1 /* backglue.c - backend glue routines */
4 * Copyright 2001-2002 The OpenLDAP Foundation, All Rights Reserved.
5 * COPYING RESTRICTIONS APPLY, see COPYRIGHT file
9 * Functions to glue a bunch of other backends into a single tree.
10 * All of the glued backends must share a common suffix. E.g., you
11 * can glue o=foo and ou=bar,o=foo but you can't glue o=foo and o=bar.
13 * This uses the backend structures and routines extensively, but is
14 * not an actual backend of its own. To use it you must add a "subordinate"
15 * keyword to the configuration of other backends. Subordinates will
16 * automatically be connected to their parent backend.
18 * The purpose of these functions is to allow you to split a single database
19 * into pieces (for load balancing purposes, whatever) but still be able
20 * to treat it as a single database after it's been split. As such, each
21 * of the glued backends should have identical rootdn and rootpw.
23 * If you need more elaborate configuration, you probably should be using
32 #include <ac/socket.h>
37 typedef struct gluenode {
42 typedef struct glueinfo {
49 static BackendDB *glueBack;
51 /* Just like select_backend, but only for our backends */
58 glueinfo *gi = (glueinfo *) be->be_private;
62 bv.bv_len = strlen(dn);
63 bv.bv_val = (char *) dn;
65 for (i = 0; i<gi->nodes; i++) {
66 if (dnIsSuffix(&bv, &gi->n[i].be->be_nsuffix[0])) {
73 /* This function will only be called in tool mode */
80 static int glueOpened = 0;
82 if (glueOpened) return 0;
86 /* If we were invoked in tool mode, open all the underlying backends */
87 if (slapMode & SLAP_TOOL_MODE) {
88 rc = backend_startup (NULL);
89 } /* other case is impossible */
93 /* This function will only be called in tool mode */
99 static int glueClosed = 0;
102 if (glueClosed) return 0;
106 if (slapMode & SLAP_TOOL_MODE) {
107 rc = backend_shutdown (NULL);
117 glueinfo *gi = (glueinfo *)be->be_private;
118 static int glueOpened = 0;
121 if (glueOpened) return 0;
125 gi->be->be_acl = be->be_acl;
127 if (gi->be->bd_info->bi_db_open)
128 rc = gi->be->bd_info->bi_db_open(gi->be);
138 glueinfo *gi = (glueinfo *)be->be_private;
139 static int glueClosed = 0;
141 if (glueClosed) return 0;
145 /* Close the master */
146 if (gi->be->bd_info->bi_db_close)
147 gi->be->bd_info->bi_db_close( gi->be );
153 glue_back_db_destroy (
157 glueinfo *gi = (glueinfo *)be->be_private;
159 if (gi->be->bd_info->bi_db_destroy)
160 gi->be->bd_info->bi_db_destroy( gi->be );
166 typedef struct glue_state {
173 slap_callback *prevcb;
187 struct berval *resdata,
188 struct berval *sasldata,
192 glue_state *gs = op->o_callback->sc_private;
194 if (err == LDAP_SUCCESS || gs->err != LDAP_SUCCESS)
196 if (gs->err == LDAP_SUCCESS && gs->matched) {
200 if (gs->err != LDAP_SUCCESS && matched) {
202 len = strlen (matched);
203 if (len > gs->matchlen) {
206 gs->matched = ch_strdup (matched);
214 for (i=0; ref[i].bv_val; i++);
218 new = ch_malloc ((i+1)*sizeof(struct berval));
220 new = ch_realloc(gs->refs,
221 (j+i+1)*sizeof(struct berval));
223 for (k=0; k<i; j++,k++) {
224 ber_dupbv( &new[j], &ref[k] );
226 new[j].bv_val = NULL;
244 glue_state *gs = op->o_callback->sc_private;
246 gs->nentries += nentries;
247 glue_back_response (c, op, 0, 0, err, matched, text, refs,
248 NULL, NULL, NULL, ctrls);
252 glue_back_sendentry (
262 slap_callback *tmp = op->o_callback;
