Replaced DEBUG2 stuff with log of config/modules, to make it
[freeradius.git] / src / main / conffile.c
1 /*
2  * conffile.c   Read the radiusd.conf file.
3  *
4  *              Yep I should learn to use lex & yacc, or at least
5  *              write a decent parser. I know how to do that, really :)
6  *              miquels@cistron.nl
7  *
8  * Version:     $Id$
9  *
10  *   This program is free software; you can redistribute it and/or modify
11  *   it under the terms of the GNU General Public License as published by
12  *   the Free Software Foundation; either version 2 of the License, or
13  *   (at your option) any later version.
14  *
15  *   This program is distributed in the hope that it will be useful,
16  *   but WITHOUT ANY WARRANTY; without even the implied warranty of
17  *   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
18  *   GNU General Public License for more details.
19  *
20  *   You should have received a copy of the GNU General Public License
21  *   along with this program; if not, write to the Free Software
22  *   Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
23  *
24  * Copyright 2000,2006  The FreeRADIUS server project
25  * Copyright 2000  Miquel van Smoorenburg <miquels@cistron.nl>
26  * Copyright 2000  Alan DeKok <aland@ox.org>
27  */
28
29 #include <freeradius-devel/ident.h>
30 RCSID("$Id$")
31
32 #include <freeradius-devel/radiusd.h>
33 #include <freeradius-devel/rad_assert.h>
34
35 #ifdef HAVE_DIRENT_H
36 #include <dirent.h>
37 #endif
38
39 #ifdef HAVE_SYS_STAT_H
40 #include <sys/stat.h>
41 #endif
42
43 #include <ctype.h>
44
45 typedef enum conf_type {
46         CONF_ITEM_INVALID = 0,
47         CONF_ITEM_PAIR,
48         CONF_ITEM_SECTION,
49         CONF_ITEM_DATA
50 } CONF_ITEM_TYPE;
51
52 struct conf_item {
53         struct conf_item *next;
54         struct conf_part *parent;
55         int lineno;
56         const char *filename;
57         CONF_ITEM_TYPE type;
58 };
59 struct conf_pair {
60         CONF_ITEM item;
61         const char *attr;
62         const char *value;
63         FR_TOKEN operator;
64         FR_TOKEN value_type;
65 };
66 struct conf_part {
67         CONF_ITEM item;
68         const char *name1;
69         const char *name2;
70         struct conf_item *children;
71         struct conf_item *tail; /* for speed */
72         CONF_SECTION    *template;
73         rbtree_t        *pair_tree; /* and a partridge.. */
74         rbtree_t        *section_tree; /* no jokes here */
75         rbtree_t        *name2_tree; /* for sections of the same name2 */
76         rbtree_t        *data_tree;
77         void            *base;
78         int depth;
79         const CONF_PARSER *variables;
80 };
81
82
83 /*
84  *      Internal data that is associated with a configuration section,
85  *      so that we don't have to track it separately.
86  */
87 struct conf_data {
88         CONF_ITEM  item;
89         const char *name;
90         int        flag;
91         void       *data;       /* user data */
92         void       (*free)(void *); /* free user data function */
93 };
94
95
96 static int cf_data_add_internal(CONF_SECTION *cs, const char *name,
97                                 void *data, void (*data_free)(void *),
98                                 int flag);
99 static void *cf_data_find_internal(CONF_SECTION *cs, const char *name,
100                                    int flag);
101
102 int cf_log_config = 1;
103 int cf_log_modules = 1;
104
105 /*
106  *      Isolate the scary casts in these tiny provably-safe functions
107  */
108 CONF_PAIR *cf_itemtopair(CONF_ITEM *ci)
109 {
110         if (ci == NULL)
111                 return NULL;
112         rad_assert(ci->type == CONF_ITEM_PAIR);
113         return (CONF_PAIR *)ci;
114 }
115 CONF_SECTION *cf_itemtosection(CONF_ITEM *ci)
116 {
117         if (ci == NULL)
118                 return NULL;
119         rad_assert(ci->type == CONF_ITEM_SECTION);
120         return (CONF_SECTION *)ci;
121 }
122 CONF_ITEM *cf_pairtoitem(CONF_PAIR *cp)
123 {
124         if (cp == NULL)
125                 return NULL;
126         return (CONF_ITEM *)cp;
127 }
128 CONF_ITEM *cf_sectiontoitem(CONF_SECTION *cs)
129 {
130         if (cs == NULL)
131                 return NULL;
132         return (CONF_ITEM *)cs;
133 }
134
135 static CONF_DATA *cf_itemtodata(CONF_ITEM *ci)
136 {
137         if (ci == NULL)
138                 return NULL;
139         rad_assert(ci->type == CONF_ITEM_DATA);
140         return (CONF_DATA *)ci;
141 }
142 static CONF_ITEM *cf_datatoitem(CONF_DATA *cd)
143 {
144         if (cd == NULL)
145                 return NULL;
146         return (CONF_ITEM *)cd;
147 }
148
149 /*
150  *      Create a new CONF_PAIR
151  */
152 static CONF_PAIR *cf_pair_alloc(const char *attr, const char *value,
153                                 FR_TOKEN operator, FR_TOKEN value_type,
154                                 CONF_SECTION *parent)
155 {
156         char *p;
157         size_t attr_len, value_len = 0;
158         CONF_PAIR *cp;
159
160         if (!attr) return NULL;
161         attr_len = strlen(attr) + 1;
162         if (value) value_len = strlen(value) + 1;
163
164         p = rad_malloc(sizeof(*cp) + attr_len + value_len);
165
166         cp = (CONF_PAIR *) p;
167         memset(cp, 0, sizeof(*cp));
168         cp->item.type = CONF_ITEM_PAIR;
169         cp->item.parent = parent;
170
171         p += sizeof(*cp);
172         memcpy(p, attr, attr_len);
173         cp->attr = p;
174
175         if (value) {
176                 p += attr_len;
177                 memcpy(p, value, value_len);
178                 cp->value = p;
179         }
180         cp->value_type = value_type;
181         cp->operator = operator;
182
183         return cp;
184 }
185
186 /*
187  *      Free a CONF_PAIR
188  */
189 void cf_pair_free(CONF_PAIR **cp)
190 {
191         if (!cp || !*cp) return;
192
193         /*
194          *      attr && value are allocated contiguous with cp.
195          */
196
197 #ifndef NDEBUG
198         memset(*cp, 0, sizeof(*cp));
199 #endif
200         free(*cp);
201
202         *cp = NULL;
203 }
204
205
206 static void cf_data_free(CONF_DATA **cd)
207 {
208         if (!cd || !*cd) return;
209
210         /* name is allocated contiguous with cd */
211         if (!(*cd)->free) {
212                 free((*cd)->data);
213         } else {
214                 ((*cd)->free)((*cd)->data);
215         }
216 #ifndef NDEBUG
217         memset(*cd, 0, sizeof(*cd));
218 #endif
219         free(*cd);
220         *cd = NULL;
221 }
222
223 /*
224  *      rbtree callback function
225  */
226 static int pair_cmp(const void *a, const void *b)
227 {
228         const CONF_PAIR *one = a;
229         const CONF_PAIR *two = b;
230
231         return strcmp(one->attr, two->attr);
232 }
233
234
235 /*
236  *      rbtree callback function
237  */
238 static int section_cmp(const void *a, const void *b)
239 {
240         const CONF_SECTION *one = a;
241         const CONF_SECTION *two = b;
242
243         return strcmp(one->name1, two->name1);
244 }
245
246
247 /*
248  *      rbtree callback function
249  */
250 static int name2_cmp(const void *a, const void *b)
251 {
252         const CONF_SECTION *one = a;
253         const CONF_SECTION *two = b;
254
255         rad_assert(strcmp(one->name1, two->name1) == 0);
256
257         if (!one->name2 && !two->name2) return 0;
258         if (!one->name2) return -1;
259         if (!two->name2) return +1;
260
261         return strcmp(one->name2, two->name2);
262 }
263
264
265 /*
266  *      rbtree callback function
267  */
268 static int data_cmp(const void *a, const void *b)
269 {
270         int rcode;
271
272         const CONF_DATA *one = a;
273         const CONF_DATA *two = b;
274
275         rcode = one->flag - two->flag;
276         if (rcode != 0) return rcode;
277
278         return strcmp(one->name, two->name);
279 }
280
281
282 /*
283  *      Free strings we've parsed into data structures.
284  */
285 void cf_section_parse_free(CONF_SECTION *cs, void *base)
286 {
287         int i;
288         const CONF_PARSER *variables = cs->variables;
289
290         /*
291          *      Don't automatically free the strings if we're being
292          *      called from a module.  This is also for clients.c,
293          *      where client_free() expects to be able to free the
294          *      client structure.  If we moved everything to key off
295          *      of the config files, we might solve some problems...
296          */
297         if (!variables) return;
298
299         /*
300          *      Free up dynamically allocated string pointers.
301          */
302         for (i = 0; variables[i].name != NULL; i++) {
303                 char **p;
304
305                 if ((variables[i].type != PW_TYPE_STRING_PTR) &&
306                     (variables[i].type != PW_TYPE_FILENAME)) {
307                         continue;
308                 }
309
310                 /*
311                  *      No base struct offset, data must be the pointer.
312                  *      If data doesn't exist, ignore the entry, there
313                  *      must be something wrong.
