git.sur5r.net Git - openldap/blob - servers/slapd/back-monitor/search.c

   1 /* search.c - monitor backend search function */
   2 /* $OpenLDAP$ */
   3 /* This work is part of OpenLDAP Software <http://www.openldap.org/>.
   4  *
   5  * Copyright 2001-2011 The OpenLDAP Foundation.
   6  * Portions Copyright 2001-2003 Pierangelo Masarati.
   7  * All rights reserved.
   8  *
   9  * Redistribution and use in source and binary forms, with or without
  10  * modification, are permitted only as authorized by the OpenLDAP
  11  * Public License.
  12  *
  13  * A copy of this license is available in file LICENSE in the
  14  * top-level directory of the distribution or, alternatively, at
  15  * <http://www.OpenLDAP.org/license.html>.
  16  */
  17 /* ACKNOWLEDGEMENTS:
  18  * This work was initially developed by Pierangelo Masarati for inclusion
  19  * in OpenLDAP Software.
  20  */
  21
  22 #include "portable.h"
  23
  24 #include <stdio.h>
  25
  26 #include <ac/string.h>
  27 #include <ac/socket.h>
  28
  29 #include "slap.h"
  30 #include "back-monitor.h"
  31 #include "proto-back-monitor.h"
  32
  33 static int
  34 monitor_send_children(
  35         Operation       *op,
  36         SlapReply       *rs,
  37         Entry           *e_parent,
  38         int             sub )
  39 {
  40         monitor_info_t  *mi = ( monitor_info_t * )op->o_bd->be_private;
  41         Entry                   *e,
  42                                 *e_tmp,
  43                                 *e_ch = NULL,
  44                                 *e_nonvolatile = NULL;
  45         monitor_entry_t *mp;
  46         int                     rc,
  47                                 nonvolatile = 0;
  48
  49         mp = ( monitor_entry_t * )e_parent->e_private;
  50         e_nonvolatile = e = mp->mp_children;
  51
  52         if ( MONITOR_HAS_VOLATILE_CH( mp ) ) {
  53                 monitor_entry_create( op, rs, NULL, e_parent, &e_ch );
  54         }
  55         monitor_cache_release( mi, e_parent );
  56
  57         /* no volatile entries? */
  58         if ( e_ch == NULL ) {
  59                 /* no persistent entries? return */
  60                 if ( e == NULL ) {
  61                         return LDAP_SUCCESS;
  62                 }
  63                 nonvolatile = 1;
  64
  65         /* volatile entries */
  66         } else {
  67                 /* if no persistent, return only volatile */
  68                 if ( e == NULL ) {
  69                         e = e_ch;
  70
  71                 /* else append persistent to volatile */
  72                 } else {
  73                         e_tmp = e_ch;
  74                         do {
  75                                 mp = ( monitor_entry_t * )e_tmp->e_private;
  76                                 e_tmp = mp->mp_next;
  77
  78                                 if ( e_tmp == NULL ) {
  79                                         mp->mp_next = e;
  80                                         break;
  81                                 }
  82                         } while ( e_tmp );
  83                         e = e_ch;
  84                 }
  85         }
  86
  87         /* return entries */
  88         for ( monitor_cache_lock( e ); e != NULL; ) {
  89                 monitor_entry_update( op, rs, e );
  90
  91                 mp = ( monitor_entry_t * )e->e_private;
  92                 e_tmp = mp->mp_next;
  93
  94                 if ( op->o_abandon ) {
  95                         monitor_cache_release( mi, e );
  96                         rc = SLAPD_ABANDON;
  97                         goto freeout;
  98                 }
  99
 100                 rc = test_filter( op, e, op->oq_search.rs_filter );
 101                 if ( rc == LDAP_COMPARE_TRUE ) {
 102                         rs->sr_entry = e;
 103                         rs->sr_flags = 0;
 104                         rc = send_search_entry( op, rs );
 105                         rs->sr_entry = NULL;
 106                         if ( rc )
 107                                 goto freeout;
 108                 }
 109
 110                 if ( sub ) {
 111                         rc = monitor_send_children( op, rs, e, sub );
 112                         if ( rc ) {
 113 freeout:
 114                                 /* FIXME: may leak generated children */
 115                                 if ( nonvolatile == 0 ) {
 116                                         for ( ; e_tmp != NULL; ) {
 117                                                 mp = ( monitor_entry_t * )e_tmp->e_private;
 118                                                 e = e_tmp;
 119                                                 e_tmp = mp->mp_next;
 120                                                 monitor_cache_lock( mi, e );
 121                                                 monitor_cache_release( mi, e );
