]> git.sur5r.net Git - openldap/blobdiff - servers/slapd/back-monitor/init.c
honor disclose
[openldap] / servers / slapd / back-monitor / init.c
index 92e90f7880f1e96f2cebc3130de339cf39987743..8747e2a8912bcbc2a36b1e308f76fb4a1afcbb72 100644 (file)
@@ -2,7 +2,7 @@
 /* $OpenLDAP$ */
 /* This work is part of OpenLDAP Software <http://www.openldap.org/>.
  *
- * Copyright 2001-2004 The OpenLDAP Foundation.
+ * Copyright 2001-2005 The OpenLDAP Foundation.
  * Portions Copyright 2001-2003 Pierangelo Masarati.
  * All rights reserved.
  *
 
 /*
  * used by many functions to add description to entries
+ *
+ * WARNING: be_monitor may change as new databases are added,
+ * so it should not be used outside monitor_back_db_init()
+ * until monitor_back_db_open is called.
  */
 BackendDB *be_monitor = NULL;
 
+static struct monitor_subsys_t **monitor_subsys = NULL;
+static int                     monitor_subsys_opened = 0;
+
 /*
  * subsystem data
+ *
+ * the known subsystems are added to the subsystems
+ * array at backend initialization; other subsystems
+ * may be added by calling monitor_back_register_subsys()
+ * before the database is opened (e.g. by other backends
+ * or by overlays or modules).
  */
-struct monitorsubsys monitor_subsys[] = {
+static struct monitor_subsys_t known_monitor_subsys[] = {
        { 
-               SLAPD_MONITOR_LISTENER, SLAPD_MONITOR_LISTENER_NAME,    
-               BER_BVNULL, BER_BVNULL, BER_BVNULL,
-               MONITOR_F_PERSISTENT_CH,
-               monitor_subsys_listener_init,
-               NULL,   /* update */
-               NULL,   /* create */
-               NULL    /* modify */
-               }, { 
-               SLAPD_MONITOR_DATABASE, SLAPD_MONITOR_DATABASE_NAME,    
-               BER_BVNULL, BER_BVNULL, BER_BVNULL,
-               MONITOR_F_PERSISTENT_CH,
-               monitor_subsys_database_init,
-               NULL,   /* update */
-               NULL,   /* create */
-               NULL    /* modify */
-               }, { 
-               SLAPD_MONITOR_BACKEND, SLAPD_MONITOR_BACKEND_NAME, 
+               SLAPD_MONITOR_BACKEND_NAME, 
                BER_BVNULL, BER_BVNULL, BER_BVNULL,
                MONITOR_F_PERSISTENT_CH,
                monitor_subsys_backend_init,
@@ -65,31 +62,7 @@ struct monitorsubsys monitor_subsys[] = {
                NULL,   /* create */
                NULL    /* modify */
                }, { 
-               SLAPD_MONITOR_THREAD, SLAPD_MONITOR_THREAD_NAME,        
-               BER_BVNULL, BER_BVNULL, BER_BVNULL,
-               MONITOR_F_NONE,
-               monitor_subsys_thread_init,
-               monitor_subsys_thread_update,
-               NULL,   /* create */
-               NULL    /* modify */
-               }, { 
-               SLAPD_MONITOR_SASL, SLAPD_MONITOR_SASL_NAME,    
-               BER_BVNULL, BER_BVNULL, BER_BVNULL,
-               MONITOR_F_NONE,
-               NULL,   /* init */
-               NULL,   /* update */
-               NULL,   /* create */
-               NULL    /* modify */
-               }, { 
-               SLAPD_MONITOR_TLS, SLAPD_MONITOR_TLS_NAME,
-               BER_BVNULL, BER_BVNULL, BER_BVNULL,
-               MONITOR_F_NONE,
-               NULL,   /* init */
-               NULL,   /* update */
-               NULL,   /* create */
-               NULL    /* modify */
-               }, { 
-               SLAPD_MONITOR_CONN, SLAPD_MONITOR_CONN_NAME,
+               SLAPD_MONITOR_CONN_NAME,
                BER_BVNULL, BER_BVNULL, BER_BVNULL,
                MONITOR_F_VOLATILE_CH,
                monitor_subsys_conn_init,
@@ -97,15 +70,23 @@ struct monitorsubsys monitor_subsys[] = {
                monitor_subsys_conn_create,
                NULL    /* modify */
                }, { 
-               SLAPD_MONITOR_RWW, SLAPD_MONITOR_RWW_NAME,
+               SLAPD_MONITOR_DATABASE_NAME,    
                BER_BVNULL, BER_BVNULL, BER_BVNULL,
                MONITOR_F_PERSISTENT_CH,
-               monitor_subsys_rww_init,
-               monitor_subsys_rww_update,
-               NULL,   /* create */
+               monitor_subsys_database_init,
+               NULL,   /* update */
+               NULL,   /* create */
+               monitor_subsys_database_modify
+               }, { 
+               SLAPD_MONITOR_LISTENER_NAME,    
+               BER_BVNULL, BER_BVNULL, BER_BVNULL,
+               MONITOR_F_PERSISTENT_CH,
+               monitor_subsys_listener_init,
+               NULL,   /* update */
+               NULL,   /* create */
                NULL    /* modify */
                }, { 
-               SLAPD_MONITOR_LOG, SLAPD_MONITOR_LOG_NAME,
+               SLAPD_MONITOR_LOG_NAME,
                BER_BVNULL, BER_BVNULL, BER_BVNULL,
                MONITOR_F_NONE,
                monitor_subsys_log_init,
@@ -113,7 +94,7 @@ struct monitorsubsys monitor_subsys[] = {
                NULL,   /* create */
                monitor_subsys_log_modify
                }, { 
-               SLAPD_MONITOR_OPS, SLAPD_MONITOR_OPS_NAME,
+               SLAPD_MONITOR_OPS_NAME,
                BER_BVNULL, BER_BVNULL, BER_BVNULL,
                MONITOR_F_PERSISTENT_CH,
                monitor_subsys_ops_init,
@@ -121,7 +102,23 @@ struct monitorsubsys monitor_subsys[] = {
                NULL,   /* create */
                NULL,   /* modify */
                }, { 
-               SLAPD_MONITOR_SENT, SLAPD_MONITOR_SENT_NAME,
+               SLAPD_MONITOR_OVERLAY_NAME,
+               BER_BVNULL, BER_BVNULL, BER_BVNULL,
+               MONITOR_F_PERSISTENT_CH,
+               monitor_subsys_overlay_init,
+               NULL,   /* update */
+               NULL,   /* create */
+               NULL,   /* modify */
+       }, { 
+               SLAPD_MONITOR_SASL_NAME,        
+               BER_BVNULL, BER_BVNULL, BER_BVNULL,
+               MONITOR_F_NONE,
+               NULL,   /* init */
+               NULL,   /* update */
+               NULL,   /* create */
+               NULL    /* modify */
+               }, { 
+               SLAPD_MONITOR_SENT_NAME,
                BER_BVNULL, BER_BVNULL, BER_BVNULL,
                MONITOR_F_PERSISTENT_CH,
                monitor_subsys_sent_init,
@@ -129,7 +126,15 @@ struct monitorsubsys monitor_subsys[] = {
                NULL,   /* create */
                NULL,   /* modify */
                }, { 
-               SLAPD_MONITOR_TIME, SLAPD_MONITOR_TIME_NAME,
+               SLAPD_MONITOR_THREAD_NAME,      
+               BER_BVNULL, BER_BVNULL, BER_BVNULL,
+               MONITOR_F_PERSISTENT_CH,
+               monitor_subsys_thread_init,
+               monitor_subsys_thread_update,
+               NULL,   /* create */
+               NULL    /* modify */
+               }, { 
+               SLAPD_MONITOR_TIME_NAME,
                BER_BVNULL, BER_BVNULL, BER_BVNULL,
                MONITOR_F_PERSISTENT_CH,
                monitor_subsys_time_init,
@@ -137,40 +142,535 @@ struct monitorsubsys monitor_subsys[] = {
                NULL,   /* create */
                NULL,   /* modify */
                }, { 
-               SLAPD_MONITOR_OVERLAY, SLAPD_MONITOR_OVERLAY_NAME,
+               SLAPD_MONITOR_TLS_NAME,
                BER_BVNULL, BER_BVNULL, BER_BVNULL,
-               MONITOR_F_PERSISTENT_CH,
-               monitor_subsys_overlay_init,
-               NULL,   /* update */
+               MONITOR_F_NONE,
+               NULL,   /* init */
+               NULL,   /* update */
                NULL,   /* create */
-               NULL,   /* modify */
-       }, { -1, NULL }
+               NULL    /* modify */
+               }, { 
+               SLAPD_MONITOR_RWW_NAME,
+               BER_BVNULL, BER_BVNULL, BER_BVNULL,
+               MONITOR_F_PERSISTENT_CH,
+               monitor_subsys_rww_init,
+               monitor_subsys_rww_update,
+               NULL,   /* create */
+               NULL    /* modify */
+               }, { NULL }
 };
 
