Use new getstring() function to parse conf_pair's
[freeradius.git] / src / main / conffile.c
1 /*
2  * conffile.c   Read the radiusd.conf file.
3  *
4  *              Yep I should learn to use lex & yacc, or at least
5  *              write a decent parser. I know how to do that, really :)
6  *              miquels@cistron.nl
7  *
8  * Version:     $Id$
9  *
10  *   This program is free software; you can redistribute it and/or modify
11  *   it under the terms of the GNU General Public License as published by
12  *   the Free Software Foundation; either version 2 of the License, or
13  *   (at your option) any later version.
14  *
15  *   This program is distributed in the hope that it will be useful,
16  *   but WITHOUT ANY WARRANTY; without even the implied warranty of
17  *   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
18  *   GNU General Public License for more details.
19  *
20  *   You should have received a copy of the GNU General Public License
21  *   along with this program; if not, write to the Free Software
22  *   Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
23  *
24  * Copyright 2000,2006  The FreeRADIUS server project
25  * Copyright 2000  Miquel van Smoorenburg <miquels@cistron.nl>
26  * Copyright 2000  Alan DeKok <aland@ox.org>
27  */
28
29 #include <freeradius-devel/ident.h>
30 RCSID("$Id$")
31
32 #include <freeradius-devel/radiusd.h>
33 #include <freeradius-devel/rad_assert.h>
34
35 #ifdef HAVE_DIRENT_H
36 #include <dirent.h>
37
38 #ifdef HAVE_SYS_STAT_H
39 #include <sys/stat.h>
40 #endif
41 #endif
42
43 #include <ctype.h>
44
45 typedef enum conf_type {
46         CONF_ITEM_INVALID = 0,
47         CONF_ITEM_PAIR,
48         CONF_ITEM_SECTION,
49         CONF_ITEM_DATA
50 } CONF_ITEM_TYPE;
51
52 struct conf_item {
53         struct conf_item *next;
54         struct conf_part *parent;
55         int lineno;
56         CONF_ITEM_TYPE type;
57 };
58 struct conf_pair {
59         CONF_ITEM item;
60         char *attr;
61         char *value;
62         LRAD_TOKEN operator;
63         LRAD_TOKEN value_type;
64 };
65 struct conf_part {
66         CONF_ITEM item;
67         const char *name1;
68         const char *name2;
69         struct conf_item *children;
70         struct conf_item *tail; /* for speed */
71         CONF_SECTION    *template;
72         rbtree_t        *pair_tree; /* and a partridge.. */
73         rbtree_t        *section_tree; /* no jokes here */
74         rbtree_t        *name2_tree; /* for sections of the same name2 */
75         rbtree_t        *data_tree;
76         void            *base;
77         int depth;
78         const CONF_PARSER *variables;
79 };
80
81
82 /*
83  *      Internal data that is associated with a configuration section,
84  *      so that we don't have to track it separately.
85  */
86 struct conf_data {
87         CONF_ITEM  item;
88         const char *name;
89         int        flag;
90         void       *data;       /* user data */
91         void       (*free)(void *); /* free user data function */
92 };
93
94
95 static int cf_data_add_internal(CONF_SECTION *cs, const char *name,
96                                 void *data, void (*data_free)(void *),
97                                 int flag);
98 static void *cf_data_find_internal(CONF_SECTION *cs, const char *name,
99                                    int flag);
100
101 /*
102  *      Isolate the scary casts in these tiny provably-safe functions
103  */
104 CONF_PAIR *cf_itemtopair(CONF_ITEM *ci)
105 {
106         if (ci == NULL)
107                 return NULL;
108         rad_assert(ci->type == CONF_ITEM_PAIR);
109         return (CONF_PAIR *)ci;
110 }
111 CONF_SECTION *cf_itemtosection(CONF_ITEM *ci)
112 {
113         if (ci == NULL)
114                 return NULL;
115         rad_assert(ci->type == CONF_ITEM_SECTION);
116         return (CONF_SECTION *)ci;
117 }
118 CONF_ITEM *cf_pairtoitem(CONF_PAIR *cp)
119 {
120         if (cp == NULL)
121                 return NULL;
122         return (CONF_ITEM *)cp;
123 }
124 CONF_ITEM *cf_sectiontoitem(CONF_SECTION *cs)
125 {
126         if (cs == NULL)
127                 return NULL;
128         return (CONF_ITEM *)cs;
129 }
130
131 static CONF_DATA *cf_itemtodata(CONF_ITEM *ci)
132 {
133         if (ci == NULL)
134                 return NULL;
135         rad_assert(ci->type == CONF_ITEM_DATA);
136         return (CONF_DATA *)ci;
137 }
138 static CONF_ITEM *cf_datatoitem(CONF_DATA *cd)
139 {
140         if (cd == NULL)
141                 return NULL;
142         return (CONF_ITEM *)cd;
143 }
144
145 /*
146  *      Create a new CONF_PAIR
147  */
148 static CONF_PAIR *cf_pair_alloc(const char *attr, const char *value,
149                                 LRAD_TOKEN operator, LRAD_TOKEN value_type,
150                                 CONF_SECTION *parent)
151 {
152         CONF_PAIR *cp;
153
154         cp = rad_malloc(sizeof(*cp));
155         memset(cp, 0, sizeof(*cp));
156         cp->item.type = CONF_ITEM_PAIR;
157         cp->item.parent = parent;
158         cp->attr = strdup(attr);
159         cp->value = strdup(value);
160         cp->value_type = value_type;
161         cp->operator = operator;
162
163         return cp;
164 }
165
166 /*
167  *      Free a CONF_PAIR
168  */
169 void cf_pair_free(CONF_PAIR **cp)
170 {
171         if (!cp || !*cp) return;
172
173         if ((*cp)->attr)
174                 free((*cp)->attr);
175         if ((*cp)->value)
176                 free((*cp)->value);
177
178 #ifndef NDEBUG
179         memset(*cp, 0, sizeof(*cp));
180 #endif
181         free(*cp);
182
183         *cp = NULL;
184 }
185
186
187 static void cf_data_free(CONF_DATA **cd)
188 {
189         if (!cd || !*cd) return;
190
191         if ((*cd)->flag != 0) free((*cd)->name);
192         if (!(*cd)->free) {
193                 free((*cd)->data);
194         } else {
195                 ((*cd)->free)((*cd)->data);
196         }
197 #ifndef NDEBUG
198         memset(*cd, 0, sizeof(*cd));
199 #endif
200         free(*cd);
201         *cd = NULL;
202 }
203
204 /*
205  *      rbtree callback function
206  */
207 static int pair_cmp(const void *a, const void *b)
208 {
209         const CONF_PAIR *one = a;
210         const CONF_PAIR *two = b;
211
212         return strcmp(one->attr, two->attr);
213 }
214
215
216 /*
217  *      rbtree callback function
218  */
219 static int section_cmp(const void *a, const void *b)
220 {
221         const CONF_SECTION *one = a;
222         const CONF_SECTION *two = b;
223
224         return strcmp(one->name1, two->name1);
225 }
226
227
228 /*
229  *      rbtree callback function
230  */
231 static int name2_cmp(const void *a, const void *b)
232 {
233         const CONF_SECTION *one = a;
234         const CONF_SECTION *two = b;
235
236         rad_assert(strcmp(one->name1, two->name1) == 0);
237
238         if (!one->name2 && !two->name2) return 0;
239         if (!one->name2) return -1;
240         if (!two->name2) return +1;
241
242         return strcmp(one->name2, two->name2);
243 }
244
245
246 /*
247  *      rbtree callback function
248  */
249 static int data_cmp(const void *a, const void *b)
250 {
251         int rcode;
252
253         const CONF_DATA *one = a;
254         const CONF_DATA *two = b;
255
256         rcode = one->flag - two->flag;
257         if (rcode != 0) return rcode;
258
259         return strcmp(one->name, two->name);
260 }
261
262
263 /*
264  *      Free strings we've parsed into data structures.
