openldap/servers/slapd/slapi/slapi_ops.c

/* $OpenLDAP$ */
/* This work is part of OpenLDAP Software <http://www.openldap.org/>.
 *
 * Copyright 2002-2005 The OpenLDAP Foundation.
 * Portions Copyright 1997,2002-2003 IBM Corporation.
 * All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted only as authorized by the OpenLDAP
 * Public License.
 *
 * A copy of this license is available in the file LICENSE in the
 * top-level directory of the distribution or, alternatively, at
 * <http://www.OpenLDAP.org/license.html>.
 */
/* ACKNOWLEDGEMENTS:
 * This work was initially developed by IBM Corporation for use in
 * IBM products and subsequently ported to OpenLDAP Software by
 * Steve Omrani.  Additional significant contributors include:
 *   Luke Howard
 */

#include "portable.h"

#include <ac/string.h>
#include <ac/stdarg.h>
#include <ac/ctype.h>
#include <ac/unistd.h>

#include <slap.h>
#include <lber_pvt.h>
#include <slapi.h>

/*
 * use a fake listener when faking a connection,
 * so it can be used in ACLs
 */
static struct slap_listener slap_unknown_listener = {
	BER_BVC("unknown"),	/* FIXME: use a URI form? (e.g. slapi://) */
	BER_BVC("UNKNOWN")
};

static void
slapi_int_send_ldap_result_shim(
	Operation	*op, 
	SlapReply	*rs )
{
	LDAPControl		**controls = NULL;
	size_t			i;
	plugin_result_callback	prc = NULL;
	void			*callback_data = NULL;

	assert( op->o_pb != NULL );

	slapi_pblock_get( op->o_pb, SLAPI_RESCONTROLS,             (void **)&controls );
	slapi_pblock_get( op->o_pb, SLAPI_X_INTOP_RESULT_CALLBACK, (void **)&prc );
	slapi_pblock_get( op->o_pb, SLAPI_X_INTOP_CALLBACK_DATA,   &callback_data );

	assert( controls == NULL );

	/* Copy these before they go out of scope */
	if ( rs->sr_ctrls != NULL ) {
		for ( i = 0; rs->sr_ctrls[i] != NULL; i++ )
			;

		controls = (LDAPControl **)slapi_ch_calloc( i + 1,
			sizeof(LDAPControl ));

		for ( i = 0; rs->sr_ctrls[i] != NULL; i++ )
			controls[i] = slapi_dup_control( rs->sr_ctrls[i] );

		controls[i] = NULL;
	}

	slapi_pblock_set( op->o_pb, SLAPI_RESCONTROLS,         (void *)controls );
	slapi_pblock_set( op->o_pb, SLAPI_PLUGIN_INTOP_RESULT, (void *)rs->sr_err );

	if ( prc != NULL ) {
		(*prc)( rs->sr_err, callback_data );
	}

	return;
}

static int
slapi_int_send_search_entry_shim(
	Operation	*op,
	SlapReply	*rs )
{
	plugin_search_entry_callback	psec = NULL;
	void				*callback_data = NULL;

	assert( op->o_pb != NULL );

	slapi_pblock_get( op->o_pb, SLAPI_X_INTOP_SEARCH_ENTRY_CALLBACK, (void **)&psec );
	slapi_pblock_get( op->o_pb, SLAPI_X_INTOP_CALLBACK_DATA,         &callback_data );

	if ( psec != NULL ) {
		return (*psec)( rs->sr_entry, callback_data );
	}

	return LDAP_SUCCESS;
}

static void
slapi_int_send_ldap_extended_shim(
	Operation	*op,	
	SlapReply	*rs )
{
	assert( op->o_pb != NULL );

	return;
}

static int
slapi_int_send_search_reference_shim(
	Operation	*op,	
	SlapReply	*rs )
{
	int				i, rc = LDAP_SUCCESS;
	plugin_referral_entry_callback	prec = NULL;
	void				*callback_data = NULL;

	assert( op->o_pb != NULL );

	slapi_pblock_get( op->o_pb, SLAPI_X_INTOP_REFERRAL_ENTRY_CALLBACK, (void **)&prec );
	slapi_pblock_get( op->o_pb, SLAPI_X_INTOP_CALLBACK_DATA,           &callback_data );

	if ( prec != NULL ) {
		for ( i = 0; rs->sr_ref[i].bv_val != NULL; i++ ) {
			rc = (*prec)( rs->sr_ref[i].bv_val, callback_data );
			if ( rc != LDAP_SUCCESS ) {
				break;
			}
		}
	}

	return rc;
}

static int
slapi_int_get_ctrls( Operation *op, SlapReply *rs, LDAPControl **controls )
{
	LDAPControl **c;
	int rc;

	op->o_ctrls = controls;
	if ( op->o_ctrls == NULL ) {
		return LDAP_SUCCESS;
	}

	for ( c = op->o_ctrls; *c != NULL; c++ ) {
		rc = slap_parse_ctrl( op, rs, *c, &rs->sr_text );
		if ( rc != LDAP_SUCCESS )
			break;
	}

	return rc;
}

/*
 * To allow plugins to forward frontend requests to internal operations,
 * the internal operation and connection structures should import as
 * much state as practicable from the supplied parameter block.
 */

/*
 * Select the backend to be used for an internal operation, either
 * from the operation target DN or from the parameter block.
 */
static int
slapi_int_pblock_get_backend( Slapi_PBlock *pb, Operation *op )
{
	int manageDsaIt = 0, isCritical;
	LDAPControl **controls = NULL;
	int rc;

	slapi_pblock_get( pb, SLAPI_REQCONTROLS, (void **)&controls );

	slapi_pblock_get( pb, SLAPI_MANAGEDSAIT, (void **)&manageDsaIt );
	if ( manageDsaIt != 0 )
		manageDsaIt = SLAP_CONTROL_CRITICAL;
	else if ( slapi_control_present( controls, SLAPI_CONTROL_MANAGEDSAIT_OID,
		    NULL, &isCritical ))
		manageDsaIt = isCritical ? SLAP_CONTROL_CRITICAL : SLAP_CONTROL_NONCRITICAL;

	/* let caller force a specific backend */
	slapi_pblock_get( pb, SLAPI_BACKEND, (void **)&op->o_bd );
	if ( op->o_bd == NULL ) {
		op->o_bd = select_backend( &op->o_req_ndn, manageDsaIt, 1 );
		if ( op->o_bd == NULL ) {
			if ( op->o_tag == LDAP_REQ_SEARCH && manageDsaIt > SLAP_CONTROL_NONE )
				rc = LDAP_NO_SUCH_OBJECT;
			else
				rc = LDAP_PARTIAL_RESULTS;
		}
	}

	if ( op->o_bd != NULL ) {
		rc = LDAP_SUCCESS;
	}

	return rc;
}

static int
slapi_int_pblock_get_connection( Slapi_PBlock *pb, Operation *op )
{
	char *connDn = NULL;
	Connection *conn = op->o_conn;

	slapi_pblock_get( pb, SLAPI_X_CONN_SSF, (void **)&conn->c_ssf );
	slapi_pblock_get( pb, SLAPI_X_CONN_SASL_CONTEXT, (void **)&conn->c_sasl_authctx );

	if ( slapi_pblock_get( pb, SLAPI_CONN_DN, (void **)&connDn ) != 0 ||
	     connDn == NULL ) {
		/* default to operation DN */
		conn->c_ndn = op->o_ndn;
		conn->c_dn = op->o_ndn;
	} else {
		/* NB: conn DN must be normalized */
		conn->c_ndn.bv_val = connDn;
		conn->c_ndn.bv_len = strlen( connDn );

		conn->c_dn = conn->c_ndn;
	}

	return LDAP_SUCCESS;
}

static int
slapi_int_pblock_get_operation( Slapi_PBlock *pb, Operation *op, SlapReply *rs )
{
	int isRoot = 0;
	int isUpdateDn = 0;
	char *requestorDn = NULL;
	struct berval targetDn = BER_BVNULL;
	LDAPControl **controls;
	int rc;

