root/usr/src/cmd/ldap/common/ldaptest.c
/*
 * Copyright (c) 1998, 2010, Oracle and/or its affiliates. All rights reserved.
 */

#include <stdio.h>
#include <ctype.h>
#include <string.h>
#include <sys/types.h>
#include <sys/socket.h>
#include <sys/time.h>
#include <sys/stat.h>
#include <sys/file.h>
#include <fcntl.h>
#include <unistd.h>

#include "lber.h"
#include "ldap.h"

#define MOD_USE_BVALS

#ifdef NEEDPROTOS
static void handle_result( LDAP *ld, LDAPMessage *lm );
static void print_ldap_result( LDAP *ld, LDAPMessage *lm, char *s );
static void print_search_entry( LDAP *ld, LDAPMessage *res );
static void free_list( char **list );
#else
static void handle_result();
static void print_ldap_result();
static void print_search_entry();
static void free_list();
#endif /* NEEDPROTOS */

#define NOCACHEERRMSG   "don't compile with -DNO_CACHE if you desire local caching"

char *dnsuffix;

static char *
getaline( char *line, int len, FILE *fp, char *prompt )
{
        printf(prompt);

        if ( fgets( line, len, fp ) == NULL )
                return( NULL );

        line[ strlen( line ) - 1 ] = '\0';

        return( line );
}

static char **
get_list( char *prompt )
{
        static char     buf[256];
        int             num;
        char            **result;

        num = 0;
        result = (char **) 0;
        while ( 1 ) {
                getaline( buf, sizeof(buf), stdin, prompt );

                if ( *buf == '\0' )
                        break;

                if ( result == (char **) 0 )
                        result = (char **) malloc( sizeof(char *) );
                else
                        result = (char **) realloc( result,
                            sizeof(char *) * (num + 1) );

                result[num++] = (char *) strdup( buf );
        }
        if ( result == (char **) 0 )
                return( NULL );
        result = (char **) realloc( result, sizeof(char *) * (num + 1) );
        result[num] = NULL;

        return( result );
}


static void
free_list( char **list )
{
        int     i;

        if ( list != NULL ) {
                for ( i = 0; list[ i ] != NULL; ++i ) {
                        free( list[ i ] );
                }
                free( (char *)list );
        }
}


#ifdef MOD_USE_BVALS
static int
file_read( char *path, struct berval *bv )
{
        FILE            *fp;
        long            rlen;
        int             eof;

        if (( fp = fopen( path, "r" )) == NULL ) {
                perror( path );
                return( -1 );
        }

        if ( fseek( fp, 0L, SEEK_END ) != 0 ) {
                perror( path );
                fclose( fp );
                return( -1 );
        }

        bv->bv_len = ftell( fp );

        if (( bv->bv_val = (char *)malloc( bv->bv_len )) == NULL ) {
                perror( "malloc" );
                fclose( fp );
                return( -1 );
        }

        if ( fseek( fp, 0L, SEEK_SET ) != 0 ) {
                perror( path );
                fclose( fp );
                return( -1 );
        }

        rlen = fread( bv->bv_val, 1, bv->bv_len, fp );
        eof = feof( fp );
        fclose( fp );

        if ( rlen != bv->bv_len ) {
                perror( path );
                free( bv->bv_val );
                return( -1 );
        }

        return( bv->bv_len );
}
#endif /* MOD_USE_BVALS */


static LDAPMod **
get_modlist( char *prompt1, char *prompt2, char *prompt3 )
{
        static char     buf[256];
        int             num;
        LDAPMod         tmp;
        LDAPMod         **result;
#ifdef MOD_USE_BVALS
        struct berval   **bvals;
#endif /* MOD_USE_BVALS */

        num = 0;
        result = NULL;
        while ( 1 ) {
                if ( prompt1 ) {
                        getaline( buf, sizeof(buf), stdin, prompt1 );
                        tmp.mod_op = atoi( buf );

                        if ( tmp.mod_op == -1 || buf[0] == '\0' )
                                break;
                }

                getaline( buf, sizeof(buf), stdin, prompt2 );
                if ( buf[0] == '\0' )
                        break;
                tmp.mod_type = strdup( buf );

                tmp.mod_values = get_list( prompt3 );
#ifdef MOD_USE_BVALS
                if ( tmp.mod_values != NULL ) {
                        int     i;

                        for ( i = 0; tmp.mod_values[i] != NULL; ++i )
                                ;
                        bvals = (struct berval **)calloc( i + 1,
                            sizeof( struct berval *));
                        for ( i = 0; tmp.mod_values[i] != NULL; ++i ) {
                                bvals[i] = (struct berval *)malloc(
                                    sizeof( struct berval ));
                                if ( strncmp( tmp.mod_values[i], "{FILE}",
                                    6 ) == 0 ) {
                                        if ( file_read( tmp.mod_values[i] + 6,
                                            bvals[i] ) < 0 ) {
                                                return( NULL );
                                        }
                                } else {
                                        bvals[i]->bv_val = tmp.mod_values[i];
                                        bvals[i]->bv_len =
                                            strlen( tmp.mod_values[i] );
                                }
                        }
                        tmp.mod_bvalues = bvals;
                        tmp.mod_op |= LDAP_MOD_BVALUES;
                }
#endif /* MOD_USE_BVALS */

                if ( result == NULL )
                        result = (LDAPMod **) malloc( sizeof(LDAPMod *) );
                else
                        result = (LDAPMod **) realloc( result,
                            sizeof(LDAPMod *) * (num + 1) );

