diff options
Diffstat (limited to 'nslcd/cfg.c')
| -rw-r--r-- | nslcd/cfg.c | 1255 |
1 files changed, 652 insertions, 603 deletions
diff --git a/nslcd/cfg.c b/nslcd/cfg.c index ceab48c..9b1161d 100644 --- a/nslcd/cfg.c +++ b/nslcd/cfg.c @@ -59,7 +59,7 @@ #include "attmap.h" #include "common/expr.h" -struct ldap_config *nslcd_cfg=NULL; +struct ldap_config *nslcd_cfg = NULL; /* the maximum line length in the configuration file */ #define MAX_LINE_LENGTH 4096 @@ -68,210 +68,214 @@ struct ldap_config *nslcd_cfg=NULL; #define TOKEN_DELIM " \t\n\r" /* convenient wrapper macro for ldap_set_option() */ -#define LDAP_SET_OPTION(ld,option,invalue) \ - rc=ldap_set_option(ld,option,invalue); \ - if (rc!=LDAP_SUCCESS) \ - { \ - log_log(LOG_ERR,"ldap_set_option(" #option ") failed: %s",ldap_err2string(rc)); \ - exit(EXIT_FAILURE); \ +#define LDAP_SET_OPTION(ld, option, invalue) \ + rc = ldap_set_option(ld, option, invalue); \ + if (rc != LDAP_SUCCESS) \ + { \ + log_log(LOG_ERR, "ldap_set_option(" #option ") failed: %s", \ + ldap_err2string(rc)); \ + exit(EXIT_FAILURE); \ } /* prototype for parse_validnames_statement() because it is used in cfg_defaults() */ -static void parse_validnames_statement(const char *filename,int lnr, - const char *keyword,char *line,struct ldap_config *cfg); +static void parse_validnames_statement(const char *filename, int lnr, + const char *keyword, char *line, + struct ldap_config *cfg); /* set the configuration information to the defaults */ static void cfg_defaults(struct ldap_config *cfg) { int i; - memset(cfg,0,sizeof(struct ldap_config)); - cfg->ldc_threads=5; - cfg->ldc_uidname=NULL; - cfg->ldc_uid=NOUID; - cfg->ldc_gid=NOGID; - cfg->ldc_ignorecase=0; - for (i=0;i<(NSS_LDAP_CONFIG_URI_MAX+1);i++) + memset(cfg, 0, sizeof(struct ldap_config)); + cfg->ldc_threads = 5; + cfg->ldc_uidname = NULL; + cfg->ldc_uid = NOUID; + cfg->ldc_gid = NOGID; + cfg->ldc_ignorecase = 0; + for (i = 0; i < (NSS_LDAP_CONFIG_URI_MAX + 1); i++) { - cfg->ldc_uris[i].uri=NULL; - cfg->ldc_uris[i].firstfail=0; - cfg->ldc_uris[i].lastfail=0; + cfg->ldc_uris[i].uri = NULL; + cfg->ldc_uris[i].firstfail = 0; + cfg->ldc_uris[i].lastfail = 0; } #ifdef LDAP_VERSION3 - cfg->ldc_version=LDAP_VERSION3; + cfg->ldc_version = LDAP_VERSION3; #else /* LDAP_VERSION3 */ - cfg->ldc_version=LDAP_VERSION2; + cfg->ldc_version = LDAP_VERSION2; #endif /* not LDAP_VERSION3 */ - cfg->ldc_binddn=NULL; - cfg->ldc_bindpw=NULL; - cfg->ldc_rootpwmoddn=NULL; - cfg->ldc_rootpwmodpw=NULL; - cfg->ldc_sasl_mech=NULL; - cfg->ldc_sasl_realm=NULL; - cfg->ldc_sasl_authcid=NULL; - cfg->ldc_sasl_authzid=NULL; - cfg->ldc_sasl_secprops=NULL; + cfg->ldc_binddn = NULL; + cfg->ldc_bindpw = NULL; + cfg->ldc_rootpwmoddn = NULL; + cfg->ldc_rootpwmodpw = NULL; + cfg->ldc_sasl_mech = NULL; + cfg->ldc_sasl_realm = NULL; + cfg->ldc_sasl_authcid = NULL; + cfg->ldc_sasl_authzid = NULL; + cfg->ldc_sasl_secprops = NULL; #ifdef LDAP_OPT_X_SASL_NOCANON - cfg->ldc_sasl_canonicalize=-1; + cfg->ldc_sasl_canonicalize = -1; #endif /* LDAP_OPT_X_SASL_NOCANON */ - for (i=0;i<NSS_LDAP_CONFIG_MAX_BASES;i++) - cfg->ldc_bases[i]=NULL; - cfg->ldc_scope=LDAP_SCOPE_SUBTREE; - cfg->ldc_deref=LDAP_DEREF_NEVER; - cfg->ldc_referrals=1; - cfg->ldc_bind_timelimit=10; - cfg->ldc_timelimit=LDAP_NO_LIMIT; - cfg->ldc_idle_timelimit=0; - cfg->ldc_reconnect_sleeptime=1; - cfg->ldc_reconnect_retrytime=10; + for (i = 0; i < NSS_LDAP_CONFIG_MAX_BASES; i++) + cfg->ldc_bases[i] = NULL; + cfg->ldc_scope = LDAP_SCOPE_SUBTREE; + cfg->ldc_deref = LDAP_DEREF_NEVER; + cfg->ldc_referrals = 1; + cfg->ldc_bind_timelimit = 10; + cfg->ldc_timelimit = LDAP_NO_LIMIT; + cfg->ldc_idle_timelimit = 0; + cfg->ldc_reconnect_sleeptime = 1; + cfg->ldc_reconnect_retrytime = 10; #ifdef LDAP_OPT_X_TLS - cfg->ldc_ssl_on=SSL_OFF; + cfg->ldc_ssl_on = SSL_OFF; #endif /* LDAP_OPT_X_TLS */ - cfg->ldc_restart=1; - cfg->ldc_pagesize=0; - cfg->ldc_nss_initgroups_ignoreusers=NULL; - for (i=0;i<NSS_LDAP_CONFIG_MAX_AUTHZ_SEARCHES;i++) - cfg->ldc_pam_authz_search[i]=NULL; - cfg->ldc_nss_min_uid=0; - parse_validnames_statement(__FILE__,__LINE__,"", - "/^[a-z0-9._@$][a-z0-9._@$ \\~-]*[a-z0-9._@$~-]$/i",cfg); - cfg->pam_password_prohibit_message=NULL; + cfg->ldc_restart = 1; + cfg->ldc_pagesize = 0; + cfg->ldc_nss_initgroups_ignoreusers = NULL; + for (i = 0; i < NSS_LDAP_CONFIG_MAX_AUTHZ_SEARCHES; i++) + cfg->ldc_pam_authz_search[i] = NULL; + cfg->ldc_nss_min_uid = 0; + parse_validnames_statement(__FILE__, __LINE__, "", + "/^[a-z0-9._@$][a-z0-9._@$ \\~-]*[a-z0-9._@$~-]$/i", + cfg); + cfg->pam_password_prohibit_message = NULL; } /* simple strdup wrapper */ static char *xstrdup(const char *s) { char *tmp; - if (s==NULL) + if (s == NULL) { - log_log(LOG_CRIT,"xstrdup() called with NULL"); + log_log(LOG_CRIT, "xstrdup() called with NULL"); exit(EXIT_FAILURE); } - tmp=strdup(s); - if (tmp==NULL) + tmp = strdup(s); + if (tmp == NULL) { - log_log(LOG_CRIT,"strdup() failed to allocate memory"); + log_log(LOG_CRIT, "strdup() failed to allocate memory"); exit(EXIT_FAILURE); } return tmp; } /* add a single URI to the list of URIs in the configuration */ -static void add_uri(const char *filename,int lnr, - struct ldap_config *cfg,const char *uri) +static void add_uri(const char *filename, int lnr, + struct ldap_config *cfg, const char *uri) { int i; - log_log(LOG_DEBUG,"add_uri(%s)",uri); + log_log(LOG_DEBUG, "add_uri(%s)", uri); /* find the place where to insert the URI */ - for (i=0;cfg->ldc_uris[i].uri!=NULL;i++) - ; + for (i = 0; cfg->ldc_uris[i].uri != NULL; i++) + /* nothing */ ; /* check for room */ - if (i>=NSS_LDAP_CONFIG_URI_MAX) + if (i >= NSS_LDAP_CONFIG_URI_MAX) { - log_log(LOG_ERR,"%s:%d: maximum number of URIs exceeded",filename,lnr); + log_log(LOG_ERR, "%s:%d: maximum number of URIs exceeded", + filename, lnr); exit(EXIT_FAILURE); } /* append URI to list */ - cfg->ldc_uris[i].uri=xstrdup(uri); + cfg->ldc_uris[i].uri = xstrdup(uri); } #ifdef HAVE_LDAP_DOMAIN2HOSTLIST /* return the domain name of the current host the returned string must be freed by caller */ -static const char *cfg_getdomainname(const char *filename,int lnr) +static const char *cfg_getdomainname(const char *filename, int lnr) { - const char *fqdn,*domain; - fqdn=getfqdn(); - if ((fqdn!=NULL)&&((domain=strchr(fqdn,'.'))!=NULL)&&(domain[1]!='\0')) - return domain+1; - log_log(LOG_ERR,"%s:%d: unable to determinate a domain name", - filename,lnr); + const char *fqdn, *domain; + fqdn = getfqdn(); + if ((fqdn != NULL) && ((domain = strchr(fqdn, '.')) != NULL) && (domain[1] != '\0')) + return domain + 1; + log_log(LOG_ERR, "%s:%d: unable to determinate a domain name", + filename, lnr); exit(EXIT_FAILURE); } /* add URIs by doing DNS queries for SRV records */ -static void add_uris_from_dns(const char *filename,int lnr, - struct ldap_config *cfg, - const char *domain) +static void add_uris_from_dns(const char *filename, int lnr, + struct ldap_config *cfg, const char *domain) { int rc; - char *hostlist=NULL,*nxt; - char buf[HOST_NAME_MAX+sizeof("ldap://")]; - log_log(LOG_DEBUG,"query %s for SRV records",domain); - rc=ldap_domain2hostlist(domain,&hostlist); - if (rc!=LDAP_SUCCESS) + char *hostlist = NULL, *nxt; + char buf[HOST_NAME_MAX + sizeof("ldap://")]; + log_log(LOG_DEBUG, "query %s for SRV records", domain); + rc = ldap_domain2hostlist(domain, &hostlist); + if (rc != LDAP_SUCCESS) { - log_log(LOG_ERR,"%s:%d: no servers found in DNS zone %s: %s", - filename,lnr,domain,ldap_err2string(rc)); + log_log(LOG_ERR, "%s:%d: no servers found in DNS zone %s: %s", + filename, lnr, domain, ldap_err2string(rc)); exit(EXIT_FAILURE); } - if ((hostlist==NULL)||(*hostlist=='\0')) + if ((hostlist == NULL) || (*hostlist == '\0')) { - log_log(LOG_ERR,"%s:%d: no servers found in DNS zone %s",filename,lnr,domain); + log_log(LOG_ERR, "%s:%d: no servers found in DNS zone %s", + filename, lnr, domain); exit(EXIT_FAILURE); } /* hostlist is a space-separated list of host names that we use to build URIs */ - while(hostlist!=NULL) + while (hostlist != NULL) { /* find the next space and split the string there */ - nxt=strchr(hostlist,' '); - if (nxt!