263 glue_state *gs = tmp->sc_private;
266 op->o_callback = gs->prevcb;
267 if (op->o_callback && op->o_callback->sc_sendentry) {
268 rc = op->o_callback->sc_sendentry(be, c, op, e, an, ao, ctrls);
270 rc = send_search_entry(be, c, op, e, an, ao, ctrls);
272 op->o_callback = tmp;
288 struct berval *filterstr,
289 AttributeName *attrs,
293 glueinfo *gi = (glueinfo *)b0->be_private;
295 int i, rc = 0, t2limit = 0, s2limit = 0;
301 cb.sc_response = glue_back_response;
302 cb.sc_sresult = glue_back_sresult;
303 cb.sc_sendentry = glue_back_sendentry;
306 gs.prevcb = op->o_callback;
309 stoptime = slap_get_time () + tlimit;
313 case LDAP_SCOPE_BASE:
314 be = glue_back_select (b0, ndn->bv_val);
316 if (be && be->be_search) {
317 rc = be->be_search (be, conn, op, dn, ndn, scope,
318 deref, slimit, tlimit, filter, filterstr,
321 rc = LDAP_UNWILLING_TO_PERFORM;
322 send_ldap_result (conn, op, rc, NULL,
323 "No search target found", NULL, NULL);
327 case LDAP_SCOPE_ONELEVEL:
328 case LDAP_SCOPE_SUBTREE:
329 op->o_callback = &cb;
330 rc = gs.err = LDAP_UNWILLING_TO_PERFORM;
333 * Execute in reverse order, most general first
335 for (i = gi->nodes-1; i >= 0; i--) {
336 if (!gi->n[i].be || !gi->n[i].be->be_search)
339 t2limit = stoptime - slap_get_time ();
341 rc = gs.err = LDAP_TIMELIMIT_EXCEEDED;
346 s2limit = slimit - gs.nentries;
348 rc = gs.err = LDAP_SIZELIMIT_EXCEEDED;
360 if (scope == LDAP_SCOPE_ONELEVEL &&
361 dn_match(&gi->n[i].pdn, ndn)) {
362 rc = be->be_search (be, conn, op,
363 &be->be_suffix[0], &be->be_nsuffix[0],
364 LDAP_SCOPE_BASE, deref,
365 s2limit, t2limit, filter, filterstr,
368 } else if (scope == LDAP_SCOPE_SUBTREE &&
369 dnIsSuffix(&be->be_nsuffix[0], ndn)) {
370 rc = be->be_search (be, conn, op,
371 &be->be_suffix[0], &be->be_nsuffix[0],
373 s2limit, t2limit, filter, filterstr,
376 } else if (dnIsSuffix(&bv, &be->be_nsuffix[0])) {
377 rc = be->be_search (be, conn, op, dn, ndn,
379 s2limit, t2limit, filter, filterstr,
385 op->o_callback = gs.prevcb;
387 send_search_result (conn, op, gs.err, gs.matched, NULL,
388 gs.refs, NULL, gs.nentries);
394 ber_bvarray_free(gs.refs);
413 be = glue_back_select (b0, ndn->bv_val);
415 if (be && be->be_bind) {
416 rc = be->be_bind (be, conn, op, dn, ndn, method, cred, edn);
418 if( rc == LDAP_SUCCESS ) {
419 ldap_pvt_thread_mutex_lock( &conn->c_mutex );
420 if( conn->c_authz_backend == NULL ) {
421 conn->c_authz_backend = be;
423 ldap_pvt_thread_mutex_unlock( &conn->c_mutex );
426 rc = LDAP_UNWILLING_TO_PERFORM;
427 send_ldap_result (conn, op, rc, NULL, "No bind target found",
440 AttributeAssertion *ava
446 be = glue_back_select (b0, ndn->bv_val);
448 if (be && be->be_compare) {
449 rc = be->be_compare (be, conn, op, dn, ndn, ava);
451 rc = LDAP_UNWILLING_TO_PERFORM;
452 send_ldap_result (conn, op, rc, NULL, "No compare target found",
471 be = glue_back_select (b0, ndn->bv_val);
473 if (be && be->be_modify) {
474 rc = be->be_modify (be, conn, op, dn, ndn, mod);
476 rc = LDAP_UNWILLING_TO_PERFORM;
477 send_ldap_result (conn, op, rc, NULL,
478 "No modify target found", NULL, NULL);
490 struct berval *newrdn,
491 struct berval *nnewrdn,
493 struct berval *newsup,
494 struct berval *nnewsup
500 be = glue_back_select (b0, ndn->bv_val);
502 if (be && be->be_modrdn) {
503 rc = be->be_modrdn (be, conn, op, dn, ndn,
504 newrdn, nnewrdn, del, newsup, nnewsup );
506 rc = LDAP_UNWILLING_TO_PERFORM;
