git.sur5r.net Git - openldap/blob - servers/slapd/back-mdb/delete.c

   1 /* delete.c - mdb backend delete routine */
   2 /* $OpenLDAP$ */
   3 /* This work is part of OpenLDAP Software <http://www.openldap.org/>.
   4  *
   5  * Copyright 2000-2011 The OpenLDAP Foundation.
   6  * All rights reserved.
   7  *
   8  * Redistribution and use in source and binary forms, with or without
   9  * modification, are permitted only as authorized by the OpenLDAP
  10  * Public License.
  11  *
  12  * A copy of this license is available in the file LICENSE in the
  13  * top-level directory of the distribution or, alternatively, at
  14  * <http://www.OpenLDAP.org/license.html>.
  15  */
  16
  17 #include "portable.h"
  18
  19 #include <stdio.h>
  20 #include <ac/string.h>
  21
  22 #include "lutil.h"
  23 #include "back-mdb.h"
  24
  25 int
  26 mdb_delete( Operation *op, SlapReply *rs )
  27 {
  28         struct mdb_info *mdb = (struct mdb_info *) op->o_bd->be_private;
  29         struct berval   pdn = {0, NULL};
  30         Entry   *e = NULL;
  31         Entry   *p = NULL;
  32         int             manageDSAit = get_manageDSAit( op );
  33         AttributeDescription *children = slap_schema.si_ad_children;
  34         AttributeDescription *entry = slap_schema.si_ad_entry;
  35         MDB_txn         *txn = NULL;
  36         mdb_op_info opinfo = {{{ 0 }}}, *moi = &opinfo;
  37
  38         LDAPControl **preread_ctrl = NULL;
  39         LDAPControl *ctrls[SLAP_MAX_RESPONSE_CONTROLS];
  40         int num_ctrls = 0;
  41
  42         int     parent_is_glue = 0;
  43         int parent_is_leaf = 0;
  44
  45 #ifdef LDAP_X_TXN
  46         int settle = 0;
  47 #endif
  48
  49         Debug( LDAP_DEBUG_ARGS, "==> " LDAP_XSTRING(mdb_delete) ": %s\n",
  50                 op->o_req_dn.bv_val, 0, 0 );
  51
  52 #ifdef LDAP_X_TXN
  53         if( op->o_txnSpec ) {
  54                 /* acquire connection lock */
  55                 ldap_pvt_thread_mutex_lock( &op->o_conn->c_mutex );
  56                 if( op->o_conn->c_txn == CONN_TXN_INACTIVE ) {
  57                         rs->sr_text = "invalid transaction identifier";
  58                         rs->sr_err = LDAP_X_TXN_ID_INVALID;
  59                         goto txnReturn;
  60                 } else if( op->o_conn->c_txn == CONN_TXN_SETTLE ) {
  61                         settle=1;
  62                         goto txnReturn;
  63                 }
  64
  65                 if( op->o_conn->c_txn_backend == NULL ) {
  66                         op->o_conn->c_txn_backend = op->o_bd;
  67
  68                 } else if( op->o_conn->c_txn_backend != op->o_bd ) {
  69                         rs->sr_text = "transaction cannot span multiple database contexts";
  70                         rs->sr_err = LDAP_AFFECTS_MULTIPLE_DSAS;
  71                         goto txnReturn;
  72                 }
  73
  74                 /* insert operation into transaction */
  75
  76                 rs->sr_text = "transaction specified";
  77                 rs->sr_err = LDAP_X_TXN_SPECIFY_OKAY;
  78
  79 txnReturn:
  80                 /* release connection lock */
  81                 ldap_pvt_thread_mutex_unlock( &op->o_conn->c_mutex );
  82
  83                 if( !settle ) {
  84                         send_ldap_result( op, rs );
  85                         return rs->sr_err;
  86                 }
  87         }
  88 #endif
  89
  90         ctrls[num_ctrls] = 0;
  91
  92         /* allocate CSN */
  93         if ( BER_BVISNULL( &op->o_csn ) ) {
  94                 struct berval csn;
  95                 char csnbuf[LDAP_PVT_CSNSTR_BUFSIZE];
  96
  97                 csn.bv_val = csnbuf;
  98                 csn.bv_len = sizeof(csnbuf);
  99                 slap_get_csn( op, &csn, 1 );
 100         }
 101
 102         /* begin transaction */
 103         rs->sr_err = mdb_opinfo_get( op, mdb, 0, &moi );
 104         rs->sr_text = NULL;
 105         if( rs->sr_err != 0 ) {
 106                 Debug( LDAP_DEBUG_TRACE,
