree can be split
51 - search remote records w/ remote attrs and parse tree
53 - enumerate all remote records
54 - for each remote result
55 - map remote result to local message
58 - merge local into remote result
59 - run callback on merged result
61 - run callback on remote result
64 - split message into local and remote part
65 - if local message is not empty
66 - add isMapped to local message
71 - split message into local and remote part
72 - if local message is not empty
73 - add isMapped to local message
74 - search for local record
79 - modify remote record
82 - search for local record
85 - delete remote record
88 - search for local record
91 - modify local isMapped
92 - rename remote record
97 /* Private data structures
98 * ======================= */
100 /* Global private data */
101 /* Extract mappings from private data. */
102 const struct ldb_map_context *map_get_context(struct ldb_module *module)
104 const struct map_private *data = talloc_get_type(ldb_module_get_private(module), struct map_private);
105 return data->context;
108 /* Create a generic request context. */
109 struct map_context *map_init_context(struct ldb_module *module,
110 struct ldb_request *req)
112 struct ldb_context *ldb;
113 struct map_context *ac;
115 ldb = ldb_module_get_ctx(module);
117 ac = talloc_zero(req, struct map_context);
119 ldb_set_errstring(ldb, "Out of Memory");
129 /* Dealing with DNs for different partitions
130 * ========================================= */
132 /* Check whether any data should be stored in the local partition. */
133 bool map_check_local_db(struct ldb_module *module)
135 const struct ldb_map_context *data = map_get_context(module);
137 if (!data->remote_base_dn || !data->local_base_dn) {
144 /* Copy a DN with the base DN of the local partition. */
145 static struct ldb_dn *ldb_dn_rebase_local(void *mem_ctx, const struct ldb_map_context *data, struct ldb_dn *dn)
147 struct ldb_dn *new_dn;
149 new_dn = ldb_dn_copy(mem_ctx, dn);
150 if ( ! ldb_dn_validate(new_dn)) {
155 /* may be we don't need to rebase at all */
156 if ( ! data->remote_base_dn || ! data->local_base_dn) {
160 if ( ! ldb_dn_remove_base_components(new_dn, ldb_dn_get_comp_num(data->remote_base_dn))) {
165 if ( ! ldb_dn_add_base(new_dn, data->local_base_dn)) {
173 /* Copy a DN with the base DN of the remote partition. */
174 static struct ldb_dn *ldb_dn_rebase_remote(void *mem_ctx, const struct ldb_map_context *data, struct ldb_dn *dn)
176 struct ldb_dn *new_dn;
178 new_dn = ldb_dn_copy(mem_ctx, dn);
179 if ( ! ldb_dn_validate(new_dn)) {
184 /* may be we don't need to rebase at all */
185 if ( ! data->remote_base_dn || ! data->local_base_dn) {
189 if ( ! ldb_dn_remove_base_components(new_dn, ldb_dn_get_comp_num(data->local_base_dn))) {
194 if ( ! ldb_dn_add_base(new_dn, data->remote_base_dn)) {
202 /* Run a request and make sure it targets the remote partition. */
203 /* TODO: free old DNs and messages? */
204 int ldb_next_remote_request(struct ldb_module *module, struct ldb_request *request)
206 const struct ldb_map_context *data = map_get_context(module);
207 struct ldb_context *ldb;
208 struct ldb_message *msg;
210 ldb = ldb_module_get_ctx(module);
212 switch (request->operation) {
214 if (request->op.search.base) {
215 request->op.search.base = ldb_dn_rebase_remote(request, data, request->op.search.base);
217 request->op.search.base = data->remote_base_dn;
218 /* TODO: adjust scope? */
223 msg = ldb_msg_copy_shallow(request, request->op.add.message);
