git.sur5r.net Git - openldap/blob - servers/slapd/back-mdb/delete.c

   1 /* delete.c - mdb backend delete routine */
   2 /* $OpenLDAP$ */
   3 /* This work is part of OpenLDAP Software <http://www.openldap.org/>.
   4  *
   5  * Copyright 2000-2016 The OpenLDAP Foundation.
   6  * All rights reserved.
   7  *
   8  * Redistribution and use in source and binary forms, with or without
   9  * modification, are permitted only as authorized by the OpenLDAP
  10  * Public License.
  11  *
  12  * A copy of this license is available in the file LICENSE in the
  13  * top-level directory of the distribution or, alternatively, at
  14  * <http://www.OpenLDAP.org/license.html>.
  15  */
  16
  17 #include "portable.h"
  18
  19 #include <stdio.h>
  20 #include <ac/string.h>
  21
  22 #include "lutil.h"
  23 #include "back-mdb.h"
  24
  25 int
  26 mdb_delete( Operation *op, SlapReply *rs )
  27 {
  28         struct mdb_info *mdb = (struct mdb_info *) op->o_bd->be_private;
  29         struct berval   pdn = {0, NULL};
  30         Entry   *e = NULL;
  31         Entry   *p = NULL;
  32         int             manageDSAit = get_manageDSAit( op );
  33         AttributeDescription *children = slap_schema.si_ad_children;
  34         AttributeDescription *entry = slap_schema.si_ad_entry;
  35         MDB_txn         *txn = NULL;
  36         MDB_cursor      *mc;
  37         mdb_op_info opinfo = {{{ 0 }}}, *moi = &opinfo;
  38
  39         LDAPControl **preread_ctrl = NULL;
  40         LDAPControl *ctrls[SLAP_MAX_RESPONSE_CONTROLS];
  41         int num_ctrls = 0;
  42
  43         int     parent_is_glue = 0;
  44         int parent_is_leaf = 0;
  45
  46 #ifdef LDAP_X_TXN
  47         int settle = 0;
  48 #endif
  49
  50         Debug( LDAP_DEBUG_ARGS, "==> " LDAP_XSTRING(mdb_delete) ": %s\n",
  51                 op->o_req_dn.bv_val, 0, 0 );
  52
  53 #ifdef LDAP_X_TXN
  54         if( op->o_txnSpec ) {
  55                 /* acquire connection lock */
  56                 ldap_pvt_thread_mutex_lock( &op->o_conn->c_mutex );
  57                 if( op->o_conn->c_txn == CONN_TXN_INACTIVE ) {
  58                         rs->sr_text = "invalid transaction identifier";
  59                         rs->sr_err = LDAP_X_TXN_ID_INVALID;
  60                         goto txnReturn;
  61                 } else if( op->o_conn->c_txn == CONN_TXN_SETTLE ) {
  62                         settle=1;
  63                         goto txnReturn;
  64                 }
  65
  66                 if( op->o_conn->c_txn_backend == NULL ) {
  67                         op->o_conn->c_txn_backend = op->o_bd;
  68
  69                 } else if( op->o_conn->c_txn_backend != op->o_bd ) {
  70                         rs->sr_text = "transaction cannot span multiple database contexts";
  71                         rs->sr_err = LDAP_AFFECTS_MULTIPLE_DSAS;
  72                         goto txnReturn;
  73                 }
  74
  75                 /* insert operation into transaction */
  76
  77                 rs->sr_text = "transaction specified";
  78                 rs->sr_err = LDAP_X_TXN_SPECIFY_OKAY;
  79
  80 txnReturn:
  81                 /* release connection lock */
  82                 ldap_pvt_thread_mutex_unlock( &op->o_conn->c_mutex );
  83
  84                 if( !settle ) {
  85                         send_ldap_result( op, rs );
  86                         return rs->sr_err;
  87                 }
  88         }
  89 #endif
  90
  91         ctrls[num_ctrls] = 0;
  92
  93         /* begin transaction */
  94         rs->sr_err = mdb_opinfo_get( op, mdb, 0, &moi );
  95         rs->sr_text = NULL;
  96         if( rs->sr_err != 0 ) {
  97                 Debug( LDAP_DEBUG_TRACE,
  98                         LDAP_XSTRING(mdb_delete) ": txn_begin failed: "
  99                         "%s (%d)\n", mdb_strerror(rs->sr_err), rs->sr_err, 0 );
 100                 rs->sr_err = LDAP_OTHER;
 101                 rs->sr_text = "internal error";
 102                 goto return_results;
 103         }
 104         txn = moi->moi_txn;
 105
 106         /* allocate CSN */
 107         if ( BER_BVISNULL( &op->o_csn ) ) {
