/*

   service.c - service entry lookup routines

   Parts of this file were part of the nss_ldap library (as ldap-service.c)

   which has been forked into the nss-pam-ldapd library.

   Copyright (C) 1997-2005 Luke Howard

   Copyright (C) 2006 West Consulting

   Copyright (C) 2006-2014 Arthur de Jong

   This library is free software; you can redistribute it and/or

   modify it under the terms of the GNU Lesser General Public

   License as published by the Free Software Foundation; either

   version 2.1 of the License, or (at your option) any later version.

   This library is distributed in the hope that it will be useful,

   but WITHOUT ANY WARRANTY; without even the implied warranty of

   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU

   Lesser General Public License for more details.

   You should have received a copy of the GNU Lesser General Public

   License along with this library; if not, write to the Free Software

   Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA

   02110-1301 USA

*/

#include "config.h"

#include <stdio.h>

#include <stdlib.h>

#include <string.h>

#ifdef HAVE_STDINT_H

#include <stdint.h>

#endif /* HAVE_STDINT_H */

#include "common.h"

#include "log.h"

#include "myldap.h"

#include "cfg.h"

#include "attmap.h"

/* ( nisSchema.2.3 NAME 'ipService' SUP top STRUCTURAL

 *   DESC 'Abstraction an Internet Protocol service.

 *         Maps an IP port and protocol (such as tcp or udp)

 *         to one or more names; the distinguished value of

 *         the cn attribute denotes the service's canonical

 *         name'

 *   MUST ( cn $ ipServicePort $ ipServiceProtocol )

 *   MAY ( description ) )

 */

/* the search base for searches */

const char *service_bases[NSS_LDAP_CONFIG_MAX_BASES] = { NULL };

/* the search scope for searches */

int service_scope = LDAP_SCOPE_DEFAULT;

/* the basic search filter for searches */

const char *service_filter = "(objectClass=ipService)";

/* the attributes to request with searches */

const char *attmap_service_cn                = "cn";

const char *attmap_service_ipServicePort     = "ipServicePort";

const char *attmap_service_ipServiceProtocol = "ipServiceProtocol";

/* the attribute list to request with searches */

static const char *service_attrs[4];

static int mkfilter_service_byname(const char *name, const char *protocol,

                                   char *buffer, size_t buflen)

{

  char safename[BUFLEN_SAFENAME], safeprotocol[BUFLEN_SAFENAME];

  /* escape attributes */

  if (myldap_escape(name, safename, sizeof(safename)))

  {

    log_log(LOG_ERR, "mkfilter_service_byname(): safename buffer too small");

    return -1;

  }

  /* build filter */

  if (*protocol != '\0')

  {

    if (myldap_escape(protocol, safeprotocol, sizeof(safeprotocol)))

    {

      log_log(LOG_ERR, "mkfilter_service_byname(): safeprotocol buffer too small");

      return -1;

    }

    return mysnprintf(buffer, buflen, "(&%s(%s=%s)(%s=%s))",

                      service_filter, attmap_service_cn, safename,

                      attmap_service_ipServiceProtocol, safeprotocol);

  }

  else

    return mysnprintf(buffer, buflen, "(&%s(%s=%s))",

                      service_filter, attmap_service_cn, safename);

}

static int mkfilter_service_bynumber(int number, const char *protocol,

                                     char *buffer, size_t buflen)

{

  char safeprotocol[BUFLEN_SAFENAME];

  if (*protocol != '\0')

  {

    if (myldap_escape(protocol, safeprotocol, sizeof(safeprotocol)))

    {

      log_log(LOG_ERR, "mkfilter_service_bynumber(): safeprotocol buffer too small");

      return -1;

    }

    return mysnprintf(buffer, buflen, "(&%s(%s=%d)(%s=%s))",

                      service_filter, attmap_service_ipServicePort, number,

                      attmap_service_ipServiceProtocol, safeprotocol);

  }

  else

    return mysnprintf(buffer, buflen, "(&%s(%s=%d))",

                      service_filter, attmap_service_ipServicePort, number);

}

void service_init(void)

{

  int i;

  /* set up search bases */

  if (service_bases[0] == NULL)

    for (i = 0; i < NSS_LDAP_CONFIG_MAX_BASES; i++)

      service_bases[i] = nslcd_cfg->bases[i];

  /* set up scope */

  if (service_scope == LDAP_SCOPE_DEFAULT)

    service_scope = nslcd_cfg->scope;

  /* set up attribute list */

  service_attrs[0] = attmap_service_cn;

  service_attrs[1] = attmap_service_ipServicePort;

  service_attrs[2] = attmap_service_ipServiceProtocol;

  service_attrs[3] = NULL;

