]> git.sur5r.net Git - openldap/blobdiff - servers/slapd/back-ldbm/add.c
Fix -USLAPD_RLOOKUPS
[openldap] / servers / slapd / back-ldbm / add.c
index fc592712db822e1f202398eb207842977a6c1252..c6f85169c69f3a80892529da57f3ff69307ff60d 100644 (file)
@@ -20,22 +20,21 @@ ldbm_back_add(
 )
 {
        struct ldbminfo *li = (struct ldbminfo *) be->be_private;
-       char            *dn, *pdn;
+       char            *pdn;
        Entry           *p = NULL;
        int                     rootlock = 0;
-       int                     rc = -1
+       int                     rc; 
 
-       dn = e->e_ndn;
-
-       Debug(LDAP_DEBUG_ARGS, "==> ldbm_back_add: %s\n", dn, 0, 0);
+       Debug(LDAP_DEBUG_ARGS, "==> ldbm_back_add: %s\n", e->e_dn, 0, 0);
 
        /* nobody else can add until we lock our parent */
        ldap_pvt_thread_mutex_lock(&li->li_add_mutex);
 
-       if ( ( dn2id( be, dn ) ) != NOID ) {
+       if ( ( dn2id( be, e->e_ndn ) ) != NOID ) {
                ldap_pvt_thread_mutex_unlock(&li->li_add_mutex);
                entry_free( e );
-               send_ldap_result( conn, op, LDAP_ALREADY_EXISTS, "", "" );
+               send_ldap_result( conn, op, LDAP_ALREADY_EXISTS,
+                       NULL, NULL, NULL, NULL );
                return( -1 );
        }
 
@@ -46,8 +45,8 @@ ldbm_back_add(
                        0, 0, 0 );
 
                entry_free( e );
-               send_ldap_result( conn, op, LDAP_OBJECT_CLASS_VIOLATION, "",
-                   "" );
+               send_ldap_result( conn, op, LDAP_OBJECT_CLASS_VIOLATION,
+                       NULL, NULL, NULL, NULL );
                return( -1 );
        }
 
@@ -57,19 +56,41 @@ ldbm_back_add(
         * add the entry.
         */
 
-       if ( (pdn = dn_parent( be, dn )) != NULL ) {
-               char *matched = NULL;
+       pdn = dn_parent( be, e->e_ndn );
+
+       if( pdn != NULL && *pdn != '\0' && !be_issuffix(be, "") ) {
+               Entry *matched = NULL;
+
+               assert( *pdn != '\0' );
 
                /* get parent with writer lock */
                if ( (p = dn2entry_w( be, pdn, &matched )) == NULL ) {
+                       char *matched_dn;
+                       struct berval **refs;
+
                        ldap_pvt_thread_mutex_unlock(&li->li_add_mutex);
-                       Debug( LDAP_DEBUG_TRACE, "parent does not exist\n", 0,
-                           0, 0 );
-                       send_ldap_result( conn, op, LDAP_NO_SUCH_OBJECT,
-                           matched, "" );
 
                        if ( matched != NULL ) {
-                               free( matched );
+                               matched_dn = ch_strdup( matched->e_dn );
+                               refs = is_entry_referral( matched )
+                                       ? get_entry_referrals( be, conn, op, matched )
+                                       : NULL;
+                               cache_return_entry_r( &li->li_cache, matched );
+
+                       } else {
+                               matched_dn = NULL;
+                               refs = default_referral;
+                       }
+
+                       Debug( LDAP_DEBUG_TRACE, "parent does not exist\n",
+                               0, 0, 0 );
+
+                       send_ldap_result( conn, op, LDAP_REFERRAL,
+                           matched_dn, NULL, refs, NULL );
+
+                       if( matched != NULL ) {
+                               ber_bvecfree( refs );
+                               free( matched_dn );
                        }
 
                        entry_free( e );
@@ -82,33 +103,75 @@ ldbm_back_add(
 
                free(pdn);
 
