2 /* This work is part of OpenLDAP Software <http://www.openldap.org/>.
4 * Copyright 1998-2017 The OpenLDAP Foundation.
7 * Redistribution and use in source and binary forms, with or without
8 * modification, are permitted only as authorized by the OpenLDAP
11 * A copy of this license is available in the file LICENSE in the
12 * top-level directory of the distribution or, alternatively, at
13 * <http://www.OpenLDAP.org/license.html>.
15 /* Portions Copyright 1999, Juan C. Gomez, All rights reserved.
16 * This software is not subject to any license of Silicon Graphics
17 * Inc. or Purdue University.
19 * Redistribution and use in source and binary forms are permitted
20 * without restriction or fee of any kind as long as this notice
23 /* Portions Copyright (c) 1995 Regents of the University of Michigan.
24 * All rights reserved.
26 * Redistribution and use in source and binary forms are permitted
27 * provided that this notice is preserved and that due credit is given
28 * to the University of Michigan at Ann Arbor. The name of the University
29 * may not be used to endorse or promote products derived from this
30 * software without specific prior written permission. This software
31 * is provided ``as is'' without express or implied warranty.
38 #include <ac/socket.h>
39 #include <ac/string.h>
49 struct berval dn = BER_BVNULL;
50 struct berval newrdn = BER_BVNULL;
51 struct berval newSuperior = BER_BVNULL;
54 struct berval pnewSuperior = BER_BVNULL;
56 struct berval nnewSuperior = BER_BVNULL;
60 Debug( LDAP_DEBUG_TRACE, "%s do_modrdn\n",
61 op->o_log_prefix, 0, 0 );
63 * Parse the modrdn request. It looks like this:
65 * ModifyRDNRequest := SEQUENCE {
66 * entry DistinguishedName,
67 * newrdn RelativeDistinguishedName
68 * deleteoldrdn BOOLEAN,
69 * newSuperior [0] LDAPDN OPTIONAL (v3 Only!)
73 if ( ber_scanf( op->o_ber, "{mmb", &dn, &newrdn, &deloldrdn )
76 Debug( LDAP_DEBUG_ANY, "%s do_modrdn: ber_scanf failed\n",
77 op->o_log_prefix, 0, 0 );
78 send_ldap_discon( op, rs, LDAP_PROTOCOL_ERROR, "decoding error" );
79 return SLAPD_DISCONNECT;
82 /* Check for newSuperior parameter, if present scan it */
84 if ( ber_peek_tag( op->o_ber, &length ) == LDAP_TAG_NEWSUPERIOR ) {
85 if ( op->o_protocol < LDAP_VERSION3 ) {
86 /* Connection record indicates v2 but field
87 * newSuperior is present: report error.
89 Debug( LDAP_DEBUG_ANY,
90 "%s do_modrdn: newSuperior requires LDAPv3\n",
91 op->o_log_prefix, 0, 0 );
93 send_ldap_discon( op, rs,
94 LDAP_PROTOCOL_ERROR, "newSuperior requires LDAPv3" );
95 rs->sr_err = SLAPD_DISCONNECT;
99 if ( ber_scanf( op->o_ber, "m", &newSuperior )
102 Debug( LDAP_DEBUG_ANY, "%s do_modrdn: ber_scanf(\"m\") failed\n",
103 op->o_log_prefix, 0, 0 );
105 send_ldap_discon( op, rs,
106 LDAP_PROTOCOL_ERROR, "decoding error" );
107 rs->sr_err = SLAPD_DISCONNECT;
110 op->orr_newSup = &pnewSuperior;