-#ifdef SLAPD_MONITOR_DYNAMIC
+int
+monitor_back_register_subsys( monitor_subsys_t *ms )
+{
+       int     i = 0;
+
+       if ( monitor_subsys ) {
+               for ( ; monitor_subsys[ i ] != NULL; i++ )
+                       /* just count'em */ ;
+       }
+
+       monitor_subsys = ch_realloc( monitor_subsys,
+                       ( 2 + i ) * sizeof( monitor_subsys_t * ) );
+
+       if ( monitor_subsys == NULL ) {
+               return -1;
+       }
+
+       monitor_subsys[ i ] = ms;
+       monitor_subsys[ i + 1 ] = NULL;
+
+       /* if a subsystem is registered __AFTER__ subsystem 
+        * initialization (depending on the sequence the databases
+        * are listed in slapd.conf), init it */
+       if ( monitor_subsys_opened ) {
+
+               /* FIXME: this should only be possible
+                * if be_monitor is already initialized */
+               assert( be_monitor );
+
+               if ( ms->mss_open && ( *ms->mss_open )( be_monitor, ms ) ) {
+                       return -1;
+               }
+
+               ms->mss_flags |= MONITOR_F_OPENED;
+       }
+
+       return 0;
+}
+
+enum {
+       LIMBO_ENTRY,
+       LIMBO_ATTRS,
+       LIMBO_CB
+};
+
+typedef struct entry_limbo_t {
+       int                     el_type;
+       Entry                   *el_e;
+       Attribute               *el_a;
+       struct berval           el_ndn;
+       struct berval           el_base;
+       int                     el_scope;
+       struct berval           el_filter;
+       monitor_callback_t      *el_cb;
+       struct entry_limbo_t    *el_next;
+} entry_limbo_t;
 
 int
-init_module( int argc, char *argv[] )
+monitor_back_register_entry(
+               Entry                   *e,
+               monitor_callback_t      *cb )
 {
-       BackendInfo bi;
+       monitor_info_t  *mi = ( monitor_info_t * )be_monitor->be_private;
+
+       assert( mi != NULL );
+       assert( e != NULL );
+       assert( e->e_private == NULL );
+       
+       if ( monitor_subsys_opened ) {
+               Entry           *e_parent = NULL,
+                               *e_new = NULL,
+                               **ep = NULL;
+               struct berval   pdn = BER_BVNULL;
+               monitor_entry_t *mp = NULL,
+                               *mp_parent = NULL;
+               int             rc = 0;
+
+               if ( monitor_cache_get( mi, &e->e_nname, &e_parent ) == 0 ) {
+                       /* entry exists */
+                       Debug( LDAP_DEBUG_ANY,
+                               "monitor_back_register_entry(\"%s\"): "
+                               "entry exists\n",
+                               e->e_name.bv_val, 0, 0 );
+                       monitor_cache_release( mi, e_parent );
+                       return -1;
+               }
+
+               dnParent( &e->e_nname, &pdn );
+               if ( monitor_cache_get( mi, &pdn, &e_parent ) != 0 ) {
+                       /* parent does not exist */
+                       Debug( LDAP_DEBUG_ANY,
+                               "monitor_back_register_entry(\"%s\"): "
+                               "parent \"%s\" not found\n",
+                               e->e_name.bv_val, pdn.bv_val, 0 );
+                       return -1;
+               }
+
+               assert( e_parent->e_private != NULL );
+               mp_parent = ( monitor_entry_t * )e_parent->e_private;
+
+               if ( mp_parent->mp_flags & MONITOR_F_VOLATILE ) {
+                       /* entry is volatile; cannot append children */
+                       Debug( LDAP_DEBUG_ANY,
+                               "monitor_back_register_entry(\"%s\"): "
+                               "parent \"%s\" is volatile\n",
+                               e->e_name.bv_val, e_parent->e_name.bv_val, 0 );
+                       rc = -1;
+                       goto done;
+               }
+
+               mp = monitor_entrypriv_create();
+               if ( mp == NULL ) {
+                       Debug( LDAP_DEBUG_ANY,
+                               "monitor_back_register_entry(\"%s\"): "
+                               "monitor_entrypriv_create() failed\n",
+                               e->e_name.bv_val, 0, 0 );
+                       rc = -1;
+                       goto done;
+               }
+
+               e_new = entry_dup( e );
+               if ( e == NULL ) {
+                       Debug( LDAP_DEBUG_ANY,
+                               "monitor_back_register_entry(\"%s\"): "
+                               "entry_dup() failed\n",
+                               e->e_name.bv_val, 0, 0 );
+                       rc = -1;
+                       goto done;
+               }
+               
+               e_new->e_private = ( void * )mp;
+               mp->mp_info = mp_parent->mp_info;
+               mp->mp_flags = mp_parent->mp_flags | MONITOR_F_SUB;
+
+               ep = &mp_parent->mp_children;
+               for ( ; *ep; ) {
+                       mp_parent = ( monitor_entry_t * )(*ep)->e_private;
+                       ep = &mp_parent->mp_next;
+               }
+               *ep = e_new;
+
+               if ( monitor_cache_add( mi, e_new ) ) {
+                       Debug( LDAP_DEBUG_ANY,
+                               "monitor_back_register_entry(\"%s\"): "
+                               "unable to add entry\n",
+                               e->e_name.bv_val, 0, 0 );
+                       rc = -1;
+                       goto done;
+               }
+
+done:;
+               if ( rc ) {
+                       if ( mp ) {
+                               ch_free( mp );
+                       }
+                       if ( e_new ) {
+                               e_new->e_private = NULL;
+                               entry_free( e_new );
+                       }
+               }
+
+               if ( e_parent ) {
+                       monitor_cache_release( mi, e_parent );
+               }
+
+       } else {
+               entry_limbo_t   *elp, el = { 0 };
+
+               el.el_type = LIMBO_ENTRY;
+
+               el.el_e = entry_dup( e );
+               if ( el.el_e == NULL ) {
+                       Debug( LDAP_DEBUG_ANY,
+                               "monitor_back_register_entry(\"%s\"): "
+                               "entry_dup() failed\n",
+                               e->e_name.bv_val, 0, 0 );
+                       return -1;
+               }
+               
+               el.el_cb = cb;
+
+               elp = (entry_limbo_t *)ch_malloc( sizeof( entry_limbo_t ) );
+               if ( elp ) {
+                       el.el_e->e_private = NULL;
+                       entry_free( el.el_e );
+                       return -1;
+               }
+
+               el.el_next = (entry_limbo_t *)mi->mi_entry_limbo;
+               *elp = el;
+               mi->mi_entry_limbo = (void *)elp;
+       }
 
-       memset( &bi, '\0', sizeof(bi) );
-       bi.bi_type = "monitor";
-       bi.bi_init = monitor_back_initialize;
-       backend_add( &bi );
        return 0;
 }
 