314                  */
315                 if (!base) {
316                         if (!variables[i].data) {
317                                 continue;
318                         }
319
320                         p = (char **) variables[i].data;;
321
322                 } else if (variables[i].data) {
323                         p = (char **) variables[i].data;;
324
325                 } else {
326                         p = (char **) (((char *)base) + variables[i].offset);
327                 }
328
329                 free(*p);
330                 *p = NULL;
331         }
332 }
333
334
335 /*
336  *      Free a CONF_SECTION
337  */
338 void cf_section_free(CONF_SECTION **cs)
339 {
340         CONF_ITEM       *ci, *next;
341
342         if (!cs || !*cs) return;
343
344         cf_section_parse_free(*cs, (*cs)->base);
345
346         for (ci = (*cs)->children; ci; ci = next) {
347                 next = ci->next;
348
349                 switch (ci->type) {
350                 case CONF_ITEM_PAIR: {
351                                 CONF_PAIR *pair = cf_itemtopair(ci);
352                                 cf_pair_free(&pair);
353                         }
354                         break;
355
356                 case CONF_ITEM_SECTION: {
357                                 CONF_SECTION *section = cf_itemtosection(ci);
358                                 cf_section_free(&section);
359                         }
360                         break;
361
362                 case CONF_ITEM_DATA: {
363                                 CONF_DATA *data = cf_itemtodata(ci);
364                                 cf_data_free(&data);
365                         }
366                         break;
367
368                 default:        /* should really be an error. */
369                         break;
370                 }
371         }
372
373         /*
374          *      Name1 and name2 are allocated contiguous with
375          *      cs.
376          */
377         if ((*cs)->pair_tree)
378                 rbtree_free((*cs)->pair_tree);
379         if ((*cs)->section_tree)
380                 rbtree_free((*cs)->section_tree);
381         if ((*cs)->name2_tree)
382                 rbtree_free((*cs)->name2_tree);
383         if ((*cs)->data_tree)
384                 rbtree_free((*cs)->data_tree);
385
386         /*
387          * And free the section
388          */
389 #ifndef NDEBUG
390         memset(*cs, 0, sizeof(*cs));
391 #endif
392         free(*cs);
393
394         *cs = NULL;
395 }
396
397
398 /*
399  *      Allocate a CONF_SECTION
400  */
401 static CONF_SECTION *cf_section_alloc(const char *name1, const char *name2,
402                                       CONF_SECTION *parent)
403 {
404         size_t name1_len, name2_len = 0;
405         char *p;
406         CONF_SECTION    *cs;
407
408         if (!name1) return NULL;
409
410         name1_len = strlen(name1) + 1;
411         if (name2) name2_len = strlen(name2) + 1;
412
413         p = rad_malloc(sizeof(*cs) + name1_len + name2_len);
414
415         cs = (CONF_SECTION *) p;
416         memset(cs, 0, sizeof(*cs));
417         cs->item.type = CONF_ITEM_SECTION;
418         cs->item.parent = parent;
419
420         p += sizeof(*cs);
421         memcpy(p, name1, name1_len);
422         cs->name1 = p;
423
424         if (name2 && *name2) {
425                 p += name1_len;
426                 memcpy(p, name2, name2_len);
427                 cs->name2 = p;
428         }
429
430         cs->pair_tree = rbtree_create(pair_cmp, NULL, 0);
431         if (!cs->pair_tree) {
432                 cf_section_free(&cs);
433                 return NULL;
434         }
435
436         /*
437          *      Don't create a data tree, it may not be needed.
438          */
439
440         /*
441          *      Don't create the section tree here, it may not
442          *      be needed.
443          */
444
445         if (parent) cs->depth = parent->depth + 1;
446
447         return cs;
448 }
449
450
451 /*
452  *      Add an item to a configuration section.
453  */
454 static void cf_item_add(CONF_SECTION *cs, CONF_ITEM *ci)
455 {
456         if (!cs->children) {
457                 rad_assert(cs->tail == NULL);
458                 cs->children = ci;
459         } else {
460                 rad_assert(cs->tail != NULL);
461                 cs->tail->next = ci;
462         }
463
464         /*
465          *      Update the trees (and tail) for each item added.
466          */
467         for (/* nothing */; ci != NULL; ci = ci->next) {
468                 cs->tail = ci;
469
470                 /*
471                  *      For fast lookups, pair's and sections get
472                  *      added to rbtree's.
473                  */
474                 switch (ci->type) {
475                         case CONF_ITEM_PAIR:
476                                 rbtree_insert(cs->pair_tree, ci);
477                                 break;
478
479                         case CONF_ITEM_SECTION: {
480                                 CONF_SECTION *cs_new = cf_itemtosection(ci);
481
482                                 if (!cs->section_tree) {
483                                         cs->section_tree = rbtree_create(section_cmp, NULL, 0);
484                                         /* ignore any errors */
485                                 }
486
487                                 if (cs->section_tree) {
488                                         rbtree_insert(cs->section_tree, cs_new);                                }
489
490                                 /*
491                                  *      Two names: find the named instance.
492                                  */
493                                 {
494                                         CONF_SECTION *old_cs;
495
496                                         /*
497                                          *      Find the FIRST
498                                          *      CONF_SECTION having
499                                          *      the given name1, and
500                                          *      create a new tree
501                                          *      under it.
502                                          */
503                                         old_cs = rbtree_finddata(cs->section_tree, cs_new);
504                                         if (!old_cs) return; /* this is a bad error! */
505
506                                         if (!old_cs->name2_tree) {
507                                                 old_cs->name2_tree = rbtree_create(name2_cmp,
508                                                                                    NULL, 0);
509                                         }
510                                         if (old_cs->name2_tree) {
511                                                 rbtree_insert(old_cs->name2_tree, cs_new);
512                                         }
513                                 } /* had a name2 */
514                                 break;
515                         } /* was a section */
516
517                         case CONF_ITEM_DATA:
518                                 if (!cs->data_tree) {
519                                         cs->data_tree = rbtree_create(data_cmp, NULL, 0);
520                                 }
521                                 if (cs->data_tree) {
522                                         rbtree_insert(cs->data_tree, ci);
523                                 }
524                                 break;
525
526                         default: /* FIXME: assert & error! */
527                                 break;
528
529                 } /* switch over conf types */
530         } /* loop over ci */
531 }
532
533
534 CONF_ITEM *cf_reference_item(const CONF_SECTION *parentcs,
535                              CONF_SECTION *outercs,
536                              const char *ptr)
537 {
538         CONF_PAIR *cp;
539         CONF_SECTION *next;
540         const CONF_SECTION *cs = outercs;
541         char name[8192];
542         char *p;
543
544         strlcpy(name, ptr, sizeof(name));
545         p = name;
546
547         /*
548          *      ".foo" means "foo from the current section"
549          */
550         if (*p == '.') {
551                 p++;
552                 
553                 /*
554                  *      ..foo means "foo from the section
555                  *      enclosing this section" (etc.)
556                  */
557                 while (*p == '.') {
558                         if (cs->item.parent)
559                                 cs = cs->item.parent;
560                         p++;
561                 }
562
563                 /*
564                  *      "foo.bar.baz" means "from the root"
565                  */
566         } else if (strchr(p, '.') != NULL) {
567                 cs = parentcs;
568         }
569
570         while (*p) {
571                 char *q, *r;
572
573                 r = strchr(p, '[');
574                 q = strchr(p, '.');
575                 if (!r && !q) break;
576
577                 if (r && q > r) q = NULL;
578                 if (q && q < r) r = NULL;
579
580                 /*
581                  *      Split off name2.
582                  */
583                 if (r) {
584                         q = strchr(r + 1, ']');
585                         if (!q) return NULL; /* parse error */
586
587                         /*
588                          *      Points to foo[bar]xx: parse error,
589                          *      it should be foo[bar] or foo[bar].baz
590                          */
591                         if (q[1] && q[1] != '.') goto no_such_item;
592
593                         *r = '\0';
594                         *q = '\0';
595                         next = cf_section_sub_find_name2(cs, p, r + 1);
596                         *r = '[';
597                         *q = ']';
598
599                         /*
600                          *      Points to a named instance of a section.
601                          */
602                         if (!q[1]) {
603                                 if (!next) goto no_such_item;
604                                 return cf_sectiontoitem(next);
605                         }
606
607                         q++;    /* ensure we skip the ']' and '.' */
608
609                 } else {
610                         *q = '\0';
611                         next = cf_section_sub_find(cs, p);
612                         *q = '.';
613                 }
614
615                 if (!next) break; /* it MAY be a pair in this section! */
616
617                 cs = next;
618                 p = q + 1;
619         }
620
621         if (!*p) goto no_such_item;
622
623  retry:
624         /*
625          *      Find it in the current referenced
626          *      section.
627          */
628         cp = cf_pair_find(cs, p);
629         if (cp) return cf_pairtoitem(cp);
630
631         next = cf_section_sub_find(cs, p);
632         if (next) return cf_sectiontoitem(next);
633         
634         /*
635          *      "foo" is "in the current section, OR in main".
636          */
637         if ((p == name) && (cs != parentcs)) {
638                 cs = parentcs;
639                 goto retry;
640         }
641
642 no_such_item:
643         DEBUG2("WARNING: No such configuration item %s", ptr);
644         return NULL;
645 }
646
647
648 CONF_SECTION *cf_top_section(CONF_SECTION *cs)
649 {
650         while (cs->item.parent != NULL) {
651                 cs = cs->item.parent;
652         }
653
654         return cs;
655 }
656
657
658 /*
659  *      Expand the variables in an input string.
