init.c 17.1 KB
Newer Older
1
/* $OpenLDAP$ */
2
3
/* This work is part of OpenLDAP Software <http://www.openldap.org/>.
 *
Quanah Gibson-Mount's avatar
Quanah Gibson-Mount committed
4
 * Copyright 1998-2019 The OpenLDAP Foundation.
5
6
7
8
9
10
11
12
13
 * All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted only as authorized by the OpenLDAP
 * Public License.
 *
 * A copy of this license is available in the file LICENSE in the
 * top-level directory of the distribution or, alternatively, at
 * <http://www.OpenLDAP.org/license.html>.
Kurt Zeilenga's avatar
Kurt Zeilenga committed
14
 */
15

16
17
18
#include "portable.h"

#include <stdio.h>
Kurt Zeilenga's avatar
Kurt Zeilenga committed
19
#include <ac/stdlib.h>
20

Quanah Gibson-Mount's avatar
Quanah Gibson-Mount committed
21
22
23
24
#ifdef HAVE_GETEUID
#include <ac/unistd.h>
#endif

25
26
#include <ac/socket.h>
#include <ac/string.h>
27
#include <ac/ctype.h>
28
29
#include <ac/time.h>

Kurt Zeilenga's avatar
Kurt Zeilenga committed
30
#ifdef HAVE_LIMITS_H
31
#include <limits.h>
Kurt Zeilenga's avatar
Kurt Zeilenga committed
32
#endif
33

34
#include "ldap-int.h"
35
#include "ldap_defaults.h"
36
#include "lutil.h"
37

38
struct ldapoptions ldap_int_global_options =
39
40
41
42
43
44
45
	{ LDAP_UNINITIALIZED, LDAP_DEBUG_NONE
		LDAP_LDO_NULLARG
		LDAP_LDO_CONNECTIONLESS_NULLARG
		LDAP_LDO_TLS_NULLARG
		LDAP_LDO_SASL_NULLARG
		LDAP_LDO_GSSAPI_NULLARG
		LDAP_LDO_MUTEX_NULLARG };
46

47
48
49
50
51
#define ATTR_NONE	0
#define ATTR_BOOL	1
#define ATTR_INT	2
#define ATTR_KV		3
#define ATTR_STRING	4
52
#define ATTR_OPTION	5
53
54
55

#define ATTR_SASL	6
#define ATTR_TLS	7
56

57
58
59
#define ATTR_OPT_TV	8
#define ATTR_OPT_INT	9

Quanah Gibson-Mount's avatar
Quanah Gibson-Mount committed
60
61
#define ATTR_GSSAPI	10

62
struct ol_keyvalue {
63
	const char *		key;
64
65
66
	int			value;
};

67
static const struct ol_keyvalue deref_kv[] = {
68
69
70
71
72
73
74
	{"never", LDAP_DEREF_NEVER},
	{"searching", LDAP_DEREF_SEARCHING},
	{"finding", LDAP_DEREF_FINDING},
	{"always", LDAP_DEREF_ALWAYS},
	{NULL, 0}
};