224 msg->dn = ldb_dn_rebase_remote(msg, data, msg->dn);
225 request->op.add.message = msg;
229 msg = ldb_msg_copy_shallow(request, request->op.mod.message);
230 msg->dn = ldb_dn_rebase_remote(msg, data, msg->dn);
231 request->op.mod.message = msg;
235 request->op.del.dn = ldb_dn_rebase_remote(request, data, request->op.del.dn);
239 request->op.rename.olddn = ldb_dn_rebase_remote(request, data, request->op.rename.olddn);
240 request->op.rename.newdn = ldb_dn_rebase_remote(request, data, request->op.rename.newdn);
244 ldb_debug(ldb, LDB_DEBUG_ERROR, "ldb_map: "
245 "Invalid remote request!");
246 return LDB_ERR_OPERATIONS_ERROR;
249 return ldb_next_request(module, request);
253 /* Finding mappings for attributes and objectClasses
254 * ================================================= */
256 /* Find an objectClass mapping by the local name. */
257 static const struct ldb_map_objectclass *map_objectclass_find_local(const struct ldb_map_context *data, const char *name)
261 for (i = 0; data->objectclass_maps && data->objectclass_maps[i].local_name; i++) {
262 if (ldb_attr_cmp(data->objectclass_maps[i].local_name, name) == 0) {
263 return &data->objectclass_maps[i];
270 /* Find an objectClass mapping by the remote name. */
271 static const struct ldb_map_objectclass *map_objectclass_find_remote(const struct ldb_map_context *data, const char *name)
275 for (i = 0; data->objectclass_maps && data->objectclass_maps[i].remote_name; i++) {
276 if (ldb_attr_cmp(data->objectclass_maps[i].remote_name, name) == 0) {
277 return &data->objectclass_maps[i];
284 /* Find an attribute mapping by the local name. */
285 const struct ldb_map_attribute *map_attr_find_local(const struct ldb_map_context *data, const char *name)
289 for (i = 0; data->attribute_maps[i].local_name; i++) {
290 if (ldb_attr_cmp(data->attribute_maps[i].local_name, name) == 0) {
291 return &data->attribute_maps[i];
294 for (i = 0; data->attribute_maps[i].local_name; i++) {
295 if (ldb_attr_cmp(data->attribute_maps[i].local_name, "*") == 0) {
296 return &data->attribute_maps[i];
303 /* Find an attribute mapping by the remote name. */
304 const struct ldb_map_attribute *map_attr_find_remote(const struct ldb_map_context *data, const char *name)
306 const struct ldb_map_attribute *map;
307 const struct ldb_map_attribute *wildcard = NULL;
310 for (i = 0; data->attribute_maps[i].local_name; i++) {
311 map = &data->attribute_maps[i];
312 if (ldb_attr_cmp(map->local_name, "*") == 0) {
313 wildcard = &data->attribute_maps[i];
321 if (ldb_attr_cmp(map->local_name, name) == 0) {
327 case LDB_MAP_CONVERT:
328 if (ldb_attr_cmp(map->u.rename.remote_name, name) == 0) {
333 case LDB_MAP_GENERATE:
334 for (j = 0; map->u.generate.remote_names && map->u.generate.remote_names[j]; j++) {
335 if (ldb_attr_cmp(map->u.generate.remote_names[j], name) == 0) {
343 /* We didn't find it, so return the wildcard record if one was configured */
348 /* Mapping attributes
349 * ================== */
351 /* Check whether an attribute will be mapped into the remote partition. */
352 bool map_attr_check_remote(const struct ldb_map_context *data, const char *attr)
354 const struct ldb_map_attribute *map = map_attr_find_local(data, attr);
359 if (map->type == LDB_MAP_IGNORE) {
366 /* Map an attribute name into the remote partition. */
367 const char *map_attr_map_local(void *mem_ctx, const struct ldb_map_attribute *map, const char *attr)
370 return talloc_strdup(mem_ctx, attr);