                result[num] = (LDAPMod *) malloc( sizeof(LDAPMod) );
                *(result[num]) = tmp;   /* struct copy */
                num++;
        }
        if ( result == NULL )
                return( NULL );
        result = (LDAPMod **) realloc( result, sizeof(LDAPMod *) * (num + 1) );
        result[num] = NULL;

        return( result );
}


int
bind_prompt( LDAP *ld, char **dnp, char **passwdp, int *authmethodp,
        int freeit )
{
        static char     dn[256], passwd[256];

        if ( !freeit ) {
#ifdef KERBEROS
                getaline( dn, sizeof(dn), stdin,
                    "re-bind method (0->simple, 1->krbv41, 2->krbv42, 3->krbv41&2)? " );
                if (( *authmethodp = atoi( dn )) == 3 ) {
                        *authmethodp = LDAP_AUTH_KRBV4;
                } else {
                        *authmethodp |= 0x80;
                }
#else /* KERBEROS */
                *authmethodp = LDAP_AUTH_SIMPLE;
#endif /* KERBEROS */

                getaline( dn, sizeof(dn), stdin, "re-bind dn? " );
                strcat( dn, dnsuffix );
                *dnp = dn;

                if ( *authmethodp == LDAP_AUTH_SIMPLE && dn[0] != '\0' ) {
                        getaline( passwd, sizeof(passwd), stdin,
                            "re-bind password? " );
                } else {
                        passwd[0] = '\0';
                }
                *passwdp = passwd;
        }

        return( LDAP_SUCCESS );
}


int
main(int argc, char **argv )
{
        LDAP    *ld;
        int             i, c, port, cldapflg, errflg, method, id,
                msgtype, delrdn, theInt, sizelimit, err;
        char    line[256], command1, command2, command3;
        char    passwd[64], dn[256], rdn[64], attr[64], value[256];
        char    filter[256], *host, **types;
        char    *mechanism;

        char    **exdn;
        char    *usage = "usage: %s [-u] [-h host] [-d level] [-s dnsuffix] [-p port] [-t file] [-T file]\n";
        int             bound, all, scope, attrsonly;
        LDAPMessage     *res;
        LDAPMod **mods, **attrs;
        struct timeval  timeout, timelimit;
        char    *copyfname = NULL;
        int             copyoptions = 0, resultusetimelimit = 0;
        LDAPURLDesc     *ludp;
        struct berval bv, cred, *srvcrds = NULL;
        extern char     *optarg;
        extern int      optind;
        LDAPControl *ctrls[2];
        LDAPControl aCtrl;


#ifdef MACOS
        if (( argv = get_list( "cmd line arg?" )) == NULL ) {
                exit( 1 );
        }
        for ( argc = 0; argv[ argc ] != NULL; ++argc ) {
                ;
        }
#endif /* MACOS */

        host = NULL;
        port = LDAP_PORT;
        dnsuffix = "";
        cldapflg = errflg = 0;
        ctrls[0] = &aCtrl;
        ctrls[1] = NULL;

        while (( c = getopt( argc, argv, "uh:d:s:p:t:T:" )) != -1 ) {
                switch( c ) {
                case 'u':
#ifdef CLDAP
                        cldapflg++;
#else /* CLDAP */
                        printf( "Compile with -DCLDAP for UDP support\n" );
#endif /* CLDAP */
                        break;

                case 'd':
#ifdef LDAP_DEBUG
                        ldap_debug = atoi( optarg );
                        if ( ldap_debug & LDAP_DEBUG_PACKETS ) {
                                lber_debug = ldap_debug;
                        }
#else
                        printf( "Compile with -DLDAP_DEBUG for debugging\n" );
#endif
                        break;

                case 'h':
                        host = optarg;
                        break;

                case 's':
                        dnsuffix = optarg;
                        break;

                case 'p':
                        port = atoi( optarg );
                        break;

#if !defined(MACOS) && !defined(DOS)
                case 't':       /* copy ber's to given file */
                        copyfname = strdup( optarg );
                        copyoptions = LBER_TO_FILE;
                        break;

                case 'T':       /* only output ber's to given file */
                        copyfname = strdup( optarg );
                        copyoptions = (LBER_TO_FILE | LBER_TO_FILE_ONLY);
                        break;
#endif

                default:
                    ++errflg;
                }
        }

        if ( host == NULL && optind == argc - 1 ) {
                host = argv[ optind ];
                ++optind;
        }

        if ( errflg || optind < argc - 1 ) {
                fprintf( stderr, usage, argv[ 0 ] );
                exit( 1 );
        }

        printf( "%s( %s, %d )\n", cldapflg ? "cldap_open" : "ldap_init",
                host == NULL ? "(null)" : host, port );

        if ( cldapflg ) {
#ifdef CLDAP
                ld = cldap_open( host, port );
#endif /* CLDAP */
        } else {
                ld = ldap_init( host, port );
        }

        if ( ld == NULL ) {
                perror( "ldap_init" );
                exit(1);
        }

#if !defined(MACOS) && !defined(DOS)
        if ( copyfname != NULL ) {
                if ( (ld->ld_sb.sb_fd = open( copyfname, O_WRONLY | O_CREAT,
                    0600 ))  == -1 ) {
                        perror( copyfname );
                        exit ( 1 );
                }
                ld->ld_sb.sb_options = copyoptions;
        }
#endif

        bound = 0;
        timeout.tv_sec = 0;
        timeout.tv_usec = 0;
        timelimit.tv_sec = 0;
        timelimit.tv_usec = 0;