	/* All internal operations must specify a target DN */
	if ( slapi_pblock_get( pb, SLAPI_TARGET_DN, (void **)&targetDn.bv_val ) != 0 ||
	     targetDn.bv_val == NULL ) {
		return LDAP_PARAM_ERROR; 
	}

	targetDn.bv_len = strlen( targetDn.bv_val );

	rc = dnPrettyNormal( NULL, &targetDn, &op->o_req_dn, &op->o_req_ndn, NULL );
	if ( rc != LDAP_SUCCESS ) {
		return rc;
	}

	rc = slapi_int_pblock_get_backend( pb, op );
	if ( rc != LDAP_SUCCESS ) {
		return rc;
	}

	slapi_pblock_get( pb, SLAPI_REQUESTOR_ISROOT, (void **)&isRoot );
	slapi_pblock_get( pb, SLAPI_REQUESTOR_ISUPDATEDN, (void **)&isUpdateDn );
	/* NB: requestor DN must be normalized */
	slapi_pblock_get( pb, SLAPI_REQUESTOR_DN, (void **)&requestorDn );

	/* Default authorization identity for internal operations is root DN */
	if ( isRoot || requestorDn == NULL ) {
		op->o_dn = op->o_bd->be_rootdn;
		op->o_ndn = op->o_bd->be_rootndn;
		isRoot = 1;
	} else {
		op->o_ndn.bv_val = requestorDn;
		op->o_ndn.bv_len = strlen( requestorDn );
		op->o_dn = op->o_ndn;
	}

	if ( isRoot )
		slapi_pblock_set( pb, SLAPI_REQUESTOR_ISROOT, (void *)isRoot );

	rc = slapi_int_pblock_get_connection( pb, op );
	if ( rc != LDAP_SUCCESS ) {
		return rc;
	}

	slapi_pblock_get( pb, SLAPI_REQCONTROLS, (void **)&controls );
	rc = slapi_int_get_ctrls( op, rs, controls );
	if ( rc != LDAP_SUCCESS ) {
		return rs->sr_err;
	}

	return LDAP_SUCCESS;
}

int
slapi_int_init_connection( Slapi_PBlock *pb,
	SlapReply *rs,
	int OpType,
	Connection **pConn )
{
	Connection *conn;
	Operation *op;
	ber_len_t max = sockbuf_max_incoming;
	int rc;

	conn = (Connection *) slapi_ch_calloc(1, sizeof(Connection));

	LDAP_STAILQ_INIT( &conn->c_pending_ops );

	op = (Operation *) slapi_ch_calloc( 1, OPERATION_BUFFER_SIZE );
	op->o_hdr = (Opheader *)(op + 1);
	op->o_controls = (void **)(op->o_hdr + 1);
	op->o_pb = pb;
	op->o_extensions = NULL;

	conn->c_pending_ops.stqh_first = op;

	/* connection object authorization information */
	conn->c_authtype = LDAP_AUTH_NONE;
	conn->c_authmech.bv_val = NULL;
	conn->c_authmech.bv_len = 0;
	conn->c_dn.bv_val = NULL;
	conn->c_dn.bv_len = 0;
	conn->c_ndn.bv_val = NULL;
	conn->c_ndn.bv_len = 0;

	conn->c_listener = &slap_unknown_listener;
	ber_dupbv( &conn->c_peer_domain, (struct berval *)&slap_unknown_bv );
	ber_dupbv( &conn->c_peer_name, (struct berval *)&slap_unknown_bv );

	LDAP_STAILQ_INIT( &conn->c_ops );

	conn->c_sasl_bind_mech.bv_val = NULL;
	conn->c_sasl_bind_mech.bv_len = 0;
	conn->c_sasl_authctx = NULL;
	conn->c_sasl_sockctx = NULL;
	conn->c_sasl_extra = NULL;

	conn->c_sb = ber_sockbuf_alloc( );

	ber_sockbuf_ctrl( conn->c_sb, LBER_SB_OPT_SET_MAX_INCOMING, &max );

	conn->c_currentber = NULL;

	/* should check status of thread calls */
	ldap_pvt_thread_mutex_init( &conn->c_mutex );
	ldap_pvt_thread_mutex_init( &conn->c_write_mutex );
	ldap_pvt_thread_cond_init( &conn->c_write_cv );

	ldap_pvt_thread_mutex_lock( &conn->c_mutex );

	conn->c_n_ops_received = 0;
	conn->c_n_ops_executing = 0;
	conn->c_n_ops_pending = 0;
	conn->c_n_ops_completed = 0;

	conn->c_n_get = 0;
	conn->c_n_read = 0;
	conn->c_n_write = 0;

	conn->c_protocol = LDAP_VERSION3; 

	conn->c_activitytime = conn->c_starttime = slap_get_time();

	/*
	 * A real connection ID is required, because syncrepl associates
	 * pending CSNs with unique ( connection, operation ) tuples.
	 * Setting a fake connection ID will cause slap_get_commit_csn()
	 * to return a stale value.
	 */
	connection_assign_nextid( conn );

	conn->c_conn_state  = 0x01;	/* SLAP_C_ACTIVE */
	conn->c_struct_state = 0x02;	/* SLAP_C_USED */

	conn->c_ssf = conn->c_transport_ssf = 0;
	conn->c_tls_ssf = 0;

	backend_connection_init( conn );

	conn->c_send_ldap_result = slapi_int_send_ldap_result_shim;
	conn->c_send_search_entry = slapi_int_send_search_entry_shim;
	conn->c_send_ldap_extended = slapi_int_send_ldap_extended_shim;
	conn->c_send_search_reference = slapi_int_send_search_reference_shim;

	/* operation object */
	op->o_tag = OpType;
	op->o_protocol = LDAP_VERSION3; 
	op->o_authmech.bv_val = NULL; 
	op->o_authmech.bv_len = 0; 
	op->o_time = slap_get_time();
	op->o_do_not_cache = 1;
	op->o_threadctx = ldap_pvt_thread_pool_context();
	op->o_tmpmemctx = NULL;
	op->o_tmpmfuncs = &ch_mfuncs;
	op->o_conn = conn;
	op->o_connid = conn->c_connid;

	rc = slapi_int_pblock_get_operation( pb, op, rs );

	slapi_pblock_set( op->o_pb, SLAPI_OPERATION, op );
	slapi_pblock_set( op->o_pb, SLAPI_CONNECTION, conn );

	ldap_pvt_thread_mutex_unlock( &conn->c_mutex );

	if ( rc != LDAP_SUCCESS ) {
		slapi_int_connection_destroy( &conn );
		return rc;
	}

