git.sur5r.net Git - openldap/blob - servers/slapd/back-bdb/modrdn.c

   1 /* modrdn.c - bdb backend modrdn routine */
   2 /* $OpenLDAP$ */
   3 /*
   4  * Copyright 1998-2003 The OpenLDAP Foundation, All Rights Reserved.
   5  * COPYING RESTRICTIONS APPLY, see COPYRIGHT file
   6  */
   7
   8 #include "portable.h"
   9
  10 #include <stdio.h>
  11 #include <ac/string.h>
  12
  13 #include "back-bdb.h"
  14 #include "external.h"
  15
  16 int
  17 bdb_modrdn( Operation   *op, SlapReply *rs )
  18 {
  19         struct bdb_info *bdb = (struct bdb_info *) op->o_bd->be_private;
  20         AttributeDescription *children = slap_schema.si_ad_children;
  21         AttributeDescription *entry = slap_schema.si_ad_entry;
  22         struct berval   p_dn, p_ndn;
  23         struct berval   new_dn = {0, NULL}, new_ndn = {0, NULL};
  24         int             isroot = -1;
  25         Entry           *e = NULL;
  26         Entry           *p = NULL;
  27         EntryInfo       *ei = NULL, *eip = NULL, *nei = NULL, *neip = NULL;
  28         /* LDAP v2 supporting correct attribute handling. */
  29         LDAPRDN         new_rdn = NULL;
  30         LDAPRDN         old_rdn = NULL;
  31         char textbuf[SLAP_TEXT_BUFLEN];
  32         size_t textlen = sizeof textbuf;
  33         DB_TXN          *ltid = NULL, *lt2;
  34         struct bdb_op_info opinfo;
  35         Entry dummy, *save;
  36
  37         ID                      id;
  38
  39         Entry           *np = NULL;                     /* newSuperior Entry */
  40         struct berval   *np_dn = NULL;                  /* newSuperior dn */
  41         struct berval   *np_ndn = NULL;                 /* newSuperior ndn */
  42         struct berval   *new_parent_dn = NULL;  /* np_dn, p_dn, or NULL */
  43
  44         /* Used to interface with bdb_modify_internal() */
  45         Modifications   *mod = NULL;            /* Used to delete old rdn */
  46
  47         int             manageDSAit = get_manageDSAit( op );
  48
  49         u_int32_t       locker = 0;
  50         DB_LOCK         lock, plock, nplock;
  51
  52         int             noop = 0;
  53
  54         int             num_retries = 0;
  55
  56         LDAPControl *ctrls[SLAP_MAX_RESPONSE_CONTROLS];
  57         int num_ctrls = 0;
  58
  59         Operation *ps_list;
  60         struct psid_entry *pm_list, *pm_prev;
  61         int     rc;
  62         EntryInfo       *suffix_ei;
  63         Entry           *ctxcsn_e;
  64         int                     ctxcsn_added = 0;
  65
  66 #ifdef NEW_LOGGING
  67         LDAP_LOG ( OPERATION, ENTRY, "==>bdb_modrdn(%s,%s,%s)\n",
  68                 op->o_req_dn.bv_val,op->oq_modrdn.rs_newrdn.bv_val,
  69                 op->oq_modrdn.rs_newSup ? op->oq_modrdn.rs_newSup->bv_val : "NULL" );
  70 #else
  71         Debug( LDAP_DEBUG_TRACE, "==>bdb_modrdn(%s,%s,%s)\n",
  72                 op->o_req_dn.bv_val,op->oq_modrdn.rs_newrdn.bv_val,
  73                 op->oq_modrdn.rs_newSup ? op->oq_modrdn.rs_newSup->bv_val : "NULL" );
  74 #endif
  75
  76         if( 0 ) {
  77 retry:  /* transaction retry */
  78                 if (e != NULL) {
  79                         bdb_unlocked_cache_return_entry_w(&bdb->bi_cache, e);
  80                         e = NULL;
  81                 }
  82                 if (p != NULL) {
  83                         bdb_unlocked_cache_return_entry_r(&bdb->bi_cache, p);
  84                         p = NULL;
  85                 }
  86                 if (np != NULL) {
  87                         bdb_unlocked_cache_return_entry_r(&bdb->bi_cache, np);
  88                         np = NULL;
  89                 }
  90 #ifdef NEW_LOGGING
  91                 LDAP_LOG ( OPERATION, DETAIL1, "==>bdb_modrdn: retrying...\n", 0, 0, 0);
  92 #else
  93                 Debug( LDAP_DEBUG_TRACE, "==>bdb_modrdn: retrying...\n", 0, 0, 0 );
  94 #endif
  95
  96                 pm_list = LDAP_LIST_FIRST(&op->o_pm_list);
  97                 while ( pm_list != NULL ) {
  98                         LDAP_LIST_REMOVE ( pm_list, ps_link );
  99                         pm_prev = pm_list;
 100                         pm_list = LDAP_LIST_NEXT ( pm_list, ps_link );
 101                         ch_free( pm_prev );
 102                 }
 103
 104                 rs->sr_err = TXN_ABORT( ltid );
 105                 ltid = NULL;
 106                 op->o_private = NULL;
 107                 op->o_do_not_cache = opinfo.boi_acl_cache;
 108                 if( rs->sr_err != 0 ) {
 109                         rs->sr_err = LDAP_OTHER;
 110                         rs->sr_text = "internal error";
 111                         goto return_results;
 112                 }
 113                 bdb_trans_backoff( ++num_retries );
 114                 ldap_pvt_thread_yield();
 115         }
 116
 117         /* begin transaction */
 118         rs->sr_err = TXN_BEGIN( bdb->bi_dbenv, NULL, &ltid,
 119                 bdb->bi_db_opflags );
 120         rs->sr_text = NULL;
 121         if( rs->sr_err != 0 ) {
 122 #ifdef NEW_LOGGING
 123                 LDAP_LOG ( OPERATION, ERR,
 124                         "==>bdb_modrdn: txn_begin failed: %s (%d)\n",
 125                         db_strerror(rs->sr_err), rs->sr_err, 0 );
 126 #else
 127                 Debug( LDAP_DEBUG_TRACE,
 128                         "bdb_delete: txn_begin failed: %s (%d)\n",
 129                         db_strerror(rs->sr_err), rs->sr_err, 0 );
 130 #endif
 131                 rs->sr_err = LDAP_OTHER;
 132                 rs->sr_text = "internal error";
 133                 goto return_results;
 134         }
 135
 136         locker = TXN_ID ( ltid );
 137
 138         opinfo.boi_bdb = op->o_bd;
 139         opinfo.boi_txn = ltid;
 140         opinfo.boi_locker = locker;
 141         opinfo.boi_err = 0;
 142         opinfo.boi_acl_cache = op->o_do_not_cache;
 143         op->o_private = &opinfo;
 144
 145         /* get entry */