=NULL) + nxt = strchr(hostlist, ' '); + if (nxt != NULL) { - *nxt='\0'; + *nxt = '\0'; nxt++; } /* if port is 636, use ldaps:// URI */ - if ((strlen(hostlist)>4)&&(strcmp(hostlist+strlen(hostlist)-4,":636")==0)) + if ((strlen(hostlist) > 4) && (strcmp(hostlist + strlen(hostlist) - 4, ":636") == 0)) { - hostlist[strlen(hostlist)-4]='\0'; - mysnprintf(buf,sizeof(buf),"ldaps://%s",hostlist); + hostlist[strlen(hostlist) - 4] = '\0'; + mysnprintf(buf, sizeof(buf), "ldaps://%s", hostlist); } else { /* strip default port number */ - if ((strlen(hostlist)>4)&&(strcmp(hostlist+strlen(hostlist)-4,":389")==0)) - hostlist[strlen(hostlist)-4]='\0'; - mysnprintf(buf,sizeof(buf),"ldap://%s",hostlist); + if ((strlen(hostlist) > 4) && (strcmp(hostlist + strlen(hostlist) - 4, ":389") == 0)) + hostlist[strlen(hostlist) - 4] = '\0'; + mysnprintf(buf, sizeof(buf), "ldap://%s", hostlist); } - log_log(LOG_DEBUG,"add_uris_from_dns(): found uri: %s",buf); - add_uri(filename,lnr,cfg,buf); + log_log(LOG_DEBUG, "add_uris_from_dns(): found uri: %s", buf); + add_uri(filename, lnr, cfg, buf); /* get next entry from list */ - hostlist=nxt; + hostlist = nxt; } } #endif /* HAVE_LDAP_DOMAIN2HOSTLIST */ -static int parse_boolean(const char *filename,int lnr,const char *value) +static int parse_boolean(const char *filename, int lnr, const char *value) { - if ( (strcasecmp(value,"on")==0) || - (strcasecmp(value,"yes")==0) || - (strcasecmp(value,"true")==0) || - (strcasecmp(value,"1")==0) ) + if ((strcasecmp(value, "on") == 0) || + (strcasecmp(value, "yes") == 0) || + (strcasecmp(value, "true") == 0) || (strcasecmp(value, "1") == 0)) return 1; - else if ( (strcasecmp(value,"off")==0) || - (strcasecmp(value,"no")==0) || - (strcasecmp(value,"false")==0) || - (strcasecmp(value,"0")==0) ) + else if ((strcasecmp(value, "off") == 0) || + (strcasecmp(value, "no") == 0) || + (strcasecmp(value, "false") == 0) || (strcasecmp(value, "0") == 0)) return 0; else { - log_log(LOG_ERR,"%s:%d: not a boolean argument: '%s'",filename,lnr,value); + log_log(LOG_ERR, "%s:%d: not a boolean argument: '%s'", + filename, lnr, value); exit(EXIT_FAILURE); } } -static int parse_scope(const char *filename,int lnr,const char *value) +static int parse_scope(const char *filename, int lnr, const char *value) { - if ( (strcasecmp(value,"sub")==0) || (strcasecmp(value,"subtree")==0) ) + if ((strcasecmp(value, "sub") == 0) || (strcasecmp(value, "subtree") == 0)) return LDAP_SCOPE_SUBTREE; - else if ( (strcasecmp(value,"one")==0) || (strcasecmp(value,"onelevel")==0) ) + else if ((strcasecmp(value, "one") == 0) || (strcasecmp(value, "onelevel") == 0)) return LDAP_SCOPE_ONELEVEL; - else if (strcasecmp(value,"base")==0) + else if (strcasecmp(value, "base") == 0) return LDAP_SCOPE_BASE; else { - log_log(LOG_ERR,"%s:%d: not a scope argument: '%s'",filename,lnr,value); + log_log(LOG_ERR, "%s:%d: not a scope argument: '%s'", + filename, lnr, value); exit(EXIT_FAILURE); } } @@ -281,56 +285,56 @@ static int parse_scope(const char *filename,int lnr,const char *value) is returned (this can be used to pass to the function on the next iteration). If no more tokens are found or the token will not fit in the buffer, NULL is returned. */ -static char *get_token(char **line,char *buf,size_t buflen) +static char *get_token(char **line, char *buf, size_t buflen) { size_t len; - if ((line==NULL)||(*line==NULL)||(**line=='\0')||(buf==NULL)) + if ((line == NULL) || (*line == NULL) || (**line == '\0') || (buf == NULL)) return NULL; /* find the beginning and length of the token */ - *line+=strspn(*line,TOKEN_DELIM); - len=strcspn(*line,TOKEN_DELIM); + *line += strspn(*line, TOKEN_DELIM); + len = strcspn(*line, TOKEN_DELIM); /* check if there is a token */ - if (len==0) + if (len == 0) { - *line=NULL; + *line = NULL; return NULL; } /* limit the token length */ - if (len>=buflen) - len=buflen-1; + if (len >= buflen) + len = buflen - 1; /* copy the token */ - strncpy(buf,*line,len); - buf[len]='\0'; + strncpy(buf, *line, len); + buf[len] = '\0'; /* skip to the next token */ - *line+=len; - *line+=strspn(*line,TOKEN_DELIM); + *line += len; + *line += strspn(*line, TOKEN_DELIM); /* return the token */ return buf; } static enum ldap_map_selector parse_map(const char *value) { - if ( (strcasecmp(value,"alias")==0) || (strcasecmp(value,"aliases")==0) ) + if ((strcasecmp(value, "alias") == 0) || (strcasecmp(value, "aliases") == 0)) return LM_ALIASES; - else if ( (strcasecmp(value,"ether")==0) || (strcasecmp(value,"ethers")==0) ) + else if ((strcasecmp(value, "ether") == 0) || (strcasecmp(value, "ethers") == 0)) return LM_ETHERS; - else if (strcasecmp(value,"group")==0) + else if (strcasecmp(value, "group") == 0) return LM_GROUP; - else if ( (strcasecmp(value,"host")==0) || (strcasecmp(value,"hosts")==0) ) + else if ((strcasecmp(value, "host") == 0) || (strcasecmp(value, "hosts") == 0)) return LM_HOSTS; - else if (strcasecmp(value,"netgroup")==0) + else if (strcasecmp(value, "netgroup") == 0) return LM_NETGROUP; - else if ( (strcasecmp(value,"network")==0) || (strcasecmp(value,"networks")==0) ) + else if ((strcasecmp(value, "network") == 0) || (strcasecmp(value, "networks") == 0)) return LM_NETWORKS; - else if (strcasecmp(value,"passwd")==0) + else if (strcasecmp(value, "passwd") == 0) return LM_PASSWD; - else if ( (strcasecmp(value,"protocol")==0) || (strcasecmp(value,"protocols")==0) ) + else if ((strcasecmp(value, "protocol") == 0) || (strcasecmp(value, "protocols") == 0)) return LM_PROTOCOLS; - else if (strcasecmp(value,"rpc")==0) + else if (strcasecmp(value, "rpc") == 0) return LM_RPC; - else if ( (strcasecmp(value,"service")==0) || (strcasecmp(value,"services")==0) ) + else if ((strcasecmp(value, "service") == 0) || (strcasecmp(value, "services") == 0)) return LM_SERVICES; - else if (strcasecmp(value,"shadow")==0) + else if (strcasecmp(value, "shadow") == 0) return LM_SHADOW; else return LM_NONE; @@ -343,201 +347,204 @@ static enum ldap_map_selector get_map(char **line) char *old; enum ldap_map_selector map; /* get the token */ - old=*line; - if (get_token(line,token,sizeof(token))==NULL) + old = *line; + if (get_token(line, token, sizeof(token)) == NULL) return LM_NONE; /* find the map if any */ - map=parse_map(token); + map = parse_map(token); /* unknown map, return to the previous state */ - if (map==LM_NONE) - *line=old; + if (map == LM_NONE) + *line = old; return map; } /* check that the condition is true and otherwise log an error and bail out */ -static inline void check_argumentcount(const char *filename,int lnr, - const char *keyword,int condition) +static inline void check_argumentcount(const char *filename, int lnr, + const char *keyword, int condition) { if (!condition) { - log_log(LOG_ERR,"%s:%d: %s: wrong number of arguments",filename,lnr,keyword); + log_log(LOG_ERR, "%s:%d: %s: wrong number of arguments", + filename, lnr, keyword); exit(EXIT_FAILURE); } } /* check that the file is not world readable */ -static void check_permissions(const char *filename,const char *keyword) +static void check_permissions(const char *filename, const char *keyword) { struct stat sb; /* get file status */ - if (stat(filename,&sb)) + if (stat(filename, &sb)) { - log_log(LOG_ERR,"cannot stat() %s: %s",filename,strerror(errno)); + log_log(LOG_ERR, "cannot stat() %s: %s", filename, strerror(errno)); exit(EXIT_FAILURE); } /* check permissions */ - if ((sb.st_mode&0007)!=0) + if ((sb.st_mode & 0007) != 0) { - if (keyword!=NULL) - log_log(LOG_ERR,"%s: file should not be world readable if %s is set", + if (keyword != NULL) + log_log(LOG_ERR, "%s: file should not be world readable if %s is set", filename, keyword); else - log_log(LOG_ERR,"%s: file should not be world readable",filename); + log_log(LOG_ERR, "%s: file should not be world readable", filename); exit(EXIT_FAILURE); } } -static void get_int(const char *filename,int lnr, - const char *keyword,char **line, - int *var) +static void get_int(const char *filename, int lnr, + const char *keyword, char **line, int *var) { /* TODO: refactor to have less overhead */ char token[32]; - check_argumentcount(filename,lnr,keyword,get_token(line,token,sizeof(token))!=NULL); + check_argumentcount(filename, lnr, keyword, + get_token(line, token, sizeof(token)) != NULL); /* TODO: replace with correct numeric parse */ - *var=atoi(token); + *var = atoi(token); } -static void get_boolean(const char *filename,int lnr, - const char *keyword,char **line, - int *var) +static void get_boolean(const char *filename, int lnr, + const char *keyword, char **line, int *var) { /* TODO: refactor to have less overhead */ char token[32]; - check_argumentcount(filename,lnr,keyword,get_token(line,token,sizeof(token))!