/* modify.c - ldbm backend modify routine */ /* $OpenLDAP$ */ /* * Copyright 1998-2003 The OpenLDAP Foundation, All Rights Reserved. * COPYING RESTRICTIONS APPLY, see COPYRIGHT file */ #include "portable.h" #include #include #include #include #include "slap.h" #include "back-ldbm.h" #include "proto-back-ldbm.h" /* We need this function because of LDAP modrdn. If we do not * add this there would be a bunch of code replication here * and there and of course the likelihood of bugs increases. * Juan C. Gomez (gomez@engr.sgi.com) 05/18/99 */ int ldbm_modify_internal( Operation *op, Modifications *modlist, Entry *e, const char **text, char *textbuf, size_t textlen ) { int rc = LDAP_SUCCESS; Modification *mod; Modifications *ml; Attribute *save_attrs; Attribute *ap; #ifdef NEW_LOGGING LDAP_LOG( BACK_LDBM, ENTRY, "ldbm_modify_internal: %s\n", e->e_name.bv_val, 0, 0 ); #else Debug(LDAP_DEBUG_TRACE, "ldbm_modify_internal: %s\n", e->e_name.bv_val, 0, 0); #endif if ( !acl_check_modlist( op, e, modlist )) { return LDAP_INSUFFICIENT_ACCESS; } save_attrs = e->e_attrs; e->e_attrs = attrs_dup( e->e_attrs ); for ( ml = modlist; ml != NULL; ml = ml->sml_next ) { mod = &ml->sml_mod; switch ( mod->sm_op ) { case LDAP_MOD_ADD: #ifdef NEW_LOGGING LDAP_LOG( BACK_LDBM, DETAIL1, "ldbm_modify_internal: add\n", 0, 0, 0); #else Debug(LDAP_DEBUG_ARGS, "ldbm_modify_internal: add\n", 0, 0, 0); #endif rc = modify_add_values( e, mod, get_permissiveModify( op ), text, textbuf, textlen ); if( rc != LDAP_SUCCESS ) { #ifdef NEW_LOGGING LDAP_LOG( BACK_LDBM, INFO, "ldbm_modify_internal: failed %d (%s)\n", rc, *text, 0 ); #else Debug(LDAP_DEBUG_ARGS, "ldbm_modify_internal: %d %s\n", rc, *text, 0); #endif } break; case LDAP_MOD_DELETE: #ifdef NEW_LOGGING LDAP_LOG( BACK_LDBM, DETAIL1, "ldbm_modify_internal: delete\n", 0,0,0); #else Debug(LDAP_DEBUG_ARGS, "ldbm_modify_internal: delete\n", 0, 0, 0); #endif rc = modify_delete_values( e, mod, get_permissiveModify( op ), text, textbuf, textlen ); assert( rc != LDAP_TYPE_OR_VALUE_EXISTS ); if( rc != LDAP_SUCCESS ) { #ifdef NEW_LOGGING LDAP_LOG( BACK_LDBM, INFO, "ldbm_modify_internal: failed %d (%s)\n", rc, *text, 0 ); #else Debug(LDAP_DEBUG_ARGS, "ldbm_modify_internal: %d %s\n", rc, *text, 0); #endif } break; case LDAP_MOD_REPLACE: #ifdef NEW_LOGGING LDAP_LOG( BACK_LDBM, DETAIL1, "ldbm_modify_internal: replace\n",0,0,0); #else Debug(LDAP_DEBUG_ARGS, "ldbm_modify_internal: replace\n", 0, 0, 0); #endif rc = modify_replace_values( e, mod, get_permissiveModify( op ), text, textbuf, textlen ); if( rc != LDAP_SUCCESS ) { #ifdef NEW_LOGGING LDAP_LOG( BACK_LDBM, INFO, "ldbm_modify_internal: failed %d (%s)\n", rc, *text, 0 ); #else Debug(LDAP_DEBUG_ARGS, "ldbm_modify_internal: %d %s\n", rc, *text, 0); #endif } break; case SLAP_MOD_SOFTADD: #ifdef NEW_LOGGING LDAP_LOG( BACK_LDBM, DETAIL1, "ldbm_modify_internal: softadd\n", 0, 0, 0 ); #else