 107                         LDAP_XSTRING(mdb_delete) ": txn_begin failed: "
 108                         "%s (%d)\n", mdb_strerror(rs->sr_err), rs->sr_err, 0 );
 109                 rs->sr_err = LDAP_OTHER;
 110                 rs->sr_text = "internal error";
 111                 goto return_results;
 112         }
 113
 114         txn = moi->moi_txn;
 115
 116         if ( !be_issuffix( op->o_bd, &op->o_req_ndn ) ) {
 117                 dnParent( &op->o_req_ndn, &pdn );
 118         }
 119
 120         /* get parent */
 121         rs->sr_err = mdb_dn2entry( op, txn, &pdn, &p, 1 );
 122         switch( rs->sr_err ) {
 123         case 0:
 124         case MDB_NOTFOUND:
 125                 break;
 126         case LDAP_BUSY:
 127                 rs->sr_text = "ldap server busy";
 128                 goto return_results;
 129         default:
 130                 rs->sr_err = LDAP_OTHER;
 131                 rs->sr_text = "internal error";
 132                 goto return_results;
 133         }
 134         if ( rs->sr_err == MDB_NOTFOUND ) {
 135                 Debug( LDAP_DEBUG_ARGS,
 136                         "<=- " LDAP_XSTRING(mdb_delete) ": no such object %s\n",
 137                         op->o_req_dn.bv_val, 0, 0);
 138
 139                 if ( p && !BER_BVISEMPTY( &p->e_name )) {
 140                         rs->sr_matched = ch_strdup( p->e_name.bv_val );
 141                         if ( is_entry_referral( p )) {
 142                                 BerVarray ref = get_entry_referrals( op, p );
 143                                 rs->sr_ref = referral_rewrite( ref, &p->e_name,
 144                                         &op->o_req_dn, LDAP_SCOPE_DEFAULT );
 145                                 ber_bvarray_free( ref );
 146                         } else {
 147                                 rs->sr_ref = NULL;
 148                         }
 149                 } else {
 150                         rs->sr_ref = referral_rewrite( default_referral, NULL,
 151                                         &op->o_req_dn, LDAP_SCOPE_DEFAULT );
 152                 }
 153                 if ( p ) {
 154                         mdb_entry_return( op, p );
 155                         p = NULL;
 156                 }
 157
 158                 rs->sr_err = LDAP_REFERRAL;
 159                 rs->sr_flags = REP_MATCHED_MUSTBEFREED | REP_REF_MUSTBEFREED;
 160                 goto return_results;
 161         }
 162
 163         /* get entry */
 164         rs->sr_err = mdb_dn2entry( op, txn, &op->o_req_ndn, &e, 0 );
 165         switch( rs->sr_err ) {
 166         case MDB_NOTFOUND:
 167                 e = p;
 168                 p = NULL;
 169         case 0:
 170                 break;
 171         case LDAP_BUSY:
 172                 rs->sr_text = "ldap server busy";
 173                 goto return_results;
 174         default:
 175                 rs->sr_err = LDAP_OTHER;
 176                 rs->sr_text = "internal error";
 177                 goto return_results;
 178         }
 179
 180         /* FIXME : dn2entry() should return non-glue entry */
 181         if ( rs->sr_err == MDB_NOTFOUND || ( !manageDSAit && is_entry_glue( e ))) {
 182                 Debug( LDAP_DEBUG_ARGS,
 183                         "<=- " LDAP_XSTRING(mdb_delete) ": no such object %s\n",
 184                         op->o_req_dn.bv_val, 0, 0);
 185
 186                 rs->sr_matched = ch_strdup( e->e_dn );
 187                 if ( is_entry_referral( e )) {
 188                         BerVarray ref = get_entry_referrals( op, e );
 189                         rs->sr_ref = referral_rewrite( ref, &e->e_name,
 190                                 &op->o_req_dn, LDAP_SCOPE_DEFAULT );
 191                         ber_bvarray_free( ref );
 192                 } else {
 193                         rs->sr_ref = NULL;
 194                 }
 195                 mdb_entry_return( op, e );
 196                 e = NULL;
 197
 198                 rs->sr_err = LDAP_REFERRAL;
 199                 rs->sr_flags = REP_MATCHED_MUSTBEFREED | REP_REF_MUSTBEFREED;