}

static int write_service(TFILE *fp, MYLDAP_ENTRY *entry,

                         const char *reqname, const char *reqprotocol)

{

  int32_t tmpint32, tmp2int32, tmp3int32;

  const char *name;

  const char **aliases;

  const char **ports;

  const char **protocols;

  char *tmp;

  long port;

  int i;

  /* get the most canonical name */

  name = myldap_get_rdn_value(entry, attmap_service_cn);

  /* get the other names for the service entries */

  aliases = myldap_get_values(entry, attmap_service_cn);

  if ((aliases == NULL) || (aliases[0] == NULL))

  {

    log_log(LOG_WARNING, "%s: %s: missing",

            myldap_get_dn(entry), attmap_service_cn);

    return 0;

  }

  /* if the service name is not yet found, get the first entry */

  if (name == NULL)

    name = aliases[0];

  /* check case of returned services entry */

  if ((reqname != NULL) && (STR_CMP(reqname, name) != 0))

  {

    for (i = 0; (aliases[i] != NULL) && (STR_CMP(reqname, aliases[i]) != 0); i++)

      /* nothing */ ;

    if (aliases[i] == NULL)

      return 0; /* neither the name nor any of the aliases matched */

  }

  /* get the service number */

  ports = myldap_get_values(entry, attmap_service_ipServicePort);

  if ((ports == NULL) || (ports[0] == NULL))

  {

    log_log(LOG_WARNING, "%s: %s: missing",

            myldap_get_dn(entry), attmap_service_ipServicePort);

    return 0;

  }

  else if (ports[1] != NULL)

  {

    log_log(LOG_WARNING, "%s: %s: multiple values",

            myldap_get_dn(entry), attmap_service_ipServicePort);

  }

  errno = 0;

  port = strtol(ports[0], &tmp, 10);

  if ((*(ports[0]) == '\0') || (*tmp != '\0'))

  {

    log_log(LOG_WARNING, "%s: %s: non-numeric value",

            myldap_get_dn(entry), attmap_service_ipServicePort);

    return 0;

  }

  else if ((errno != 0) || (port <= 0) || (port > (long)UINT16_MAX))

  {

    log_log(LOG_WARNING, "%s: %s: out of range",

            myldap_get_dn(entry), attmap_service_ipServicePort);

    return 0;

  }

  /* get protocols */

  protocols = myldap_get_values(entry, attmap_service_ipServiceProtocol);

  if ((protocols == NULL) || (protocols[0] == NULL))

  {

    log_log(LOG_WARNING, "%s: %s: missing",

            myldap_get_dn(entry), attmap_service_ipServiceProtocol);

    return 0;

  }

  /* write the entries */

  for (i = 0; protocols[i] != NULL; i++)

    if ((reqprotocol == NULL) || (*reqprotocol == '\0') ||

        (STR_CMP(reqprotocol, protocols[i]) == 0))

    {

      WRITE_INT32(fp, NSLCD_RESULT_BEGIN);

      WRITE_STRING(fp, name);

      WRITE_STRINGLIST_EXCEPT(fp, aliases, name);

      /* port number is actually a 16-bit value but we write 32 bits anyway */

      WRITE_INT32(fp, port);

      WRITE_STRING(fp, protocols[i]);

    }

  return 0;

}

NSLCD_HANDLE(

  service, byname, NSLCD_ACTION_SERVICE_BYNAME,

  char name[BUFLEN_NAME];

  char protocol[BUFLEN_NAME];

  char filter[BUFLEN_FILTER];

  READ_STRING(fp, name);

  READ_STRING(fp, protocol);

  log_setrequest("service=\"%s\"%s%s", name,

                 *protocol != '\0' ? "/" : "", protocol);,

  mkfilter_service_byname(name, protocol, filter, sizeof(filter)),

  write_service(fp, entry, name, protocol)

)

NSLCD_HANDLE(

  service, bynumber, NSLCD_ACTION_SERVICE_BYNUMBER,

  int number;

  char protocol[BUFLEN_NAME];

  char filter[BUFLEN_FILTER];

  READ_INT32(fp, number);

  READ_STRING(fp, protocol);

  log_setrequest("service=%lu%s%s", (unsigned long int)number,

                 *protocol != '\0' ? "/" : "", protocol);,

  mkfilter_service_bynumber(number, protocol, filter, sizeof(filter)),

  write_service(fp, entry, NULL, protocol)

)

NSLCD_HANDLE(

  service, all, NSLCD_ACTION_SERVICE_ALL,

  const char *filter;

  log_setrequest("service(all)");,

  (filter = service_filter, 0),

  write_service(fp, entry, NULL, NULL)

)