=NULL); - *var=parse_boolean(filename,lnr,token); + check_argumentcount(filename, lnr, keyword, + get_token(line, token, sizeof(token)) != NULL); + *var = parse_boolean(filename, lnr, token); } -static void get_strdup(const char *filename,int lnr, - const char *keyword,char **line, - char **var) +static void get_strdup(const char *filename, int lnr, + const char *keyword, char **line, char **var) { /* TODO: refactor to have less overhead */ char token[64]; - check_argumentcount(filename,lnr,keyword,get_token(line,token,sizeof(token))!=NULL); + check_argumentcount(filename, lnr, keyword, + get_token(line, token, sizeof(token)) != NULL); /* Note: we have a memory leak here if a single variable is changed - multiple times in one config (deemed not a problem) */ - *var=xstrdup(token); + multiple times in one config (deemed not a problem) */ + *var = xstrdup(token); } -static void get_restdup(const char *filename,int lnr, - const char *keyword,char **line, - char **var) +static void get_restdup(const char *filename, int lnr, + const char *keyword, char **line, char **var) { - check_argumentcount(filename,lnr,keyword,(*line!=NULL)&&(**line!='\0')); + check_argumentcount(filename, lnr, keyword, (*line != NULL) && (**line != '\0')); /* Note: we have a memory leak here if a single mapping is changed - multiple times in one config (deemed not a problem) */ - *var=xstrdup(*line); + multiple times in one config (deemed not a problem) */ + *var = xstrdup(*line); /* mark that we are at the end of the line */ - *line=NULL; + *line = NULL; } -static void get_eol(const char *filename,int lnr, - const char *keyword,char **line) +static void get_eol(const char *filename, int lnr, + const char *keyword, char **line) { - if ((line!=NULL)&&(*line!=NULL)&&(**line!='\0')) + if ((line != NULL) && (*line != NULL) && (**line != '\0')) { - log_log(LOG_ERR,"%s:%d: %s: too may arguments",filename,lnr,keyword); + log_log(LOG_ERR, "%s:%d: %s: too may arguments", filename, lnr, keyword); exit(EXIT_FAILURE); } } -static void get_uid(const char *filename,int lnr, - const char *keyword,char **line, - uid_t *var,gid_t *gid,char **str) +static void get_uid(const char *filename, int lnr, + const char *keyword, char **line, + uid_t *var, gid_t *gid, char **str) { /* TODO: refactor to have less overhead */ char token[32]; struct passwd *pwent; char *tmp; - check_argumentcount(filename,lnr,keyword,get_token(line,token,sizeof(token))!=NULL); + check_argumentcount(filename, lnr, keyword, + get_token(line, token, sizeof(token)) != NULL); /* check if it is a valid numerical uid */ - errno=0; - *var=strtouid(token,&tmp,10); - if ((*token!='\0')&&(*tmp=='\0')&&(errno==0)&&(strchr(token,'-')==NULL)) + errno = 0; + *var = strtouid(token, &tmp, 10); + if ((*token != '\0') && (*tmp == '\0') && (errno == 0) && (strchr(token, '-') == NULL)) { /* get the name and gid from the passwd database */ - pwent=getpwuid(*var); - if ((gid!=NULL)&&(*gid!=NOGID)) - *gid=pwent->pw_gid; - if (str!=NULL) - *str=strdup(pwent->pw_name); + pwent = getpwuid(*var); + if ((gid != NULL) && (*gid != NOGID)) + *gid = pwent->pw_gid; + if (str != NULL) + *str = strdup(pwent->pw_name); return; } /* find by name */ - pwent=getpwnam(token); - if (pwent!=NULL) + pwent = getpwnam(token); + if (pwent != NULL) { - *var=pwent->pw_uid; - if ((gid!=NULL)&&(*gid!=NOGID)) - *gid=pwent->pw_gid; - if (str!=NULL) - *str=strdup(token); + *var = pwent->pw_uid; + if ((gid != NULL) && (*gid != NOGID)) + *gid = pwent->pw_gid; + if (str != NULL) + *str = strdup(token); return; } /* log an error */ - log_log(LOG_ERR,"%s:%d: %s: not a valid uid: '%s'",filename,lnr,keyword,token); + log_log(LOG_ERR, "%s:%d: %s: not a valid uid: '%s'", + filename, lnr, keyword, token); exit(EXIT_FAILURE); } -static void get_gid(const char *filename,int lnr, - const char *keyword,char **line, - gid_t *var) +static void get_gid(const char *filename, int lnr, + const char *keyword, char **line, gid_t *var) { /* TODO: refactor to have less overhead */ char token[32]; struct group *grent; char *tmp; - check_argumentcount(filename,lnr,keyword,get_token(line,token,sizeof(token))!=NULL); + check_argumentcount(filename, lnr, keyword, + get_token(line, token, sizeof(token)) != NULL); /* check if it is a valid numerical gid */ - errno=0; - *var=strtogid(token,&tmp,10); - if ((*token!='\0')&&(*tmp=='\0')&&(errno==0)&&(strchr(token,'-')==NULL)) + errno = 0; + *var = strtogid(token, &tmp, 10); + if ((*token != '\0') && (*tmp == '\0') && (errno == 0) && (strchr(token, '-') == NULL)) return; /* find by name */ - grent=getgrnam(token); - if (grent!=NULL) + grent = getgrnam(token); + if (grent != NULL) { - *var=grent->gr_gid; + *var = grent->gr_gid; return; } /* log an error */ - log_log(LOG_ERR,"%s:%d: %s: not a valid gid: '%s'",filename,lnr,keyword,token); + log_log(LOG_ERR, "%s:%d: %s: not a valid gid: '%s'", + filename, lnr, keyword, token); exit(EXIT_FAILURE); } #ifdef LDAP_OPT_X_TLS -static void get_reqcert(const char *filename,int lnr, - const char *keyword,char **line, - int *var) +static void get_reqcert(const char *filename, int lnr, + const char *keyword, char **line, int *var) { char token[16]; /* get token */ - check_argumentcount(filename,lnr,keyword,get_token(line,token,sizeof(token))!=NULL); + check_argumentcount(filename, lnr, keyword, + get_token(line, token, sizeof(token)) != NULL); /* check if it is a valid value for tls_reqcert option */ - if ( (strcasecmp(token,"never")==0) || - (strcasecmp(token,"no")==0) ) - *var=LDAP_OPT_X_TLS_NEVER; - else if (strcasecmp(token,"allow")==0) - *var=LDAP_OPT_X_TLS_ALLOW; - else if (strcasecmp(token,"try")==0) - *var=LDAP_OPT_X_TLS_TRY; - else if ( (strcasecmp(token,"demand")==0) || - (strcasecmp(token,"yes")==0) ) - *var=LDAP_OPT_X_TLS_DEMAND; - else if (strcasecmp(token,"hard")==0) - *var=LDAP_OPT_X_TLS_HARD; + if ((strcasecmp(token, "never") == 0) || (strcasecmp(token, "no") == 0)) + *var = LDAP_OPT_X_TLS_NEVER; + else if (strcasecmp(token, "allow") == 0) + *var = LDAP_OPT_X_TLS_ALLOW; + else if (strcasecmp(token, "try") == 0) + *var = LDAP_OPT_X_TLS_TRY; + else if ((strcasecmp(token, "demand") == 0) || + (strcasecmp(token, "yes") == 0)) + *var = LDAP_OPT_X_TLS_DEMAND; + else if (strcasecmp(token, "hard") == 0) + *var = LDAP_OPT_X_TLS_HARD; else { - log_log(LOG_ERR,"%s:%d: %s: invalid argument: '%s'",filename,lnr,keyword,token); + log_log(LOG_ERR, "%s:%d: %s: invalid argument: '%s'", + filename, lnr, keyword, token); exit(EXIT_FAILURE); } } #endif /* LDAP_OPT_X_TLS */ -static void parse_krb5_ccname_statement(const char *filename,int lnr, - const char *keyword,char *line) +static void parse_krb5_ccname_statement(const char *filename, int lnr, + const char *keyword, char *line) { char token[80]; const char *ccname; @@ -546,302 +553,317 @@ static void parse_krb5_ccname_statement(const char *filename,int lnr, char *ccenv; #ifdef HAVE_GSS_KRB5_CCACHE_NAME OM_uint32 minor_status; -# endif /* HAVE_GSS_KRB5_CCACHE_NAME */ +#endif /* HAVE_GSS_KRB5_CCACHE_NAME */ /* get token */ - check_argumentcount(filename,lnr,keyword, - (get_token(&line,token,sizeof(token))!=NULL)&&(*line=='\0')); + check_argumentcount(filename, lnr, keyword, + (get_token(&line, token, sizeof(token)) != NULL) && + (*line == '\0')); /* set default kerberos ticket cache for SASL-GSSAPI */ - ccname=token; + ccname = token; /* check that cache exists and is readable if it is a file */ - if ( (strncasecmp(ccname,"FILE:",sizeof("FILE:")-1)==0) || - (strncasecmp(ccname,"WRFILE:",sizeof("WRFILE:")-1)==0)) + if ((strncasecmp(ccname, "FILE:", sizeof("FILE:") - 1) == 0) || + (strncasecmp(ccname, "WRFILE:", sizeof("WRFILE:") - 1) == 0)) { - ccfile=strchr(ccname,':')+1; - if (access(ccfile,R_OK)!=0) + ccfile = strchr(ccname, ':') + 1; + if (access(ccfile, R_OK) != 0) { - log_log(LOG_ERR,"%s:%d: error accessing %s: %s",filename,lnr,ccfile,strerror(errno)); + log_log(LOG_ERR, "%s:%d: error accessing %s: %s", + filename, lnr, ccfile, strerror(errno)); exit(EXIT_FAILURE); } } /* set the environment variable (we have a memory leak if this option is set multiple times) */ - ccenvlen=strlen(ccname)+sizeof("KRB5CCNAME="); - ccenv=(char *)malloc(ccenvlen); - if (ccenv==NULL) + ccenvlen = strlen(ccname) + sizeof("KRB5CCNAME="); + ccenv = (char *)malloc(ccenvlen); + if (ccenv == NULL) { - log_log(LOG_CRIT,"malloc() failed to allocate memory"); + log_log(LOG_CRIT, "malloc() failed to allocate memory"); exit(EXIT_FAILURE); } - mysnprintf(ccenv,ccenvlen,"KRB5CCNAME=%s",ccname); + mysnprintf(ccenv, ccenvlen, "KRB5CCNAME=%s", ccname); putenv(ccenv); #ifdef HAVE_GSS_KRB5_CCACHE_NAME /* set the name with gss_krb5_ccache_name() */ - if (gss_krb5_ccache_name(&minor_status,ccname,NULL)!