265  */
266 static void cf_section_parse_free(void *base, const CONF_PARSER *variables)
267 {
268         int i;
269
270         /*
271          *      Don't automatically free the strings if we're being
272          *      called from a module.  This is also for clients.c,
273          *      where client_free() expects to be able to free the
274          *      client structure.  If we moved everything to key off
275          *      of the config files, we might solve some problems...
276          */
277         if (!variables) return;
278
279         /*
280          *      Free up dynamically allocated string pointers.
281          */
282         for (i = 0; variables[i].name != NULL; i++) {
283                 char **p;
284
285                 if ((variables[i].type != PW_TYPE_STRING_PTR) &&
286                     (variables[i].type != PW_TYPE_FILENAME)) {
287                         continue;
288                 }
289
290                 /*
291                  *      No base struct offset, data must be the pointer.
292                  *      If data doesn't exist, ignore the entry, there
293                  *      must be something wrong.
294                  */
295                 if (!base) {
296                         if (!variables[i].data) {
297                                 continue;
298                         }
299
300                         p = (char **) variables[i].data;;
301
302                 } else if (variables[i].data) {
303                         p = (char **) variables[i].data;;
304
305                 } else {
306                         p = (char **) (((char *)base) + variables[i].offset);
307                 }
308
309                 free(*p);
310                 *p = NULL;
311         }
312 }
313
314
315 /*
316  *      Free a CONF_SECTION
317  */
318 void cf_section_free(CONF_SECTION **cs)
319 {
320         CONF_ITEM       *ci, *next;
321
322         if (!cs || !*cs) return;
323
324         if ((*cs)->variables) {
325                 cf_section_parse_free((*cs)->base, (*cs)->variables);
326         }
327
328         for (ci = (*cs)->children; ci; ci = next) {
329                 next = ci->next;
330
331                 switch (ci->type) {
332                 case CONF_ITEM_PAIR: {
333                                 CONF_PAIR *pair = cf_itemtopair(ci);
334                                 cf_pair_free(&pair);
335                         }
336                         break;
337
338                 case CONF_ITEM_SECTION: {
339
340                                 CONF_SECTION *section = cf_itemtosection(ci);
341                                 cf_section_free(&section);
342                         }
343                         break;
344
345                 case CONF_ITEM_DATA: {
346                                 CONF_DATA *data = cf_itemtodata(ci);
347                                 cf_data_free(&data);
348                         }
349                         break;
350
351                 default:        /* should really be an error. */
352                         break;
353                 }
354         }
355
356         if ((*cs)->name1)
357                 free((*cs)->name1);
358         if ((*cs)->name2)
359                 free((*cs)->name2);
360         if ((*cs)->pair_tree)
361                 rbtree_free((*cs)->pair_tree);
362         if ((*cs)->section_tree)
363                 rbtree_free((*cs)->section_tree);
364         if ((*cs)->name2_tree)
365                 rbtree_free((*cs)->name2_tree);
366         if ((*cs)->data_tree)
367                 rbtree_free((*cs)->data_tree);
368
369         /*
370          * And free the section
371          */
372 #ifndef NDEBUG
373         memset(*cs, 0, sizeof(*cs));
374 #endif
375         free(*cs);
376
377         *cs = NULL;
378 }
379
380
381 /*
382  *      Allocate a CONF_SECTION
383  */
384 static CONF_SECTION *cf_section_alloc(const char *name1, const char *name2,
385                                       CONF_SECTION *parent)
386 {
387         CONF_SECTION    *cs;
388
389         if (!name1) return NULL;
390
391         cs = rad_malloc(sizeof(*cs));
392         memset(cs, 0, sizeof(*cs));
393         cs->item.type = CONF_ITEM_SECTION;
394         cs->item.parent = parent;
395         cs->name1 = strdup(name1);
396         if (!cs->name1) {
397                 cf_section_free(&cs);
398                 return NULL;
399         }
400
401         if (name2 && *name2) {
402                 cs->name2 = strdup(name2);
403                 if (!cs->name2) {
404                         cf_section_free(&cs);
405                         return NULL;
406                 }
407         }
408         cs->pair_tree = rbtree_create(pair_cmp, NULL, 0);
409         if (!cs->pair_tree) {
410                 cf_section_free(&cs);
411                 return NULL;
412         }
413
414         /*
415          *      Don't create a data tree, it may not be needed.
416          */
417
418         /*
419          *      Don't create the section tree here, it may not
420          *      be needed.
421          */
422
423         if (parent) cs->depth = parent->depth + 1;
424
425         return cs;
426 }
427
428
429 /*
430  *      Add an item to a configuration section.
431  */
432 static void cf_item_add(CONF_SECTION *cs, CONF_ITEM *ci)
433 {
434         if (!cs->children) {
435                 rad_assert(cs->tail == NULL);
436                 cs->children = ci;
437         } else {
438                 rad_assert(cs->tail != NULL);
439                 cs->tail->next = ci;
440         }
441
442         /*
443          *      Update the trees (and tail) for each item added.
444          */
445         for (/* nothing */; ci != NULL; ci = ci->next) {
446                 cs->tail = ci;
447
448                 /*
449                  *      For fast lookups, pair's and sections get
450                  *      added to rbtree's.
451                  */
452                 switch (ci->type) {
453                         case CONF_ITEM_PAIR:
454                                 rbtree_insert(cs->pair_tree, ci);
455                                 break;
456
457                         case CONF_ITEM_SECTION: {
458                                 const CONF_SECTION *cs_new = cf_itemtosection(ci);
459
460                                 if (!cs->section_tree) {
461                                         cs->section_tree = rbtree_create(section_cmp, NULL, 0);
462                                         /* ignore any errors */
463                                 }
464
465                                 if (cs->section_tree) {
466                                         rbtree_insert(cs->section_tree, cs_new);                                }
467
468                                 /*
469                                  *      Two names: find the named instance.
470                                  */
471                                 if (cs_new->name2) {
472                                         CONF_SECTION *old_cs;
473
474                                         /*
475                                          *      Find the FIRST
476                                          *      CONF_SECTION having
477                                          *      the given name1, and
478                                          *      create a new tree
479                                          *      under it.
480                                          */
481                                         old_cs = rbtree_finddata(cs->section_tree, cs_new);
482                                         if (!old_cs) return; /* this is a bad error! */
483
484                                         if (!old_cs->name2_tree) {
485                                                 old_cs->name2_tree = rbtree_create(name2_cmp,
486                                                                                    NULL, 0);
487                                         }
488                                         if (old_cs->name2_tree) {
489                                                 rbtree_insert(old_cs->name2_tree, cs_new);
490                                         }
491                                 } /* had a name2 */
492                                 break;
493                         } /* was a section */
494
495                         case CONF_ITEM_DATA:
496                                 if (!cs->data_tree) {
497                                         cs->data_tree = rbtree_create(data_cmp, NULL, 0);
498                                 }
499                                 if (cs->data_tree) {
500                                         rbtree_insert(cs->data_tree, ci);
501                                 }
502                                 break;
503
504                         default: /* FIXME: assert & error! */
505                                 break;
506
507                 } /* switch over conf types */
508         } /* loop over ci */
509 }
510
511 /*
512  *      Expand the variables in an input string.
513  */
514 static const char *cf_expand_variables(const char *cf, int *lineno,
515                                        const CONF_SECTION *outercs,
516                                        char *output, const char *input)
517 {
518         char *p;
519         const char *end, *ptr;
520         char name[8192];
521         const CONF_SECTION *parentcs;
522
523         /*
524          *      Find the master parent conf section.
525          *      We can't use mainconfig.config, because we're in the
526          *      process of re-building it, and it isn't set up yet...