-#endif /* SLAPD_MONITOR_DYNAMIC */
+static int
+monitor_filter2ndn_cb( Operation *op, SlapReply *rs )
+{
+       if ( rs->sr_type == REP_SEARCH ) {
+               struct berval   *ndn = op->o_callback->sc_private;
+               
+               ber_dupbv( ndn, &rs->sr_entry->e_nname );
+       }
+
+       return 0;
+}
+
+int
+monitor_filter2ndn( struct berval *base, int scope, struct berval *filter,
+               struct berval *ndn )
+{
+       Connection      conn = { 0 };
+       char opbuf[OPERATION_BUFFER_SIZE];
+       Operation       *op;
+       SlapReply       rs = { 0 };
+       slap_callback   cb = { NULL, monitor_filter2ndn_cb, NULL, NULL };
+       AttributeName   anlist[ 2 ];
+       int             rc;
+
+       BER_BVZERO( ndn );
+
+       if ( be_monitor == NULL ) {
+               return -1;
+       }
+
+       op = (Operation *)opbuf;
+       connection_fake_init( &conn, op, &conn );
+
+       op->o_tag = LDAP_REQ_SEARCH;
+
+       /* use global malloc for now */
+       op->o_tmpmemctx = NULL;
+       op->o_tmpmfuncs = &ch_mfuncs;
+
+       op->o_bd = be_monitor;
+       if ( base == NULL || BER_BVISNULL( base ) ) {
+               ber_dupbv_x( &op->o_req_dn, &op->o_bd->be_suffix[ 0 ],
+                               op->o_tmpmemctx );
+               ber_dupbv_x( &op->o_req_ndn, &op->o_bd->be_nsuffix[ 0 ],
+                               op->o_tmpmemctx );
+
+       } else {
+               if ( dnPrettyNormal( NULL, base, &op->o_req_dn, &op->o_req_ndn,
+                                       op->o_tmpmemctx ) ) {
+                       /* error */
+               }
+       }
+
+       op->o_callback = &cb;
+       cb.sc_private = (void *)ndn;
+
+       op->ors_scope = scope;
+       ber_dupbv_x( &op->ors_filterstr, filter, op->o_tmpmemctx );
+       op->ors_filter = str2filter_x( op, filter->bv_val );
+       op->ors_attrs = anlist;
+       BER_BVSTR( &anlist[ 0 ].an_name, LDAP_NO_ATTRS );
+       BER_BVZERO( &anlist[ 1 ].an_name );
+       op->ors_attrsonly = 0;
+       op->ors_tlimit = SLAP_NO_LIMIT;
+       op->ors_slimit = 1;
+       op->ors_limit = NULL;
+       op->ors_deref = LDAP_DEREF_NEVER;
+
+       op->o_nocaching = 1;
+       op->o_managedsait = SLAP_CONTROL_NONCRITICAL;
+
+       rc = op->o_bd->be_search( op, &rs );
+
+       filter_free_x( op, op->ors_filter );
+       op->o_tmpfree( op->ors_filterstr.bv_val, op->o_tmpmemctx );
+       op->o_tmpfree( op->o_req_dn.bv_val, op->o_tmpmemctx );
+       op->o_tmpfree( op->o_req_ndn.bv_val, op->o_tmpmemctx );
+
+       if ( rc != 0 ) {
+               return rc;
+       }
+
+       switch ( rs.sr_err ) {
+       case LDAP_SUCCESS:
+               if ( BER_BVISNULL( ndn ) ) {
+                       rc = -1;
+               }
+               break;
+                       
+       case LDAP_SIZELIMIT_EXCEEDED:
+       default:
+               if ( !BER_BVISNULL( ndn ) ) {
+                       ber_memfree( ndn->bv_val );
+                       BER_BVZERO( ndn );
+               }
+               rc = -1;
+               break;
+       }
+
+       return rc;
+}
+
+int
+monitor_back_register_entry_attrs(
+               struct berval           *ndn_in,
+               Attribute               *a,
+               monitor_callback_t      *cb,
+               struct berval           *base,
+               int                     scope,
+               struct berval           *filter )
+{
+       monitor_info_t  *mi = ( monitor_info_t * )be_monitor->be_private;
+       struct berval   ndn = BER_BVNULL;
+
+       assert( mi != NULL );
+
+       if ( ndn_in != NULL ) {
+               ndn = *ndn_in;
+       }
+
+       if ( a == NULL && cb == NULL ) {
+               /* nothing to do */
+               return -1;
+       }
+
+       if ( ( ndn_in == NULL || BER_BVISNULL( &ndn ) )
+                       && BER_BVISNULL( filter ) )
+       {
+               /* need a filter */
+               Debug( LDAP_DEBUG_ANY,
+                       "monitor_back_register_entry_*(\"\"): "
+                       "need a valid filter\n",
+                       0, 0, 0 );
+               return -1;
+       }
+
+       if ( monitor_subsys_opened ) {
+               Entry                   *e = NULL;
+               Attribute               **atp = NULL;
+               monitor_entry_t         *mp = NULL;
+               monitor_callback_t      **mcp = NULL;
+               int                     rc = 0;
+               int                     freeit = 0;
+
+               if ( BER_BVISNULL( &ndn ) ) {
+                       if ( monitor_filter2ndn( base, scope, filter, &ndn ) ) {
+                               /* entry does not exist */
+                               Debug( LDAP_DEBUG_ANY,
+                                       "monitor_back_register_entry_*(\"\"): "
+                                       "base=%s scope=%d filter=%s : "
+                                       "unable to find entry\n",
+                                       base->bv_val ? base->bv_val : "\"\"",
+                                       scope, filter->bv_val );
+                               return -1;
+                       }
+
+                       freeit = 1;
+               }
+
+               if ( monitor_cache_get( mi, &ndn, &e ) != 0 ) {
+                       /* entry does not exist */
+                       Debug( LDAP_DEBUG_ANY,
+                               "monitor_back_register_entry_*(\"%s\"): "
+                               "entry does not exist\n",
+                               ndn.bv_val, 0, 0 );
+                       rc = -1;
+                       goto done;
+               }
+
+               assert( e->e_private != NULL );
+               mp = ( monitor_entry_t * )e->e_private;
+
+               if ( mp->mp_flags & MONITOR_F_VOLATILE ) {
+                       /* entry is volatile; cannot append callback */
+                       Debug( LDAP_DEBUG_ANY,
+                               "monitor_back_register_entry_*(\"%s\"): "
+                               "entry is volatile\n",
+                               e->e_name.bv_val, 0, 0 );
+                       rc = -1;
+                       goto done;
+               }
+
+               if ( a ) {
+                       for ( atp = &e->e_attrs; *atp; atp = &(*atp)->a_next )
+                               /* just get to last */ ;
+
+                       *atp = attrs_dup( a );
+                       if ( *atp == NULL ) {
+                               Debug( LDAP_DEBUG_ANY,
+                                       "monitor_back_register_entry_*(\"%s\"): "
+                                       "attrs_dup() failed\n",
+                                       e->e_name.bv_val, 0, 0 );
+                               rc = -1;
+                               goto done;
+                       }
+               }
+
+               if ( cb ) {
+                       for ( mcp = &mp->mp_cb; *mcp; mcp = &(*mcp)->mc_next )
+                               /* go to tail */ ;
+               
+                       /* NOTE: we do not clear cb->mc_next, so this function
+                        * can be used to append a list of callbacks */
+                       (*mcp) = cb;
+               }
+
+done:;
+               if ( rc ) {
+                       if ( *atp ) {
+                               attrs_free( *atp );
+                               *atp = NULL;
+                       }
+               }
+
+               if ( freeit ) {
+                       ber_memfree( ndn.bv_val );
+               }
+
+               if ( e ) {
+                       monitor_cache_release( mi, e );
+               }
+
+       } else {
+               entry_limbo_t   *elp, el = { 0 };
+
+               el.el_type = LIMBO_ATTRS;
+               if ( !BER_BVISNULL( &ndn ) ) {
+                       ber_dupbv( &el.el_ndn, &ndn );
+               }
+               if ( !BER_BVISNULL( base ) ) {
+                       ber_dupbv( &el.el_base, base);
+               }
+               el.el_scope = scope;
+               if ( !BER_BVISNULL( filter ) ) {
+                       ber_dupbv( &el.el_filter, filter );
+               }
+
+               el.el_a = attrs_dup( a );
+               el.el_cb = cb;
+
+               elp = (entry_limbo_t *)ch_malloc( sizeof( entry_limbo_t ) );
+               if ( elp == NULL ) {
+                       attrs_free( a );
+                       return -1;
+               }
+
+               el.el_next = (entry_limbo_t *)mi->mi_entry_limbo;
+               *elp = el;
+               mi->mi_entry_limbo = (void *)elp;;
+       }
+
+       return 0;
+}
+
+int
+monitor_back_register_entry_callback(
+               struct berval           *ndn,
+               monitor_callback_t      *cb,
+               struct berval           *base,
+               int                     scope,
+               struct berval           *filter )
+{
+       return monitor_back_register_entry_attrs( ndn, NULL, cb,
+                       base, scope, filter );
+}
+
+monitor_subsys_t *
+monitor_back_get_subsys( const char *name )
+{
+       if ( monitor_subsys != NULL ) {
+               int     i;
+               
+               for ( i = 0; monitor_subsys[ i ] != NULL; i++ ) {
+                       if ( strcasecmp( monitor_subsys[ i ]->mss_name, name ) == 0 ) {
+                               return monitor_subsys[ i ];
+                       }
+               }
+       }
+
+       return NULL;
+}
+
+monitor_subsys_t *
+monitor_back_get_subsys_by_dn( struct berval *ndn, int sub )
+{
+       if ( monitor_subsys != NULL ) {
+               int     i;
+
+               if ( sub ) {
+                       for ( i = 0; monitor_subsys[ i ] != NULL; i++ ) {
+                               if ( dnIsSuffix( ndn, &monitor_subsys[ i ]->mss_ndn ) ) {
+                                       return monitor_subsys[ i ];
+                               }
+                       }
+
+               } else {
+                       for ( i = 0; monitor_subsys[ i ] != NULL; i++ ) {
+                               if ( dn_match( ndn, &monitor_subsys[ i ]->mss_ndn ) ) {
+                                       return monitor_subsys[ i ];
+                               }
+                       }
+               }
+       }
+
+       return NULL;
+}
 
 int
 monitor_back_initialize(
        BackendInfo     *bi
 )
 {
-       static char *controls[] = {
+       monitor_subsys_t        *ms;
+       static char             *controls[] = {
                LDAP_CONTROL_MANAGEDSAIT,
-               LDAP_CONTROL_VALUESRETURNFILTER,
                NULL
        };
 
@@ -222,92 +722,26 @@ monitor_back_initialize(
        bi->bi_connection_init = 0;
        bi->bi_connection_destroy = 0;
 