        (void) memset( line, '\0', sizeof(line) );
        while ( getaline( line, sizeof(line), stdin, "\ncommand? " ) != NULL ) {
                command1 = line[0];
                command2 = line[1];
                command3 = line[2];

                switch ( command1 ) {
                case 'a':       /* add or abandon */
                        switch ( command2 ) {
                        case 'd':       /* add */
                                getaline( dn, sizeof(dn), stdin, "dn? " );
                                strcat( dn, dnsuffix );
                                if ( (attrs = get_modlist( NULL, "attr? ",
                                    "value? " )) == NULL )
                                        break;
                                if (ldap_get_option(ld, LDAP_OPT_PROTOCOL_VERSION, &i) == LDAP_SUCCESS && i == LDAP_VERSION3){
                                        if ((err = ldap_add_ext( ld, dn, attrs, NULL, NULL, &id )) != LDAP_SUCCESS )
                                                printf( "Error in ldap_add_ext: %s\n", ldap_err2string(err) );
                                        else
                                                printf( "Add initiated with id %d\n", id );
                                }
                                else {
                                        if ( (id = ldap_add( ld, dn, attrs )) == -1 )
                                                ldap_perror( ld, "ldap_add" );
                                        else
                                                printf( "Add initiated with id %d\n", id );
                                }

                                break;

                        case 'b':       /* abandon */
                                getaline( line, sizeof(line), stdin, "msgid? " );
                                id = atoi( line );
                                if ( ldap_abandon( ld, id ) != 0 )
                                        ldap_perror( ld, "ldap_abandon" );
                                else
                                        printf( "Abandon successful\n" );
                                break;
                        default:
                                printf( "Possibilities: [ad]d, [ab]ort\n" );
                        }
                        break;

                case 'b':       /* asynch bind */
#ifdef KERBEROS
                        getaline( line, sizeof(line), stdin,
                            "method (0->simple, 1->krbv41, 2->krbv42)? " );
                        method = atoi( line ) | 0x80;
#else /* KERBEROS */
                        method = LDAP_AUTH_SIMPLE;
#endif /* KERBEROS */
                        getaline( dn, sizeof(dn), stdin, "dn? " );
                        strcat( dn, dnsuffix );

                        if ( method == LDAP_AUTH_SIMPLE && dn[0] != '\0' )
                                getaline( passwd, sizeof(passwd), stdin,
                                    "password? " );
                        else
                                passwd[0] = '\0';

                        if ( ldap_bind( ld, dn, passwd, method ) == -1 ) {
                                fprintf( stderr, "ldap_bind failed\n" );
                                ldap_perror( ld, "ldap_bind" );
                        } else {
                                printf( "Bind initiated\n" );
                                bound = 1;
                        }
                        break;

                case 'B':       /* synch bind */
#ifdef KERBEROS
                        getaline( line, sizeof(line), stdin,
                            "method 0->simple 1->krbv41 2->krbv42 3->krb? " );
                        method = atoi( line );
                        if ( method == 3 )
                                method = LDAP_AUTH_KRBV4;
                        else
                                method = method | 0x80;
#else /* KERBEROS */
                        getaline( line, sizeof(line), stdin,
                                         "method 0->simple, 1->SASL? ");
                        method = atoi (line);
                        if (method == 1){
                                method = LDAP_AUTH_SASL;
                                getaline( line, sizeof(line), stdin,
                                                 "mechanism 0->CRAM_MD5, 1->TLS? ");
                                theInt = atoi(line);
                                if (theInt == 0){
                                        mechanism = LDAP_SASL_CRAM_MD5;
                                }
                                else{
                                        mechanism = LDAP_SASL_X511_STRONG;
                                }
                        } else {
                                method = LDAP_AUTH_SIMPLE;
                        }

#endif /* KERBEROS */
                        getaline( dn, sizeof(dn), stdin, "dn? " );
                        strcat( dn, dnsuffix );

                        if ( dn[0] != '\0' )
                                getaline( passwd, sizeof(passwd), stdin,
                                    "password? " );
                        else
                                passwd[0] = '\0';

                        if (method == LDAP_AUTH_SIMPLE) {
                                if ( ldap_bind_s( ld, dn, passwd, method ) !=
                                         LDAP_SUCCESS ) {
                                        fprintf( stderr, "ldap_bind_s failed\n" );
                                        ldap_perror( ld, "ldap_bind_s" );
                                } else {
                                        printf( "Bind successful\n" );
                                        bound = 1;
                                }
                        } else {
                                if (strcmp(mechanism, LDAP_SASL_CRAM_MD5) == 0){
                                        cred.bv_val = passwd;
                                        cred.bv_len = strlen(passwd);