527          */
528         for (parentcs = outercs;
529              parentcs->item.parent != NULL;
530              parentcs = parentcs->item.parent) {
531                 /* do nothing */
532         }
533
534         p = output;
535         ptr = input;
536         while (*ptr) {
537                 /*
538                  *      Ignore anything other than "${"
539                  */
540                 if ((*ptr == '$') && (ptr[1] == '{')) {
541                         int up;
542                         CONF_PAIR *cp;
543                         const CONF_SECTION *cs;
544
545                         /*
546                          *      FIXME: Add support for ${foo:-bar},
547                          *      like in xlat.c
548                          */
549
550                         /*
551                          *      Look for trailing '}', and log a
552                          *      warning for anything that doesn't match,
553                          *      and exit with a fatal error.
554                          */
555                         end = strchr(ptr, '}');
556                         if (end == NULL) {
557                                 *p = '\0';
558                                 radlog(L_INFO, "%s[%d]: Variable expansion missing }",
559                                        cf, *lineno);
560                                 return NULL;
561                         }
562
563                         ptr += 2;
564
565                         cp = NULL;
566                         up = 0;
567
568                         /*
569                          *      ${.foo} means "foo from the current section"
570                          */
571                         if (*ptr == '.') {
572                                 up = 1;
573                                 cs = outercs;
574                                 ptr++;
575
576                                 /*
577                                  *      ${..foo} means "foo from the section
578                                  *      enclosing this section" (etc.)
579                                  */
580                                 while (*ptr == '.') {
581                                         if (cs->item.parent)
582                                                 cs = cs->item.parent;
583                                         ptr++;
584                                 }
585
586                         } else {
587                                 const char *q;
588                                 /*
589                                  *      ${foo} is local, with
590                                  *      main as lower priority
591                                  */
592                                 cs = outercs;
593
594                                 /*
595                                  *      ${foo.bar.baz} is always rooted
596                                  *      from the top.
597                                  */
598                                 for (q = ptr; *q && q != end; q++) {
599                                         if (*q == '.') {
600                                                 cs = parentcs;
601                                                 up = 1;
602                                                 break;
603                                         }
604                                 }
605                         }
606
607                         while (cp == NULL) {
608                                 char *q;
609                                 /*
610                                  *      Find the next section.
611                                  */
612                                 for (q = name;
613                                      (*ptr != 0) && (*ptr != '.') &&
614                                              (ptr != end);
615                                      q++, ptr++) {
616                                         *q = *ptr;
617                                 }
618                                 *q = '\0';
619
620                                 /*
621                                  *      The character is a '.', find a
622                                  *      section (as the user has given
623                                  *      us a subsection to find)
624                                  */
625                                 if (*ptr == '.') {
626                                         CONF_SECTION *next;
627
628                                         ptr++;  /* skip the period */
629
630                                         /*
631                                          *      Find the sub-section.
632                                          */
633                                         next = cf_section_sub_find(cs, name);
634                                         if (next == NULL) {
635                                                 radlog(L_ERR, "config: No such section %s in variable %s", name, input);
636                                                 return NULL;
637                                         }
638                                         cs = next;
639
640                                 } else { /* no period, must be a conf-part */
641                                         /*
642                                          *      Find in the current referenced
643                                          *      section.
644                                          */
645                                         cp = cf_pair_find(cs, name);
646                                         if (cp == NULL) {
647                                                 /*
648                                                  *      It it was NOT ${..foo}
649                                                  *      then look in the
650                                                  *      top-level config items.
651                                                  */
652                                                 if (!up) cp = cf_pair_find(parentcs, name);
653                                         }
654                                         if (cp == NULL) {
655                                                 radlog(L_ERR, "config: No such configuration item %s in section %s when expanding string \"%s\"", name,
656                                                        cf_section_name1(cs),
657                                                        input);
658                                                 return NULL;
659                                         }
660                                 }
661                         } /* until cp is non-NULL */
662
663                         /*
664                          *  Substitute the value of the variable.
665                          */
666                         strcpy(p, cp->value);
667                         p += strlen(p);
668                         ptr = end + 1;
669
670                 } else if (memcmp(ptr, "$ENV{", 5) == 0) {
671                         char *env;
672
673                         ptr += 5;
674
675                         /*
676                          *      Look for trailing '}', and log a
677                          *      warning for anything that doesn't match,
678                          *      and exit with a fatal error.
679                          */
680                         end = strchr(ptr, '}');
681                         if (end == NULL) {
682                                 *p = '\0';
683                                 radlog(L_INFO, "%s[%d]: Environment variable expansion missing }",
684                                        cf, *lineno);
685                                 return NULL;
686                         }
687
688                         memcpy(name, ptr, end - ptr);
689                         name[end - ptr] = '\0';
690
691                         /*
692                          *      Get the environment variable.
693                          *      If none exists, then make it an empty string.
694                          */
695                         env = getenv(name);
696                         if (env == NULL) {
697                                 *name = '\0';
698                                 env = name;
699                         }
700
701                         strcpy(p, env);
702                         p += strlen(p);
703                         ptr = end + 1;
704
705                 } else {
706                         /*
707                          *      Copy it over verbatim.
708                          */
709                         *(p++) = *(ptr++);
710                 }
711         } /* loop over all of the input string. */
712
713         *p = '\0';
714
715         return output;
716 }
717
718
719 /*
720  *      Parses an item (not a CONF_ITEM) into the specified format,
721  *      with a default value.
722  *
723  *      Returns -1 on error, 0 for correctly parsed, and 1 if the
724  *      default value was used.  Note that the default value will be
725  *      used ONLY if the CONF_PAIR is NULL.
726  */
727 int cf_item_parse(CONF_SECTION *cs, const char *name,
728                   int type, void *data, const char *dflt)
729 {
730         int rcode = 0;
731         char **q;
732         const char *value;
733         lrad_ipaddr_t ipaddr;
734         const CONF_PAIR *cp;
735         char ipbuf[128];
736
737         cp = cf_pair_find(cs, name);
738         if (cp) {
739                 value = cp->value;
740
741         } else if (!dflt) {
742                 return 1;       /* nothing to parse, return default value */
743
744         } else {
745                 rcode = 1;
746                 value = dflt;
747         }
748
749         switch (type) {
750         case PW_TYPE_BOOLEAN:
751                 /*
752                  *      Allow yes/no and on/off
753                  */
754                 if ((strcasecmp(value, "yes") == 0) ||
755                     (strcasecmp(value, "on") == 0)) {
756                         *(int *)data = 1;
757                 } else if ((strcasecmp(value, "no") == 0) ||
758                            (strcasecmp(value, "off") == 0)) {
759                         *(int *)data = 0;
760                 } else {
761                         *(int *)data = 0;
762                         radlog(L_ERR, "Bad value \"%s\" for boolean variable %s", value, name);
763                         return -1;
764                 }
765                 DEBUG2("\t%s = %s", name, value);
766                 break;
767
768         case PW_TYPE_INTEGER:
769                 *(int *)data = strtol(value, 0, 0);
770                 DEBUG2("\t%s = %d", name, *(int *)data);
771                 break;
772
773         case PW_TYPE_STRING_PTR:
774                 q = (char **) data;
775                 if (*q != NULL) {
776                         free(*q);
777                 }
778
779                 /*
780                  *      Expand variables which haven't already been
781                  *      expanded automagically when the configuration
782                  *      file was read.
783                  */
784                 if (value == dflt) {
785                         char buffer[8192];
786
787                         int lineno = cs->item.lineno;
788
789                         /*
790                          *      FIXME: sizeof(buffer)?
791                          */
792                         value = cf_expand_variables("?",
793                                                     &lineno,
794                                                     cs, buffer, value);
795                         if (!value) return -1;
796                 }
797
798                 DEBUG2("\t%s = \"%s\"", name, value ? value : "(null)");
799                 *q = value ? strdup(value) : NULL;
800                 break;
801
802                 /*
803                  *      This is the same as PW_TYPE_STRING_PTR,
804                  *      except that we also "stat" the file, and
805                  *      cache the result.