 146         rs->sr_err = bdb_dn2entry( op, ltid, &op->o_req_ndn, &ei, 1,
 147                 locker, &lock );
 148
 149         switch( rs->sr_err ) {
 150         case 0:
 151         case DB_NOTFOUND:
 152                 break;
 153         case DB_LOCK_DEADLOCK:
 154         case DB_LOCK_NOTGRANTED:
 155                 goto retry;
 156         case LDAP_BUSY:
 157                 rs->sr_text = "ldap server busy";
 158                 goto return_results;
 159         default:
 160                 rs->sr_err = LDAP_OTHER;
 161                 rs->sr_text = "internal error";
 162                 goto return_results;
 163         }
 164
 165         e = ei->bei_e;
 166         /* FIXME: dn2entry() should return non-glue entry */
 167         if (( rs->sr_err == DB_NOTFOUND ) || ( !manageDSAit && e && is_entry_glue( e ))) {
 168                 if( e != NULL ) {
 169                         rs->sr_matched = ch_strdup( e->e_dn );
 170                         rs->sr_ref = is_entry_referral( e )
 171                                 ? get_entry_referrals( op, e )
 172                                 : NULL;
 173                         bdb_unlocked_cache_return_entry_r( &bdb->bi_cache, e);
 174                         e = NULL;
 175
 176                 } else {
 177                         BerVarray deref = op->o_bd->syncinfo ?
 178                                                           op->o_bd->syncinfo->provideruri_bv : default_referral;
 179                         rs->sr_ref = referral_rewrite( deref, NULL, &op->o_req_dn, LDAP_SCOPE_DEFAULT );
 180                 }
 181
 182                 rs->sr_err = LDAP_REFERRAL;
 183                 send_ldap_result( op, rs );
 184
 185                 ber_bvarray_free( rs->sr_ref );
 186                 free( (char *)rs->sr_matched );
 187                 rs->sr_ref = NULL;
 188                 rs->sr_matched = NULL;
 189
 190                 goto done;
 191         }
 192
 193         if ( get_assert( op ) &&
 194                 ( test_filter( op, e, get_assertion( op )) != LDAP_COMPARE_TRUE ))
 195         {
 196                 rs->sr_err = LDAP_ASSERTION_FAILED;
 197                 goto return_results;
 198         }
 199
 200         /* check write on old entry */
 201         rs->sr_err = access_allowed( op, e, entry, NULL, ACL_WRITE, NULL );
 202         if ( ! rs->sr_err ) {
 203                 switch( opinfo.boi_err ) {
 204                 case DB_LOCK_DEADLOCK:
 205                 case DB_LOCK_NOTGRANTED:
 206                         goto retry;
 207                 }
 208
 209 #ifdef NEW_LOGGING
 210                 LDAP_LOG ( OPERATION, ERR,
 211                         "==>bdb_modrdn: no access to entry\n", 0, 0, 0 );
 212 #else
 213                 Debug( LDAP_DEBUG_TRACE, "no access to entry\n", 0,
 214                         0, 0 );
 215 #endif
 216                 rs->sr_text = "no write access to old entry";
 217                 rs->sr_err = LDAP_INSUFFICIENT_ACCESS;
 218                 goto return_results;
 219         }
 220
 221 #ifndef BDB_HIER
 222         rs->sr_err = bdb_cache_children( op, ltid, e );
 223         if ( rs->sr_err != DB_NOTFOUND ) {
 224                 switch( rs->sr_err ) {
 225                 case DB_LOCK_DEADLOCK:
 226                 case DB_LOCK_NOTGRANTED:
 227                         goto retry;
 228                 case 0:
 229 #ifdef NEW_LOGGING
 230                         LDAP_LOG ( OPERATION, DETAIL1,
 231                                 "<=- bdb_modrdn: non-leaf %s\n", op->o_req_dn.bv_val, 0, 0 );
 232 #else
 233                         Debug(LDAP_DEBUG_ARGS,
 234                                 "<=- bdb_modrdn: non-leaf %s\n",
 235                                 op->o_req_dn.bv_val, 0, 0);
 236 #endif
 237                         rs->sr_err = LDAP_NOT_ALLOWED_ON_NONLEAF;
 238                         rs->sr_text = "subtree rename not supported";
 239                         break;
 240                 default:
 241 #ifdef NEW_LOGGING
 242                         LDAP_LOG ( OPERATION, ERR,
 243                                 "<=- bdb_modrdn: has_children failed %s (%d)\n",
 244                                 db_strerror(rs->sr_err), rs->sr_err, 0 );
 245 #else
 246                         Debug(LDAP_DEBUG_ARGS,
 247                                 "<=- bdb_modrdn: has_children failed: %s (%d)\n",
 248                                 db_strerror(rs->sr_err), rs->sr_err, 0 );
 249 #endif
 250                         rs->sr_err = LDAP_OTHER;
 251                         rs->sr_text = "internal error";
 252                 }
 253                 goto return_results;
 254         }
 255         ei->bei_state |= CACHE_ENTRY_NO_KIDS;
 256 #endif
 257         if (!manageDSAit && is_entry_referral( e ) ) {
 258                 /* parent is a referral, don't allow add */
 259                 rs->sr_ref = get_entry_referrals( op, e );
 260
 261 #ifdef NEW_LOGGING
 262                 LDAP_LOG ( OPERATION, DETAIL1,
 263                         "==>bdb_modrdn: entry %s is referral \n", e->e_dn, 0, 0 );
 264 #else
 265                 Debug( LDAP_DEBUG_TRACE, "bdb_modrdn: entry %s is referral\n",
 266                         e->e_dn, 0, 0 );
 267 #endif
 268
 269                 rs->sr_err = LDAP_REFERRAL,
 270                 rs->sr_matched = e->e_name.bv_val;
 271                 send_ldap_result( op, rs );
 272
 273                 ber_bvarray_free( rs->sr_ref );
 274                 rs->sr_ref = NULL;
 275                 rs->sr_matched = NULL;
 276                 goto done;
 277         }
 278
 279         if ( be_issuffix( op->o_bd, &e->e_nname ) ) {
 280                 p_ndn = slap_empty_bv;
 281         } else {
 282                 dnParent( &e->e_nname, &p_ndn );
 283         }
 284         np_ndn = &p_ndn;
 285         if ( p_ndn.bv_len != 0 ) {
 286                 /* Make sure parent entry exist and we can write its
 287                  * children.