 200                 goto return_results;
 201         }
 202
 203         if ( pdn.bv_len != 0 ) {
 204                 /* check parent for "children" acl */
 205                 rs->sr_err = access_allowed( op, p,
 206                         children, NULL, ACL_WDEL, NULL );
 207
 208                 if ( !rs->sr_err  ) {
 209                         Debug( LDAP_DEBUG_TRACE,
 210                                 "<=- " LDAP_XSTRING(mdb_delete) ": no write "
 211                                 "access to parent\n", 0, 0, 0 );
 212                         rs->sr_err = LDAP_INSUFFICIENT_ACCESS;
 213                         rs->sr_text = "no write access to parent";
 214                         goto return_results;
 215                 }
 216
 217         } else {
 218                 /* no parent, must be root to delete */
 219                 if( ! be_isroot( op ) ) {
 220                         if ( be_issuffix( op->o_bd, (struct berval *)&slap_empty_bv )
 221                                 || be_shadow_update( op ) ) {
 222                                 p = (Entry *)&slap_entry_root;
 223
 224                                 /* check parent for "children" acl */
 225                                 rs->sr_err = access_allowed( op, p,
 226                                         children, NULL, ACL_WDEL, NULL );
 227
 228                                 p = NULL;
 229
 230                                 if ( !rs->sr_err  ) {
 231                                         Debug( LDAP_DEBUG_TRACE,
 232                                                 "<=- " LDAP_XSTRING(mdb_delete)
 233                                                 ": no access to parent\n",
 234                                                 0, 0, 0 );
 235                                         rs->sr_err = LDAP_INSUFFICIENT_ACCESS;
 236                                         rs->sr_text = "no write access to parent";
 237                                         goto return_results;
 238                                 }
 239
 240                         } else {
 241                                 Debug( LDAP_DEBUG_TRACE,
 242                                         "<=- " LDAP_XSTRING(mdb_delete)
 243                                         ": no parent and not root\n", 0, 0, 0 );
 244                                 rs->sr_err = LDAP_INSUFFICIENT_ACCESS;
 245                                 goto return_results;
 246                         }
 247                 }
 248         }
 249
 250         if ( get_assert( op ) &&
 251                 ( test_filter( op, e, get_assertion( op )) != LDAP_COMPARE_TRUE ))
 252         {
 253                 rs->sr_err = LDAP_ASSERTION_FAILED;
 254                 goto return_results;
 255         }
 256
 257         rs->sr_err = access_allowed( op, e,
 258                 entry, NULL, ACL_WDEL, NULL );
 259
 260         if ( !rs->sr_err  ) {
 261                 Debug( LDAP_DEBUG_TRACE,
 262                         "<=- " LDAP_XSTRING(mdb_delete) ": no write access "
 263                         "to entry\n", 0, 0, 0 );
 264                 rs->sr_err = LDAP_INSUFFICIENT_ACCESS;
 265                 rs->sr_text = "no write access to entry";
 266                 goto return_results;
 267         }
 268
 269         if ( !manageDSAit && is_entry_referral( e ) ) {
 270                 /* entry is a referral, don't allow delete */
 271                 rs->sr_ref = get_entry_referrals( op, e );
 272
 273                 Debug( LDAP_DEBUG_TRACE,
 274                         LDAP_XSTRING(mdb_delete) ": entry is referral\n",
 275                         0, 0, 0 );
 276
 277                 rs->sr_err = LDAP_REFERRAL;
 278                 rs->sr_matched = ch_strdup( e->e_name.bv_val );
 279                 rs->sr_flags = REP_MATCHED_MUSTBEFREED | REP_REF_MUSTBEFREED;
 280                 goto return_results;
 281         }
 282
 283         /* pre-read */
 284         if( op->o_preread ) {
 285                 if( preread_ctrl == NULL ) {
 286                         preread_ctrl = &ctrls[num_ctrls++];
