2 * Copyright 1998-2003 The OpenLDAP Foundation, All Rights Reserved.
3 * COPYING RESTRICTIONS APPLY, see COPYRIGHT file
6 * Copyright (c) 1995 Regents of the University of Michigan.
9 * Redistribution and use in source and binary forms are permitted
10 * provided that this notice is preserved and that due credit is given
11 * to the University of Michigan at Ann Arbor. The name of the University
12 * may not be used to endorse or promote products derived from this
13 * software without specific prior written permission. This software
14 * is provided ``as is'' without express or implied warranty.
22 modify_check_duplicates(
23 AttributeDescription *ad,
29 char *textbuf, size_t textlen )
31 int i, j, numvals = 0, nummods,
32 rc = LDAP_SUCCESS, matched;
34 /* needs major reworking */
36 BerVarray nvals = NULL, nmods = NULL;
39 * FIXME: better do the following
41 * - count the existing values
42 * - count the new values
44 * - if the existing values are less than the new ones {
45 * - normalize all the existing values
46 * - for each new value {
48 * - check with existing
49 * - cross-check with already normalized new vals
52 * - for each new value {
54 * - cross-check with already normalized new vals
56 * - for each existing value {
58 * - check with already normalized new values
62 * The first case is good when adding a lot of new values,
63 * and significantly at first import of values (e.g. adding
64 * a new group); the latter case seems to be quite important
65 * as well, because it is likely to be the most frequently
66 * used when administering the entry. The current
67 * implementation will always normalize all the existing
68 * values before checking. If there's no duplicate, the
69 * performances should not change; they will in case of error.
72 for ( nummods = 0; mods[ nummods ].bv_val != NULL; nummods++ )
73 /* count new values */ ;
76 for ( numvals = 0; vals[ numvals ].bv_val != NULL; numvals++ )
77 /* count existing values */ ;
79 if ( numvals < nummods ) {
80 nvals = SLAP_CALLOC( numvals + 1, sizeof( struct berval ) );
83 LDAP_LOG( OPERATION, ERR,
84 "modify_check_duplicates: SLAP_CALLOC failed", 0, 0, 0 );
86 Debug( LDAP_DEBUG_ANY,
87 "modify_check_duplicates: SLAP_CALLOC failed", 0, 0, 0 );
92 /* normalize the existing values first */
93 for ( j = 0; vals[ j ].bv_val != NULL; j++ ) {
94 rc = value_normalize( ad, SLAP_MR_EQUALITY,
95 &vals[ j ], &nvals[ j ], text );
97 /* existing attribute values must normalize */
98 assert( rc == LDAP_SUCCESS );
100 if ( rc != LDAP_SUCCESS ) {
101 nvals[ j ].bv_val = NULL;
105 nvals[ j ].bv_val = NULL;
110 * If the existing values are less than the new values,
111 * it is more convenient to normalize all the existing
112 * values and test each new value against them first,
113 * then to other already normalized values
115 nmods = SLAP_CALLOC( nummods + 1, sizeof( struct berval ) );
116 if ( nmods == NULL ) {
118 LDAP_LOG( OPERATION, ERR,
119 "modify_check_duplicates: SLAP_CALLOC failed", 0, 0, 0 );
121 Debug( LDAP_DEBUG_ANY,
122 "modify_check_duplicates: SLAP_CALLOC failed", 0, 0, 0 );
127 for ( i=0; mods[i].bv_val != NULL; i++ ) {
128 rc = value_normalize( ad, SLAP_MR_EQUALITY,
129 &mods[i], &nmods[i], text );
131 if ( rc != LDAP_SUCCESS ) {
132 nmods[i].bv_val = NULL;
136 if ( numvals > 0 && numvals < nummods ) {
137 for ( matched=0, j=0; nvals[j].bv_val; j++ ) {
140 rc = (*mr->smr_match)( &match,
141 SLAP_MR_ATTRIBUTE_SYNTAX_MATCH,
142 ad->ad_type->sat_syntax,
143 mr, &nmods[ i ], &nvals[ j ] );
145 if ( rc != LDAP_SUCCESS ) {
146 nmods[ i + 1 ].bv_val = NULL;
148 snprintf( textbuf, textlen,
149 "%s: matching rule failed",
150 ad->ad_cname.bv_val );
160 snprintf( textbuf, textlen,
161 "%s: value #%d provided more than once",
162 ad->ad_cname.bv_val, i );
