2 /* This work is part of OpenLDAP Software <http://www.openldap.org/>.
4 * Copyright 2003-2008 The OpenLDAP Foundation.
5 * Portions Copyright 2003 IBM Corporation.
6 * Portions Copyright 2003 Symas Corporation.
9 * Redistribution and use in source and binary forms, with or without
10 * modification, are permitted only as authorized by the OpenLDAP
13 * A copy of this license is available in the file LICENSE in the
14 * top-level directory of the distribution or, alternatively, at
15 * <http://www.OpenLDAP.org/license.html>.
18 * This work was initially developed by Apurva Kumar for inclusion
19 * in OpenLDAP Software and subsequently rewritten by Howard Chu.
24 #ifdef SLAPD_OVER_PROXYCACHE
28 #include <ac/string.h>
40 * Control that allows to access the private DB
41 * instead of the public one
43 #define PCACHE_CONTROL_PRIVDB "1.3.6.1.4.1.4203.666.11.9.5.1"
46 * Extended Operation that allows to remove a query from the cache
48 #define PCACHE_EXOP_QUERY_DELETE "1.3.6.1.4.1.4203.666.11.9.6.1"
51 /* query cache structs */
54 typedef struct Query_s {
55 Filter* filter; /* Search Filter */
56 struct berval base; /* Search Base */
57 int scope; /* Search scope */
60 struct query_template_s;
62 typedef struct Qbase_s {
63 Avlnode *scopes[4]; /* threaded AVL trees of cached queries */
68 /* struct representing a cached query */
69 typedef struct cached_query_s {
74 struct berval q_uuid; /* query identifier */
76 struct query_template_s *qtemp; /* template of the query */
77 time_t expiry_time; /* time till the query is considered valid */
78 struct cached_query_s *next; /* next query in the template */
79 struct cached_query_s *prev; /* previous query in the template */
80 struct cached_query_s *lru_up; /* previous query in the LRU list */
81 struct cached_query_s *lru_down; /* next query in the LRU list */
82 ldap_pvt_thread_rdwr_t rwlock;
88 * ldap:///<base>??<scope>?<filter>?x-uuid=<uid>,x-template=<template>,x-attrset=<attrset>,x-expiry=<expiry>
90 * <base> ::= CachedQuery.qbase->base
91 * <scope> ::= CachedQuery.scope
92 * <filter> ::= filter2bv(CachedQuery.filter)
93 * <uuid> ::= CachedQuery.q_uuid
94 * <attrset> ::= CachedQuery.qtemp->attr_set_index
95 * <expiry> ::= CachedQuery.expiry_time
97 * quick hack: parse URI, call add_query() and then fix
98 * CachedQuery.expiry_time and CachedQuery.q_uuid
102 * Represents a set of projected attributes.
106 struct query_template_s *templates;
107 AttributeName* attrs; /* specifies the set */
109 #define PC_CONFIGURED (0x1)
110 #define PC_REFERENCED (0x2)
111 #define PC_GOT_OC (0x4)
112 int count; /* number of attributes */
115 /* struct representing a query template
116 * e.g. template string = &(cn=)(mail=)
118 typedef struct query_template_s {
119 struct query_template_s *qtnext;
120 struct query_template_s *qmnext;
123 CachedQuery* query; /* most recent query cached for the template */
124 CachedQuery* query_last; /* oldest query cached for the template */
125 ldap_pvt_thread_rdwr_t t_rwlock; /* Rd/wr lock for accessing queries in the template */
126 struct berval querystr; /* Filter string corresponding to the QT */
128 int attr_set_index; /* determines the projected attributes */
129 int no_of_queries; /* Total number of queries in the template */
130 time_t ttl; /* TTL for the queries of this template */
131 time_t negttl; /* TTL for negative results */
132 time_t limitttl; /* TTL for sizelimit exceeding results */
133 struct attr_set t_attrs; /* filter attrs + attr_set */
141 } pc_caching_reason_t;
143 static const char *pc_caching_reason_str[] = {
152 struct query_manager_s;
154 /* prototypes for functions for 1) query containment
155 * 2) query addition, 3) cache replacement
157 typedef CachedQuery *(QCfunc)(Operation *op, struct query_manager_s*,
158 Query*, QueryTemplate*);
159 typedef CachedQuery *(AddQueryfunc)(Operation *op, struct query_manager_s*,
160 Query*, QueryTemplate*, pc_caching_reason_t, int wlock);
161 typedef void (CRfunc)(struct query_manager_s*, struct berval*);
163 /* LDAP query cache */
164 typedef struct query_manager_s {
165 struct attr_set* attr_sets; /* possible sets of projected attributes */
166 QueryTemplate* templates; /* cacheable templates */
168 CachedQuery* lru_top; /* top and bottom of LRU list */
169 CachedQuery* lru_bottom;
171 ldap_pvt_thread_mutex_t lru_mutex; /* mutex for accessing LRU list */
173 /* Query cache methods */
174 QCfunc *qcfunc; /* Query containment*/
175 CRfunc *crfunc; /* cache replacement */
176 AddQueryfunc *addfunc; /* add query */
179 /* LDAP query cache manager */
180 typedef struct cache_manager_s {
181 BackendDB db; /* underlying database */
182 unsigned long num_cached_queries; /* total number of cached queries */
183 unsigned long max_queries; /* upper bound on # of cached queries */
184 int save_queries; /* save cached queries across restarts */
185 int numattrsets; /* number of attribute sets */
186 int cur_entries; /* current number of entries cached */
187 int max_entries; /* max number of entries cached */
188 int num_entries_limit; /* max # of entries in a cacheable query */
190 char response_cb; /* install the response callback
191 * at the tail of the callback list */
192 #define PCACHE_RESPONSE_CB_HEAD 0
193 #define PCACHE_RESPONSE_CB_TAIL 1
194 char defer_db_open; /* defer open for online add */
196 time_t cc_period; /* interval between successive consistency checks (sec) */
200 ldap_pvt_thread_mutex_t cache_mutex;
202 query_manager* qm; /* query cache managed by the cache manager */
205 static int pcache_debug;
207 #ifdef PCACHE_CONTROL_PRIVDB
208 static int privDB_cid;
209 #endif /* PCACHE_CONTROL_PRIVDB */
211 static AttributeDescription *ad_queryId, *ad_cachedQueryURL;
214 AttributeDescription **adp;
216 { "( 1.3.6.1.4.1.4203.666.11.9.1.1 "
218 "DESC 'ID of query the entry belongs to, formatted as a UUID' "
219 "EQUALITY octetStringMatch "
220 "SYNTAX 1.3.6.1.4.1.1466.115.121.1.40{64} "
221 "NO-USER-MODIFICATION "
222 "USAGE directoryOperation )",
224 { "( 1.3.6.1.4.1.4203.666.11.9.1.2 "
225 "NAME 'cachedQueryURL' "
226 "DESC 'URI describing a cached query' "
227 "EQUALITY caseExactMatch "
228 "SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 "
229 "NO-USER-MODIFICATION "
230 "USAGE directoryOperation )",
231 &ad_cachedQueryURL },
240 AttributeName** filter_attrs,
242 int* filter_got_oc );
249 QueryTemplate *templ,
250 pc_caching_reason_t why,
257 struct berval *query_uuid );
260 * Turn a cached query into its URL representation
263 query2url( Operation *op, CachedQuery *q, struct berval *urlbv )
265 struct berval bv_scope,
267 char attrset_buf[ 32 ],
270 ber_len_t attrset_len,
273 ldap_pvt_scope2bv( q->scope, &bv_scope );
274 filter2bv_x( op, q->filter, &bv_filter );
275 attrset_len = snprintf( attrset_buf, sizeof( attrset_buf ),
276 "%lu", (unsigned long)q->qtemp->attr_set_index );
277 expiry_len = snprintf( expiry_buf, sizeof( expiry_buf ),
278 "%lu", (unsigned long)q->expiry_time );
280 urlbv->bv_len = STRLENOF( "ldap:///" )
281 + q->qbase->base.bv_len
286 + STRLENOF( "?x-uuid=" )
288 + STRLENOF( ",x-attrset=" )
290 + STRLENOF( ",x-expiry=" )
292 ptr = urlbv->bv_val = ber_memalloc_x( urlbv->bv_len + 1, op->o_tmpmemctx );
293 ptr = lutil_strcopy( ptr, "ldap:///" );
294 ptr = lutil_strcopy( ptr, q->qbase->base.bv_val );
295 ptr = lutil_strcopy( ptr, "??" );
296 ptr = lutil_strcopy( ptr, bv_scope.bv_val );
297 ptr = lutil_strcopy( ptr, "?" );
298 ptr = lutil_strcopy( ptr, bv_filter.bv_val );
299 ptr = lutil_strcopy( ptr, "?x-uuid=" );
300 ptr = lutil_strcopy( ptr, q->q_uuid.bv_val );
301 ptr = lutil_strcopy( ptr, ",x-attrset=" );
302 ptr = lutil_strcopy( ptr, attrset_buf );
303 ptr = lutil_strcopy( ptr, ",x-expiry=" );
304 ptr = lutil_strcopy( ptr, expiry_buf );
306 ber_memfree_x( bv_filter.bv_val, op->o_tmpmemctx );
312 * Turn an URL representing a formerly cached query into a cached query,
313 * and try to cache it
324 LDAPURLDesc *lud = NULL;
326 tempstr = BER_BVNULL,
336 rc = ldap_url_parse( url, &lud );
337 if ( rc != LDAP_URL_SUCCESS ) {
341 /* non-allowed fields */
342 if ( lud->lud_host != NULL ) {
347 if ( lud->lud_attrs != NULL ) {
353 if ( strcmp( lud->lud_scheme, "ldap" ) != 0 ) {
358 /* required fields */
359 if ( lud->lud_dn == NULL || lud->lud_dn[ 0 ] == '\0' ) {
364 switch ( lud->lud_scope ) {
365 case LDAP_SCOPE_BASE:
366 case LDAP_SCOPE_ONELEVEL:
367 case LDAP_SCOPE_SUBTREE:
368 case LDAP_SCOPE_SUBORDINATE:
376 if ( lud->lud_filter == NULL || lud->lud_filter[ 0 ] == '\0' ) {
381 if ( lud->lud_exts == NULL ) {
386 for ( i = 0; lud->lud_exts[ i ] != NULL; i++ ) {
387 if ( strncmp( lud->lud_exts[ i ], "x-uuid=", STRLENOF( "x-uuid=" ) ) == 0 ) {
388 struct berval tmpUUID;
389 Syntax *syn_UUID = slap_schema.si_ad_entryUUID->ad_type->sat_syntax;
391 ber_str2bv( &lud->lud_exts[ i ][ STRLENOF( "x-uuid=" ) ], 0, 0, &tmpUUID );
392 rc = syn_UUID->ssyn_pretty( syn_UUID, &tmpUUID, &uuid, NULL );
393 if ( rc != LDAP_SUCCESS ) {
398 } else if ( strncmp( lud->lud_exts[ i ], "x-attrset=", STRLENOF( "x-attrset=" ) ) == 0 ) {
399 rc = lutil_atoi( &attrset, &lud->lud_exts[ i ][ STRLENOF( "x-attrset=" ) ] );
405 } else if ( strncmp( lud->lud_exts[ i ], "x-expiry=", STRLENOF( "x-expiry=" ) ) == 0 ) {
408 rc = lutil_atoul( &l, &lud->lud_exts[ i ][ STRLENOF( "x-expiry=" ) ] );
412 expiry_time = (time_t)l;
426 if ( !got_attrset ) {
436 /* ignore expired queries */
437 if ( expiry_time <= slap_get_time()) {
439 SlapReply rs2 = { 0 };
441 memset( &op2.oq_search, 0, sizeof( op2.oq_search ) );
443 (void)remove_query_data( &op2, &rs2, &uuid );
448 ber_str2bv( lud->lud_dn, 0, 0, &base );
449 rc = dnNormalize( 0, NULL, NULL, &base, &query.base, NULL );
450 if ( rc != LDAP_SUCCESS ) {
453 query.scope = lud->lud_scope;
454 query.filter = str2filter( lud->lud_filter );
456 tempstr.bv_val = ch_malloc( strlen( lud->lud_filter ) + 1 );
458 if ( filter2template( op, query.filter, &tempstr, NULL, NULL, NULL ) ) {
459 ch_free( tempstr.bv_val );
464 /* check for query containment */
465 qt = qm->attr_sets[attrset].templates;
466 for ( ; qt; qt = qt->qtnext ) {
467 /* find if template i can potentially answer tempstr */
468 if ( bvmatch( &qt->querystr, &tempstr ) ) {
478 cq = add_query( op, qm, &query, qt, PC_POSITIVE, 0 );
480 cq->expiry_time = expiry_time;
483 /* it's now into cq->filter */
493 if ( query.filter != NULL ) filter_free( query.filter );
494 if ( !BER_BVISNULL( &tempstr ) ) ch_free( tempstr.bv_val );
495 if ( !BER_BVISNULL( &query.base ) ) ch_free( query.base.bv_val );
496 if ( !BER_BVISNULL( &uuid ) ) ch_free( uuid.bv_val );
497 if ( lud != NULL ) ldap_free_urldesc( lud );
502 /* Return 1 for an added entry, else 0 */
507 struct berval* query_uuid )
510 Modifications* modlist = NULL;
511 const char* text = NULL;
513 char textbuf[SLAP_TEXT_BUFLEN];
514 size_t textlen = sizeof(textbuf);
516 SlapReply sreply = {REP_RESULT};
518 slap_callback cb = { NULL, slap_null_cb, NULL, NULL };
523 /* add queryId attribute */
524 attr_merge_one( e, ad_queryId, query_uuid, NULL );
526 /* append the attribute list from the fetched entry */
527 e->e_attrs->a_next = attr;
529 op->o_tag = LDAP_REQ_ADD;
530 op->o_protocol = LDAP_VERSION3;
531 op->o_callback = &cb;
532 op->o_time = slap_get_time();
533 op->o_do_not_cache = 1;
536 op->o_req_dn = e->e_name;
537 op->o_req_ndn = e->e_nname;
538 rc = op->o_bd->be_add( op, &sreply );
540 if ( rc != LDAP_SUCCESS ) {
541 if ( rc == LDAP_ALREADY_EXISTS ) {
542 slap_entry2mods( e, &modlist, &text, textbuf, textlen );
543 modlist->sml_op = LDAP_MOD_ADD;
544 op->o_tag = LDAP_REQ_MODIFY;
545 op->orm_modlist = modlist;
546 op->o_bd->be_modify( op, &sreply );
547 slap_mods_free( modlist, 1 );
548 } else if ( rc == LDAP_REFERRAL ||
549 rc == LDAP_NO_SUCH_OBJECT ) {
550 syncrepl_add_glue( op, e );
559 if ( op->ora_e == e )
560 be_entry_release_w( op, e );
567 /* Length-ordered sort on normalized DNs */
568 static int pcache_dn_cmp( const void *v1, const void *v2 )
570 const Qbase *q1 = v1, *q2 = v2;
572 int rc = q1->base.bv_len - q2->base.bv_len;
574 rc = strncmp( q1->base.bv_val, q2->base.bv_val, q1->base.bv_len );
578 static int lex_bvcmp( struct berval *bv1, struct berval *bv2 )
581 dif = bv1->bv_len - bv2->bv_len;
583 if ( dif > 0 ) len -= dif;
584 len = memcmp( bv1->bv_val, bv2->bv_val, len );
590 /* compare the first value in each filter */
591 static int pcache_filter_cmp( const void *v1, const void *v2 )
593 const CachedQuery *q1 = v1, *q2 =v2;
594 int rc, weight1, weight2;
596 switch( q1->first->f_choice ) {
597 case LDAP_FILTER_PRESENT:
600 case LDAP_FILTER_EQUALITY:
608 switch( q2->first->f_choice ) {
609 case LDAP_FILTER_PRESENT:
612 case LDAP_FILTER_EQUALITY:
620 rc = weight1 - weight2;
625 rc = lex_bvcmp( &q1->first->f_av_value, &q2->first->f_av_value );
628 if ( q1->first->f_choice == LDAP_FILTER_SUBSTRINGS ) {
630 if ( !BER_BVISNULL( &q1->first->f_sub_initial )) {
631 if ( !BER_BVISNULL( &q2->first->f_sub_initial )) {
632 rc = lex_bvcmp( &q1->first->f_sub_initial,
633 &q2->first->f_sub_initial );
637 } else if ( !BER_BVISNULL( &q2->first->f_sub_initial )) {
641 if ( q1->first->f_sub_any ) {
642 if ( q2->first->f_sub_any ) {
643 rc = lex_bvcmp( q1->first->f_sub_any,
644 q2->first->f_sub_any );
648 } else if ( q2->first->f_sub_any ) {
652 if ( !BER_BVISNULL( &q1->first->f_sub_final )) {
653 if ( !BER_BVISNULL( &q2->first->f_sub_final )) {
654 rc = lex_bvcmp( &q1->first->f_sub_final,
655 &q2->first->f_sub_final );
659 } else if ( !BER_BVISNULL( &q2->first->f_sub_final )) {
663 rc = lex_bvcmp( &q1->first->f_mr_value,
664 &q2->first->f_mr_value );
673 /* add query on top of LRU list */
675 add_query_on_top (query_manager* qm, CachedQuery* qc)
677 CachedQuery* top = qm->lru_top;
688 Debug( pcache_debug, "Base of added query = %s\n",
689 qc->qbase->base.bv_val, 0, 0 );
692 /* remove_query from LRU list */
695 remove_query (query_manager* qm, CachedQuery* qc)
718 qc->lru_up = qc->lru_down = NULL;
721 /* find and remove string2 from string1
722 * from start if position = 1,
723 * from end if position = 3,
724 * from anywhere if position = 2
725 * string1 is overwritten if position = 2.