375 return talloc_strdup(mem_ctx, attr);
378 case LDB_MAP_CONVERT:
379 return talloc_strdup(mem_ctx, map->u.rename.remote_name);
386 /* Map an attribute name back into the local partition. */
387 const char *map_attr_map_remote(void *mem_ctx, const struct ldb_map_attribute *map, const char *attr)
390 return talloc_strdup(mem_ctx, attr);
393 if (map->type == LDB_MAP_KEEP) {
394 return talloc_strdup(mem_ctx, attr);
397 return talloc_strdup(mem_ctx, map->local_name);
401 /* Merge two lists of attributes into a single one. */
402 int map_attrs_merge(struct ldb_module *module, void *mem_ctx,
403 const char ***attrs, const char * const *more_attrs)
405 unsigned int i, j, k;
407 for (i = 0; *attrs && (*attrs)[i]; i++) /* noop */ ;
408 for (j = 0; more_attrs && more_attrs[j]; j++) /* noop */ ;
410 *attrs = talloc_realloc(mem_ctx, *attrs, const char *, i+j+1);
411 if (*attrs == NULL) {
416 for (k = 0; k < j; k++) {
417 (*attrs)[i + k] = more_attrs[k];
420 (*attrs)[i+k] = NULL;
425 /* Mapping ldb values
426 * ================== */
428 /* Map an ldb value into the remote partition. */
429 struct ldb_val ldb_val_map_local(struct ldb_module *module, void *mem_ctx,
430 const struct ldb_map_attribute *map, const struct ldb_val *val)
432 if (map && (map->type == LDB_MAP_CONVERT) && (map->u.convert.convert_local)) {
433 return map->u.convert.convert_local(module, mem_ctx, val);
436 return ldb_val_dup(mem_ctx, val);
439 /* Map an ldb value back into the local partition. */
440 struct ldb_val ldb_val_map_remote(struct ldb_module *module, void *mem_ctx,
441 const struct ldb_map_attribute *map, const struct ldb_val *val)
443 if (map && (map->type == LDB_MAP_CONVERT) && (map->u.convert.convert_remote)) {
444 return map->u.convert.convert_remote(module, mem_ctx, val);
447 return ldb_val_dup(mem_ctx, val);
454 /* Check whether a DN is below the local baseDN. */
455 bool ldb_dn_check_local(struct ldb_module *module, struct ldb_dn *dn)
457 const struct ldb_map_context *data = map_get_context(module);
459 if (!data->local_base_dn) {
463 return ldb_dn_compare_base(data->local_base_dn, dn) == 0;
466 /* Map a DN into the remote partition. */
467 struct ldb_dn *ldb_dn_map_local(struct ldb_module *module, void *mem_ctx, struct ldb_dn *dn)
469 const struct ldb_map_context *data = map_get_context(module);
470 struct ldb_context *ldb;
471 struct ldb_dn *newdn;
472 const struct ldb_map_attribute *map;
473 enum ldb_map_attr_type map_type;
475 struct ldb_val value;
483 ldb = ldb_module_get_ctx(module);
485 newdn = ldb_dn_copy(mem_ctx, dn);
491 /* For each RDN, map the component name and possibly the value */
492 for (i = 0; i < ldb_dn_get_comp_num(newdn); i++) {
493 map = map_attr_find_local(data, ldb_dn_get_component_name(dn, i));
495 /* Unknown attribute - leave this RDN as is and hope the best... */
497 map_type = LDB_MAP_KEEP;
499 map_type = map->type;
504 case LDB_MAP_GENERATE:
505 ldb_debug(ldb, LDB_DEBUG_ERROR, "ldb_map: "
506 "LDB_MAP_IGNORE/LDB_MAP_GENERATE attribute '%s' "
507 "used in DN!", ldb_dn_get_component_name(dn, i));
510 case LDB_MAP_CONVERT:
511 if (map->u.convert.convert_local == NULL) {
512 ldb_debug(ldb, LDB_DEBUG_ERROR, "ldb_map: "
513 "'convert_local' not set for attribute '%s' "
514 "used in DN!", ldb_dn_get_component_name(dn, i));
520 name = map_attr_map_local(newdn, map, ldb_dn_get_component_name(dn, i));
521 if (name == NULL) goto failed;
523 value = ldb_val_map_local(module, newdn, map, ldb_dn_get_component_val(dn, i));
524 if (value.data == NULL) goto failed;
