]> git.sur5r.net Git - openldap/blobdiff - servers/slapd/back-ldbm/modrdn.c
silence warning
[openldap] / servers / slapd / back-ldbm / modrdn.c
index 40a33545d481203a4a15f0a550a8542d37681947..de0d99b8868636fcc41b9b8f76a508a019f8d84c 100644 (file)
@@ -1,7 +1,7 @@
 /* modrdn.c - ldbm backend modrdn routine */
 /* $OpenLDAP$ */
 /*
- * Copyright 1998-2000 The OpenLDAP Foundation, All Rights Reserved.
+ * Copyright 1998-2003 The OpenLDAP Foundation, All Rights Reserved.
  * COPYING RESTRICTIONS APPLY, see COPYRIGHT file
  */
 
 
 int
 ldbm_back_modrdn(
-    Backend    *be,
-    Connection *conn,
     Operation  *op,
-    const char *dn,
-    const char *ndn,
-    const char *newrdn,
-    int                deleteoldrdn,
-    const char *newSuperior
-)
+    SlapReply  *rs )
 {
-#ifdef SLAPD_SCHEMA_NOT_COMPAT
        AttributeDescription *children = slap_schema.si_ad_children;
-#else
-       static const char *children = "children";
-#endif
-       struct ldbminfo *li = (struct ldbminfo *) be->be_private;
-       char            *p_dn = NULL, *p_ndn = NULL;
-       char            *new_dn = NULL, *new_ndn = NULL;
+       AttributeDescription *entry = slap_schema.si_ad_entry;
+       struct ldbminfo *li = (struct ldbminfo *) op->o_bd->be_private;
+       struct berval   p_dn, p_ndn;
+       struct berval   new_dn = { 0, NULL}, new_ndn = { 0, NULL };
        Entry           *e, *p = NULL;
        Entry           *matched;
-       int                     rootlock = 0;
-       int                     rc = -1;
-       const char *text;
-       /* Added to support LDAP v2 correctly (deleteoldrdn thing) */
-       char            *new_rdn_val = NULL;    /* Val of new rdn */
-       char            *new_rdn_type = NULL;   /* Type of new rdn */
-       char            *old_rdn = NULL;        /* Old rdn's attr type & val */
-       char            *old_rdn_type = NULL;   /* Type of old rdn attr. */
-       char            *old_rdn_val = NULL;    /* Old rdn attribute value */
+       /* LDAP v2 supporting correct attribute handling. */
+       LDAPRDN         *new_rdn = NULL;
+       LDAPRDN         *old_rdn = NULL;
+       int             isroot = -1;
+#define CAN_ROLLBACK   -1
+#define MUST_DESTROY   1
+       int             rc = CAN_ROLLBACK;
+       int             rc_id = 0;
+       ID              id = NOID;
+       const char      *text = NULL;
+       char            textbuf[SLAP_TEXT_BUFLEN];
+       size_t          textlen = sizeof textbuf;
        /* Added to support newSuperior */ 
        Entry           *np = NULL;     /* newSuperior Entry */
-       char            *np_dn = NULL;  /* newSuperior dn */
-       char            *np_ndn = NULL; /* newSuperior ndn */
-       char            *new_parent_dn = NULL;  /* np_dn, p_dn, or NULL */
+       struct berval   *np_ndn = NULL; /* newSuperior ndn */
+       struct berval   *new_parent_dn = NULL;  /* np_dn, p_dn, or NULL */
        /* Used to interface with ldbm_modify_internal() */
-       struct berval   add_bv;                 /* Stores new rdn att */
-       struct berval   *add_bvals[2];          /* Stores new rdn att */
-       struct berval   del_bv;                 /* Stores old rdn att */
-       struct berval   *del_bvals[2];          /* Stores old rdn att */
-       Modifications   mod[2];                 /* Used to delete old rdn */
+       Modifications   *mod = NULL;            /* Used to delete old/add new rdn */
        int             manageDSAit = get_manageDSAit( op );
 
-       Debug( LDAP_DEBUG_TRACE, "==>ldbm_back_modrdn(newSuperior=%s)\n",
-              (newSuperior ? newSuperior : "NULL"),
-              0, 0 );
+#ifdef NEW_LOGGING
+       LDAP_LOG( BACK_LDBM, ENTRY, 
+               "ldbm_back_modrdn: dn: %s newSuperior=%s\n", 
+               op->o_req_dn.bv_len ? op->o_req_dn.bv_val : "NULL",
+               ( op->oq_modrdn.rs_newSup && op->oq_modrdn.rs_newSup->bv_len ) ? op->oq_modrdn.rs_newSup->bv_val : "NULL",0 );
+#else
+       Debug( LDAP_DEBUG_TRACE,
+               "==>ldbm_back_modrdn: dn: %s newSuperior=%s\n", 
+               op->o_req_dn.bv_len ? op->o_req_dn.bv_val : "NULL",
+               ( op->oq_modrdn.rs_newSup && op->oq_modrdn.rs_newSup->bv_len )
+                       ? op->oq_modrdn.rs_newSup->bv_val : "NULL", 0 );
+#endif
 
-       /* get entry with writer lock */
-       if ( (e = dn2entry_w( be, ndn, &matched )) == NULL ) {
-               char* matched_dn = NULL;
-               struct berval** refs = NULL;
+       /* grab giant lock for writing */
+       ldap_pvt_thread_rdwr_wlock(&li->li_giant_rwlock);
 