 122
 123                                                 if ( e_tmp == e_nonvolatile ) {
 124                                                         break;
 125                                                 }
 126                                         }
 127                                 }
 128
 129                                 return( rc );
 130                         }
 131                 }
 132
 133                 if ( e_tmp != NULL ) {
 134                         monitor_cache_lock( e_tmp );
 135                 }
 136
 137                 if ( !sub ) {
 138                         /* otherwise the recursive call already released */
 139                         monitor_cache_release( mi, e );
 140                 }
 141
 142                 e = e_tmp;
 143                 if ( e == e_nonvolatile ) {
 144                         nonvolatile = 1;
 145                 }
 146         }
 147
 148         return LDAP_SUCCESS;
 149 }
 150
 151 int
 152 monitor_back_search( Operation *op, SlapReply *rs )
 153 {
 154         monitor_info_t  *mi = ( monitor_info_t * )op->o_bd->be_private;
 155         int             rc = LDAP_SUCCESS;
 156         Entry           *e = NULL, *matched = NULL;
 157         slap_mask_t     mask;
 158
 159         Debug( LDAP_DEBUG_TRACE, "=> monitor_back_search\n", 0, 0, 0 );
 160
 161
 162         /* get entry with reader lock */
 163         monitor_cache_dn2entry( op, rs, &op->o_req_ndn, &e, &matched );
 164         if ( e == NULL ) {
 165                 rs->sr_err = LDAP_NO_SUCH_OBJECT;
 166                 if ( matched ) {
 167                         if ( !access_allowed_mask( op, matched,
 168                                         slap_schema.si_ad_entry,
 169                                         NULL, ACL_DISCLOSE, NULL, NULL ) )
 170                         {
 171                                 /* do nothing */ ;
 172                         } else {
 173                                 rs->sr_matched = matched->e_dn;
 174                         }
 175                 }
 176
 177                 send_ldap_result( op, rs );
 178                 if ( matched ) {
 179                         monitor_cache_release( mi, matched );
 180                         rs->sr_matched = NULL;
 181                 }
 182
 183                 return rs->sr_err;
 184         }
 185
 186         /* NOTE: __NEW__ "search" access is required
 187          * on searchBase object */
 188         if ( !access_allowed_mask( op, e, slap_schema.si_ad_entry,
 189                                 NULL, ACL_SEARCH, NULL, &mask ) )
 190         {
 191                 monitor_cache_release( mi, e );
 192
 193                 if ( !ACL_GRANT( mask, ACL_DISCLOSE ) ) {
 194                         rs->sr_err = LDAP_NO_SUCH_OBJECT;
 195                 } else {
 196                         rs->sr_err = LDAP_INSUFFICIENT_ACCESS;
 197                 }
 198
 199                 send_ldap_result( op, rs );
 200
 201                 return rs->sr_err;
 202         }
 203
 204         rs->sr_attrs = op->oq_search.rs_attrs;
 205         switch ( op->oq_search.rs_scope ) {
 206         case LDAP_SCOPE_BASE:
 207                 monitor_entry_update( op, rs, e );
 208                 rc = test_filter( op, e, op->oq_search.rs_filter );
 209                 if ( rc == LDAP_COMPARE_TRUE ) {
 210                         rs->sr_entry = e;
 211                         rs->sr_flags = 0;
 212                         send_search_entry( op, rs );
 213                         rs->sr_entry = NULL;
 214                 }
 215                 rc = LDAP_SUCCESS;
 216                 monitor_cache_release( mi, e );
 217                 break;
 218
 219         case LDAP_SCOPE_ONELEVEL:
 220         case LDAP_SCOPE_SUBORDINATE:
 221                 rc = monitor_send_children( op, rs, e,
 222                         op->oq_search.rs_scope == LDAP_SCOPE_SUBORDINATE );
 223                 break;
 224
 225         case LDAP_SCOPE_SUBTREE:
 226                 monitor_entry_update( op, rs, e );
 227                 rc = test_filter( op, e, op->oq_search.rs_filter );
 228                 if ( rc == LDAP_COMPARE_TRUE ) {
 229                         rs->sr_entry = e;
 230                         rs->sr_flags = 0;
 231                         send_search_entry( op, rs );
 232                         rs->sr_entry = NULL;
 233                 }
 234
 235                 rc = monitor_send_children( op, rs, e, 1 );
 236                 break;
 237
 238         default:
 239                 rc = LDAP_UNWILLING_TO_PERFORM;
 240                 monitor_cache_release( mi, e );
 241         }
 242
 243         rs->sr_attrs = NULL;
 244         rs->sr_err = rc;
 245         if ( rs->sr_err != SLAPD_ABANDON ) {
 246                 send_ldap_result( op, rs );
 247         }
 248
 249         return rs->sr_err;
 250 }
 251