=GSS_S_COMPLETE) + if (gss_krb5_ccache_name(&minor_status, ccname, NULL) != GSS_S_COMPLETE) { - log_log(LOG_ERR,"%s:%d: unable to set default credential cache: %s",filename,lnr,ccname); + log_log(LOG_ERR, "%s:%d: unable to set default credential cache: %s", + filename, lnr, ccname); exit(EXIT_FAILURE); } -# endif /* HAVE_GSS_KRB5_CCACHE_NAME */ +#endif /* HAVE_GSS_KRB5_CCACHE_NAME */ } /* assigns the base to the specified variable doing domain expansion and a simple check to avoid overwriting duplicate values */ -static void set_base(const char *filename,int lnr, - const char *value,const char **var) +static void set_base(const char *filename, int lnr, + const char *value, const char **var) { #ifdef HAVE_LDAP_DOMAIN2DN - const char *domain=NULL; - char *domaindn=NULL; + const char *domain = NULL; + char *domaindn = NULL; #endif /* HAVE_LDAP_DOMAIN2DN */ /* if the base is "DOMAIN" use the domain name */ - if (strcasecmp(value,"domain")==0) + if (strcasecmp(value, "domain") == 0) { #ifdef HAVE_LDAP_DOMAIN2DN - domain=cfg_getdomainname(filename,lnr); - ldap_domain2dn(domain,&domaindn); - log_log(LOG_DEBUG,"set_base(): setting base to %s from domain",domaindn); - value=domaindn; + domain = cfg_getdomainname(filename, lnr); + ldap_domain2dn(domain, &domaindn); + log_log(LOG_DEBUG, "set_base(): setting base to %s from domain", + domaindn); + value = domaindn; #else /* not HAVE_LDAP_DOMAIN2DN */ - log_log(LOG_ERR,"%s:%d: value %s not supported on platform",filename,lnr,value); + log_log(LOG_ERR, "%s:%d: value %s not supported on platform", + filename, lnr, value); exit(EXIT_FAILURE); #endif /* not HAVE_LDAP_DOMAIN2DN */ } /* set the new value */ - *var=xstrdup(value); + *var = xstrdup(value); } /* parse the validnames statement */ -static void parse_validnames_statement(const char *filename,int lnr, - const char *keyword,char *line,struct ldap_config *cfg) +static void parse_validnames_statement(const char *filename, int lnr, + const char *keyword, char *line, + struct ldap_config *cfg) { char *value; - int i,l; - int flags=REG_EXTENDED|REG_NOSUB; + int i, l; + int flags = REG_EXTENDED | REG_NOSUB; /* the rest of the line should be a regular expression */ - get_restdup(filename,lnr,keyword,&line,&value); + get_restdup(filename, lnr, keyword, &line, &value); /* check formatting and update flags */ - if (value[0]!='/') + if (value[0] != '/') { - log_log(LOG_ERR,"%s:%d: regular expression incorrectly delimited",filename,lnr); + log_log(LOG_ERR, "%s:%d: regular expression incorrectly delimited", + filename, lnr); exit(EXIT_FAILURE); } - l=strlen(value); - if (value[l-1]=='i') + l = strlen(value); + if (value[l - 1] == 'i') { - value[l-1]='\0'; + value[l - 1] = '\0'; l--; - flags|=REG_ICASE; + flags |= REG_ICASE; } - if (value[l-1]!='/') + if (value[l - 1] != '/') { - log_log(LOG_ERR,"%s:%d: regular expression incorrectly delimited",filename,lnr); + log_log(LOG_ERR, "%s:%d: regular expression incorrectly delimited", + filename, lnr); exit(EXIT_FAILURE); } - value[l-1]='\0'; + value[l - 1] = '\0'; /* compile the regular expression */ - if ((i=regcomp(&cfg->validnames,value+1,flags))!= 0) + if ((i = regcomp(&cfg->validnames, value + 1, flags)) != 0) { /* get the error message */ - l=regerror(i,&cfg->validnames,NULL,0); - value=malloc(l); - if (value==NULL) - log_log(LOG_ERR,"%s:%d: invalid regular expression",filename,lnr); + l = regerror(i, &cfg->validnames, NULL, 0); + value = malloc(l); + if (value == NULL) + log_log(LOG_ERR, "%s:%d: invalid regular expression", filename, lnr); else { - regerror(i,&cfg->validnames,value,l); - log_log(LOG_ERR,"%s:%d: invalid regular expression: %s",filename,lnr, - value); + regerror(i, &cfg->validnames, value, l); + log_log(LOG_ERR, "%s:%d: invalid regular expression: %s", + filename, lnr, value); } exit(EXIT_FAILURE); } } -static void parse_pam_password_prohibit_message_statement(const char *filename,int lnr, - const char *keyword,char *line,struct ldap_config *cfg) +static void parse_pam_password_prohibit_message_statement( + const char *filename, int lnr, const char *keyword, + char *line, struct ldap_config *cfg) { char *value; int l; /* the rest of the line should be a message */ - get_restdup(filename,lnr,keyword,&line,&value); + get_restdup(filename, lnr, keyword, &line, &value); /* strip quotes if they are present */ - l=strlen(value); - if ((value[0]=='\"')&&(value[l-1]=='\"')) + l = strlen(value); + if ((value[0] == '\"') && (value[l - 1] == '\"')) { - value[l-1]='\0'; + value[l - 1] = '\0'; value++; } - cfg->pam_password_prohibit_message=value; + cfg->pam_password_prohibit_message = value; } -static void parse_base_statement(const char *filename,int lnr, - const char *keyword,char *line, +static void parse_base_statement(const char *filename, int lnr, + const char *keyword, char *line, struct ldap_config *cfg) { const char **bases; int i; /* get the list of bases to update */ - bases=base_get_var(get_map(&line)); - if (bases==NULL) - bases=cfg->ldc_bases; + bases = base_get_var(get_map(&line)); + if (bases == NULL) + bases = cfg->ldc_bases; /* find the spot in the list of bases */ - for (i=0;i<NSS_LDAP_CONFIG_MAX_BASES;i++) + for (i = 0; i < NSS_LDAP_CONFIG_MAX_BASES; i++) { - if (bases[i]==NULL) + if (bases[i] == NULL) { - check_argumentcount(filename,lnr,keyword,(line!=NULL)&&(*line!='\0')); - set_base(filename,lnr,line,&bases[i]); + check_argumentcount(filename, lnr, keyword, (line != NULL) && (*line != '\0')); + set_base(filename, lnr, line, &bases[i]); return; } } /* no free spot found */ - log_log(LOG_ERR,"%s:%d: maximum number of base options per map (%d) exceeded", - filename,lnr,NSS_LDAP_CONFIG_MAX_BASES); + log_log(LOG_ERR, "%s:%d: maximum number of base options per map (%d) exceeded", + filename, lnr, NSS_LDAP_CONFIG_MAX_BASES); exit(EXIT_FAILURE); } -static void parse_scope_statement(const char *filename,int lnr, - const char *keyword,char *line, +static void parse_scope_statement(const char *filename, int lnr, + const char *keyword, char *line, struct ldap_config *cfg) { int *var; - var=scope_get_var(get_map(&line)); - if (var==NULL) - var=&cfg->ldc_scope; - check_argumentcount(filename,lnr,keyword,(line!=NULL)&&(*line!='\0')); - *var=parse_scope(filename,lnr,line); + var = scope_get_var(get_map(&line)); + if (var == NULL) + var = &cfg->ldc_scope; + check_argumentcount(filename, lnr, keyword, (line != NULL) && (*line != '\0')); + *var = parse_scope(filename, lnr, line); } -static void parse_filter_statement(const char *filename,int lnr, - const char *keyword,char *line) +static void parse_filter_statement(const char *filename, int lnr, + const char *keyword, char *line) { const char **var; - const char *map=line; - var=filter_get_var(get_map(&line)); - if (var==NULL) + const char *map = line; + var = filter_get_var(get_map(&line)); + if (var == NULL) { - log_log(LOG_ERR,"%s:%d: unknown map: '%s'",filename,lnr,map); + log_log(LOG_ERR, "%s:%d: unknown map: '%s'", filename, lnr, map); exit(EXIT_FAILURE); } - check_argumentcount(filename,lnr,keyword,(line!=NULL)&&(*line!='\0')); + check_argumentcount(filename, lnr, keyword, (line != NULL) && (*line != '\0')); /* check if the value will be changed */ - if (strcmp(*var,line)!=0) + if (strcmp(*var, line) != 0) { /* Note: we have a memory leak here if a single mapping is changed - multiple times in one config (deemed not a problem) */ - *var=xstrdup(line); + multiple times in one config (deemed not a problem) */ + *var = xstrdup(line); } } /* this function modifies the statement argument passed */ -static void parse_map_statement(const char *filename,int lnr, - const char *keyword,char *line) +static void parse_map_statement(const char *filename, int lnr, + const char *keyword, char *line) { enum ldap_map_selector map; const char **var; char oldatt[32], newatt[1024]; /* get the map */ - if ((map=get_map(&line))==LM_NONE) + if ((map = get_map(&line)) == LM_NONE) { - log_log(LOG_ERR,"%s:%d: unknown map: '%s'",filename,lnr,line); + log_log(LOG_ERR, "%s:%d: unknown map: '%s'", filename, lnr, line); exit(EXIT_FAILURE); } /* read the other tokens */ - check_argumentcount(filename,lnr,keyword, - (get_token(&line,oldatt,sizeof(oldatt))!=NULL)&& - (get_token(&line,newatt,sizeof(newatt))!