163 rc = LDAP_TYPE_OR_VALUE_EXISTS;
164 nmods[ i + 1 ].bv_val = NULL;
169 if ( permissive && matched == j ) {
170 nmods[ i + 1 ].bv_val = NULL;
171 rc = LDAP_TYPE_OR_VALUE_EXISTS;
176 for ( matched = 0, j = 0; j < i; j++ ) {
179 rc = (*mr->smr_match)( &match,
180 SLAP_MR_ATTRIBUTE_SYNTAX_MATCH,
181 ad->ad_type->sat_syntax,
182 mr, &nmods[ i ], &nmods[ j ] );
183 if ( rc != LDAP_SUCCESS ) {
184 nmods[ i + 1 ].bv_val = NULL;
186 snprintf( textbuf, textlen,
187 "%s: matching rule failed",
188 ad->ad_cname.bv_val );
198 snprintf( textbuf, textlen,
199 "%s: value #%d provided more than once",
200 ad->ad_cname.bv_val, j );
201 rc = LDAP_TYPE_OR_VALUE_EXISTS;
202 nmods[ i + 1 ].bv_val = NULL;
207 if ( permissive && matched == j ) {
208 nmods[ i + 1 ].bv_val = NULL;
209 rc = LDAP_TYPE_OR_VALUE_EXISTS;
213 nmods[ i ].bv_val = NULL;
216 * if new values are more than existing values, it is more
217 * convenient to normalize and check all new values first,
218 * then check each new value against existing values, which
219 * can be normalized in place
222 if ( numvals >= nummods ) {
223 for ( j = 0; vals[ j ].bv_val; j++ ) {
224 struct berval asserted;
226 rc = value_normalize( ad, SLAP_MR_EQUALITY,
227 &vals[ j ], &asserted, text );
229 if ( rc != LDAP_SUCCESS ) {
233 for ( matched = 0, i = 0; nmods[ i ].bv_val; i++ ) {
236 rc = (*mr->smr_match)( &match,
237 SLAP_MR_ATTRIBUTE_SYNTAX_MATCH,
238 ad->ad_type->sat_syntax,
239 mr, &nmods[ i ], &asserted );
240 if ( rc != LDAP_SUCCESS ) {
242 snprintf( textbuf, textlen,
243 "%s: matching rule failed",
244 ad->ad_cname.bv_val );
254 snprintf( textbuf, textlen,
255 "%s: value #%d provided more than once",
256 ad->ad_cname.bv_val, j );
257 rc = LDAP_TYPE_OR_VALUE_EXISTS;
262 if ( permissive && matched == i ) {
263 rc = LDAP_TYPE_OR_VALUE_EXISTS;
271 ber_bvarray_free( nvals );
274 ber_bvarray_free( nmods );
287 char *textbuf, size_t textlen
293 MatchingRule *mr = mod->sm_desc->ad_type->sat_equality;
296 switch( mod->sm_op ) {
300 case LDAP_MOD_REPLACE:
308 a = attr_find( e->e_attrs, mod->sm_desc );
311 * With permissive set, as long as the attribute being added
312 * has the same value(s?) as the existing attribute, then the
313 * modify will succeed.
316 /* check if the values we're adding already exist */
317 if( mr == NULL || !mr->smr_match ) {
319 /* do not allow add of additional attribute
320 if no equality rule exists */
322 snprintf( textbuf, textlen,
323 "modify/%s: %s: no equality matching rule",
324 op, mod->sm_desc->ad_cname.bv_val );
325 return LDAP_INAPPROPRIATE_MATCHING;
328 for ( i = 0; mod->sm_bvalues[i].bv_val != NULL; i++ ) {
329 /* test asserted values against existing values */
331 for( matched = 0, j = 0; a->a_vals[j].bv_val != NULL; j++ ) {
332 if ( bvmatch( &mod->sm_bvalues[i], &a->a_vals[j] ) ) {
337 /* value exists already */
339 snprintf( textbuf, textlen,
340 "modify/%s: %s: value #%i already exists",
341 op, mod->sm_desc->ad_cname.bv_val, j );
342 return LDAP_TYPE_OR_VALUE_EXISTS;
345 if ( permissive && matched == j ) {
346 /* values already exist; do nothing */
351 /* test asserted values against themselves */
352 for( j = 0; j < i; j++ ) {
353 if ( bvmatch( &mod->sm_bvalues[i],
354 &mod->sm_bvalues[j] ) ) {
356 /* value exists already */
358 snprintf( textbuf, textlen,
359 "modify/%s: %s: value #%i already exists",
360 op, mod->sm_desc->ad_cname.bv_val, j );
361 return LDAP_TYPE_OR_VALUE_EXISTS;
368 * The original code performs ( n ) normalizations
369 * and ( n * ( n - 1 ) / 2 ) matches, which hide
370 * the same number of normalizations. The new code
371 * performs the same number of normalizations ( n )
372 * and ( n * ( n - 1 ) / 2 ) mem compares, far less
373 * expensive than an entire match, if a match is
374 * equivalent to a normalization and a mem compare ...
