2 /* This work is part of OpenLDAP Software <http://www.openldap.org/>.
4 * Copyright 1999-2007 The OpenLDAP Foundation.
5 * Portions Copyright 1999 Dmitry Kovalev.
6 * Portions Copyright 2002 Pierangelo Masarati.
9 * Redistribution and use in source and binary forms, with or without
10 * modification, are permitted only as authorized by the OpenLDAP
13 * A copy of this license is available in the file LICENSE in the
14 * top-level directory of the distribution or, alternatively, at
15 * <http://www.OpenLDAP.org/license.html>.
18 * This work was initially developed by Dmitry Kovalev for inclusion
19 * by OpenLDAP Software. Additional significant contributors include
20 * Pierangelo Masarati.
26 #include <sys/types.h>
27 #include "ac/string.h"
30 #include "proto-sql.h"
33 backsql_modrdn( Operation *op, SlapReply *rs )
35 backsql_info *bi = (backsql_info*)op->o_bd->be_private;
36 SQLHDBC dbh = SQL_NULL_HDBC;
37 SQLHSTMT sth = SQL_NULL_HSTMT;
39 backsql_entryID e_id = BACKSQL_ENTRYID_INIT,
40 n_id = BACKSQL_ENTRYID_INIT;
41 backsql_srch_info bsi = { 0 };
42 backsql_oc_map_rec *oc = NULL;
43 struct berval pdn = BER_BVNULL, pndn = BER_BVNULL,
44 *new_pdn = NULL, *new_npdn = NULL,
45 new_dn = BER_BVNULL, new_ndn = BER_BVNULL,
46 realnew_dn = BER_BVNULL;
51 int manageDSAit = get_manageDSAit( op );
52 struct berval *newSuperior = op->oq_modrdn.rs_newSup;
54 Debug( LDAP_DEBUG_TRACE, "==>backsql_modrdn() renaming entry \"%s\", "
55 "newrdn=\"%s\", newSuperior=\"%s\"\n",
56 op->o_req_dn.bv_val, op->oq_modrdn.rs_newrdn.bv_val,
57 newSuperior ? newSuperior->bv_val : "(NULL)" );
59 rs->sr_err = backsql_get_db_conn( op, &dbh );
60 if ( rs->sr_err != LDAP_SUCCESS ) {
61 Debug( LDAP_DEBUG_TRACE, " backsql_modrdn(): "
62 "could not get connection handle - exiting\n",
64 rs->sr_text = ( rs->sr_err == LDAP_OTHER )
65 ? "SQL-backend error" : NULL;
71 rs->sr_err = backsql_init_search( &bsi, &op->o_req_ndn,
73 (time_t)(-1), NULL, dbh, op, rs,
74 slap_anlist_all_attributes,
75 ( BACKSQL_ISF_MATCHED | BACKSQL_ISF_GET_ENTRY ) );
76 switch ( rs->sr_err ) {
81 if ( manageDSAit && !BER_BVISNULL( &bsi.bsi_e->e_nname ) &&
82 dn_match( &op->o_req_ndn, &bsi.bsi_e->e_nname ) )
84 rs->sr_err = LDAP_SUCCESS;
86 rs->sr_matched = NULL;
88 ber_bvarray_free( rs->sr_ref );
97 Debug( LDAP_DEBUG_TRACE, "backsql_modrdn(): "
98 "could not retrieve modrdnDN ID - no such entry\n",
100 if ( !BER_BVISNULL( &r.e_nname ) ) {
101 /* FIXME: should always be true! */
110 #ifdef BACKSQL_ARBITRARY_KEY
111 Debug( LDAP_DEBUG_TRACE, " backsql_modrdn(): entry id=%s\n",
112 e_id.eid_id.bv_val, 0, 0 );
113 #else /* ! BACKSQL_ARBITRARY_KEY */
114 Debug( LDAP_DEBUG_TRACE, " backsql_modrdn(): entry id=%ld\n",
116 #endif /* ! BACKSQL_ARBITRARY_KEY */
118 if ( get_assert( op ) &&
119 ( test_filter( op, &r, get_assertion( op ) )
120 != LDAP_COMPARE_TRUE ) )
122 rs->sr_err = LDAP_ASSERTION_FAILED;
127 if ( backsql_has_children( op, dbh, &op->o_req_ndn ) == LDAP_COMPARE_TRUE ) {
128 Debug( LDAP_DEBUG_TRACE, " backsql_modrdn(): "
129 "entry \"%s\" has children\n",
130 op->o_req_dn.bv_val, 0, 0 );