75
static const struct ol_attribute {
76
	int			useronly;
77
	int			type;
78
79
	const char *	name;
	const void *	data;
80
81
	size_t		offset;
} attrs[] = {
82
83
84
	{0, ATTR_OPT_TV,	"TIMEOUT",		NULL,	LDAP_OPT_TIMEOUT},
	{0, ATTR_OPT_TV,	"NETWORK_TIMEOUT",	NULL,	LDAP_OPT_NETWORK_TIMEOUT},
	{0, ATTR_OPT_INT,	"VERSION",		NULL,	LDAP_OPT_PROTOCOL_VERSION},
85
	{0, ATTR_KV,		"DEREF",	deref_kv, /* or &deref_kv[0] */
86
		offsetof(struct ldapoptions, ldo_deref)},
87
	{0, ATTR_INT,		"SIZELIMIT",	NULL,
88
		offsetof(struct ldapoptions, ldo_sizelimit)},
89
	{0, ATTR_INT,		"TIMELIMIT",	NULL,
90
		offsetof(struct ldapoptions, ldo_timelimit)},
91
92
	{1, ATTR_STRING,	"BINDDN",		NULL,
		offsetof(struct ldapoptions, ldo_defbinddn)},
93
	{0, ATTR_STRING,	"BASE",			NULL,
94
		offsetof(struct ldapoptions, ldo_defbase)},
95
	{0, ATTR_INT,		"PORT",			NULL,		/* deprecated */
96
		offsetof(struct ldapoptions, ldo_defport)},
97
98
	{0, ATTR_OPTION,	"HOST",			NULL,	LDAP_OPT_HOST_NAME}, /* deprecated */
	{0, ATTR_OPTION,	"URI",			NULL,	LDAP_OPT_URI}, /* replaces HOST/PORT */
99
	{0, ATTR_BOOL,		"REFERRALS",	NULL,	LDAP_BOOL_REFERRALS},
100
101
#if 0
	/* This should only be allowed via ldap_set_option(3) */
102
	{0, ATTR_BOOL,		"RESTART",		NULL,	LDAP_BOOL_RESTART},
103
#endif
104

105
#ifdef HAVE_CYRUS_SASL
106
	{0, ATTR_STRING,	"SASL_MECH",		NULL,
107
		offsetof(struct ldapoptions, ldo_def_sasl_mech)},
108
	{0, ATTR_STRING,	"SASL_REALM",		NULL,
109
110
111
112
113
114
		offsetof(struct ldapoptions, ldo_def_sasl_realm)},
	{1, ATTR_STRING,	"SASL_AUTHCID",		NULL,
		offsetof(struct ldapoptions, ldo_def_sasl_authcid)},
	{1, ATTR_STRING,	"SASL_AUTHZID",		NULL,
		offsetof(struct ldapoptions, ldo_def_sasl_authzid)},
	{0, ATTR_SASL,		"SASL_SECPROPS",	NULL,	LDAP_OPT_X_SASL_SECPROPS},
Quanah Gibson-Mount's avatar
Quanah Gibson-Mount committed
115
	{0, ATTR_BOOL,		"SASL_NOCANON",	NULL,	LDAP_BOOL_SASL_NOCANON},
116
117
#endif

Quanah Gibson-Mount's avatar
Quanah Gibson-Mount committed
118
119
120
121
122
123
#ifdef HAVE_GSSAPI
	{0, ATTR_GSSAPI,"GSSAPI_SIGN",			NULL,	LDAP_OPT_SIGN},
	{0, ATTR_GSSAPI,"GSSAPI_ENCRYPT",		NULL,	LDAP_OPT_ENCRYPT},
	{0, ATTR_GSSAPI,"GSSAPI_ALLOW_REMOTE_PRINCIPAL",NULL,	LDAP_OPT_X_GSSAPI_ALLOW_REMOTE_PRINCIPAL},
#endif

124
#ifdef HAVE_TLS
125
126
127
128
129
130
131
	{1, ATTR_TLS,	"TLS_CERT",			NULL,	LDAP_OPT_X_TLS_CERTFILE},
	{1, ATTR_TLS,	"TLS_KEY",			NULL,	LDAP_OPT_X_TLS_KEYFILE},
  	{0, ATTR_TLS,	"TLS_CACERT",		NULL,	LDAP_OPT_X_TLS_CACERTFILE},
  	{0, ATTR_TLS,	"TLS_CACERTDIR",	NULL,	LDAP_OPT_X_TLS_CACERTDIR},
  	{0, ATTR_TLS,	"TLS_REQCERT",		NULL,	LDAP_OPT_X_TLS_REQUIRE_CERT},
	{0, ATTR_TLS,	"TLS_RANDFILE",		NULL,	LDAP_OPT_X_TLS_RANDOM_FILE},
	{0, ATTR_TLS,	"TLS_CIPHER_SUITE",	NULL,	LDAP_OPT_X_TLS_CIPHER_SUITE},
Quanah Gibson-Mount's avatar
Quanah Gibson-Mount committed
132
	{0, ATTR_TLS,	"TLS_PROTOCOL_MIN",	NULL,	LDAP_OPT_X_TLS_PROTOCOL_MIN},
133
134