	*pConn = conn;

	return LDAP_SUCCESS;
}

void slapi_int_connection_destroy( Connection **pConn )
{
	Connection *conn = *pConn;
	Operation *op;

	if ( conn == NULL ) {
		return;
	}

	op = (Operation *)conn->c_pending_ops.stqh_first;

	slap_graduate_commit_csn( op );

	if ( op->o_req_dn.bv_val != NULL ) {
		slapi_ch_free( (void **)&op->o_req_dn.bv_val );
	}
	if ( op->o_req_ndn.bv_val != NULL ) {
		slapi_ch_free( (void **)&op->o_req_ndn.bv_val );
	}

	if ( conn->c_sb != NULL ) {
		ber_sockbuf_free( conn->c_sb );
	}

	slapi_pblock_set( op->o_pb, SLAPI_OPERATION, NULL );
	slapi_pblock_set( op->o_pb, SLAPI_CONNECTION, NULL );

	if ( op != NULL ) {
		slapi_ch_free( (void **)&op );
	}

	slapi_ch_free( (void **)pConn );
}

/*
 * Function : values2obj
 * Convert an array of strings into a BerVarray.
 * the strings.
 */
static int
values2obj_copy(
	char **ppValue,
	BerVarray *bvobj )
{
	int i;
	BerVarray tmpberval;

	if ( ppValue == NULL ) {
		*bvobj = NULL;
		return LDAP_SUCCESS;
	}

	for ( i = 0; ppValue[i] != NULL; i++ )
		; /* EMPTY */

	tmpberval = (BerVarray)slapi_ch_malloc( (i+1) * (sizeof(struct berval)) );
	if ( tmpberval == NULL ) {
		return LDAP_NO_MEMORY;
	}
	for ( i = 0; ppValue[i] != NULL; i++ ) {
		size_t len = strlen( ppValue[i] );

		tmpberval[i].bv_val = slapi_ch_malloc( len + 1 );
		AC_MEMCPY( tmpberval[i].bv_val, ppValue[i], len + 1 );
		tmpberval[i].bv_len = len;
	}
	tmpberval[i].bv_val = NULL;
	tmpberval[i].bv_len = 0;

	*bvobj = tmpberval;

	return LDAP_SUCCESS;
}

static int
bvptr2obj_copy(
	struct berval	**bvptr, 
	BerVarray	*bvobj )
{
	int		i;
	BerVarray	tmpberval;

	if ( bvptr == NULL ) {
		*bvobj = NULL;
		return LDAP_SUCCESS;
	}

	for ( i = 0; bvptr[i] != NULL; i++ )
		; /* EMPTY */

	tmpberval = (BerVarray)slapi_ch_malloc( (i + 1) * sizeof(struct berval));
	if ( tmpberval == NULL ) {
		return LDAP_NO_MEMORY;
	} 

	for ( i = 0; bvptr[i] != NULL; i++ ) {
		tmpberval[i].bv_val = slapi_ch_malloc( bvptr[i]->bv_len );
		tmpberval[i].bv_len = bvptr[i]->bv_len;
		AC_MEMCPY( tmpberval[i].bv_val, bvptr[i]->bv_val, bvptr[i]->bv_len );
	}

	tmpberval[i].bv_val = NULL;
	tmpberval[i].bv_len = 0;

	*bvobj = tmpberval;

	return LDAP_SUCCESS;
}

/*
 * Function : slapi_int_ldapmod_to_entry 
 * convert a dn plus an array of LDAPMod struct ptrs to an entry structure
 * with a link list of the correspondent attributes.
 * Return value : LDAP_SUCCESS
 *                LDAP_NO_MEMORY
 *                LDAP_OTHER
*/
static Entry *
slapi_int_ldapmod_to_entry(
	Connection *pConn,
	char *ldn, 
	LDAPMod **mods )
{
	struct berval		dn = BER_BVNULL;
	Entry			*pEntry=NULL;
	LDAPMod			*pMod;
	struct berval		*bv;
	Operation		*op;

	Modifications		*modlist = NULL;
	Modifications		**modtail = &modlist;
	Modifications		tmp;

	int			rc = LDAP_SUCCESS;
	int			i;

	const char 		*text = NULL;

	op = (Operation *)pConn->c_pending_ops.stqh_first;

	pEntry = (Entry *) ch_calloc( 1, sizeof(Entry) );
	if ( pEntry == NULL) {
		rc = LDAP_NO_MEMORY;
		goto cleanup;
	} 

	dn.bv_val = ldn;
	dn.bv_len = strlen( ldn );

	rc = dnPrettyNormal( NULL, &dn, &pEntry->e_name, &pEntry->e_nname, NULL );
	if ( rc != LDAP_SUCCESS ) {
		goto cleanup;
	}

	if ( rc == LDAP_SUCCESS ) {
		for ( i = 0, pMod = mods[0]; rc == LDAP_SUCCESS && pMod != NULL; pMod = mods[++i]) {
			Modifications *mod;

			if ( (pMod->mod_op & LDAP_MOD_BVALUES) != 0 ) {
				/*
				 * Convert an array of pointers to bervals to
				 * an array of bervals. Note that we need to copy the
				 * values too, as the slap_mods_check() will free the
			 	 * original values after prettying; the modifications
				 * being passed in may not have been allocated on the
				 * heap.
				 */
				rc = bvptr2obj_copy( pMod->mod_bvalues, &bv );
				if ( rc != LDAP_SUCCESS ) goto cleanup;
				tmp.sml_type.bv_val = pMod->mod_type;
				tmp.sml_type.bv_len = strlen( pMod->mod_type );
				tmp.sml_values = bv;
				tmp.sml_nvalues = NULL;
		
				mod  = (Modifications *) ch_malloc( sizeof(Modifications) );

				mod->sml_op = LDAP_MOD_ADD;
				mod->sml_flags = 0;
				mod->sml_next = NULL;
				mod->sml_desc = NULL;
				mod->sml_type = tmp.sml_type;
				mod->sml_values = tmp.sml_values;
				mod->sml_nvalues = tmp.sml_nvalues;

				*modtail = mod;
				modtail = &mod->sml_next;

			} else {
				/* attr values are in string format, need to be converted */
				/* to an array of bervals */ 
				if ( pMod->mod_values == NULL ) {
					rc = LDAP_OTHER;
				} else {
					rc = values2obj_copy( pMod->mod_values, &bv );
					if ( rc != LDAP_SUCCESS ) goto cleanup;
					tmp.sml_type.bv_val = pMod->mod_type;
					tmp.sml_type.bv_len = strlen( pMod->mod_type );
					tmp.sml_values = bv;
					tmp.sml_nvalues = NULL;
		
					mod  = (Modifications *) ch_malloc( sizeof(Modifications) );

					mod->sml_op = LDAP_MOD_ADD;
					mod->sml_flags = 0;
					mod->sml_next = NULL;
					mod->sml_desc = NULL;
					mod->sml_type = tmp.sml_type;
					mod->sml_values = tmp.sml_values;
					mod->sml_nvalues = tmp.sml_nvalues;

					*modtail = mod;
					modtail = &mod->sml_next;
				}
			}
		} /* for each LDAPMod */
	}

	op->o_bd = select_backend( &pEntry->e_nname, 0, 0 );
	if ( op->o_bd == NULL ) {
		rc = LDAP_PARTIAL_RESULTS;
	} else {
		int repl_user = be_isupdate_dn( op->o_bd, &op->o_bd->be_rootdn );
        	if ( !op->o_bd->be_update_ndn.bv_len || repl_user ) {
			int	update = !BER_BVISNULL( &op->o_bd->be_update_ndn );
			char	textbuf[ SLAP_TEXT_BUFLEN ];
			size_t	textlen = sizeof( textbuf );

			rc = slap_mods_check( modlist, &text, 
				textbuf, textlen, NULL );

			if ( rc != LDAP_SUCCESS) {
				goto cleanup;
			}

			if ( !update ) {
				rc = slap_mods_no_user_mod_check( op, modlist,
					&text, textbuf, textlen );
				if ( rc != LDAP_SUCCESS) {
					goto cleanup;
				}
			}

			if ( !repl_user ) {
				rc = slap_mods_opattrs( op, modlist, modtail,
					&text, textbuf, textlen, 1 );
				if ( rc != LDAP_SUCCESS) {
					goto cleanup;
				}
			}

			rc = slap_mods2entry( modlist, &pEntry, repl_user,
					      0, &text, textbuf, textlen );
			if (rc != LDAP_SUCCESS) {
				goto cleanup;
			}

