git.sur5r.net Git - openldap/blob - servers/slapd/back-meta/modify.c

   1 /* $OpenLDAP$ */
   2 /* This work is part of OpenLDAP Software <http://www.openldap.org/>.
   3  *
   4  * Copyright 1999-2006 The OpenLDAP Foundation.
   5  * Portions Copyright 2001-2003 Pierangelo Masarati.
   6  * Portions Copyright 1999-2003 Howard Chu.
   7  * All rights reserved.
   8  *
   9  * Redistribution and use in source and binary forms, with or without
  10  * modification, are permitted only as authorized by the OpenLDAP
  11  * Public License.
  12  *
  13  * A copy of this license is available in the file LICENSE in the
  14  * top-level directory of the distribution or, alternatively, at
  15  * <http://www.OpenLDAP.org/license.html>.
  16  */
  17 /* ACKNOWLEDGEMENTS:
  18  * This work was initially developed by the Howard Chu for inclusion
  19  * in OpenLDAP Software and subsequently enhanced by Pierangelo
  20  * Masarati.
  21  */
  22
  23 #include "portable.h"
  24
  25 #include <stdio.h>
  26
  27 #include <ac/string.h>
  28 #include <ac/socket.h>
  29
  30 #include "slap.h"
  31 #include "../back-ldap/back-ldap.h"
  32 #include "back-meta.h"
  33
  34 int
  35 meta_back_modify( Operation *op, SlapReply *rs )
  36 {
  37         metainfo_t      *mi = ( metainfo_t * )op->o_bd->be_private;
  38         metaconn_t      *mc;
  39         int             rc = 0;
  40         int             maperr = 1;
  41         LDAPMod         **modv = NULL;
  42         LDAPMod         *mods = NULL;
  43         Modifications   *ml;
  44         int             candidate = -1, i;
  45         int             isupdate;
  46         struct berval   mdn = BER_BVNULL;
  47         struct berval   mapped;
  48         dncookie        dc;
  49         int             msgid;
  50         int             do_retry = 1;
  51
  52         mc = meta_back_getconn( op, rs, &candidate, LDAP_BACK_SENDERR );
  53         if ( !mc || !meta_back_dobind( op, rs, mc, LDAP_BACK_SENDERR ) ) {
  54                 return rs->sr_err;
  55         }
  56
  57         assert( mc->mc_conns[ candidate ].msc_ld != NULL );
  58
  59         /*
  60          * Rewrite the modify dn, if needed
  61          */
  62         dc.target = &mi->mi_targets[ candidate ];
  63         dc.conn = op->o_conn;
  64         dc.rs = rs;
  65         dc.ctx = "modifyDN";
  66
  67         if ( ldap_back_dn_massage( &dc, &op->o_req_dn, &mdn ) ) {
  68                 maperr = 0;
  69                 goto cleanup;
  70         }
  71
  72         for ( i = 0, ml = op->orm_modlist; ml; i++ ,ml = ml->sml_next )
  73                 ;
  74
  75         mods = ch_malloc( sizeof( LDAPMod )*i );
  76         if ( mods == NULL ) {
  77                 rs->sr_err = LDAP_NO_MEMORY;
  78                 maperr = 0;
  79                 goto cleanup;
  80         }
  81         modv = ( LDAPMod ** )ch_malloc( ( i + 1 )*sizeof( LDAPMod * ) );
  82         if ( modv == NULL ) {
  83                 rs->sr_err = LDAP_NO_MEMORY;
  84                 maperr = 0;
  85                 goto cleanup;
  86         }
  87
  88         dc.ctx = "modifyAttrDN";
  89         isupdate = be_shadow_update( op );
  90         for ( i = 0, ml = op->orm_modlist; ml; ml = ml->sml_next ) {
  91                 int     j, is_oc = 0;
  92
  93                 if ( !isupdate && !get_manageDIT( op ) && ml->sml_desc->ad_type->sat_no_user_mod  )
  94                 {
  95                         continue;
  96                 }
  97
  98                 if ( ml->sml_desc == slap_schema.si_ad_objectClass
  99                                 || ml->sml_desc == slap_schema.si_ad_structuralObjectClass )
 100                 {
 101                         is_oc = 1;
 102                         mapped = ml->sml_desc->ad_cname;
 103
 104                 } else {
 105                         ldap_back_map( &mi->mi_targets[ candidate ].mt_rwmap.rwm_at,
 106                                         &ml->sml_desc->ad_cname, &mapped,
 107                                         BACKLDAP_MAP );
 108                         if ( BER_BVISNULL( &mapped ) || BER_BVISEMPTY( &mapped ) ) {
 109                                 continue;
 110                         }
 111                 }
 112
 113                 modv[ i ] = &mods[ i ];
 114                 mods[ i ].mod_op = ml->sml_op | LDAP_MOD_BVALUES;
 115                 mods[ i ].mod_type = mapped.bv_val;
 116
 117                 /*
 118                  * FIXME: dn-valued attrs should be rewritten
 119                  * to allow their use in ACLs at the back-ldap
 120                  * level.