#ifdef HAVE_OPENSSL_CRL
135
	{0, ATTR_TLS,	"TLS_CRLCHECK",		NULL,	LDAP_OPT_X_TLS_CRLCHECK},
136
#endif
137
#ifdef HAVE_GNUTLS
Quanah Gibson-Mount's avatar
Quanah Gibson-Mount committed
138
	{0, ATTR_TLS,	"TLS_CRLFILE",			NULL,	LDAP_OPT_X_TLS_CRLFILE},
139
#endif
140
        
141
142
#endif

143
	{0, ATTR_NONE,		NULL,		NULL,	0}
144
145
};

Quanah Gibson-Mount's avatar
Quanah Gibson-Mount committed
146
#define MAX_LDAP_ATTR_LEN  sizeof("GSSAPI_ALLOW_REMOTE_PRINCIPAL")
147
148
#define MAX_LDAP_ENV_PREFIX_LEN 8

149
150
static void openldap_ldap_init_w_conf(
	const char *file, int userconf )
151
{
Pierangelo Masarati's avatar
Pierangelo Masarati committed
152
	char linebuf[ AC_LINE_MAX ];
153
154
155
156
	FILE *fp;
	int i;
	char *cmd, *opt;
	char *start, *end;
157
158
159
160
161
	struct ldapoptions *gopts;

	if ((gopts = LDAP_INT_GLOBAL_OPT()) == NULL) {
		return;			/* Could not allocate mem for global options */
	}
162

163
164
165
166
167
	if (file == NULL) {
		/* no file name */
		return;
	}

168
169
	Debug(LDAP_DEBUG_TRACE, "ldap_init: trying %s\n", file, 0, 0);

170
171
172
173
174
175
	fp = fopen(file, "r");
	if(fp == NULL) {
		/* could not open file */
		return;
	}

176
177
	Debug(LDAP_DEBUG_TRACE, "ldap_init: using %s\n", file, 0, 0);

178
179
180
181
182
	while((start = fgets(linebuf, sizeof(linebuf), fp)) != NULL) {
		/* skip lines starting with '#' */
		if(*start == '#') continue;

		/* trim leading white space */
183
184
		while((*start != '\0') && isspace((unsigned char) *start))
			start++;
185
186
187
188
189
190

		/* anything left? */
		if(*start == '\0') continue;

		/* trim trailing white space */
		end = &start[strlen(start)-1];
191
		while(isspace((unsigned char)*end)) end--;
192
193
194
195
196
197
198
199
		end[1] = '\0';

		/* anything left? */
		if(*start == '\0') continue;
		

		/* parse the command */
		cmd=start;
200
		while((*start != '\0') && !isspace((unsigned char)*start)) {
201
202
203
204
205
206
207
208
209
			start++;
		}
		if(*start == '\0') {
			/* command has no argument */
			continue;
		} 

		*start++ = '\0';

210
		/* we must have some whitespace to skip */
211
		while(isspace((unsigned char)*start)) start++;
212
213
214
215
216
		opt = start;

		for(i=0; attrs[i].type != ATTR_NONE; i++) {
			void *p;

217
			if( !userconf && attrs[i].useronly ) {
218
219
220
				continue;
			}

221
222
223
224
225
226
227
228
229
230
			if(strcasecmp(cmd, attrs[i].name) != 0) {
				continue;
			}

			switch(attrs[i].type) {
			case ATTR_BOOL:
				if((strcasecmp(opt, "on") == 0) 
					|| (strcasecmp(opt, "yes") == 0)
					|| (strcasecmp(opt, "true") == 0))
				{
231
					LDAP_BOOL_SET(gopts, attrs[i].offset);
232
233

				} else {
234
					LDAP_BOOL_CLR(gopts, attrs[i].offset);
235
236
237
238
				}

				break;

