]> git.sur5r.net Git - openldap/blob - servers/slapd/back-bdb/delete.c
ldapsync fix for recursive deletion (ITS#3385)
[openldap] / servers / slapd / back-bdb / delete.c
1 /* delete.c - bdb backend delete routine */
2 /* $OpenLDAP$ */
3 /* This work is part of OpenLDAP Software <http://www.openldap.org/>.
4  *
5  * Copyright 2000-2004 The OpenLDAP Foundation.
6  * All rights reserved.
7  *
8  * Redistribution and use in source and binary forms, with or without
9  * modification, are permitted only as authorized by the OpenLDAP
10  * Public License.
11  *
12  * A copy of this license is available in the file LICENSE in the
13  * top-level directory of the distribution or, alternatively, at
14  * <http://www.OpenLDAP.org/license.html>.
15  */
16
17 #include "portable.h"
18
19 #include <stdio.h>
20 #include <ac/string.h>
21
22 #include "back-bdb.h"
23 #include "external.h"
24
25 int
26 bdb_delete( Operation *op, SlapReply *rs )
27 {
28         struct bdb_info *bdb = (struct bdb_info *) op->o_bd->be_private;
29         Entry   *matched = NULL;
30         struct berval   pdn = {0, NULL};
31         Entry   *e = NULL;
32         Entry   *p = NULL;
33         EntryInfo       *ei = NULL, *eip = NULL;
34         int             manageDSAit = get_manageDSAit( op );
35         AttributeDescription *children = slap_schema.si_ad_children;
36         AttributeDescription *entry = slap_schema.si_ad_entry;
37         DB_TXN          *ltid = NULL, *lt2;
38         struct bdb_op_info opinfo;
39         ID      eid;
40
41         u_int32_t       locker = 0;
42         DB_LOCK         lock, plock;
43
44         int             num_retries = 0;
45
46         Operation* ps_list;
47         int     rc;
48         EntryInfo   *suffix_ei;
49         Entry       *ctxcsn_e;
50         int         ctxcsn_added = 0;
51
52         LDAPControl **preread_ctrl = NULL;
53         LDAPControl *ctrls[SLAP_MAX_RESPONSE_CONTROLS];
54         int num_ctrls = 0;
55
56         int     parent_is_glue = 0;
57         int parent_is_leaf = 0;
58
59         struct berval ctxcsn_ndn = BER_BVNULL;
60
61         ctrls[num_ctrls] = 0;
62
63         Debug( LDAP_DEBUG_ARGS, "==> bdb_delete: %s\n",
64                 op->o_req_dn.bv_val, 0, 0 );
65
66         build_new_dn( &ctxcsn_ndn, &op->o_bd->be_nsuffix[0],
67                                 (struct berval *)&slap_ldapsync_cn_bv, op->o_tmpmemctx );
68
69         if( 0 ) {
70 retry:  /* transaction retry */
71                 if( e != NULL ) {
72                         bdb_unlocked_cache_return_entry_w(&bdb->bi_cache, e);
73                         e = NULL;
74                 }
75                 if( p != NULL ) {
76                         bdb_unlocked_cache_return_entry_r(&bdb->bi_cache, p);
77                         p = NULL;
78                 }
79                 Debug( LDAP_DEBUG_TRACE, "==> bdb_delete: retrying...\n",
80                         0, 0, 0 );
81                 rs->sr_err = TXN_ABORT( ltid );
82                 ltid = NULL;
83                 op->o_private = NULL;
84                 op->o_do_not_cache = opinfo.boi_acl_cache;
85                 if( rs->sr_err != 0 ) {
86                         rs->sr_err = LDAP_OTHER;
87                         rs->sr_text = "internal error";
88                         goto return_results;
89                 }
90                 parent_is_glue = 0;
91                 parent_is_leaf = 0;
92                 ldap_pvt_thread_yield();
93                 bdb_trans_backoff( ++num_retries );
94         }
95
96         /* begin transaction */
97         rs->sr_err = TXN_BEGIN( bdb->bi_dbenv, NULL, &ltid, 
98                 bdb->bi_db_opflags );
99         rs->sr_text = NULL;
100         if( rs->sr_err != 0 ) {
101                 Debug( LDAP_DEBUG_TRACE,
102                         "bdb_delete: txn_begin failed: %s (%d)\n",
103                         db_strerror(rs->sr_err), rs->sr_err, 0 );
104                 rs->sr_err = LDAP_OTHER;
105                 rs->sr_text = "internal error";
106                 goto return_results;
107         }
108
109         locker = TXN_ID ( ltid );
110
111         opinfo.boi_bdb = op->o_bd;
112         opinfo.boi_txn = ltid;
113         opinfo.boi_locker = locker;
114         opinfo.boi_err = 0;
