]> git.sur5r.net Git - openldap/blobdiff - servers/slapd/backend.c
Clean up
[openldap] / servers / slapd / backend.c
index e3da0501919740cf8ddfa3cfc23159465e96e028..fa749b85e90e85bf178e783884205e1d86b639e8 100644 (file)
 #ifdef SLAPD_LDBM
 #include "back-ldbm/external.h"
 #endif
+#ifdef SLAPD_META
+#include "back-meta/external.h"
+#endif
+#ifdef SLAPD_MONITOR
+#include "back-monitor/external.h"
+#endif
 #ifdef SLAPD_PASSWD
 #include "back-passwd/external.h"
 #endif
@@ -51,7 +57,7 @@
 
 static BackendInfo binfo[] = {
 #if defined(SLAPD_BDB) && !defined(SLAPD_BDB_DYNAMIC)
-       {"bdb", bdb_back_initialize},
+       {"bdb", bdb_initialize},
 #endif
 #if defined(SLAPD_DNSSRV) && !defined(SLAPD_DNSSRV_DYNAMIC)
        {"dnssrv",      dnssrv_back_initialize},
@@ -62,6 +68,12 @@ static BackendInfo binfo[] = {
 #if defined(SLAPD_LDBM) && !defined(SLAPD_LDBM_DYNAMIC)
        {"ldbm",        ldbm_back_initialize},
 #endif
+#if defined(SLAPD_META) && !defined(SLAPD_META_DYNAMIC)
+       {"meta",        meta_back_initialize},
+#endif
+#if defined(SLAPD_MONITOR) && !defined(SLAPD_MONITOR_DYNAMIC)
+       {"monitor",     monitor_back_initialize},
+#endif
 #if defined(SLAPD_PASSWD) && !defined(SLAPD_PASSWD_DYNAMIC)
        {"passwd",      passwd_back_initialize},
 #endif
@@ -96,8 +108,13 @@ int backend_init(void)
 
        if((nBackendInfo != 0) || (backendInfo != NULL)) {
                /* already initialized */
+#ifdef NEW_LOGGING
+               LDAP_LOG(( "backend", LDAP_LEVEL_ERR,
+                          "backend_init:  backend already initialized\n" ));
+#else
                Debug( LDAP_DEBUG_ANY,
                        "backend_init: already initialized.\n", 0, 0, 0 );
+#endif
                return -1;
        }
 
@@ -108,10 +125,15 @@ int backend_init(void)
                rc = binfo[nBackendInfo].bi_init( &binfo[nBackendInfo] );
 
                if(rc != 0) {
+#ifdef NEW_LOGGING
+                       LDAP_LOG(( "backend", LDAP_LEVEL_INFO,
+                                  "backend_init:  initialized for type \"%s\"\n",
+                                  binfo[nBackendInfo].bi_type ));
+#else
                        Debug( LDAP_DEBUG_ANY,
                                "backend_init: initialized for type \"%s\"\n",
                                        binfo[nBackendInfo].bi_type, 0, 0 );
-
+#endif
                        /* destroy those we've already inited */
                        for( nBackendInfo--;
                                nBackendInfo >= 0 ;
@@ -134,9 +156,15 @@ int backend_init(void)
 #ifdef SLAPD_MODULES   
        return 0;
 #else
-       Debug( LDAP_DEBUG_ANY,
+
+#ifdef NEW_LOGGING
+        LDAP_LOG(( "backend", LDAP_LEVEL_ERR,
+                   "backend_init: failed\n" ));
+#else
+        Debug( LDAP_DEBUG_ANY,
                "backend_init: failed\n",
                0, 0, 0 );
+#endif
 
        return rc;
 #endif /* SLAPD_MODULES */
@@ -147,9 +175,15 @@ int backend_add(BackendInfo *aBackendInfo)
    int rc = 0;
 
    if ((rc = aBackendInfo->bi_init(aBackendInfo)) != 0) {
+#ifdef NEW_LOGGING
+       LDAP_LOG(( "backend", LDAP_LEVEL_ERR,
+                  "backend_add:  initialization for type \"%s\" failed\n",
+                  aBackendInfo->bi_type ));
+#else
       Debug( LDAP_DEBUG_ANY,
             "backend_add: initialization for type \"%s\" failed\n",
             aBackendInfo->bi_type, 0, 0 );
+#endif
       return rc;
    }
 
