bconfig.c 171 KB
Newer Older
Howard Chu's avatar
Howard Chu committed
1
2
3
4
/* bconfig.c - the config backend */
/* $OpenLDAP$ */
/* This work is part of OpenLDAP Software <http://www.openldap.org/>.
 *
Kurt Zeilenga's avatar
Kurt Zeilenga committed
5
 * Copyright 2005-2008 The OpenLDAP Foundation.
Howard Chu's avatar
Howard Chu committed
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
 * All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted only as authorized by the OpenLDAP
 * Public License.
 *
 * A copy of this license is available in the file LICENSE in the
 * top-level directory of the distribution or, alternatively, at
 * <http://www.OpenLDAP.org/license.html>.
 */
/* ACKNOWLEDGEMENTS:
 * This work was originally developed by Howard Chu for inclusion
 * in OpenLDAP Software.
 */

#include "portable.h"

#include <stdio.h>
#include <ac/string.h>
25
26
#include <ac/ctype.h>
#include <ac/errno.h>
27
#include <sys/stat.h>
Howard Chu's avatar
Howard Chu committed
28
29

#include "slap.h"
30
31
32
33
34

#ifdef LDAP_SLAPI
#include "slapi/slapi.h"
#endif

35
#include <ldif.h>
36
37
#include <lutil.h>

Howard Chu's avatar
Howard Chu committed
38
39
#include "config.h"

40
41
42
43
44
#define	CONFIG_RDN	"cn=config"
#define	SCHEMA_RDN	"cn=schema"

static struct berval config_rdn = BER_BVC(CONFIG_RDN);
static struct berval schema_rdn = BER_BVC(SCHEMA_RDN);
Howard Chu's avatar
Howard Chu committed
45

46
47
extern int slap_DN_strict;	/* dn.c */

48
49
50
51
52
53
#ifdef SLAPD_MODULES
typedef struct modpath_s {
	struct modpath_s *mp_next;
	struct berval mp_path;
	BerVarray mp_loads;
} ModPaths;
Howard Chu's avatar
Howard Chu committed
54
55

static ModPaths modpaths, *modlast = &modpaths, *modcur = &modpaths;
56
57
58
59
60
61
#endif

typedef struct ConfigFile {
	struct ConfigFile *c_sibs;
	struct ConfigFile *c_kids;
	struct berval c_file;
Howard Chu's avatar
Howard Chu committed
62
63
64
65
	AttributeType *c_at_head, *c_at_tail;
	ContentRule *c_cr_head, *c_cr_tail;
	ObjectClass *c_oc_head, *c_oc_tail;
	OidMacro *c_om_head, *c_om_tail;
66
	Syntax *c_syn_head, *c_syn_tail;
67
68
69
	BerVarray c_dseFiles;
} ConfigFile;

Howard Chu's avatar
Howard Chu committed
70
71
72
typedef struct {
	ConfigFile *cb_config;
	CfEntryInfo *cb_root;
73
74
	BackendDB	cb_db;	/* underlying database */
	int		cb_got_ldif;
75
	int		cb_use_ldif;
Howard Chu's avatar
Howard Chu committed
76
77
} CfBackInfo;

78
79
static CfBackInfo cfBackInfo;

80
static char	*passwd_salt;
Howard Chu's avatar
Howard Chu committed
81
static FILE *logfile;
82
static char	*logfileName;
83
#ifdef SLAP_AUTH_REWRITE
84
static BerVarray authz_rewrites;
85
#endif
86

87
88
static struct berval cfdir;

89
/* Private state */
Howard Chu's avatar
Howard Chu committed
90
static AttributeDescription *cfAd_backend, *cfAd_database, *cfAd_overlay,
91
	*cfAd_include, *cfAd_attr, *cfAd_oc, *cfAd_om, *cfAd_syntax;
Howard Chu's avatar
Howard Chu committed
92

93
static ConfigFile *cfn;
94

95
96
static Avlnode *CfOcTree;

97
98
99
100
/* System schema state */
extern AttributeType *at_sys_tail;	/* at.c */
extern ObjectClass *oc_sys_tail;	/* oc.c */
extern OidMacro *om_sys_tail;	/* oidm.c */
101
extern Syntax *syn_sys_tail;	/* syntax.c */
102
103
104
static AttributeType *cf_at_tail;
static ObjectClass *cf_oc_tail;
static OidMacro *cf_om_tail;
105
static Syntax *cf_syn_tail;
106

107
static int config_add_internal( CfBackInfo *cfb, Entry *e, ConfigArgs *ca,
108
	SlapReply *rs, int *renumber, Operation *op );
109

110
static int config_check_schema( Operation *op, CfBackInfo *cfb );
111

Howard Chu's avatar
Howard Chu committed
112
static ConfigDriver config_fname;
113
static ConfigDriver config_cfdir;
Howard Chu's avatar
Howard Chu committed
114
115
116
117
118
119
120
static ConfigDriver config_generic;
static ConfigDriver config_search_base;
static ConfigDriver config_passwd_hash;
static ConfigDriver config_schema_dn;
static ConfigDriver config_sizelimit;
static ConfigDriver config_timelimit;
static ConfigDriver config_overlay;
121
static ConfigDriver config_subordinate; 
Howard Chu's avatar
Howard Chu committed
122
123
124
125
126
127
128
129
130
131
132
133
134
static ConfigDriver config_suffix; 
static ConfigDriver config_rootdn;
static ConfigDriver config_rootpw;
static ConfigDriver config_restrict;
static ConfigDriver config_allows;
static ConfigDriver config_disallows;
static ConfigDriver config_requires;
static ConfigDriver config_security;
static ConfigDriver config_referral;
static ConfigDriver config_loglevel;
static ConfigDriver config_updatedn;
static ConfigDriver config_updateref;
static ConfigDriver config_include;
Howard Chu's avatar
Howard Chu committed
135
static ConfigDriver config_obsolete;
136
#ifdef HAVE_TLS
Howard Chu's avatar
Howard Chu committed
137
138
static ConfigDriver config_tls_option;
static ConfigDriver config_tls_config;
139
#endif
140
extern ConfigDriver syncrepl_config;
141
142
143
144
145
146
147
148
149
150
151

enum {
	CFG_ACL = 1,
	CFG_BACKEND,
	CFG_DATABASE,
	CFG_TLS_RAND,
	CFG_TLS_CIPHER,
	CFG_TLS_CERT_FILE,
	CFG_TLS_CERT_KEY,
	CFG_TLS_CA_PATH,
	CFG_TLS_CA_FILE,
152
	CFG_TLS_DH_FILE,
153
154
	CFG_TLS_VERIFY,
	CFG_TLS_CRLCHECK,
Howard Chu's avatar
Howard Chu committed
155
	CFG_TLS_CRL_FILE,
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
	CFG_CONCUR,
	CFG_THREADS,
	CFG_SALT,
	CFG_LIMITS,
	CFG_RO,
	CFG_REWRITE,
	CFG_DEPTH,
	CFG_OID,
	CFG_OC,
	CFG_DIT,
	CFG_ATTR,
	CFG_ATOPT,
	CFG_ROOTDSE,
	CFG_LOGFILE,
	CFG_PLUGIN,
	CFG_MODLOAD,
	CFG_MODPATH,
	CFG_LASTMOD,
	CFG_AZPOLICY,
	CFG_AZREGEXP,
	CFG_SASLSECP,
	CFG_SSTR_IF_MAX,
	CFG_SSTR_IF_MIN,
179
	CFG_TTHREADS,
180
	CFG_MIRRORMODE,
181
	CFG_HIDDEN,
182
	CFG_MONITORING,
183
	CFG_SERVERID,
Howard Chu's avatar
Howard Chu committed
184
	CFG_SORTVALS,
185
	CFG_IX_INTLEN,
186
	CFG_SYNTAX,
Pierangelo Masarati's avatar
Pierangelo Masarati committed
187
188