729 find_and_remove(struct berval* ber1, struct berval* ber2, int position)
740 if ( ber1->bv_len >= ber2->bv_len && !memcmp( ber1->bv_val,
741 ber2->bv_val, ber2->bv_len )) {
743 ber1->bv_val += ber2->bv_len;
744 ber1->bv_len -= ber2->bv_len;
749 ber1->bv_val[ber1->bv_len] = '\0';
750 temp = strstr( ber1->bv_val, ber2->bv_val );
752 strcpy( temp, temp+ber2->bv_len );
753 ber1->bv_len -= ber2->bv_len;
759 if ( ber1->bv_len >= ber2->bv_len &&
760 !memcmp( ber1->bv_val+ber1->bv_len-ber2->bv_len, ber2->bv_val,
763 ber1->bv_len -= ber2->bv_len;
771 static struct berval*
772 merge_init_final(Operation *op, struct berval* init, struct berval* any,
773 struct berval* final)
775 struct berval* merged, *temp;
776 int i, any_count, count;
778 for (any_count=0; any && any[any_count].bv_val; any_count++)
788 merged = (struct berval*)op->o_tmpalloc( (count+1)*sizeof(struct berval),
793 ber_dupbv_x( temp, init, op->o_tmpmemctx );
797 for (i=0; i<any_count; i++) {
798 ber_dupbv_x( temp, any, op->o_tmpmemctx );
803 ber_dupbv_x( temp, final, op->o_tmpmemctx );
810 /* Each element in stored must be found in incoming. Incoming is overwritten.
813 strings_containment(struct berval* stored, struct berval* incoming)
815 struct berval* element;
819 for ( element=stored; element->bv_val != NULL; element++ ) {
820 for (j = k; incoming[j].bv_val != NULL; j++) {
821 if (find_and_remove(&(incoming[j]), element, 2)) {
838 substr_containment_substr(Operation *op, Filter* stored, Filter* incoming)
842 struct berval init_incoming;
843 struct berval final_incoming;
844 struct berval *remaining_incoming = NULL;
846 if ((!(incoming->f_sub_initial.bv_val) && (stored->f_sub_initial.bv_val))
847 || (!(incoming->f_sub_final.bv_val) && (stored->f_sub_final.bv_val)))
850 init_incoming = incoming->f_sub_initial;
851 final_incoming = incoming->f_sub_final;
853 if (find_and_remove(&init_incoming,
854 &(stored->f_sub_initial), 1) && find_and_remove(&final_incoming,
855 &(stored->f_sub_final), 3))
857 if (stored->f_sub_any == NULL) {
861 remaining_incoming = merge_init_final(op, &init_incoming,
862 incoming->f_sub_any, &final_incoming);
863 rc = strings_containment(stored->f_sub_any, remaining_incoming);
864 ber_bvarray_free_x( remaining_incoming, op->o_tmpmemctx );
871 substr_containment_equality(Operation *op, Filter* stored, Filter* incoming)
873 struct berval incoming_val[2];
876 incoming_val[1] = incoming->f_av_value;
878 if (find_and_remove(incoming_val+1,
879 &(stored->f_sub_initial), 1) && find_and_remove(incoming_val+1,
880 &(stored->f_sub_final), 3)) {
881 if (stored->f_sub_any == NULL){
885 ber_dupbv_x( incoming_val, incoming_val+1, op->o_tmpmemctx );
886 BER_BVZERO( incoming_val+1 );
887 rc = strings_containment(stored->f_sub_any, incoming_val);
888 op->o_tmpfree( incoming_val[0].bv_val, op->o_tmpmemctx );
895 filter_first( Filter *f )
897 while ( f->f_choice == LDAP_FILTER_OR || f->f_choice == LDAP_FILTER_AND )
904 find_filter( Operation *op, Avlnode *root, Filter *inputf, Filter *first )
908 MatchingRule* mrule = NULL;
909 int res=0, eqpass= 0;
917 /* substring matches sort to the end, and we just have to
918 * walk the entire list.
920 if ( first->f_choice == LDAP_FILTER_SUBSTRINGS ) {
921 ptr = tavl_end( root, 1 );
924 ptr = tavl_find3( root, &cq, pcache_filter_cmp, &ret );
925 dir = (first->f_choice == LDAP_FILTER_GE) ? TAVL_DIR_LEFT :
934 /* an incoming substr query can only be satisfied by a cached
937 if ( first->f_choice == LDAP_FILTER_SUBSTRINGS &&
938 qc->first->f_choice != LDAP_FILTER_SUBSTRINGS )
941 /* an incoming eq query can be satisfied by a cached eq or substr
944 if ( first->f_choice == LDAP_FILTER_EQUALITY ) {
946 if ( qc->first->f_choice != LDAP_FILTER_EQUALITY ) {
947 nextpass: eqpass = 1;
948 ptr = tavl_end( root, 1 );
953 if ( qc->first->f_choice != LDAP_FILTER_SUBSTRINGS )
959 switch (fs->f_choice) {
960 case LDAP_FILTER_EQUALITY:
961 if (fi->f_choice == LDAP_FILTER_EQUALITY)
962 mrule = fs->f_ava->aa_desc->ad_type->sat_equality;
968 mrule = fs->f_ava->aa_desc->ad_type->sat_ordering;
975 rc = value_match(&ret, fs->f_ava->aa_desc, mrule,
976 SLAP_MR_VALUE_OF_ASSERTION_SYNTAX,
977 &(fi->f_ava->aa_value),
978 &(fs->f_ava->aa_value), &text);
979 if (rc != LDAP_SUCCESS) {
982 if ( fi==first && fi->f_choice==LDAP_FILTER_EQUALITY && ret )
985 switch (fs->f_choice) {
987 case LDAP_FILTER_AND:
992 case LDAP_FILTER_SUBSTRINGS:
993 /* check if the equality query can be
994 * answered with cached substring query */
995 if ((fi->f_choice == LDAP_FILTER_EQUALITY)
996 && substr_containment_equality( op,
999 /* check if the substring query can be
1000 * answered with cached substring query */
1001 if ((fi->f_choice ==LDAP_FILTER_SUBSTRINGS
1002 ) && substr_containment_substr( op,
1008 case LDAP_FILTER_PRESENT:
1013 case LDAP_FILTER_EQUALITY:
1019 case LDAP_FILTER_GE:
1020 if (mrule && ret >= 0)
1025 case LDAP_FILTER_LE:
1026 if (mrule && ret <= 0)
1031 case LDAP_FILTER_NOT:
1037 } while((res) && (fi != NULL) && (fs != NULL));
1041 ptr = tavl_next( ptr, dir );
1046 /* check whether query is contained in any of
1047 * the cached queries in template
1049 static CachedQuery *
1050 query_containment(Operation *op, query_manager *qm,
1052 QueryTemplate *templa)
1055 int depth = 0, tscope;
1056 Qbase qbase, *qbptr = NULL;
1059 if (query->filter != NULL) {
1062 Debug( pcache_debug, "Lock QC index = %p\n",
1063 (void *) templa, 0, 0 );
1064 qbase.base = query->base;
1066 first = filter_first( query->filter );
1068 ldap_pvt_thread_rdwr_rlock(&templa->t_rwlock);
1071 qbptr = avl_find( templa->qbase, &qbase, pcache_dn_cmp );
1073 tscope = query->scope;
1074 /* Find a matching scope:
1075 * match at depth 0 OK
1078 * subord at depth > 0 OK
1079 * subtree at any depth OK
1081 * subtree or subord at any depth OK
1083 * subtree or subord at any depth OK
1085 * subord at depth > 0 OK
1086 * subtree at any depth OK
1088 for ( tscope = 0 ; tscope <= LDAP_SCOPE_CHILDREN; tscope++ ) {
1089 switch ( query->scope ) {
1090 case LDAP_SCOPE_BASE:
1091 if ( tscope == LDAP_SCOPE_BASE && depth ) continue;
1092 if ( tscope == LDAP_SCOPE_ONE && depth != 1) continue;
1093 if ( tscope == LDAP_SCOPE_CHILDREN && !depth ) continue;
1095 case LDAP_SCOPE_ONE:
1096 if ( tscope == LDAP_SCOPE_BASE )
1097 tscope = LDAP_SCOPE_ONE;
1098 if ( tscope == LDAP_SCOPE_ONE && depth ) continue;
1099 if ( !depth ) break;
1100 if ( tscope < LDAP_SCOPE_SUBTREE )
1101 tscope = LDAP_SCOPE_SUBTREE;
1103 case LDAP_SCOPE_SUBTREE:
1104 if ( tscope < LDAP_SCOPE_SUBTREE )
1105 tscope = LDAP_SCOPE_SUBTREE;
1106 if ( tscope == LDAP_SCOPE_CHILDREN && !depth ) continue;
1108 case LDAP_SCOPE_CHILDREN:
1109 if ( tscope < LDAP_SCOPE_SUBTREE )
1110 tscope = LDAP_SCOPE_SUBTREE;
1113 if ( !qbptr->scopes[tscope] ) continue;
1116 qc = find_filter( op, qbptr->scopes[tscope],
1117 query->filter, first );
1119 if ( qc->q_sizelimit ) {
1120 ldap_pvt_thread_rdwr_runlock(&templa->t_rwlock);
1123 ldap_pvt_thread_mutex_lock(&qm->lru_mutex);
1124 if (qm->lru_top != qc) {
1125 remove_query(qm, qc);
1126 add_query_on_top(qm, qc);
1128 ldap_pvt_thread_mutex_unlock(&qm->lru_mutex);
1133 if ( be_issuffix( op->o_bd, &qbase.base ))
1136 dnParent( &qbase.base, &pdn );
1141 Debug( pcache_debug,
1142 "Not answerable: Unlock QC index=%p\n",
1143 (void *) templa, 0, 0 );
1144 ldap_pvt_thread_rdwr_runlock(&templa->t_rwlock);
1150 free_query (CachedQuery* qc)
1152 free(qc->q_uuid.bv_val);
1153 filter_free(qc->filter);
1158 /* Add query to query cache, the returned Query is locked for writing */
1159 static CachedQuery *
1164 QueryTemplate *templ,
1165 pc_caching_reason_t why,
1168 CachedQuery* new_cached_query = (CachedQuery*) ch_malloc(sizeof(CachedQuery));
1174 new_cached_query->qtemp = templ;
1175 BER_BVZERO( &new_cached_query->q_uuid );
1176 new_cached_query->q_sizelimit = 0;
1184 ttl = templ->negttl;
1188 ttl = templ->limitttl;
1195 new_cached_query->expiry_time = slap_get_time() + ttl;
1196 new_cached_query->lru_up = NULL;
1197 new_cached_query->lru_down = NULL;
1198 Debug( pcache_debug, "Added query expires at %ld (%s)\n",
1199 (long) new_cached_query->expiry_time,
1200 pc_caching_reason_str[ why ], 0 );
1202 new_cached_query->scope = query->scope;
1203 new_cached_query->filter = query->filter;
1204 new_cached_query->first = first = filter_first( query->filter );
1206 ldap_pvt_thread_rdwr_init(&new_cached_query->rwlock);
1208 ldap_pvt_thread_rdwr_wlock(&new_cached_query->rwlock);
1210 qb.base = query->base;
1212 /* Adding a query */
1213 Debug( pcache_debug, "Lock AQ index = %p\n",
1214 (void *) templ, 0, 0 );
1215 ldap_pvt_thread_rdwr_wlock(&templ->t_rwlock);
1216 qbase = avl_find( templ->qbase, &qb, pcache_dn_cmp );
1218 qbase = ch_calloc( 1, sizeof(Qbase) + qb.base.bv_len + 1 );
1219 qbase->base.bv_len = qb.base.bv_len;
1220 qbase->base.bv_val = (char *)(qbase+1);
1221 memcpy( qbase->base.bv_val, qb.base.bv_val, qb.base.bv_len );
1222 qbase->base.bv_val[qbase->base.bv_len] = '\0';
1223 avl_insert( &templ->qbase, qbase, pcache_dn_cmp, avl_dup_error );
1225 new_cached_query->next = templ->query;
1226 new_cached_query->prev = NULL;
1227 new_cached_query->qbase = qbase;
1228 rc = tavl_insert( &qbase->scopes[query->scope], new_cached_query,
1229 pcache_filter_cmp, avl_dup_error );
1232 if (templ->query == NULL)
1233 templ->query_last = new_cached_query;
1235 templ->query->prev = new_cached_query;
1236 templ->query = new_cached_query;
1237 templ->no_of_queries++;
1239 ch_free( new_cached_query );
1240 new_cached_query = find_filter( op, qbase->scopes[query->scope],
1241 query->filter, first );
1242 filter_free( query->filter );
1244 Debug( pcache_debug, "TEMPLATE %p QUERIES++ %d\n",
1245 (void *) templ, templ->no_of_queries, 0 );
1247 Debug( pcache_debug, "Unlock AQ index = %p \n",
1248 (void *) templ, 0, 0 );
1249 ldap_pvt_thread_rdwr_wunlock(&templ->t_rwlock);
1251 /* Adding on top of LRU list */
1253 ldap_pvt_thread_mutex_lock(&qm->lru_mutex);
1254 add_query_on_top(qm, new_cached_query);
1255 ldap_pvt_thread_mutex_unlock(&qm->lru_mutex);
1257 return rc == 0 ? new_cached_query : NULL;
1261 remove_from_template (CachedQuery* qc, QueryTemplate* template)
1263 if (!qc->prev && !qc->next) {
1264 template->query_last = template->query = NULL;
1265 } else if (qc->prev == NULL) {
1266 qc->next->prev = NULL;
1267 template->query = qc->next;
1268 } else if (qc->next == NULL) {
1269 qc->prev->next = NULL;
1270 template->query_last = qc->prev;
1272 qc->next->prev = qc->prev;
1273 qc->prev->next = qc->next;
1275 tavl_delete( &qc->qbase->scopes[qc->scope], qc, pcache_filter_cmp );
1276 qc->qbase->queries--;
1277 if ( qc->qbase->queries == 0 ) {
1278 avl_delete( &template->qbase, qc->qbase, pcache_dn_cmp );
1279 ch_free( qc->qbase );
1283 template->no_of_queries--;
1286 /* remove bottom query of LRU list from the query cache */
1288 * NOTE: slight change in functionality.