@@ -182,26 +216,44 @@ int backend_startup(Backend *be)
 
        if( ! ( nBackendDB > 0 ) ) {
                /* no databases */
+#ifdef NEW_LOGGING
+               LDAP_LOG(( "backend", LDAP_LEVEL_INFO,
+                          "backend_startup: %d databases to startup. \n",
+                          nBackendDB ));
+#else
                Debug( LDAP_DEBUG_ANY,
                        "backend_startup: %d databases to startup.\n",
                        nBackendDB, 0, 0 );
+#endif
                return 1;
        }
 
        if(be != NULL) {
                /* startup a specific backend database */
+#ifdef NEW_LOGGING
+               LDAP_LOG(( "backend", LDAP_LEVEL_DETAIL1,
+                          "backend_startup:  starting \"%s\"\n",
+                          be->be_suffix[0] ));
+#else
                Debug( LDAP_DEBUG_TRACE,
-                       "backend_startup: starting database\n",
-                       0, 0, 0 );
+                       "backend_startup: starting \"%s\"\n",
+                       be->be_suffix[0], 0, 0 );
+#endif
 
                if ( be->bd_info->bi_open ) {
                        rc = be->bd_info->bi_open( be->bd_info );
                }
 
                if(rc != 0) {
+#ifdef NEW_LOGGING
+                       LDAP_LOG(( "backend", LDAP_LEVEL_CRIT,
+                                  "backend_startup: bi_open failed!\n" ));
+#else
                        Debug( LDAP_DEBUG_ANY,
                                "backend_startup: bi_open failed!\n",
                                0, 0, 0 );
+#endif
+
                        return rc;
                }
 
@@ -210,9 +262,14 @@ int backend_startup(Backend *be)
                }
 
                if(rc != 0) {
+#ifdef NEW_LOGGING
+                       LDAP_LOG(( "backend", LDAP_LEVEL_CRIT,
+                                  "backend_startup: bi_db_open failed!\n" ));
+#else
                        Debug( LDAP_DEBUG_ANY,
                                "backend_startup: bi_db_open failed!\n",
                                0, 0, 0 );
+#endif
                        return rc;
                }
 
@@ -232,9 +289,14 @@ int backend_startup(Backend *be)
                }
 
                if(rc != 0) {
+#ifdef NEW_LOGGING
+                       LDAP_LOG(( "backend", LDAP_LEVEL_CRIT,
+                                  "backend_startup: bi_open %d failed!\n", i ));
+#else
                        Debug( LDAP_DEBUG_ANY,
                                "backend_startup: bi_open %d failed!\n",
                                i, 0, 0 );
+#endif
                        return rc;
                }
        }
@@ -250,9 +312,14 @@ int backend_startup(Backend *be)
                }
 
                if(rc != 0) {
+#ifdef NEW_LOGGING
+                       LDAP_LOG(( "backend", LDAP_LEVEL_CRIT,
+                                  "backend_startup: bi_db_open %d failed!\n", i ));
+#else
                        Debug( LDAP_DEBUG_ANY,
                                "backend_startup: bi_db_open %d failed!\n",
                                i, 0, 0 );
+#endif
                        return rc;
                }
        }
@@ -304,9 +371,15 @@ int backend_shutdown( Backend *be )
                }
 
                if(rc != 0) {
+#ifdef NEW_LOGGING
+                       LDAP_LOG(( "backend", LDAP_LEVEL_NOTICE,
+                                  "backend_shutdown: bi_close %s failed!\n",
+                                  backendDB[i].be_type ));
+#else
                        Debug( LDAP_DEBUG_ANY,
                                "backend_close: bi_close %s failed!\n",
                                backendDB[i].be_type, 0, 0 );
+#endif
                }
        }
 