115         opinfo.boi_acl_cache = op->o_do_not_cache;
116         op->o_private = &opinfo;
117
118         if ( !be_issuffix( op->o_bd, &op->o_req_ndn ) ) {
119                 dnParent( &op->o_req_ndn, &pdn );
120         }
121
122         /* get entry */
123         rs->sr_err = bdb_dn2entry( op, ltid, &op->o_req_ndn, &ei, 1,
124                 locker, &lock );
125
126         switch( rs->sr_err ) {
127         case 0:
128         case DB_NOTFOUND:
129                 break;
130         case DB_LOCK_DEADLOCK:
131         case DB_LOCK_NOTGRANTED:
132                 goto retry;
133         case LDAP_BUSY:
134                 rs->sr_text = "ldap server busy";
135                 goto return_results;
136         default:
137                 rs->sr_err = LDAP_OTHER;
138                 rs->sr_text = "internal error";
139                 goto return_results;
140         }
141
142         if ( rs->sr_err == 0 ) {
143                 e = ei->bei_e;
144                 eip = ei->bei_parent;
145         } else {
146                 matched = ei->bei_e;
147         }
148
149         /* FIXME : dn2entry() should return non-glue entry */
150         if ( e == NULL || ( !manageDSAit && is_entry_glue( e ))) {
151                 BerVarray deref = NULL;
152
153                 Debug( LDAP_DEBUG_ARGS,
154                         "<=- bdb_delete: no such object %s\n",
155                         op->o_req_dn.bv_val, 0, 0);
156
157                 if ( matched != NULL ) {
158                         rs->sr_matched = ch_strdup( matched->e_dn );
159                         rs->sr_ref = is_entry_referral( matched )
160                                 ? get_entry_referrals( op, matched )
161                                 : NULL;
162                         bdb_unlocked_cache_return_entry_r(&bdb->bi_cache, matched);
163                         matched = NULL;
164
165                 } else {
166                         if ( !LDAP_STAILQ_EMPTY( &op->o_bd->be_syncinfo )) {
167                                 syncinfo_t *si;
168                                 LDAP_STAILQ_FOREACH( si, &op->o_bd->be_syncinfo, si_next ) {
169                                         struct berval tmpbv;
170                                         ber_dupbv( &tmpbv, &si->si_provideruri_bv[0] );
171                                         ber_bvarray_add( &deref, &tmpbv );
172                                 }
173                         } else {
174                                 deref = default_referral;
175                         }
176                         rs->sr_ref = referral_rewrite( deref, NULL, &op->o_req_dn,
177                                         LDAP_SCOPE_DEFAULT );
178                 }
179
180                 rs->sr_err = LDAP_REFERRAL;
181                 send_ldap_result( op, rs );
182
183                 if ( rs->sr_ref != default_referral ) {
184                         ber_bvarray_free( rs->sr_ref );
185                 }
186                 if ( deref != default_referral ) {
187                         ber_bvarray_free( deref );
188                 }
189                 free( (char *)rs->sr_matched );
190                 rs->sr_ref = NULL;
191                 rs->sr_matched = NULL;
192
193                 rs->sr_err = -1;
194                 goto done;
195         }
196
197         rc = bdb_cache_find_id( op, ltid, eip->bei_id, &eip, 0, locker, &plock );
198         switch( rc ) {
199         case DB_LOCK_DEADLOCK:
200         case DB_LOCK_NOTGRANTED:
201                 goto retry;
202         case 0:
203         case DB_NOTFOUND:
204                 break;
205         default:
206                 rs->sr_err = LDAP_OTHER;
207                 rs->sr_text = "internal error";
208                 goto return_results;
209         }
210         if ( eip ) p = eip->bei_e;
211
212         if ( pdn.bv_len != 0 ) {
213                 if( p == NULL || !bvmatch( &pdn, &p->e_nname )) {
214                         Debug( LDAP_DEBUG_TRACE,
215                                 "<=- bdb_delete: parent does not exist\n",
216                                 0, 0, 0);
217                         rs->sr_err = LDAP_OTHER;
218                         rs->sr_text = "could not locate parent of entry";
