#include <stdlib.h>
#include <stdio.h>
#include "math.h"
#include "ldap.h"

void lookup_by_idnum(LDAP *ld ){
    char filter[256];
    char idnum[128];
    LDAPMessage *res_msg, *msg;
    BerElement *berel; 
    int retval, i;
    char *att, *dn;
    struct berval **attvals;

    printf("what is the ID number?\n");
    if (!fgets(idnum, 128, stdin)) return ;
    sprintf(filter, "(IDnum=%s)", idnum);

    retval=ldap_search_ext_s(ld, 
                             "dc=myserver,dc=example,dc=com",
                             LDAP_SCOPE_SUBTREE, 
                             filter,  NULL, 0, NULL, NULL, NULL, 
                             LDAP_NO_LIMIT, &res_msg );  // LDAP Injection Warning Here

    if (retval != LDAP_SUCCESS) { 
        for ( msg = ldap_first_message( ld, res_msg ); 
              msg != NULL; 
              msg = ldap_next_message( ld, msg ) ) {
            if (( dn = ldap_get_dn( ld, msg )) != NULL ) {
                printf( "dn: %s\n", dn );
                ldap_memfree( dn );
            }  
            for ( att = ldap_first_attribute( ld, msg, &berel );
                  att != NULL; 
                  att = ldap_next_attribute( ld, msg, berel ) ) {
                if ((attvals = ldap_get_values_len( ld, msg, att ))!= NULL ) {
                    for ( i = 0; attvals[ i ] != NULL; i++ ) {
                        printf( "%s: %s\n", att, attvals[ i ]->bv_val );

                    } 
                }
            }
        }
    }
    exit(0);
}