                                        if ( ldap_sasl_cram_md5_bind_s(ld, dn, &cred, NULL, NULL) != LDAP_SUCCESS ){
                                                fprintf( stderr, "ldap_sasl_cram_md5_bind_s failed\n" );
                                                ldap_perror( ld, "ldap_sasl_cram_md5_bind_s" );
                                        } else {
                                                printf ( "Bind successful\n");
                                                bound = 1;
                                        }
                                } else {
                                        if (ldap_sasl_bind_s(ld, dn, mechanism, &cred, NULL, NULL, &srvcrds ) != LDAP_SUCCESS){
                                                fprintf( stderr, "ldap_sasl_bind_s failed\n" );
                                                ldap_perror( ld, "ldap_sasl_bind_s" );
                                        }
                                }
                        }
                        break;

                case 'c':       /* compare */
                        getaline( dn, sizeof(dn), stdin, "dn? " );
                        strcat( dn, dnsuffix );
                        getaline( attr, sizeof(attr), stdin, "attr? " );
                        getaline( value, sizeof(value), stdin, "value? " );

                        if (ldap_get_option(ld, LDAP_OPT_PROTOCOL_VERSION, &i) == LDAP_SUCCESS && i == LDAP_VERSION3){
                                bv.bv_val = value;
                                bv.bv_len = strlen(value);
                                if ((err = ldap_compare_ext( ld, dn, attr, &bv, NULL, NULL, &id )) != LDAP_SUCCESS )
                                        printf( "Error in ldap_compare_ext: %s\n", ldap_err2string(err) );
                                else
                                        printf( "Compare initiated with id %d\n", id );
                        } else {
                                if ( (id = ldap_compare( ld, dn, attr, value )) == -1 )
                                        ldap_perror( ld, "ldap_compare" );
                                else
                                        printf( "Compare initiated with id %d\n", id );
                        }
                        break;

                case 'd':       /* turn on debugging */
#ifdef LDAP_DEBUG
                        getaline( line, sizeof(line), stdin, "debug level? " );
                        ldap_debug = atoi( line );
                        if ( ldap_debug & LDAP_DEBUG_PACKETS ) {
                                lber_debug = ldap_debug;
                        }
#else
                        printf( "Compile with -DLDAP_DEBUG for debugging\n" );
#endif
                        break;

                case 'E':       /* explode a dn */
                        getaline( line, sizeof(line), stdin, "dn? " );
                        exdn = ldap_explode_dn( line, 0 );
                        for ( i = 0; exdn != NULL && exdn[i] != NULL; i++ ) {
                                printf( "\t%s\n", exdn[i] );
                        }
                        break;

                case 'g':       /* set next msgid */
                        getaline( line, sizeof(line), stdin, "msgid? " );
                        ld->ld_msgid = atoi( line );
                        break;

                case 'v':       /* set version number */
                        getaline( line, sizeof(line), stdin, "version? " );
                        theInt = atoi(line);
                        ldap_set_option(ld, LDAP_OPT_PROTOCOL_VERSION, &theInt);
                        break;

                case 'm':       /* modify or modifyrdn */
                        if ( strncmp( line, "modify", 4 ) == 0 ) {
                                getaline( dn, sizeof(dn), stdin, "dn? " );
                                strcat( dn, dnsuffix );
                                if ( (mods = get_modlist(
                                    "mod (0=>add, 1=>delete, 2=>replace -1=>done)? ",
                                    "attribute type? ", "attribute value? " ))
                                    == NULL )
                                        break;
                                if (ldap_get_option(ld, LDAP_OPT_PROTOCOL_VERSION, &i) == LDAP_SUCCESS && i == LDAP_VERSION3){
                                        if ((err = ldap_modify_ext( ld, dn, mods, NULL, NULL, &id )) != LDAP_SUCCESS )
                                                printf( "Error in ldap_modify_ext: %s\n", ldap_err2string(err) );
                                        else
                                                printf( "Modify initiated with id %d\n", id );
                                }
                                else {
                                        if ( (id = ldap_modify( ld, dn, mods )) == -1 )
                                                ldap_perror( ld, "ldap_modify" );
                                        else
                                                printf( "Modify initiated with id %d\n", id );
                                }
                        } else if ( strncmp( line, "modrdn", 4 ) == 0 ) {
                                getaline( dn, sizeof(dn), stdin, "dn? " );
                                strcat( dn, dnsuffix );
                                getaline( rdn, sizeof(rdn), stdin, "newrdn? " );
                                getaline( line, sizeof(line), stdin, "delete old rdn (0=>no, 1=>yes)?");
                                delrdn = atoi(line);
                                if (ldap_get_option(ld, LDAP_OPT_PROTOCOL_VERSION, &i) == LDAP_SUCCESS && i == LDAP_VERSION3){
                                        if ((err = ldap_rename(ld, dn, rdn, NULL, delrdn, NULL,NULL, &id)) != LDAP_SUCCESS){
                                                printf( "Error in ldap_rename (modrdn): %s\n", ldap_err2string(err));
                                        }
                                        else
                                                printf( "Modrdn initiated with id %d\n", id );
                                }
                                else {
                                        if ( (id = ldap_modrdn( ld, dn, rdn, delrdn )) == -1 )
                                                ldap_perror( ld, "ldap_modrdn" );
                                        else
                                                printf( "Modrdn initiated with id %d\n", id );
                                }
                        } else {
                                printf( "Possibilities: [modi]fy, [modr]dn\n" );
                        }
                        break;

                case 'q':       /* quit */
#ifdef CLDAP
                        if ( cldapflg )
                                cldap_close( ld );
#endif /* CLDAP */
                        if ( !cldapflg )
                                ldap_unbind( ld );
                        exit( 0 );
                        break;

                case 'r':       /* result or remove */
                        switch ( command3 ) {
                        case 's':       /* result */
                                getaline( line, sizeof(line), stdin,
                                    "msgid (-1=>any)? " );
                                if ( line[0] == '\0' )
                                        id = -1;
                                else
                                        id = atoi( line );
                                getaline( line, sizeof(line), stdin,
                                    "all (0=>any, 1=>all)? " );
                                if ( line[0] == '\0' )
                                        all = 1;
                                else
                                        all = atoi( line );

