266 lines
7.3 KiB
C
266 lines
7.3 KiB
C
/* ***** BEGIN LICENSE BLOCK *****
|
|
* Version: MPL 1.1/GPL 2.0/LGPL 2.1
|
|
*
|
|
* The contents of this file are subject to the Mozilla Public License Version
|
|
* 1.1 (the "License"); you may not use this file except in compliance with
|
|
* the License. You may obtain a copy of the License at
|
|
* http://www.mozilla.org/MPL/
|
|
*
|
|
* Software distributed under the License is distributed on an "AS IS" basis,
|
|
* WITHOUT WARRANTY OF ANY KIND, either express or implied. See the License
|
|
* for the specific language governing rights and limitations under the
|
|
* License.
|
|
*
|
|
* The Original Code is Sun LDAP C SDK.
|
|
*
|
|
* The Initial Developer of the Original Code is Sun Microsystems, Inc.
|
|
*
|
|
* Portions created by Sun Microsystems, Inc are Copyright (C) 2005
|
|
* Sun Microsystems, Inc. All Rights Reserved.
|
|
*
|
|
* Contributor(s): abobrov
|
|
*
|
|
* Alternatively, the contents of this file may be used under the terms of
|
|
* either the GNU General Public License Version 2 or later (the "GPL"), or
|
|
* the GNU Lesser General Public License Version 2.1 or later (the "LGPL"),
|
|
* in which case the provisions of the GPL or the LGPL are applicable instead
|
|
* of those above. If you wish to allow use of your version of this file only
|
|
* under the terms of either the GPL or the LGPL, and not to allow others to
|
|
* use your version of this file under the terms of the MPL, indicate your
|
|
* decision by deleting the provisions above and replace them with the notice
|
|
* and other provisions required by the GPL or the LGPL. If you do not delete
|
|
* the provisions above, a recipient may use your version of this file under
|
|
* the terms of any one of the MPL, the GPL or the LGPL.
|
|
*
|
|
* ***** END LICENSE BLOCK ***** */
|
|
|
|
#include "ldap-int.h"
|
|
|
|
/* ldap_passwd */
|
|
int
|
|
LDAP_CALL
|
|
ldap_passwd (
|
|
LDAP *ld,
|
|
struct berval *userid,
|
|
struct berval *oldpasswd,
|
|
struct berval *newpasswd,
|
|
LDAPControl **serverctrls,
|
|
LDAPControl **clientctrls,
|
|
int *msgidp
|
|
)
|
|
{
|
|
int rc;
|
|
BerElement *ber = NULL;
|
|
struct berval *requestdata = NULL;
|
|
|
|
if ( !NSLDAPI_VALID_LDAP_POINTER( ld )) {
|
|
LDAP_SET_LDERRNO( ld, LDAP_PARAM_ERROR, NULL, NULL );
|
|
return( LDAP_PARAM_ERROR );
|
|
}
|
|
|
|
requestdata = NSLDAPI_MALLOC( sizeof( struct berval ) );
|
|
if ( requestdata == NULL ) {
|
|
LDAP_SET_LDERRNO( ld, LDAP_NO_MEMORY, NULL, NULL );
|
|
return( LDAP_NO_MEMORY );
|
|
}
|
|
|
|
/* If the requestValue field is provided, it SHALL contain a
|
|
* PasswdModifyRequestValue with one or more fields present.