 108                 struct berval csn;
 109                 char csnbuf[LDAP_PVT_CSNSTR_BUFSIZE];
 110
 111                 csn.bv_val = csnbuf;
 112                 csn.bv_len = sizeof(csnbuf);
 113                 slap_get_csn( op, &csn, 1 );
 114         }
 115
 116         if ( !be_issuffix( op->o_bd, &op->o_req_ndn ) ) {
 117                 dnParent( &op->o_req_ndn, &pdn );
 118         }
 119
 120         rs->sr_err = mdb_cursor_open( txn, mdb->mi_dn2id, &mc );
 121         if ( rs->sr_err ) {
 122                 rs->sr_err = LDAP_OTHER;
 123                 rs->sr_text = "internal error";
 124                 goto return_results;
 125         }
 126         /* get parent */
 127         rs->sr_err = mdb_dn2entry( op, txn, mc, &pdn, &p, NULL, 1 );
 128         switch( rs->sr_err ) {
 129         case 0:
 130         case MDB_NOTFOUND:
 131                 break;
 132         case LDAP_BUSY:
 133                 rs->sr_text = "ldap server busy";
 134                 goto return_results;
 135         default:
 136                 rs->sr_err = LDAP_OTHER;
 137                 rs->sr_text = "internal error";
 138                 goto return_results;
 139         }
 140         if ( rs->sr_err == MDB_NOTFOUND ) {
 141                 Debug( LDAP_DEBUG_ARGS,
 142                         "<=- " LDAP_XSTRING(mdb_delete) ": no such object %s\n",
 143                         op->o_req_dn.bv_val, 0, 0);
 144
 145                 if ( p && !BER_BVISEMPTY( &p->e_name )) {
 146                         rs->sr_matched = ch_strdup( p->e_name.bv_val );
 147                         if ( is_entry_referral( p )) {
 148                                 BerVarray ref = get_entry_referrals( op, p );
 149                                 rs->sr_ref = referral_rewrite( ref, &p->e_name,
 150                                         &op->o_req_dn, LDAP_SCOPE_DEFAULT );
 151                                 ber_bvarray_free( ref );
 152                         } else {
 153                                 rs->sr_ref = NULL;
 154                         }
 155                 } else {
 156                         rs->sr_ref = referral_rewrite( default_referral, NULL,
 157                                         &op->o_req_dn, LDAP_SCOPE_DEFAULT );
 158                 }
 159                 if ( p ) {
 160                         mdb_entry_return( op, p );
 161                         p = NULL;
 162                 }
 163
 164                 rs->sr_err = LDAP_REFERRAL;
 165                 rs->sr_flags = REP_MATCHED_MUSTBEFREED | REP_REF_MUSTBEFREED;
 166                 goto return_results;
 167         }
 168
 169         /* get entry */
 170         rs->sr_err = mdb_dn2entry( op, txn, mc, &op->o_req_ndn, &e, NULL, 0 );
 171         switch( rs->sr_err ) {
 172         case MDB_NOTFOUND:
 173                 e = p;
 174                 p = NULL;
 175         case 0:
 176                 break;
 177         case LDAP_BUSY:
 178                 rs->sr_text = "ldap server busy";
 179                 goto return_results;
 180         default:
 181                 rs->sr_err = LDAP_OTHER;
 182                 rs->sr_text = "internal error";
 183                 goto return_results;
 184         }
 185
 186         /* FIXME : dn2entry() should return non-glue entry */
 187         if ( rs->sr_err == MDB_NOTFOUND || ( !manageDSAit && is_entry_glue( e ))) {
 188                 Debug( LDAP_DEBUG_ARGS,
 189                         "<=- " LDAP_XSTRING(mdb_delete) ": no such object %s\n",
 190                         op->o_req_dn.bv_val, 0, 0);
 191
 192                 rs->sr_matched = ch_strdup( e->e_dn );
 193                 if ( is_entry_referral( e )) {
 194                         BerVarray ref = get_entry_referrals( op, e );
 195                         rs->sr_ref = referral_rewrite( ref, &e->e_name,
 196                                 &op->o_req_dn, LDAP_SCOPE_DEFAULT );
 197                         ber_bvarray_free( ref );
 198                 } else {
 199                         rs->sr_ref = NULL;
 200                 }
 201                 mdb_entry_return( op, e );
 202                 e = NULL;