                                if (( msgtype = ldap_result( ld, id, all,
                                    resultusetimelimit ? &timelimit : &timeout, &res )) < 1 ) {
                                        ldap_perror( ld, "ldap_result" );
                                        break;
                                }
                                printf( "\nresult: msgtype %d msgid %d\n",
                                    msgtype, res->lm_msgid );
                                handle_result( ld, res );
                                if (all || msgtype == LDAP_RES_SEARCH_RESULT)
                                        resultusetimelimit = 0;
                                res = NULLMSG;
                                break;

                        case 'm':       /* remove */
                                getaline( dn, sizeof(dn), stdin, "dn? " );
                                strcat( dn, dnsuffix );
                                if (ldap_get_option(ld, LDAP_OPT_PROTOCOL_VERSION, &i) == LDAP_SUCCESS && i == LDAP_VERSION3){
                                        if ((err = ldap_delete_ext( ld, dn, NULL, NULL, &id )) != LDAP_SUCCESS )
                                                printf( "Error in ldap_delete_ext: %s\n", ldap_err2string(err) );
                                        else
                                                printf( "Remove initiated with id %d\n", id );
                                } else {
                                        if ( (id = ldap_delete( ld, dn )) == -1 )
                                                ldap_perror( ld, "ldap_delete" );
                                        else
                                                printf( "Remove initiated with id %d\n", id );
                                }
                                break;

                        default:
                                printf( "Possibilities: [rem]ove, [res]ult\n" );
                                break;
                        }
                        break;

                case 's':       /* search */
                        getaline( dn, sizeof(dn), stdin, "searchbase? " );
                        strcat( dn, dnsuffix );
                        getaline( line, sizeof(line), stdin,
                            "scope (0=Base, 1=One Level, 2=Subtree)? " );
                        scope = atoi( line );
                        getaline( filter, sizeof(filter), stdin,
                            "search filter (e.g. sn=jones)? " );
                        types = get_list( "attrs to return? " );
                        getaline( line, sizeof(line), stdin,
                            "attrsonly (0=attrs&values, 1=attrs only)? " );
                        attrsonly = atoi( line );

                        if ( cldapflg ) {
#ifdef CLDAP
                            getaline( line, sizeof(line), stdin,
                                "Requestor DN (for logging)? " );
                            if ( cldap_search_s( ld, dn, scope, filter, types,
                                    attrsonly, &res, line ) != 0 ) {
                                ldap_perror( ld, "cldap_search_s" );
                            } else {
                                printf( "\nresult: msgid %d\n",
                                    res->lm_msgid );
                                handle_result( ld, res );
                                res = NULLMSG;
                            }
#endif /* CLDAP */
                        } else {
                                theInt = 0;
                                if (ldap_get_option(ld, LDAP_OPT_PROTOCOL_VERSION, &i) == LDAP_SUCCESS && i == LDAP_VERSION3){
                                        resultusetimelimit = 1;
                                        getaline( line, sizeof(line), stdin,
                                                         "ldap_search_ext (0=>no, 1=>yes - default: yes)? " );
                                        if (line[0] == '\0')
                                                theInt = 1;
                                        else
                                                theInt = atoi( line );
                                }
                                if (theInt){
                                        getaline(line, sizeof(line), stdin, "time limit?");
                                        timelimit.tv_sec = atoi(line);
                                        resultusetimelimit = 1;
                                        getaline(line, sizeof(line), stdin, "size limit?");
                                        sizelimit = atoi(line);
                                        if (( err = ldap_search_ext(ld, dn, scope, filter, types, attrsonly, NULL, NULL,
                                                                                                &timelimit, sizelimit, &id)) != LDAP_SUCCESS){
                                                printf( "Error in ldap_search_ext: %s\n", ldap_err2string(err));
                                        } else {
                                                printf( "Search initiated with id %d\n", id );
                                        }
                                } else {
                                        if (( id = ldap_search( ld, dn, scope, filter,
                                                                                        types, attrsonly  )) == -1 ) {
                                                ldap_perror( ld, "ldap_search" );
                                        } else {
                                                printf( "Search initiated with id %d\n", id );
                                        }
                                }
                        }
                        free_list( types );
                        break;

                case 't':       /* set timeout value */
                        getaline( line, sizeof(line), stdin, "timeout? " );
                        timeout.tv_sec = atoi( line );
                        break;

                case 'U':       /* set ufn search prefix */
                        getaline( line, sizeof(line), stdin, "ufn prefix? " );
                        ldap_ufn_setprefix( ld, line );
                        break;

                case 'u':       /* user friendly search w/optional timeout */
                        getaline( dn, sizeof(dn), stdin, "ufn? " );
                        strcat( dn, dnsuffix );
                        types = get_list( "attrs to return? " );
                        getaline( line, sizeof(line), stdin,
                            "attrsonly (0=attrs&values, 1=attrs only)? " );
                        attrsonly = atoi( line );