 288                  */
 289                 eip = ei->bei_parent;
 290                 rs->sr_err = bdb_cache_find_id( op, ltid,
 291                         eip->bei_id, &eip, 0, locker, &plock );
 292
 293                 switch( rs->sr_err ) {
 294                 case 0:
 295                 case DB_NOTFOUND:
 296                         break;
 297                 case DB_LOCK_DEADLOCK:
 298                 case DB_LOCK_NOTGRANTED:
 299                         goto retry;
 300                 case LDAP_BUSY:
 301                         rs->sr_text = "ldap server busy";
 302                         goto return_results;
 303                 default:
 304                         rs->sr_err = LDAP_OTHER;
 305                         rs->sr_text = "internal error";
 306                         goto return_results;
 307                 }
 308
 309                 p = eip->bei_e;
 310                 if( p == NULL) {
 311 #ifdef NEW_LOGGING
 312                         LDAP_LOG ( OPERATION, ERR,
 313                                 "==>bdb_modrdn: parent does not exist\n", 0, 0, 0 );
 314 #else
 315                         Debug( LDAP_DEBUG_TRACE, "bdb_modrdn: parent does not exist\n",
 316                                 0, 0, 0);
 317 #endif
 318                         rs->sr_err = LDAP_OTHER;
 319                         rs->sr_text = "old entry's parent does not exist";
 320                         goto return_results;
 321                 }
 322
 323                 /* check parent for "children" acl */
 324                 rs->sr_err = access_allowed( op, p,
 325                         children, NULL, ACL_WRITE, NULL );
 326
 327                 if ( ! rs->sr_err ) {
 328                         switch( opinfo.boi_err ) {
 329                         case DB_LOCK_DEADLOCK:
 330                         case DB_LOCK_NOTGRANTED:
 331                                 goto retry;
 332                         }
 333
 334                         rs->sr_err = LDAP_INSUFFICIENT_ACCESS;
 335 #ifdef NEW_LOGGING
 336                         LDAP_LOG ( OPERATION, ERR,
 337                                 "==>bdb_modrdn: no access to parent\n", 0, 0, 0 );
 338 #else
 339                         Debug( LDAP_DEBUG_TRACE, "no access to parent\n", 0,
 340                                 0, 0 );
 341 #endif
 342                         rs->sr_text = "no write access to old parent's children";
 343                         goto return_results;
 344                 }
 345
 346 #ifdef NEW_LOGGING
 347                 LDAP_LOG ( OPERATION, DETAIL1,
 348                         "==>bdb_modrdn: wr to children %s is OK\n", p_ndn.bv_val, 0, 0 );
 349 #else
 350                 Debug( LDAP_DEBUG_TRACE,
 351                         "bdb_modrdn: wr to children of entry %s OK\n",
 352                         p_ndn.bv_val, 0, 0 );
 353 #endif
 354
 355                 if ( p_ndn.bv_val == slap_empty_bv.bv_val ) {
 356                         p_dn = slap_empty_bv;
 357                 } else {
 358                         dnParent( &e->e_name, &p_dn );
 359                 }
 360
 361 #ifdef NEW_LOGGING
 362                 LDAP_LOG ( OPERATION, DETAIL1,
 363                         "==>bdb_modrdn: parent dn=%s\n", p_dn.bv_val, 0, 0 );
 364 #else
 365                 Debug( LDAP_DEBUG_TRACE,
 366                         "bdb_modrdn: parent dn=%s\n",
 367                         p_dn.bv_val, 0, 0 );
 368 #endif
 369
 370         } else {
 371                 /* no parent, modrdn entry directly under root */
 372                 isroot = be_isroot( op->o_bd, &op->o_ndn );
 373                 if ( ! isroot ) {
 374                         if ( be_issuffix( op->o_bd, (struct berval *)&slap_empty_bv )
 375                                 || be_isupdate( op->o_bd, &op->o_ndn ) ) {
 376
 377                                 p = (Entry *)&slap_entry_root;
 378
 379                                 /* check parent for "children" acl */
 380                                 rs->sr_err = access_allowed( op, p,
 381                                         children, NULL, ACL_WRITE, NULL );
 382
 383                                 p = NULL;
 384
 385                                 if ( ! rs->sr_err ) {
 386                                         switch( opinfo.boi_err ) {
 387                                         case DB_LOCK_DEADLOCK:
 388                                         case DB_LOCK_NOTGRANTED:
 389                                                 goto retry;
 390                                         }
 391
 392                                         rs->sr_err = LDAP_INSUFFICIENT_ACCESS;
 393 #ifdef NEW_LOGGING
 394                                         LDAP_LOG ( OPERATION, ERR,
 395                                                 "==>bdb_modrdn: no access to parent\n", 0, 0, 0 );
 396 #else
 397                                         Debug( LDAP_DEBUG_TRACE,
 398                                                 "no access to parent\n",
 399                                                 0, 0, 0 );
 400 #endif
 401                                         rs->sr_text = "no write access to old parent";
 402                                         goto return_results;
 403                                 }
 404
 405 #ifdef NEW_LOGGING
 406                                 LDAP_LOG ( OPERATION, DETAIL1,
 407                                         "==>bdb_modrdn: wr to children of entry \"%s\" OK\n",
 408                                         p_dn.bv_val, 0, 0 );
 409 #else
 410                                 Debug( LDAP_DEBUG_TRACE,
 411                                         "bdb_modrdn: wr to children of entry \"\" OK\n",
 412                                         0, 0, 0 );
 413 #endif
 414
 415                                 p_dn.bv_val = "";
 416                                 p_dn.bv_len = 0;
 417
 418 #ifdef NEW_LOGGING
 419                                 LDAP_LOG ( OPERATION, DETAIL1,
 420                                         "==>bdb_modrdn: parent dn=\"\" \n", 0, 0, 0 );
 421 #else
 422                                 Debug( LDAP_DEBUG_TRACE,
 423                                         "bdb_modrdn: parent dn=\"\"\n",
 424                                         0, 0, 0 );
 425 #endif
 426
 427                         } else {
 428 #ifdef NEW_LOGGING