		} else {
			rc = LDAP_REFERRAL;
		}
	}

cleanup:;
	if ( modlist != NULL )
		slap_mods_free( modlist );
	if ( rc != LDAP_SUCCESS ) {
		if ( pEntry != NULL ) {
			slapi_entry_free( pEntry );
		}
		pEntry = NULL;
	}

	return( pEntry );
}

int
slapi_delete_internal_pb( Slapi_PBlock *pb )
{
#ifdef LDAP_SLAPI
	Connection		*conn = NULL;
	Operation		*op = NULL;
	int			operation_flags = 0;

	SlapReply		rs = { REP_RESULT };

	if ( pb == NULL ) {
		return -1;
	}

	slapi_pblock_get( pb, SLAPI_X_INTOP_FLAGS, &operation_flags );

	rs.sr_err = slapi_int_init_connection( pb, &rs, LDAP_REQ_DELETE, &conn );
	if ( rs.sr_err != LDAP_SUCCESS ) {
		goto cleanup;
	}

	op = conn->c_pending_ops.stqh_first;

	if ( op->o_bd->be_delete != NULL ) {
		int repl_user = be_isupdate( op );
		if ( !op->o_bd->be_update_ndn.bv_len || repl_user ) {
			slap_callback cb = { NULL, slap_replog_cb, NULL, NULL };
			if ( operation_flags & SLAPI_OP_FLAG_LOG_CHANGE )
				op->o_callback = &cb;

			op->o_bd->be_delete( op, &rs );
        	} else {
			rs.sr_err = LDAP_REFERRAL;
        	}
	} else {
		rs.sr_err = LDAP_UNWILLING_TO_PERFORM;
	}

cleanup:
	slapi_pblock_set( pb, SLAPI_PLUGIN_INTOP_RESULT, (void *)rs.sr_err );
	slapi_int_connection_destroy( &conn );

	return 0;
#else
	return -1;
#endif /* LDAP_SLAPI */
}

int
slapi_add_internal_pb( Slapi_PBlock *pb )
{
#ifdef LDAP_SLAPI
	Connection		*conn = NULL;
	Slapi_Entry		*entry = NULL;
	Slapi_Entry		*argEntry = NULL;
	char			*dn = NULL;
	LDAPMod			**mods = NULL;
	int			operation_flags = 0;
	Operation		*op = NULL;
	int			i;

	SlapReply		rs = { REP_RESULT };

	if ( pb == NULL ) {
		return -1;
	}

	slapi_pblock_get( pb, SLAPI_ADD_ENTRY,     (void **)&argEntry );
	slapi_pblock_get( pb, SLAPI_ADD_TARGET,    (void **)&dn );
	slapi_pblock_get( pb, SLAPI_MODIFY_MODS,   (void **)&mods );
	slapi_pblock_get( pb, SLAPI_X_INTOP_FLAGS, (void **)&operation_flags );

	if ( argEntry != NULL ) {
		/*
		 * The caller can specify a new entry, or a target DN and set
		 * of modifications, but not both.
		 */
		if ( dn != NULL ) {
			rs.sr_err = LDAP_PARAM_ERROR;
			goto cleanup;
		}

		/*
		 * Set the DN here so that slapi_int_init_backend() will select
		 * correct backend.
		 */
		dn = slapi_entry_get_dn( argEntry );
		slapi_pblock_set( pb, SLAPI_ADD_TARGET, &entry->e_nname.bv_val );
	}

	rs.sr_err = slapi_int_init_connection( pb, &rs, LDAP_REQ_ADD, &conn );
	if ( rs.sr_err != LDAP_SUCCESS ) {
		goto cleanup;
	}

	if ( argEntry != NULL ) {
		entry = slapi_entry_dup( argEntry );
	} else {
		if ( mods == NULL || dn == NULL ) {
			rs.sr_err = LDAP_PARAM_ERROR;
			goto cleanup;
		}

		for ( i = 0; mods[i] != NULL; i++ ) {
			if ( (mods[i]->mod_op & LDAP_MOD_OP ) != LDAP_MOD_ADD ) {
				rs.sr_err = LDAP_PARAM_ERROR;
				goto cleanup;
			}
		}

		entry = slapi_int_ldapmod_to_entry( conn, dn, mods );
		if ( entry == NULL ) {
			rs.sr_err = LDAP_OTHER;
			goto cleanup;
		}
	}

	op = (Operation *)conn->c_pending_ops.stqh_first;
	op->oq_add.rs_e = entry;

	if ( op->o_bd->be_add != NULL ) {
		int repl_user = be_isupdate( op );
		if ( !op->o_bd->be_update_ndn.bv_len || repl_user ) {
			slap_callback cb = { NULL, slap_replog_cb, NULL, NULL };

			if ( operation_flags & SLAPI_OP_FLAG_LOG_CHANGE )
				op->o_callback = &cb;

			if ( op->o_bd->be_add( op, &rs ) == LDAP_SUCCESS ) {
				be_entry_release_w( op, entry );
				entry = NULL;
			}
		} else {
			rs.sr_err = LDAP_REFERRAL;
		}
	} else {
		rs.sr_err = LDAP_UNWILLING_TO_PERFORM;
	}

cleanup:
	slapi_pblock_set( pb, SLAPI_PLUGIN_INTOP_RESULT, (void *)rs.sr_err );

	if ( entry != NULL ) {
		slapi_entry_free( entry );
	}
	if ( argEntry != NULL ) {
		slapi_pblock_set( pb, SLAPI_ADD_TARGET, NULL );
	}

	slapi_int_connection_destroy( &conn );

	return 0;
#else
	return -1;
#endif /* LDAP_SLAPI */
}

int
slapi_modrdn_internal_pb( Slapi_PBlock *pb )
{
#ifdef LDAP_SLAPI
	struct berval		dn = BER_BVNULL;
	struct berval		newrdn = BER_BVNULL;
	struct berval		newsupdn = BER_BVNULL;
	struct berval		newSuperiorPretty = BER_BVNULL;
	struct berval		newSuperiorNormalized = BER_BVNULL;
	Connection		*conn = NULL;
	Operation		*op = NULL;
	int			manageDsaIt = SLAP_CONTROL_NONE;
	int			isCritical;

	char			*lnewrdn;
	char			*newsuperior;
	int			deloldrdn;
	int			operation_flags;