+       /* get entry with writer lock */
+       if ( (e = dn2entry_w( op->o_bd, &op->o_req_ndn, &matched )) == NULL ) {
                if( matched != NULL ) {
-                       matched_dn = strdup( matched->e_dn );
-                       refs = is_entry_referral( matched )
-                               ? get_entry_referrals( be, conn, op, matched )
+                       rs->sr_matched = strdup( matched->e_dn );
+                       rs->sr_ref = is_entry_referral( matched )
+                               ? get_entry_referrals( op, matched )
                                : NULL;
                        cache_return_entry_r( &li->li_cache, matched );
                } else {
-                       refs = default_referral;
+                       rs->sr_ref = referral_rewrite( default_referral,
+                               NULL, &op->o_req_dn, LDAP_SCOPE_DEFAULT );
                }
 
-               send_ldap_result( conn, op, LDAP_REFERRAL,
-                       matched_dn, NULL, refs, NULL );
+               ldap_pvt_thread_rdwr_wunlock(&li->li_giant_rwlock);
 
-               if ( matched != NULL ) {
-                       ber_bvecfree( refs );
-                       free( matched_dn );
-               }
+               rs->sr_err = LDAP_REFERRAL;
+               send_ldap_result( op, rs );
+
+               if ( rs->sr_ref ) ber_bvarray_free( rs->sr_ref );
+               free( (char *)rs->sr_matched );
 
                return( -1 );
        }
 
-#ifdef SLAPD_CHILD_MODIFICATION_WITH_ENTRY_ACL
-       if ( ! access_allowed( be, conn, op, e,
-               "entry", NULL, ACL_WRITE ) )
+       /* check entry for "entry" acl */
+       if ( ! access_allowed( op, e,
+               entry, NULL, ACL_WRITE, NULL ) )
        {
-               Debug( LDAP_DEBUG_TRACE, "no access to entry\n", 0,
+#ifdef NEW_LOGGING
+               LDAP_LOG( BACK_LDBM, ERR, 
+                       "ldbm_back_modrdn: no write access to entry of (%s)\n", 
+                       dn->bv_val, 0, 0 );
+#else
+               Debug( LDAP_DEBUG_TRACE,
+                       "<=- ldbm_back_modrdn: no write access to entry\n", 0,
                        0, 0 );
-               send_ldap_result( conn, op, LDAP_INSUFFICIENT_ACCESS,
-                       NULL, NULL, NULL, NULL );
+#endif
+
+               send_ldap_error( op, rs, LDAP_INSUFFICIENT_ACCESS,
+                       "no write access to entry" );
+
                goto return_results;
        }
-#endif
 
        if (!manageDSAit && is_entry_referral( e ) ) {
                /* parent is a referral, don't allow add */
                /* parent is an alias, don't allow add */
-               struct berval **refs = get_entry_referrals( be,
-                       conn, op, e );
+               rs->sr_ref = get_entry_referrals( op, e );
 
-               Debug( LDAP_DEBUG_TRACE, "entry is referral\n", 0,
+#ifdef NEW_LOGGING
+               LDAP_LOG( BACK_LDBM, INFO, 
+                       "ldbm_back_modrdn: entry %s is a referral\n", e->e_dn, 0, 0 );
+#else
+               Debug( LDAP_DEBUG_TRACE, "entry %s is referral\n", e->e_dn,
                    0, 0 );
+#endif
 
-               send_ldap_result( conn, op, LDAP_REFERRAL,
-                   e->e_dn, NULL, refs, NULL );
+               rs->sr_err = LDAP_REFERRAL;
+               rs->sr_matched = e->e_name.bv_val;
+               send_ldap_result( op, rs );
 
-               ber_bvecfree( refs );
+               if ( rs->sr_ref ) ber_bvarray_free( rs->sr_ref );
+               goto return_results;
+       }
 
+       if ( has_children( op->o_bd, e ) ) {
+#ifdef NEW_LOGGING
+               LDAP_LOG( BACK_LDBM, INFO, 
+                       "ldbm_back_modrdn: entry %s has children\n", e->e_dn, 0, 0 );
+#else
+               Debug( LDAP_DEBUG_TRACE, "entry %s has children\n", e->e_dn,
+                   0, 0 );
+#endif
+
+               send_ldap_error( op, rs, LDAP_NOT_ALLOWED_ON_NONLEAF,
+                   "subtree rename not supported" );
                goto return_results;
        }
 
-       if ( (p_ndn = dn_parent( be, e->e_ndn )) != NULL ) {
+       if ( be_issuffix( op->o_bd, &e->e_nname ) ) {
+               p_ndn = slap_empty_bv ;
+       } else {
+               dnParent( &e->e_nname, &p_ndn );
+       }
 
+       if ( p_ndn.bv_len != 0 ) {
                /* Make sure parent entry exist and we can write its 
                 * children.
                 */
 
-               if( (p = dn2entry_w( be, p_ndn, NULL )) == NULL) {
+               if( (p = dn2entry_w( op->o_bd, &p_ndn, NULL )) == NULL) {
+#ifdef NEW_LOGGING
+                       LDAP_LOG( BACK_LDBM, INFO, 
+                               "ldbm_back_modrdn: parent of %s does not exist\n", 
+                               e->e_ndn, 0, 0 );
+#else
                        Debug( LDAP_DEBUG_TRACE, "parent does not exist\n",
                                0, 0, 0);
-                       send_ldap_result( conn, op, LDAP_OTHER,
-                               NULL, NULL, NULL, NULL );
+#endif
+
+                       send_ldap_error( op, rs, LDAP_OTHER,
+                               "parent entry does not exist" );
+
                        goto return_results;
                }
 