 203
 204                 rs->sr_err = LDAP_REFERRAL;
 205                 rs->sr_flags = REP_MATCHED_MUSTBEFREED | REP_REF_MUSTBEFREED;
 206                 goto return_results;
 207         }
 208
 209         if ( pdn.bv_len != 0 ) {
 210                 /* check parent for "children" acl */
 211                 rs->sr_err = access_allowed( op, p,
 212                         children, NULL, ACL_WDEL, NULL );
 213
 214                 if ( !rs->sr_err  ) {
 215                         Debug( LDAP_DEBUG_TRACE,
 216                                 "<=- " LDAP_XSTRING(mdb_delete) ": no write "
 217                                 "access to parent\n", 0, 0, 0 );
 218                         rs->sr_err = LDAP_INSUFFICIENT_ACCESS;
 219                         rs->sr_text = "no write access to parent";
 220                         goto return_results;
 221                 }
 222
 223         } else {
 224                 /* no parent, must be root to delete */
 225                 if( ! be_isroot( op ) ) {
 226                         if ( be_issuffix( op->o_bd, (struct berval *)&slap_empty_bv )
 227                                 || be_shadow_update( op ) ) {
 228                                 p = (Entry *)&slap_entry_root;
 229
 230                                 /* check parent for "children" acl */
 231                                 rs->sr_err = access_allowed( op, p,
 232                                         children, NULL, ACL_WDEL, NULL );
 233
 234                                 p = NULL;
 235
 236                                 if ( !rs->sr_err  ) {
 237                                         Debug( LDAP_DEBUG_TRACE,
 238                                                 "<=- " LDAP_XSTRING(mdb_delete)
 239                                                 ": no access to parent\n",
 240                                                 0, 0, 0 );
 241                                         rs->sr_err = LDAP_INSUFFICIENT_ACCESS;
 242                                         rs->sr_text = "no write access to parent";
 243                                         goto return_results;
 244                                 }
 245
 246                         } else {
 247                                 Debug( LDAP_DEBUG_TRACE,
 248                                         "<=- " LDAP_XSTRING(mdb_delete)
 249                                         ": no parent and not root\n", 0, 0, 0 );
 250                                 rs->sr_err = LDAP_INSUFFICIENT_ACCESS;
 251                                 goto return_results;
 252                         }
 253                 }
 254         }
 255
 256         if ( get_assert( op ) &&
 257                 ( test_filter( op, e, get_assertion( op )) != LDAP_COMPARE_TRUE ))
 258         {
 259                 rs->sr_err = LDAP_ASSERTION_FAILED;
 260                 goto return_results;
 261         }
 262
 263         rs->sr_err = access_allowed( op, e,
 264                 entry, NULL, ACL_WDEL, NULL );
 265
 266         if ( !rs->sr_err  ) {
 267                 Debug( LDAP_DEBUG_TRACE,
 268                         "<=- " LDAP_XSTRING(mdb_delete) ": no write access "
 269                         "to entry\n", 0, 0, 0 );
 270                 rs->sr_err = LDAP_INSUFFICIENT_ACCESS;
 271                 rs->sr_text = "no write access to entry";
 272                 goto return_results;
 273         }
 274
 275         if ( !manageDSAit && is_entry_referral( e ) ) {
 276                 /* entry is a referral, don't allow delete */
 277                 rs->sr_ref = get_entry_referrals( op, e );
 278
 279                 Debug( LDAP_DEBUG_TRACE,
 280                         LDAP_XSTRING(mdb_delete) ": entry is referral\n",
 281                         0, 0, 0 );
 282
 283                 rs->sr_err = LDAP_REFERRAL;
 284                 rs->sr_matched = ch_strdup( e->e_name.bv_val );
 285                 rs->sr_flags = REP_MATCHED_MUSTBEFREED | REP_REF_MUSTBEFREED;
 286                 goto return_results;
 287         }
 288
 289         /* pre-read */
 290         if( op->o_preread ) {
 291                 if( preread_ctrl == NULL ) {