 287                         ctrls[num_ctrls] = NULL;
 288                 }
 289                 if( slap_read_controls( op, rs, e,
 290                         &slap_pre_read_bv, preread_ctrl ) )
 291                 {
 292                         Debug( LDAP_DEBUG_TRACE,
 293                                 "<=- " LDAP_XSTRING(mdb_delete) ": pre-read "
 294                                 "failed!\n", 0, 0, 0 );
 295                         if ( op->o_preread & SLAP_CONTROL_CRITICAL ) {
 296                                 /* FIXME: is it correct to abort
 297                                  * operation if control fails? */
 298                                 goto return_results;
 299                         }
 300                 }
 301         }
 302
 303         rs->sr_text = NULL;
 304
 305         /* Can't do it if we have kids */
 306         rs->sr_err = mdb_dn2id_children( op, txn, e );
 307         if( rs->sr_err != MDB_NOTFOUND ) {
 308                 switch( rs->sr_err ) {
 309                 case 0:
 310                         Debug(LDAP_DEBUG_ARGS,
 311                                 "<=- " LDAP_XSTRING(mdb_delete)
 312                                 ": non-leaf %s\n",
 313                                 op->o_req_dn.bv_val, 0, 0);
 314                         rs->sr_err = LDAP_NOT_ALLOWED_ON_NONLEAF;
 315                         rs->sr_text = "subordinate objects must be deleted first";
 316                         break;
 317                 default:
 318                         Debug(LDAP_DEBUG_ARGS,
 319                                 "<=- " LDAP_XSTRING(mdb_delete)
 320                                 ": has_children failed: %s (%d)\n",
 321                                 mdb_strerror(rs->sr_err), rs->sr_err, 0 );
 322                         rs->sr_err = LDAP_OTHER;
 323                         rs->sr_text = "internal error";
 324                 }
 325                 goto return_results;
 326         }
 327
 328         /* delete from dn2id */
 329         rs->sr_err = mdb_dn2id_delete( op, txn, p->e_id, e );
 330         if ( rs->sr_err != 0 ) {
 331                 Debug(LDAP_DEBUG_TRACE,
 332                         "<=- " LDAP_XSTRING(mdb_delete) ": dn2id failed: "
 333                         "%s (%d)\n", mdb_strerror(rs->sr_err), rs->sr_err, 0 );
 334                 rs->sr_text = "DN index delete failed";
 335                 rs->sr_err = LDAP_OTHER;
 336                 goto return_results;
 337         }
 338
 339         /* delete indices for old attributes */
 340         rs->sr_err = mdb_index_entry_del( op, txn, e );
 341         if ( rs->sr_err != LDAP_SUCCESS ) {
 342                 Debug(LDAP_DEBUG_TRACE,
 343                         "<=- " LDAP_XSTRING(mdb_delete) ": index failed: "
 344                         "%s (%d)\n", mdb_strerror(rs->sr_err), rs->sr_err, 0 );
 345                 rs->sr_text = "entry index delete failed";
 346                 rs->sr_err = LDAP_OTHER;
 347                 goto return_results;
 348         }
 349
 350         /* fixup delete CSN */
 351         if ( !SLAP_SHADOW( op->o_bd )) {
 352                 struct berval vals[2];
 353
 354                 assert( !BER_BVISNULL( &op->o_csn ) );
 355                 vals[0] = op->o_csn;
 356                 BER_BVZERO( &vals[1] );
 357                 rs->sr_err = mdb_index_values( op, txn, slap_schema.si_ad_entryCSN,
 358                         vals, 0, SLAP_INDEX_ADD_OP );
 359         if ( rs->sr_err != LDAP_SUCCESS ) {
 360                         rs->sr_text = "entryCSN index update failed";
 361                         rs->sr_err = LDAP_OTHER;
 362                         goto return_results;
 363                 }
 364         }
 365
 366         /* delete from id2entry */
 367         rs->sr_err = mdb_id2entry_delete( op->o_bd, txn, e );
 368         if ( rs->sr_err != 0 ) {
 369                 Debug( LDAP_DEBUG_TRACE,
 370                         "<=- " LDAP_XSTRING(mdb_delete) ": id2entry failed: "
 371                         "%s (%d)\n", mdb_strerror(rs->sr_err), rs->sr_err, 0 );