1290 * - if result->bv_val is NULL, the query at the bottom of the LRU
1292 * - otherwise, the query whose UUID is *result is removed
1293 * - if not found, result->bv_val is zeroed
1296 cache_replacement(query_manager* qm, struct berval *result)
1298 CachedQuery* bottom;
1299 QueryTemplate *temp;
1301 ldap_pvt_thread_mutex_lock(&qm->lru_mutex);
1302 if ( BER_BVISNULL( result ) ) {
1303 bottom = qm->lru_bottom;
1306 Debug ( pcache_debug,
1307 "Cache replacement invoked without "
1308 "any query in LRU list\n", 0, 0, 0 );
1309 ldap_pvt_thread_mutex_unlock(&qm->lru_mutex);
1314 for ( bottom = qm->lru_bottom;
1316 bottom = bottom->lru_up )
1318 if ( bvmatch( result, &bottom->q_uuid ) ) {
1324 Debug ( pcache_debug,
1325 "Could not find query with uuid=\"%s\""
1326 "in LRU list\n", result->bv_val, 0, 0 );
1327 ldap_pvt_thread_mutex_unlock(&qm->lru_mutex);
1328 BER_BVZERO( result );
1333 temp = bottom->qtemp;
1334 remove_query(qm, bottom);
1335 ldap_pvt_thread_mutex_unlock(&qm->lru_mutex);
1337 *result = bottom->q_uuid;
1338 BER_BVZERO( &bottom->q_uuid );
1340 Debug( pcache_debug, "Lock CR index = %p\n", (void *) temp, 0, 0 );
1341 ldap_pvt_thread_rdwr_wlock(&temp->t_rwlock);
1342 remove_from_template(bottom, temp);
1343 Debug( pcache_debug, "TEMPLATE %p QUERIES-- %d\n",
1344 (void *) temp, temp->no_of_queries, 0 );
1345 Debug( pcache_debug, "Unlock CR index = %p\n", (void *) temp, 0, 0 );
1346 ldap_pvt_thread_rdwr_wunlock(&temp->t_rwlock);
1351 struct query_info *next;
1363 struct query_info *qi;
1366 if ( rs->sr_type != REP_SEARCH ) return 0;
1368 attr = attr_find( rs->sr_entry->e_attrs, ad_queryId );
1369 if ( attr == NULL ) return 0;
1371 count = attr->a_numvals;
1372 assert( count > 0 );
1373 qi = op->o_tmpalloc( sizeof( struct query_info ), op->o_tmpmemctx );
1374 qi->next = op->o_callback->sc_private;
1375 op->o_callback->sc_private = qi;
1376 ber_dupbv_x( &qi->xdn, &rs->sr_entry->e_nname, op->o_tmpmemctx );
1377 qi->del = ( count == 1 );
1386 struct berval *query_uuid )
1388 struct query_info *qi, *qnext;
1389 char filter_str[ LDAP_LUTIL_UUIDSTR_BUFSIZE + STRLENOF( "(queryId=)" ) ];
1390 AttributeAssertion ava = ATTRIBUTEASSERTION_INIT;
1391 Filter filter = {LDAP_FILTER_EQUALITY};
1392 SlapReply sreply = {REP_RESULT};
1393 slap_callback cb = { NULL, remove_func, NULL, NULL };
1396 sreply.sr_entry = NULL;
1397 sreply.sr_nentries = 0;
1398 op->ors_filterstr.bv_len = snprintf(filter_str, sizeof(filter_str),
1399 "(%s=%s)", ad_queryId->ad_cname.bv_val, query_uuid->bv_val);
1400 filter.f_ava = &ava;
1401 filter.f_av_desc = ad_queryId;
1402 filter.f_av_value = *query_uuid;
1404 op->o_tag = LDAP_REQ_SEARCH;
1405 op->o_protocol = LDAP_VERSION3;
1406 op->o_callback = &cb;
1407 op->o_time = slap_get_time();
1408 op->o_do_not_cache = 1;
1410 op->o_req_dn = op->o_bd->be_suffix[0];
1411 op->o_req_ndn = op->o_bd->be_nsuffix[0];
1412 op->ors_scope = LDAP_SCOPE_SUBTREE;
1413 op->ors_deref = LDAP_DEREF_NEVER;
1414 op->ors_slimit = SLAP_NO_LIMIT;
1415 op->ors_tlimit = SLAP_NO_LIMIT;
1416 op->ors_filter = &filter;
1417 op->ors_filterstr.bv_val = filter_str;
1418 op->ors_filterstr.bv_len = strlen(filter_str);
1419 op->ors_attrs = NULL;
1420 op->ors_attrsonly = 0;
1422 op->o_bd->be_search( op, &sreply );
1424 for ( qi=cb.sc_private; qi; qi=qnext ) {
1427 op->o_req_dn = qi->xdn;
1428 op->o_req_ndn = qi->xdn;
1431 Debug( pcache_debug, "DELETING ENTRY TEMPLATE=%s\n",
1432 query_uuid->bv_val, 0, 0 );
1434 op->o_tag = LDAP_REQ_DELETE;
1436 if (op->o_bd->be_delete(op, &sreply) == LDAP_SUCCESS) {
1442 struct berval vals[2];
1444 vals[0] = *query_uuid;
1445 vals[1].bv_val = NULL;
1447 mod.sml_op = LDAP_MOD_DELETE;
1449 mod.sml_desc = ad_queryId;
1450 mod.sml_type = ad_queryId->ad_cname;
1451 mod.sml_values = vals;
1452 mod.sml_nvalues = NULL;
1453 mod.sml_numvals = 1;
1454 mod.sml_next = NULL;
1455 Debug( pcache_debug,
1456 "REMOVING TEMP ATTR : TEMPLATE=%s\n",
1457 query_uuid->bv_val, 0, 0 );
1459 op->orm_modlist = &mod;
1461 op->o_bd->be_modify( op, &sreply );
1463 op->o_tmpfree( qi->xdn.bv_val, op->o_tmpmemctx );
1464 op->o_tmpfree( qi, op->o_tmpmemctx );
1471 AttributeName* attrs,
1480 struct berval *fstr,
1481 AttributeName** filter_attrs,
1483 int* filter_got_oc )
1485 AttributeDescription *ad;
1488 switch ( f->f_choice ) {
1489 case LDAP_FILTER_EQUALITY:
1491 len = STRLENOF( "(=)" ) + ad->ad_cname.bv_len;
1492 ret = snprintf( fstr->bv_val+fstr->bv_len, len + 1, "(%s=)", ad->ad_cname.bv_val );
1493 assert( ret == len );
1494 fstr->bv_len += len;
1497 case LDAP_FILTER_GE:
1499 len = STRLENOF( "(>=)" ) + ad->ad_cname.bv_len;
1500 ret = snprintf( fstr->bv_val+fstr->bv_len, len + 1, "(%s>=)", ad->ad_cname.bv_val);
1501 assert( ret == len );
1502 fstr->bv_len += len;
1505 case LDAP_FILTER_LE:
1507 len = STRLENOF( "(<=)" ) + ad->ad_cname.bv_len;
1508 ret = snprintf( fstr->bv_val+fstr->bv_len, len + 1, "(%s<=)", ad->ad_cname.bv_val);
1509 assert( ret == len );
1510 fstr->bv_len += len;
1513 case LDAP_FILTER_APPROX:
1515 len = STRLENOF( "(~=)" ) + ad->ad_cname.bv_len;
1516 ret = snprintf( fstr->bv_val+fstr->bv_len, len + 1, "(%s~=)", ad->ad_cname.bv_val);
1517 assert( ret == len );
1518 fstr->bv_len += len;
1521 case LDAP_FILTER_SUBSTRINGS:
1523 len = STRLENOF( "(=)" ) + ad->ad_cname.bv_len;
1524 ret = snprintf( fstr->bv_val+fstr->bv_len, len + 1, "(%s=)", ad->ad_cname.bv_val );
1525 assert( ret == len );
1526 fstr->bv_len += len;
1529 case LDAP_FILTER_PRESENT:
1531 len = STRLENOF( "(=*)" ) + ad->ad_cname.bv_len;
1532 ret = snprintf( fstr->bv_val+fstr->bv_len, len + 1, "(%s=*)", ad->ad_cname.bv_val );
1533 assert( ret == len );
1534 fstr->bv_len += len;
1537 case LDAP_FILTER_AND:
1538 case LDAP_FILTER_OR:
1539 case LDAP_FILTER_NOT: {
1541 fstr->bv_val[fstr->bv_len++] = '(';
1542 switch ( f->f_choice ) {
1543 case LDAP_FILTER_AND:
1544 fstr->bv_val[fstr->bv_len] = '&';
1546 case LDAP_FILTER_OR:
1547 fstr->bv_val[fstr->bv_len] = '|';
1549 case LDAP_FILTER_NOT:
1550 fstr->bv_val[fstr->bv_len] = '!';
1555 for ( f = f->f_list; f != NULL; f = f->f_next ) {
1556 rc = filter2template( op, f, fstr, filter_attrs, filter_cnt,
1560 fstr->bv_val[fstr->bv_len++] = ')';
1561 fstr->bv_val[fstr->bv_len] = '\0';
1567 /* a filter should at least have room for "()",
1568 * an "=" and for a 1-char attr */
1569 strcpy( fstr->bv_val, "(?=)" );
1570 fstr->bv_len += STRLENOF("(?=)");
1574 if ( filter_attrs != NULL ) {
1575 *filter_attrs = (AttributeName *)op->o_tmprealloc(*filter_attrs,
1576 (*filter_cnt + 2)*sizeof(AttributeName), op->o_tmpmemctx);
1578 (*filter_attrs)[*filter_cnt].an_desc = ad;
1579 (*filter_attrs)[*filter_cnt].an_name = ad->ad_cname;
1580 (*filter_attrs)[*filter_cnt].an_oc = NULL;
1581 (*filter_attrs)[*filter_cnt].an_oc_exclude = 0;
1582 BER_BVZERO( &(*filter_attrs)[*filter_cnt+1].an_name );
1584 if ( ad == slap_schema.si_ad_objectClass )
1591 struct search_info {
1594 QueryTemplate *qtemp;
1595 AttributeName* save_attrs; /* original attributes, saved for response */
1596 int swap_saved_attrs;
1601 int slimit_exceeded;
1602 pc_caching_reason_t caching_reason;
1607 remove_query_and_data(
1611 struct berval *uuid )
1613 query_manager* qm = cm->qm;
1615 qm->crfunc( qm, uuid );
1616 if ( !BER_BVISNULL( uuid ) ) {
1619 Debug( pcache_debug,
1620 "Removing query UUID %s\n",
1621 uuid->bv_val, 0, 0 );
1622 return_val = remove_query_data( op, rs, uuid );
1623 Debug( pcache_debug,
1624 "QUERY REMOVED, SIZE=%d\n",
1626 ldap_pvt_thread_mutex_lock( &cm->cache_mutex );
1627 cm->cur_entries -= return_val;
1628 cm->num_cached_queries--;
1629 Debug( pcache_debug,
1630 "STORED QUERIES = %lu\n",
1631 cm->num_cached_queries, 0, 0 );
1632 ldap_pvt_thread_mutex_unlock( &cm->cache_mutex );
1633 Debug( pcache_debug,
1634 "QUERY REMOVED, CACHE ="
1636 cm->cur_entries, 0, 0 );
1641 * Callback used to fetch queryId values based on entryUUID;
1642 * used by pcache_remove_entries_from_cache()
1645 fetch_queryId_cb( Operation *op, SlapReply *rs )
1649 /* only care about searchEntry responses */
1650 if ( rs->sr_type != REP_SEARCH ) {
1654 /* allow only one response per entryUUID */
1655 if ( op->o_callback->sc_private != NULL ) {
1661 /* copy all queryId values into callback's private data */
1662 a = attr_find( rs->sr_entry->e_attrs, ad_queryId );
1664 BerVarray vals = NULL;
1666 ber_bvarray_dup_x( &vals, a->a_nvals, op->o_tmpmemctx );
1667 op->o_callback->sc_private = (void *)vals;
1671 /* clear entry if required */
1672 if ( rs->sr_flags & REP_ENTRY_MUSTBEFREED ) {
1673 entry_free( rs->sr_entry );
1674 rs->sr_entry = NULL;
1675 rs->sr_flags ^= REP_ENTRY_MUSTBEFREED;
1682 * Call that allows to remove a set of entries from the cache,
1683 * by forcing the removal of all the related queries.
1686 pcache_remove_entries_from_cache(
1689 BerVarray entryUUIDs )
1691 Connection conn = { 0 };
1692 OperationBuffer opbuf;
1694 slap_callback sc = { 0 };
1695 SlapReply rs = { REP_RESULT };
1697 char filtbuf[ LDAP_LUTIL_UUIDSTR_BUFSIZE + STRLENOF( "(entryUUID=)" ) ];
1698 AttributeAssertion ava = ATTRIBUTEASSERTION_INIT;
1699 AttributeName attrs[ 2 ] = { 0 };
1703 void *thrctx = ldap_pvt_thread_pool_context();
1705 connection_fake_init( &conn, &opbuf, thrctx );
1713 memset( &op->oq_search, 0, sizeof( op->oq_search ) );
1714 op->ors_scope = LDAP_SCOPE_SUBTREE;
1715 op->ors_deref = LDAP_DEREF_NEVER;
1716 f.f_choice = LDAP_FILTER_EQUALITY;
1718 ava.aa_desc = slap_schema.si_ad_entryUUID;
1719 op->ors_filter = &f;
1721 op->ors_tlimit = SLAP_NO_LIMIT;
1722 attrs[ 0 ].an_desc = ad_queryId;
1723 attrs[ 0 ].an_name = ad_queryId->ad_cname;
1724 op->ors_attrs = attrs;
1725 op->ors_attrsonly = 0;
1727 op->o_req_dn = cm->db.be_suffix[ 0 ];
1728 op->o_req_ndn = cm->db.be_nsuffix[ 0 ];
1730 op->o_tag = LDAP_REQ_SEARCH;
1731 op->o_protocol = LDAP_VERSION3;
1732 op->o_managedsait = SLAP_CONTROL_CRITICAL;
1734 op->o_dn = op->o_bd->be_rootdn;
1735 op->o_ndn = op->o_bd->be_rootndn;
1736 sc.sc_response = fetch_queryId_cb;
1737 op->o_callback = ≻
1739 for ( s = 0; !BER_BVISNULL( &entryUUIDs[ s ] ); s++ ) {
1740 BerVarray vals = NULL;
1742 op->ors_filterstr.bv_len = snprintf( filtbuf, sizeof( filtbuf ),
1743 "(entryUUID=%s)", entryUUIDs[ s ].bv_val );
1744 op->ors_filterstr.bv_val = filtbuf;
1745 ava.aa_value = entryUUIDs[ s ];
1747 rc = op->o_bd->be_search( op, &rs );
1748 if ( rc != LDAP_SUCCESS ) {
1752 vals = (BerVarray)op->o_callback->sc_private;
1753 if ( vals != NULL ) {
1756 for ( i = 0; !BER_BVISNULL( &vals[ i ] ); i++ ) {
1757 struct berval val = vals[ i ];
1759 remove_query_and_data( op, &rs, cm, &val );
1761 if ( !BER_BVISNULL( &val ) && val.bv_val != vals[ i ].bv_val ) {
1762 ch_free( val.bv_val );
1766 ber_bvarray_free_x( vals, op->o_tmpmemctx );
1767 op->o_callback->sc_private = NULL;
1775 * Call that allows to remove a query from the cache.