219                         goto return_results;
220                 }
221
222                 /* check parent for "children" acl */
223                 rs->sr_err = access_allowed( op, p,
224                         children, NULL, ACL_WRITE, NULL );
225
226                 if ( !rs->sr_err  ) {
227                         switch( opinfo.boi_err ) {
228                         case DB_LOCK_DEADLOCK:
229                         case DB_LOCK_NOTGRANTED:
230                                 goto retry;
231                         }
232
233                         Debug( LDAP_DEBUG_TRACE,
234                                 "<=- bdb_delete: no write access to parent\n",
235                                 0, 0, 0 );
236                         rs->sr_err = LDAP_INSUFFICIENT_ACCESS;
237                         rs->sr_text = "no write access to parent";
238                         goto return_results;
239                 }
240
241         } else {
242                 /* no parent, must be root to delete */
243                 if( ! be_isroot( op ) ) {
244                         if ( be_issuffix( op->o_bd, (struct berval *)&slap_empty_bv )
245                                 || be_shadow_update( op ) ) {
246                                 p = (Entry *)&slap_entry_root;
247
248                                 /* check parent for "children" acl */
249                                 rs->sr_err = access_allowed( op, p,
250                                         children, NULL, ACL_WRITE, NULL );
251
252                                 p = NULL;
253
254                                 if ( !rs->sr_err  ) {
255                                         switch( opinfo.boi_err ) {
256                                         case DB_LOCK_DEADLOCK:
257                                         case DB_LOCK_NOTGRANTED:
258                                                 goto retry;
259                                         }
260
261                                         Debug( LDAP_DEBUG_TRACE,
262                                                 "<=- bdb_delete: no access "
263                                                 "to parent\n", 0, 0, 0 );
264                                         rs->sr_err = LDAP_INSUFFICIENT_ACCESS;
265                                         rs->sr_text = "no write access to parent";
266                                         goto return_results;
267                                 }
268
269                         } else {
270                                 Debug( LDAP_DEBUG_TRACE,
271                                         "<=- bdb_delete: no parent "
272                                         "and not root\n", 0, 0, 0);
273                                 rs->sr_err = LDAP_INSUFFICIENT_ACCESS;
274                                 goto return_results;
275                         }
276                 }
277         }
278
279         if ( get_assert( op ) &&
280                 ( test_filter( op, e, get_assertion( op )) != LDAP_COMPARE_TRUE ))
281         {
282                 rs->sr_err = LDAP_ASSERTION_FAILED;
283                 goto return_results;
284         }
285
286         rs->sr_err = access_allowed( op, e,
287                 entry, NULL, ACL_WRITE, NULL );
288
289         if ( !rs->sr_err  ) {
290                 switch( opinfo.boi_err ) {
291                 case DB_LOCK_DEADLOCK:
292                 case DB_LOCK_NOTGRANTED:
293                         goto retry;
294                 }
295
296                 Debug( LDAP_DEBUG_TRACE,
297                         "<=- bdb_delete: no write access to entry\n",
298                         0, 0, 0 );
299                 rs->sr_err = LDAP_INSUFFICIENT_ACCESS;
300                 rs->sr_text = "no write access to entry";
301                 goto return_results;
302         }
303
304         if ( !manageDSAit && is_entry_referral( e ) ) {
305                 /* entry is a referral, don't allow delete */
306                 rs->sr_ref = get_entry_referrals( op, e );
307
308                 Debug( LDAP_DEBUG_TRACE,
309                         "bdb_delete: entry is referral\n", 0, 0, 0 );
310
311                 rs->sr_err = LDAP_REFERRAL;
312                 rs->sr_matched = e->e_name.bv_val;