 292                         preread_ctrl = &ctrls[num_ctrls++];
 293                         ctrls[num_ctrls] = NULL;
 294                 }
 295                 if( slap_read_controls( op, rs, e,
 296                         &slap_pre_read_bv, preread_ctrl ) )
 297                 {
 298                         Debug( LDAP_DEBUG_TRACE,
 299                                 "<=- " LDAP_XSTRING(mdb_delete) ": pre-read "
 300                                 "failed!\n", 0, 0, 0 );
 301                         if ( op->o_preread & SLAP_CONTROL_CRITICAL ) {
 302                                 /* FIXME: is it correct to abort
 303                                  * operation if control fails? */
 304                                 goto return_results;
 305                         }
 306                 }
 307         }
 308
 309         rs->sr_text = NULL;
 310
 311         /* Can't do it if we have kids */
 312         rs->sr_err = mdb_dn2id_children( op, txn, e );
 313         if( rs->sr_err != MDB_NOTFOUND ) {
 314                 switch( rs->sr_err ) {
 315                 case 0:
 316                         Debug(LDAP_DEBUG_ARGS,
 317                                 "<=- " LDAP_XSTRING(mdb_delete)
 318                                 ": non-leaf %s\n",
 319                                 op->o_req_dn.bv_val, 0, 0);
 320                         rs->sr_err = LDAP_NOT_ALLOWED_ON_NONLEAF;
 321                         rs->sr_text = "subordinate objects must be deleted first";
 322                         break;
 323                 default:
 324                         Debug(LDAP_DEBUG_ARGS,
 325                                 "<=- " LDAP_XSTRING(mdb_delete)
 326                                 ": has_children failed: %s (%d)\n",
 327                                 mdb_strerror(rs->sr_err), rs->sr_err, 0 );
 328                         rs->sr_err = LDAP_OTHER;
 329                         rs->sr_text = "internal error";
 330                 }
 331                 goto return_results;
 332         }
 333
 334         /* delete from dn2id */
 335         rs->sr_err = mdb_dn2id_delete( op, mc, e->e_id, 1 );
 336         mdb_cursor_close( mc );
 337         if ( rs->sr_err != 0 ) {
 338                 Debug(LDAP_DEBUG_TRACE,
 339                         "<=- " LDAP_XSTRING(mdb_delete) ": dn2id failed: "
 340                         "%s (%d)\n", mdb_strerror(rs->sr_err), rs->sr_err, 0 );
 341                 rs->sr_text = "DN index delete failed";
 342                 rs->sr_err = LDAP_OTHER;
 343                 goto return_results;
 344         }
 345
 346         /* delete indices for old attributes */
 347         rs->sr_err = mdb_index_entry_del( op, txn, e );
 348         if ( rs->sr_err != LDAP_SUCCESS ) {
 349                 Debug(LDAP_DEBUG_TRACE,
 350                         "<=- " LDAP_XSTRING(mdb_delete) ": index failed: "
 351                         "%s (%d)\n", mdb_strerror(rs->sr_err), rs->sr_err, 0 );
 352                 rs->sr_text = "entry index delete failed";
 353                 rs->sr_err = LDAP_OTHER;
 354                 goto return_results;
 355         }
 356
 357         /* fixup delete CSN */
 358         if ( !SLAP_SHADOW( op->o_bd )) {
 359                 struct berval vals[2];
 360
 361                 assert( !BER_BVISNULL( &op->o_csn ) );
 362                 vals[0] = op->o_csn;
 363                 BER_BVZERO( &vals[1] );
 364                 rs->sr_err = mdb_index_values( op, txn, slap_schema.si_ad_entryCSN,
 365                         vals, 0, SLAP_INDEX_ADD_OP );
 366                 if ( rs->sr_err != LDAP_SUCCESS ) {
 367                         rs->sr_text = "entryCSN index update failed";
 368                         rs->sr_err = LDAP_OTHER;
 369                         goto return_results;
 370                 }
 371         }
 372
 373         /* delete from id2entry */
 374         rs->sr_err = mdb_id2entry_delete( op->o_bd, txn, e );
 375         if ( rs->sr_err != 0 ) {
 376                 Debug( LDAP_DEBUG_TRACE,
 377                         "<=- " LDAP_XSTRING(mdb_delete) ": id2entry failed: "