|
|
*/
|
|
if ( userid || oldpasswd || newpasswd ) {
|
|
if ( ( nsldapi_alloc_ber_with_options( ld, &ber ) )
|
|
!= LDAP_SUCCESS ) {
|
|
LDAP_SET_LDERRNO( ld, LDAP_NO_MEMORY, NULL, NULL );
|
|
return( LDAP_NO_MEMORY );
|
|
}
|
|
|
|
/*
|
|
* PasswdModifyRequestValue ::= SEQUENCE {
|
|
* userIdentity [0] OCTET STRING OPTIONAL
|
|
* oldPasswd [1] OCTET STRING OPTIONAL
|
|
* newPasswd [2] OCTET STRING OPTIONAL }
|
|
*/
|
|
if ( LBER_ERROR == ( ber_printf( ber, "{" ) ) ) {
|
|
LDAP_SET_LDERRNO( ld, LDAP_ENCODING_ERROR, NULL, NULL );
|
|
ber_free( ber, 1 );
|
|
return( LDAP_ENCODING_ERROR );
|
|
}
|
|
|
|
if ( userid && userid->bv_val && userid->bv_len ) {
|
|
if ( LBER_ERROR == ( ber_printf( ber, "to", LDAP_TAG_PWDMOD_REQ_ID,
|
|
userid->bv_val, userid->bv_len ) ) ) {
|
|
LDAP_SET_LDERRNO( ld, LDAP_ENCODING_ERROR, NULL, NULL );
|
|
ber_free( ber, 1 );
|
|
return( LDAP_ENCODING_ERROR );
|
|
}
|
|
}
|
|
|
|
if ( oldpasswd && oldpasswd->bv_val && oldpasswd->bv_len ) {
|
|
if ( LBER_ERROR == ( ber_printf( ber, "to", LDAP_TAG_PWDMOD_REQ_OLD,
|
|
oldpasswd->bv_val, oldpasswd->bv_len ) ) ) {
|
|
LDAP_SET_LDERRNO( ld, LDAP_ENCODING_ERROR, NULL, NULL );
|
|
ber_free( ber, 1 );
|
|
return( LDAP_ENCODING_ERROR );
|
|
}
|
|
}
|
|
|
|
if ( newpasswd && newpasswd->bv_val && newpasswd->bv_len ) {
|
|
if ( LBER_ERROR == ( ber_printf( ber, "to", LDAP_TAG_PWDMOD_REQ_NEW,
|
|
newpasswd->bv_val, newpasswd->bv_len ) ) ) {
|
|
LDAP_SET_LDERRNO( ld, LDAP_ENCODING_ERROR, NULL, NULL );
|
|
ber_free( ber, 1 );
|
|
return( LDAP_ENCODING_ERROR );
|
|
}
|
|
}
|
|
|
|
if ( LBER_ERROR == ( ber_printf( ber, "}" ) ) ) {
|
|
LDAP_SET_LDERRNO( ld, LDAP_ENCODING_ERROR, NULL, NULL );
|
|
ber_free( ber, 1 );
|
|
return( LDAP_ENCODING_ERROR );
|
|
}
|
|
|
|
/* allocate struct berval with contents of the BER encoding */
|
|
rc = ber_flatten( ber, &requestdata );
|
|
if ( rc == -1 ) {
|
|
LDAP_SET_LDERRNO( ld, LDAP_NO_MEMORY, NULL, NULL );
|
|
ber_free( ber, 1 );
|
|
return( LDAP_NO_MEMORY );
|
|
}
|
|
} else {
|
|
requestdata = NULL;
|
|
}
|
|
|
|
rc = ldap_extended_operation( ld, LDAP_EXOP_MODIFY_PASSWD, requestdata,
|
|
serverctrls, clientctrls, msgidp );
|
|
|
|
/* the ber encoding is no longer needed */
|
|
if ( requestdata ) {
|
|
ber_bvfree( requestdata );
|
|
}
|
|
|
|
if ( ber ) {
|
|
ber_free( ber, 1 );
|
|
}
|
|
|
|
LDAP_SET_LDERRNO( ld, rc, NULL, NULL );
|
|
return( rc );
|
|
}
|
|
|
|
/* ldap_parse_passwd */
|
|
int
|
|
LDAP_CALL
|
|
ldap_parse_passwd (
|
|
LDAP *ld,
|
|
LDAPMessage *result,
|
|
struct berval *genpasswd
|
|
)
|
|
{
|
|
int rc;
|
|
char *retoidp = NULL;
|
|
struct berval *retdatap = NULL;
|
|
BerElement *ber = NULL;
|
|
ber_len_t len;
|
|
ber_tag_t tag;
|
|
|
|
if ( !NSLDAPI_VALID_LDAP_POINTER( ld )) {
|
|
LDAP_SET_LDERRNO( ld, LDAP_PARAM_ERROR, NULL, NULL );
|
|
return( LDAP_PARAM_ERROR );
|
|
}
|
|
|
|
if ( !result ) {
|
|
LDAP_SET_LDERRNO( ld, LDAP_PARAM_ERROR, NULL, NULL );
|
|
return( LDAP_PARAM_ERROR );
|
|
}
|
|
|
|
if ( !genpasswd ) {
|
|
LDAP_SET_LDERRNO( ld, LDAP_PARAM_ERROR, NULL, NULL );
|
|
return( LDAP_PARAM_ERROR );
|
|
}
|
|
|
|
rc = ldap_parse_extended_result( ld, result, &retoidp, &retdatap, 0 );
|
|
if ( rc != LDAP_SUCCESS ) {
|
|
return( rc );
|
|
}
|
|
|
|
rc = ldap_get_lderrno( ld, NULL, NULL );
|
|
if ( rc != LDAP_SUCCESS ) {
|
|
return( rc );
|
|
}
|
|
|
|
if ( retdatap ) {
|
|
/* allocate a Ber element with the contents of the
|
|
* berval from the response.