660  */
661 static const char *cf_expand_variables(const char *cf, int *lineno,
662                                        CONF_SECTION *outercs,
663                                        char *output, const char *input)
664 {
665         char *p;
666         const char *end, *ptr;
667         const CONF_SECTION *parentcs;
668         char name[8192];
669
670         /*
671          *      Find the master parent conf section.
672          *      We can't use mainconfig.config, because we're in the
673          *      process of re-building it, and it isn't set up yet...
674          */
675         parentcs = cf_top_section(outercs);
676
677         p = output;
678         ptr = input;
679         while (*ptr) {
680                 /*
681                  *      Ignore anything other than "${"
682                  */
683                 if ((*ptr == '$') && (ptr[1] == '{')) {
684                         CONF_ITEM *ci;
685                         CONF_PAIR *cp;
686
687                         /*
688                          *      FIXME: Add support for ${foo:-bar},
689                          *      like in xlat.c
690                          */
691
692                         /*
693                          *      Look for trailing '}', and log a
694                          *      warning for anything that doesn't match,
695                          *      and exit with a fatal error.
696                          */
697                         end = strchr(ptr, '}');
698                         if (end == NULL) {
699                                 *p = '\0';
700                                 radlog(L_INFO, "%s[%d]: Variable expansion missing }",
701                                        cf, *lineno);
702                                 return NULL;
703                         }
704
705                         ptr += 2;
706
707                         /*
708                          *      Can't really happen because input lines are
709                          *      capped at 8k, which is sizeof(name)
710                          */
711                         if ((size_t) (end - ptr) >= sizeof(name)) {
712                                 radlog(L_ERR, "%s[%d]: Reference string is too large",
713                                        cf, *lineno);
714                                 return NULL;
715                         }
716
717                         memcpy(name, ptr, end - ptr);
718                         name[end - ptr] = '\0';
719
720                         ci = cf_reference_item(parentcs, outercs, name);
721                         if (!ci || (ci->type != CONF_ITEM_PAIR)) {
722                                 radlog(L_ERR, "%s[%d]: Reference \"%s\" not found",
723                                        cf, *lineno, input);
724                                 return NULL;
725                         }
726
727                         /*
728                          *  Substitute the value of the variable.
729                          */
730                         cp = cf_itemtopair(ci);
731                         strcpy(p, cp->value);
732                         p += strlen(p);
733                         ptr = end + 1;
734
735                 } else if (memcmp(ptr, "$ENV{", 5) == 0) {
736                         char *env;
737
738                         ptr += 5;
739
740                         /*
741                          *      Look for trailing '}', and log a
742                          *      warning for anything that doesn't match,
743                          *      and exit with a fatal error.
744                          */
745                         end = strchr(ptr, '}');
746                         if (end == NULL) {
747                                 *p = '\0';
748                                 radlog(L_INFO, "%s[%d]: Environment variable expansion missing }",
749                                        cf, *lineno);
750                                 return NULL;
751                         }
752
753                         /*
754                          *      Can't really happen because input lines are
755                          *      capped at 8k, which is sizeof(name)
756                          */
757                         if ((size_t) (end - ptr) >= sizeof(name)) {
758                                 radlog(L_ERR, "%s[%d]: Environment variable name is too large",
759                                        cf, *lineno);
760                                 return NULL;
761                         }
762
763                         memcpy(name, ptr, end - ptr);
764                         name[end - ptr] = '\0';
765
766                         /*
767                          *      Get the environment variable.
768                          *      If none exists, then make it an empty string.
769                          */
770                         env = getenv(name);
771                         if (env == NULL) {
772                                 *name = '\0';
773                                 env = name;
774                         }
775
776                         strcpy(p, env);
777                         p += strlen(p);
778                         ptr = end + 1;
779
780                 } else {
781                         /*
782                          *      Copy it over verbatim.
783                          */
784                         *(p++) = *(ptr++);
785                 }
786         } /* loop over all of the input string. */
787
788         *p = '\0';
789
790         return output;
791 }
792
793
794 /*
795  *      Parses an item (not a CONF_ITEM) into the specified format,
796  *      with a default value.
797  *
798  *      Returns -1 on error, 0 for correctly parsed, and 1 if the
799  *      default value was used.  Note that the default value will be
800  *      used ONLY if the CONF_PAIR is NULL.
801  */
802 int cf_item_parse(CONF_SECTION *cs, const char *name,
803                   int type, void *data, const char *dflt)
804 {
805         int rcode = 0;
806         char **q;
807         const char *value;
808         fr_ipaddr_t ipaddr;
809         const CONF_PAIR *cp;
810         char ipbuf[128];
811
812         cp = cf_pair_find(cs, name);
813         if (cp) {
814                 value = cp->value;
815
816         } else if (!dflt) {
817                 return 1;       /* nothing to parse, return default value */
818
819         } else {
820                 rcode = 1;
821                 value = dflt;
822         }
823
824         if (!value) {
825                 return 0;
826         }
827
828         switch (type) {
829         case PW_TYPE_BOOLEAN:
830                 /*
831                  *      Allow yes/no and on/off
832                  */
833                 if ((strcasecmp(value, "yes") == 0) ||
834                     (strcasecmp(value, "on") == 0)) {
835                         *(int *)data = 1;
836                 } else if ((strcasecmp(value, "no") == 0) ||
837                            (strcasecmp(value, "off") == 0)) {
838                         *(int *)data = 0;
839                 } else {
840                         *(int *)data = 0;
841                         radlog(L_ERR, "Bad value \"%s\" for boolean variable %s", value, name);
842                         return -1;
843                 }
844                 cf_log_info(cs, "\t%s = %s", name, value);
845                 break;
846
847         case PW_TYPE_INTEGER:
848                 *(int *)data = strtol(value, 0, 0);
849                 cf_log_info(cs, "\t%s = %d", name, *(int *)data);
850                 break;
851
852         case PW_TYPE_STRING_PTR:
853                 q = (char **) data;
854                 if (*q != NULL) {
855                         free(*q);
856                 }
857
858                 /*
859                  *      Expand variables which haven't already been
860                  *      expanded automagically when the configuration
861                  *      file was read.
862                  */
863                 if (value == dflt) {
864                         char buffer[8192];
865
866                         int lineno = cs->item.lineno;
867
868                         /*
869                          *      FIXME: sizeof(buffer)?
870                          */
871                         value = cf_expand_variables("?",
872                                                     &lineno,
873                                                     cs, buffer, value);
874                         if (!value) return -1;
875                 }
876
877                 cf_log_info(cs, "\t%s = \"%s\"", name, value ? value : "(null)");
878                 *q = value ? strdup(value) : NULL;
879                 break;
880
881                 /*
882                  *      This is the same as PW_TYPE_STRING_PTR,
883                  *      except that we also "stat" the file, and
884                  *      cache the result.
885                  */
886         case PW_TYPE_FILENAME:
887                 q = (char **) data;
888                 if (*q != NULL) {
889                         free(*q);
890                 }
891
892                 /*
893                  *      Expand variables which haven't already been
894                  *      expanded automagically when the configuration
895                  *      file was read.
896                  */
897                 if (value == dflt) {
898                         char buffer[8192];
899
900                         int lineno = cs->item.lineno;
901
902                         /*
903                          *      FIXME: sizeof(buffer)?
904                          */
905                         value = cf_expand_variables("?",
906                                                     &lineno,
907                                                     cs, buffer, value);
908                         if (!value) return -1;
909                 }
910
911                 cf_log_info(cs, "\t%s = \"%s\"", name, value ? value : "(null)");
912                 *q = value ? strdup(value) : NULL;
913
914                 /*
915                  *      And now we "stat" the file.
916                  */
917                 if (*q) {
918                         struct stat buf;
919
920                         if (stat(*q, &buf) == 0) {
921                                 time_t *mtime;
922
923                                 mtime = rad_malloc(sizeof(*mtime));
924                                 *mtime = buf.st_mtime;
925                                 /* FIXME: error? */
926                                 cf_data_add_internal(cs, *q, mtime, free,
927                                                      PW_TYPE_FILENAME);
928                         }
929                 }
930                 break;
931
932         case PW_TYPE_IPADDR:
933                 /*
934                  *      Allow '*' as any address
935                  */
936                 if (strcmp(value, "*") == 0) {
937                         *(uint32_t *) data = htonl(INADDR_ANY);
938                         cf_log_info(cs, "\t%s = *", name);
939                         break;
940                 }
941                 if (ip_hton(value, AF_INET, &ipaddr) < 0) {
942                         radlog(L_ERR, "Can't find IP address for host %s", value);
943                         return -1;
944                 }
945                 
946                 if (strspn(value, "0123456789.") == strlen(value)) {
947                         cf_log_info(cs, "\t%s = %s", name, value);
948                 } else {
949                         cf_log_info(cs, "\t%s = %s IP address [%s]", name, value,
950                                ip_ntoh(&ipaddr, ipbuf, sizeof(ipbuf)));
951                 }
952                 *(uint32_t *) data = ipaddr.ipaddr.ip4addr.s_addr;
953                 break;
954
955         case PW_TYPE_IPV6ADDR:
956                 if (ip_hton(value, AF_INET6, &ipaddr) < 0) {
957                         radlog(L_ERR, "Can't find IPv6 address for host %s", value);
958                         return -1;
959                 }
960                 cf_log_info(cs, "\t%s = %s IPv6 address [%s]", name, value,
961                                ip_ntoh(&ipaddr, ipbuf, sizeof(ipbuf)));
962                 memcpy(data, &ipaddr.ipaddr.ip6addr,
963                        sizeof(ipaddr.ipaddr.ip6addr));
964                 break;
965
966         default:
967                 radlog(L_ERR, "type %d not supported yet", type);
968                 return -1;
969                 break;
970         } /* switch over variable type */
971
972         return rcode;
973 }
974
975 static const char *parse_spaces = "                                                                                                                                                                                                                                                                ";
976
977 /*
978  *      Parse a configuration section into user-supplied variables.