=NULL)); + check_argumentcount(filename, lnr, keyword, + (get_token(&line, oldatt, sizeof(oldatt)) != NULL) && + (get_token(&line, newatt, sizeof(newatt)) != NULL)); /* check that there are no more tokens left on the line */ - get_eol(filename,lnr,keyword,&line); + get_eol(filename, lnr, keyword, &line); /* change attribute mapping */ - var=attmap_get_var(map,oldatt); - if (var==NULL) + var = attmap_get_var(map, oldatt); + if (var == NULL) { - log_log(LOG_ERR,"%s:%d: unknown attribute to map: '%s'",filename,lnr,oldatt); + log_log(LOG_ERR, "%s:%d: unknown attribute to map: '%s'", + filename, lnr, oldatt); exit(EXIT_FAILURE); } - if (attmap_set_mapping(var,newatt)==NULL) + if (attmap_set_mapping(var, newatt) == NULL) { - log_log(LOG_ERR,"%s:%d: attribute %s cannot be an expression",filename,lnr,oldatt); + log_log(LOG_ERR, "%s:%d: attribute %s cannot be an expression", + filename, lnr, oldatt); exit(EXIT_FAILURE); } } /* this function modifies the statement argument passed */ static void parse_nss_initgroups_ignoreusers_statement( - const char *filename,int lnr,const char *keyword, - char *line,struct ldap_config *cfg) + const char *filename, int lnr, const char *keyword, + char *line, struct ldap_config *cfg) { char token[MAX_LINE_LENGTH]; - char *username,*next; + char *username, *next; struct passwd *pwent; - check_argumentcount(filename,lnr,keyword,(line!=NULL)&&(*line!='\0')); - if (cfg->ldc_nss_initgroups_ignoreusers==NULL) - cfg->ldc_nss_initgroups_ignoreusers=set_new(); - while (get_token(&line,token,sizeof(token))!=NULL) + check_argumentcount(filename, lnr, keyword, (line != NULL) && (*line != '\0')); + if (cfg->ldc_nss_initgroups_ignoreusers == NULL) + cfg->ldc_nss_initgroups_ignoreusers = set_new(); + while (get_token(&line, token, sizeof(token)) != NULL) { - if (strcasecmp(token,"alllocal")==0) + if (strcasecmp(token, "alllocal") == 0) { /* go over all users (this will work because nslcd is not yet running) */ setpwent(); - while ((pwent=getpwent())!=NULL) - set_add(cfg->ldc_nss_initgroups_ignoreusers,pwent->pw_name); + while ((pwent = getpwent()) != NULL) + set_add(cfg->ldc_nss_initgroups_ignoreusers, pwent->pw_name); endpwent(); } else { - next=token; - while (*next!='\0') + next = token; + while (*next != '\0') { - username=next; + username = next; /* find the end of the current username */ - while ((*next!='\0')&&(*next!=',')) next++; - if (*next==',') + while ((*next != '\0') && (*next != ',')) + next++; + if (*next == ',') { - *next='\0'; + *next = '\0'; next++; } /* check if user exists (but add anyway) */ - pwent=getpwnam(username); - if (pwent==NULL) - log_log(LOG_ERR,"%s:%d: user '%s' does not exist",filename,lnr,username); - set_add(cfg->ldc_nss_initgroups_ignoreusers,username); + pwent = getpwnam(username); + if (pwent == NULL) + log_log(LOG_ERR, "%s:%d: user '%s' does not exist", + filename, lnr, username); + set_add(cfg->ldc_nss_initgroups_ignoreusers, username); } } } } static void parse_pam_authz_search_statement( - const char *filename,int lnr,const char *keyword, - char *line,struct ldap_config *cfg) + const char *filename, int lnr, const char *keyword, + char *line, struct ldap_config *cfg) { SET *set; const char **list; int i; - check_argumentcount(filename,lnr,keyword,(line!=NULL)&&(*line!='\0')); + check_argumentcount(filename, lnr, keyword, (line != NULL) && (*line != '\0')); /* find free spot for search filter */ - for (i=0;(i<NSS_LDAP_CONFIG_MAX_AUTHZ_SEARCHES)&&(cfg->ldc_pam_authz_search[i]!=NULL);i++); - if (i>=NSS_LDAP_CONFIG_MAX_AUTHZ_SEARCHES) + for (i = 0; + (i < NSS_LDAP_CONFIG_MAX_AUTHZ_SEARCHES) && (cfg->ldc_pam_authz_search[i] != NULL); + i++) + /* nothing */ ; + if (i >= NSS_LDAP_CONFIG_MAX_AUTHZ_SEARCHES) { - log_log(LOG_ERR,"%s:%d: maximum number of pam_authz_search options (%d) exceeded", - filename,lnr,NSS_LDAP_CONFIG_MAX_AUTHZ_SEARCHES); + log_log(LOG_ERR, "%s:%d: maximum number of pam_authz_search options (%d) exceeded", + filename, lnr, NSS_LDAP_CONFIG_MAX_AUTHZ_SEARCHES); exit(EXIT_FAILURE); } - cfg->ldc_pam_authz_search[i]=xstrdup(line); + cfg->ldc_pam_authz_search[i] = xstrdup(line); /* check the variables used in the expression */ - set=expr_vars(cfg->ldc_pam_authz_search[i],NULL); - list=set_tolist(set); - for (i=0;list[i]!=NULL;i++) + set = expr_vars(cfg->ldc_pam_authz_search[i], NULL); + list = set_tolist(set); + for (i = 0; list[i] != NULL; i++) { - if ((strcmp(list[i],"username")!=0)&& - (strcmp(list[i],"service")!=0)&& - (strcmp(list[i],"ruser")!=0)&& - (strcmp(list[i],"rhost")!=0)&& - (strcmp(list[i],"tty")!=0)&& - (strcmp(list[i],"hostname")!=0)&& - (strcmp(list[i],"fqdn")!=0)&& - (strcmp(list[i],"dn")!=0)&& - (strcmp(list[i],"uid")!=0)) + if ((strcmp(list[i], "username") != 0) && + (strcmp(list[i], "service") != 0) && + (strcmp(list[i], "ruser") != 0) && + (strcmp(list[i], "rhost") != 0) && + (strcmp(list[i], "tty") != 0) && + (strcmp(list[i], "hostname") != 0) && + (strcmp(list[i], "fqdn") != 0) && + (strcmp(list[i], "dn") != 0) && (strcmp(list[i], "uid") != 0)) { - log_log(LOG_ERR,"%s:%d: unknown variable $%s",filename,lnr,list[i]); + log_log(LOG_ERR, "%s:%d: unknown variable $%s", filename, lnr, list[i]); exit(EXIT_FAILURE); } } @@ -850,10 +872,10 @@ static void parse_pam_authz_search_statement( free(list); } -static void cfg_read(const char *filename,struct ldap_config *cfg) +static void cfg_read(const char *filename, struct ldap_config *cfg) { FILE *fp; - int lnr=0; + int lnr = 0; char linebuf[MAX_LINE_LENGTH]; char *line; char keyword[32]; @@ -864,343 +886,365 @@ static void cfg_read(const char *filename,struct ldap_config *cfg) char *value; #endif /* open config file */ - if ((fp=fopen(filename,"r"))==NULL) + if ((fp = fopen(filename, "r")) == NULL) { - log_log(LOG_ERR,"cannot open config file (%s): %s",filename,strerror(errno)); + log_log(LOG_ERR, "cannot open config file (%s): %s", + filename, strerror(errno)); exit(EXIT_FAILURE); } /* read file and parse lines */ - while (fgets(linebuf,sizeof(linebuf),fp)!=NULL) + while (fgets(linebuf, sizeof(linebuf), fp) != NULL) { lnr++; - line=linebuf; + line = linebuf; /* strip newline */ - i=(int)strlen(line); - if ((i<=0)||(line[i-1]!='\n')) + i = (int)strlen(line); + if ((i <= 0) || (line[i - 1] != '\n')) { - log_log(LOG_ERR,"%s:%d: line too long or last line missing newline",filename,lnr); + log_log(LOG_ERR, "%s:%d: line too long or last line missing newline", + filename, lnr); exit(EXIT_FAILURE); } - line[i-1]='\0'; + line[i - 1] = '\0'; /* ignore comment lines */ - if (line[0]=='#') + if (line[0] == '#') continue; /* strip trailing spaces */ - for (i--;(i>0)&&isspace(line[i-1]);i--) - line[i-1]='\0'; + for (i--; (i > 0) && isspace(line[i - 1]); i--) + line[i - 1] = '\0'; /* get keyword from line and ignore empty lines */ - if (get_token(&line,keyword,sizeof(keyword))==NULL) + if (get_token(&line, keyword, sizeof(keyword)) == NULL) continue; /* runtime options */ - if (strcasecmp(keyword,"threads")==0) + if (strcasecmp(keyword, "threads") == 0) { - get_int(filename,lnr,keyword,&line,&cfg->ldc_threads); - get_eol(filename,lnr,keyword,&line); + get_int(filename, lnr, keyword, &line, &cfg->ldc_threads); + get_eol(filename, lnr, keyword, &line); } - else if (strcasecmp(keyword,"uid")==0) + else if (strcasecmp(keyword, "uid") == 0) { - get_uid(filename,lnr,keyword,&line,&cfg->ldc_uid,&cfg->ldc_gid,&cfg->ldc_uidname); - get_eol(filename,lnr,keyword,&line); + get_uid(filename, lnr, keyword, &line, &cfg->ldc_uid, &cfg->ldc_gid, + &cfg->ldc_uidname); + get_eol(filename, lnr, keyword, &line); } - else if (strcasecmp(keyword,"gid")==0) + else if (strcasecmp(keyword, "gid") == 0) { - get_gid(filename,lnr,keyword,&line,&cfg->ldc_gid); - get_eol(filename,lnr,keyword,&line); + get_gid(filename, lnr, keyword, &line, &cfg->ldc_gid); + get_eol(filename, lnr, keyword, &line); } - else if (strcasecmp(keyword,"ignorecase")==0) + else if (strcasecmp(keyword, "ignorecase") == 0) { - get_boolean(filename,lnr,keyword,&line,&cfg->ldc_ignorecase); - get_eol(filename,lnr,keyword,&line); + get_boolean(filename, lnr, keyword, &line, &cfg->ldc_ignorecase); + get_eol(filename, lnr, keyword, &line); } /* general connection options */ - else if (strcasecmp(keyword,"uri")==0) + else if (strcasecmp(keyword, "uri") == 0) { - check_argumentcount(filename,lnr,keyword,(line!=NULL)&&(*line!='\0')); - while (get_token(&line,token,sizeof(token))!