1778 pcache_remove_query_from_cache(
1781 struct berval *queryid )
1783 Operation op2 = *op;
1784 SlapReply rs2 = { 0 };
1788 /* remove the selected query */
1789 remove_query_and_data( &op2, &rs2, cm, queryid );
1791 return LDAP_SUCCESS;
1795 * Call that allows to remove a set of queries related to an entry
1796 * from the cache; if queryid is not null, the entry must belong to
1797 * the query indicated by queryid.
1800 pcache_remove_entry_queries_from_cache(
1804 struct berval *queryid )
1806 Connection conn = { 0 };
1807 OperationBuffer opbuf;
1809 slap_callback sc = { 0 };
1810 SlapReply rs = { REP_RESULT };
1812 char filter_str[ LDAP_LUTIL_UUIDSTR_BUFSIZE + STRLENOF( "(queryId=)" ) ];
1813 AttributeAssertion ava = ATTRIBUTEASSERTION_INIT;
1814 AttributeName attrs[ 2 ] = { 0 };
1817 BerVarray vals = NULL;
1820 void *thrctx = ldap_pvt_thread_pool_context();
1822 connection_fake_init( &conn, &opbuf, thrctx );
1830 memset( &op->oq_search, 0, sizeof( op->oq_search ) );
1831 op->ors_scope = LDAP_SCOPE_BASE;
1832 op->ors_deref = LDAP_DEREF_NEVER;
1833 if ( queryid == NULL || BER_BVISNULL( queryid ) ) {
1834 BER_BVSTR( &op->ors_filterstr, "(objectClass=*)" );
1835 f.f_choice = LDAP_FILTER_PRESENT;
1836 f.f_desc = slap_schema.si_ad_objectClass;
1839 op->ors_filterstr.bv_len = snprintf( filter_str,
1840 sizeof( filter_str ), "(%s=%s)",
1841 ad_queryId->ad_cname.bv_val, queryid->bv_val );
1842 f.f_choice = LDAP_FILTER_EQUALITY;
1844 f.f_av_desc = ad_queryId;
1845 f.f_av_value = *queryid;
1847 op->ors_filter = &f;
1849 op->ors_tlimit = SLAP_NO_LIMIT;
1850 attrs[ 0 ].an_desc = ad_queryId;
1851 attrs[ 0 ].an_name = ad_queryId->ad_cname;
1852 op->ors_attrs = attrs;
1853 op->ors_attrsonly = 0;
1855 op->o_req_dn = *ndn;
1856 op->o_req_ndn = *ndn;
1858 op->o_tag = LDAP_REQ_SEARCH;
1859 op->o_protocol = LDAP_VERSION3;
1860 op->o_managedsait = SLAP_CONTROL_CRITICAL;
1862 op->o_dn = op->o_bd->be_rootdn;
1863 op->o_ndn = op->o_bd->be_rootndn;
1864 sc.sc_response = fetch_queryId_cb;
1865 op->o_callback = ≻
1867 rc = op->o_bd->be_search( op, &rs );
1868 if ( rc != LDAP_SUCCESS ) {
1872 vals = (BerVarray)op->o_callback->sc_private;
1873 if ( vals != NULL ) {
1876 for ( i = 0; !BER_BVISNULL( &vals[ i ] ); i++ ) {
1877 struct berval val = vals[ i ];
1879 remove_query_and_data( op, &rs, cm, &val );
1881 if ( !BER_BVISNULL( &val ) && val.bv_val != vals[ i ].bv_val ) {
1882 ch_free( val.bv_val );
1886 ber_bvarray_free_x( vals, op->o_tmpmemctx );
1889 return LDAP_SUCCESS;
1896 struct berval *query_uuid )
1898 struct search_info *si = op->o_callback->sc_private;
1899 slap_overinst *on = si->on;
1900 cache_manager *cm = on->on_bi.bi_private;
1903 struct berval crp_uuid;
1904 char uuidbuf[ LDAP_LUTIL_UUIDSTR_BUFSIZE ];
1906 Connection conn = {0};
1907 OperationBuffer opbuf;
1908 void *thrctx = ldap_pvt_thread_pool_context();
1910 query_uuid->bv_len = lutil_uuidstr(uuidbuf, sizeof(uuidbuf));
1911 ber_str2bv(uuidbuf, query_uuid->bv_len, 1, query_uuid);
1913 connection_fake_init2( &conn, &opbuf, thrctx, 0 );
1914 op_tmp = &opbuf.ob_op;
1915 op_tmp->o_bd = &cm->db;
1916 op_tmp->o_dn = cm->db.be_rootdn;
1917 op_tmp->o_ndn = cm->db.be_rootndn;
1919 Debug( pcache_debug, "UUID for query being added = %s\n",
1922 for ( e=si->head; e; e=si->head ) {
1923 si->head = e->e_private;
1924 e->e_private = NULL;
1925 while ( cm->cur_entries > (cm->max_entries) ) {
1926 BER_BVZERO( &crp_uuid );
1927 remove_query_and_data( op_tmp, rs, cm, &crp_uuid );
1930 return_val = merge_entry(op_tmp, e, query_uuid);
1931 ldap_pvt_thread_mutex_lock(&cm->cache_mutex);
1932 cm->cur_entries += return_val;
1933 Debug( pcache_debug,
1934 "ENTRY ADDED/MERGED, CACHED ENTRIES=%d\n",
1935 cm->cur_entries, 0, 0 );
1937 ldap_pvt_thread_mutex_unlock(&cm->cache_mutex);
1944 pcache_op_cleanup( Operation *op, SlapReply *rs ) {
1945 slap_callback *cb = op->o_callback;
1946 struct search_info *si = cb->sc_private;
1947 slap_overinst *on = si->on;
1948 cache_manager *cm = on->on_bi.bi_private;
1949 query_manager* qm = cm->qm;
1951 if ( rs->sr_type == REP_SEARCH ) {
1954 /* don't return more entries than requested by the client */
1955 if ( si->slimit && rs->sr_nentries >= si->slimit ) {
1956 si->slimit_exceeded = 1;
1959 /* If we haven't exceeded the limit for this query,
1960 * build a chain of answers to store. If we hit the
1961 * limit, empty the chain and ignore the rest.
1964 if ( si->count < si->max ) {
1966 e = entry_dup( rs->sr_entry );
1967 if ( !si->head ) si->head = e;
1968 if ( si->tail ) si->tail->e_private = e;
1974 for (;si->head; si->head=e) {
1975 e = si->head->e_private;
1976 si->head->e_private = NULL;
1977 entry_free(si->head);
1985 if ( rs->sr_type == REP_RESULT ||
1986 op->o_abandon || rs->sr_err == SLAPD_ABANDON )
1988 if ( si->swap_saved_attrs ) {
1989 rs->sr_attrs = si->save_attrs;
1990 op->ors_attrs = si->save_attrs;
1992 if ( (op->o_abandon || rs->sr_err == SLAPD_ABANDON) &&
1993 si->caching_reason == PC_IGNORE ) {
1994 filter_free( si->query.filter );
1996 /* duplicate query, free it */
1998 for (;si->head; si->head=e) {
1999 e = si->head->e_private;
2000 si->head->e_private = NULL;
2001 entry_free(si->head);
2004 op->o_callback = op->o_callback->sc_next;
2005 op->o_tmpfree( cb, op->o_tmpmemctx );
2006 } else if ( si->caching_reason != PC_IGNORE ) {
2007 CachedQuery *qc = qm->addfunc(op, qm, &si->query,
2008 si->qtemp, si->caching_reason, 1 );
2011 switch ( si->caching_reason ) {
2013 cache_entries( op, rs, &qc->q_uuid );
2017 qc->q_sizelimit = rs->sr_nentries;
2027 ldap_pvt_thread_rdwr_wunlock(&qc->rwlock);
2028 ldap_pvt_thread_mutex_lock(&cm->cache_mutex);
2029 cm->num_cached_queries++;
2030 Debug( pcache_debug, "STORED QUERIES = %lu\n",
2031 cm->num_cached_queries, 0, 0 );
2032 ldap_pvt_thread_mutex_unlock(&cm->cache_mutex);
2034 /* If the consistency checker suspended itself,
2037 if ( cm->cc_paused ) {
2038 ldap_pvt_thread_mutex_lock( &slapd_rq.rq_mutex );
2039 if ( cm->cc_paused ) {
2041 ldap_pvt_runqueue_resched( &slapd_rq, cm->cc_arg, 0 );
2043 ldap_pvt_thread_mutex_unlock( &slapd_rq.rq_mutex );
2046 } else if ( si->count ) {
2047 /* duplicate query, free it */
2049 for (;si->head; si->head=e) {
2050 e = si->head->e_private;
2051 si->head->e_private = NULL;
2052 entry_free(si->head);
2057 filter_free( si->query.filter );
2061 return SLAP_CB_CONTINUE;
2069 struct search_info *si = op->o_callback->sc_private;
2071 if ( si->swap_saved_attrs ) {
2072 rs->sr_attrs = si->save_attrs;
2073 op->ors_attrs = si->save_attrs;
2076 if ( rs->sr_type == REP_SEARCH ) {
2077 /* don't return more entries than requested by the client */
2078 if ( si->slimit_exceeded ) {
2082 } else if ( rs->sr_type == REP_RESULT ) {
2085 if ( rs->sr_err == LDAP_SUCCESS ) {
2086 si->caching_reason = PC_POSITIVE;
2088 } else if ( rs->sr_err == LDAP_SIZELIMIT_EXCEEDED
2089 && si->qtemp->limitttl )
2091 si->caching_reason = PC_SIZELIMIT;
2094 } else if ( si->qtemp->negttl && !si->count && !si->over &&
2095 rs->sr_err == LDAP_SUCCESS )
2097 si->caching_reason = PC_NEGATIVE;
2101 if ( si->slimit_exceeded ) {
2102 rs->sr_err = LDAP_SIZELIMIT_EXCEEDED;
2106 return SLAP_CB_CONTINUE;
2112 AttributeName** new_attrs,
2113 struct attr_set *attrs,
2114 AttributeName* filter_attrs,
2124 /* duplicate attrs */
2125 count = attrs->count + fattr_cnt;
2126 if ( !fattr_got_oc && !(attrs->flags & PC_GOT_OC)) {
2131 *new_attrs = (AttributeName*)ch_calloc( count + 1,
2132 sizeof(AttributeName) );
2133 for (i=0; i<attrs->count; i++) {
2134 (*new_attrs)[i].an_name = attrs->attrs[i].an_name;
2135 (*new_attrs)[i].an_desc = attrs->attrs[i].an_desc;
2137 BER_BVZERO( &(*new_attrs)[i].an_name );
2138 alluser = an_find(*new_attrs, &AllUser);
2139 allop = an_find(*new_attrs, &AllOper);
2142 for ( i=0; i<fattr_cnt; i++ ) {
2143 if ( an_find(*new_attrs, &filter_attrs[i].an_name ) ) {
2146 if ( is_at_operational(filter_attrs[i].an_desc->ad_type) ) {
2150 } else if ( alluser ) {
2153 (*new_attrs)[j].an_name = filter_attrs[i].an_name;
2154 (*new_attrs)[j].an_desc = filter_attrs[i].an_desc;
2155 (*new_attrs)[j].an_oc = NULL;
2156 (*new_attrs)[j].an_oc_exclude = 0;
2160 (*new_attrs)[j].an_name = slap_schema.si_ad_objectClass->ad_cname;
2161 (*new_attrs)[j].an_desc = slap_schema.si_ad_objectClass;
2162 (*new_attrs)[j].an_oc = NULL;
2163 (*new_attrs)[j].an_oc_exclude = 0;
2166 BER_BVZERO( &(*new_attrs)[j].an_name );
2171 /* NOTE: this is a quick workaround to let pcache minimally interact
2172 * with pagedResults. A more articulated solutions would be to
2173 * perform the remote query without control and cache all results,
2174 * performing the pagedResults search only within the client
2175 * and the proxy. This requires pcache to understand pagedResults. */
2177 pcache_chk_controls(
2181 const char *non = "";
2182 const char *stripped = "";
2184 switch( op->o_pagedresults ) {
2185 case SLAP_CONTROL_NONCRITICAL:
2187 stripped = "; stripped";
2190 case SLAP_CONTROL_CRITICAL:
2191 Debug( pcache_debug, "%s: "
2192 "%scritical pagedResults control "
2193 "disabled with proxy cache%s.\n",
2194 op->o_log_prefix, non, stripped );
2196 slap_remove_control( op, rs, slap_cids.sc_pagedResults, NULL );
2200 rs->sr_err = SLAP_CB_CONTINUE;
2207 #ifdef PCACHE_CONTROL_PRIVDB
2213 slap_overinst *on = (slap_overinst *)op->o_bd->bd_info;
2214 cache_manager *cm = on->on_bi.bi_private;
2215 slap_callback *save_cb;
2218 /* skip if control is unset */
2219 if ( op->o_ctrlflag[ privDB_cid ] != SLAP_CONTROL_CRITICAL ) {
2220 return SLAP_CB_CONTINUE;
2223 /* The cache DB isn't open yet */
2224 if ( cm->defer_db_open ) {
2225 send_ldap_error( op, rs, LDAP_UNAVAILABLE,
2226 "pcachePrivDB: cacheDB not available" );
2230 /* FIXME: might be a little bit exaggerated... */
2231 if ( !be_isroot( op ) ) {
2232 save_cb = op->o_callback;
2233 op->o_callback = NULL;
2234 send_ldap_error( op, rs, LDAP_UNWILLING_TO_PERFORM,
2235 "pcachePrivDB: operation not allowed" );
2236 op->o_callback = save_cb;
2241 /* map tag to operation */
2242 type = slap_req2op( op->o_tag );
2243 if ( type != SLAP_OP_LAST ) {
2247 /* execute, if possible */
2248 func = &cm->db.be_bind;
2249 if ( func[ type ] != NULL ) {
2250 Operation op2 = *op;
2254 rc = func[ type ]( &op2, rs );
2255 if ( type == SLAP_OP_BIND && rc == LDAP_SUCCESS ) {
2256 op->o_conn->c_authz_cookie = cm->db.be_private;
2261 /* otherwise fall back to error */
2262 save_cb = op->o_callback;
2263 op->o_callback = NULL;
2264 send_ldap_error( op, rs, LDAP_UNWILLING_TO_PERFORM,
2265 "operation not supported with pcachePrivDB control" );
2266 op->o_callback = save_cb;
2270 #endif /* PCACHE_CONTROL_PRIVDB */
2277 slap_overinst *on = (slap_overinst *)op->o_bd->bd_info;