979  */
980 int cf_section_parse(CONF_SECTION *cs, void *base,
981                      const CONF_PARSER *variables)
982 {
983         int i;
984         void *data;
985
986         cs->variables = variables; /* this doesn't hurt anything */
987
988         if (!cs->name2) {
989                 cf_log_info(cs, "%.*s%s {", cs->depth, parse_spaces,
990                        cs->name1);
991         } else {
992                 cf_log_info(cs, "%.*s%s %s {", cs->depth, parse_spaces,
993                        cs->name1, cs->name2);
994         }
995
996         /*
997          *      Handle the known configuration parameters.
998          */
999         for (i = 0; variables[i].name != NULL; i++) {
1000                 /*
1001                  *      Handle subsections specially
1002                  */
1003                 if (variables[i].type == PW_TYPE_SUBSECTION) {
1004                         CONF_SECTION *subcs;
1005                         subcs = cf_section_sub_find(cs, variables[i].name);
1006
1007                         /*
1008                          *      If the configuration section is NOT there,
1009                          *      then ignore it.
1010                          *
1011                          *      FIXME! This is probably wrong... we should
1012                          *      probably set the items to their default values.
1013                          */
1014                         if (!subcs) continue;
1015
1016                         if (!variables[i].dflt) {
1017                                 DEBUG2("Internal sanity check 1 failed in cf_section_parse");
1018                                 goto error;
1019                         }
1020
1021                         if (cf_section_parse(subcs, base,
1022                                              (const CONF_PARSER *) variables[i].dflt) < 0) {
1023                                 goto error;
1024                         }
1025                         continue;
1026                 } /* else it's a CONF_PAIR */
1027
1028                 if (variables[i].data) {
1029                         data = variables[i].data; /* prefer this. */
1030                 } else if (base) {
1031                         data = ((char *)base) + variables[i].offset;
1032                 } else {
1033                         DEBUG2("Internal sanity check 2 failed in cf_section_parse");
1034                         goto error;
1035                 }
1036
1037                 /*
1038                  *      Parse the pair we found, or a default value.
1039                  */
1040                 if (cf_item_parse(cs, variables[i].name, variables[i].type,
1041                                   data, variables[i].dflt) < 0) {
1042                         goto error;
1043                 }
1044         } /* for all variables in the configuration section */
1045
1046         cf_log_info(cs, "%.*s}", cs->depth, parse_spaces);
1047
1048         cs->base = base;
1049
1050         return 0;
1051
1052  error:
1053         cf_log_info(cs, "%.*s}", cs->depth, parse_spaces);
1054         cf_section_parse_free(cs, base);
1055         return -1;
1056 }
1057
1058
1059 /*
1060  *      Sanity check the "if" or "elsif", presuming that the first '('
1061  *      has already been eaten.
1062  *
1063  *      We're not really parsing it here, just checking if it's mostly
1064  *      well-formed.
1065  */
1066 static int condition_looks_ok(const char **ptr)
1067 {
1068         int num_braces = 1;
1069         int quote = 0;
1070         const char *p = *ptr;
1071
1072         while (*p) {
1073                 if (quote) {
1074                         if (*p == quote) {
1075                                 p++;
1076                                 quote = 0;
1077                                 continue;
1078                         }
1079
1080                         if (*p == '\\') {
1081                                 if (!p[1]) {
1082                                         return 0; /* no trailing slash */
1083                                 }
1084                                 p += 2;
1085                                 continue;
1086                         }
1087                         p++;
1088                         continue;
1089                 }
1090
1091                 switch (*p) {
1092                 case '\\':
1093                         if (!p[1]) {
1094                                 return 0; /* no trailing slash */
1095                         }
1096                         p += 2;
1097                         continue;
1098
1099                 case '(':
1100                         num_braces++;
1101                         p++;
1102                         continue;
1103
1104                 case ')':
1105                         if (num_braces == 1) {
1106                                 const char *q = p + 1;
1107
1108                                 /*
1109                                  *      Validate that there isn't much
1110                                  *      else after the closing brace.
1111                                  */
1112                                 while ((*q == ' ') || (*q == '\t')) q++;
1113
1114                                 /*
1115                                  *      Parse error.
1116                                  */
1117                                 if (*q != '{') {
1118                                         return 0;
1119                                 }
1120
1121                                 *ptr = p + 1; /* include the trailing ')' */
1122                                 return 1;
1123                         }
1124                         num_braces--;
1125                         p++;
1126                         continue;
1127
1128                 case '"':
1129                 case '\'':
1130                 case '/':
1131                 case '`':
1132                         quote = *p;
1133                         /* FALL-THROUGH */
1134
1135                 default:
1136                         p++;
1137                         break;
1138                 }
1139         }
1140
1141         return 0;
1142 }
1143
1144
1145 static const char *cf_local_file(CONF_SECTION *cs, const char *local,
1146                                  char *buffer, size_t bufsize)
1147 {
1148         size_t dirsize;
1149         const char *p;
1150         CONF_SECTION *parentcs = cf_top_section(cs);
1151
1152         p = strrchr(parentcs->item.filename, FR_DIR_SEP);
1153         if (!p) return local;
1154
1155         dirsize = (p - parentcs->item.filename) + 1;
1156
1157         if ((dirsize + strlen(local)) >= bufsize) {
1158                 return NULL;
1159         }
1160
1161         memcpy(buffer, parentcs->item.filename, dirsize);
1162         strlcpy(buffer + dirsize, local, bufsize - dirsize);
1163
1164         return buffer;
1165 }
1166
1167
1168 /*
1169  *      Read a part of the config file.
1170  */
1171 static int cf_section_read(const char *filename, int *lineno, FILE *fp,
1172                            CONF_SECTION *current)
1173
1174 {
1175         CONF_SECTION *this, *css;
1176         CONF_PAIR *cpn;
1177         const char *ptr;
1178         const char *value;
1179         char buf[8192];
1180         char buf1[8192];
1181         char buf2[8192];
1182         char buf3[8192];
1183         int t1, t2, t3;
1184         char *cbuf = buf;
1185         size_t len;
1186
1187         this = current;         /* add items here */
1188
1189         /*
1190          *      Read, checking for line continuations ('\\' at EOL)
1191          */
1192         for (;;) {
1193                 int eof;
1194
1195                 /*
1196                  *      Get data, and remember if we are at EOF.
1197                  */
1198                 eof = (fgets(cbuf, sizeof(buf) - (cbuf - buf), fp) == NULL);
1199                 (*lineno)++;
1200
1201                 /*
1202                  *      We read the entire 8k worth of data: complain.
1203                  *      Note that we don't care if the last character
1204                  *      is \n: it's still forbidden.  This means that
1205                  *      the maximum allowed length of text is 8k-1, which
1206                  *      should be plenty.
1207                  */
1208                 len = strlen(cbuf);
1209                 if ((cbuf + len + 1) >= (buf + sizeof(buf))) {
1210                         radlog(L_ERR, "%s[%d]: Line too long",
1211                                filename, *lineno);
1212                         return -1;
1213                 }
1214
1215                 /*
1216                  *      Not doing continuations: check for edge
1217                  *      conditions.
1218                  */
1219                 if (cbuf == buf) {
1220                         if (eof) break;
1221                         
1222                         ptr = buf;
1223                         while (*ptr && isspace((int) *ptr)) ptr++;
1224
1225                         if (!*ptr || (*ptr == '#')) continue;
1226
1227                 } else if (eof || (len == 0)) {
1228                         radlog(L_ERR, "%s[%d]: Continuation at EOF is illegal",
1229                                filename, *lineno);
1230                         return -1;
1231                 }
1232
1233                 /*
1234                  *      See if there's a continuation.
1235                  */
1236                 while ((len > 0) &&
1237                        ((cbuf[len - 1] == '\n') || (cbuf[len - 1] == '\r'))) {
1238                         len--;
1239                         cbuf[len] = '\0';
1240                 }
1241
1242                 if ((len > 0) && (cbuf[len - 1] == '\\')) {
1243                         cbuf[len - 1] = '\0';
1244                         cbuf += len - 1;
1245                         continue;
1246                 }
1247
1248                 ptr = cbuf = buf;
1249                 t1 = gettoken(&ptr, buf1, sizeof(buf1));
1250
1251                 /*
1252                  *      The caller eats "name1 name2 {", and calls us
1253                  *      for the data inside of the section.  So if we
1254                  *      receive a closing brace, then it must mean the
1255                  *      end of the section.