111 op->orr_nnewSup = &nnewSuperior;
114 Debug( LDAP_DEBUG_ARGS,
115 "do_modrdn: dn (%s) newrdn (%s) newsuperior (%s)\n",
116 dn.bv_val, newrdn.bv_val,
117 newSuperior.bv_len ? newSuperior.bv_val : "" );
119 if ( ber_scanf( op->o_ber, /*{*/ "}") == LBER_ERROR ) {
120 Debug( LDAP_DEBUG_ANY, "%s do_modrdn: ber_scanf failed\n",
121 op->o_log_prefix, 0, 0 );
122 send_ldap_discon( op, rs,
123 LDAP_PROTOCOL_ERROR, "decoding error" );
124 rs->sr_err = SLAPD_DISCONNECT;
128 if( get_ctrls( op, rs, 1 ) != LDAP_SUCCESS ) {
129 Debug( LDAP_DEBUG_ANY, "%s do_modrdn: get_ctrls failed\n",
130 op->o_log_prefix, 0, 0 );
131 /* get_ctrls has sent results. Now clean up. */
135 rs->sr_err = dnPrettyNormal( NULL, &dn, &op->o_req_dn, &op->o_req_ndn, op->o_tmpmemctx );
136 if( rs->sr_err != LDAP_SUCCESS ) {
137 Debug( LDAP_DEBUG_ANY, "%s do_modrdn: invalid dn (%s)\n",
138 op->o_log_prefix, dn.bv_val, 0 );
139 send_ldap_error( op, rs, LDAP_INVALID_DN_SYNTAX, "invalid DN" );
143 /* FIXME: should have/use rdnPretty / rdnNormalize routines */
145 rs->sr_err = dnPrettyNormal( NULL, &newrdn, &op->orr_newrdn, &op->orr_nnewrdn, op->o_tmpmemctx );
146 if( rs->sr_err != LDAP_SUCCESS ) {
147 Debug( LDAP_DEBUG_ANY, "%s do_modrdn: invalid newrdn (%s)\n",
148 op->o_log_prefix, newrdn.bv_val, 0 );
149 send_ldap_error( op, rs, LDAP_INVALID_DN_SYNTAX, "invalid new RDN" );
153 if( rdn_validate( &op->orr_newrdn ) != LDAP_SUCCESS ) {
154 Debug( LDAP_DEBUG_ANY, "%s do_modrdn: invalid rdn (%s)\n",
155 op->o_log_prefix, op->orr_newrdn.bv_val, 0 );
156 send_ldap_error( op, rs, LDAP_INVALID_DN_SYNTAX, "invalid new RDN" );
160 if( op->orr_newSup ) {
161 rs->sr_err = dnPrettyNormal( NULL, &newSuperior, &pnewSuperior,
162 &nnewSuperior, op->o_tmpmemctx );
163 if( rs->sr_err != LDAP_SUCCESS ) {
164 Debug( LDAP_DEBUG_ANY,
165 "%s do_modrdn: invalid newSuperior (%s)\n",
166 op->o_log_prefix, newSuperior.bv_val, 0 );
167 send_ldap_error( op, rs, LDAP_INVALID_DN_SYNTAX, "invalid newSuperior" );
172 Statslog( LDAP_DEBUG_STATS, "%s MODRDN dn=\"%s\"\n",
173 op->o_log_prefix, op->o_req_dn.bv_val, 0, 0, 0 );
175 op->orr_deleteoldrdn = deloldrdn;
176 op->orr_modlist = NULL;
178 /* prepare modlist of modifications from old/new RDN */
179 rs->sr_err = slap_modrdn2mods( op, rs );
180 if ( rs->sr_err != LDAP_SUCCESS ) {
181 send_ldap_result( op, rs );
185 op->o_bd = frontendDB;
186 rs->sr_err = frontendDB->be_modrdn( op, rs );
188 if ( rs->sr_err == SLAPD_ASYNCOP ) {
193 if( rs->sr_err == LDAP_X_TXN_SPECIFY_OKAY ) {
200 op->o_tmpfree( op->o_req_dn.bv_val, op->o_tmpmemctx );
201 op->o_tmpfree( op->o_req_ndn.bv_val, op->o_tmpmemctx );
203 op->o_tmpfree( op->orr_newrdn.bv_val, op->o_tmpmemctx );
204 op->o_tmpfree( op->orr_nnewrdn.bv_val, op->o_tmpmemctx );
206 if ( op->orr_modlist != NULL )
207 slap_mods_free( op->orr_modlist, 1 );
209 if ( !BER_BVISNULL( &pnewSuperior ) ) {
