]> git.sur5r.net Git - openldap/blobdiff - servers/slapd/modify.c
Move backend_syncfreq code down into back-ldbm. Creates new configuration
[openldap] / servers / slapd / modify.c
index 25eaa421d6630bc1e4e4e2df4612b3f84379e051..ff08f54dee494cb050fc103508315b6b2f9ad0eb 100644 (file)
@@ -54,7 +54,6 @@ do_modify(
        Debug( LDAP_DEBUG_TRACE, "do_modify\n", 0, 0, 0 );
 #endif
 
-
        /*
         * Parse the modify request.  It looks like this:
         *
@@ -279,7 +278,11 @@ do_modify(
                {
                        int update = be->be_update_ndn != NULL;
                        const char *text;
-                       rc = slap_modlist2mods( modlist, update, &mods, &text );
+                       char textbuf[SLAP_TEXT_BUFLEN];
+                       size_t textlen = sizeof textbuf;
+
+                       rc = slap_modlist2mods( modlist, update, &mods, &text,
+                               textbuf, textlen );
 
                        if( rc != LDAP_SUCCESS ) {
                                send_ldap_result( conn, op, rc,
@@ -347,7 +350,9 @@ int slap_modlist2mods(
        LDAPModList *ml,
        int update,
        Modifications **mods,
-       const char **text )
+       const char **text,
+       char *textbuf,
+       size_t textlen )
 {
        int rc;
        Modifications **modtail = mods;
@@ -367,6 +372,9 @@ int slap_modlist2mods(
 
                if( rc != LDAP_SUCCESS ) {
                        slap_mods_free( mod );
+                       snprintf( textbuf, textlen, "%s: %s",
+                               ml->ml_type, *text );
+                       *text = textbuf;
                        return rc;
                }
 
@@ -377,7 +385,11 @@ int slap_modlist2mods(
                {
                        /* attribute requires binary transfer */
                        slap_mods_free( mod );
-                       *text = "attribute requires ;binary transfer";
+
+                       snprintf( textbuf, textlen,
+                               "%s: requires ;binary transfer",
+                               ml->ml_type );
+                       *text = textbuf;
                        return LDAP_UNDEFINED_TYPE;
                }
 
@@ -386,14 +398,35 @@ int slap_modlist2mods(
                {
                        /* attribute requires binary transfer */
                        slap_mods_free( mod );
-                       *text = "attribute disallows ;binary transfer";
+                       snprintf( textbuf, textlen,
+                               "%s: disallows ;binary transfer",
+                               ml->ml_type );
+                       *text = textbuf;
                        return LDAP_UNDEFINED_TYPE;
                }
 
                if (!update && is_at_no_user_mod( ad->ad_type )) {
                        /* user modification disallowed */
                        slap_mods_free( mod );
-                       *text = "no user modification allowed";
+                       snprintf( textbuf, textlen,
+                               "%s: no user modification allowed",
+                               ml->ml_type );
+                       *text = textbuf;
+                       return LDAP_CONSTRAINT_VIOLATION;
+               }
+
+               if ( is_at_obsolete( ad->ad_type ) &&
+                       ( mod->sml_op == LDAP_MOD_ADD || ml->ml_bvalues != NULL ) )
+               {
+                       /*
+                        * attribute is obsolete,
+                        * only allow replace/delete with no values
+                        */
+                       slap_mods_free( mod );
+                       snprintf( textbuf, textlen,
+                               "%s: attribute is obsolete",
+                               ml->ml_type );
+                       *text = textbuf;
                        return LDAP_CONSTRAINT_VIOLATION;
                }
 
@@ -406,18 +439,13 @@ int slap_modlist2mods(
                                ad->ad_type->sat_syntax->ssyn_validate;
 
                        if( !validate ) {
-#ifdef NEW_LOGGING
-                               LDAP_LOG(( "operation", LDAP_LEVEL_ERR,
-                                          "modlist2mods: no validator for syntax %S\n",
-                                          ad->ad_type->sat_syntax->ssyn_oid ));
-#else
-                               Debug( LDAP_DEBUG_TRACE,
-                                       "modlist2mods: no validator for syntax %s\n",
-                                       ad->ad_type->sat_syntax->ssyn_oid, 0, 0 );
-#endif
-
                                slap_mods_free( mod );
                                *text = "no validator for syntax";
+                               snprintf( textbuf, textlen,
+                                       "%s: no validator for syntax %s",
+                                       ml->ml_type,
+                                       ad->ad_type->sat_syntax->ssyn_oid );
+                               *text = textbuf;
                                return LDAP_INVALID_SYNTAX;
                        }
 
@@ -429,7 +457,10 @@ int slap_modlist2mods(
 
                                if( rc != 0 ) {
                                        slap_mods_free( mod );
-                                       *text = "value contains invalid data";
+                                       snprintf( textbuf, textlen,
+                                               "%s: value #%ld contains invalid data",
+                                               ml->ml_type, (long) nvals );
+                                       *text = textbuf;
                                        return LDAP_INVALID_SYNTAX;
                                }
                        }
@@ -442,7 +473,10 @@ int slap_modlist2mods(
                                && nvals > 1 && is_at_single_value( ad->ad_type ))
                        {
                                slap_mods_free( mod );
-                               *text = "multiple values provided";
+                               snprintf( textbuf, textlen,
+                                       "%s: multiple value provided",
+                                       ml->ml_type );
+                               *text = textbuf;
                                return LDAP_INVALID_SYNTAX;
                        }
                }