 429                                 LDAP_LOG ( OPERATION, ERR,
 430                                         "==>bdb_modrdn: no parent, not root &\"\" is not "
 431                                         "suffix\n", 0, 0, 0 );
 432 #else
 433                                 Debug( LDAP_DEBUG_TRACE,
 434                                         "bdb_modrdn: no parent, not root "
 435                                         "& \"\" is not suffix\n",
 436                                         0, 0, 0);
 437 #endif
 438                                 rs->sr_text = "no write access to old parent";
 439                                 rs->sr_err = LDAP_INSUFFICIENT_ACCESS;
 440                                 goto return_results;
 441                         }
 442                 }
 443         }
 444
 445         new_parent_dn = &p_dn;  /* New Parent unless newSuperior given */
 446
 447         if ( op->oq_modrdn.rs_newSup != NULL ) {
 448 #ifdef NEW_LOGGING
 449                 LDAP_LOG ( OPERATION, DETAIL1,
 450                         "==>bdb_modrdn: new parent \"%s\" requested...\n",
 451                         op->oq_modrdn.rs_newSup->bv_val, 0, 0 );
 452 #else
 453                 Debug( LDAP_DEBUG_TRACE,
 454                         "bdb_modrdn: new parent \"%s\" requested...\n",
 455                         op->oq_modrdn.rs_newSup->bv_val, 0, 0 );
 456 #endif
 457
 458                 /*  newSuperior == oldParent? */
 459                 if( dn_match( &p_ndn, op->oq_modrdn.rs_nnewSup ) ) {
 460 #ifdef NEW_LOGGING
 461                         LDAP_LOG( BACK_BDB, INFO, "bdb_back_modrdn: "
 462                                 "new parent \"%s\" same as the old parent \"%s\"\n",
 463                                 op->oq_modrdn.rs_newSup->bv_val, p_dn.bv_val, 0 );
 464 #else
 465                         Debug( LDAP_DEBUG_TRACE, "bdb_back_modrdn: "
 466                                 "new parent \"%s\" same as the old parent \"%s\"\n",
 467                                 op->oq_modrdn.rs_newSup->bv_val, p_dn.bv_val, 0 );
 468 #endif
 469                         op->oq_modrdn.rs_newSup = NULL; /* ignore newSuperior */
 470                 }
 471         }
 472
 473         if ( op->oq_modrdn.rs_newSup != NULL ) {
 474                 if ( op->oq_modrdn.rs_newSup->bv_len ) {
 475                         np_dn = op->oq_modrdn.rs_newSup;
 476                         np_ndn = op->oq_modrdn.rs_nnewSup;
 477
 478                         /* newSuperior == oldParent?, if so ==> ERROR */
 479                         /* newSuperior == entry being moved?, if so ==> ERROR */
 480                         /* Get Entry with dn=newSuperior. Does newSuperior exist? */
 481
 482                         rs->sr_err = bdb_dn2entry( op, ltid, np_ndn,
 483                                 &neip, 0, locker, &nplock );
 484
 485                         switch( rs->sr_err ) {
 486                         case 0: np = neip->bei_e;
 487                         case DB_NOTFOUND:
 488                                 break;
 489                         case DB_LOCK_DEADLOCK:
 490                         case DB_LOCK_NOTGRANTED:
 491                                 goto retry;
 492                         case LDAP_BUSY:
 493                                 rs->sr_text = "ldap server busy";
 494                                 goto return_results;
 495                         default:
 496                                 rs->sr_err = LDAP_OTHER;
 497                                 rs->sr_text = "internal error";
 498                                 goto return_results;
 499                         }
 500
 501                         if( np == NULL) {
 502 #ifdef NEW_LOGGING
 503                                 LDAP_LOG ( OPERATION, DETAIL1,
 504                                         "==>bdb_modrdn: newSup(ndn=%s) not here!\n",
 505                                         np_ndn->bv_val, 0, 0 );
 506 #else
 507                                 Debug( LDAP_DEBUG_TRACE,
 508                                         "bdb_modrdn: newSup(ndn=%s) not here!\n",
 509                                         np_ndn->bv_val, 0, 0);
 510 #endif
 511                                 rs->sr_text = "new superior not found";
 512                                 rs->sr_err = LDAP_OTHER;
 513                                 goto return_results;
 514                         }
 515
 516 #ifdef NEW_LOGGING
 517                         LDAP_LOG ( OPERATION, DETAIL1,
 518                                 "==>bdb_modrdn: wr to new parent OK np=%p, id=%ld\n",
 519                                 (void *) np, (long) np->e_id, 0 );
 520 #else
 521                         Debug( LDAP_DEBUG_TRACE,
 522                                 "bdb_modrdn: wr to new parent OK np=%p, id=%ld\n",
 523                                 (void *) np, (long) np->e_id, 0 );
 524 #endif
 525
 526                         /* check newSuperior for "children" acl */
 527                         rs->sr_err = access_allowed( op, np, children,
 528                                 NULL, ACL_WRITE, NULL );
 529
 530                         if( ! rs->sr_err ) {
 531                                 switch( opinfo.boi_err ) {
 532                                 case DB_LOCK_DEADLOCK:
 533                                 case DB_LOCK_NOTGRANTED:
 534                                         goto retry;
 535                                 }
 536
 537 #ifdef NEW_LOGGING
 538                                 LDAP_LOG ( OPERATION, DETAIL1,
 539                                         "==>bdb_modrdn: no wr to newSup children\n", 0, 0, 0 );
 540 #else
 541                                 Debug( LDAP_DEBUG_TRACE,
 542                                         "bdb_modrdn: no wr to newSup children\n",
 543                                         0, 0, 0 );
 544 #endif
 545                                 rs->sr_text = "no write access to new superior's children";
 546                                 rs->sr_err = LDAP_INSUFFICIENT_ACCESS;
 547                                 goto return_results;
 548                         }
 549
 550 #ifdef BDB_ALIASES
 551                         if ( is_entry_alias( np ) ) {
 552                                 /* parent is an alias, don't allow add */
 553 #ifdef NEW_LOGGING
 554                                 LDAP_LOG ( OPERATION, DETAIL1,