526 ret = ldb_dn_set_component(newdn, i, name, value);
527 if (ret != LDB_SUCCESS) {
542 /* Map a DN into the local partition. */
543 struct ldb_dn *ldb_dn_map_remote(struct ldb_module *module, void *mem_ctx, struct ldb_dn *dn)
545 const struct ldb_map_context *data = map_get_context(module);
546 struct ldb_context *ldb;
547 struct ldb_dn *newdn;
548 const struct ldb_map_attribute *map;
549 enum ldb_map_attr_type map_type;
551 struct ldb_val value;
559 ldb = ldb_module_get_ctx(module);
561 newdn = ldb_dn_copy(mem_ctx, dn);
567 /* For each RDN, map the component name and possibly the value */
568 for (i = 0; i < ldb_dn_get_comp_num(newdn); i++) {
569 map = map_attr_find_remote(data, ldb_dn_get_component_name(dn, i));
571 /* Unknown attribute - leave this RDN as is and hope the best... */
573 map_type = LDB_MAP_KEEP;
575 map_type = map->type;
580 case LDB_MAP_GENERATE:
581 ldb_debug(ldb, LDB_DEBUG_ERROR, "ldb_map: "
582 "LDB_MAP_IGNORE/LDB_MAP_GENERATE attribute '%s' "
583 "used in DN!", ldb_dn_get_component_name(dn, i));
586 case LDB_MAP_CONVERT:
587 if (map->u.convert.convert_remote == NULL) {
588 ldb_debug(ldb, LDB_DEBUG_ERROR, "ldb_map: "
589 "'convert_remote' not set for attribute '%s' "
590 "used in DN!", ldb_dn_get_component_name(dn, i));
596 name = map_attr_map_remote(newdn, map, ldb_dn_get_component_name(dn, i));
597 if (name == NULL) goto failed;
599 value = ldb_val_map_remote(module, newdn, map, ldb_dn_get_component_val(dn, i));
600 if (value.data == NULL) goto failed;
602 ret = ldb_dn_set_component(newdn, i, name, value);
603 if (ret != LDB_SUCCESS) {
618 /* Map a DN and its base into the local partition. */
619 /* TODO: This should not be required with GUIDs. */
620 struct ldb_dn *ldb_dn_map_rebase_remote(struct ldb_module *module, void *mem_ctx, struct ldb_dn *dn)
622 const struct ldb_map_context *data = map_get_context(module);
623 struct ldb_dn *dn1, *dn2;
625 dn1 = ldb_dn_rebase_local(mem_ctx, data, dn);
626 dn2 = ldb_dn_map_remote(module, mem_ctx, dn1);
633 /* Converting DNs and objectClasses (as ldb values)
634 * ================================================ */
636 /* Map a DN contained in an ldb value into the remote partition. */
637 static struct ldb_val ldb_dn_convert_local(struct ldb_module *module, void *mem_ctx, const struct ldb_val *val)
639 struct ldb_context *ldb;
640 struct ldb_dn *dn, *newdn;
641 struct ldb_val newval;
643 ldb = ldb_module_get_ctx(module);
645 dn = ldb_dn_from_ldb_val(mem_ctx, ldb, val);
646 if (! ldb_dn_validate(dn)) {
652 newdn = ldb_dn_map_local(module, mem_ctx, dn);
656 newval.data = (uint8_t *)ldb_dn_alloc_linearized(mem_ctx, newdn);
658 newval.length = strlen((char *)newval.data);
665 /* Map a DN contained in an ldb value into the local partition. */
666 static struct ldb_val ldb_dn_convert_remote(struct ldb_module *module, void *mem_ctx, const struct ldb_val *val)
668 struct ldb_context *ldb;
669 struct ldb_dn *dn, *newdn;
670 struct ldb_val newval;
672 ldb = ldb_module_get_ctx(module);
674 dn = ldb_dn_from_ldb_val(mem_ctx, ldb, val);
675 if (! ldb_dn_validate(dn)) {
681 newdn = ldb_dn_map_remote(module, mem_ctx, dn);
685 newval.data = (uint8_t *)ldb_dn_alloc_linearized(mem_ctx, newdn);
687 newval.length = strlen((char *)newval.data);
694 /* Map an objectClass into the remote partition. */
695 static struct ldb_val map_objectclass_convert_local(struct ldb_module *module, void *mem_ctx, const struct ldb_val *val)
697 const struct ldb_map_context *data = map_get_context(module);