376 * This is far more memory expensive than the previous,
377 * but it can heavily improve performances when big
378 * chunks of data are added (typical example is a group
379 * with thousands of DN-syntax members; on my system:
380 * for members of 5-RDN DNs,
382 members orig bvmatch (dirty) new
383 1000 0m38.456s 0m0.553s 0m0.608s
384 2000 2m33.341s 0m0.851s 0m1.003s
386 * Moreover, 100 groups with 10000 members each were
387 * added in 37m27.933s (an analogous LDIF file was
388 * loaded into Active Directory in 38m28.682s, BTW).
390 * Maybe we could switch to the new algorithm when
391 * the number of values overcomes a given threshold?
396 if ( mod->sm_bvalues[1].bv_val == 0 ) {
398 struct berval asserted;
402 rc = value_normalize( mod->sm_desc, SLAP_MR_EQUALITY,
403 &mod->sm_bvalues[ 0 ], &asserted, text );
404 if ( rc != LDAP_SUCCESS ) {
409 for ( matched = 0, i = 0; a->a_vals[ i ].bv_val; i++ ) {
413 if( mod->sm_nvalues ) {
414 rc = value_match( &match, mod->sm_desc, mr,
416 | SLAP_MR_VALUE_OF_ASSERTION_SYNTAX
417 | SLAP_MR_ASSERTED_VALUE_NORMALIZED_MATCH
418 | SLAP_MR_ATTRIBUTE_VALUE_NORMALIZED_MATCH,
424 rc = value_match( &match, mod->sm_desc, mr,
426 | SLAP_MR_VALUE_OF_ATTRIBUTE_SYNTAX,
433 rc = value_match( &match, mod->sm_desc, mr,
434 SLAP_MR_ATTRIBUTE_SYNTAX_MATCH,
440 if( rc == LDAP_SUCCESS && match == 0 ) {
445 free( asserted.bv_val );
447 snprintf( textbuf, textlen,
448 "modify/%s: %s: value #0 already exists",
449 op, mod->sm_desc->ad_cname.bv_val, 0 );
450 return LDAP_TYPE_OR_VALUE_EXISTS;
453 if ( permissive && matched == i ) {
454 /* values already exist; do nothing */
460 rc = modify_check_duplicates( mod->sm_desc, mr,
461 a ? a->a_vals : NULL, mod->sm_bvalues,
463 text, textbuf, textlen );
465 if ( permissive && rc == LDAP_TYPE_OR_VALUE_EXISTS ) {
469 if ( rc != LDAP_SUCCESS ) {
477 if( attr_merge( e, mod->sm_desc, mod->sm_values, mod->sm_nvalues ) != 0 )
479 if( attr_merge( e, mod->sm_desc, mod->sm_bvalues ) != 0 )
482 /* this should return result of attr_merge */
484 snprintf( textbuf, textlen,
485 "modify/%s: %s: merge error",
486 op, mod->sm_desc->ad_cname.bv_val );
494 modify_delete_values(
499 char *textbuf, size_t textlen
502 int i, j, k, rc = LDAP_SUCCESS;
504 MatchingRule *mr = mod->sm_desc->ad_type->sat_equality;
505 BerVarray nvals = NULL;
509 * If permissive is set, then the non-existence of an
510 * attribute is not treated as an error.
513 /* delete the entire attribute */
514 if ( mod->sm_bvalues == NULL ) {
515 rc = attr_delete( &e->e_attrs, mod->sm_desc );
519 } else if( rc != LDAP_SUCCESS ) {
521 snprintf( textbuf, textlen,
522 "modify/delete: %s: no such attribute",
523 mod->sm_desc->ad_cname.bv_val );
524 rc = LDAP_NO_SUCH_ATTRIBUTE;
529 if( mr == NULL || !mr->smr_match ) {
530 /* disallow specific attributes from being deleted if
533 snprintf( textbuf, textlen,
534 "modify/delete: %s: no equality matching rule",
535 mod->sm_desc->ad_cname.bv_val );
536 return LDAP_INAPPROPRIATE_MATCHING;
539 /* delete specific values - find the attribute first */
540 if ( (a = attr_find( e->e_attrs, mod->sm_desc )) == NULL ) {
545 snprintf( textbuf, textlen,
546 "modify/delete: %s: no such attribute",
547 mod->sm_desc->ad_cname.bv_val );
548 return LDAP_NO_SUCH_ATTRIBUTE;
554 /* find each value to delete */
555 for ( j = 0; a->a_vals[ j ].bv_val != NULL; j++ )