131 rs->sr_err = LDAP_NOT_ALLOWED_ON_NONLEAF;
132 rs->sr_text = "subtree rename not supported";
138 * Check for entry access to target
140 if ( !access_allowed( op, &r, slap_schema.si_ad_entry,
141 NULL, ACL_WRITE, NULL ) ) {
142 Debug( LDAP_DEBUG_TRACE, " no access to entry\n", 0, 0, 0 );
143 rs->sr_err = LDAP_INSUFFICIENT_ACCESS;
147 dnParent( &op->o_req_dn, &pdn );
148 dnParent( &op->o_req_ndn, &pndn );
151 * namingContext "" is not supported
153 if ( BER_BVISEMPTY( &pdn ) ) {
154 Debug( LDAP_DEBUG_TRACE, " backsql_modrdn(): "
155 "parent is \"\" - aborting\n", 0, 0, 0 );
156 rs->sr_err = LDAP_UNWILLING_TO_PERFORM;
157 rs->sr_text = "not allowed within namingContext";
163 * Check for children access to parent
166 e_id = bsi.bsi_base_id;
167 rs->sr_err = backsql_init_search( &bsi, &pndn,
169 (time_t)(-1), NULL, dbh, op, rs,
170 slap_anlist_all_attributes,
171 BACKSQL_ISF_GET_ENTRY );
173 #ifdef BACKSQL_ARBITRARY_KEY
174 Debug( LDAP_DEBUG_TRACE, " backsql_modrdn(): "
175 "old parent entry id is %s\n",
176 bsi.bsi_base_id.eid_id.bv_val, 0, 0 );
177 #else /* ! BACKSQL_ARBITRARY_KEY */
178 Debug( LDAP_DEBUG_TRACE, " backsql_modrdn(): "
179 "old parent entry id is %ld\n",
180 bsi.bsi_base_id.eid_id, 0, 0 );
181 #endif /* ! BACKSQL_ARBITRARY_KEY */
183 if ( rs->sr_err != LDAP_SUCCESS ) {
184 Debug( LDAP_DEBUG_TRACE, "backsql_modrdn(): "
185 "could not retrieve renameDN ID - no such entry\n",
191 if ( !access_allowed( op, &p, slap_schema.si_ad_children, NULL,
192 newSuperior ? ACL_WDEL : ACL_WRITE, NULL ) )
194 Debug( LDAP_DEBUG_TRACE, " no access to parent\n", 0, 0, 0 );
195 rs->sr_err = LDAP_INSUFFICIENT_ACCESS;
200 (void)backsql_free_entryID( op, &bsi.bsi_base_id, 0 );
203 * namingContext "" is not supported
205 if ( BER_BVISEMPTY( newSuperior ) ) {
206 Debug( LDAP_DEBUG_TRACE, " backsql_modrdn(): "
207 "newSuperior is \"\" - aborting\n", 0, 0, 0 );
208 rs->sr_err = LDAP_UNWILLING_TO_PERFORM;
209 rs->sr_text = "not allowed within namingContext";
214 new_pdn = newSuperior;
215 new_npdn = op->oq_modrdn.rs_nnewSup;
218 * Check for children access to new parent
221 rs->sr_err = backsql_init_search( &bsi, new_npdn,
223 (time_t)(-1), NULL, dbh, op, rs,
224 slap_anlist_all_attributes,
225 ( BACKSQL_ISF_MATCHED | BACKSQL_ISF_GET_ENTRY ) );
226 if ( rs->sr_err != LDAP_SUCCESS ) {
227 Debug( LDAP_DEBUG_TRACE, "backsql_modrdn(): "
228 "could not retrieve renameDN ID - no such entry\n",
234 n_id = bsi.bsi_base_id;
236 #ifdef BACKSQL_ARBITRARY_KEY
237 Debug( LDAP_DEBUG_TRACE, " backsql_modrdn(): "
238 "new parent entry id=%s\n",
239 n_id.eid_id.bv_val, 0, 0 );
240 #else /* ! BACKSQL_ARBITRARY_KEY */
241 Debug( LDAP_DEBUG_TRACE, " backsql_modrdn(): "
242 "new parent entry id=%ld\n",
244 #endif /* ! BACKSQL_ARBITRARY_KEY */
246 if ( !access_allowed( op, &n, slap_schema.si_ad_children,
247 NULL, ACL_WADD, NULL ) ) {
248 Debug( LDAP_DEBUG_TRACE, " backsql_modrdn(): "
249 "no access to new parent \"%s\"\n",
250 new_pdn->bv_val, 0, 0 );
251 rs->sr_err = LDAP_INSUFFICIENT_ACCESS;
257 n_id = bsi.bsi_base_id;
262 if ( newSuperior && dn_match( &pndn, new_npdn ) ) {