 372                 rs->sr_text = "entry delete failed";
 373                 rs->sr_err = LDAP_OTHER;
 374                 goto return_results;
 375         }
 376
 377         if ( pdn.bv_len != 0 ) {
 378                 parent_is_glue = is_entry_glue(p);
 379                 rs->sr_err = mdb_dn2id_children( op, txn, p );
 380                 if ( rs->sr_err != MDB_NOTFOUND ) {
 381                         switch( rs->sr_err ) {
 382                         case 0:
 383                                 break;
 384                         default:
 385                                 Debug(LDAP_DEBUG_ARGS,
 386                                         "<=- " LDAP_XSTRING(mdb_delete)
 387                                         ": has_children failed: %s (%d)\n",
 388                                         mdb_strerror(rs->sr_err), rs->sr_err, 0 );
 389                                 rs->sr_err = LDAP_OTHER;
 390                                 rs->sr_text = "internal error";
 391                                 goto return_results;
 392                         }
 393                         parent_is_leaf = 1;
 394                 }
 395                 mdb_entry_return( op, p );
 396                 p = NULL;
 397         }
 398
 399         if( moi == &opinfo ) {
 400                 LDAP_SLIST_REMOVE( &op->o_extra, &opinfo.moi_oe, OpExtra, oe_next );
 401                 opinfo.moi_oe.oe_key = NULL;
 402                 if( op->o_noop ) {
 403                         mdb_txn_abort( txn );
 404                         rs->sr_err = LDAP_X_NO_OPERATION;
 405                         txn = NULL;
 406                         goto return_results;
 407                 } else {
 408                         rs->sr_err = mdb_txn_commit( txn );
 409                 }
 410                 txn = NULL;
 411         }
 412
 413         if( rs->sr_err != 0 ) {
 414                 Debug( LDAP_DEBUG_TRACE,
 415                         LDAP_XSTRING(mdb_delete) ": txn_%s failed: %s (%d)\n",
 416                         op->o_noop ? "abort (no-op)" : "commit",
 417                         mdb_strerror(rs->sr_err), rs->sr_err );
 418                 rs->sr_err = LDAP_OTHER;
 419                 rs->sr_text = "commit failed";
 420
 421                 goto return_results;
 422         }
 423
 424         Debug( LDAP_DEBUG_TRACE,
 425                 LDAP_XSTRING(mdb_delete) ": deleted%s id=%08lx dn=\"%s\"\n",
 426                 op->o_noop ? " (no-op)" : "",
 427                 e->e_id, op->o_req_dn.bv_val );
 428         rs->sr_err = LDAP_SUCCESS;
 429         rs->sr_text = NULL;
 430         if( num_ctrls ) rs->sr_ctrls = ctrls;
 431
 432 return_results:
 433         if ( rs->sr_err == LDAP_SUCCESS && parent_is_glue && parent_is_leaf ) {
 434                 op->o_delete_glue_parent = 1;
 435         }
 436
 437         if ( p != NULL ) {
 438                 mdb_entry_return( op, p );
 439         }
 440
 441         /* free entry */
 442         if( e != NULL ) {
 443                 mdb_entry_return( op, e );
 444         }
 445
 446         if( moi == &opinfo ) {
 447                 if( txn != NULL ) {
 448                         mdb_txn_abort( txn );
 449                 }
 450                 if ( opinfo.moi_oe.oe_key ) {
 451                         LDAP_SLIST_REMOVE( &op->o_extra, &opinfo.moi_oe, OpExtra, oe_next );
 452                 }
 453         }
 454
 455         send_ldap_result( op, rs );
 456         slap_graduate_commit_csn( op );
 457
 458         if( preread_ctrl != NULL && (*preread_ctrl) != NULL ) {
 459                 slap_sl_free( (*preread_ctrl)->ldctl_value.bv_val, op->o_tmpmemctx );
 460                 slap_sl_free( *preread_ctrl, op->o_tmpmemctx );
 461         }
 462
 463 #if 0
 464         if( rs->sr_err == LDAP_SUCCESS && mdb->bi_txn_cp_kbyte ) {
 465                 TXN_CHECKPOINT( mdb->bi_dbenv,
 466                         mdb->bi_txn_cp_kbyte, mdb->bi_txn_cp_min, 0 );
 467         }
 468 #endif
 469         return rs->sr_err;
 470 }