	SlapReply		rs = { REP_RESULT };

	if ( pb == NULL ) {
		return -1;
	}

	slapi_pblock_get( pb, SLAPI_MODRDN_NEWRDN,      (void **)&lnewrdn );
	slapi_pblock_get( pb, SLAPI_MODRDN_NEWSUPERIOR, (void **)&newsuperior );
	slapi_pblock_get( pb, SLAPI_MODRDN_DELOLDRDN,   (void **)&deloldrdn );
	slapi_pblock_get( pb, SLAPI_X_INTOP_FLAGS,      (void **)&operation_flags );

	rs.sr_err = slapi_int_init_connection( pb, &rs, LDAP_REQ_MODRDN, &conn );
	if ( rs.sr_err != LDAP_SUCCESS ) {
		goto cleanup;
	}

	op = (Operation *)conn->c_pending_ops.stqh_first;

	if ( op->o_req_dn.bv_len == 0 ) {
		rs.sr_err = LDAP_UNWILLING_TO_PERFORM;
		goto cleanup;
	}

	newrdn.bv_val = lnewrdn;
	newrdn.bv_len = strlen( lnewrdn );

	rs.sr_err = dnPrettyNormal( NULL, &newrdn, &op->oq_modrdn.rs_newrdn, &op->oq_modrdn.rs_nnewrdn, NULL );
	if ( rs.sr_err != LDAP_SUCCESS ) {
		goto cleanup;
	}

	if ( rdn_validate( &op->oq_modrdn.rs_nnewrdn ) != LDAP_SUCCESS ) {
		goto cleanup;
	}

	if ( newsuperior != NULL ) {
		newsupdn.bv_val = (char *)newsuperior;
		newsupdn.bv_len = strlen( newsuperior );

		rs.sr_err = dnPrettyNormal( NULL, &newsupdn, &newSuperiorPretty, &newSuperiorNormalized, NULL );
		if ( rs.sr_err != LDAP_SUCCESS )
			goto cleanup;

		op->oq_modrdn.rs_newSup = &newSuperiorPretty;
		op->oq_modrdn.rs_nnewSup = &newSuperiorNormalized;
	} else {
		op->oq_modrdn.rs_newSup = NULL;
		op->oq_modrdn.rs_nnewSup = NULL;
	}

	op->oq_modrdn.rs_deleteoldrdn = deloldrdn;

	if ( op->o_bd->be_modrdn != NULL ) {
		int repl_user = be_isupdate( op );
		if ( !op->o_bd->be_update_ndn.bv_len || repl_user ) {
			slap_callback cb = { NULL, slap_replog_cb, NULL, NULL };

			if ( operation_flags & SLAPI_OP_FLAG_LOG_CHANGE )
				op->o_callback = &cb;

			op->o_bd->be_modrdn( op, &rs );
		} else {
			rs.sr_err = LDAP_REFERRAL;
		}
	} else {
		rs.sr_err = LDAP_UNWILLING_TO_PERFORM;
	}

cleanup:
	slapi_pblock_set( pb, SLAPI_PLUGIN_INTOP_RESULT, (void *)rs.sr_err );

	if ( op->oq_modrdn.rs_newrdn.bv_val != NULL )
		slapi_ch_free_string( &op->oq_modrdn.rs_newrdn.bv_val );
	if ( op->oq_modrdn.rs_nnewrdn.bv_val != NULL )
		slapi_ch_free_string( &op->oq_modrdn.rs_nnewrdn.bv_val );
	if ( newSuperiorPretty.bv_val != NULL )
		slapi_ch_free_string( &newSuperiorPretty.bv_val );
	if ( newSuperiorNormalized.bv_val != NULL )
		slapi_ch_free_string( &newSuperiorNormalized.bv_val );

	slapi_int_connection_destroy( &conn );

	return 0;
#else
	return -1;
#endif /* LDAP_SLAPI */
}

int slapi_modify_internal_pb( Slapi_PBlock *pb )
{
#ifdef LDAP_SLAPI
	int			i;
	Connection		*conn = NULL;
	Operation		*op = NULL;

	struct berval dn = BER_BVNULL;

	int			manageDsaIt = SLAP_CONTROL_NONE;
	int			isCritical;
	struct berval		*bv;
	LDAPMod			*pMod;

	Modifications		*modlist = NULL;
	Modifications		**modtail = &modlist;
	Modifications		tmp;

	LDAPMod			**mods = NULL;
	int			operation_flags = 0;

	SlapReply		rs = { REP_RESULT };

	if ( pb == NULL ) {
		return -1;
	}

	slapi_pblock_get( pb, SLAPI_MODIFY_MODS,   (void **)&mods );
	slapi_pblock_get( pb, SLAPI_X_INTOP_FLAGS, (void **)&operation_flags );

	if ( mods == NULL || mods[0] == NULL ) {
		rs.sr_err = LDAP_PARAM_ERROR ;
		goto cleanup;
	}

	rs.sr_err = slapi_int_init_connection( pb, &rs, LDAP_REQ_MODIFY, &conn );
	if ( rs.sr_err != LDAP_SUCCESS ) {
		goto cleanup;
	}

	for ( i = 0, pMod = mods[0];
		rs.sr_err == LDAP_SUCCESS && pMod != NULL; 
		pMod = mods[++i] )
	{
		Modifications *mod;

		if ( (pMod->mod_op & LDAP_MOD_BVALUES) != 0 ) {
			/*
			 * attr values are in berval format
			 * convert an array of pointers to bervals
			 * to an array of bervals
			 */
			rs.sr_err = bvptr2obj_copy( pMod->mod_bvalues, &bv );
			if ( rs.sr_err != LDAP_SUCCESS )
				goto cleanup;
			tmp.sml_type.bv_val = pMod->mod_type;
			tmp.sml_type.bv_len = strlen( pMod->mod_type );
			tmp.sml_values = bv;
			tmp.sml_nvalues = NULL;

			mod  = (Modifications *)ch_malloc( sizeof(Modifications) );

			mod->sml_op = pMod->mod_op & LDAP_MOD_OP;
			mod->sml_flags = 0;
			mod->sml_next = NULL;
			mod->sml_desc = NULL;
			mod->sml_type = tmp.sml_type;
			mod->sml_values = tmp.sml_values;
			mod->sml_nvalues = tmp.sml_nvalues;
		} else { 
			rs.sr_err = values2obj_copy( pMod->mod_values, &bv );
			if ( rs.sr_err != LDAP_SUCCESS )
				goto cleanup;
			tmp.sml_type.bv_val = pMod->mod_type;
			tmp.sml_type.bv_len = strlen( pMod->mod_type );
			tmp.sml_values = bv;
			tmp.sml_nvalues = NULL;

			mod  = (Modifications *) ch_malloc( sizeof(Modifications) );

			mod->sml_op = pMod->mod_op & LDAP_MOD_OP;
			mod->sml_flags = 0;
			mod->sml_next = NULL;
			mod->sml_desc = NULL;
			mod->sml_type = tmp.sml_type;
			mod->sml_values = tmp.sml_values;
			mod->sml_nvalues = tmp.sml_nvalues;
		}
		*modtail = mod;
		modtail = &mod->sml_next;

		switch( pMod->mod_op & LDAP_MOD_OP ) {
		case LDAP_MOD_ADD:
		if ( mod->sml_values == NULL ) {
			rs.sr_err = LDAP_PROTOCOL_ERROR;
			goto cleanup;
		}