263 Debug( LDAP_DEBUG_TRACE, " backsql_modrdn(): "
264 "newSuperior is equal to old parent - ignored\n",
269 if ( newSuperior && dn_match( &op->o_req_ndn, new_npdn ) ) {
270 Debug( LDAP_DEBUG_TRACE, " backsql_modrdn(): "
271 "newSuperior is equal to entry being moved "
272 "- aborting\n", 0, 0, 0 );
273 rs->sr_err = LDAP_OTHER;
274 rs->sr_text = "newSuperior is equal to old DN";
279 build_new_dn( &new_dn, new_pdn, &op->oq_modrdn.rs_newrdn,
281 build_new_dn( &new_ndn, new_npdn, &op->oq_modrdn.rs_nnewrdn,
284 Debug( LDAP_DEBUG_TRACE, " backsql_modrdn(): new entry dn is \"%s\"\n",
285 new_dn.bv_val, 0, 0 );
288 if ( backsql_api_dn2odbc( op, rs, &realnew_dn ) ) {
289 Debug( LDAP_DEBUG_TRACE, " backsql_modrdn(\"%s\"): "
290 "backsql_api_dn2odbc(\"%s\") failed\n",
291 op->o_req_dn.bv_val, realnew_dn.bv_val, 0 );
292 SQLFreeStmt( sth, SQL_DROP );
294 rs->sr_text = "SQL-backend error";
295 rs->sr_err = LDAP_OTHER;
300 Debug( LDAP_DEBUG_TRACE, " backsql_modrdn(): "
301 "executing renentry_stmt\n", 0, 0, 0 );
303 rc = backsql_Prepare( dbh, &sth, bi->sql_renentry_stmt, 0 );
304 if ( rc != SQL_SUCCESS ) {
305 Debug( LDAP_DEBUG_TRACE,
306 " backsql_modrdn(): "
307 "error preparing renentry_stmt\n", 0, 0, 0 );
308 backsql_PrintErrors( bi->sql_db_env, dbh,
311 rs->sr_text = "SQL-backend error";
312 rs->sr_err = LDAP_OTHER;
317 rc = backsql_BindParamBerVal( sth, 1, SQL_PARAM_INPUT, &realnew_dn );
318 if ( rc != SQL_SUCCESS ) {
319 Debug( LDAP_DEBUG_TRACE,
320 " backsql_add_attr(): "
321 "error binding DN parameter for objectClass %s\n",
322 oc->bom_oc->soc_cname.bv_val, 0, 0 );
323 backsql_PrintErrors( bi->sql_db_env, dbh,
325 SQLFreeStmt( sth, SQL_DROP );
327 rs->sr_text = "SQL-backend error";
328 rs->sr_err = LDAP_OTHER;
333 rc = backsql_BindParamID( sth, 2, SQL_PARAM_INPUT, &n_id.eid_id );
334 if ( rc != SQL_SUCCESS ) {
335 Debug( LDAP_DEBUG_TRACE,
336 " backsql_add_attr(): "
337 "error binding parent ID parameter for objectClass %s\n",
338 oc->bom_oc->soc_cname.bv_val, 0, 0 );
339 backsql_PrintErrors( bi->sql_db_env, dbh,
341 SQLFreeStmt( sth, SQL_DROP );
343 rs->sr_text = "SQL-backend error";
344 rs->sr_err = LDAP_OTHER;
349 rc = backsql_BindParamID( sth, 3, SQL_PARAM_INPUT, &e_id.eid_keyval );
350 if ( rc != SQL_SUCCESS ) {
351 Debug( LDAP_DEBUG_TRACE,
352 " backsql_add_attr(): "
353 "error binding entry ID parameter for objectClass %s\n",
354 oc->bom_oc->soc_cname.bv_val, 0, 0 );
355 backsql_PrintErrors( bi->sql_db_env, dbh,
357 SQLFreeStmt( sth, SQL_DROP );
359 rs->sr_text = "SQL-backend error";
360 rs->sr_err = LDAP_OTHER;
365 rc = backsql_BindParamID( sth, 4, SQL_PARAM_INPUT, &e_id.eid_id );
366 if ( rc != SQL_SUCCESS ) {
367 Debug( LDAP_DEBUG_TRACE,
368 " backsql_add_attr(): "
369 "error binding ID parameter for objectClass %s\n",
370 oc->bom_oc->soc_cname.bv_val, 0, 0 );
371 backsql_PrintErrors( bi->sql_db_env, dbh,
373 SQLFreeStmt( sth, SQL_DROP );
375 rs->sr_text = "SQL-backend error";
376 rs->sr_err = LDAP_OTHER;
381 rc = SQLExecute( sth );
382 if ( rc != SQL_SUCCESS ) {
383 Debug( LDAP_DEBUG_TRACE, " backsql_modrdn(): "