698 const char *name = (char *)val->data;
699 const struct ldb_map_objectclass *map = map_objectclass_find_local(data, name);
700 struct ldb_val newval;
703 newval.data = (uint8_t*)talloc_strdup(mem_ctx, map->remote_name);
704 newval.length = strlen((char *)newval.data);
708 return ldb_val_dup(mem_ctx, val);
711 /* Generate a remote message with a mapped objectClass. */
712 static void map_objectclass_generate_remote(struct ldb_module *module, const char *local_attr, const struct ldb_message *old, struct ldb_message *remote, struct ldb_message *local)
714 const struct ldb_map_context *data = map_get_context(module);
715 struct ldb_context *ldb;
716 struct ldb_message_element *el, *oc;
718 bool found_extensibleObject = false;
721 ldb = ldb_module_get_ctx(module);
723 /* Find old local objectClass */
724 oc = ldb_msg_find_element(old, "objectClass");
729 /* Prepare new element */
730 el = talloc_zero(remote, struct ldb_message_element);
733 return; /* TODO: fail? */
736 /* Copy local objectClass element, reverse space for an extra value */
737 el->num_values = oc->num_values + 1;
738 el->values = talloc_array(el, struct ldb_val, el->num_values);
739 if (el->values == NULL) {
742 return; /* TODO: fail? */
745 /* Copy local element name "objectClass" */
746 el->name = talloc_strdup(el, local_attr);
748 /* Convert all local objectClasses */
749 for (i = 0; i < el->num_values - 1; i++) {
750 el->values[i] = map_objectclass_convert_local(module, el->values, &oc->values[i]);
751 if (ldb_attr_cmp((char *)el->values[i].data, data->add_objectclass) == 0) {
752 found_extensibleObject = true;
756 if (!found_extensibleObject) {
757 val.data = (uint8_t *)talloc_strdup(el->values, data->add_objectclass);
758 val.length = strlen((char *)val.data);
760 /* Append additional objectClass data->add_objectclass */
766 /* Add new objectClass to remote message */
767 ldb_msg_add(remote, el, 0);
770 /* Map an objectClass into the local partition. */
771 static struct ldb_val map_objectclass_convert_remote(struct ldb_module *module, void *mem_ctx, const struct ldb_val *val)
773 const struct ldb_map_context *data = map_get_context(module);
774 const char *name = (char *)val->data;
775 const struct ldb_map_objectclass *map = map_objectclass_find_remote(data, name);
776 struct ldb_val newval;
779 newval.data = (uint8_t*)talloc_strdup(mem_ctx, map->local_name);
780 newval.length = strlen((char *)newval.data);
784 return ldb_val_dup(mem_ctx, val);
787 /* Generate a local message with a mapped objectClass. */
788 static struct ldb_message_element *map_objectclass_generate_local(struct ldb_module *module, void *mem_ctx, const char *local_attr, const struct ldb_message *remote)
790 const struct ldb_map_context *data = map_get_context(module);
791 struct ldb_context *ldb;
792 struct ldb_message_element *el, *oc;
796 ldb = ldb_module_get_ctx(module);
798 /* Find old remote objectClass */
799 oc = ldb_msg_find_element(remote, "objectClass");
804 /* Prepare new element */
805 el = talloc_zero(mem_ctx, struct ldb_message_element);
811 /* Copy remote objectClass element */
812 el->num_values = oc->num_values;
813 el->values = talloc_array(el, struct ldb_val, el->num_values);
814 if (el->values == NULL) {
820 /* Copy remote element name "objectClass" */
821 el->name = talloc_strdup(el, local_attr);
823 /* Convert all remote objectClasses */
824 for (i = 0; i < el->num_values; i++) {
825 el->values[i] = map_objectclass_convert_remote(module, el->values, &oc->values[i]);