-       return 0;
-}
-
-int
-monitor_back_db_init(
-       BackendDB       *be
-)
-{
-       struct monitorinfo      *mi;
-       int                     rc;
-       struct berval           dn, ndn;
-       struct berval           bv;
-
-       /*
-        * database monitor can be defined once only
-        */
-       if ( be_monitor ) {
-#ifdef NEW_LOGGING
-               LDAP_LOG( OPERATION, CRIT,
-                       "only one monitor backend is allowed\n", 0, 0, 0);
-#else
-               Debug( LDAP_DEBUG_ANY,
-                       "only one monitor backend is allowed\n", 0, 0, 0 );
-#endif
-               return( -1 );
-       }
-       be_monitor = be;
-
-       /* indicate system schema supported */
-       SLAP_DBFLAGS(be) |= SLAP_BFLAG_MONITOR;
-
-       dn.bv_val = SLAPD_MONITOR_DN;
-       dn.bv_len = sizeof( SLAPD_MONITOR_DN ) - 1;
-
-       rc = dnNormalize( 0, NULL, NULL, &dn, &ndn, NULL );
-       if( rc != LDAP_SUCCESS ) {
-#ifdef NEW_LOGGING
-               LDAP_LOG( OPERATION, CRIT,
-                       "unable to normalize monitor DN \"%s\"\n",
-                       SLAPD_MONITOR_DN, 0, 0 );
-#else
-               Debug( LDAP_DEBUG_ANY,
-                       "unable to normalize monitor DN \"%s\"\n",
-                       SLAPD_MONITOR_DN, 0, 0 );
-#endif
-               return -1;
-       }
-
-       ber_dupbv( &bv, &dn );
-       ber_bvarray_add( &be->be_suffix, &bv );
-       ber_bvarray_add( &be->be_nsuffix, &ndn );
-
-       mi = ( struct monitorinfo * )ch_calloc( sizeof( struct monitorinfo ), 1 );
-       if ( mi == NULL ) {
-#ifdef NEW_LOGGING
-               LDAP_LOG( OPERATION, CRIT,
-                       "unable to initialize monitor backend\n", 0, 0, 0 );
-#else
-               Debug( LDAP_DEBUG_ANY,
-                       "unable to initialize monitor backend\n", 0, 0, 0 );
-#endif
-               return -1;
+       for ( ms = known_monitor_subsys; ms->mss_name != NULL; ms++ ) {
+               if ( monitor_back_register_subsys( ms ) ) {
+                       return -1;
+               }
        }
 
-       memset( mi, 0, sizeof( struct monitorinfo ) );
-
-       ldap_pvt_thread_mutex_init( &mi->mi_cache_mutex );
-
-       be->be_private = mi;
-       
        return 0;
 }
 