Debug(LDAP_DEBUG_ARGS, "ldbm_modify_internal: softadd\n", 0, 0, 0); #endif /* Avoid problems in index_add_mods() * We need to add index if necessary. */ mod->sm_op = LDAP_MOD_ADD; rc = modify_add_values( e, mod, get_permissiveModify( op ), text, textbuf, textlen ); if ( rc == LDAP_TYPE_OR_VALUE_EXISTS ) { rc = LDAP_SUCCESS; } if( rc != LDAP_SUCCESS ) { #ifdef NEW_LOGGING LDAP_LOG( BACK_LDBM, INFO, "ldbm_modify_internal: failed %d (%s)\n", rc, *text, 0 ); #else Debug(LDAP_DEBUG_ARGS, "ldbm_modify_internal: %d %s\n", rc, *text, 0); #endif } break; default: #ifdef NEW_LOGGING LDAP_LOG( BACK_LDBM, ERR, "ldbm_modify_internal: invalid op %d\n", mod->sm_op, 0, 0 ); #else Debug(LDAP_DEBUG_ANY, "ldbm_modify_internal: invalid op %d\n", mod->sm_op, 0, 0); #endif rc = LDAP_OTHER; *text = "Invalid modify operation"; #ifdef NEW_LOGGING LDAP_LOG( BACK_LDBM, INFO, "ldbm_modify_internal: %d (%s)\n", rc, *text, 0 ); #else Debug(LDAP_DEBUG_ARGS, "ldbm_modify_internal: %d %s\n", rc, *text, 0); #endif } if ( rc != LDAP_SUCCESS ) { goto exit; } /* If objectClass was modified, reset the flags */ if ( mod->sm_desc == slap_schema.si_ad_objectClass ) { e->e_ocflags = 0; } /* check if modified attribute was indexed */ rc = index_is_indexed( op->o_bd, mod->sm_desc ); if ( rc == LDAP_SUCCESS ) { ap = attr_find( save_attrs, mod->sm_desc ); if ( ap ) ap->a_flags |= SLAP_ATTR_IXDEL; ap = attr_find( e->e_attrs, mod->sm_desc ); if ( ap ) ap->a_flags |= SLAP_ATTR_IXADD; } } /* check that the entry still obeys the schema */ #ifndef LDAP_CACHING rc = entry_schema_check( op->o_bd, e, save_attrs, text, textbuf, textlen ); #else /* LDAP_CACHING */ if ( !op->o_caching_on ) { rc = entry_schema_check( op->o_bd, e, save_attrs, text, textbuf, textlen ); } else { rc = LDAP_SUCCESS; } #endif /* LDAP_CACHING */ if ( rc != LDAP_SUCCESS ) { #ifdef NEW_LOGGING LDAP_LOG( BACK_LDBM, ERR, "ldbm_modify_internal: entry failed schema check: %s\n", *text, 0, 0 ); #else Debug( LDAP_DEBUG_ANY, "entry failed schema check: %s\n", *text, 0, 0 ); #endif goto exit; } /* check for abandon */ if ( op->o_abandon ) { rc = SLAPD_ABANDON; goto exit; } /* update the indices of the modified attributes */ /* start with deleting the old index entries */ for ( ap = save_attrs; ap != NULL; ap = ap->a_next ) { if ( ap->a_flags & SLAP_ATTR_IXDEL ) { rc = index_values( op, ap->a_desc, ap->a_nvals, e->e_id, SLAP_INDEX_DELETE_OP ); if ( rc != LDAP_SUCCESS ) { #ifdef NEW_LOGGING LDAP_LOG( BACK_LDBM, ERR, "ldbm_modify_internal: Attribute index delete failure\n", 0, 0, 0 ); #else Debug( LDAP_DEBUG_ANY, "Attribute index delete failure", 0, 0, 0 ); #endif goto exit; } ap->a_flags &= ~SLAP_ATTR_IXDEL; } } /* add the new index entries */ for ( ap = e->e_attrs; ap != NULL; ap = ap->a_next ) { if ( ap->a_flags & SLAP_ATTR_IXADD ) { rc = index_values( op, ap->a_desc, ap->a_nvals, e->e_id, SLAP_INDEX_ADD_OP ); if ( rc != LDAP_SUCCESS ) { #ifdef