                /* check parent for "children" acl */
-               if ( ! access_allowed( be, conn, op, p,
-                       children, NULL, ACL_WRITE ) )
+               if ( ! access_allowed( op, p,
+                       children, NULL, ACL_WRITE, NULL ) )
                {
+#ifdef NEW_LOGGING
+                       LDAP_LOG( BACK_LDBM, INFO, 
+                               "ldbm_back_modrdn: no access to parent of (%s)\n", 
+                               e->e_dn, 0, 0 );
+#else
                        Debug( LDAP_DEBUG_TRACE, "no access to parent\n", 0,
                                0, 0 );
-                       send_ldap_result( conn, op, LDAP_INSUFFICIENT_ACCESS,
-                               NULL, NULL, NULL, NULL );
+#endif
+
+                       send_ldap_error( op, rs, LDAP_INSUFFICIENT_ACCESS,
+                               NULL );
                        goto return_results;
                }
 
+#ifdef NEW_LOGGING
+               LDAP_LOG( BACK_LDBM, DETAIL1, 
+                       "ldbm_back_modrdn: wr to children of entry %s OK\n", 
+                       p_ndn.bv_val, 0, 0 );
+#else
                Debug( LDAP_DEBUG_TRACE,
                       "ldbm_back_modrdn: wr to children of entry %s OK\n",
-                      p_ndn, 0, 0 );
-               
-               p_dn = dn_parent( be, e->e_dn );
-       
+                      p_ndn.bv_val, 0, 0 );
+#endif
+
+               if ( p_ndn.bv_val == slap_empty_bv.bv_val ) {
+                       p_dn = slap_empty_bv;
+               } else {
+                       dnParent( &e->e_name, &p_dn );
+               }
 
+#ifdef NEW_LOGGING
+               LDAP_LOG( BACK_LDBM, DETAIL1, 
+                          "ldbm_back_modrdn: parent dn=%s\n", p_dn.bv_val, 0, 0 );
+#else
                Debug( LDAP_DEBUG_TRACE, "ldbm_back_modrdn: parent dn=%s\n",
-                      p_dn, 0, 0 );
+                      p_dn.bv_val, 0, 0 );
+#endif
 
        } else {
-               /* no parent, modrdn entry directly under root */
-               if( ! be_isroot( be, op->o_ndn ) ) {
-                       Debug( LDAP_DEBUG_TRACE, "no parent & not root\n",
-                               0, 0, 0);
-                       send_ldap_result( conn, op, LDAP_INSUFFICIENT_ACCESS,
-                               NULL, NULL, NULL, NULL );
-                       goto return_results;
+               /* no parent, must be root to modify rdn */
+               isroot = be_isroot( op->o_bd, &op->o_ndn );
+               if ( ! isroot ) {
+                       if ( be_issuffix( op->o_bd, (struct berval *)&slap_empty_bv ) || be_isupdate( op->o_bd, &op->o_ndn ) ) {
+                               int     can_access;
+                               p = (Entry *)&slap_entry_root;
+                               
+                               can_access = access_allowed( op, p,
+                                               children, NULL, ACL_WRITE, NULL );
+                               p = NULL;
+                                                               
+                               /* check parent for "children" acl */
+                               if ( ! can_access ) {
+#ifdef NEW_LOGGING
+                                       LDAP_LOG( BACK_LDBM, ERR,
+                                               "ldbm_back_modrdn: no access to parent \"\"\n", 0,0,0 );
+#else
+                                       Debug( LDAP_DEBUG_TRACE,
+                                               "<=- ldbm_back_modrdn: no "
+                                               "access to parent\n", 0, 0, 0 );
+#endif
+
+                                       send_ldap_error( op, rs,
+                                               LDAP_INSUFFICIENT_ACCESS,
+                                               NULL );
+                                       goto return_results;
+                               }
+
+                       } else {
+#ifdef NEW_LOGGING
+                               LDAP_LOG( BACK_LDBM, ERR, 
+                                       "ldbm_back_modrdn: (%s) has no parent & not a root.\n", 
+                                       dn, 0, 0 );
+#else
+                               Debug( LDAP_DEBUG_TRACE,
+                                       "<=- ldbm_back_modrdn: no parent & "
+                                       "not root\n", 0, 0, 0);
+#endif
+
+                               send_ldap_error( op, rs,
+                                       LDAP_INSUFFICIENT_ACCESS,
+                                       NULL );
+                               goto return_results;
+                       }
                }
 
-               ldap_pvt_thread_mutex_lock(&li->li_root_mutex);
-               rootlock = 1;
-               
+#ifdef NEW_LOGGING
+               LDAP_LOG( BACK_LDBM, INFO, 
+                  "ldbm_back_modrdn: (%s) no parent, locked root.\n", e->e_dn, 0, 0 );
+#else
                Debug( LDAP_DEBUG_TRACE,
                       "ldbm_back_modrdn: no parent, locked root\n",
                       0, 0, 0 );
-
+#endif
        }
 
-       new_parent_dn = p_dn;   /* New Parent unless newSuperior given */
+       new_parent_dn = &p_dn;  /* New Parent unless newSuperior given */
 