 int
-monitor_back_db_open(
+monitor_back_db_init(
        BackendDB       *be
 )
 {
-       struct monitorinfo      *mi = (struct monitorinfo *)be->be_private;
-       struct monitorsubsys    *ms;
-       Entry                   *e, *e_tmp;
-       struct monitorentrypriv *mp;
-       int                     i, k;
-       char                    buf[ BACKMONITOR_BUFSIZE ], *end_of_line;
-       const char              *text;
-       struct berval           bv;
+       monitor_info_t  *mi;
+       int             i, rc;
+       struct berval   dn, ndn;
+       struct berval   bv;
+       const char      *text;
+
        struct m_s {
                char    *name;
                char    *schema;
@@ -334,42 +768,42 @@ monitor_back_db_open(
                                "$ managedInfo "
                                "$ monitorOverlay "
                        ") )", SLAP_OC_OPERATIONAL|SLAP_OC_HIDE,
-                       offsetof(struct monitorinfo, mi_oc_monitor) },
+                       offsetof(monitor_info_t, mi_oc_monitor) },
                { "monitorServer", "( 1.3.6.1.4.1.4203.666.3.7 "
                        "NAME 'monitorServer' "
                        "DESC 'Server monitoring root entry' "
                        "SUP monitor STRUCTURAL )", SLAP_OC_OPERATIONAL|SLAP_OC_HIDE,
-                       offsetof(struct monitorinfo, mi_oc_monitorServer) },
+                       offsetof(monitor_info_t, mi_oc_monitorServer) },
                { "monitorContainer", "( 1.3.6.1.4.1.4203.666.3.8 "
                        "NAME 'monitorContainer' "
                        "DESC 'monitor container class' "
                        "SUP monitor STRUCTURAL )", SLAP_OC_OPERATIONAL|SLAP_OC_HIDE,
-                       offsetof(struct monitorinfo, mi_oc_monitorContainer) },
+                       offsetof(monitor_info_t, mi_oc_monitorContainer) },
                { "monitorCounterObject", "( 1.3.6.1.4.1.4203.666.3.9 "
                        "NAME 'monitorCounterObject' "
                        "DESC 'monitor counter class' "
                        "SUP monitor STRUCTURAL )", SLAP_OC_OPERATIONAL|SLAP_OC_HIDE,
-                       offsetof(struct monitorinfo, mi_oc_monitorCounterObject) },
+                       offsetof(monitor_info_t, mi_oc_monitorCounterObject) },
                { "monitorOperation", "( 1.3.6.1.4.1.4203.666.3.10 "
                        "NAME 'monitorOperation' "
                        "DESC 'monitor operation class' "
                        "SUP monitor STRUCTURAL )", SLAP_OC_OPERATIONAL|SLAP_OC_HIDE,
-                       offsetof(struct monitorinfo, mi_oc_monitorOperation) },
+                       offsetof(monitor_info_t, mi_oc_monitorOperation) },
                { "monitorConnection", "( 1.3.6.1.4.1.4203.666.3.11 "
                        "NAME 'monitorConnection' "
                        "DESC 'monitor connection class' "
                        "SUP monitor STRUCTURAL )", SLAP_OC_OPERATIONAL|SLAP_OC_HIDE,
-                       offsetof(struct monitorinfo, mi_oc_monitorConnection) },
+                       offsetof(monitor_info_t, mi_oc_monitorConnection) },
                { "managedObject", "( 1.3.6.1.4.1.4203.666.3.12 "
                        "NAME 'managedObject' "
                        "DESC 'monitor managed entity class' "
                        "SUP monitor STRUCTURAL )", SLAP_OC_OPERATIONAL|SLAP_OC_HIDE,
-                       offsetof(struct monitorinfo, mi_oc_managedObject) },
-               { "monitoredObject", "( 1.3.6.1.4.1.4203.666.3.13 "
+                       offsetof(monitor_info_t, mi_oc_managedObject) },
+               { "monitoredObject", "( 1.3.6.1.4.1.4203.666.3.14 "
                        "NAME 'monitoredObject' "
                        "DESC 'monitor monitored entity class' "
                        "SUP monitor STRUCTURAL )", SLAP_OC_OPERATIONAL|SLAP_OC_HIDE,
-                       offsetof(struct monitorinfo, mi_oc_monitoredObject) },
+                       offsetof(monitor_info_t, mi_oc_monitoredObject) },
                { NULL, NULL, 0, -1 }
        }, mat[] = {
                { "monitoredInfo", "( 1.3.6.1.4.1.4203.666.1.14 "
@@ -381,12 +815,12 @@ monitor_back_db_open(
                        "SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{32768} "
                        "NO-USER-MODIFICATION "
                        "USAGE directoryOperation )", SLAP_AT_HIDE,
-                       offsetof(struct monitorinfo, mi_ad_monitoredInfo) },
+                       offsetof(monitor_info_t, mi_ad_monitoredInfo) },
                { "managedInfo", "( 1.3.6.1.4.1.4203.666.1.15 "
                        "NAME 'managedInfo' "
                        "DESC 'monitor managed info' "
                        "SUP name )", SLAP_AT_HIDE,
-                       offsetof(struct monitorinfo, mi_ad_managedInfo) },
+                       offsetof(monitor_info_t, mi_ad_managedInfo) },
                { "monitorCounter", "( 1.3.6.1.4.1.4203.666.1.16 "
                        "NAME 'monitorCounter' "
                        "DESC 'monitor counter' "
@@ -395,28 +829,28 @@ monitor_back_db_open(
                        "SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 "
                        "NO-USER-MODIFICATION "
                        "USAGE directoryOperation )", SLAP_AT_HIDE,
-                       offsetof(struct monitorinfo, mi_ad_monitorCounter) },
+                       offsetof(monitor_info_t, mi_ad_monitorCounter) },
                { "monitorOpCompleted", "( 1.3.6.1.4.1.4203.666.1.17 "
                        "NAME 'monitorOpCompleted' "
                        "DESC 'monitor completed operations' "
                        "SUP monitorCounter "
                        "NO-USER-MODIFICATION "
                        "USAGE directoryOperation )", SLAP_AT_FINAL|SLAP_AT_HIDE,
-                       offsetof(struct monitorinfo, mi_ad_monitorOpCompleted) },
+                       offsetof(monitor_info_t, mi_ad_monitorOpCompleted) },
                { "monitorOpInitiated", "( 1.3.6.1.4.1.4203.666.1.18 "
                        "NAME 'monitorOpInitiated' "
                        "DESC 'monitor initiated operations' "
                        "SUP monitorCounter "
                        "NO-USER-MODIFICATION "
                        "USAGE directoryOperation )", SLAP_AT_FINAL|SLAP_AT_HIDE,
-                       offsetof(struct monitorinfo, mi_ad_monitorOpInitiated) },
+                       offsetof(monitor_info_t, mi_ad_monitorOpInitiated) },
                { "monitorConnectionNumber", "( 1.3.6.1.4.1.4203.666.1.19 "
                        "NAME 'monitorConnectionNumber' "
                        "DESC 'monitor connection number' "
                        "SUP monitorCounter "
                        "NO-USER-MODIFICATION "
                        "USAGE directoryOperation )", SLAP_AT_FINAL|SLAP_AT_HIDE,
-                       offsetof(struct monitorinfo, mi_ad_monitorConnectionNumber) },
+                       offsetof(monitor_info_t, mi_ad_monitorConnectionNumber) },
                { "monitorConnectionAuthzDN", "( 1.3.6.1.4.1.4203.666.1.20 "
                        "NAME 'monitorConnectionAuthzDN' "
                        "DESC 'monitor connection authorization DN' "
@@ -425,21 +859,21 @@ monitor_back_db_open(
                        "SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 "
                        "NO-USER-MODIFICATION "
                        "USAGE directoryOperation )", SLAP_AT_FINAL|SLAP_AT_HIDE,
-                       offsetof(struct monitorinfo, mi_ad_monitorConnectionAuthzDN) },
+                       offsetof(monitor_info_t, mi_ad_monitorConnectionAuthzDN) },
                { "monitorConnectionLocalAddress", "( 1.3.6.1.4.1.4203.666.1.21 "
                        "NAME 'monitorConnectionLocalAddress' "
                        "DESC 'monitor connection local address' "
                        "SUP monitoredInfo "
                        "NO-USER-MODIFICATION "
                        "USAGE directoryOperation )", SLAP_AT_FINAL|SLAP_AT_HIDE,
-                       offsetof(struct monitorinfo, mi_ad_monitorConnectionLocalAddress) },
+                       offsetof(monitor_info_t, mi_ad_monitorConnectionLocalAddress) },
                { "monitorConnectionPeerAddress", "( 1.3.6.1.4.1.4203.666.1.22 "
                        "NAME 'monitorConnectionPeerAddress' "
                        "DESC 'monitor connection peer address' "
                        "SUP monitoredInfo "
                        "NO-USER-MODIFICATION "
                        "USAGE directoryOperation )", SLAP_AT_FINAL|SLAP_AT_HIDE,
-                       offsetof(struct monitorinfo, mi_ad_monitorConnectionPeerAddress) },
+                       offsetof(monitor_info_t, mi_ad_monitorConnectionPeerAddress) },
                { "monitorTimestamp", "( 1.3.6.1.4.1.4203.666.1.24 "
                        "NAME 'monitorTimestamp' "
                        "DESC 'monitor timestamp' "
@@ -449,14 +883,27 @@ monitor_back_db_open(
                        "SINGLE-VALUE "
                        "NO-USER-MODIFICATION "
                        "USAGE directoryOperation )", SLAP_AT_FINAL|SLAP_AT_HIDE,
-                       offsetof(struct monitorinfo, mi_ad_monitorTimestamp) },
+                       offsetof(monitor_info_t, mi_ad_monitorTimestamp) },
                { "monitorOverlay", "( 1.3.6.1.4.1.4203.666.1.27 "
                        "NAME 'monitorOverlay' "
                        "DESC 'name of overlays defined for a give database' "
                        "SUP monitoredInfo "
                        "NO-USER-MODIFICATION "
                        "USAGE directoryOperation )", SLAP_AT_HIDE,
-                       offsetof(struct monitorinfo, mi_ad_monitorOverlay) },
+                       offsetof(monitor_info_t, mi_ad_monitorOverlay) },
+               { "readOnly", "( 1.3.6.1.4.1.4203.666.1.31 "
+                       "NAME 'readOnly' "
+                       "DESC 'read/write status of a given database' "
+                       "EQUALITY booleanMatch "
+                       "SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 "
+                       "SINGLE-VALUE "
+                       "USAGE directoryOperation )", SLAP_AT_HIDE,
+                       offsetof(monitor_info_t, mi_ad_readOnly) },
+               { "restrictedOperation", "( 1.3.6.1.4.1.4203.666.1.32 "
+                       "NAME 'restrictedOperation' "
+                       "DESC 'name of restricted operation for a given database' "
+                       "SUP managedInfo )", SLAP_AT_HIDE,
+                       offsetof(monitor_info_t, mi_ad_restrictedOperation ) },
 #ifdef INTEGRATE_CORE_SCHEMA
                { NULL, NULL, 0, -1 },  /* description */
                { NULL, NULL, 0, -1 },  /* seeAlso */
@@ -471,332 +918,248 @@ monitor_back_db_open(
                        "EQUALITY caseIgnoreMatch "
                        "SUBSTR caseIgnoreSubstringsMatch "
                        "SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{1024} )", 0,
-                       offsetof(struct monitorinfo, mi_ad_description) },
+                       offsetof(monitor_info_t, mi_ad_description) },
                { "seeAlso", "( 2.5.4.34 "
                        "NAME 'seeAlso' "
                        "DESC 'RFC2256: DN of related object' "
                        "SUP distinguishedName )", 0,
-                       offsetof(struct monitorinfo, mi_ad_seeAlso) },
+                       offsetof(monitor_info_t, mi_ad_seeAlso) },
                { "l", "( 2.5.4.7 "
                        "NAME ( 'l' 'localityName' ) "
                        "DESC 'RFC2256: locality which this object resides in' "
                        "SUP name )", 0,
-                       offsetof(struct monitorinfo, mi_ad_l) },
+                       offsetof(monitor_info_t, mi_ad_l) },
+#ifdef MONITOR_DEFINE_LABELEDURI
                { "labeledURI", "( 1.3.6.1.4.1.250.1.57 "
                        "NAME 'labeledURI' "
                        "DESC 'RFC2079: Uniform Resource Identifier with optional label' "
                        "EQUALITY caseExactMatch "
                        "SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )", 0,
-                       offsetof(struct monitorinfo, mi_ad_labeledURI) },
+                       offsetof(monitor_info_t, mi_ad_labeledURI) },
+#endif /* MONITOR_DEFINE_LABELEDURI */
                { NULL, NULL, 0, -1 }
        };
        
-       struct tm               *tms;
-#ifdef HAVE_GMTIME_R
-       struct tm               tm_buf;
-#endif
-       static char             tmbuf[ LDAP_LUTIL_GENTIME_BUFSIZE ];
-
        /*
-        * Start
+        * database monitor can be defined once only
         */
-#ifndef HAVE_GMTIME_R
-       ldap_pvt_thread_mutex_lock( &gmtime_mutex );
-#endif
-#ifdef HACK_LOCAL_TIME
-# ifdef HAVE_LOCALTIME_R
-       tms = localtime_r( &starttime, &tm_buf );
-# else
-       tms = localtime( &starttime );
-# endif /* HAVE_LOCALTIME_R */
-       lutil_localtime( tmbuf, sizeof(tmbuf), tms, -timezone );
-#else /* !HACK_LOCAL_TIME */
-# ifdef HAVE_GMTIME_R
-       tms = gmtime_r( &starttime, &tm_buf );
-# else
-       tms = gmtime( &starttime );
-# endif /* HAVE_GMTIME_R */
-       lutil_gentime( tmbuf, sizeof(tmbuf), tms );
-#endif /* !HACK_LOCAL_TIME */
-#ifndef HAVE_GMTIME_R
-       ldap_pvt_thread_mutex_unlock( &gmtime_mutex );
-#endif
+       if ( be_monitor ) {
+               Debug( LDAP_DEBUG_ANY,
+                       "only one monitor backend is allowed\n", 0, 0, 0 );
+               return( -1 );
+       }
+       be_monitor = be;
 