239
240
241
			case ATTR_INT: {
				char *next;
				long l;
242
				p = &((char *) gopts)[attrs[i].offset];
243
244
245
246
247
				l = strtol( opt, &next, 10 );
				if ( next != opt && next[ 0 ] == '\0' ) {
					* (int*) p = l;
				}
				} break;
248
249

			case ATTR_KV: {
250
					const struct ol_keyvalue *kv;
251

252
					for(kv = attrs[i].data;
253
254
255
256
						kv->key != NULL;
						kv++) {

						if(strcasecmp(opt, kv->key) == 0) {
257
							p = &((char *) gopts)[attrs[i].offset];
258
259
260
261
262
263
264
							* (int*) p = kv->value;
							break;
						}
					}
				} break;

			case ATTR_STRING:
265
				p = &((char *) gopts)[attrs[i].offset];
266
				if (* (char**) p != NULL) LDAP_FREE(* (char**) p);
267
				* (char**) p = LDAP_STRDUP(opt);
268
				break;
269
270
			case ATTR_OPTION:
				ldap_set_option( NULL, attrs[i].offset, opt );
271
				break;
272
273
274
			case ATTR_SASL:
#ifdef HAVE_CYRUS_SASL
			   	ldap_int_sasl_config( gopts, attrs[i].offset, opt );
Quanah Gibson-Mount's avatar
Quanah Gibson-Mount committed
275
276
277
278
279
#endif
				break;
			case ATTR_GSSAPI:
#ifdef HAVE_GSSAPI
				ldap_int_gssapi_config( gopts, attrs[i].offset, opt );
280
281
282
283
#endif
				break;
			case ATTR_TLS:
#ifdef HAVE_TLS
Kurt Zeilenga's avatar
Kurt Zeilenga committed
284
			   	ldap_int_tls_config( NULL, attrs[i].offset, opt );
285
286
#endif
				break;
287
288
			case ATTR_OPT_TV: {
				struct timeval tv;
289
				char *next;
290
				tv.tv_usec = 0;
291
292
293
				tv.tv_sec = strtol( opt, &next, 10 );
				if ( next != opt && next[ 0 ] == '\0' && tv.tv_sec > 0 ) {
					(void)ldap_set_option( NULL, attrs[i].offset, (const void *)&tv );
294
295
296
				}
				} break;
			case ATTR_OPT_INT: {
297
298
299
300
301
302
				long l;
				char *next;
				l = strtol( opt, &next, 10 );
				if ( next != opt && next[ 0 ] == '\0' && l > 0 && (long)((int)l) == l ) {
					int v = (int)l;
					(void)ldap_set_option( NULL, attrs[i].offset, (const void *)&v );
303
304
				}
				} break;
305
			}
306

307
			break;
308
309
		}
	}
310
311

	fclose(fp);
312
313
}

314
315
316
317
318
static void openldap_ldap_init_w_sysconf(const char *file)
{
	openldap_ldap_init_w_conf( file, 0 );
}

319
320
static void openldap_ldap_init_w_userconf(const char *file)
{
321
	char *home;
322
	char *path = NULL;
323
324
325
326
327
328
329
330

	if (file == NULL) {
		/* no file name */
		return;
	}

	home = getenv("HOME");

Kurt Zeilenga's avatar
Kurt Zeilenga committed
331
	if (home != NULL) {
332
333
		Debug(LDAP_DEBUG_TRACE, "ldap_init: HOME env is %s\n",
		      home, 0, 0);
Kurt Zeilenga's avatar
Kurt Zeilenga committed
334
		path = LDAP_MALLOC(strlen(home) + strlen(file) + sizeof( LDAP_DIRSEP "."));
Kurt Zeilenga's avatar
Kurt Zeilenga committed
335
	} else {
336
337
		Debug(LDAP_DEBUG_TRACE, "ldap_init: HOME env is NULL\n",
		      0, 0, 0);
Kurt Zeilenga's avatar
Kurt Zeilenga committed
338
339
340
	}

	if(home != NULL && path != NULL) {
341
342
		/* we assume UNIX path syntax is used... */

Kurt Zeilenga's avatar
Kurt Zeilenga committed
343
		/* try ~/file */
Kurt Zeilenga's avatar
Kurt Zeilenga committed
344
		sprintf(path, "%s" LDAP_DIRSEP "%s", home, file);
345
		openldap_ldap_init_w_conf(path, 1);
346