313                 send_ldap_result( op, rs );
314
315                 ber_bvarray_free( rs->sr_ref );
316                 rs->sr_ref = NULL;
317                 rs->sr_matched = NULL;
318
319                 rs->sr_err = 1;
320                 goto done;
321         }
322
323         /* pre-read */
324         if( op->o_preread ) {
325                 if( preread_ctrl == NULL ) {
326                         preread_ctrl = &ctrls[num_ctrls++];
327                         ctrls[num_ctrls] = NULL;
328                 }
329                 if( slap_read_controls( op, rs, e,
330                         &slap_pre_read_bv, preread_ctrl ) )
331                 {
332                         Debug( LDAP_DEBUG_TRACE,
333                                 "<=- bdb_delete: pre-read failed!\n", 0, 0, 0 );
334                         goto return_results;
335                 }
336         }
337
338         /* nested transaction */
339         rs->sr_err = TXN_BEGIN( bdb->bi_dbenv, ltid, &lt2, 
340                 bdb->bi_db_opflags );
341         rs->sr_text = NULL;
342         if( rs->sr_err != 0 ) {
343                 Debug( LDAP_DEBUG_TRACE,
344                         "bdb_delete: txn_begin(2) failed: %s (%d)\n",
345                         db_strerror(rs->sr_err), rs->sr_err, 0 );
346                 rs->sr_err = LDAP_OTHER;
347                 rs->sr_text = "internal error";
348                 goto return_results;
349         }
350
351         /* Can't do it if we have kids */
352         rs->sr_err = bdb_cache_children( op, lt2, e );
353         if( rs->sr_err != DB_NOTFOUND ) {
354                 switch( rs->sr_err ) {
355                 case DB_LOCK_DEADLOCK:
356                 case DB_LOCK_NOTGRANTED:
357                         goto retry;
358                 case 0:
359                         Debug(LDAP_DEBUG_ARGS,
360                                 "<=- bdb_delete: non-leaf %s\n",
361                                 op->o_req_dn.bv_val, 0, 0);
362                         rs->sr_err = LDAP_NOT_ALLOWED_ON_NONLEAF;
363                         rs->sr_text = "subtree delete not supported";
364                         break;
365                 default:
366                         Debug(LDAP_DEBUG_ARGS,
367                                 "<=- bdb_delete: has_children failed: %s (%d)\n",
368                                 db_strerror(rs->sr_err), rs->sr_err, 0 );
369                         rs->sr_err = LDAP_OTHER;
370                         rs->sr_text = "internal error";
371                 }
372                 goto return_results;
373         }
374
375         ldap_pvt_thread_rdwr_wlock( &bdb->bi_pslist_rwlock );
376         LDAP_LIST_FOREACH( ps_list, &bdb->bi_psearch_list, o_ps_link ) {
377                 rc = bdb_psearch( op, rs, ps_list, e, LDAP_PSEARCH_BY_PREDELETE );
378                 if ( rc == LDAP_BUSY && op->o_ps_send_wait ) {
379                         ldap_pvt_thread_rdwr_wunlock( &bdb->bi_pslist_rwlock );
380                         goto retry;
381                 } else if ( rc ) {
382                         Debug( LDAP_DEBUG_TRACE,
383                                 "bdb_delete: persistent search failed (%d,%d)\n",
384                                 rc, rs->sr_err, 0 );
385                 }
386         }
387         ldap_pvt_thread_rdwr_wunlock( &bdb->bi_pslist_rwlock );
388
389         /* delete from dn2id */
390         rs->sr_err = bdb_dn2id_delete( op, lt2, eip, e );
391         if ( rs->sr_err != 0 ) {
392                 Debug(LDAP_DEBUG_TRACE,
393                         "<=- bdb_delete: dn2id failed: %s (%d)\n",
394                         db_strerror(rs->sr_err), rs->sr_err, 0 );
395                 switch( rs->sr_err ) {
396                 case DB_LOCK_DEADLOCK:
397                 case DB_LOCK_NOTGRANTED:
398                         goto retry;
399                 }
400                 rs->sr_text = "DN index delete failed";
401                 rs->sr_err = LDAP_OTHER;
402                 goto return_results;
403         }
404
405         /* delete from id2entry */
406         rs->sr_err = bdb_id2entry_delete( op->o_bd, lt2, e );
407         if ( rs->sr_err != 0 ) {
408                 Debug(LDAP_DEBUG_TRACE,