806                  */
807         case PW_TYPE_FILENAME:
808                 q = (char **) data;
809                 if (*q != NULL) {
810                         free(*q);
811                 }
812
813                 /*
814                  *      Expand variables which haven't already been
815                  *      expanded automagically when the configuration
816                  *      file was read.
817                  */
818                 if (value == dflt) {
819                         char buffer[8192];
820
821                         int lineno = cs->item.lineno;
822
823                         /*
824                          *      FIXME: sizeof(buffer)?
825                          */
826                         value = cf_expand_variables("?",
827                                                     &lineno,
828                                                     cs, buffer, value);
829                         if (!value) return -1;
830                 }
831
832                 DEBUG2("\t%s = \"%s\"", name, value ? value : "(null)");
833                 *q = value ? strdup(value) : NULL;
834
835                 /*
836                  *      And now we "stat" the file.
837                  */
838                 if (*q) {
839                         struct stat buf;
840
841                         if (stat(*q, &buf) == 0) {
842                                 time_t *mtime;
843
844                                 mtime = rad_malloc(sizeof(*mtime));
845                                 *mtime = buf.st_mtime;
846                                 /* FIXME: error? */
847                                 cf_data_add_internal(cs, *q, mtime, free,
848                                                      PW_TYPE_FILENAME);
849                         }
850                 }
851                 break;
852
853         case PW_TYPE_IPADDR:
854                 /*
855                  *      Allow '*' as any address
856                  */
857                 if (strcmp(value, "*") == 0) {
858                         *(uint32_t *) data = htonl(INADDR_ANY);
859                         DEBUG2("\t%s = *", name);
860                         break;
861                 }
862                 if (ip_hton(value, AF_INET, &ipaddr) < 0) {
863                         radlog(L_ERR, "Can't find IP address for host %s", value);
864                         return -1;
865                 }
866                 DEBUG2("\t%s = %s IP address [%s]", name, value,
867                                ip_ntoh(&ipaddr, ipbuf, sizeof(ipbuf)));
868                 *(uint32_t *) data = ipaddr.ipaddr.ip4addr.s_addr;
869                 break;
870
871         case PW_TYPE_IPV6ADDR:
872                 if (ip_hton(value, AF_INET6, &ipaddr) < 0) {
873                         radlog(L_ERR, "Can't find IPv6 address for host %s", value);
874                         return -1;
875                 }
876                 DEBUG2("\t%s = %s IPv6 address [%s]", name, value,
877                                ip_ntoh(&ipaddr, ipbuf, sizeof(ipbuf)));
878                 memcpy(data, &ipaddr.ipaddr.ip6addr,
879                        sizeof(ipaddr.ipaddr.ip6addr));
880                 break;
881
882         default:
883                 radlog(L_ERR, "type %d not supported yet", type);
884                 return -1;
885                 break;
886         } /* switch over variable type */
887
888         return rcode;
889 }
890
891 static const char *parse_spaces = "                                                                                                                                                                                                                                                                ";
892
893 /*
894  *      Parse a configuration section into user-supplied variables.
895  */
896 int cf_section_parse(CONF_SECTION *cs, void *base,
897                      const CONF_PARSER *variables)
898 {
899         int i;
900         void *data;
901
902         if (!cs->name2) {
903                 DEBUG2("%.*s%s {", cs->depth, parse_spaces,
904                        cs->name1);
905         } else {
906                 DEBUG2("%.*s%s %s {", cs->depth, parse_spaces,
907                        cs->name1, cs->name2);
908         }
909
910         /*
911          *      Handle the known configuration parameters.
912          */
913         for (i = 0; variables[i].name != NULL; i++) {
914                 /*
915                  *      Handle subsections specially
916                  */
917                 if (variables[i].type == PW_TYPE_SUBSECTION) {
918                         const CONF_SECTION *subcs;
919                         subcs = cf_section_sub_find(cs, variables[i].name);
920
921                         /*
922                          *      If the configuration section is NOT there,
923                          *      then ignore it.
924                          *
925                          *      FIXME! This is probably wrong... we should
926                          *      probably set the items to their default values.
927                          */
928                         if (!subcs) continue;
929
930                         if (!variables[i].dflt) {
931                                 DEBUG2("Internal sanity check 1 failed in cf_section_parse");
932                                 goto error;
933                         }
934
935                         if (cf_section_parse(subcs, base,
936                                              (const CONF_PARSER *) variables[i].dflt) < 0) {
937                                 goto error;
938                         }
939                         continue;
940                 } /* else it's a CONF_PAIR */
941
942                 if (variables[i].data) {
943                         data = variables[i].data; /* prefer this. */
944                 } else if (base) {
945                         data = ((char *)base) + variables[i].offset;
946                 } else {
947                         DEBUG2("Internal sanity check 2 failed in cf_section_parse");
948                         goto error;
949                 }
950
951                 /*
952                  *      Parse the pair we found, or a default value.
953                  */
954                 if (cf_item_parse(cs, variables[i].name, variables[i].type,
955                                   data, variables[i].dflt) < 0) {
956                         goto error;
957                 }
958         } /* for all variables in the configuration section */
959
960         DEBUG2("%.*s}", cs->depth, parse_spaces);
961
962         cs->base = base;
963         cs->variables = variables;
964
965         return 0;
966
967  error:
968         DEBUG2("%.*s}", cs->depth, parse_spaces);
969         cf_section_parse_free(base, variables);
970         return -1;
971 }
972
973
974 /*
975  *      Sanity check the "if" or "elsif", presuming that the first '('
976  *      has already been eaten.
977  *
978  *      We're not really parsing it here, just checking if it's mostly
979  *      well-formed.
980  */
981 static int condition_looks_ok(const char **ptr)
982 {
983         int num_braces = 1;
984         int quote = 0;
985         const char *p = *ptr;
986
987         while (*p) {
988                 if (quote) {
989                         if (*p == quote) {
990                                 p++;
991                                 quote = 0;
992                                 continue;
993                         }
994
995                         if (*p == '\\') {
996                                 if (!p[1]) {
997                                         return 0; /* no trailing slash */
998                                 }
999                                 p += 2;
1000                                 continue;
1001                         }
1002                         p++;
1003                         continue;
1004                 }
1005
1006                 switch (*p) {
1007                 case '\\':
1008                         if (!p[1]) {
1009                                 return 0; /* no trailing slash */
1010                         }
1011                         p += 2;
1012                         continue;
1013
1014                 case '(':
1015                         num_braces++;
1016                         p++;
1017                         continue;
1018
1019                 case ')':
1020                         if (num_braces == 1) {
1021                                 const char *q = p + 1;
1022
1023                                 /*
1024                                  *      Validate that there isn't much
1025                                  *      else after the closing brace.
1026                                  */
1027                                 while ((*q == ' ') || (*q == '\t')) q++;
1028
1029                                 /*
1030                                  *      Parse error.
1031                                  */
1032                                 if (*q != '{') {
1033                                         return 0;
1034                                 }
1035
1036                                 *ptr = p + 1; /* include the trailing ')' */
1037                                 return 1;
1038                         }
1039                         num_braces--;
1040                         p++;
1041                         continue;
1042
1043                 case '"':
1044                 case '\'':
1045                 case '`':
1046                         quote = *p;
1047                         /* FALL-THROUGH */
1048
1049                 default:
1050                         p++;
1051                         break;
1052                 }
1053         }
1054
1055         return 0;
1056 }
1057
1058
1059 /*
1060  *      Read a part of the config file.
1061  */
1062 static int cf_section_read(const char *file, int *lineno, FILE *fp,
1063                            CONF_SECTION *current)
1064
1065 {
1066         CONF_SECTION *this, *css;
1067         CONF_PAIR *cpn;
1068         char *ptr;
1069         const char *value;
1070         char buf[8192];
1071         char buf1[8192];
1072         char buf2[8192];
1073         char buf3[8192];
1074         int t1, t2, t3;
1075         char *cbuf = buf;
1076         int len;
1077
1078         this = current;         /* add items here */
1079
1080         /*
1081          *      Read, checking for line continuations ('\\' at EOL)
1082          */
1083         for (;;) {
1084                 int eof;
1085
1086                 /*
1087                  *      Get data, and remember if we are at EOF.