384 "could not rename ldap_entries record\n", 0, 0, 0 );
385 backsql_PrintErrors( bi->sql_db_env, dbh, sth, rc );
386 SQLFreeStmt( sth, SQL_DROP );
387 rs->sr_err = LDAP_OTHER;
388 rs->sr_text = "SQL-backend error";
392 SQLFreeStmt( sth, SQL_DROP );
394 assert( op->orr_modlist != NULL );
396 slap_mods_opattrs( op, &op->orr_modlist, 1 );
398 oc = backsql_id2oc( bi, e_id.eid_oc_id );
399 rs->sr_err = backsql_modify_internal( op, rs, dbh, oc, &e_id, op->orr_modlist );
400 slap_graduate_commit_csn( op );
401 if ( rs->sr_err != LDAP_SUCCESS ) {
406 if ( BACKSQL_CHECK_SCHEMA( bi ) ) {
407 char textbuf[ SLAP_TEXT_BUFLEN ] = { '\0' };
409 backsql_entry_clean( op, &r );
410 (void)backsql_free_entryID( op, &e_id, 0 );
413 rs->sr_err = backsql_init_search( &bsi, &new_ndn,
415 (time_t)(-1), NULL, dbh, op, rs,
416 slap_anlist_all_attributes,
417 ( BACKSQL_ISF_MATCHED | BACKSQL_ISF_GET_ENTRY ) );
418 switch ( rs->sr_err ) {
423 if ( manageDSAit && !BER_BVISNULL( &bsi.bsi_e->e_nname ) &&
424 dn_match( &new_ndn, &bsi.bsi_e->e_nname ) )
426 rs->sr_err = LDAP_SUCCESS;
428 rs->sr_matched = NULL;
430 ber_bvarray_free( rs->sr_ref );
439 Debug( LDAP_DEBUG_TRACE, "backsql_modrdn(): "
440 "could not retrieve modrdnDN ID - no such entry\n",
442 if ( !BER_BVISNULL( &r.e_nname ) ) {
443 /* FIXME: should always be true! */
452 e_id = bsi.bsi_base_id;
454 rs->sr_err = entry_schema_check( op, &r, NULL, 0, 0,
455 &rs->sr_text, textbuf, sizeof( textbuf ) );
456 if ( rs->sr_err != LDAP_SUCCESS ) {
457 Debug( LDAP_DEBUG_TRACE, " backsql_modrdn(\"%s\"): "
458 "entry failed schema check -- aborting\n",
459 r.e_name.bv_val, 0, 0 );
467 if ( !access_allowed( op, e, slap_schema.si_ad_entry, NULL,
468 ACL_DISCLOSE, NULL ) )
470 rs->sr_err = LDAP_NO_SUCH_OBJECT;
472 rs->sr_matched = NULL;
474 ber_bvarray_free( rs->sr_ref );
481 * Commit only if all operations succeed
483 if ( sth != SQL_NULL_HSTMT ) {
484 SQLUSMALLINT CompletionType = SQL_ROLLBACK;
486 if ( rs->sr_err == LDAP_SUCCESS && !op->o_noop ) {
487 CompletionType = SQL_COMMIT;
490 SQLTransact( SQL_NULL_HENV, dbh, CompletionType );
493 if ( op->o_noop && rs->sr_err == LDAP_SUCCESS ) {
494 rs->sr_err = LDAP_X_NO_OPERATION;
497 send_ldap_result( op, rs );
498 slap_graduate_commit_csn( op );
500 if ( !BER_BVISNULL( &realnew_dn ) && realnew_dn.bv_val != new_dn.bv_val ) {
501 ch_free( realnew_dn.bv_val );
504 if ( !BER_BVISNULL( &new_dn ) ) {
505 slap_sl_free( new_dn.bv_val, op->o_tmpmemctx );
508 if ( !BER_BVISNULL( &new_ndn ) ) {
509 slap_sl_free( new_ndn.bv_val, op->o_tmpmemctx );
512 if ( !BER_BVISNULL( &e_id.eid_ndn ) ) {
513 (void)backsql_free_entryID( op, &e_id, 0 );
516 if ( !BER_BVISNULL( &n_id.eid_ndn ) ) {
517 (void)backsql_free_entryID( op, &n_id, 0 );
520 if ( !BER_BVISNULL( &r.e_nname ) ) {
521 backsql_entry_clean( op, &r );
524 if ( !BER_BVISNULL( &p.e_nname ) ) {
525 backsql_entry_clean( op, &p );
528 if ( !BER_BVISNULL( &n.e_nname ) ) {
529 backsql_entry_clean( op, &n );
533 ber_bvarray_free( rs->sr_ref );
537 Debug( LDAP_DEBUG_TRACE, "<==backsql_modrdn()\n", 0, 0, 0 );