                        if ( command2 == 't' ) {
                                id = ldap_ufn_search_c( ld, dn, types,
                                    attrsonly, &res, ldap_ufn_timeout,
                                    &timeout );
                        } else {
                                id = ldap_ufn_search_s( ld, dn, types,
                                    attrsonly, &res );
                        }
                        if ( res == NULL )
                                ldap_perror( ld, "ldap_ufn_search" );
                        else {
                                printf( "\nresult: err %d\n", id );
                                handle_result( ld, res );
                                res = NULLMSG;
                        }
                        free_list( types );
                        break;

                case 'l':       /* URL search */
                        getaline( line, sizeof(line), stdin,
                            "attrsonly (0=attrs&values, 1=attrs only)? " );
                        attrsonly = atoi( line );
                        getaline( line, sizeof(line), stdin, "LDAP URL? " );
                        if (( id = ldap_url_search( ld, line, attrsonly  ))
                                == -1 ) {
                            ldap_perror( ld, "ldap_url_search" );
                        } else {
                            printf( "URL search initiated with id %d\n", id );
                        }
                        break;

                case 'p':       /* parse LDAP URL */
                        getaline( line, sizeof(line), stdin, "LDAP URL? " );
                        if (( i = ldap_url_parse( line, &ludp )) != 0 ) {
                            fprintf( stderr, "ldap_url_parse: error %d\n", i );
                        } else {
                            printf( "\t  host: " );
                            if ( ludp->lud_host == NULL ) {
                                printf( "DEFAULT\n" );
                            } else {
                                printf( "<%s>\n", ludp->lud_host );
                            }
                            printf( "\t  port: " );
                            if ( ludp->lud_port == 0 ) {
                                printf( "DEFAULT\n" );
                            } else {
                                printf( "%d\n", ludp->lud_port );
                            }
                            printf( "\t    dn: <%s>\n", ludp->lud_dn );
                            printf( "\t attrs:" );
                            if ( ludp->lud_attrs == NULL ) {
                                printf( " ALL" );
                            } else {
                                for ( i = 0; ludp->lud_attrs[ i ] != NULL; ++i ) {
                                    printf( " <%s>", ludp->lud_attrs[ i ] );
                                }
                            }
                            printf( "\n\t scope: %s\n", ludp->lud_scope == LDAP_SCOPE_UNKNOWN ? "DEFAULT (base)" :
                                                ludp->lud_scope == LDAP_SCOPE_ONELEVEL ? "ONE" :
                                                ludp->lud_scope == LDAP_SCOPE_BASE ? "BASE" :
                                                ludp->lud_scope == LDAP_SCOPE_SUBTREE ? "SUB" : "**invalid**" );
                            printf( "\tfilter: <%s>\n", ludp->lud_filter ? ludp->lud_filter : "NONE");
                                if (ludp->lud_extensions){
                                        printf("\textensions: \n");
                                        for (i = 0; ludp->lud_extensions[i] != NULL; i++)
                                                printf("\t\t%s (%s)\n", ludp->lud_extensions[i]->lue_type,
                                                           ludp->lud_extensions[i]->lue_iscritical ? "Critical" : "Non critical");
                                }

                            ldap_free_urldesc( ludp );
                        }
                            break;

                case 'n':       /* set dn suffix, for convenience */
                        getaline( line, sizeof(line), stdin, "DN suffix? " );
                        strcpy( dnsuffix, line );
                        break;

                case 'e':       /* enable cache */
#ifdef NO_CACHE
                        printf( NOCACHEERRMSG );
#else /* NO_CACHE */
                        getaline( line, sizeof(line), stdin, "Cache timeout (secs)? " );
                        i = atoi( line );
                        getaline( line, sizeof(line), stdin, "Maximum memory to use (bytes)? " );
                        if ( ldap_enable_cache( ld, i, atoi( line )) == 0 ) {
                                printf( "local cache is on\n" );
                        } else {
                                printf( "ldap_enable_cache failed\n" );
                        }
#endif /* NO_CACHE */
                        break;

                case 'x':       /* uncache entry */
#ifdef NO_CACHE
                        printf( NOCACHEERRMSG );
#else /* NO_CACHE */
                        getaline( line, sizeof(line), stdin, "DN? " );
                        ldap_uncache_entry( ld, line );
#endif /* NO_CACHE */
                        break;

                case 'X':       /* uncache request */
#ifdef NO_CACHE
                        printf( NOCACHEERRMSG );
#else /* NO_CACHE */
                        getaline( line, sizeof(line), stdin, "request msgid? " );
                        ldap_uncache_request( ld, atoi( line ));
#endif /* NO_CACHE */
                        break;

                case 'o':       /* set ldap options */
                        getaline( line, sizeof(line), stdin, "alias deref (0=never, 1=searching, 2=finding, 3=always)?" );
                        theInt = atoi(line);
                        ldap_set_option(ld, LDAP_OPT_DEREF, &theInt );
                        getaline( line, sizeof(line), stdin, "timelimit?" );
                        theInt = atoi(line);
                        ldap_set_option(ld, LDAP_OPT_TIMELIMIT,  &theInt);
                        getaline( line, sizeof(line), stdin, "sizelimit?" );
                        theInt = atoi(line);
                        ldap_set_option(ld, LDAP_OPT_SIZELIMIT, &theInt);

                        ld->ld_options = 0;