=NULL) + check_argumentcount(filename, lnr, keyword, (line != NULL) && (*line != '\0')); + while (get_token(&line, token, sizeof(token)) != NULL) { - if (strcasecmp(token,"dns")==0) + if (strcasecmp(token, "dns") == 0) { #ifdef HAVE_LDAP_DOMAIN2HOSTLIST - add_uris_from_dns(filename,lnr,cfg,cfg_getdomainname(filename,lnr)); + add_uris_from_dns(filename, lnr, cfg, + cfg_getdomainname(filename, lnr)); #else /* not HAVE_LDAP_DOMAIN2HOSTLIST */ - log_log(LOG_ERR,"%s:%d: value %s not supported on platform",filename,lnr,token); + log_log(LOG_ERR, "%s:%d: value %s not supported on platform", + filename, lnr, token); exit(EXIT_FAILURE); #endif /* not HAVE_LDAP_DOMAIN2HOSTLIST */ } - else if (strncasecmp(token,"dns:",4)==0) + else if (strncasecmp(token, "dns:", 4) == 0) { #ifdef HAVE_LDAP_DOMAIN2HOSTLIST - add_uris_from_dns(filename,lnr,cfg,strdup(token+sizeof("dns"))); + add_uris_from_dns(filename, lnr, cfg, + strdup(token + sizeof("dns"))); #else /* not HAVE_LDAP_DOMAIN2HOSTLIST */ - log_log(LOG_ERR,"%s:%d: value %s not supported on platform",filename,lnr,token); + log_log(LOG_ERR, "%s:%d: value %s not supported on platform", + filename, lnr, token); exit(EXIT_FAILURE); #endif /* not HAVE_LDAP_DOMAIN2HOSTLIST */ } else - add_uri(filename,lnr,cfg,token); + add_uri(filename, lnr, cfg, token); } } - else if (strcasecmp(keyword,"ldap_version")==0) + else if (strcasecmp(keyword, "ldap_version") == 0) { - get_int(filename,lnr,keyword,&line,&cfg->ldc_version); - get_eol(filename,lnr,keyword,&line); + get_int(filename, lnr, keyword, &line, &cfg->ldc_version); + get_eol(filename, lnr, keyword, &line); } - else if (strcasecmp(keyword,"binddn")==0) + else if (strcasecmp(keyword, "binddn") == 0) { - get_restdup(filename,lnr,keyword,&line,&cfg->ldc_binddn); + get_restdup(filename, lnr, keyword, &line, &cfg->ldc_binddn); } - else if (strcasecmp(keyword,"bindpw")==0) + else if (strcasecmp(keyword, "bindpw") == 0) { - check_permissions(filename,keyword); - get_restdup(filename,lnr,keyword,&line,&cfg->ldc_bindpw); + check_permissions(filename, keyword); + get_restdup(filename, lnr, keyword, &line, &cfg->ldc_bindpw); } - else if (strcasecmp(keyword,"rootpwmoddn")==0) + else if (strcasecmp(keyword, "rootpwmoddn") == 0) { - get_restdup(filename,lnr,keyword,&line,&cfg->ldc_rootpwmoddn); + get_restdup(filename, lnr, keyword, &line, &cfg->ldc_rootpwmoddn); } - else if (strcasecmp(keyword,"rootpwmodpw")==0) + else if (strcasecmp(keyword, "rootpwmodpw") == 0) { - check_permissions(filename,keyword); - get_restdup(filename,lnr,keyword,&line,&cfg->ldc_rootpwmodpw); + check_permissions(filename, keyword); + get_restdup(filename, lnr, keyword, &line, &cfg->ldc_rootpwmodpw); } /* SASL authentication options */ - else if (strcasecmp(keyword,"use_sasl")==0) + else if (strcasecmp(keyword, "use_sasl") == 0) { - log_log(LOG_WARNING,"%s:%d: option %s is deprecated (and will be removed in an upcoming release), use sasl_mech instead",filename,lnr,keyword); + log_log(LOG_WARNING, "%s:%d: option %s is deprecated (and will be removed in an upcoming release), use sasl_mech instead", + filename, lnr, keyword); } - else if (strcasecmp(keyword,"sasl_mech")==0) + else if (strcasecmp(keyword, "sasl_mech") == 0) { - get_strdup(filename,lnr,keyword,&line,&cfg->ldc_sasl_mech); - get_eol(filename,lnr,keyword,&line); + get_strdup(filename, lnr, keyword, &line, &cfg->ldc_sasl_mech); + get_eol(filename, lnr, keyword, &line); } - else if (strcasecmp(keyword,"sasl_realm")==0) + else if (strcasecmp(keyword, "sasl_realm") == 0) { - get_strdup(filename,lnr,keyword,&line,&cfg->ldc_sasl_realm); - get_eol(filename,lnr,keyword,&line); + get_strdup(filename, lnr, keyword, &line, &cfg->ldc_sasl_realm); + get_eol(filename, lnr, keyword, &line); } - else if (strcasecmp(keyword,"sasl_authcid")==0) + else if (strcasecmp(keyword, "sasl_authcid") == 0) { - get_strdup(filename,lnr,keyword,&line,&cfg->ldc_sasl_authcid); - get_eol(filename,lnr,keyword,&line); + get_strdup(filename, lnr, keyword, &line, &cfg->ldc_sasl_authcid); + get_eol(filename, lnr, keyword, &line); } - else if (strcasecmp(keyword,"sasl_authzid")==0) + else if (strcasecmp(keyword, "sasl_authzid") == 0) { - get_strdup(filename,lnr,keyword,&line,&cfg->ldc_sasl_authzid); - get_eol(filename,lnr,keyword,&line); + get_strdup(filename, lnr, keyword, &line, &cfg->ldc_sasl_authzid); + get_eol(filename, lnr, keyword, &line); } - else if (strcasecmp(keyword,"sasl_secprops")==0) + else if (strcasecmp(keyword, "sasl_secprops") == 0) { - get_strdup(filename,lnr,keyword,&line,&cfg->ldc_sasl_secprops); - get_eol(filename,lnr,keyword,&line); + get_strdup(filename, lnr, keyword, &line, &cfg->ldc_sasl_secprops); + get_eol(filename, lnr, keyword, &line); } #ifdef LDAP_OPT_X_SASL_NOCANON - else if ( (strcasecmp(keyword,"sasl_canonicalize")==0) || - (strcasecmp(keyword,"sasl_canonicalise")==0) || - (strcasecmp(keyword,"ldap_sasl_canonicalize")==0) || - (strcasecmp(keyword,"sasl_canon")==0) ) + else if ((strcasecmp(keyword, "sasl_canonicalize") == 0) || + (strcasecmp(keyword, "sasl_canonicalise") == 0) || + (strcasecmp(keyword, "ldap_sasl_canonicalize") == 0) || + (strcasecmp(keyword, "sasl_canon") == 0)) { - get_boolean(filename,lnr,keyword,&line,&cfg->ldc_sasl_canonicalize); - get_eol(filename,lnr,keyword,&line); + get_boolean(filename, lnr, keyword, &line, &cfg->ldc_sasl_canonicalize); + get_eol(filename, lnr, keyword, &line); } - else if (strcasecmp(keyword,"sasl_nocanon")==0) + else if (strcasecmp(keyword, "sasl_nocanon") == 0) { - get_boolean(filename,lnr,keyword,&line,&cfg->ldc_sasl_canonicalize); - cfg->ldc_sasl_canonicalize=!cfg->ldc_sasl_canonicalize; - get_eol(filename,lnr,keyword,&line); + get_boolean(filename, lnr, keyword, &line, &cfg->ldc_sasl_canonicalize); + cfg->ldc_sasl_canonicalize = !cfg->ldc_sasl_canonicalize; + get_eol(filename, lnr, keyword, &line); } #endif /* LDAP_OPT_X_SASL_NOCANON */ /* Kerberos authentication options */ - else if (strcasecmp(keyword,"krb5_ccname")==0) + else if (strcasecmp(keyword, "krb5_ccname") == 0) { - parse_krb5_ccname_statement(filename,lnr,keyword,line); + parse_krb5_ccname_statement(filename, lnr, keyword, line); } /* search/mapping options */ - else if (strcasecmp(keyword,"base")==0) + else if (strcasecmp(keyword, "base") == 0) { - parse_base_statement(filename,lnr,keyword,line,cfg); + parse_base_statement(filename, lnr, keyword, line, cfg); } - else if (strcasecmp(keyword,"scope")==0) + else if (strcasecmp(keyword, "scope") == 0) { - parse_scope_statement(filename,lnr,keyword,line,cfg); + parse_scope_statement(filename, lnr, keyword, line, cfg); } - else if (strcasecmp(keyword,"deref")==0) + else if (strcasecmp(keyword, "deref") == 0) { - check_argumentcount(filename,lnr,keyword, - (get_token(&line,token,sizeof(token))!=NULL)); - if (strcasecmp(token,"never")==0) - cfg->ldc_deref=LDAP_DEREF_NEVER; - else if (strcasecmp(token,"searching")==0) - cfg->ldc_deref=LDAP_DEREF_SEARCHING; - else if (strcasecmp(token,"finding")==0) - cfg->ldc_deref=LDAP_DEREF_FINDING; - else if (strcasecmp(token,"always")==0) - cfg->ldc_deref=LDAP_DEREF_ALWAYS; + check_argumentcount(filename, lnr, keyword, + (get_token(&line, token, sizeof(token)) != NULL)); + if (strcasecmp(token, "never") == 0) + cfg->ldc_deref = LDAP_DEREF_NEVER; + else if (strcasecmp(token, "searching") == 0) + cfg->ldc_deref = LDAP_DEREF_SEARCHING; + else if (strcasecmp(token, "finding") == 0) + cfg->ldc_deref = LDAP_DEREF_FINDING; + else if (strcasecmp(token, "always") == 0) + cfg->ldc_deref = LDAP_DEREF_ALWAYS; else { - log_log(LOG_ERR,"%s:%d: wrong argument: '%s'",filename,lnr,token); + log_log(LOG_ERR, "%s:%d: wrong argument: '%s'", filename, lnr, token); exit(EXIT_FAILURE); } - get_eol(filename,lnr,keyword,&line); + get_eol(filename, lnr, keyword, &line); } - else if (strcasecmp(keyword,"referrals")==0) + else if (strcasecmp(keyword, "referrals") == 0) { - get_boolean(filename,lnr,keyword,&line,&cfg->ldc_referrals); - get_eol(filename,lnr,keyword,&line); + get_boolean(filename, lnr, keyword, &line, &cfg->ldc_referrals); + get_eol(filename, lnr, keyword, &line); } - else if (strcasecmp(keyword,"filter")==0) + else if (strcasecmp(keyword, "filter") == 0) { - parse_filter_statement(filename,lnr,keyword,line); + parse_filter_statement(filename, lnr, keyword, line); } - else if (strcasecmp(keyword,"map")==0) + else if (strcasecmp(keyword, "map") == 0) { - parse_map_statement(filename,lnr,keyword,line); + parse_map_statement(filename, lnr, keyword, line); } /* timing/reconnect options */ - else if (strcasecmp(keyword,"bind_timelimit")==0) + else if (strcasecmp(keyword, "bind_timelimit") == 0) { - get_int(filename,lnr,keyword,&line,&cfg->ldc_bind_timelimit); - get_eol(filename,lnr,keyword,&line); + get_int(filename, lnr, keyword, &line, &cfg->ldc_bind_timelimit); + get_eol(filename, lnr, keyword, &line); } - else