@@ -433,9 +506,12 @@ be_db_close( void )
 }
 
 Backend *
-select_backend( const char * dn )
+select_backend(
+       const char * dn,
+       int manageDSAit )
 {
        int     i, j, len, dnlen;
+       Backend *be = NULL;
 
        dnlen = strlen( dn );
        for ( i = 0; i < nbackends; i++ ) {
@@ -445,17 +521,33 @@ select_backend( const char * dn )
                        len = strlen( backends[i].be_nsuffix[j] );
 
                        if ( len > dnlen ) {
+                               /* suffix is longer than DN */
                                continue;
                        }
 
-                       if ( strcmp( backends[i].be_nsuffix[j],
-                           dn + (dnlen - len) ) == 0 ) {
-                               return( &backends[i] );
+                       
+                       if ( len && len < dnlen && !DN_SEPARATOR( dn[(dnlen-len)-1] ) ) {
+                               /* make sure we have a separator */
+                               continue;
+                       }
+                       
+
+                       if ( strcmp( backends[i].be_nsuffix[j], &dn[dnlen-len] ) == 0 ) {
+                               if( be == NULL ) {
+                                       be = &backends[i];
+
+                                       if( manageDSAit && len == dnlen ) {
+                                               continue;
+                                       }
+                               } else {
+                                       be = &backends[i];
+                               }
+                               return be;
                        }
                }
        }
 
-       return( NULL );
+       return be;
 }
 
 int
@@ -519,7 +611,7 @@ be_isroot_pw( Backend *be,
                return 0;
        }
 
-#if defined( SLAPD_CRYPT ) || defined( SLAPD_PASSWD )
+#if defined( SLAPD_CRYPT ) || defined( SLAPD_SPASSWD )
        ldap_pvt_thread_mutex_lock( &passwd_mutex );
 #ifdef SLAPD_SPASSWD
        lutil_passwd_sasl_conn = conn->c_sasl_context;
@@ -528,7 +620,7 @@ be_isroot_pw( Backend *be,
 
        result = lutil_passwd( &be->be_root_pw, cred, NULL );
 
-#if defined( SLAPD_CRYPT ) || defined( SLAPD_PASSWD )
+#if defined( SLAPD_CRYPT ) || defined( SLAPD_SPASSWD )
 #ifdef SLAPD_SPASSWD
        lutil_passwd_sasl_conn = NULL;
 #endif
@@ -539,11 +631,16 @@ be_isroot_pw( Backend *be,
 }
 
 int
-be_entry_release_rw( Backend *be, Entry *e, int rw )
+be_entry_release_rw(
+       BackendDB *be,
+       Connection *conn,
+       Operation *op,
+       Entry *e,
+       int rw )
 {
        if ( be->be_release ) {
                /* free and release entry from backend */
-               return be->be_release( be, e, rw );
+               return be->be_release( be, conn, op, e, rw );
        } else {
                /* free entry */
                entry_free( e );
@@ -630,7 +727,7 @@ backend_check_restrictions(
        Backend *be,
        Connection *conn,
        Operation *op,
-       const char *extoid,
+       const void *opdata,
        const char **text )
 {
        int rc;
@@ -694,7 +791,9 @@ backend_check_restrictions(
                return LDAP_OTHER;
        }
 
-       if (( extoid == NULL || strcmp( extoid, LDAP_EXOP_START_TLS ) ) ) {
+       if ( op->o_tag != LDAP_REQ_EXTENDED
+               || strcmp( (const char *) opdata, LDAP_EXOP_START_TLS ) )
+       {
                /* these checks don't apply to StartTLS */
 
                if( op->o_tag == LDAP_REQ_EXTENDED ) {
@@ -702,47 +801,62 @@ backend_check_restrictions(
                        updateop++;
                }
 
-               if( op->o_ssf < ssf->sss_ssf ) {
-                       *text = "confidentiality required";
-                       return LDAP_CONFIDENTIALITY_REQUIRED;
-               }
                if( op->o_transport_ssf < ssf->sss_transport ) {
                        *text = "transport confidentiality required";
                        return LDAP_CONFIDENTIALITY_REQUIRED;
                }
+
                if( op->o_tls_ssf < ssf->sss_tls ) {
                        *text = "TLS confidentiality required";
                        return LDAP_CONFIDENTIALITY_REQUIRED;
                }
-               if( op->o_sasl_ssf < ssf->sss_sasl ) {
-                       *text = "SASL confidentiality required";
-                       return LDAP_CONFIDENTIALITY_REQUIRED;
-               }
 