-       if ( newSuperior != NULL ) {
+       if ( op->oq_modrdn.rs_newSup != NULL ) {
+#ifdef NEW_LOGGING
+               LDAP_LOG( BACK_LDBM, DETAIL1, 
+                       "ldbm_back_modrdn: new parent \"%s\" requested\n",
+                       op->oq_modrdn.rs_newSup->bv_val, 0, 0 );
+#else
                Debug( LDAP_DEBUG_TRACE, 
                        "ldbm_back_modrdn: new parent \"%s\" requested...\n",
-                       newSuperior, 0, 0 );
+                       op->oq_modrdn.rs_newSup->bv_val, 0, 0 );
+#endif
+
+               np_ndn = op->oq_modrdn.rs_nnewSup;
 
-               np_dn = ch_strdup( newSuperior );
-               np_ndn = ch_strdup( np_dn );
-               (void) dn_normalize( np_ndn );
+               /* newSuperior == oldParent? */
+               if ( dn_match( &p_ndn, np_ndn ) ) {
+#ifdef NEW_LOGGING
+                       LDAP_LOG( BACK_LDBM, INFO, "ldbm_back_modrdn: "
+                               "new parent\"%s\" seems to be the same as the "
+                               "old parent \"%s\"\n", op->oq_modrdn.rs_newSup->bv_val, p_dn.bv_val, 0 );
+#else
+                       Debug( LDAP_DEBUG_TRACE, "ldbm_back_modrdn: "
+                               "new parent\"%s\" seems to be the same as the "
+                               "old parent \"%s\"\n",
+                               op->oq_modrdn.rs_newSup->bv_val, p_dn.bv_val, 0 );
+#endif
 
-               /* newSuperior == oldParent?, if so ==> ERROR */
+                       op->oq_modrdn.rs_newSup = NULL; /* ignore newSuperior */
+               }
+       }
+
+       if ( op->oq_modrdn.rs_newSup != NULL ) {
                /* newSuperior == entry being moved?, if so ==> ERROR */
                /* Get Entry with dn=newSuperior. Does newSuperior exist? */
 
-               if( (np = dn2entry_w( be, np_ndn, NULL )) == NULL) {
-                       Debug( LDAP_DEBUG_TRACE,
-                              "ldbm_back_modrdn: newSup(ndn=%s) not here!\n",
-                              np_ndn, 0, 0);
-                       send_ldap_result( conn, op, LDAP_OTHER,
-                               NULL, NULL, NULL, NULL );
-                       goto return_results;
-               }
+               if ( op->oq_modrdn.rs_nnewSup->bv_len ) {
+                       if( (np = dn2entry_w( op->o_bd, np_ndn, NULL )) == NULL) {
+#ifdef NEW_LOGGING
+                               LDAP_LOG( BACK_LDBM, ERR, 
+                                       "ldbm_back_modrdn: newSup(ndn=%s) not found.\n", 
+                                       np_ndn->bv_val, 0, 0 );
+#else
+                               Debug( LDAP_DEBUG_TRACE,
+                                   "ldbm_back_modrdn: newSup(ndn=%s) not here!\n",
+                                   np_ndn->bv_val, 0, 0);
+#endif
 
-               Debug( LDAP_DEBUG_TRACE,
-                      "ldbm_back_modrdn: wr to new parent OK np=%p, id=%ld\n",
-                      np, np->e_id, 0 );
-           
-               /* check newSuperior for "children" acl */
-               if ( !access_allowed( be, conn, op, np, children, NULL,
-                                     ACL_WRITE ) )
-               {
+                               send_ldap_error( op, rs, LDAP_OTHER,
+                                       "newSuperior not found" );
+                               goto return_results;
+                       }
+
+#ifdef NEW_LOGGING
+                       LDAP_LOG( BACK_LDBM, DETAIL1,
+                               "ldbm_back_modrdn: wr to new parent OK np=%p, id=%ld\n",
+                               np, np->e_id, 0 );
+#else
                        Debug( LDAP_DEBUG_TRACE,
-                              "ldbm_back_modrdn: no wr to newSup children\n",
-                              0, 0, 0 );
-                       send_ldap_result( conn, op, LDAP_INSUFFICIENT_ACCESS,
-                               NULL, NULL, NULL, NULL );
-                       goto return_results;
-               }
+                               "ldbm_back_modrdn: wr to new parent OK np=%p, id=%ld\n",
+                               np, np->e_id, 0 );
+#endif
 
-               if ( is_entry_alias( np ) ) {
-                       /* entry is an alias, don't allow bind */
-                       Debug( LDAP_DEBUG_TRACE, "entry is alias\n", 0,
-                           0, 0 );
+                       /* check newSuperior for "children" acl */
+                       if ( !access_allowed( op, np, children, NULL,
+                                             ACL_WRITE, NULL ) )
+                       {
+#ifdef NEW_LOGGING
+                               LDAP_LOG( BACK_LDBM, INFO,
+                                  "ldbm_back_modrdn: no wr to newSup children.\n", 0, 0, 0 );
+#else
+                               Debug( LDAP_DEBUG_TRACE,
+                                      "ldbm_back_modrdn: no wr to newSup children\n",
+                                      0, 0, 0 );
+#endif
 
-                       send_ldap_result( conn, op, LDAP_ALIAS_PROBLEM,
-                           NULL, NULL, NULL, NULL );
+                               send_ldap_error( op, rs, LDAP_INSUFFICIENT_ACCESS, NULL );
+                               goto return_results;
+                       }
 