2278 cache_manager *cm = on->on_bi.bi_private;
2279 query_manager* qm = cm->qm;
2283 AttributeName *filter_attrs = NULL;
2286 QueryTemplate *qtemp = NULL;
2289 CachedQuery *answerable = NULL;
2292 int fattr_got_oc = 0;
2294 struct berval tempstr;
2296 #ifdef PCACHE_CONTROL_PRIVDB
2297 if ( op->o_ctrlflag[ privDB_cid ] == SLAP_CONTROL_CRITICAL ) {
2298 return pcache_op_privdb( op, rs );
2300 #endif /* PCACHE_CONTROL_PRIVDB */
2302 /* The cache DB isn't open yet */
2303 if ( cm->defer_db_open ) {
2304 send_ldap_error( op, rs, LDAP_UNAVAILABLE,
2305 "pcachePrivDB: cacheDB not available" );
2309 tempstr.bv_val = op->o_tmpalloc( op->ors_filterstr.bv_len+1, op->o_tmpmemctx );
2311 if ( filter2template( op, op->ors_filter, &tempstr, &filter_attrs,
2312 &fattr_cnt, &fattr_got_oc )) {
2313 op->o_tmpfree( tempstr.bv_val, op->o_tmpmemctx );
2314 return SLAP_CB_CONTINUE;
2317 Debug( pcache_debug, "query template of incoming query = %s\n",
2318 tempstr.bv_val, 0, 0 );
2320 /* FIXME: cannot cache/answer requests with pagedResults control */
2323 attr_set = get_attr_set(op->ors_attrs, qm, cm->numattrsets);
2325 query.filter = op->ors_filter;
2326 query.base = op->o_req_ndn;
2327 query.scope = op->ors_scope;
2329 /* check for query containment */
2330 if (attr_set > -1) {
2331 QueryTemplate *qt = qm->attr_sets[attr_set].templates;
2332 for (; qt; qt = qt->qtnext ) {
2333 /* find if template i can potentially answer tempstr */
2334 if (qt->querystr.bv_len != tempstr.bv_len ||
2335 strcasecmp( qt->querystr.bv_val, tempstr.bv_val ))
2339 Debug( pcache_debug, "Entering QC, querystr = %s\n",
2340 op->ors_filterstr.bv_val, 0, 0 );
2341 answerable = (*(qm->qcfunc))(op, qm, &query, qt);
2347 op->o_tmpfree( tempstr.bv_val, op->o_tmpmemctx );
2350 /* Need to clear the callbacks of the original operation,
2351 * in case there are other overlays */
2352 BackendDB *save_bd = op->o_bd;
2353 slap_callback *save_cb = op->o_callback;
2355 Debug( pcache_debug, "QUERY ANSWERABLE\n", 0, 0, 0 );
2356 op->o_tmpfree( filter_attrs, op->o_tmpmemctx );
2357 ldap_pvt_thread_rdwr_rlock(&answerable->rwlock);
2358 if ( BER_BVISNULL( &answerable->q_uuid )) {
2359 /* No entries cached, just an empty result set */
2361 send_ldap_result( op, rs );
2364 op->o_callback = NULL;
2365 i = cm->db.bd_info->bi_op_search( op, rs );
2367 ldap_pvt_thread_rdwr_runlock(&answerable->rwlock);
2368 ldap_pvt_thread_rdwr_runlock(&qtemp->t_rwlock);
2370 op->o_callback = save_cb;
2374 Debug( pcache_debug, "QUERY NOT ANSWERABLE\n", 0, 0, 0 );
2376 ldap_pvt_thread_mutex_lock(&cm->cache_mutex);
2377 if (cm->num_cached_queries >= cm->max_queries) {
2380 ldap_pvt_thread_mutex_unlock(&cm->cache_mutex);
2382 if (op->ors_attrsonly)
2387 struct search_info *si;
2389 Debug( pcache_debug, "QUERY CACHEABLE\n", 0, 0, 0 );
2390 query.filter = filter_dup(op->ors_filter, NULL);
2391 ldap_pvt_thread_rdwr_wlock(&qtemp->t_rwlock);
2392 if ( !qtemp->t_attrs.count ) {
2393 qtemp->t_attrs.count = add_filter_attrs(op,
2394 &qtemp->t_attrs.attrs,
2395 &qm->attr_sets[attr_set],
2396 filter_attrs, fattr_cnt, fattr_got_oc);
2398 ldap_pvt_thread_rdwr_wunlock(&qtemp->t_rwlock);
2400 cb = op->o_tmpalloc( sizeof(*cb) + sizeof(*si), op->o_tmpmemctx );
2401 cb->sc_response = pcache_response;
2402 cb->sc_cleanup = pcache_op_cleanup;
2403 cb->sc_private = (cb+1);
2404 si = cb->sc_private;
2408 si->max = cm->num_entries_limit ;
2412 si->slimit_exceeded = 0;
2413 si->caching_reason = PC_IGNORE;
2414 if ( op->ors_slimit && op->ors_slimit < cm->num_entries_limit ) {
2415 si->slimit = op->ors_slimit;
2416 op->ors_slimit = cm->num_entries_limit;
2420 si->swap_saved_attrs = 1;
2421 si->save_attrs = op->ors_attrs;
2423 op->ors_attrs = qtemp->t_attrs.attrs;
2425 if ( cm->response_cb == PCACHE_RESPONSE_CB_HEAD ) {
2426 cb->sc_next = op->o_callback;
2427 op->o_callback = cb;
2430 slap_callback **pcb;
2432 /* need to move the callback at the end, in case other
2433 * overlays are present, so that the final entry is
2434 * actually cached */
2436 for ( pcb = &op->o_callback; *pcb; pcb = &(*pcb)->sc_next );
2441 Debug( pcache_debug, "QUERY NOT CACHEABLE\n",
2445 op->o_tmpfree( filter_attrs, op->o_tmpmemctx );
2447 return SLAP_CB_CONTINUE;
2452 AttributeName* attrs,
2460 for ( ; attrs[count].an_name.bv_val; count++ );
2463 /* recognize a single "*" or a "1.1" */
2466 attrs = slap_anlist_all_user_attributes;
2468 } else if ( count == 1 && strcmp( attrs[0].an_name.bv_val, LDAP_NO_ATTRS ) == 0 ) {
2473 for ( i = 0; i < num; i++ ) {
2477 if ( count > qm->attr_sets[i].count ) {
2482 if ( !qm->attr_sets[i].count ) {
2488 for ( a2 = attrs; a2->an_name.bv_val; a2++ ) {
2489 if ( !an_find( qm->attr_sets[i].attrs, &a2->an_name ) ) {
2512 struct re_s *rtask = arg;
2513 slap_overinst *on = rtask->arg;
2514 cache_manager *cm = on->on_bi.bi_private;
2515 query_manager *qm = cm->qm;
2516 Connection conn = {0};
2517 OperationBuffer opbuf;
2520 SlapReply rs = {REP_RESULT};
2522 int return_val, pause = 1;
2523 QueryTemplate* templ;
2525 connection_fake_init( &conn, &opbuf, ctx );
2529 op->o_dn = cm->db.be_rootdn;
2530 op->o_ndn = cm->db.be_rootndn;
2534 for (templ = qm->templates; templ; templ=templ->qmnext) {
2535 query = templ->query_last;
2536 if ( query ) pause = 0;
2537 op->o_time = slap_get_time();
2538 while (query && (query->expiry_time < op->o_time)) {
2540 Debug( pcache_debug, "Lock CR index = %p\n",
2541 (void *) templ, 0, 0 );
2542 ldap_pvt_thread_rdwr_wlock(&templ->t_rwlock);
2543 if ( query == templ->query_last ) {
2545 remove_from_template(query, templ);
2546 Debug( pcache_debug, "TEMPLATE %p QUERIES-- %d\n",
2547 (void *) templ, templ->no_of_queries, 0 );
2548 Debug( pcache_debug, "Unlock CR index = %p\n",
2549 (void *) templ, 0, 0 );
2551 ldap_pvt_thread_rdwr_wunlock(&templ->t_rwlock);
2553 query = templ->query_last;
2556 ldap_pvt_thread_mutex_lock(&qm->lru_mutex);
2557 remove_query(qm, query);
2558 ldap_pvt_thread_mutex_unlock(&qm->lru_mutex);
2559 if ( BER_BVISNULL( &query->q_uuid ))
2562 return_val = remove_query_data(op, &rs, &query->q_uuid);
2563 Debug( pcache_debug, "STALE QUERY REMOVED, SIZE=%d\n",
2565 ldap_pvt_thread_mutex_lock(&cm->cache_mutex);
2566 cm->cur_entries -= return_val;
2567 cm->num_cached_queries--;
2568 Debug( pcache_debug, "STORED QUERIES = %lu\n",
2569 cm->num_cached_queries, 0, 0 );
2570 ldap_pvt_thread_mutex_unlock(&cm->cache_mutex);
2571 Debug( pcache_debug,
2572 "STALE QUERY REMOVED, CACHE ="
2574 cm->cur_entries, 0, 0 );
2576 query = templ->query_last;
2579 ldap_pvt_thread_mutex_lock( &slapd_rq.rq_mutex );
2580 if ( ldap_pvt_runqueue_isrunning( &slapd_rq, rtask )) {
2581 ldap_pvt_runqueue_stoptask( &slapd_rq, rtask );
2583 /* If there were no queries, defer processing for a while */
2584 cm->cc_paused = pause;
2585 ldap_pvt_runqueue_resched( &slapd_rq, rtask, pause );
2587 ldap_pvt_thread_mutex_unlock( &slapd_rq.rq_mutex );
2592 #define MAX_ATTR_SETS 500
2602 static ConfigDriver pc_cf_gen;
2603 static ConfigLDAPadd pc_ldadd;
2604 static ConfigCfAdd pc_cfadd;
2606 static ConfigTable pccfg[] = {
2607 { "proxycache", "backend> <max_entries> <numattrsets> <entry limit> "
2609 6, 6, 0, ARG_MAGIC|ARG_NO_DELETE|PC_MAIN, pc_cf_gen,
2610 "( OLcfgOvAt:2.1 NAME 'olcProxyCache' "
2611 "DESC 'ProxyCache basic parameters' "
2612 "SYNTAX OMsDirectoryString SINGLE-VALUE )", NULL, NULL },
2613 { "proxyattrset", "index> <attributes...",
2614 2, 0, 0, ARG_MAGIC|PC_ATTR, pc_cf_gen,
2615 "( OLcfgOvAt:2.2 NAME 'olcProxyAttrset' "
2616 "DESC 'A set of attributes to cache' "
2617 "SYNTAX OMsDirectoryString )", NULL, NULL },
2618 { "proxytemplate", "filter> <attrset-index> <TTL> <negTTL",
2619 4, 6, 0, ARG_MAGIC|PC_TEMP, pc_cf_gen,
2620 "( OLcfgOvAt:2.3 NAME 'olcProxyTemplate' "
2621 "DESC 'Filter template, attrset, cache TTL, "
2622 "optional negative TTL, optional sizelimit TTL' "
2623 "SYNTAX OMsDirectoryString )", NULL, NULL },
2624 { "response-callback", "head|tail(default)",
2625 2, 2, 0, ARG_MAGIC|PC_RESP, pc_cf_gen,
2626 "( OLcfgOvAt:2.4 NAME 'olcProxyResponseCB' "
2627 "DESC 'Response callback position in overlay stack' "
2628 "SYNTAX OMsDirectoryString )", NULL, NULL },
2629 { "proxyCacheQueries", "queries",
2630 2, 2, 0, ARG_INT|ARG_MAGIC|PC_QUERIES, pc_cf_gen,
2631 "( OLcfgOvAt:2.5 NAME 'olcProxyCacheQueries' "
2632 "DESC 'Maximum number of queries to cache' "
2633 "SYNTAX OMsInteger )", NULL, NULL },
2634 { "proxySaveQueries", "TRUE|FALSE",
2635 2, 2, 0, ARG_ON_OFF|ARG_OFFSET, (void *)offsetof(cache_manager, save_queries),
2636 "( OLcfgOvAt:2.6 NAME 'olcProxySaveQueries' "
2637 "DESC 'Save cached queries for hot restart' "
2638 "SYNTAX OMsBoolean )", NULL, NULL },
2640 { NULL, NULL, 0, 0, 0, ARG_IGNORED }
2643 /* Need to no-op this keyword for dynamic config */
2644 static ConfigTable pcdummy[] = {
2645 { "", "", 0, 0, 0, ARG_IGNORED,
2646 NULL, "( OLcfgGlAt:13 NAME 'olcDatabase' "
2647 "DESC 'The backend type for a database instance' "
2648 "SUP olcBackend SINGLE-VALUE X-ORDERED 'SIBLINGS' )", NULL, NULL },
2649 { NULL, NULL, 0, 0, 0, ARG_IGNORED }
2652 static ConfigOCs pcocs[] = {
2653 { "( OLcfgOvOc:2.1 "
2654 "NAME 'olcPcacheConfig' "
2655 "DESC 'ProxyCache configuration' "
2656 "SUP olcOverlayConfig "
2657 "MUST ( olcProxyCache $ olcProxyAttrset $ olcProxyTemplate ) "
2658 "MAY ( olcProxyResponseCB $ olcProxyCacheQueries $ olcProxySaveQueries ) )",
2659 Cft_Overlay, pccfg, NULL, pc_cfadd },
2660 { "( OLcfgOvOc:2.2 "
2661 "NAME 'olcPcacheDatabase' "
2662 "DESC 'Cache database configuration' "
2663 "AUXILIARY )", Cft_Misc, pcdummy, pc_ldadd },
2667 static int pcache_db_open2( slap_overinst *on, ConfigReply *cr );
2670 pc_ldadd_cleanup( ConfigArgs *c )
2672 slap_overinst *on = c->ca_private;
2673 return pcache_db_open2( on, &c->reply );
2677 pc_ldadd( CfEntryInfo *p, Entry *e, ConfigArgs *ca )
2682 if ( p->ce_type != Cft_Overlay || !p->ce_bi ||
2683 p->ce_bi->bi_cf_ocs != pcocs )
2684 return LDAP_CONSTRAINT_VIOLATION;
2686 on = (slap_overinst *)p->ce_bi;
2687 cm = on->on_bi.bi_private;
2689 /* Defer open if this is an LDAPadd */
2690 if ( CONFIG_ONLINE_ADD( ca ))
2691 ca->cleanup = pc_ldadd_cleanup;
2693 cm->defer_db_open = 0;
2694 ca->ca_private = on;
2695 return LDAP_SUCCESS;
2699 pc_cfadd( Operation *op, SlapReply *rs, Entry *p, ConfigArgs *ca )
2701 CfEntryInfo *pe = p->e_private;
2702 slap_overinst *on = (slap_overinst *)pe->ce_bi;
2703 cache_manager *cm = on->on_bi.bi_private;
2706 /* FIXME: should not hardcode "olcDatabase" here */
2707 bv.bv_len = snprintf( ca->cr_msg, sizeof( ca->cr_msg ),
2708 "olcDatabase=%s", cm->db.bd_info->bi_type );
2709 if ( bv.bv_len < 0 || bv.bv_len >= sizeof( ca->cr_msg ) ) {
2712 bv.bv_val = ca->cr_msg;
2714 cm->defer_db_open = 0;