Kurt Zeilenga's avatar
Kurt Zeilenga committed
347
		/* try ~/.file */
Kurt Zeilenga's avatar
Kurt Zeilenga committed
348
		sprintf(path, "%s" LDAP_DIRSEP ".%s", home, file);
349
		openldap_ldap_init_w_conf(path, 1);
Kurt Zeilenga's avatar
Kurt Zeilenga committed
350
	}
351
352

	if(path != NULL) {
353
		LDAP_FREE(path);
354
	}
355
356

	/* try file */
357
	openldap_ldap_init_w_conf(file, 1);
358
359
}

360
361
362
static void openldap_ldap_init_w_env(
		struct ldapoptions *gopts,
		const char *prefix)
363
364
365
366
367
368
369
370
{
	char buf[MAX_LDAP_ATTR_LEN+MAX_LDAP_ENV_PREFIX_LEN];
	int len;
	int i;
	void *p;
	char *value;

	if (prefix == NULL) {
371
		prefix = LDAP_ENV_PREFIX;
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
	}

	strncpy(buf, prefix, MAX_LDAP_ENV_PREFIX_LEN);
	buf[MAX_LDAP_ENV_PREFIX_LEN] = '\0';
	len = strlen(buf);

	for(i=0; attrs[i].type != ATTR_NONE; i++) {
		strcpy(&buf[len], attrs[i].name);
		value = getenv(buf);

		if(value == NULL) {
			continue;
		}

		switch(attrs[i].type) {
		case ATTR_BOOL:
			if((strcasecmp(value, "on") == 0) 
				|| (strcasecmp(value, "yes") == 0)
				|| (strcasecmp(value, "true") == 0))
			{
392
				LDAP_BOOL_SET(gopts, attrs[i].offset);
393
394

			} else {
395
				LDAP_BOOL_CLR(gopts, attrs[i].offset);
396
397
398
399
			}
			break;

		case ATTR_INT:
400
			p = &((char *) gopts)[attrs[i].offset];
401
402
403
404
			* (int*) p = atoi(value);
			break;

		case ATTR_KV: {
405
				const struct ol_keyvalue *kv;
406

407
				for(kv = attrs[i].data;
408
409
410
411
					kv->key != NULL;
					kv++) {

					if(strcasecmp(value, kv->key) == 0) {
412
						p = &((char *) gopts)[attrs[i].offset];
413
414
415
416
417
418
419
						* (int*) p = kv->value;
						break;
					}
				}
			} break;

		case ATTR_STRING:
420
			p = &((char *) gopts)[attrs[i].offset];
421
			if (* (char**) p != NULL) LDAP_FREE(* (char**) p);
422
423
424
			if (*value == '\0') {
				* (char**) p = NULL;
			} else {
425
				* (char**) p = LDAP_STRDUP(value);
426
427
			}
			break;
428
429
		case ATTR_OPTION:
			ldap_set_option( NULL, attrs[i].offset, value );
430
			break;
431
432
433
434
435
		case ATTR_SASL:
#ifdef HAVE_CYRUS_SASL
		   	ldap_int_sasl_config( gopts, attrs[i].offset, value );
#endif			 	
		   	break;
Quanah Gibson-Mount's avatar
Quanah Gibson-Mount committed
436
437
438
439
440
		case ATTR_GSSAPI:
#ifdef HAVE_GSSAPI
			ldap_int_gssapi_config( gopts, attrs[i].offset, value );
#endif
			break;
441
442
		case ATTR_TLS:
#ifdef HAVE_TLS
Kurt Zeilenga's avatar
Kurt Zeilenga committed
443
		   	ldap_int_tls_config( NULL, attrs[i].offset, value );
444
445
#endif			 	
		   	break;
Quanah Gibson-Mount's avatar
Quanah Gibson-Mount committed
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
		case ATTR_OPT_TV: {
			struct timeval tv;
			char *next;
			tv.tv_usec = 0;
			tv.tv_sec = strtol( value, &next, 10 );
			if ( next != value && next[ 0 ] == '\0' && tv.tv_sec > 0 ) {
				(void)ldap_set_option( NULL, attrs[i].offset, (const void *)&tv );
			}
			} break;
		case ATTR_OPT_INT: {
			long l;
			char *next;
			l = strtol( value, &next, 10 );
			if ( next != value && next[ 0 ] == '\0' && l > 0 && (long)((int)l) == l ) {
				int v = (int)l;
				(void)ldap_set_option( NULL, attrs[i].offset, (const void *)&v );
			}
			} break;
464
465
466
467
		}
	}
}