NEW_LOGGING LDAP_LOG( BACK_LDBM, ERR, "ldbm_modify_internal: Attribute index add failure\n", 0, 0, 0 ); #else Debug( LDAP_DEBUG_ANY, "Attribute index add failure", 0, 0, 0 ); #endif goto exit; } ap->a_flags &= ~SLAP_ATTR_IXADD; } } exit: if ( rc == LDAP_SUCCESS ) { attrs_free( save_attrs ); } else { for ( ap = save_attrs; ap; ap = ap->a_next ) { ap->a_flags = 0; } attrs_free( e->e_attrs ); e->e_attrs = save_attrs; } return rc; } int ldbm_back_modify( Operation *op, SlapReply *rs ) { struct ldbminfo *li = (struct ldbminfo *) op->o_bd->be_private; Entry *matched; Entry *e; int manageDSAit = get_manageDSAit( op ); char textbuf[SLAP_TEXT_BUFLEN]; size_t textlen = sizeof textbuf; #ifdef NEW_LOGGING LDAP_LOG( BACK_LDBM, ENTRY, "ldbm_back_modify: enter\n", 0, 0, 0); #else Debug(LDAP_DEBUG_ARGS, "ldbm_back_modify:\n", 0, 0, 0); #endif /* grab giant lock for writing */ ldap_pvt_thread_rdwr_wlock(&li->li_giant_rwlock); /* acquire and lock entry */ if ( (e = dn2entry_w( op->o_bd, &op->o_req_ndn, &matched )) == NULL ) { if ( matched != NULL ) { rs->sr_matched = ch_strdup( matched->e_dn ); rs->sr_ref = is_entry_referral( matched ) ? get_entry_referrals( op, matched ) : NULL; cache_return_entry_r( &li->li_cache, matched ); } else { rs->sr_ref = referral_rewrite( default_referral, NULL, &op->o_req_dn, LDAP_SCOPE_DEFAULT ); } ldap_pvt_thread_rdwr_wunlock(&li->li_giant_rwlock); rs->sr_err = LDAP_REFERRAL; send_ldap_result( op, rs ); if ( rs->sr_ref ) ber_bvarray_free( rs->sr_ref ); free( (char *)rs->sr_matched ); return( -1 ); } #ifndef LDAP_CACHING if ( !manageDSAit && is_entry_referral( e ) ) #else /* LDAP_CACHING */ if ( !op->o_caching_on && !manageDSAit && is_entry_referral( e ) ) #endif /* LDAP_CACHING */ { /* parent is a referral, don't allow add */ /* parent is an alias, don't allow add */ rs->sr_ref = get_entry_referrals( op, e ); #ifdef NEW_LOGGING LDAP_LOG( BACK_LDBM, INFO, "ldbm_back_modify: entry (%s) is referral\n", op->o_req_ndn.bv_val, 0, 0 ); #else Debug( LDAP_DEBUG_TRACE, "entry is referral\n", 0, 0, 0 ); #endif rs->sr_err = LDAP_REFERRAL; rs->sr_matched = e->e_name.bv_val; send_ldap_result( op, rs ); if ( rs->sr_ref ) ber_bvarray_free( rs->sr_ref ); goto error_return; } /* Modify the entry */ rs->sr_err = ldbm_modify_internal( op, op->oq_modify.rs_modlist, e, &rs->sr_text, textbuf, textlen ); if( rs->sr_err != LDAP_SUCCESS ) { if( rs->sr_err != SLAPD_ABANDON ) { send_ldap_result( op, rs ); } goto error_return; } /* change the entry itself */ if ( id2entry_add( op->o_bd, e ) != 0 ) { send_ldap_error( op, rs, LDAP_OTHER, "id2entry failure" ); goto error_return; } send_ldap_error( op, rs, LDAP_SUCCESS, NULL ); cache_return_entry_w( &li->li_cache, e ); ldap_pvt_thread_rdwr_wunlock(&li->li_giant_rwlock); return( 0 ); error_return:; cache_return_entry_w( &li->li_cache, e ); ldap_pvt_thread_rdwr_wunlock(&li->li_giant_rwlock); return( -1 ); }