#ifdef STR_TRANSLATION
                        getaline( line, sizeof(line), stdin,
                                "Automatic translation of T.61 strings (0=no, 1=yes)?" );
                        if ( atoi( line ) == 0 ) {
                                ld->ld_lberoptions &= ~LBER_TRANSLATE_STRINGS;
                        } else {
                                ld->ld_lberoptions |= LBER_TRANSLATE_STRINGS;
#ifdef LDAP_CHARSET_8859
                                getaline( line, sizeof(line), stdin,
                                        "Translate to/from ISO-8859 (0=no, 1=yes?" );
                                if ( atoi( line ) != 0 ) {
                                        ldap_set_string_translators( ld,
                                            ldap_8859_to_t61,
                                            ldap_t61_to_8859 );
                                }
#endif /* LDAP_CHARSET_8859 */
                        }
#endif /* STR_TRANSLATION */

#ifdef LDAP_DNS
                        getaline( line, sizeof(line), stdin,
                                "Use DN & DNS to determine where to send requests (0=no, 1=yes)?" );
                        if ( atoi( line ) != 0 ) {
                                ld->ld_options |= LDAP_OPT_DNS;
                        }
#endif /* LDAP_DNS */

                        getaline( line, sizeof(line), stdin,
                                "Recognize and chase referrals (0=no, 1=yes)?" );
                        if ( atoi( line ) != 0 ) {
                                theInt = LDAP_OPT_ON;
                                getaline( line, sizeof(line), stdin,
                                                 "Prompt for bind credentials when chasing referrals (0=no, 1=yes)?" );
                                if ( atoi( line ) != 0 ) {
                                        ldap_set_option( ld, LDAP_OPT_REBIND_FN, bind_prompt );
                                }
                        } else {
                                theInt = LDAP_OPT_OFF;
                        }
                        ldap_set_option(ld, LDAP_OPT_REFERRALS, &theInt);
                        break;

                case 'k': /* Set some controls */
                        getaline( line, sizeof(line), stdin,
                                         "Set control: (0 for none, 1 for ManageDSA, 2 for preferredLang, 3 for BAD)?");
                        theInt = atoi(line);
                        switch (theInt){
                        case 0:
                                ldap_set_option(ld, LDAP_OPT_SERVER_CONTROLS, NULL);
                                break;
                        case 1:
                                aCtrl.ldctl_oid = "2.16.840.1.113730.3.4.2";
                                aCtrl.ldctl_iscritical = 1;
                                aCtrl.ldctl_value = NULL;
                                ldap_set_option(ld, LDAP_OPT_SERVER_CONTROLS, ctrls);
                                break;
                        case 2:
                                getaline( line, sizeof(line), stdin,
                                                 "Preferred Language Control : lang ?");
                                aCtrl.ldctl_oid = "1.3.6.1.4.1.1466.20035";
                                aCtrl.ldctl_iscritical = 1;
                                bv.bv_val = strdup(line);
                                bv.bv_len = strlen(line);
                                aCtrl.ldctl_value = &bv;
                                ldap_set_option(ld, LDAP_OPT_SERVER_CONTROLS, ctrls);
                                break;
                        default:
                                getaline( line, sizeof(line), stdin,
                                                 "Bad Control is critical (0=false, 1=true)?");
                                aCtrl.ldctl_oid = "1.1.1.1.1.1";
                                aCtrl.ldctl_iscritical = atoi(line);
                                aCtrl.ldctl_value = NULL;
                                ldap_set_option(ld, LDAP_OPT_SERVER_CONTROLS, ctrls);
                                break;
                        }
                        break;

                case 'O':       /* set cache options */
#ifdef NO_CACHE
                        printf( NOCACHEERRMSG );
#else /* NO_CACHE */
                        getaline( line, sizeof(line), stdin, "cache errors (0=smart, 1=never, 2=always)?" );
                        switch( atoi( line )) {
                        case 0:
                                ldap_set_cache_options( ld, 0 );
                                break;
                        case 1:
                                ldap_set_cache_options( ld,
                                        LDAP_CACHE_OPT_CACHENOERRS );
                                break;
                        case 2:
                                ldap_set_cache_options( ld,
                                        LDAP_CACHE_OPT_CACHEALLERRS );
                                break;
                        default:
                                printf( "not a valid cache option\n" );
                        }
#endif /* NO_CACHE */
                        break;

                case '?':       /* help */
    printf( "Commands: [ad]d         [ab]andon         [b]ind\n" );
    printf( "          [B]ind async  [c]ompare         [l]URL search\n" );
    printf( "          [modi]fy      [modr]dn          [rem]ove\n" );
    printf( "          [res]ult      [s]earch          [q]uit/unbind\n\n" );
    printf( "          [u]fn search  [ut]fn search with timeout\n" );
    printf( "          [d]ebug       [e]nable cache    set ms[g]id\n" );
    printf( "          d[n]suffix    [t]imeout         [v]ersion\n" );
    printf( "          [U]fn prefix  [x]uncache entry  [X]uncache request\n" );
    printf( "          [?]help       [o]ptions         [O]cache options\n" );
    printf( "          [E]xplode dn  [p]arse LDAP URL\n" );
                        break;

                default:
                        printf( "Invalid command.  Type ? for help.\n" );
                        break;
                }