2716 /* We can only create this entry if the database is table-driven
2718 if ( cm->db.bd_info->bi_cf_ocs )
2719 config_build_entry( op, rs, pe, ca, &bv, cm->db.bd_info->bi_cf_ocs,
2726 pc_cf_gen( ConfigArgs *c )
2728 slap_overinst *on = (slap_overinst *)c->bi;
2729 cache_manager* cm = on->on_bi.bi_private;
2730 query_manager* qm = cm->qm;
2731 QueryTemplate* temp;
2732 AttributeName* attr_name;
2733 AttributeName* attrarray;
2734 const char* text=NULL;
2739 if ( c->op == SLAP_CONFIG_EMIT ) {
2743 bv.bv_len = snprintf( c->cr_msg, sizeof( c->cr_msg ), "%s %d %d %d %ld",
2744 cm->db.bd_info->bi_type, cm->max_entries, cm->numattrsets,
2745 cm->num_entries_limit, cm->cc_period );
2746 bv.bv_val = c->cr_msg;
2747 value_add_one( &c->rvalue_vals, &bv );
2750 for (i=0; i<cm->numattrsets; i++) {
2751 if ( !qm->attr_sets[i].count ) continue;
2753 bv.bv_len = snprintf( c->cr_msg, sizeof( c->cr_msg ), "%d", i );
2755 /* count the attr length */
2756 for ( attr_name = qm->attr_sets[i].attrs;
2757 attr_name->an_name.bv_val; attr_name++ )
2758 bv.bv_len += attr_name->an_name.bv_len + 1;
2760 bv.bv_val = ch_malloc( bv.bv_len+1 );
2761 ptr = lutil_strcopy( bv.bv_val, c->cr_msg );
2762 for ( attr_name = qm->attr_sets[i].attrs;
2763 attr_name->an_name.bv_val; attr_name++ ) {
2765 ptr = lutil_strcopy( ptr, attr_name->an_name.bv_val );
2767 ber_bvarray_add( &c->rvalue_vals, &bv );
2769 if ( !c->rvalue_vals )
2773 for (temp=qm->templates; temp; temp=temp->qmnext) {
2774 /* HEADS-UP: always print all;
2775 * if optional == 0, ignore */
2776 bv.bv_len = snprintf( c->cr_msg, sizeof( c->cr_msg ),
2778 temp->attr_set_index,
2782 bv.bv_len += temp->querystr.bv_len + 2;
2783 bv.bv_val = ch_malloc( bv.bv_len+1 );
2786 ptr = lutil_strcopy( ptr, temp->querystr.bv_val );
2788 strcpy( ptr, c->cr_msg );
2789 ber_bvarray_add( &c->rvalue_vals, &bv );
2791 if ( !c->rvalue_vals )
2795 if ( cm->response_cb == PCACHE_RESPONSE_CB_HEAD ) {
2796 BER_BVSTR( &bv, "head" );
2798 BER_BVSTR( &bv, "tail" );
2800 value_add_one( &c->rvalue_vals, &bv );
2803 c->value_int = cm->max_queries;
2807 } else if ( c->op == LDAP_MOD_DELETE ) {
2808 return 1; /* FIXME */
2820 if ( cm->numattrsets > 0 ) {
2821 snprintf( c->cr_msg, sizeof( c->cr_msg ), "\"proxycache\" directive already provided" );
2822 Debug( LDAP_DEBUG_CONFIG, "%s: %s.\n", c->log, c->cr_msg, 0 );
2826 if ( lutil_atoi( &cm->numattrsets, c->argv[3] ) != 0 ) {
2827 snprintf( c->cr_msg, sizeof( c->cr_msg ), "unable to parse num attrsets=\"%s\" (arg #3)",
2829 Debug( LDAP_DEBUG_CONFIG, "%s: %s.\n", c->log, c->cr_msg, 0 );
2832 if ( cm->numattrsets <= 0 ) {
2833 snprintf( c->cr_msg, sizeof( c->cr_msg ), "numattrsets (arg #3) must be positive" );
2834 Debug( LDAP_DEBUG_CONFIG, "%s: %s.\n", c->log, c->cr_msg, 0 );
2837 if ( cm->numattrsets > MAX_ATTR_SETS ) {
2838 snprintf( c->cr_msg, sizeof( c->cr_msg ), "numattrsets (arg #3) must be <= %d", MAX_ATTR_SETS );
2839 Debug( LDAP_DEBUG_CONFIG, "%s: %s.\n", c->log, c->cr_msg, 0 );
2843 if ( !backend_db_init( c->argv[1], &cm->db, -1, NULL )) {
2844 snprintf( c->cr_msg, sizeof( c->cr_msg ), "unknown backend type (arg #1)" );
2845 Debug( LDAP_DEBUG_CONFIG, "%s: %s.\n", c->log, c->cr_msg, 0 );
2849 if ( lutil_atoi( &cm->max_entries, c->argv[2] ) != 0 ) {
2850 snprintf( c->cr_msg, sizeof( c->cr_msg ), "unable to parse max entries=\"%s\" (arg #2)",
2852 Debug( LDAP_DEBUG_CONFIG, "%s: %s.\n", c->log, c->cr_msg, 0 );
2855 if ( cm->max_entries <= 0 ) {
2856 snprintf( c->cr_msg, sizeof( c->cr_msg ), "max entries (arg #2) must be positive.\n" );
2857 Debug( LDAP_DEBUG_CONFIG, "%s: %s\n", c->log, c->cr_msg, 0 );
2861 if ( lutil_atoi( &cm->num_entries_limit, c->argv[4] ) != 0 ) {
2862 snprintf( c->cr_msg, sizeof( c->cr_msg ), "unable to parse entry limit=\"%s\" (arg #4)",
2864 Debug( LDAP_DEBUG_CONFIG, "%s: %s.\n", c->log, c->cr_msg, 0 );
2867 if ( cm->num_entries_limit <= 0 ) {
2868 snprintf( c->cr_msg, sizeof( c->cr_msg ), "entry limit (arg #4) must be positive" );
2869 Debug( LDAP_DEBUG_CONFIG, "%s: %s.\n", c->log, c->cr_msg, 0 );
2872 if ( cm->num_entries_limit > cm->max_entries ) {
2873 snprintf( c->cr_msg, sizeof( c->cr_msg ), "entry limit (arg #4) must be less than max entries %d (arg #2)", cm->max_entries );
2874 Debug( LDAP_DEBUG_CONFIG, "%s: %s.\n", c->log, c->cr_msg, 0 );
2878 if ( lutil_parse_time( c->argv[5], &t ) != 0 ) {
2879 snprintf( c->cr_msg, sizeof( c->cr_msg ), "unable to parse period=\"%s\" (arg #5)",
2881 Debug( LDAP_DEBUG_CONFIG, "%s: %s.\n", c->log, c->cr_msg, 0 );
2885 cm->cc_period = (time_t)t;
2886 Debug( pcache_debug,
2887 "Total # of attribute sets to be cached = %d.\n",
2888 cm->numattrsets, 0, 0 );
2889 qm->attr_sets = ( struct attr_set * )ch_calloc( cm->numattrsets,
2890 sizeof( struct attr_set ) );
2893 if ( cm->numattrsets == 0 ) {
2894 snprintf( c->cr_msg, sizeof( c->cr_msg ), "\"proxycache\" directive not provided yet" );
2895 Debug( LDAP_DEBUG_CONFIG, "%s: %s.\n", c->log, c->cr_msg, 0 );
2898 if ( lutil_atoi( &num, c->argv[1] ) != 0 ) {
2899 snprintf( c->cr_msg, sizeof( c->cr_msg ), "unable to parse attrset #=\"%s\"",
2901 Debug( LDAP_DEBUG_CONFIG, "%s: %s.\n", c->log, c->cr_msg, 0 );
2905 if ( num < 0 || num >= cm->numattrsets ) {
2906 snprintf( c->cr_msg, sizeof( c->cr_msg ), "attrset index %d out of bounds (must be %s%d)",
2907 num, cm->numattrsets > 1 ? "0->" : "", cm->numattrsets - 1 );
2908 Debug( LDAP_DEBUG_CONFIG, "%s: %s.\n", c->log, c->cr_msg, 0 );
2911 qm->attr_sets[num].flags |= PC_CONFIGURED;
2912 if ( c->argc == 2 ) {
2914 snprintf( c->cr_msg, sizeof( c->cr_msg ),
2915 "need an explicit attr in attrlist; use \"*\" to indicate all attrs" );
2916 Debug( LDAP_DEBUG_CONFIG, "%s: %s.\n", c->log, c->cr_msg, 0 );
2919 } else if ( c->argc == 3 ) {
2920 if ( strcmp( c->argv[2], LDAP_ALL_USER_ATTRIBUTES ) == 0 ) {
2921 qm->attr_sets[num].count = 1;
2922 qm->attr_sets[num].attrs = (AttributeName*)ch_calloc( 2,
2923 sizeof( AttributeName ) );
2924 BER_BVSTR( &qm->attr_sets[num].attrs[0].an_name, LDAP_ALL_USER_ATTRIBUTES );
2927 } else if ( strcmp( c->argv[2], LDAP_ALL_OPERATIONAL_ATTRIBUTES ) == 0 ) {
2928 qm->attr_sets[num].count = 1;
2929 qm->attr_sets[num].attrs = (AttributeName*)ch_calloc( 2,
2930 sizeof( AttributeName ) );
2931 BER_BVSTR( &qm->attr_sets[num].attrs[0].an_name, LDAP_ALL_OPERATIONAL_ATTRIBUTES );
2934 } else if ( strcmp( c->argv[2], LDAP_NO_ATTRS ) == 0 ) {
2937 /* else: fallthru */
2939 } else if ( c->argc == 4 ) {
2940 if ( ( strcmp( c->argv[2], LDAP_ALL_USER_ATTRIBUTES ) == 0 && strcmp( c->argv[3], LDAP_ALL_OPERATIONAL_ATTRIBUTES ) == 0 )
2941 || ( strcmp( c->argv[2], LDAP_ALL_OPERATIONAL_ATTRIBUTES ) == 0 && strcmp( c->argv[3], LDAP_ALL_USER_ATTRIBUTES ) == 0 ) )
2943 qm->attr_sets[num].count = 2;
2944 qm->attr_sets[num].attrs = (AttributeName*)ch_calloc( 3,
2945 sizeof( AttributeName ) );
2946 BER_BVSTR( &qm->attr_sets[num].attrs[0].an_name, LDAP_ALL_USER_ATTRIBUTES );
2947 BER_BVSTR( &qm->attr_sets[num].attrs[1].an_name, LDAP_ALL_OPERATIONAL_ATTRIBUTES );
2950 /* else: fallthru */
2953 if ( c->argc > 2 ) {
2954 int all_user = 0, all_op = 0;
2956 qm->attr_sets[num].count = c->argc - 2;
2957 qm->attr_sets[num].attrs = (AttributeName*)ch_calloc( c->argc - 1,
2958 sizeof( AttributeName ) );
2959 attr_name = qm->attr_sets[num].attrs;
2960 for ( i = 2; i < c->argc; i++ ) {
2961 attr_name->an_desc = NULL;
2962 if ( strcmp( c->argv[i], LDAP_NO_ATTRS ) == 0 ) {
2963 snprintf( c->cr_msg, sizeof( c->cr_msg ),
2964 "invalid attr #%d \"%s\" in attrlist",
2965 i - 2, c->argv[i] );
2966 Debug( LDAP_DEBUG_CONFIG, "%s: %s.\n", c->log, c->cr_msg, 0 );
2967 ch_free( qm->attr_sets[num].attrs );
2968 qm->attr_sets[num].attrs = NULL;
2969 qm->attr_sets[num].count = 0;
2972 if ( strcmp( c->argv[i], LDAP_ALL_USER_ATTRIBUTES ) == 0 ) {
2974 BER_BVSTR( &attr_name->an_name, LDAP_ALL_USER_ATTRIBUTES );
2975 } else if ( strcmp( c->argv[i], LDAP_ALL_OPERATIONAL_ATTRIBUTES ) == 0 ) {
2977 BER_BVSTR( &attr_name->an_name, LDAP_ALL_OPERATIONAL_ATTRIBUTES );
2979 if ( slap_str2ad( c->argv[i], &attr_name->an_desc, &text ) ) {
2980 strcpy( c->cr_msg, text );
2981 Debug( LDAP_DEBUG_CONFIG, "%s: %s.\n", c->log, c->cr_msg, 0 );
2982 ch_free( qm->attr_sets[num].attrs );
2983 qm->attr_sets[num].attrs = NULL;
2984 qm->attr_sets[num].count = 0;
2987 attr_name->an_name = attr_name->an_desc->ad_cname;
2989 attr_name->an_oc = NULL;
2990 attr_name->an_oc_exclude = 0;
2991 if ( attr_name->an_desc == slap_schema.si_ad_objectClass )
2992 qm->attr_sets[num].flags |= PC_GOT_OC;
2994 BER_BVZERO( &attr_name->an_name );
2997 /* warn if list contains both "*" and "+" */
2998 if ( i > 4 && all_user && all_op ) {
2999 snprintf( c->cr_msg, sizeof( c->cr_msg ),
3000 "warning: attribute list contains \"*\" and \"+\"" );
3001 Debug( LDAP_DEBUG_CONFIG, "%s: %s.\n", c->log, c->cr_msg, 0 );
3006 if ( cm->numattrsets == 0 ) {
3007 snprintf( c->cr_msg, sizeof( c->cr_msg ), "\"proxycache\" directive not provided yet" );
3008 Debug( LDAP_DEBUG_CONFIG, "%s: %s.\n", c->log, c->cr_msg, 0 );
3011 if ( lutil_atoi( &i, c->argv[2] ) != 0 ) {
3012 snprintf( c->cr_msg, sizeof( c->cr_msg ), "unable to parse template #=\"%s\"",
3014 Debug( LDAP_DEBUG_CONFIG, "%s: %s.\n", c->log, c->cr_msg, 0 );
3018 if ( i < 0 || i >= cm->numattrsets ||
3019 !(qm->attr_sets[i].flags & PC_CONFIGURED )) {
3020 snprintf( c->cr_msg, sizeof( c->cr_msg ), "template index %d invalid (%s%d)",
3021 i, cm->numattrsets > 1 ? "0->" : "", cm->numattrsets - 1 );
3022 Debug( LDAP_DEBUG_CONFIG, "%s: %s.\n", c->log, c->cr_msg, 0 );
3025 temp = ch_calloc( 1, sizeof( QueryTemplate ));
3026 temp->qmnext = qm->templates;
3027 qm->templates = temp;
3028 ldap_pvt_thread_rdwr_init( &temp->t_rwlock );
3029 temp->query = temp->query_last = NULL;
3030 if ( lutil_parse_time( c->argv[3], &t ) != 0 ) {
3031 snprintf( c->cr_msg, sizeof( c->cr_msg ),
3032 "unable to parse template ttl=\"%s\"",
3034 Debug( LDAP_DEBUG_CONFIG, "%s: %s.\n", c->log, c->cr_msg, 0 );
3037 temp->ttl = (time_t)t;
3038 temp->negttl = (time_t)0;
3039 temp->limitttl = (time_t)0;
3040 switch ( c->argc ) {
3042 if ( lutil_parse_time( c->argv[5], &t ) != 0 ) {
3043 snprintf( c->cr_msg, sizeof( c->cr_msg ),
3044 "unable to parse template sizelimit ttl=\"%s\"",
3046 Debug( LDAP_DEBUG_CONFIG, "%s: %s.\n", c->log, c->cr_msg, 0 );
3049 temp->limitttl = (time_t)t;
3053 if ( lutil_parse_time( c->argv[4], &t ) != 0 ) {
3054 snprintf( c->cr_msg, sizeof( c->cr_msg ),
3055 "unable to parse template negative ttl=\"%s\"",
3057 Debug( LDAP_DEBUG_CONFIG, "%s: %s.\n", c->log, c->cr_msg, 0 );
3060 temp->negttl = (time_t)t;
3064 temp->no_of_queries = 0;
3066 ber_str2bv( c->argv[1], 0, 1, &temp->querystr );
3067 Debug( pcache_debug, "Template:\n", 0, 0, 0 );