1088                  */
1089                 eof = (fgets(cbuf, sizeof(buf) - (cbuf - buf), fp) == NULL);
1090                 (*lineno)++;
1091
1092                 len = strlen(cbuf);
1093
1094                 /*
1095                  *      We've filled the buffer, and there isn't
1096                  *      a CR in it.  Die!
1097                  */
1098                 if ((cbuf[len - 1] != '\n') && !feof(fp)) {
1099                         radlog(L_ERR, "%s[%d]: Line too long",
1100                                file, *lineno);
1101                         return -1;
1102                 }
1103
1104                 /*
1105                  *  Check for continuations.
1106                  */
1107                 if (cbuf[len - 1] == '\n') len--;
1108
1109                 /*
1110                  *      Last character is '\\'.  Over-write it,
1111                  *      and read another line.
1112                  */
1113                 if ((len > 0) && (cbuf[len - 1] == '\\')) {
1114                         if (len >= (sizeof(buf) - 5)) {
1115                                 radlog(L_ERR, "%s[%d]: Line too long",
1116                                        file, *lineno);
1117                                 return -1;
1118                         }
1119
1120                         cbuf[len - 1] = '\0';
1121                         cbuf += len - 1;
1122                         continue;
1123                 }
1124
1125                 /*
1126                  *  We're at EOF, and haven't read anything.  Stop.
1127                  */
1128                 if (eof && (cbuf == buf)) {
1129                         break;
1130                 }
1131
1132                 ptr = cbuf = buf;
1133                 t1 = gettoken(&ptr, buf1, sizeof(buf1));
1134
1135                 if ((*buf1 == '#') || (*buf1 == '\0')) {
1136                         continue;
1137                 }
1138
1139                 /*
1140                  *      The caller eats "name1 name2 {", and calls us
1141                  *      for the data inside of the section.  So if we
1142                  *      receive a closing brace, then it must mean the
1143                  *      end of the section.
1144                  */
1145                if (t1 == T_RCBRACE) {
1146                        if (this == current) {
1147                                radlog(L_ERR, "%s[%d]: Too many closing braces",
1148                                       file, *lineno);
1149                                return -1;
1150
1151                        }
1152                        this = this->item.parent;
1153                        continue;
1154                 }
1155
1156                 /*
1157                  *      Allow for $INCLUDE files
1158                  *
1159                  *      This *SHOULD* work for any level include.
1160                  *      I really really really hate this file.  -cparker
1161                  */
1162                 if (strcasecmp(buf1, "$INCLUDE") == 0) {
1163                         t2 = getword(&ptr, buf2, sizeof(buf2));
1164
1165                         value = cf_expand_variables(file, lineno, this, buf, buf2);
1166                         if (!value) return -1;
1167
1168 #ifdef HAVE_DIRENT_H
1169                         /*
1170                          *      $INCLUDE foo/
1171                          *
1172                          *      Include ALL non-"dot" files in the directory.
1173                          *      careful!
1174                          */
1175                         if (value[strlen(value) - 1] == '/') {
1176                                 DIR             *dir;
1177                                 struct dirent   *dp;
1178                                 struct stat stat_buf;
1179
1180                                 DEBUG2( "Config:   including files in directory: %s", value );
1181                                 dir = opendir(value);
1182                                 if (!dir) {
1183                                         radlog(L_ERR, "%s[%d]: Error reading directory %s: %s",
1184                                                file, *lineno, value,
1185                                                strerror(errno));
1186                                         return -1;
1187                                 }
1188
1189                                 /*
1190                                  *      Read the directory, ignoring "." files.
1191                                  */
1192                                 while ((dp = readdir(dir)) != NULL) {
1193                                         const char *p;
1194
1195                                         if (dp->d_name[0] == '.') continue;
1196
1197                                         /*
1198                                          *      Check for valid characters
1199                                          */
1200                                         for (p = dp->d_name; *p != '\0'; p++) {
1201                                                 if (isalpha((int)*p) ||
1202                                                     isdigit((int)*p) ||
1203                                                     (*p == '_') ||
1204                                                     (*p == '.')) continue;
1205                                                 break;
1206                                         }
1207                                         if (*p != '\0') continue;
1208
1209                                         snprintf(buf2, sizeof(buf2), "%s%s",
1210                                                  value, dp->d_name);
1211                                         if ((stat(buf2, &stat_buf) != 0) ||
1212                                             S_ISDIR(stat_buf.st_mode)) continue;
1213                                         /*
1214                                          *      Read the file into the current
1215                                          *      configuration sectoin.
1216                                          */
1217                                         if (cf_file_include(buf2, this) < 0) {
1218                                                 closedir(dir);
1219                                                 return -1;
1220                                         }
1221                                 }
1222                                 closedir(dir);
1223                         }  else
1224 #endif
1225                         { /* it was a normal file */
1226                                 if (cf_file_include(value, this) < 0) {
1227                                         return -1;
1228                                 }
1229                         }
1230                         continue;
1231                 } /* we were in an include */
1232
1233                 /*
1234                  *      Ensure that the user can't add CONF_PAIRs
1235                  *      with 'internal' names;
1236                  */
1237                 if (buf1[0] == '_') {
1238                         radlog(L_ERR, "%s[%d]: Illegal configuration pair name \"%s\"",
1239                                         file, *lineno, buf1);
1240                         return -1;
1241                 }
1242
1243                 /*
1244                  *      Grab the next token.
1245                  */
1246                 t2 = gettoken(&ptr, buf2, sizeof(buf2));
1247                 switch (t2) {
1248                 case T_EOL:
1249                 case T_HASH:
1250                         t2 = T_OP_EQ;
1251
1252                 case T_OP_EQ:
1253                 case T_OP_ADD:
1254                 case T_OP_SUB:
1255                 case T_OP_SET:
1256                         t3 = getstring(&ptr, buf3, sizeof(buf3));
1257
1258                         /*
1259                          *      Handle variable substitution via ${foo}
1260                          */
1261                         if (t3 == T_BARE_WORD) {
1262                                 value = cf_expand_variables(file, lineno, this,
1263                                                             buf, buf3);
1264                                 if (!value) return -1;
1265                         } else {
1266                                 value = buf3;
1267                         }
1268                         
1269                         /*
1270                          *      Add this CONF_PAIR to our CONF_SECTION
1271                          */
1272                         cpn = cf_pair_alloc(buf1, value, t2, t3, this);
1273                         cpn->item.lineno = *lineno;
1274                         cf_item_add(this, cf_pairtoitem(cpn));
1275                         continue;
1276
1277                         /*
1278                          *      This horrible code is here to support
1279                          *      if/then/else failover in the
1280                          *      authorize, etc. sections.  It makes no
1281                          *      sense anywhere else.
1282                          */
1283                 case T_LBRACE:
1284                         if ((strcmp(buf1, "if") == 0) ||
1285                             (strcmp(buf1, "elsif") == 0)) {
1286                                 const char *end = ptr;
1287
1288                                 if (!condition_looks_ok(&end)) {
1289                                         radlog(L_ERR, "%s[%d]: Parse error in condition at: %s",
1290                                                file, *lineno, ptr);
1291                                         return -1;
1292                                 }
1293
1294                                 if ((end - ptr) >= (sizeof(buf2) - 1)) {
1295                                         radlog(L_ERR, "%s[%d]: Statement too complicated after \"%s\"",
1296                                                file, *lineno, buf1);
1297                                         return -1;
1298                                 }
1299                                 buf2[0] = '(';
1300                                 memcpy(buf2 + 1, ptr, end - ptr);
1301                                 buf2[end - ptr + 1] = '\0';
1302                                 ptr = end + 1;
1303                                 t2 = T_BARE_WORD;
1304                                 goto section_alloc;
1305
1306                         } else {
1307                                 radlog(L_ERR, "%s[%d]: Parse error after \"%s\"",
1308                                        file, *lineno, buf1);
1309                                 return -1;
1310                         }
1311                         /* FALL-THROUGH */
1312
1313                         /*
1314                          *      No '=', must be a section or sub-section.