1256                  */
1257                if (t1 == T_RCBRACE) {
1258                        if (this == current) {
1259                                radlog(L_ERR, "%s[%d]: Too many closing braces",
1260                                       filename, *lineno);
1261                                return -1;
1262
1263                        }
1264                        this = this->item.parent;
1265                        continue;
1266                 }
1267
1268                 /*
1269                  *      Allow for $INCLUDE files
1270                  *
1271                  *      This *SHOULD* work for any level include.
1272                  *      I really really really hate this file.  -cparker
1273                  */
1274                if ((strcasecmp(buf1, "$INCLUDE") == 0) ||
1275                    (strcasecmp(buf1, "$-INCLUDE") == 0)) {
1276                        int relative = 1;
1277
1278                         t2 = getword(&ptr, buf2, sizeof(buf2));
1279
1280                         if (buf2[0] == '$') relative = 0;
1281
1282                         value = cf_expand_variables(filename, lineno, this, buf, buf2);
1283                         if (!value) return -1;
1284
1285                         if (!FR_DIR_IS_RELATIVE(value)) relative = 0;
1286
1287                         if (relative) {
1288                                 value = cf_local_file(current, value, buf3,
1289                                                       sizeof(buf3));
1290                                 if (!value) {
1291                                         radlog(L_ERR, "%s[%d]: Directories too deep.",
1292                                                filename, *lineno);
1293                                         return -1;
1294                                 }
1295                         }
1296
1297
1298 #ifdef HAVE_DIRENT_H
1299                         /*
1300                          *      $INCLUDE foo/
1301                          *
1302                          *      Include ALL non-"dot" files in the directory.
1303                          *      careful!
1304                          */
1305                         if (value[strlen(value) - 1] == '/') {
1306                                 DIR             *dir;
1307                                 struct dirent   *dp;
1308                                 struct stat stat_buf;
1309
1310                                 DEBUG2("including files in directory %s", value );
1311                                 dir = opendir(value);
1312                                 if (!dir) {
1313                                         radlog(L_ERR, "%s[%d]: Error reading directory %s: %s",
1314                                                filename, *lineno, value,
1315                                                strerror(errno));
1316                                         return -1;
1317                                 }
1318
1319                                 /*
1320                                  *      Read the directory, ignoring "." files.
1321                                  */
1322                                 while ((dp = readdir(dir)) != NULL) {
1323                                         const char *p;
1324
1325                                         if (dp->d_name[0] == '.') continue;
1326
1327                                         /*
1328                                          *      Check for valid characters
1329                                          */
1330                                         for (p = dp->d_name; *p != '\0'; p++) {
1331                                                 if (isalpha((int)*p) ||
1332                                                     isdigit((int)*p) ||
1333                                                     (*p == '-') ||
1334                                                     (*p == '_') ||
1335                                                     (*p == '.')) continue;
1336                                                 break;
1337                                         }
1338                                         if (*p != '\0') continue;
1339
1340                                         snprintf(buf2, sizeof(buf2), "%s%s",
1341                                                  value, dp->d_name);
1342                                         if ((stat(buf2, &stat_buf) != 0) ||
1343                                             S_ISDIR(stat_buf.st_mode)) continue;
1344                                         /*
1345                                          *      Read the file into the current
1346                                          *      configuration sectoin.
1347                                          */
1348                                         if (cf_file_include(buf2, this) < 0) {
1349                                                 closedir(dir);
1350                                                 return -1;
1351                                         }
1352                                 }
1353                                 closedir(dir);
1354                         }  else
1355 #endif
1356                         { /* it was a normal file */
1357                                 if (buf1[1] == '-') {
1358                                         struct stat statbuf;
1359
1360                                         if (stat(value, &statbuf) < 0) {
1361                                                 DEBUG("WARNING: Not including file %s: %s", value, strerror(errno));
1362                                                 continue;
1363                                         }
1364                                 }
1365
1366                                 if (cf_file_include(value, this) < 0) {
1367                                         return -1;
1368                                 }
1369                         }
1370                         continue;
1371                 } /* we were in an include */
1372
1373                if (strcasecmp(buf1, "$template") == 0) {
1374                        CONF_ITEM *ci;
1375                        CONF_SECTION *parentcs;
1376                        t2 = getword(&ptr, buf2, sizeof(buf2));
1377
1378                        parentcs = cf_top_section(current);
1379
1380                        ci = cf_reference_item(parentcs, this, buf2);
1381                        if (!ci || (ci->type != CONF_ITEM_SECTION)) {
1382                                 radlog(L_ERR, "%s[%d]: Reference \"%s\" not found",
1383                                        filename, *lineno, buf2);
1384                                 return -1;
1385                        }
1386                        
1387                        if (this->template) {
1388                                 radlog(L_ERR, "%s[%d]: Section already has a template",
1389                                        filename, *lineno);
1390                                 return -1;
1391                        }
1392
1393                        this->template = cf_itemtosection(ci);
1394                        continue;
1395                }
1396
1397                 /*
1398                  *      Ensure that the user can't add CONF_PAIRs
1399                  *      with 'internal' names;
1400                  */
1401                 if (buf1[0] == '_') {
1402                         radlog(L_ERR, "%s[%d]: Illegal configuration pair name \"%s\"",
1403                                         filename, *lineno, buf1);
1404                         return -1;
1405                 }
1406
1407                 /*
1408                  *      Grab the next token.
1409                  */
1410                 t2 = gettoken(&ptr, buf2, sizeof(buf2));
1411                 switch (t2) {
1412                 case T_EOL:
1413                 case T_HASH:
1414                         t2 = T_OP_EQ;
1415                         value = NULL;
1416                         goto do_set;
1417
1418                 case T_OP_ADD:
1419                 case T_OP_CMP_EQ:
1420                 case T_OP_SUB:
1421                 case T_OP_LE:
1422                 case T_OP_GE:
1423                         if (!this || (strcmp(this->name1, "update") != 0)) {
1424                                 radlog(L_ERR, "%s[%d]: Invalid operator in assignment",
1425                                        filename, *lineno);
1426                                 return -1;
1427                         }
1428
1429                 case T_OP_EQ:
1430                 case T_OP_SET:
1431                 do_set:
1432                         t3 = getstring(&ptr, buf3, sizeof(buf3));
1433
1434                         /*
1435                          *      Handle variable substitution via ${foo}
1436                          */
1437                         if ((t3 == T_BARE_WORD) ||
1438                             (t3 == T_DOUBLE_QUOTED_STRING)) {
1439                                 value = cf_expand_variables(filename, lineno, this,
1440                                                             buf, buf3);
1441                                 if (!value) return -1;
1442                         } else if ((t3 == T_EOL) ||
1443                                    (t3 == T_HASH)) {
1444                                 value = NULL;
1445                         } else {
1446                                 value = buf3;
1447                         }
1448                         
1449                         /*
1450                          *      Add this CONF_PAIR to our CONF_SECTION
1451                          */
1452                         cpn = cf_pair_alloc(buf1, value, t2, t3, this);
1453                         cpn->item.filename = filename;
1454                         cpn->item.lineno = *lineno;
1455                         cf_item_add(this, cf_pairtoitem(cpn));
1456                         continue;
1457
1458                         /*
1459                          *      This horrible code is here to support
1460                          *      if/then/else failover in the
1461                          *      authorize, etc. sections.  It makes no
1462                          *      sense anywhere else.
1463                          */
1464                 case T_LBRACE:
1465                         if ((strcmp(buf1, "if") == 0) ||
1466                             (strcmp(buf1, "elsif") == 0)) {
1467                                 const char *end = ptr;
1468                                 CONF_SECTION *server;
1469
1470                                 if (!condition_looks_ok(&end)) {
1471                                         radlog(L_ERR, "%s[%d]: Parse error in condition at: %s",
1472                                                filename, *lineno, ptr);
1473                                         return -1;
1474                                 }
1475
1476                                 if ((size_t) (end - ptr) >= (sizeof(buf2) - 1)) {
1477                                         radlog(L_ERR, "%s[%d]: Statement too complicated after \"%s\"",
1478                                                filename, *lineno, buf1);
1479                                         return -1;
1480                                 }
1481
1482                                 /*
1483                                  *      More sanity checking.  This is
1484                                  *      getting to be a horrible hack.
1485                                  */
1486                                 server = this;
1487                                 while (server) {
1488                                         if (strcmp(server->name1, "server") == 0) break;
1489                                         server = server->item.parent;
1490                                 }
1491                                 
1492                                 if (0 && !server) {
1493                                         radlog(L_ERR, "%s[%d]: Processing directives such as \"%s\" cannot be used here.",
1494                                                filename, *lineno, buf1);
1495                                         return -1;
1496                                 }
1497
1498                                 buf2[0] = '(';
1499                                 memcpy(buf2 + 1, ptr, end - ptr);
1500                                 buf2[end - ptr + 1] = '\0';
1501                                 ptr = end + 1;
1502                                 t2 = T_BARE_WORD;
1503                                 goto section_alloc;
1504
1505                         } else {
1506                                 radlog(L_ERR, "%s[%d]: Parse error after \"%s\"",
1507                                        filename, *lineno, buf1);
1508                                 return -1;
1509                         }
1510
1511                         /* FALL-THROUGH */
1512
1513                         /*
1514                          *      No '=', must be a section or sub-section.