	CFG_LAST
189
190
191
192
193
194
195
};

typedef struct {
	char *name, *oid;
} OidRec;

static OidRec OidMacros[] = {
196
197
	/* OpenLDAProot:1.12.2 */
	{ "OLcfg", "1.3.6.1.4.1.4203.1.12.2" },
198
	{ "OLcfgAt", "OLcfg:3" },
199
200
201
202
	{ "OLcfgGlAt", "OLcfgAt:0" },
	{ "OLcfgBkAt", "OLcfgAt:1" },
	{ "OLcfgDbAt", "OLcfgAt:2" },
	{ "OLcfgOvAt", "OLcfgAt:3" },
203
	{ "OLcfgCtAt", "OLcfgAt:4" },	/* contrib modules */
204
	{ "OLcfgOc", "OLcfg:4" },
205
206
207
208
	{ "OLcfgGlOc", "OLcfgOc:0" },
	{ "OLcfgBkOc", "OLcfgOc:1" },
	{ "OLcfgDbOc", "OLcfgOc:2" },
	{ "OLcfgOvOc", "OLcfgOc:3" },
209
	{ "OLcfgCtOc", "OLcfgOc:4" },	/* contrib modules */
210
211
212
213
214
215

	/* Syntaxes. We should just start using the standard names and
	 * document that they are predefined and available for users
	 * to reference in their own schema. Defining schema without
	 * OID macros is for masochists...
	 */
216
217
218
219
	{ "OMsyn", "1.3.6.1.4.1.1466.115.121.1" },
	{ "OMsBoolean", "OMsyn:7" },
	{ "OMsDN", "OMsyn:12" },
	{ "OMsDirectoryString", "OMsyn:15" },
Howard Chu's avatar
Howard Chu committed
220
	{ "OMsIA5String", "OMsyn:26" },
221
222
	{ "OMsInteger", "OMsyn:27" },
	{ "OMsOID", "OMsyn:38" },
223
224
225
226
	{ "OMsOctetString", "OMsyn:40" },
	{ NULL, NULL }
};

227
/*
228
229
 * Backend/Database registry
 *
230
 * OLcfg{Bk|Db}{Oc|At}:0		-> common
Pierangelo Masarati's avatar
Pierangelo Masarati committed
231
232
233
 * OLcfg{Bk|Db}{Oc|At}:1		-> back-bdb(/back-hdb)
 * OLcfg{Bk|Db}{Oc|At}:2		-> back-ldif
 * OLcfg{Bk|Db}{Oc|At}:3		-> back-ldap
234
 * OLcfg{Bk|Db}{Oc|At}:4		-> back-monitor
235
 * OLcfg{Bk|Db}{Oc|At}:5		-> back-relay
236
 * OLcfg{Bk|Db}{Oc|At}:6		-> back-sql
237
 * OLcfg{Bk|Db}{Oc|At}:7		-> back-sock
238
239
 */

240
241
242
243
244
245
246
247
/*
 * Overlay registry
 *
 * OLcfgOv{Oc|At}:1			-> syncprov
 * OLcfgOv{Oc|At}:2			-> pcache
 * OLcfgOv{Oc|At}:3			-> chain
 * OLcfgOv{Oc|At}:4			-> accesslog
 * OLcfgOv{Oc|At}:5			-> valsort
248
249
 * OLcfgOv{Oc|At}:7			-> distproc
 * OLcfgOv{Oc|At}:8			-> dynlist
250
 * OLcfgOv{Oc|At}:9			-> dds
Pierangelo Masarati's avatar
Pierangelo Masarati committed
251
252
253
254
255
256
257
 * OLcfgOv{Oc|At}:10			-> unique
 * OLcfgOv{Oc|At}:11			-> refint
 * OLcfgOv{Oc|At}:12 			-> ppolicy
 * OLcfgOv{Oc|At}:13			-> constraint
 * OLcfgOv{Oc|At}:14			-> translucent
 * OLcfgOv{Oc|At}:15			-> auditlog
 * OLcfgOv{Oc|At}:16			-> rwm
Howard Chu's avatar
Howard Chu committed
258
 * OLcfgOv{Oc|At}:17			-> dyngroup
Pierangelo Masarati's avatar
Pierangelo Masarati committed
259
 * OLcfgOv{Oc|At}:18			-> memberof
260
 * OLcfgOv{Oc|At}:19			-> collect
261
 * OLcfgOv{Oc|At}:20			-> retcode
262
263
 */