828 val.data = (uint8_t *)talloc_strdup(el->values, data->add_objectclass);
829 val.length = strlen((char *)val.data);
831 /* Remove last value if it was the string in data->add_objectclass (eg samba4top, extensibleObject) */
832 if (ldb_val_equal_exact(&val, &el->values[i-1])) {
834 el->values = talloc_realloc(el, el->values, struct ldb_val, el->num_values);
835 if (el->values == NULL) {
845 static const struct ldb_map_attribute objectclass_convert_map = {
846 .local_name = "objectClass",
847 .type = LDB_MAP_CONVERT,
850 .remote_name = "objectClass",
851 .convert_local = map_objectclass_convert_local,
852 .convert_remote = map_objectclass_convert_remote,
858 /* Mappings for searches on objectClass= assuming a one-to-one
859 * mapping. Needed because this is a generate operator for the
861 static int map_objectclass_convert_operator(struct ldb_module *module, void *mem_ctx,
862 struct ldb_parse_tree **new, const struct ldb_parse_tree *tree)
865 return map_subtree_collect_remote_simple(module, mem_ctx, new, tree, &objectclass_convert_map);
868 /* Auxiliary request construction
869 * ============================== */
871 /* Build a request to search a record by its DN. */
872 struct ldb_request *map_search_base_req(struct map_context *ac, struct ldb_dn *dn, const char * const *attrs, const struct ldb_parse_tree *tree, void *context, ldb_map_callback_t callback)
874 const struct ldb_parse_tree *search_tree;
875 struct ldb_context *ldb;
876 struct ldb_request *req;
879 ldb = ldb_module_get_ctx(ac->module);
884 search_tree = ldb_parse_tree(ac, NULL);
885 if (search_tree == NULL) {
890 ret = ldb_build_search_req_ex(&req, ldb, ac,
896 if (ret != LDB_SUCCESS) {
903 /* Build a request to update the 'IS_MAPPED' attribute */
904 struct ldb_request *map_build_fixup_req(struct map_context *ac,
905 struct ldb_dn *olddn,
906 struct ldb_dn *newdn,
908 ldb_map_callback_t callback)
910 struct ldb_context *ldb;
911 struct ldb_request *req;
912 struct ldb_message *msg;
916 ldb = ldb_module_get_ctx(ac->module);
918 /* Prepare message */
919 msg = ldb_msg_new(ac);
925 /* Update local 'IS_MAPPED' to the new remote DN */
926 msg->dn = ldb_dn_copy(msg, olddn);
927 dn = ldb_dn_alloc_linearized(msg, newdn);
928 if ( ! dn || ! ldb_dn_validate(msg->dn)) {
931 if (ldb_msg_add_empty(msg, IS_MAPPED, LDB_FLAG_MOD_REPLACE, NULL) != 0) {
934 if (ldb_msg_add_string(msg, IS_MAPPED, dn) != 0) {
938 /* Prepare request */
939 ret = ldb_build_mod_req(&req, ldb,
943 if (ret != LDB_SUCCESS) {
946 talloc_steal(req, msg);
954 /* Module initialization
955 * ===================== */
958 /* Builtin mappings for DNs and objectClasses */
959 static const struct ldb_map_attribute builtin_attribute_maps[] = {
962 .type = LDB_MAP_CONVERT,
966 .convert_local = ldb_dn_convert_local,
967 .convert_remote = ldb_dn_convert_remote,
976 static const struct ldb_map_attribute objectclass_attribute_map = {
977 .local_name = "objectClass",
978 .type = LDB_MAP_GENERATE,
979 .convert_operator = map_objectclass_convert_operator,
982 .remote_names = { "objectClass", NULL },
983 .generate_local = map_objectclass_generate_local,
984 .generate_remote = map_objectclass_generate_remote,
990 /* Find the special 'MAP_DN_NAME' record and store local and remote
991 * base DNs in private data. */
992 static int map_init_dns(struct ldb_module *module, struct ldb_map_context *data, const char *name)
994 static const char * const attrs[] = { MAP_DN_FROM, MAP_DN_TO, NULL };