1515                          */
1516                 case T_BARE_WORD:
1517                 case T_DOUBLE_QUOTED_STRING:
1518                 case T_SINGLE_QUOTED_STRING:
1519                         t3 = gettoken(&ptr, buf3, sizeof(buf3));
1520                         if (t3 != T_LCBRACE) {
1521                                 radlog(L_ERR, "%s[%d]: Expecting section start brace '{' after \"%s %s\"",
1522                                        filename, *lineno, buf1, buf2);
1523                                 return -1;
1524                         }
1525
1526                 case T_LCBRACE:
1527                 section_alloc:
1528                         css = cf_section_alloc(buf1,
1529                                                t2 == T_LCBRACE ? NULL : buf2,
1530                                                this);
1531                         if (!css) {
1532                                 radlog(L_ERR, "%s[%d]: Failed allocating memory for section",
1533                                                 filename, *lineno);
1534                                 return -1;
1535                         }
1536                         cf_item_add(this, cf_sectiontoitem(css));
1537                         css->item.filename = filename;
1538                         css->item.lineno = *lineno;
1539
1540                         /*
1541                          *      The current section is now the child section.
1542                          */
1543                         this = css;
1544                         continue;
1545
1546                 default:
1547                         radlog(L_ERR, "%s[%d]: Parse error after \"%s\"",
1548                                filename, *lineno, buf1);
1549                         return -1;
1550                 }
1551         }
1552
1553         /*
1554          *      See if EOF was unexpected ..
1555          */
1556         if (feof(fp) && (this != current)) {
1557                 radlog(L_ERR, "%s[%d]: EOF reached without closing brace for section %s starting at line %d",
1558                        filename, *lineno,
1559                        cf_section_name1(this), cf_section_lineno(this));
1560                 return -1;
1561         }
1562
1563         return 0;
1564 }
1565
1566 /*
1567  *      Include one config file in another.
1568  */
1569 int cf_file_include(const char *filename, CONF_SECTION *cs)
1570 {
1571         FILE            *fp;
1572         int             lineno = 0;
1573         struct stat     statbuf;
1574         time_t          *mtime;
1575         CONF_DATA       *cd;
1576
1577         DEBUG2( "including configuration file %s", filename);
1578
1579         if (stat(filename, &statbuf) == 0) {
1580 #ifdef S_IWOTH
1581                 if ((statbuf.st_mode & S_IWOTH) != 0) {
1582                         radlog(L_ERR|L_CONS, "Configuration file %s is globally writable.  Refusing to start due to insecure configuration.",
1583                                filename);
1584                         return -1;
1585                 }
1586 #endif
1587
1588 #ifdef S_IROTH
1589                 if (0 && (statbuf.st_mode & S_IROTH) != 0) {
1590                         radlog(L_ERR|L_CONS, "Configuration file %s is globally readable.  Refusing to start due to insecure configuration.",
1591                                filename);
1592                         return -1;
1593                 }
1594 #endif
1595         }
1596
1597         fp = fopen(filename, "r");
1598         if (!fp) {
1599                 radlog(L_ERR|L_CONS, "Unable to open file \"%s\": %s",
1600                        filename, strerror(errno));
1601                 return -1;
1602         }
1603
1604         /*
1605          *      Add the filename to the section
1606          */
1607         mtime = rad_malloc(sizeof(*mtime));
1608         *mtime = statbuf.st_mtime;
1609
1610         if (cf_data_add_internal(cs, filename, mtime, free,
1611                                  PW_TYPE_FILENAME) < 0) {
1612                 radlog(L_ERR|L_CONS, "Internal error open file \"%s\"",
1613                        filename);
1614                 return -1;
1615         }
1616
1617         cd = cf_data_find_internal(cs, filename, PW_TYPE_FILENAME);
1618         if (!cd) {
1619                 radlog(L_ERR|L_CONS, "Internal error open file \"%s\"",
1620                        filename);
1621                 return -1;
1622         }
1623
1624         if (!cs->item.filename) cs->item.filename = filename;
1625
1626         /*
1627          *      Read the section.  It's OK to have EOF without a
1628          *      matching close brace.
1629          */
1630         if (cf_section_read(cd->name, &lineno, fp, cs) < 0) {
1631                 fclose(fp);
1632                 return -1;
1633         }
1634
1635         fclose(fp);
1636         return 0;
1637 }
1638
1639 /*
1640  *      Bootstrap a config file.
1641  */
1642 CONF_SECTION *cf_file_read(const char *filename)
1643 {
1644         char *p;
1645         CONF_PAIR *cp;
1646         CONF_SECTION *cs;
1647
1648         cs = cf_section_alloc("main", NULL, NULL);
1649         if (!cs) return NULL;
1650
1651         cp = cf_pair_alloc("confdir", filename, T_OP_SET, T_BARE_WORD, cs);
1652         if (!cp) return NULL;
1653
1654         p = strrchr(cp->value, FR_DIR_SEP);
1655         if (p) *p = '\0';
1656
1657         cp->item.filename = "internal";
1658         cp->item.lineno = 0;
1659         cf_item_add(cs, cf_pairtoitem(cp));
1660
1661         if (cf_file_include(filename, cs) < 0) {
1662                 cf_section_free(&cs);
1663                 return NULL;
1664         }
1665
1666         return cs;
1667 }
1668
1669 /*
1670  * Return a CONF_PAIR within a CONF_SECTION.
1671  */
1672 CONF_PAIR *cf_pair_find(const CONF_SECTION *cs, const char *name)
1673 {
1674         CONF_ITEM       *ci;
1675         CONF_PAIR       *cp = NULL;
1676
1677         if (!cs) return NULL;
1678
1679         /*
1680          *      Find the name in the tree, for speed.
1681          */
1682         if (name) {
1683                 CONF_PAIR mycp;
1684
1685                 mycp.attr = name;
1686                 cp = rbtree_finddata(cs->pair_tree, &mycp);
1687         } else {
1688                 /*
1689                  *      Else find the first one that matches
1690                  */
1691                 for (ci = cs->children; ci; ci = ci->next) {
1692                         if (ci->type == CONF_ITEM_PAIR) {
1693                                 return cf_itemtopair(ci);
1694                         }
1695                 }
1696         }
1697
1698         if (cp || !cs->template) return cp;
1699
1700         return cf_pair_find(cs->template, name);
1701 }
1702
1703 /*
1704  * Return the attr of a CONF_PAIR
1705  */
1706
1707 const char *cf_pair_attr(CONF_PAIR *pair)
1708 {
1709         return (pair ? pair->attr : NULL);
1710 }
1711
1712 /*
1713  * Return the value of a CONF_PAIR
1714  */
1715
1716 const char *cf_pair_value(CONF_PAIR *pair)
1717 {
1718         return (pair ? pair->value : NULL);
1719 }
1720
1721 /*
1722  *      Copied here for error reporting.
1723  */
1724 extern void librad_log(const char *, ...);
1725
1726 /*
1727  * Turn a CONF_PAIR into a VALUE_PAIR
1728  * For now, ignore the "value_type" field...
1729  */
1730 VALUE_PAIR *cf_pairtovp(CONF_PAIR *pair)
1731 {
1732         DICT_ATTR *da;
1733         VALUE_PAIR *vp;
1734
1735         if (!pair) {
1736                 librad_log("Internal error");
1737                 return NULL;
1738         }
1739
1740         da = dict_attrbyname(pair->attr);
1741         if (!da) {
1742                 librad_log("Unknown attribute %s", pair->attr);
1743                 return NULL;
1744         }
1745
1746         if (!pair->value) {
1747                 librad_log("No value given for attribute %s", pair->attr);
1748                 return NULL;
1749         }
1750
1751         vp = pairalloc(da);
1752         if (!vp) {
1753                 librad_log("Out of memory");
1754                 return NULL;
1755         }
1756
1757         vp->operator = pair->operator;
1758
1759         if ((pair->value_type == T_BARE_WORD) ||
1760             (pair->value_type == T_SINGLE_QUOTED_STRING)) {
1761                 if (!pairparsevalue(vp, pair->value)) {
1762                         pairfree(&vp);
1763                         return NULL;
1764                 }
1765                 vp->flags.do_xlat = 0;
1766         } else {
1767                 vp->flags.do_xlat = 1;
1768         }
1769
1770         return vp;
1771 }
1772
1773 /*
1774  * Return the first label of a CONF_SECTION
1775  */
1776
1777 const char *cf_section_name1(const CONF_SECTION *cs)
1778 {
1779         return (cs ? cs->name1 : NULL);
1780 }
1781
1782 /*
1783  * Return the second label of a CONF_SECTION
1784  */
1785
1786 const char *cf_section_name2(const CONF_SECTION *cs)
1787 {
1788         return (cs ? cs->name2 : NULL);
1789 }
1790
1791 /*
1792  * Find a value in a CONF_SECTION
1793  */
1794 const char *cf_section_value_find(const CONF_SECTION *cs, const char *attr)
1795 {
1796         CONF_PAIR       *cp;
1797
1798         cp = cf_pair_find(cs, attr);
1799
1800         return (cp ? cp->value : NULL);
1801 }
1802
1803 /*
1804  * Return the next pair after a CONF_PAIR
1805  * with a certain name (char *attr) If the requested
1806  * attr is NULL, any attr matches.