210 op->o_tmpfree( pnewSuperior.bv_val, op->o_tmpmemctx );
212 if ( !BER_BVISNULL( &nnewSuperior ) ) {
213 op->o_tmpfree( nnewSuperior.bv_val, op->o_tmpmemctx );
220 fe_op_modrdn( Operation *op, SlapReply *rs )
222 struct berval dest_ndn = BER_BVNULL, dest_pndn, pdn = BER_BVNULL;
223 BackendDB *op_be, *bd = op->o_bd;
226 if( op->o_req_ndn.bv_len == 0 ) {
227 Debug( LDAP_DEBUG_ANY, "%s do_modrdn: root dse!\n",
228 op->o_log_prefix, 0, 0 );
229 send_ldap_error( op, rs, LDAP_UNWILLING_TO_PERFORM,
230 "cannot rename the root DSE" );
233 } else if ( bvmatch( &op->o_req_ndn, &frontendDB->be_schemandn ) ) {
234 Debug( LDAP_DEBUG_ANY, "%s do_modrdn: subschema subentry: %s (%ld)\n",
235 op->o_log_prefix, frontendDB->be_schemandn.bv_val, (long)frontendDB->be_schemandn.bv_len );
237 send_ldap_error( op, rs, LDAP_UNWILLING_TO_PERFORM,
238 "cannot rename subschema subentry" );
242 if( op->orr_nnewSup ) {
243 dest_pndn = *op->orr_nnewSup;
245 dnParent( &op->o_req_ndn, &dest_pndn );
247 build_new_dn( &dest_ndn, &dest_pndn, &op->orr_nnewrdn, op->o_tmpmemctx );
249 diff = (ber_slen_t) dest_ndn.bv_len - (ber_slen_t) op->o_req_ndn.bv_len;
250 if ( diff > 0 ? dnIsSuffix( &dest_ndn, &op->o_req_ndn )
251 : diff < 0 && dnIsSuffix( &op->o_req_ndn, &dest_ndn ) )
253 send_ldap_error( op, rs, LDAP_UNWILLING_TO_PERFORM,
254 diff > 0 ? "cannot place an entry below itself"
255 : "cannot place an entry above itself" );
260 * We could be serving multiple database backends. Select the
261 * appropriate one, or send a referral to our "referral server"
262 * if we don't hold it.
264 op->o_bd = select_backend( &op->o_req_ndn, 1 );
265 if ( op->o_bd == NULL ) {
267 rs->sr_ref = referral_rewrite( default_referral,
268 NULL, &op->o_req_dn, LDAP_SCOPE_DEFAULT );
269 if (!rs->sr_ref) rs->sr_ref = default_referral;
271 if ( rs->sr_ref != NULL ) {
272 rs->sr_err = LDAP_REFERRAL;
273 send_ldap_result( op, rs );
275 if (rs->sr_ref != default_referral) ber_bvarray_free( rs->sr_ref );
277 send_ldap_error( op, rs, LDAP_UNWILLING_TO_PERFORM,
278 "no global superior knowledge" );
283 /* If we've got a glued backend, check the real backend */
285 if ( SLAP_GLUE_INSTANCE( op->o_bd )) {
286 op->o_bd = select_backend( &op->o_req_ndn, 0 );
289 /* check restrictions */
290 if( backend_check_restrictions( op, rs, NULL ) != LDAP_SUCCESS ) {
291 send_ldap_result( op, rs );
295 /* check for referrals */
296 if ( backend_check_referrals( op, rs ) != LDAP_SUCCESS ) {
300 /* check that destination DN is in the same backend as source DN */
301 if ( select_backend( &dest_ndn, 0 ) != op->o_bd ) {
302 send_ldap_error( op, rs, LDAP_AFFECTS_MULTIPLE_DSAS,
303 "cannot rename between DSAs" );
308 * do the modrdn if 1 && (2 || 3)
309 * 1) there is a modrdn function implemented in this backend;
310 * 2) this backend is master for what it holds;
311 * 3) it's a replica and the dn supplied is the update_ndn.