		/* fall through */
		case LDAP_MOD_DELETE:
		case LDAP_MOD_REPLACE:
		case LDAP_MOD_INCREMENT:
		break;

		default:
			rs.sr_err = LDAP_PROTOCOL_ERROR;
			goto cleanup;
		}
	} 
	*modtail = NULL;

	op = (Operation *)conn->c_pending_ops.stqh_first;

	if ( op->o_req_ndn.bv_len == 0 ) {
		rs.sr_err = LDAP_UNWILLING_TO_PERFORM;
		goto cleanup;
	}

	op->oq_modify.rs_modlist = modlist;

	if ( op->o_bd->be_modify != NULL ) {
		int repl_user = be_isupdate( op );
		if ( !op->o_bd->be_update_ndn.bv_len || repl_user ) {
			int		update = !BER_BVISEMPTY( &op->o_bd->be_update_ndn );
			const char	*text = NULL;
			char		textbuf[ SLAP_TEXT_BUFLEN ];
			size_t		textlen = sizeof( textbuf );
			slap_callback	cb = { NULL, slap_replog_cb, NULL, NULL };

			rs.sr_err = slap_mods_check( modlist,
				&text, textbuf, textlen, NULL );
			if ( rs.sr_err != LDAP_SUCCESS ) {
				goto cleanup;
			}

			if ( !update ) {
				rs.sr_err = slap_mods_no_user_mod_check( op, modlist,
					&text, textbuf, textlen );
				if ( rs.sr_err != LDAP_SUCCESS ) {
					goto cleanup;
				}
			}

			if ( !repl_user ) {
				rs.sr_err = slap_mods_opattrs( op, modlist,
						modtail, &text, textbuf, 
						textlen, 1 );
				if ( rs.sr_err != LDAP_SUCCESS ) {
					goto cleanup;
				}
			}

			if ( operation_flags & SLAPI_OP_FLAG_LOG_CHANGE )
				op->o_callback = &cb;

			op->o_bd->be_modify( op, &rs );
		} else {
			rs.sr_err = LDAP_REFERRAL;
		}
	} else {
		rs.sr_err = LDAP_UNWILLING_TO_PERFORM;
	}

cleanup:
	slapi_pblock_set( pb, SLAPI_PLUGIN_INTOP_RESULT, (void *)rs.sr_err );

	if ( modlist != NULL )
		slap_mods_free( modlist );

	slapi_int_connection_destroy( &conn );

	return 0;
#else
	return -1;
#endif /* LDAP_SLAPI */
}

#ifdef LDAP_SLAPI
static int
slapi_int_search_entry_callback( Slapi_Entry *entry, void *callback_data )
{
	int nentries = 0, i = 0;
	Slapi_Entry **head = NULL, **tp;
	Slapi_PBlock *pb = (Slapi_PBlock *)callback_data;

	entry = slapi_entry_dup( entry );
	if ( entry == NULL ) {
		return 1;
	}

	slapi_pblock_get( pb, SLAPI_NENTRIES, &nentries );
	slapi_pblock_get( pb, SLAPI_PLUGIN_INTOP_SEARCH_ENTRIES, &head );
	
	i = nentries + 1;
	if ( nentries == 0 ) {
		tp = (Slapi_Entry **)slapi_ch_malloc( 2 * sizeof(Slapi_Entry *) );
		if ( tp == NULL ) {
			slapi_entry_free( entry );
			return 1;
		}

		tp[ 0 ] = entry;
	} else {
		tp = (Slapi_Entry **)slapi_ch_realloc( (char *)head,
				sizeof(Slapi_Entry *) * ( i + 1 ) );
		if ( tp == NULL ) {
			slapi_entry_free( entry );
			return 1;
		}
		tp[ i - 1 ] = entry;
	}
	tp[ i ] = NULL;
	          
	slapi_pblock_set( pb, SLAPI_PLUGIN_INTOP_SEARCH_ENTRIES, (void *)tp );
	slapi_pblock_set( pb, SLAPI_NENTRIES, (void *)i );

	return LDAP_SUCCESS;
}
#endif /* LDAP_SLAPI */

int slapi_search_internal_pb( Slapi_PBlock *pb )
{
#ifdef LDAP_SLAPI
	return slapi_search_internal_callback_pb( pb,
		(void *)pb,
		NULL,
		slapi_int_search_entry_callback,
		NULL );
#else
	return -1;
#endif
}

int slapi_search_internal_callback_pb( Slapi_PBlock *pb,
	void *callback_data,
	plugin_result_callback prc,
	plugin_search_entry_callback psec,
	plugin_referral_entry_callback prec )
{
#ifdef LDAP_SLAPI
	Connection		*conn = NULL;
	Operation		*op = NULL;
	struct berval		dn = BER_BVNULL;
	Filter			*filter = NULL;
	struct berval		fstr = BER_BVNULL;
	AttributeName		*an = NULL;
	const char		*text = NULL;

	int			manageDsaIt = SLAP_CONTROL_NONE;
	int			isCritical;
	int			i;

	int			scope = LDAP_SCOPE_BASE;
	char			*filStr = NULL;
	LDAPControl		**controls = NULL;
	char			**attrs = NULL;
	char			*uniqueid = NULL;
	int			attrsonly = 0;
	int			operation_flags = 0;
	int			freeFilter = 0;

	SlapReply		rs = { REP_RESULT };

	if ( pb == NULL ) {
		return -1;
	}

	slapi_pblock_get( pb, SLAPI_SEARCH_SCOPE,     (void **)&scope );
	slapi_pblock_get( pb, SLAPI_SEARCH_FILTER,    (void **)&filter );
	slapi_pblock_get( pb, SLAPI_SEARCH_STRFILTER, (void **)&filStr );
	slapi_pblock_get( pb, SLAPI_SEARCH_ATTRS,     (void **)&attrs );
	slapi_pblock_get( pb, SLAPI_SEARCH_ATTRSONLY, (void **)&attrsonly );
	slapi_pblock_get( pb, SLAPI_REQCONTROLS,      (void **)&controls );
	slapi_pblock_get( pb, SLAPI_TARGET_UNIQUEID,  (void **)&uniqueid );
	slapi_pblock_get( pb, SLAPI_X_INTOP_FLAGS,    (void **)&operation_flags );

	rs.sr_err = slapi_int_init_connection( pb, &rs, LDAP_REQ_SEARCH, &conn );
	if ( rs.sr_err != LDAP_SUCCESS ) {
		goto cleanup;
	}

	/* search callback and arguments */
	slapi_pblock_set( pb, SLAPI_X_INTOP_RESULT_CALLBACK,         (void *)prc );
	slapi_pblock_set( pb, SLAPI_X_INTOP_SEARCH_ENTRY_CALLBACK,   (void *)psec );
	slapi_pblock_set( pb, SLAPI_X_INTOP_REFERRAL_ENTRY_CALLBACK, (void *)prec );
	slapi_pblock_set( pb, SLAPI_X_INTOP_CALLBACK_DATA,           (void *)callback_data );

	op = (Operation *)conn->c_pending_ops.stqh_first;

	switch ( scope ) {
		case LDAP_SCOPE_BASE:
		case LDAP_SCOPE_ONELEVEL:
		case LDAP_SCOPE_SUBTREE:
#ifdef LDAP_SCOPE_SUBORDINATE
		case LDAP_SCOPE_SUBORDINATE:
#endif
			break;
		default:
			rs.sr_err = LDAP_PROTOCOL_ERROR;
			goto cleanup;
	}

	if ( filter == NULL ) {
		if ( filStr == NULL ) {
			rs.sr_err = LDAP_PARAM_ERROR;
			goto cleanup;
		}

		filter = slapi_str2filter( filStr );
		if ( filter == NULL ) {
			rs.sr_err = LDAP_PROTOCOL_ERROR;
			goto cleanup;
		}

		freeFilter = 1;
	}

	filter2bv( filter, &fstr );

	for ( i = 0; attrs != NULL && attrs[i] != NULL; i++ ) {
		; /* count the number of attributes */
	}