409                         "<=- bdb_delete: id2entry failed: %s (%d)\n",
410                         db_strerror(rs->sr_err), rs->sr_err, 0 );
411                 switch( rs->sr_err ) {
412                 case DB_LOCK_DEADLOCK:
413                 case DB_LOCK_NOTGRANTED:
414                         goto retry;
415                 }
416                 rs->sr_text = "entry delete failed";
417                 rs->sr_err = LDAP_OTHER;
418                 goto return_results;
419         }
420
421         /* delete indices for old attributes */
422         rs->sr_err = bdb_index_entry_del( op, lt2, e );
423         if ( rs->sr_err != LDAP_SUCCESS ) {
424                 Debug( LDAP_DEBUG_TRACE,
425                         "<=- bdb_delete: index failed: %s (%d)\n", 
426                         db_strerror(rs->sr_err), rs->sr_err, 0 );
427                 switch( rs->sr_err ) {
428                 case DB_LOCK_DEADLOCK:
429                 case DB_LOCK_NOTGRANTED:
430                         goto retry;
431                 }
432                 rs->sr_text = "entry index delete failed";
433                 rs->sr_err = LDAP_OTHER;
434                 goto return_results;
435         }
436
437         if ( pdn.bv_len != 0 ) {
438                 parent_is_glue = is_entry_glue(p);
439                 rs->sr_err = bdb_cache_children( op, lt2, p );
440                 if ( rs->sr_err != DB_NOTFOUND ) {
441                         switch( rs->sr_err ) {
442                         case DB_LOCK_DEADLOCK:
443                         case DB_LOCK_NOTGRANTED:
444                                 goto retry;
445                         case 0:
446                                 break;
447                         default:
448                                 Debug(LDAP_DEBUG_ARGS,
449                                         "<=- bdb_delete: has_children failed: %s (%d)\n",
450                                         db_strerror(rs->sr_err), rs->sr_err, 0 );
451                                 rs->sr_err = LDAP_OTHER;
452                                 rs->sr_text = "internal error";
453                                 goto return_results;
454                         }
455                         parent_is_leaf = 1;
456                 }
457                 bdb_unlocked_cache_return_entry_r(&bdb->bi_cache, p);
458                 p = NULL;
459         }
460
461         if ( TXN_COMMIT( lt2, 0 ) != 0 ) {
462                 rs->sr_err = LDAP_OTHER;
463                 rs->sr_text = "txn_commit(2) failed";
464                 goto return_results;
465         }
466
467         eid = e->e_id;
468
469 #if 0   /* Do we want to reclaim deleted IDs? */
470         ldap_pvt_thread_mutex_lock( &bdb->bi_lastid_mutex );
471         if ( e->e_id == bdb->bi_lastid ) {
472                 bdb_last_id( op->o_bd, ltid );
473         }
474         ldap_pvt_thread_mutex_unlock( &bdb->bi_lastid_mutex );
475 #endif
476
477         if ( !dn_match( &ctxcsn_ndn, &op->o_req_ndn ) &&
478                  !be_issuffix( op->o_bd, &op->o_req_ndn ) &&
479                         LDAP_STAILQ_EMPTY( &op->o_bd->be_syncinfo )) {
480                 rc = bdb_csn_commit( op, rs, ltid, ei, &suffix_ei,
481                         &ctxcsn_e, &ctxcsn_added, locker );
482                 switch ( rc ) {
483                 case BDB_CSN_ABORT :
484                         goto return_results;
485                 case BDB_CSN_RETRY :
486                         goto retry;
487                 }
488         }
489
490         if( op->o_noop ) {
491                 if ( ( rs->sr_err = TXN_ABORT( ltid ) ) != 0 ) {
492                         rs->sr_text = "txn_abort (no-op) failed";
493                 } else {
494                         rs->sr_err = LDAP_NO_OPERATION;
495                         goto return_results;
496                 }
497         } else {
498                 rc = bdb_cache_delete( &bdb->bi_cache, e, bdb->bi_dbenv,
499                         locker, &lock );
500                 switch( rc ) {
501                 case DB_LOCK_DEADLOCK:
502                 case DB_LOCK_NOTGRANTED:
503                         goto retry;
504                 }
505
506                 if ( LDAP_STAILQ_EMPTY( &op->o_bd->be_syncinfo )) {