264
265
/* alphabetical ordering */

266
static ConfigTable config_back_cf_table[] = {
267
268
	/* This attr is read-only */
	{ "", "", 0, 0, 0, ARG_MAGIC,
269
		&config_fname, "( OLcfgGlAt:78 NAME 'olcConfigFile' "
270
271
			"DESC 'File for slapd configuration directives' "
			"EQUALITY caseIgnoreMatch "
272
			"SYNTAX OMsDirectoryString SINGLE-VALUE )", NULL, NULL },
273
	{ "", "", 0, 0, 0, ARG_MAGIC,
274
		&config_cfdir, "( OLcfgGlAt:79 NAME 'olcConfigDir' "
275
276
277
			"DESC 'Directory for slapd configuration backend' "
			"EQUALITY caseIgnoreMatch "
			"SYNTAX OMsDirectoryString SINGLE-VALUE )", NULL, NULL },
278
	{ "access",	NULL, 0, 0, 0, ARG_MAY_DB|ARG_MAGIC|CFG_ACL,
279
		&config_generic, "( OLcfgGlAt:1 NAME 'olcAccess' "
280
281
282
283
			"DESC 'Access Control List' "
			"EQUALITY caseIgnoreMatch "
			"SYNTAX OMsDirectoryString X-ORDERED 'VALUES' )", NULL, NULL },
	{ "allows",	"features", 2, 0, 5, ARG_PRE_DB|ARG_MAGIC,
284
		&config_allows, "( OLcfgGlAt:2 NAME 'olcAllows' "
285
286
287
288
			"DESC 'Allowed set of deprecated features' "
			"EQUALITY caseIgnoreMatch "
			"SYNTAX OMsDirectoryString )", NULL, NULL },
	{ "argsfile", "file", 2, 2, 0, ARG_STRING,
289
		&slapd_args_file, "( OLcfgGlAt:3 NAME 'olcArgsFile' "
290
291
			"DESC 'File for slapd command line options' "
			"EQUALITY caseIgnoreMatch "
292
			"SYNTAX OMsDirectoryString SINGLE-VALUE )", NULL, NULL },
293
294
295
296
	{ "attributeoptions", NULL, 0, 0, 0, ARG_MAGIC|CFG_ATOPT,
		&config_generic, "( OLcfgGlAt:5 NAME 'olcAttributeOptions' "
			"EQUALITY caseIgnoreMatch "
			"SYNTAX OMsDirectoryString )", NULL, NULL },
Pierangelo Masarati's avatar
cleanup    
Pierangelo Masarati committed
297
	{ "attribute",	"attribute", 2, 0, STRLENOF( "attribute" ),
298
		ARG_PAREN|ARG_MAGIC|CFG_ATTR,
299
		&config_generic, "( OLcfgGlAt:4 NAME 'olcAttributeTypes' "
Howard Chu's avatar
Howard Chu committed
300
			"DESC 'OpenLDAP attributeTypes' "
301
302
			"EQUALITY caseIgnoreMatch "
			"SYNTAX OMsDirectoryString X-ORDERED 'VALUES' )",
Howard Chu's avatar
Howard Chu committed
303
				NULL, NULL },
304
	{ "authid-rewrite", NULL, 2, 0, STRLENOF( "authid-rewrite" ),
305
#ifdef SLAP_AUTH_REWRITE
306
		ARG_MAGIC|CFG_REWRITE|ARG_NO_INSERT, &config_generic,
307
308
309
#else
		ARG_IGNORED, NULL,
#endif
310
		 "( OLcfgGlAt:6 NAME 'olcAuthIDRewrite' "
311
			"EQUALITY caseIgnoreMatch "
312
			"SYNTAX OMsDirectoryString X-ORDERED 'VALUES' )", NULL, NULL },
313
	{ "authz-policy", "policy", 2, 2, 0, ARG_STRING|ARG_MAGIC|CFG_AZPOLICY,
314
		&config_generic, "( OLcfgGlAt:7 NAME 'olcAuthzPolicy' "
315
			"EQUALITY caseIgnoreMatch "
316
			"SYNTAX OMsDirectoryString SINGLE-VALUE )", NULL, NULL },
317
	{ "authz-regexp", NULL, 3, 3, 0, ARG_MAGIC|CFG_AZREGEXP|ARG_NO_INSERT,
318
		&config_generic, "( OLcfgGlAt:8 NAME 'olcAuthzRegexp' "
319
320
321
			"EQUALITY caseIgnoreMatch "
			"SYNTAX OMsDirectoryString X-ORDERED 'VALUES' )", NULL, NULL },
	{ "backend", "type", 2, 2, 0, ARG_PRE_DB|ARG_MAGIC|CFG_BACKEND,
322
		&config_generic, "( OLcfgGlAt:9 NAME 'olcBackend' "
323
324
			"DESC 'A type of backend' "
			"EQUALITY caseIgnoreMatch "
325
326
			"SYNTAX OMsDirectoryString SINGLE-VALUE X-ORDERED 'SIBLINGS' )",
				NULL, NULL },
Howard Chu's avatar
Howard Chu committed
327
	{ "concurrency", "level", 2, 2, 0, ARG_INT|ARG_MAGIC|CFG_CONCUR,
328
		&config_generic, "( OLcfgGlAt:10 NAME 'olcConcurrency' "
329
			"SYNTAX OMsInteger SINGLE-VALUE )", NULL, NULL },
330
	{ "conn_max_pending", "max", 2, 2, 0, ARG_INT,
331
		&slap_conn_max_pending, "( OLcfgGlAt:11 NAME 'olcConnMaxPending' "
332
			"SYNTAX OMsInteger SINGLE-VALUE )", NULL, NULL },
333
	{ "conn_max_pending_auth", "max", 2, 2, 0, ARG_INT,
334
		&slap_conn_max_pending_auth, "( OLcfgGlAt:12 NAME 'olcConnMaxPendingAuth' "
335
			"SYNTAX OMsInteger SINGLE-VALUE )", NULL, NULL },
336
	{ "database", "type", 2, 2, 0, ARG_MAGIC|CFG_DATABASE,
337
		&config_generic, "( OLcfgGlAt:13 NAME 'olcDatabase' "
338
			"DESC 'The backend type for a database instance' "
339
			"SUP olcBackend SINGLE-VALUE X-ORDERED 'SIBLINGS' )", NULL, NULL },
Pierangelo Masarati's avatar
Pierangelo Masarati committed
340
	{ "defaultSearchBase", "dn", 2, 2, 0, ARG_PRE_BI|ARG_PRE_DB|ARG_DN|ARG_QUOTE|ARG_MAGIC,
341
		&config_search_base, "( OLcfgGlAt:14 NAME 'olcDefaultSearchBase' "
342
			"SYNTAX OMsDN SINGLE-VALUE )", NULL, NULL },
343