-                       goto return_results;
-               }
+                       if ( is_entry_alias( np ) ) {
+                               /* parent is an alias, don't allow add */
+#ifdef NEW_LOGGING
+                               LDAP_LOG( BACK_LDBM, INFO,
+                                  "ldbm_back_modrdn: entry (%s) is an alias.\n", np->e_dn,0,0);
+#else
+                               Debug( LDAP_DEBUG_TRACE, "entry is alias\n", 0, 0, 0 );
+#endif
 
-               if ( is_entry_referral( np ) ) {
-                       /* parent is a referral, don't allow add */
-                       /* parent is an alias, don't allow add */
-                       Debug( LDAP_DEBUG_TRACE, "entry is referral\n", 0,
-                               0, 0 );
 
-                       send_ldap_result( conn, op, LDAP_OPERATIONS_ERROR,
-                           NULL, NULL, NULL, NULL );
+                               send_ldap_error( op, rs, LDAP_ALIAS_PROBLEM,
+                                   "newSuperior is an alias" );
 
-                       goto return_results;
+                               goto return_results;
+                       }
+
+                       if ( is_entry_referral( np ) ) {
+                               /* parent is a referral, don't allow add */
+#ifdef NEW_LOGGING
+                               LDAP_LOG( BACK_LDBM, INFO,
+                                       "ldbm_back_modrdn: entry (%s) is a referral\n",
+                                       np->e_dn, 0, 0 );
+#else
+                               Debug( LDAP_DEBUG_TRACE, "entry (%s) is referral\n",
+                                       np->e_dn, 0, 0 );
+#endif
+
+                               send_ldap_error( op, rs, LDAP_OTHER,
+                                   "newSuperior is a referral" );
+
+                               goto return_results;
+                       }
+
+               } else {
+
+                       /* no parent, must be root to modify newSuperior */
+                       if ( isroot == -1 ) {
+                               isroot = be_isroot( op->o_bd, &op->o_ndn );
+                       }
+
+                       if ( ! isroot ) {
+                               if ( be_issuffix( op->o_bd, (struct berval *)&slap_empty_bv ) || be_isupdate( op->o_bd, &op->o_ndn ) ) {
+                                       int     can_access;
+                                       np = (Entry *)&slap_entry_root;
+                               
+                                       can_access = access_allowed( op, np,
+                                                       children, NULL, ACL_WRITE, NULL );
+                                       np = NULL;
+                                                               
+                                       /* check parent for "children" acl */
+                                       if ( ! can_access ) {
+#ifdef NEW_LOGGING
+                                               LDAP_LOG( BACK_LDBM, ERR,
+                                                       "ldbm_back_modrdn: no access "
+                                                       "to new superior \"\"\n", 0, 0, 0 );
+#else
+                                               Debug( LDAP_DEBUG_TRACE,
+                                                       "<=- ldbm_back_modrdn: no "
+                                                       "access to new superior\n", 0, 0, 0 );
+#endif
+
+                                               send_ldap_error( op, rs,
+                                                       LDAP_INSUFFICIENT_ACCESS,
+                                                       NULL );
+                                               goto return_results;
+                                       }
+
+                               } else {
+#ifdef NEW_LOGGING
+                                       LDAP_LOG( BACK_LDBM, ERR,
+                                               "ldbm_back_modrdn: \"\" not allowed as new superior\n",
+                                               0, 0, 0 );
+#else
+                                       Debug( LDAP_DEBUG_TRACE,
+                                               "<=- ldbm_back_modrdn: \"\" "
+                                               "not allowed as new superior\n", 
+                                               0, 0, 0);
+#endif
+
+                                       send_ldap_error( op, rs,
+                                               LDAP_INSUFFICIENT_ACCESS,
+                                               NULL );
+                                       goto return_results;
+                               }
+                       }
                }
 
+#ifdef NEW_LOGGING
+               LDAP_LOG( BACK_LDBM, DETAIL1,
+                       "ldbm_back_modrdn: wr to new parent's children OK.\n", 0, 0, 0 );
+#else
                Debug( LDAP_DEBUG_TRACE,
-                      "ldbm_back_modrdn: wr to new parent's children OK\n",
-                      0, 0 , 0 );
+                   "ldbm_back_modrdn: wr to new parent's children OK\n",
+                   0, 0, 0 );
+#endif
 
-               new_parent_dn = np_dn;
+               new_parent_dn = op->oq_modrdn.rs_newSup;
        }
        
        /* Build target dn and make sure target entry doesn't exist already. */
+       build_new_dn( &new_dn, new_parent_dn, &op->oq_modrdn.rs_newrdn ); 
+       dnNormalize2( NULL, &new_dn, &new_ndn );
 
-       build_new_dn( &new_dn, e->e_dn, new_parent_dn, newrdn ); 
-
-
-       new_ndn = ch_strdup(new_dn);
-       (void) dn_normalize( new_ndn );
-
+#ifdef NEW_LOGGING
+       LDAP_LOG( BACK_LDBM, DETAIL1, "ldbm_back_modrdn: new ndn=%s\n", 
+               new_ndn.bv_val, 0, 0 );
+#else
        Debug( LDAP_DEBUG_TRACE, "ldbm_back_modrdn: new ndn=%s\n",
-              new_ndn, 0, 0 );
+           new_ndn.bv_val, 0, 0 );
+#endif
 