507                         if ( ctxcsn_added ) {
508                                 bdb_cache_add( bdb, suffix_ei,
509                                         ctxcsn_e, (struct berval *)&slap_ldapsync_cn_bv, locker );
510                         }
511                 }
512
513                 if ( rs->sr_err == LDAP_SUCCESS && !op->o_no_psearch ) {
514                         Attribute *a;
515                         a = attr_find( e->e_attrs, slap_schema.si_ad_entryCSN );
516                         if ( a ) {
517                                 if( (void *) e->e_attrs != (void *) (e+1)) {
518                                         attr_delete( &e->e_attrs, slap_schema.si_ad_entryCSN );
519                                         attr_merge_normalize_one( e, slap_schema.si_ad_entryCSN,
520                                         &op->o_sync_csn, NULL );
521                                 } else {
522                                         a->a_vals[0] = op->o_sync_csn;
523                                 }
524                         } else {
525                                 /* Hm, the entryCSN ought to exist. ??? */
526                         }
527                         ldap_pvt_thread_rdwr_wlock( &bdb->bi_pslist_rwlock );
528                         LDAP_LIST_FOREACH( ps_list, &bdb->bi_psearch_list, o_ps_link ) {
529                                 rc = bdb_psearch( op, rs, ps_list, e, LDAP_PSEARCH_BY_DELETE );
530                                 if ( rc ) {
531                                         Debug( LDAP_DEBUG_TRACE,
532                                                 "bdb_delete: persistent search failed (%d,%d)\n",
533                                                 rc, rs->sr_err, 0 );
534                                 }
535                         }
536                         ldap_pvt_thread_rdwr_wunlock( &bdb->bi_pslist_rwlock );
537                 }
538
539                 rs->sr_err = TXN_COMMIT( ltid, 0 );
540         }
541         ltid = NULL;
542         op->o_private = NULL;
543
544         if( rs->sr_err != 0 ) {
545                 Debug( LDAP_DEBUG_TRACE,
546                         "bdb_delete: txn_%s failed: %s (%d)\n",
547                         op->o_noop ? "abort (no-op)" : "commit",
548                         db_strerror(rs->sr_err), rs->sr_err );
549                 rs->sr_err = LDAP_OTHER;
550                 rs->sr_text = "commit failed";
551
552                 goto return_results;
553         }
554
555         Debug( LDAP_DEBUG_TRACE,
556                 "bdb_delete: deleted%s id=%08lx dn=\"%s\"\n",
557                 op->o_noop ? " (no-op)" : "",
558                 eid, op->o_req_dn.bv_val );
559         rs->sr_err = LDAP_SUCCESS;
560         rs->sr_text = NULL;
561         if( num_ctrls ) rs->sr_ctrls = ctrls;
562
563 return_results:
564         send_ldap_result( op, rs );
565
566         if( rs->sr_err == LDAP_SUCCESS && bdb->bi_txn_cp ) {
567                 ldap_pvt_thread_yield();
568                 TXN_CHECKPOINT( bdb->bi_dbenv,
569                         bdb->bi_txn_cp_kbyte, bdb->bi_txn_cp_min, 0 );
570         }
571
572         if ( rs->sr_err == LDAP_SUCCESS && parent_is_glue && parent_is_leaf ) {
573                 op->o_delete_glue_parent = 1;
574         }
575
576 done:
577         if ( p )
578                 bdb_unlocked_cache_return_entry_r(&bdb->bi_cache, p);
579
580         /* free entry */
581         if( e != NULL ) {
582                 if ( rs->sr_err == LDAP_SUCCESS ) {
583                         /* Free the EntryInfo and the Entry */
584                         bdb_cache_delete_cleanup( &bdb->bi_cache, BEI(e) );
585                 } else {
586                         bdb_unlocked_cache_return_entry_w(&bdb->bi_cache, e);
587                 }
588         }
589
590         if( ltid != NULL ) {
591                 TXN_ABORT( ltid );
592                 op->o_private = NULL;
593         }
594
595         slap_sl_free( ctxcsn_ndn.bv_val, op->o_tmpmemctx );
596
597         if( preread_ctrl != NULL ) {
598                 slap_sl_free( (*preread_ctrl)->ldctl_value.bv_val, &op->o_tmpmemctx );
599                 slap_sl_free( *preread_ctrl, &op->o_tmpmemctx );
600         }
601         return rs->sr_err;
602 }