	{ "disallows", "features", 2, 0, 8, ARG_PRE_DB|ARG_MAGIC,
344
		&config_disallows, "( OLcfgGlAt:15 NAME 'olcDisallows' "
345
346
			"EQUALITY caseIgnoreMatch "
			"SYNTAX OMsDirectoryString )", NULL, NULL },
347
	{ "ditcontentrule",	NULL, 0, 0, 0, ARG_MAGIC|CFG_DIT|ARG_NO_DELETE|ARG_NO_INSERT,
348
		&config_generic, "( OLcfgGlAt:16 NAME 'olcDitContentRules' "
Howard Chu's avatar
Howard Chu committed
349
			"DESC 'OpenLDAP DIT content rules' "
350
351
			"EQUALITY caseIgnoreMatch "
			"SYNTAX OMsDirectoryString X-ORDERED 'VALUES' )",
Howard Chu's avatar
Howard Chu committed
352
			NULL, NULL },
353
354
355
356
357
358
	{ "gentlehup", "on|off", 2, 2, 0,
#ifdef SIGHUP
		ARG_ON_OFF, &global_gentlehup,
#else
		ARG_IGNORED, NULL,
#endif
359
		"( OLcfgGlAt:17 NAME 'olcGentleHUP' "
360
			"SYNTAX OMsBoolean SINGLE-VALUE )", NULL, NULL },
361
362
363
	{ "hidden", "on|off", 2, 2, 0, ARG_DB|ARG_ON_OFF|ARG_MAGIC|CFG_HIDDEN,
		&config_generic, "( OLcfgDbAt:0.17 NAME 'olcHidden' "
			"SYNTAX OMsBoolean SINGLE-VALUE )", NULL, NULL },
364
	{ "idletimeout", "timeout", 2, 2, 0, ARG_INT,
365
		&global_idletimeout, "( OLcfgGlAt:18 NAME 'olcIdleTimeout' "
366
			"SYNTAX OMsInteger SINGLE-VALUE )", NULL, NULL },
367
	{ "include", "file", 2, 2, 0, ARG_MAGIC,
368
369
		&config_include, "( OLcfgGlAt:19 NAME 'olcInclude' "
			"SUP labeledURI )", NULL, NULL },
370
	{ "index_substr_if_minlen", "min", 2, 2, 0, ARG_INT|ARG_NONZERO|ARG_MAGIC|CFG_SSTR_IF_MIN,
371
		&config_generic, "( OLcfgGlAt:20 NAME 'olcIndexSubstrIfMinLen' "
372
			"SYNTAX OMsInteger SINGLE-VALUE )", NULL, NULL },
373
	{ "index_substr_if_maxlen", "max", 2, 2, 0, ARG_INT|ARG_NONZERO|ARG_MAGIC|CFG_SSTR_IF_MAX,
374
		&config_generic, "( OLcfgGlAt:21 NAME 'olcIndexSubstrIfMaxLen' "
375
			"SYNTAX OMsInteger SINGLE-VALUE )", NULL, NULL },
376
	{ "index_substr_any_len", "len", 2, 2, 0, ARG_INT|ARG_NONZERO,
377
		&index_substr_any_len, "( OLcfgGlAt:22 NAME 'olcIndexSubstrAnyLen' "
378
			"SYNTAX OMsInteger SINGLE-VALUE )", NULL, NULL },
379
	{ "index_substr_any_step", "step", 2, 2, 0, ARG_INT|ARG_NONZERO,
380
		&index_substr_any_step, "( OLcfgGlAt:23 NAME 'olcIndexSubstrAnyStep' "
381
			"SYNTAX OMsInteger SINGLE-VALUE )", NULL, NULL },
382
383
384
	{ "index_intlen", "len", 2, 2, 0, ARG_INT|ARG_MAGIC|CFG_IX_INTLEN,
		&config_generic, "( OLcfgGlAt:84 NAME 'olcIndexIntLen' "
			"SYNTAX OMsInteger SINGLE-VALUE )", NULL, NULL },
385
	{ "lastmod", "on|off", 2, 2, 0, ARG_DB|ARG_ON_OFF|ARG_MAGIC|CFG_LASTMOD,
386
		&config_generic, "( OLcfgDbAt:0.4 NAME 'olcLastMod' "
387
			"SYNTAX OMsBoolean SINGLE-VALUE )", NULL, NULL },
388
389
390
391
392
393
394
	{ "ldapsyntax",	"syntax", 2, 0, 0,
		ARG_PAREN|ARG_MAGIC|CFG_SYNTAX,
		&config_generic, "( OLcfgGlAt:85 NAME 'olcLdapSyntaxes' "
			"DESC 'OpenLDAP ldapSyntax' "
			"EQUALITY caseIgnoreMatch "
			"SYNTAX OMsDirectoryString X-ORDERED 'VALUES' )",
				NULL, NULL },
395
	{ "limits", "limits", 2, 0, 0, ARG_DB|ARG_MAGIC|CFG_LIMITS,
396
		&config_generic, "( OLcfgDbAt:0.5 NAME 'olcLimits' "
397
			"EQUALITY caseIgnoreMatch "
398
			"SYNTAX OMsDirectoryString X-ORDERED 'VALUES' )", NULL, NULL },
399
	{ "localSSF", "ssf", 2, 2, 0, ARG_INT,
400
		&local_ssf, "( OLcfgGlAt:26 NAME 'olcLocalSSF' "
401
			"SYNTAX OMsInteger SINGLE-VALUE )", NULL, NULL },
402
	{ "logfile", "file", 2, 2, 0, ARG_STRING|ARG_MAGIC|CFG_LOGFILE,
403
		&config_generic, "( OLcfgGlAt:27 NAME 'olcLogFile' "
404
			"SYNTAX OMsDirectoryString SINGLE-VALUE )", NULL, NULL },
405
	{ "loglevel", "level", 2, 0, 0, ARG_MAGIC,
406
		&config_loglevel, "( OLcfgGlAt:28 NAME 'olcLogLevel' "
407
			"EQUALITY caseIgnoreMatch "
408
409
			"SYNTAX OMsDirectoryString )", NULL, NULL },
	{ "maxDerefDepth", "depth", 2, 2, 0, ARG_DB|ARG_INT|ARG_MAGIC|CFG_DEPTH,
410
		&config_generic, "( OLcfgDbAt:0.6 NAME 'olcMaxDerefDepth' "
411
			"SYNTAX OMsInteger SINGLE-VALUE )", NULL, NULL },
412
413
414
	{ "mirrormode", "on|off", 2, 2, 0, ARG_DB|ARG_ON_OFF|ARG_MAGIC|CFG_MIRRORMODE,
		&config_generic, "( OLcfgDbAt:0.16 NAME 'olcMirrorMode' "
			"SYNTAX OMsBoolean SINGLE-VALUE )", NULL, NULL },
415
416
	{ "moduleload",	"file", 2, 0, 0,
#ifdef SLAPD_MODULES
417
		ARG_MAGIC|CFG_MODLOAD|ARG_NO_DELETE, &config_generic,
418
419
420
#else
		ARG_IGNORED, NULL,
#endif
421
		"( OLcfgGlAt:30 NAME 'olcModuleLoad' "
422
			"EQUALITY caseIgnoreMatch "
423
			"SYNTAX OMsDirectoryString X-ORDERED 'VALUES' )", NULL, NULL },