 555                                         "==>bdb_modrdn: entry is alias\n", 0, 0, 0 );
 556 #else
 557                                 Debug( LDAP_DEBUG_TRACE, "bdb_modrdn: entry is alias\n",
 558                                         0, 0, 0 );
 559 #endif
 560                                 rs->sr_text = "new superior is an alias";
 561                                 rs->sr_err = LDAP_ALIAS_PROBLEM;
 562                                 goto return_results;
 563                         }
 564 #endif
 565
 566                         if ( is_entry_referral( np ) ) {
 567                                 /* parent is a referral, don't allow add */
 568 #ifdef NEW_LOGGING
 569                                 LDAP_LOG ( OPERATION, DETAIL1,
 570                                         "==>bdb_modrdn: entry is referral\n", 0, 0, 0 );
 571 #else
 572                                 Debug( LDAP_DEBUG_TRACE, "bdb_modrdn: entry is referral\n",
 573                                         0, 0, 0 );
 574 #endif
 575                                 rs->sr_text = "new superior is a referral";
 576                                 rs->sr_err = LDAP_OTHER;
 577                                 goto return_results;
 578                         }
 579
 580                 } else {
 581                         if ( isroot == -1 ) {
 582                                 isroot = be_isroot( op->o_bd, &op->o_ndn );
 583                         }
 584
 585                         np_dn = NULL;
 586
 587                         /* no parent, modrdn entry directly under root */
 588                         if ( ! isroot ) {
 589                                 if ( be_issuffix( op->o_bd, (struct berval *)&slap_empty_bv )
 590                                         || be_isupdate( op->o_bd, &op->o_ndn ) ) {
 591                                         np = (Entry *)&slap_entry_root;
 592
 593                                         /* check parent for "children" acl */
 594                                         rs->sr_err = access_allowed( op, np,
 595                                                 children, NULL, ACL_WRITE, NULL );
 596
 597                                         np = NULL;
 598
 599                                         if ( ! rs->sr_err ) {
 600                                                 switch( opinfo.boi_err ) {
 601                                                 case DB_LOCK_DEADLOCK:
 602                                                 case DB_LOCK_NOTGRANTED:
 603                                                         goto retry;
 604                                                 }
 605
 606                                                 rs->sr_err = LDAP_INSUFFICIENT_ACCESS;
 607 #ifdef NEW_LOGGING
 608                                                 LDAP_LOG ( OPERATION, ERR,
 609                                                         "==>bdb_modrdn: no access to superior\n", 0, 0, 0 );
 610 #else
 611                                                 Debug( LDAP_DEBUG_TRACE,
 612                                                         "no access to new superior\n",
 613                                                         0, 0, 0 );
 614 #endif
 615                                                 rs->sr_text = "no write access to new superior's children";
 616                                                 goto return_results;
 617                                         }
 618
 619 #ifdef NEW_LOGGING
 620                                         LDAP_LOG ( OPERATION, DETAIL1,
 621                                                 "bdb_modrdn: wr to children entry \"\" OK\n", 0, 0, 0 );
 622 #else
 623                                         Debug( LDAP_DEBUG_TRACE,
 624                                                 "bdb_modrdn: wr to children of entry \"\" OK\n",
 625                                                 0, 0, 0 );
 626 #endif
 627
 628                                 } else {
 629 #ifdef NEW_LOGGING
 630                                         LDAP_LOG ( OPERATION, ERR,
 631                                                 "bdb_modrdn: new superior=\"\", not root & \"\" "
 632                                                 "is not suffix\n", 0, 0, 0 );
 633 #else
 634                                         Debug( LDAP_DEBUG_TRACE,
 635                                                 "bdb_modrdn: new superior=\"\", not root "
 636                                                 "& \"\" is not suffix\n",
 637                                                 0, 0, 0);
 638 #endif
 639                                         rs->sr_text = "no write access to new superior's children";
 640                                         rs->sr_err = LDAP_INSUFFICIENT_ACCESS;
 641                                         goto return_results;
 642                                 }
 643                         }
 644
 645 #ifdef NEW_LOGGING
 646                         LDAP_LOG ( OPERATION, DETAIL1,
 647                                 "bdb_modrdn: new superior=\"\"\n", 0, 0, 0 );
 648 #else
 649                         Debug( LDAP_DEBUG_TRACE,
 650                                 "bdb_modrdn: new superior=\"\"\n",
 651                                 0, 0, 0 );
 652 #endif
 653                 }
 654
 655 #ifdef NEW_LOGGING
 656                 LDAP_LOG ( OPERATION, DETAIL1,
 657                         "bdb_modrdn: wr to new parent's children OK\n", 0, 0, 0 );
 658 #else
 659                 Debug( LDAP_DEBUG_TRACE,
 660                         "bdb_modrdn: wr to new parent's children OK\n",
 661                         0, 0, 0 );
 662 #endif
 663
 664                 new_parent_dn = np_dn;
 665         }
 666
 667         /* Build target dn and make sure target entry doesn't exist already. */
 668         if (!new_dn.bv_val) build_new_dn( &new_dn, new_parent_dn, &op->oq_modrdn.rs_newrdn );
 669
 670         if (!new_ndn.bv_val) {
 671                 struct berval bv = {0, NULL};
 672                 dnNormalize( 0, NULL, NULL, &new_dn, &bv, op->o_tmpmemctx );
 673                 ber_dupbv( &new_ndn, &bv );
 674         }
 675
 676 #ifdef NEW_LOGGING
 677         LDAP_LOG ( OPERATION, RESULTS,
 678                 "bdb_modrdn: new ndn=%s\n", new_ndn.bv_val, 0, 0 );
 679 #else
 680         Debug( LDAP_DEBUG_TRACE, "bdb_modrdn: new ndn=%s\n",
 681                 new_ndn.bv_val, 0, 0 );