313 if ( op->o_bd->be_modrdn ) {
314 /* do the update here */
315 int repl_user = be_isupdate( op );
316 if ( !SLAP_SINGLE_SHADOW(op->o_bd) || repl_user )
319 op->o_bd->be_modrdn( op, rs );
321 if ( op->o_bd->be_delete ) {
322 struct berval org_req_dn = BER_BVNULL;
323 struct berval org_req_ndn = BER_BVNULL;
324 struct berval org_dn = BER_BVNULL;
325 struct berval org_ndn = BER_BVNULL;
328 org_req_dn = op->o_req_dn;
329 org_req_ndn = op->o_req_ndn;
332 org_managedsait = get_manageDSAit( op );
333 op->o_dn = op->o_bd->be_rootdn;
334 op->o_ndn = op->o_bd->be_rootndn;
335 op->o_managedsait = SLAP_CONTROL_NONCRITICAL;
337 while ( rs->sr_err == LDAP_SUCCESS &&
338 op->o_delete_glue_parent ) {
339 op->o_delete_glue_parent = 0;
340 if ( !be_issuffix( op->o_bd, &op->o_req_ndn )) {
341 slap_callback cb = { NULL };
342 cb.sc_response = slap_null_cb;
343 dnParent( &op->o_req_ndn, &pdn );
346 op->o_callback = &cb;
347 op->o_bd->be_delete( op, rs );
352 op->o_managedsait = org_managedsait;
355 op->o_req_dn = org_req_dn;
356 op->o_req_ndn = org_req_ndn;
357 op->o_delete_glue_parent = 0;
361 BerVarray defref = op->o_bd->be_update_refs
362 ? op->o_bd->be_update_refs : default_referral;
364 if ( defref != NULL ) {
365 rs->sr_ref = referral_rewrite( defref,
366 NULL, &op->o_req_dn, LDAP_SCOPE_DEFAULT );
367 if (!rs->sr_ref) rs->sr_ref = defref;
369 rs->sr_err = LDAP_REFERRAL;
370 send_ldap_result( op, rs );
372 if (rs->sr_ref != defref) ber_bvarray_free( rs->sr_ref );
374 send_ldap_error( op, rs, LDAP_UNWILLING_TO_PERFORM,
375 "shadow context; no update referral" );
379 send_ldap_error( op, rs, LDAP_UNWILLING_TO_PERFORM,
380 "operation not supported within namingContext" );
384 if ( dest_ndn.bv_val != NULL )
385 ber_memfree_x( dest_ndn.bv_val, op->o_tmpmemctx );
396 LDAPRDN old_rdn = NULL;
397 LDAPRDN new_rdn = NULL;
399 assert( !BER_BVISEMPTY( &op->oq_modrdn.rs_newrdn ) );
401 /* if requestDN is empty, silently reset deleteOldRDN */
402 if ( BER_BVISEMPTY( &op->o_req_dn ) ) op->orr_deleteoldrdn = 0;
404 if ( ldap_bv2rdn_x( &op->oq_modrdn.rs_newrdn, &new_rdn,
405 (char **)&rs->sr_text, LDAP_DN_FORMAT_LDAP, op->o_tmpmemctx ) ) {
406 Debug( LDAP_DEBUG_TRACE,
407 "%s slap_modrdn2mods: can't figure out "
408 "type(s)/value(s) of newrdn\n",
409 op->o_log_prefix, 0, 0 );
410 rs->sr_err = LDAP_INVALID_DN_SYNTAX;
411 rs->sr_text = "unknown type(s)/value(s) used in RDN";
415 if ( op->oq_modrdn.rs_deleteoldrdn ) {
416 if ( ldap_bv2rdn_x( &op->o_req_dn, &old_rdn,
417 (char **)&rs->sr_text, LDAP_DN_FORMAT_LDAP, op->o_tmpmemctx ) ) {
418 Debug( LDAP_DEBUG_TRACE,
419 "%s slap_modrdn2mods: can't figure out "
420 "type(s)/value(s) of oldrdn\n",
421 op->o_log_prefix, 0, 0 );
422 rs->sr_err = LDAP_OTHER;
423 rs->sr_text = "cannot parse RDN from old DN";
429 /* Add new attribute values to the entry */
430 for ( a_cnt = 0; new_rdn[a_cnt]; a_cnt++ ) {
431 AttributeDescription *desc = NULL;
432 Modifications *mod_tmp;
434 rs->sr_err = slap_bv2ad( &new_rdn[a_cnt]->la_attr, &desc, &rs->sr_text );
436 if ( rs->sr_err != LDAP_SUCCESS ) {
437 Debug( LDAP_DEBUG_TRACE,
438 "%s slap_modrdn2mods: %s: %s (new)\n",
441 new_rdn[ a_cnt ]->la_attr.bv_val );
445 if ( !desc->ad_type->sat_equality ) {