|
|
*/
|
|
if ( ( ber = ber_init( retdatap ) ) == NULL ) {
|
|
LDAP_SET_LDERRNO( ld, LDAP_NO_MEMORY, NULL, NULL );
|
|
return( LDAP_NO_MEMORY );
|
|
}
|
|
|
|
if ( ( tag = ber_skip_tag( ber, &len ) ) == LBER_ERROR ) {
|
|
LDAP_SET_LDERRNO( ld, LDAP_DECODING_ERROR, NULL, NULL );
|
|
ber_free( ber, 1 );
|
|
ldap_memfree( retoidp );
|
|
return( LDAP_DECODING_ERROR );
|
|
}
|
|
|
|
if ( ( ( tag = ber_peek_tag( ber, &len ) ) == LBER_ERROR ) ||
|
|
tag != LDAP_TAG_PWDMOD_RES_GEN ) {
|
|
LDAP_SET_LDERRNO( ld, LDAP_DECODING_ERROR, NULL, NULL );
|
|
ber_free( ber, 1 );
|
|
ldap_memfree( retoidp );
|
|
return( LDAP_DECODING_ERROR );
|
|
}
|
|
|
|
if ( ber_scanf( ber, "o}", genpasswd ) == LBER_ERROR ) {
|
|
LDAP_SET_LDERRNO( ld, LDAP_DECODING_ERROR, NULL, NULL );
|
|
ber_free( ber, 1 );
|
|
ldap_memfree( retoidp );
|
|
return( LDAP_DECODING_ERROR );
|
|
}
|
|
|
|
/* the ber encoding is no longer needed */
|
|
ber_free( ber,1 );
|
|
}
|
|
|
|
ldap_memfree( retoidp );
|
|
return( LDAP_SUCCESS );
|
|
}
|
|
|
|
/* ldap_passwd_s */
|
|
int
|
|
LDAP_CALL
|
|
ldap_passwd_s (
|
|
LDAP *ld,
|
|
struct berval *userid,
|
|
struct berval *oldpasswd,
|
|
struct berval *newpasswd,
|
|
struct berval *genpasswd,
|
|
LDAPControl **serverctrls,
|
|
LDAPControl **clientctrls
|
|
)
|
|
{
|
|
int rc, msgid;
|
|
LDAPMessage *result = NULL;
|
|
|
|
if ( !NSLDAPI_VALID_LDAP_POINTER( ld )) {
|
|
LDAP_SET_LDERRNO( ld, LDAP_PARAM_ERROR, NULL, NULL );
|
|
return( LDAP_PARAM_ERROR );
|
|
}
|
|
|
|
rc = ldap_passwd( ld, userid, oldpasswd, newpasswd, serverctrls,
|
|
clientctrls, &msgid );
|
|
if ( rc != LDAP_SUCCESS ) {
|
|
return( rc );
|
|
}
|
|
|
|
rc = ldap_result( ld, msgid, LDAP_MSG_ALL, NULL, &result );
|
|
if ( rc == -1 ) {
|
|
return( LDAP_GET_LDERRNO( ld, NULL, NULL ) );
|
|
}
|
|
|
|
rc = ldap_parse_passwd( ld, result, genpasswd );
|
|
|
|
ldap_msgfree( result );
|
|
return( rc );
|
|
}
|