468
469
470
471
472
473
474
475
476
477
478
#if defined(__GNUC__)
/* Declare this function as a destructor so that it will automatically be
 * invoked either at program exit (if libldap is a static library) or
 * at unload time (if libldap is a dynamic library).
 *
 * Sorry, don't know how to handle this for non-GCC environments.
 */
static void ldap_int_destroy_global_options(void)
	__attribute__ ((destructor));
#endif

479
static void
Howard Chu's avatar
Howard Chu committed
480
ldap_int_destroy_global_options(void)
481
482
483
{
	struct ldapoptions *gopts = LDAP_INT_GLOBAL_OPT();

484
485
486
	if ( gopts == NULL )
		return;

487
488
	gopts->ldo_valid = LDAP_UNINITIALIZED;

489
490
491
492
	if ( gopts->ldo_defludp ) {
		ldap_free_urllist( gopts->ldo_defludp );
		gopts->ldo_defludp = NULL;
	}
493
494
495
#if defined(HAVE_WINSOCK) || defined(HAVE_WINSOCK2)
	WSACleanup( );
#endif
Pierangelo Masarati's avatar
Pierangelo Masarati committed
496

497
#if defined(HAVE_TLS) || defined(HAVE_CYRUS_SASL)
Pierangelo Masarati's avatar
Pierangelo Masarati committed
498
499
500
501
	if ( ldap_int_hostname ) {
		LDAP_FREE( ldap_int_hostname );
		ldap_int_hostname = NULL;
	}
Pierangelo Masarati's avatar
Pierangelo Masarati committed
502
#endif
503
504
505
506
507
508
#ifdef HAVE_CYRUS_SASL
	if ( gopts->ldo_def_sasl_authcid ) {
		LDAP_FREE( gopts->ldo_def_sasl_authcid );
		gopts->ldo_def_sasl_authcid = NULL;
	}
#endif
Howard Chu's avatar
Howard Chu committed
509
510
511
#ifdef HAVE_TLS
	ldap_int_tls_destroy( gopts );
#endif
512
513
}

514
515
516
517
/* 
 * Initialize the global options structure with default values.
 */
void ldap_int_initialize_global_options( struct ldapoptions *gopts, int *dbglvl )
518
{
519
	if (dbglvl)
520
	    gopts->ldo_debug = *dbglvl;
521
	else
522
		gopts->ldo_debug = 0;
523

524
525
526
527
	gopts->ldo_version   = LDAP_VERSION2;
	gopts->ldo_deref     = LDAP_DEREF_NEVER;
	gopts->ldo_timelimit = LDAP_NO_LIMIT;
	gopts->ldo_sizelimit = LDAP_NO_LIMIT;
528

Howard Chu's avatar
Howard Chu committed
529
530
	gopts->ldo_tm_api.tv_sec = -1;
	gopts->ldo_tm_net.tv_sec = -1;
531

532
	/* ldo_defludp will be freed by the termination handler
533
	 */
534
535
	ldap_url_parselist(&gopts->ldo_defludp, "ldap://localhost/");
	gopts->ldo_defport = LDAP_PORT;
536
537
538
539
#if !defined(__GNUC__) && !defined(PIC)
	/* Do this only for a static library, and only if we can't
	 * arrange for it to be executed as a library destructor
	 */
540
	atexit(ldap_int_destroy_global_options);
541
#endif
542