        /* check for abandon */
-       ldap_pvt_thread_mutex_lock( &op->o_abandonmutex );
        if ( op->o_abandon ) {
-               ldap_pvt_thread_mutex_unlock( &op->o_abandonmutex );
                goto return_results;
        }
 
-       ldap_pvt_thread_mutex_unlock( &op->o_abandonmutex );
-       if (dn2id ( be, new_ndn ) != NOID) {
-               send_ldap_result( conn, op, LDAP_ALREADY_EXISTS,
-                       NULL, NULL, NULL, NULL );
+       if ( ( rc_id = dn2id ( op->o_bd, &new_ndn, &id ) ) || id != NOID ) {
+               /* if (rc_id) something bad happened to ldbm cache */
+               rs->sr_err = rc_id ? LDAP_OTHER : LDAP_ALREADY_EXISTS;
+               send_ldap_result( op, rs );
                goto return_results;
        }
 
+#ifdef NEW_LOGGING
+       LDAP_LOG( BACK_LDBM, INFO, "ldbm_back_modrdn: new ndn (%s) does not exist\n",
+               new_ndn.bv_val, 0, 0 );
+#else
        Debug( LDAP_DEBUG_TRACE,
-              "ldbm_back_modrdn: new ndn=%s does not exist\n",
-              new_ndn, 0, 0 );
+           "ldbm_back_modrdn: new ndn=%s does not exist\n",
+           new_ndn.bv_val, 0, 0 );
+#endif
 
        /* Get attribute type and attribute value of our new rdn, we will
         * need to add that to our new entry
         */
-
-       if ( (new_rdn_type = rdn_attr_type( newrdn )) == NULL ) {
-           
-               Debug( LDAP_DEBUG_TRACE,
-                      "ldbm_back_modrdn: can't figure out type of newrdn\n",
-                      0, 0, 0 );
-               send_ldap_result( conn, op, LDAP_OPERATIONS_ERROR,
-                       NULL, "unknown type used in RDN", NULL, NULL );
-               goto return_results;            
-
-       }
-
-       if ( (new_rdn_val = rdn_attr_value( newrdn )) == NULL ) {
-           
+       if ( ldap_bv2rdn( &op->oq_modrdn.rs_newrdn, &new_rdn, (char **)&rs->sr_text,
+               LDAP_DN_FORMAT_LDAP ) )
+       {
+#ifdef NEW_LOGGING
+               LDAP_LOG ( OPERATION, ERR, 
+                       "ldbm_back_modrdn: can't figure out "
+                       "type(s)/values(s) of newrdn\n", 
+                       0, 0, 0 );
+#else
                Debug( LDAP_DEBUG_TRACE,
-                      "ldbm_back_modrdn: can't figure out val of newrdn\n",
-                      0, 0, 0 );
-               send_ldap_result( conn, op, LDAP_OPERATIONS_ERROR,
-                       NULL, "could not parse RDN value", NULL, NULL );
+                       "ldbm_back_modrdn: can't figure out "
+                       "type(s)/values(s) of newrdn\n", 
+                       0, 0, 0 );
+#endif
                goto return_results;            
-
        }
 
+#ifdef NEW_LOGGING
+       LDAP_LOG ( OPERATION, RESULTS, 
+               "ldbm_back_modrdn: new_rdn_type=\"%s\", "
+               "new_rdn_val=\"%s\"\n",
+               new_rdn[ 0 ][ 0 ]->la_attr.bv_val, 
+               new_rdn[ 0 ][ 0 ]->la_value.bv_val, 0 );
+#else
        Debug( LDAP_DEBUG_TRACE,
-              "ldbm_back_modrdn: new_rdn_val=\"%s\", new_rdn_type=\"%s\"\n",
-              new_rdn_val, new_rdn_type, 0 );
-
-       /* Retrieve the old rdn from the entry's dn */
-
-       if ( (old_rdn = dn_rdn( be, dn )) == NULL ) {
-               Debug( LDAP_DEBUG_TRACE,
-                      "ldbm_back_modrdn: can't figure out old_rdn from dn\n",
-                      0, 0, 0 );
-               send_ldap_result( conn, op, LDAP_OTHER,
-                       NULL, "could not parse old DN", NULL, NULL );
-               goto return_results;            
-       }
-
-       if ( (old_rdn_type = rdn_attr_type( old_rdn )) == NULL ) {
-               Debug( LDAP_DEBUG_TRACE,
-                      "ldbm_back_modrdn: can't figure out the old_rdn type\n",
-                      0, 0, 0 );
-               send_ldap_result( conn, op, LDAP_OTHER,
-                       NULL, "count parse RDN from old DN", NULL, NULL );
-               goto return_results;            
-       }
-       
-       if ( strcasecmp( old_rdn_type, new_rdn_type ) != 0 ) {
-           /* Not a big deal but we may say something */
-           Debug( LDAP_DEBUG_TRACE,
-                  "ldbm_back_modrdn: old_rdn_type=%s, new_rdn_type=%s!\n",
-                  old_rdn_type, new_rdn_type, 0 );
-       }               
-
-               Debug( LDAP_DEBUG_TRACE, "ldbm_back_modrdn: DN_X500\n",
-                      0, 0, 0 );
-               
-               /* Add new attribute value to the entry.
-                */
-
-               add_bvals[0] = &add_bv;         /* Array of bervals */
-               add_bvals[1] = NULL;
+               "ldbm_back_modrdn: new_rdn_type=\"%s\", "
+               "new_rdn_val=\"%s\"\n",
+               new_rdn[ 0 ][ 0 ]->la_attr.bv_val,
+               new_rdn[ 0 ][ 0 ]->la_value.bv_val, 0 );
+#endif
 