446 Debug( LDAP_DEBUG_TRACE,
447 "%s slap_modrdn2mods: %s: %s (new)\n",
450 new_rdn[ a_cnt ]->la_attr.bv_val );
451 rs->sr_text = "naming attribute has no equality matching rule";
452 rs->sr_err = LDAP_NAMING_VIOLATION;
456 /* Apply modification */
457 mod_tmp = ( Modifications * )ch_malloc( sizeof( Modifications ) );
458 mod_tmp->sml_desc = desc;
459 BER_BVZERO( &mod_tmp->sml_type );
460 mod_tmp->sml_numvals = 1;
461 mod_tmp->sml_values = ( BerVarray )ch_malloc( 2 * sizeof( struct berval ) );
462 ber_dupbv( &mod_tmp->sml_values[0], &new_rdn[a_cnt]->la_value );
463 mod_tmp->sml_values[1].bv_val = NULL;
464 if( desc->ad_type->sat_equality->smr_normalize) {
465 mod_tmp->sml_nvalues = ( BerVarray )ch_malloc( 2 * sizeof( struct berval ) );
466 rs->sr_err = desc->ad_type->sat_equality->smr_normalize(
467 SLAP_MR_EQUALITY|SLAP_MR_VALUE_OF_ASSERTION_SYNTAX,
468 desc->ad_type->sat_syntax,
469 desc->ad_type->sat_equality,
470 &mod_tmp->sml_values[0],
471 &mod_tmp->sml_nvalues[0], NULL );
472 if (rs->sr_err != LDAP_SUCCESS) {
473 ch_free(mod_tmp->sml_nvalues);
474 ch_free(mod_tmp->sml_values[0].bv_val);
475 ch_free(mod_tmp->sml_values);
479 mod_tmp->sml_nvalues[1].bv_val = NULL;
481 mod_tmp->sml_nvalues = NULL;
483 mod_tmp->sml_op = SLAP_MOD_SOFTADD;
484 mod_tmp->sml_flags = 0;
485 mod_tmp->sml_next = op->orr_modlist;
486 op->orr_modlist = mod_tmp;
489 /* Remove old rdn value if required */
490 if ( op->orr_deleteoldrdn ) {
491 for ( d_cnt = 0; old_rdn[d_cnt]; d_cnt++ ) {
492 AttributeDescription *desc = NULL;
493 Modifications *mod_tmp;
495 rs->sr_err = slap_bv2ad( &old_rdn[d_cnt]->la_attr, &desc, &rs->sr_text );
496 if ( rs->sr_err != LDAP_SUCCESS ) {
497 Debug( LDAP_DEBUG_TRACE,
498 "%s slap_modrdn2mods: %s: %s (old)\n",
501 old_rdn[d_cnt]->la_attr.bv_val );
505 /* Apply modification */
506 mod_tmp = ( Modifications * )ch_malloc( sizeof( Modifications ) );
507 mod_tmp->sml_desc = desc;
508 BER_BVZERO( &mod_tmp->sml_type );
509 mod_tmp->sml_numvals = 1;
510 mod_tmp->sml_values = ( BerVarray )ch_malloc( 2 * sizeof( struct berval ) );
511 ber_dupbv( &mod_tmp->sml_values[0], &old_rdn[d_cnt]->la_value );
512 mod_tmp->sml_values[1].bv_val = NULL;
513 if( desc->ad_type->sat_equality->smr_normalize) {
514 mod_tmp->sml_nvalues = ( BerVarray )ch_malloc( 2 * sizeof( struct berval ) );
515 (void) (*desc->ad_type->sat_equality->smr_normalize)(
516 SLAP_MR_EQUALITY|SLAP_MR_VALUE_OF_ASSERTION_SYNTAX,
517 desc->ad_type->sat_syntax,
518 desc->ad_type->sat_equality,
519 &mod_tmp->sml_values[0],
520 &mod_tmp->sml_nvalues[0], NULL );
521 mod_tmp->sml_nvalues[1].bv_val = NULL;
523 mod_tmp->sml_nvalues = NULL;
525 mod_tmp->sml_op = LDAP_MOD_DELETE;
526 mod_tmp->sml_flags = 0;
527 mod_tmp->sml_next = op->orr_modlist;
528 op->orr_modlist = mod_tmp;
534 /* LDAP v2 supporting correct attribute handling. */
535 if ( rs->sr_err != LDAP_SUCCESS && op->orr_modlist != NULL ) {
538 for ( ; op->orr_modlist != NULL; op->orr_modlist = tmp ) {
539 tmp = op->orr_modlist->sml_next;
540 ch_free( op->orr_modlist );
544 if ( new_rdn != NULL ) {
545 ldap_rdnfree_x( new_rdn, op->o_tmpmemctx );
547 if ( old_rdn != NULL ) {
548 ldap_rdnfree_x( old_rdn, op->o_tmpmemctx );