1807  */
1808
1809 CONF_PAIR *cf_pair_find_next(const CONF_SECTION *cs,
1810                              CONF_PAIR *pair, const char *attr)
1811 {
1812         CONF_ITEM       *ci;
1813
1814         /*
1815          * If pair is NULL this must be a first time run
1816          * Find the pair with correct name
1817          */
1818
1819         if (pair == NULL){
1820                 return cf_pair_find(cs, attr);
1821         }
1822
1823         ci = cf_pairtoitem(pair)->next;
1824
1825         for (; ci; ci = ci->next) {
1826                 if (ci->type != CONF_ITEM_PAIR)
1827                         continue;
1828                 if (attr == NULL || strcmp(cf_itemtopair(ci)->attr, attr) == 0)
1829                         break;
1830         }
1831
1832         return cf_itemtopair(ci);
1833 }
1834
1835 /*
1836  * Find a CONF_SECTION, or return the root if name is NULL
1837  */
1838
1839 CONF_SECTION *cf_section_find(const char *name)
1840 {
1841         if (name)
1842                 return cf_section_sub_find(mainconfig.config, name);
1843         else
1844                 return mainconfig.config;
1845 }
1846
1847 /*
1848  * Find a sub-section in a section
1849  */
1850
1851 CONF_SECTION *cf_section_sub_find(const CONF_SECTION *cs, const char *name)
1852 {
1853         CONF_ITEM *ci;
1854
1855         /*
1856          *      Do the fast lookup if possible.
1857          */
1858         if (name && cs->section_tree) {
1859                 CONF_SECTION mycs;
1860
1861                 mycs.name1 = name;
1862                 mycs.name2 = NULL;
1863                 return rbtree_finddata(cs->section_tree, &mycs);
1864         }
1865
1866         for (ci = cs->children; ci; ci = ci->next) {
1867                 if (ci->type != CONF_ITEM_SECTION)
1868                         continue;
1869                 if (strcmp(cf_itemtosection(ci)->name1, name) == 0)
1870                         break;
1871         }
1872
1873         return cf_itemtosection(ci);
1874
1875 }
1876
1877
1878 /*
1879  *      Find a CONF_SECTION with both names.
1880  */
1881 CONF_SECTION *cf_section_sub_find_name2(const CONF_SECTION *cs,
1882                                         const char *name1, const char *name2)
1883 {
1884         CONF_ITEM    *ci;
1885
1886         if (!cs) cs = mainconfig.config;
1887
1888         if (name1 && (cs->section_tree)) {
1889                 CONF_SECTION mycs, *master_cs;
1890
1891                 mycs.name1 = name1;
1892                 mycs.name2 = name2;
1893
1894                 master_cs = rbtree_finddata(cs->section_tree, &mycs);
1895                 if (master_cs) {
1896                         return rbtree_finddata(master_cs->name2_tree, &mycs);
1897                 }
1898         }
1899
1900         /*
1901          *      Else do it the old-fashioned way.
1902          */
1903         for (ci = cs->children; ci; ci = ci->next) {
1904                 CONF_SECTION *subcs;
1905
1906                 if (ci->type != CONF_ITEM_SECTION)
1907                         continue;
1908
1909                 subcs = cf_itemtosection(ci);
1910                 if (!name1) {
1911                         if (!subcs->name2) {
1912                                 if (strcmp(subcs->name1, name2) == 0) break;
1913                         } else {
1914                                 if (strcmp(subcs->name2, name2) == 0) break;
1915                         }
1916                         continue; /* don't do the string comparisons below */
1917                 }
1918
1919                 if ((strcmp(subcs->name1, name1) == 0) &&
1920                     (subcs->name2 != NULL) &&
1921                     (strcmp(subcs->name2, name2) == 0))
1922                         break;
1923         }
1924
1925         return cf_itemtosection(ci);
1926 }
1927
1928 /*
1929  * Return the next subsection after a CONF_SECTION
1930  * with a certain name1 (char *name1). If the requested
1931  * name1 is NULL, any name1 matches.
1932  */
1933
1934 CONF_SECTION *cf_subsection_find_next(CONF_SECTION *section,
1935                                       CONF_SECTION *subsection,
1936                                       const char *name1)
1937 {
1938         CONF_ITEM       *ci;
1939
1940         /*
1941          * If subsection is NULL this must be a first time run
1942          * Find the subsection with correct name
1943          */
1944
1945         if (subsection == NULL){
1946                 ci = section->children;
1947         } else {
1948                 ci = cf_sectiontoitem(subsection)->next;
1949         }
1950
1951         for (; ci; ci = ci->next) {
1952                 if (ci->type != CONF_ITEM_SECTION)
1953                         continue;
1954                 if ((name1 == NULL) ||
1955                     (strcmp(cf_itemtosection(ci)->name1, name1) == 0))
1956                         break;
1957         }
1958
1959         return cf_itemtosection(ci);
1960 }
1961
1962
1963 /*
1964  * Return the next section after a CONF_SECTION
1965  * with a certain name1 (char *name1). If the requested
1966  * name1 is NULL, any name1 matches.
1967  */
1968
1969 CONF_SECTION *cf_section_find_next(CONF_SECTION *section,
1970                                    CONF_SECTION *subsection,
1971                                    const char *name1)
1972 {
1973         if (!section->item.parent) return NULL;
1974
1975         return cf_subsection_find_next(section->item.parent, subsection, name1);
1976 }
1977
1978 /*
1979  * Return the next item after a CONF_ITEM.
1980  */
1981
1982 CONF_ITEM *cf_item_find_next(CONF_SECTION *section, CONF_ITEM *item)
1983 {
1984         /*
1985          * If item is NULL this must be a first time run
1986          * Return the first item
1987          */
1988
1989         if (item == NULL) {
1990                 return section->children;
1991         } else {
1992                 return item->next;
1993         }
1994 }
1995
1996 int cf_section_lineno(CONF_SECTION *section)
1997 {
1998         return cf_sectiontoitem(section)->lineno;
1999 }
2000
2001 const char *cf_pair_filename(CONF_PAIR *pair)
2002 {
2003         return cf_pairtoitem(pair)->filename;
2004 }
2005
2006 const char *cf_section_filename(CONF_SECTION *section)
2007 {
2008         return cf_sectiontoitem(section)->filename;
2009 }
2010
2011 int cf_pair_lineno(CONF_PAIR *pair)
2012 {
2013         return cf_pairtoitem(pair)->lineno;
2014 }
2015
2016 int cf_item_is_section(CONF_ITEM *item)
2017 {
2018         return item->type == CONF_ITEM_SECTION;
2019 }
2020 int cf_item_is_pair(CONF_ITEM *item)
2021 {
2022         return item->type == CONF_ITEM_PAIR;
2023 }
2024
2025
2026 static CONF_DATA *cf_data_alloc(CONF_SECTION *parent, const char *name,
2027                                 void *data, void (*data_free)(void *))
2028 {
2029         char *p;
2030         size_t name_len;
2031         CONF_DATA *cd;
2032
2033         name_len = strlen(name) + 1;
2034
2035         p = rad_malloc(sizeof(*cd) + name_len);
2036         cd = (CONF_DATA *) p;
2037         memset(cd, 0, sizeof(*cd));
2038
2039         cd->item.type = CONF_ITEM_DATA;
2040         cd->item.parent = parent;
2041         cd->data = data;
2042         cd->free = data_free;
2043
2044         p += sizeof(*cd);
2045         memcpy(p, name, name_len);
2046         cd->name = p;
2047         return cd;
2048 }
2049
2050
2051 static void *cf_data_find_internal(CONF_SECTION *cs, const char *name,
2052                                    int flag)
2053 {
2054         if (!cs || !name) return NULL;
2055
2056         /*
2057          *      Find the name in the tree, for speed.
2058          */
2059         if (cs->data_tree) {
2060                 CONF_DATA mycd;
2061
2062                 mycd.name = name;
2063                 mycd.flag = flag;
2064                 return rbtree_finddata(cs->data_tree, &mycd);
2065         }
2066
2067         return NULL;
2068 }
2069
2070 /*
2071  *      Find data from a particular section.
2072  */
2073 void *cf_data_find(CONF_SECTION *cs, const char *name)
2074 {
2075         CONF_DATA *cd = cf_data_find_internal(cs, name, 0);
2076
2077         if (cd) return cd->data;
2078         return NULL;
2079 }
2080
2081
2082 /*
2083  *      Add named data to a configuration section.
2084  */
2085 static int cf_data_add_internal(CONF_SECTION *cs, const char *name,
2086                                 void *data, void (*data_free)(void *),
2087                                 int flag)
2088 {
2089         CONF_DATA *cd;
2090
2091         if (!cs || !name) return -1;
2092
2093         /*
2094          *      Already exists.  Can't add it.
2095          */
2096         if (cf_data_find_internal(cs, name, flag) != NULL) return -1;
2097
2098         cd = cf_data_alloc(cs, name, data, data_free);
2099         if (!cd) return -1;
2100         cd->flag = flag;
2101
2102         cf_item_add(cs, cf_datatoitem(cd));
2103
2104         return 0;
2105 }
2106
2107 /*
2108  *      Add named data to a configuration section.
2109  */
2110 int cf_data_add(CONF_SECTION *cs, const char *name,
2111                 void *data, void (*data_free)(void *))
2112 {
2113         return cf_data_add_internal(cs, name, data, data_free, 0);
2114 }
2115
2116
2117 /*
2118  *      Copy CONF_DATA from src to dst
2119  */
2120 static void cf_section_copy_data(CONF_SECTION *s, CONF_SECTION *d)
2121 {
2122
2123         CONF_ITEM *cd, *next, **last;
2124
2125         /*
2126          *      Don't check if s->data_tree is NULL.  It's child
2127          *      sections may have data, even if this section doesn't.