-               add_bv.bv_val = new_rdn_val;
-               add_bv.bv_len = strlen(new_rdn_val);
-               
-#ifdef SLAPD_SCHEMA_NOT_COMPAT
+       if ( op->oq_modrdn.rs_deleteoldrdn ) {
+               if ( ldap_bv2rdn( &op->o_req_dn, &old_rdn, (char **)&rs->sr_text,
+                       LDAP_DN_FORMAT_LDAP ) )
                {
-                       int rc;
-
-                       mod[0].sml_desc = NULL;
-                       rc = slap_str2ad( new_rdn_type, &mod[0].sml_desc, &text );
-
-                       if( rc != LDAP_SUCCESS ) {
-                               Debug( LDAP_DEBUG_TRACE,
-                                       "ldbm_back_modrdn: %s: %s (new)\n",
-                                       text, new_rdn_type, 0 );
-                               send_ldap_result( conn, op, rc,
-                                       NULL, text, NULL, NULL );
-                               goto return_results;            
-                       }
-               }
+#ifdef NEW_LOGGING
+                       LDAP_LOG ( OPERATION, ERR, 
+                               "ldbm_back_modrdn: can't figure out "
+                               "type(s)/values(s) of old_rdn\n", 
+                               0, 0, 0 );
 #else
-               mod[0].sml_type = new_rdn_type; 
+                       Debug( LDAP_DEBUG_TRACE,
+                               "ldbm_back_modrdn: can't figure out "
+                               "the old_rdn type(s)/value(s)\n", 
+                               0, 0, 0 );
 #endif
-               mod[0].sml_bvalues = add_bvals;
-               mod[0].sml_op = SLAP_MOD_SOFTADD;
-               mod[0].sml_next = NULL;
-
-               /* Remove old rdn value if required */
-
-               if (deleteoldrdn) {
-                       /* Get value of old rdn */
-       
-                       if ((old_rdn_val = rdn_attr_value( old_rdn ))
-                           == NULL) {
-                           
-                               Debug( LDAP_DEBUG_TRACE,
-                                      "ldbm_back_modrdn: can't figure out old_rdn_val from old_rdn\n",
-                                      0, 0, 0 );
-                               send_ldap_result( conn, op, LDAP_OTHER,
-                                       NULL, "could not parse value from old RDN", NULL, NULL );
-                               goto return_results;            
-                       }
-
-                       del_bvals[0] = &del_bv;         /* Array of bervals */
-                       del_bvals[1] = NULL;
-
-                       /* Remove old value of rdn as an attribute. */
-                   
-                       del_bv.bv_val = old_rdn_val;
-                       del_bv.bv_len = strlen(old_rdn_val);
-
-#ifdef SLAPD_SCHEMA_NOT_COMPAT
-                       {
-                               int rc;
-
-                               mod[1].sml_desc = NULL;
-                               rc = slap_str2ad( old_rdn_type, &mod[1].sml_desc, &text );
+                       goto return_results;            
+               }
+       }
 
-                               if( rc != LDAP_SUCCESS ) {
-                                       Debug( LDAP_DEBUG_TRACE,
-                                               "ldbm_back_modrdn: %s: %s (old)\n",
-                                               text, old_rdn_type, 0 );
-                                       send_ldap_result( conn, op, rc,
-                                               NULL, text, NULL, NULL );
-                                       goto return_results;            
-                               }
-                       }
+#ifdef NEW_LOGGING
+       LDAP_LOG( BACK_LDBM, DETAIL1, "ldbm_back_modrdn:  DN_X500\n", 0, 0, 0 );
 #else
-                       mod[1].sml_type = old_rdn_type; 
+       Debug( LDAP_DEBUG_TRACE, "ldbm_back_modrdn: DN_X500\n",
+              0, 0, 0 );
 #endif
-                       mod[0].sml_next = &mod[1];
-                       mod[1].sml_bvalues = del_bvals;
-                       mod[1].sml_op = LDAP_MOD_DELETE;
-                       mod[1].sml_next = NULL;
-
-                       Debug( LDAP_DEBUG_TRACE,
-                              "ldbm_back_modrdn: removing old_rdn_val=%s\n",
-                              old_rdn_val, 0, 0 );
-               }
        
+       if ( slap_modrdn2mods( op, rs, e, old_rdn, new_rdn, &mod ) != LDAP_SUCCESS ) {
+               goto return_results;
+       }
+
+
        /* check for abandon */
-       ldap_pvt_thread_mutex_lock( &op->o_abandonmutex );
        if ( op->o_abandon ) {
-               ldap_pvt_thread_mutex_unlock( &op->o_abandonmutex );
                goto return_results;
        }
-       ldap_pvt_thread_mutex_unlock( &op->o_abandonmutex );
 
        /* delete old one */
-       if ( dn2id_delete( be, e->e_ndn, e->e_id ) != 0 ) {
-               send_ldap_result( conn, op, LDAP_OTHER,
-                       NULL, "DN index delete fail", NULL, NULL );
+       if ( dn2id_delete( op->o_bd, &e->e_nname, e->e_id ) != 0 ) {
+               send_ldap_error( op, rs, LDAP_OTHER,
+                       "DN index delete fail" );
                goto return_results;
        }
 