-               if( updateop ) {
-                       if( op->o_ssf < ssf->sss_update_ssf ) {
-                               *text = "update confidentiality required";
+               if( op->o_tag != LDAP_REQ_BIND || opdata == NULL ) {
+                       /* these checks don't apply to SASL bind */
+
+                       if( op->o_sasl_ssf < ssf->sss_sasl ) {
+                               *text = "SASL confidentiality required";
                                return LDAP_CONFIDENTIALITY_REQUIRED;
                        }
+
+                       if( op->o_ssf < ssf->sss_ssf ) {
+                               *text = "confidentiality required";
+                               return LDAP_CONFIDENTIALITY_REQUIRED;
+                       }
+               }
+
+               if( updateop ) {
                        if( op->o_transport_ssf < ssf->sss_update_transport ) {
                                *text = "transport update confidentiality required";
                                return LDAP_CONFIDENTIALITY_REQUIRED;
                        }
+
                        if( op->o_tls_ssf < ssf->sss_update_tls ) {
                                *text = "TLS update confidentiality required";
                                return LDAP_CONFIDENTIALITY_REQUIRED;
                        }
+
                        if( op->o_sasl_ssf < ssf->sss_update_sasl ) {
                                *text = "SASL update confidentiality required";
                                return LDAP_CONFIDENTIALITY_REQUIRED;
                        }
+
+                       if( op->o_ssf < ssf->sss_update_ssf ) {
+                               *text = "update confidentiality required";
+                               return LDAP_CONFIDENTIALITY_REQUIRED;
+                       }
+
+                       if( op->o_ndn == NULL ) {
+                               *text = "modifications require authentication";
+                               return LDAP_OPERATIONS_ERROR;
+                       }
                }
        }
 
-       if (( extoid == NULL || strcmp( extoid, LDAP_EXOP_START_TLS ) )
-               || op->o_tag == LDAP_REQ_BIND )
+       if ( op->o_tag != LDAP_REQ_BIND && ( op->o_tag != LDAP_REQ_EXTENDED ||
+               strcmp( (const char *) opdata, LDAP_EXOP_START_TLS ) ) )
        {
-               /* these checks don't apply to StartTLS or Bind */
+               /* these checks don't apply to Bind or StartTLS */
 
                if( requires & SLAP_REQUIRE_STRONG ) {
                        /* should check mechanism */
@@ -831,6 +945,8 @@ int backend_check_referrals(
 int 
 backend_group(
        Backend *be,
+       Connection *conn,
+       Operation *op,
        Entry   *target,
        const char      *gr_ndn,
        const char      *op_ndn,
@@ -841,7 +957,7 @@ backend_group(
        if( strcmp( target->e_ndn, gr_ndn ) != 0 ) {
                /* we won't attempt to send it to a different backend */
                
-               be = select_backend(gr_ndn);
+               be = select_backend(gr_ndn, 0);
 
                if (be == NULL) {
                        return LDAP_NO_SUCH_OBJECT;
@@ -849,7 +965,8 @@ backend_group(
        } 
 
        if( be->be_group ) {
-               return be->be_group( be, target, gr_ndn, op_ndn,
+               return be->be_group( be, conn, op,
+                       target, gr_ndn, op_ndn,
                        group_oc, group_at );
        }
 
@@ -870,7 +987,7 @@ backend_attribute(
        if( target == NULL || strcmp( target->e_ndn, e_ndn ) != 0 ) {
                /* we won't attempt to send it to a different backend */
                
-               be = select_backend(e_ndn);
+               be = select_backend(e_ndn, 0);
 
                if (be == NULL) {
                        return LDAP_NO_SUCH_OBJECT;
@@ -887,6 +1004,8 @@ backend_attribute(
 
 Attribute *backend_operational(
        Backend *be,
+       Connection *conn,
+       Operation *op,
        Entry *e )
 {
        Attribute *a = NULL;