1315                          */
1316                 case T_BARE_WORD:
1317                 case T_DOUBLE_QUOTED_STRING:
1318                 case T_SINGLE_QUOTED_STRING:
1319                         t3 = gettoken(&ptr, buf3, sizeof(buf3));
1320                         if (t3 != T_LCBRACE) {
1321                                 radlog(L_ERR, "%s[%d]: Expecting section start brace '{' after \"%s %s\"",
1322                                        file, *lineno, buf1, buf2);
1323                                 return -1;
1324                         }
1325
1326                 case T_LCBRACE:
1327                 section_alloc:
1328                         css = cf_section_alloc(buf1,
1329                                                t2 == T_LCBRACE ? NULL : buf2,
1330                                                this);
1331                         if (!css) {
1332                                 radlog(L_ERR, "%s[%d]: Failed allocating memory for section",
1333                                                 file, *lineno);
1334                                 return -1;
1335                         }
1336                         cf_item_add(this, cf_sectiontoitem(css));
1337                         css->item.lineno = *lineno;
1338
1339                         /*
1340                          *      The current section is now the child section.
1341                          */
1342                         this = css;
1343                         continue;
1344
1345                 default:
1346                         radlog(L_ERR, "%s[%d]: Parse error after \"%s\"",
1347                                file, *lineno, buf1);
1348                         return -1;
1349                 }
1350         }
1351
1352         /*
1353          *      See if EOF was unexpected ..
1354          */
1355         if (feof(fp) && (this != current)) {
1356                 radlog(L_ERR, "%s[%d]: EOF reached without closing brace for section %s starting at line %d",
1357                        file, *lineno,
1358                        cf_section_name1(this), cf_section_lineno(this));
1359                 return -1;
1360         }
1361
1362         return 0;
1363 }
1364
1365 /*
1366  *      Include one config file in another.
1367  */
1368 int cf_file_include(const char *file, CONF_SECTION *cs)
1369 {
1370         FILE            *fp;
1371         int             lineno = 0;
1372         struct stat     statbuf;
1373         time_t          *mtime;
1374
1375         DEBUG2( "Config:   including file: %s", file);
1376
1377         if (stat(file, &statbuf) == 0) {
1378 #ifdef S_IWOTH
1379                 if ((statbuf.st_mode & S_IWOTH) != 0) {
1380                         radlog(L_ERR|L_CONS, "Configuration file %s is globally writable.  Refusing to start due to insecure configuration.",
1381                                file);
1382                         return -1;
1383                 }
1384 #endif
1385
1386 #ifdef S_IROTH
1387                 if (0 && (statbuf.st_mode & S_IROTH) != 0) {
1388                         radlog(L_ERR|L_CONS, "Configuration file %s is globally readable.  Refusing to start due to insecure configuration.",
1389                                file);
1390                         return -1;
1391                 }
1392 #endif
1393         }
1394
1395         fp = fopen(file, "r");
1396         if (!fp) {
1397                 radlog(L_ERR|L_CONS, "Unable to open file \"%s\": %s",
1398                        file, strerror(errno));
1399                 return -1;
1400         }
1401
1402         /*
1403          *      Read the section.  It's OK to have EOF without a
1404          *      matching close brace.
1405          */
1406         if (cf_section_read(file, &lineno, fp, cs) < 0) {
1407                 fclose(fp);
1408                 return -1;
1409         }
1410
1411         /*
1412          *      Add the filename to the section
1413          */
1414         mtime = rad_malloc(sizeof(*mtime));
1415         *mtime = statbuf.st_mtime;
1416         /* FIXME: error? */
1417         cf_data_add_internal(cs, file, mtime, free,
1418                              PW_TYPE_FILENAME);
1419
1420         fclose(fp);
1421         return 0;
1422 }
1423
1424 /*
1425  *      Bootstrap a config file.
1426  */
1427 CONF_SECTION *cf_file_read(const char *file)
1428 {
1429         CONF_SECTION *cs;
1430
1431         cs = cf_section_alloc("main", NULL, NULL);
1432         if (!cs) return NULL;
1433
1434         if (cf_file_include(file, cs) < 0) {
1435                 cf_section_free(&cs);
1436                 return NULL;
1437         }
1438
1439         return cs;
1440 }
1441
1442 /*
1443  * Return a CONF_PAIR within a CONF_SECTION.
1444  */
1445 CONF_PAIR *cf_pair_find(const CONF_SECTION *cs, const char *name)
1446 {
1447         CONF_ITEM       *ci;
1448         CONF_PAIR       *cp = NULL;
1449
1450         if (!cs) cs = mainconfig.config;
1451
1452         /*
1453          *      Find the name in the tree, for speed.
1454          */
1455         if (name) {
1456                 CONF_PAIR mycp;
1457
1458                 mycp.attr = name;
1459                 cp = rbtree_finddata(cs->pair_tree, &mycp);
1460         } else {
1461                 /*
1462                  *      Else find the first one that matches
1463                  */
1464                 for (ci = cs->children; ci; ci = ci->next) {
1465                         if (ci->type == CONF_ITEM_PAIR) {
1466                                 return cf_itemtopair(ci);
1467                         }
1468                 }
1469         }
1470
1471         if (cp || !cs->template) return cp;
1472
1473         return cf_pair_find(cs->template, name);
1474 }
1475
1476 /*
1477  * Return the attr of a CONF_PAIR
1478  */
1479
1480 char *cf_pair_attr(CONF_PAIR *pair)
1481 {
1482         return (pair ? pair->attr : NULL);
1483 }
1484
1485 /*
1486  * Return the value of a CONF_PAIR
1487  */
1488
1489 char *cf_pair_value(CONF_PAIR *pair)
1490 {
1491         return (pair ? pair->value : NULL);
1492 }
1493
1494 /*
1495  * Return the first label of a CONF_SECTION
1496  */
1497
1498 const char *cf_section_name1(const CONF_SECTION *cs)
1499 {
1500         return (cs ? cs->name1 : NULL);
1501 }
1502
1503 /*
1504  * Return the second label of a CONF_SECTION
1505  */
1506
1507 const char *cf_section_name2(const CONF_SECTION *cs)
1508 {
1509         return (cs ? cs->name2 : NULL);
1510 }
1511
1512 /*
1513  * Find a value in a CONF_SECTION
1514  */
1515 char *cf_section_value_find(const CONF_SECTION *cs, const char *attr)
1516 {
1517         CONF_PAIR       *cp;
1518
1519         cp = cf_pair_find(cs, attr);
1520
1521         return (cp ? cp->value : NULL);
1522 }
1523
1524 /*
1525  * Return the next pair after a CONF_PAIR
1526  * with a certain name (char *attr) If the requested
1527  * attr is NULL, any attr matches.
1528  */
1529
1530 CONF_PAIR *cf_pair_find_next(const CONF_SECTION *cs,
1531                              const CONF_PAIR *pair, const char *attr)
1532 {
1533         CONF_ITEM       *ci;
1534
1535         /*
1536          * If pair is NULL this must be a first time run
1537          * Find the pair with correct name
1538          */
1539
1540         if (pair == NULL){
1541                 return cf_pair_find(cs, attr);
1542         }
1543
1544         ci = cf_pairtoitem(pair)->next;
1545
1546         for (; ci; ci = ci->next) {
1547                 if (ci->type != CONF_ITEM_PAIR)
1548                         continue;
1549                 if (attr == NULL || strcmp(cf_itemtopair(ci)->attr, attr) == 0)
1550                         break;
1551         }
1552
1553         return cf_itemtopair(ci);
1554 }
1555
1556 /*
1557  * Find a CONF_SECTION, or return the root if name is NULL
1558  */
1559
1560 CONF_SECTION *cf_section_find(const char *name)
1561 {
1562         if (name)
1563                 return cf_section_sub_find(mainconfig.config, name);
1564         else
1565                 return mainconfig.config;
1566 }
1567
1568 /*
1569  * Find a sub-section in a section
1570  */
1571
1572 CONF_SECTION *cf_section_sub_find(const CONF_SECTION *cs, const char *name)
1573 {
1574         CONF_ITEM *ci;
1575
1576         /*
1577          *      Do the fast lookup if possible.