543
	gopts->ldo_refhoplimit = LDAP_DEFAULT_REFHOPLIMIT;
Kurt Zeilenga's avatar
Kurt Zeilenga committed
544
545
	gopts->ldo_rebind_proc = NULL;
	gopts->ldo_rebind_params = NULL;
546

547
	LDAP_BOOL_ZERO(gopts);
548

549
	LDAP_BOOL_SET(gopts, LDAP_BOOL_REFERRALS);
550

551
552
553
#ifdef LDAP_CONNECTIONLESS
	gopts->ldo_peer = NULL;
	gopts->ldo_cldapdn = NULL;
Howard Chu's avatar
Howard Chu committed
554
	gopts->ldo_is_udp = 0;
555
556
#endif

557
#ifdef HAVE_CYRUS_SASL
558
559
560
561
562
	gopts->ldo_def_sasl_mech = NULL;
	gopts->ldo_def_sasl_realm = NULL;
	gopts->ldo_def_sasl_authcid = NULL;
	gopts->ldo_def_sasl_authzid = NULL;

Kurt Zeilenga's avatar
Kurt Zeilenga committed
563
564
	memset( &gopts->ldo_sasl_secprops,
		'\0', sizeof(gopts->ldo_sasl_secprops) );
565
566

	gopts->ldo_sasl_secprops.max_ssf = INT_MAX;
Kurt Zeilenga's avatar
Kurt Zeilenga committed
567
568
569
	gopts->ldo_sasl_secprops.maxbufsize = SASL_MAX_BUFF_SIZE;
	gopts->ldo_sasl_secprops.security_flags =
		SASL_SEC_NOPLAINTEXT | SASL_SEC_NOANONYMOUS;
570
#endif
571

572
573
574
#ifdef HAVE_TLS
	gopts->ldo_tls_connect_cb = NULL;
	gopts->ldo_tls_connect_arg = NULL;
575
	gopts->ldo_tls_require_cert = LDAP_OPT_X_TLS_DEMAND;
576
#endif
577
578
579
	gopts->ldo_keepalive_probes = 0;
	gopts->ldo_keepalive_interval = 0;
	gopts->ldo_keepalive_idle = 0;
580

581
582
583
584
	gopts->ldo_valid = LDAP_INITIALIZED;
   	return;
}

585
#if defined(HAVE_TLS) || defined(HAVE_CYRUS_SASL)
586
char * ldap_int_hostname = NULL;
587
588
#endif

589
590
void ldap_int_initialize( struct ldapoptions *gopts, int *dbglvl )
{
591
#ifdef LDAP_R_COMPILE
592
593
	static ldap_pvt_thread_mutex_t init_mutex;
	LDAP_PVT_MUTEX_FIRSTCREATE( init_mutex );
594

595
596
	LDAP_MUTEX_LOCK( &init_mutex );
#endif
597
	if ( gopts->ldo_valid == LDAP_INITIALIZED ) {
598
		/* someone else got here first */
599
		goto done;
600
601
	}

602
603
	ldap_int_error_init();

604
605
	ldap_int_utils_init();

606
607
608
609
610
611
612
613
#ifdef HAVE_WINSOCK2
{	WORD wVersionRequested;
	WSADATA wsaData;
 
	wVersionRequested = MAKEWORD( 2, 0 );
	if ( WSAStartup( wVersionRequested, &wsaData ) != 0 ) {
		/* Tell the user that we couldn't find a usable */
		/* WinSock DLL.                                  */
614
		goto done;
615
616
617
618
619
620
621
622
623
624
625
626
627
628
	}
 
	/* Confirm that the WinSock DLL supports 2.0.*/
	/* Note that if the DLL supports versions greater    */
	/* than 2.0 in addition to 2.0, it will still return */
	/* 2.0 in wVersion since that is the version we      */
	/* requested.                                        */
 
	if ( LOBYTE( wsaData.wVersion ) != 2 ||
		HIBYTE( wsaData.wVersion ) != 0 )
	{
	    /* Tell the user that we couldn't find a usable */
	    /* WinSock DLL.                                  */
	    WSACleanup( );
629
	    goto done;
630
631
	}
}	/* The WinSock DLL is acceptable. Proceed. */
Quanah Gibson-Mount's avatar
Quanah Gibson-Mount committed
632
#elif defined(HAVE_WINSOCK)
633
634
{	WSADATA wsaData;
	if ( WSAStartup( 0x0101, &wsaData ) != 0 ) {
635
	    goto done;
636
637
	}
}
638
639
#endif

