X-Git-Url: https://git.sur5r.net/?a=blobdiff_plain;f=servers%2Fslapd%2Fback-bdb%2Fadd.c;h=07b8265283f9d5c50b15fd41bcf8813eac4600a3;hb=73a666778e93582a0f72bdfb545bcdbc80ecfc27;hp=2def78482cc7ebcb143ee283c77ffcaf9d40c77a;hpb=e8c58b4e7f21caa6c0b6006e3528cbad9b8aed45;p=openldap diff --git a/servers/slapd/back-bdb/add.c b/servers/slapd/back-bdb/add.c index 2def78482c..07b8265283 100644 --- a/servers/slapd/back-bdb/add.c +++ b/servers/slapd/back-bdb/add.c @@ -1,8 +1,17 @@ /* add.c - ldap BerkeleyDB back-end add routine */ /* $OpenLDAP$ */ -/* - * Copyright 1998-2003 The OpenLDAP Foundation, All Rights Reserved. - * COPYING RESTRICTIONS APPLY, see COPYRIGHT file +/* This work is part of OpenLDAP Software . + * + * Copyright 2000-2004 The OpenLDAP Foundation. + * All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted only as authorized by the OpenLDAP + * Public License. + * + * A copy of this license is available in the file LICENSE in the + * top-level directory of the distribution or, alternatively, at + * . */ #include "portable.h" @@ -19,41 +28,43 @@ bdb_add(Operation *op, SlapReply *rs ) struct bdb_info *bdb = (struct bdb_info *) op->o_bd->be_private; struct berval pdn; Entry *p = NULL; - const char *text; + EntryInfo *ei; char textbuf[SLAP_TEXT_BUFLEN]; size_t textlen = sizeof textbuf; AttributeDescription *children = slap_schema.si_ad_children; AttributeDescription *entry = slap_schema.si_ad_entry; - DB_TXN *ltid = NULL; + DB_TXN *ltid = NULL, *lt2; struct bdb_op_info opinfo; #ifdef BDB_SUBENTRIES int subentry; #endif u_int32_t locker = 0; DB_LOCK lock; - int noop = 0; -#if defined(LDAP_CLIENT_UPDATE) || defined(LDAP_SYNC) + int num_retries = 0; + Operation* ps_list; -#endif + int rc; + EntryInfo *suffix_ei = NULL; + Entry *ctxcsn_e; + int ctxcsn_added = 0; -#ifdef NEW_LOGGING - LDAP_LOG ( OPERATION, ARGS, "==> bdb_add: %s\n", op->oq_add.rs_e->e_name.bv_val, 0, 0 ); -#else - Debug(LDAP_DEBUG_ARGS, "==> bdb_add: %s\n", op->oq_add.rs_e->e_name.bv_val, 0, 0); -#endif + LDAPControl **postread_ctrl = NULL; + LDAPControl *ctrls[SLAP_MAX_RESPONSE_CONTROLS]; + int num_ctrls = 0; + + Debug(LDAP_DEBUG_ARGS, "==> bdb_add: %s\n", + op->oq_add.rs_e->e_name.bv_val, 0, 0); + + ctrls[num_ctrls] = 0; /* check entry's schema */ - rs->sr_err = entry_schema_check( op->o_bd, op->oq_add.rs_e, NULL, &rs->sr_text, textbuf, textlen ); + rs->sr_err = entry_schema_check( op->o_bd, op->oq_add.rs_e, + NULL, &rs->sr_text, textbuf, textlen ); if ( rs->sr_err != LDAP_SUCCESS ) { -#ifdef NEW_LOGGING - LDAP_LOG ( OPERATION, ERR, - "bdb_add: entry failed schema check: %s (%d)\n", rs->sr_text, rs->sr_err, 0 ); -#else Debug( LDAP_DEBUG_TRACE, "bdb_add: entry failed schema check: %s (%d)\n", rs->sr_text, rs->sr_err, 0 ); -#endif goto return_results; } @@ -67,14 +78,8 @@ bdb_add(Operation *op, SlapReply *rs ) */ rs->sr_err = bdb_next_id( op->o_bd, NULL, &op->oq_add.rs_e->e_id ); if( rs->sr_err != 0 ) { -#ifdef NEW_LOGGING - LDAP_LOG ( OPERATION, ERR, - "bdb_add: next_id failed (%d)\n", rs->sr_err, 0, 0 ); -#else Debug( LDAP_DEBUG_TRACE, - "bdb_add: next_id failed (%d)\n", - rs->sr_err, 0, 0 ); -#endif + "bdb_add: next_id failed (%d)\n", rs->sr_err, 0, 0 ); rs->sr_err = LDAP_OTHER; rs->sr_text = "internal error"; goto return_results; @@ -97,6 +102,7 @@ retry: /* transaction retry */ goto return_results; } ldap_pvt_thread_yield(); + bdb_trans_backoff( ++num_retries ); } /* begin transaction */ @@ -104,14 +110,9 @@ retry: /* transaction retry */ bdb->bi_db_opflags ); rs->sr_text = NULL; if( rs->sr_err != 0 ) { -#ifdef NEW_LOGGING - LDAP_LOG ( OPERATION, ERR, - "bdb_add: txn_begin failed: %s (%d)\n", db_strerror(rs->sr_err), rs->sr_err, 0 ); -#else Debug( LDAP_DEBUG_TRACE, "bdb_add: txn_begin failed: %s (%d)\n", db_strerror(rs->sr_err), rs->sr_err, 0 ); -#endif rs->sr_err = LDAP_OTHER; rs->sr_text = "internal error"; goto return_results; @@ -128,8 +129,6 @@ retry: /* transaction retry */ /* * Get the parent dn and see if the corresponding entry exists. - * If the parent does not exist, only allow the "root" user to - * add the entry. */ if ( be_issuffix( op->o_bd, &op->oq_add.rs_e->e_nname ) ) { pdn = slap_empty_bv; @@ -137,55 +136,45 @@ retry: /* transaction retry */ dnParent( &op->oq_add.rs_e->e_nname, &pdn ); } - if( pdn.bv_len != 0 ) { - Entry *matched = NULL; - - /* get parent */ - rs->sr_err = bdb_dn2entry_r( op->o_bd, ltid, &pdn, &p, &matched, 0, locker, &lock ); - - switch( rs->sr_err ) { - case 0: - case DB_NOTFOUND: - break; - case DB_LOCK_DEADLOCK: - case DB_LOCK_NOTGRANTED: - goto retry; - case LDAP_BUSY: - rs->sr_text = "ldap server busy"; - goto return_results; - default: - rs->sr_err = LDAP_OTHER; - rs->sr_text = "internal error"; - goto return_results; - } - - if ( p == NULL ) { - if ( matched != NULL ) { - rs->sr_matched = ch_strdup( matched->e_dn ); - rs->sr_ref = is_entry_referral( matched ) - ? get_entry_referrals( op, matched ) - : NULL; - bdb_unlocked_cache_return_entry_r( &bdb->bi_cache, matched ); - matched = NULL; - - } else { - rs->sr_ref = referral_rewrite( default_referral, - NULL, &op->oq_add.rs_e->e_name, LDAP_SCOPE_DEFAULT ); - } + /* get entry or parent */ + rs->sr_err = bdb_dn2entry( op, ltid, &op->ora_e->e_nname, &ei, + 1, locker, &lock ); + switch( rs->sr_err ) { + case 0: + rs->sr_err = LDAP_ALREADY_EXISTS; + goto return_results; + case DB_NOTFOUND: + break; + case DB_LOCK_DEADLOCK: + case DB_LOCK_NOTGRANTED: + goto retry; + case LDAP_BUSY: + rs->sr_text = "ldap server busy"; + goto return_results; + default: + rs->sr_err = LDAP_OTHER; + rs->sr_text = "internal error"; + goto return_results; + } -#ifdef NEW_LOGGING - LDAP_LOG ( OPERATION, DETAIL1, - "bdb_add: parent does not exist\n", 0, 0, 0 ); -#else + p = ei->bei_e; + if ( p ) { + if ( !bvmatch( &pdn, &p->e_nname ) ) { + rs->sr_matched = ber_strdup_x( p->e_name.bv_val, + op->o_tmpmemctx ); + rs->sr_ref = is_entry_referral( p ) + ? get_entry_referrals( op, p ) + : NULL; + bdb_unlocked_cache_return_entry_r( &bdb->bi_cache, p ); + p = NULL; Debug( LDAP_DEBUG_TRACE, "bdb_add: parent does not exist\n", 0, 0, 0 ); -#endif rs->sr_err = LDAP_REFERRAL; send_ldap_result( op, rs ); ber_bvarray_free( rs->sr_ref ); - ch_free( (char *)rs->sr_matched ); + op->o_tmpfree( (char *)rs->sr_matched, op->o_tmpmemctx ); rs->sr_ref = NULL; rs->sr_matched = NULL; @@ -202,13 +191,8 @@ retry: /* transaction retry */ goto retry; } -#ifdef NEW_LOGGING - LDAP_LOG ( OPERATION, DETAIL1, + Debug( LDAP_DEBUG_TRACE, "bdb_add: no write access to parent\n", 0, 0, 0 ); -#else - Debug( LDAP_DEBUG_TRACE, "bdb_add: no write access to parent\n", - 0, 0, 0 ); -#endif rs->sr_err = LDAP_INSUFFICIENT_ACCESS; rs->sr_text = "no write access to parent"; goto return_results;; @@ -217,46 +201,29 @@ retry: /* transaction retry */ #ifdef BDB_SUBENTRIES if ( is_entry_subentry( p ) ) { /* parent is a subentry, don't allow add */ -#ifdef NEW_LOGGING - LDAP_LOG ( OPERATION, DETAIL1, - "bdb_add: parent is subentry\n", 0, 0, 0 ); -#else Debug( LDAP_DEBUG_TRACE, "bdb_add: parent is subentry\n", 0, 0, 0 ); -#endif rs->sr_err = LDAP_OBJECT_CLASS_VIOLATION; rs->sr_text = "parent is a subentry"; goto return_results;; } #endif -#ifdef BDB_ALIASES if ( is_entry_alias( p ) ) { /* parent is an alias, don't allow add */ -#ifdef NEW_LOGGING - LDAP_LOG ( OPERATION, DETAIL1, - "bdb_add: parent is alias\n", 0, 0, 0 ); -#else Debug( LDAP_DEBUG_TRACE, "bdb_add: parent is alias\n", 0, 0, 0 ); -#endif rs->sr_err = LDAP_ALIAS_PROBLEM; rs->sr_text = "parent is an alias"; goto return_results;; } -#endif if ( is_entry_referral( p ) ) { /* parent is a referral, don't allow add */ rs->sr_matched = p->e_name.bv_val; rs->sr_ref = get_entry_referrals( op, p ); -#ifdef NEW_LOGGING - LDAP_LOG ( OPERATION, DETAIL1, - "bdb_add: parent is referral\n", 0, 0, 0 ); -#else Debug( LDAP_DEBUG_TRACE, "bdb_add: parent is referral\n", 0, 0, 0 ); -#endif rs->sr_err = LDAP_REFERRAL; send_ldap_result( op, rs ); @@ -283,69 +250,25 @@ retry: /* transaction retry */ } else { /* * no parent! - * must be adding entry at suffix or with parent "" + * if not attempting to add entry at suffix or with parent "" */ - if ( !be_isroot( op->o_bd, &op->o_ndn )) { - if ( be_issuffix( op->o_bd, (struct berval *)&slap_empty_bv ) - || be_isupdate( op->o_bd, &op->o_ndn ) ) - { - p = (Entry *)&slap_entry_root; - - /* check parent for "children" acl */ - rs->sr_err = access_allowed( op, p, - children, NULL, ACL_WRITE, NULL ); - - p = NULL; - - if ( ! rs->sr_err ) { - switch( opinfo.boi_err ) { - case DB_LOCK_DEADLOCK: - case DB_LOCK_NOTGRANTED: - goto retry; - } - -#ifdef NEW_LOGGING - LDAP_LOG ( OPERATION, DETAIL1, - "bdb_add: no write access to parent\n", 0, 0, 0 ); -#else - Debug( LDAP_DEBUG_TRACE, - "bdb_add: no write access to parent\n", - 0, 0, 0 ); -#endif - rs->sr_err = LDAP_INSUFFICIENT_ACCESS; - rs->sr_text = "no write access to parent"; - goto return_results;; - } - - } else { -#ifdef NEW_LOGGING - LDAP_LOG ( OPERATION, DETAIL1, "bdb_add: %s denied\n", - pdn.bv_len == 0 ? "suffix" : "entry at root", 0, 0 ); -#else - Debug( LDAP_DEBUG_TRACE, "bdb_add: %s denied\n", - pdn.bv_len == 0 ? "suffix" : "entry at root", - 0, 0 ); -#endif - rs->sr_err = LDAP_INSUFFICIENT_ACCESS; - goto return_results; - } + if ((( !be_isroot( op ) && !be_shadow_update(op) ) + || pdn.bv_len > 0 ) && !is_entry_glue( op->oq_add.rs_e )) + { + Debug( LDAP_DEBUG_TRACE, "bdb_add: %s denied\n", + pdn.bv_len == 0 ? "suffix" : "entry at root", + 0, 0 ); + rs->sr_err = LDAP_NO_SUCH_OBJECT; + goto return_results; } + } -#ifdef BDB_SUBENTRIES - if( subentry ) { -#ifdef NEW_LOGGING - LDAP_LOG ( OPERATION, DETAIL1, - "bdb_add: no parent, cannot add subentry\n", 0, 0, 0 ); -#else - Debug( LDAP_DEBUG_TRACE, - "bdb_add: no parent, cannot add subentry\n", - 0, 0, 0 ); -#endif - rs->sr_err = LDAP_INSUFFICIENT_ACCESS; - rs->sr_text = "no parent, cannot add subentry"; - goto return_results;; - } -#endif + if ( get_assert( op ) && + ( test_filter( op, op->oq_add.rs_e, get_assertion( op )) + != LDAP_COMPARE_TRUE )) + { + rs->sr_err = LDAP_ASSERTION_FAILED; + goto return_results; } rs->sr_err = access_allowed( op, op->oq_add.rs_e, @@ -358,28 +281,31 @@ retry: /* transaction retry */ goto retry; } -#ifdef NEW_LOGGING - LDAP_LOG ( OPERATION, DETAIL1, - "bdb_add: no write access to entry\n", 0, 0, 0 ); -#else Debug( LDAP_DEBUG_TRACE, "bdb_add: no write access to entry\n", 0, 0, 0 ); -#endif rs->sr_err = LDAP_INSUFFICIENT_ACCESS; rs->sr_text = "no write access to entry"; goto return_results;; } + /* nested transaction */ + rs->sr_err = TXN_BEGIN( bdb->bi_dbenv, ltid, <2, + bdb->bi_db_opflags ); + rs->sr_text = NULL; + if( rs->sr_err != 0 ) { + Debug( LDAP_DEBUG_TRACE, + "bdb_add: txn_begin(2) failed: %s (%d)\n", + db_strerror(rs->sr_err), rs->sr_err, 0 ); + rs->sr_err = LDAP_OTHER; + rs->sr_text = "internal error"; + goto return_results; + } + /* dn2id index */ - rs->sr_err = bdb_dn2id_add( op->o_bd, ltid, &pdn, op->oq_add.rs_e ); + rs->sr_err = bdb_dn2id_add( op, lt2, ei, op->oq_add.rs_e ); if ( rs->sr_err != 0 ) { -#ifdef NEW_LOGGING - LDAP_LOG ( OPERATION, ERR, - "bdb_add: dn2id_add failed: %s (%d)\n", db_strerror(rs->sr_err), rs->sr_err, 0 ); -#else Debug( LDAP_DEBUG_TRACE, "bdb_add: dn2id_add failed: %s (%d)\n", db_strerror(rs->sr_err), rs->sr_err, 0 ); -#endif switch( rs->sr_err ) { case DB_LOCK_DEADLOCK: @@ -395,14 +321,10 @@ retry: /* transaction retry */ } /* id2entry index */ - rs->sr_err = bdb_id2entry_add( op->o_bd, ltid, op->oq_add.rs_e ); + rs->sr_err = bdb_id2entry_add( op->o_bd, lt2, op->oq_add.rs_e ); if ( rs->sr_err != 0 ) { -#ifdef NEW_LOGGING - LDAP_LOG ( OPERATION, ERR, "bdb_add: id2entry_add failed\n", 0, 0, 0 ); -#else Debug( LDAP_DEBUG_TRACE, "bdb_add: id2entry_add failed\n", 0, 0, 0 ); -#endif switch( rs->sr_err ) { case DB_LOCK_DEADLOCK: case DB_LOCK_NOTGRANTED: @@ -415,15 +337,10 @@ retry: /* transaction retry */ } /* attribute indexes */ - rs->sr_err = bdb_index_entry_add( op->o_bd, ltid, op->oq_add.rs_e ); + rs->sr_err = bdb_index_entry_add( op, lt2, op->oq_add.rs_e ); if ( rs->sr_err != LDAP_SUCCESS ) { -#ifdef NEW_LOGGING - LDAP_LOG ( OPERATION, ERR, - "bdb_add: index_entry_add failed\n", 0, 0, 0 ); -#else Debug( LDAP_DEBUG_TRACE, "bdb_add: index_entry_add failed\n", 0, 0, 0 ); -#endif switch( rs->sr_err ) { case DB_LOCK_DEADLOCK: case DB_LOCK_NOTGRANTED: @@ -434,95 +351,111 @@ retry: /* transaction retry */ rs->sr_text = "index generation failed"; goto return_results; } + if ( TXN_COMMIT( lt2, 0 ) != 0 ) { + rs->sr_err = LDAP_OTHER; + rs->sr_text = "txn_commit(2) failed"; + goto return_results; + } + if ( LDAP_STAILQ_EMPTY( &op->o_bd->be_syncinfo )) { + rc = bdb_csn_commit( op, rs, ltid, ei, &suffix_ei, + &ctxcsn_e, &ctxcsn_added, locker ); + switch ( rc ) { + case BDB_CSN_ABORT : + goto return_results; + case BDB_CSN_RETRY : + goto retry; + } + } + + /* post-read */ + if( op->o_postread ) { + if( postread_ctrl == NULL ) { + postread_ctrl = &ctrls[num_ctrls++]; + ctrls[num_ctrls] = NULL; + } + if ( slap_read_controls( op, rs, op->oq_add.rs_e, + &slap_post_read_bv, postread_ctrl ) ) + { + Debug( LDAP_DEBUG_TRACE, + "<=- bdb_add: post-read failed!\n", 0, 0, 0 ); + goto return_results; + } + } - if( op->o_noop ) { + if ( op->o_noop ) { if (( rs->sr_err=TXN_ABORT( ltid )) != 0 ) { rs->sr_text = "txn_abort (no-op) failed"; } else { - noop = 1; - rs->sr_err = LDAP_SUCCESS; + rs->sr_err = LDAP_NO_OPERATION; + goto return_results; } } else { - char gid[DB_XIDDATASIZE]; + struct berval nrdn; + Entry *e = entry_dup( op->ora_e ); + + if (pdn.bv_len) { + nrdn.bv_val = e->e_nname.bv_val; + nrdn.bv_len = pdn.bv_val - op->ora_e->e_nname.bv_val - 1; + } else { + nrdn = e->e_nname; + } - snprintf( gid, sizeof( gid ), "%s-%08lx-%08lx", - bdb_uuid.bv_val, (long) op->o_connid, (long) op->o_opid ); + bdb_cache_add( bdb, ei, e, &nrdn, locker ); - if (( rs->sr_err=TXN_PREPARE( ltid, gid )) != 0 ) { - rs->sr_text = "txn_prepare failed"; + if ( suffix_ei == NULL ) { + suffix_ei = BEI(e); + } - } else { - int ret = bdb_cache_add_entry_rw(bdb->bi_dbenv, - &bdb->bi_cache, op->oq_add.rs_e, CACHE_WRITE_LOCK, - locker, &lock); - switch ( ret ) { - case 0: - break; - case DB_LOCK_DEADLOCK: - case DB_LOCK_NOTGRANTED: - goto retry; - default: - ret = LDAP_OTHER; + if ( LDAP_STAILQ_EMPTY( &op->o_bd->be_syncinfo )) { + if ( ctxcsn_added ) { + bdb_cache_add( bdb, suffix_ei, ctxcsn_e, + (struct berval *)&slap_ldapsync_cn_bv, locker ); } + } - if ( ret ) { - if(( rs->sr_err=TXN_ABORT( ltid )) != 0 ) { - rs->sr_text = "cache add & txn_abort failed"; - } else { - rs->sr_err = LDAP_OTHER; - rs->sr_text = "cache add failed"; - } - } else { - if(( rs->sr_err=TXN_COMMIT( ltid, 0 )) != 0 ) { - rs->sr_text = "txn_commit failed"; - } else { - rs->sr_err = LDAP_SUCCESS; + if ( rs->sr_err == LDAP_SUCCESS && !op->o_no_psearch ) { + ldap_pvt_thread_rdwr_wlock( &bdb->bi_pslist_rwlock ); + assert( BEI(e) ); + LDAP_LIST_FOREACH ( ps_list, &bdb->bi_psearch_list, o_ps_link ) { + rc = bdb_psearch( op, rs, ps_list, e, LDAP_PSEARCH_BY_ADD ); + if ( rc ) { + Debug( LDAP_DEBUG_TRACE, + "bdb_add: persistent search failed (%d,%d)\n", + rc, rs->sr_err, 0 ); } } + ldap_pvt_thread_rdwr_wunlock( &bdb->bi_pslist_rwlock ); + } + + if(( rs->sr_err=TXN_COMMIT( ltid, 0 )) != 0 ) { + rs->sr_text = "txn_commit failed"; + } else { + rs->sr_err = LDAP_SUCCESS; } } ltid = NULL; op->o_private = NULL; - if (rs->sr_err == LDAP_SUCCESS) { -#ifdef NEW_LOGGING - LDAP_LOG ( OPERATION, RESULTS, - "bdb_add: added%s id=%08lx dn=\"%s\"\n", - op->o_noop ? " (no-op)" : "", op->oq_add.rs_e->e_id, op->oq_add.rs_e->e_dn ); -#else - Debug(LDAP_DEBUG_TRACE, "bdb_add: added%s id=%08lx dn=\"%s\"\n", - op->o_noop ? " (no-op)" : "", op->oq_add.rs_e->e_id, op->oq_add.rs_e->e_dn ); -#endif - rs->sr_text = NULL; - if ( !noop ) { - bdb_cache_entry_commit( op->oq_add.rs_e ); - } - } - else { -#ifdef NEW_LOGGING - LDAP_LOG ( OPERATION, ERR, - "bdb_add: %s : %s (%d)\n", rs->sr_text, db_strerror(rs->sr_err), rs->sr_err ); -#else + if ( rs->sr_err != LDAP_SUCCESS ) { Debug( LDAP_DEBUG_TRACE, "bdb_add: %s : %s (%d)\n", rs->sr_text, db_strerror(rs->sr_err), rs->sr_err ); -#endif rs->sr_err = LDAP_OTHER; + goto return_results; } + Debug(LDAP_DEBUG_TRACE, "bdb_add: added%s id=%08lx dn=\"%s\"\n", + op->o_noop ? " (no-op)" : "", + op->oq_add.rs_e->e_id, op->oq_add.rs_e->e_dn ); + + rs->sr_text = NULL; + if( num_ctrls ) rs->sr_ctrls = ctrls; + return_results: send_ldap_result( op, rs ); -#if defined(LDAP_CLIENT_UPDATE) || defined(LDAP_SYNC) - if ( rs->sr_err == LDAP_SUCCESS && !noop ) { - LDAP_LIST_FOREACH ( ps_list, &bdb->bi_psearch_list, o_ps_link ) { - bdb_psearch( op, rs, ps_list, op->oq_add.rs_e, LDAP_PSEARCH_BY_ADD ); - } - } -#endif /* LDAP_CLIENT_UPDATE */ - if( rs->sr_err == LDAP_SUCCESS && bdb->bi_txn_cp ) { ldap_pvt_thread_yield(); TXN_CHECKPOINT( bdb->bi_dbenv, @@ -530,12 +463,14 @@ return_results: } done: - if( ltid != NULL ) { TXN_ABORT( ltid ); op->o_private = NULL; } - return ( ( rs->sr_err == LDAP_SUCCESS ) ? noop : rs->sr_err ); + if( postread_ctrl != NULL ) { + slap_sl_free( (*postread_ctrl)->ldctl_value.bv_val, &op->o_tmpmemctx ); + slap_sl_free( *postread_ctrl, &op->o_tmpmemctx ); + } + return rs->sr_err; } -