995 struct ldb_context *ldb;
997 struct ldb_message *msg;
998 struct ldb_result *res;
1002 data->local_base_dn = NULL;
1003 data->remote_base_dn = NULL;
1007 ldb = ldb_module_get_ctx(module);
1009 dn = ldb_dn_new_fmt(data, ldb, "%s=%s", MAP_DN_NAME, name);
1010 if ( ! ldb_dn_validate(dn)) {
1011 ldb_debug(ldb, LDB_DEBUG_ERROR, "ldb_map: "
1012 "Failed to construct '%s' DN!", MAP_DN_NAME);
1013 return LDB_ERR_OPERATIONS_ERROR;
1016 ret = ldb_search(ldb, data, &res, dn, LDB_SCOPE_BASE, attrs, NULL);
1018 if (ret != LDB_SUCCESS) {
1021 if (res->count == 0) {
1022 ldb_debug(ldb, LDB_DEBUG_ERROR, "ldb_map: "
1023 "No results for '%s=%s'!", MAP_DN_NAME, name);
1025 return LDB_ERR_CONSTRAINT_VIOLATION;
1027 if (res->count > 1) {
1028 ldb_debug(ldb, LDB_DEBUG_ERROR, "ldb_map: "
1029 "Too many results for '%s=%s'!", MAP_DN_NAME, name);
1031 return LDB_ERR_CONSTRAINT_VIOLATION;
1035 data->local_base_dn = ldb_msg_find_attr_as_dn(ldb, data, msg, MAP_DN_FROM);
1036 data->remote_base_dn = ldb_msg_find_attr_as_dn(ldb, data, msg, MAP_DN_TO);
1042 /* Store attribute maps and objectClass maps in private data. */
1043 static int map_init_maps(struct ldb_module *module, struct ldb_map_context *data,
1044 const struct ldb_map_attribute *attrs,
1045 const struct ldb_map_objectclass *ocls,
1046 const char * const *wildcard_attributes)
1048 unsigned int i, j, last;
1051 /* Count specified attribute maps */
1052 for (i = 0; attrs[i].local_name; i++) /* noop */ ;
1053 /* Count built-in attribute maps */
1054 for (j = 0; builtin_attribute_maps[j].local_name; j++) /* noop */ ;
1056 /* Store list of attribute maps */
1057 data->attribute_maps = talloc_array(data, struct ldb_map_attribute, i+j+2);
1058 if (data->attribute_maps == NULL) {
1060 return LDB_ERR_OPERATIONS_ERROR;
1063 /* Specified ones go first */
1064 for (i = 0; attrs[i].local_name; i++) {
1065 data->attribute_maps[last] = attrs[i];
1069 /* Built-in ones go last */
1070 for (i = 0; builtin_attribute_maps[i].local_name; i++) {
1071 data->attribute_maps[last] = builtin_attribute_maps[i];
1075 if (data->add_objectclass) {
1076 /* ObjectClass one is very last, if required */
1077 data->attribute_maps[last] = objectclass_attribute_map;
1080 data->attribute_maps[last] = objectclass_convert_map;
1084 /* Ensure 'local_name == NULL' for the last entry */
1085 memset(&data->attribute_maps[last], 0, sizeof(struct ldb_map_attribute));
1087 /* Store list of objectClass maps */
1088 data->objectclass_maps = ocls;
1090 data->wildcard_attributes = wildcard_attributes;
1095 /* Initialize global private data. */
1096 _PUBLIC_ int ldb_map_init(struct ldb_module *module, const struct ldb_map_attribute *attrs,
1097 const struct ldb_map_objectclass *ocls,
1098 const char * const *wildcard_attributes,
1099 const char *add_objectclass,
1102 struct map_private *data;
1105 /* Prepare private data */
1106 data = talloc_zero(module, struct map_private);
1109 return LDB_ERR_OPERATIONS_ERROR;
1112 ldb_module_set_private(module, data);
1114 data->context = talloc_zero(data, struct ldb_map_context);
1115 if (!data->context) {
1117 return LDB_ERR_OPERATIONS_ERROR;
1120 /* Store local and remote baseDNs */
1121 ret = map_init_dns(module, data->context, name);
1122 if (ret != LDB_SUCCESS) {
1127 data->context->add_objectclass = add_objectclass;
1129 /* Store list of attribute and objectClass maps */
1130 ret = map_init_maps(module, data->context, attrs, ocls, wildcard_attributes);
1131 if (ret != LDB_SUCCESS) {