507 send_ldap_result (conn, op, rc, NULL,
508 "No modrdn target found", NULL, NULL);
524 be = glue_back_select (b0, e->e_ndn);
526 if (be && be->be_add) {
527 rc = be->be_add (be, conn, op, e);
529 rc = LDAP_UNWILLING_TO_PERFORM;
530 send_ldap_result (conn, op, rc, NULL, "No add target found",
548 be = glue_back_select (b0, ndn->bv_val);
550 if (be && be->be_delete) {
551 rc = be->be_delete (be, conn, op, dn, ndn);
553 rc = LDAP_UNWILLING_TO_PERFORM;
554 send_ldap_result (conn, op, rc, NULL, "No delete target found",
561 glue_back_release_rw (
572 be = glue_back_select (b0, e->e_ndn);
574 if (be && be->be_release) {
575 rc = be->be_release (be, conn, op, e, rw);
592 AttributeDescription * ad
598 be = glue_back_select (b0, ndn->bv_val);
600 if (be && be->be_group) {
601 rc = be->be_group (be, conn, op, target, ndn, ondn, oc, ad);
603 rc = LDAP_UNWILLING_TO_PERFORM;
609 glue_back_attribute (
615 AttributeDescription *ad,
622 be = glue_back_select (b0, ndn->bv_val);
624 if (be && be->be_attribute) {
625 rc = be->be_attribute (be, conn, op, target, ndn, ad, vals);
627 rc = LDAP_UNWILLING_TO_PERFORM;
633 glue_back_referrals (
645 be = glue_back_select (b0, ndn->bv_val);
647 if (be && be->be_chk_referrals) {
648 rc = be->be_chk_referrals (be, conn, op, dn, ndn, text);
656 glue_tool_entry_open (
661 /* We don't know which backend to talk to yet, so just
662 * remember the mode and move on...
672 glue_tool_entry_close (
679 if (!glueBack->be_entry_close)
681 rc = glueBack->be_entry_close (glueBack);
687 glue_tool_entry_first (
691 glueinfo *gi = (glueinfo *) b0->be_private;
694 /* If we're starting from scratch, start at the most general */
696 for (i = gi->nodes-1; i >= 0; i--) {
697 if (gi->n[i].be->be_entry_open &&
698 gi->n[i].be->be_entry_first) {
699 glueBack = gi->n[i].be;
705 if (!glueBack || glueBack->be_entry_open (glueBack, glueMode) != 0)
708 return glueBack->be_entry_first (glueBack);
712 glue_tool_entry_next (
716 glueinfo *gi = (glueinfo *) b0->be_private;
720 if (!glueBack || !glueBack->be_entry_next)
723 rc = glueBack->be_entry_next (glueBack);
725 /* If we ran out of entries in one database, move on to the next */
727 glueBack->be_entry_close (glueBack);
728 for (i=0; i<gi->nodes; i++) {
729 if (gi->n[i].be == glueBack)
736 glueBack = gi->n[i-1].be;
737 rc = glue_tool_entry_first (b0);
744 glue_tool_entry_get (
749 if (!glueBack || !glueBack->be_entry_get)
752 return glueBack->be_entry_get (glueBack, id);
756 glue_tool_entry_put (
765 be = glue_back_select (b0, e->e_ndn);
766 if (!be->be_entry_put)
770 rc = be->be_entry_open (be, glueMode);
773 } else if (be != glueBack) {
774 /* If this entry belongs in a different branch than the
775 * previous one, close the current database and open the
778 glueBack->be_entry_close (glueBack);
779 rc = be->be_entry_open (be, glueMode);
784 return be->be_entry_put (be, e, text);
788 glue_tool_entry_reindex (
793 if (!glueBack || !glueBack->be_entry_reindex)
796 return glueBack->be_entry_reindex (glueBack, id);
804 glueinfo *gi = (glueinfo *) b0->be_private;
807 /* just sync everyone */
808 for (i = 0; i<gi->nodes; i++)
809 if (gi->n[i].be->be_sync)
810 gi->n[i].be->be_sync (gi->n[i].be);
818 int cont = num_subordinates;
820 BackendInfo *bi = NULL;
823 /* While there are subordinate backends, search backwards through the
824 * backends and connect them to their superior.