2128          */
2129
2130         rad_assert(d->data_tree == NULL);
2131         d->data_tree = s->data_tree;
2132         s->data_tree = NULL;
2133
2134         /*
2135          *      Walk through src, moving CONF_ITEM_DATA
2136          *      to dst, by hand.
2137          */
2138         last = &(s->children);
2139         for (cd = s->children; cd != NULL; cd = next) {
2140                 next = cd->next;
2141
2142                 /*
2143                  *      Recursively copy data from child sections.
2144                  */
2145                 if (cd->type == CONF_ITEM_SECTION) {
2146                         CONF_SECTION *s1, *d1;
2147
2148                         s1 = cf_itemtosection(cd);
2149                         d1 = cf_section_sub_find_name2(d, s1->name1, s1->name2);
2150                         if (d1) {
2151                                 cf_section_copy_data(s1, d1);
2152                         }
2153                         last = &(cd->next);
2154                         continue;
2155                 }
2156
2157                 /*
2158                  *      Not conf data, remember last ptr.
2159                  */
2160                 if (cd->type != CONF_ITEM_DATA) {
2161                         last = &(cd->next);
2162                         continue;
2163                 }
2164
2165                 /*
2166                  *      Remove it from the src list
2167                  */
2168                 *last = cd->next;
2169                 cd->next = NULL;
2170
2171                 /*
2172                  *      Add it to the dst list
2173                  */
2174                 if (!d->children) {
2175                         rad_assert(d->tail == NULL);
2176                         d->children = cd;
2177                 } else {
2178                         rad_assert(d->tail != NULL);
2179                         d->tail->next = cd;
2180                 }
2181                 d->tail = cd;
2182         }
2183 }
2184
2185 /*
2186  *      For a CONF_DATA element, stat the filename, if necessary.
2187  */
2188 static int filename_stat(void *context, void *data)
2189 {
2190         struct stat buf;
2191         CONF_DATA *cd = data;
2192
2193         context = context;      /* -Wunused */
2194
2195         if (cd->flag != PW_TYPE_FILENAME) return 0;
2196
2197         if (stat(cd->name, &buf) < 0) return -1;
2198
2199         if (buf.st_mtime != *(time_t *) cd->data) return -1;
2200
2201         return 0;
2202 }
2203
2204
2205 /*
2206  *      Compare two CONF_SECTIONS.  The items MUST be in the same
2207  *      order.
2208  */
2209 static int cf_section_cmp(CONF_SECTION *a, CONF_SECTION *b)
2210 {
2211         CONF_ITEM *ca = a->children;
2212         CONF_ITEM *cb = b->children;
2213
2214         while (1) {
2215                 CONF_PAIR *pa, *pb;
2216
2217                 /*
2218                  *      Done.  Stop.
2219                  */
2220                 if (!ca && !cb) break;
2221
2222                 /*
2223                  *      Skip CONF_DATA.
2224                  */
2225                 if (ca && ca->type == CONF_ITEM_DATA) {
2226                         ca = ca->next;
2227                         continue;
2228                 }
2229                 if (cb && cb->type == CONF_ITEM_DATA) {
2230                         cb = cb->next;
2231                         continue;
2232                 }
2233
2234                 /*
2235                  *      One is smaller than the other.  Exit.
2236                  */
2237                 if (!ca || !cb) return 0;
2238
2239                 if (ca->type != cb->type) return 0;
2240
2241                 /*
2242                  *      Deal with subsections.
2243                  */
2244                 if (ca->type == CONF_ITEM_SECTION) {
2245                         CONF_SECTION *sa = cf_itemtosection(ca);
2246                         CONF_SECTION *sb = cf_itemtosection(cb);
2247
2248                         if (!cf_section_cmp(sa, sb)) return 0;
2249                         goto next;
2250                 }
2251
2252                 rad_assert(ca->type == CONF_ITEM_PAIR);
2253
2254                 pa = cf_itemtopair(ca);
2255                 pb = cf_itemtopair(cb);
2256
2257                 /*
2258                  *      Different attr and/or value, Exit.
2259                  */
2260                 if ((strcmp(pa->attr, pb->attr) != 0) ||
2261                     (strcmp(pa->value, pb->value) != 0)) return 0;
2262
2263
2264                 /*
2265                  *      And go to the next element.
2266                  */
2267         next:
2268                 ca = ca->next;
2269                 cb = cb->next;
2270         }
2271
2272         /*
2273          *      Walk over the CONF_DATA, stat'ing PW_TYPE_FILENAME.
2274          */
2275         if (a->data_tree &&
2276             (rbtree_walk(a->data_tree, InOrder, filename_stat, NULL) != 0)) {
2277                 return 0;
2278         }
2279
2280         /*
2281          *      They must be the same, say so.
2282          */
2283         return 1;
2284 }
2285
2286
2287 /*
2288  *      Migrate CONF_DATA from one section to another.
2289  */
2290 int cf_section_migrate(CONF_SECTION *dst, CONF_SECTION *src)
2291 {
2292         CONF_ITEM *ci;
2293         CONF_SECTION *s, *d;
2294
2295         for (ci = src->children; ci != NULL; ci = ci->next) {
2296                 if (ci->type != CONF_ITEM_SECTION)
2297                         continue;
2298
2299                 s = cf_itemtosection(ci);
2300                 d = cf_section_sub_find_name2(dst, s->name1, s->name2);
2301
2302                 if (!d) continue; /* not in new one, don't migrate it */
2303
2304                 /*
2305                  *      A section of the same name is in BOTH src & dst,
2306                  *      compare the CONF_PAIR's.  If they're all the same,
2307                  *      then copy the CONF_DATA from one to the other.
2308                  */
2309                 if (cf_section_cmp(s, d)) {
2310                         cf_section_copy_data(s, d);
2311                 }
2312         }
2313
2314         return 1;               /* rcode means anything? */
2315 }
2316
2317 int cf_section_template(CONF_SECTION *cs, CONF_SECTION *template)
2318 {
2319         if (!cs || !template || cs->template || template->template) return -1;
2320
2321         cs->template = template;
2322
2323         return 0;
2324 }
2325
2326
2327 /*
2328  *      This is here to make the rest of the code easier to read.  It
2329  *      ties conffile.c to log.c, but it means we don't have to
2330  *      pollute every other function with the knowledge of the
2331  *      configuration internals.
2332  */
2333 void cf_log_err(CONF_ITEM *ci, const char *fmt, ...)
2334 {
2335         va_list ap;
2336         char buffer[256];
2337
2338         va_start(ap, fmt);
2339         vsnprintf(buffer, sizeof(buffer), fmt, ap);
2340         va_end(ap);
2341
2342         radlog(L_ERR, "%s[%d]: %s", ci->filename, ci->lineno, buffer);
2343 }
2344
2345
2346 void cf_log_info(UNUSED CONF_SECTION *cs, const char *fmt, ...)
2347 {
2348         va_list ap;
2349
2350         va_start(ap, fmt);
2351         if (debug_flag > 1 && cf_log_config) vradlog(L_DBG, fmt, ap);
2352         va_end(ap);
2353 }
2354
2355 /*
2356  *      Wrapper to simplify the code.
2357  */
2358 void cf_log_module(UNUSED CONF_SECTION *cs, const char *fmt, ...)
2359 {
2360         va_list ap;
2361         char buffer[256];
2362
2363         va_start(ap, fmt);
2364         if (debug_flag > 1 && cf_log_modules) {
2365                 vsnprintf(buffer, sizeof(buffer), fmt, ap);
2366
2367                 radlog(L_DBG, " Module: %s", buffer);
2368         }
2369         va_end(ap);
2370 }
2371
2372
2373 #if 0
2374 /*
2375  * JMG dump_config tries to dump the config structure in a readable format
2376  *
2377 */
2378
2379 static int dump_config_section(CONF_SECTION *cs, int indent)
2380 {
2381         CONF_SECTION    *scs;
2382         CONF_PAIR       *cp;
2383         CONF_ITEM       *ci;
2384
2385         /* The DEBUG macro doesn't let me
2386          *   for(i=0;i<indent;++i) debugputchar('\t');
2387          * so I had to get creative. --Pac. */
2388
2389         for (ci = cs->children; ci; ci = ci->next) {
2390                 switch (ci->type) {
2391                 case CONF_ITEM_PAIR:
2392                         cp=cf_itemtopair(ci);
2393                         DEBUG("%.*s%s = %s",
2394                                 indent, "\t\t\t\t\t\t\t\t\t\t\t",
2395                                 cp->attr, cp->value);
2396                         break;
2397
2398                 case CONF_ITEM_SECTION:
2399                         scs=cf_itemtosection(ci);
2400                         DEBUG("%.*s%s %s%s{",
2401                                 indent, "\t\t\t\t\t\t\t\t\t\t\t",
2402                                 scs->name1,
2403                                 scs->name2 ? scs->name2 : "",
2404                                 scs->name2 ?  " " : "");
2405                         dump_config_section(scs, indent+1);
2406                         DEBUG("%.*s}",
2407                                 indent, "\t\t\t\t\t\t\t\t\t\t\t");
2408                         break;
2409
2410                 default:        /* FIXME: Do more! */
2411                         break;
2412                 }
2413         }
2414
2415         return 0;
2416 }
2417
2418 int dump_config(CONF_SECTION *cs)
2419 {
2420         return dump_config_section(cs, 0);
2421 }
2422 #endif