 682 #endif
 683
 684
 685         /* Shortcut the search */
 686         nei = neip ? neip : eip;
 687         rs->sr_err = bdb_cache_find_ndn ( op, ltid, &new_ndn, &nei );
 688         if ( nei ) bdb_cache_entryinfo_unlock( nei );
 689         switch( rs->sr_err ) {
 690         case DB_LOCK_DEADLOCK:
 691         case DB_LOCK_NOTGRANTED:
 692                 goto retry;
 693         case DB_NOTFOUND:
 694                 break;
 695         case 0:
 696                 rs->sr_err = LDAP_ALREADY_EXISTS;
 697                 goto return_results;
 698         default:
 699                 rs->sr_err = LDAP_OTHER;
 700                 rs->sr_text = "internal error";
 701                 goto return_results;
 702         }
 703
 704         /* Get attribute type and attribute value of our new rdn, we will
 705          * need to add that to our new entry
 706          */
 707         if ( !new_rdn && ldap_bv2rdn_x( &op->oq_modrdn.rs_newrdn, &new_rdn, (char **)&rs->sr_text,
 708                 LDAP_DN_FORMAT_LDAP, op->o_tmpmemctx ) )
 709         {
 710 #ifdef NEW_LOGGING
 711                 LDAP_LOG ( OPERATION, ERR,
 712                         "bdb_modrdn: can't figure out "
 713                         "type(s)/values(s) of newrdn\n",
 714                         0, 0, 0 );
 715 #else
 716                 Debug( LDAP_DEBUG_TRACE,
 717                         "bdb_modrdn: can't figure out "
 718                         "type(s)/values(s) of newrdn\n",
 719                         0, 0, 0 );
 720 #endif
 721                 rs->sr_err = LDAP_INVALID_DN_SYNTAX;
 722                 rs->sr_text = "unknown type(s) used in RDN";
 723                 goto return_results;
 724         }
 725
 726 #ifdef NEW_LOGGING
 727         LDAP_LOG ( OPERATION, RESULTS,
 728                 "bdb_modrdn: new_rdn_type=\"%s\", "
 729                 "new_rdn_val=\"%s\"\n",
 730                 new_rdn[ 0 ]->la_attr.bv_val,
 731                 new_rdn[ 0 ]->la_value.bv_val, 0 );
 732 #else
 733         Debug( LDAP_DEBUG_TRACE,
 734                 "bdb_modrdn: new_rdn_type=\"%s\", "
 735                 "new_rdn_val=\"%s\"\n",
 736                 new_rdn[ 0 ]->la_attr.bv_val,
 737                 new_rdn[ 0 ]->la_value.bv_val, 0 );
 738 #endif
 739
 740         if ( op->oq_modrdn.rs_deleteoldrdn ) {
 741                 if ( !old_rdn && ldap_bv2rdn_x( &op->o_req_dn, &old_rdn, (char **)&rs->sr_text,
 742                         LDAP_DN_FORMAT_LDAP, op->o_tmpmemctx ) )
 743                 {
 744 #ifdef NEW_LOGGING
 745                         LDAP_LOG ( OPERATION, ERR,
 746                                 "bdb_modrdn: can't figure out "
 747                                 "type(s)/values(s) of old_rdn\n",
 748                                 0, 0, 0 );
 749 #else
 750                         Debug( LDAP_DEBUG_TRACE,
 751                                 "bdb_modrdn: can't figure out "
 752                                 "the old_rdn type(s)/value(s)\n",
 753                                 0, 0, 0 );
 754 #endif
 755                         rs->sr_err = LDAP_OTHER;
 756                         rs->sr_text = "cannot parse RDN from old DN";
 757                         goto return_results;
 758                 }
 759         }
 760
 761         /* prepare modlist of modifications from old/new rdn */
 762         if (!mod) {
 763                 rs->sr_err = slap_modrdn2mods( op, rs, e, old_rdn, new_rdn, &mod );
 764                 if ( rs->sr_err != LDAP_SUCCESS ) {
 765                         goto return_results;
 766                 }
 767         }
 768
 769         if( op->o_preread ) {
 770                 if( slap_read_controls( op, rs, e,
 771                         &slap_pre_read_bv, &ctrls[num_ctrls] ) )
 772                 {
 773 #ifdef NEW_LOGGING
 774                         LDAP_LOG ( OPERATION, DETAIL1,
 775                                 "<=- bdb_modrdn: post-read failed!\n", 0, 0, 0 );
 776 #else
 777                         Debug( LDAP_DEBUG_TRACE,
 778                                 "<=- bdb_modrdn: post-read failed!\n", 0, 0, 0 );
 779 #endif
 780                         goto return_results;
 781                 }
 782                 ctrls[++num_ctrls] = NULL;
 783                 op->o_preread = 0;  /* prevent redo on retry */
 784         }
 785
 786         /* nested transaction */
 787         rs->sr_err = TXN_BEGIN( bdb->bi_dbenv, ltid, &lt2,
 788                 bdb->bi_db_opflags );
 789         rs->sr_text = NULL;
 790         if( rs->sr_err != 0 ) {
 791 #ifdef NEW_LOGGING
 792                 LDAP_LOG ( OPERATION, ERR,
 793                         "bdb_modrdn: txn_begin(2) failed: %s (%d)\n", db_strerror(rs->sr_err), rs->sr_err, 0 );
 794 #else
 795                 Debug( LDAP_DEBUG_TRACE,
 796                         "bdb_modrdn: txn_begin(2) failed: %s (%d)\n",
 797                         db_strerror(rs->sr_err), rs->sr_err, 0 );
 798 #endif
 799                 rs->sr_err = LDAP_OTHER;
 800                 rs->sr_text = "internal error";
 801                 goto return_results;
 802         }
 803
 804         dummy = *e;
 805         save = e;
 806         e = &dummy;
 807
 808         /* delete old one */
 809         rs->sr_err = bdb_dn2id_delete( op, lt2, eip, e );
 810         if ( rs->sr_err != 0 ) {
 811 #ifdef NEW_LOGGING
 812                 LDAP_LOG ( OPERATION, ERR,
 813                         "<=- bdb_modrdn: dn2id del failed: %s (%d)\n",
 814                         db_strerror(rs->sr_err), rs->sr_err, 0 );
 815 #else
 816                 Debug(LDAP_DEBUG_TRACE,
 817                         "<=- bdb_modrdn: dn2id del failed: %s (%d)\n",
 818                         db_strerror(rs->sr_err), rs->sr_err, 0 );
 819 #endif
 820                 switch( rs->sr_err ) {
 821                 case DB_LOCK_DEADLOCK:
 822                 case DB_LOCK_NOTGRANTED:
 823                         goto retry;
 824                 }
 825                 rs->sr_err = LDAP_OTHER;
 826                 rs->sr_text = "DN index delete fail";
 827                 goto return_results;
 828         }
 829
 830         /* Binary format uses a single contiguous block, cannot
 831          * free individual fields. But if a previous modrdn has
 832          * already happened, must free the names. The frees are
 833          * done in bdb_cache_modrdn().