 378                         "%s (%d)\n", mdb_strerror(rs->sr_err), rs->sr_err, 0 );
 379                 rs->sr_text = "entry delete failed";
 380                 rs->sr_err = LDAP_OTHER;
 381                 goto return_results;
 382         }
 383
 384         if ( pdn.bv_len != 0 ) {
 385                 parent_is_glue = is_entry_glue(p);
 386                 rs->sr_err = mdb_dn2id_children( op, txn, p );
 387                 if ( rs->sr_err != MDB_NOTFOUND ) {
 388                         switch( rs->sr_err ) {
 389                         case 0:
 390                                 break;
 391                         default:
 392                                 Debug(LDAP_DEBUG_ARGS,
 393                                         "<=- " LDAP_XSTRING(mdb_delete)
 394                                         ": has_children failed: %s (%d)\n",
 395                                         mdb_strerror(rs->sr_err), rs->sr_err, 0 );
 396                                 rs->sr_err = LDAP_OTHER;
 397                                 rs->sr_text = "internal error";
 398                                 goto return_results;
 399                         }
 400                         parent_is_leaf = 1;
 401                 }
 402                 mdb_entry_return( op, p );
 403                 p = NULL;
 404         }
 405
 406         if( moi == &opinfo ) {
 407                 LDAP_SLIST_REMOVE( &op->o_extra, &opinfo.moi_oe, OpExtra, oe_next );
 408                 opinfo.moi_oe.oe_key = NULL;
 409                 if( op->o_noop ) {
 410                         mdb_txn_abort( txn );
 411                         rs->sr_err = LDAP_X_NO_OPERATION;
 412                         txn = NULL;
 413                         goto return_results;
 414                 } else {
 415                         rs->sr_err = mdb_txn_commit( txn );
 416                 }
 417                 txn = NULL;
 418         }
 419
 420         if( rs->sr_err != 0 ) {
 421                 Debug( LDAP_DEBUG_ANY,
 422                         LDAP_XSTRING(mdb_delete) ": txn_%s failed: %s (%d)\n",
 423                         op->o_noop ? "abort (no-op)" : "commit",
 424                         mdb_strerror(rs->sr_err), rs->sr_err );
 425                 rs->sr_err = LDAP_OTHER;
 426                 rs->sr_text = "commit failed";
 427
 428                 goto return_results;
 429         }
 430
 431         Debug( LDAP_DEBUG_TRACE,
 432                 LDAP_XSTRING(mdb_delete) ": deleted%s id=%08lx dn=\"%s\"\n",
 433                 op->o_noop ? " (no-op)" : "",
 434                 e->e_id, op->o_req_dn.bv_val );
 435         rs->sr_err = LDAP_SUCCESS;
 436         rs->sr_text = NULL;
 437         if( num_ctrls ) rs->sr_ctrls = ctrls;
 438
 439 return_results:
 440         if ( rs->sr_err == LDAP_SUCCESS && parent_is_glue && parent_is_leaf ) {
 441                 op->o_delete_glue_parent = 1;
 442         }
 443
 444         if ( p != NULL ) {
 445                 mdb_entry_return( op, p );
 446         }
 447
 448         /* free entry */
 449         if( e != NULL ) {
 450                 mdb_entry_return( op, e );
 451         }
 452
 453         if( moi == &opinfo ) {
 454                 if( txn != NULL ) {
 455                         mdb_txn_abort( txn );
 456                 }
 457                 if ( opinfo.moi_oe.oe_key ) {
 458                         LDAP_SLIST_REMOVE( &op->o_extra, &opinfo.moi_oe, OpExtra, oe_next );
 459                 }
 460         } else {
 461                 moi->moi_ref--;
 462         }
 463
 464         send_ldap_result( op, rs );
 465         slap_graduate_commit_csn( op );
 466
 467         if( preread_ctrl != NULL && (*preread_ctrl) != NULL ) {
 468                 slap_sl_free( (*preread_ctrl)->ldctl_value.bv_val, op->o_tmpmemctx );
 469                 slap_sl_free( *preread_ctrl, op->o_tmpmemctx );
 470         }
 471
 472 #if 0
 473         if( rs->sr_err == LDAP_SUCCESS && mdb->bi_txn_cp_kbyte ) {
 474                 TXN_CHECKPOINT( mdb->bi_dbenv,
 475                         mdb->bi_txn_cp_kbyte, mdb->bi_txn_cp_min, 0 );
 476         }
 477 #endif
 478         return rs->sr_err;
 479 }