if (strcasecmp(keyword,"timelimit")==0) + else if (strcasecmp(keyword, "timelimit") == 0) { - get_int(filename,lnr,keyword,&line,&cfg->ldc_timelimit); - get_eol(filename,lnr,keyword,&line); + get_int(filename, lnr, keyword, &line, &cfg->ldc_timelimit); + get_eol(filename, lnr, keyword, &line); } - else if (strcasecmp(keyword,"idle_timelimit")==0) + else if (strcasecmp(keyword, "idle_timelimit") == 0) { - get_int(filename,lnr,keyword,&line,&cfg->ldc_idle_timelimit); - get_eol(filename,lnr,keyword,&line); + get_int(filename, lnr, keyword, &line, &cfg->ldc_idle_timelimit); + get_eol(filename, lnr, keyword, &line); } - else if (strcasecmp(keyword,"reconnect_tries")==0) - log_log(LOG_WARNING,"%s:%d: option %s has been removed and will be ignored",filename,lnr,keyword); - else if (!strcasecmp(keyword,"reconnect_sleeptime")) + else if (strcasecmp(keyword, "reconnect_tries") == 0) + log_log(LOG_WARNING, "%s:%d: option %s has been removed and will be ignored", + filename, lnr, keyword); + else if (!strcasecmp(keyword, "reconnect_sleeptime")) { - get_int(filename,lnr,keyword,&line,&cfg->ldc_reconnect_sleeptime); - get_eol(filename,lnr,keyword,&line); + get_int(filename, lnr, keyword, &line, &cfg->ldc_reconnect_sleeptime); + get_eol(filename, lnr, keyword, &line); } - else if ( (strcasecmp(keyword,"reconnect_retrytime")==0) || - (strcasecmp(keyword,"reconnect_maxsleeptime")==0) ) + else if ((strcasecmp(keyword, "reconnect_retrytime") == 0) || + (strcasecmp(keyword, "reconnect_maxsleeptime") == 0)) { - if (strcasecmp(keyword,"reconnect_maxsleeptime")==0) - log_log(LOG_WARNING,"%s:%d: option %s has been renamed to reconnect_retrytime",filename,lnr,keyword); - get_int(filename,lnr,keyword,&line,&cfg->ldc_reconnect_retrytime); - get_eol(filename,lnr,keyword,&line); + if (strcasecmp(keyword, "reconnect_maxsleeptime") == 0) + log_log(LOG_WARNING, "%s:%d: option %s has been renamed to reconnect_retrytime", + filename, lnr, keyword); + get_int(filename, lnr, keyword, &line, &cfg->ldc_reconnect_retrytime); + get_eol(filename, lnr, keyword, &line); } #ifdef LDAP_OPT_X_TLS /* SSL/TLS options */ - else if (strcasecmp(keyword,"ssl")==0) + else if (strcasecmp(keyword, "ssl") == 0) { - check_argumentcount(filename,lnr,keyword, - (get_token(&line,token,sizeof(token))!=NULL)); - if ( (strcasecmp(token,"start_tls")==0) || - (strcasecmp(token,"starttls")==0) ) - cfg->ldc_ssl_on=SSL_START_TLS; - else if (parse_boolean(filename,lnr,token)) - cfg->ldc_ssl_on=SSL_LDAPS; - get_eol(filename,lnr,keyword,&line); + check_argumentcount(filename, lnr, keyword, + (get_token(&line, token, sizeof(token)) != NULL)); + if ((strcasecmp(token, "start_tls") == 0) || + (strcasecmp(token, "starttls") == 0)) + cfg->ldc_ssl_on = SSL_START_TLS; + else if (parse_boolean(filename, lnr, token)) + cfg->ldc_ssl_on = SSL_LDAPS; + get_eol(filename, lnr, keyword, &line); } - else if ( (strcasecmp(keyword,"tls_reqcert")==0) || - (strcasecmp(keyword,"tls_checkpeer")==0) ) + else if ((strcasecmp(keyword, "tls_reqcert") == 0) || + (strcasecmp(keyword, "tls_checkpeer") == 0)) { - if (strcasecmp(keyword,"tls_checkpeer")==0) - log_log(LOG_WARNING,"%s:%d: option %s is deprecated (and will be removed in an upcoming release), use tls_reqcert instead",filename,lnr,keyword); - get_reqcert(filename,lnr,keyword,&line,&i); - get_eol(filename,lnr,keyword,&line); - log_log(LOG_DEBUG,"ldap_set_option(LDAP_OPT_X_TLS_REQUIRE_CERT,%d)",i); - LDAP_SET_OPTION(NULL,LDAP_OPT_X_TLS_REQUIRE_CERT,&i); + if (strcasecmp(keyword, "tls_checkpeer") == 0) + log_log(LOG_WARNING, "%s:%d: option %s is deprecated (and will be removed in an upcoming release), use tls_reqcert instead", + filename, lnr, keyword); + get_reqcert(filename, lnr, keyword, &line, &i); + get_eol(filename, lnr, keyword, &line); + log_log(LOG_DEBUG, "ldap_set_option(LDAP_OPT_X_TLS_REQUIRE_CERT,%d)", i); + LDAP_SET_OPTION(NULL, LDAP_OPT_X_TLS_REQUIRE_CERT, &i); } - else if (strcasecmp(keyword,"tls_cacertdir")==0) + else if (strcasecmp(keyword, "tls_cacertdir") == 0) { - get_strdup(filename,lnr,keyword,&line,&value); - get_eol(filename,lnr,keyword,&line); + get_strdup(filename, lnr, keyword, &line, &value); + get_eol(filename, lnr, keyword, &line); /* TODO: check that the path is valid */ - log_log(LOG_DEBUG,"ldap_set_option(LDAP_OPT_X_TLS_CACERTDIR,\"%s\")",value); - LDAP_SET_OPTION(NULL,LDAP_OPT_X_TLS_CACERTDIR,value); + log_log(LOG_DEBUG, "ldap_set_option(LDAP_OPT_X_TLS_CACERTDIR,\"%s\")", + value); + LDAP_SET_OPTION(NULL, LDAP_OPT_X_TLS_CACERTDIR, value); free(value); } - else if ( (strcasecmp(keyword,"tls_cacertfile")==0) || - (strcasecmp(keyword,"tls_cacert")==0) ) + else if ((strcasecmp(keyword, "tls_cacertfile") == 0) || + (strcasecmp(keyword, "tls_cacert") == 0)) { - get_strdup(filename,lnr,keyword,&line,&value); - get_eol(filename,lnr,keyword,&line); + get_strdup(filename, lnr, keyword, &line, &value); + get_eol(filename, lnr, keyword, &line); /* TODO: check that the path is valid */ - log_log(LOG_DEBUG,"ldap_set_option(LDAP_OPT_X_TLS_CACERTFILE,\"%s\")",value); - LDAP_SET_OPTION(NULL,LDAP_OPT_X_TLS_CACERTFILE,value); + log_log(LOG_DEBUG, "ldap_set_option(LDAP_OPT_X_TLS_CACERTFILE,\"%s\")", + value); + LDAP_SET_OPTION(NULL, LDAP_OPT_X_TLS_CACERTFILE, value); free(value); } - else if (strcasecmp(keyword,"tls_randfile")==0) + else if (strcasecmp(keyword, "tls_randfile") == 0) { - get_strdup(filename,lnr,keyword,&line,&value); - get_eol(filename,lnr,keyword,&line); + get_strdup(filename, lnr, keyword, &line, &value); + get_eol(filename, lnr, keyword, &line); /* TODO: check that the path is valid */ - log_log(LOG_DEBUG,"ldap_set_option(LDAP_OPT_X_TLS_RANDOM_FILE,\"%s\")",value); - LDAP_SET_OPTION(NULL,LDAP_OPT_X_TLS_RANDOM_FILE,value); + log_log(LOG_DEBUG, "ldap_set_option(LDAP_OPT_X_TLS_RANDOM_FILE,\"%s\")", + value); + LDAP_SET_OPTION(NULL, LDAP_OPT_X_TLS_RANDOM_FILE, value); free(value); } - else if (strcasecmp(keyword,"tls_ciphers")==0) + else if (strcasecmp(keyword, "tls_ciphers") == 0) { - get_restdup(filename,lnr,keyword,&line,&value); - log_log(LOG_DEBUG,"ldap_set_option(LDAP_OPT_X_TLS_CIPHER_SUITE,\"%s\")",value); - LDAP_SET_OPTION(NULL,LDAP_OPT_X_TLS_CIPHER_SUITE,value); + get_restdup(filename, lnr, keyword, &line, &value); + log_log(LOG_DEBUG, "ldap_set_option(LDAP_OPT_X_TLS_CIPHER_SUITE,\"%s\")", + value); + LDAP_SET_OPTION(NULL, LDAP_OPT_X_TLS_CIPHER_SUITE, value); free(value); } - else if (strcasecmp(keyword,"tls_cert")==0) + else if (strcasecmp(keyword, "tls_cert") == 0) { - get_strdup(filename,lnr,keyword,&line,&value); - get_eol(filename,lnr,keyword,&line); + get_strdup(filename, lnr, keyword, &line, &value); + get_eol(filename, lnr, keyword, &line); /* TODO: check that the path is valid */ - log_log(LOG_DEBUG,"ldap_set_option(LDAP_OPT_X_TLS_CERTFILE,\"%s\")",value); - LDAP_SET_OPTION(NULL,LDAP_OPT_X_TLS_CERTFILE,value); + log_log(LOG_DEBUG, "ldap_set_option(LDAP_OPT_X_TLS_CERTFILE,\"%s\")", + value); + LDAP_SET_OPTION(NULL, LDAP_OPT_X_TLS_CERTFILE, value); free(value); } - else if (strcasecmp(keyword,"tls_key")==0) + else if (strcasecmp(keyword, "tls_key") == 0) { - get_strdup(filename,lnr,keyword,&line,&value); - get_eol(filename,lnr,keyword,&line); + get_strdup(filename, lnr, keyword, &line, &value); + get_eol(filename, lnr, keyword, &line); /* TODO: check that the path is valid */ - log_log(LOG_DEBUG,"ldap_set_option(LDAP_OPT_X_TLS_KEYFILE,\"%s\")",value); - LDAP_SET_OPTION(NULL,LDAP_OPT_X_TLS_KEYFILE,value); + log_log(LOG_DEBUG, "ldap_set_option(LDAP_OPT_X_TLS_KEYFILE,\"%s\")", + value); + LDAP_SET_OPTION(NULL, LDAP_OPT_X_TLS_KEYFILE, value); free(value); } #endif /* LDAP_OPT_X_TLS */ /* other options */ - else if (strcasecmp(keyword,"restart")==0) + else if (strcasecmp(keyword, "restart") == 0) { - log_log(LOG_WARNING,"%s:%d: option %s is currently untested (and may be removed in an upcoming release)",filename,lnr,keyword); - get_boolean(filename,lnr,keyword,&line,&cfg->ldc_restart); - get_eol(filename,lnr,keyword,&line); + log_log(LOG_WARNING, "%s:%d: option %s is currently untested (and may be removed in an upcoming release)", + filename, lnr, keyword); + get_boolean(filename, lnr, keyword, &line, &cfg->ldc_restart); + get_eol(filename, lnr, keyword, &line); } - else if (strcasecmp(keyword,"pagesize")==0) + else if (strcasecmp(keyword, "pagesize") == 