                (void) memset( line, '\0', sizeof(line) );
        }

        return( 0 );
}

static void
handle_result( LDAP *ld, LDAPMessage *lm )
{
        switch ( lm->lm_msgtype ) {
        case LDAP_RES_COMPARE:
                printf( "Compare result\n" );
                print_ldap_result( ld, lm, "compare" );
                break;

        case LDAP_RES_SEARCH_RESULT:
                printf( "Search result\n" );
                print_ldap_result( ld, lm, "search" );
                break;

        case LDAP_RES_SEARCH_REFERENCE:
                printf( "Search reference\n" );
                print_search_entry( ld, lm );
                break;

        case LDAP_RES_SEARCH_ENTRY:
                printf( "Search entry\n" );
                print_search_entry( ld, lm );
                break;

        case LDAP_RES_ADD:
                printf( "Add result\n" );
                print_ldap_result( ld, lm, "add" );
                break;

        case LDAP_RES_DELETE:
                printf( "Delete result\n" );
                print_ldap_result( ld, lm, "delete" );
                break;

        case LDAP_RES_MODIFY:
                printf( "Modify result\n" );
                print_ldap_result( ld, lm, "modify" );
                break;

        case LDAP_RES_MODRDN:
                printf( "ModRDN result\n" );
                print_ldap_result( ld, lm, "modrdn" );
                break;

        case LDAP_RES_BIND:
                printf( "Bind result\n" );
                print_ldap_result( ld, lm, "bind" );
                break;

        default:
                printf( "Unknown result type 0x%x\n", lm->lm_msgtype );
                print_ldap_result( ld, lm, "unknown" );
        }
}

static void
print_ldap_result( LDAP *ld, LDAPMessage *lm, char *s )
{
        int rc, i;
        int errCode;
        char *matched = NULL, *errMsg = NULL, **referrals = NULL;
        LDAPControl **srvctrls = NULL;

        if ((rc = ldap_parse_result(ld, lm, &errCode, &matched, &errMsg, &referrals, &srvctrls, 0)) != LDAP_SUCCESS){
                fprintf(stderr, "%s: error while parsing result (%s)\n", s, ldap_err2string(rc));
                return;
        }


        fprintf(stderr, "%s: %s\n", s, ldap_err2string(errCode));
        if (errCode == LDAP_REFERRAL){
                fprintf(stderr, "\tReferrals returned: \n");
                for (i = 0; referrals[i] != NULL; i++)
                        fprintf(stderr, "\t\t%s\n", referrals[i]);
        }
        if (errMsg && *errMsg)
                fprintf(stderr, "\tAdditional info: %s\n", errMsg);
        free(errMsg);
        if (NAME_ERROR(errCode) && matched && *matched){
                fprintf(stderr, "\tMatched DN: %s\n", matched);
                free(matched);
        }
        if (srvctrls != NULL){
                fprintf(stderr, "\tLDAPControls returned: \n");
                for (i=0;srvctrls[i] != NULL; i++)
                        fprintf(stderr, "\t\t%s (%s)\n", srvctrls[i]->ldctl_oid, srvctrls[i]->ldctl_iscritical ? "Critical" : "Not critical");
        }
        return;
}

static void
print_search_entry( LDAP *ld, LDAPMessage *res )
{
        BerElement      *ber;
        char            *a, *dn, *ufn;
        struct berval   **vals;
        int             i;
        LDAPMessage     *e;

        for ( e = ldap_first_message( ld, res ); e != NULLMSG;
            e = ldap_next_message( ld, e ) ) {
                if ( e->lm_msgtype == LDAP_RES_SEARCH_RESULT )
                        break;

                dn = ldap_get_dn( ld, e );
                printf( "\tDN: %s\n", dn );

                ufn = ldap_dn2ufn( dn );
                printf( "\tUFN: %s\n", ufn );
                free( dn );
                free( ufn );

                if ( e->lm_msgtype == LDAP_RES_SEARCH_REFERENCE ){
                        char **urls = ldap_get_reference_urls(ld, e);
                        if (urls == NULL){
                                printf("\t\tError with references: %s\n", ldap_err2string(ld->ld_errno));
                        } else {
                                for (i=0;urls[i] != NULL;i++)
                                        printf("\t\tURL: %s\n", urls[i]);
                        }
                } else {
                        for ( a = ldap_first_attribute( ld, e, &ber ); a != NULL;
                                  a = ldap_next_attribute( ld, e, ber ) ) {
                                printf( "\t\tATTR: %s\n", a );
                                if ( (vals = ldap_get_values_len( ld, e, a ))
                                         == NULL ) {
                                        printf( "\t\t\t(no values)\n" );
                                } else {
                                        for ( i = 0; vals[i] != NULL; i++ ) {
                                                int     j, nonascii;

                                                nonascii = 0;
                                                for ( j = 0; j < vals[i]->bv_len; j++ )
                                                        if ( !isascii( vals[i]->bv_val[j] ) ) {
                                                        nonascii = 1;
                                                        break;
                                                        }

                                                if ( nonascii ) {
                                                        printf( "\t\t\tlength (%ld) (not ascii)\n", vals[i]->bv_len );
#ifdef BPRINT_NONASCII
                                                        lber_bprint( vals[i]->bv_val,
                                                                                 vals[i]->bv_len );
#endif /* BPRINT_NONASCII */
                                                        continue;
                                                }
                                                printf( "\t\t\tlength (%ld) %s\n",
                                                                vals[i]->bv_len, vals[i]->bv_val );
                                        }
                                        ber_bvecfree( vals );
                                }
                        }
                }
        }

        if ( res->lm_msgtype == LDAP_RES_SEARCH_RESULT
            || res->lm_chain != NULLMSG )
                print_ldap_result( ld, res, "search" );
}