 834          */
 835         if( e->e_nname.bv_val < e->e_bv.bv_val || e->e_nname.bv_val >
 836                 e->e_bv.bv_val + e->e_bv.bv_len ) {
 837                 e->e_name.bv_val = NULL;
 838                 e->e_nname.bv_val = NULL;
 839         }
 840         e->e_name = new_dn;
 841         e->e_nname = new_ndn;
 842         new_dn.bv_val = NULL;
 843         new_ndn.bv_val = NULL;
 844
 845         /* add new one */
 846         rs->sr_err = bdb_dn2id_add( op, lt2, neip ? neip : eip, e );
 847         if ( rs->sr_err != 0 ) {
 848 #ifdef NEW_LOGGING
 849                 LDAP_LOG ( OPERATION, ERR,
 850                         "<=- bdb_modrdn: dn2id add failed: %s (%d)\n",
 851                         db_strerror(rs->sr_err), rs->sr_err, 0 );
 852 #else
 853                 Debug(LDAP_DEBUG_TRACE,
 854                         "<=- bdb_modrdn: dn2id add failed: %s (%d)\n",
 855                         db_strerror(rs->sr_err), rs->sr_err, 0 );
 856 #endif
 857                 switch( rs->sr_err ) {
 858                 case DB_LOCK_DEADLOCK:
 859                 case DB_LOCK_NOTGRANTED:
 860                         goto retry;
 861                 }
 862                 rs->sr_err = LDAP_OTHER;
 863                 rs->sr_text = "DN index add failed";
 864                 goto return_results;
 865         }
 866
 867         if ( rs->sr_err == LDAP_SUCCESS && !op->o_noop ) {
 868                 LDAP_LIST_FOREACH ( ps_list, &bdb->bi_psearch_list, o_ps_link ) {
 869                         bdb_psearch( op, rs, ps_list, e, LDAP_PSEARCH_BY_PREMODIFY );
 870                 }
 871         }
 872
 873         /* modify entry */
 874         rs->sr_err = bdb_modify_internal( op, lt2, &mod[0], e,
 875                 &rs->sr_text, textbuf, textlen );
 876
 877         if( rs->sr_err != LDAP_SUCCESS ) {
 878 #ifdef NEW_LOGGING
 879                 LDAP_LOG ( OPERATION, ERR,
 880                         "<=- bdb_modrdn: modify failed: %s (%d)\n",
 881                         db_strerror(rs->sr_err), rs->sr_err, 0 );
 882 #else
 883                 Debug(LDAP_DEBUG_TRACE,
 884                         "<=- bdb_modrdn: modify failed: %s (%d)\n",
 885                         db_strerror(rs->sr_err), rs->sr_err, 0 );
 886 #endif
 887                 if ( ( rs->sr_err == LDAP_INSUFFICIENT_ACCESS ) && opinfo.boi_err ) {
 888                         rs->sr_err = opinfo.boi_err;
 889                 }
 890                 switch( rs->sr_err ) {
 891                 case DB_LOCK_DEADLOCK:
 892                 case DB_LOCK_NOTGRANTED:
 893                         goto retry;
 894                 }
 895                 goto return_results;
 896         }
 897
 898         if( op->o_postread ) {
 899                 if( slap_read_controls( op, rs, e,
 900                         &slap_post_read_bv, &ctrls[num_ctrls] ) )
 901                 {
 902 #ifdef NEW_LOGGING
 903                         LDAP_LOG ( OPERATION, DETAIL1,
 904                                 "<=- bdb_modrdn: post-read failed!\n", 0, 0, 0 );
 905 #else
 906                         Debug( LDAP_DEBUG_TRACE,
 907                                 "<=- bdb_modrdn: post-read failed!\n", 0, 0, 0 );
 908 #endif
 909                         goto return_results;
 910                 }
 911                 ctrls[++num_ctrls] = NULL;
 912                 op->o_postread = 0;  /* prevent redo on retry */
 913                 /* FIXME: should read entry on the last retry */
 914         }
 915
 916         /* id2entry index */
 917         rs->sr_err = bdb_id2entry_update( op->o_bd, lt2, e );
 918         if ( rs->sr_err != 0 ) {
 919 #ifdef NEW_LOGGING
 920                 LDAP_LOG ( OPERATION, ERR,
 921                         "<=- bdb_modrdn: id2entry failed: %s (%d)\n",
 922                         db_strerror(rs->sr_err), rs->sr_err, 0 );
 923 #else
 924                 Debug(LDAP_DEBUG_TRACE,
 925                         "<=- bdb_modrdn: id2entry failed: %s (%d)\n",
 926                         db_strerror(rs->sr_err), rs->sr_err, 0 );
 927 #endif
 928                 switch( rs->sr_err ) {
 929                 case DB_LOCK_DEADLOCK:
 930                 case DB_LOCK_NOTGRANTED:
 931                         goto retry;
 932                 }
 933                 rs->sr_err = LDAP_OTHER;
 934                 rs->sr_text = "entry update failed";
 935                 goto return_results;
 936         }
 937         if ( TXN_COMMIT( lt2, 0 ) != 0 ) {
 938                 rs->sr_err = LDAP_OTHER;
 939                 rs->sr_text = "txn_commit(2) failed";
 940                 goto return_results;
 941         }
 942
 943         if ( !op->o_bd->syncinfo ) {
 944                 rc = bdb_csn_commit( op, rs, ltid, ei, &suffix_ei, &ctxcsn_e, &ctxcsn_added, locker );
 945                 switch ( rc ) {
 946                 case BDB_CSN_ABORT :
 947                         goto return_results;
 948                 case BDB_CSN_RETRY :
 949                         goto retry;
 950                 }
 951         }
 952
 953         if( op->o_noop ) {
 954                 if(( rs->sr_err=TXN_ABORT( ltid )) != 0 ) {
 955                         rs->sr_text = "txn_abort (no-op) failed";
 956                 } else {
 957                         noop = 1;
 958                         rs->sr_err = LDAP_SUCCESS;
 959                 }
 960
 961         } else {
 962                 char gid[DB_XIDDATASIZE];