0) { - get_int(filename,lnr,keyword,&line,&cfg->ldc_pagesize); - get_eol(filename,lnr,keyword,&line); + get_int(filename, lnr, keyword, &line, &cfg->ldc_pagesize); + get_eol(filename, lnr, keyword, &line); } - else if (strcasecmp(keyword,"nss_initgroups_ignoreusers")==0) + else if (strcasecmp(keyword, "nss_initgroups_ignoreusers") == 0) { - parse_nss_initgroups_ignoreusers_statement(filename,lnr,keyword,line,cfg); + parse_nss_initgroups_ignoreusers_statement(filename, lnr, keyword, line, + cfg); } - else if (strcasecmp(keyword,"pam_authz_search")==0) + else if (strcasecmp(keyword, "pam_authz_search") == 0) { - parse_pam_authz_search_statement(filename,lnr,keyword,line,cfg); + parse_pam_authz_search_statement(filename, lnr, keyword, line, cfg); } - else if (strcasecmp(keyword,"nss_min_uid")==0) + else if (strcasecmp(keyword, "nss_min_uid") == 0) { - get_uid(filename,lnr,keyword,&line,&cfg->ldc_nss_min_uid,NULL,NULL); - get_eol(filename,lnr,keyword,&line); + get_uid(filename, lnr, keyword, &line, &cfg->ldc_nss_min_uid, NULL, + NULL); + get_eol(filename, lnr, keyword, &line); } - else if (strcasecmp(keyword,"validnames")==0) + else if (strcasecmp(keyword, "validnames") == 0) { - parse_validnames_statement(filename,lnr,keyword,line,cfg); + parse_validnames_statement(filename, lnr, keyword, line, cfg); } - else if (strcasecmp(keyword,"pam_password_prohibit_message")==0) + else if (strcasecmp(keyword, "pam_password_prohibit_message") == 0) { - parse_pam_password_prohibit_message_statement(filename,lnr,keyword,line,cfg); + parse_pam_password_prohibit_message_statement(filename, lnr, keyword, + line, cfg); } #ifdef ENABLE_CONFIGFILE_CHECKING /* fallthrough */ else { - log_log(LOG_ERR,"%s:%d: unknown keyword: '%s'",filename,lnr,keyword); + log_log(LOG_ERR, "%s:%d: unknown keyword: '%s'", + filename, lnr, keyword); exit(EXIT_FAILURE); } #endif @@ -1210,52 +1254,54 @@ static void cfg_read(const char *filename,struct ldap_config *cfg) } #ifdef NSLCD_BINDPW_PATH -static void bindpw_read(const char *filename,struct ldap_config *cfg) +static void bindpw_read(const char *filename, struct ldap_config *cfg) { FILE *fp; char linebuf[MAX_LINE_LENGTH]; int i; /* open config file */ - errno=0; - if ((fp=fopen(filename,"r"))==NULL) + errno = 0; + if ((fp = fopen(filename, "r")) == NULL) { - if (errno==ENOENT) + if (errno == ENOENT) { - log_log(LOG_DEBUG,"no bindpw file (%s)",filename); + log_log(LOG_DEBUG, "no bindpw file (%s)", filename); return; /* ignore */ } else { - log_log(LOG_ERR,"cannot open bindpw file (%s): %s",filename,strerror(errno)); + log_log(LOG_ERR, "cannot open bindpw file (%s): %s", + filename, strerror(errno)); exit(EXIT_FAILURE); } } /* check permissions */ - check_permissions(filename,NULL); + check_permissions(filename, NULL); /* read the first line */ - if (fgets(linebuf,sizeof(linebuf),fp)==NULL) + if (fgets(linebuf, sizeof(linebuf), fp) == NULL) { - log_log(LOG_ERR,"%s: error reading first line",filename); + log_log(LOG_ERR, "%s: error reading first line", filename); exit(EXIT_FAILURE); } /* chop the last char off and save the rest as bindpw */ - i=(int)strlen(linebuf); - if ((i<=0)||(linebuf[i-1]!='\n')) + i = (int)strlen(linebuf); + if ((i <= 0) || (linebuf[i - 1] != '\n')) { - log_log(LOG_ERR,"%s:1: line too long or missing newline",filename); + log_log(LOG_ERR, "%s:1: line too long or missing newline", filename); exit(EXIT_FAILURE); } - linebuf[i-1]='\0'; - if (strlen(linebuf)==0) + linebuf[i - 1] = '\0'; + if (strlen(linebuf) == 0) { - log_log(LOG_ERR,"%s:1: the password is empty",filename); + log_log(LOG_ERR, "%s:1: the password is empty", filename); exit(EXIT_FAILURE); } - cfg->ldc_bindpw=strdup(linebuf); + cfg->ldc_bindpw = strdup(linebuf); /* check if there is no more data in the file */ - if (fgets(linebuf,sizeof(linebuf),fp)!=NULL) + if (fgets(linebuf, sizeof(linebuf), fp) != NULL) { - log_log(LOG_ERR,"%s:2: there is more than one line in the bindpw file",filename); + log_log(LOG_ERR, "%s:2: there is more than one line in the bindpw file", + filename); exit(EXIT_FAILURE); } fclose(fp); @@ -1275,34 +1321,37 @@ static MUST_USE char *get_base_from_rootdse(void) int i; int rc; const char **values; - char *base=NULL; + char *base = NULL; /* initialize session */ - session=myldap_create_session(); - assert(session!=NULL); + session = myldap_create_session(); + assert(session != NULL); /* perform search */ - search=myldap_search(session,"",LDAP_SCOPE_BASE,"(objectClass=*)",attrs,NULL); - if (search==NULL) + search = myldap_search(session, "", LDAP_SCOPE_BASE, "(objectClass=*)", + attrs, NULL); + if (search == NULL) { myldap_session_close(session); return NULL; } /* go over results */ - for (i=0;(entry=myldap_get_entry(search,&rc))!=NULL;i++) + for (i = 0; (entry = myldap_get_entry(search, &rc)) != NULL; i++) { /* get defaultNamingContext */ - values=myldap_get_values(entry,"defaultNamingContext"); - if ((values!=NULL)&&(values[0]!=NULL)) + values = myldap_get_values(entry, "defaultNamingContext"); + if ((values != NULL) && (values[0] != NULL)) { - base=xstrdup(values[0]); - log_log(LOG_DEBUG,"get_basedn_from_rootdse(): found attribute defaultNamingContext with value %s",values[0]); + base = xstrdup(values[0]); + log_log(LOG_DEBUG, "get_basedn_from_rootdse(): found attribute defaultNamingContext with value %s", + values[0]); break; } /* get namingContexts */ - values=myldap_get_values(entry,"namingContexts"); - if ((values!=NULL)&&(values[0]!=NULL)) + values = myldap_get_values(entry, "namingContexts"); + if ((values != NULL) && (values[0] != NULL)) { - base=xstrdup(values[0]); - log_log(LOG_DEBUG,"get_basedn_from_rootdse(): found attribute namingContexts with value %s",values[0]); + base = xstrdup(values[0]); + log_log(LOG_DEBUG, "get_basedn_from_rootdse(): found attribute namingContexts with value %s", + values[0]); break; } } @@ -1317,52 +1366,52 @@ void cfg_init(const char *fname) int i; #endif /* LDAP_OPT_X_TLS */ /* check if we were called before */ - if (nslcd_cfg!=NULL) + if (nslcd_cfg != NULL) { - log_log(LOG_CRIT,"cfg_init() may only be called once"); + log_log(LOG_CRIT, "cfg_init() may only be called once"); exit(EXIT_FAILURE); } /* allocate the memory (this memory is not freed anywhere) */ - nslcd_cfg=(struct ldap_config *)malloc(sizeof(struct ldap_config)); - if (nslcd_cfg==NULL) + nslcd_cfg = (struct ldap_config *)malloc(sizeof(struct ldap_config)); + if (nslcd_cfg == NULL) { - log_log(LOG_CRIT,"malloc() failed to allocate memory"); + log_log(LOG_CRIT, "malloc() failed to allocate memory"); exit(EXIT_FAILURE); } /* clear configuration */ cfg_defaults(nslcd_cfg); /* read configfile */ - cfg_read(fname,nslcd_cfg); + cfg_read(fname, nslcd_cfg); #ifdef NSLCD_BINDPW_PATH - bindpw_read(NSLCD_BINDPW_PATH,nslcd_cfg); + bindpw_read(NSLCD_BINDPW_PATH, nslcd_cfg); #endif /* NSLCD_BINDPW_PATH */ /* do some sanity checks */ - if (nslcd_cfg->ldc_uris[0].uri==NULL) + if (nslcd_cfg->ldc_uris[0].uri == NULL) { - log_log(LOG_ERR,"no URIs defined in config"); + log_log(LOG_ERR, "no URIs defined in config"); exit(EXIT_FAILURE); } /* if ssl is on each URI should start with ldaps */ #ifdef LDAP_OPT_X_TLS - if (nslcd_cfg->ldc_ssl_on==SSL_LDAPS) + if (nslcd_cfg->ldc_ssl_on == SSL_LDAPS) { - for (i=0;nslcd_cfg->ldc_uris[i].uri!=NULL;i++) + for (i = 0; nslcd_cfg->ldc_uris[i].uri != NULL; i++) { - if (strncasecmp(nslcd_cfg->ldc_uris[i].uri,"ldaps://",8)!=0) - log_log(LOG_WARNING,"%s doesn't start with ldaps:// and \"ssl on\" is specified", - nslcd_cfg->ldc_uris[i].uri); + if (strncasecmp(nslcd_cfg->ldc_uris[i].uri, "ldaps://", 8) != 0) + log_log(LOG_WARNING, "%s doesn't start with ldaps:// and \"ssl on\" is specified", + nslcd_cfg->ldc_uris[i].uri); } } /* TODO: check that if some tls options are set the ssl option should be set to on (just warn) */ #endif /* LDAP_OPT_X_TLS */ /* if basedn is not yet set, get if from the rootDSE */ - if (nslcd_cfg->ldc_bases[0]==NULL) - nslcd_cfg->ldc_bases[0]=get_base_from_rootdse(); + if (nslcd_cfg->ldc_bases[0] == NULL) + nslcd_cfg->ldc_bases[0] = get_base_from_rootdse(); /* TODO: handle the case gracefully when no LDAP server is available yet */ /* see if we have a valid basedn */ - if ((nslcd_cfg->ldc_bases[0]==NULL)||(nslcd_cfg->ldc_bases[0][0]=='\0')) + if ((nslcd_cfg->ldc_bases[0] == NULL) || (nslcd_cfg->ldc_bases[0][0] == '\0')) { - log_log(LOG_ERR,"no base defined in config and couldn't get one from server"); + log_log(LOG_ERR, "no base defined in config and couldn't get one from server"); exit(EXIT_FAILURE); } /* initialise all database modules */ |