        (void) cache_delete_entry( &li->li_cache, e );
+       rc = MUST_DESTROY;
 
        /* XXX: there is no going back! */
 
        free( e->e_dn );
        free( e->e_ndn );
-       e->e_dn = new_dn;
-       e->e_ndn = new_ndn;
-       new_dn = NULL;
-       new_ndn = NULL;
+       e->e_name = new_dn;
+       e->e_nname = new_ndn;
+       new_dn.bv_val = NULL;
+       new_ndn.bv_val = NULL;
+
+       /* NOTE: after this you must not free new_dn or new_ndn!
+        * They are used by cache.
+        */
 
        /* add new one */
-       if ( dn2id_add( be, e->e_ndn, e->e_id ) != 0 ) {
-               send_ldap_result( conn, op, LDAP_OTHER,
-                       NULL, "DN index add failed", NULL, NULL );
+       if ( dn2id_add( op->o_bd, &e->e_nname, e->e_id ) != 0 ) {
+               send_ldap_error( op, rs, LDAP_OTHER,
+                       "DN index add failed" );
                goto return_results;
        }
 
        /* modify memory copy of entry */
-       rc = ldbm_modify_internal( be, conn, op, dn, &mod[0], e, &text );
-
-       if( rc != LDAP_SUCCESS ) {
-               if( rc != SLAPD_ABANDON ) {
-                       send_ldap_result( conn, op, rc,
-                               NULL, text, NULL, NULL );
+       rc_id = ldbm_modify_internal( op, &mod[0], e,
+               &rs->sr_text, textbuf, textlen );
+       switch ( rc_id ) {
+       case LDAP_SUCCESS:
+               break;
+
+       case SLAPD_ABANDON:
+               /* too late ... */
+               rs->sr_err = rc_id;
+               send_ldap_result( op, rs );
+               goto return_results;
+       
+       default:
+               /* here we may try to delete the newly added dn */
+               if ( dn2id_delete( op->o_bd, &e->e_nname, e->e_id ) != 0 ) {
+                       /* we already are in trouble ... */
+                       ;
                }
-           
-           goto return_results;
+               goto return_results;
        }
        
        (void) cache_update_entry( &li->li_cache, e );
 
-       /* NOTE: after this you must not free new_dn or new_ndn!
-        * They are used by cache.
-        */
-
        /* id2entry index */
-       if ( id2entry_add( be, e ) != 0 ) {
-               entry_free( e );
-               send_ldap_result( conn, op, LDAP_OTHER,
-                       NULL, "entry update failed", NULL, NULL );
+       if ( id2entry_add( op->o_bd, e ) != 0 ) {
+               send_ldap_error( op, rs, LDAP_OTHER,
+                       "entry update failed" );
                goto return_results;
        }
 
-       send_ldap_result( conn, op, LDAP_SUCCESS,
-               NULL, NULL, NULL, NULL );
+       rs->sr_err = LDAP_SUCCESS;
+       send_ldap_result( op, rs );
        rc = 0;
+       cache_entry_commit( e );
 
 return_results:
-       if( new_dn != NULL ) free( new_dn );
-       if( new_ndn != NULL ) free( new_ndn );
-
-       if( p_dn != NULL ) free( p_dn );
-       if( p_ndn != NULL ) free( p_ndn );
+       if( new_dn.bv_val != NULL ) free( new_dn.bv_val );
+       if( new_ndn.bv_val != NULL ) free( new_ndn.bv_val );
 
        /* LDAP v2 supporting correct attribute handling. */
-       if( new_rdn_type != NULL ) free(new_rdn_type);
-       if( new_rdn_val != NULL ) free(new_rdn_val);
-       if( old_rdn != NULL ) free(old_rdn);
-       if( old_rdn_type != NULL ) free(old_rdn_type);
-       if( old_rdn_val != NULL ) free(old_rdn_val);
-
+       if ( new_rdn != NULL ) {
+               ldap_rdnfree( new_rdn );
+       }
+       if ( old_rdn != NULL ) {
+               ldap_rdnfree( old_rdn );
+       }
+       if ( mod != NULL ) {
+               Modifications *tmp;
+               for (; mod; mod = tmp ) {
+                       if ( mod->sml_nvalues ) free( mod->sml_nvalues[0].bv_val );
+                       tmp = mod->sml_next;
+                       free( mod );
+               }
+       }
 
        /* LDAP v3 Support */
-       if ( np_dn != NULL ) free( np_dn );
-       if ( np_ndn != NULL ) free( np_ndn );
-
        if( np != NULL ) {
                /* free new parent and writer lock */
                cache_return_entry_w( &li->li_cache, np );
@@ -525,12 +664,14 @@ return_results:
                cache_return_entry_w( &li->li_cache, p );
        }
 
-       if ( rootlock ) {
-               /* release root writer lock */
-               ldap_pvt_thread_mutex_unlock(&li->li_root_mutex);
-       }
-
        /* free entry and writer lock */
        cache_return_entry_w( &li->li_cache, e );
+       if ( rc == MUST_DESTROY ) {
+               /* if rc == MUST_DESTROY the entry is uncached 
+                * and its private data is destroyed; 
+                * the entry must be freed */
+               entry_free( e );
+       }
+       ldap_pvt_thread_rdwr_wunlock(&li->li_giant_rwlock);
        return( rc );
 }