1578          */
1579         if (name && cs->section_tree) {
1580                 CONF_SECTION mycs;
1581
1582                 mycs.name1 = name;
1583                 mycs.name2 = NULL;
1584                 return rbtree_finddata(cs->section_tree, &mycs);
1585         }
1586
1587         for (ci = cs->children; ci; ci = ci->next) {
1588                 if (ci->type != CONF_ITEM_SECTION)
1589                         continue;
1590                 if (strcmp(cf_itemtosection(ci)->name1, name) == 0)
1591                         break;
1592         }
1593
1594         return cf_itemtosection(ci);
1595
1596 }
1597
1598
1599 /*
1600  *      Find a CONF_SECTION with both names.
1601  */
1602 CONF_SECTION *cf_section_sub_find_name2(const CONF_SECTION *cs,
1603                                         const char *name1, const char *name2)
1604 {
1605         CONF_ITEM    *ci;
1606
1607         if (!name2) return cf_section_sub_find(cs, name1);
1608
1609         if (!cs) cs = mainconfig.config;
1610
1611         if (name1 && (cs->section_tree)) {
1612                 CONF_SECTION mycs, *master_cs;
1613
1614                 mycs.name1 = name1;
1615                 mycs.name2 = name2;
1616
1617                 master_cs = rbtree_finddata(cs->section_tree, &mycs);
1618                 if (master_cs) {
1619                         return rbtree_finddata(master_cs->name2_tree, &mycs);
1620                 }
1621         }
1622
1623         /*
1624          *      Else do it the old-fashioned way.
1625          */
1626         for (ci = cs->children; ci; ci = ci->next) {
1627                 CONF_SECTION *subcs;
1628
1629                 if (ci->type != CONF_ITEM_SECTION)
1630                         continue;
1631
1632                 subcs = cf_itemtosection(ci);
1633                 if (!name1) {
1634                         if (!subcs->name2) {
1635                                 if (strcmp(subcs->name1, name2) == 0) break;
1636                         } else {
1637                                 if (strcmp(subcs->name2, name2) == 0) break;
1638                         }
1639                         continue; /* don't do the string comparisons below */
1640                 }
1641
1642                 if ((strcmp(subcs->name1, name1) == 0) &&
1643                     (subcs->name2 != NULL) &&
1644                     (strcmp(subcs->name2, name2) == 0))
1645                         break;
1646         }
1647
1648         return cf_itemtosection(ci);
1649 }
1650
1651 /*
1652  * Return the next subsection after a CONF_SECTION
1653  * with a certain name1 (char *name1). If the requested
1654  * name1 is NULL, any name1 matches.
1655  */
1656
1657 CONF_SECTION *cf_subsection_find_next(CONF_SECTION *section,
1658                                       CONF_SECTION *subsection,
1659                                       const char *name1)
1660 {
1661         CONF_ITEM       *ci;
1662
1663         /*
1664          * If subsection is NULL this must be a first time run
1665          * Find the subsection with correct name
1666          */
1667
1668         if (subsection == NULL){
1669                 ci = section->children;
1670         } else {
1671                 ci = cf_sectiontoitem(subsection)->next;
1672         }
1673
1674         for (; ci; ci = ci->next) {
1675                 if (ci->type != CONF_ITEM_SECTION)
1676                         continue;
1677                 if ((name1 == NULL) ||
1678                     (strcmp(cf_itemtosection(ci)->name1, name1) == 0))
1679                         break;
1680         }
1681
1682         return cf_itemtosection(ci);
1683 }
1684
1685 /*
1686  * Return the next item after a CONF_ITEM.
1687  */
1688
1689 CONF_ITEM *cf_item_find_next(CONF_SECTION *section, CONF_ITEM *item)
1690 {
1691         /*
1692          * If item is NULL this must be a first time run
1693          * Return the first item
1694          */
1695
1696         if (item == NULL) {
1697                 return section->children;
1698         } else {
1699                 return item->next;
1700         }
1701 }
1702
1703 int cf_section_lineno(CONF_SECTION *section)
1704 {
1705         return cf_sectiontoitem(section)->lineno;
1706 }
1707
1708 int cf_pair_lineno(CONF_PAIR *pair)
1709 {
1710         return cf_pairtoitem(pair)->lineno;
1711 }
1712
1713 int cf_item_is_section(CONF_ITEM *item)
1714 {
1715         return item->type == CONF_ITEM_SECTION;
1716 }
1717 int cf_item_is_pair(CONF_ITEM *item)
1718 {
1719         return item->type == CONF_ITEM_PAIR;
1720 }
1721
1722
1723 static CONF_DATA *cf_data_alloc(CONF_SECTION *parent, const char *name,
1724                                 void *data, void (*data_free)(void *))
1725 {
1726         CONF_DATA *cd;
1727
1728         cd = rad_malloc(sizeof(*cd));
1729         memset(cd, 0, sizeof(*cd));
1730
1731         cd->item.type = CONF_ITEM_DATA;
1732         cd->item.parent = parent;
1733         cd->name = strdup(name);
1734         cd->data = data;
1735         cd->free = data_free;
1736
1737         return cd;
1738 }
1739
1740
1741 static void *cf_data_find_internal(CONF_SECTION *cs, const char *name,
1742                                    int flag)
1743 {
1744         if (!cs || !name) return NULL;
1745
1746         /*
1747          *      Find the name in the tree, for speed.
1748          */
1749         if (cs->data_tree) {
1750                 CONF_DATA mycd, *cd;
1751
1752                 mycd.name = name;
1753                 mycd.flag = flag;
1754                 cd = rbtree_finddata(cs->data_tree, &mycd);
1755                 if (cd) return cd->data;
1756         }
1757
1758         return NULL;
1759 }
1760
1761 /*
1762  *      Find data from a particular section.
1763  */
1764 void *cf_data_find(CONF_SECTION *cs, const char *name)
1765 {
1766         return cf_data_find_internal(cs, name, 0);
1767 }
1768
1769
1770 /*
1771  *      Add named data to a configuration section.
1772  */
1773 static int cf_data_add_internal(CONF_SECTION *cs, const char *name,
1774                                 void *data, void (*data_free)(void *),
1775                                 int flag)
1776 {
1777         CONF_DATA *cd;
1778
1779         if (!cs || !name) return -1;
1780
1781         /*
1782          *      Already exists.  Can't add it.
1783          */
1784         if (cf_data_find_internal(cs, name, flag) != NULL) return -1;
1785
1786         cd = cf_data_alloc(cs, name, data, data_free);
1787         if (!cd) return -1;
1788         cd->flag = flag;
1789
1790         cf_item_add(cs, cf_datatoitem(cd));
1791
1792         return 0;
1793 }
1794
1795 /*
1796  *      Add named data to a configuration section.
1797  */
1798 int cf_data_add(CONF_SECTION *cs, const char *name,
1799                 void *data, void (*data_free)(void *))
1800 {
1801         return cf_data_add_internal(cs, name, data, data_free, 0);
1802 }
1803
1804
1805 /*
1806  *      Copy CONF_DATA from src to dst
1807  */
1808 static void cf_section_copy_data(CONF_SECTION *s, CONF_SECTION *d)
1809 {
1810
1811         CONF_ITEM *cd, *next, **last;
1812
1813         /*
1814          *      Don't check if s->data_tree is NULL.  It's child
1815          *      sections may have data, even if this section doesn't.