-       mi->mi_startTime.bv_val = tmbuf;
-       mi->mi_startTime.bv_len = strlen( tmbuf );
+       /* indicate system schema supported */
+       SLAP_BFLAGS(be) |= SLAP_BFLAG_MONITOR;
+
+       dn.bv_val = SLAPD_MONITOR_DN;
+       dn.bv_len = sizeof( SLAPD_MONITOR_DN ) - 1;
+
+       rc = dnNormalize( 0, NULL, NULL, &dn, &ndn, NULL );
+       if( rc != LDAP_SUCCESS ) {
+               Debug( LDAP_DEBUG_ANY,
+                       "unable to normalize monitor DN \"%s\"\n",
+                       SLAPD_MONITOR_DN, 0, 0 );
+               return -1;
+       }
+
+       ber_dupbv( &bv, &dn );
+       ber_bvarray_add( &be->be_suffix, &bv );
+       ber_bvarray_add( &be->be_nsuffix, &ndn );
+
+       mi = ( monitor_info_t * )ch_calloc( sizeof( monitor_info_t ), 1 );
+       if ( mi == NULL ) {
+               Debug( LDAP_DEBUG_ANY,
+                       "unable to initialize monitor backend\n", 0, 0, 0 );
+               return -1;
+       }
 
+       memset( mi, 0, sizeof( monitor_info_t ) );
+
+       ldap_pvt_thread_mutex_init( &mi->mi_cache_mutex );
+
+       be->be_private = mi;
+       
 #ifdef INTEGRATE_CORE_SCHEMA
        /* prepare for schema integration */
-       for ( k = 0; mat[k].name != NULL; k++ );
+       for ( k = 0; mat[ k ].name != NULL; k++ );
 #endif /* INTEGRATE_CORE_SCHEMA */
 
-       for ( i = 0; mat_core[i].name != NULL; i++ ) {
+       for ( i = 0; mat_core[ i ].name != NULL; i++ ) {
                AttributeDescription    **ad;
                const char              *text;
 
-               ad = ((AttributeDescription **)&(((char *)mi)[mat_core[i].offset]));
-               ad[0] = NULL;
+               ad = ((AttributeDescription **)&(((char *)mi)[ mat_core[ i ].offset ]));
+               ad[ 0 ] = NULL;
 
-               switch (slap_str2ad( mat_core[i].name, ad, &text ) ) {
+               switch (slap_str2ad( mat_core[ i ].name, ad, &text ) ) {
                case LDAP_SUCCESS:
                        break;
 
 #ifdef INTEGRATE_CORE_SCHEMA
                case LDAP_UNDEFINED_TYPE:
-                       mat[k] = mat_core[i];
+                       mat[ k ] = mat_core[ i ];
                        k++;
                        break;
 #endif /* INTEGRATE_CORE_SCHEMA */
 
                default:
-#ifdef NEW_LOGGING
-                       LDAP_LOG( OPERATION, CRIT,
-                               "monitor_back_db_init: %s: %s\n",
-                               mat_core[i].name, text, 0 );
-#else
                        Debug( LDAP_DEBUG_ANY,
                                "monitor_back_db_init: %s: %s\n",
-                               mat_core[i].name, text, 0 );
-#endif
+                               mat_core[ i ].name, text, 0 );
                        return( -1 );
                }
        }
 
        /* schema integration */
-       for ( i = 0; mat[i].name; i++ ) {
+       for ( i = 0; mat[ i ].name; i++ ) {
                LDAPAttributeType       *at;
                int                     code;
                const char              *err;
                AttributeDescription    **ad;
 
-               at = ldap_str2attributetype( mat[i].schema, &code,
+               at = ldap_str2attributetype( mat[ i ].schema, &code,
                        &err, LDAP_SCHEMA_ALLOW_ALL );
                if ( !at ) {
-#ifdef NEW_LOGGING
-                       LDAP_LOG( OPERATION, CRIT, "monitor_back_db_init: "
-                               "in AttributeType '%s' %s before %s\n",
-                               mat[i].name, ldap_scherr2str(code), err );
-#else
                        Debug( LDAP_DEBUG_ANY, "monitor_back_db_init: "
-                               "in AttributeType '%s' %s before %s\n",
-                               mat[i].name, ldap_scherr2str(code), err );
-#endif
+                               "in AttributeType \"%s\" %s before %s\n",
+                               mat[ i ].name, ldap_scherr2str(code), err );
                        return -1;
                }
 
                if ( at->at_oid == NULL ) {
-#ifdef NEW_LOGGING
-                       LDAP_LOG( OPERATION, CRIT, "monitor_back_db_init: "
-                               "null OID for attributeType '%s'\n",
-                               mat[i].name, 0, 0 );
-#else
                        Debug( LDAP_DEBUG_ANY, "monitor_back_db_init: "
-                               "null OID for attributeType '%s'\n",
-                               mat[i].name, 0, 0 );
-#endif
+                               "null OID for attributeType \"%s\"\n",
+                               mat[ i ].name, 0, 0 );
                        return -1;
                }
 
-               code = at_add(at, &err);
+               code = at_add(at, 0, NULL, &err);
                if ( code ) {
-#ifdef NEW_LOGGING
-                       LDAP_LOG( OPERATION, CRIT, "monitor_back_db_init: "
-                               "%s in attributeType '%s'\n",
-                               scherr2str(code), mat[i].name, 0 );
-#else
                        Debug( LDAP_DEBUG_ANY, "monitor_back_db_init: "
-                               "%s in attributeType '%s'\n",
-                               scherr2str(code), mat[i].name, 0 );
-#endif
+                               "%s in attributeType \"%s\"\n",
+                               scherr2str(code), mat[ i ].name, 0 );
                        return -1;
                }
                ldap_memfree(at);
 
-               ad = ((AttributeDescription **)&(((char *)mi)[mat[i].offset]));
-               ad[0] = NULL;
-               if ( slap_str2ad( mat[i].name, ad, &text ) ) {
-#ifdef NEW_LOGGING
-                       LDAP_LOG( OPERATION, CRIT,
-                               "monitor_back_db_init: %s\n", text, 0, 0 );
-#else
+               ad = ((AttributeDescription **)&(((char *)mi)[ mat[ i ].offset ]));
+               ad[ 0 ] = NULL;
+               if ( slap_str2ad( mat[ i ].name, ad, &text ) ) {
                        Debug( LDAP_DEBUG_ANY,
                                "monitor_back_db_init: %s\n", text, 0, 0 );
-#endif
                        return -1;
                }
 
-               (*ad)->ad_type->sat_flags |= mat[i].flags;
+               (*ad)->ad_type->sat_flags |= mat[ i ].flags;
        }
 
-       for ( i = 0; moc[i].name; i++ ) {
+       for ( i = 0; moc[ i ].name; i++ ) {
                LDAPObjectClass         *oc;
                int                     code;
                const char              *err;
                ObjectClass             *Oc;
 
-               oc = ldap_str2objectclass(moc[i].schema, &code, &err,
+               oc = ldap_str2objectclass(moc[ i ].schema, &code, &err,
                                LDAP_SCHEMA_ALLOW_ALL );
                if ( !oc ) {
-#ifdef NEW_LOGGING
-                       LDAP_LOG( OPERATION, CRIT,
-                               "unable to parse monitor objectclass '%s': "
-                               "%s before %s\n" , moc[i].name,
-                               ldap_scherr2str(code), err );
-#else
                        Debug( LDAP_DEBUG_ANY,
-                               "unable to parse monitor objectclass '%s': "
-                               "%s before %s\n" , moc[i].name,
+                               "unable to parse monitor objectclass \"%s\": "
+                               "%s before %s\n" , moc[ i ].name,
                                ldap_scherr2str(code), err );
-#endif
                        return -1;
                }
 
                if ( oc->oc_oid == NULL ) {
-#ifdef NEW_LOGGING
-                       LDAP_LOG( OPERATION, CRIT,
-                               "objectclass '%s' has no OID\n" ,
-                               moc[i].name, 0, 0 );
-#else
                        Debug( LDAP_DEBUG_ANY,
-                               "objectclass '%s' has no OID\n" ,
-                               moc[i].name, 0, 0 );
-#endif
+                               "objectclass \"%s\" has no OID\n" ,
+                               moc[ i ].name, 0, 0 );
                        return -1;
                }
 
-               code = oc_add(oc, 0, &err);
+               code = oc_add(oc, 0, NULL, &err);
                if ( code ) {
-#ifdef NEW_LOGGING
-                       LDAP_LOG( OPERATION, CRIT,
-                               "objectclass '%s': %s \"%s\"\n" ,
-                               moc[i].name, scherr2str(code), err );
-#else
                        Debug( LDAP_DEBUG_ANY,
-                               "objectclass '%s': %s \"%s\"\n" ,
-                               moc[i].name, scherr2str(code), err );
-#endif
+                               "objectclass \"%s\": %s \"%s\"\n" ,
+                               moc[ i ].name, scherr2str(code), err );
                        return -1;
                }
 
                ldap_memfree(oc);
 
-               Oc = oc_find( moc[i].name );
+               Oc = oc_find( moc[ i ].name );
                if ( Oc == NULL ) {
-#ifdef NEW_LOGGING
-                       LDAP_LOG( OPERATION, CRIT, "monitor_back_db_init: "
-                                       "unable to find objectClass %s "
-                                       "(just added)\n", moc[i].name, 0, 0 );
-#else
                        Debug( LDAP_DEBUG_ANY, "monitor_back_db_init: "
                                        "unable to find objectClass %s "
-                                       "(just added)\n", moc[i].name, 0, 0 );
-#endif
+                                       "(just added)\n", moc[ i ].name, 0, 0 );
                        return -1;
                }
 