424
425
	{ "modulepath", "path", 2, 2, 0,
#ifdef SLAPD_MODULES
426
		ARG_MAGIC|CFG_MODPATH|ARG_NO_DELETE|ARG_NO_INSERT, &config_generic,
427
428
429
#else
		ARG_IGNORED, NULL,
#endif
430
		"( OLcfgGlAt:31 NAME 'olcModulePath' "
Howard Chu's avatar
Howard Chu committed
431
			"SYNTAX OMsDirectoryString SINGLE-VALUE )", NULL, NULL },
432
433
434
435
	{ "monitoring", "TRUE|FALSE", 2, 2, 0,
		ARG_MAGIC|CFG_MONITORING|ARG_DB|ARG_ON_OFF, &config_generic,
		"( OLcfgDbAt:0.18 NAME 'olcMonitoring' "
			"SYNTAX OMsBoolean SINGLE-VALUE )", NULL, NULL },
436
	{ "objectclass", "objectclass", 2, 0, 0, ARG_PAREN|ARG_MAGIC|CFG_OC,
437
		&config_generic, "( OLcfgGlAt:32 NAME 'olcObjectClasses' "
Howard Chu's avatar
Howard Chu committed
438
		"DESC 'OpenLDAP object classes' "
439
440
		"EQUALITY caseIgnoreMatch "
		"SYNTAX OMsDirectoryString X-ORDERED 'VALUES' )",
Howard Chu's avatar
Howard Chu committed
441
			NULL, NULL },
442
	{ "objectidentifier", "name> <oid",	3, 3, 0, ARG_MAGIC|CFG_OID,
443
		&config_generic, "( OLcfgGlAt:33 NAME 'olcObjectIdentifier' "
444
			"EQUALITY caseIgnoreMatch "
445
			"SYNTAX OMsDirectoryString X-ORDERED 'VALUES' )", NULL, NULL },
446
	{ "overlay", "overlay", 2, 2, 0, ARG_MAGIC,
447
		&config_overlay, "( OLcfgGlAt:34 NAME 'olcOverlay' "
448
			"SUP olcDatabase SINGLE-VALUE X-ORDERED 'SIBLINGS' )", NULL, NULL },
449
	{ "password-crypt-salt-format", "salt", 2, 2, 0, ARG_STRING|ARG_MAGIC|CFG_SALT,
450
		&config_generic, "( OLcfgGlAt:35 NAME 'olcPasswordCryptSaltFormat' "
451
			"SYNTAX OMsDirectoryString SINGLE-VALUE )", NULL, NULL },
452
	{ "password-hash", "hash", 2, 2, 0, ARG_MAGIC,
453
		&config_passwd_hash, "( OLcfgGlAt:36 NAME 'olcPasswordHash' "
454
			"EQUALITY caseIgnoreMatch "
455
456
			"SYNTAX OMsDirectoryString )", NULL, NULL },
	{ "pidfile", "file", 2, 2, 0, ARG_STRING,
457
		&slapd_pid_file, "( OLcfgGlAt:37 NAME 'olcPidFile' "
458
			"SYNTAX OMsDirectoryString SINGLE-VALUE )", NULL, NULL },
459
460
461
462
463
464
	{ "plugin", NULL, 0, 0, 0,
#ifdef LDAP_SLAPI
		ARG_MAGIC|CFG_PLUGIN, &config_generic,
#else
		ARG_IGNORED, NULL,
#endif
465
		"( OLcfgGlAt:38 NAME 'olcPlugin' "
466
			"EQUALITY caseIgnoreMatch "
467
468
469
470
471
472
473
			"SYNTAX OMsDirectoryString )", NULL, NULL },
	{ "pluginlog", "filename", 2, 2, 0,
#ifdef LDAP_SLAPI
		ARG_STRING, &slapi_log_file,
#else
		ARG_IGNORED, NULL,
#endif
474
		"( OLcfgGlAt:39 NAME 'olcPluginLogFile' "
475
			"SYNTAX OMsDirectoryString SINGLE-VALUE )", NULL, NULL },
476
	{ "readonly", "on|off", 2, 2, 0, ARG_MAY_DB|ARG_ON_OFF|ARG_MAGIC|CFG_RO,
477
		&config_generic, "( OLcfgGlAt:40 NAME 'olcReadOnly' "
478
			"SYNTAX OMsBoolean SINGLE-VALUE )", NULL, NULL },
479
	{ "referral", "url", 2, 2, 0, ARG_MAGIC,
480
		&config_referral, "( OLcfgGlAt:41 NAME 'olcReferral' "
481
			"SUP labeledURI SINGLE-VALUE )", NULL, NULL },
482
	{ "replica", "host or uri", 2, 0, 0, ARG_DB|ARG_MAGIC,
Howard Chu's avatar
Howard Chu committed
483
		&config_obsolete, "( OLcfgDbAt:0.7 NAME 'olcReplica' "
484
			"EQUALITY caseIgnoreMatch "
485
			"SUP labeledURI X-ORDERED 'VALUES' )", NULL, NULL },
Howard Chu's avatar
Howard Chu committed
486
487
	{ "replica-argsfile", NULL, 0, 0, 0, ARG_MAY_DB|ARG_MAGIC,
		&config_obsolete, "( OLcfgGlAt:43 NAME 'olcReplicaArgsFile' "
488
			"SYNTAX OMsDirectoryString SINGLE-VALUE )", NULL, NULL },
Howard Chu's avatar
Howard Chu committed
489
490
	{ "replica-pidfile", NULL, 0, 0, 0, ARG_MAY_DB|ARG_MAGIC,
		&config_obsolete, "( OLcfgGlAt:44 NAME 'olcReplicaPidFile' "
491
			"SYNTAX OMsDirectoryString SINGLE-VALUE )", NULL, NULL },
Howard Chu's avatar
Howard Chu committed
492
493
	{ "replicationInterval", NULL, 0, 0, 0, ARG_MAY_DB|ARG_MAGIC,
		&config_obsolete, "( OLcfgGlAt:45 NAME 'olcReplicationInterval' "
494
			"SYNTAX OMsInteger SINGLE-VALUE )", NULL, NULL },
Howard Chu's avatar
Howard Chu committed
495
496
	{ "replogfile", "filename", 2, 2, 0, ARG_MAY_DB|ARG_MAGIC,
		&config_obsolete, "( OLcfgGlAt:46 NAME 'olcReplogFile' "
497
			"SYNTAX OMsDirectoryString SINGLE-VALUE )", NULL, NULL },
498
	{ "require", "features", 2, 0, 7, ARG_MAY_DB|ARG_MAGIC,
499
		&config_requires, "( OLcfgGlAt:47 NAME 'olcRequires' "
500
			"EQUALITY caseIgnoreMatch "
501
502
			"SYNTAX OMsDirectoryString )", NULL, NULL },
	{ "restrict", "op_list", 2, 0, 0, ARG_MAY_DB|ARG_MAGIC,
503
		&config_restrict, "( OLcfgGlAt:48 NAME 'olcRestrict' "