3068 Debug( pcache_debug, " query template: %s\n",
3069 temp->querystr.bv_val, 0, 0 );
3070 temp->attr_set_index = i;
3071 qm->attr_sets[i].flags |= PC_REFERENCED;
3072 temp->qtnext = qm->attr_sets[i].templates;
3073 qm->attr_sets[i].templates = temp;
3074 Debug( pcache_debug, " attributes: \n", 0, 0, 0 );
3075 if ( ( attrarray = qm->attr_sets[i].attrs ) != NULL ) {
3076 for ( i=0; attrarray[i].an_name.bv_val; i++ )
3077 Debug( pcache_debug, "\t%s\n",
3078 attrarray[i].an_name.bv_val, 0, 0 );
3082 if ( strcasecmp( c->argv[1], "head" ) == 0 ) {
3083 cm->response_cb = PCACHE_RESPONSE_CB_HEAD;
3085 } else if ( strcasecmp( c->argv[1], "tail" ) == 0 ) {
3086 cm->response_cb = PCACHE_RESPONSE_CB_TAIL;
3089 snprintf( c->cr_msg, sizeof( c->cr_msg ), "unknown specifier" );
3090 Debug( LDAP_DEBUG_CONFIG, "%s: %s.\n", c->log, c->cr_msg, 0 );
3095 if ( c->value_int <= 0 ) {
3096 snprintf( c->cr_msg, sizeof( c->cr_msg ), "max queries must be positive" );
3097 Debug( LDAP_DEBUG_CONFIG, "%s: %s.\n", c->log, c->cr_msg, 0 );
3100 cm->max_queries = c->value_int;
3115 slap_overinst *on = (slap_overinst *)be->bd_info;
3116 cache_manager* cm = on->on_bi.bi_private;
3118 /* Something for the cache database? */
3119 if ( cm->db.bd_info && cm->db.bd_info->bi_db_config )
3120 return cm->db.bd_info->bi_db_config( &cm->db, fname, lineno,
3122 return SLAP_CONF_UNKNOWN;
3130 slap_overinst *on = (slap_overinst *)be->bd_info;
3134 cm = (cache_manager *)ch_malloc(sizeof(cache_manager));
3135 on->on_bi.bi_private = cm;
3137 qm = (query_manager*)ch_malloc(sizeof(query_manager));
3140 SLAP_DBFLAGS(&cm->db) |= SLAP_DBFLAG_NO_SCHEMA_CHECK;
3141 cm->db.be_private = NULL;
3142 cm->db.be_pcl_mutexp = &cm->db.be_pcl_mutex;
3144 cm->numattrsets = 0;
3145 cm->num_entries_limit = 5;
3146 cm->num_cached_queries = 0;
3147 cm->max_entries = 0;
3148 cm->cur_entries = 0;
3149 cm->max_queries = 10000;
3150 cm->save_queries = 0;
3151 cm->response_cb = PCACHE_RESPONSE_CB_TAIL;
3152 cm->defer_db_open = 1;
3153 cm->cc_period = 1000;
3157 qm->attr_sets = NULL;
3158 qm->templates = NULL;
3160 qm->lru_bottom = NULL;
3162 qm->qcfunc = query_containment;
3163 qm->crfunc = cache_replacement;
3164 qm->addfunc = add_query;
3165 ldap_pvt_thread_mutex_init(&qm->lru_mutex);
3167 ldap_pvt_thread_mutex_init(&cm->cache_mutex);
3172 pcache_cachedquery_open_cb( Operation *op, SlapReply *rs )
3174 assert( op->o_tag == LDAP_REQ_SEARCH );
3176 if ( rs->sr_type == REP_SEARCH ) {
3179 a = attr_find( rs->sr_entry->e_attrs, ad_cachedQueryURL );
3183 assert( a->a_nvals != NULL );
3185 valsp = op->o_callback->sc_private;
3186 assert( *valsp == NULL );
3188 ber_bvarray_dup_x( valsp, a->a_nvals, op->o_tmpmemctx );
3196 pcache_cachedquery_count_cb( Operation *op, SlapReply *rs )
3198 assert( op->o_tag == LDAP_REQ_SEARCH );
3200 if ( rs->sr_type == REP_SEARCH ) {
3201 int *countp = (int *)op->o_callback->sc_private;
3214 cache_manager *cm = on->on_bi.bi_private;
3215 query_manager* qm = cm->qm;
3218 rc = backend_startup_one( &cm->db, cr );
3220 cm->defer_db_open = 0;
3223 /* There is no runqueue in TOOL mode */
3224 if (( slapMode & SLAP_SERVER_MODE ) && rc == 0 ) {
3225 ldap_pvt_thread_mutex_lock( &slapd_rq.rq_mutex );
3226 ldap_pvt_runqueue_insert( &slapd_rq, cm->cc_period,
3227 consistency_check, on,
3228 "pcache_consistency", cm->db.be_suffix[0].bv_val );
3229 ldap_pvt_thread_mutex_unlock( &slapd_rq.rq_mutex );
3231 /* Cached database must have the rootdn */
3232 if ( BER_BVISNULL( &cm->db.be_rootndn )
3233 || BER_BVISEMPTY( &cm->db.be_rootndn ) )
3235 Debug( LDAP_DEBUG_ANY, "pcache_db_open(): "
3236 "underlying database of type \"%s\"\n"
3237 " serving naming context \"%s\"\n"
3238 " has no \"rootdn\", required by \"proxycache\".\n",
3239 on->on_info->oi_orig->bi_type,
3240 cm->db.be_suffix[0].bv_val, 0 );
3244 if ( cm->save_queries ) {
3245 void *thrctx = ldap_pvt_thread_pool_context();
3246 Connection conn = { 0 };
3247 OperationBuffer opbuf;
3249 slap_callback cb = { 0 };
3250 SlapReply rs = { 0 };
3251 BerVarray vals = NULL;
3252 Filter f = { 0 }, f2 = { 0 };
3253 AttributeAssertion ava = ATTRIBUTEASSERTION_INIT;
3254 AttributeName attrs[ 2 ] = { 0 };
3256 connection_fake_init( &conn, &opbuf, thrctx );
3261 op->o_tag = LDAP_REQ_SEARCH;
3262 op->o_protocol = LDAP_VERSION3;
3263 cb.sc_response = pcache_cachedquery_open_cb;
3264 cb.sc_private = &vals;
3265 op->o_callback = &cb;
3266 op->o_time = slap_get_time();
3267 op->o_do_not_cache = 1;
3268 op->o_managedsait = SLAP_CONTROL_CRITICAL;
3270 op->o_dn = cm->db.be_rootdn;
3271 op->o_ndn = cm->db.be_rootndn;
3272 op->o_req_dn = cm->db.be_suffix[ 0 ];
3273 op->o_req_ndn = cm->db.be_nsuffix[ 0 ];
3275 op->ors_scope = LDAP_SCOPE_BASE;
3276 op->ors_deref = LDAP_DEREF_NEVER;
3278 op->ors_tlimit = SLAP_NO_LIMIT;
3279 ber_str2bv( "(cachedQueryURL=*)", 0, 0, &op->ors_filterstr );
3280 f.f_choice = LDAP_FILTER_PRESENT;
3281 f.f_desc = ad_cachedQueryURL;
3282 op->ors_filter = &f;
3283 attrs[ 0 ].an_desc = ad_cachedQueryURL;
3284 attrs[ 0 ].an_name = ad_cachedQueryURL->ad_cname;
3285 op->ors_attrs = attrs;
3286 op->ors_attrsonly = 0;
3288 rc = op->o_bd->be_search( op, &rs );
3289 if ( rc == LDAP_SUCCESS && vals != NULL ) {
3292 for ( i = 0; !BER_BVISNULL( &vals[ i ] ); i++ ) {
3293 if ( url2query( vals[ i ].bv_val, op, qm ) == 0 ) {
3294 cm->num_cached_queries++;
3298 ber_bvarray_free_x( vals, op->o_tmpmemctx );
3301 /* count cached entries */
3302 f.f_choice = LDAP_FILTER_NOT;
3304 f2.f_choice = LDAP_FILTER_EQUALITY;
3306 f2.f_av_desc = slap_schema.si_ad_objectClass;
3307 BER_BVSTR( &f2.f_av_value, "glue" );
3308 ber_str2bv( "(!(objectClass=glue))", 0, 0, &op->ors_filterstr );
3310 op->ors_slimit = SLAP_NO_LIMIT;
3311 op->ors_scope = LDAP_SCOPE_SUBTREE;
3312 op->ors_attrs = slap_anlist_no_attrs;
3314 op->o_callback->sc_response = pcache_cachedquery_count_cb;
3316 op->o_callback->sc_private = &rs.sr_nentries;
3318 rc = op->o_bd->be_search( op, &rs );
3320 cm->cur_entries = rs.sr_nentries;
3334 slap_overinst *on = (slap_overinst *)be->bd_info;
3335 cache_manager *cm = on->on_bi.bi_private;
3336 query_manager* qm = cm->qm;
3337 int i, ncf = 0, rf = 0, nrf = 0, rc = 0;
3339 /* check attr sets */
3340 for ( i = 0; i < cm->numattrsets; i++) {
3341 if ( !( qm->attr_sets[i].flags & PC_CONFIGURED ) ) {
3342 if ( qm->attr_sets[i].flags & PC_REFERENCED ) {
3343 Debug( LDAP_DEBUG_CONFIG, "pcache: attr set #%d not configured but referenced.\n", i, 0, 0 );
3347 Debug( LDAP_DEBUG_CONFIG, "pcache: warning, attr set #%d not configured.\n", i, 0, 0 );
3351 } else if ( !( qm->attr_sets[i].flags & PC_REFERENCED ) ) {
3352 Debug( LDAP_DEBUG_CONFIG, "pcache: attr set #%d configured but not referenced.\n", i, 0, 0 );
3357 if ( ncf || rf || nrf ) {
3358 Debug( LDAP_DEBUG_CONFIG, "pcache: warning, %d attr sets configured but not referenced.\n", nrf, 0, 0 );
3359 Debug( LDAP_DEBUG_CONFIG, "pcache: warning, %d attr sets not configured.\n", ncf, 0, 0 );
3360 Debug( LDAP_DEBUG_CONFIG, "pcache: %d attr sets not configured but referenced.\n", rf, 0, 0 );
3367 /* need to inherit something from the original database... */
3368 cm->db.be_def_limit = be->be_def_limit;
3369 cm->db.be_limits = be->be_limits;
3370 cm->db.be_acl = be->be_acl;
3371 cm->db.be_dfltaccess = be->be_dfltaccess;
3373 if ( SLAP_DBMONITORING( be ) ) {
3374 SLAP_DBFLAGS( &cm->db ) |= SLAP_DBFLAG_MONITORING;
3377 SLAP_DBFLAGS( &cm->db ) &= ~SLAP_DBFLAG_MONITORING;
3380 if ( !cm->defer_db_open )
3381 rc = pcache_db_open2( on, cr );
3387 pcache_free_qbase( void *v )
3393 tavl_free( qb->scopes[i], NULL );
3403 slap_overinst *on = (slap_overinst *)be->bd_info;
3404 cache_manager *cm = on->on_bi.bi_private;
3405 query_manager *qm = cm->qm;
3409 if ( cm->save_queries ) {
3411 BerVarray vals = NULL;
3414 Connection conn = { 0 };
3415 OperationBuffer opbuf;
3417 slap_callback cb = { 0 };
3419 SlapReply rs = { REP_RESULT };
3420 Modifications mod = { 0 };
3422 thrctx = ldap_pvt_thread_pool_context();
3424 connection_fake_init( &conn, &opbuf, thrctx );
3427 if ( qm->templates != NULL ) {
3428 for ( tm = qm->templates; tm != NULL; tm = tm->qmnext ) {
3429 for ( qc = tm->query; qc; qc = qc->next ) {
3432 if ( query2url( op, qc, &bv ) == 0 ) {
3433 ber_bvarray_add_x( &vals, &bv, op->o_tmpmemctx );
3440 op->o_dn = cm->db.be_rootdn;
3441 op->o_ndn = cm->db.be_rootndn;
3443 op->o_tag = LDAP_REQ_MODIFY;
3444 op->o_protocol = LDAP_VERSION3;
3445 cb.sc_response = slap_null_cb;
3446 op->o_callback = &cb;
3447 op->o_time = slap_get_time();
3448 op->o_do_not_cache = 1;
3449 op->o_managedsait = SLAP_CONTROL_CRITICAL;
3451 op->o_req_dn = op->o_bd->be_suffix[0];
3452 op->o_req_ndn = op->o_bd->be_nsuffix[0];
3454 mod.sml_op = LDAP_MOD_REPLACE;
3456 mod.sml_desc = ad_cachedQueryURL;
3457 mod.sml_type = ad_cachedQueryURL->ad_cname;
3458 mod.sml_values = vals;
3459 mod.sml_nvalues = NULL;
3460 mod.sml_numvals = 1;
3461 mod.sml_next = NULL;
3462 Debug( pcache_debug,
3463 "%sSETTING CACHED QUERY URLS\n",
3464 vals == NULL ? "RE" : "", 0, 0 );
3466 op->orm_modlist = &mod;
3468 op->o_bd->be_modify( op, &rs );
3470 ber_bvarray_free_x( vals, op->o_tmpmemctx );
3473 /* cleanup stuff inherited from the original database... */
3474 cm->db.be_limits = NULL;
3475 cm->db.be_acl = NULL;
3477 /* stop the thread ... */
3479 ldap_pvt_thread_mutex_lock( &slapd_rq.rq_mutex );
3480 if ( ldap_pvt_runqueue_isrunning( &slapd_rq, cm->cc_arg ) ) {
3481 ldap_pvt_runqueue_stoptask( &slapd_rq, cm->cc_arg );
3483 ldap_pvt_runqueue_remove( &slapd_rq, cm->cc_arg );
3484 ldap_pvt_thread_mutex_unlock( &slapd_rq.rq_mutex );
3487 if ( cm->db.bd_info->bi_db_close ) {
3488 rc = cm->db.bd_info->bi_db_close( &cm->db, NULL );
3490 while ( (tm = qm->templates) != NULL ) {
3491 CachedQuery *qc, *qn;
3492 qm->templates = tm->qmnext;
3493 for ( qc = tm->query; qc; qc = qn ) {
3497 avl_free( tm->qbase, pcache_free_qbase );
3498 free( tm->querystr.bv_val );
3499 ldap_pvt_thread_rdwr_destroy( &tm->t_rwlock );
3500 free( tm->t_attrs.attrs );
3504 for ( i=0; i<cm->numattrsets; i++ ) {
3505 free( qm->attr_sets[i].attrs );
3507 free( qm->attr_sets );
3508 qm->attr_sets = NULL;
3519 slap_overinst *on = (slap_overinst *)be->bd_info;
3520 cache_manager *cm = on->on_bi.bi_private;
3521 query_manager *qm = cm->qm;
3523 if ( cm->db.be_private != NULL ) {
3524 backend_stopdown_one( &cm->db );
3527 ldap_pvt_thread_mutex_destroy( &qm->lru_mutex );
3528 ldap_pvt_thread_mutex_destroy( &cm->cache_mutex );
3535 #ifdef PCACHE_CONTROL_PRIVDB
3537 Control ::= SEQUENCE {
3538 controlType LDAPOID,
3539 criticality BOOLEAN DEFAULT FALSE,
3540 controlValue OCTET STRING OPTIONAL }
3542 controlType ::= 1.3.6.1.4.1.4203.666.11.9.5.1
3544 * criticality must be TRUE; controlValue must be absent.