826 for (i = nBackendDB - 1, b1=&backendDB[i]; cont && i>=0; b1--,i--) {
827 if (b1->be_flags & SLAP_BFLAG_GLUE_SUBORDINATE) {
828 /* The last database cannot be a subordinate of noone */
829 if (i == nBackendDB - 1) {
830 b1->be_flags ^= SLAP_BFLAG_GLUE_SUBORDINATE;
835 for (j = i-1, be=&backendDB[j]; j>=0; be--,j--) {
836 if (!(be->be_flags & SLAP_BFLAG_GLUE_SUBORDINATE)) {
839 /* We will only link it once */
840 if (be->be_flags & SLAP_BFLAG_GLUE_LINKED) {
843 if (!dnIsSuffix(&be->be_nsuffix[0], &b1->be_nsuffix[0])) {
847 be->be_flags |= SLAP_BFLAG_GLUE_LINKED;
849 /* We create a copy of the superior's be
850 * structure, pointing to all of its original
851 * information. Then we replace elements of
852 * the superior's info with our own. The copy
853 * is used whenever we have operations to pass
854 * down to the real database.
856 b1->be_flags |= SLAP_BFLAG_GLUE_INSTANCE;
857 gi = (glueinfo *)ch_malloc(sizeof(glueinfo));
858 gi->be = (BackendDB *)ch_malloc(
859 sizeof(BackendDB) + sizeof(BackendInfo));
860 bi = (BackendInfo *)(gi->be+1);
864 bi->bi_open = glue_back_open;
865 bi->bi_close = glue_back_close;
866 bi->bi_db_open = glue_back_db_open;
867 bi->bi_db_close = glue_back_db_close;
868 bi->bi_db_destroy = glue_back_db_destroy;
870 bi->bi_op_bind = glue_back_bind;
871 bi->bi_op_search = glue_back_search;
872 bi->bi_op_compare = glue_back_compare;
873 bi->bi_op_modify = glue_back_modify;
874 bi->bi_op_modrdn = glue_back_modrdn;
875 bi->bi_op_add = glue_back_add;
876 bi->bi_op_delete = glue_back_delete;
878 bi->bi_entry_release_rw = glue_back_release_rw;
879 bi->bi_acl_group = glue_back_group;
880 bi->bi_acl_attribute = glue_back_attribute;
881 bi->bi_chk_referrals = glue_back_referrals;
884 * hooks for slap tools
886 bi->bi_tool_entry_open = glue_tool_entry_open;
887 bi->bi_tool_entry_close = glue_tool_entry_close;
888 bi->bi_tool_entry_first = glue_tool_entry_first;
889 bi->bi_tool_entry_next = glue_tool_entry_next;
890 bi->bi_tool_entry_get = glue_tool_entry_get;
891 bi->bi_tool_entry_put = glue_tool_entry_put;
892 bi->bi_tool_entry_reindex = glue_tool_entry_reindex;
893 bi->bi_tool_sync = glue_tool_sync;
895 gi = (glueinfo *)ch_realloc(gi,
897 gi->nodes * sizeof(gluenode));
899 gi->n[gi->nodes].be = be;
900 dnParent( &be->be_nsuffix[0], &gi->n[gi->nodes].pdn );
904 /* One more node for the master */
905 gi = (glueinfo *)ch_realloc(gi,
906 sizeof(glueinfo) + gi->nodes * sizeof(gluenode));
907 gi->n[gi->nodes].be = gi->be;
908 dnParent( &b1->be_nsuffix[0], &gi->n[gi->nodes].pdn );
914 /* If there are any unresolved subordinates left, something is wrong */