504
			"EQUALITY caseIgnoreMatch "
505
506
507
508
509
510
511
			"SYNTAX OMsDirectoryString )", NULL, NULL },
	{ "reverse-lookup", "on|off", 2, 2, 0,
#ifdef SLAPD_RLOOKUPS
		ARG_ON_OFF, &use_reverse_lookup,
#else
		ARG_IGNORED, NULL,
#endif
512
		"( OLcfgGlAt:49 NAME 'olcReverseLookup' "
513
			"SYNTAX OMsBoolean SINGLE-VALUE )", NULL, NULL },
Pierangelo Masarati's avatar
Pierangelo Masarati committed
514
	{ "rootdn", "dn", 2, 2, 0, ARG_DB|ARG_DN|ARG_QUOTE|ARG_MAGIC,
515
		&config_rootdn, "( OLcfgDbAt:0.8 NAME 'olcRootDN' "
516
			"EQUALITY distinguishedNameMatch "
517
			"SYNTAX OMsDN SINGLE-VALUE )", NULL, NULL },
518
	{ "rootDSE", "file", 2, 2, 0, ARG_MAGIC|CFG_ROOTDSE,
519
		&config_generic, "( OLcfgGlAt:51 NAME 'olcRootDSE' "
520
			"EQUALITY caseIgnoreMatch "
521
			"SYNTAX OMsDirectoryString )", NULL, NULL },
Howard Chu's avatar
Howard Chu committed
522
	{ "rootpw", "password", 2, 2, 0, ARG_BERVAL|ARG_DB|ARG_MAGIC,
523
		&config_rootpw, "( OLcfgDbAt:0.9 NAME 'olcRootPW' "
524
			"SYNTAX OMsDirectoryString SINGLE-VALUE )", NULL, NULL },
525
526
527
528
	{ "sasl-authz-policy", NULL, 2, 2, 0, ARG_MAGIC|CFG_AZPOLICY,
		&config_generic, NULL, NULL, NULL },
	{ "sasl-host", "host", 2, 2, 0,
#ifdef HAVE_CYRUS_SASL
529
		ARG_STRING|ARG_UNIQUE, &sasl_host,
530
531
532
#else
		ARG_IGNORED, NULL,
#endif
533
		"( OLcfgGlAt:53 NAME 'olcSaslHost' "
534
			"SYNTAX OMsDirectoryString SINGLE-VALUE )", NULL, NULL },
535
536
537
538
539
540
	{ "sasl-realm", "realm", 2, 2, 0,
#ifdef HAVE_CYRUS_SASL
		ARG_STRING|ARG_UNIQUE, &global_realm,
#else
		ARG_IGNORED, NULL,
#endif
541
		"( OLcfgGlAt:54 NAME 'olcSaslRealm' "
542
			"SYNTAX OMsDirectoryString SINGLE-VALUE )", NULL, NULL },
543
544
545
546
547
548
549
550
	{ "sasl-regexp", NULL, 3, 3, 0, ARG_MAGIC|CFG_AZREGEXP,
		&config_generic, NULL, NULL, NULL },
	{ "sasl-secprops", "properties", 2, 2, 0,
#ifdef HAVE_CYRUS_SASL
		ARG_MAGIC|CFG_SASLSECP, &config_generic,
#else
		ARG_IGNORED, NULL,
#endif
551
		"( OLcfgGlAt:56 NAME 'olcSaslSecProps' "
552
			"SYNTAX OMsDirectoryString SINGLE-VALUE )", NULL, NULL },
553
554
	{ "saslRegexp",	NULL, 3, 3, 0, ARG_MAGIC|CFG_AZREGEXP,
		&config_generic, NULL, NULL, NULL },
Pierangelo Masarati's avatar
Pierangelo Masarati committed
555
	{ "schemadn", "dn", 2, 2, 0, ARG_MAY_DB|ARG_DN|ARG_QUOTE|ARG_MAGIC,
556
		&config_schema_dn, "( OLcfgGlAt:58 NAME 'olcSchemaDN' "
557
			"EQUALITY distinguishedNameMatch "
558
			"SYNTAX OMsDN SINGLE-VALUE )", NULL, NULL },
559
	{ "security", "factors", 2, 0, 0, ARG_MAY_DB|ARG_MAGIC,
560
		&config_security, "( OLcfgGlAt:59 NAME 'olcSecurity' "
561
			"EQUALITY caseIgnoreMatch "
562
			"SYNTAX OMsDirectoryString )", NULL, NULL },
563
564
565
566
	{ "serverID", "number> <[URI]", 2, 3, 0, ARG_MAGIC|CFG_SERVERID,
		&config_generic, "( OLcfgGlAt:81 NAME 'olcServerID' "
			"EQUALITY caseIgnoreMatch "
			"SYNTAX OMsDirectoryString )", NULL, NULL },
567
	{ "sizelimit", "limit",	2, 0, 0, ARG_MAY_DB|ARG_MAGIC,
568
		&config_sizelimit, "( OLcfgGlAt:60 NAME 'olcSizeLimit' "
569
			"SYNTAX OMsDirectoryString SINGLE-VALUE )", NULL, NULL },
570
	{ "sockbuf_max_incoming", "max", 2, 2, 0, ARG_BER_LEN_T,
571
		&sockbuf_max_incoming, "( OLcfgGlAt:61 NAME 'olcSockbufMaxIncoming' "
572
			"SYNTAX OMsInteger SINGLE-VALUE )", NULL, NULL },
573
	{ "sockbuf_max_incoming_auth", "max", 2, 2, 0, ARG_BER_LEN_T,
574
		&sockbuf_max_incoming_auth, "( OLcfgGlAt:62 NAME 'olcSockbufMaxIncomingAuth' "
575
			"SYNTAX OMsInteger SINGLE-VALUE )", NULL, NULL },
Howard Chu's avatar
Howard Chu committed
576
577
578
579
580
	{ "sortvals", "attr", 2, 0, 0, ARG_MAGIC|CFG_SORTVALS,
		&config_generic, "( OLcfgGlAt:83 NAME 'olcSortVals' "
			"DESC 'Attributes whose values will always be sorted' "
			"EQUALITY caseIgnoreMatch "
			"SYNTAX OMsDirectoryString )", NULL, NULL },
581
	{ "subordinate", "[advertise]", 1, 2, 0, ARG_DB|ARG_MAGIC,
Howard Chu's avatar
Howard Chu committed
582
		&config_subordinate, "( OLcfgDbAt:0.15 NAME 'olcSubordinate' "
583
			"SYNTAX OMsDirectoryString SINGLE-VALUE )", NULL, NULL },
Pierangelo Masarati's avatar
Pierangelo Masarati committed
584
	{ "suffix",	"suffix", 2, 2, 0, ARG_DB|ARG_DN|ARG_QUOTE|ARG_MAGIC,
585
		&config_suffix, "( OLcfgDbAt:0.10 NAME 'olcSuffix' "
586
			"EQUALITY distinguishedNameMatch "
587
588
			"SYNTAX OMsDN )", NULL, NULL },
	{ "syncrepl", NULL, 0, 0, 0, ARG_DB|ARG_MAGIC,
589