3552 if ( op->o_ctrlflag[ privDB_cid ] != SLAP_CONTROL_NONE ) {
3553 rs->sr_text = "privateDB control specified multiple times";
3554 return LDAP_PROTOCOL_ERROR;
3557 if ( !BER_BVISNULL( &ctrl->ldctl_value ) ) {
3558 rs->sr_text = "privateDB control value not absent";
3559 return LDAP_PROTOCOL_ERROR;
3562 if ( !ctrl->ldctl_iscritical ) {
3563 rs->sr_text = "privateDB control criticality required";
3564 return LDAP_PROTOCOL_ERROR;
3567 op->o_ctrlflag[ privDB_cid ] = SLAP_CONTROL_CRITICAL;
3569 return LDAP_SUCCESS;
3572 static char *extops[] = {
3573 LDAP_EXOP_MODIFY_PASSWD,
3576 #endif /* PCACHE_CONTROL_PRIVDB */
3578 #ifdef PCACHE_EXOP_QUERY_DELETE
3579 static struct berval pcache_exop_QUERY_DELETE = BER_BVC( PCACHE_EXOP_QUERY_DELETE );
3581 #define LDAP_TAG_EXOP_QUERY_DELETE_BASE ((LBER_CLASS_CONTEXT|LBER_CONSTRUCTED) + 0)
3582 #define LDAP_TAG_EXOP_QUERY_DELETE_DN ((LBER_CLASS_CONTEXT|LBER_CONSTRUCTED) + 1)
3583 #define LDAP_TAG_EXOP_QUERY_DELETE_UUID ((LBER_CLASS_CONTEXT|LBER_CONSTRUCTED) + 2)
3586 ExtendedRequest ::= [APPLICATION 23] SEQUENCE {
3587 requestName [0] LDAPOID,
3588 requestValue [1] OCTET STRING OPTIONAL }
3590 requestName ::= 1.3.6.1.4.1.4203.666.11.9.6.1
3592 requestValue ::= SEQUENCE { CHOICE {
3594 entryDN [1] LDAPDN },
3595 queryID [2] OCTET STRING (SIZE(16))
3596 -- constrained to UUID }
3598 * Either baseDN or entryDN must be present, to allow database selection.
3600 * 1. if baseDN and queryID are present, then the query corresponding
3601 * to queryID is deleted;
3602 * 2. if baseDN is present and queryID is absent, then all queries
3604 * 3. if entryDN is present and queryID is absent, then all queries
3605 * corresponding to the queryID values present in entryDN are deleted;
3606 * 4. if entryDN and queryID are present, then all queries
3607 * corresponding to the queryID values present in entryDN are deleted,
3608 * but only if the value of queryID is contained in the entry;
3610 * Currently, only 1, 3 and 4 are implemented. 2 can be obtained by either
3611 * recursively deleting the database (ldapdelete -r) with PRIVDB control,
3612 * or by removing the database files.
3614 ExtendedResponse ::= [APPLICATION 24] SEQUENCE {
3615 COMPONENTS OF LDAPResult,
3616 responseName [10] LDAPOID OPTIONAL,
3617 responseValue [11] OCTET STRING OPTIONAL }
3619 * responseName and responseValue must be absent.
3623 * - on success, *tagp is either LDAP_TAG_EXOP_QUERY_DELETE_BASE
3624 * or LDAP_TAG_EXOP_QUERY_DELETE_DN.
3625 * - if ndn != NULL, it is set to the normalized DN in the request
3626 * corresponding to either the baseDN or the entryDN, according
3627 * to *tagp; memory is malloc'ed on the Operation's slab, and must
3628 * be freed by the caller.
3629 * - if uuid != NULL, it is set to point to the normalized UUID;
3630 * memory is malloc'ed on the Operation's slab, and must
3631 * be freed by the caller.
3634 pcache_parse_query_delete(
3638 struct berval *uuid,
3642 int rc = LDAP_SUCCESS;
3645 BerElementBuffer berbuf;
3646 BerElement *ber = (BerElement *)&berbuf;
3647 struct berval reqdata = BER_BVNULL;
3659 if ( in == NULL || in->bv_len == 0 ) {
3660 *text = "empty request data field in queryDelete exop";
3661 return LDAP_PROTOCOL_ERROR;
3664 ber_dupbv_x( &reqdata, in, ctx );
3666 /* ber_init2 uses reqdata directly, doesn't allocate new buffers */
3667 ber_init2( ber, &reqdata, 0 );
3669 tag = ber_scanf( ber, "{" /*}*/ );
3671 if ( tag == LBER_ERROR ) {
3672 Debug( LDAP_DEBUG_TRACE,
3673 "pcache_parse_query_delete: decoding error.\n",
3675 goto decoding_error;
3678 tag = ber_peek_tag( ber, &len );
3679 if ( tag == LDAP_TAG_EXOP_QUERY_DELETE_BASE
3680 || tag == LDAP_TAG_EXOP_QUERY_DELETE_DN )
3684 if ( ndn != NULL ) {
3687 tag = ber_scanf( ber, "m", &dn );
3688 if ( tag == LBER_ERROR ) {
3689 Debug( LDAP_DEBUG_TRACE,
3690 "pcache_parse_query_delete: DN parse failed.\n",
3692 goto decoding_error;
3695 rc = dnNormalize( 0, NULL, NULL, &dn, ndn, ctx );
3696 if ( rc != LDAP_SUCCESS ) {
3697 *text = "invalid DN in queryDelete exop request data";
3702 tag = ber_scanf( ber, "x" /* "m" */ );
3703 if ( tag == LBER_DEFAULT ) {
3704 goto decoding_error;
3708 tag = ber_peek_tag( ber, &len );
3711 if ( tag == LDAP_TAG_EXOP_QUERY_DELETE_UUID ) {
3712 if ( uuid != NULL ) {
3714 char uuidbuf[ LDAP_LUTIL_UUIDSTR_BUFSIZE ];
3716 tag = ber_scanf( ber, "m", &bv );
3717 if ( tag == LBER_ERROR ) {
3718 Debug( LDAP_DEBUG_TRACE,
3719 "pcache_parse_query_delete: UUID parse failed.\n",
3721 goto decoding_error;
3724 if ( bv.bv_len != 16 ) {
3725 Debug( LDAP_DEBUG_TRACE,
3726 "pcache_parse_query_delete: invalid UUID length %lu.\n",
3727 (unsigned long)bv.bv_len, 0, 0 );
3728 goto decoding_error;
3731 rc = lutil_uuidstr_from_normalized(
3732 bv.bv_val, bv.bv_len,
3733 uuidbuf, sizeof( uuidbuf ) );
3735 goto decoding_error;
3737 ber_str2bv( uuidbuf, rc, 1, uuid );
3741 tag = ber_skip_tag( ber, &len );
3742 if ( tag == LBER_DEFAULT ) {
3743 goto decoding_error;
3747 Debug( LDAP_DEBUG_TRACE,
3748 "pcache_parse_query_delete: invalid UUID length %lu.\n",
3749 (unsigned long)len, 0, 0 );
3750 goto decoding_error;
3754 tag = ber_peek_tag( ber, &len );
3757 if ( tag != LBER_DEFAULT || len != 0 ) {
3759 Debug( LDAP_DEBUG_TRACE,
3760 "pcache_parse_query_delete: decoding error\n",
3762 rc = LDAP_PROTOCOL_ERROR;
3763 *text = "queryDelete data decoding error";
3766 if ( ndn && !BER_BVISNULL( ndn ) ) {
3767 slap_sl_free( ndn->bv_val, ctx );
3771 if ( uuid && !BER_BVISNULL( uuid ) ) {
3772 slap_sl_free( uuid->bv_val, ctx );
3777 if ( !BER_BVISNULL( &reqdata ) ) {
3778 ber_memfree_x( reqdata.bv_val, ctx );
3785 pcache_exop_query_delete(
3789 BackendDB *bd = op->o_bd;
3791 struct berval uuid = BER_BVNULL,
3793 char buf[ SLAP_TEXT_BUFLEN ] = { '\0' };
3795 ber_tag_t tag = LBER_DEFAULT;
3797 if ( LogTest( LDAP_DEBUG_STATS ) ) {
3801 rs->sr_err = pcache_parse_query_delete( op->ore_reqdata,
3802 &tag, &op->o_req_ndn, uuidp,
3803 &rs->sr_text, op->o_tmpmemctx );
3804 if ( rs->sr_err != LDAP_SUCCESS ) {
3808 if ( LogTest( LDAP_DEBUG_STATS ) ) {
3809 assert( !BER_BVISNULL( &op->o_req_ndn ) );
3810 len = snprintf( buf, sizeof( buf ), " dn=\"%s\"", op->o_req_ndn.bv_val );
3812 if ( !BER_BVISNULL( &uuid ) ) {
3813 snprintf( &buf[ len ], sizeof( buf ) - len, " queryId=\"%s\"", uuid.bv_val );
3816 Debug( LDAP_DEBUG_STATS, "%s QUERY DELETE%s\n",
3817 op->o_log_prefix, buf, 0 );
3819 op->o_req_dn = op->o_req_ndn;
3821 op->o_bd = select_backend( &op->o_req_ndn, 0 );
3822 rs->sr_err = backend_check_restrictions( op, rs,
3823 (struct berval *)&pcache_exop_QUERY_DELETE );
3824 if ( rs->sr_err != LDAP_SUCCESS ) {
3828 if ( op->o_bd->be_extended == NULL ) {
3829 send_ldap_error( op, rs, LDAP_UNAVAILABLE_CRITICAL_EXTENSION,
3830 "backend does not support extended operations" );
3834 op->o_bd->be_extended( op, rs );
3837 if ( !BER_BVISNULL( &op->o_req_ndn ) ) {
3838 op->o_tmpfree( op->o_req_ndn.bv_val, op->o_tmpmemctx );
3839 BER_BVZERO( &op->o_req_ndn );
3840 BER_BVZERO( &op->o_req_dn );
3843 if ( !BER_BVISNULL( &uuid ) ) {
3844 op->o_tmpfree( uuid.bv_val, op->o_tmpmemctx );
3853 pcache_op_extended( Operation *op, SlapReply *rs )
3855 slap_overinst *on = (slap_overinst *)op->o_bd->bd_info;
3856 cache_manager *cm = on->on_bi.bi_private;
3858 #ifdef PCACHE_CONTROL_PRIVDB
3859 if ( op->o_ctrlflag[ privDB_cid ] == SLAP_CONTROL_CRITICAL ) {
3860 return pcache_op_privdb( op, rs );
3862 #endif /* PCACHE_CONTROL_PRIVDB */
3864 if ( bvmatch( &op->ore_reqoid, &pcache_exop_QUERY_DELETE ) ) {
3865 struct berval uuid = BER_BVNULL;
3866 ber_tag_t tag = LBER_DEFAULT;
3868 rs->sr_err = pcache_parse_query_delete( op->ore_reqdata,
3869 &tag, NULL, &uuid, &rs->sr_text, op->o_tmpmemctx );
3870 assert( rs->sr_err == LDAP_SUCCESS );
3872 if ( tag == LDAP_TAG_EXOP_QUERY_DELETE_DN ) {
3873 /* remove all queries related to the selected entry */
3874 rs->sr_err = pcache_remove_entry_queries_from_cache( op,
3875 cm, &op->o_req_ndn, &uuid );
3877 } else if ( tag == LDAP_TAG_EXOP_QUERY_DELETE_BASE ) {
3878 if ( !BER_BVISNULL( &uuid ) ) {
3879 /* remove the selected query */
3880 rs->sr_err = pcache_remove_query_from_cache( op,
3884 /* TODO: remove all queries */
3885 rs->sr_err = LDAP_UNWILLING_TO_PERFORM;
3886 rs->sr_text = "deletion of all queries not implemented";
3890 op->o_tmpfree( uuid.bv_val, op->o_tmpmemctx );
3895 #endif /* PCACHE_EXOP_QUERY_DELETE */
3897 static slap_overinst pcache;
3899 static char *obsolete_names[] = {
3904 #if SLAPD_OVER_PROXYCACHE == SLAPD_MOD_DYNAMIC
3906 #endif /* SLAPD_OVER_PROXYCACHE == SLAPD_MOD_DYNAMIC */
3911 struct berval debugbv = BER_BVC("pcache");
3913 code = slap_loglevel_get( &debugbv, &pcache_debug );
3918 #ifdef PCACHE_CONTROL_PRIVDB
3919 code = register_supported_control( PCACHE_CONTROL_PRIVDB,
3920 SLAP_CTRL_BIND|SLAP_CTRL_ACCESS|SLAP_CTRL_HIDE, extops,
3921 parse_privdb_ctrl, &privDB_cid );
3922 if ( code != LDAP_SUCCESS ) {
3923 Debug( LDAP_DEBUG_ANY,
3924 "pcache_initialize: failed to register control %s (%d)\n",
3925 PCACHE_CONTROL_PRIVDB, code, 0 );
3928 #endif /* PCACHE_CONTROL_PRIVDB */
3930 #ifdef PCACHE_EXOP_QUERY_DELETE
3931 code = load_extop2( (struct berval *)&pcache_exop_QUERY_DELETE,
3932 SLAP_EXOP_WRITES|SLAP_EXOP_HIDE, pcache_exop_query_delete,
3934 if ( code != LDAP_SUCCESS ) {
3935 Debug( LDAP_DEBUG_ANY,
3936 "pcache_initialize: unable to register queryDelete exop: %d.\n",
3940 #endif /* PCACHE_EXOP_QUERY_DELETE */
3942 for ( i = 0; as[i].desc != NULL; i++ ) {
3943 code = register_at( as[i].desc, as[i].adp, 0 );
3945 Debug( LDAP_DEBUG_ANY,
3946 "pcache_initialize: register_at #%d failed\n", i, 0, 0 );
3949 (*as[i].adp)->ad_type->sat_flags |= SLAP_AT_HIDE;
3952 pcache.on_bi.bi_type = "pcache";
3953 pcache.on_bi.bi_obsolete_names = obsolete_names;
3954 pcache.on_bi.bi_db_init = pcache_db_init;
3955 pcache.on_bi.bi_db_config = pcache_db_config;
3956 pcache.on_bi.bi_db_open = pcache_db_open;
3957 pcache.on_bi.bi_db_close = pcache_db_close;
3958 pcache.on_bi.bi_db_destroy = pcache_db_destroy;
3960 pcache.on_bi.bi_op_search = pcache_op_search;
3961 #ifdef PCACHE_CONTROL_PRIVDB
3962 pcache.on_bi.bi_op_bind = pcache_op_privdb;
3963 pcache.on_bi.bi_op_compare = pcache_op_privdb;
3964 pcache.on_bi.bi_op_modrdn = pcache_op_privdb;
3965 pcache.on_bi.bi_op_modify = pcache_op_privdb;
3966 pcache.on_bi.bi_op_add = pcache_op_privdb;
3967 pcache.on_bi.bi_op_delete = pcache_op_privdb;
3968 #endif /* PCACHE_CONTROL_PRIVDB */
3969 #ifdef PCACHE_EXOP_QUERY_DELETE
3970 pcache.on_bi.bi_extended = pcache_op_extended;
3971 #elif defined( PCACHE_CONTROL_PRIVDB )
3972 pcache.on_bi.bi_extended = pcache_op_privdb;
3975 pcache.on_bi.bi_chk_controls = pcache_chk_controls;
3977 pcache.on_bi.bi_cf_ocs = pcocs;
3979 code = config_register_schema( pccfg, pcocs );
3980 if ( code ) return code;
3984 code = slap_str2ad( "olcDatabase", &pcdummy[0].ad, &text );
3985 if ( code ) return code;
3987 return overlay_register( &pcache );
3990 #if SLAPD_OVER_PROXYCACHE == SLAPD_MOD_DYNAMIC
3991 int init_module(int argc, char *argv[]) {
3992 return pcache_initialize();
3996 #endif /* defined(SLAPD_OVER_PROXYCACHE) */