-               Oc->soc_flags |= moc[i].flags;
+               Oc->soc_flags |= moc[ i ].flags;
 
-               ((ObjectClass **)&(((char *)mi)[moc[i].offset]))[0] = Oc;
+               ((ObjectClass **)&(((char *)mi)[ moc[ i ].offset ]))[ 0 ] = Oc;
        }
 
-       /*      
-        * Create all the subsystem specific entries
-        */
-       e_tmp = NULL;
-       for ( i = 0; monitor_subsys[ i ].mss_name != NULL; i++ ) {
-               int             len = strlen( monitor_subsys[ i ].mss_name );
-               struct berval   dn;
-               int             rc;
+       return 0;
+}
 
-               dn.bv_len = len + sizeof( "cn=" ) - 1;
-               dn.bv_val = ch_calloc( sizeof( char ), dn.bv_len + 1 );
-               strcpy( dn.bv_val, "cn=" );
-               strcat( dn.bv_val, monitor_subsys[ i ].mss_name );
-               rc = dnPretty( NULL, &dn, &monitor_subsys[ i ].mss_rdn, NULL );
-               free( dn.bv_val );
-               if ( rc != LDAP_SUCCESS ) {
-#ifdef NEW_LOGGING
-                       LDAP_LOG( OPERATION, CRIT,
-                               "monitor RDN \"%s\" is invalid\n", 
-                               dn.bv_val, 0, 0 );
-#else
-                       Debug( LDAP_DEBUG_ANY,
-                               "monitor RDN \"%s\" is invalid\n", 
-                               dn.bv_val, 0, 0 );
+int
+monitor_back_db_open(
+       BackendDB       *be
+)
+{
+       monitor_info_t          *mi = (monitor_info_t *)be->be_private;
+       struct monitor_subsys_t **ms;
+       Entry                   *e, **ep;
+       monitor_entry_t         *mp;
+       int                     i;
+       char                    buf[ BACKMONITOR_BUFSIZE ],
+                               *end_of_line;
+       struct berval           bv;
+       struct tm               *tms;
+#ifdef HAVE_GMTIME_R
+       struct tm               tm_buf;
 #endif
-                       return( -1 );
-               }
+       static char             tmbuf[ LDAP_LUTIL_GENTIME_BUFSIZE ];
 
-               dn.bv_len += sizeof( SLAPD_MONITOR_DN ); /* 1 for the , */
-               dn.bv_val = ch_malloc( dn.bv_len + 1 );
-               strcpy( dn.bv_val , monitor_subsys[ i ].mss_rdn.bv_val );
-               strcat( dn.bv_val, "," SLAPD_MONITOR_DN );
-               rc = dnPrettyNormal( NULL, &dn, &monitor_subsys[ i ].mss_dn,
-                       &monitor_subsys[ i ].mss_ndn, NULL );
-               free( dn.bv_val );
-               if ( rc != LDAP_SUCCESS ) {
-#ifdef NEW_LOGGING
-                       LDAP_LOG( OPERATION, CRIT,
-                               "monitor DN \"%s\" is invalid\n", 
-                               dn.bv_val, 0, 0 );
-#else
-                       Debug( LDAP_DEBUG_ANY,
-                               "monitor DN \"%s\" is invalid\n", 
-                               dn.bv_val, 0, 0 );
-#endif
-                       return( -1 );
-               }
+       assert( be_monitor );
+       if ( be != be_monitor ) {
+               be_monitor = be;
+       }
 
-               snprintf( buf, sizeof( buf ),
-                               "dn: %s\n"
-                               "objectClass: %s\n"
-                               "structuralObjectClass: %s\n"
-                               "cn: %s\n"
-                               "createTimestamp: %s\n"
-                               "modifyTimestamp: %s\n",
-                               monitor_subsys[ i ].mss_dn.bv_val,
-                               mi->mi_oc_monitorContainer->soc_cname.bv_val,
-                               mi->mi_oc_monitorContainer->soc_cname.bv_val,
-                               monitor_subsys[ i ].mss_name,
-                               mi->mi_startTime.bv_val,
-                               mi->mi_startTime.bv_val );
-               
-               e = str2entry( buf );
-               
-               if ( e == NULL) {
-#ifdef NEW_LOGGING
-                       LDAP_LOG( OPERATION, CRIT,
-                               "unable to create '%s' entry\n", 
-                               monitor_subsys[ i ].mss_dn.bv_val, 0, 0 );
-#else
-                       Debug( LDAP_DEBUG_ANY,
-                               "unable to create '%s' entry\n", 
-                               monitor_subsys[ i ].mss_dn.bv_val, 0, 0 );
+       /*
+        * Start
+        */
+#ifndef HAVE_GMTIME_R
+       ldap_pvt_thread_mutex_lock( &gmtime_mutex );
 #endif
-                       return( -1 );
-               }
-
-               mp = ( struct monitorentrypriv * )ch_calloc( sizeof( struct monitorentrypriv ), 1 );
-               e->e_private = ( void * )mp;
-               mp->mp_info = &monitor_subsys[ i ];
-               mp->mp_children = NULL;
-               mp->mp_next = e_tmp;
-               mp->mp_flags = monitor_subsys[ i ].mss_flags;
-
-               if ( monitor_cache_add( mi, e ) ) {
-#ifdef NEW_LOGGING
-                       LDAP_LOG( OPERATION, CRIT,
-                               "unable to add entry '%s' to cache\n",
-                               monitor_subsys[ i ].mss_dn.bv_val, 0, 0 );
-#else
-                       Debug( LDAP_DEBUG_ANY,
-                               "unable to add entry '%s' to cache\n",
-                               monitor_subsys[ i ].mss_dn.bv_val, 0, 0 );
+#ifdef HACK_LOCAL_TIME
+# ifdef HAVE_LOCALTIME_R
+       tms = localtime_r( &starttime, &tm_buf );
+# else
+       tms = localtime( &starttime );
+# endif /* HAVE_LOCALTIME_R */
+       lutil_localtime( tmbuf, sizeof(tmbuf), tms, -timezone );
+#else /* !HACK_LOCAL_TIME */
+# ifdef HAVE_GMTIME_R
+       tms = gmtime_r( &starttime, &tm_buf );
+# else
+       tms = gmtime( &starttime );
+# endif /* HAVE_GMTIME_R */
+       lutil_gentime( tmbuf, sizeof(tmbuf), tms );
+#endif /* !HACK_LOCAL_TIME */
+#ifndef HAVE_GMTIME_R
+       ldap_pvt_thread_mutex_unlock( &gmtime_mutex );
 #endif
-                       return -1;
-               }
 
-               e_tmp = e;
+       mi->mi_startTime.bv_val = tmbuf;
+       mi->mi_startTime.bv_len = strlen( tmbuf );
+
+       if ( BER_BVISEMPTY( &be->be_rootdn ) ) {
+               BER_BVSTR( &mi->mi_creatorsName, SLAPD_ANONYMOUS );
+       } else {
+               mi->mi_creatorsName = be->be_rootdn;
        }
 
        /*
@@ -813,6 +1176,8 @@ monitor_back_db_open(
                "%s: createTimestamp reflects the time this server instance was created.\n"
                "%s: modifyTimestamp reflects the time this server instance was last accessed.\n"
 #endif
+               "creatorsName: %s\n"
+               "modifiersName: %s\n"
                "createTimestamp: %s\n"
                "modifyTimestamp: %s\n",
                SLAPD_MONITOR_DN,
@@ -824,20 +1189,16 @@ monitor_back_db_open(
                mi->mi_ad_description->ad_cname.bv_val,
                mi->mi_ad_description->ad_cname.bv_val,
 #endif
+               mi->mi_creatorsName.bv_val,
+               mi->mi_creatorsName.bv_val,
                mi->mi_startTime.bv_val,
                mi->mi_startTime.bv_val );
 
        e = str2entry( buf );
        if ( e == NULL) {
-#ifdef NEW_LOGGING
-               LDAP_LOG( OPERATION, CRIT,
-                       "unable to create '%s' entry\n",
-                       SLAPD_MONITOR_DN, 0, 0 );
-#else
                Debug( LDAP_DEBUG_ANY,
-                       "unable to create '%s' entry\n",
+                       "unable to create \"%s\" entry\n",
                        SLAPD_MONITOR_DN, 0, 0 );
-#endif
                return( -1 );
        }
 