		&syncrepl_config, "( OLcfgDbAt:0.11 NAME 'olcSyncrepl' "
590
			"EQUALITY caseIgnoreMatch "
591
			"SYNTAX OMsDirectoryString X-ORDERED 'VALUES' )", NULL, NULL },
592
593
594
595
596
597
598
	{ "threads", "count", 2, 2, 0,
#ifdef NO_THREADS
		ARG_IGNORED, NULL,
#else
		ARG_INT|ARG_MAGIC|CFG_THREADS, &config_generic,
#endif
		"( OLcfgGlAt:66 NAME 'olcThreads' "
599
			"SYNTAX OMsInteger SINGLE-VALUE )", NULL, NULL },
600
	{ "timelimit", "limit", 2, 0, 0, ARG_MAY_DB|ARG_MAGIC,
601
		&config_timelimit, "( OLcfgGlAt:67 NAME 'olcTimeLimit' "
602
			"SYNTAX OMsDirectoryString )", NULL, NULL },
603
604
605
606
607
608
	{ "TLSCACertificateFile", NULL, 0, 0, 0,
#ifdef HAVE_TLS
		CFG_TLS_CA_FILE|ARG_STRING|ARG_MAGIC, &config_tls_option,
#else
		ARG_IGNORED, NULL,
#endif
609
		"( OLcfgGlAt:68 NAME 'olcTLSCACertificateFile' "
610
			"SYNTAX OMsDirectoryString SINGLE-VALUE )", NULL, NULL },
611
612
613
614
615
616
	{ "TLSCACertificatePath", NULL,	0, 0, 0,
#ifdef HAVE_TLS
		CFG_TLS_CA_PATH|ARG_STRING|ARG_MAGIC, &config_tls_option,
#else
		ARG_IGNORED, NULL,
#endif
617
		"( OLcfgGlAt:69 NAME 'olcTLSCACertificatePath' "
618
			"SYNTAX OMsDirectoryString SINGLE-VALUE )", NULL, NULL },
619
620
621
622
623
624
	{ "TLSCertificateFile", NULL, 0, 0, 0,
#ifdef HAVE_TLS
		CFG_TLS_CERT_FILE|ARG_STRING|ARG_MAGIC, &config_tls_option,
#else
		ARG_IGNORED, NULL,
#endif
625
		"( OLcfgGlAt:70 NAME 'olcTLSCertificateFile' "
626
			"SYNTAX OMsDirectoryString SINGLE-VALUE )", NULL, NULL },
627
628
629
630
631
632
	{ "TLSCertificateKeyFile", NULL, 0, 0, 0,
#ifdef HAVE_TLS
		CFG_TLS_CERT_KEY|ARG_STRING|ARG_MAGIC, &config_tls_option,
#else
		ARG_IGNORED, NULL,
#endif
633
		"( OLcfgGlAt:71 NAME 'olcTLSCertificateKeyFile' "
634
			"SYNTAX OMsDirectoryString SINGLE-VALUE )", NULL, NULL },
635
636
637
638
639
640
	{ "TLSCipherSuite",	NULL, 0, 0, 0,
#ifdef HAVE_TLS
		CFG_TLS_CIPHER|ARG_STRING|ARG_MAGIC, &config_tls_option,
#else
		ARG_IGNORED, NULL,
#endif
641
		"( OLcfgGlAt:72 NAME 'olcTLSCipherSuite' "
642
			"SYNTAX OMsDirectoryString SINGLE-VALUE )", NULL, NULL },
643
	{ "TLSCRLCheck", NULL, 0, 0, 0,
644
#if defined(HAVE_TLS) && defined(HAVE_OPENSSL_CRL)
645
646
647
648
		CFG_TLS_CRLCHECK|ARG_STRING|ARG_MAGIC, &config_tls_config,
#else
		ARG_IGNORED, NULL,
#endif
649
		"( OLcfgGlAt:73 NAME 'olcTLSCRLCheck' "
650
			"SYNTAX OMsDirectoryString SINGLE-VALUE )", NULL, NULL },
Howard Chu's avatar
Howard Chu committed
651
652
653
654
655
656
657
658
	{ "TLSCRLFile", NULL, 0, 0, 0,
#if defined(HAVE_GNUTLS)
		CFG_TLS_CRL_FILE|ARG_STRING|ARG_MAGIC, &config_tls_option,
#else
		ARG_IGNORED, NULL,
#endif
		"( OLcfgGlAt:82 NAME 'olcTLSCRLFile' "
			"SYNTAX OMsDirectoryString SINGLE-VALUE )", NULL, NULL },
659
660
661
662
663
664
	{ "TLSRandFile", NULL, 0, 0, 0,
#ifdef HAVE_TLS
		CFG_TLS_RAND|ARG_STRING|ARG_MAGIC, &config_tls_option,
#else
		ARG_IGNORED, NULL,
#endif
665
		"( OLcfgGlAt:74 NAME 'olcTLSRandFile' "
666
			"SYNTAX OMsDirectoryString SINGLE-VALUE )", NULL, NULL },
667
668
669
670
671
672
	{ "TLSVerifyClient", NULL, 0, 0, 0,
#ifdef HAVE_TLS
		CFG_TLS_VERIFY|ARG_STRING|ARG_MAGIC, &config_tls_config,
#else
		ARG_IGNORED, NULL,
#endif
673
		"( OLcfgGlAt:75 NAME 'olcTLSVerifyClient' "
674
			"SYNTAX OMsDirectoryString SINGLE-VALUE )", NULL, NULL },
675
	{ "TLSDHParamFile", NULL, 0, 0, 0,
676
#ifdef HAVE_TLS
677
		CFG_TLS_DH_FILE|ARG_STRING|ARG_MAGIC, &config_tls_option,
678
679
680
#else
		ARG_IGNORED, NULL,
#endif
681
		"( OLcfgGlAt:77 NAME 'olcTLSDHParamFile' "
682
			"SYNTAX OMsDirectoryString SINGLE-VALUE )", NULL, NULL },
683
684
685
	{ "tool-threads", "count", 2, 2, 0, ARG_INT|ARG_MAGIC|CFG_TTHREADS,
		&config_generic, "( OLcfgGlAt:80 NAME 'olcToolThreads' "
			"SYNTAX OMsInteger SINGLE-VALUE )", NULL, NULL },
686
687
	{ "ucdata-path", "path", 2, 2, 0, ARG_IGNORED,
		NULL, NULL, NULL, NULL },
Pierangelo Masarati's avatar
Pierangelo Masarati committed
688
	{ "updatedn", "dn", 2, 2, 0, ARG_DB|ARG_DN|ARG_QUOTE|ARG_MAGIC,
689
		&config_updatedn, "( OLcfgDbAt:0.12 NAME 'olcUpdateDN' "
690
			"SYNTAX OMsDN SINGLE-VALUE )", NULL, NULL },
691
	{ "updateref", "url", 2, 2, 0, ARG_DB|ARG_MAGIC,
692
		&config_updateref, "( OLcfgDbAt:0.13 NAME 'olcUpdateRef' "
693
			"EQUALITY caseIgnoreMatch "
694
695
696
697
			"SUP labeledURI )", NULL, NULL },
	{ NULL,	NULL, 0, 0, 0, ARG_IGNORED,
		NULL, NULL, NULL, NULL }
};
Howard Chu's avatar
Howard Chu committed
698