-               if ( matched != NULL ) {
-                       free( matched );
-               }
-
                if ( ! access_allowed( be, conn, op, p,
                        "children", NULL, ACL_WRITE ) )
                {
+                       /* free parent and writer lock */
+                       cache_return_entry_w( &li->li_cache, p ); 
+
                        Debug( LDAP_DEBUG_TRACE, "no access to parent\n", 0,
                            0, 0 );
                        send_ldap_result( conn, op, LDAP_INSUFFICIENT_ACCESS,
-                           "", "" );
+                           NULL, NULL, NULL, NULL );
+
+
+                       entry_free( e );
+                       return -1;
+               }
+
+               if ( is_entry_alias( p ) ) {
+                       /* parent is an alias, don't allow add */
 
                        /* free parent and writer lock */
-                       cache_return_entry_w( &li->li_cache, p ); 
+                       cache_return_entry_w( &li->li_cache, p );
+
+                       Debug( LDAP_DEBUG_TRACE, "parent is alias\n", 0,
+                           0, 0 );
+
+                       send_ldap_result( conn, op, LDAP_ALIAS_PROBLEM,
+                           NULL, NULL, NULL, NULL );
 
                        entry_free( e );
                        return -1;
                }
 
+               if ( is_entry_referral( p ) ) {
+                       /* parent is a referral, don't allow add */
+                       char *matched_dn = ch_strdup( p->e_dn );
+                       struct berval **refs = is_entry_referral( p )
+                               ? get_entry_referrals( be, conn, op, p )
+                               : NULL;
+
+                       /* free parent and writer lock */
+                       cache_return_entry_w( &li->li_cache, p );
+
+                       Debug( LDAP_DEBUG_TRACE, "parent is referral\n", 0,
+                           0, 0 );
+                       send_ldap_result( conn, op, LDAP_REFERRAL,
+                           matched_dn, NULL, refs, NULL );
+
+                       ber_bvecfree( refs );
+                       free( matched_dn );
+                       entry_free( e );
+                       return -1;
+               }
+
        } else {
+               if(pdn != NULL) {
+                       assert( *pdn == '\0' );
+                       free(pdn);
+               }
+
                /* no parent, must be adding entry to root */
                if ( ! be_isroot( be, op->o_ndn ) ) {
                        ldap_pvt_thread_mutex_unlock(&li->li_add_mutex);
-                       Debug( LDAP_DEBUG_TRACE, "no parent & not root\n", 0,
-                           0, 0 );
+
+                       Debug( LDAP_DEBUG_TRACE, "%s add denied\n",
+                                       pdn == NULL ? "suffix" : "entry at root",
+                                       0, 0 );
+
                        send_ldap_result( conn, op, LDAP_INSUFFICIENT_ACCESS,
-                           "", "" );
+                           NULL, NULL, NULL, NULL );
 
                        entry_free( e );
                        return -1;
@@ -123,39 +186,19 @@ ldbm_back_add(
                ldap_pvt_thread_mutex_unlock(&li->li_add_mutex);
        }
 
-       /* acquire required reader/writer lock */
-       if (entry_rdwr_lock(e, 1)) {
-               if( p != NULL) {
-                       /* free parent and writer lock */
-                       cache_return_entry_w( &li->li_cache, p ); 
-               }
-
-               if ( rootlock ) {
-                       /* release root lock */
-                       ldap_pvt_thread_mutex_unlock(&li->li_root_mutex);
-               }
-
-               Debug( LDAP_DEBUG_ANY, "add: could not lock entry\n",
-                       0, 0, 0 );
-
-               entry_free(e);
-
-               send_ldap_result( conn, op, LDAP_OPERATIONS_ERROR, "", "" );
-               return( -1 );
-       }
-
        e->e_id = next_id( be );
 
        /*
         * Try to add the entry to the cache, assign it a new dnid.
-        * This should only fail if the entry already exists.
         */
+       rc = cache_add_entry_rw(&li->li_cache, e, CACHE_WRITE_LOCK);
 