 121                  */
 122                 if ( ml->sml_values != NULL ) {
 123                         if ( is_oc ) {
 124                                 for ( j = 0; !BER_BVISNULL( &ml->sml_values[ j ] ); j++ )
 125                                         ;
 126                                 mods[ i ].mod_bvalues =
 127                                         (struct berval **)ch_malloc( ( j + 1 ) *
 128                                         sizeof( struct berval * ) );
 129                                 for ( j = 0; !BER_BVISNULL( &ml->sml_values[ j ] ); ) {
 130                                         struct ldapmapping      *mapping;
 131
 132                                         ldap_back_mapping( &mi->mi_targets[ candidate ].mt_rwmap.rwm_oc,
 133                                                         &ml->sml_values[ j ], &mapping, BACKLDAP_MAP );
 134
 135                                         if ( mapping == NULL ) {
 136                                                 if ( mi->mi_targets[ candidate ].mt_rwmap.rwm_oc.drop_missing ) {
 137                                                         continue;
 138                                                 }
 139                                                 mods[ i ].mod_bvalues[ j ] = &ml->sml_values[ j ];
 140
 141                                         } else {
 142                                                 mods[ i ].mod_bvalues[ j ] = &mapping->dst;
 143                                         }
 144                                         j++;
 145                                 }
 146                                 mods[ i ].mod_bvalues[ j ] = NULL;
 147
 148                         } else {
 149                                 if ( ml->sml_desc->ad_type->sat_syntax ==
 150                                                 slap_schema.si_syn_distinguishedName )
 151                                 {
 152                                         ( void )ldap_dnattr_rewrite( &dc, ml->sml_values );
 153                                         if ( ml->sml_values == NULL ) {
 154                                                 continue;
 155                                         }
 156                                 }
 157
 158                                 for ( j = 0; !BER_BVISNULL( &ml->sml_values[ j ] ); j++ )
 159                                         ;
 160                                 mods[ i ].mod_bvalues =
 161                                         (struct berval **)ch_malloc( ( j + 1 ) *
 162                                         sizeof( struct berval * ) );
 163                                 for ( j = 0; !BER_BVISNULL( &ml->sml_values[ j ] ); j++ ) {
 164                                         mods[ i ].mod_bvalues[ j ] = &ml->sml_values[ j ];
 165                                 }
 166                                 mods[ i ].mod_bvalues[ j ] = NULL;
 167                         }
 168
 169                 } else {
 170                         mods[ i ].mod_bvalues = NULL;
 171                 }
 172
 173                 i++;
 174         }
 175         modv[ i ] = 0;
 176
 177 retry:;
 178         rs->sr_err = ldap_modify_ext( mc->mc_conns[ candidate ].msc_ld, mdn.bv_val,
 179                         modv, op->o_ctrls, NULL, &msgid );
 180         if ( rs->sr_err == LDAP_UNAVAILABLE && do_retry ) {
 181                 do_retry = 0;
 182                 if ( meta_back_retry( op, rs, &mc, candidate, LDAP_BACK_SENDERR ) ) {
 183                         goto retry;
 184                 }
 185                 goto done;
 186
 187         } else if ( rs->sr_err == LDAP_SUCCESS ) {
 188                 struct timeval  tv, *tvp = NULL;
 189                 LDAPMessage     *res = NULL;
 190
 191                 if ( mi->mi_targets[ candidate ].mt_timeout[ LDAP_BACK_OP_MODIFY ] != 0 ) {
 192                         tv.tv_sec = mi->mi_targets[ candidate ].mt_timeout[ LDAP_BACK_OP_MODIFY ];
 193                         tv.tv_usec = 0;
 194                         tvp = &tv;
 195                 }
 196
 197                 rs->sr_err = LDAP_OTHER;
 198                 rc = ldap_result( mc->mc_conns[ candidate ].msc_ld,
 199                         msgid, LDAP_MSG_ALL, tvp, &res );
 200                 switch ( rc ) {
 201                 case -1:
 202                         maperr = 0;
 203                         break;
 204
 205                 case 0:
 206                         ldap_abandon_ext( mc->mc_conns[ candidate ].msc_ld,
 207                                 msgid, NULL, NULL );
 208                         rs->sr_err = op->o_protocol >= LDAP_VERSION3 ?
 209                                 LDAP_ADMINLIMIT_EXCEEDED : LDAP_OPERATIONS_ERROR;
 210                         maperr = 0;
 211                         break;
 212
 213                 case LDAP_RES_MODIFY:
 214                         rc = ldap_parse_result( mc->mc_conns[ candidate ].msc_ld,
 215                                 res, &rs->sr_err, NULL, NULL, NULL, NULL, 1 );
 216                         if ( rc != LDAP_SUCCESS ) {
 217                                 rs->sr_err = rc;
 218                         }
 219                         maperr = 1;
 220                         break;
 221
 222                 default:
 223                         maperr = 0;
 224                         ldap_msgfree( res );
 225                         break;
 226                 }
 227         }
 228
 229 cleanup:;
 230         if ( maperr ) {
 231                 rc = meta_back_op_result( mc, op, rs, candidate );
 232
 233         } else {
 234                 send_ldap_result( op, rs );
 235         }
 236
 237 done:;
 238         if ( mdn.bv_val != op->o_req_dn.bv_val ) {
 239                 free( mdn.bv_val );
 240                 BER_BVZERO( &mdn );
 241         }
 242         if ( modv != NULL ) {
 243                 for ( i = 0; modv[ i ]; i++ ) {
 244                         free( modv[ i ]->mod_bvalues );
 245                 }
 246         }
 247         free( mods );
 248         free( modv );
 249
 250         if ( mc ) {
 251                 meta_back_release_conn( op, mc );
 252         }
 253
 254         return rs->sr_err;
 255 }
 256