 963
 964                 snprintf( gid, sizeof( gid ), "%s-%08lx-%08lx",
 965                         bdb_uuid.bv_val, (long) op->o_connid, (long) op->o_opid );
 966
 967                 if(( rs->sr_err=TXN_PREPARE( ltid, gid )) != 0 ) {
 968                         rs->sr_text = "txn_prepare failed";
 969                 } else {
 970                         bdb_cache_modrdn( save, &op->orr_nnewrdn, e, neip,
 971                                 bdb->bi_dbenv, locker, &lock );
 972
 973                         if ( !op->o_bd->syncinfo ) {
 974                                 if ( ctxcsn_added ) {
 975                                         bdb_cache_add( bdb, suffix_ei, ctxcsn_e, (struct berval *)&slap_ldapsync_cn_bv, locker );
 976                                 }
 977                         }
 978
 979                         if(( rs->sr_err=TXN_COMMIT( ltid, 0 )) != 0 ) {
 980                                 rs->sr_text = "txn_commit failed";
 981                         } else {
 982                                 rs->sr_err = LDAP_SUCCESS;
 983                         }
 984                 }
 985         }
 986
 987         ltid = NULL;
 988         op->o_private = NULL;
 989
 990         if( rs->sr_err != LDAP_SUCCESS ) {
 991 #ifdef NEW_LOGGING
 992                 LDAP_LOG ( OPERATION, RESULTS, "bdb_modrdn: %s : %s (%d)\n",
 993                         rs->sr_text, db_strerror(rs->sr_err), rs->sr_err );
 994 #else
 995                 Debug( LDAP_DEBUG_TRACE, "bdb_add: %s : %s (%d)\n",
 996                         rs->sr_text, db_strerror(rs->sr_err), rs->sr_err );
 997 #endif
 998                 rs->sr_err = LDAP_OTHER;
 999
1000                 goto return_results;
1001         }
1002
1003 #ifdef NEW_LOGGING
1004         LDAP_LOG ( OPERATION, RESULTS,
1005                 "bdb_modrdn: rdn modified%s id=%08lx dn=\"%s\"\n",
1006                 op->o_noop ? " (no-op)" : "", e->e_id, e->e_dn );
1007 #else
1008         Debug(LDAP_DEBUG_TRACE,
1009                 "bdb_modrdn: rdn modified%s id=%08lx dn=\"%s\"\n",
1010                 op->o_noop ? " (no-op)" : "", e->e_id, e->e_dn );
1011 #endif
1012         rs->sr_text = NULL;
1013         if( num_ctrls ) rs->sr_ctrls = ctrls;
1014
1015 return_results:
1016         send_ldap_result( op, rs );
1017
1018         if ( rs->sr_err == LDAP_SUCCESS && !op->o_noop ) {
1019                 /* Loop through in-scope entries for each psearch spec */
1020                 LDAP_LIST_FOREACH ( ps_list, &bdb->bi_psearch_list, o_ps_link ) {
1021                         bdb_psearch( op, rs, ps_list, e, LDAP_PSEARCH_BY_MODIFY );
1022                 }
1023                 pm_list = LDAP_LIST_FIRST(&op->o_pm_list);
1024                 while ( pm_list != NULL ) {
1025                         bdb_psearch(op, rs, pm_list->ps_op,
1026                                                 e, LDAP_PSEARCH_BY_SCOPEOUT);
1027                         pm_prev = pm_list;
1028                         LDAP_LIST_REMOVE ( pm_list, ps_link );
1029                         pm_list = LDAP_LIST_NEXT ( pm_list, ps_link );
1030                         ch_free( pm_prev );
1031                 }
1032         }
1033
1034         if( rs->sr_err == LDAP_SUCCESS && bdb->bi_txn_cp ) {
1035                 ldap_pvt_thread_yield();
1036                 TXN_CHECKPOINT( bdb->bi_dbenv,
1037                         bdb->bi_txn_cp_kbyte, bdb->bi_txn_cp_min, 0 );
1038         }
1039
1040 done:
1041         if( new_dn.bv_val != NULL ) free( new_dn.bv_val );
1042         if( new_ndn.bv_val != NULL ) free( new_ndn.bv_val );
1043
1044         /* LDAP v2 supporting correct attribute handling. */
1045         if ( new_rdn != NULL ) {
1046                 ldap_rdnfree_x( new_rdn, op->o_tmpmemctx );
1047         }
1048         if ( old_rdn != NULL ) {
1049                 ldap_rdnfree_x( old_rdn, op->o_tmpmemctx );
1050         }
1051         if( mod != NULL ) {
1052                 Modifications *tmp;
1053                 for (; mod; mod=tmp ) {
1054                         tmp = mod->sml_next;
1055                         if ( mod->sml_nvalues ) free( mod->sml_nvalues[0].bv_val );
1056                         free( mod );
1057                 }
1058         }
1059
1060         /* LDAP v3 Support */
1061         if( np != NULL ) {
1062                 /* free new parent and reader lock */
1063                 bdb_unlocked_cache_return_entry_r(&bdb->bi_cache, np);
1064         }
1065
1066         if( p != NULL ) {
1067                 /* free parent and reader lock */
1068                 bdb_unlocked_cache_return_entry_r(&bdb->bi_cache, p);
1069         }
1070
1071         /* free entry */
1072         if( e != NULL ) {
1073                 bdb_unlocked_cache_return_entry_w( &bdb->bi_cache, e);
1074         }
1075
1076         if( ltid != NULL ) {
1077                 pm_list = LDAP_LIST_FIRST(&op->o_pm_list);
1078                 while ( pm_list != NULL ) {
1079                         LDAP_LIST_REMOVE ( pm_list, ps_link );
1080                         pm_prev = pm_list;
1081                         pm_list = LDAP_LIST_NEXT ( pm_list, ps_link );
1082                         ch_free( pm_prev );
1083                 }
1084                 TXN_ABORT( ltid );
1085                 op->o_private = NULL;
1086         }
1087
1088         return ( ( rs->sr_err == LDAP_SUCCESS ) ? noop : rs->sr_err );
1089 }