	if ( i > 0 ) {
		an = (AttributeName *)slapi_ch_calloc( (i + 1), sizeof(AttributeName) );
		for (i = 0; attrs[i] != 0; i++) {
			an[i].an_desc = NULL;
			an[i].an_oc = NULL;
			an[i].an_oc_exclude = 0;
			an[i].an_name.bv_val = slapi_ch_strdup(attrs[i]);
			an[i].an_name.bv_len = strlen(attrs[i]);
			slap_bv2ad( &an[i].an_name, &an[i].an_desc, &text );
		}
		an[i].an_name.bv_val = NULL;
	}

	rs.sr_type = REP_RESULT;
	rs.sr_err = LDAP_SUCCESS;
	rs.sr_entry = NULL; /* paranoia */

	if ( scope == LDAP_SCOPE_BASE ) {
		rs.sr_entry = NULL;

		if ( op->o_req_ndn.bv_len == 0 ) {
			rs.sr_err = root_dse_info( conn, &rs.sr_entry, &rs.sr_text );
		}

		if( rs.sr_err != LDAP_SUCCESS ) {
			send_ldap_result( op, &rs );
			goto cleanup;
		} else if ( rs.sr_entry != NULL ) {
			rs.sr_err = test_filter( op, rs.sr_entry, filter );

			if ( rs.sr_err == LDAP_COMPARE_TRUE ) {
				rs.sr_type = REP_SEARCH;
				rs.sr_err = LDAP_SUCCESS;
				rs.sr_attrs = an;
				rs.sr_operational_attrs = NULL;
				rs.sr_flags = REP_ENTRY_MODIFIABLE;

				send_search_entry( op, &rs );
            		}

			entry_free( rs.sr_entry );

			rs.sr_type = REP_RESULT;
			rs.sr_err = LDAP_SUCCESS;

			send_ldap_result( op, &rs );

			goto cleanup;
		}
	}

	op->oq_search.rs_scope = scope;
	op->oq_search.rs_deref = 0;
	op->oq_search.rs_slimit = SLAP_NO_LIMIT;
	op->oq_search.rs_tlimit = SLAP_NO_LIMIT;
	op->oq_search.rs_attrsonly = attrsonly;
	op->oq_search.rs_attrs = an;
	op->oq_search.rs_filter = filter;
	op->oq_search.rs_filterstr = fstr;

	if ( BER_BVISEMPTY( &op->o_req_ndn ) &&
	     !BER_BVISEMPTY( &default_search_nbase ) ) {
		slapi_ch_free( (void **)&op->o_req_dn.bv_val );
		slapi_ch_free( (void **)&op->o_req_ndn.bv_val );

		ber_dupbv( &op->o_req_dn, &default_search_base );
		ber_dupbv( &op->o_req_ndn, &default_search_nbase );

		rs.sr_err = slapi_int_pblock_get_backend( pb, op );
		if ( rs.sr_err != LDAP_SUCCESS )
			goto cleanup;
	}

	if ( op->o_bd->be_search != NULL ) {
		(*op->o_bd->be_search)( op, &rs );
	} else {
		rs.sr_err = LDAP_UNWILLING_TO_PERFORM;
	}

cleanup:
	slapi_pblock_set( pb, SLAPI_PLUGIN_INTOP_RESULT,            (void *)rs.sr_err );
	slapi_pblock_set( pb, SLAPI_X_INTOP_RESULT_CALLBACK,         NULL );
	slapi_pblock_set( pb, SLAPI_X_INTOP_SEARCH_ENTRY_CALLBACK,   NULL );
	slapi_pblock_set( pb, SLAPI_X_INTOP_REFERRAL_ENTRY_CALLBACK, NULL );
	slapi_pblock_set( pb, SLAPI_X_INTOP_CALLBACK_DATA,           NULL );

	if ( freeFilter && filter != NULL )
		slapi_filter_free( filter, 1 );
	if ( fstr.bv_val )
		slapi_ch_free( (void **)&fstr.bv_val );
	if ( an != NULL )
		slapi_ch_free( (void **)&an );

	slapi_int_connection_destroy( &conn );

	return 0;
#else
	return -1;
#endif /* LDAP_SLAPI */
}

/* Wrappers for old API */

void slapi_search_internal_set_pb( Slapi_PBlock *pb,
	const char *base,
	int scope,
	const char *filter,
	char **attrs,
	int attrsonly,
	LDAPControl **controls,
	const char *uniqueid,
	Slapi_ComponentId *plugin_identity,
	int operation_flags )
{
#ifdef LDAP_SLAPI
	slapi_pblock_set( pb, SLAPI_SEARCH_TARGET,    (void *)base );
	slapi_pblock_set( pb, SLAPI_SEARCH_SCOPE,     (void *)scope );
	slapi_pblock_set( pb, SLAPI_SEARCH_FILTER,     NULL );
	slapi_pblock_set( pb, SLAPI_SEARCH_STRFILTER, (void *)filter );
	slapi_pblock_set( pb, SLAPI_SEARCH_ATTRS,     (void *)attrs );
	slapi_pblock_set( pb, SLAPI_SEARCH_ATTRSONLY, (void *)attrsonly );
	slapi_pblock_set( pb, SLAPI_REQCONTROLS,      (void *)controls );
	slapi_pblock_set( pb, SLAPI_TARGET_UNIQUEID,  (void *)uniqueid );
	slapi_pblock_set( pb, SLAPI_PLUGIN_IDENTITY,  (void *)plugin_identity );
	slapi_pblock_set( pb, SLAPI_X_INTOP_FLAGS,    (void *)operation_flags );
#endif /* LDAP_SLAPI */
}

Slapi_PBlock *
slapi_search_internal(
	char *ldn, 
	int scope, 
	char *filStr, 
	LDAPControl **controls, 
	char **attrs, 
	int attrsonly ) 
{
#ifdef LDAP_SLAPI
	Slapi_PBlock *pb;

	pb = slapi_pblock_new();
	if ( pb == NULL ) {
		return NULL;
	}

	slapi_search_internal_set_pb( pb, ldn, scope, filStr, attrs, attrsonly,
		controls, NULL, NULL, 0 );

	slapi_search_internal_pb( pb );

	return pb;
#else
	return NULL;
#endif /* LDAP_SLAPI */
}

void slapi_modify_internal_set_pb( Slapi_PBlock *pb,
	const char *dn,
	LDAPMod **mods,
	LDAPControl **controls,
	const char *uniqueid,
	Slapi_ComponentId *plugin_identity,
	int operation_flags )
{
#ifdef LDAP_SLAPI
	slapi_pblock_set( pb, SLAPI_MODIFY_TARGET,   (void *)dn );
	slapi_pblock_set( pb, SLAPI_MODIFY_MODS,     (void *)mods );
	slapi_pblock_set( pb, SLAPI_REQCONTROLS,     (void *)controls );
	slapi_pblock_set( pb, SLAPI_TARGET_UNIQUEID, (void *)uniqueid );
	slapi_pblock_set( pb, SLAPI_PLUGIN_IDENTITY, (void *)plugin_identity );
	slapi_pblock_set( pb, SLAPI_X_INTOP_FLAGS,   (void *)operation_flags );
#endif /* LDAP_SLAPI */
}

