/* ***** BEGIN LICENSE BLOCK ***** * Version: MPL 1.1/GPL 2.0/LGPL 2.1 * * The contents of this file are subject to the Mozilla Public License Version * 1.1 (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at * http://www.mozilla.org/MPL/ * * Software distributed under the License is distributed on an "AS IS" basis, * WITHOUT WARRANTY OF ANY KIND, either express or implied. See the License * for the specific language governing rights and limitations under the * License. * * The Original Code is Sun LDAP C SDK. * * The Initial Developer of the Original Code is Sun Microsystems, Inc. * * Portions created by Sun Microsystems, Inc are Copyright (C) 2005 * Sun Microsystems, Inc. All Rights Reserved. * * Contributor(s): abobrov@sun.com * * Alternatively, the contents of this file may be used under the terms of * either the GNU General Public License Version 2 or later (the "GPL"), or * the GNU Lesser General Public License Version 2.1 or later (the "LGPL"), * in which case the provisions of the GPL or the LGPL are applicable instead * of those above. If you wish to allow use of your version of this file only * under the terms of either the GPL or the LGPL, and not to allow others to * use your version of this file under the terms of the MPL, indicate your * decision by deleting the provisions above and replace them with the notice * and other provisions required by the GPL or the LGPL. If you do not delete * the provisions above, a recipient may use your version of this file under * the terms of any one of the MPL, the GPL or the LGPL. * * ***** END LICENSE BLOCK ***** */ #include "ldap-int.h" /* ldap_create_userstatus_control: Parameters are ld LDAP pointer to the desired connection ctl_iscritical Indicates whether the control is critical of not. If this field is non-zero, the operation will only be car- ried out if the control is recognized by the server and/or client ctrlp the address of a place to put the constructed control */ int LDAP_CALL ldap_create_userstatus_control ( LDAP *ld, const char ctl_iscritical, LDAPControl **ctrlp ) { int rc; if ( !NSLDAPI_VALID_LDAP_POINTER( ld )) { return( LDAP_PARAM_ERROR ); } if ( ctrlp == NULL ) { LDAP_SET_LDERRNO( ld, LDAP_PARAM_ERROR, NULL, NULL ); return ( LDAP_PARAM_ERROR ); } rc = nsldapi_build_control( LDAP_CONTROL_ACCOUNT_USABLE, NULL, 0, ctl_iscritical, ctrlp ); LDAP_SET_LDERRNO( ld, rc, NULL, NULL ); return( rc ); } /* ldap_parse_userstatus_control: Parameters are ld LDAP pointer to the desired connection ctrlp An array of controls obtained from calling ldap_parse_result on the set of results returned by the server us the address of struct LDAPuserstatus to parse control results to */ int LDAP_CALL ldap_parse_userstatus_control ( LDAP *ld, LDAPControl **ctrlp, LDAPuserstatus *us ) { BerElement *ber = NULL; int i, foundUSControl; LDAPControl *USCtrlp = NULL; ber_tag_t tag; if ( !NSLDAPI_VALID_LDAP_POINTER( ld ) || us == NULL ) { return( LDAP_PARAM_ERROR ); } /* find the control in the list of controls if it exists */ if ( ctrlp == NULL ) { LDAP_SET_LDERRNO( ld, LDAP_CONTROL_NOT_FOUND, NULL, NULL ); return ( LDAP_CONTROL_NOT_FOUND ); } foundUSControl = 0; for ( i = 0; (( ctrlp[i] != NULL ) && ( !foundUSControl )); i++ ) { foundUSControl = !strcmp( ctrlp[i]->ldctl_oid, LDAP_CONTROL_ACCOUNT_USABLE ); } if ( !foundUSControl ) { LDAP_SET_LDERRNO( ld, LDAP_CONTROL_NOT_FOUND, NULL, NULL ); return ( LDAP_CONTROL_NOT_FOUND ); } else { /* let local var point to the control */ USCtrlp = ctrlp[i-1]; } /* allocate a Ber element with the contents of the control's struct berval */ if ( ( ber = ber_init( &USCtrlp->ldctl_value ) ) == NULL ) { LDAP_SET_LDERRNO( ld, LDAP_NO_MEMORY, NULL, NULL ); return( LDAP_NO_MEMORY ); } memset( us, 0, sizeof(struct LDAPuserstatus) ); /* * The control value should look like this: * * ACCOUNT_USABLE_RESPONSE::= CHOICE { * is_available [0] INTEGER, ** seconds before expiration ** * is_not_available [1] More_info * } * More_info::= SEQUENCE { * inactive [0] BOOLEAN DEFAULT FALSE, * reset [1] BOOLEAN DEFAULT FALSE, * expired [2] BOOLEAN DEFAULT FALSE, * remaining_grace [3] INTEGER OPTIONAL, * seconds_before_unlock [4] INTEGER OPTIONAL * } */ if ( ( ber_scanf( ber, "t", &tag ) ) == LBER_ERROR ) { LDAP_SET_LDERRNO( ld, LDAP_DECODING_ERROR, NULL, NULL ); ber_free( ber, 1 ); return( LDAP_DECODING_ERROR ); } tag = (( tag & LBER_CONSTRUCTED ) == LBER_CONSTRUCTED ) ? 1 : 0; if ( !tag ) { us->us_available = 1; if ( ber_scanf( ber, "i", &us->us_expire ) == LBER_ERROR ) { LDAP_SET_LDERRNO( ld, LDAP_DECODING_ERROR, NULL, NULL ); ber_free( ber, 1 ); return( LDAP_DECODING_ERROR ); } } else { us->us_available = 0; tag = 0; if ( ( ber_scanf( ber, "{t", &tag ) ) == LBER_ERROR ) { LDAP_SET_LDERRNO( ld, LDAP_DECODING_ERROR, NULL, NULL ); ber_free( ber, 1 ); return( LDAP_DECODING_ERROR ); } while ( tag != LBER_ERROR && tag != LBER_END_OF_SEQORSET ) { tag = tag & (~LBER_CLASS_CONTEXT); switch (tag) { case 0: if ( ber_scanf( ber, "b", &us->us_inactive ) == LBER_ERROR ) { LDAP_SET_LDERRNO( ld, LDAP_DECODING_ERROR, NULL, NULL ); ber_free( ber, 1 ); return( LDAP_DECODING_ERROR ); } us->us_inactive = ( us->us_inactive != 0 ) ? 1 : 0; break; case 1: if ( ber_scanf( ber, "b", &us->us_reset ) == LBER_ERROR ) { LDAP_SET_LDERRNO( ld, LDAP_DECODING_ERROR, NULL, NULL ); ber_free( ber, 1 ); return( LDAP_DECODING_ERROR ); } us->us_reset = ( us->us_reset != 0 ) ? 1 : 0; break; case 2: if ( ber_scanf( ber, "b", &us->us_expired ) == LBER_ERROR ) { LDAP_SET_LDERRNO( ld, LDAP_DECODING_ERROR, NULL, NULL ); ber_free( ber, 1 ); return( LDAP_DECODING_ERROR ); } us->us_expired = ( us->us_expired != 0 ) ? 1 : 0; break; case 3: if ( ber_scanf( ber, "i", &us->us_remaining ) == LBER_ERROR ) { LDAP_SET_LDERRNO( ld, LDAP_DECODING_ERROR, NULL, NULL ); ber_free( ber, 1 ); return( LDAP_DECODING_ERROR ); } break; case 4: if ( ber_scanf( ber, "i", &us->us_seconds ) == LBER_ERROR ) { LDAP_SET_LDERRNO( ld, LDAP_DECODING_ERROR, NULL, NULL ); ber_free( ber, 1 ); return( LDAP_DECODING_ERROR ); } break; default: LDAP_SET_LDERRNO( ld, LDAP_DECODING_ERROR, NULL, NULL ); ber_free( ber, 1 ); return( LDAP_DECODING_ERROR ); } ber_scanf( ber, "t", &tag ); } } /* the ber encoding is no longer needed */ ber_free( ber, 1 ); return( LDAP_SUCCESS ); }