@@ -851,64 +1212,191 @@ monitor_back_db_open(
 
        if ( attr_merge_normalize_one( e, mi->mi_ad_monitoredInfo,
                                &bv, NULL ) ) {
-#ifdef NEW_LOGGING
-               LDAP_LOG( OPERATION, CRIT,
-                       "unable to add monitoredInfo to '%s' entry\n",
-                       SLAPD_MONITOR_DN, 0, 0 );
-#else
                Debug( LDAP_DEBUG_ANY,
-                       "unable to add monitoredInfo to '%s' entry\n",
+                       "unable to add monitoredInfo to \"%s\" entry\n",
                        SLAPD_MONITOR_DN, 0, 0 );
-#endif
                return( -1 );
        }
 
        if ( mi->mi_l.bv_len ) {
                if ( attr_merge_normalize_one( e, mi->mi_ad_l, &mi->mi_l, NULL ) ) {
-#ifdef NEW_LOGGING
-                       LDAP_LOG( OPERATION, CRIT,
-                               "unable to add locality to '%s' entry\n",
-                               SLAPD_MONITOR_DN, 0, 0 );
-#else
                        Debug( LDAP_DEBUG_ANY,
-                               "unable to add locality to '%s' entry\n",
+                               "unable to add locality to \"%s\" entry\n",
                                SLAPD_MONITOR_DN, 0, 0 );
-#endif
                        return( -1 );
                }
        }
 
-       mp = ( struct monitorentrypriv * )ch_calloc( sizeof( struct monitorentrypriv ), 1 );
+       mp = monitor_entrypriv_create();
+       if ( mp == NULL ) {
+               return -1;
+       }
        e->e_private = ( void * )mp;
-
-       mp->mp_info = NULL;
-       mp->mp_children = e_tmp;
-       mp->mp_next = NULL;
+       ep = &mp->mp_children;
 
        if ( monitor_cache_add( mi, e ) ) {
-#ifdef NEW_LOGGING
-               LDAP_LOG( OPERATION, CRIT,
-                       "unable to add entry '%s' to cache\n",
-                       SLAPD_MONITOR_DN, 0, 0 );
-#else
                Debug( LDAP_DEBUG_ANY,
-                       "unable to add entry '%s' to cache\n",
+                       "unable to add entry \"%s\" to cache\n",
                        SLAPD_MONITOR_DN, 0, 0 );
-#endif
                return -1;
        }
 
-       be->be_private = mi;
-       
+       /*      
+        * Create all the subsystem specific entries
+        */
+       for ( i = 0; monitor_subsys[ i ] != NULL; i++ ) {
+               int             len = strlen( monitor_subsys[ i ]->mss_name );
+               struct berval   dn;
+               int             rc;
+
+               dn.bv_len = len + sizeof( "cn=" ) - 1;
+               dn.bv_val = ch_calloc( sizeof( char ), dn.bv_len + 1 );
+               strcpy( dn.bv_val, "cn=" );
+               strcat( dn.bv_val, monitor_subsys[ i ]->mss_name );
+               rc = dnPretty( NULL, &dn, &monitor_subsys[ i ]->mss_rdn, NULL );
+               free( dn.bv_val );
+               if ( rc != LDAP_SUCCESS ) {
+                       Debug( LDAP_DEBUG_ANY,
+                               "monitor RDN \"%s\" is invalid\n", 
+                               dn.bv_val, 0, 0 );
+                       return( -1 );
+               }
+
+               dn.bv_len += sizeof( SLAPD_MONITOR_DN ); /* 1 for the , */
+               dn.bv_val = ch_malloc( dn.bv_len + 1 );
+               strcpy( dn.bv_val , monitor_subsys[ i ]->mss_rdn.bv_val );
+               strcat( dn.bv_val, "," SLAPD_MONITOR_DN );
+               rc = dnPrettyNormal( NULL, &dn, &monitor_subsys[ i ]->mss_dn,
+                       &monitor_subsys[ i ]->mss_ndn, NULL );
+               free( dn.bv_val );
+               if ( rc != LDAP_SUCCESS ) {
+                       Debug( LDAP_DEBUG_ANY,
+                               "monitor DN \"%s\" is invalid\n", 
+                               dn.bv_val, 0, 0 );
+                       return( -1 );
+               }
+
+               snprintf( buf, sizeof( buf ),
+                               "dn: %s\n"
+                               "objectClass: %s\n"
+                               "structuralObjectClass: %s\n"
+                               "cn: %s\n"
+                               "creatorsName: %s\n"
+                               "modifiersName: %s\n"
+                               "createTimestamp: %s\n"
+                               "modifyTimestamp: %s\n",
+                               monitor_subsys[ i ]->mss_dn.bv_val,
+                               mi->mi_oc_monitorContainer->soc_cname.bv_val,
+                               mi->mi_oc_monitorContainer->soc_cname.bv_val,
+                               monitor_subsys[ i ]->mss_name,
+                               mi->mi_creatorsName.bv_val,
+                               mi->mi_creatorsName.bv_val,
+                               mi->mi_startTime.bv_val,
+                               mi->mi_startTime.bv_val );
+               
+               e = str2entry( buf );
+               
+               if ( e == NULL) {
+                       Debug( LDAP_DEBUG_ANY,
+                               "unable to create \"%s\" entry\n", 
+                               monitor_subsys[ i ]->mss_dn.bv_val, 0, 0 );
+                       return( -1 );
+               }
+
+               mp = monitor_entrypriv_create();
+               if ( mp == NULL ) {
+                       return -1;
+               }
+               e->e_private = ( void * )mp;
+               mp->mp_info = monitor_subsys[ i ];
+               mp->mp_flags = monitor_subsys[ i ]->mss_flags;
+
+               if ( monitor_cache_add( mi, e ) ) {
+                       Debug( LDAP_DEBUG_ANY,
+                               "unable to add entry \"%s\" to cache\n",
+                               monitor_subsys[ i ]->mss_dn.bv_val, 0, 0 );
+                       return -1;
+               }
+
+               *ep = e;
+               ep = &mp->mp_next;
+       }
+
        assert( be );
 
+       be->be_private = mi;
+       
        /*
-        * opens the monitor backend
+        * opens the monitor backend subsystems
         */
-       for ( ms = monitor_subsys; ms->mss_name != NULL; ms++ ) {
-               if ( ms->mss_init && ( *ms->mss_init )( be ) ) {
+       for ( ms = monitor_subsys; ms[ 0 ] != NULL; ms++ ) {
+               if ( ms[ 0 ]->mss_open && ( *ms[ 0 ]->mss_open )( be, ms[ 0 ] ) )
+               {
                        return( -1 );
                }
+               ms[ 0 ]->mss_flags |= MONITOR_F_OPENED;
+       }
+
+       monitor_subsys_opened = 1;
+
+       if ( mi->mi_entry_limbo ) {
+               entry_limbo_t   *el = (entry_limbo_t *)mi->mi_entry_limbo;
+
+               for ( ; el; ) {
+                       entry_limbo_t   *tmp;
+
+                       switch ( el->el_type ) {
+                       case LIMBO_ENTRY:
+                               monitor_back_register_entry(
+                                               el->el_e,
+                                               el->el_cb );
+                               break;
+
+                       case LIMBO_ATTRS:
+                               monitor_back_register_entry_attrs(
+                                               &el->el_ndn,
+                                               el->el_a,
+                                               el->el_cb,
+                                               &el->el_base,
+                                               el->el_scope,
+                                               &el->el_filter );
+                               break;
+
+                       case LIMBO_CB:
+                               monitor_back_register_entry_callback(
+                                               &el->el_ndn,
+                                               el->el_cb,
+                                               &el->el_base,
+                                               el->el_scope,
+                                               &el->el_filter );
+                               break;
+
+                       default:
+                               assert( 0 );
+                       }
+
+                       if ( el->el_e ) {
+                               entry_free( el->el_e );
+                       }
+                       if ( el->el_a ) {
+                               attrs_free( el->el_a );
+                       }
+                       if ( !BER_BVISNULL( &el->el_ndn ) ) {
+                               ber_memfree( el->el_ndn.bv_val );
+                       }
+                       if ( !BER_BVISNULL( &el->el_base ) ) {
+                               ber_memfree( el->el_base.bv_val );
+                       }
+                       if ( !BER_BVISNULL( &el->el_filter ) ) {
+                               ber_memfree( el->el_filter.bv_val );
+                       }
+
+                       tmp = el;
+                       el = el->el_next;
+                       ch_free( tmp );
+               }
+
+               mi->mi_entry_limbo = NULL;
        }
 
        return( 0 );
@@ -938,7 +1426,7 @@ monitor_back_db_config(
        char        **argv
 )
 {
-       struct monitorinfo *mi = (struct monitorinfo *)be->be_private;
+       monitor_info_t  *mi = ( monitor_info_t * )be->be_private;
 
        /*
         * eventually, will hold database specific configuration parameters
@@ -968,3 +1456,10 @@ monitor_back_db_destroy(
        return 0;
 }
 
+#if SLAPD_MONITOR == SLAPD_MOD_DYNAMIC
+
+/* conditionally define the init_module() function */
+SLAP_BACKEND_INIT_MODULE( monitor )
+
+#endif /* SLAPD_MONITOR == SLAPD_MOD_DYNAMIC */
+