699
/* Routines to check if a child can be added to this type */
700
static ConfigLDAPadd cfAddSchema, cfAddInclude, cfAddDatabase,
701
702
	cfAddBackend, cfAddModule, cfAddOverlay;

703
704
/* NOTE: be careful when defining array members
 * that can be conditionally compiled */
705
706
707
708
709
#define CFOC_GLOBAL	cf_ocs[1]
#define CFOC_SCHEMA	cf_ocs[2]
#define CFOC_BACKEND	cf_ocs[3]
#define CFOC_DATABASE	cf_ocs[4]
#define CFOC_OVERLAY	cf_ocs[5]
710
711
#define CFOC_INCLUDE	cf_ocs[6]
#define CFOC_FRONTEND	cf_ocs[7]
712
#ifdef SLAPD_MODULES
713
#define CFOC_MODULE	cf_ocs[8]
714
#endif /* SLAPD_MODULES */
715

716
static ConfigOCs cf_ocs[] = {
717
	{ "( OLcfgGlOc:0 "
Howard Chu's avatar
Howard Chu committed
718
719
		"NAME 'olcConfig' "
		"DESC 'OpenLDAP configuration object' "
Howard Chu's avatar
Howard Chu committed
720
		"ABSTRACT SUP top )", Cft_Abstract, NULL },
721
	{ "( OLcfgGlOc:1 "
Howard Chu's avatar
Howard Chu committed
722
723
724
		"NAME 'olcGlobal' "
		"DESC 'OpenLDAP Global configuration options' "
		"SUP olcConfig STRUCTURAL "
Howard Chu's avatar
Howard Chu committed
725
		"MAY ( cn $ olcConfigFile $ olcConfigDir $ olcAllows $ olcArgsFile $ "
726
		 "olcAttributeOptions $ olcAuthIDRewrite $ "
727
		 "olcAuthzPolicy $ olcAuthzRegexp $ olcConcurrency $ "
728
		 "olcConnMaxPending $ olcConnMaxPendingAuth $ "
729
		 "olcDisallows $ olcGentleHUP $ olcIdleTimeout $ "
730
		 "olcIndexSubstrIfMaxLen $ olcIndexSubstrIfMinLen $ "
731
732
		 "olcIndexSubstrAnyLen $ olcIndexSubstrAnyStep $ olcIndexIntLen $ "
		 "olcLocalSSF $ olcLogLevel $ "
733
		 "olcPasswordCryptSaltFormat $ olcPasswordHash $ olcPidFile $ "
734
		 "olcPluginLogFile $ olcReadOnly $ olcReferral $ "
Howard Chu's avatar
Howard Chu committed
735
		 "olcReplogFile $ olcRequires $ olcRestrict $ olcReverseLookup $ "
736
		 "olcRootDSE $ "
737
		 "olcSaslHost $ olcSaslRealm $ olcSaslSecProps $ "
738
		 "olcSecurity $ olcServerID $ olcSizeLimit $ "
Howard Chu's avatar
Howard Chu committed
739
		 "olcSockbufMaxIncoming $ olcSockbufMaxIncomingAuth $ "
Howard Chu's avatar
Howard Chu committed
740
741
742
		 "olcThreads $ olcTimeLimit $ olcTLSCACertificateFile $ "
		 "olcTLSCACertificatePath $ olcTLSCertificateFile $ "
		 "olcTLSCertificateKeyFile $ olcTLSCipherSuite $ olcTLSCRLCheck $ "
743
		 "olcTLSRandFile $ olcTLSVerifyClient $ olcTLSDHParamFile $ "
Howard Chu's avatar
Howard Chu committed
744
		 "olcTLSCRLFile $ olcToolThreads $ "
745
		 "olcObjectIdentifier $ olcAttributeTypes $ olcObjectClasses $ "
746
		 "olcDitContentRules $ olcLdapSyntaxes ) )", Cft_Global },
747
	{ "( OLcfgGlOc:2 "
Howard Chu's avatar
Howard Chu committed
748
749
750
		"NAME 'olcSchemaConfig' "
		"DESC 'OpenLDAP schema object' "
		"SUP olcConfig STRUCTURAL "
Howard Chu's avatar
Howard Chu committed
751
		"MAY ( cn $ olcObjectIdentifier $ olcAttributeTypes $ "
752
		 "olcObjectClasses $ olcDitContentRules $ olcLdapSyntaxes ) )",
753
		 	Cft_Schema, NULL, cfAddSchema },
754
	{ "( OLcfgGlOc:3 "
Howard Chu's avatar
Howard Chu committed
755
756
757
		"NAME 'olcBackendConfig' "
		"DESC 'OpenLDAP Backend-specific options' "
		"SUP olcConfig STRUCTURAL "
758
		"MUST olcBackend )", Cft_Backend, NULL, cfAddBackend },
759
	{ "( OLcfgGlOc:4 "
Howard Chu's avatar
Howard Chu committed
760
761
762
		"NAME 'olcDatabaseConfig' "
		"DESC 'OpenLDAP Database-specific options' "
		"SUP olcConfig STRUCTURAL "
Howard Chu's avatar
Howard Chu committed
763
		"MUST olcDatabase "
764
765
		"MAY ( olcHidden $ olcSuffix $ olcSubordinate $ olcAccess $ "
		 "olcLastMod $ olcLimits $ "
766
		 "olcMaxDerefDepth $ olcPlugin $ olcReadOnly $ olcReplica $ "
767
		 "olcReplicaArgsFile $ olcReplicaPidFile $ olcReplicationInterval $ "
768
		 "olcReplogFile $ olcRequires $ olcRestrict $ olcRootDN $ olcRootPW $ "
Howard Chu's avatar
Howard Chu committed
769
		 "olcSchemaDN $ olcSecurity $ olcSizeLimit $ olcSyncrepl $ "
770
771
		 "olcTimeLimit $ olcUpdateDN $ olcUpdateRef $ olcMirrorMode $ "
		 "olcMonitoring ) )",
772
		 	Cft_Database, NULL, cfAddDatabase },
773
	{ "( OLcfgGlOc:5 "
Howard Chu's avatar
Howard Chu committed
774
775
776
		"NAME 'olcOverlayConfig' "
		"DESC 'OpenLDAP Overlay-specific options' "
		"SUP olcConfig STRUCTURAL "
777
		"MUST olcOverlay )", Cft_Overlay, NULL, cfAddOverlay },
778
779
780
781
782
783
784
785
	{ "( OLcfgGlOc:6 "
		"NAME 'olcIncludeFile' "
		"DESC 'OpenLDAP configuration include file' "
		"SUP olcConfig STRUCTURAL "
		"MUST olcInclude "
		"MAY ( cn $ olcRootDSE ) )",
		/* Used to be Cft_Include, that def has been removed */
		Cft_Abstract, NULL, cfAddInclude },
786
787
788
789
	/* This should be STRUCTURAL like all the other database classes, but
	 * that would mean inheriting all of the olcDatabaseConfig attributes,
	 * which causes them to be merged twice in config_build_entry.
	 */
790
	{ "( OLcfgGlOc:7 "
791
792
793
		"NAME 'olcFrontendConfig' "
		"DESC 'OpenLDAP frontend configuration' "
		"AUXILIARY "
Howard Chu's avatar
Howard Chu committed
794
		"MAY ( olcDefaultSearchBase $ olcPasswordHash $ olcSortVals ) )",
795
		Cft_Database, NULL, NULL },
796
797
798
799
800
801
802
803
#ifdef SLAPD_MODULES
	{ "( OLcfgGlOc:8 "
		"NAME 'olcModuleList' "
		"DESC 'OpenLDAP dynamic module info' "
		"SUP olcConfig STRUCTURAL "
		"MAY ( cn $ olcModulePath $ olcModuleLoad ) )",
		Cft_Module, NULL, cfAddModule },
#endif
Howard Chu's avatar
Howard Chu committed
804
	{ NULL, 0, NULL }
Howard Chu's avatar
Howard Chu committed
805
806
};

807
808
809
810
811
812
813
814
typedef struct ServerID {
	struct ServerID *si_next;
	struct berval si_url;
	int si_num;
} ServerID;

static ServerID *sid_list;

Howard Chu's avatar
Howard Chu committed
815
816
817
818
819
typedef struct voidList {
	struct voidList *vl_next;
	void *vl_ptr;
} voidList;

Howard Chu's avatar
Howard Chu committed
820
821
822
823
824
825
826
typedef struct ADlist {
	struct ADlist *al_next;
	AttributeDescription *al_desc;
} ADlist;

static ADlist *sortVals;

827
828
829
830
static int
config_generic(ConfigArgs *c) {
	int i;

831
	if ( c->op == SLAP_CONFIG_EMIT ) {
832
833
834
835
836
837
838
839
		int rc = 0;
		switch(c->type) {
		case CFG_CONCUR:
			c->value_int = ldap_pvt_thread_get_concurrency();
			break;
		case CFG_THREADS:
			c->value_int = connection_pool_max;
			break;
840
841
842
		case CFG_TTHREADS:
			c->value_int = slap_tool_thread_max;
			break;
843
844
845
846
847
848
849
850
851
852
853
854
		case CFG_SALT:
			if ( passwd_salt )
				c->value_string = ch_strdup( passwd_salt );
			else
				rc = 1;
			break;
		case CFG_LIMITS:
			if ( c->be->be_limits ) {
				char buf[4096*3];
				struct berval bv;

				for ( i=0; c->be->be_limits[i]; i++ ) {
Pierangelo Masarati's avatar
Pierangelo Masarati committed
855
856
857
858
859
860
861
862
					bv.bv_len = snprintf( buf, sizeof( buf ), SLAP_X_ORDERED_FMT, i );
					if ( bv.bv_len >= sizeof( buf ) ) {
						ber_bvarray_free_x( c->rvalue_vals, NULL );
						c->rvalue_vals = NULL;
						rc = 1;
						break;
					}
					bv.bv_val = buf + bv.bv_len;
863
864
					limits_unparse( c->be->be_limits[i], &bv,
							sizeof( buf ) - ( bv.bv_val - buf ) );
865
866
867
868
869
870
871
872
					bv.bv_len += bv.bv_val - buf;
					bv.bv_val = buf;
					value_add_one( &c->rvalue_vals, &bv );
				}
			}
			if ( !c->rvalue_vals ) rc = 1;
			break;
		case CFG_RO:
Howard Chu's avatar
Howard Chu committed
873
874
			c->value_int = (c->be->be_restrictops & SLAP_RESTRICT_OP_WRITES) ==
				SLAP_RESTRICT_OP_WRITES;