640
#if defined(HAVE_TLS) || defined(HAVE_CYRUS_SASL)
Howard Chu's avatar
Howard Chu committed
641
	LDAP_MUTEX_LOCK( &ldap_int_hostname_mutex );
Pierangelo Masarati's avatar
Pierangelo Masarati committed
642
643
644
645
646
647
648
649
650
	{
		char	*name = ldap_int_hostname;

		ldap_int_hostname = ldap_pvt_get_fqdn( name );

		if ( name != NULL && name != ldap_int_hostname ) {
			LDAP_FREE( name );
		}
	}
Howard Chu's avatar
Howard Chu committed
651
	LDAP_MUTEX_UNLOCK( &ldap_int_hostname_mutex );
652
#endif
653
654
655
656

#ifndef HAVE_POLL
	if ( ldap_int_tblsize == 0 ) ldap_int_ip_init();
#endif
657

658
659
#ifdef HAVE_CYRUS_SASL
	if ( ldap_int_sasl_init() != 0 ) {
660
		goto done;
661
662
663
	}
#endif

664
	ldap_int_initialize_global_options(gopts, dbglvl);
Kurt Zeilenga's avatar
Kurt Zeilenga committed
665
666

	if( getenv("LDAPNOINIT") != NULL ) {
667
		goto done;
Kurt Zeilenga's avatar
Kurt Zeilenga committed
668
669
	}

670
671
672
673
674
675
676
677
678
#ifdef HAVE_CYRUS_SASL
	{
		/* set authentication identity to current user name */
		char *user = getenv("USER");

		if( user == NULL ) user = getenv("USERNAME");
		if( user == NULL ) user = getenv("LOGNAME");

		if( user != NULL ) {
679
			gopts->ldo_def_sasl_authcid = LDAP_STRDUP( user );
680
681
682
683
		}
    }
#endif

684
	openldap_ldap_init_w_sysconf(LDAP_CONF_FILE);
Quanah Gibson-Mount's avatar
Quanah Gibson-Mount committed
685
686
687

#ifdef HAVE_GETEUID
	if ( geteuid() != getuid() )
688
		goto done;
Quanah Gibson-Mount's avatar
Quanah Gibson-Mount committed
689
690
#endif

691
	openldap_ldap_init_w_userconf(LDAP_USERRC_FILE);
692
693

	{
694
		char *altfile = getenv(LDAP_ENV_PREFIX "CONF");
695
696

		if( altfile != NULL ) {
697
698
			Debug(LDAP_DEBUG_TRACE, "ldap_init: %s env is %s\n",
			      LDAP_ENV_PREFIX "CONF", altfile, 0);
699
			openldap_ldap_init_w_sysconf( altfile );
700
		}
701
702
703
		else
			Debug(LDAP_DEBUG_TRACE, "ldap_init: %s env is NULL\n",
			      LDAP_ENV_PREFIX "CONF", 0, 0);
704
705
	}

706
	{
707
		char *altfile = getenv(LDAP_ENV_PREFIX "RC");
708
709

		if( altfile != NULL ) {
710
711
			Debug(LDAP_DEBUG_TRACE, "ldap_init: %s env is %s\n",
			      LDAP_ENV_PREFIX "RC", altfile, 0);
712
713
			openldap_ldap_init_w_userconf( altfile );
		}
714
715
716
		else
			Debug(LDAP_DEBUG_TRACE, "ldap_init: %s env is NULL\n",
			      LDAP_ENV_PREFIX "RC", 0, 0);
717
718
	}

719
	openldap_ldap_init_w_env(gopts, NULL);
720

721
722
723
724
done:;
#ifdef LDAP_R_COMPILE
	LDAP_MUTEX_UNLOCK( &init_mutex );
#endif
725
}