-       if ( cache_add_entry_lock( &li->li_cache, e, ENTRY_STATE_CREATING ) != 0 ) {
+       if ( rc != 0 ) {
                if( p != NULL) {
                        /* free parent and writer lock */
                        cache_return_entry_w( &li->li_cache, p ); 
                }
+
                if ( rootlock ) {
                        /* release root lock */
                        ldap_pvt_thread_mutex_unlock(&li->li_root_mutex);
@@ -163,15 +206,22 @@ ldbm_back_add(
 
                Debug( LDAP_DEBUG_ANY, "cache_add_entry_lock failed\n", 0, 0,
                    0 );
+
+               /* return the id */
                next_id_return( be, e->e_id );
-                
-               entry_rdwr_unlock(e, 1);;
+
+               /* free the entry */
                entry_free( e );
 
-               send_ldap_result( conn, op, LDAP_ALREADY_EXISTS, "", "" );
+               send_ldap_result( conn, op,
+                       rc > 0 ? LDAP_ALREADY_EXISTS : LDAP_OPERATIONS_ERROR,
+                       NULL, NULL, NULL, NULL );
+
                return( -1 );
        }
 
+       rc = -1;
+
        /*
         * add it to the id2children index for the parent
         */
@@ -179,7 +229,8 @@ ldbm_back_add(
        if ( id2children_add( be, p, e ) != 0 ) {
                Debug( LDAP_DEBUG_TRACE, "id2children_add failed\n", 0,
                    0, 0 );
-               send_ldap_result( conn, op, LDAP_OPERATIONS_ERROR, "", "" );
+               send_ldap_result( conn, op, LDAP_OPERATIONS_ERROR,
+                       NULL, NULL, NULL, NULL );
 
                goto return_results;
        }
@@ -193,16 +244,18 @@ ldbm_back_add(
        if ( index_add_entry( be, e ) != 0 ) {
                Debug( LDAP_DEBUG_TRACE, "index_add_entry failed\n", 0,
                    0, 0 );
-               send_ldap_result( conn, op, LDAP_OPERATIONS_ERROR, "", "" );
+               send_ldap_result( conn, op, LDAP_OPERATIONS_ERROR,
+                       NULL, NULL, NULL, NULL );
 
                goto return_results;
        }
 
        /* dn2id index */
-       if ( dn2id_add( be, dn, e->e_id ) != 0 ) {
+       if ( dn2id_add( be, e->e_ndn, e->e_id ) != 0 ) {
                Debug( LDAP_DEBUG_TRACE, "dn2id_add failed\n", 0,
                    0, 0 );
-               send_ldap_result( conn, op, LDAP_OPERATIONS_ERROR, "", "" );
+               send_ldap_result( conn, op, LDAP_OPERATIONS_ERROR,
+                       NULL, NULL, NULL, NULL );
 
                goto return_results;
        }
@@ -211,13 +264,15 @@ ldbm_back_add(
        if ( id2entry_add( be, e ) != 0 ) {
                Debug( LDAP_DEBUG_TRACE, "id2entry_add failed\n", 0,
                    0, 0 );
-               (void) dn2id_delete( be, dn );
-               send_ldap_result( conn, op, LDAP_OPERATIONS_ERROR, "", "" );
+               (void) dn2id_delete( be, e->e_ndn );
+               send_ldap_result( conn, op, LDAP_OPERATIONS_ERROR,
+                       NULL, NULL, NULL, NULL );
 
                goto return_results;
        }
 
-       send_ldap_result( conn, op, LDAP_SUCCESS, "", "" );
+       send_ldap_result( conn, op, LDAP_SUCCESS,
+               NULL, NULL, NULL, NULL );
        rc = 0;
 
 return_results:;
@@ -231,10 +286,10 @@ return_results:;
                ldap_pvt_thread_mutex_unlock(&li->li_root_mutex);
        }
 
-       cache_set_state( &li->li_cache, e, 0 );
-
-       /* free entry and writer lock */
-       cache_return_entry_w( &li->li_cache, e ); 
+       if ( rc ) {
+               /* free entry and writer lock */
+               cache_return_entry_w( &li->li_cache, e );
+       }
 
        return( rc );
 }