1816          */
1817
1818         rad_assert(d->data_tree == NULL);
1819         d->data_tree = s->data_tree;
1820         s->data_tree = NULL;
1821
1822         /*
1823          *      Walk through src, moving CONF_ITEM_DATA
1824          *      to dst, by hand.
1825          */
1826         last = &(s->children);
1827         for (cd = s->children; cd != NULL; cd = next) {
1828                 next = cd->next;
1829
1830                 /*
1831                  *      Recursively copy data from child sections.
1832                  */
1833                 if (cd->type == CONF_ITEM_SECTION) {
1834                         CONF_SECTION *s1, *d1;
1835
1836                         s1 = cf_itemtosection(cd);
1837                         d1 = cf_section_sub_find_name2(d, s1->name1, s1->name2);
1838                         if (d1) {
1839                                 cf_section_copy_data(s1, d1);
1840                         }
1841                         last = &(cd->next);
1842                         continue;
1843                 }
1844
1845                 /*
1846                  *      Not conf data, remember last ptr.
1847                  */
1848                 if (cd->type != CONF_ITEM_DATA) {
1849                         last = &(cd->next);
1850                         continue;
1851                 }
1852
1853                 /*
1854                  *      Remove it from the src list
1855                  */
1856                 *last = cd->next;
1857                 cd->next = NULL;
1858
1859                 /*
1860                  *      Add it to the dst list
1861                  */
1862                 if (!d->children) {
1863                         rad_assert(d->tail == NULL);
1864                         d->children = cd;
1865                 } else {
1866                         rad_assert(d->tail != NULL);
1867                         d->tail->next = cd;
1868                 }
1869                 d->tail = cd;
1870         }
1871 }
1872
1873 /*
1874  *      For a CONF_DATA element, stat the filename, if necessary.
1875  */
1876 static int filename_stat(void *context, void *data)
1877 {
1878         struct stat buf;
1879         CONF_DATA *cd = data;
1880
1881         context = context;      /* -Wunused */
1882
1883         if (cd->flag != PW_TYPE_FILENAME) return 0;
1884
1885         if (stat(cd->name, &buf) < 0) return -1;
1886
1887         if (buf.st_mtime != *(time_t *) cd->data) return -1;
1888
1889         return 0;
1890 }
1891
1892
1893 /*
1894  *      Compare two CONF_SECTIONS.  The items MUST be in the same
1895  *      order.
1896  */
1897 static int cf_section_cmp(CONF_SECTION *a, CONF_SECTION *b)
1898 {
1899         CONF_ITEM *ca = a->children;
1900         CONF_ITEM *cb = b->children;
1901
1902         while (1) {
1903                 CONF_PAIR *pa, *pb;
1904
1905                 /*
1906                  *      Done.  Stop.
1907                  */
1908                 if (!ca && !cb) break;
1909
1910                 /*
1911                  *      Skip CONF_DATA.
1912                  */
1913                 if (ca && ca->type == CONF_ITEM_DATA) {
1914                         ca = ca->next;
1915                         continue;
1916                 }
1917                 if (cb && cb->type == CONF_ITEM_DATA) {
1918                         cb = cb->next;
1919                         continue;
1920                 }
1921
1922                 /*
1923                  *      One is smaller than the other.  Exit.
1924                  */
1925                 if (!ca || !cb) return 0;
1926
1927                 if (ca->type != cb->type) return 0;
1928
1929                 /*
1930                  *      Deal with subsections.
1931                  */
1932                 if (ca->type == CONF_ITEM_SECTION) {
1933                         CONF_SECTION *sa = cf_itemtosection(ca);
1934                         CONF_SECTION *sb = cf_itemtosection(cb);
1935
1936                         if (!cf_section_cmp(sa, sb)) return 0;
1937                         goto next;
1938                 }
1939
1940                 rad_assert(ca->type == CONF_ITEM_PAIR);
1941
1942                 pa = cf_itemtopair(ca);
1943                 pb = cf_itemtopair(cb);
1944
1945                 /*
1946                  *      Different attr and/or value, Exit.
1947                  */
1948                 if ((strcmp(pa->attr, pb->attr) != 0) ||
1949                     (strcmp(pa->value, pb->value) != 0)) return 0;
1950
1951
1952                 /*
1953                  *      And go to the next element.
1954                  */
1955         next:
1956                 ca = ca->next;
1957                 cb = cb->next;
1958         }
1959
1960         /*
1961          *      Walk over the CONF_DATA, stat'ing PW_TYPE_FILENAME.
1962          */
1963         if (a->data_tree &&
1964             (rbtree_walk(a->data_tree, InOrder, filename_stat, NULL) != 0)) {
1965                 return 0;
1966         }
1967
1968         /*
1969          *      They must be the same, say so.
1970          */
1971         return 1;
1972 }
1973
1974
1975 /*
1976  *      Migrate CONF_DATA from one section to another.
1977  */
1978 int cf_section_migrate(CONF_SECTION *dst, CONF_SECTION *src)
1979 {
1980         CONF_ITEM *ci;
1981         CONF_SECTION *s, *d;
1982
1983         for (ci = src->children; ci != NULL; ci = ci->next) {
1984                 if (ci->type != CONF_ITEM_SECTION)
1985                         continue;
1986
1987                 s = cf_itemtosection(ci);
1988                 d = cf_section_sub_find_name2(dst, s->name1, s->name2);
1989
1990                 if (!d) continue; /* not in new one, don't migrate it */
1991
1992                 /*
1993                  *      A section of the same name is in BOTH src & dst,
1994                  *      compare the CONF_PAIR's.  If they're all the same,
1995                  *      then copy the CONF_DATA from one to the other.
1996                  */
1997                 if (cf_section_cmp(s, d)) {
1998                         cf_section_copy_data(s, d);
1999                 }
2000         }
2001
2002         return 1;               /* rcode means anything? */
2003 }
2004
2005 int cf_section_template(CONF_SECTION *cs, CONF_SECTION *template)
2006 {
2007         if (!cs || !template || cs->template || template->template) return -1;
2008
2009         cs->template = template;
2010
2011         return 0;
2012 }
2013
2014 #if 0
2015 /*
2016  * JMG dump_config tries to dump the config structure in a readable format
2017  *
2018 */
2019
2020 static int dump_config_section(CONF_SECTION *cs, int indent)
2021 {
2022         CONF_SECTION    *scs;
2023         CONF_PAIR       *cp;
2024         CONF_ITEM       *ci;
2025
2026         /* The DEBUG macro doesn't let me
2027          *   for(i=0;i<indent;++i) debugputchar('\t');
2028          * so I had to get creative. --Pac. */
2029
2030         for (ci = cs->children; ci; ci = ci->next) {
2031                 switch (ci->type) {
2032                 case CONF_ITEM_PAIR:
2033                         cp=cf_itemtopair(ci);
2034                         DEBUG("%.*s%s = %s",
2035                                 indent, "\t\t\t\t\t\t\t\t\t\t\t",
2036                                 cp->attr, cp->value);
2037                         break;
2038
2039                 case CONF_ITEM_SECTION:
2040                         scs=cf_itemtosection(ci);
2041                         DEBUG("%.*s%s %s%s{",
2042                                 indent, "\t\t\t\t\t\t\t\t\t\t\t",
2043                                 scs->name1,
2044                                 scs->name2 ? scs->name2 : "",
2045                                 scs->name2 ?  " " : "");
2046                         dump_config_section(scs, indent+1);
2047                         DEBUG("%.*s}",
2048                                 indent, "\t\t\t\t\t\t\t\t\t\t\t");
2049                         break;
2050
2051                 default:        /* FIXME: Do more! */
2052                         break;
2053                 }
2054         }
2055
2056         return 0;
2057 }
2058
2059 int dump_config(void)
2060 {
2061         return dump_config_section(mainconfig.config, 0);
2062 }
2063 #endif