/* Function : slapi_modify_internal
 *
 * Description:	Plugin functions call this routine to modify an entry 
 *				in the backend directly
 * Return values : LDAP_SUCCESS
 *                 LDAP_PARAM_ERROR
 *                 LDAP_NO_MEMORY
 *                 LDAP_OTHER
 *                 LDAP_UNWILLING_TO_PERFORM
*/
Slapi_PBlock *
slapi_modify_internal(
	char *ldn, 	
	LDAPMod **mods, 
	LDAPControl **controls, 
	int log_change )
{
#ifdef LDAP_SLAPI
	Slapi_PBlock *pb;

	pb = slapi_pblock_new();
	if ( pb == NULL ) {
		return NULL;
	}

	slapi_modify_internal_set_pb( pb, ldn, mods, controls, NULL, NULL,
		log_change ? SLAPI_OP_FLAG_LOG_CHANGE : 0 );

	slapi_modify_internal_pb( pb );

	return pb;
#else
	return NULL;
#endif /* LDAP_SLAPI */
}

int slapi_add_internal_set_pb( Slapi_PBlock *pb,
	const char *dn,
	LDAPMod **attrs,
	LDAPControl **controls,
	Slapi_ComponentId *plugin_identity,
	int operation_flags )
{
#ifdef LDAP_SLAPI
	slapi_pblock_set( pb, SLAPI_ADD_TARGET,      (void *)dn );
	slapi_pblock_set( pb, SLAPI_MODIFY_MODS,     (void *)attrs );
	slapi_pblock_set( pb, SLAPI_REQCONTROLS,     (void *)controls );
	slapi_pblock_set( pb, SLAPI_PLUGIN_IDENTITY, (void *)plugin_identity );
	slapi_pblock_set( pb, SLAPI_X_INTOP_FLAGS,   (void *)operation_flags );

	return 0;
#else
	return -1;
#endif /* LDAP_SLAPI */
}

Slapi_PBlock *slapi_add_internal(
	char * dn,
	LDAPMod **attrs,
	LDAPControl **controls,
	int log_changes )
{
#ifdef LDAP_SLAPI
	Slapi_PBlock *pb;

	pb = slapi_pblock_new();
	if ( pb == NULL )
		return NULL;

	slapi_add_internal_set_pb( pb, dn, attrs, controls, NULL,
		log_changes ? SLAPI_OP_FLAG_LOG_CHANGE : 0 );
	
	slapi_add_internal_pb( pb );

	return pb;
#else
	return NULL;
#endif /* LDAP_SLAPI */
}

void slapi_add_entry_internal_set_pb( Slapi_PBlock *pb,
	Slapi_Entry *e,
	LDAPControl **controls,
	Slapi_ComponentId *plugin_identity,
	int operation_flags )
{
#ifdef LDAP_SLAPI
	slapi_pblock_set( pb, SLAPI_ADD_ENTRY,       (void *)e );
	slapi_pblock_set( pb, SLAPI_REQCONTROLS,     (void *)controls );
	slapi_pblock_set( pb, SLAPI_PLUGIN_IDENTITY, (void *)plugin_identity );
	slapi_pblock_set( pb, SLAPI_X_INTOP_FLAGS,   (void *)operation_flags );
#endif /* LDAP_SLAPI */
}

Slapi_PBlock * 
slapi_add_entry_internal(
	Slapi_Entry *e, 
	LDAPControl **controls, 
	int log_changes )
{
#ifdef LDAP_SLAPI
	Slapi_PBlock *pb;

	pb = slapi_pblock_new();
	if ( pb == NULL )
		return NULL;

	slapi_add_entry_internal_set_pb( pb, e, controls, NULL,
		log_changes ? SLAPI_OP_FLAG_LOG_CHANGE : 0 );
	
	slapi_add_internal_pb( pb );

	return pb;
#else
	return NULL;
#endif /* LDAP_SLAPI */
}

void slapi_rename_internal_set_pb( Slapi_PBlock *pb,
	const char *olddn,
	const char *newrdn,
	const char *newsuperior,
	int deloldrdn,
	LDAPControl **controls,
	const char *uniqueid,
	Slapi_ComponentId *plugin_identity,
	int operation_flags )
{
#ifdef LDAP_SLAPI
	slapi_pblock_set( pb, SLAPI_MODRDN_TARGET,      (void *)olddn );
	slapi_pblock_set( pb, SLAPI_MODRDN_NEWRDN,      (void *)newrdn );
	slapi_pblock_set( pb, SLAPI_MODRDN_NEWSUPERIOR, (void *)newsuperior );
	slapi_pblock_set( pb, SLAPI_MODRDN_DELOLDRDN,   (void *)deloldrdn );
	slapi_pblock_set( pb, SLAPI_REQCONTROLS,        (void *)controls );
	slapi_pblock_set( pb, SLAPI_TARGET_UNIQUEID,    (void *)uniqueid );
	slapi_pblock_set( pb, SLAPI_PLUGIN_IDENTITY,    (void *)plugin_identity );
	slapi_pblock_set( pb, SLAPI_X_INTOP_FLAGS,      (void *)operation_flags );
#endif /* LDAP_SLAPI */
}

/* Function : slapi_modrdn_internal
 *
 * Description : Plugin functions call this routine to modify the rdn 
 *				 of an entry in the backend directly
 * Return values : LDAP_SUCCESS
 *                 LDAP_PARAM_ERROR
 *                 LDAP_NO_MEMORY
 *                 LDAP_OTHER
 *                 LDAP_UNWILLING_TO_PERFORM
 *
 * NOTE: This function does not support the "newSuperior" option from LDAP V3.
 */
Slapi_PBlock *
slapi_modrdn_internal(
	char *olddn, 
	char *lnewrdn, 
	int deloldrdn, 
	LDAPControl **controls, 
	int log_change )
{
#ifdef LDAP_SLAPI
	Slapi_PBlock *pb;

	pb = slapi_pblock_new();
	if ( pb == NULL ) {
		return NULL;
	}

	slapi_rename_internal_set_pb( pb, olddn, lnewrdn, NULL,
		deloldrdn, controls, NULL, NULL,
		log_change ? SLAPI_OP_FLAG_LOG_CHANGE : 0 );

	slapi_modrdn_internal_pb( pb );

	return pb;
#else
	return NULL;
#endif /* LDAP_SLAPI */
}

void slapi_delete_internal_set_pb( Slapi_PBlock *pb,
	const char *dn,
	LDAPControl **controls,
	const char *uniqueid,
	Slapi_ComponentId *plugin_identity,
	int operation_flags )
{
#ifdef LDAP_SLAPI
	slapi_pblock_set( pb, SLAPI_TARGET_DN,       (void *)dn );
	slapi_pblock_set( pb, SLAPI_REQCONTROLS,     (void *)controls );
	slapi_pblock_set( pb, SLAPI_TARGET_UNIQUEID, (void *)uniqueid );
	slapi_pblock_set( pb, SLAPI_PLUGIN_IDENTITY, (void *)plugin_identity );
	slapi_pblock_set( pb, SLAPI_X_INTOP_FLAGS,   (void *)operation_flags );
#endif /* LDAP_SLAPI */
}

/* Function : slapi_delete_internal
 *
 * Description : Plugin functions call this routine to delete an entry 
 *               in the backend directly
 * Return values : LDAP_SUCCESS
 *                 LDAP_PARAM_ERROR
 *                 LDAP_NO_MEMORY
 *                 LDAP_OTHER
 *                 LDAP_UNWILLING_TO_PERFORM
*/
Slapi_PBlock *
slapi_delete_internal(
	char *ldn, 
	LDAPControl **controls, 
	int log_change )
{
#ifdef LDAP_SLAPI
	Slapi_PBlock *pb;

	pb = slapi_pblock_new();
	if ( pb == NULL )
		return NULL;

	slapi_delete_internal_set_pb( pb, ldn, controls, NULL, NULL,
		log_change ? SLAPI_OP_FLAG_LOG_CHANGE : 0 );

	slapi_delete_internal_pb( pb );

	return pb;
#else
	return NULL;
#endif /* LDAP_SLAPI */
}