556 /* count existing values */ ;
558 nvals = (BerVarray)SLAP_CALLOC( j + 1, sizeof ( struct berval ) );
559 if( nvals == NULL ) {
561 LDAP_LOG( OPERATION, ERR,
562 "modify_delete_values: SLAP_CALLOC failed", 0, 0, 0 );
564 Debug( LDAP_DEBUG_ANY,
565 "modify_delete_values: SLAP_CALLOC failed", 0, 0, 0 );
570 /* normalize existing values */
571 for ( j = 0; a->a_vals[ j ].bv_val != NULL; j++ ) {
572 rc = value_normalize( a->a_desc, SLAP_MR_EQUALITY,
573 &a->a_vals[ j ], &nvals[ j ], text );
575 if ( rc != LDAP_SUCCESS ) {
576 nvals[ j ].bv_val = NULL;
582 for ( i = 0; mod->sm_bvalues[ i ].bv_val != NULL; i++ ) {
585 struct berval asserted;
587 /* normalize the value to be deleted */
588 rc = value_normalize( mod->sm_desc, SLAP_MR_EQUALITY,
589 &mod->sm_bvalues[ i ], &asserted, text );
591 if( rc != LDAP_SUCCESS ) {
597 for ( j = 0; nvals[ j ].bv_val != NULL; j++ ) {
600 if ( nvals[ j ].bv_val == &dummy ) {
605 if( mod->sm_nvalues ) {
606 rc = (*mr->smr_match)( &match,
607 SLAP_MR_VALUE_OF_ASSERTION_SYNTAX
608 | SLAP_MR_ASSERTED_VALUE_NORMALIZED_MATCH
609 | SLAP_MR_ATTRIBUTE_VALUE_NORMALIZED_MATCH,
610 a->a_desc->ad_type->sat_syntax,
612 &mod->sm_nvalues[i] );
614 rc = (*mr->smr_match)( &match,
615 SLAP_MR_VALUE_OF_ATTRIBUTE_SYNTAX,
616 a->a_desc->ad_type->sat_syntax,
618 &mod->sm_values[i] );
621 rc = (*mr->smr_match)( &match,
622 SLAP_MR_ATTRIBUTE_SYNTAX_MATCH,
623 a->a_desc->ad_type->sat_syntax,
628 if ( rc != LDAP_SUCCESS ) {
630 free( asserted.bv_val );
633 snprintf( textbuf, textlen,
634 "%s: matching rule failed",
635 mod->sm_desc->ad_cname.bv_val );
645 /* delete value and mark it as dummy */
646 free( nvals[ j ].bv_val );
647 nvals[ j ].bv_val = &dummy;
653 free( asserted.bv_val );
658 snprintf( textbuf, textlen,
659 "modify/delete: %s: no such value",
660 mod->sm_desc->ad_cname.bv_val );
661 rc = LDAP_NO_SUCH_ATTRIBUTE;
666 /* compact array skipping dummies */
667 for ( k = 0, j = 0; nvals[ k ].bv_val != NULL; j++, k++ ) {
669 /* delete and skip dummies */ ;
670 for ( ; nvals[ k ].bv_val == &dummy; k++ ) {
671 free( a->a_vals[ k ].bv_val );
675 a->a_vals[ j ] = a->a_vals[ k ];
678 free( a->a_nvals[j].bv_val );
679 a->a_nvals[ j ] = a->a_nvals[ k ];
684 if ( a->a_vals[ k ].bv_val == NULL ) {
688 a->a_vals[ j ].bv_val = NULL;
690 if (a->a_nvals) a->a_nvals[ j ].bv_val = NULL;
693 assert( i == k - j );
695 /* if no values remain, delete the entire attribute */
696 if ( a->a_vals[0].bv_val == NULL ) {
697 if ( attr_delete( &e->e_attrs, mod->sm_desc ) ) {
699 snprintf( textbuf, textlen,
700 "modify/delete: %s: no such attribute",
701 mod->sm_desc->ad_cname.bv_val );
702 rc = LDAP_NO_SUCH_ATTRIBUTE;
708 /* delete the remaining normalized values */
709 for ( j = 0; nvals[ j ].bv_val != NULL; j++ ) {
710 if ( nvals[ j ].bv_val != &dummy ) {
711 ber_memfree( nvals[ j ].bv_val );
714 ber_memfree( nvals );
721 modify_replace_values(
726 char *textbuf, size_t textlen
729 (void) attr_delete( &e->e_attrs, mod->sm_desc );
731 if ( mod->sm_bvalues ) {
732 return modify_add_values( e, mod, permissive, text, textbuf, textlen );
744 if ( mod->sm_values != NULL ) ber_bvarray_free( mod->sm_values );
745 mod->sm_values = NULL;
748 if ( mod->sm_nvalues != NULL ) ber_bvarray_free( mod->sm_nvalues );
749 mod->sm_nvalues = NULL;
752 if( freeit ) free( mod );
762 for ( ; ml != NULL; ml = next ) {
765 slap_mod_free( &ml->sml_mod, 0 );